| 在线病毒检测器 | v.1.0.190.174 |
| 数据库版本: | 2024-09-20 10:32:31 |
这是一个通用检测名称，用于识别具有特洛伊木马特征的潜在有害或可疑文件或程序。这是一种伪装成合法或良性程序但包含恶意代码或功能的恶意软件。
| File | Cheat Engine for Roblox.exe |
| 已检查 | 2024-09-20 07:17:07 |
| MD5 | 05e5b267fcfed47cc3e56d6cf74b71e4 |
| SHA1 | 26d883cf4bcba219b8475400916a94a23465863e |
| SHA256 | be04dd814b65640b36c5c4fa45966e3d424116177915817c706a68ac1222ed4f |
| SHA512 | 78e5ae0d3452aa30e9768a39dfe096e7ee29766b45df54a5eaf1321b74cdbd30781976d7f1b92854c25db1457c71abba8e62d1f5f5addfe3cbafdaaf1f342156 |
| Imphash | b78ecf47c0a3e24a6f4af114e2d1f5de |
| File Size | 2660921 bytes |
Gridinsoft能够识别并消除Malware.Win32.Generic.cld，无需进一步的用户干预。
 |
1a94bd8c6d0ae3e1ff6b0b3f7304857c 02739cc7c1d636e7f86aa83a1d79df6e a4a89c347c8ca8a8 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004031a3 |
| Compilation: | 2016-12-11 21:50:52 |
| Checksum: | 0x00000000 (Actual: 0x0029467a) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 5 |
| Imports: | KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, |
| Exports: | 0 |
| Resources: | 6 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00006071 | 0x00006200 | 86ec2a2da0012903b23e33f511180572 | 6.43 |
| .rdata | 0x00008000 | 0x00001352 | 0x00001400 | cd090b7c5bd9ae3da2a43d4f02ef98b7 | 5.24 |
| .data | 0x0000a000 | 0x000254f8 | 0x00000600 | e98382d1559cdefaafaf45200fe1faf0 | 4.04 |
| .ndata | 0x00030000 | 0x00009000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rsrc | 0x00039000 | 0x00010fa0 | 0x00011000 | 9f4435038841f49128f9bd818496ef4e | 3.36 |
