| 文件名 | ncc-devices-x32.exe |
| 文件类型 |
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
|
| 扫描器版本 | 1.0.212.174 |
| 数据库版本 | 2025-04-03 21:00:36 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
1e091db06bd6ad632c8b343c47f9bdee
|
|
| SHA1 |
4eb33ee5b33e30a491cfa06eb5ce359c843c891d
|
|
| SHA256 |
f856e1f9bf4f0a9b7caacd6a3ce59ed7ba5b60db8039264738ab9e09ccd063e3
|
|
| SHA512 |
3d5b711759598b7271f71ab8894e68c25f86545d718e6c3c9c1b65471609a31512c18cd8b70ba4c363486134582c6e49c102ec02a15172675c982dd3fee5f566
|
|
| ImpHash |
9cbefe68f395e67356e2a5d8d1b285c0
|
| 映像基址 | 0x00400000 |
| 入口点 | 0x004619b0 |
| 编译时间 | 1970-01-01 00:00:00 |
| 校验和 | 0x00000000 (实际: 0x01b938ac) |
| 操作系统版本 | 6.1 |
| PEiD 签名 |
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
1 库
kernel32 |
| 导出 | 0 函数 |
| 资源 | 1 资源 |
| 节 | 14 节 |
| ProductVersion | 1.0.6 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
4,668,497 bytes | 4,668,928 bytes | 6.04 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D8CAD67CB2E53661962FD7DCE6421BD1 |
.rdata |
0x00475000 |
18,854,084 bytes | 18,854,400 bytes | 6.13 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
AEFABD254DAC6A0B4578DE5793399572 |
.data |
0x01671000 |
1,013,868 bytes | 782,848 bytes | 5.41 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A62EC7F37596CD5DEA59EA606583621D |
/4 |
0x01769000 |
295 bytes | 512 bytes | 5.10 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
43DC7A0AE5A7067502907DB800396667 |
/19 |
0x0176a000 |
810,961 bytes | 811,008 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
4EE3729C2B767659482825180CB57C47 |
/32 |
0x01830000 |
148,577 bytes | 148,992 bytes | 7.98 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
076BB5FB53530970252DC71BE3323138 |
/46 |
0x01855000 |
42 bytes | 512 bytes | 0.74 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
56D08C10AA9E5C0C3680F67F8992B3D4 |
/65 |
0x01856000 |
1,363,194 bytes | 1,363,456 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
C2A0F42A91E04FF0911C54577EC06D07 |
/78 |
0x019a3000 |
972,744 bytes | 972,800 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
6D84A668183056CEF26607647CA1785F |
/90 |
0x01a91000 |
312,509 bytes | 312,832 bytes | 7.95 (打包/加密) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
D198EA74DCC035F793E41486CAA196F7 |
.idata |
0x01ade000 |
988 bytes | 1,024 bytes | 4.82 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
73736F773CE1336FFF0CEA76625378D8 |
.reloc |
0x01adf000 |
203,918 bytes | 204,288 bytes | 6.67 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
8056E288277165D226DFBAC47D2BA8E8 |
.symtab |
0x01b11000 |
749,168 bytes | 749,568 bytes | 5.47 (正常) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
9F9498881FAEC246575EF5C1136681C4 |
.rsrc |
0x01bc8000 |
360 bytes | 512 bytes | 2.07 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC2D26955C5621278732F273150F4286 |
5 检测到高熵（≥7.5）的节 - 可能存在打包/加密
1 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_VERSION | 1 | 268 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
