| 文件名 | global_mapper.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.214.174 |
| 数据库版本 | 2025-04-22 21:00:30 UTC |
恶意软件家族: Packed
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
2a4a59feb99b1eaa3f16c17d93123c9c
|
|
| SHA1 |
ee813c2efb6982e388396e3c879ed102e263ee9d
|
|
| SHA256 |
7b12fe2dc94e7749388581fe9480e74c447b73e64dbe24ee7cdbb2f5b3d1b277
|
|
| SHA512 |
75d4f1f8affc671cc479bbe8ddac82aca7ebeedfd22e06cac9d2783c172ad38a1eabab2511ea3819e832e59758036ec73b5134544d7c675e90f54778ba91b53b
|
|
| ImpHash |
f1329bb49707b255568d57f98888c87c
|
| 图标 |
哈希: 357c7d1c976253d2b766bc8514c29edf
模糊: b05ef06b143c89dfd0ddb3311b1ca29c dHash: 23913961630d330f |
| 映像基址 | 0x140000000 |
| 入口点 | 0x1467cb0fc |
| 编译时间 | 2022-09-20 14:31:06 |
| 校验和 | 0x0502f62d (实际: 0x02906c91) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 | 93 库 |
| 导出 | 3546 函数 |
| 资源 | 1908 资源 |
| 节 | 10 节 |
| CompanyName | Blue Marble Geographics |
| FileDescription | Global Mapper 24.0 |
| FileVersion | 24.0 |
| InternalName | Global Mapper |
| LegalCopyright | Copyright © 2002-2022 |
| OriginalFilename | global_mapper.exe |
| ProductName | Global Mapper 24.0 |
| ProductVersion | 24.0 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
|
0x00001000 |
52,301,824 bytes | 21,010,432 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
5F73D39D78816729EB6D09EB0082A29A |
|
0x031e2000 |
1,200,128 bytes | 329,728 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
54F43A7131E9A68666D4BCBAF6B473F3 |
|
0x03307000 |
19,087,360 bytes | 6,959,104 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
C0AD7133FC2392EF903FD016C314E261 |
|
0x0453b000 |
8,896,512 bytes | 346,624 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
EF95B47C6973E89486918D785454AAD4 |
|
0x04db7000 |
1,601,536 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
|
0x04f3e000 |
53,248 bytes | 32,256 bytes | 7.99 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
19E4B028A4207793DEE81720CC22E8A4 |
|
0x04f4b000 |
8,101,888 bytes | 3,195,392 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
E7C33C12043E1F1547D636DCDFF1546D |
.rsrc |
0x05705000 |
581,632 bytes | 578,048 bytes | 3.61 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2089FC3413E8D3BB4CF16DBA7B267A78 |
|
0x05793000 |
12,091,392 bytes | 5,603,328 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
58ADE0F4679D5CB9CECFD525F335345E |
|
0x0631b000 |
4,931,584 bytes | 4,928,000 bytes | 7.80 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D08385356736D831364BF47F73E08C86 |
8 检测到高熵（≥7.5）的节 - 可能存在打包/加密
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| AFX_DIALOG_LAYOUT | 276 | 1,264 字节 | |
| PNG | 410 | 2,551,083 字节 | |
| RT_CURSOR | 47 | 184,172 字节 | |
| RT_BITMAP | 71 | 3,507,400 字节 | |
| RT_ICON | 22 | 483,500 字节 | |
| RT_MENU | 10 | 44,594 字节 | |
| RT_DIALOG | 512 | 683,212 字节 | |
| RT_STRING | 370 | 526,892 字节 | |
| RT_ACCELERATOR | 1 | 464 字节 | |
| RT_GROUP_CURSOR | 47 | 940 字节 | |
| RT_GROUP_ICON | 10 | 368 字节 | |
| RT_VERSION | 1 | 764 字节 | |
| RT_MANIFEST | 1 | 642 字节 | |
| None | 130 | 14,469 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
