文件名 | windowsdesktop-runtime-8.0.16-win-x64.exe |
文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
扫描器版本 | 1.0.217.174 |
数据库版本 | 2025-06-04 02:00:21 UTC |
我们的扫描器未检测到威胁
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
feba92f08e629d875237468dd2f1b3b6
|
|
SHA1 |
f99d26ddfabed9aa3e371313a30f1d5ce5382739
|
|
SHA256 |
24b0e77466823f76175770f7e56d85c20a13140310cdddb837c8007dd433b9ea
|
|
SHA512 |
526c0cf217c04f590ab5b88de4bff41f4f4ca13c4efb4f79bbaafe0b24fc48fdae1e769b0011bf8020b1ad6d8fbf6e1f31175045e86ee9c578a4892124828c2f
|
|
ImpHash |
15c8c157ab5b8b7133c4a38e5957e81c
|
图标 |
哈希: 88f05ea6c8d8a4845731c6d1991fa68b
模糊: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: b2e1b496a6cada72 |
映像基址 | 0x00400000 |
入口点 | 0x0043054b |
编译时间 | 2024-09-23 22:06:56 |
校验和 | 0x037e6eda (实际: 0x037e6eda) |
操作系统版本 | 6.0 |
PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
PDB 路径 | D:\a\_work\1\s\build\ship\x86\burn.pdb |
数字签名 | OK |
导入 |
8 库
ADVAPI32, USER32, OLEAUT32, GDI32, SHELL32, ole32, KERNEL32, RPCRT4 |
导出 | 0 函数 |
资源 | 5 资源 |
节 | 6 节 |
CompanyName | Microsoft Corporation |
FileDescription | Microsoft Windows Desktop Runtime - 8.0.16 (x64) |
FileVersion | 8.0.16.34817 |
InternalName | setup |
LegalCopyright | Copyright (c) Microsoft Corporation. All rights reserved. |
OriginalFilename | windowsdesktop-runtime-8.0.16-win-x64.exe |
ProductName | Microsoft Windows Desktop Runtime - 8.0.16 (x64) |
ProductVersion | 8.0.16.34817 |
Translation | 0x0409 0x04e4 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
303,059 bytes | 303,104 bytes | 6.57 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
BB47277F1937986A08F1166869AE6891 |
.rdata |
0x0004b000 |
127,868 bytes | 128,000 bytes | 5.08 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
178FBC2EC400C7613BF63111A999E057 |
.data |
0x0006b000 |
6,172 bytes | 3,072 bytes | 2.85 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
59E43E6FCD8D2214332B5E578549F172 |
.wixburn |
0x0006d000 |
56 bytes | 512 bytes | 0.76 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
310E733CBCD918B23071352FF0A055C4 |
.rsrc |
0x0006e000 |
15,164 bytes | 15,360 bytes | 5.49 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F2704957C5C4A28FF36406954C63FF40 |
.reloc |
0x00072000 |
15,852 bytes | 15,872 bytes | 6.79 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
1F930E56B9699BD5E218B4E3D202F8E3 |
2 检测到较高熵(≥6.5)的节 - 可能存在压缩
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
RT_ICON | 1 | 2,216 字节 | |
RT_MESSAGETABLE | 1 | 10,304 字节 | |
RT_GROUP_ICON | 1 | 20 字节 | |
RT_VERSION | 1 | 1,012 字节 | |
RT_MANIFEST | 1 | 1,234 字节 |
产品 | Microsoft Windows Desktop Runtime - 8.0.16 (x64) |
描述 | Microsoft Windows Desktop Runtime - 8.0.16 (x64) |
文件版本 | 8.0.16.34817 |
原始名称 | windowsdesktop-runtime-8.0.16-win-x64.exe |
签名日期 | 04:56 AM 04/18/2025 (57 天前) |
验证状态 | Signed |
签名者 | .NET; Microsoft Code Signing PCA 2011; Microsoft Root Certificate Authority 2011 |
副签名者 | Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010 |
内部名称 | setup |
版权 | Copyright (c) Microsoft Corporation. All rights reserved. |
33 00 00 04 40 14 FC 0B E8 3E F1 24 5F 00 00 00 00 04 40
61 0E 90 D2 00 00 00 00 00 03
33 00 00 01 FB CB CB 6C 37 67 E5 30 95 00 01 00 00 01 FB
33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15
33 00 00 01 FD 73 F9 68 5A CD 0C 61 ED 00 01 00 00 01 FD
✓ 此文件已进行数字签名,证书链已验证。
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要