| 文件名 | autoit-v3.3.14.0-setup.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 扫描器版本 | 1.0.150.174 |
| 数据库版本 | 2023-12-04 05:01:20 UTC |
恶意软件家族: Generic
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
a529dbccd18d8a1f452b6eeb660edd48
|
|
| SHA1 |
3d94aa894a53d6010e5e8abe21bf695e1d6735f3
|
|
| SHA256 |
58c7a7e2f42c5ffa28e2fc8338af55bb8f94981ac846f40dbf35f38eeb27f5c6
|
|
| SHA512 |
3cdc79a2c31064e9260c7eb5dab807ecba91911fa56f963a093bcd73b6441f3ca89fe3e5121dd49f19c50f0bfd14f298fc850fc37e1c3e01dc7deccb3505e17b
|
|
| ImpHash |
099c0646ea7282d232219f8807883be0
|
| 图标 |
哈希: f5b822a323ba19f8326045a28427a04c
模糊: b0f97fac68997622a4f91f6530d31894 dHash: f0e8cc80c8ccc871 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x0040323c |
| 编译时间 | 2009-12-05 22:50:46 |
| 校验和 | 0x00b7fa74 (实际: 0x00b7fa74) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 数字签名 | OK |
| 导入 |
8 库
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION |
| 导出 | 0 函数 |
| 资源 | 18 资源 |
| 节 | 5 节 |
| GlobalSign Root CA | GlobalSign nv-sa (BE) |
| GlobalSign Root CA | GlobalSign nv-sa (BE) |
| GlobalSign Timestamping CA - G2 | GMO GlobalSign Pte Ltd (SG) |
| GlobalSign CodeSigning CA - G2 | AutoIt Consulting Ltd (GB) |
| CompanyName | AutoIt Team |
| FileDescription | AutoIt v3 Setup |
| FileVersion | 3.3.14.0 |
| LegalCopyright | (c)1999-2015 Jonathan Bennett & AutoIt Team |
| Translation | 0x0000 0x04e4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
23,130 bytes | 23,552 bytes | 6.42 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
0BC2FFD32265A08D72B795B18265828D |
.rdata |
0x00007000 |
4,496 bytes | 4,608 bytes | 5.18 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F179218A059068529BDB4637EF5FA28E |
.data |
0x00009000 |
110,488 bytes | 1,024 bytes | 4.71 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
975304D6DD6C4A4F076B15511E2BBBC0 |
.ndata |
0x00024000 |
49,152 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00030000 |
20,016 bytes | 20,480 bytes | 5.68 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A30CDAC3339AE8B08ED3F00C6E3D4BF8 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_BITMAP | 1 | 1,638 字节 | |
| RT_ICON | 7 | 13,784 字节 | |
| RT_DIALOG | 7 | 1,970 字节 | |
| RT_GROUP_ICON | 1 | 104 字节 | |
| RT_VERSION | 1 | 524 字节 | |
| RT_MANIFEST | 1 | 958 字节 |
| 主题 |
GlobalSign Timestamping CA - G2 GlobalSign nv-sa BE |
| 颁发者 | GlobalSign Root CA |
| 序列号 | 4835703278459819397305047 |
| 主题 |
GlobalSign CodeSigning CA - G2 GlobalSign nv-sa BE |
| 颁发者 | GlobalSign Root CA |
| 序列号 | 4835703278459819397297500 |
| 主题 |
GlobalSign TSA for MS Authenticode - G2 GMO GlobalSign Pte Ltd SG |
| 颁发者 | GlobalSign Timestamping CA - G2 |
| 序列号 | 1492146987716954977780089087125708597710339 |
| 主题 |
AutoIt Consulting Ltd AutoIt Consulting Ltd GB |
| 颁发者 | GlobalSign CodeSigning CA - G2 |
| 序列号 | 1492269751168262063647053200486025983842464 |
OK
按照以下步骤完全从系统中移除威胁
