| 在线病毒检测器 | v.1.0.206.174 |
| 数据库版本: | 2025-01-30 14:01:16 |
| File | nslookup.exe |
| 已检查 | 2025-01-30 12:50:04 |
| MD5 | 10fac41c9075d456abfba9cd17c9a177 |
| SHA1 | 5b260e0bddbbf3553a70df634df521bf30d3ace4 |
| SHA256 | 123ef423b3b4623c02d60c683f5c0bcfef232400a625fc172b7fab04a97eb677 |
| SHA512 | 7d59512b39ea152aa9220f048b7e160e67150634457dba1885415f1b8c0dfd01efee8402c317bca778a6e024a6709bf2dd96428f2eaaf1aff93304f8f32755da |
| Imphash | ec3e3c718c086fab4f7f35008a5e9116 |
| File Size | 106496 bytes |
Gridinsoft反恶意软件具有更强大的病毒扫描引擎。我们建议使用它进行对受感染系统的更精确诊断。这个简要指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
| CompanyName | Microsoft Corporation |
| FileDescription | nslookup |
| FileVersion | 10.0.26100.1150 (WinBuild.160101.0800) |
| InternalName | nslookup.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | nslookup.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.26100.1150 |
| Translation | 0x0409 0x04b0 |
 |
e59fd78b3f239ada0f5aca8943e873f1 4101a162b85d974ba2f4f492484fcd5e f8697868b2f069d4 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x140001300 |
| Compilation: | 2064-09-17 23:47:14 |
| Checksum: | 0x00022ad0 (Actual: 0x00022ad0) |
| OS Version: | 10.0 |
| PDB Path: | nslookup.pdb |
| PEiD: | PE32+ executable (console) x86-64, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 8 |
| Imports: | msvcrt, api-ms-win-core-heap-l1-1-0, WS2_32, CRYPT32, api-ms-win-core-errorhandling-l1-1-0, DNSAPI, api-ms-win-core-localization-l1-2-0, api-ms-win-core-registry-l1-1-0, api-ms-win-core-processenvironment-l1-1-0, MSWSOCK, api-ms-win-core-heap-l2-1-0, api-ms-win-core-synch-l1-2-0, api-ms-win-core-rtlsupport-l1-1-0, api-ms-win-core-processthreads-l1-1-0, api-ms-win-core-libraryloader-l1-2-0, api-ms-win-core-profile-l1-1-0, api-ms-win-core-sysinfo-l1-1-0, ntdll, api-ms-win-core-delayload-l1-1-1, api-ms-win-core-delayload-l1-1-0, api-ms-win-core-apiquery-l1-1-0, |
| Exports: | 0 |
| Resources: | 6 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0000ad40 | 0x0000b000 | 40453c485e20f23c2471cfbc452d3575 | 6.19 |
| fothk | 0x0000c000 | 0x00001000 | 0x00001000 | 4ebfe1e13f09818d4b79dfa90e91663d | 0.02 |
| .rdata | 0x0000d000 | 0x00004f60 | 0x00005000 | 748b64f4b744b541d37d1d5614a47a3d | 4.83 |
| .data | 0x00012000 | 0x00005700 | 0x00004000 | cd9948a20ba8f6082d704acc97e7f77f | 0.69 |
| .pdata | 0x00018000 | 0x00000438 | 0x00001000 | a686df1e10efa631f86dc76dc9a1d6cb | 1.60 |
| .didat | 0x00019000 | 0x00000010 | 0x00001000 | 90ca4f5fc6f4b814f106c6dffc54772d | 0.01 |
| .rsrc | 0x0001a000 | 0x00000d10 | 0x00001000 | b30ad791ab552aa344eb7de3329b0c56 | 3.56 |
| .reloc | 0x0001b000 | 0x000001b0 | 0x00001000 | dc0e09e2a98a430a99834e2b600e81a7 | 0.81 |
