cbb3309d46acd420aa7ad64ccc72ee4f

resource	yara_rule
static1/unpack001/CoolIME.exe	aspack_v212_v242

resource
unpack001/CoolIME.exe

SHA256 3960ea794cb0eab7871a07a880a7464d98b0d1a7f9320c566ec420584ace401e
MD5 cbb3309d46acd420aa7ad64ccc72ee4f
SHA1 2befec08c5a91ff496d33c8bbe11b65f3c971a53
SHA512 a4c97ee942e10dcfe5604b54a238fa01bb9334e5911c6589dbad267614b60af146d9808fea738cfda55277cc59299ade778d419a68ac4b6cfb2c08bec244a42b
SSDEEP 49152:TNVCmcbJnPq+PDNFlyPFGileTOmAZOr5WXwXBZeHj87DXOq/QMD8SALrUkMDIaxP:TNVwJPPDmzU5dPeHj87DXOZi8BLrUk+
MD5 SHA1 SHA512 SSDEEP

CoolIME.INI

SHA256 97d47d9962bdbe5980b8e046056bd86b2e0b8f1d09d9b14893dbdc1ff354e994
MD5 1faa092bae0ed08175d04d8708e68453
SHA1 cb2f1ebdc1a9b2b2fbb7370a96ff17ae57b46bba
SHA512 11c267c509244c6ee756a928103d1f171ed346d319eddbaecc0e947f3fe6d28c4aef690059d1b2da358a49e2c5ec299839ef930ef58fa29827aa84356c23c2b1
MD5 SHA1 SHA512

CoolIME.exe

SHA256 f3d7ab474bdc4d5f3adc7cab63467aec6521a094743b2b2043164925b3f2a40b
MD5 e2b61021ad14a95dd1a7442b6036ee70
SHA1 1c674529e35e09eb7a1fb6cd5cbbfe6c103d449e
SHA512 5753f02b85b8d576c9e3340e95e31f72bdd0b20a93a0e76d30365a24835d462ae1ded7c81228b184cc6ec05f1e52a8b01927fa2313691c21b4916850ffc9f3f4
SSDEEP 3072:UEUkkn5/hZS0I/dorXcyTdxYtAaGOp3UrwSoKYeRT/5frjKC0NoUU2H+o23vNU:UEMrZSv6rNTUvp3UrBl/N8l
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

897025

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

94KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

7KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

85KB

Virtual Size

424KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Dicts/winput/BiaoDian.MB

SHA256 9544b219cf937219e69c5f6fec6bc4cc0f791729dcb10b6b02f3d1ca368edfc4
MD5 bbbc052a6267092217d3fa33f9334f8f
SHA1 b921b3afe27c52690fc746059ccc8795caeab1e7
SHA512 662ace708dc0b7c3ed3558f1d3a55bde1995a4c4ac381e7a2a4228d8fa976cc3cafca3489b89320f2f387a162ff0c6fad180a3b2ce4d7b0fad069c5c5e53be29
MD5 SHA1 SHA512

Dicts/winput/PinYin.MB1

SHA256 082d71782463e59b32ec48dc136dde56d7d6ddcd56f7cfce52c7df4eaa9fae76
MD5 c7f96da74d954cae6cfd8cb45139b300
SHA1 1b84e8a399ac298fad5672e9f08fc81cb476cdde
SHA512 1b201245fdb0e68c913ed4d072b7b136e1f70749cc62b8983c7528d419b45ad94ba4045a1aaad386284a0911cd76296291c54994737a589d17ae1b6f45f3358a
SSDEEP 1536:YR27vVKNeBoasl6iIOD/hXTODr0nUFrKtvmw7zAPj13ua4sETuWJQRPqF:Yc7vUNAMl6iIODRTXUFq5zAPj13uaTEb
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/PinYin.MB2

SHA256 d6e15cffef8e485c57c15d19dd57623dd62d464c0c341f8b92797784b2ba2ae7
MD5 74f3a82a0f4d01e8ed02ff966f7d7027
SHA1 9ae842b72477a019bd65f6c9c7e89ca72ee6e26a
SHA512 c1037b3a7b31acd8f83316bcaa0dd4e61c9a0f61d63c9bae234fd8695a8d0dae04973c2a6c914f65a5a19fa905c69a191694fdd59822583d3868a60a3724fe76
SSDEEP 12288:CPNpvPYkx4sGCtXovkp00YVO0/XPRIj4YW/We1E0ToQrgN4kxWPfhxwCwT:QvPb+sRXo800I/XP3YwzVgyzyJ
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/QuanJiao.MB

SHA256 9eafc95b0c5fb5e0b917640f1dd258edc68beeb25a7e111cc1e5923f6a2bbec8
MD5 f306feb75874d807041b5f35fb5061ab
SHA1 9c1273d7b73b9561af4ecfa15623d29d0ea3cdc6
SHA512 6c05d5b191369dfd86355549210f6b4aea31acb65f51e460a61f1225b3f8626c43158f5698afb3a3164f828e17038f35c04f6626cbd62a31a906c8a5e0f8f73c
MD5 SHA1 SHA512

