| 文件名 | t1.exe |
| 文件类型 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 扫描器版本 | 1.0.224.174 |
| 数据库版本 | 2025-09-18 03:01:28 UTC |
恶意软件家族: XOREncoded
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
be1b4d5bcb211d3a86bda588c3dc2227
|
|
| SHA1 |
fadfe3366f2a6c1b83198d1e1aa2a003b4ffa63a
|
|
| SHA256 |
3faaca272de97bf3720a4bd62c4717ca67236b15175ccab7a53c9eaf2b5d1c08
|
|
| SHA512 |
38232b6007eaa7eba730685f9f704f45a63c347b930c172c8499f8292d72afcc3bdd6f1de12a90d2acae2acd84b5325aacbcec8d7343372d1ad32fe983ca3a52
|
|
| ImpHash |
f14be6d5d3e38c5c5822177033d5afaa
|
| 映像基址 | 0x140000000 |
| 入口点 | 0x14001cc04 |
| 编译时间 | 2025-09-18 00:21:04 |
| 校验和 | 0x000667f1 (实际: 0x000667f1) |
| 操作系统版本 | 6.0 |
| PEiD 签名 |
PE32+ executable (GUI) x86-64, for MS Windows
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
1 库
KERNEL32 |
| 导出 | 0 函数 |
| 资源 | 2 资源 |
| 节 | 6 节 |
| FileDescription | Project Zomboid Game |
| InternalName | ProjectZomboid.exe |
| OriginalFilename | ProjectZomboid.exe |
| CompanyName | The Indie Stone |
| LegalCopyright | © The Indie Stone. All rights reserved. |
| ProductName | Project Zomboid |
| FileVersion | 42.11.0.0 |
| ProductVersion | 42.11 |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
267,360 bytes | 267,776 bytes | 6.46 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
337FF2EC7C83C40F1F9713C78AE55CB3 |
.rdata |
0x00043000 |
93,542 bytes | 93,696 bytes | 5.27 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
281192ABCDA5B06569C349FBA1360AB2 |
.data |
0x0005a000 |
11,712 bytes | 6,144 bytes | 3.25 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
99CCA593F205B3AAC1CF37D11B8287BE |
.pdata |
0x0005d000 |
12,696 bytes | 12,800 bytes | 5.62 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
642FF7489A1F5F0C09C6C1104D75BDEB |
.reloc |
0x00061000 |
2,556 bytes | 2,560 bytes | 5.44 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
E32C1CB80EE5CDFCF890E27D57E2681F |
.rsrc |
0x00062000 |
2,679 bytes | 3,072 bytes | 4.59 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
73F5E49CDE0C3F6A6624C690A0C8F901 |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_VERSION | 1 | 800 字节 | |
| RT_MANIFEST | 1 | 1,719 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
