| 文件名 | 4735fa4032a6124bfecf3b6d5ba4d3c5e8a6cee28af2698b697d740ef6627246.exe |
| 文件类型 |
Win32 DLL
|
| 魔术字节 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows |
| SSDEEP 哈希 |
49152:os61Rb/dKazj/5k023IGDVM5TfG01NxxQpGHLCu6EXMxb1+fpd:KEeBH7
|
| 扫描器版本 | 1.0.211.174 |
| 数据库版本 | 2025-03-25 05:01:09 UTC |
被 13 个安全引擎检测到 - 需要谨慎
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
0f77b77129f3083d2b082ff9d331cebc
|
|
| SHA1 |
ce45b32cde9001ce52abef37b3efab305a92ca83
|
|
| SHA256 |
4735fa4032a6124bfecf3b6d5ba4d3c5e8a6cee28af2698b697d740ef6627246
|
|
| SHA512 |
2dfea8d4ed421c9673d43358bba4ad75f278677880dc414792a861e4bf136fe6f1ab20c68e44b6e3ce8b69317f7dae09cbc5063672044b6a16dfff264048f98f
|
|
| ImpHash |
77201a301e12d5507b6dd27f027a3b26
|
| 映像基址 | 0x180000000 |
| 入口点 | 0x18006bfc8 |
| 编译时间 | 2025-03-24 14:56:39 |
| 校验和 | 0x00000000 (实际: 0x0024bfc0) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
| PDB 路径 | k9GS~!c1{]htrgj/k &Rh$U(>*Y6vbbOIb}U'puz0?j}u<#h`a2*!YM:1z^O/ZCylYmaqC9m-Rq0]Q!Xm:Q&v&SZUY*`AK#kx|;T_l0=umV |
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
10 库
ADVAPI32, bcrypt, KERNEL32, ole32, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-convert-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-stdio-l1-1-0 |
| 导出 | 508 函数 |
| 资源 | 2 资源 |
| 节 | 8 节 |
| Translation | 0x0000 0x04b0 |
| CompanyName | Ubigoxiwalafewulamiw |
| ProductName | Ezomufavugomive |
| FileDescription | Oxozoqovadidibimavu Evuganonew Okewujemagohelagateko Oqovawiyezutuvuhajef. |
| FileVersion | 1.92.396.9 |
| ProductVersion | 1.92.396.9 |
| OriginalFilename | Exacazejo |
| InternalName | Iliwusa |
| LegalCopyright | © 2025 Ubigoxiwalafewulamiw |
| Translation | 0x0000 0x04b0 |
| CompanyName | Ubigoxiwalafewulamiw |
| ProductName | Ezomufavugomive |
| FileDescription | Oxozoqovadidibimavu Evuganonew Okewujemagohelagateko Oqovawiyezutuvuhajef. |
| FileVersion | 1.92.396.9 |
| ProductVersion | 1.92.396.9 |
| OriginalFilename | Exacazejo |
| InternalName | Iliwusa |
| LegalCopyright | © 2025 Ubigoxiwalafewulamiw |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
461,048 bytes | 461,312 bytes | 6.64 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
2A8134AE9C6FE651FACA8C3CEA72479D |
.managed |
0x00072000 |
969,752 bytes | 970,240 bytes | 6.46 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
FBDDF6B27FB0DCB30E71565C89D0A6F3 |
hydrated |
0x0015f000 |
385,656 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x001be000 |
833,382 bytes | 833,536 bytes | 6.75 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C4D10F7F3F8EC3F03B36F91A4829F65D |
.data |
0x0028a000 |
66,528 bytes | 7,680 bytes | 3.64 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A56AF20D795A5C993629F5D26A51C9F3 |
.pdata |
0x0029b000 |
87,840 bytes | 88,064 bytes | 6.18 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
BE0EB5E4AEE32A518BC6070A491DBBEB |
.rsrc |
0x002b1000 |
1,856 bytes | 2,048 bytes | 3.80 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2EA13DDFFD3C957C38DDAC5CAA9F439C |
.reloc |
0x002b2000 |
1,628 bytes | 2,048 bytes | 4.79 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
D12153A6B02ADBD1BC2E35AFEFA243C1 |
2 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_VERSION | 2 | 1,744 字节 |
| 产品 | Ezomufavugomive |
| 描述 | Oxozoqovadidibimavu Evuganonew Okewujemagohelagateko Oqovawiyezutuvuhajef. |
| 文件版本 | 1.92.396.9 |
| 原始名称 | Exacazejo |
| 内部名称 | Iliwusa |
| 版权 | © 2025 Ubigoxiwalafewulamiw |
✓ 此文件已进行数字签名，证书链已验证。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
