1.2
低危

e64750604ca1fd7b81e0166d15c9264c38c558a6a3b0c531d3c9bd460529b191

61ffdbbd56e437a3434125314de27132.exe

分析耗时

134s

最近分析

文件大小

236.3KB
静态报毒 动态报毒 FREEMAKE
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
McAfee 20210110 6.0.6.653
Alibaba 20190527 0.3.0.5
CrowdStrike 20190702 1.0
Baidu 20190318 1.0.0.2
Avast 20210109 21.1.5827.0
Tencent 20210110 1.0.0.1
Kingsoft 20210110 2017.9.26.565
静态指标
This executable is signed
This executable has a PDB path (1 个事件)
pdb_path C:\BuildAgent\work\f528c7da27d4599a\Sources\FMProductUpdater\obj\x86\Release\ProductUpdater.pdb
行为判定
动态指标
File has been identified by one AntiVirus engine on VirusTotal as malicious (1 个事件)
DrWeb Program.Freemake.251
The binary likely contains encrypted or compressed data indicative of a packer (2 个事件)
entropy 7.2356287381896545 section {'size_of_data': '0x00038a00', 'virtual_address': '0x00002000', 'entropy': 7.2356287381896545, 'name': '.text', 'virtual_size': '0x000388f8'} description A section with a high entropy has been found
entropy 0.9912472647702407 description Overall entropy of this PE file is high
网络通信
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2020-08-18 21:06:17

Imports

Library mscoree.dll:
0x402000 _CorExeMain

Hosts

No hosts contacted.

DNS

No domains contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.