| 文件名 | airshipper.exe |
| 文件类型 |
PE32+ executable (console) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.213.174 |
| 数据库版本 | 2025-04-13 22:00:32 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
1f484997c594717516cfd71c695fe226
|
|
| SHA1 |
685ddd9d24b4f4017ced67569339fb1d9021850f
|
|
| SHA256 |
af340a12777a0df2f601d9fa7069ba8781a0297683e1da3099f0b20b8a3d20b7
|
|
| SHA512 |
4911e48f90c0e915e8478b1844c0dd1090c623607e8698519a536cf757f64ad5ce03382b778d9816638bacb12c633dea4466885e44132840c71ecd65db8f26b1
|
|
| ImpHash |
0325ce35b16205487c48e1c130200c40
|
| 图标 |
哈希: d8f19d79b628d2134d03d74b7a1e4e1b
模糊: bb57a45fffc9d6a20d6680cb9e6a8f8a dHash: d2eccce8a8b2d4cc |
| 映像基址 | 0x140000000 |
| 入口点 | 0x140001410 |
| 编译时间 | 2024-12-28 17:54:40 |
| 校验和 | 0x03892025 (实际: 0x03892025) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32+ executable (console) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 | 21 库 |
| 导出 | 0 函数 |
| 资源 | 7 资源 |
| 节 | 24 节 |
| FileDescription | Provides automatic updates for the voxel RPG Veloren. |
| ProductName | airshipper |
| ProductVersion | 0.16.0 |
| FileVersion | 0.16.0 |
| Translation | 0x0000 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
15,146,600 bytes | 15,147,008 bytes | 6.23 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
A5FCA8EE386EBBC40A2DD25DD6B0C435 |
.data |
0x00e73000 |
16,880 bytes | 16,896 bytes | 2.72 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A13CC8EE1E2CD0B8964884C269DF8395 |
.rdata |
0x00e78000 |
19,157,200 bytes | 19,157,504 bytes | 6.79 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
6D257993BFB3B7CD8FF189752868A191 |
.pdata |
0x020be000 |
158,148 bytes | 158,208 bytes | 6.65 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
28EFCE3DABE78A8A648DCEBC6514D13C |
.xdata |
0x020e5000 |
238,364 bytes | 238,592 bytes | 5.12 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
5822D858CA180ACFA519341B2874EADC |
.bss |
0x02120000 |
10,336 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.idata |
0x02123000 |
15,044 bytes | 15,360 bytes | 4.66 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
FCE135BE9370D1C955DDB56FA8F30FDA |
.CRT |
0x02127000 |
120 bytes | 512 bytes | 0.54 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CF9B4E499EC21D8F285A7E340FF5C602 |
.tls |
0x02128000 |
16 bytes | 512 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x02129000 |
67,752 bytes | 68,096 bytes | 7.27 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
6EE5C2E16D5A17EC85215AD14F8EA4F3 |
.reloc |
0x0213a000 |
122,688 bytes | 122,880 bytes | 5.49 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
A109A3A68EF1F57851B809A77E8B0BA2 |
/4 |
0x02158000 |
5,536 bytes | 5,632 bytes | 2.82 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
CBF642F98566D74697A6069B8EC8CA45 |
/19 |
0x0215a000 |
4,516,599 bytes | 4,516,864 bytes | 5.00 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
7667E6584D01675E34F9303A21950A07 |
/35 |
0x025a9000 |
5,241,333 bytes | 5,241,344 bytes | 5.57 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
A68433980E57DB885B7D0796268939E6 |
/47 |
0x02aa9000 |
20,941 bytes | 20,992 bytes | 4.99 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
DB8198EB89FF95776A27EAC84AE664A6 |
/61 |
0x02aaf000 |
1,886,049 bytes | 1,886,208 bytes | 6.20 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F5C0FED06592742554FF1BDB3EBB6D8E |
/73 |
0x02c7c000 |
9,104 bytes | 9,216 bytes | 4.91 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
A121954FBC584B48A7F402C2D9E78F4E |
/86 |
0x02c7f000 |
6,731,301 bytes | 6,731,776 bytes | 5.30 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
84446A69DD7A6FFCDE17842317A6B0AF |
/97 |
0x032eb000 |
720 bytes | 1,024 bytes | 2.40 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
1CE611C9E3759C98E7AB187DA3271529 |
/113 |
0x032ec000 |
2,276,864 bytes | 2,276,864 bytes | 2.50 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
1568257F71949F6B9A49D6516340F906 |
/127 |
0x03518000 |
18,069 bytes | 18,432 bytes | 4.87 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
40028CDEC183141E7F1DE28F3F41960A |
/143 |
0x0351d000 |
1,146,524 bytes | 1,146,880 bytes | 5.66 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
AA34E00D026AE36C115F054F4F239035 |
/159 |
0x03635000 |
429,017 bytes | 429,056 bytes | 5.57 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
0ED655395ADA20B077975390D85330F3 |
/172 |
0x0369e000 |
47,672 bytes | 48,128 bytes | 5.30 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
38397C3722A2C1D23298BC3A44113408 |
3 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 5 | 66,716 字节 | |
| RT_GROUP_ICON | 1 | 76 字节 | |
| RT_VERSION | 1 | 524 字节 |
| 产品 | airshipper |
| 描述 | Provides automatic updates for the voxel RPG Veloren. |
| 文件版本 | 0.16.0 |
✓ 此文件已进行数字签名，证书链已验证。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
