General
-
Target
OnlinkSetup-0.2.6-b2.exe
-
Size
11.1MB
-
MD5
5084ef7135908f605aad78e78bb46a02
-
SHA1
b64229374078fa39688aa5f523600161aafa5b34
-
SHA256
05cb547f2187cd4df13aa6595ffd806b6d499f51c8bec9dcfb431e9926175443
-
SHA512
291ccec6eeb7a403472cbddf2b5a267096a6c53b9f1d544ecb1531f835fe127038b7ac732e1b5cb2e5249ecf836de163a28488613515567ef353acf9ac9352b6
-
SSDEEP
196608:Gy632AQF4bqkcfqyR8oWq8HBuTmmY/7VGfyoDFdfdQ6IowCTeOixY9A8Sxx:BR4bqkLyR9x8hFmYTMFDFdf7IoHy2s
Score
3/10
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 4 IoCs
Files
-
OnlinkSetup-0.2.6-b2.exe
3abe302b6d9a1256e6a915429af4ffd2
Headers
Imports
Sections
-
Onlink-x86.exe
9e8a13a86b9cf99959c1399001f574df
Headers
Imports
Sections
-
Uninstall.exe
3abe302b6d9a1256e6a915429af4ffd2
Headers
Imports
Sections
-
data.dat
-
data/agentaliases.txt
-
data/allergies.txt
-
data/companya.txt
-
data/companyb.txt
-
data/fornames.txt
-
data/fornames_f.txt
-
data/gatewaydefs.txt
-
data/medical.txt
-
data/medication.txt
-
data/newgatewaydefs.txt
-
data/providers.txt
-
data/psych.txt
-
data/spam.txt
-
data/spam_t.txt
-
data/surnames.txt
-
data/wordlist.txt
-
fonts/battle3.ttf
-
fonts/dungeon.ttf
-
graphics/accessdenied.png
-
graphics/accessgranted.png
-
graphics/add.png
-
graphics/add_c.png
-
graphics/add_h.png
-
graphics/analyser/localhost.png
-
graphics/analyser/localhost_c.png
-
graphics/analyser/localhost_h.png
-
graphics/analyser/nonsecure.png
-
graphics/analyser/nonsecure_c.png
-
graphics/analyser/nonsecure_h.png
-
graphics/analyser/remotehost.png
-
graphics/analyser/remotehost_c.png
-
graphics/analyser/remotehost_h.png
-
graphics/analyser/secure.png
-
graphics/analyser/secure_c.png
-
graphics/analyser/secure_h.png
-
graphics/analyser/unknown.png
-
graphics/awards/award0.png
-
graphics/awards/award1.png
-
graphics/awards/award10.png
-
graphics/awards/award11.png
-
graphics/awards/award12.png
-
graphics/awards/award13.png
-
graphics/awards/award14.png
-
graphics/awards/award2.png
-
graphics/awards/award3.png
-
graphics/awards/award4.png
-
graphics/awards/award5.png
-
graphics/awards/award6.png
-
graphics/awards/award7.png
-
graphics/awards/award8.png
-
graphics/awards/award9.png
-
graphics/awards/template.png
-
graphics/back.png
-
graphics/back_c.png
-
graphics/back_h.png
-
graphics/close.png
-
graphics/close_c.png
-
graphics/close_h.png
-
graphics/dialler/dash.png
-
graphics/dialler/dash_h.png
-
graphics/dialler/dot.png
-
graphics/dialler/dot_h.png
-
graphics/dialler/eight.png
-
graphics/dialler/eight_h.png
-
graphics/dialler/five.png
-
graphics/dialler/five_h.png
-
graphics/dialler/four.png
-
graphics/dialler/four_h.png
-
graphics/dialler/nine.png
-
graphics/dialler/nine_h.png
-
graphics/dialler/one.png
-
graphics/dialler/one_h.png
-
graphics/dialler/seven.png
-
graphics/dialler/seven_h.png
-
graphics/dialler/six.png
-
graphics/dialler/six_h.png
-
graphics/dialler/three.png
-
graphics/dialler/three_h.png
-
graphics/dialler/two.png
-
graphics/dialler/two_h.png
-
graphics/dialler/zero.png
-
graphics/dialler/zero_h.png
-
graphics/down.png
-
graphics/down_c.png
-
graphics/down_h.png
-
graphics/gateway/cooling.png
-
graphics/gateway/cpu.png
-
graphics/gateway/gateway0.png
-
graphics/gateway/gateway1.png
-
graphics/gateway/gateway10.png
-
graphics/gateway/gateway2.png
-
graphics/gateway/gateway3.png
-
graphics/gateway/gateway4.png
-
graphics/gateway/gateway5.png
-
graphics/gateway/gateway6.png
