Power Director Ultimate exe (CyberLink Power Director Ultimate (PortableApps com Launcher)) PortableApps com 文件恶意软件分析

Power Director Ultimate.exe (CyberLink Power Director Ultimate (PortableApps.com Launcher)) 文件分析

更新于 19 days ago

检查者 Malaware Check

Power Director Ultimate.exe

哈希类型	值	操作
MD5	2b021b84dd7fd6ab64a798ef26723f58
SHA1	d395a07db267f0dc9555c3b2ec6b68e4cd8e7ce7
SHA256	65293618f99d2bb30ee3a8855645a888a2b5581ec77df24f5f8f720ac01eacef
SHA512	e405c69adc499f8c0cf8096f0ffdeb20bd2bef35f8c206877b2e3eb4bdfbd6f279cd0e1ac3d9fa55fcb3b40cc22b3ebac8c387410e75dc79868bc7419fe404a0
ImpHash	32f3282581436269b3a75b6675fe3e08

哈希类型

值

操作

MD5

2b021b84dd7fd6ab64a798ef26723f58

SHA1

d395a07db267f0dc9555c3b2ec6b68e4cd8e7ce7

SHA256

65293618f99d2bb30ee3a8855645a888a2b5581ec77df24f5f8f720ac01eacef

SHA512

e405c69adc499f8c0cf8096f0ffdeb20bd2bef35f8c206877b2e3eb4bdfbd6f279cd0e1ac3d9fa55fcb3b40cc22b3ebac8c387410e75dc79868bc7419fe404a0

ImpHash

32f3282581436269b3a75b6675fe3e08

PE 分析

基本信息

▼

图标	哈希: be451ba4f431a423241dcd5dca9e7a51 模糊: fa003dd7caadeab1ba65f3ae4821968d dHash: 130134c8cc340113
映像基址	`0x00400000`
入口点	`0x004039e3`
编译时间	2012-02-24 19:19:59
校验和	0x00000000 (实际: 0x0004af2a)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	8 库 KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
导出	0 函数
资源	31 资源
节	6 节

版本信息

▼

Comments	A build of the PortableApps.com Launcher for CyberLink Power Director Ultimate, allowing it to be run from a removable drive. For additional details, visit PortableApps.com
CompanyName	PortableApps.com
FileDescription	CyberLink Power Director Ultimate (PortableApps.com Launcher)
FileVersion	2.2.9.0
InternalName	PortableApps.com Launcher
LegalCopyright	PortableApps.com
LegalTrademarks	PortableApps.com is a Trademark of Rare Ideas, LLC.
OriginalFilename	PowerDirectorPortable.exe
ProductName	CyberLink Power Director Ultimate
ProductVersion	2.2.9.0
Translation	0x0000 0x04e3

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	28,432 bytes	28,672 bytes	6.50 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F569E353AF0ED51BF4C216FAA9BED4E7`
`.rdata`	`0x00008000`	10,898 bytes	11,264 bytes	4.39 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`91EEE43954E068E650F7B73A8B0E6915`
`.data`	`0x0000b000`	425,660 bytes	512 bytes	1.47 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DB9F7ACBF1C3DDFE255077B699955DFA`
`.ndata`	`0x00073000`	1,347,584 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x001bc000`	97,064 bytes	97,280 bytes	4.64 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7570765C37B4F528B0F0E391CD445490`
`.reloc`	`0x001d4000`	3,978 bytes	4,096 bytes	1.81 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`6B4897CE24837534F3F05C6AE73E3BD6`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 31 (95,408 字节)

资源类型	数量	总大小	百分比
RT_ICON	4	88,354 字节	92.6%
RT_DIALOG	24	4,608 字节	4.8%
RT_GROUP_ICON	1	62 字节	0.1%
RT_VERSION	1	1,416 字节	1.5%
RT_MANIFEST	1	968 字节	1%

证书链分析

▼

证书 Information

产品	CyberLink Power Director Ultimate
描述	CyberLink Power Director Ultimate (PortableApps.com Launcher)
文件版本	2.2.9.0
原始名称	PowerDirectorPortable.exe
内部名称	PortableApps.com Launcher
版权	PortableApps.com

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Power Director Ultimate.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.216.174
数据库版本	2025-05-18 23:00:26 UTC

Power Director Ultimate.exe (CyberLink Power Director Ultimate (PortableApps.com Launcher)) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别