a7f5926b055adfd307ab599c53eb1a3e_JaffaCakes118
- SHA256 ce5d4da734e24fac7c0826f8adf7a041f2f0f8ee16ec8bab1632c1b013d7afb9
Overview
overview
10Static
static
10仙侣情�...��.doc
windows7-x64
4仙侣情�...��.doc
windows10-2004-x64
1仙侣情�...��.doc
windows7-x64
4仙侣情�...��.doc
windows10-2004-x64
1仙侣情�...pi.dll
windows7-x64
1仙侣情�...pi.dll
windows10-2004-x64
3仙侣情�...ts.exe
windows7-x64
7仙侣情�...ts.exe
windows10-2004-x64
7仙侣情�...pi.dll
windows7-x64
1仙侣情�...pi.dll
windows10-2004-x64
1仙侣情�...ct.exe
windows7-x64
1仙侣情�...ct.exe
windows10-2004-x64
1仙侣情�...qp.dll
windows7-x64
5仙侣情�...qp.dll
windows10-2004-x64
5仙侣情�...lQ.exe
windows7-x64
7仙侣情�...lQ.exe
windows10-2004-x64
7仙侣情�...pi.dll
windows7-x64
1仙侣情�...pi.dll
windows10-2004-x64
7仙侣情�...in.dll
windows7-x64
3仙侣情�...in.dll
windows10-2004-x64
3仙侣情�...ip.dll
windows7-x64
3仙侣情�...ip.dll
windows10-2004-x64
3仙侣情�...qp.dll
windows7-x64
7仙侣情�...qp.dll
windows10-2004-x64
7仙侣情�...qp.dll
windows7-x64
5仙侣情�...qp.dll
windows10-2004-x64
5仙侣情�...e3.dll
windows7-x64
3仙侣情�...e3.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
仙侣情缘2.5A完整包/仙侣情2.5GM手册.doc
Resource
win7-20240220-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
仙侣情缘2.5A完整包/仙侣情2.5GM手册.doc
Resource
win10v2004-20240611-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
仙侣情缘2.5A完整包/仙侣新手手册以及攻略.doc
Resource
win7-20231129-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
仙侣情缘2.5A完整包/仙侣新手手册以及攻略.doc
Resource
win10v2004-20240611-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
仙侣情缘2.5A完整包/华景机器人专用/CQapi.dll
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
仙侣情缘2.5A完整包/华景机器人专用/CQapi.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
仙侣情缘2.5A完整包/华景机器人专用/QQRobots.exe
Resource
win7-20240611-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
仙侣情缘2.5A完整包/华景机器人专用/QQRobots.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral9
Sample
仙侣情缘2.5A完整包/华景机器人专用/QQRobotsApi.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
仙侣情缘2.5A完整包/华景机器人专用/QQRobotsApi.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
仙侣情缘2.5A完整包/华景机器人专用/RobotProtect.exe
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
仙侣情缘2.5A完整包/华景机器人专用/RobotProtect.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
仙侣情缘2.5A完整包/华景机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll
Resource
win7-20240508-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
仙侣情缘2.5A完整包/华景机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/CoolQ.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/CoolQ.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/cqapi.dll
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/cqapi.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/cskin.dll
Resource
win7-20240611-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/cskin.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/gzip.dll
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/gzip.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/sqlite3.dll
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
仙侣情缘2.5A完整包/酷Q机器人专用/sqlite3.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target a7f5926b055adfd307ab599c53eb1a3e_JaffaCakes118
- Size 5.1MB
- Sample240614-eq7ypsydjp
- SHA256 ce5d4da734e24fac7c0826f8adf7a041f2f0f8ee16ec8bab1632c1b013d7afb9
- MD5 a7f5926b055adfd307ab599c53eb1a3e
- SHA1 350b6725efcf8e0e4f4eb03e5f97cca44c764ae0
- SHA512 baa744ff066e1ce384bed738578045f2441e0f663a0769ec50304ba821cb31cf7f4d220061ec0f27fa37bc9971e41b1d1def9105e610894dfd09f8b77ae1fc63
- SSDEEP 98304:ZimmugItdMCmdp7wJ5dsGWnz3ju4Tkoee0ZvJWLtizCDVQtbTfAYN7na:Y7uzdFmdVg5BWnTj3kbZxdCutbToYN7a
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Blackmoon family
- Detect Blackmoon payload 1 IoCs
resource yara_rule static1/unpack001/仙侣情缘2.5A完整包/华景机器人专用/QQRobotsApi.dll family_blackmoon - ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/cqapi.dll acprotect static1/unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll acprotect -
resource yara_rule static1/unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/CoolQ.exe upx static1/unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/cqapi.dll upx static1/unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll upx - Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack001/仙侣情缘2.5A完整包/华景机器人专用/CQapi.dll unpack001/仙侣情缘2.5A完整包/华景机器人专用/QQRobots.exe unpack001/仙侣情缘2.5A完整包/华景机器人专用/QQRobotsApi.dll unpack001/仙侣情缘2.5A完整包/华景机器人专用/RobotProtect.exe unpack001/仙侣情缘2.5A完整包/华景机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll unpack002/out.upx unpack003/out.upx unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/cskin.dll unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll unpack001/仙侣情缘2.5A完整包/酷Q机器人专用/sqlite3.dll
File Explorer
-
a7f5926b055adfd307ab599c53eb1a3e_JaffaCakes118.rar 5.1MB
-
仙侣情缘2.5A完整包/仙侣情2.5GM手册.doc.doc 842KB
-
仙侣情缘2.5A完整包/仙侣新手手册以及攻略.doc.doc 116KB
-
仙侣情缘2.5A完整包/华景机器人专用/CQapi.dll.dll 608KB
-
仙侣情缘2.5A完整包/华景机器人专用/CQapi接口.hplug.ins678KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/仙侣情缘指令集.INI5KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/玩家数据/desktop.ini142B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/仙侣情缘总配置.ini2KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/任务数据.ini1KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/功能键配置.ini109B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/商店列表.ini207B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/地图列表.ini14KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/婚姻等级数据.ini606B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/宝箱配置.ini52B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/宠物数据配置.ini9KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/封号数据.ini2B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/彩票配置.ini102B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/怪物列表.ini15KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/打开宝箱.ini5KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/抽奖列表.ini795B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/掉落物品列表.ini7KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/排行配置.ini991B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/推送数据.ini828B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/经验等级配置.ini11KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/行会数据.ini2B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/行会配置.ini2KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/装备列表.ini30KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/道具列表.ini2KB
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/防外挂数据.ini278B
-
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘备份数据/备份数据/备份日志.ini86B
-
仙侣情缘2.5A完整包/华景机器人专用/QQRobots.exe.exe 2.3MB
-
仙侣情缘2.5A完整包/华景机器人专用/QQRobotsApi.dll.dll 88KB
-
仙侣情缘2.5A完整包/华景机器人专用/RobotProtect.exe.exe 347KB
-
仙侣情缘2.5A完整包/华景机器人专用/Settings.ini77B
-
仙侣情缘2.5A完整包/华景机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll.dll 1.9MB
-
仙侣情缘2.5A完整包/华景机器人专用/use.edb540B
-
仙侣情缘2.5A完整包/华景机器人专用/说明.txt1KB
-
仙侣情缘2.5A完整包/更新说明.txt7KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/CoolQ.exe.exe 487KB
-
