| 文件名 | Valorant_external_ESP.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.216.174 |
| 数据库版本 | 2025-05-16 01:00:26 UTC |
恶意软件家族: Generic
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
f72fc5e4a5239b9eb90296ecc5e3a19c
|
|
| SHA1 |
1870fc451b14ad25724a6fe81bb8f2e0c4129c65
|
|
| SHA256 |
1e16ea70113b3c712606b9bd00884baa1d0561618b82c9f390d0f2d1c14f7034
|
|
| SHA512 |
b1a83dcf2343e532474c863158e13092c0f7aa72b5ccec4c9ef5b70029d90e582bcf2b0216c63003cda8510913d350a6b50ee6e8745b91af32efc41a90acffc7
|
|
| ImpHash |
2ac23c52e7647c5bbea38e98bb68c652
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x14000be20 |
| 编译时间 | 2024-06-25 03:20:04 |
| 校验和 | 0x039854b8 (实际: 0x03981389) |
| 操作系统版本 | 5.2 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 |
5 库
USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32 |
| 导出 | 0 函数 |
| 资源 | 2 资源 |
| 节 | 6 节 |
| CompanyName | Microsoft Corporation |
| FileDescription | Microsoft® Group Policy Update Utility |
| FileVersion | 10.0.22621.3296 (WinBuild.160101.0800) |
| InternalName | GPUpdate.exe |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | GPUpdate.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.22621.3296 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
167,776 bytes | 167,936 bytes | 6.48 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
DE5B7DEEB13436557C4BA84AA3D5B3FB |
.rdata |
0x0002a000 |
75,024 bytes | 75,264 bytes | 5.76 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C399ADB8B75DCF1DBC45701EE21FDD4D |
.data |
0x0003d000 |
29,640 bytes | 3,584 bytes | 1.83 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8013C58834A08435A779FF436FF10EB7 |
.pdata |
0x00045000 |
8,640 bytes | 8,704 bytes | 5.43 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D16E38966953C987EB484AC72E115D6C |
.rsrc |
0x00048000 |
2,416 bytes | 2,560 bytes | 5.08 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0F70DA69DCBCC23C2B023A478E59840D |
.reloc |
0x00049000 |
1,896 bytes | 2,048 bytes | 5.28 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
BE4464056C7D34453C1E26C7294816EE |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_VERSION | 1 | 960 字节 | |
| RT_MANIFEST | 1 | 1,293 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
