| 文件名 | acrotray.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.181.174 |
| 数据库版本 | 2024-06-29 22:00:16 UTC |
恶意软件家族: Patcher
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
99ef5a92f1d2f8f68629c5ce91705474
|
|
| SHA1 |
5b1a2c3ffe1a18c04bddb157e01bdc19faa1f192
|
|
| SHA256 |
7a3bef8d0c85cd5336e0f6986b3f1c0afe49731f53a5fb20deae08ee3251e92c
|
|
| SHA512 |
cb781b700c1544bbf959094576ce2b150b54009e762dcd33078234f93371b4126b117d736b3d9c3944b3351d827a01469c3c79acff8f57c7ea3990c25a436a62
|
|
| ImpHash |
ae085e456cc2650fd091415ff66426f6
|
| 图标 |
哈希: 51a6edb4a63a1b408b85c093c4bcc75e
模糊: 73c7a1254d535734994db0e97b076f7d dHash: 9672cccccccc7032 |
| 映像基址 | 0x140000000 |
| 入口点 | 0x140387d00 |
| 编译时间 | 2022-03-02 17:58:10 |
| 校验和 | 0x0064e928 (实际: 0x0065bcab) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | AcroTray.pdb |
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 | 23 库 |
| 导出 | 0 函数 |
| 资源 | 24 资源 |
| 节 | 7 节 |
| Comments | |
| CompanyName | Adobe Systems Inc. |
| FileDescription | AcroTray |
| FileVersion | 22.1.20085.0 |
| InternalName | AcroTray |
| LegalCopyright | Copyright © Adobe Systems Inc. 1992-2022 |
| LegalTrademarks | |
| OriginalFilename | AcroTray.exe |
| PrivateBuild | |
| ProductName | AcroTray - Adobe Acrobat Distiller helper application. |
| ProductVersion | 22.1.20085.0 |
| SpecialBuild | |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
4,371,948 bytes | 4,371,968 bytes | 6.30 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
25FDB7649A191A84AEC928B59A090ECD |
.rdata |
0x0042d000 |
1,886,878 bytes | 1,887,232 bytes | 5.66 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1AA01894C073B605A1E24D3D67DE78BD |
.data |
0x005fa000 |
133,316 bytes | 89,600 bytes | 3.60 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D81A3879FA04F21F7EDDCD8417258B46 |
.pdata |
0x0061b000 |
171,360 bytes | 171,520 bytes | 6.26 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
432FA37BAB33FCFD5B441A195664CE43 |
_RDATA |
0x00645000 |
252 bytes | 512 bytes | 2.44 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0A85381B5E040D0D6FC2948A4DE3635A |
.rsrc |
0x00646000 |
9,760 bytes | 10,240 bytes | 3.35 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F75772DED47E2C3A8AF272FDDEE67103 |
.reloc |
0x00649000 |
67,724 bytes | 68,096 bytes | 5.45 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CCB8AD764BA9B153974A03D62A6A82A6 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 8 | 4,616 字节 | |
| RT_MENU | 1 | 236 字节 | |
| RT_DIALOG | 1 | 726 字节 | |
| RT_STRING | 6 | 882 字节 | |
| RT_GROUP_ICON | 6 | 148 字节 | |
| RT_VERSION | 1 | 988 字节 | |
| RT_MANIFEST | 1 | 762 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