out.upx.exe 1.2MB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/[config目录说明].txt462B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/basic.ini998B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/cqset.ini426B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/group.ini465B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/lang.ini486B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/login.ini36B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/reply.ini1KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/仙侣情缘指令集.INI5KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/玩家数据/desktop.ini142B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/仙侣情缘总配置.ini2KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/任务数据.ini1KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/功能键配置.ini109B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/商店列表.ini207B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/地图列表.ini14KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/婚姻等级数据.ini606B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/宝箱配置.ini52B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/宠物数据配置.ini9KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/封号数据.ini2B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/彩票配置.ini102B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/怪物列表.ini15KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/打开宝箱.ini5KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/抽奖列表.ini795B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/掉落物品列表.ini7KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/排行数据.ini272B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/排行配置.ini991B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/推送数据.ini828B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/经验等级配置.ini11KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/行会数据.ini2B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/行会配置.ini2KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/装备列表.ini30KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/道具列表.ini2KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/防外挂数据.ini278B
-
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘备份数据/备份数据/备份日志.ini86B
-
仙侣情缘2.5A完整包/酷Q机器人专用/cqapi.dll.dll 15KB
-
out.upx.dll 36KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/cskin.dll.dll 98KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/gzip.dll.dll 36KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll.dll 31KB
-
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll.ini23B
-
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/[plugin目录说明].txt82B
-
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/cqonoff.ini437B
-
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll.dll 1.9MB
-
仙侣情缘2.5A完整包/酷Q机器人专用/sqlite3.dll.dll 628KB
仙侣情缘2.5A完整包/仙侣情2.5GM手册.doc
- SHA256 aa2e9ad7670f0f0fdcb85952116a5f4eba83fd0c06c71aec08986e45bdc5bcb0
- MD5 a685bc0d945bab69d9cef945893a59dc
- SHA1 e016103628b591358353511da62d6b5d8054176c
- SHA512 b86dea2fcfd40fc729647925026d760e51d0a2f6f89887138757b4074e628a4f7ca7a13974fddecd0c93f7a1d4ee596456058bc533789032afe35af748a3306a
- SSDEEP 12288:33OJOjikDXBjzbFj+M9tkUnioUjQAeCSfnMpGt0/zyRjcZOikzE:ukGEjHcS1dUUAzSfcu0/xgE
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/仙侣新手手册以及攻略.doc
- SHA256 15358f2c9f73349bb5d14374f4e3a0431678587cbcb1e5cfeb0eed0cb7761b78
- MD5 2f3aaa59d76cc7d440741f0bb67aed50
- SHA1 5fe5be24187a434c3e18f921f84c96d51474ce76
- SHA512 750fd943f81193696596279c97ed42907946e233488eff975bbae6f8f1c6872f6c5f8f5329b34da216ef15775bdede37373754832fa907e1008f6c91e8eaabc7
- SSDEEP 384:89YACV5NL7khHnaLMFeMutPJvTdbH3wHK4LjDPDkn2c1yGsFtHcUzaLAQFi0YyEX:LLHkhHn1Fw1wqkvLmsLcUzaLAQky
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/CQapi.dll
- IMPHASH bd9b2189a40f2711f7dee0c8505466d1
- SHA256 0e98c4f70f1b73b2eb3f8c35f55ffb605e74ee3f5d275643736c6c567f5ba4d7
- MD5 af742a8185a78809011804562192cad5
- SHA1 77d8d89d2b6c710cb156f580c057ccd6de9e3b50
- SHA512 ba03a3a604479a7ec543f1fee0bddbef92a4d61d0ff4b1fbf7add243e70e4cce3fd48f32408b37b3b078932234f1c07ec34676d69290acd436b37758c0f37a9b
- SSDEEP 12288:lGFD/+WnqioMb3ZSm6kNh/1GqIlb6iUn:lGD/JnToMb3ZFeq+hUn
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
279281
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalUnlock
SetStdHandle
IsBadCodePtr
IsBadReadPtr
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
FindClose
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetACP
HeapSize
TerminateProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetFullPathNameA
FreeLibrary
LoadLibraryA
lstrlenA
GetVersionExA
WritePrivateProfileStringA
CreateThread
CreateEventA
Sleep
GlobalAlloc
FindFirstFileA
GlobalLock
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcpynA
SetLastError
GetFileAttributesA
SetCurrentDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
LCMapStringW
CloseHandle
user32
OpenClipboard
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
wsprintfA
GetSystemMetrics
GetCursorPos
MessageBoxA
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
GetParent
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
EqualRect
GetWindowRect
SetForegroundWindow
DestroyMenu
IsChild
ReleaseDC
IsRectEmpty
FillRect
SystemParametersInfoA
TranslateMessage
LoadIconA
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
GetKeyState
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetDC
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
GetForegroundWindow
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
GetClassNameA
GetDesktopWindow
UnregisterClassA
LoadStringA
GetSysColorBrush
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
InflateRect
SetRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
gdi32
CreateRectRgnIndirect
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt
SelectPalette
RealizePalette
GetDIBits
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
SelectObject
GetObjectA
CreatePen
PatBlt
FillRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
GetStockObject
CreateFontIndirectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkColor
winmm
waveOutReset
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutUnprepareHeader
waveOutPause
waveOutWrite
waveOutPrepareHeader
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
OleUninitialize
CLSIDFromString
OleInitialize
oleaut32
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
comctl32
ImageList_Destroy
ord17
ws2_32
ioctlsocket
recv
getpeername
accept
inet_ntoa
WSACleanup
closesocket
WSAAsyncSelect
recvfrom
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
api_kick_group
api_message_friend_send
api_message_group_send
tw_StartApi
Name
.text
Size
392KB
Virtual Size
388KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
64KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=12, version=7291,
count=43, id=14, version=7299,
count=171, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=86, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=44, id=19, version=8022,
count=21, id=19, version=8034,
count=588, id=1, productName=Unmarked objects,
count=74, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=31, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
仙侣情缘2.5A完整包/华景机器人专用/CQapi接口.hplug.ins
- SHA256 0c10e0b84adfc4ce2388caf5dc088af405348f757a8ddd593740e414ec55e16c
- MD5 c55d87a89204c3c524a1159c73219603
- SHA1 05be583dce9a4b50a71277f0b1011fdbab44c4f5
- SHA512 f15074c6bdffb94980cfd1916978c654e0110cfec5ba78c52160b6cc60b9f34b0f59dd47a656a16b4984c8766b5eb6c77cff4d4e3d8adfb4cf8b676505bb653d
- SSDEEP 12288:M0tUd5g7jE1nTaG7RJ3BKf5Holdjxlov/P8uJ9Q5d8U8T+6Cr5mv:M48gXAnTas33BY5sjxYP8uJ9AHs+zrs
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/仙侣情缘指令集.INI
- SHA256 543f8701e068515a0f61b4d9eb2d36809d824d44d629c120f23fb5d049ea500f
- MD5 a77973ee31ea9da23effa7ffba295c55
- SHA1 692aa94a09f7b5972aec50388ff9605b1228e7bb
- SHA512 a2c50782f533d1175879ae1c3c0578f4c5530b7d0f9f2bc374868fc28ce3264b93db1db94a3e34657922fdde65de7ba645ff15323ff65dabf542d13eaf1554cf
- SSDEEP 96:1hnDLpeuDTARlHNyfNd90+LAxEL69i+36CfDulg92VMb0ZyoWEcBeU0evpnlivmF:1hnDLpeuDTARlHNyfNX9k869PVfylg9l
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/玩家数据/desktop.ini
- SHA256 a7448d46e7c796ffeb43a5d87ae7b483d196ee0e1c7532633c1320fed680ad97
- MD5 eb78c4d39056bfbc17781ffa945c70c1
- SHA1 9da4bbcfe1b99b41b590c8f57dc58d9531ef6fc0
- SHA512 241134cd6d34430159bc7b086ea04c7cd68a7cd69a1a1d13e3bca8e29a48e1064413f33acf6339ec3ea3d598d823ba74ac218b914ce710d51fe0469909b3a229
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/仙侣情缘总配置.ini
- SHA256 4b1b7612df4c0eef4ef96e299258b58df0847afa499096747f0eb9a1463a4db0
- MD5 9f65b9a794e3828a97b42734ec8ba107
- SHA1 28a45ebd6794c41cfb501951069b04f28a1b748c
- SHA512 7190ede5cd94ab8256351993ed6576ed32a4bae2922634a70d8dfd1934814189604688034e9b99ca4744407749c86d4d92e065854ae14eb3cb17a4a94ccce937
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/任务数据.ini
- SHA256 3e62dc1f232a9a6a546f8c502f59ac5275608692989bceee787857d17f3330cf
