| 在线病毒检测器 | v.1.0.200.174 |
| 数据库版本: | 2024-12-17 13:00:23 |
“Patcher”通常指的是一种用于修改或“修补”其他软件的软件或工具，通常是为了绕过许可限制或启用未经授权的使用。这些工具通常与软件盗版和非法分发相关联。
| File | Screenshot Reader.exe |
| 已检查 | 2024-12-17 11:38:50 |
| MD5 | 87d29b4f283b3c9d3d58c4ed1cbe41c9 |
| SHA1 | 8d06ea7651783e9df787008e6055007688e1f506 |
| SHA256 | c7c4e53a573a60a49b8866752d74baccaf8fa52c352d23987f4e6082d63e479d |
| SHA512 | 41b2d284f91abcbbf72fa72146cc1e6d5afcbf96d87e8df00c30a175be8ce41f35964e905a3472d5e2cb496eac4dc115c575d988b8139da6b61d3d5c28b38d99 |
| Imphash | ae2490a78f274f2cdc7cc3319460d0d2 |
| File Size | 308224 bytes |
Gridinsoft能够识别并消除Hack.Win32.Patcher.cld，无需进一步的用户干预。
 |
4b541a766003aeb0638d9c9c2333c38e b2076994c4689c49cb69b6d67d94ef60 f0cc9eb2929eccb0 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0040c158 |
| Compilation: | 2012-06-20 21:41:57 |
| Checksum: | 0x0004b403 (Actual: 0x0004b403) |
| OS Version: | 5.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 9 |
| Imports: | oleaut32, advapi32, user32, kernel32, |
| Exports: | 0 |
| Resources: | 33 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0000a8d0 | 0x0000aa00 | d575932a9dec1c845561c4961a8ccaea | 6.33 |
| .itext | 0x0000c000 | 0x000004c0 | 0x00000600 | e5d99656963389b230fa8d3040c36ed2 | 4.87 |
| .data | 0x0000d000 | 0x00000b64 | 0x00000c00 | 8e7f2e11470b783edd038a12de50eec4 | 2.09 |
| .bss | 0x0000e000 | 0x00004de0 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .idata | 0x00013000 | 0x00000918 | 0x00000a00 | 1d09fd6d1dcff29382fd46a973bdc201 | 4.62 |
| .tls | 0x00014000 | 0x00000008 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .rdata | 0x00015000 | 0x00000018 | 0x00000200 | 66449846b9540018febb257533722165 | 0.21 |
| .reloc | 0x00016000 | 0x00000e6c | 0x00001000 | 2dcff43035fd0ddf5d9f13bc49ea554e | 6.24 |
| .rsrc | 0x00017000 | 0x0003d6e0 | 0x0003d800 | ea5bee27e500af34376f528756263828 | 3.43 |
