[分享]PEChecksum PE文件校验和工具
2021-10-5 1301

Written in C, PEChecksum is a command-line utility that gives you the possibility to view and update the checksums of PE items, such as EXE, DLL, OCX, DRV, SYS and MUI files. It offers support for 32-bit and 64-bit files.

Checksums must be updated when it comes to system files if their resources or other data is changed. The command-line switches are treated as files to update checksums for.

The downloaded executable file is lightweight and doesn't require installation. You can save it in any part of the hard drive or a removable storage unit, in order to launch the tool on any computer with minimum effort and no previous setups.

The process can be called from a simple Command Prompt dialog, where it's necessary to go to PEChecksum's location on the disk, as well as to write its name and format, followed by the name and extension of the PE file you want to analyze for checksum. The application should display a message in the form of "Checksum did not change from 0X0..". Otherwise, if you try to access unsupported files, it says "Could not be opened: 0x00..".

PEChecksum 以C语言编写,是一种命令行应用程序。可让您查看和更新 PE 项目的检查库,如 EXE、DLL、OCX、DRV、SYS 和 MUI 文件。它为 32 位和 64 位文件提供支持。

如果系统文件的资源或其他数据发生更改,则必须进行校验和。此命令行程序可以为文件以更新校验和。

下载的可执行文件为绿色版,不需要安装。您可以将其保存在硬盘驱动器的任何部分或可拆卸存储单元中,以便以最少的功耗和以前的设置在任何计算机上启动该工具。

该过程可以从简单的命令提示对话中调用,其中需要前往 PEChecksum 在磁盘上的位置,以及编写其名称和格式,然后是要分析的检查的 PE 文件的名称和扩展。应用程序应以"检查库未更改为0X0"的形式显示消息。否则,如果您尝试访问不受支持的文件,则会说"无法打开:0x00“。

 

最简单的使用方法:将修改之后的文件拖到该文件上面即可。

 

上传的附件:
  • PEChecksum.zip (上传时间:2021-10-05 14:45:10,大小:3.45K,下载次数:44)
收藏
点赞
道具卡
分享
官方QQ群:872611894(人少,慎加😜,群密码无需输入https://)
最新回复 (0)
返回