{"id":"e6f97b56011c419e8339e1b9b7b9c92b","title":"Inno Setup 安装程序 — Inno Setup 安装程序 · 木马/恶意软件 · PE32","md5":"e6f97b56011c419e8339e1b9b7b9c92b","sha256":"54d1d87a08600f28fcf8b9b64cee918e8cd65222c558b424503657f1cf0395c6","family":"Inno Setup 安装程序","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"Delphi","file_format":"PE32","compiler":"Delphi","published_at":"2026-08-09T16:00:00.000Z","summary":"该样本为 Inno Setup 安装程序 (PE32 GUI, Delphi/Embarcadero 编译, 16MB)。Inno Setup 是 Windows 平台流行的免费安装程序制作工具。Delphi 泛型类型 (BTDictionary, System.TypInfo.PTypeInfo) 和 Inno Setup 特有字符串 (TSetupEncryptionKey, CreateUninstallRegKey, NumISSigKeyEntries, sccPasswordTest) 确认其身份。唯一 URL 为 schemas.microsoft.com XML 命名空间声明。导入 DLL 包括 kernel32.dll、user32.dll、oleaut32.dll、advapi32.dll、comctl32.dll — 典型的 Delphi GUI 应用依赖。无 C2 通信、无数据窃取、无持久化恶意机制。判定为合法软件安装程序。","url":"https://zseceye.com/report/e6f97b56011c419e8339e1b9b7b9c92b","json_url":"https://zseceye.com/report/e6f97b56011c419e8339e1b9b7b9c92b.json","html_url":"https://zseceye.com/report/e6f97b56011c419e8339e1b9b7b9c92b","hash_urls":{"md5":"https://zseceye.com/hash/e6f97b56011c419e8339e1b9b7b9c92b","sha256":"https://zseceye.com/hash/54d1d87a08600f28fcf8b9b64cee918e8cd65222c558b424503657f1cf0395c6"},"search_urls":{"md5":"https://zseceye.com/?q=e6f97b56011c419e8339e1b9b7b9c92b","sha256":"https://zseceye.com/?q=54d1d87a08600f28fcf8b9b64cee918e8cd65222c558b424503657f1cf0395c6"},"sample_download_url":"https://zseceye.com/report/e6f97b56011c419e8339e1b9b7b9c92b/sample","sample_filename":"54d1d87a.zip","iocs":[],"ips":[]}