| 文件名 | SetupME.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 扫描器版本 | 1.0.217.174 |
| 数据库版本 | 2025-05-27 10:00:19 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
50c43b3c916f8205e1d1dffe5b0563c0
|
|
| SHA1 |
0b4ea9fe09fb6aea250ace6382c424174923e42c
|
|
| SHA256 |
efcd391eb6efc91cb677bd9fcd67e0b47d0abb23a42ec495f4fe7ba53a01b6f7
|
|
| SHA512 |
caa896fdf2a627a910c66610fb24501bc72a28c3ce3e326d1a58adf9854827571a641fed2d09fadebf0eb4d2d8a1031702b603600508ad1f2296e0dfe4dbbfd5
|
|
| ImpHash |
5275cb1df2b4bd3aac3ad8c9723a85ae
|
| 图标 |
哈希: e5d8ce65bec65ddd762fdb16c77c239f
模糊: a9a460bc96a453405df198555a9508e5 dHash: 8070f1797cecfc00 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x0043341d |
| 编译时间 | 2019-02-27 10:46:50 |
| 校验和 | 0x0538c1f9 (实际: 0x0538c1f9) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| PDB 路径 | D:\buildagent_prod_8811\p4\1598850468\Installer_WS\AMT\Release\Setup.pdb |
| 数字签名 | OK |
| 导入 |
9 库
KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, ole32, OLEAUT32, SHLWAPI, SETUPAPI |
| 导出 | 0 函数 |
| 资源 | 37 资源 |
| 节 | 5 节 |
| CompanyName | Intel Corporation |
| FileDescription | Intel(R) Management Engine Components installer |
| FileVersion | 12, 0, 2709, 10 |
| InternalName | ME |
| LegalCopyright | Copyright (C), Intel Corporation. All rights reserved. |
| LegalTrademarks | Intel Corporation |
| OriginalFilename | Setup.exe |
| ProductName | Intel(R) Management Engine Components |
| ProductVersion | 1909.12.0.1236 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
335,921 bytes | 336,384 bytes | 6.55 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8A2A6112FAF300908E983D52305C65C2 |
.rdata |
0x00054000 |
118,448 bytes | 118,784 bytes | 4.91 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
135B4BB89E9189E5720892424984D3C3 |
.data |
0x00071000 |
12,584 bytes | 5,120 bytes | 3.82 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
DFC6927F091F201B3278A08B02C0FBDF |
.rsrc |
0x00075000 |
87,050,932 bytes | 87,051,264 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EA2D44B5B5BB749E3300E8118F28A789 |
.reloc |
0x0537a000 |
19,400 bytes | 19,456 bytes | 6.68 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
90A902D01D04BB6868C56D1D72902FB5 |
1 检测到高熵（≥7.5）的节 - 可能存在打包/加密
2 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_BITMAP | 7 | 177,144 字节 | |
| RT_ICON | 9 | 203,493 字节 | |
| RT_DIALOG | 13 | 2,626 字节 | |
| RT_RCDATA | 5 | 86,663,374 字节 | |
| RT_GROUP_ICON | 1 | 132 字节 | |
| RT_VERSION | 1 | 1,000 字节 | |
| RT_MANIFEST | 1 | 1,155 字节 |
| 产品 | Intel(R) Management Engine Components |
| 描述 | Intel(R) Management Engine Components installer |
| 文件版本 | 12, 0, 2709, 10 |
| 原始名称 | Setup.exe |
| 签名日期 | 12:01 PM 2/27/2019 (2292 天前) |
| 验证状态 | Signed |
| 签名者 | Intel(R) Embedded Subsystems and IP Blocks Group; Intel External Issuing CA 7B; Sectigo (formerly Comodo CA) |
| 副签名者 | timestamp.intel.com; QuoVadis Issuing CA G4; QuoVadis Root Certification Authority |
| 内部名称 | ME |
| 版权 | Copyright (C), Intel Corporation. All rights reserved. |
56 00 00 08 2B 1E 36 C5 6B 00 27 6A 8A 00 00 00 00 08 2B06 9B 5E 99 27 72 84 C8 76 7F 13 68 A7 DE B0 F34C AA F9 CA DB 63 6F E0 1F F7 4E D8 5B 03 86 9D61 18 54 86 00 00 00 00 00 2469 B2 D1 CC F0 2E 20 DC C9 5C 62 89 4F 7F 9E 5F 5F C0 57 BF3C A5 D5 25 1F 75 29 A5 BA 3C 73 B4 49 6F A2 C1 B0 C5 6C 9F✓ 此文件已进行数字签名，证书链已验证。
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
