| 文件名 | SIHClient.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.142.174 |
| 数据库版本 | 2023-10-08 05:01:37 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
8fc3ae0ae8c5e08b49ed3c9abb54353e
|
|
| SHA1 |
08dbb00a5e00e6a8aeec22d8a89839b0bdd53fb8
|
|
| SHA256 |
394e391490fbf82fe6b8ac6bf9b700a811ac4399972dffcad15f81e5d324c78c
|
|
| SHA512 |
d02a81e23f18c119cca5dd7ad5bf6485a4b395ff04690df5cf1e42ebae841e83bfdeac10d4bcb198221b4a060bcfb4a98226528659fb711aef21ec77028c82fb
|
|
| ImpHash |
1eea50a7eb5e83b370826bfd241e9d62
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x140045310 |
| 编译时间 | 2102-06-16 01:52:54 |
| 校验和 | 0x000703de (实际: 0x000703de) |
| 操作系统版本 | 10.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | SIHClient.pdb |
| 数字签名 | OK |
| 导入 | 48 库 |
| 导出 | 0 函数 |
| 资源 | 2 资源 |
| 节 | 8 节 |
| Microsoft Windows Production PCA 2011 | Microsoft Corporation (US) |
| Microsoft Root Certificate Authority 2010 | Microsoft Corporation (US) |
| CompanyName | Microsoft Corporation |
| FileDescription | SIH Client |
| FileVersion | 923.725.111.0 |
| InternalName | SIH Client |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | sihclient.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 923.725.111.0 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
304,188 bytes | 304,640 bytes | 6.41 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
CF26AC37D39A7DDCB74696771692FA7B |
.rdata |
0x0004c000 |
104,210 bytes | 104,448 bytes | 4.96 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
75FC3AAE04365C0C275CF6F0A2B2B6D9 |
.data |
0x00066000 |
6,772 bytes | 4,096 bytes | 3.36 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
F5C5DCE2DBE812F23456F968EB13E13F |
.pdata |
0x00068000 |
11,952 bytes | 12,288 bytes | 5.64 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E56EF9169FB4C729DF3A02393AF08C2D |
.didat |
0x0006b000 |
960 bytes | 1,024 bytes | 3.08 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
893621D0DAAF2F4623AF429254AF6BEA |
_RDATA |
0x0006c000 |
384 bytes | 512 bytes | 3.24 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
21A24D5D091B2344F4F8EFC54B09E34D |
.rsrc |
0x0006d000 |
1,224 bytes | 1,536 bytes | 2.80 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
24F6D7B11EA556B35FEFEBF7DEC9E621 |
.reloc |
0x0006e000 |
1,392 bytes | 1,536 bytes | 5.19 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F0B6F63AA76CDFE5E6A8A3D684FC9E04 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| MUI | 1 | 200 字节 | |
| RT_VERSION | 1 | 844 字节 |
| 主题 |
Microsoft Windows Publisher Microsoft Corporation US |
| 颁发者 | Microsoft Windows Production PCA 2011 |
| 序列号 | 1137338010355623603310786023926485396714685423 |
| 主题 |
Microsoft Windows Production PCA 2011 Microsoft Corporation US |
| 颁发者 | Microsoft Root Certificate Authority 2010 |
| 序列号 | 458207203049816025202696 |
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