Dicts/winput/QuanPin.ZI

SHA256 3a583eeaee8cc376ed78a4530da2e6267423bc446b81a83de174a55f2be6cd0d
MD5 d7f9cfa78a73b43905f6ae1747a5d0df
SHA1 1109bbb36f0ac98088ed444567a2d8c8e7ce8152
SHA512 d88f2e1885e9ee1083b3aa9cc96877e23815e59e41d2ae85fb655a7ee43d9ae47151314c25d3b1387ad28e75e1d7c31c12b8f2d9a3672a4dd2325cff8aa28be0
SSDEEP 1536:6R27vVKVeBoasl64IOD/hXTODr0nUFrKtvMw7zAPj13sa4sEXuWJSRdqF:6c7vUVAMl64IODRTXUFqLzAPj13saTEL
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/User.MB2

SHA256 5948bdc5919cead57586a827902caa66cd45588fec0a5c929b3947acbfee0cc7
MD5 62b5680a190008368939c345cf32e362
SHA1 3038cc2e9c95c7f068a80f5b3cf374f2e7ec4471
SHA512 18b7d46ff93602f010dd96d9145a6ec8d74e567ce21ead21417a335074edba8e871357d02f255e9cd6241c06d2139554c370ddcaf297f8d085ada34b0b87e6dd
SSDEEP 96:r4LAFIoZ+a88888888888881B+SD1xQk5z17TOtty8nWCRCgoQlnP3vjmmvXYExS:r4LAFj88888888888881cO2k0fNRCgob
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/ZNBiaoDian.MB

SHA256 8534a3591c73a5bfc47a6a9ef9c022f67f58560cf20fb5f5eb7ab4472704f71a
MD5 98eb8bb5f86bbc19a4dc2d1a0148d73a
SHA1 1cedb8430306ef0e62573306b6c026c1a64bcdb0
SHA512 b43e49c513cc76d141d9b7a74efea1f789077c77befb204f5036c132e6ed5f8fa992bd4b71c649bd2578d4aa1c49997a58957b13fa918576cca8485f4d0638a0
MD5 SHA1 SHA512

Dicts/winput/winput.INI

SHA256 85bc6a4ef52db44c4ae6cb723989fdeb326d28e8062f82b228cb055ffe507b61
MD5 31023b8a5e2d25761d45e2a92e7a49d0
SHA1 4e15f3732a40e10d17c11f3ea43b5adbed3485d3
SHA512 6230a3f6f6aeecd0f17959d29ce639520d5ae24bd465d8c664ba85d8805cdafccb2079469248b2ae8912ac50f812a1361f93b2006573c1a7034a9e32ccf2edcd
SSDEEP 192:QS7yH756Y0aA48xMMbcWFtol7cWFtolQw/:QS7a6jJMMbcWFiVcWFiH
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/winput.MB1

SHA256 bd461216d6bc4124aa8fb1743ebb7dd175b923f5aa1f1bca049a7d1773216cf9
MD5 85d27ca006db3adad5be27fe4d5fa1cb
SHA1 c04dab25467b6c1b6604a4dc7d405ca358c2d866
SHA512 1565058c5385cb1b6d2cb91cebd2f795c59e0898cd8068bd0db7a22b49597ec7d1ea61188e5df47c6c7e0073bd207143ee4db2d97f9171f19930319e5f67f7e5
SSDEEP 24576:FOiyjZxH6EdlqXtsEsHQquOMjlQop7o/O0uSw24X7pNAD0dRYvvk:FOFjZxaEjq9sEsnp6SeX740dRv
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/winput.MB2

SHA256 2c428cc93fcb25f6109c5c88bce6a25c7cb361ca972bfe6fd76f0cb7403e0f14
MD5 be67d3b52fe710207d5d75c6102c53ba
SHA1 d0811f5a5fd670387b829dad667d9785a080e91a
SHA512 3e829acde12fbfa4e14e26f5371adfbd727c1b22657193422fe8dfdb5e286848bef4bcb89a7e42cfb3aee8d8fa1a39772b1060741bfda192b2f7dae3aeb309bf
SSDEEP 1536:nWO+JGlUiFfHsjp4ZEI9J4WD+QFwO4r9csDozUwufoKflBi1SSrbO9mQmGP5UL8P:nW6R9ZFJ4WDzsff9BSSSO9mjMCAU7W
MD5 SHA1 SHA512 SSDEEP

Dicts/winput/winput.ZI

SHA256 1e0b6b1e06f15c67fec510a1c00f8be11be996389a6d26b8a6b9bb7ae4221d34
MD5 83d22b4555640399abcf09f19e0995db
SHA1 966282381631333b64eebc574b60d680f71cec47
SHA512 87068709f0057e3d3cdb1a5771f8f22579b36a2005c5d2a8aa6bc35dbf08e2637117d2bd54fabb6b0391a70df5f78f6fa0e1a88be5778655bdbe3f95e5cc4210
SSDEEP 1536:wfCacH9gIqOgJfkzr2JrsYFV4Q0Fxh2NdQx:wfCln2dFV4Q0Dhf
MD5 SHA1 SHA512 SSDEEP

KeyBoards/Default.INI

SHA256 ca60f85c1370e26983cbf652384717ed4580a4efe0640098e89f8d7b3b87efe6
MD5 f6dbb60f517c4c0591f2761a4b9cbeb4
SHA1 6e504cffc788169fd364ec36d895362b7d52fb54
SHA512 81e73e97bda15db8fab64dadffe460f7bf023c7608683fe2f36476bde4345b5b5f9a62e6c84a86a4df4a23a1c92f59b8664f3aa72b2ae5d5236184093578b8b5
MD5 SHA1 SHA512

