| 文件名 | svchost.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.143.174 |
| 数据库版本 | 2023-10-23 22:02:24 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
d4461ec74a79986aaab9ef3312c961f4
|
|
| SHA1 |
e96d28f9c234f07c8f8cd9c124aafaef75e452a2
|
|
| SHA256 |
dab2ad1e12aebebceef118504165130e0585faae88d56cfc06b3905bdb18d021
|
|
| SHA512 |
3b3a20282da7fc27ef52657b26249a90f4c78fbf498ebe901c76424a64a028106b99cdc4554cb1173e177745d939036caac48d3f14000c112c45cc55c8c76721
|
|
| ImpHash |
247b9220e5d9b720a82b2c8b5069ad69
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x140005080 |
| 编译时间 | 1979-08-31 23:20:03 |
| 校验和 | 0x0001c4b3 (实际: 0x0001c4b3) |
| 操作系统版本 | 10.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | svchost.pdb |
| 数字签名 | OK |
| 导入 | 30 库 |
| 导出 | 0 函数 |
| 资源 | 3 资源 |
| 节 | 7 节 |
| Microsoft Windows Production PCA 2011 | Microsoft Corporation (US) |
| Microsoft Root Certificate Authority 2010 | Microsoft Corporation (US) |
| CompanyName | Microsoft Corporation |
| FileDescription | Host Process for Windows Services |
| FileVersion | 10.0.19041.3570 (WinBuild.160101.0800) |
| InternalName | svchost.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | svchost.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.19041.3570 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
23,533 bytes | 23,552 bytes | 5.93 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
390299E7A766ED82CFFC69882685DAFB |
.rdata |
0x00007000 |
14,294 bytes | 14,336 bytes | 4.55 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
68F71A22EA3EC79E56D0EC47DACD9E32 |
.data |
0x0000b000 |
2,168 bytes | 512 bytes | 0.38 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
DAE690B4E58A3520398EFFC27D07A210 |
.pdata |
0x0000c000 |
1,560 bytes | 2,048 bytes | 3.60 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2D7D304279E9A94A3F469C5BA4F807A6 |
.didat |
0x0000d000 |
48 bytes | 512 bytes | 0.35 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BB85728D3111674F29BB16869AB2EB4C |
.rsrc |
0x0000e000 |
2,080 bytes | 2,560 bytes | 3.75 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
22B917C8DA55B037A2227BD69D4DE8F4 |
.reloc |
0x0000f000 |
108 bytes | 512 bytes | 1.28 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
052AE962C37420554FBEB603EDA9F9FB |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| MUI | 1 | 200 字节 | |
| RT_VERSION | 1 | 944 字节 | |
| RT_MANIFEST | 1 | 690 字节 |
| 主题 |
Microsoft Windows Publisher Microsoft Corporation US |
| 颁发者 | Microsoft Windows Production PCA 2011 |
| 序列号 | 1137338010857634205578978592502211937346520144 |
| 主题 |
Microsoft Windows Production PCA 2011 Microsoft Corporation US |
| 颁发者 | Microsoft Root Certificate Authority 2010 |
| 序列号 | 458207203049816025202696 |
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
