| 文件名 | tweego_win86.exe |
| 文件类型 |
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
|
| 扫描器版本 | 1.0.218.174 |
| 数据库版本 | 2025-06-18 03:00:34 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
5d3887280b9f9e6c9a345be10f10127a
|
|
| SHA1 |
1ee7f7f7d7447f7a4311e7421bdc4d0258b0cf1e
|
|
| SHA256 |
7806a4a043f05f1069ccc497651135355d6982b17cd8c3368ac74fa68af2b022
|
|
| SHA512 |
ee6818b91e5135a17ff2c0312348ec3b43725ef900c19d152e3b1093347881c4e23c183b423085d7d73693c9b5cd5a0d38afc415db709d39478ea06748d31cab
|
|
| ImpHash |
1cd364a9e949d5ecebd6c614e64bc545
|
| 映像基址 | 0x00400000 |
| 入口点 | 0x0044eb50 |
| 编译时间 | 1970-01-01 00:00:00 |
| 校验和 | 0x00000000 (实际: 0x003eebc2) |
| 操作系统版本 | 6.1 |
| PEiD 签名 |
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
1 库
kernel32 |
| 导出 | 0 函数 |
| 资源 | 0 资源 |
| 节 | 14 节 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
1,283,493 bytes | 1,283,584 bytes | 6.12 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
703957B04862BAB4BC2B1C2EBB17811C |
.rdata |
0x0013b000 |
1,535,060 bytes | 1,535,488 bytes | 5.98 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
79CA62203DC35DC56AF69FB526E20562 |
.data |
0x002b2000 |
220,408 bytes | 133,120 bytes | 5.83 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2C4FDB627071454688AB26E7903EFDF8 |
/4 |
0x002e8000 |
281 bytes | 512 bytes | 4.83 (正常) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
28A3E9C96B9BB43E6541A26C8F68899B |
/19 |
0x002e9000 |
209,485 bytes | 209,920 bytes | 7.99 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
3F52F6614C82051FF6303EA1A50D2041 |
/32 |
0x0031d000 |
47,464 bytes | 47,616 bytes | 7.98 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
3458C9A4B88FA185A86F5244550E565C |
/46 |
0x00329000 |
10,089 bytes | 10,240 bytes | 7.95 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
85E5E85AC6A2BD6C50E02C8774371E10 |
/63 |
0x0032c000 |
23,670 bytes | 24,064 bytes | 7.97 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
1FD534F59C29A8FFDEAD77C4E646196C |
/80 |
0x00332000 |
40 bytes | 512 bytes | 0.71 (正常) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
D82725D4780AE94BB7610097441A7844 |
/99 |
0x00333000 |
333,673 bytes | 333,824 bytes | 8.00 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
4043F40D04DCF69E7D5A057B13334522 |
/112 |
0x00385000 |
228,024 bytes | 228,352 bytes | 7.99 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
FD210638C7B9CCD2426016F4D61522BF |
/124 |
0x003bd000 |
76,091 bytes | 76,288 bytes | 7.93 (打包/加密) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
2AC969B51696220DA493789FC76BC9E8 |
.idata |
0x003d0000 |
816 bytes | 1,024 bytes | 4.05 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
95A4600D151A04BB74C88FD4C80B26F4 |
.symtab |
0x003d1000 |
229,829 bytes | 229,888 bytes | 5.33 (正常) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
4C634B79BE8C7439AD619B5F39DDA1C3 |
7 检测到高熵（≥7.5）的节 - 可能存在打包/加密
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
