文件名 | ngrok.exe |
文件类型 |
Win32 EXE
|
魔术字节 | PE32+ executable (console) x86-64, for MS Windows |
SSDEEP 哈希 |
98304:ZbOdaq7s3Zd3lM69m2VR0zwRr5SpO3+VReFp0iVjS37ED8RzEIVV8qsAy8tLFjEi:ZbMIZNlM69155D3hC2UtYEy8tLGi
|
扫描器版本 | 1.0.218.174 |
数据库版本 | 2025-06-16 19:00:22 UTC |
被 24 个安全引擎检测到 - 需要谨慎
哈希类型 | 值 | 操作 |
---|---|---|
MD5 |
116c71fb205f8fbd4c168febce22d060
|
|
SHA1 |
e395cd4adb04a28c4f8a223590596776557965ae
|
|
SHA256 |
2d2466ee5eae12f38ee22fdbc03bccc2e900f9a640765601d693ef12f8b9d45b
|
|
SHA512 |
11ef2d83334dc3e4f07b57075e82edffff87a9c37bd7d5b630d919d88e0ff979885689951b88e4d1046f9427f92f11f623e4e06e1734bbde21f15edb978ba8dc
|
|
ImpHash |
b196866f0bf37f1f128fa153413b744f
|
映像基址 | 0x00400000 |
入口点 | 0x00483440 |
编译时间 | 1970-01-01 00:00:00 |
校验和 | 0x01ba4bdc (实际: 0x01ba4bdc) |
操作系统版本 | 6.1 |
PEiD 签名 |
PE32+ executable (console) x86-64, for MS Windows
|
数字签名 | Chain verification from [email protected], CN=Ngrok\, Inc., O=Ngrok\, Inc., L=San Diego, ST=California, C=US (serial:10936332555649019308070740469481071607, sha1:7a54eb0d199484eb8caea931c90a744bcf02a7e0) failed: Unable to build a validation path for the certificate "Email Address: [email protected]; Common Name: Ngrok, Inc.; Organization: Ngrok, Inc.; Locality: San Diego; State/Province: California; Country: US" - no issuer matching "Common Name: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; Organization: DigiCert, Inc.; Country: US" was found |
导入 |
1 库
kernel32 |
导出 | 0 函数 |
资源 | 1 资源 |
节 | 9 节 |
FileDescription | The ngrok agent gets you online in one line. |
ProductName | ngrok agent |
ProductVersion | 3.23.1 |
Translation | 0x0409 0x04b0 |
名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
11,715,601 bytes | 11,716,096 bytes | 6.11 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
806823C4D4292A45E50EA8C363D2D5BE |
.rdata |
0x00b2e000 |
15,642,976 bytes | 15,643,136 bytes | 5.40 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F605F72346729589449BC2D22634D996 |
.data |
0x01a1a000 |
1,454,512 bytes | 1,068,544 bytes | 4.56 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
B78874E36B544A3577ECB2349D15FABD |
.pdata |
0x01b7e000 |
281,724 bytes | 282,112 bytes | 5.89 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0B6C258D5D80677F558CA645F23B8100 |
.xdata |
0x01bc3000 |
180 bytes | 512 bytes | 1.78 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B8D5CBD57C12DF41BF6FFAA9048396C2 |
.idata |
0x01bc4000 |
1,402 bytes | 1,536 bytes | 4.26 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
5A97520D57ADAD15D2472E6EF8050F7B |
.reloc |
0x01bc5000 |
253,416 bytes | 253,440 bytes | 5.45 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
AEC86ED06E0BF04C9FFA748417F204C9 |
.symtab |
0x01c03000 |
4 bytes | 512 bytes | 0.02 (正常) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
07B5472D347D42780469FB2654B7FC54 |
.rsrc |
0x01c04000 |
552 bytes | 1,024 bytes | 1.88 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A12EA750E406263FB434E8E81DE9EC7B |
资源类型 | 数量 | 总大小 | 百分比 |
---|---|---|---|
RT_VERSION | 1 | 460 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
Chain verification from [email protected], CN=Ngrok\, Inc., O=Ngrok\, Inc., L=San Diego, ST=California, C=US (serial:10936332555649019308070740469481071607, sha1:7a54eb0d199484eb8caea931c90a744bcf02a7e0) failed: Unable to build a validation path for the certificate "Email Address: [email protected]; Common Name: Ngrok, Inc.; Organization: Ngrok, Inc.; Locality: San Diego; State/Province: California; Country: US" - no issuer matching "Common Name: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; Organization: DigiCert, Inc.; Country: US" was found
建议: 验证文件来源并确保它来自可信的发布者.
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断:
下载反恶意软件此文件看起来是干净的,但定期的安全维护很重要