| 文件名 | acrotray.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.178.174 |
| 数据库版本 | 2024-06-03 13:00:31 UTC |
恶意软件家族: HackTool
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
d89bbe65ac3764c9967dc97365fcd903
|
|
| SHA1 |
06a6f4c9c4bb9ca39c81fd2b57ce4261d0a942a6
|
|
| SHA256 |
97c031ded361e98d0c4c9149a9891d21bfc7af50db7e2113bdde583ef600a633
|
|
| SHA512 |
a65b5441d2e242fedaa878c4eb613ad25a9f4bffad9ab5fcac4b92e977c571899e7b00fa3f148b682cfcd5a97126369f1072e697ee13b218fd6f7d09c059502a
|
|
| ImpHash |
4864c2ee496688649a0f4ca4c40c4094
|
| 图标 |
哈希: 51a6edb4a63a1b408b85c093c4bcc75e
模糊: 73c7a1254d535734994db0e97b076f7d dHash: 9672cccccccc7032 |
| 映像基址 | 0x140000000 |
| 入口点 | 0x1403d94e0 |
| 编译时间 | 2023-05-04 17:09:33 |
| 校验和 | 0x006fd181 (实际: 0x00707b8e) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | AcroTray.pdb |
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 | 23 库 |
| 导出 | 0 函数 |
| 资源 | 24 资源 |
| 节 | 7 节 |
| Comments | |
| CompanyName | Adobe Systems Inc. |
| FileDescription | Acrobat Licensing Service |
| FileVersion | 23.1.20174.0 |
| InternalName | AcroTray |
| LegalCopyright | Copyright © Adobe Systems Inc. 1992-2022 |
| LegalTrademarks | |
| OriginalFilename | AcroTray.exe |
| PrivateBuild | |
| ProductName | AcroTray - Adobe Acrobat Distiller helper application. |
| ProductVersion | 23.1.20174.0 |
| SpecialBuild | |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
4,821,678 bytes | 4,822,016 bytes | 6.31 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
490FEE395E150B3150FEE5453E082E76 |
.rdata |
0x0049b000 |
2,061,854 bytes | 2,062,336 bytes | 5.69 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E639FA10E578C39625D1DA93D51216BB |
.data |
0x00693000 |
188,532 bytes | 144,384 bytes | 2.70 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8FD7C699CCFF33F41B99FE26DFC6918B |
.pdata |
0x006c2000 |
194,604 bytes | 195,072 bytes | 6.24 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
15CA49DB462B326E6A87D83B29FC663A |
_RDATA |
0x006f2000 |
252 bytes | 512 bytes | 2.45 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8EF0164CEB79D9ABCB0B7402C2F3DE2F |
.rsrc |
0x006f3000 |
9,792 bytes | 10,240 bytes | 3.37 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2E41638DACE1FC4702FEDCEA05C61B32 |
.reloc |
0x006f6000 |
70,544 bytes | 70,656 bytes | 5.45 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
B95472006D681F2546F4A89358012C6F |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 8 | 4,616 字节 | |
| RT_MENU | 1 | 236 字节 | |
| RT_DIALOG | 1 | 726 字节 | |
| RT_STRING | 6 | 882 字节 | |
| RT_GROUP_ICON | 6 | 148 字节 | |
| RT_VERSION | 1 | 1,020 字节 | |
| RT_MANIFEST | 1 | 762 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
