文件名 | setup.exe |
文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
扫描器版本 | 1.0.223.174 |
数据库版本 | 2025-08-14 14:00:15 UTC |
我们的扫描器未检测到威胁
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
fdea6165415182ee6dfed8216cfc1cc1
|
|
SHA1 |
759cca30ea9a3036fbe604e09e25f2cf99e6e7c6
|
|
SHA256 |
e00913f0818686ee030a692682418113f9201520f32bdc1ce9200fcf347bebde
|
|
SHA512 |
ebe52e1769e08ad8b51ce8038899049eb072184ad2b9e900b724096fc3f268619ea89bbd9e4f0a0899cfa718e4afd5181c6e30a86b2b8c11521b48bbeaac053e
|
|
ImpHash |
884310b1928934402ea6fec1dbd3cf5e
|
图标 |
哈希: 30adcb5c0b2e3c35eaec2c110733c9f8
模糊: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: 92e0b496a6cada72 |
映像基址 | 0x00400000 |
入口点 | 0x00409c40 |
编译时间 | 1992-06-19 22:22:17 |
校验和 | 0x0023a229 (实际: 0x0023a229) |
操作系统版本 | 1.0 |
PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
数字签名 | OK |
导入 |
5 库
kernel32, user32, oleaut32, advapi32, comctl32 |
导出 | 0 函数 |
资源 | 14 资源 |
节 | 8 节 |
Comments | This installation was built with Inno Setup. |
CompanyName | Acute Systems |
FileDescription | TransMac Setup |
FileVersion | |
LegalCopyright | |
ProductName | TransMac |
ProductVersion | 15.4 |
Translation | 0x0000 0x04b0 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
CODE |
0x00001000 |
37,732 bytes | 37,888 bytes | 6.56 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0D7AC17DAFCD52A9B3EA353C32256C1D |
DATA |
0x0000b000 |
588 bytes | 1,024 bytes | 2.75 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E8F82382EEFCA31B62F6A8C8A52FF421 |
BSS |
0x0000c000 |
3,660 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x0000d000 |
2,384 bytes | 2,560 bytes | 4.43 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BB5485BF968B970E5EA81292AF2ACDBA |
.tls |
0x0000e000 |
8 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x0000f000 |
24 bytes | 512 bytes | 0.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
9BA824905BF9C7922B6FC87A38B74366 |
.reloc |
0x00010000 |
2,228 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00011000 |
11,264 bytes | 11,264 bytes | 4.46 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
BAE2FA9975BCF440B6E68F0BDDE885F1 |
1 检测到较高熵(≥6.5)的节 - 可能存在压缩
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
RT_ICON | 4 | 4,640 字节 | |
RT_STRING | 6 | 2,710 字节 | |
RT_RCDATA | 1 | 44 字节 | |
RT_GROUP_ICON | 1 | 62 字节 | |
RT_VERSION | 1 | 1,208 字节 | |
RT_MANIFEST | 1 | 1,376 字节 |
产品 | TransMac |
描述 | TransMac Setup |
签名日期 | 06:39 PM 01/21/2024 (584 天前) |
验证状态 | Signed |
签名者 | Acute Systems; Sectigo RSA Code Signing CA; USERTrust RSA Certification Authority; Sectigo (AAA) |
副签名者 | Symantec SHA256 TimeStamping Signer - G3; Symantec SHA256 TimeStamping CA; VeriSign Universal Root Certification Authority |
B9 F8 87 72 22 53 9D 7D E7 69 E9 FD 8A B4 8C 1C
39 72 44 3A F9 22 B7 51 D7 D3 6C 10 DD 31 35 95
1D A2 48 30 6F 9B 26 18 D0 82 E0 96 7D 33 D3 6A
7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12
✓ 此文件已进行数字签名,证书链已验证。
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要