文件名 | pcnp_setup.exe |
文件类型 |
Win32 EXE
|
魔术字节 | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows |
SSDEEP 哈希 |
196608:mPskVeEwuIQZai4g0EJveDyBEryLgVP/x1AqfDjSBYMaUNSku39asq:mPf+uIzI4PB/gaU+3Tq
|
扫描器版本 | 1.0.175.174 |
数据库版本 | 2024-05-07 17:00:36 UTC |
被 7 个安全引擎检测到 - 需要谨慎
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
2c57c3bc45898fa2c1046a07b17a38e0
|
|
SHA1 |
fdd902192bd648c528b3ee19a03f05ff2c302b7a
|
|
SHA256 |
4b0a77d89eb56cfafef65fe389be4d092a9bcc7c36d9844303efeec5cd1295e0
|
|
SHA512 |
75f829a26c7e4019852d85f771d171096ee3102d9d1ee7ad6c2efc915653284a70877072708cc0caa33685752f1398595f84ee31cc8c3abdcd93f3e1e25835ff
|
|
ImpHash |
abf6e21e57f6eece0e799c572db55c78
|
图标 |
哈希: baf9a4f48b89216d20b59d0d2c5eb7a7
模糊: 1214e9a49527f847ed75b9c89e5efc87 dHash: 80ccccc4cccc8080 |
映像基址 | 0x00400000 |
入口点 | 0x00402404 |
编译时间 | 2024-04-21 07:14:40 |
校验和 | 0x01eb0dec (实际: 0x01eb0dec) |
操作系统版本 | 6.0 |
PEiD 签名 |
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
数字签名 | Chain verification from CN=PCNP Software, [email protected], OU=Software, O=PCNP, ST=Cherkaska oblast, L=Cherkasy, C=UA (serial:919377141439616329, sha1:8c144567ed681b805baa26b431f53399814241a4) failed: The X.509 certificate provided is self-signed - "Common Name: PCNP Software, Email Address: [email protected], Organizational Unit: Software, Organization: PCNP, State/Province: Cherkaska oblast, Locality: Cherkasy, Country: UA" |
导入 | 11 库 |
导出 | 8 函数 |
资源 | 85 资源 |
节 | 9 节 |
FileDescription | pcnp_install |
FileVersion | 1.0.0.0 |
ProgramID | com.embarcadero.pcnp_install |
ProductName | pcnp_install |
ProductVersion | 1.0.0.0 |
Translation | 0x0409 0x04e4 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
3,362,816 bytes | 3,360,256 bytes | 6.52 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
FFF90E7187042A47E65BDC892FF3734C |
.data |
0x00336000 |
229,376 bytes | 67,584 bytes | 6.06 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
87E5A3CD051011D052DB3980BF127A0A |
.tls |
0x0036e000 |
4,096 bytes | 1,024 bytes | 0.03 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
91CCB28EB66F40FB9808FD088DA27BA6 |
.rdata |
0x0036f000 |
4,096 bytes | 512 bytes | 0.21 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
5D4600D616EA246F1FDE845A70F6133C |
.idata |
0x00370000 |
16,384 bytes | 14,848 bytes | 5.24 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
14CC5F5899A797FDFBAFB9B061CD49EE |
.didata |
0x00374000 |
4,096 bytes | 3,072 bytes | 4.37 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
5DBBC83A39837E259E7141EECBA45778 |
.edata |
0x00375000 |
4,096 bytes | 512 bytes | 3.22 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B00DDD8F0076ECB30C2BDF3DEFE00BC6 |
.rsrc |
0x00376000 |
28,405,760 bytes | 28,402,688 bytes | 6.69 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
61F5EAD34E36A336229FB9FB62570128 |
.reloc |
0x01e8d000 |
274,432 bytes | 271,360 bytes | 6.74 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
FD520B249F1D127E8A88431809810CC7 |
3 检测到较高熵(≥6.5)的节 - 可能存在压缩
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
VCLSTYLE | 1 | 154,735 字节 | |
RT_CURSOR | 8 | 2,464 字节 | |
RT_ICON | 1 | 5,812 字节 | |
RT_STRING | 30 | 26,584 字节 | |
RT_RCDATA | 34 | 28,204,991 字节 | |
RT_GROUP_CURSOR | 8 | 160 字节 | |
RT_GROUP_ICON | 1 | 20 字节 | |
RT_VERSION | 1 | 536 字节 | |
RT_MANIFEST | 1 | 1,814 字节 |
产品 | pcnp_install |
描述 | pcnp_install |
文件版本 | 1.0.0.0 |
验证状态 | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. |
签名者 | PCNP Software |
0C C2 48 A3 9A 1F 55 49
7B 2C 9B D3 16 80 32 99
64 33 51 D3 C7 38 9F 08
69 C8 DA 44 E7 F5 DB A5 FC B2 74 5F 23 2F 50 8A
5A 5A AC E8 1A 35 6E B4 62 86 8D 57 7D E0 3D C7
6D 52 18 70 87 E8 23 4D 85 60 00 D0 80 8F 93 56
✓ 此文件已进行数字签名,证书链已验证。
Chain verification from CN=PCNP Software, [email protected], OU=Software, O=PCNP, ST=Cherkaska oblast, L=Cherkasy, C=UA (serial:919377141439616329, sha1:8c144567ed681b805baa26b431f53399814241a4) failed: The X.509 certificate provided is self-signed - "Common Name: PCNP Software, Email Address: [email protected], Organizational Unit: Software, Organization: PCNP, State/Province: Cherkaska oblast, Locality: Cherkasy, Country: UA"
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要