Fl patch installer 20 1 2 887 exe (FL Studio Signature Bundle (patch) Setup) Image Line Software 文件恶意软件分析

Fl_patch_installer_20_1_2_887.exe (FL Studio Signature Bundle (patch) Setup) 文件分析

更新于 2 days ago

检查者 Malware Check

fl_patch_installer_20_1_2_887.exe

哈希类型	值	操作
MD5	2375bd307045e53c057a4a7efa44f261
SHA1	67bc6b1845f8693616da1ad54f0464aa369f95df
SHA256	f8123646ce5915978be5fcb51809c33919c45f8d9a5ebcdd91ebb7584c3a2a0c
SHA512	ad179f0f7b09c3e36f7eaa3308beea59bde9361dcdfdbd1b73daac6811252fa73bd0e52acf407eb08335baa2c53edfc699ae7623ae6fef9da35a0955f833e600
ImpHash	20dd26497880c05caed9305b3c8b9109

哈希类型

值

操作

MD5

2375bd307045e53c057a4a7efa44f261

SHA1

67bc6b1845f8693616da1ad54f0464aa369f95df

SHA256

f8123646ce5915978be5fcb51809c33919c45f8d9a5ebcdd91ebb7584c3a2a0c

SHA512

ad179f0f7b09c3e36f7eaa3308beea59bde9361dcdfdbd1b73daac6811252fa73bd0e52acf407eb08335baa2c53edfc699ae7623ae6fef9da35a0955f833e600

ImpHash

20dd26497880c05caed9305b3c8b9109

PE 分析

基本信息

▼

图标	哈希: 134ac4604744aebc17458a77d7e5d82a 模糊: 918ab676eb869203b579cc2f7bc21fe7 dHash: c8b87979d961b098
映像基址	`0x00400000`
入口点	`0x004117dc`
编译时间	2016-05-01 19:42:26
校验和	0x00000000 (实际: 0x0413e21c)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	17 资源
节	8 节

版本信息

▼

Comments	Private installer built with Inno Setup.
CompanyName	Image Line Software
FileDescription	FL Studio Signature Bundle (patch) Setup
FileVersion
LegalCopyright
ProductName	FL Studio Signature Bundle (patch)
ProductVersion	20.1.2.887
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	62,020 bytes	62,464 bytes	6.38 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A33E9FF7181115027D121CD377C28C8F`
`.itext`	`0x00011000`	3,940 bytes	4,096 bytes	5.73 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CAEC456C18277B579A94C9508DAF36EC`
`.data`	`0x00012000`	3,208 bytes	3,584 bytes	2.30 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`746954890499546D73DCE0E994642192`
`.bss`	`0x00013000`	22,204 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00019000`	3,588 bytes	4,096 bytes	4.60 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E9B9C0328FD9628AD4D6AB8283DCB20E`
`.tls`	`0x0001a000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0001b000`	24 bytes	512 bytes	0.20 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3DFFC444CCC131C9DCEE18DB49EE6403`
`.rsrc`	`0x0001c000`	49,524 bytes	49,664 bytes	4.69 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`634C67AC9C27D8739D25752E4D5801A2`

资源分析

▼

资源总数: 17 (48,470 字节)

资源类型	数量	总大小	百分比
RT_ICON	4	8,992 字节	18.6%
RT_STRING	6	2,668 字节	5.5%
RT_RCDATA	4	33,908 字节	70%
RT_GROUP_ICON	1	62 字节	0.1%
RT_VERSION	1	1,260 字节	2.6%
RT_MANIFEST	1	1,580 字节	3.3%

证书链分析

▼

证书 Information

产品	FL Studio Signature Bundle (patch)
描述	FL Studio Signature Bundle (patch) Setup

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	fl_patch_installer_20_1_2_887.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.222.174
数据库版本	2025-08-01 02:00:17 UTC

Fl_patch_installer_20_1_2_887.exe (FL Studio Signature Bundle (patch) Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别