KeyBoards/Default.bmp

SHA256 2f25866227ea7305ec76d3d69140e769800e56e2a5727befd80676daef544e42
MD5 9aa401fe0417df94b2c95ae577bcab20
SHA1 638f682afa4b82c77bfb1f62718098597593441c
SHA512 ede186254cafe0645cc7831cc9f28cce0e5444f087491bebf3acb7ac67137db4eaa9b3936648ecbf304678527db18a7359ca7a0d519b55c2c1256de5ea446082
SSDEEP 192:OJgd9iA7Fytb/e9+/DcKxbD3XYvyXNl0FVdxWiy8:V
MD5 SHA1 SHA512 SSDEEP

KeyBoards/IpaPan.TTF

SHA256 3e51468eccb9398c2c5cfe3374558dc28f9296011b32732c4b9877a9056347d6
MD5 c1565ac4a7a6b160ebd6183125132dec
SHA1 14f792aec43899de248c5047263521b813fcf9c8
SHA512 a173af6891da1a4ba943a1003f22d86fdfe63e559e6e12734c1a2ba6b7f717392d0a40bea151bcbd97da78c729f8bd8e4be9dbe670f2658137130f5e6b136fa6
SSDEEP 1536:i7KgRqPcHoriMcLOD82cbOjkOLK4TNLSf:i7vkPxrinuV8Ojk4K7
MD5 SHA1 SHA512 SSDEEP

KeyBoards/winVista.INI

SHA256 7197501cd8c3784f91af1f7ade2098b13fe84d2b746050ae80f309e1aec69503
MD5 95ff672be4350ef785dd2949f1481a01
SHA1 fbc8850be9a0151773ce1888fc50e5986560a6c2
SHA512 51a58b004c287280cb1eabafdf03561e0685cbc4cbd336daca6c225b95b778e713ba78c5b5ff1762664175b762a0b65a39bb7fdb4aa468b598a9d3d85b8ba214
MD5 SHA1 SHA512

KeyBoards/winVista.bmp

SHA256 302069586c3d64b1f9c74f1a3c6fd3762f4e52e410741578e7c453abb483f090
MD5 4105fa16376ff956d268691e0aa0b3be
SHA1 9ab4a027d017cd301d0298760258329316bbe92c
SHA512 acc3090374b7025ebcf26b9a5e36e21b436979d89adba4794f623f17492c73f38adaaee97c1aca188175c00e4eb23dafb5a60259d31d454ef87a1eca61d32222
SSDEEP 1536:/PoTcxwP0mdKpKVuK3PMwtqGvl2GiGH2N98/Y4DUlWYQp:HxwsdggGXR/Y4DUoYY
MD5 SHA1 SHA512 SSDEEP

KeyBoards/俄文字母.KB

SHA256 646aaf616662392b15209da813a211cd23c09b9fea9aa2e4383c887d0aedc2dd
MD5 a00daeeca7103bbd5d8ad47a1ab571af
SHA1 71c92ab86f9904774d198c0efdc117438db0651a
SHA512 afa9ea34cd3ad0790e1053e8830d989e1c9dbe469781ab31cc8007b5d29ccab92065292e2c5c13c487abe9c3be4510c8d576bd1a75be914f86477453870c71fd
MD5 SHA1 SHA512

KeyBoards/偏旁部首.KB

SHA256 4e874468b2dc080e8e8abe4c9661695a379c76e1d7e0ad6b1a35ffdfcd6d6122
MD5 ce7f8904ed7ad30ebfb9235207404ec3
SHA1 928bf179e9fce5ef4124eeea5c8946e17e5eb92d
SHA512 1a22f861ffee90af4d32881c00638eb0b85d64dafe27fa56da07a559e7a340a4a368140b81ac121201fb4c5c185636f06e9b9bfcbc634390032ebdc2fe7ce574
MD5 SHA1 SHA512

KeyBoards/制表符.KB

SHA256 f4f68732b6358074184880c3ebf7a1af2a51c1eb2e97d35dc305073608cbcea1
MD5 67921c874c3d05411990b0023b99f735
SHA1 64e3a1872d00e71ac164ce335b45f0c9e6864619
SHA512 083bb1c600871349a22d14c9f64721d52b5f0444d7e78d0eb19ef6c475b046adc3a88a0c38aa5019b43aa5bd80cd6c87be9a1be017181f64db5a9c50c9cd7a58
MD5 SHA1 SHA512

KeyBoards/单位符号.KB

SHA256 c98a19577238488bd044cc9e9ca2155880ef6900bfe150ada17f9b6f17f4b596
MD5 9ebc009fb35c20c37cafc128d926f64e
SHA1 8a98e358f753287efffa5c9709712bb9958dbba9
SHA512 bac1161260bea264f6d2f2795ee08b787ad33b7f2eadc65575fdc8ea06662dbd97cd9e84690e889a747accae04a043e2ef9fc104317d32a6a69e31224f6645b2
MD5 SHA1 SHA512

