| 文件名 | setup.exe |
| 文件类型 |
PE32+ executable (console) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.210.174 |
| 数据库版本 | 2025-03-10 17:01:11 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
e470a62f5c1441bdb41fb2108e63ef41
|
|
| SHA1 |
cde0de358b835416d77da0dd246de9210177060a
|
|
| SHA256 |
bd9731621c8688524b81d724700c296a912a53e56f4e8465b2917a4622c8f313
|
|
| SHA512 |
d93311c9965279f6e8c3df7004d2ec6c5c32497bdcc972b22336d818c8d44475826342a5cf678c95a536b31099b5d1af76847ac47b8fe39c4982627fbcddf1f0
|
|
| ImpHash |
58c9226f86019707303e1e863e4e7bd0
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x1400013f0 |
| 编译时间 | 1970-01-01 00:00:00 |
| 校验和 | 0x01698a83 (实际: 0x0169d414) |
| 操作系统版本 | 6.1 |
| PEiD 签名 |
PE32+ executable (console) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
2 库
KERNEL32, msvcrt |
| 导出 | 1 函数 |
| 资源 | 0 资源 |
| 节 | 23 节 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
4,335,184 bytes | 4,335,616 bytes | 6.17 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
6F793CEC0D4B58D8CBD4168443F23DB6 |
.data |
0x00424000 |
440,320 bytes | 440,320 bytes | 5.47 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
F01EEBA1B42D8E740BB754A18EA3DF54 |
.rdata |
0x00490000 |
4,524,560 bytes | 4,525,056 bytes | 5.62 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
519727D935FD6A80945A27E7B196A6B0 |
.pdata |
0x008e1000 |
105,180 bytes | 105,472 bytes | 5.63 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B91DC304330CA17F31CC19E5D086313E |
.xdata |
0x008fb000 |
1,456 bytes | 1,536 bytes | 4.19 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A97258656E9EFC6D61052F695979CCE8 |
.bss |
0x008fc000 |
355,952 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.edata |
0x00953000 |
78 bytes | 512 bytes | 0.84 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
53F401E60BA6B3D10B0CC5CF7772AB30 |
.idata |
0x00954000 |
3,648 bytes | 4,096 bytes | 4.15 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
34E8E0E8A917E8F02F4CCEE9A835B314 |
.CRT |
0x00955000 |
96 bytes | 512 bytes | 0.30 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E8A5139518AD92C297FCC5388DB9F1F4 |
.tls |
0x00956000 |
16 bytes | 512 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.reloc |
0x00957000 |
85,072 bytes | 85,504 bytes | 5.44 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
5369A8878135614E3E14DFA961865BF7 |
/4 |
0x0096c000 |
2,016 bytes | 2,048 bytes | 2.09 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F6DB95C4452DD6F914B746A14ECCF959 |
/19 |
0x0096d000 |
4,113,128 bytes | 4,113,408 bytes | 6.31 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CC0D6BCF91BE1D1A5DF81DD1AC6003C8 |
/31 |
0x00d5a000 |
16,310 bytes | 16,384 bytes | 4.88 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
95EBD36D9CD9E9000793D207FC9F377D |
/45 |
0x00d5e000 |
1,479,695 bytes | 1,480,192 bytes | 5.98 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
C1376F992F79F9042E3D547C6301DAD6 |
/57 |
0x00ec8000 |
546,992 bytes | 547,328 bytes | 4.26 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
C72D95D3A9C4194CAE7F4341F5ED2442 |
/70 |
0x00f4e000 |
1,030 bytes | 1,536 bytes | 3.99 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
4CF2A061FCA71D9CE509000213BF1A81 |
/81 |
0x00f4f000 |
5,448,904 bytes | 5,449,216 bytes | 2.95 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
ECD1F2F8D06CBA72B055C7E6D8E829C0 |
/92 |
0x01482000 |
1,607,536 bytes | 1,607,680 bytes | 2.36 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
128B7461C439411D5C1E6EE0F547CCD0 |
/106 |
0x0160b000 |
45 bytes | 512 bytes | 0.79 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
9C56D5D77973194597D927F8AF2EFBC4 |
/125 |
0x0160c000 |
7,127 bytes | 7,168 bytes | 4.74 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
6D34AD7720D174B7707E10B3D0FD4D5A |
/141 |
0x0160e000 |
32,236 bytes | 32,256 bytes | 5.84 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
90E37F837C9298C45F2288C42A600A3F |
/157 |
0x01616000 |
1,346 bytes | 1,536 bytes | 5.35 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
622710CE08A8835D51064390AB3207E2 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
