Chrome exe (Cent Browser) Cent Studio 文件恶意软件分析

Chrome.exe (Cent Browser) 文件分析

更新于 2 months ago

检查者 Malware Check

chrome.exe

哈希类型	值	操作
MD5	c22e24ebf9336adeafba56f4e57be119
SHA1	411259f829836c2619227359781579840c8197d8
SHA256	2eb455e2f3de4dda9d0f15a986a4c5ba04901a672245eb0687663ee62f3ce9a7
SHA512	6d0c05fb562075327fb25c92d8a105954b887b122a0eff208a764b27ced0649a68c4b93b21f793c70a64f5a4e4b7fbe67049eaf3a61cfb34db7e14ca8d0a517c
ImpHash	d6e00fe09651619968998b259495a017

哈希类型

值

操作

MD5

c22e24ebf9336adeafba56f4e57be119

SHA1

411259f829836c2619227359781579840c8197d8

SHA256

2eb455e2f3de4dda9d0f15a986a4c5ba04901a672245eb0687663ee62f3ce9a7

SHA512

6d0c05fb562075327fb25c92d8a105954b887b122a0eff208a764b27ced0649a68c4b93b21f793c70a64f5a4e4b7fbe67049eaf3a61cfb34db7e14ca8d0a517c

ImpHash

d6e00fe09651619968998b259495a017

PE 分析

基本信息

▼

图标	哈希: 8e1e4838bfd1e5b98bd577e74916ffcd 模糊: fcfaeeda71e1a0c9d50f8c0dcea1c51c dHash: 71c4b2c8c8b2c471
映像基址	`0x140000000`
入口点	`0x14011eca0`
编译时间	2022-07-20 01:00:58
校验和	0x00000000 (实际: 0x00270785)
操作系统版本	5.2
PEiD 签名	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB 路径	`chrome.exe.pdb`
数字签名	No valid SignedData structure was found.
导入	3 库 chrome_elf, KERNEL32, VERSION
导出	4 函数
资源	68 资源
节	13 节

版本信息

▼

CompanyName	Cent Studio
FileDescription	Cent Browser
FileVersion	5.0.1002.354
InternalName	chrome_exe
LegalCopyright	Copyright 2022 Cent Studio. All rights reserved.
OriginalFilename	chrome.exe
ProductName	Cent Browser
ProductVersion	5.0.1002.354
CompanyShortName	Cent Studio
ProductShortName	Cent Browser
LastChange	e51e22f80a0d067416a443ed9c4cb5871f48937a-refs/branch-heads/5005@{#1268}
Official Build	1
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	1,881,385 bytes	1,881,600 bytes	6.58 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C0DBB88C26FF9D580162A5CC8AF74AD6`
`.rdata`	`0x001cd000`	336,996 bytes	337,408 bytes	5.52 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`AFBB1F0667F9D17FA887EFBDE7B47E4B`
`.data`	`0x00220000`	79,984 bytes	39,936 bytes	2.18 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E48049CB6056D7F094EDF5A3AFB40962`
`.pdata`	`0x00234000`	56,544 bytes	56,832 bytes	6.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`CAD26217D2E702C4B96DB7351936E745`
`.00cfg`	`0x00242000`	40 bytes	512 bytes	0.42 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5C0B4937DA99E1A01F7DF1BE5C942C61`
`.detourc`	`0x00243000`	8,688 bytes	8,704 bytes	2.90 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4C28A69FE4D3B3F57F12BCD0E0A2E4DC`
`.gxfg`	`0x00246000`	12,560 bytes	12,800 bytes	5.18 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`CB58F4A5FC0AA105669CD57F93EA8066`
`.retplne`	`0x0024a000`	132 bytes	512 bytes	1.24 (正常)	`0x00000000`	`D17CA29110794ADA129074EA36833412`
`.tls`	`0x0024b000`	313 bytes	512 bytes	0.14 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5F029D9686A3396A822B18D868FF2C83`
`CPADinfo`	`0x0024c000`	56 bytes	512 bytes	0.12 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`60D3EA61D541C9BE2E845D2787FB9574`
`_RDATA`	`0x0024d000`	148 bytes	512 bytes	1.43 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C1BF2229A3C42187F6C9F3FC0B4FCFFD`
`.rsrc`	`0x0024e000`	142,720 bytes	142,848 bytes	4.12 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E7027B72DFB0C49BC96638E462F01CBD`
`.reloc`	`0x00271000`	10,076 bytes	10,240 bytes	5.43 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`EB9265F1ACF338767DD225814D64302D`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 68 (138,897 字节)

资源类型	数量	总大小	百分比
GOOGLEUPDATEAPPLICATIONCOMMANDS	1	4 字节	0%
RT_CURSOR	23	56,516 字节	40.7%
RT_ICON	18	79,401 字节	57.2%
RT_GROUP_CURSOR	21	448 字节	0.3%
RT_GROUP_ICON	3	270 字节	0.2%
RT_VERSION	1	1,128 字节	0.8%
RT_MANIFEST	1	1,130 字节	0.8%

证书链分析

▼

证书 Information

产品	Cent Browser
描述	Cent Browser
文件版本	5.0.1002.354
原始名称	chrome.exe
内部名称	chrome_exe
版权	Copyright 2022 Cent Studio. All rights reserved.

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	chrome.exe
文件类型	PE32+ executable (GUI) x86-64, for MS Windows
扫描器版本	1.0.228.174
数据库版本	2025-10-22 10:00:13 UTC

Chrome.exe (Cent Browser) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别