- MD5 1b819318a2a9b01572e8beed27fb4ba9
- SHA1 5d43acf4e6f8b77a6a7c7da814a34d60664655e7
- SHA512 f1ab5e1391496968c3d485c93954efd79d247fcfcf26b17c853f97d12e87bd80af075f285eab3a11127e48b8550a70983af7c04687119f16035e79e22b62de36
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/功能键配置.ini
- SHA256 a09d7a83085022f2d110bdf57e7ba8b14d158223f0afee5df907d47e4a982f4c
- MD5 553d76a9cb233c765e90489dcfc8c9d9
- SHA1 d68f3b81393fa701eb3f8eff2b272dab8f85aee7
- SHA512 0c7720ecc4e779206a07172375468c554a5bfa70854ca79ec263e403510e5fc302fd22c72577c9faad7d66ac66abdc83a9d9ae6c754c15796e30777f73f8271b
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/商店列表.ini
- SHA256 8946557428410f3543a8c293827e79b922af12072e8baeec5d34c7f755edfb41
- MD5 e7b6b31f861ec4cbda1dff12541089d9
- SHA1 a513f827c02b4e8f2b11b809a58094b9cf571d71
- SHA512 b35da4be2e3184e6cb17f2334203028cf8293abc0419a2ebbff4ac6a9db884cabd266609a999c4d0028b5afbeccbfcd2ec54ddb4536128d3f5414f726a0540a2
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/地图列表.ini
- SHA256 2bf14d8f898ee8ea5711b2396c884749af3a9a3933b500effe069b5f00f45a63
- MD5 5d90d3a2e694e5dd9f90ef29df35809c
- SHA1 9f085a9bbe6e2e0ad6d703a2db0305eb27c5f222
- SHA512 9dfd41346cb0ae2915e14f4e584115cda2281753d882b4f6d8b11a2a87e5694a7df315b82371a0204b9aca796f361eba1ce6a2c71d14722488b7986c8fa47068
- SSDEEP 384:ziuTdzVtxLMjT2s03b8EF8bOLBiVqZcIK:3dzbxQjT50x+
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/婚姻等级数据.ini
- SHA256 b73b579539ba632470ca57d31db4ff0288b6abfb972f312a939ab78d2128e5ef
- MD5 f8e5785d1a1c2aec544c58b1dc2eff19
- SHA1 a515b1682f26e18260d32cbfd720a9eca898099b
- SHA512 344c08e464045db4ddad376616f02f0ebc6b4c8bab7a59a3ebcdd872a91f30da0e2bc45bec09d235e1fdd35d4bc35ce211c2a27fca5ec62c42fe634bb629ed5a
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/宝箱配置.ini
- SHA256 a69be838b379f2af1a2cb4d32a7d5949fead34548c7907437ab720625a04be2f
- MD5 ce58d92fe079b50d691a78e66194a5c6
- SHA1 13e879ee8d2a327c8c773ddb9539161c5606347f
- SHA512 8ca679f5697965c682f19e7f03e04557812c30b9808bd6b3ebc5fe8a199c546432405764b105e139930ce7fe9e2ae803ad7d488fd7fce652aa02c20ad4532d64
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/宠物数据配置.ini
- SHA256 f6e7595a310506305fb7b77a681a4fa8042740946c5fdb532e8f14e324238913
- MD5 08c3ff21d814cbba6dce971de5be4f50
- SHA1 ae5b9e28c21e42d231542d80d5508075a7da0143
- SHA512 b06b993b52eb811430f2bd58ae8383ef00af4f46dd493baa3ee395e3089c4172b6f20df2326a835348408925bde0e4e0b37524d93d8e8722bfa75666a41b5149
- SSDEEP 192:f/J4hpR1LTpVt1S5w0BYONBpMljyWsNwC:fh6pXLdVXSBBYmpgyWWwC
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/封号数据.ini
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/彩票配置.ini
- SHA256 0ff45c7c7912f70ead883e6c320eb84771572e8b7e821f45fa9551fdf6e11ae9
- MD5 09a7c49a443e6496deb9ef13645a33bd
- SHA1 127523cea02fc9f077546bd387387733d0020815
- SHA512 a6f737b8242230ccf75bf4255745ca8265d72e07b30606adfd8e66f81247bcd196d541ef81b9a60af348f9937252a0b2cd594375e63fe13a89af9e11ad01d2a0
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/怪物列表.ini
- SHA256 d475be32c77bd7755235fafc80e062b895cf00a7dc191ab95eca1c0d36a01689
- MD5 e02aea0275c95db77a176520af4e5234
- SHA1 b21ee2dfa88dd6bdffa743728e9c9d0735ed564c
- SHA512 3237be94d651233700908fba6e092c12c8a9875192744a9111b4f7823aa1c5dbea15d38462bd348ac4755c01224472a76486725064fae566e4ea66b7da60050f
- SSDEEP 192:BcmB7YpsvZiKXIdEFwhdFFVyLB/AHjeXHfwIYS6/v6kcZHqhE+:BhkyYSuhdvAL2gnen6BZKp
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/打开宝箱.ini
- SHA256 0e57912d2dd6780071c860827756f91c760d34ac379825dfb12dfb68b1c56aeb
- MD5 dc3663e11579ff447f17c9327decb59a
- SHA1 88bd1a4f4e08a0b87760503369b48779674dce68
- SHA512 2e4801c3a231ed34ba43530c91e9456acc8b8f8799f09d2fd64e7ca8ff4323e935c190582ac447e3957a2e6c55d22dca26287b29f13b601a537a76b170a0778f
- SSDEEP 96:mdMAjad95sfhjyv2uZilsJERh3xgBJhMmQ3XhcowlVN+AtGEhWpKnN2:mOgaZ0hWWuc3YhWX+V0A4EhWpKnN2
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/抽奖列表.ini
- SHA256 e62b3c63ac6991f36e5698fa785ba7d510195f37c691f9f7e94862a612a2a977
- MD5 7af1d15f6fe499daa4a8b034c6796d20
- SHA1 919532e3595a18388f629ee2072e66604341d341
- SHA512 aeaac46c086e08d779694ea7fc2ac205739e6bbd6b87963c345bf6e02020d26ba47897fc8c9f9dd3c4a8c831acd82ffd7c52a068fb7767b8d985ed292b079ee9
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/掉落物品列表.ini
- SHA256 86a078e5ac61c1715b091c9939ee9c8eb9e093be71ad581d1b10efc53a724239
- MD5 a54f7fa315aa2899f399a24f8bab0603
- SHA1 35d74f35f627a660f2b6ac60c606039042ee188d
- SHA512 646092ccab1cfcc89b6070c23ab81a10c5c83e55a2cdeac5ca9c651020a1de562d46ace9dcbe0ed05536dffb9c0b66a4a81e5ca0c8e2edd06d33a4ad60acb620
- SSDEEP 192:mTMgpmYO5FTMQ2YTraHYjCOFKwGK2xO4hxjX8+jZnjGOWLReksvl:QxdugQ2YTrEYjXKwGK2xdhxjX8+jZnjX
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/排行配置.ini
- SHA256 f7c9bd21d9e3d6bde1eb1cd9ea6f8780a1e42df4324d10b1e683f6624ac4f7a0
- MD5 d1f85b8b2143e0a4ee58483a5fd7017b
- SHA1 56a1cb5ab873258b698c2b9879db5cec1e37e120
- SHA512 2a8675ae619157be650f0e590c22836bfe9958a4597fc12026248923029d249f1638f6e11356a58b62476141eac08d1f6ef866dabad3ad9c2b39b10a55f9bba5
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/推送数据.ini
- SHA256 b979983973aec38a06f9895add40da8242e95e546aa82234f14acad1bf13c7bc
- MD5 0d87a44a5454fc649af311c0195c1003
- SHA1 52fbefdf109563bca518a21b3c32bb8e46dd532e
- SHA512 a59fab600212b7dd62459c361b86c58385d5044500a4e01bcfc027303a20913c5006324dbc8db3602774b8ab69282d741f6e6cfb7025b9a2ddb593f06afc7fe0
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/经验等级配置.ini
- SHA256 ec14e10d742e06f10cedc6cd4069573711a81ea5ecdf667432c733df4d104554
- MD5 c56eae0a1b1cd57b02e391a7bf188410
- SHA1 0f8bc35e6f8233c11588e7fb852bb63a45d34d56
- SHA512 566ac0d5f7f7f61c91dce5349d90e49d9d73e5ca8a929e8291069f8bcc00e1b23f8011a7085609302c6a8dd7d6b27df6e4d6458e560e97f26327c4f6bb1582ca
- SSDEEP 192:D6yivGVb5LFGTTXn2xJqM2xSy1ZcuPI3q5NqFnbsY:7tVbxFGfY2gIJ5qBbL
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/行会数据.ini
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/行会配置.ini
- SHA256 95be96bd6d04fc0fc45d9268fa7d42bf783576a1e93e4d4d99f6898e59f20957
- MD5 13c19f1366dbbcb5d363a715140d08f4
- SHA1 754c1434d99c71e8c107293ec4ea3b0530bdf2c1
- SHA512 9c08a2c343ce0905dbe5ee7999645fc3f6d1e1d57c6d56930e78fe755d1d0e628994f44d28b794cfc72eb7b6cd309b651a78644f012db1b4f7553e136e5c23db
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/装备列表.ini
- SHA256 27a553fa891c1929652a09c4bf6cbc519db2bad2740ba4d6befac0f05f8a3ae4
- MD5 32f596b216e2037179f6a40a708f9c1c
- SHA1 25623d71508085b5d00aabe13bdea7724f77796c
- SHA512 5371aa03a9c3bda61bfb00544a413e5197a456e6698901b1d751923c4c9c0b38cf750e3a39718567da71204f0cd1ebb5541b3a7062eb9a3b3078efad52b5e478
- SSDEEP 384:huvUlRI2EIWG+0UKxcLRUvZrmTr77q59RB5J9jrp6HZpvPyk:2UClpOk
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/道具列表.ini
- SHA256 262942b058f5a7b7f68a5f387371454431610ab8e0dea32a8a852bccd27e933b
- MD5 b86343925c0d8f64ac15ac0d6a276709
- SHA1 7c7f5ee2b422a38dd2f7de342a8a44f2ceb1094f
- SHA512 d98b1f73c6194b6d67c8c630ae237ade14c15f2cef4e0bee15cf9ba14f097fb4667637b52404935fd2e0a9cd0de5d7c4cbbf26f06c33b2f5f7f95b2008624c09
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘/系统数据/防外挂数据.ini
- SHA256 5493e2e9232e39298ff13cfdb96175e3633d761de4ba6f6b4f2ff87f39366ea2
- MD5 f189419f81e95728c05f1fd1ef7a8ea0
- SHA1 8e99e10b19def5f9cfc4bafb374f37ff56601434
- SHA512 ebb215168b8b978e336c431c6ef8ee4f8ad4275e497f7c30e6482b9a88fa4091f276804521953cd24345a559760786fbc55631185a6d7b6ad79be6007e5b0ad4
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/Config/仙侣情缘备份数据/备份数据/备份日志.ini
- SHA256 615be996ca1d078749c7b5d7e3437cb2581b1dacd037229eaac1ef85b3bf1ccf
- MD5 ca2bdedc759bb41f8dcdf488017870c0
- SHA1 40d19604c7555380971144f24c5b739e7a1ada7a
- SHA512 b4a01aed713e8ae8d570c699eff0e85f3f39e3b80150b5009db25b153c8bbf4f44a1b212030d5c55232446c2183af695a09c9a04059cbce8dd3ac782f0b1d0d0
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/QQRobots.exe
- SHA256 68e9de8f8b37afccf177174501c9a1d60f8fbe9805afdff342159014548308c4
- MD5 be5908bca5ac0aaf536617bd06348311
