| 文件名 | Setup PreSonus Sphere Manager v2.0.0.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 扫描器版本 | 1.0.222.174 |
| 数据库版本 | 2025-08-01 14:00:21 UTC |
恶意软件家族: Packunwan
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
845a03d9666086b227b9a57dc64a746d
|
|
| SHA1 |
8aee1823062b960cb8f3e1b7fd9a080699ed36d0
|
|
| SHA256 |
ecef8b1c9dd550b1489657395895161f17a8e8f68f33ac9547f5c03dc7efe66f
|
|
| SHA512 |
5f15efdca8992550a1f0bf5712023fb940b9f9670b37406762a444c04c0a42454c49d3e6876ff3ccf32eb4c09b7f4b29208065d3913c8504a8ee63c2c548a4e0
|
|
| ImpHash |
20dd26497880c05caed9305b3c8b9109
|
| 图标 |
哈希: 30adcb5c0b2e3c35eaec2c110733c9f8
模糊: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: 92e0b496a6cada72 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x0041181c |
| 编译时间 | 2018-06-14 13:27:46 |
| 校验和 | 0x00000000 (实际: 0x00546100) |
| 操作系统版本 | 5.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
5 库
oleaut32, advapi32, user32, kernel32, comctl32 |
| 导出 | 0 函数 |
| 资源 | 17 资源 |
| 节 | 8 节 |
| Comments | This installation was built with Inno Setup. |
| CompanyName | TEAM R2R |
| FileDescription | TEAM R2R PreSonus Sphere Manager Setup |
| FileVersion | 2.0.0 |
| LegalCopyright | TEAM R2R |
| ProductName | PreSonus Sphere Manager |
| ProductVersion | 2.0.0 |
| Translation | 0x0000 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
62,044 bytes | 62,464 bytes | 6.38 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0DA5D73FFBC41792FA65A09058A91476 |
.itext |
0x00011000 |
4,004 bytes | 4,096 bytes | 5.78 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
2EB275566563C3F1D0099A0DA7345B74 |
.data |
0x00012000 |
3,212 bytes | 3,584 bytes | 2.30 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
73B859E23F5FD17E00C08DB2E0E73DFE |
.bss |
0x00013000 |
22,204 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x00019000 |
3,588 bytes | 4,096 bytes | 4.60 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E9B9C0328FD9628AD4D6AB8283DCB20E |
.tls |
0x0001a000 |
8 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x0001b000 |
24 bytes | 512 bytes | 0.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3DFFC444CCC131C9DCEE18DB49EE6403 |
.rsrc |
0x0001c000 |
45,568 bytes | 45,568 bytes | 4.14 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D8B33CDAECEC069D8241EDD83FADA2A4 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 4 | 4,640 字节 | |
| RT_STRING | 6 | 2,668 字节 | |
| RT_RCDATA | 4 | 33,908 字节 | |
| RT_GROUP_ICON | 1 | 62 字节 | |
| RT_VERSION | 1 | 1,268 字节 | |
| RT_MANIFEST | 1 | 1,580 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
