| 在线病毒检测器 | v.1.0.169.174 |
| 数据库版本: | 2024-03-16 05:00:22 |
RedLine Stealer是一种恶意程序，旨在从浏览器、系统和已安装软件中窃取用户的机密数据。它通常通过电子邮件附件或被攻陷的网站传递。RedLine不仅窃取敏感信息，还通过引入其他恶意软件到受害者的操作系统中构成重大威胁。这种双重攻击方式使RedLine成为一个强大而危险的网络威胁。
| File | Unlock_Tool_3.0.exe |
| 已检查 | 2024-03-16 03:53:04 |
| MD5 | dce4b7cc5d545a15fe87824a6cc4eb8c |
| SHA1 | 533f982fb148bc7ec17c028df4d128b036b579ff |
| SHA256 | fea43fd0b4e01c02a0b4d04413fdab976eee6a36e7364a39f43512ca74de9219 |
| SHA512 | d45400977c6e58334d344ab4f4078d63587968c254cfaa5c3b91799b6df4afd501839ed2e8a657e4ef9eb8aaec07e28be9a3fb4696524470a4a402aab1ddc9ab |
| Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
| File Size | 363144 bytes |
Gridinsoft能够识别并消除Malware.Win32.RedLine.tr，无需进一步的用户干预。
| Translation | 0x0000 0x04b0 |
| FileDescription | Corbie |
| FileVersion | 1.0.0.3 |
| InternalName | Together.exe |
| LegalCopyright | Copyright © 2023 |
| OriginalFilename | Together.exe |
| ProductName | Corbie |
| ProductVersion | 1.0.0.3 |
| Assembly Version | 1.0.0.3 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0045505e |
| Compilation: | 2024-03-15 11:08:12 |
| Checksum: | 0x00000000 (Actual: 0x0005dad6) |
| OS Version: | 4.0 |
| PDB Path: | Together.pdb |
| PEiD: | PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows |
| Sign: | The expected hash does not match the digest in SpcInfo |
| Sections: | 3 |
| Imports: | mscoree, |
| Exports: | 0 |
| Resources: | 2 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00002000 | 0x00053064 | 0x00053200 | 752fafd82127d25b1d28bca2c5b49ff8 | 7.94 |
| .rsrc | 0x00056000 | 0x00000534 | 0x00000600 | 4bf3cf2d14edbdc9ccf6ec4c17b620fb | 3.91 |
| .reloc | 0x00058000 | 0x0000000c | 0x00000200 | bd2d0910728ee9c3024d07adf58c3a1d | 0.10 |