-
graphics/gateway/gateway7.png
-
graphics/gateway/gateway8.png
-
graphics/gateway/gateway9.png
-
graphics/gateway/memory.png
-
graphics/gateway/modem.png
-
graphics/gateway/power.png
-
graphics/gateway/ram.png
-
graphics/gateway/sata.png
-
graphics/gateway/security.png
-
graphics/hud/admin.png
-
graphics/hud/admin_c.png
-
graphics/hud/admin_d.png
-
graphics/hud/admin_h.png
-
graphics/hud/analyser.png
-
graphics/hud/analyser_c.png
-
graphics/hud/analyser_d.png
-
graphics/hud/analyser_h.png
-
graphics/hud/bio.png
-
graphics/hud/bio_c.png
-
graphics/hud/bio_d.png
-
graphics/hud/bio_h.png
-
graphics/hud/connect.png
-
graphics/hud/connect_c.png
-
graphics/hud/connect_d.png
-
graphics/hud/connect_h.png
-
graphics/hud/email.png
-
graphics/hud/email_c.png
-
graphics/hud/email_d.png
-
graphics/hud/email_h.png
-
graphics/hud/finance.png
-
graphics/hud/finance_c.png
-
graphics/hud/finance_d.png
-
graphics/hud/finance_h.png
-
graphics/hud/hardware.png
-
graphics/hud/hardware_c.png
-
graphics/hud/hardware_d.png
-
graphics/hud/hardware_h.png
-
graphics/hud/irc.png
-
graphics/hud/irc_c.png
-
graphics/hud/irc_d.png
-
graphics/hud/irc_h.png
-
graphics/hud/keyboard.png
-
graphics/hud/keyboard_c.png
-
graphics/hud/keyboard_d.png
-
graphics/hud/keyboard_h.png
-
graphics/hud/keypad.png
-
graphics/hud/keypad_c.png
-
graphics/hud/keypad_d.png
-
graphics/hud/keypad_h.png
-
graphics/hud/lan.png
-
graphics/hud/lan_c.png
-
graphics/hud/lan_d.png
-
graphics/hud/lan_h.png
-
graphics/hud/memory.png
-
graphics/hud/memory_c.png
-
graphics/hud/memory_d.png
-
graphics/hud/memory_h.png
-
graphics/hud/music.png
-
graphics/hud/music_c.png
-
graphics/hud/music_d.png
-
graphics/hud/music_h.png
-
graphics/hud/newmail.png
-
graphics/hud/newmail_c.png
-
graphics/hud/newmail_d.png
-
graphics/hud/newmail_h.png
-
graphics/hud/note.png
-
graphics/hud/note_c.png
-
graphics/hud/note_d.png
-
graphics/hud/note_h.png
-
graphics/hud/notepad.png
-
graphics/hud/notepad_c.png
-
graphics/hud/notepad_d.png
-
graphics/hud/notepad_h.png
-
graphics/hud/pc.png
-
graphics/hud/pc_c.png
-
graphics/hud/pc_d.png
-
graphics/hud/pc_h.png
-
graphics/hud/pcf.png
-
graphics/hud/pcf_c.png
-
graphics/hud/pcf_d.png
-
graphics/hud/pcf_h.png
-
graphics/hud/pcs.png
-
graphics/hud/pcs_c.png
-
graphics/hud/pcs_d.png
-
graphics/hud/pcs_h.png
-
graphics/hud/programmer.png
-
graphics/hud/programmer_c.png
-
graphics/hud/programmer_d.png
-
graphics/hud/programmer_h.png
-
graphics/hud/software.png
-
graphics/hud/software_c.png
-
graphics/hud/software_d.png
-
graphics/hud/software_h.png
-
graphics/hud/speed0.png
-
graphics/hud/speed0_c.png
-
graphics/hud/speed0_h.png
-
graphics/hud/speed1.png
-
graphics/hud/speed1_c.png
-
graphics/hud/speed1_h.png
-
graphics/hud/speed2.png
-
graphics/hud/speed2_c.png
-
graphics/hud/speed2_h.png
-
graphics/hud/speed3.png
-
graphics/hud/speed3_c.png
-
graphics/hud/speed3_h.png
-
graphics/hud/status.png
-
graphics/hud/status_c.png
-
graphics/hud/status_d.png
-
graphics/hud/status_h.png
-
graphics/hud/terminal.png
-
graphics/hud/terminal_c.png
-
graphics/hud/terminal_d.png
-
graphics/hud/terminal_h.png
-
graphics/hud/todo.png
-
graphics/hud/todo_c.png
-
graphics/hud/todo_d.png
-
graphics/hud/todo_h.png
-
graphics/irc/smileygravy.png
-
graphics/irc/smileyhappy.png
-
graphics/irc/smileykawaii.png
-
graphics/irc/smileyrage.png
-
graphics/irc/smileysad.png
-
graphics/irc/smileyslant.png
