| 文件名 | comics-downloader-win-x86-64.exe |
| 文件类型 |
PE32+ executable (console) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.220.174 |
| 数据库版本 | 2025-07-16 18:00:26 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
a29b8e4fe7383d5a2bee02df4a68f8b0
|
|
| SHA1 |
369aebb0292ec705f577c74c88d7bc805868fade
|
|
| SHA256 |
93e1b482fb3ffc1df16f69617f4942bd66d8a06868a86b65601370bcb275b751
|
|
| SHA512 |
00ed2d7502b837e12faf7c230d3279facacc4c8fdb8ff3cc9093d380ba33b9153704b470380599cae046bc802c966245323ce52d6550b121aa8a6dcad02738c0
|
|
| ImpHash |
c2d457ad8ac36fc9f18d45bffcd450c2
|
| 映像基址 | 0x00400000 |
| 入口点 | 0x0046dca0 |
| 编译时间 | 1970-01-01 00:00:00 |
| 校验和 | 0x00000000 (实际: 0x00be3c90) |
| 操作系统版本 | 6.1 |
| PEiD 签名 |
PE32+ executable (console) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
1 库
kernel32 |
| 导出 | 0 函数 |
| 资源 | 0 资源 |
| 节 | 15 节 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
3,782,827 bytes | 3,783,168 bytes | 6.20 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
05A13A9974E5041DC2610DB10816884C |
.rdata |
0x0039d000 |
3,834,224 bytes | 3,834,368 bytes | 5.66 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
BB0348B2F3D62C091DDB33E743628270 |
.data |
0x00746000 |
1,580,224 bytes | 990,208 bytes | 5.10 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8DC9CBF31D35E866096BAF1DAEDFAC3E |
.pdata |
0x008c8000 |
81,456 bytes | 81,920 bytes | 5.51 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
EA63E5AD23C249C0BBE1E539BFE170AE |
.xdata |
0x008dc000 |
180 bytes | 512 bytes | 1.79 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DBBF65544A89803849C8B94BB72DA141 |
/4 |
0x008dd000 |
297 bytes | 512 bytes | 5.08 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
17F62672C8506464AE13ECCC2EB6CB94 |
/19 |
0x008de000 |
655,667 bytes | 655,872 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
3AEC4977968CC2FE83339F23FB948266 |
/32 |
0x0097f000 |
132,207 bytes | 132,608 bytes | 7.94 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
848C0A38E88A85DD4443688CA08F7C4C |
/46 |
0x009a0000 |
42 bytes | 512 bytes | 0.74 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
56D08C10AA9E5C0C3680F67F8992B3D4 |
/65 |
0x009a1000 |
1,216,247 bytes | 1,216,512 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
E517C14500D6B7F019783197D1DCAFD0 |
/78 |
0x00aca000 |
813,780 bytes | 814,080 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
3A89B781AD1ACF29230409BD40027415 |
/90 |
0x00b91000 |
259,808 bytes | 260,096 bytes | 7.83 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
77D6C3F3AF8EAFF4BC4529E66D7C54ED |
.idata |
0x00bd1000 |
1,364 bytes | 1,536 bytes | 4.05 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
99DF8C2A1284628D39A2625B90389931 |
.reloc |
0x00bd2000 |
77,902 bytes | 78,336 bytes | 5.44 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CC8CDF553F8D908DB5BA01909B4DBA1E |
.symtab |
0x00be6000 |
583,322 bytes | 583,680 bytes | 5.34 (正常) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
C0AE13509E37F099CC4ECE5008946610 |
5 检测到高熵（≥7.5）的节 - 可能存在打包/加密
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
