Dawn of War Definitive Edition Hotkey Editor exe (Dawn of War Definitive Edition Hotkey Editor) Dawn of War Definitive Edition Hotkey Editor 文件恶意软件分析

Dawn of War Definitive Edition Hotkey Editor.exe (Dawn of War Definitive Edition Hotkey Editor) 文件分析

更新于 3 months ago

检查者 Malware Check

Dawn of War Definitive Edition Hotkey Editor.exe

哈希类型	值	操作
MD5	2f166b5b6c5284103182f0a6862efaa7
SHA1	ec3cd88351f29081044be932a04bdc3f8c4e07ce
SHA256	837c5237e2ff9412b49bc869a309fa0ac9a39259eb46b082a9f97158a122de15
SHA512	e94a6a5bac72b9eff6db58f7062cf92a1c95772ce96f982a4acb82c099dceb1f55e8cf0f2f1babc4fff832e3c363061a5f4b442d0c8b396401bade4715d7464d
ImpHash	4b1892ce4fbcfcf064c6f69d693fc6a5

哈希类型

值

操作

MD5

2f166b5b6c5284103182f0a6862efaa7

SHA1

ec3cd88351f29081044be932a04bdc3f8c4e07ce

SHA256

837c5237e2ff9412b49bc869a309fa0ac9a39259eb46b082a9f97158a122de15

SHA512

e94a6a5bac72b9eff6db58f7062cf92a1c95772ce96f982a4acb82c099dceb1f55e8cf0f2f1babc4fff832e3c363061a5f4b442d0c8b396401bade4715d7464d

ImpHash

4b1892ce4fbcfcf064c6f69d693fc6a5

PE 分析

基本信息

▼

图标	哈希: c707c657fc38356917ba771924325433 模糊: 7cc6c623dc2fbb6efabdb0575794a3f5 dHash: 71e8e8f0d4e87170
映像基址	`0x140000000`
入口点	`0x1405c8ec0`
编译时间	2025-07-15 17:47:06
校验和	0x00000000 (实际: 0x03ee579e)
操作系统版本	6.0
PEiD 签名	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB 路径	`D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb`
数字签名	No valid SignedData structure was found.
导入	17 库
导出	5 函数
资源	7 资源
节	10 节

版本信息

▼

Translation	0x0000 0x04b0
CompanyName	Dawn of War Definitive Edition Hotkey Editor
FileDescription	Dawn of War Definitive Edition Hotkey Editor
FileVersion	1.0.0.0
InternalName	Dawn of War Definitive Edition Hotkey Editor.dll
LegalCopyright
OriginalFilename	Dawn of War Definitive Edition Hotkey Editor.dll
ProductName	Dawn of War Definitive Edition Hotkey Editor
ProductVersion	1.0.0+26f4c2919a5e2bb5ded67a800636883c7e213e66
Assembly Version	1.0.0.0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	6,370,892 bytes	6,371,328 bytes	6.45 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`88565FDE09CF30F1F6335B68471BDC49`
`.CLR_UEF`	`0x00615000`	221 bytes	512 bytes	3.10 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9168DE8AD141976AAA90D5E2FA5FBCC0`
`.rdata`	`0x00616000`	1,568,242 bytes	1,568,256 bytes	5.68 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`187F263BB43EFD7CE5C3824A06868689`
`.data`	`0x00795000`	131,028 bytes	38,912 bytes	3.34 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`110AA9F08C61BA039D82A217566A0D8B`
`.pdata`	`0x007b5000`	221,916 bytes	222,208 bytes	6.51 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A4204444A8C908E973D4EF7618E714B4`
`.didat`	`0x007ec000`	56 bytes	512 bytes	0.43 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`ACC3D2146BC779CB81F0B6B100582C1A`
`Section`	`0x007ed000`	8 bytes	512 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`_RDATA`	`0x007ee000`	78,344 bytes	78,848 bytes	5.48 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`617430A8CD708DDA1865FEE2910D8A1A`
`.rsrc`	`0x00802000`	1,346,724 bytes	1,347,072 bytes	6.35 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5FCF87D1F3794F820C0E27DB1C167D6F`
`.reloc`	`0x0094b000`	32,316 bytes	32,768 bytes	5.45 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`B735329ABBCF4A045B57236751D24AEB`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 7 (1,346,098 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	488 字节	0%
RT_RCDATA	3	1,343,952 字节	99.8%
RT_GROUP_ICON	1	20 字节	0%
RT_VERSION	1	1,148 字节	0.1%
RT_MANIFEST	1	490 字节	0%

证书链分析

▼

证书 Information

产品	Dawn of War Definitive Edition Hotkey Editor
描述	Dawn of War Definitive Edition Hotkey Editor
文件版本	1.0.0.0
原始名称	Dawn of War Definitive Edition Hotkey Editor.dll
内部名称	Dawn of War Definitive Edition Hotkey Editor.dll

证书链摘要

Microsoft Windows Code Signing PCA 2024 #1 主要

有效期: 2024-08-08 21:36:23 → 2035-06-23 22:04:01

签名算法: sha384RSA

序列号: 33 00 00 00 1C 48 9F 81 DF A1 B0 B7 77 00 00 00 00 00 1C

.NET DAC #2 链

有效期: 2025-05-08 18:23:58 → 2026-05-06 18:23:58

签名算法: sha384RSA

序列号: 33 00 00 00 5C 91 BA DE E1 AF F7 5E 70 00 00 00 00 00 5C

Microsoft Time-Stamp Service #3 链

有效期: 2024-07-25 18:30:59 → 2025-10-22 18:30:59

签名算法: sha256RSA

序列号: 33 00 00 01 F4 17 46 85 C0 CB 3F 39 E5 00 01 00 00 01 F4

Microsoft Time-Stamp PCA 2010 #4 链

有效期: 2021-09-30 18:22:25 → 2030-09-30 18:32:25

签名算法: sha256RSA

序列号: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Dawn of War Definitive Edition Hotkey Editor.exe
文件类型	PE32+ executable (GUI) x86-64, for MS Windows
扫描器版本	1.0.225.174
数据库版本	2025-09-19 04:00:32 UTC

Dawn of War Definitive Edition Hotkey Editor.exe (Dawn of War Definitive Edition Hotkey Editor) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别