| 在线病毒检测器 | v.1.0.195.174 |
| 数据库版本: | 2024-11-02 16:00:21 |
STOP/Djvu勒索软件，也简称为STOP勒索软件或Djvu勒索软件，是一种恶意软件，它加密受害者计算机上的文件，并要求赎金以解密这些文件。这种勒索软件变种已经活跃了数年，影响了众多用户和组织。
| File | SiglusEngine_Patch.exe |
| 已检查 | 2024-11-02 14:40:11 |
| MD5 | b3421ec06f64ae3cedde30cfca05848b |
| SHA1 | 6755ff933aad9d792724a71f00fd919d6699f400 |
| SHA256 | a05a740fb71b57208112d783b1d319b799754f252954d1a906e0eb51494eebc9 |
| SHA512 | d5de6c25a68fa0352066197e7a8d143ae240e9eb29abec0c9f43bae6412a9fa9f2f5dcca93c3474cb9e9199e88959ea067082ed42355a50220d8b096b19db265 |
| Imphash | 25c0914e1e7dc7c3bb957d88e787a155 |
| File Size | 451072 bytes |
Gridinsoft能够识别并消除Ransom.Win32.STOP.dg!se51856，无需进一步的用户干预。
| CompanyName | X'moe |
| FileDescription | Universal patch for SiglusEngine |
| FileVersion | 1.0.0.1 |
| InternalName | Loader.exe |
| LegalCopyright | Copyright X'moe (C) 2017 |
| OriginalFilename | Loader.exe |
| ProductName | SiglusEngine Loader |
| ProductVersion | 1.0.0.1 |
| Translation | 0x0409 0x04b0 |
 |
f97ed337d3fa606d325b90b22b4b3bea b8f669dabfe37bb61fb58121da678ecf 64334950b2f6c886 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004018cd |
| Compilation: | 2019-04-23 10:38:43 |
| Checksum: | 0x00000000 (Actual: 0x0007c4b0) |
| OS Version: | 6.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 6 |
| Imports: | kernel32, user32, advapi32, oleaut32, ole32, ntdll, SHFolder, shlwapi, |
| Exports: | 0 |
| Resources: | 4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0000b20b | 0x0000b400 | 90d800a2e885a4f99c8ccf5ea9c7141b | 6.61 |
| .rdata | 0x0000d000 | 0x000059cc | 0x00005a00 | dd48e2c1df76b2751b3158b7e5b36dae | 4.89 |
| .data | 0x00013000 | 0x000015d4 | 0x00000c00 | 9d90342076bee063dc254beb6bd5c4f3 | 1.61 |
| .rsrc | 0x00015000 | 0x00002270 | 0x00002400 | a00adf43b3dc9a02c90f47900e5a1365 | 7.07 |
| .enigma1 | 0x00018000 | 0x00001000 | 0x0001c000 | 571de0b090fb171e25529f90e0b58ba3 | 7.87 |
| .enigma2 | 0x00019000 | 0x0003e000 | 0x0003e000 | 24125eba5c346cce9392db3637ed95ca | 5.82 |
