| 文件名 | TomVPN 2.3.8.exe |
| 文件类型 |
Win32 EXE
|
| 魔术字节 | PE32 executable (GUI) Intel 80386, for MS Windows |
| SSDEEP 哈希 |
786432:TTbW6g1g5nRW7inRt6ljExhm/+QVLqx9KVCxaE:/bnFWutqjqq+QkxkV6n
|
| 扫描器版本 | 1.0.151.174 |
| 数据库版本 | 2023-12-11 23:01:08 UTC |
被 14 个安全引擎检测到 - 需要谨慎
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
8f7cb5ff579f8718d6c8550a1fc9de96
|
|
| SHA1 |
16aed91fe7e15ebb9f6700e94d95dc7f38718d76
|
|
| SHA256 |
56c83268594c4e28336693cfb26a611bf05f4249970f06bf9cff223b9b086106
|
|
| SHA512 |
549630da799e21d11363a48015f398fc501a0aaee4aecd2f96eed8df552077a9c02deba6645154e2478592d1464bd3137e265c5ef245f0ee2989fc3da3feb338
|
|
| ImpHash |
fcf1390e9ce472c7270447fc5c61a0c1
|
| 图标 |
哈希: bc0826102a7dda2b6827c8778b37071a
模糊: 97fb49222d80b7fc4ba63ef4ab5792f2 dHash: 29d6d4e4a4f83073 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x0041e239 |
| 编译时间 | 2019-12-05 07:37:23 |
| 校验和 | 0x02112c07 (实际: 0x02112c07) |
| 操作系统版本 | 5.1 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| PDB 路径 | D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb |
| 数字签名 | Chain verification from CN=HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, O=HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, L=Kowloon, C=HK, 2.5.4.5=2737870, 2.5.4.15=Private Organization, 1.3.6.1.4.1.311.60.2.1.3=HK (serial:4419695935512927560919382754583322478, sha1:245bfa567014f7824d92fa3853a42b9cfc326ed6) failed: Unable to build a validation path for the certificate "Common Name: HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, Organization: HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, Locality: Kowloon, Country: HK, Serial Number: 2737870, Business Category: Private Organization, Incorporation Country: HK" - no issuer matching "Common Name: DigiCert EV Code Signing CA (SHA2), Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US" was found |
| 导入 |
2 库
KERNEL32, gdiplus |
| 导出 | 0 函数 |
| 资源 | 21 资源 |
| 节 | 6 节 |
| DigiCert SHA2 Assured ID Timestamping CA | DigiCert, Inc. (US) |
| DigiCert Assured ID Root CA | DigiCert Inc (US) |
| DigiCert EV Code Signing CA | HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED (HK) |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
198,159 bytes | 198,656 bytes | 6.69 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
5C34491FEE255555D49145E7743274FB |
.rdata |
0x00032000 |
41,986 bytes | 42,496 bytes | 5.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
46BA011F50AD8D65A6B8D983B050AC7F |
.data |
0x0003d000 |
145,584 bytes | 4,608 bytes | 3.84 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CE7EE73DF4E6A3A0F245A2D8FA63B9DF |
.gfids |
0x00061000 |
232 bytes | 512 bytes | 2.12 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
79C1564768C1621D256D8D36E32E89FA |
.rsrc |
0x00062000 |
83,524 bytes | 83,968 bytes | 3.89 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A3BF3EE143E91BEEA53ABD9FDF049017 |
.reloc |
0x00077000 |
8,492 bytes | 8,704 bytes | 6.62 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
3E4166C697FACADAC24F07E8B3E0774B |
2 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| PNG | 2 | 8,430 字节 | |
| RT_ICON | 1 | 67,624 字节 | |
| RT_DIALOG | 6 | 2,280 字节 | |
| RT_STRING | 10 | 1,952 字节 | |
| RT_GROUP_ICON | 1 | 20 字节 | |
| RT_MANIFEST | 1 | 1,875 字节 |
| 主题 |
DigiCert Timestamp 2021 DigiCert, Inc. US |
| 颁发者 | DigiCert SHA2 Assured ID Timestamping CA |
| 序列号 | 17624174242159194906345698804472279261 |
| 主题 |
DigiCert SHA2 Assured ID Timestamping CA DigiCert Inc US |
| 颁发者 | DigiCert Assured ID Root CA |
| 序列号 | 14129007222345747367286704854105834005 |
| 主题 |
HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED HK |
| 颁发者 | DigiCert EV Code Signing CA |
| 序列号 | 12371763404023184306696075962934836311 |
Chain verification from CN=HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, O=HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, L=Kowloon, C=HK, 2.5.4.5=2737870, 2.5.4.15=Private Organization, 1.3.6.1.4.1.311.60.2.1.3=HK (serial:4419695935512927560919382754583322478, sha1:245bfa567014f7824d92fa3853a42b9cfc326ed6) failed: Unable to build a validation path for the certificate "Common Name: HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, Organization: HONGKONG LINGYUN NETWORK MDT INFOTECH LIMITED, Locality: Kowloon, Country: HK, Serial Number: 2737870, Business Category: Private Organization, Incorporation Country: HK" - no issuer matching "Common Name: DigiCert EV Code Signing CA (SHA2), Organizational Unit: www.digicert.com, Organization: DigiCert Inc, Country: US" was found
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
