Verificador de Vírus Online | v.1.0.138.174 |
Versão do Banco de Dados: | 2023-09-14 10:02:20 |
O Neshta é um software malicioso que coleta informações sensíveis do sistema e pode se espalhar para dispositivos de armazenamento removíveis e compartilhamentos de rede. Ele é frequentemente usado em ataques direcionados contra empresas nos setores financeiro, bens de consumo, energia e manufatura, representando uma séria ameaça à segurança do sistema e exigindo remoção imediata.
File | Aud |
Verificado | 2023-09-14 07:15:03 |
MD5 | e185fe1f36fb07d6b85a71a20acc58db |
SHA1 | c32b828888f0bab5485dbb98da1ea1f7b0bcbfef |
SHA256 | 907ca6d311ca53125aa321e39a288adae25fd45eef884dafe8d88aa9547e9fe9 |
SHA512 | c1eb972ceaceccbaa0558ad8a988957a7ac5cf6f515dd7b451f38403e86b90df7a473b7830334526da9da893c47c5b07e38461509422e1d11148a4bbfbaeb19a |
Imphash | 07d7bb1cc7a7a15621fdda29041fa17d |
File Size | 2068487 bytes |
Gridinsoft tem a capacidade de identificar e eliminar Virus.Win32.Neshta.sa sem a necessidade de intervenção adicional do usuário.
DigiCert Trusted Root G4 | DigiCert Inc (US) |
DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 | Chengdu ShanHe Information Technology Co., Ltd. (CN) |
Verificação | The expected hash does not match the digest in SpcInfo |
CompanyName | iTop Inc. |
FileDescription | iTop VPN |
FileVersion | 5.0.0.4294 |
InternalName | Aud |
LegalCopyright | © iTop Inc. All rights reserved. |
LegalTrademarks | iTop Inc. |
OriginalFilename | aud.exe |
ProductName | iTop VPN |
ProductVersion | 5.0 |
Comments | iTop Inc. AUpdate |
Translation | 0x0409 0x04e4 |
6d158d881d3c5f981b514f1a2eebc2c6 00f093ca5233c12c497c0f3fc1557273 8990ae8e9a86ac52 |
|
Image Base: | 0x00400000 |
Entry Point: | 0x0059e9fc |
Compilation: | 2023-07-05 12:41:05 |
Checksum: | 0x001f1219 (Actual: 0x001f92e8) |
OS Version: | 5.0 |
PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
Sign: | The expected hash does not match the digest in SpcInfo |
Sections: | 10 |
Imports: | oleaut32, advapi32, user32, kernel32, msimg32, gdi32, version, ole32, wininet, shell32, comctl32, comdlg32, wsock32, |
Exports: | 1 |
Resources: | 46 |
Nome | Endereço Virtual | Tamanho Virtual | Tamanho Bruto | MD5 | Entropia |
---|---|---|---|---|---|
.text | 0x00001000 | 0x0019bc58 | 0x0019be00 | 9886238fd248a0957d856a0bac185fc4 | 6.44 |
.itext | 0x0019d000 | 0x00003dc0 | 0x00003e00 | ef2ee34337dbe5225c6de4e1756b2334 | 6.34 |
.data | 0x001a1000 | 0x000141ac | 0x00014200 | 4bb16cb392a4a4ac3d655347a8565353 | 6.29 |
.bss | 0x001b6000 | 0x00047854 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
.idata | 0x001fe000 | 0x0000442c | 0x00004600 | 9e4a1e0e097ab398e4ee101bcbee8229 | 5.21 |
.edata | 0x00203000 | 0x0000004a | 0x00000200 | 441e776c8a0d6ffba3ab58e1a361ab0e | 0.77 |
.tls | 0x00204000 | 0x00000250 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
.rdata | 0x00205000 | 0x00000018 | 0x00000200 | f20791ae136b61b4daed18a313b13351 | 0.21 |
.reloc | 0x00206000 | 0x00017fc8 | 0x00018000 | 62a0a2d9e2f012a319594f19b0234c26 | 6.71 |
.rsrc | 0x0021e000 | 0x00010c00 | 0x00010c00 | 6253f52f0291b92b249fd9e3fb470c4d | 4.54 |