| 文件名 | Launcher.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
| 扫描器版本 | 1.0.210.174 |
| 数据库版本 | 2025-03-05 01:00:24 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
df1902b78fe61bbd62e8973115f59027
|
|
| SHA1 |
fc243187eac650f80b98a0a67ea10ea5d0fc6956
|
|
| SHA256 |
fd5e114637c0ba0dc794e57db67eb8a8d593bf0915288efd1b49268292b08e68
|
|
| SHA512 |
b7240001cbc531a857ab4d03884cda6725028f848a6ae709686cfa62db5521c9bcb0ecbef678253a7d3c2565a63611e37a0c9b1321cac08d3b0067fb1979ea0f
|
|
| ImpHash |
c6605489af3a69f5b0b7fe78ab5b5485
|
| 图标 |
哈希: b7db8eb545c6323c8fbffe4748e915cf
模糊: 7c84172860ff592c7f57493601b4bd32 dHash: 78fcbe8ccea2c061 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x004021a8 |
| 编译时间 | 2020-11-09 13:45:48 |
| 校验和 | 0x00000000 (实际: 0x003c0cad) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 | 11 库 |
| 导出 | 7 函数 |
| 资源 | 58 资源 |
| 节 | 9 节 |
| FileDescription | Compact Customizable CD Menu |
| FileVersion | 2.0.0.700 |
| InternalName | CompactAutoRunner |
| LegalCopyright | Copyright ©2020 Carroll Dearstone |
| OriginalFilename | CompactAutoRunner.exe |
| ProgramID | com.embarcadero.CompactAutoRunner |
| ProductName | CompactAutoRunner |
| ProductVersion | 2.0.0.700 |
| Translation | 0x0409 0x04e4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
3,239,936 bytes | 3,239,936 bytes | 6.53 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
91082286EDCFA1DE874FEACE7178A26C |
.data |
0x00318000 |
266,240 bytes | 87,040 bytes | 5.42 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
FFAE254E7CE26C3ABF07913663FFD1AA |
.tls |
0x00359000 |
4,096 bytes | 512 bytes | 0.05 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
5DD4F4601BBB82097B2700191B0255D8 |
.rdata |
0x0035a000 |
4,096 bytes | 512 bytes | 0.21 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
541B5CE0CC43F791DE66506F747552A0 |
.idata |
0x0035b000 |
16,384 bytes | 14,848 bytes | 5.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D59D589F91DDFAA8F9656966CD623444 |
.didata |
0x0035f000 |
4,096 bytes | 2,560 bytes | 4.35 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
20BBC95DAF86DF8B2E06CC3E41DE82BB |
.edata |
0x00360000 |
4,096 bytes | 512 bytes | 3.02 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
6D9D8CB866420C383444B50D0E1AB2CF |
.rsrc |
0x00361000 |
311,296 bytes | 309,760 bytes | 6.99 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
366971093261C828DBA0F4B204F5F35A |
.reloc |
0x003ad000 |
258,048 bytes | 258,048 bytes | 6.73 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ
|
4A9DF4199C76FE82516F2E6C7B63850C |
3 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_CURSOR | 8 | 2,464 字节 | |
| RT_ICON | 8 | 271,437 字节 | |
| RT_STRING | 28 | 27,752 字节 | |
| RT_RCDATA | 3 | 1,930 字节 | |
| RT_GROUP_CURSOR | 8 | 160 字节 | |
| RT_GROUP_ICON | 1 | 118 字节 | |
| RT_VERSION | 1 | 848 字节 | |
| RT_MANIFEST | 1 | 1,695 字节 |
| 产品 | CompactAutoRunner |
| 描述 | Compact Customizable CD Menu |
| 文件版本 | 2.0.0.700 |
| 原始名称 | CompactAutoRunner.exe |
| 内部名称 | CompactAutoRunner |
| 版权 | Copyright ©2020 Carroll Dearstone |
✓ 此文件已进行数字签名，证书链已验证。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
