| 文件名 | NewChipstars Skype.com |
| 文件类型 |
Win32 EXE
|
| 魔术字节 | PE32 executable (GUI) Intel 80386, for MS Windows |
| SSDEEP 哈希 |
49152:a21mFjbTkUPWR15HZShCpPx6x8L6jX1qogfMEcNZFJZUQD69w0ww5:a21MfTtP43cJX1dgyJOQe9wTE
|
| 扫描器版本 | 1.0.166.174 |
| 数据库版本 | 2024-02-22 15:00:27 UTC |
被 7 个安全引擎检测到 - 需要谨慎
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
ece14d7083ef06d52ffa65f62cfd0a33
|
|
| SHA1 |
a3703c19dfd8cf3f7b2aed86abf9b10c5f1f228a
|
|
| SHA256 |
fe2850e35930a2543975a5ba0de31937cd3967eb90b6f6834b43930244a195ae
|
|
| SHA512 |
d50a1656d0fe1f70d52fd2ecc1f4abaec465a3402da60f438b2f8ef49dcdae2cda55204a3035d951aa6428e019779433232d17f942824a5adee5a541aafbaa52
|
|
| ImpHash |
ca2ed0b01e23f4e23e30dd15bdc59373
|
| 图标 |
哈希: 8441256cf53e58887f3f5856b1d7d7eb
模糊: 9f4341933d3836964ce2c77f964446e8 dHash: f8f89c9ed193fce4 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x00675dcc |
| 编译时间 | 2024-01-11 07:55:06 |
| 校验和 | 0x00000000 (实际: 0x0039b3d4) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 数字签名 | The PE file does not contain a certificate table. |
| 导入 | 13 库 |
| 导出 | 3 函数 |
| 资源 | 91 资源 |
| 节 | 11 节 |
| CompanyName | Adobe Systems Incorporated |
| FileDescription | Acrobroker Sqlite Setup |
| FileVersion | 23.6.20320.0 |
| LegalCopyright | Adobe Systems Incorporated |
| ProductName | Acrobroker Sqlite |
| ProductVersion | 23.6.20320.0 |
| Comments | This installation was built with Actual Installer: http://www.actualinstaller.com |
| ProgramID | com.embarcadero.Setup |
| Translation | 0x0409 0x04e4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
2,567,364 bytes | 2,567,680 bytes | 6.48 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8BBCE10709264CCFFF2861ADF810D8D9 |
.itext |
0x00274000 |
7,740 bytes | 8,192 bytes | 6.17 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
AC23FF2CCDE77A03A34194EC3CC22EBE |
.data |
0x00276000 |
42,848 bytes | 43,008 bytes | 6.17 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
5D50EBCA00744F7A2977B08A9D217CFF |
.bss |
0x00281000 |
29,376 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x00289000 |
14,896 bytes | 15,360 bytes | 5.19 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
C1997A75464084A17BDEEC34FF7E2713 |
.didata |
0x0028d000 |
3,298 bytes | 3,584 bytes | 4.17 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
5C6E479927A8A7633685D9BED70444C7 |
.edata |
0x0028e000 |
151 bytes | 512 bytes | 1.84 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8AD40748A4E60A51C481A5D4E1BDB6A7 |
.tls |
0x0028f000 |
84 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x00290000 |
93 bytes | 512 bytes | 1.37 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E2D254D8EF6ED4CACE1B3B4D60B685F5 |
.reloc |
0x00291000 |
220,416 bytes | 220,672 bytes | 6.72 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
3290DD7BC3932710F598DF69CE74B54C |
.rsrc |
0x002c7000 |
292,652 bytes | 292,864 bytes | 6.82 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A9C53AC07FB1FF8F119CD53C2C3BB8B1 |
2 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_CURSOR | 7 | 2,156 字节 | |
| RT_BITMAP | 11 | 2,304 字节 | |
| RT_ICON | 9 | 162,517 字节 | |
| RT_STRING | 27 | 25,176 字节 | |
| RT_RCDATA | 27 | 92,136 字节 | |
| RT_GROUP_CURSOR | 7 | 140 字节 | |
| RT_GROUP_ICON | 1 | 132 字节 | |
| RT_VERSION | 1 | 940 字节 | |
| RT_MANIFEST | 1 | 1,670 字节 |
| 产品 | Acrobroker Sqlite |
| 描述 | Acrobroker Sqlite Setup |
| 文件版本 | 23.6.20320.0 |
| 版权 | Adobe Systems Incorporated |
✓ 此文件已进行数字签名，证书链已验证。
The PE file does not contain a certificate table.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