- SHA1 c0a9f47e3b4b6989de109853bd98a191838fe309
- SHA512 310285c012af66d62e7164e087eedbcf206b3e3ae47bb1e29747b02d8d407afa82df6edaf17121338122ceac520b69dbf03a3097cf3942cd9573991d82bcd13f
- SSDEEP 49152:98/pXiR6RZTKJI0hUNIQgKRjho52c//7jXDoMF6hPeNVdH9H3XYX5Hmlct:wpSRoTKJI0+NVzoT/HXEM8hPeNz53XYz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8794576
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.Ebp
Size
Virtual Size
6.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Esp
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
99KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=45, id=19, version=8022,
count=46, id=14, version=7299,
count=36, id=19, version=8034,
count=795, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=1, id=18, version=8444,
count=24, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=235, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=208, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=127, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=131, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
仙侣情缘2.5A完整包/华景机器人专用/QQRobotsApi.dll
- IMPHASH 11b98ecf74ccf3ddafef8783bb0e58e8
- SHA256 54b127219d9ed96c867b5d912587626eb00bba297ecd970850386f5917857e75
- MD5 e462e6e734d544f7f8648eb0be90b685
- SHA1 27a6b3c298e38ad14d8b41e9a395c04ea4477adf
- SHA512 beea2c87bf1fb315d88c8efc6ccc964b4234fb1aff8b4f80f00d213427aa955536aaca90ac01c3f932e0f35452c0e53bfd8053a1c8355791397646db867ac9b3
- SSDEEP 768:7U/ByXlGQA/sdTJWEBrOcYYFICLH6IzS8Uw6CD1H5EphiB9ojqHMOJqstp1XCSwt:N0j/CTJWIaCuaS8vlAuB5tzyp
- MD5 SHA1 SHA512 SSDEEP
-
Detect Blackmoon payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20889
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
kernel32
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapReAlloc
HeapFree
IsBadReadPtr
GetCommandLineA
GetModuleFileNameA
LCMapStringA
HeapAlloc
GetEnvironmentStrings
GetVersion
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetProcAddress
RaiseException
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
CloseHandle
SetFilePointer
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
AddFriend
AddQun
ChangeMemberInformation
ChangeNick
ChangeQunImformation
ChangeSignature
ChangeStatus
DelFriend
ExitQun
GetClientKey
GetLicenseID
GetMyNick
GetNick
GetOnlineNumber
GetQQList
GetQunAdmin
GetQunAnnouncement
GetQunCard
GetQunIntroduce
GetQunList
GetQunMemberList
GetQunNick
GetQunSexRatio
GetStatus
Internal_GetFriendInformation
Internal_GetMemberInformation
Internal_GetQunInformation
Internal_Start
Invite
Killout
Output
SendCode
SendMsg
SendTempMsg
SetQunAdmin
StartApi
Name
.text
Size
48KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=14, version=7299,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=115, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=87, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=16, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
仙侣情缘2.5A完整包/华景机器人专用/RobotProtect.exe
- SHA256 f7cf25da04a1becc0c9c5b298ac312e206ba6dee3921df006fef17d431b27d31
- MD5 83779b5b9acc771deafeed9856148e25
- SHA1 084f1bf3a2559f43b347fbe8f8ee7856018da9af
- SHA512 6d275b104a222e4353c8421d5bf765aa67cf615c4ba51c75b3a0dd228a90b2d37190cea97949ff564b17413a787f099b8959887b4b04201b27d2099e533b582e
- SSDEEP 6144:KjwG4aHtIcpY6733FSaYvXevdWDgPjhTsSxHShGY0pFrkoSogXSuZA1Y+qkf4RH:K8G7tv733F0vX6dWD0JxHShL0brkoSr7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
911152
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.Ebp
Size
Virtual Size
656KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Esp
Size
233KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
113KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=14, version=7299,
count=180, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=44, id=19, version=8022,
count=24, id=19, version=8034,
count=661, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=104, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=74, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=48, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
仙侣情缘2.5A完整包/华景机器人专用/Settings.ini
- SHA256 a9be9c86dde5cee01163e12e39bee13d475289c51b8d44db6e08e59bc7134bf5
- MD5 a29b36cb8efcc8d4106d238f30a3cb49
- SHA1 8a7ec9d98c28f3f50b7b47628db35a6da1f3927e
- SHA512 23cf533873508c289daeaf7018256e1f7dfcc3fde6eda84e5beca2a22548fbaebe7787dbddeb1a11e14600bf3e7ee6662fe3542d1ab7fd2b3c8aee71d607ed3c
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll
- IMPHASH 3afeaf9280f2541f907af6c857a24ce4
- SHA256 b6b7fecef78a7f0216d2522556fc3e571b75d10dd2779f02eb178071c57f7fc2
- MD5 9b1e56b9536da1039aeb169f59c0eb20
- SHA1 c0deb1def8bf2fbebac9c2a7242fda9b60d137aa
- SHA512 157ad5e34030047406a2f5b476f30712d4ec3344887b01f5a1ab55988535d0dc9e58787b52a86ec264f118af19f3fc58c41a30e1c90aafe61bab89978ff1ca55
- SSDEEP 24576:A0XBDifjX80ZcqKaA5ze+/sQ5pEXUmYBlM8dRS7tQBpj3rHG0Ial9aSw25u/m/r6:ApfbkROYrz7RvjcsSDxt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1351885
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
rasapi32
RasHangUpA
RasGetConnectStatusA
iphlpapi
GetAdaptersInfo
winmm
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutPause
waveOutReset
waveOutClose
waveOutGetNumDevs
waveOutOpen
ws2_32
accept
recv
ioctlsocket
recvfrom
WSAAsyncSelect
closesocket
send
select
WSACleanup
WSAStartup
inet_ntoa
getpeername
kernel32
GetVersion
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
GetACP
HeapSize
GetLocalTime
GetSystemTime
RaiseException
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
Beep
GetWindowsDirectoryA
LoadLibraryExA
SetLastError
GetTimeZoneInformation
FileTimeToSystemTime
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
RemoveDirectoryA
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
WinExec
lstrcpyA
FindNextFileA
GetDriveTypeA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
lstrlenA
lstrlenW
GetVersionExA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CreateEventA
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
SetFileAttributesA
GetFileAttributesA
DeleteFileA
CopyFileA
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetEnvironmentStringsW
user32
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
LoadIconA
TranslateMessage
SystemParametersInfoA
CallWindowProcA
CreateWindowExA
RegisterHotKey
UnregisterHotKey
SetWindowTextA
GetClassNameA
GetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
CallNextHookEx
CreateAcceleratorTableA
UnhookWindowsHookEx
LoadStringA
CopyIcon
GetIconInfo
CreateIconIndirect
ClientToScreen
EnumDisplaySettingsA
LoadImageA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetSystemMenu
DeleteMenu
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
GetDesktopWindow
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
SetWindowsHookExA
GetDlgItem
FindWindowExA
CreateIconFromResource
GetSysColorBrush
UnregisterClassA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
InflateRect
SetRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
MapWindowPoints
AdjustWindowRectEx
GetScrollPos
RegisterClassA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
gdi32
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
SelectObject
CreatePen
PatBlt
FillRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
RealizePalette
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
CreateFontA
TranslateCharsetInfo
FrameRgn
OffsetRgn
GetTextMetricsA
SetTextColor
LineTo
MoveToEx
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
BitBlt
DeleteObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCloseKey
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
Shell_NotifyIconA
ShellExecuteA
SHEmptyRecycleBinA
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
OleRun
oleaut32
UnRegisterTypeLi
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopyInd
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy
comctl32
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ord17
ImageList_LoadImageA
ImageList_Read
ImageList_Duplicate
wininet
InternetConnectA
