| 文件名 | Tradução FNV.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 扫描器版本 | 1.0.228.174 |
| 数据库版本 | 2025-10-24 03:00:24 UTC |
恶意软件家族: CoinMiner
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
c7182eb720e9761660ea1100acd99a99
|
|
| SHA1 |
f31f8141f8a0ef677ae7fab87451ccb9a453c032
|
|
| SHA256 |
a84f77ac3027e11e63b199938ec229c767c876cd6638f7913e548fa9a7efc427
|
|
| SHA512 |
54049f5a6d49527bc37d8f2bda356184a7d785aa7bf346044cb41e4576e70879ec358c6e6f605ccdcd20201751154763e2df30bfe98e2fb6e7f60a428fb0ea7e
|
|
| ImpHash |
099c0646ea7282d232219f8807883be0
|
| 图标 |
哈希: ebb7701b07e82f2674d1f72a00926dcc
模糊: 23112929b61824369f0189c08cbf46e4 dHash: 70717171f0a6a2e8 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x0040323f |
| 编译时间 | 2009-12-05 22:51:56 |
| 校验和 | 0x00000000 (实际: 0x007f6672) |
| 操作系统版本 | 4.0 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 数字签名 | No valid SignedData structure was found. |
| 导入 |
8 库
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION |
| 导出 | 0 函数 |
| 资源 | 19 资源 |
| 节 | 5 节 |
| Comments | Instalador da Tradução do Jogo Fallout: New Vegas v1.00 BR desenvolvido por Jenner e MaxFox |
| CompanyName | GameVicio Brasil® |
| FileDescription | Fallout: New Vegas Tradução BR |
| FileVersion | 1.00 |
| LegalCopyright | GameVicio Brasil® |
| ProductName | Fallout: New Vegas Tradução BR |
| Translation | 0x0000 0x04e4 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
23,462 bytes | 23,552 bytes | 6.50 (压缩) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D74313478EDFEADD4AE9198D22CDEDA9 |
.rdata |
0x00007000 |
4,496 bytes | 4,608 bytes | 5.18 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F179218A059068529BDB4637EF5FA28E |
.data |
0x00009000 |
3,917,784 bytes | 1,024 bytes | 4.71 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
1EEC454322408E9A5283DB3EF5E21FEE |
.ndata |
0x003c6000 |
712,704 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00474000 |
172,944 bytes | 173,056 bytes | 7.49 (压缩) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
132720803F6A94641E347C8C7F273205 |
2 检测到较高熵（≥6.5）的节 - 可能存在压缩
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 12 | 168,681 字节 | |
| RT_DIALOG | 4 | 1,238 字节 | |
| RT_GROUP_ICON | 1 | 174 字节 | |
| RT_VERSION | 1 | 812 字节 | |
| RT_MANIFEST | 1 | 958 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
No valid SignedData structure was found.
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
