| 文件名 | Manager14.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 扫描器版本 | 1.0.211.174 |
| 数据库版本 | 2025-03-29 18:01:17 UTC |
恶意软件家族: Agent
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
0d8edd4eb577ab2322d9016d21cb12a9
|
|
| SHA1 |
eea155dff109e347ec216a13005bffed291b4d87
|
|
| SHA256 |
3b70f3c690072153b16141d1614b7b09781bc76973ce0e8af5d3785d9e0e6e58
|
|
| SHA512 |
518ff60093c970069e13b5b6688a190dcf0715b9c4446e0d164f6b4a55bf43f25a392601477971d79e264312393e561e9d5735a8135f8b2915308bed01c77073
|
| 图标 |
哈希: 41c9703a4adab2fd6df2533fa773f858
模糊: 8c210836e9e51533c1fef7a83c9eae3c dHash: 7363355555354545 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x036a1200 |
| 编译时间 | 1971-04-17 14:37:52 |
| 校验和 | 0x00000000 (实际: 0x032a90c8) |
| 操作系统版本 | 5.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 | 0 |
| 导出 | 12 函数 |
| 资源 | 21 资源 |
| 节 | 5 节 |
| CompanyName | Electronic Arts Inc. |
| FileDescription | FIFA Manager 13 |
| FileVersion | 1, 0, 3, 0 |
| InternalName | Manager13 |
| LegalCopyright | (c) 2012 Electronic Arts Inc. |
| OriginalFilename | Manager13.exe |
| ProductName | FIFA Manager 13 |
| ProductVersion | 1, 0, 3, 0 |
| CompanyName | Electronic Arts Inc. |
| FileDescription | FUSSBALL MANAGER 13 |
| FileVersion | 1, 0, 3, 0 |
| InternalName | Manager13 |
| LegalCopyright | (c) 2012 Electronic Arts Inc. |
| OriginalFilename | Manager13.exe |
| ProductName | FUSSBALL MANAGER 13 |
| ProductVersion | 1, 0, 3, 0 |
| CompanyName | Electronic Arts Inc. |
| FileDescription | FIFA Manager 13 |
| FileVersion | 1, 0, 3, 0 |
| InternalName | Manager13 |
| LegalCopyright | (c) 2012 Electronic Arts Inc. |
| OriginalFilename | Manager13.exe |
| ProductName | FIFA Manager 13 |
| ProductVersion | 1, 0, 3, 0 |
| CompanyName | Electronic Arts Inc. |
| FileDescription | FIFA Manager 13 |
| FileVersion | 1, 0, 3, 0 |
| InternalName | Manager13 |
| LegalCopyright | (c) 2012 Electronic Arts Inc. |
| OriginalFilename | Manager13.exe |
| ProductName | FIFA Manager 13 |
| ProductVersion | 1, 0, 3, 0 |
| CompanyName | Electronic Arts Inc. |
| FileDescription | LFP Manager 13 |
| FileVersion | 1, 0, 3, 0 |
| InternalName | Manager13 |
| LegalCopyright | (c) 2012 Electronic Arts Inc. |
| OriginalFilename | Manager13.exe |
| ProductName | LFP Manager 13 |
| ProductVersion | 1, 0, 3, 0 |
| Translation | 0x040c 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
33,175,040 bytes | 33,175,040 bytes | 8.00 (打包/加密) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
273FFC5FEB393C136099A58075F66759 |
.rdata |
0x01fa5000 |
3,181,568 bytes | 3,181,568 bytes | 5.49 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D5166B881A7FE7A9A1DE5EE4F3489215 |
.data |
0x022ae000 |
15,963,780 bytes | 15,964,160 bytes | 2.96 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A7F09E6340FF363F25D8C095C72C60A8 |
.rsrc |
0x031e8000 |
740,960 bytes | 741,376 bytes | 3.74 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
12E9326383AF045B39B8811415C23847 |
.JwjUgXi |
0x0329d000 |
20,480 bytes | 20,480 bytes | 7.45 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A287FC14EB8CEAC0FA8D76D1AAC4C583 |
1 检测到高熵（≥7.5）的节 - 可能存在打包/加密
1 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| PAL | 1 | 1,048 字节 | |
| RT_ICON | 16 | 735,104 字节 | |
| RT_GROUP_ICON | 2 | 236 字节 | |
| RT_VERSION | 1 | 3,068 字节 | |
| RT_MANIFEST | 1 | 346 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