InternetSetOptionA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
info
plugmain
��ƱͶע
��������
��̳�ӿ�ϵͳ
ȡQQ����
ȡ�ұ��ı�
ȡ�����ı�
����GMϵͳ
����VIPϵͳ
���°���ϵͳ
���±չ�
���³���ϵͳ
���³���
���´���
���º���ϵͳ
���»���ϵͳ
��������ϵͳ
��������ϵͳ
����ǩ��
����Ǯׯϵͳ
��������ϵͳ
�����
�����л�ϵͳ
��������ϵͳ
��������ϵͳ
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
276KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
140KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=14, version=7299,
count=44, id=19, version=8022,
count=2, id=93, version=2179,
count=694, id=1, productName=Unmarked objects,
count=29, id=19, version=8034,
count=213, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=18, version=8444,
count=124, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=92, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=97, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
仙侣情缘2.5A完整包/华景机器人专用/use.edb
- SHA256 b8f1016195b94293a23e86b75d6e96c4dace6279fb95a851930dd9e2af1abb34
- MD5 0545d5d434597d42c8b9926d6feb217a
- SHA1 0783581729109d63e29eeddddfa63e950a6bcec9
- SHA512 463c444c139f13d5b0752f44e580594a0978190be8cda1cb2d1ad3d4d52ab2c830003bff29028c7be475cbf55224a62b4af6bd0d8ce964c8e65d92f1574b1c8a
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/华景机器人专用/说明.txt
- SHA256 103366b561301478ac1f60b054381f2510bf3fff141ca92f3a73346f7863d538
- MD5 23d289a890682ec4b81a0431361b6c56
- SHA1 6cd38702a420b98b948dae8be9dd4c07696a4d85
- SHA512 dfd8b377ebb8caf647ee49897df8c5f675e382a6e2a2e3cd7802bf6a9fc97f73759c4d085ed2949ac445322203c90bf939ae75d040d163724ddf0c2528a114b9
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/更新说明.txt
- SHA256 f8c8923aaef342e6eb4f679f109aa0726455c3166cc5c46b60ebc8bc19dd58c4
- MD5 854b706494e487d5078cf2b18305bc32
- SHA1 41e2b6a737839ffe14968867e8fd31ddfc0b6d20
- SHA512 78c0ec5bc1a0cdc2c0724d56af4da32224c720a677058a2c628935cb30150ef8cad7bd7287993ed38efdfcae0811ec76f3b51eefc19bee682849e03d1d8491a7
- SSDEEP 192:RhLiVb5zNeNyM2/3Eve/33XggOWBQadID3ZsED1CeHE:R94zDB/3Su33Xg5WB/dIDprDUcE
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/CoolQ.exe
- SHA256 051957b378e44c51f5a3aa4707dcf0d39c716b30b4a480116a425af4872729d5
- MD5 a7032b9b808d686dcadd0e0c048d2030
- SHA1 5af57442e09209d989edf7aa15d15220c6b60222
- SHA512 a2655382a7c7cdd160b44d56046edd555403e5c1b1aef8d3dce641ca75a9d4ea1178ee00ca26851f3f292ec8e4ebc042a4dbafc5d7fdbe54e8da31c22329c466
- SSDEEP 12288:5FjhYP3z7qNmlav72sjz7SExl+vE0jogWME:5Fj6z7qwY72s7xlI0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
36:a4:42:e3:00:c1:30:73:a9:a4:aa:1d:0d:71:a5:5d:42:af:2b:95
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Open Source Developer\, zhe fan Gong,O=zhe fan Gong,C=CN,1.2.840.113549.1.9.1=#0c0c6d6540636f7878732e636f6d
Chains
May 17, 2014
Subject
CN=Certum Time-Stamping Authority,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
04:7a:55
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 3, 2009 - Mar 3, 2024
Subject
CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
04:7a:53
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 3, 2009 - Mar 3, 2024
Subject
CN=Open Source Developer\, zhe fan Gong,O=zhe fan Gong,C=CN,1.2.840.113549.1.9.1=#0c0c6d6540636f7878732e636f6d
Serial Number
60:78:46:15:09:5b:a1:03:93:0d:94:d4:de:68:34:3f
Issuer
CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 9, 2013 - Nov 9, 2014
Minor OS version
1
Major OS version
5
Entry point
1414176
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
932KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
446KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=8, id=152, version=20115,
count=69, id=171, productName=VS2010 build 30319, version=30319,
count=45, id=158, productName=VS2010 build 30319, version=30319,
count=185, id=170, productName=VS2010 build 30319, version=30319,
count=95, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=45, id=19, version=8022,
count=20, id=19, version=8034,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=617, id=1, productName=Unmarked objects,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=81, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=66, productName=Unmarked objects (old),
count=1, id=154, productName=VS2010 Beta 1 [10.0] build 20506, version=20506,
count=1, id=157, productName=VS2010 build 30319, version=30319,
out.upx
- SHA256 ceb0880c652856a7e7ea38b9184bf9ca85a81f76fe30f86753d56bc507ec66cf
- MD5 787e4afd3a60368c5d19bcbf2ca31227
- SHA1 1948bfd867f95b107d3a64d2a10d6820cfee6441
- SHA512 b0befb4400f0c7a2d66ff53606991bf2c5017f5f032605b86b327c9a28048862537aa238935a805253dce9d45e6e3a42431d764373e5f94721b1a4e539fd276b
- SSDEEP 24576:KwDQPaL0EW0zMmOxlDKzDrQPoYp2o5EqJJ6if9frC:KbZoAGqJMif
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
640482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
783KB
Virtual Size
782KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
251KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=152, version=20115,
count=69, id=171, productName=VS2010 build 30319, version=30319,
count=45, id=158, productName=VS2010 build 30319, version=30319,
count=185, id=170, productName=VS2010 build 30319, version=30319,
count=95, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=45, id=19, version=8022,
count=20, id=19, version=8034,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=617, id=1, productName=Unmarked objects,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=81, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=66, productName=Unmarked objects (old),
count=1, id=154, productName=VS2010 Beta 1 [10.0] build 20506, version=20506,
count=1, id=157, productName=VS2010 build 30319, version=30319,
仙侣情缘2.5A完整包/酷Q机器人专用/config/[config目录说明].txt
- SHA256 704abe587efed054a0df2214454b70ed30b1639123835abc23e5680954de05f1
- MD5 17e91395a1619e7e809a7179e59621fb
- SHA1 aa08752b6b6d3b9e408425b3aba74b5f468d9a9d
- SHA512 bec9eb2c4401c36f770b031fc55103d0bb4ad929ad429c3285c759345a3b53a3f7f203a666c62321eb4b6c37a04ac56d81b3028f2525a659ecea364802f57465
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/basic.ini
- SHA256 0f49bd33589c550aee8d45c96e17de1970d0f45028ea35d7e1e741dd543ba214
- MD5 e4182fbd10a0b7228d077e9e461491b9
- SHA1 378d93dae4345eaaecdded761b1923c0e845a4b0
- SHA512 5564e379d5cf56f2abfa1c4134bd679d34d18d62c38c1d41756319b9baae7344a51e7cc4a862a156c6022997315bbc44b7dda8cf02b12da707d73b0941baa344
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/cqset.ini
- SHA256 70d23c9d1c523c39b74159598460a269d6d6c068bfbf56ba5ab71ed40cbf242a
- MD5 1174a2ce3ac5bc7d401bcdf8c50294ff
- SHA1 c7b74618fc266b826535a7ac1e702ff674a015c4
- SHA512 8573992b073c9f96ade8c1e15c8936a883e0a7cf06d33aea9c5a30909be1d5ca4f64b8a00eee5190f5903afcac173b5696a4e46b8ee8bb6437fd25672474e450
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/group.ini
- SHA256 8d4da5aa4ca9635a95049c4fe0a83576b64a6ff2deb9fd6340f1f9ae46dc7fe5
- MD5 5770f49988e0733eba5db4486b300a92
- SHA1 e7385a2b39631b00c8ad5409613e7dfb39a2e766
- SHA512 194153e9cc365aa637d17f900840cec47bb8a2ce24c3dd7b2e78d5d0864689b5146216a00b3064829e576bb3b0b87d6d4103fb633a52966bac9dbfcde27c375e
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/lang.ini
- SHA256 fa493339914e15abae76c3be7093daf2b6d80a820f02a237b3d75c5b3cacb7fb
- MD5 0963fae0da04c73d96039a7a7ac127b2
- SHA1 6401849aa618ea4f2a3019d7f498e18909d944bc
- SHA512 26844d31171d68df485c709d95f22101c3413e1b0cbe13a295846e3f8582735f21ad78728838a7dc1d68f1c82d0364d7ae065ab95c78a48264b75a7c5d818da2
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/login.ini
- SHA256 d6a218aac0957b0a34c18b0b49fa1cb48391b1e77a20502db47b52511b810fa7
- MD5 d3d02ac8a61b4744f7e17b61cbfea1f7
- SHA1 7fed9620ab66363bbf0ddd9a5f62fe118aa781a7
- SHA512 070cdc2ef404bd1224c41a99627e61ea84631b92ad2f66c65bd8ee6c034c88e101d330aad71bba6ad60def7e6a30ca0a2f4c1f15b7ad86f9335f30c96c36f579
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/reply.ini
- SHA256 444e9034532265eb3a88aaef6aff6da071b19fc45509dc5645cf1917e4e95347
- MD5 1b48df3ec6e40071ed708c5e22f07715
