| 在线病毒检测器 | v.1.0.205.174 |
| 数据库版本: | 2025-01-19 12:00:21 |
特洛伊木马Agent是一种恶意软件，伪装成合法的文件或程序，以在受感染的计算机上执行各种有害操作，如数据窃取或网络犯罪分子的远程控制。
| File | Helper.exe |
| 已检查 | 2025-01-19 11:03:13 |
| MD5 | c0ba7d3790f0b2102e8dcf6954c80cc1 |
| SHA1 | 061fe284fe2c96f65be8a12a1a16dd52dd1a5943 |
| SHA256 | 3e3835c6ac3bb341252c918f9866f74f310e5fc1677ff277f149b6c287b64b5e |
| SHA512 | 09dd4a85ade3aba721eaebb39a872f99f00c4ffae54acece79e2840b1ca0732315ee8c30232af6488e29941506d976123bb3d1c6264763fd3843dec0ab441183 |
| Imphash | f4639a0b3116c2cfc71144b88a929cfd |
| File Size | 16309415 bytes |
Gridinsoft能够识别并消除Adware.Win32.Agent.sa，无需进一步的用户干预。
| Comments | |
| CompanyName | KpoJIuK |
| FileDescription | Adobe Installer |
| FileVersion | 1.0.0.0 |
| LegalCopyright | © KpoJIuK |
| ProductName | Adobe Installer |
| Translation | 0x0439 0x04b0 |
 |
f9f690aaed83f26549b0e968839b3c0d 848c149cfdc64b0e180e5337cd28398d 33cce8e8eac4c833 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00403552 |
| Compilation: | 2024-03-30 16:56:08 |
| Checksum: | 0x00000000 (Actual: 0x00f95ef2) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive |
| Sign: | No valid SignedData structure was found. |
| Sections: | 5 |
| Imports: | ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32, |
| Exports: | 0 |
| Resources: | 22 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x000068f8 | 0x00006a00 | e94ce730de9e6bb58a509fff5b51ccd0 | 6.48 |
| .rdata | 0x00008000 | 0x00001464 | 0x00001600 | a995b118b38426885fc6ccaa984c8b7a | 4.97 |
| .data | 0x0000a000 | 0x0006d018 | 0x00000600 | 9750f6a87510ed784c5c60d79dc137cc | 4.16 |
| .ndata | 0x00078000 | 0x000b0000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rsrc | 0x00128000 | 0x0000fa30 | 0x0000fc00 | d2a3123c2d1f7bbe8eac37d151d7de6e | 5.46 |
