| 文件名 | wab.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.218.174 |
| 数据库版本 | 2025-06-23 09:00:35 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
e74c571b4d6150268b75792850933b6f
|
|
| SHA1 |
82b454e65cbb38e5376acc983615e48c5aa9b262
|
|
| SHA256 |
691a6c4b96c3edb2217826ac0b5e90fb5cdb2dd61abf2e14d4a2ed44453a15c5
|
|
| SHA512 |
3ee427a1565713888808570f9d5d717cb3dd33fa595d21b44a7b2865f1070108aa6a53394866bf1fb6f2c4458139a251d0c7feb4f983a40b3a1f0a9a3295f7c5
|
|
| ImpHash |
caacebde24e4aa6fc16d3473c754b306
|
| 图标 |
哈希: e30169ca29cd7d6df7b76745691d41e8
模糊: 58ae9093029971b6f46b8e8c531bd537 dHash: 4000c0c4c0e2e0e0 |
| 映像基址 | 0x140000000 |
| 入口点 | 0x140001260 |
| 编译时间 | 2084-08-12 15:24:59 |
| 校验和 | 0x000950a8 (实际: 0x000950a8) |
| 操作系统版本 | 10.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | wab.pdb |
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
7 库
ADVAPI32, KERNEL32, GDI32, USER32, msvcrt, SHELL32, SHLWAPI |
| 导出 | 0 函数 |
| 资源 | 148 资源 |
| 节 | 8 节 |
| CompanyName | Microsoft Corporation |
| FileDescription | Windows Contacts |
| FileVersion | 10.0.26100.1 (WinBuild.160101.0800) |
| InternalName | WAB.EXE |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | WAB.EXE |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.26100.1 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
9,360 bytes | 12,288 bytes | 5.13 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
3392C0AFD60B15A3AE29DAAF1FBCAFB0 |
fothk |
0x00004000 |
4,096 bytes | 4,096 bytes | 0.02 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
552902B7C62BCD8E13D1287AB8905E8F |
.rdata |
0x00005000 |
6,324 bytes | 8,192 bytes | 3.48 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
33DFB915D0AF15F7F00828B480077777 |
.data |
0x00007000 |
1,920 bytes | 4,096 bytes | 0.06 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
18F94429AC5BDAA905EF03818DF2427A |
.pdata |
0x00008000 |
456 bytes | 4,096 bytes | 0.63 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1E45A16E4749DA5B3DD9DBFECE834163 |
.didat |
0x00009000 |
16 bytes | 4,096 bytes | 0.01 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
3833A8540B355914906FE9D3A83C362C |
.rsrc |
0x0000a000 |
499,888 bytes | 503,808 bytes | 6.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0D58BF31EB45E1A647560C21B7A71EBF |
.reloc |
0x00085000 |
212 bytes | 4,096 bytes | 0.32 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
650A8659FEDD05100B1BEBFB14D94F13 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 135 | 488,684 字节 | |
| RT_GROUP_ICON | 11 | 1,956 字节 | |
| RT_VERSION | 1 | 896 字节 | |
| RT_MANIFEST | 1 | 1,048 字节 |
| 产品 | Microsoft® Windows® Operating System |
| 描述 | Windows Contacts |
| 文件版本 | 10.0.26100.1 (WinBuild.160101.0800) |
| 原始名称 | WAB.EXE |
| 内部名称 | WAB.EXE |
| 版权 | © Microsoft Corporation. All rights reserved. |
✓ 此文件已进行数字签名，证书链已验证。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