- SHA1 0e5232395874ec24c44e5b741c05f5c72325dfde
- SHA512 ca9c4da0f29df4b38472e101de7a54650929faa3ffbcf1b786a39b0c9d905503fd9fc0c35cfe588c570eb0660c6031dbca76c713b4d96588ea2845e7c89b1d3d
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/仙侣情缘指令集.INI
- SHA256 543f8701e068515a0f61b4d9eb2d36809d824d44d629c120f23fb5d049ea500f
- MD5 a77973ee31ea9da23effa7ffba295c55
- SHA1 692aa94a09f7b5972aec50388ff9605b1228e7bb
- SHA512 a2c50782f533d1175879ae1c3c0578f4c5530b7d0f9f2bc374868fc28ce3264b93db1db94a3e34657922fdde65de7ba645ff15323ff65dabf542d13eaf1554cf
- SSDEEP 96:1hnDLpeuDTARlHNyfNd90+LAxEL69i+36CfDulg92VMb0ZyoWEcBeU0evpnlivmF:1hnDLpeuDTARlHNyfNX9k869PVfylg9l
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/玩家数据/desktop.ini
- SHA256 a7448d46e7c796ffeb43a5d87ae7b483d196ee0e1c7532633c1320fed680ad97
- MD5 eb78c4d39056bfbc17781ffa945c70c1
- SHA1 9da4bbcfe1b99b41b590c8f57dc58d9531ef6fc0
- SHA512 241134cd6d34430159bc7b086ea04c7cd68a7cd69a1a1d13e3bca8e29a48e1064413f33acf6339ec3ea3d598d823ba74ac218b914ce710d51fe0469909b3a229
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/仙侣情缘总配置.ini
- SHA256 cdcde2327a14b20d9e592eb1b028d8f16333036a7ecacebcd877f9d45fa9b296
- MD5 26297521257d85a551d7ad0c5df0557b
- SHA1 114faacbf88746af3ac96f662faf2ec4bac17f33
- SHA512 84ced13af45223371d5108cb2ec89f2f9e763e9fa1d01f5e61d08b8e3c72ed74a1fcfc1a6a0f736e781723a24e6c690a819cd42d3d5c77efb30188f743f38ffa
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/任务数据.ini
- SHA256 3e62dc1f232a9a6a546f8c502f59ac5275608692989bceee787857d17f3330cf
- MD5 1b819318a2a9b01572e8beed27fb4ba9
- SHA1 5d43acf4e6f8b77a6a7c7da814a34d60664655e7
- SHA512 f1ab5e1391496968c3d485c93954efd79d247fcfcf26b17c853f97d12e87bd80af075f285eab3a11127e48b8550a70983af7c04687119f16035e79e22b62de36
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/功能键配置.ini
- SHA256 a09d7a83085022f2d110bdf57e7ba8b14d158223f0afee5df907d47e4a982f4c
- MD5 553d76a9cb233c765e90489dcfc8c9d9
- SHA1 d68f3b81393fa701eb3f8eff2b272dab8f85aee7
- SHA512 0c7720ecc4e779206a07172375468c554a5bfa70854ca79ec263e403510e5fc302fd22c72577c9faad7d66ac66abdc83a9d9ae6c754c15796e30777f73f8271b
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/商店列表.ini
- SHA256 8946557428410f3543a8c293827e79b922af12072e8baeec5d34c7f755edfb41
- MD5 e7b6b31f861ec4cbda1dff12541089d9
- SHA1 a513f827c02b4e8f2b11b809a58094b9cf571d71
- SHA512 b35da4be2e3184e6cb17f2334203028cf8293abc0419a2ebbff4ac6a9db884cabd266609a999c4d0028b5afbeccbfcd2ec54ddb4536128d3f5414f726a0540a2
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/地图列表.ini
- SHA256 7ebc7446e7070076e06ecc58a9760ff229daabcb98e80a2b214ff836e365ad9b
- MD5 e0866a708041bdd25b9fd8d089446315
- SHA1 96022c3f1e4b8a21e6becc42e8dab1216631289e
- SHA512 e5233b992a83e4ba58717111224c4b9ab3668bd248105211d3ae83a53e3de197055e26bf9dd85b0aa516d50befe009139bae22d7ebd0295bf585ea83eb75eb04
- SSDEEP 384:ziuTdzVtxLMjT2s03b8EF8cPOLBiVqZcIK:3dzbxQjT50NK+
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/婚姻等级数据.ini
- SHA256 b73b579539ba632470ca57d31db4ff0288b6abfb972f312a939ab78d2128e5ef
- MD5 f8e5785d1a1c2aec544c58b1dc2eff19
- SHA1 a515b1682f26e18260d32cbfd720a9eca898099b
- SHA512 344c08e464045db4ddad376616f02f0ebc6b4c8bab7a59a3ebcdd872a91f30da0e2bc45bec09d235e1fdd35d4bc35ce211c2a27fca5ec62c42fe634bb629ed5a
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/宝箱配置.ini
- SHA256 a69be838b379f2af1a2cb4d32a7d5949fead34548c7907437ab720625a04be2f
- MD5 ce58d92fe079b50d691a78e66194a5c6
- SHA1 13e879ee8d2a327c8c773ddb9539161c5606347f
- SHA512 8ca679f5697965c682f19e7f03e04557812c30b9808bd6b3ebc5fe8a199c546432405764b105e139930ce7fe9e2ae803ad7d488fd7fce652aa02c20ad4532d64
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/宠物数据配置.ini
- SHA256 f6e7595a310506305fb7b77a681a4fa8042740946c5fdb532e8f14e324238913
- MD5 08c3ff21d814cbba6dce971de5be4f50
- SHA1 ae5b9e28c21e42d231542d80d5508075a7da0143
- SHA512 b06b993b52eb811430f2bd58ae8383ef00af4f46dd493baa3ee395e3089c4172b6f20df2326a835348408925bde0e4e0b37524d93d8e8722bfa75666a41b5149
- SSDEEP 192:f/J4hpR1LTpVt1S5w0BYONBpMljyWsNwC:fh6pXLdVXSBBYmpgyWWwC
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/封号数据.ini
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/彩票配置.ini
- SHA256 0ff45c7c7912f70ead883e6c320eb84771572e8b7e821f45fa9551fdf6e11ae9
- MD5 09a7c49a443e6496deb9ef13645a33bd
- SHA1 127523cea02fc9f077546bd387387733d0020815
- SHA512 a6f737b8242230ccf75bf4255745ca8265d72e07b30606adfd8e66f81247bcd196d541ef81b9a60af348f9937252a0b2cd594375e63fe13a89af9e11ad01d2a0
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/怪物列表.ini
- SHA256 d475be32c77bd7755235fafc80e062b895cf00a7dc191ab95eca1c0d36a01689
- MD5 e02aea0275c95db77a176520af4e5234
- SHA1 b21ee2dfa88dd6bdffa743728e9c9d0735ed564c
- SHA512 3237be94d651233700908fba6e092c12c8a9875192744a9111b4f7823aa1c5dbea15d38462bd348ac4755c01224472a76486725064fae566e4ea66b7da60050f
- SSDEEP 192:BcmB7YpsvZiKXIdEFwhdFFVyLB/AHjeXHfwIYS6/v6kcZHqhE+:BhkyYSuhdvAL2gnen6BZKp
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/打开宝箱.ini
- SHA256 0e57912d2dd6780071c860827756f91c760d34ac379825dfb12dfb68b1c56aeb
- MD5 dc3663e11579ff447f17c9327decb59a
- SHA1 88bd1a4f4e08a0b87760503369b48779674dce68
- SHA512 2e4801c3a231ed34ba43530c91e9456acc8b8f8799f09d2fd64e7ca8ff4323e935c190582ac447e3957a2e6c55d22dca26287b29f13b601a537a76b170a0778f
- SSDEEP 96:mdMAjad95sfhjyv2uZilsJERh3xgBJhMmQ3XhcowlVN+AtGEhWpKnN2:mOgaZ0hWWuc3YhWX+V0A4EhWpKnN2
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/抽奖列表.ini
- SHA256 e62b3c63ac6991f36e5698fa785ba7d510195f37c691f9f7e94862a612a2a977
- MD5 7af1d15f6fe499daa4a8b034c6796d20
- SHA1 919532e3595a18388f629ee2072e66604341d341
- SHA512 aeaac46c086e08d779694ea7fc2ac205739e6bbd6b87963c345bf6e02020d26ba47897fc8c9f9dd3c4a8c831acd82ffd7c52a068fb7767b8d985ed292b079ee9
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/掉落物品列表.ini
- SHA256 86a078e5ac61c1715b091c9939ee9c8eb9e093be71ad581d1b10efc53a724239
- MD5 a54f7fa315aa2899f399a24f8bab0603
- SHA1 35d74f35f627a660f2b6ac60c606039042ee188d
- SHA512 646092ccab1cfcc89b6070c23ab81a10c5c83e55a2cdeac5ca9c651020a1de562d46ace9dcbe0ed05536dffb9c0b66a4a81e5ca0c8e2edd06d33a4ad60acb620
- SSDEEP 192:mTMgpmYO5FTMQ2YTraHYjCOFKwGK2xO4hxjX8+jZnjGOWLReksvl:QxdugQ2YTrEYjXKwGK2xdhxjX8+jZnjX
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/排行数据.ini
- SHA256 415a5247f6d4d716b5ce9a7e9a7568e9196dc0d7441b95798fee4a436a3be73c
- MD5 cf36ad25ccb5d4e94cb89fa315bea170
- SHA1 59a2239cb6129fff32efa729bdadbfa63e54a258
- SHA512 c90cb1fdc7862d2581a2faded2e6e50ea841e0ef56657488bb0ddd3c925e386f9d0b1a37c7b73ba8c5627a9a70a7745684de830682d6f54e8a9c2a4e74cd68f5
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/排行配置.ini
- SHA256 f7c9bd21d9e3d6bde1eb1cd9ea6f8780a1e42df4324d10b1e683f6624ac4f7a0
- MD5 d1f85b8b2143e0a4ee58483a5fd7017b
- SHA1 56a1cb5ab873258b698c2b9879db5cec1e37e120
- SHA512 2a8675ae619157be650f0e590c22836bfe9958a4597fc12026248923029d249f1638f6e11356a58b62476141eac08d1f6ef866dabad3ad9c2b39b10a55f9bba5
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/推送数据.ini
- SHA256 8075baf8ac107edbd7c62adfe9ec9351baa5e4f71d0e5bcff85a80f53b2bc92d
- MD5 9dfbb2dc7ec6e56bd2ee0ff63d040b49
- SHA1 faa36caf7dc2b968a48d70d1be9e858354140168
- SHA512 d05227d65dc45fafadc16d1968cb898263348cf3e077ca9b02a06fe6e6fa6d97719d49428c71751ab58f6a7006a52344cb824f5124fb8b91d0148444f4e6f734
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/经验等级配置.ini
- SHA256 ec14e10d742e06f10cedc6cd4069573711a81ea5ecdf667432c733df4d104554
- MD5 c56eae0a1b1cd57b02e391a7bf188410
- SHA1 0f8bc35e6f8233c11588e7fb852bb63a45d34d56
- SHA512 566ac0d5f7f7f61c91dce5349d90e49d9d73e5ca8a929e8291069f8bcc00e1b23f8011a7085609302c6a8dd7d6b27df6e4d6458e560e97f26327c4f6bb1582ca
- SSDEEP 192:D6yivGVb5LFGTTXn2xJqM2xSy1ZcuPI3q5NqFnbsY:7tVbxFGfY2gIJ5qBbL
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/行会数据.ini
- SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
- MD5 81051bcc2cf1bedf378224b0a93e2877
- SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
- SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/行会配置.ini