KeyBoards/希腊字母.KB

SHA256 c9deddf9ee273f66b85f1d4de971ceefb33181a6e1effd8dab3eefa4ed238126
MD5 6bf9dbe49587fa9a2b30889f7136bb4e
SHA1 e42e31121dba706a490ed5c3156d06f7e4ecf8d1
SHA512 f8e8c8cd311a0da0dacc536a8e0a823830a29732760c460a97a48eea1b1d64d565ac69ad759058b6ee9caaab0ba810e395a076915aa67476dee872d257dd16d2
MD5 SHA1 SHA512

KeyBoards/拼音.KB

SHA256 3cd2671a2f190f637b3f75c1cd47009a9694fd3e3170e07f738c7d0f1520ec3f
MD5 839a0764e7e50782ed6b42b28095e282
SHA1 6fa74044c3f2bbdee7257cadd23387693354fd01
SHA512 28254d7a7012330261cb09f69e2d1f16943293aad7391fa63bbc09c3e7338177f333923a42cfd7f6150c60b21a96a2ef385925d67a95f8f36bf78613229b5f3a
MD5 SHA1 SHA512

KeyBoards/数字序号.KB

SHA256 27624c94eb860285b80be486f28814ef1b3185d4ca6e043bda195081407e1e83
MD5 b6196948a96efc540416b49328a65991
SHA1 1a21a180279ad68639ecc54fcd0fb8f47223696b
SHA512 b79d7043db4deecf41ec0cf7c163c248803044b92205d02fa7f2a8b048027855775ffdc4477be699d0cb20b42911ba7eacba0e5e1464b03bc098117e650db79d
MD5 SHA1 SHA512

KeyBoards/数学符号.KB

SHA256 2bb09872b97c3896efaedf9e43aa4b284a690551cbb23922717aa9d121bac6a4
MD5 f98d2b982762551d24b236054749e802
SHA1 5a7577c506216c9f00871dc01f2090c751136051
SHA512 9654f2d89da6fd4e813afad6c4c598a09c999bffe7ad0ad30d2f982863cc31750b72a1fa30ad97e46ddf4b4e597bd38f7256b4a0daadb13b077a6ebf0f820379
MD5 SHA1 SHA512

KeyBoards/日文平假名.KB

SHA256 3efbc780b55fab6e3b26d2961425b96d5b89ecfcdc48ba5f2884f822baf5b52d
MD5 a061bbfd888363129b2bfeb48f850b9d
SHA1 8ddc5553c31a480decf7cb46971119f6c891ddfa
SHA512 ebafc6aa4e0da6116966cae3a3500df459bc3db476c30b048ae84260fa493340cd32514b59334c76e2e169c9143a56547d2fd5a991d45f68bb3ef256df0189ce
MD5 SHA1 SHA512

KeyBoards/日文片假名.KB

SHA256 b8e7b2705fba4e429f080c58fd9f3f11517685a5a22c557ca4e05334f6bd0a50
MD5 87e8ac453776bd4a62593eb1c192d564
SHA1 696f0d062d3aedd1d811b2b97c729a4e5fe28971
SHA512 b1e1977bc278ae393f6d0d8c3d6748ce5dd3e9e896a6fcd6ba6995e16713e99436af375d64eee3364c4896a2809e59ca97bd3571ac234f9a3238359729f511de
MD5 SHA1 SHA512

KeyBoards/标点符号.KB

SHA256 aaaf221a34ede2a2d3ea7cf1e6449fd7433a25177dc1674a953e3b570e64e5c8
MD5 6b2bfe2b77deb78746b445ff9c481b21
SHA1 015a9ec4a747cc54d280f744f43bf70bc6c0e1c4
SHA512 de0ae543a382d35c93dc5ffc3251f2a0d8eb20f6c8be8a6140bdca2760159fff8b092201eb2dc03ad5e1e5e8f4ced9308aa0b10eeb95bb17be183987867ed4fb
MD5 SHA1 SHA512

KeyBoards/注音符号.KB

SHA256 8b7f80a2dbee36acfccea587419d22805e52cf172bf8f7908b642c2a7c997f83
MD5 d7eb87ed4e3b8cbfdd1d8b03b4bb5cb7
SHA1 6fc1c84e0b06d002952840afbe699467a6d9adee
SHA512 6d5210a17a67ade74eab57f7e84d4edf106c1ac1679baf34b9e26570fd467bb249944bf8f133e029601ac74e65590ccce54879a285f93744f2245071b8869705
MD5 SHA1 SHA512

KeyBoards/特殊符号.KB

SHA256 2e9039289ff10938046c4852ffc9305570df6ee001c0059a3caf981c4115e62b
MD5 28016a7eb90f01c3017f149a3a1c4f2d
SHA1 29366eada55a197e440ee8b0a12e4dc22fab2f8d
SHA512 fbfff559918043011e383fc049a35c4b2b8c6e6034a1d2ac7757e8a458e57d5e995d357de00a47b06fc6c706f39812b942f05e06f296b5db7e7e39297401a56c
MD5 SHA1 SHA512

