| 在线病毒检测器 | v.1.0.192.174 |
| 数据库版本: | 2024-10-12 15:00:28 |
这是一个通用检测名称，用于识别具有特洛伊木马特征的潜在有害或可疑文件或程序。这是一种伪装成合法或良性程序但包含恶意代码或功能的恶意软件。
| File | Adobe Activator.exe |
| 已检查 | 2024-10-12 13:05:24 |
| MD5 | 0f286d1109541a110d39fabd38b94ee3 |
| SHA1 | c1169dde527abdf1b6c7738265ca4724f48b9411 |
| SHA256 | a19efe342f93337b616fa7a76d133801204b7fee674b1ff62786c9cd026e8eac |
| SHA512 | 02d60aa09f18c28cdd1ab2e9cb1834c804f1586bcb7b6d70b621f3bc274ebd25f42ae1568180d36dd449d6d86220a84d18aa287ce99f3cad733be1828d6edc79 |
| Imphash | 9f1eb76ab6beb10e56762f8019d97227 |
| File Size | 2800960 bytes |
Gridinsoft能够识别并消除Spy.Win32.Gen.tr，无需进一步的用户干预。
| Translation | 0x0409 0x04b0 |
| CompanyName | Neil Hodgson [email protected] |
| FileDescription | SciTE Lite - a Scintilla based Text Editor modified by Jos for AutoIt3. |
| FileVersion | 4.4.6 |
| InternalName | SciTE |
| LegalCopyright | Copyright 1998-2020 by Neil Hodgson |
| OriginalFilename | SciTE.EXE |
| ProductName | SciTE |
| ProductVersion | 4.4.6 |
 |
1f1c2b9058e64b60bf3da6868dcd109d 3b5d3c7d207e37dceeedd301e35e2e58 0000000000000000 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0059ea9c |
| Compilation: | 2022-09-19 18:35:48 |
| Checksum: | 0x085f640a (Actual: 0x002ad70b) |
| OS Version: | 5.1 |
| PDB Path: | C:\Data\svn\autoit\branch_3.3.16\bin\SciTE\SciTE.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The expected hash does not match the digest in SpcInfo |
| Sections: | 5 |
| Imports: | IMM32, MSIMG32, COMCTL32, UxTheme, KERNEL32, USER32, GDI32, COMDLG32, ADVAPI32, SHELL32, ole32, OLEAUT32, MSVCP140, VCRUNTIME140, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-convert-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-time-l1-1-0, api-ms-win-crt-filesystem-l1-1-0, api-ms-win-crt-environment-l1-1-0, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-utility-l1-1-0, |
| Exports: | 150 |
| Resources: | 46 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x001ab765 | 0x001ab800 | 1b1168b330e7f9150e836c05dffcf2b2 | 6.63 |
| .rdata | 0x001ad000 | 0x00045ed2 | 0x00046000 | c620e9c1358dec994d346d5ec97f18f9 | 5.56 |
| .data | 0x001f3000 | 0x00010060 | 0x0000fc00 | ca7a852e7f3f4d04c757a15e362c6f8d | 4.83 |
| .rsrc | 0x00204000 | 0x0003b923 | 0x0003ba00 | 66e9bba844b106e1dcb03029e67d1104 | 4.47 |
| .reloc | 0x00240000 | 0x0006c200 | 0x0006c200 | 2da3a79f3ac3d9b8090b0ed3bb8e5751 | 7.50 |
