| 文件名 | firefox115.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.211.174 |
| 数据库版本 | 2025-03-20 12:00:37 UTC |
恶意软件家族: Heuristic
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
7b0faafd39564bdbcc56486c26212a69
|
|
| SHA1 |
90cedf587fad03fb9c1eab03dbbccb2d6540ae82
|
|
| SHA256 |
28c1986fe484cb684af8cbd70cfb1b0a7ed6acbbbfd5e626a2f02360c0f14ea9
|
|
| SHA512 |
a1ea277b91bcd719b1f02a2eefdf08d9dc47b5b001ce241f2e975cb93beca351bda61ee2b2630e357a4dfa607a486a8759dc2e0a4bdea40bfad72ef22b037be4
|
|
| ImpHash |
31816bb37b906266874b4fc9befa2749
|
| 图标 |
哈希: b678d6ebdeceda7dbb12f611f1a7c746
模糊: 93e99ba708fa2b02ac39525de811d7c3 dHash: 60e6969a96cce070 |
| 映像基址 | 0x140000000 |
| 入口点 | 0x14002d990 |
| 编译时间 | 2025-01-27 14:21:05 |
| 校验和 | 0x00095a36 (实际: 0x00095a36) |
| 操作系统版本 | 6.1 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | firefox.pdb |
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 | 17 库 |
| 导出 | 97 函数 |
| 资源 | 28 资源 |
| 节 | 11 节 |
| Comments | |
| LegalCopyright | ©Firefox and Mozilla Developers; available under the MPL 2 license. |
| CompanyName | Mozilla Corporation |
| FileDescription | Firefox |
| FileVersion | 115.20.0 |
| ProductVersion | 115.20.0 |
| InternalName | Firefox |
| LegalTrademarks | Firefox is a Trademark of The Mozilla Foundation. |
| OriginalFilename | firefox.exe |
| ProductName | Firefox |
| BuildID | 20250127124940 |
| Translation | 0x0000 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
339,841 bytes | 339,968 bytes | 6.28 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
64A675F335A1F03EB289CFEB31E20148 |
.rdata |
0x00054000 |
58,692 bytes | 58,880 bytes | 5.22 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
51D768280D632A018BC6FE7324E824DF |
.data |
0x00063000 |
11,160 bytes | 1,024 bytes | 3.36 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8AA1613BEA0D07B893F86926EDC31E70 |
.pdata |
0x00066000 |
11,016 bytes | 11,264 bytes | 5.45 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
AC0FE440CF938A37019B32FB2B2213E3 |
.00cfg |
0x00069000 |
40 bytes | 512 bytes | 0.41 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E607BB2A3CDE64136730A29724D6D747 |
.freestd |
0x0006a000 |
16 bytes | 512 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
BF619EAC0CDF3F68D496EA9344137E8B |
.retplne |
0x0006b000 |
36 bytes | 512 bytes | 0.56 (正常) |
0x00000000
|
60E7349E46063B144CF642326DA037FD |
.tls |
0x0006c000 |
25 bytes | 512 bytes | 0.02 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1F354D76203061BFDD5A53DAE48D5435 |
.voltbl |
0x0006d000 |
27 bytes | 512 bytes | 0.49 (正常) |
0x00000000
|
4860A7B6EED6D24835AEC4DAC866F1C3 |
.rsrc |
0x0006e000 |
132,640 bytes | 133,120 bytes | 6.46 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3E2FD011F7366B73E47D32E4E6E8FB0F |
.reloc |
0x0008f000 |
1,164 bytes | 1,536 bytes | 4.69 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CAE24CB43E82C925A255ABFE11843A81 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 18 | 128,104 字节 | |
| RT_STRING | 1 | 46 字节 | |
| RT_GROUP_ICON | 7 | 294 字节 | |
| RT_VERSION | 1 | 1,012 字节 | |
| RT_MANIFEST | 1 | 1,692 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
