RanteySteam exe (RanteySteam Steam Game Manager) Rantey Software Inc 文件恶意软件分析

RanteySteam.exe (RanteySteam - Steam Game Manager) 文件分析

更新于 1 day ago

检查者 Malware Check

RanteySteam.exe

哈希类型	值	操作
MD5	3bd19865572341b5a74dc484b14ead31
SHA1	79cae69ec8d787bf25a9212a271cc7591cbac42b
SHA256	1b24c50de4dfc54a34dd0729f00efca65b693040fdc4e5acef31ab554144f61c
SHA512	e640658f9c21472f9ac6908c901e38a2cf212077b6bc4c9ddfbd18a5fe0f19cbe5c79e8078020623f4331954c6f3f7071bbd28bd696feec3951c4073dad46c44
ImpHash	6a91eb82bfd19d2706c7d43c46f7064e

哈希类型

值

操作

MD5

3bd19865572341b5a74dc484b14ead31

SHA1

79cae69ec8d787bf25a9212a271cc7591cbac42b

SHA256

1b24c50de4dfc54a34dd0729f00efca65b693040fdc4e5acef31ab554144f61c

SHA512

e640658f9c21472f9ac6908c901e38a2cf212077b6bc4c9ddfbd18a5fe0f19cbe5c79e8078020623f4331954c6f3f7071bbd28bd696feec3951c4073dad46c44

ImpHash

6a91eb82bfd19d2706c7d43c46f7064e

PE 分析

基本信息

▼

图标	哈希: 222ae8e72d6b502985a53f80ea596242 模糊: 91f4951dd7c81f0f81238235e0ad012b dHash: 8090b0e9cc663358
映像基址	`0x140000000`
入口点	`0x140011710`
编译时间	2025-06-11 22:15:28
校验和	0x00000000 (实际: 0x00031ed2)
操作系统版本	6.0
PEiD 签名	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB 路径	`D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb`
数字签名	No valid SignedData structure was found.
导入	12 库
导出	0 函数
资源	4 资源
节	6 节

版本信息

▼

Translation	0x0000 0x04b0
Comments	A legitimate Steam game management application developed by Rantey Software. This application helps users manage their Steam game library, download games, and organize their gaming experience. It is not malware and does not contain any harmful code.
CompanyName	Rantey Software Inc.
FileDescription	RanteySteam - Steam Game Manager
FileVersion	2.1.0.0
InternalName	RanteySteam.dll
LegalCopyright	Copyright © Rantey Software Inc. 2025. All rights reserved.
LegalTrademarks	RanteySteam™
OriginalFilename	RanteySteam.dll
ProductName	RanteySteam Game Manager
ProductVersion	2.1.0-stable
Assembly Version	2.1.0.0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	89,628 bytes	90,112 bytes	6.32 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`FC428F1C479963DA3F44CF27BDF9DA73`
`.rdata`	`0x00017000`	48,150 bytes	48,640 bytes	4.81 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`AA3E853390DEDD465760A72F3C673532`
`.data`	`0x00023000`	6,304 bytes	2,560 bytes	2.38 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`34CB04A3D37959FB9578B37F34B67814`
`.pdata`	`0x00025000`	5,088 bytes	5,120 bytes	5.06 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`32974947A5782601B0FE455247E02665`
`.reloc`	`0x00027000`	816 bytes	1,024 bytes	4.79 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`E26FDC03F867F874F2FA3588C6999B15`
`.rsrc`	`0x00028000`	11,752 bytes	11,776 bytes	7.12 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`73B3C55B7EDD58B776C594B06B41CCE1`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 4 (11,446 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	6,455 字节	56.4%
RT_GROUP_ICON	1	20 字节	0.2%
RT_VERSION	1	1,540 字节	13.5%
RT_MANIFEST	1	3,431 字节	30%

证书链分析

▼

证书 Information

产品	RanteySteam Game Manager
描述	RanteySteam - Steam Game Manager
文件版本	2.1.0.0
原始名称	RanteySteam.dll
内部名称	RanteySteam.dll
版权	Copyright © Rantey Software Inc. 2025. All rights reserved.

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	RanteySteam.exe
文件类型	PE32+ executable (GUI) x86-64, for MS Windows
扫描器版本	1.0.221.174
数据库版本	2025-07-19 19:00:24 UTC

RanteySteam.exe (RanteySteam - Steam Game Manager) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别