| 文件名 | acrotray.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.218.174 |
| 数据库版本 | 2025-06-11 14:00:15 UTC |
恶意软件家族: HackTool
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
57685b9bdcc54ec842ee46cf6f273741
|
|
| SHA1 |
df77dba0e75b21103db46421d3ba0974bb7bc529
|
|
| SHA256 |
5b2bc7414a22891357f3795460319c3ae2ae4a4d197a1b05b30452e8d44655e2
|
|
| SHA512 |
fd9bafb8bde2b680e0a3f25066c7a005800347057641a4dd9684edabb74f1e8a2a3fe72885e115284d639576a10aaa37c3f02f6df045414a94ff48b4191fbd41
|
|
| ImpHash |
4864c2ee496688649a0f4ca4c40c4094
|
| 图标 |
哈希: 51a6edb4a63a1b408b85c093c4bcc75e
模糊: 73c7a1254d535734994db0e97b076f7d dHash: 9672cccccccc7032 |
| 映像基址 | 0x140000000 |
| 入口点 | 0x1403d9530 |
| 编译时间 | 2023-06-04 01:01:42 |
| 校验和 | 0x00703db4 (实际: 0x006fe7c2) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | AcroTray.pdb |
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 | 23 库 |
| 导出 | 0 函数 |
| 资源 | 24 资源 |
| 节 | 7 节 |
| Comments | |
| CompanyName | Adobe Systems Inc. |
| FileDescription | Acrobat Licensing Service |
| FileVersion | 23.3.20201.0 |
| InternalName | AcroTray |
| LegalCopyright | Copyright © Adobe Systems Inc. 1992-2023 |
| LegalTrademarks | |
| OriginalFilename | AcroTray.exe |
| PrivateBuild | |
| ProductName | AcroTray - Adobe Acrobat Distiller helper application. |
| ProductVersion | 23.3.20201.0 |
| SpecialBuild | |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
4,821,758 bytes | 4,822,016 bytes | 6.31 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
72A9FF029C12D6F4584EA8E78A614804 |
.rdata |
0x0049b000 |
2,061,854 bytes | 2,062,336 bytes | 5.69 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EBDB7B57A75B08184FA68E01E8D802E2 |
.data |
0x00693000 |
188,532 bytes | 144,384 bytes | 2.69 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D0EC3BF48EADD143E931B5B49BB0F373 |
.pdata |
0x006c2000 |
194,604 bytes | 195,072 bytes | 6.24 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D2944122F03D89585C16E77420490DC6 |
_RDATA |
0x006f2000 |
252 bytes | 512 bytes | 2.44 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
016245BFF34806E7FABCC5FEA735FF0A |
.rsrc |
0x006f3000 |
9,792 bytes | 10,240 bytes | 3.37 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
32B05FB48BCC89CEFC50F83584C5B1B7 |
.reloc |
0x006f6000 |
70,548 bytes | 70,656 bytes | 5.45 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
50680E32A30537F42E2AD29DB17BE149 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 8 | 4,616 字节 | |
| RT_MENU | 1 | 236 字节 | |
| RT_DIALOG | 1 | 726 字节 | |
| RT_STRING | 6 | 882 字节 | |
| RT_GROUP_ICON | 6 | 148 字节 | |
| RT_VERSION | 1 | 1,020 字节 | |
| RT_MANIFEST | 1 | 762 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
