| 文件名 | SIHClient.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.143.174 |
| 数据库版本 | 2023-10-15 14:06:27 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
44e06bcc4c5ac47cbb78c4b2d9b74e45
|
|
| SHA1 |
2aff786bddcdf862ba838c2c16d838bd826432f9
|
|
| SHA256 |
b984069241e1f01be61824cc12daab72806348e0e17f1bf0b17eef2f81d97d12
|
|
| SHA512 |
0eb3524ab9185998218058fb5ca72bc8b76e144fd2f619dd9e905dc1cb068db607121c7c11cdbb23759f3d623a76b9ca9bd23695df761b10924a0f37b844d4bb
|
|
| ImpHash |
461aae91db04cca32d2817492a0a6120
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x14003dca0 |
| 编译时间 | 2062-04-16 19:05:20 |
| 校验和 | 0x00074e55 (实际: 0x00074e55) |
| 操作系统版本 | 10.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | SIHClient.pdb |
| 数字签名 | OK |
| 导入 | 41 库 |
| 导出 | 0 函数 |
| 资源 | 2 资源 |
| 节 | 8 节 |
| Microsoft Windows Production PCA 2011 | Microsoft Corporation (US) |
| Microsoft Root Certificate Authority 2010 | Microsoft Corporation (US) |
| CompanyName | Microsoft Corporation |
| FileDescription | SIH Client |
| FileVersion | 1023.910.1172.0 |
| InternalName | SIH Client |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | sihclient.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 1023.910.1172.0 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
291,148 bytes | 291,328 bytes | 6.41 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
F4F306E3B3FAF0DFBCC4C67448A7255D |
.rdata |
0x00049000 |
100,928 bytes | 101,376 bytes | 4.98 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C7E38E1227B8380DDB706D1BB9A96CDA |
.data |
0x00062000 |
6,460 bytes | 3,584 bytes | 3.68 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
19D88D096549F3C643B0A53A4E4D34EB |
.pdata |
0x00064000 |
12,144 bytes | 12,288 bytes | 5.65 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C6328C61CAFB42504CC61B463D5D2FE4 |
.didat |
0x00067000 |
960 bytes | 1,024 bytes | 3.07 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
FD7199D91E3FAA8ACCE490E931A693B4 |
_RDATA |
0x00068000 |
252 bytes | 512 bytes | 2.56 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
746F6659EA3ADB05DD8E2B0D1193CDE4 |
.rsrc |
0x00069000 |
1,232 bytes | 1,536 bytes | 2.82 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B1F5FC8366898C60D0537B0E89E8771D |
.reloc |
0x0006a000 |
1,156 bytes | 1,536 bytes | 4.56 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
10330EB6AADEE69B4608F2A2F9CF1DBE |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| MUI | 1 | 200 字节 | |
| RT_VERSION | 1 | 852 字节 |
| 主题 |
Microsoft Windows Publisher Microsoft Corporation US |
| 颁发者 | Microsoft Windows Production PCA 2011 |
| 序列号 | 1137338010865653822965879988110177655691674705 |
| 主题 |
Microsoft Windows Production PCA 2011 Microsoft Corporation US |
| 颁发者 | Microsoft Root Certificate Authority 2010 |
| 序列号 | 458207203049816025202696 |
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
