文件名 | avpui.exe |
文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
扫描器版本 | 1.0.141.174 |
数据库版本 | 2023-10-05 11:04:44 UTC |
我们的扫描器未检测到威胁
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
a0696703e223218ab3e1ca472177fee6
|
|
SHA1 |
393809efe7c2e17b53c554a0c0b54e92755833c9
|
|
SHA256 |
2ee542d4857d06af17915a51faa7e673bbd137dbc971b5161895f3595fb1638f
|
|
SHA512 |
a473e4640bf1e1c1444f781dd6facb513f5441fb289a045d227a7fc52980fd17111a72a41e23f6d5d5171b2affc798b1ce1c9b40285fa185e4c76905af56bbf0
|
|
ImpHash |
8b18edac65cf62fc24dc39039063d3c6
|
图标 |
哈希: bcc5b345ae9e1e618c4f57578a55916f
模糊: 4dd5751d710764ba125da89ffd1e0ff4 dHash: 30f0c4c4ccd4f030 |
映像基址 | 0x00400000 |
入口点 | 0x00408f80 |
编译时间 | 2087-06-22 19:19:15 |
校验和 | 0x000a3bac (实际: 0x000a3bac) |
操作系统版本 | 6.0 |
PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
PDB 路径 | C:\a\b\d_00000000_\b\out\Win32\Release\avpui.pdb |
数字签名 | OK |
导入 |
1 库
KERNEL32 |
导出 | 1 函数 |
资源 | 11 资源 |
节 | 7 节 |
DigiCert EV Code Signing CA (SHA2) | Kaspersky Lab JSC (RU) |
DigiCert High Assurance EV Root CA | DigiCert Inc (US) |
CompanyName | AO Kaspersky Lab |
FileDescription | Kaspersky |
FileVersion | 21.14.5.462 |
LegalCopyright | © 2023 AO Kaspersky Lab. All Rights Reserved. |
LegalTrademarks | Registered trademarks and service marks are the property of their respective owners |
ProductName | Kaspersky |
ProductVersion | 21.14.5.462 |
Translation | 0x0409 0x04b0 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
117,732 bytes | 117,760 bytes | 6.64 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
CC95EE8141A129E90A73C03906853762 |
.rdata |
0x0001e000 |
41,374 bytes | 41,472 bytes | 5.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
FEC6367736CDF163860953EF5D0CEA98 |
.data |
0x00029000 |
7,296 bytes | 3,072 bytes | 2.82 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
4605F05245BCED3F62DF1F0EBB1C8B86 |
.didat |
0x0002b000 |
16 bytes | 512 bytes | 0.16 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
46037438DC0541EB0D2C4931177AB8F3 |
.eecseg |
0x0002c000 |
344 bytes | 512 bytes | 2.68 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E15BC7E51E4450C9EF2D4F2FEF2235B7 |
.rsrc |
0x0002d000 |
414,304 bytes | 414,720 bytes | 4.79 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A20AEF4042919C75FABB4C72932B9550 |
.reloc |
0x00093000 |
7,216 bytes | 7,680 bytes | 6.47 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
8FCB7B28CFB23521CB710CF84548AE59 |
1 检测到较高熵(≥6.5)的节 - 可能存在压缩
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
RT_ICON | 8 | 410,464 字节 | |
RT_GROUP_ICON | 1 | 118 字节 | |
RT_VERSION | 1 | 852 字节 | |
RT_MANIFEST | 1 | 2,226 字节 |
主题 |
Kaspersky Lab JSC Kaspersky Lab JSC RU |
颁发者 | DigiCert EV Code Signing CA (SHA2) |
序列号 | 14050106088284434984761990633202950468 |
主题 |
DigiCert EV Code Signing CA (SHA2) DigiCert Inc US |
颁发者 | DigiCert High Assurance EV Root CA |
序列号 | 5242696219798676072696570528751175516 |
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要