| 文件名 | Endorphin.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.221.174 |
| 数据库版本 | 2025-07-29 05:00:32 UTC |
我们的扫描器未检测到威胁
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
873aa283c8a32294371faa7859335474
|
|
| SHA1 |
d87db0a9322578d277b94a1d55ca7258f9d9e525
|
|
| SHA256 |
9c2977afb83e198e83887a8e2b43a27a4e5b513258def3925e0707a3b6ec2225
|
|
| SHA512 |
9eabbc83017390b412fdbe20df46af1bbbdce5c79eafc447c1a1391f3d6625f5ccde3df3c9ad2a4c2ed38ab96246a71b0af815b87260b0514f91b8dbe1f25067
|
|
| ImpHash |
bf996749cfd4a521351f81fb0f1deae5
|
| 图标 |
哈希: 19208c2124fc1039e4bcbd9de8c46f1e
模糊: 5bcfcb072d3ea52ab281b3933d92208a dHash: 928892ba3e2ce4c0 |
| 映像基址 | 0x140000000 |
| 入口点 | 0x1400012b8 |
| 编译时间 | 2025-07-08 12:45:28 |
| 校验和 | 0x0001ddd2 (实际: 0x0001ddd2) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB 路径 | D:\a\1\b\bin\amd64\pythonw.pdb |
| 数字签名 | OK |
| 导入 |
8 库
python314, VCRUNTIME140, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-heap-l1-1-0, KERNEL32 |
| 导出 | 0 函数 |
| 资源 | 15 资源 |
| 节 | 6 节 |
| CompanyName | Python Software Foundation |
| FileDescription | Python |
| FileVersion | 3.14.0b4 |
| InternalName | Python Application |
| LegalCopyright | Copyright © 2001 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC. |
| OriginalFilename | pythonw.exe |
| ProductName | Python |
| ProductVersion | 3.14.0b4 |
| Translation | 0x0000 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
3,692 bytes | 4,096 bytes | 5.63 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
BA093D250F5C3893D873A2C7CB8BC976 |
.rdata |
0x00002000 |
3,954 bytes | 4,096 bytes | 4.16 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
7B0355C2FD8A8B337C87B0363F4B629E |
.data |
0x00003000 |
1,664 bytes | 512 bytes | 0.53 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
85C2AEBD011C5C1B37C1009DEF59C2B6 |
.pdata |
0x00004000 |
372 bytes | 512 bytes | 2.91 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A66197CC6484E9A2255EDD937E7C0211 |
.rsrc |
0x00005000 |
79,376 bytes | 79,872 bytes | 6.15 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A1E1892E3C28B0EBF4CDCE8D4EB8E3DA |
.reloc |
0x00019000 |
48 bytes | 512 bytes | 0.72 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
C79CD45DE1E939022D7F01E54150C7E1 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 12 | 75,904 字节 | |
| RT_GROUP_ICON | 1 | 174 字节 | |
| RT_VERSION | 1 | 952 字节 | |
| RT_MANIFEST | 1 | 1,499 字节 |
| 产品 | Python |
| 描述 | Python |
| 文件版本 | 3.14.0b4 |
| 原始名称 | pythonw.exe |
| 签名日期 | 12:53 PM 07/08/2025 (25 天前) |
| 验证状态 | Signed |
| 签名者 | Python Software Foundation; Microsoft ID Verified CS AOC CA 01; Microsoft ID Verified Code Signing PCA 2021; Microsoft Identity Verification Root Certificate Authority 2020 |
| 副签名者 | Microsoft Public RSA Time Stamping Authority; Microsoft Public RSA Timestamping CA 2020; Microsoft Identity Verification Root Certificate Authority 2020 |
| 内部名称 | Python Application |
| 版权 | Copyright © 2001 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC. |
54 98 D2 D1 D4 5B 19 95 48 13 79 C8 11 C0 87 9933 00 04 72 48 1C 20 86 4B B6 11 EF 82 00 00 00 04 72 4833 00 00 00 07 37 8C 5B A1 D9 5B 8C D4 00 00 00 00 00 0733 00 00 00 07 87 A3 34 A3 7B A5 8E 1C 00 00 00 00 00 0733 00 00 00 05 E5 CF 0F FF 66 2E C9 87 00 00 00 00 00 0533 00 00 00 46 17 E4 75 7A CA FD DA E5 00 00 00 00 00 46✓ 此文件已进行数字签名，证书链已验证。
OK
Gridinsoft Anti-Malware 拥有更强大的病毒扫描引擎。我们建议使用它来更准确地诊断受感染的系统。这个简短的指南将帮助您安装我们的旗舰产品以进行更准确的诊断：
下载反恶意软件此文件看起来是干净的，但定期的安全维护很重要
