| Verificador de Vírus Online | v.1.0.207.174 |
| Versão do Banco de Dados: | 2025-02-05 10:00:39 |
| File | AlrustiqService.exe |
| Verificado | 2025-02-05 08:39:33 |
| MD5 | 176935c39aa25131e208347f3d97d337 |
| SHA1 | 4dc5d5995161779ebc6415ab3262dd629a334140 |
| SHA256 | dcd934e941f833eda4f726934f21a6a755915871f42f082733725ead96ea3369 |
| SHA512 | d47a0a3166294ac8e014b0b176fae86c20c64de3b2e9ec3e78cf15e0069fc39a3880ef0b4410c6bb74befeebd532142b101423b43ae6242661d8f6998fc02cd1 |
| Imphash | dce725119b0ded8bfbd403970ddb54c6 |
| File Size | 3842696 bytes |
Gridinsoft tem a capacidade de identificar e eliminar Trojan.Win64.Altruistik.dd!c sem a necessidade de intervenção adicional do usuário.
| FileDescription | Alrustiq Service |
| FileVersion | 1.7.8.7 |
| InternalName | Alrustiq Service |
| OriginalFilename | AlrustiqService |
| ProductVersion | 1.7.8.7 |
| Translation | 0x0409 0x04b0 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x1402209bc |
| Compilation: | 2025-01-23 07:15:31 |
| Checksum: | 0x003ad636 (Actual: 0x003ad636) |
| OS Version: | 6.0 |
| PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
| Sign: | Chain verification from CN=AlrustiqDevMD Group MD, O=AlrustiqDevMD Group MD, ST=Ontario, C=US (serial:-86592473093123058838807037086498281409, sha1:3d0802e35ad65bcc4d8c1355d08fce4389e130b3) failed: The X.509 certificate provided is self-signed - "Common Name: AlrustiqDevMD Group MD, Organization: AlrustiqDevMD Group MD, State/Province: Ontario, Country: US" |
| Sections: | 7 |
| Imports: | KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, ole32, OLEAUT32, USERENV, AUTHZ, NETAPI32, VERSION, WINMM, WS2_32, SHLWAPI, WTSAPI32, ntdll, IMM32, imagehlp, COMCTL32, POWRPROF, |
| Exports: | 1 |
| Resources: | 2 |
| Nome | Endereço Virtual | Tamanho Virtual | Tamanho Bruto | MD5 | Entropia |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x002582be | 0x00258400 | f393ea98505ce31bfa16fcfd4aa23a09 | 6.42 |
| .rdata | 0x0025a000 | 0x0012d40a | 0x0012d600 | bd8bbcfc58cebc40058e5ed35375bec3 | 5.88 |
| .data | 0x00388000 | 0x00011198 | 0x0000d000 | 749aae451e752f2493ed59b1e827cf62 | 4.67 |
| .pdata | 0x0039a000 | 0x000137a0 | 0x00013800 | 2261d107b3e9d9c17c081eb7ab1ae89c | 6.26 |
| _RDATA | 0x003ae000 | 0x000001f4 | 0x00000200 | 78812e120e7f5712fdd0e862cb07e9ca | 4.19 |
| .rsrc | 0x003af000 | 0x00000980 | 0x00000a00 | b964ed37188f3b0b89fe8eb2b382f057 | 4.97 |
| .reloc | 0x003b0000 | 0x000028b4 | 0x00002a00 | 439d33c0918ba39ba8a46d73df35b960 | 5.41 |
