文件名 | httrack_x64-3.49.2.exe |
文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
扫描器版本 | 1.0.178.174 |
数据库版本 | 2024-05-30 16:00:32 UTC |
我们的扫描器未检测到威胁
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
2e1d04910dfaa3170b66b94b9d44d56a
|
|
SHA1 |
019b8b956910529218e92f2a92b14cd159e82095
|
|
SHA256 |
ce12f0e0cd3a3807463c8c538808d613798b11d961a94eabf0ba9d67851106f3
|
|
SHA512 |
ebf16f8d687b4dd409cf8d5ef912623161a0b2023c345d319b93ded02e5d2e5acc4cd8d8b9615a2d2b60493591a4faa5559e9f24bc994b46413d0a10dc85931d
|
|
ImpHash |
884310b1928934402ea6fec1dbd3cf5e
|
图标 |
哈希: d0e5e6f6eba2385179e1440847faa4ea
模糊: 501a9f9c9947cded268edde0ea77ac61 dHash: e7c49cbc7c881c4c |
映像基址 | 0x00400000 |
入口点 | 0x0040a5f8 |
编译时间 | 1992-06-19 22:22:17 |
校验和 | 0x00452c96 (实际: 0x00452c96) |
操作系统版本 | 1.0 |
PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
数字签名 | OK |
导入 |
5 库
kernel32, user32, oleaut32, advapi32, comctl32 |
导出 | 0 函数 |
资源 | 14 资源 |
节 | 8 节 |
Comments | This installation was built with Inno Setup. |
CompanyName | HTTrack |
FileDescription | WinHTTrack Website Copier Setup |
FileVersion | |
LegalCopyright | |
ProductName | WinHTTrack Website Copier (x64) |
ProductVersion | 3.49.2 |
Translation | 0x0000 0x04b0 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
CODE |
0x00001000 |
40,240 bytes | 40,448 bytes | 6.63 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
C3BD95C4B1A8E5199981E0D9B45FD18C |
DATA |
0x0000b000 |
592 bytes | 1,024 bytes | 2.75 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1EE71D84F1C77AF85F1F5C278F880572 |
BSS |
0x0000c000 |
3,724 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x0000d000 |
2,384 bytes | 2,560 bytes | 4.43 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BB5485BF968B970E5EA81292AF2ACDBA |
.tls |
0x0000e000 |
8 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x0000f000 |
24 bytes | 512 bytes | 0.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
9BA824905BF9C7922B6FC87A38B74366 |
.reloc |
0x00010000 |
2,244 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00011000 |
14,552 bytes | 14,848 bytes | 4.64 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
25DBB156AA255A15F7C1BBDD0C3A52AB |
1 检测到较高熵(≥6.5)的节 - 可能存在压缩
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
RT_ICON | 4 | 8,096 字节 | |
RT_STRING | 6 | 2,710 字节 | |
RT_RCDATA | 1 | 44 字节 | |
RT_GROUP_ICON | 1 | 62 字节 | |
RT_VERSION | 1 | 1,268 字节 | |
RT_MANIFEST | 1 | 1,512 字节 |
产品 | WinHTTrack Website Copier (x64) |
描述 | WinHTTrack Website Copier Setup |
签名日期 | 09:02 AM 05/20/2017 (3016 天前) |
验证状态 | Signed |
签名者 | Open Source Developer, Xavier Roche; Certum Code Signing CA SHA2; Certum Trusted Network CA |
副签名者 | Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA |
7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
6B 32 6A 0F 03 28 D3 7A 1D 53 0B FD 23 BD 48 E2
03 04 E5 3E 0F 9B 76 2F 0E EB 0F 5F 7E 3B 54 9D
✓ 此文件已进行数字签名,证书链已验证。
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要