-
graphics/irc/smileysurprised.png
-
graphics/irc/smileytongue.png
-
graphics/irc/smileyunknown.png
-
graphics/irc/smileywink.png
-
graphics/irc/smileywinktongue.png
-
graphics/irc/smileyworried.png
-
graphics/lan/authentication.png
-
graphics/lan/centralsystem.png
-
graphics/lan/hub.png
-
graphics/lan/isolation.png
-
graphics/lan/key.png
-
graphics/lan/lock.png
-
graphics/lan/mailserver.png
-
graphics/lan/modem.png
-
graphics/lan/radiorec.png
-
graphics/lan/radiotrans.png
-
graphics/lan/router.png
-
graphics/lan/terminal.png
-
graphics/link.png
-
graphics/link_c.png
-
graphics/link_h.png
-
graphics/loading/bluedive.png
-
graphics/loading/eye.png
-
graphics/loading/eye2.png
-
graphics/loading/filenames.txt
-
graphics/loading/kris.png
-
graphics/loading/loading.png
-
graphics/logos/ferrousmoon.png
-
graphics/logos/uplinkism.png
-
graphics/mainmenu/episode01.png
-
graphics/mainmenu/exitgame.png
-
graphics/mainmenu/exitgame_c.png
-
graphics/mainmenu/exitgame_h.png
-
graphics/mainmenu/gameoptions.png
-
graphics/mainmenu/gameoptions_c.png
-
graphics/mainmenu/gameoptions_h.png
-
graphics/mainmenu/graphicsoptions.png
-
graphics/mainmenu/graphicsoptions_c.png
-
graphics/mainmenu/graphicsoptions_h.png
-
graphics/mainmenu/loadgame.png
-
graphics/mainmenu/loadgame_c.png
-
graphics/mainmenu/loadgame_h.png
-
graphics/mainmenu/networkoptions.png
-
graphics/mainmenu/networkoptions_c.png
-
graphics/mainmenu/networkoptions_h.png
-
graphics/mainmenu/newgame.png
-
graphics/mainmenu/newgame_c.png
-
graphics/mainmenu/newgame_h.png
-
graphics/mainmenu/newpatch.png
-
graphics/mainmenu/onlinklogo.png
-
graphics/mainmenu/onlinktitle.png
-
graphics/mainmenu/optionno.png
-
graphics/mainmenu/options.png
-
graphics/mainmenu/options_c.png
-
graphics/mainmenu/options_h.png
-
graphics/mainmenu/optionyes.png
-
graphics/mainmenu/pi.png
-
graphics/mainmenu/pi_c.png
-
graphics/mainmenu/pi_h.png
-
graphics/mainmenu/soundoptions.png
-
graphics/mainmenu/soundoptions_c.png
-
graphics/mainmenu/soundoptions_h.png
-
graphics/mainmenu/team1.png
-
graphics/mainmenu/team2.png
-
graphics/mainmenu/team3.png
-
graphics/mainmenu/team4.png
-
graphics/mainmenu/theme.png
-
graphics/mainmenu/theme_c.png
-
graphics/mainmenu/theme_h.png
-
graphics/menuscreenoption.png
-
graphics/menuscreenoption_c.png
-
graphics/menuscreenoption_h.png
-
graphics/passwordscreen.png
-
graphics/proceed.png
-
graphics/proceed_c.png
-
graphics/proceed_h.png
-
graphics/records/photo0.png
-
graphics/records/photo1.png
-
graphics/records/photo10.png
-
graphics/records/photo1000.png
-
graphics/records/photo1001.png
-
graphics/records/photo1003.png
-
graphics/records/photo1005.png
-
graphics/records/photo11.png
-
graphics/records/photo12.png
-
graphics/records/photo13.png
-
graphics/records/photo14.png
-
graphics/records/photo15.png
-
graphics/records/photo16.png
-
graphics/records/photo17.png
-
graphics/records/photo18.png
-
graphics/records/photo19.png
-
graphics/records/photo2.png
-
graphics/records/photo20.png
-
graphics/records/photo21.png
-
graphics/records/photo22.png
-
graphics/records/photo23.png
-
graphics/records/photo24.png
-
graphics/records/photo25.png
-
graphics/records/photo26.png
-
graphics/records/photo27.png
-
graphics/records/photo28.png
-
graphics/records/photo29.png
-
graphics/records/photo3.png
-
graphics/records/photo30.png
-
graphics/records/photo31.png
-
graphics/records/photo32.png
