| 在线病毒检测器 | v.1.0.183.174 |
| 数据库版本: | 2024-08-05 21:00:33 |
这是一个通用检测名称，用于识别具有特洛伊木马特征的潜在有害或可疑文件或程序。这是一种伪装成合法或良性程序但包含恶意代码或功能的恶意软件。
| File | AimFury™.exe |
| 已检查 | 2024-08-05 19:04:04 |
| MD5 | 1a3d9c72a38acc8beefca80f67ab0908 |
| SHA1 | ee86f2337970bf519d0b84af7fa7a78aabe29371 |
| SHA256 | 5774a907f209476fa79a3709791c9421875c16ebac1c4cede99bbcbc60fec685 |
| SHA512 | 1059ce673495c271484442aa32b57c494a37f7942e6472dcd21029d8a75ebacccddbb992ca3f593121c7888bf363703796bc0161e7a7913f8748c51c081d6812 |
| Imphash | ac3c6fd357d51c8e5c1264fe730abdac |
| File Size | 90996441 bytes |
Gridinsoft能够识别并消除Backdoor.Win32.Gen.ns，无需进一步的用户干预。
| CompanyName | Unknown |
| FileDescription | Installation |
| FileVersion | 1.0.0.0 |
| LegalCopyright | (c) |
| ProductName | Setup |
| ProductVersion | 1.0.0.0 |
| ProgramID | com.embarcadero.Setup |
| Translation | 0x0409 0x04e4 |
 |
b05afd04882d2fd936fe53232c4872a7 f63c14224a043a153e02fa4221849f6d 30f0f0b2b296f030 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00666ce0 |
| Compilation: | 2023-01-09 03:53:03 |
| Checksum: | 0x00000000 (Actual: 0x056cb469) |
| OS Version: | 6.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 11 |
| Imports: | wininet, winspool, comdlg32, comctl32, shell32, user32, version, oleaut32, advapi32, msvcrt, kernel32, ole32, gdi32, |
| Exports: | 3 |
| Resources: | 84 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x002631c0 | 0x00263200 | beeaa2be3e1e8fdc3798eabb483d7657 | 6.48 |
| .itext | 0x00265000 | 0x00001d50 | 0x00001e00 | 57c41d5453c6ae40e5dfa6b4479b046e | 6.31 |
| .data | 0x00267000 | 0x0000a584 | 0x0000a600 | ebbb56d61f6d82e37c8acc034abd9fda | 6.20 |
| .bss | 0x00272000 | 0x00006e8c | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .idata | 0x00279000 | 0x0000393e | 0x00003a00 | 01605f3352920cf933e5b2ef96626907 | 5.26 |
| .didata | 0x0027d000 | 0x00000cbc | 0x00000e00 | 21a59b6e69b0ca4fdcc69514c00fb45f | 4.14 |
| .edata | 0x0027e000 | 0x00000097 | 0x00000200 | 075ecc59cbdd0ba98d3d73103ed83cae | 1.85 |
| .tls | 0x0027f000 | 0x00000054 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rdata | 0x00280000 | 0x0000005d | 0x00000200 | eaa6e6bad2590d62d8ed589e13796b9e | 1.38 |
| .reloc | 0x00281000 | 0x00034a60 | 0x00034c00 | 66ff852918622f50261c07492bedd57e | 6.72 |
| .rsrc | 0x002b6000 | 0x00029780 | 0x00029800 | 5ac258c245aa4e3ae6339b70ebfec6d6 | 7.08 |
