GameOverlayRenderer64 dll (GSE Overlay Renderer) GSE 文件恶意软件分析

GameOverlayRenderer64.dll (GSE Overlay Renderer) 文件分析

更新于 2 months ago

检查者 Malware Check

GameOverlayRenderer64.dll

哈希类型	值	操作
MD5	d254977a700e55c1a541ea8019d79de2
SHA1	b42bff2597bbaa6dff9a74b2e2f68cc25477c8f1
SHA256	5e6c244edf7479d43f2a24b1086c8df4990c39d7e686572c12cf18b5d138114f
SHA512	8bb951fe611a6a478bd8e3112b0a0b28d532d728c969fa783667325c487f4ce3f0359322a0e0221b5b4fd79d9cbbeb64a38b8d6d819feceb10d0d777389c8cee
ImpHash	894b54c3c53980ad207e2ed90caa6d31

哈希类型

值

操作

MD5

d254977a700e55c1a541ea8019d79de2

SHA1

b42bff2597bbaa6dff9a74b2e2f68cc25477c8f1

SHA256

5e6c244edf7479d43f2a24b1086c8df4990c39d7e686572c12cf18b5d138114f

SHA512

8bb951fe611a6a478bd8e3112b0a0b28d532d728c969fa783667325c487f4ce3f0359322a0e0221b5b4fd79d9cbbeb64a38b8d6d819feceb10d0d777389c8cee

ImpHash

894b54c3c53980ad207e2ed90caa6d31

PE 分析

基本信息

▼

映像基址	`0x180000000`
入口点	`0x1800013b4`
编译时间	2024-09-15 15:29:50
校验和	0x0002354d (实际: 0x0002354d)
操作系统版本	6.0
PEiD 签名	`PE32+ executable (DLL) (GUI) x86-64, for MS Windows`
数字签名	Chain verification from C=UK, O=GSE, OU=GSE, CN=GSE (serial:286883504428286089018732251220542453500753239181, sha1:530da998901ee0839b8cd1e58864ae5d46f8cf9f) failed: The X.509 certificate provided is self-signed - "Common Name: GSE, Organizational Unit: GSE, Organization: GSE, Country: UK"
导入	1 库 KERNEL32
导出	12 函数
资源	5 资源
节	6 节

版本信息

▼

LegalCopyright	Copyright (C) 2007
InternalName	GameOverlayRenderer (win64)
FileVersion	08.74.80.95
CompanyName	GSE
ProductVersion	01.00.00.01
FileDescription	GSE Overlay Renderer
Source Control ID	8748095
OriginalFilename	GameOverlayRenderer.dll
ProductName	GSE Overlay Renderer
Translation	0x0409 0x04b0
CompanyName	GSE
FileDescription	GSE Overlay Renderer
FileVersion	1, 0, 0, 1
InternalName	GameOverlayRenderer
LegalCopyright	Copyright (C) 2007
OriginalFilename	GameOverlayRenderer.dll
ProductName	GSE Overlay Renderer
ProductVersion	1, 0, 0, 1
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	55,968 bytes	56,320 bytes	6.45 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`21EF10869695C65F5C6A047CA4164109`
`.rdata`	`0x0000f000`	38,966 bytes	39,424 bytes	4.68 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`37EE4C8F2F2BC62CFB6BFA2B98D87249`
`.data`	`0x00019000`	7,312 bytes	3,072 bytes	1.91 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C2284B0DE7CC19A019F41CF1FF8CD9D`
`.pdata`	`0x0001b000`	3,996 bytes	4,096 bytes	4.76 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7AF55DD3EDC88EC13BA20FCE88F0DFA2`
`.rsrc`	`0x0001c000`	5,240 bytes	5,632 bytes	3.49 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8A0F8D9A89A3E8650320F36F711B51FB`
`.reloc`	`0x0001e000`	1,616 bytes	2,048 bytes	4.88 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`B90B4CD7E414F8041567F98D6FC37F14`

资源分析

▼

资源总数: 5 (4,810 字节)

资源类型	数量	总大小	百分比
SCID	1	7 字节	0.1%
WEVT_TEMPLATE	1	2,802 字节	58.3%
RT_VERSION	2	1,620 字节	33.7%
RT_MANIFEST	1	381 字节	7.9%

证书链分析

▼

证书 Information

产品	GSE Overlay Renderer
描述	GSE Overlay Renderer
文件版本	08.74.80.95
原始名称	GameOverlayRenderer.dll
验证状态	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
签名者	GSE
内部名称	GameOverlayRenderer (win64)
版权	Copyright (C) 2007

证书链摘要

GSE #1 主要

有效期: 2024-09-15 15:29:51 → 2039-11-01 15:29:51

签名算法: sha256RSA

序列号: 32 40 4D 1E FF B6 6F 90 9E C9 F5 40 83 33 60 17 C8 60 5C 8D

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

Chain verification from C=UK, O=GSE, OU=GSE, CN=GSE (serial:286883504428286089018732251220542453500753239181, sha1:530da998901ee0839b8cd1e58864ae5d46f8cf9f) failed: The X.509 certificate provided is self-signed - "Common Name: GSE, Organizational Unit: GSE, Organization: GSE, Country: UK"

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	GameOverlayRenderer64.dll
文件类型	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
扫描器版本	1.0.227.174
数据库版本	2025-10-14 23:00:16 UTC

GameOverlayRenderer64.dll (GSE Overlay Renderer) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别