-
graphics/records/photo33.png
-
graphics/records/photo34.png
-
graphics/records/photo35.png
-
graphics/records/photo36.png
-
graphics/records/photo37.png
-
graphics/records/photo38.png
-
graphics/records/photo39.png
-
graphics/records/photo4.png
-
graphics/records/photo40.png
-
graphics/records/photo41.png
-
graphics/records/photo42.png
-
graphics/records/photo43.png
-
graphics/records/photo44.png
-
graphics/records/photo45.png
-
graphics/records/photo46.png
-
graphics/records/photo47.png
-
graphics/records/photo48.png
-
graphics/records/photo49.png
-
graphics/records/photo5.png
-
graphics/records/photo50.png
-
graphics/records/photo6.png
-
graphics/records/photo7.png
-
graphics/records/photo8.png
-
graphics/records/photo9.png
-
graphics/records/print1.png
-
graphics/records/print10.png
-
graphics/records/print11.png
-
graphics/records/print12.png
-
graphics/records/print13.png
-
graphics/records/print14.png
-
graphics/records/print15.png
-
graphics/records/print16.png
-
graphics/records/print17.png
-
graphics/records/print18.png
-
graphics/records/print19.png
-
graphics/records/print2.png
-
graphics/records/print20.png
-
graphics/records/print21.png
-
graphics/records/print22.png
-
graphics/records/print23.png
-
graphics/records/print24.png
-
graphics/records/print25.png
-
graphics/records/print3.png
-
graphics/records/print4.png
-
graphics/records/print5.png
-
graphics/records/print6.png
-
graphics/records/print7.png
-
graphics/records/print8.png
-
graphics/records/print9.png
-
graphics/records/retina1.png
-
graphics/records/retina10.png
-
graphics/records/retina2.png
-
graphics/records/retina3.png
-
graphics/records/retina4.png
-
graphics/records/retina5.png
-
graphics/records/retina6.png
-
graphics/records/retina7.png
-
graphics/records/retina8.png
-
graphics/records/retina9.png
-
graphics/researchoff.png
-
graphics/researchon.png
-
graphics/sanctum/chen.png
-
graphics/sanctum/chen_h.png
-
graphics/sanctum/chien.png
-
graphics/sanctum/chien_h.png
-
graphics/sanctum/kan.png
-
graphics/sanctum/kan_h.png
-
graphics/sanctum/kel.png
-
graphics/sanctum/kel_h.png
-
graphics/sanctum/ken.png
-
graphics/sanctum/ken_h.png
-
graphics/sanctum/kun.png
-
graphics/sanctum/kun_h.png
-
graphics/sanctum/li.png
-
graphics/sanctum/li_h.png
-
graphics/sanctum/sun.png
-
graphics/sanctum/sun_h.png
-
graphics/sanctum/tui.png
-
graphics/sanctum/tui_h.png
-
graphics/software/audiooff.png
-
graphics/software/audiooff_c.png
-
graphics/software/audiooff_h.png
-
graphics/software/audioon.png
-
graphics/software/audioon_c.png
-
graphics/software/audioon_h.png
-
graphics/software/com.png
-
graphics/software/cpp.png
-
graphics/software/cpy.png
-
graphics/software/ctg.png
-
graphics/software/dec.png
-
graphics/software/del.png
-
graphics/software/enc.png
-
graphics/software/go.png
-
graphics/software/greenlight.png
-
graphics/software/greylight.png
-
graphics/software/lan.png
-
graphics/software/log.png
-
graphics/software/pause.png
-
graphics/software/pause_c.png
-
graphics/software/pause_h.png
-
graphics/software/play.png
-
graphics/software/play_c.png
-
graphics/software/play_h.png
-
graphics/software/proxy.png
-
graphics/software/proxybypass.png
-
graphics/software/redlight.png
-
graphics/start/gateway.png
-
graphics/start/localhost_linux.png
-
graphics/start/localhost_mac.png
-
graphics/start/localhost_win32.png
-
graphics/start/publicaccessserver.png
