| 在线病毒检测器 | v.1.0.191.174 |
| 数据库版本: | 2024-09-30 15:00:33 |
此文件需要进行更多的潜在威胁检查。根据可疑指标，我们将很快将其添加到我们的病毒数据库中。
| File | astro injector.exe |
| 已检查 | 2024-09-30 12:59:42 |
| 类型 | Win32 EXE |
| 威胁 | Trojan |
| MD5 | 45988c9de2a6bf18a42638d33a57fac9 |
| SHA1 | effbbc98b7bec2df40faeb8bab5428fb20624293 |
| SHA256 | 708095f325623bf03f0fad5f3372be8766fd89e9dffdd0f2cba173e0bfa970dc |
| SHA512 | a4d461f40455c036f69b7a5212d1c757d2f20fd91515bd17a4415ef3c16ebc9be334ac4f5f74d3ad320ae55404a7d6bac239ce3f4ceebd7dc8c0101e8219e54e |
| Imphash | d362aafb54ed8edc1a18374d1489fa73 |
| File Size | 26624 bytes |
Gridinsoft反恶意软件具有更强大的病毒扫描引擎。我们建议使用它进行对受感染系统的更精确诊断。这个简要指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
| Image Base: | 0x140000000 |
| Entry Point: | 0x140002f58 |
| Compilation: | 2024-09-13 16:48:07 |
| Checksum: | 0x00000000 (Actual: 0x00010643) |
| OS Version: | 6.0 |
| PDB Path: | D:\hax\ConsoleInjector\ConsoleInjector\release\ConsoleInjector.pdb |
| PEiD: | PE32+ executable (console) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | KERNEL32, USER32, ADVAPI32, MSVCP140, VCRUNTIME140_1, VCRUNTIME140, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-string-l1-1-0, |
| Exports: | 0 |
| Resources: | 1 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00002eaf | 0x00003000 | f9a687bf07fb6479af0051a2d5704695 | 5.96 |
| .rdata | 0x00004000 | 0x0000279a | 0x00002800 | 42d355704e201eb2102e41a269743670 | 4.62 |
| .data | 0x00007000 | 0x00000900 | 0x00000400 | 99672e238c2b65f6fe338bdbde1f9abd | 1.76 |
| .pdata | 0x00008000 | 0x000003fc | 0x00000400 | 9c726645bae2e1487544b8b05316aedc | 4.06 |
| .rsrc | 0x00009000 | 0x000001e0 | 0x00000200 | fb20ae2a7910d36ef7e1ed0b22953dbf | 4.70 |
| .reloc | 0x0000a000 | 0x00000078 | 0x00000200 | 5fe692ad48c8a5a307464ae2a7219633 | 1.62 |
