| 在线病毒检测器 | v.1.0.191.174 |
| 数据库版本: | 2024-09-29 07:00:25 |
| File | Youtube Watchtime Machine.exe |
| 已检查 | 2024-09-29 04:31:28 |
| MD5 | 7abe10d5c1294bfafdf269c9ddae4325 |
| SHA1 | f79b2f3f3c81a47cad3ce9e4396a2ea2122f67d3 |
| SHA256 | 331dbe58ad26b2b9f9b900205bb0fa7be7feb419cbdd1ab6184f514a42105333 |
| SHA512 | d54bc60ee62f6e0dcc5f4bfc7e3af4741ee3d3db82c57ac4f3149bc3750755003b2281eee8828f9eb93aa2ef890468796affc270dba7a02d5df78e89877fe133 |
| Imphash | af02ce4a4548e322a95ca15cb9608683 |
| File Size | 524155 bytes |
Gridinsoft能够识别并消除Worm.Win32.Autorun.vb，无需进一步的用户干预。
| FileDescription | |
| FileVersion | 3, 3, 0, 0 |
| CompiledScript | AutoIt v3 Script : 3, 3, 0, 0 |
| Translation | 0x0809 0x04b0 |
 |
33bcfebe5086e6424e1ddb3be0d0e533 d1dc3a18b6b558afd1eb497640da7388 b1d0b26869b2d471 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004af1e0 |
| Compilation: | 2008-12-24 09:00:07 |
| Checksum: | 0x00000000 (Actual: 0x00081351) |
| OS Version: | 5.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 3 |
| Imports: | KERNEL32, ADVAPI32, COMCTL32, COMDLG32, GDI32, MPR, ole32, OLEAUT32, PSAPI, SHELL32, USER32, USERENV, VERSION, WININET, WINMM, WSOCK32, |
| Exports: | 0 |
| Resources: | 26 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| UPX0 | 0x00001000 | 0x0006f000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| UPX1 | 0x00070000 | 0x00040000 | 0x0003f400 | a43a6dd5ace3f9436d039504b3468877 | 7.93 |
| .rsrc | 0x000b0000 | 0x00008000 | 0x00007600 | 716c072361e2413321af8dab262e4a8a | 5.88 |
