| 文件名 | HMC Hackus Mail Checker v2.3.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.221.174 |
| 数据库版本 | 2025-07-28 16:00:32 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
fe1d6b29ff89ba1b2cc2e62ab5d6f131
|
|
| SHA1 |
3ebff3d88ea27e194adc21686cbd2f554c37470d
|
|
| SHA256 |
649d4dd5ab13ee449692b7d4e0fca8e00d535c9c09686c2ad8027a47eaeaa943
|
|
| SHA512 |
0afbc8ec46e7465bf3e90c1e1f857c8f51a9fb636e977874f18b69e68b0576a0de240cd4e8060492bf039236b493a986c2566a34325d793c225085f0f468924d
|
|
| ImpHash |
59ce58f614c05dd13ae198c4f08f413b
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x14000132b |
| 编译时间 | 1970-01-01 00:00:00 |
| 校验和 | 0x003eba10 (实际: 0x003eba10) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
5 库
ADVAPI32, KERNEL32, msvcrt, SHELL32, USER32 |
| 导出 | 0 函数 |
| 资源 | 1 资源 |
| 节 | 18 节 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
117,696 bytes | 117,760 bytes | 6.27 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
30018300A84E7AD1A04F9B8A4EFB9821 |
.data |
0x0001e000 |
3,536,960 bytes | 3,537,408 bytes | 6.79 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
B4B1D77C02AED06A3568B0F98C7E4402 |
.rdata |
0x0037e000 |
19,712 bytes | 19,968 bytes | 4.95 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC9972E270D076DA68CEAA4DDFC5CF94 |
.pdata |
0x00383000 |
14,244 bytes | 14,336 bytes | 5.40 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DAEFB5A0D80048BA199D113B09DD387A |
.xdata |
0x00387000 |
11,568 bytes | 11,776 bytes | 4.03 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2514F1E0AFD10370337DFFF17D30B41D |
.bss |
0x0038a000 |
3,152 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x0038b000 |
4,912 bytes | 5,120 bytes | 4.08 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
02377565CC1B3062242A6D5AF7B211D7 |
.tls |
0x0038d000 |
16 bytes | 512 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x0038e000 |
776 bytes | 1,024 bytes | 4.29 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0FFA829351D9037D33FE80B30E9D6E92 |
.reloc |
0x0038f000 |
1,100 bytes | 1,536 bytes | 4.52 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
8D1D5FFB85EC2B268805789C814C094E |
/4 |
0x00390000 |
176 bytes | 512 bytes | 0.61 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
E8B9914BC03E377FC6AADD26A45444BC |
/19 |
0x00391000 |
18,956 bytes | 19,456 bytes | 5.77 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
B9E59B2D468ED9B6686AF0D9C41E57FF |
/31 |
0x00396000 |
2,118 bytes | 2,560 bytes | 4.38 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
98FB64F9EC8915CB5A4825473806EF6B |
/45 |
0x00397000 |
2,249 bytes | 2,560 bytes | 4.52 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
15590B3C2BEEF0F34F6DBE8FC1308611 |
/57 |
0x00398000 |
984 bytes | 1,024 bytes | 3.70 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
6D690DDAF4B652C0DF815254089A97A6 |
/70 |
0x00399000 |
168 bytes | 512 bytes | 2.41 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
A11AD7E3390329ABC69674049C407B58 |
/81 |
0x0039a000 |
738 bytes | 1,024 bytes | 4.02 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
56A99C417E2BE861C632F9976BF651BF |
/97 |
0x0039b000 |
1,541 bytes | 2,048 bytes | 3.96 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CBAEEA7392AD54B778E75964D8FD27AD |
1 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_MANIFEST | 1 | 681 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
