| 文件名 | keyshot_headless.exe |
| 文件类型 |
PE32+ executable (console) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.148.174 |
| 数据库版本 | 2023-11-25 04:01:33 UTC |
恶意软件家族: Heuristic
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
54235f73a9c111795099a2f77dbd8660
|
|
| SHA1 |
eebc8a44d81646e51b2b540dee1218e0ea65c2e9
|
|
| SHA256 |
c36552014055a42ef4d03845939e73979fee924a3ec77e537b124ec3621c3030
|
|
| SHA512 |
637cd68eb410712d4be4681fbab4d06c3ca1dcfc5c3d17076a493ea839f8f2b7f4c485ca4785580cc43a548f2e9293f04f50740325890ccf5d9adc58e96b5953
|
|
| ImpHash |
60c8c24e026032723a6cddc45f390882
|
| 图标 |
哈希: 49a3828cfc6a032f1005b13edb2129b6
模糊: eab96ccd9026304ffce30b7ee0cd5c68 dHash: 4dd0494d4d6db44d |
| 映像基址 | 0x140000000 |
| 入口点 | 0x140dc99c8 |
| 编译时间 | 2023-10-31 09:39:24 |
| 校验和 | 0x02f5ba90 (实际: 0x02f6790d) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (console) x86-64, for MS Windows
|
| PDB 路径 | C:\luxbuild\builds\Tptr7LEJ\0\git\luxion\windows_build\Release\bin\keyshot_headless.pdb |
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 | 38 库 |
| 导出 | 34 函数 |
| 资源 | 17 资源 |
| 节 | 8 节 |
| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 | Luxion, Inc (US) |
| CompanyName | Luxion |
| FileDescription | KeyShot 2023.3 |
| FileVersion | |
| InternalName | KeyShot |
| LegalCopyright | Copyright Luxion (C) |
| LegalTrademarks | All Rights Reserved |
| OriginalFilename | |
| ProductName | KeyShot |
| ProductVersion | |
| Translation | 0x0409 0x04e4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
15,181,279 bytes | 15,181,312 bytes | 6.50 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8241FA535F14D13BA9CECED432423046 |
.textidx |
0x00e7c000 |
651,955 bytes | 652,288 bytes | 6.13 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
48A3084C5587C4E58AD0436E6DB26022 |
.rdata |
0x00f1c000 |
31,979,122 bytes | 31,979,520 bytes | 7.66 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
38E9A30CF661BB4525683E90D284B0A4 |
.data |
0x02d9c000 |
772,312 bytes | 515,072 bytes | 4.27 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
62D4BF9ED1E11138FFE1C77FD5486CB1 |
.pdata |
0x02e59000 |
624,648 bytes | 625,152 bytes | 6.67 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
00AA25007D518BAC6339C09C8BBDEF3D |
_RDATA |
0x02ef2000 |
78,600 bytes | 78,848 bytes | 5.48 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E662707ABFE48F4821F06E6F8DD201E2 |
.rsrc |
0x02f06000 |
400,468 bytes | 400,896 bytes | 7.14 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
5758FE679D764ACBAA572CE6D9CA46C3 |
.reloc |
0x02f68000 |
212,548 bytes | 212,992 bytes | 5.47 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CE14A644557D3E0C736566F199497D2D |
1 检测到高熵（≥7.5）的节 - 可能存在打包/加密
3 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 13 | 397,990 字节 | |
| RT_GROUP_ICON | 2 | 194 字节 | |
| RT_VERSION | 1 | 712 字节 | |
| RT_MANIFEST | 1 | 600 字节 |
| 主题 |
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 DigiCert, Inc. US |
| 颁发者 | DigiCert Trusted Root G4 |
| 序列号 | 11533403529598586876501374841704918745 |
| 主题 |
Luxion, Inc Luxion, Inc US |
| 颁发者 | DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| 序列号 | 19378444220648992418664582119129914740 |
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
