| 文件名 | uploaded |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 扫描器版本 | 1.0.139.174 |
| 数据库版本 | 2023-09-18 20:03:25 UTC |
恶意软件家族: Generic
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
a69d796ab71f88742ebc5317ff46015a
|
|
| SHA1 |
e0161537372941371751cfc3defe9041b03251c1
|
|
| SHA256 |
204259fc2caf158eb9bfae76aa4204dde93a18643f5cbb578d8f93260f11593d
|
|
| SHA512 |
c948df9b292b6e4340e1329bdc467fb8ba9d4d8d08256d761efcd451d50c9432dc08ad4fa030f6a65d4abb7ab7ecf266b93421e16e14c655391a13e6c88745d4
|
|
| ImpHash |
3abe302b6d9a1256e6a915429af4ffd2
|
| 图标 |
哈希: c1a016b05f2ebe359c58b141ad25c2d6
模糊: ba00b1371b6c86696ee1a114ad268077 dHash: 1f197a6672986917 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x004031d6 |
| 编译时间 | 2023-09-14 19:13:20 |
| 校验和 | 0x001045cc (实际: 0x001045cc) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 数字签名 | OK |
| 导入 |
7 库
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32 |
| 导出 | 0 函数 |
| 资源 | 16 资源 |
| 节 | 5 节 |
| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 | Wavesor Software (Eightpoint Technologies Ltd. SEZC) (KY) |
| CompanyName | Wavesor Software |
| FileDescription | WaveBrowser |
| FileVersion | 1.3.15.3 |
| LegalCopyright | Copyright 2023 Wavesor Software. All rights reserved. |
| OriginalFilename | Wave Browser |
| ProductName | WaveBrowser |
| ProductVersion | 1.3.15.3 |
| Translation | 0x0409 0x04e4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
24,333 bytes | 24,576 bytes | 6.45 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
A04138503CBCC902263BEDC7FEDD6947 |
.rdata |
0x00007000 |
4,688 bytes | 5,120 bytes | 5.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4856BBF2A79B612F639EBD55D68C4D02 |
.data |
0x00009000 |
108,568 bytes | 1,024 bytes | 5.13 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
06C5105864978DF88E34770EEFADA5DA |
.ndata |
0x00024000 |
90,112 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x0003a000 |
178,400 bytes | 178,688 bytes | 5.62 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
9F08F15B9BE7A78F532AA02C85B9945B |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 10 | 174,539 字节 | |
| RT_DIALOG | 3 | 1,000 字节 | |
| RT_GROUP_ICON | 1 | 146 字节 | |
| RT_VERSION | 1 | 728 字节 | |
| RT_MANIFEST | 1 | 1,059 字节 |
| 主题 |
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 DigiCert, Inc. US |
| 颁发者 | DigiCert Trusted Root G4 |
| 序列号 | 11533403529598586876501374841704918745 |
| 主题 |
Wavesor Software (Eightpoint Technologies Ltd. SEZC) Wavesor Software (Eightpoint Technologies Ltd. SEZC) KY |
| 颁发者 | DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| 序列号 | 13081875767327525095052709720529320963 |
OK
按照以下步骤完全从系统中移除威胁
