| 文件名 | launcher.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.153.174 |
| 数据库版本 | 2024-01-01 09:01:35 UTC |
恶意软件家族: Gen
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
e9b0030f874ce29c306f9a86c772057d
|
|
| SHA1 |
d57d336f0f187beb7dc7ed04da2c245de32f8396
|
|
| SHA256 |
0f86367e3a0d3c259f9a5e6e5e0e686653dbe47a93e4aaeacb4097f0962f1a54
|
|
| SHA512 |
1a90dfb84c46b5339acfe24e38be32a13a0020a04d9f86f8b422749cb1c5aedb3b94ecca8a746d867f4e8feb8efadec56036a5799952d7218bb4069745f6f9be
|
|
| ImpHash |
1af6c885af093afc55142c2f1761dbe8
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x14000c1f0 |
| 编译时间 | 2023-12-26 22:50:46 |
| 校验和 | 0x00606099 (实际: 0x00603dbf) |
| 操作系统版本 | 5.2 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 |
5 库
USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32 |
| 导出 | 0 函数 |
| 资源 | 2 资源 |
| 节 | 7 节 |
| AAA Certificate Services | Sectigo Limited (GB) |
| Sectigo Public Code Signing Root R46 | Sectigo Limited (GB) |
| Sectigo Public Code Signing CA EV R36 | Akeo Consulting (IE) |
| CompanyName | Microsoft Corporation |
| FileDescription | bsdtar archive tool |
| FileVersion | 3.5.2 (WinBuild.160101.0800) |
| InternalName | bsdtar |
| LegalCopyright | Copyright (c) libarchive authors |
| OriginalFilename | bsdtar |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.19041.3636 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
171,152 bytes | 171,520 bytes | 6.48 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
62616ACF257019688180F494B4EB78D4 |
.rdata |
0x0002b000 |
76,788 bytes | 76,800 bytes | 5.84 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D962F7B623BECFB02B1A901F29FCAC35 |
.data |
0x0003e000 |
13,112 bytes | 3,584 bytes | 1.83 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
99D84572872F2CE8D9BDBC2521E1966E |
.pdata |
0x00042000 |
8,868 bytes | 9,216 bytes | 5.32 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
39F0A7D8241A665FC55289B5F9977819 |
_RDATA |
0x00045000 |
348 bytes | 512 bytes | 2.83 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
624222957A635749731104F8CDF6F9B7 |
.rsrc |
0x00046000 |
2,308 bytes | 2,560 bytes | 5.16 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F3D7C169383E71E6342FE91282C24258 |
.reloc |
0x00047000 |
1,884 bytes | 2,048 bytes | 5.24 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
4138D4447F190C2657EC208EF31BE551 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_VERSION | 1 | 852 字节 | |
| RT_MANIFEST | 1 | 1,293 字节 |
| 主题 |
Sectigo Public Code Signing Root R46 Sectigo Limited GB |
| 颁发者 | AAA Certificate Services |
| 序列号 | 97015870309959729927281967672979788822 |
| 主题 |
Sectigo Public Code Signing CA EV R36 Sectigo Limited GB |
| 颁发者 | Sectigo Public Code Signing Root R46 |
| 序列号 | 68907147224176919178469041473649749358 |
| 主题 |
Akeo Consulting Akeo Consulting IE |
| 颁发者 | Sectigo Public Code Signing CA EV R36 |
| 序列号 | 254803206469046627912209246880496054179 |
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