- SHA256 95be96bd6d04fc0fc45d9268fa7d42bf783576a1e93e4d4d99f6898e59f20957
- MD5 13c19f1366dbbcb5d363a715140d08f4
- SHA1 754c1434d99c71e8c107293ec4ea3b0530bdf2c1
- SHA512 9c08a2c343ce0905dbe5ee7999645fc3f6d1e1d57c6d56930e78fe755d1d0e628994f44d28b794cfc72eb7b6cd309b651a78644f012db1b4f7553e136e5c23db
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/装备列表.ini
- SHA256 27a553fa891c1929652a09c4bf6cbc519db2bad2740ba4d6befac0f05f8a3ae4
- MD5 32f596b216e2037179f6a40a708f9c1c
- SHA1 25623d71508085b5d00aabe13bdea7724f77796c
- SHA512 5371aa03a9c3bda61bfb00544a413e5197a456e6698901b1d751923c4c9c0b38cf750e3a39718567da71204f0cd1ebb5541b3a7062eb9a3b3078efad52b5e478
- SSDEEP 384:huvUlRI2EIWG+0UKxcLRUvZrmTr77q59RB5J9jrp6HZpvPyk:2UClpOk
- MD5 SHA1 SHA512 SSDEEP
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/道具列表.ini
- SHA256 262942b058f5a7b7f68a5f387371454431610ab8e0dea32a8a852bccd27e933b
- MD5 b86343925c0d8f64ac15ac0d6a276709
- SHA1 7c7f5ee2b422a38dd2f7de342a8a44f2ceb1094f
- SHA512 d98b1f73c6194b6d67c8c630ae237ade14c15f2cef4e0bee15cf9ba14f097fb4667637b52404935fd2e0a9cd0de5d7c4cbbf26f06c33b2f5f7f95b2008624c09
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘/系统数据/防外挂数据.ini
- SHA256 5493e2e9232e39298ff13cfdb96175e3633d761de4ba6f6b4f2ff87f39366ea2
- MD5 f189419f81e95728c05f1fd1ef7a8ea0
- SHA1 8e99e10b19def5f9cfc4bafb374f37ff56601434
- SHA512 ebb215168b8b978e336c431c6ef8ee4f8ad4275e497f7c30e6482b9a88fa4091f276804521953cd24345a559760786fbc55631185a6d7b6ad79be6007e5b0ad4
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/config/仙侣情缘备份数据/备份数据/备份日志.ini
- SHA256 615be996ca1d078749c7b5d7e3437cb2581b1dacd037229eaac1ef85b3bf1ccf
- MD5 ca2bdedc759bb41f8dcdf488017870c0
- SHA1 40d19604c7555380971144f24c5b739e7a1ada7a
- SHA512 b4a01aed713e8ae8d570c699eff0e85f3f39e3b80150b5009db25b153c8bbf4f44a1b212030d5c55232446c2183af695a09c9a04059cbce8dd3ac782f0b1d0d0
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/cqapi.dll
- SHA256 9efe9278863da4c4c7556acd9d7c391ca72dd3eb66113e300814dccbb6467384
- MD5 97149f4a94f83ee2c0c7f06b99cfae27
- SHA1 691634fc511cfed6143f792a549cc430bbac2fd1
- SHA512 bf7048469e935580f86593561c2d766a0371e50607c9d2bf3664c2af60bed69bf23d6dc23a282882ddb279c78ec64c012104fcd6bf416a9e9fa6da5603f73c8b
- SSDEEP 384:dgh2cjGB/SWjSQRBQqaktQVL9prEDgsOiQV6j4uPKYIoSKab+:dghbjG1tz6GQVL9pr1sOi4uKYIoSKaa
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
PE Signature issue
Digest
19:06:81:a7:e3:6b:c7:82:d4:09:2e:ef:96:26:f6:a0:c9:52:a7:3c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Open Source Developer\, zhe fan Gong,O=zhe fan Gong,C=CN,1.2.840.113549.1.9.1=#0c0c6d6540636f7878732e636f6d
Chains
Nov 17, 2013
Subject
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Serial Number
01:00:20
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Timespan
Jun 11, 2002 - Jun 11, 2027
Subject
CN=Certum Time-Stamping Authority,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
04:7a:55
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 3, 2009 - Mar 3, 2024
Subject
CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
04:7a:53
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 3, 2009 - Mar 3, 2024
Subject
CN=Open Source Developer\, zhe fan Gong,O=zhe fan Gong,C=CN,1.2.840.113549.1.9.1=#0c0c6d6540636f7878732e636f6d
Serial Number
60:78:46:15:09:5b:a1:03:93:0d:94:d4:de:68:34:3f
Issuer
CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 9, 2013 - Nov 9, 2014
Minor OS version
0
Major OS version
4
Entry point
94048
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
CQ_0
CQ_1
CQ_2
api_cq_qa_add
api_kick_group
api_message_friend_send
api_message_group_send
api_other_md5
Name
UPX0
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=2, id=4, version=8047,
count=31, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, productName=Unmarked objects (old),
count=36, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
out.upx
- SHA256 c3b365daf3ff4e0fae282a7f471ada7a22a47c3ab153bcab89793a3cea4e16f3
- MD5 c4c58d721db8fb30cecf8da179dacd30
- SHA1 50f8e5501788370c46db9770089d32fe8223b153
- SHA512 5ca8b9476884b25e14e8831cbfe183d9128989db136ee12995a97b3a18fda39162563eb095fdea108cfc3904466fd837030342c200d89ade313fa35382cdd36c
- SSDEEP 768:UL7+tE7C4krRO8xqqhyVsViog1uK0yQXmFasj2sZ6WjB/bcWJjQt2kDjNObp2zOX:ULg/FX7k+y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1019B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=2, id=4, version=8047,
count=31, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, productName=Unmarked objects (old),
count=36, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
仙侣情缘2.5A完整包/酷Q机器人专用/cskin.dll
- SHA256 7a7f037bab8024a9d17fb225cc4aa04133081135ecc4be5bbb889c0fbebd7e0c
- MD5 1dd2a4a0f4d21eb65db5895fca2ca489
- SHA1 b0c0617f6f66b35e255ec9824cde41f382a60e80
- SHA512 214e7aa56e820ebec87a778293871672f7c4e92d06bdf5ba18a2fc536003b2e15ebdce65c1ae3c927a16fcfe865c1720a7262e7a700459c66b4ae563374518ae
- SSDEEP 3072:lpuZ4KjoGDr8uuoP30t7JdjoS6JOe1R8h:SZ4yYoP30t7rDt9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
327351
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SkinH_AdjustAero
SkinH_AdjustHSV
SkinH_Attach
SkinH_AttachEx
SkinH_AttachExt
SkinH_AttachRes
SkinH_AttachResEx
SkinH_Detach
SkinH_DetachEx
SkinH_GetColor
SkinH_LockUpdate
SkinH_Map
SkinH_NineBlt
SkinH_SetAero
SkinH_SetBackColor
SkinH_SetFont
SkinH_SetFontEx
SkinH_SetForeColor
SkinH_SetMenuAlpha
SkinH_SetTitleMenuBar
SkinH_SetWindowAlpha
SkinH_SetWindowMovable
SkinH_VerifySign
Name
.Hmily
Size
Virtual Size
224KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.52PoJie
Size
98KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=8, id=19, version=8078,
count=1, id=18, version=8444,
仙侣情缘2.5A完整包/酷Q机器人专用/gzip.dll
- IMPHASH 63bc622ddbb364868c646ebb5f982ffe
- SHA256 a363f73b08295a6a8de6a0540b32080461b43541c324ebfab7e030596b36ac1c
- MD5 a6c40de24f00f240089b073c38e2569b
- SHA1 cf2b14ccd0055971143e3fa7ce7d005b4a9a1a63
- SHA512 f1deae3c31f5dc659a6e1ca6d0ac15d1ff5ec33341d298fc151164123dad165f5d310992a27971637614f17ce9860a8ac0106c00ebd961125330d97a3817eba9
- SSDEEP 768:005aMkmBMbo09BXnNcOeJ1Hd01i9elesVJkER7g7KYIoSKy2:0KrBE/nneZJnR2eIxR7g7lIoSKy2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
72:e7:c9:ae:9d:26:7f:e6:f4:1e:f6:6e:b0:fa:c6:b1:c4:24:61:80
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Open Source Developer\, zhe fan Gong,O=zhe fan Gong,C=CN,1.2.840.113549.1.9.1=#0c0c6d6540636f7878732e636f6d
Chains
Nov 17, 2013
Subject
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Serial Number
01:00:20
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Timespan
Jun 11, 2002 - Jun 11, 2027
Subject
CN=Certum Time-Stamping Authority,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
04:7a:55
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 3, 2009 - Mar 3, 2024
Subject
CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
04:7a:53
Issuer
CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 3, 2009 - Mar 3, 2024
Subject
CN=Open Source Developer\, zhe fan Gong,O=zhe fan Gong,C=CN,1.2.840.113549.1.9.1=#0c0c6d6540636f7878732e636f6d
Serial Number
60:78:46:15:09:5b:a1:03:93:0d:94:d4:de:68:34:3f
Issuer
CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 9, 2013 - Nov 9, 2014
Minor OS version
1
Major OS version
5
Entry point
31776
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
gzip.pdb
kernel32
LocalFree
LocalAlloc
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Compress
CreateCompression
CreateDecompression
DeInitCompression
DeInitDecompression
Decompress
DestroyCompression
DestroyDecompression
InitCompression
InitDecompression
ResetCompression
ResetDecompression
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=1, productName=Unmarked objects,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=29, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll
- SHA256 e8dbbc8106f03f5496c6127f6edda6c838b99b5e4ac3dc7a9f155c1aa6ea5e41
- MD5 647b6f7e62709ffc7a1115a993faec77
- SHA1 80ac84c58c15bd0169031ecf06a28af4d76b75f7