KeyBoards/空白键盘模板.TXT

SHA256 52767ed85f276076bf6636719b0dc21326497b2fb4875c9aa40604d699d76cd8
MD5 38a2d7579ef615a602e24234d56071f9
SHA1 f242dc9291a5048b4b03f776883cf0885502343d
SHA512 468bf79cfa3efbdb8b9594c18c0ac930b18357745dffd662f337b03762d1bacba1aa20f960dd97e8a358d22208d3d0165c02cda58bf94836eb9ee1500de1cc02
MD5 SHA1 SHA512

KeyBoards/英文音标.INI

SHA256 5ec8049dc1a408638208fd398ce660d2abe75c9a7a7be302f91a8dcf97a81205
MD5 6e4b0f822604f6d99db3d5268ad1049e
SHA1 ffeb0918ab4c48be27efd046cb352267bcf83992
SHA512 06ca73a1bf20f2448d12777ccc9fe52ba08ce3086dcfa2039b9d2d88189dd50744bbe865f21132638b8411bdbba9cbe1c9bebe214d2f5a16b7f50771236ab273
MD5 SHA1 SHA512

KeyBoards/英文音标.KB

SHA256 5adeee75b70a076f0678042c7ed2a1230c7de667210eb4861a5586b35798fa53
MD5 25ebd4caeed28974882ca70544f474eb
SHA1 a8a5f9a2d3fa4f123d81cfbe578ff64148832d15
SHA512 84f14bb5453fafd330e2c90a39e565c6d719271f3af279d3c574f1539b4ea3534b4ddf7da358bef7e14ac2b05b833e49515f053cb999391bbcf7d4a9b8a7a0a3
MD5 SHA1 SHA512

KeyBoards/金融键盘.KB

SHA256 26f2527be3e1b8682aebc25a8963ef0ca087defc3c0e6bdd0ce31b221dec2686
MD5 7f24581f2838aff2470708b7c27e2046
SHA1 be47e9c87fd56f0753f8312d45d79b5571ad39bc
SHA512 61602b4d6bb55d3ebb8d11a7370ec6b9e5645425ee33e9231cdf1af9259d2d062fbbf2ce21e987cbebedfe1b6a988a7c82f4ea4f78dbf0f88e341be2058ad6fe
MD5 SHA1 SHA512

Skins/Buttons.bmp

SHA256 7b1bd849ba540a82b53f586763b0a8c592d200992a430268703e41633e7e1b13
MD5 c806dd0e0bc8ac0a7652e2fc7c250d8b
SHA1 33e5eda331121901cea8f2edc60e632f73aaefbb
SHA512 15b33d2050ee3b10e4f99030f6ac60da15a6138f2f8cb84b30e5281e423be573802af0726001db35bd4b05aa63537184c767ca54e7513f357fffb5a372c8f0fd
SSDEEP 192:vWgQOOnQ+2MaNrjZPh/7PhW4xL/BWAY88ryVgyK/fQS1KXD5Ms+8tN4:RtOnQ+Ha9TFtlBXY8An1GD5SQW
MD5 SHA1 SHA512 SSDEEP

Skins/Buttons_单色.bmp

SHA256 f23e94546112e829766fd382b80702c615dea0ee59841ed9e8e457ca386ce4d5
MD5 da641fc4de66ad8d3d6d413c4c1ffc53
SHA1 64c24c4976404a10785680a01ed26d22c30330e3
SHA512 d492e8c8dbca4696045aa490e0b0e91b2df567cde158ee0fbdb9634b3884b70a35054be1131bc5d92e808b0b9b3b095817252edbd7931093f3a2db3e2cda1985
SSDEEP 12:z1CfOunuaWHVHcvg4n6Ku8PtH6MuTEdCrfRsJDHEZnCHPHNiHvuH+N6H1E:ZCDW18o46T81OrpsJDkZCvtiWeN6VE
MD5 SHA1 SHA512 SSDEEP

Skins/MainBar_展开.bmp

SHA256 d1f61df171240bcd2cf77cf7254968711c0c78b400ed8239109d4f97beb84f81
MD5 acb7c1bd7297257f78d8990a9749b538
SHA1 34dcf4309aabea66cd6460c900234fd4473bfd90
SHA512 9b51b9166a9aedda353e08c32ea057c5176ea9095d172e2b7217f6257170857a8459465840e3a981fb205601d5616b18916e1b8816df871a4f0335aff4000384
SSDEEP 1536:6tjPV/VTPKP33/wInVntnVnXwVkn/nmuRVuR2uhicO4CT4C/:65V/Vq3VnVntnVnXwVkn/nm4V4W4i4S
MD5 SHA1 SHA512 SSDEEP

Skins/MainBar_折叠.bmp

SHA256 7523d201ae5a46c84de9bb19ca191e36d93f6fdee4b4bad56d999828730854d5
MD5 9cfb188a17838c75ce3e4a9182b9ca9b
SHA1 f354b8f6219a9ff6bf3f51295e60009f4e131ad6
SHA512 e6f2f79675017b7f213c057b17fb40646753fbab67fc62cc1956c42378203da719a963d9535fa883799978f08130f3426ea59b80f1587c90d9d069ef52eaaa73
SSDEEP 384:yG/BKiiFrgFrMUciY0b0Id/dEkIkr/GMs/znzdvos1qMGxWv7v+:ciuAMUcibwId/dEB6GMs7zdvos1qMGxJ
MD5 SHA1 SHA512 SSDEEP

