| 文件名 | bills2025.exe |
| 文件类型 |
Win32 EXE
|
| 魔术字节 | PE32+ executable (GUI) x86-64, for MS Windows |
| SSDEEP 哈希 |
49152:DCiAb9key/HOSt9/uW2P5asIOd0S0IBRQVvOIQrDMsjP4yIJgieTgueLJ93Ij/hs:DpsZZwbJFeg/3SP
|
| 扫描器版本 | 1.0.217.174 |
| 数据库版本 | 2025-05-23 04:00:31 UTC |
被 11 个安全引擎检测到 - 需要谨慎
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
58253bef795c914bb2dca89f74ae0aec
|
|
| SHA1 |
ab517aa83178957381a9f9317c15901f4ee79cc4
|
|
| SHA256 |
7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42
|
|
| SHA512 |
49b0d94812f6a0fd710db9e97fd48413b1002371358bfe3fa2b577773d4f7b9f716dc12191f3f1b76d142fa304f7b4e2a2092e3d6a67be01a546debf9ce62eb4
|
|
| ImpHash |
1c0dd8cf4de1b0654b64d6ba3da24259
|
| 图标 |
哈希: 5832e4c54eb4a26e8dd1d8793af012bf
模糊: ad9a298e845344f1225a1ce325c84b76 dHash: bcf0e4ccccced4c4 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x0086b130 |
| 编译时间 | 2025-05-22 22:41:22 |
| 校验和 | 0x00000000 (实际: 0x0073ea76) |
| 操作系统版本 | 5.2 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
10 库
oleaut32, advapi32, user32, kernel32, gdi32, version, ole32, comctl32, shell32, winspool |
| 导出 | 3 函数 |
| 资源 | 70 资源 |
| 节 | 11 节 |
| CompanyName | Glarysoft Ltd |
| FileDescription | Glary Utilities 5 |
| FileVersion | 5, 71, 0, 92 |
| InternalName | Integrator.exe |
| LegalCopyright | Copyright (c) 2003-2017 Glarysoft Ltd |
| OriginalFilename | Integrator.exe |
| ProductName | Glary Utilities |
| ProductVersion | 5, 0, 0, 0 |
| Translation | 0x0009 0x03a8 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
4,628,928 bytes | 4,628,992 bytes | 5.73 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
AC3F3AF1EBD578CA1CFEA098B4D748C8 |
.data |
0x0046c000 |
406,240 bytes | 406,528 bytes | 4.72 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2D98B9C5735706F7B905E29645F67009 |
.bss |
0x004d0000 |
43,612 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x004db000 |
18,734 bytes | 18,944 bytes | 4.34 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
109042BFBE725B766CE05B60519FBE85 |
.didata |
0x004e0000 |
3,644 bytes | 4,096 bytes | 3.04 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
47F42770BB39A635F28FC2264180EF81 |
.edata |
0x004e1000 |
151 bytes | 512 bytes | 1.86 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4FA654D76133B3152BFCA008E415FB6A |
.tls |
0x004e2000 |
880 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x004e3000 |
109 bytes | 512 bytes | 1.37 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4F0F932AA023E357610BE0D8D290D834 |
.reloc |
0x004e4000 |
243,416 bytes | 243,712 bytes | 6.48 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
DA56B5C81CC1647948209D83EEA9406F |
.pdata |
0x00520000 |
269,004 bytes | 269,312 bytes | 6.39 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
ADB688B5154FD0115DAB79343C01BA64 |
.rsrc |
0x00562000 |
1,992,192 bytes | 1,992,192 bytes | 6.76 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
23AB320CBE2390CC92F139B5C646494B |
1 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_CURSOR | 7 | 2,156 字节 | |
| RT_ICON | 5 | 50,512 字节 | |
| RT_STRING | 45 | 53,452 字节 | |
| RT_RCDATA | 4 | 1,881,297 字节 | |
| RT_GROUP_CURSOR | 7 | 140 字节 | |
| RT_GROUP_ICON | 1 | 76 字节 | |
| RT_VERSION | 1 | 788 字节 |
| 产品 | Glary Utilities |
| 描述 | Glary Utilities 5 |
| 文件版本 | 5, 71, 0, 92 |
| 原始名称 | Integrator.exe |
| 内部名称 | Integrator.exe |
| 版权 | Copyright (c) 2003-2017 Glarysoft Ltd |
✓ 此文件已进行数字签名，证书链已验证。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