- SHA512 47fd3e9e350889a3ad6e1ba2271801167872e238af3150d0c58ec39ff231b78f6727d929d8f8a5cb014e26cb88a061f417a2eeb486363bb2672284d55a34d59e
- SSDEEP 768:0e0jD4XP9w1PrAYPjzPvPoVP0IxHfbWak11TctQ9E5pnbcuyD7UZJ:9UAUj7Ahgak11TctLnouy8v
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
141904
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
info
tycq
Name
UPX0
Size
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
30KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=76, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=12, version=7291,
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=21, id=14, version=7299,
count=96, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, productName=Unmarked objects (old),
count=21, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/.onoff.cqp.dll.ini
- SHA256 2873070793a31fd9595c065c0147df899609b461a962f217a7000a30e9f7fd73
- MD5 e0742899bc6abfa6645b160dc56a783f
- SHA1 daa8ea00fdd61ba4f90feba5987c2cf66c67afed
- SHA512 a72a16e1ba832d437f560a451c23907fc1a3c6c80dc4edcb75a20ee51087826c9b0e7757ead5617e2db7cfd6af5698618a924fde9a3e8e6dde8dfb437d0710d9
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/[plugin目录说明].txt
- SHA256 63655a1e2fefa21a513cd97a6e5faa04e1f937bba61c30098798efa069e409a7
- MD5 49c5bf3167101bdf7d01fb7bc517ca1c
- SHA1 449bead9ea27d789bf11732bc034f36ac7a0e821
- SHA512 def9fa3754ee3e068d79bd85c4ba5e7a6ccce60920d5e6ae95aa3337ff6b713131372dfeff9d789ff6223bf51a163e3fcd76663bc4cf9d18f202f39cbb798b8c
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/cqonoff.ini
- SHA256 4f43937666e606f5353e19138231aba3aaaa8b57548e697540de9064bbed85c5
- MD5 ffebc546168bdd14ac1d9fa55d4193d4
- SHA1 b7c7719085bb0d926b20c743f76dd75f97061379
- SHA512 2248abe4310a69c83c1fbf3f838343a2cdb2554c21748a5dd0dd68ff79c1d3c0aee576a5cd44959d2bfed4700ac978d2263b94b0e2c01f6fd40600e5798d77c8
- MD5 SHA1 SHA512
仙侣情缘2.5A完整包/酷Q机器人专用/plugin/仙侣2.5A内测版体验版.cqp.dll
- IMPHASH 3afeaf9280f2541f907af6c857a24ce4
- SHA256 b6b7fecef78a7f0216d2522556fc3e571b75d10dd2779f02eb178071c57f7fc2
- MD5 9b1e56b9536da1039aeb169f59c0eb20
- SHA1 c0deb1def8bf2fbebac9c2a7242fda9b60d137aa
- SHA512 157ad5e34030047406a2f5b476f30712d4ec3344887b01f5a1ab55988535d0dc9e58787b52a86ec264f118af19f3fc58c41a30e1c90aafe61bab89978ff1ca55
- SSDEEP 24576:A0XBDifjX80ZcqKaA5ze+/sQ5pEXUmYBlM8dRS7tQBpj3rHG0Ial9aSw25u/m/r6:ApfbkROYrz7RvjcsSDxt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1351885
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
rasapi32
RasHangUpA
RasGetConnectStatusA
iphlpapi
GetAdaptersInfo
winmm
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutPause
waveOutReset
waveOutClose
waveOutGetNumDevs
waveOutOpen
ws2_32
accept
recv
ioctlsocket
recvfrom
WSAAsyncSelect
closesocket
send
select
WSACleanup
WSAStartup
inet_ntoa
getpeername
kernel32
GetVersion
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
GetACP
HeapSize
GetLocalTime
GetSystemTime
RaiseException
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
Beep
GetWindowsDirectoryA
LoadLibraryExA
SetLastError
GetTimeZoneInformation
FileTimeToSystemTime
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
RemoveDirectoryA
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
WinExec
lstrcpyA
FindNextFileA
GetDriveTypeA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
lstrlenA
lstrlenW
GetVersionExA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CreateEventA
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
SetFileAttributesA
GetFileAttributesA
DeleteFileA
CopyFileA
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetEnvironmentStringsW
user32
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
LoadIconA
TranslateMessage
SystemParametersInfoA
CallWindowProcA
CreateWindowExA
RegisterHotKey
UnregisterHotKey
SetWindowTextA
GetClassNameA
GetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
CallNextHookEx
CreateAcceleratorTableA
UnhookWindowsHookEx
LoadStringA
CopyIcon
GetIconInfo
CreateIconIndirect
ClientToScreen
EnumDisplaySettingsA
LoadImageA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetSystemMenu
DeleteMenu
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
GetDesktopWindow
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
SetWindowsHookExA
GetDlgItem
FindWindowExA
CreateIconFromResource
GetSysColorBrush
UnregisterClassA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
InflateRect
SetRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
MapWindowPoints
AdjustWindowRectEx
GetScrollPos
RegisterClassA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
gdi32
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
SelectObject
CreatePen
PatBlt
FillRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
RealizePalette
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
CreateFontA
TranslateCharsetInfo
FrameRgn
OffsetRgn
GetTextMetricsA
SetTextColor
LineTo
MoveToEx
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
BitBlt
DeleteObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCloseKey
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
Shell_NotifyIconA
ShellExecuteA
SHEmptyRecycleBinA
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
OleRun
oleaut32
UnRegisterTypeLi
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopyInd
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy
comctl32
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_EndDrag
ord17
ImageList_LoadImageA
ImageList_Read
ImageList_Duplicate
wininet
InternetConnectA
InternetSetOptionA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
info
plugmain
��ƱͶע
��������
��̳�ӿ�ϵͳ
ȡQQ����
ȡ�ұ��ı�
ȡ�����ı�
����GMϵͳ
����VIPϵͳ
���°���ϵͳ
���±չ�
���³���ϵͳ
���³���
���´���
���º���ϵͳ
���»���ϵͳ
��������ϵͳ
��������ϵͳ
����ǩ��
����Ǯׯϵͳ
��������ϵͳ
�����
�����л�ϵͳ
��������ϵͳ
��������ϵͳ
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
276KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
140KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=14, version=7299,
count=44, id=19, version=8022,
count=2, id=93, version=2179,
count=694, id=1, productName=Unmarked objects,
count=29, id=19, version=8034,
count=213, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=18, version=8444,
count=124, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=92, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=97, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
仙侣情缘2.5A完整包/酷Q机器人专用/sqlite3.dll
- IMPHASH 12baaaec299bc9ff52d20c16e4d0e96a
- SHA256 8dccdffda1babc90e9917e7927c7387e4ca8e556f0bb94aace207c998a289223
- MD5 e3b107beaf9eaab93d09738d7dcb0946
- SHA1 e625eac28fad8d1ed8544a35b9e54e596313b266
- SHA512 c08038d6c7c527ae1e13540358c2a117e5aa6275643b2d88e19e1dc7dd0aa4191c74598e385c57d854866c2de31688fb3640bc7e3a2303b8291154375398305a
- SSDEEP 12288:xhqsWuFQh4pgTdtKrp1Dt84nTH31mNlKFLqx9t:x0h4pofKl158oj1mVx9t
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
Sleep
SystemTimeToFileTime
TlsGetValue
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
__dllonexit
_errno
_iob
_winmajor
abort
calloc
fflush
free
fwrite
localtime
malloc
memcmp
memmove
memset
qsort
realloc
strcmp
strncmp
vfprintf
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_strglob
sqlite3_stricmp
sqlite3_strnicmp
sqlite3_table_column_metadata
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_config
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_set_directory
sqlite3_win32_sleep
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_write_debug
Name
.text
Size
434KB
Virtual Size
434KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/35
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/51
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/63
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/77
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/89
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/102
Size
512B
Virtual Size
269B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/113
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/124
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