| 在线病毒检测器 | v.1.0.207.174 |
| 数据库版本: | 2025-02-05 00:01:02 |
| File | AlrustiqService.exe |
| 已检查 | 2025-02-04 22:21:22 |
| MD5 | 2ab2b7e5cb3ca0c9b1c9715e308af987 |
| SHA1 | 805498040bc5521a9001de81aea4458d2ec8e661 |
| SHA256 | d86e42165ff9011318a5c61e4f2820dee2e26d73e2a37d168cd3de6862b3e474 |
| SHA512 | 9ab9ef123ff3b4c02a47ecd81f555c1b7ec2cda5543a92a90ae754b7dd533d9e4ada2ba080354fb1a8c6d59ef2283707b4e236e7974b95930972da590d49d15b |
| Imphash | dce725119b0ded8bfbd403970ddb54c6 |
| File Size | 3842696 bytes |
Gridinsoft能够识别并消除Trojan.Win64.Altruistik.dd!c，无需进一步的用户干预。
| FileDescription | Alrustiq Service |
| FileVersion | 1.7.8.4 |
| InternalName | Alrustiq Service |
| OriginalFilename | AlrustiqService |
| ProductVersion | 1.7.8.4 |
| Translation | 0x0409 0x04b0 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x1402209cc |
| Compilation: | 2025-01-09 07:42:20 |
| Checksum: | 0x003b1569 (Actual: 0x003b1569) |
| OS Version: | 6.0 |
| PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
| Sign: | Chain verification from CN=AlrustiqDevMD Group MD, O=AlrustiqDevMD Group MD, ST=Ontario, C=US (serial:-118686512415801461057318564987732290870, sha1:b446943ebf02b472e38c7281446993b14ad10358) failed: The X.509 certificate provided is self-signed - "Common Name: AlrustiqDevMD Group MD, Organization: AlrustiqDevMD Group MD, State/Province: Ontario, Country: US" |
| Sections: | 7 |
| Imports: | KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, ole32, OLEAUT32, USERENV, AUTHZ, NETAPI32, VERSION, WINMM, WS2_32, SHLWAPI, WTSAPI32, ntdll, IMM32, imagehlp, COMCTL32, POWRPROF, |
| Exports: | 1 |
| Resources: | 2 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x002582ce | 0x00258400 | 2f698f2b99ebb67c519027dd0c3051e5 | 6.42 |
| .rdata | 0x0025a000 | 0x0012d40a | 0x0012d600 | a6cb865e1b6fa0bd0e287098f66e2efb | 5.88 |
| .data | 0x00388000 | 0x00011198 | 0x0000d000 | 8e8f187b7c74f7c59d144bfa189795c2 | 4.67 |
| .pdata | 0x0039a000 | 0x000137a0 | 0x00013800 | d363ac12fea5ce84a62de031ae720422 | 6.26 |
| _RDATA | 0x003ae000 | 0x000001f4 | 0x00000200 | 2a6f1ec6bcf25645900344c1b2dd865e | 4.22 |
| .rsrc | 0x003af000 | 0x00000980 | 0x00000a00 | 7ef0d8b77fe60577b46167da50833576 | 4.97 |
| .reloc | 0x003b0000 | 0x000028b4 | 0x00002a00 | 439d33c0918ba39ba8a46d73df35b960 | 5.41 |