Skins/Thumbs.db

SHA256 3471df9a727f1c02beca62c3784abc9fcc3933c0fa572438ca92e60731a3a1fe
MD5 8c5bdf8c90c92ba24ff2bbeaf4fb07d9
SHA1 165df304578edf649f9805e924874494898b829f
SHA512 b932655a60e0b16375c1f7f8a904b0dc4e6b826b5a934957432a30c7b654b489527aa053484ee36c72410127ff0e3e5d1c05faac060f8b40c9a0dca245c6b010
SSDEEP 1536:Nzd4xEALSYZkk9eZEDgu9wTvXYLvxx7MsRnsP0j8:EgY1p
MD5 SHA1 SHA512 SSDEEP

Skins/back.bmp

SHA256 f467c3feb5988128b87d588a86cacba1d80a05ba5b5fe5d141bb3dee95cd1919
MD5 23c3d84315a4900a7371e577de1ad28e
SHA1 59448ff6c643f53328744b567dfac412698af8e6
SHA512 fefde3815ac221f3c793206f37f6eb632b94b24ce535a3b50a9ee15df519f1ce1c881e8cb91c457f9c0329190cf8f3c4c781dd54d59ba13a6b863a0490882112
SSDEEP 1536:/022LwwykkW4022LwwykkWw022LwwykkW7Q22Lww3Rq:G
MD5 SHA1 SHA512 SSDEEP

Skins/单色.INI

SHA256 1d5b9a8420914ed14510403001e83bef2ca8c2312e90aa79bc1b2fd3581e6171
MD5 5e48b45dddd653f5f8e6abf2c6c7e1d6
SHA1 451b54f33c5792351f45ce519611157e6c7cd6fb
SHA512 20d22d783409ff0b442c42e4cde73a473752509c1f89e009d6bd69c140ac53de843ee5243b885a2e48db9f3b8e8bdfc39fb0c9dae37cf204a754b22731c062ad
MD5 SHA1 SHA512

Skins/单色_展开.bmp

SHA256 bf6214c335015c532f62624d942e1c19780ab7b9eafc763247a73e98679d8d31
MD5 aa61033c1381656629a4e0f32c4505ea
SHA1 083fdd8faf6ed1235f2a512c86134576ecdfd794
SHA512 920bc675f1549a34d7e21611e30496b474f393ebd235ad40992993121a39b2ad52e6002b390cd47878ea08e1c1622a29cd731d80b561ec95f68d568cee488904
SSDEEP 12:wllmUj8PRam8akheLQH1cYttqC27DYuS/QE4yReCep0Yt+/z3jGRJ:wUPRajfeOttqGuS/QXBtt+/zjuJ
MD5 SHA1 SHA512 SSDEEP

Skins/单色_折叠.bmp

SHA256 3e685b76fde941257db7a3b76ad698af6c3c66f3b0501b5e2cf58c2ffcb68d83
MD5 36c2c6fa5f2698230da659e56b228719
SHA1 bb5701fb89cf45da15c8998322817ba18da7d5a9
SHA512 ae922bc94dfeb38a9fc7ae12bfebdb7f652e7c4c6ab6d678799b29b913685764705f6ca304a8ee286c0e55224abe2cace1d1b4347413732802697851f669099f
SSDEEP 12:p8OKPRam8akheLQH18Yt/OCE/DsSFQIyReCGp0YtO/hjh:ePRajfeOt/O0SFQIB1tO/hjh
MD5 SHA1 SHA512 SSDEEP

Skins/彩色.INI

SHA256 52e27219db3d9d279777f24955fafdf9097a9db2b3d982cc17e9faebda919df0
MD5 286be79b0bf96342fda554f820eda3ee
SHA1 0acec47642fad35052660be9f02fe6dbd2d7848c
SHA512 5f512d470756903beb8219cf05b1e02de26e5fe3f0731d57dd8370767e9515fbfc38b68cc52602c1e7fffbec83162e6fadf8a03fabf4ad68ede1d830c3441e65
MD5 SHA1 SHA512

Sound/ChongMa.wav

SHA256 71ec44a3b136910faa3efe43e5079e5fa7ba00933d8c39bb40f6a0061ebc14ec
MD5 171e65a9fa4aeb4029bf8e4bab364e95
SHA1 18e579b8bebc58c86d318236eafabcb1c46c3e25
SHA512 a6e3385a696e68d3dfc221bc85541ed926cc0fdd05952e43b13a84fce112119d85d2d24a3dd35934323b03b74bed60f10de0c162ef44e479fbfdf04c1a8bfad1
MD5 SHA1 SHA512

Sound/KongMa.wav

SHA256 9b21b28c3b70cffb9ca909e52fcd16c078798a3c8ffd467c422518e535514176
MD5 cb21542822389f434797219ad0a03801
SHA1 f89d64969a02c81c4aeaddb9f4f75b0df07db743
SHA512 02670e6c105c8ee5f9b457453f7d7d402390ddbb2554016fbdec352523ec7b93b7ad6afc99f82f648a568f4b806d9d306f1ac5b55014cfac175840376259adc2
MD5 SHA1 SHA512

