文件名 | msedge_proxy.exe |
文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
扫描器版本 | 1.0.222.174 |
数据库版本 | 2025-08-04 02:00:25 UTC |
我们的扫描器未检测到威胁
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
fc245c7f468ce56ea71943f639db964f
|
|
SHA1 |
1a6d7915e3fcff6c06f916bb4f57f730a653ead3
|
|
SHA256 |
339c533ff96a863c1ed93d3824eae3e08c2d5ae22102986a1de244cfee506c9a
|
|
SHA512 |
bad1b68f9c49e5a707c41cf292f70207bebb4b3a9d5170eee6972151d2f9493e855b5af9108903c0617c14c461d9f5911be82641695c13205835af97dbed14a6
|
|
ImpHash |
22634bf2a064ff97ef115b708d7753a0
|
映像基址 | 0x140000000 |
入口点 | 0x1400ad870 |
编译时间 | 2025-07-24 17:01:50 |
校验和 | 0x001751d2 (实际: 0x001751d2) |
操作系统版本 | 10.0 |
PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
PDB 路径 | msedge_proxy.exe.pdb |
数字签名 | OK |
导入 |
5 库
dbghelp, KERNEL32, api-ms-win-core-winrt-l1-1-0, OLEAUT32, ntdll |
导出 | 1 函数 |
资源 | 2 资源 |
节 | 9 节 |
CompanyName | Microsoft Corporation |
FileDescription | Microsoft Edge |
FileVersion | 138.0.3351.109 |
InternalName | msedge_proxy |
LegalCopyright | Copyright Microsoft Corporation. All rights reserved. |
OriginalFilename | msedge_proxy.exe |
ProductName | Microsoft Edge |
ProductVersion | 138.0.3351.109 |
CompanyShortName | Microsoft |
ProductShortName | Edge |
LastChange | 3e2a22a9de0fd55574f03d586eea41fcc7764974 |
Official Build | 1 |
Translation | 0x0409 0x04b0 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
1,159,096 bytes | 1,159,168 bytes | 6.57 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
052CDAF01EAE0941900DD52E3B5F9C9C |
.rdata |
0x0011c000 |
203,124 bytes | 203,264 bytes | 5.33 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
39C9B7104A003E20E53CFE0A73A24B73 |
.data |
0x0014e000 |
125,044 bytes | 59,904 bytes | 1.27 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D03A59600DD81C655BD3E21EC221C020 |
.pdata |
0x0016d000 |
42,684 bytes | 43,008 bytes | 5.99 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
5BF5798B34C935FE227FA7EC6EFA8220 |
.fptable |
0x00178000 |
256 bytes | 512 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.tls |
0x00179000 |
529 bytes | 1,024 bytes | 0.16 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
19012C7949861193E1AFA45E578CAE4F |
_RDATA |
0x0017a000 |
500 bytes | 512 bytes | 4.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0C777E0C0DBB3F5C1DDC632C0C862AB0 |
.rsrc |
0x0017b000 |
2,608 bytes | 3,072 bytes | 4.37 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
3D395AA7D64A8C6A667B86B058F4EE1C |
.reloc |
0x0017c000 |
6,484 bytes | 6,656 bytes | 5.41 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
E61C9D4CEC46537D2A2B791DE0BF0108 |
1 检测到较高熵(≥6.5)的节 - 可能存在压缩
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
RT_VERSION | 1 | 1,108 字节 | |
RT_MANIFEST | 1 | 1,331 字节 |
产品 | Microsoft Edge |
描述 | Microsoft Edge |
文件版本 | 138.0.3351.109 |
原始名称 | msedge_proxy.exe |
签名日期 | 11:39 PM 07/24/2025 (16 天前) |
验证状态 | Signed |
签名者 | Microsoft Corporation; Microsoft Code Signing PCA 2011; Microsoft Root Certificate Authority 2011 |
副签名者 | Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010 |
内部名称 | msedge_proxy |
版权 | Copyright Microsoft Corporation. All rights reserved. |
33 00 00 04 7E AC FA 0A 41 FF 7E 13 F5 00 00 00 00 04 7E
61 0E 90 D2 00 00 00 00 00 03
33 00 00 01 FC 18 A0 AF CC 69 5A 87 3A 00 01 00 00 01 FC
33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15
✓ 此文件已进行数字签名,证书链已验证。
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要