| 在线病毒检测器 | v.1.0.205.174 |
| 数据库版本: | 2025-01-25 13:00:55 |
“Patcher”通常指的是一种用于修改或“修补”其他软件的软件或工具，通常是为了绕过许可限制或启用未经授权的使用。这些工具通常与软件盗版和非法分发相关联。
| File | roulette-moulette.exe |
| 已检查 | 2025-01-25 11:52:32 |
| MD5 | 60b042a0bcc77276b7a836a720dd8a92 |
| SHA1 | 6c803d1126e316b9f9105fe961062fd14652accb |
| SHA256 | 20bd06f7860c6f910c594a249929e32d92c4693c86285d1adf59473bb4182a17 |
| SHA512 | 06238654323ceee5cc03e4a2dfe246da0961ac778d8b5ec9978b054fccb25397a944792b8b20bae0e1b1ddb0b8e2f858e1d2004f1262ce198dad4aece51efd5f |
| Imphash | 25d926e61b8f38d8e2275dca2aa76a0f |
| File Size | 8982528 bytes |
Gridinsoft能够识别并消除Hack.Win32.Patcher.cld，无需进一步的用户干预。
 |
de260fe594950b8926521b1bab0668b5 c76477f9a71b1a4bc9fdd84da409a8e8 70f4fcfcbc96fc1c |
| Image Base: | 0x00400000 |
| Entry Point: | 0x007bd94c |
| Compilation: | 2012-03-16 06:57:33 |
| Checksum: | 0x00000000 (Actual: 0x0089fa15) |
| OS Version: | 5.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 14 |
| Imports: | KERNEL32, advapi32, comctl32, gdi32, gdiplus, msimg32, ole32, oleaut32, olepro32, shell32, user32, version, winspool, |
| Exports: | 0 |
| Resources: | 221 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| 0x00001000 | 0x003bb000 | 0x003bb000 | 2cae8991768d55386d287b70cb7e1f05 | 6.42 | |
| 0x003bc000 | 0x00002000 | 0x00002000 | e523ac2746a351a49b4ba8d66022c3c1 | 5.47 | |
| 0x003be000 | 0x0000a000 | 0x0000a000 | 4eb613f57511ab7cbf250a3a248e32bd | 5.33 | |
| 0x003c8000 | 0x00008000 | 0x00008000 | bb7df04e1b0a2570657527a7e108ae23 | 0.00 | |
| 0x003d0000 | 0x00006000 | 0x00006000 | 1158ebf2e54f136f46cf50ebd6cdfae5 | 1.00 | |
| 0x003d6000 | 0x00001000 | 0x00001000 | 92be41a3a4c719c10cceaa96e902fb97 | 1.05 | |
| 0x003d7000 | 0x00001000 | 0x00001000 | 620f0b67a91f7f74151bc5be745b7110 | 0.00 | |
| 0x003d8000 | 0x00001000 | 0x00001000 | 620f0b67a91f7f74151bc5be745b7110 | 0.00 | |
| 0x003d9000 | 0x00044000 | 0x00044000 | 3f990b7be663e47382d3af1e45cef540 | 0.00 | |
| 0x0041d000 | 0x000c8000 | 0x000c8000 | 22a9309c14b70b6a080ed4421bc501a3 | 5.31 | |
| .rsrc | 0x004e5000 | 0x0001f000 | 0x0001f000 | b9983cd3875cff6a0eeb56b30a5fddae | 4.39 |
| 0x00504000 | 0x002b8000 | 0x002b8000 | 62c27f2dd2b8997143bc995c4226de0e | 4.39 | |
| .data | 0x007bc000 | 0x000d1000 | 0x000d1000 | 794ebd1120972ebbd6887b5fa946759e | 7.94 |
| .mackt | 0x0088d000 | 0x00004000 | 0x00004000 | 6a2edd3044ef5c8d9e858be7ea6ffff5 | 4.59 |
