| 文件名 | Activator.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.158.174 |
| 数据库版本 | 2024-02-03 20:00:31 UTC |
恶意软件家族: H
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
4050a309a46bec6613ef238a1c28da4a
|
|
| SHA1 |
6fc69b2bc0008d270bac83fde79c8c7371c6d7cf
|
|
| SHA256 |
f86fe0f9565274408e09705385bfb22a85f21ab0dcb03a91fc217c8a92fc81f0
|
|
| SHA512 |
d18c08009bf78e375efdb1e0ab7cb049601b8c4ba8434295570eb528f59602f32b3218fdae67a51cd58d254de34e64d15929da7819f3b573a28de99325c04941
|
|
| ImpHash |
e701e8ef4e4dc8123b85c54c8532abb5
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x140038e08 |
| 编译时间 | 2022-04-14 16:28:42 |
| 校验和 | 0x000f9cab (实际: 0x00356fa3) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | The expected hash does not match the digest in SpcInfo |
| 导入 |
6 库
libcurl, COMCTL32, SHLWAPI, KERNEL32, USER32, SHELL32 |
| 导出 | 0 函数 |
| 资源 | 6 资源 |
| 节 | 6 节 |
| DigiCert Assured ID Root CA | DigiCert Inc (US) |
| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA | DigiCert, Inc. (US) |
| DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 | Notepad++ (FR) |
| Translation | 0x0409 0x04b0 |
| CompanyName | Don HO [email protected] |
| FileDescription | WinGup for Notepad++ |
| FileVersion | 5.23 |
| InternalName | gup.exe |
| LegalCopyright | Copyright 2018 by Don HO |
| OriginalFilename | gup.exe |
| ProductName | WinGup for Notepad++ |
| ProductVersion | 5.23 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
681,952 bytes | 681,984 bytes | 6.47 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
09438F54964D3EB727678E6188371CEF |
.rdata |
0x000a8000 |
222,232 bytes | 222,720 bytes | 4.90 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1221291200FD1A48EF50A53C80452568 |
.data |
0x000df000 |
27,028 bytes | 18,432 bytes | 4.26 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
722B209EEC53E10639A67D27EF47EF7C |
.pdata |
0x000e6000 |
31,608 bytes | 31,744 bytes | 5.96 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
56B673A4ED5639026CB9733D1E76175C |
.rsrc |
0x000ee000 |
3,392 bytes | 3,584 bytes | 4.05 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A1F69B302EE7D4684F811F577EB64645 |
.reloc |
0x000ef000 |
6,668 bytes | 7,168 bytes | 5.34 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
3DC962E67B7FD3823721F561F880D0EC |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_DIALOG | 4 | 1,380 字节 | |
| RT_VERSION | 1 | 738 字节 | |
| RT_MANIFEST | 1 | 868 字节 |
| 主题 |
DigiCert Trusted Root G4 DigiCert Inc US |
| 颁发者 | DigiCert Assured ID Root CA |
| 序列号 | 1516373402409301898457830903294251968 |
| 主题 |
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US |
| 颁发者 | DigiCert Trusted Root G4 |
| 序列号 | 9586110043380832440035821245782711899 |
| 主题 |
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 DigiCert, Inc. US |
| 颁发者 | DigiCert Trusted Root G4 |
| 序列号 | 11533403529598586876501374841704918745 |
| 主题 |
DigiCert Timestamp 2022 - 2 DigiCert, Inc. US |
| 颁发者 | DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA |
| 序列号 | 13927251897073529254730216701512030109 |
| 主题 |
Notepad++ Notepad++ FR |
| 颁发者 | DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| 序列号 | 4872414330473945572429479197100848202 |
The expected hash does not match the digest in SpcInfo
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