-
graphics/theme.txt
-
graphics/up.png
-
graphics/up_c.png
-
graphics/up_h.png
-
graphics/upgrades/cpu.png
-
graphics/upgrades/cpu_c.png
-
graphics/upgrades/cpu_h.png
-
graphics/upgrades/exit.png
-
graphics/upgrades/exit_c.png
-
graphics/upgrades/exit_h.png
-
graphics/upgrades/memory.png
-
graphics/upgrades/memory_c.png
-
graphics/upgrades/memory_h.png
-
graphics/upgrades/modem.png
-
graphics/upgrades/modem_c.png
-
graphics/upgrades/modem_h.png
-
graphics/upgrades/power.png
-
graphics/upgrades/power_c.png
-
graphics/upgrades/power_h.png
-
graphics/upgrades/ram.png
-
graphics/upgrades/ram_c.png
-
graphics/upgrades/ram_h.png
-
graphics/upgrades/sata.png
-
graphics/upgrades/sata_c.png
-
graphics/upgrades/sata_h.png
-
graphics/upgrades/security.png
-
graphics/upgrades/security_c.png
-
graphics/upgrades/security_h.png
-
graphics/userid.png
-
graphics/vdpin/armed.png
-
graphics/vdpin/disarmed.png
-
graphics/vdpin/light1.png
-
graphics/vdpin/light1_c.png
-
graphics/vdpin/light1_h.png
-
graphics/vdpin/light2.png
-
graphics/vdpin/light2_c.png
-
graphics/vdpin/light2_h.png
-
graphics/vdpin/light3.png
-
graphics/vdpin/light3_c.png
-
graphics/vdpin/light3_h.png
-
graphics/vdpin/light4.png
-
graphics/vdpin/light4_c.png
-
graphics/vdpin/light4_h.png
-
graphics/vdpin/lightback.png
-
graphics/vdpin/lightpass_off.png
-
graphics/vdpin/lightpass_on.png
-
graphics/vdpin/lock.png
-
graphics/vdpin/off.png
-
graphics/vdpin/on.png
-
graphics/vdpin/sealed.png
-
graphics/vdpin/vsecback.png
-
graphics/worldmaplarge.png
-
graphics/worldmaplarge_defcon.png
-
graphics/worldmaplarge_defcon_hd.png
-
graphics/worldmaplarge_mask.png
-
graphics/worldmaplarge_mask_defcon.png
-
graphics/worldmaplarge_mask_defcon_hd.png
-
graphics/worldmapsmall.png
-
graphics/worldmapsmall_defcon.png
-
graphics/worldmapsmall_defcon_hd.png
-
music/003.uni
-
music/a94final.uni
-
music/bluevalley.uni
-
music/clouds.uni
-
music/ingmae2.uni
-
music/myst2.uni
-
music/myst3.uni
-
music/mystique.uni
-
music/pink.uni
-
music/plugnfuk.uni
-
music/sas.uni
-
music/serenity.uni
-
music/strange.uni
-
music/symphonic.uni
-
music/ultra.uni
-
patches/save.txt
-
sounds/0.wav
-
sounds/1.wav
-
sounds/2.wav
-
sounds/3.wav
-
sounds/4.wav
-
sounds/5.wav
-
sounds/6.wav
-
sounds/7.wav
-
sounds/8.wav
-
sounds/9.wav
-
sounds/addlink.wav
-
sounds/analyser/hello1_0.wav
-
sounds/analyser/hello1_1.wav
-
sounds/analyser/hello1_2.wav
-
sounds/analyser/hello2_0.wav
-
sounds/analyser/hello2_1.wav
-
sounds/analyser/hello2_2.wav
-
sounds/analyser/hello3_0.wav
-
sounds/analyser/hello3_1.wav
-
sounds/analyser/hello3_2.wav
-
sounds/analyser/hello4_0.wav
-
sounds/analyser/hello4_1.wav
-
sounds/analyser/hello4_2.wav
-
sounds/analyser/verifyme1.wav
-
sounds/analyser/verifyme2.wav
-
sounds/analyser/verifyme3.wav
-
sounds/analyser/verifyme4.wav
-
sounds/close.wav
-
sounds/dash.wav
-
sounds/done.wav
-
sounds/dot.wav
-
sounds/explosion1.wav
-
sounds/explosion2.wav
-
sounds/explosion3.wav
-
sounds/failure.wav
-
sounds/faith.wav
-
sounds/login.wav
-
sounds/menuitemclick.wav
-
sounds/mouseclick.wav
-
sounds/mouseover.wav
-
sounds/newmail.wav
-
sounds/newmailreverse.wav
-
sounds/openworldmap.wav
-
sounds/phonepickup.wav
-
sounds/revelation.wav
-
sounds/ringout.wav
-
sounds/runsoftware.wav
-
sounds/sancfail.wav
-
sounds/siren.wav
-
sounds/softwaremenu.wav
-
sounds/success.wav
-
sounds/tracebleep.wav
-
sounds/woo.wav
-
sounds/zap.wav