| 文件名 | AcroTray.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 扫描器版本 | 1.0.181.174 |
| 数据库版本 | 2024-07-04 23:00:23 UTC |
恶意软件家族: Gen
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
0e6e43d31ac16bcf682eb5f63178c492
|
|
| SHA1 |
8e4f336bd0d3967ae004d6eb645c27a33df2e00b
|
|
| SHA256 |
486e6197e7aaf80a20b3b9d92a444c1f0c0704c4c8f377c99f80bd0ae1faf681
|
|
| SHA512 |
14598d4de38d97ec441e57c00d9871e0129f862e1b9b8b362985ee876bf7c6d3c2e1c1dcc44b18758fb6b8b6273e09d05c2c215552c6555528637d4cb044012b
|
|
| ImpHash |
de20cd499aa19c8d19aaae82f685d0a1
|
| 图标 |
哈希: 1ab9a1f1a478a06e9d0384fa029d5943
模糊: 5094d04ab404328f2323b16dc38db94b dHash: 59595a39ed9c060b |
| 映像基址 | 0x00400000 |
| 入口点 | 0x00402c46 |
| 编译时间 | 2001-03-15 13:18:18 |
| 校验和 | 0x00000000 (实际: 0x00013525) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| PDB 路径 | d:\Acro_root\Producers\Distiller\products\adobe\windist\ix86win32\export\AcroTray.pdb |
| 数字签名 | The PE file does not contain a certificate table. |
| 导入 |
4 库
KERNEL32, USER32, SHELL32, ADVAPI32 |
| 导出 | 0 函数 |
| 资源 | 10 资源 |
| 节 | 4 节 |
| Comments | |
| CompanyName | Adobe Systems Inc. |
| FileDescription | AcroTray |
| FileVersion | 5, 0, 0, 0 |
| InternalName | AcroTray |
| LegalCopyright | Copyright © 2001 |
| LegalTrademarks | |
| OriginalFilename | AcroTray.exe |
| PrivateBuild | |
| ProductName | AcroTray - Adobe Acrobat Distiller helper application. |
| ProductVersion | 5, 0, 0, 0 |
| SpecialBuild | |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
25,442 bytes | 28,672 bytes | 6.11 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
99A0528A1539CE3D0B27B200F5B5474F |
.rdata |
0x00008000 |
4,146 bytes | 8,192 bytes | 3.23 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
531717D48C4DF4B2730005549A3A04DD |
.data |
0x0000a000 |
3,764 bytes | 4,096 bytes | 1.91 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
43DB9DD9306CAC1A9AB042C800F7EC45 |
.rsrc |
0x0000b000 |
3,712 bytes | 4,096 bytes | 2.88 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
BCA6549D3934BFEA87BE9A63D894E8A6 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 4 | 1,640 字节 | |
| RT_MENU | 1 | 294 字节 | |
| RT_STRING | 2 | 132 字节 | |
| RT_GROUP_ICON | 2 | 68 字节 | |
| RT_VERSION | 1 | 932 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
The PE file does not contain a certificate table.
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