Sound/backspace.wav

SHA256 1645fd6dc11cd1a40b2ebb52cabefe227f072372412c280e4af0ba9ccc4610be
MD5 8c34f39e42b5374bc68e195003dd5922
SHA1 71ded62f63d3e009aea5a8bd425ed4cddb29ca48
SHA512 2e9704046f003eea93a5f561a3284db453206eac7cf5d7ea1e046e784e143e5f624fc38bcadc92057951b3af9e932f742799083edeaec389834ed30aa824822f
SSDEEP 192:QBCAoRgiUjH5Geg54j4aaKqmxHASPl22WlfB:aCrR4MOxASPWlfB
MD5 SHA1 SHA512 SSDEEP

Sound/bell.wav

SHA256 9b21b28c3b70cffb9ca909e52fcd16c078798a3c8ffd467c422518e535514176
MD5 cb21542822389f434797219ad0a03801
SHA1 f89d64969a02c81c4aeaddb9f4f75b0df07db743
SHA512 02670e6c105c8ee5f9b457453f7d7d402390ddbb2554016fbdec352523ec7b93b7ad6afc99f82f648a568f4b806d9d306f1ac5b55014cfac175840376259adc2
MD5 SHA1 SHA512

Sound/enter.wav

SHA256 3220e57dffa96f8723553888ff3135ded09dbb3ab0e8a17447f99495c3130fdc
MD5 f94a4fae1ded9865a05d64e13e58309d
SHA1 3da2e90a22e5150ecb393be0088b5df9c7c5b32d
SHA512 8b1e68de4a07daa8fbdeb81de51a6d4b6f425a9e24521d85c098213bd56c6e3d7336a8486d6fb29ab780cf3248014e3c2ba73e9b98f9754549b20428e1cd1835
SSDEEP 384:GSY6E7Kj6Ig4+Zxb6pnCtSIB9kYDgUPd921G+nq6s:R7+KjfYZt6peSIBGYDgUPd921GT
MD5 SHA1 SHA512 SSDEEP

Sound/letter.wav

SHA256 520d8d4aad2dfa95cffd41c552b5e67c13c5842abf88a19d5d84980913d2b5c4
MD5 219901b272c7d381727583e103fcf932
SHA1 42da988cb4be6ff318e07a84bcc5c45b0e57ec61
SHA512 3e7532dae55e397cee5499270c1b099a29901df06548d125f4cd46c541e3eafe348506fe8ea458386b131e527c041fe15da6e176814d4897245b99c3808eff17
SSDEEP 192:yDXOzMg1W5y/bXiEaAHnNU00FyYDu2Dp+QNTO:yyz71WM/eEnOF3wt
MD5 SHA1 SHA512 SSDEEP

Sound/space.wav

SHA256 520d8d4aad2dfa95cffd41c552b5e67c13c5842abf88a19d5d84980913d2b5c4
MD5 219901b272c7d381727583e103fcf932
SHA1 42da988cb4be6ff318e07a84bcc5c45b0e57ec61
SHA512 3e7532dae55e397cee5499270c1b099a29901df06548d125f4cd46c541e3eafe348506fe8ea458386b131e527c041fe15da6e176814d4897245b99c3808eff17
SSDEEP 192:yDXOzMg1W5y/bXiEaAHnNU00FyYDu2Dp+QNTO:yyz71WM/eEnOF3wt
MD5 SHA1 SHA512 SSDEEP

User.txt

SHA256 63d0c0f6b93904894a16725fa36ab36bb5920281a07239c7e5e06f415398363e
MD5 05a4f802f3458f920b24912b299cf8d5
SHA1 735f0e2448b14bbf3d9636cb946b9888c34040ca
SHA512 4817ffa6b9aa9f5e2aa97c5230d9bcc06800f8a91d582981ad00292343cca885605e69973253686405aeac1e8c7081ee7a9af63d5294b75787f27e4037ad0d67
SSDEEP 96:lQG17TOxtHnWCNCgoQlnP3vjmmvXqQTLAFInuNiEjMt8vV88888888fww:lQFHNNCgoQ/LAFSu9jMt8vV88888888N
MD5 SHA1 SHA512 SSDEEP

对决五笔/一级简码对决.txt

SHA256 523665d385229296d0a1f565d44c462d8a2af00a026d92590a45fb2739e6a6ca
MD5 9cc472a1480b546ea547786fc6839b8c
SHA1 6ca5aa7dce6e48328087d11469a8e5d8c1235bcf
SHA512 39b326f5b359faec88c0bdf1f352b8d785a291bdfd15241d75553ebb3e9ae75fc57417eac79fbc497cdcd1a6a787d1abd90074dc718bb4472c6eea3459cd3972
MD5 SHA1 SHA512

对决五笔/三级简码对决.txt

SHA256 333d2c02d63c139b32506f32323163218de4eafc57bb9345ad233e140a4c6240
MD5 bdab3c22fa7a16b2838d7c573aa8c3f1
SHA1 11cad9635698c5e9b841b96dcb0bf5d64b0f30a7
SHA512 847df473a1d98697cf44e7bea69870233e4a195f9e7ef5660c5d8d0220945f14096e6c892c4f98b69c14c6243539699010df188fc5fd029c9bdd8a313700c5d0
SSDEEP 384:fK52hBZepnxGzGSBjtFZHupQVmk7hMabvQMjYWlyE95Ymd0bcAnfvwfzj:fAlIzF5F5WctxlyE95Y4AwX
MD5 SHA1 SHA512 SSDEEP

