Setup exe (The Last of Us Part II Remastered Setup) SelezenRepack 文件恶意软件分析

Setup.exe (The Last of Us Part II Remastered Setup) 文件分析

更新于 13 days ago

检查者 Malaware Check

Setup.exe

哈希类型	值	操作
MD5	593dd9640bc6247b4e656e28e46abe0b
SHA1	5d81dec87d18cda255348dbcc6a59b8ca26fc3fc
SHA256	393b6d7e447d4e04784a41f457da81289ffb48525d95b139b69e53bb2352f281
SHA512	4c6204b437b856082e79ee499138e443b450826a64bf7e577bda9480eda71cdac2eecc973e9519682527f5862cd2f0bbf22bd96ccd77e8be36fb7e725c2547ae
ImpHash	5a594319a0d69dbc452e748bcf05892e

哈希类型

值

操作

MD5

593dd9640bc6247b4e656e28e46abe0b

SHA1

5d81dec87d18cda255348dbcc6a59b8ca26fc3fc

SHA256

393b6d7e447d4e04784a41f457da81289ffb48525d95b139b69e53bb2352f281

SHA512

4c6204b437b856082e79ee499138e443b450826a64bf7e577bda9480eda71cdac2eecc973e9519682527f5862cd2f0bbf22bd96ccd77e8be36fb7e725c2547ae

ImpHash

5a594319a0d69dbc452e748bcf05892e

PE 分析

基本信息

▼

图标	哈希: 001457dbbfd3694ba24f05b4753ccd53 模糊: 130af139c682ebbec0622638dcc6d818 dHash: e260cc78e0cc79b0
映像基址	`0x00400000`
入口点	`0x004b5eec`
编译时间	2020-05-21 05:56:23
校验和	0x00000000 (实际: 0x005b2f47)
操作系统版本	6.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	7 库 kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
导出	3 函数
资源	18 资源
节	10 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	SelezenRepack
FileDescription	The Last of Us Part II Remastered Setup
FileVersion	1.0.0.0
LegalCopyright	selezen.games
OriginalFileName
ProductName	The Last of Us Part II Remastered
ProductVersion	1.0.0.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	734,724 bytes	735,232 bytes	6.35 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`364BC619A502D7F0A97ABA31E34B82D2`
`.itext`	`0x000b5000`	5,764 bytes	6,144 bytes	5.97 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`282B489EAC439B258C98EC516C03C2CD`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.04 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`342785CF6BA6DE905CA393413E77B906`
`.bss`	`0x000bb000`	28,064 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	3,894 bytes	4,096 bytes	4.90 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A73D686F1E8B9BB06EC767721135E397`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.76 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`41B8CE23DD243D14BEEBC71771885C89`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.87 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`43F8D31E224BBD887C839F21E694B898`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	126,828 bytes	126,976 bytes	7.86 (打包/加密)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`CC6A4B8ECC0CF6AA2038601AA7E3CE97`

熵分析警报

1 检测到高熵（≥7.5）的节 - 可能存在打包/加密

资源分析

▼

资源总数: 18 (125,743 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	113,673 字节	90.4%
RT_STRING	11	8,040 字节	6.4%
RT_RCDATA	3	768 字节	0.6%
RT_GROUP_ICON	1	20 字节	0%
RT_VERSION	1	1,412 字节	1.1%
RT_MANIFEST	1	1,830 字节	1.5%

证书链分析

▼

证书 Information

产品	The Last of Us Part II Remastered
描述	The Last of Us Part II Remastered Setup
文件版本	1.0.0.0
版权	selezen.games

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.217.174
数据库版本	2025-05-25 16:00:22 UTC

Setup.exe (The Last of Us Part II Remastered Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别