对决五笔/二级简码对决.txt

SHA256 287f92532d2d7cbfea47291f64d7a3ee9981310b13d879cfab63791a87c9674b
MD5 f855244d6b613e0f24bfda75e53640a4
SHA1 96e0231086fbe773c6132ac28cb73bbb4cd294fc
SHA512 6651678eacea83e25e346122b279b0b63363cd1ab5e57d85074c44a7d7e60f8a6cd1bd175f37d4efeb64626ffe5d4d2cd2ac44a9a574dcabf4d058d5714ce850
SSDEEP 96:fZAalKDDd4dssve7fCfT7vu+jpmO9OJPTvlvkMTQ9cF2kn/gseg2+6Ves:fZAyKHd8veCThjFO9dN2Riglg2+6Ves
MD5 SHA1 SHA512 SSDEEP

对决五笔/单字重码对决.txt

SHA256 84e370b1279a5df2116c492ede8ef755f73bbf04b203341e6739a076846dbe06
MD5 78a46e462523ad31a474cf4f7d9d0bef
SHA1 2729d6a5f93be118085d1862f0ddfc6eb5b80b72
SHA512 8c8c05a33aab5c6a49b96a65811818a371a419a9b8df0fcd7e02492890513d40aaa732e812ca0d203674ed3a5dc694b210ecb51882aaf5b94737e6d0ee592f0f
SSDEEP 192:llmk1jX4u4oBNp0lFFJ51+O+N+GvquitXCBhOGO/v+ExNy9:l7xHWB/1JY+Eq7tXCxS+EO9
MD5 SHA1 SHA512 SSDEEP

对决五笔/词组重码对决_五笔篇.txt

SHA256 19e0fe1e619979fe442ed421c9377382bcca36a7ef1b20fb24f88d079d56af61
MD5 f6034e1a9a6577de23058bd744efad49
SHA1 7a1cd194ee3fadf5f10595efacb8df58cb9271f7
SHA512 177801d12dfabbecdc5b31046ddcc5bd24564c735fced788d7fb5dcbe716d991ded7cb47258e0d8fa1e240a7346da2264befefbe0feeed723d034480d3057c8d
SSDEEP 3072:O5zCRW1RjeevKElJRO89HaFUhAlWEjakpYl657zHNathJcn3:O5zC41RjTKElakcUhAx66598Q3
MD5 SHA1 SHA512 SSDEEP

对决五笔/词组重码对决_威普篇.txt

SHA256 9677ab127e76cf3fdc0a4d36ce3b4c970124bf4b9eb2424f5e38c1be6bc7a344
MD5 3634b92bf61ae5c161a24eabe14232a0
SHA1 bb5756c0138e45874e8384847ba44b3beff69267
SHA512 155f3189ef7f962df471df533a5a9696960681c665b544f8666885c083b247bfba7c43b9e8e09272d8f38457aeeaeafc877a1be75ee465d5f034f0441971f054
SSDEEP 1536:70C0IuZiUgCeWg1yHFoRaS/gW3KP9gHxFEzW:70CHungCeCHFEBIW6P9K8zW
MD5 SHA1 SHA512 SSDEEP

最先读我.txt

SHA256 2e26c79c05a1b435c76fd0f166af4006aa744febd6bd84ef8802f7ba7dd4b687
MD5 52f5c113e3c5c9c533ba63af0e665573
SHA1 ee35bda4800776eea9bb71c1b3bae7337312776f
SHA512 01d43e2eef70165ebd97ddb4beaaf0dad016502d7e4b568927fc841065f2a96e56052fe87f0662a45bf36268c3be0f37369a9a71ad1ca708ffaa4f1f21790561
MD5 SHA1 SHA512

输入法教程.DOC

SHA256 8f5bd50d0e0bc440f95f8eeaf4daa49f4826654b07247bc17447eb33775d9427
MD5 b74cc0e2f287ccf97a6acb9d0f2fe3f1
SHA1 9835bbc5db7a3b0367d2ec7a128e05f0e31154a5
SHA512 a205cee94532423d068e6b92d481747ec7af156ac5706735f737783e486c9bc636db71e0d159dbab5a7f2b21bc22a2f2cfcd19d37ce52190b738058e5c689bcf
SSDEEP 6144:6Q6btOUT/VDcGNFHlnpmSTII7Vr+KWlC/WIA5FIbvlpH0X1:6Q6btOUfoi37VXGClpH0X1
MD5 SHA1 SHA512 SSDEEP

windows office2003

酷极手册.CHM

SHA256 37907eaa7c93dd8e799890396d860f323810e1fbcb442856a476d834714ad4bb
MD5 5352b3d377cfae38109812335f646c05
SHA1 72fda2ab81033874139a31660f66e66750ffcc00
SHA512 f47b26bfbf637e327df53487de8b4858d73ec3aa11583ccd98a9445ca11698a9ca552ef455b236d3ebe77b7cf98e7965d9f04b737ed7b94c8f1756655dd26aeb
SSDEEP 12288:vTu8Vf/Bqnx8dzYzzTppzVXzeBE4oUnzxx:S8Vf/A6dOhp5Ki4oUnlx
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer