85adacd147881487fea7a35481d78fd95c55af1991e4a8ed0411157cf9056c11
- SHA256 85adacd147881487fea7a35481d78fd95c55af1991e4a8ed0411157cf9056c11
Overview
overview
4Static
static
4ChineseConverter.dll
windows10-2004-x64
1ChineseConverter.dll
windows11-ltsc_2024-x64
1ChnCharInfo.dll
windows10-2004-x64
1ChnCharInfo.dll
windows11-ltsc_2024-x64
1ICSharpCod...ib.dll
windows10-2004-x64
1ICSharpCod...ib.dll
windows11-ltsc_2024-x64
1NPOI.OOXML.dll
windows10-2004-x64
1NPOI.OOXML.dll
windows11-ltsc_2024-x64
1NPOI.OpenXml4Net.dll
windows10-2004-x64
1NPOI.OpenXml4Net.dll
windows11-ltsc_2024-x64
1NPOI.OpenX...ts.dll
windows10-2004-x64
1NPOI.OpenX...ts.dll
windows11-ltsc_2024-x64
1NPOI.dll
windows10-2004-x64
1NPOI.dll
windows11-ltsc_2024-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-ltsc_2024-x64
1Pdfs/AI大...��.pdf
windows10-2004-x64
3Pdfs/AI大...��.pdf
windows11-ltsc_2024-x64
3Pdfs/AI大...��.pdf
windows10-2004-x64
3Pdfs/AI大...��.pdf
windows11-ltsc_2024-x64
3Pdfs/AI大...��.pdf
windows10-2004-x64
3Pdfs/AI大...��.pdf
windows11-ltsc_2024-x64
3Pdfs/AI大...��.pdf
windows10-2004-x64
3Pdfs/AI大...��.pdf
windows11-ltsc_2024-x64
3Pdfs/AI大...��.pdf
windows10-2004-x64
3Pdfs/AI大...��.pdf
windows11-ltsc_2024-x64
3Pdfs/AI大...��.pdf
windows10-2004-x64
3Pdfs/AI大...��.pdf
windows11-ltsc_2024-x64
3Pdfs/机�...��.pdf
windows10-2004-x64
3Pdfs/机�...��.pdf
windows11-ltsc_2024-x64
3Pdfs/机�...��.pdf
windows10-2004-x64
3Pdfs/机�...��.pdf
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
ChineseConverter.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ChineseConverter.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ChnCharInfo.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ChnCharInfo.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
ICSharpCode.SharpZipLib.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
NPOI.OOXML.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
NPOI.OOXML.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
NPOI.OpenXml4Net.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
NPOI.OpenXml4Net.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
NPOI.OpenXmlFormats.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
NPOI.OpenXmlFormats.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
NPOI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
NPOI.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Pdfs/AI大模型/DeepSeek大模型使用教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral18
Sample
Pdfs/AI大模型/DeepSeek大模型使用教程.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral19
Sample
Pdfs/AI大模型/字节跳动豆包大模型使用教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral20
Sample
Pdfs/AI大模型/字节跳动豆包大模型使用教程.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral21
Sample
Pdfs/AI大模型/百度千帆大模型使用教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral22
Sample
Pdfs/AI大模型/百度千帆大模型使用教程.pdf
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral23
Sample
Pdfs/AI大模型/腾讯混元大模型使用教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
Pdfs/AI大模型/腾讯混元大模型使用教程.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral25
Sample
Pdfs/AI大模型/讯飞星火大模型使用教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral26
Sample
Pdfs/AI大模型/讯飞星火大模型使用教程.pdf
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral27
Sample
Pdfs/AI大模型/阿里云百炼大模型使用教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral28
Sample
Pdfs/AI大模型/阿里云百炼大模型使用教程.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral29
Sample
Pdfs/机器翻译/小牛翻译密钥获取.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral30
Sample
Pdfs/机器翻译/小牛翻译密钥获取.pdf
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral31
Sample
Pdfs/机器翻译/微软Azure机器翻译教程.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
General
- Target 85adacd147881487fea7a35481d78fd95c55af1991e4a8ed0411157cf9056c11
- Size 13.6MB
- Sample260720-da345sc13q
- SHA256 85adacd147881487fea7a35481d78fd95c55af1991e4a8ed0411157cf9056c11
- MD5 da4f0411df3125f245fd1960c2521ec6
- SHA1 bca6f2b359c9b2a6ea725d7176855f9ec788ef41
- SHA512 5aef7117f3815b0bf3c05406a6bcb823e53e9648cd44f3c0412db4578f7bea19cc9723500ce2167611b699c48aaf74c7a07d88505e135d9ac84cf35f6af53367
- SSDEEP 196608:PjhbJKL+Aq2zGzn3/yFMcZvEY8AoqeiJariCnYer23aPqV5SAnHAF7lRj7D6ZIYU:FbJKyBNryFvgRzOzAF7lRHD6ZI1
- TLSH T14EE633A78D464869EC739655FF3EC816F86F86028232690B3AF57002EBC48512DED7F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- HTTP links in PDF interactive object 13 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/Pdfs/AI大模型/DeepSeek大模型使用教程.pdf pdf_with_link_action static1/unpack001/Pdfs/AI大模型/字节跳动豆包大模型使用教程.pdf pdf_with_link_action static1/unpack001/Pdfs/AI大模型/百度千帆大模型使用教程.pdf pdf_with_link_action static1/unpack001/Pdfs/AI大模型/腾讯混元大模型使用教程.pdf pdf_with_link_action static1/unpack001/Pdfs/AI大模型/讯飞星火大模型使用教程.pdf pdf_with_link_action static1/unpack001/Pdfs/AI大模型/阿里云百炼大模型使用教程.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/小牛翻译密钥获取.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/微软Azure机器翻译教程.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/火山引擎翻译密钥获取.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/百度机器翻译密钥获取教程.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/网易有道机器翻译密钥获取教程.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/腾讯机器翻译密钥获取教程.pdf pdf_with_link_action static1/unpack001/Pdfs/机器翻译/阿里云机器翻译密钥获取.pdf pdf_with_link_action - Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/ICSharpCode.SharpZipLib.dll unpack001/NPOI.OOXML.dll unpack001/NPOI.OpenXml4Net.dll unpack001/NPOI.OpenXmlFormats.dll unpack001/NPOI.dll unpack001/Newtonsoft.Json.dll unpack001/文件名精灵2026.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/ChineseConverter.dll unpack001/ChnCharInfo.dll
File Explorer
-
85adacd147881487fea7a35481d78fd95c55af1991e4a8ed0411157cf9056c11.zip 13.6MB
-
ChineseConverter.dll.dll 29KB
-
ChnCharInfo.dll.dll 381KB
-
ICSharpCode.SharpZipLib.dll.dll 196KB
-
NPOI.OOXML.dll.dll 410KB
-
NPOI.OpenXml4Net.dll.dll 83KB
-
NPOI.OpenXmlFormats.dll.dll 1.8MB
-
NPOI.dll.dll 1.5MB
-
NamesCfg/FilesContextMenus.xml587B
-
NamesCfg/FilesToolButtons.xml1KB
-
NamesCfg/FoldersContextMenus.xml560B
-
NamesCfg/FoldersToolButtons.xml1KB
-
Newtonsoft.Json.dll.dll 507KB
-
Newtonsoft.Json.xml.xml 501KB
-
Pdfs/AI大模型/DeepSeek大模型使用教程.pdf.pdf 510KB
-
Pdfs/AI大模型/字节跳动豆包大模型使用教程.pdf.pdf 1.4MB
-
Pdfs/AI大模型/百度千帆大模型使用教程.pdf.pdf 745KB
-
Pdfs/AI大模型/腾讯混元大模型使用教程.pdf.pdf 1.0MB
-
Pdfs/AI大模型/讯飞星火大模型使用教程.pdf.pdf 647KB
-
Pdfs/AI大模型/阿里云百炼大模型使用教程.pdf.pdf 823KB
-
Pdfs/机器翻译/小牛翻译密钥获取.pdf.pdf 652KB
-
Pdfs/机器翻译/微软Azure机器翻译教程.pdf.pdf 708KB
-
Pdfs/机器翻译/火山引擎翻译密钥获取.pdf.pdf 781KB
-
Pdfs/机器翻译/百度机器翻译密钥获取教程.pdf.pdf 688KB
-
Pdfs/机器翻译/网易有道机器翻译密钥获取教程.pdf.pdf 934KB
-
Pdfs/机器翻译/腾讯机器翻译密钥获取教程.pdf.pdf 1.4MB
-
Pdfs/机器翻译/阿里云机器翻译密钥获取.pdf.pdf 741KB
-
双击打开-获取更多黑科技软件.url.url 119B
-
双击进免费资源群，每日更新.url.url 132B
-
文件名精灵2026.exe.exe 2.9MB
ChineseConverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37d20f74ad239fcae32afbcde42e6e1deeda49519ebf6d12a27a12bbdcdb5895
- MD5 d3f15fb72361f0d58d0857588d76962c
- SHA1 400708bd7bd50cdaa099d8fa1f2c96d29bce7261
- SHA512 52a1b3d9265defa4381c9803175791413f6786b82fc39bd4542da9cd5631381de177a88cc0625eff6c37379a1db902c810fded881c0a786088886d00a295f528
- SSDEEP 384:nSW4OEfBQHBRUFFTb7zWhTwyWnnELKt8HafdjIafdjcjp6F:ofBpFTbATwQU8HafdjIafdjcjW
- TLSH T1A3D2FA82877C8617FD9B2F3156B5EA923A39EFC34DA1C91B209AD18C0C477D84731B68
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
25:65:37:d3:34:8b:02:a3:35:7e:74:7d:87:fc:2c:a4:0e:fe:80:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 24, 2008
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0f:78:4d:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 23, 2007 - Feb 23, 2009
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:14:2c:a7:00:00:00:00:00:06
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 12, 2007 - Jun 13, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Minor OS version
0
Major OS version
4
Entry point
13454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\VSAddon\TCSCConversion\ChineseConverter\obj\Release\ChineseConverter.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ChnCharInfo.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56c61d14fa39e167205125f3d77c0640cd2e991bfcdfc1050b0647c2d4b0d7dd
- MD5 b8bb34a6ecf0e61c750dd158f87fda14
- SHA1 a0246b347f07470c089672eb5e329b140156853b
- SHA512 d4fb2d82450a597418b3cfdca012939ff7204e2f1596c4dec2c7f462edaeb6882069fd594de643faf1bb118cd604a7ce84351f3c829998dccc9a8d15a01ed634
- SSDEEP 6144:aC8p4HNX4MGBJpV/o0ULr9Acp2AO57r6y8ZI9C7s7glZuDkl5NdCgP:aCq4t4BJvo0Kr9JFO57r6RZHI7mygP
- TLSH T1F584BFF1BECC98F5FBA3467A4364D91FC00FA6012F17943AB18609D18969FA78F60716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b7:41:d3:58:7c:c3:85:69:b5:56:73:f0:94:92:08:36:64:09:f6:63
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 24, 2008
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0f:78:4d:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 23, 2007 - Feb 23, 2009
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:47:52:ba:00:00:00:00:00:04
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:49:7c:ed:00:00:00:00:00:05
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Minor OS version
0
Major OS version
4
Entry point
374446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\VSAddon\ChnCharInfo\ChnCharInfo\obj\Release\ChnCharInfo.pdb
mscoree
_CorDllMain
Name
.text
Size
360KB
Virtual Size
357KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ICSharpCode.SharpZipLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40b3d590f95191f3e33e5d00e534fa40f823d9b1bb2a9afe05f139c4e0a3af8d
- MD5 c8164876b6f66616d68387443621510c
- SHA1 7a9df9c25d49690b6a3c451607d311a866b131f4
- SHA512 44a6accc70c312a16d0e533d3287e380997c5e5d610dbeaa14b2dbb5567f2c41253b895c9817ecd96c85d286795bbe6ab35fd2352fddd9d191669a2fb0774bc4
- SSDEEP 3072:hjMibqfQqFyGCDXiW9Pp/+Tl4abpuu201PB1BBXIDwtqSPVINrAfvp1:GibqI59PpOPf201/z7p
- TLSH T16E14061967FC4A5BF6EA4BB8E47524A5C3F0B966362ED74E8D8050FF1C127A0C825363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
196446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
184KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NPOI.OOXML.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad0e4b620dbee37bbcfa16f5db1ef48c384f1f3f7299af1e4cd03715b66d31e0
- MD5 652fb912ba0d09130cb7d374b5d78856
- SHA1 42393c6e6e0aeef9c7aec5f175d95a9210870b83
- SHA512 d9d2bcb21c85115e6cf966fc54d997cbbd62011569c6493077a5c94b0c30ffc9c29da88f971ae1280a8442b774e5163abf80e8f3b407d38fd00c0e4cf037eedf
- SSDEEP 6144:kIBeaUWadDouYZS3WQucBnmQ7Cu17CWQMYPGWplB3kDoicGwTcGlCD/NBikVa9F4:kIga7kousSYOIB0jwT0Vj
- TLSH T128945B02A3F8862AE2FF567AB07518190BF4E926966FEF5F4551B0EC0CC3B415C947A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
425870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Tony\Documents\GitHub\npoi\ooxml\obj\.net 4 Release\NPOI.OOXML.pdb
mscoree
_CorDllMain
Name
.text
Size
408KB
Virtual Size
407KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NPOI.OpenXml4Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8560fd95e75f313fc7d85f046232c51cdad0628db6723b76146c26f88cdbf8a2
- MD5 90772aaf5b3c1e74ac9809d7296b953c
- SHA1 157821f645a0b0a8d013c869e95e79cb0f71654e
- SHA512 7556a9961e75ef5bc7a4de53aebb60652f6151753d9006792a7127faab89d8d887d37ad590a51641c773ff6da82c255c05e89638674bf3a52e36e3ef5bb4cc3c
- SSDEEP 1536:+ssxg5zp3hLpmpb5eWGCp0U2gHEPK4osj4K6JjMHTfLTKNrW5MqnRtyEqpVsZCZg:+ssxg5zp3hLpmpb5hp0U2g2KzsUK6JGB
- TLSH T14C83C55137F90B55F6FF1FFDA8B111140ABABC95A932CB9E5D5061AE0433B418A20FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
91358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Tony\Documents\GitHub\npoi\ooxml\openxml4Net\obj\.net 4 Release\NPOI.OpenXml4Net.pdb
mscoree
_CorDllMain
Name
.text
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NPOI.OpenXmlFormats.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 607d969596a20d180cb4d93c463c7a4eeb33336d976e090481ab3f91f9043444
- MD5 82a4982f9d1dbd4e9369db99916f9e9c
- SHA1 901211c343fa91d07743be81a0dad9c15146b6a5
- SHA512 04e3558a408682674a73dde30ecdcb647e37abcc3ef7e84272ba6b8a6e4e48b233a6695eb741ab372c848908eee22c23779f95a682e6d6e2605885995d8d1ce2
- SSDEEP 24576:KURkUMebE7BI42jdCHc+S2OHx8HeBild4KR5dPDhOhPyrXQ8t2/ewPw9jFN:K+kjzES+BM4KHdPDhOhPyrXQ8tH
- TLSH T19F85FAA23B18CB1DC36A457AE860183E03F1DC5AB661E3B95F95E09C3D617425E03AF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1876894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Tony\Documents\GitHub\npoi\ooxml\OpenXmlFormats\obj\.net 4 Release\NPOI.OpenXmlFormats.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NPOI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b8366d832e364c7cc8ff589115c9c9026d0c1bca5d2e6774dce149562f34912
- MD5 bab4fba1f32552f6574fe569557f5ad0
- SHA1 c9b8919249e427b32afdf3bec069edbef5b355be
- SHA512 757ec6af5debff05e55dcd4edd53f335c4415edc5a1f290e16d811d3984c4cee84f2aa3e4eabff77759fa99f0fafb63e67dfe7cd376a2b2279abc9d21b468766
- SSDEEP 24576:G2sofs+VXkrYwgt+kAv/KZKz3CjdpWJ3nWRI9s/MF6Q8w4at:ds+rhQ/KZKz3CjdOGRo96Q8w
- TLSH T18F753B003BE8475AD16FE738F8719C5357F6E459AB73D34B9E18E4682AAB7400C21B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1609214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Tony\Documents\GitHub\npoi\main\obj\.net 4 Release\NPOI.pdb
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NamesCfg/FilesContextMenus.xml
- SHA256 0d134be0cdca9cdadba1c516ff5e8f2e52d91fc492e6943c59118fb0dae7bf9a
- MD5 b3e36879e9697e3e2f0af91eee217d8d
- SHA1 7efcd9580679977c82c66d9a93cb0e2b903bf558
- SHA512 4442b5004f030d0afa1ef4c0d0544352d345e0252ae6a73453ac779e6247594349ec01b6e525ff56027ee124af22dadb9fa840c8c57ded7369c83e2b76dbb6e9
- TLSH T1B9F0BD4CBCC15F0956BD6973A8D7C6542E0CE0C84CC31E947745495713C7D0923BB9B1
- MD5 SHA1 SHA512 TLSH
NamesCfg/FilesToolButtons.xml
- SHA256 37b5227e4836a296b0b424a184ae5bea7761f7a1d4c02e0797baa3524d359f71
- MD5 c7211f5aa4cf5714e8959a24e87003eb
- SHA1 480144fc6ef4f7a7e89e9b82616828dcf29e0286
- SHA512 94a1301be0f0570849b744803d0f9586e1a954deec2e44e8c541ddbbb32b3014fed5d5b2d661ae5f1d68b548bbd398a15323a960d3fad19b12cf05db68565e06
- TLSH T1E621535C7CC16F0405AC98B33EEBC2651E19E1858CDB5E943746591323C391503BB9B9
- MD5 SHA1 SHA512 TLSH
NamesCfg/FoldersContextMenus.xml
- SHA256 cea080be652e7f89ee7f0286f1b4ca0c7f40b0ce8c7e3cdbea38793b1219e8ad
- MD5 7a8998627ae2368aa08200ae5852b140
- SHA1 6e64c6f33677a852a1a9871e914aeb41260978db
- SHA512 2f69ca86f76733f386208efd2b4ba409ce4ddda10d94dc7fcba64d33c9f2a30977da7567586b0b786e6abe126eb90ae48f913105d7d00d1ebc8ba6ba51b517a7
- TLSH T1EDF0CA5CACC15B0916B9697368D7DA582E1CE0C84CC31EA87745496713C7D0823BB8B1
- MD5 SHA1 SHA512 TLSH
NamesCfg/FoldersToolButtons.xml
- SHA256 00db5429b9b4dd86c2775d875db45ed42424fcfd61d613e7a7619a1d1b1d5426
- MD5 045ab2241cc22a6da426fbc63f87ac08
- SHA1 f06b6fc95aa4f99d3237d5d6b27a851377a60643
- SHA512 24a8de00b5e9483899573b767bb7008533c41177886a479d611ddadd838e5d7e8e7902d39477957bbac89128f52531ca81de312d5bc86fed9729a7d68572b5bc
- TLSH T15E11529CACC16F0419BC98B23EE7C2502D1CE1C94CDB5E943745191717C3E1513BB9B5
- MD5 SHA1 SHA512 TLSH
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4659002c5598e5b0e20c65e563e7af19e72d094987a54ebab2c8e3d66505b49
- MD5 6e244de930f3765b66cdb38123ad40b0
- SHA1 d1c047b502116f877d05c0ef0341b5aaa302c91d
- SHA512 3c18c609b9372f4ac1ac191d912865f20724d09aeb1e0da8bd66e3800b83f4ef5218d831ab15b3d52b63fd2b475ba449a6960a3b54405e7fa9bf99668ca174bb
- SSDEEP 6144:ZyqBhXg5xioe/YVfDBLBVBntg4oZqvRawCaBmBFTb4vyVnscUbVej:xBRgzirAZoUvFeBzVi
- TLSH T13EB43B0023FC8A27E6EE2732F4744914E3F6F5A6A679D7CF2944A5BA1C93B514C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
524014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\Net45\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
504KB
Virtual Size
504KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Newtonsoft.Json.xml
- SHA256 20bb16f14c4b0f10aa72b51121e484192a35dd75a11bcfea642ac0e6f89928e0
- MD5 255e4d9611c3e7b461d5369e64d99947
- SHA1 0e4e1d56a09038515361698011096398204edb4b
- SHA512 3a70417487005c981e7f9dbc06c0286e28493ac27034a2d0e26b0daaa1391e89bdf49b0f179e52b76c1fa321de710f4d622ad14391f4eefe0f98feb2d11a02cd
- SSDEEP 6144:dizf21JKGW0/IFShfhVIeR0R+CRFo9TA82mcKj+sJjoqoyO185QyMYFLsgfl7:H
- TLSH T1FAB4AC2976C4CF220C7A012A4D1CF4C5FF2009B716192C9635CC5DDB9FBAEA252FB6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Pdfs/AI大模型/DeepSeek大模型使用教程.pdf
- SHA256 c05c2763442af6cddd5b67e96af051be4714a450ad899bb221b7ed5e77ca4b72
- MD5 e7fa99272e0a005b215caa52d31803e4
- SHA1 b99e9134f8f24e85b880b0f725bd0d095e5156c7
- SHA512 53e6855897b15770307516830eee156e8535debdf99f99528df0150ed384bf1698ded518e81f5639d5af49e9511f1a866a53c8aa4fcb1d1c4903ef7425f46ca7
- SSDEEP 12288:WLedOmo7zydXdS7R3l2w5CaOqdKs57PJJT7S:7Cr3l2wYah57P37S
- TLSH T185B412434CA979C9D12595F4AE233D0C721DB32EE0C52276323D8E532F90E76A996E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://www.deepseek.com/
-
file https://www.deepseek.com/en-US
Pdfs/AI大模型/字节跳动豆包大模型使用教程.pdf
- SHA256 7eabca0706f2e2a1639bc479ad46bcaaf65c8eab2dda8ba3bb1b5a152b0518dd
- MD5 8648bf9f00360073c3d5f5e09733bf05
- SHA1 0cb4b6f16277fdcfd81ea0524abb8c2b9e8c1fc3
- SHA512 d2f2e22e7bd6aeaa45e94ad7b177bdcc38b98b4cdd50249390d47ce79b4704d5e15e35236641039c8a6fdf43a2736ccb62ce75399f7bb11143b32265f198bb17
- SSDEEP 24576:4rt43HqM275K8wvZPjpdWFtNko91mI/NsMxt6cYs3cKC9dCU:4rt4XtqIpdWTNfmIqqt6CMrCU
- TLSH T1DD65E1138C058AC3D52C87F4BE071E9D7B5A7B0CE9D13AFA14694ECB7F206664D5A02E
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://www.volcengine.com/docs/82379/1330310
-
file https://www.volcengine.com/docs/82379/1330310en-US
-
file https://www.volcengine.com/product/ark
-
file https://www.volcengine.com/product/arken-US
Pdfs/AI大模型/百度千帆大模型使用教程.pdf
- SHA256 371e7065bc9fb8ebd6928dcfba4de42d55b82572c301997a285c73ad4e2abfd8
- MD5 932d3b18c0b91957c737376feb92ba9d
- SHA1 7ac846ed14dccebd25559ec05aa40a73c7cb55da
- SHA512 485e6a1c29c534dd36a73b4880f01edc5e94a6dc739c3fb5adad0ffb2173155bc11c15d55e5e7ff4fcb0ed5a4ac8f4e65f19ab52cf85cecd90b73a6f55b9ba31
- SSDEEP 12288:6EmZNXcQgdjzgz8rlgcdXi9Jb7TlFInhYD8YeydngcMkPGNzS+g1kjfTr8urnjC:6EiXGdjlem+dXb38YboNzhj7bnjC
- TLSH T118F4BF138C549B82E42887D9BE471E5D2B4A3B1CE8C176FE252E5DCB7F206724D9D02E
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://cloud.baidu.com/doc/WENXINWORKSHOP/s/Wm9cvy6rl
-
file https://cloud.baidu.com/doc/WENXINWORKSHOP/s/Wm9cvy6rlen-US
-
file https://cloud.baidu.com/product-s/qianfan_home
-
file https://cloud.baidu.com/producten-US-en-USs/qianfan_homeen-US
Pdfs/AI大模型/腾讯混元大模型使用教程.pdf
- SHA256 888e19a1c40db88e84e5f8a4f3bcf7fbf50fb7e35ff0a5e8eb6374ba3ec32f69
- MD5 389b6640c24dccd24205dd310149d732
- SHA1 6d0f2e91fa9dd0685c6584c3f90d4f1e6b921fd2
- SHA512 8db6fe0060f5cad673ba9efbeec84cb00c51a603a42698f1b5bb12a9ae553943a1e4c52c260157904eae8cabec7ba4d26c4861694a1b8ddf108c1a92fda83048
- SSDEEP 24576:3tCV30Q+IDx7m8UIwbpJ8Zt9z3mkL5GXUc8aijQezCalaUytj:9CV9ZS8URit97V8kTaUQralaUytj
- TLSH T1DA35121B8849A7DAD11D45F27F076D2CBF08355B82D22B79303DEE173B2493B644A4AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://cloud.tencent.com/
-
file https://cloud.tencent.com/document/product/1729/104753
-
file https://cloud.tencent.com/document/product/1729/104753en-US
-
file https://cloud.tencent.com/document/product/1729/97731?from=console_document_search
-
file https://cloud.tencent.com/document/product/1729/97731?from=console_document_searchen-US
-
file https://cloud.tencent.com/en-US
-
file https://console.cloud.tencent.com/hunyuan/api-key
-
file https://console.cloud.tencent.com/hunyuan/apien-US-en-USkeyen-US
-
file https://console.cloud.tencent.com/hunyuan/start
-
file https://console.cloud.tencent.com/hunyuan/starten-US
- Show all
Pdfs/AI大模型/讯飞星火大模型使用教程.pdf
- SHA256 826761014cc862000a01eeda7768ed93f1bdc37a32a3429c8d0ae6ffdde91573
- MD5 2cbc48b3b5407bd479082d6d383cec8e
- SHA1 c1bbb5844c181f141583687c4afb673bf3f2768c
- SHA512 49ee57dde7beda7d8d51342fbf51fe210bd1e0032c71528e4a890df44e516d5f4df8d02422c548c2ffbd3b54bd52d39c84da93a5029de2f99b168a3d4d7b3ec0
- SSDEEP 12288:zGzGDyBeJTrYi/FW4XzFaEbWkSvN/tk0pEFbYgu:xyITrREoTA9t9pUcgu
- TLSH T144E401134C156E97D61983F5BF133D8C7B14B61A65C07ABC306EDECA3F91A228D6805E
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://www.xfyun.cn/doc/spark/HTTP%E8%B0%83%E7%94%A8%E6%96%87%E6%A1%A3.html
-
file https://www.xfyun.cn/doc/spark/HTTP%E8%B0%83%E7%94%A8%E6%96%87%E6%A1%A3.htmlen-US
-
file https://xinghuo.xfyun.cn/
-
file https://xinghuo.xfyun.cn/en-US
Pdfs/AI大模型/阿里云百炼大模型使用教程.pdf
- SHA256 40c01989c502de54a16e6009216333d668bcc4795422c79e70bd6b0645ade476
- MD5 780cbd33046f257f4ea8dbe697d9b2a4
- SHA1 f634c3e51326adc0e1356717e96dc616bc4a4ff3
- SHA512 eb96bf363c90052663547540e9c6f95e150e4cafeaa6ccef13f121a6350f7886914eb3da33613dcb9706d903f7dde7cd0d87f9c8c40b34b566e025ac5125434e
- SSDEEP 24576:TGbFfS2Yx22t0W9cpGcOGGqHgQLpN1sDfer:TgFujt19vcOLqHgQLp6er
- TLSH T1730523D4CCD5F496CD861AB7870F3E697B29720350C89A02B28DE9570769EBF261381F
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://bailian.console.aliyun.com/?tab=doc#/doc/?type=model&url=https%3A%2F%2Fhelp.aen-USliyun.com%2Fdocument_detail%2F2840914.html%2387ae7ab9a7crlen-US
-
file https://bailian.console.aliyun.com/?tab=doc#/doc/?type=model&url=https%3A%2F%2Fhelp.aliyun.com%2Fdocument_detail%2F2840914.html%2387ae7ab9a7crl
-
file https://bailian.console.aliyun.com/?tab=home#/home
-
file https://bailian.console.aliyun.com/?tab=home#/homeen-US
-
file https://bailian.console.aliyun.com/?tab=model#/model-market
-
file https://bailian.console.aliyun.com/?tab=model#/modelen-US-en-USmarketen-US
Pdfs/机器翻译/小牛翻译密钥获取.pdf
- SHA256 08228fcd8b3e57652fa5d118281adfe4a9674ca2fd424e40c2d68afb624a5b73
- MD5 bf58835e4a928a1e7edca7d5336fc805
- SHA1 96bd6d7ab650358bd2644e9a051dc8c3be3a7509
- SHA512 ae8a5395cdf56a8a993b873ea9a15d6eb150090b43a55ca3ac8bc36330c6815d438419814f37896a7e652cfc68fb3ba235af23319e32703b059d154c2d103abe
- SSDEEP 12288:0QDjg18utjidzi1ajjjjZqUnFeuq+OdvGTBlBtJyM7:0718wiGkqGFeuq+OoTBlvH
- TLSH T162E4E00389549AC6C55853F97F072DAD2F6AB709E1C52AFE342E4ECB3F605335D8A01A
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://niutrans.com/trans?type=text
-
file https://niutrans.com/trans?type=texten-US
Pdfs/机器翻译/微软Azure机器翻译教程.pdf
- SHA256 253f73a771e54e090b10487ca1614b9b3bd0b63c4fd43bd56645a071bc536e90
- MD5 1007b02ab6a854d57396b9746cd934b8
- SHA1 f01b6de2a79642af7dca5976daae2a776524b95c
- SHA512 ce379b5280e930f1b28807f899697ea5a424831f2a906995b30c4a5efba7dbd6358a93d1af906b3738a6b16a310503fcec805ce41877dccabaded3c43ed8394b
- SSDEEP 12288:2QMsHvIjjjjjjjjjjjjEFIYyxN7CwO5BrwpfFoubrc++tP/vfxC70HkCBLEOI8pt:6e5FIYGNmLrwFpr7+B/hCgvBFI8HVou5
- TLSH T1F7F4126F48644ECEE80907B16F093E4D3F7D3345B0DA7635303E8EAB1BA89696857078
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://azure.microsoft.com/zh-cn/
-
file https://azure.microsoft.com/zhen-US-en-UScn/en-US
Pdfs/机器翻译/火山引擎翻译密钥获取.pdf
- SHA256 1eb96b4b21eccb1ad67c88b77fc29a5d096405ae9e9ef63aa7d610ce85016db8
- MD5 c1730773b96bc1ddd098047de96734bd
- SHA1 dc814cb2e5b2fe0ceed8bed9cae402f1a3017caa
- SHA512 0573be7243b1f9cfc93c993ae8197b5bc334b81bb6f73122915c747e15c27cd070586de633c721c5a427e103b26114470a3572a2292bef8ea264ab447076d9d6
- SSDEEP 12288:Ww/Qy4SlD8wlKtspRWlyK2yp8HQXhhhhhhhhhhhhhhhhhhhhhhhhhhopjKJSHjNs:WwpYCp8YqywgRuONU3NvppHZpKH23L+S
- TLSH T135059D038C449A93D56893F5BE071E6D6F193B09E4C12AFF266D4ECB3B616361C4E12E
- MD5 SHA1 SHA512 SSDEEP TLSH
Pdfs/机器翻译/百度机器翻译密钥获取教程.pdf
- SHA256 8c682fe809285f7c33f7404a3e7b950fd326842b5f699507c131fb1d94f96d03
- MD5 464a83a23121cf81e14b29056048e7e5
- SHA1 cbdacba8db8a68943315ada5f1ce51a95e0a776a
- SHA512 8f4c0ccc57ab0d6499cee76f5037160b731fd148444d110ad1f7093158f466c0aefa7a442b1f280b55e87a0ab50274a999d71ba52d4f27332c40879c0273a049
- SSDEEP 12288:LImempzzFInxB8bizLnjT1n/L5+BBibykgCbbbbbbRRzfDOEd7gsE6so:Htx8TzLnHJLCAbTzyw7Xf
- TLSH T17CE4BF138C148B93E56883E4BE131D6D2B197B19E8C12AFE352E4DDB3F606715C9E12E
- MD5 SHA1 SHA512 SSDEEP TLSH
Pdfs/机器翻译/网易有道机器翻译密钥获取教程.pdf
- SHA256 ce8d27c3e8300c40fea1511f510ddb4e1a800dedee732a2003aae8b2214b934c
- MD5 d4670df42243e9d452501dd402deddf3
- SHA1 7438430031927b60e350e2a56a0bec00707383b2
- SHA512 ce1217bc26fa6997555cb6d6d9afe263e474d6d94bc2dbf6703a1bdfb3f6263697f709e0e68e5ad17509bff5f1e737e522fd2781e8fe3f86a0b57a1d5d661853
- SSDEEP 24576:W3gieJdniQDOgWE415Zr95p4FQsrA/H9vNk6jnLJ:YgrznZfWE4fZr5bPvNnLJ
- TLSH T1B3159E179C448B57D13947E9BE071FAD6F493F19E4D23AEB202A5E8B3B316260C4E12D
- MD5 SHA1 SHA512 SSDEEP TLSH
Pdfs/机器翻译/腾讯机器翻译密钥获取教程.pdf
- SHA256 496db1105b9587894965ac1134f953f8d3a2a9a2367a6c310b5b989faf2d2478
- MD5 6d8276091394e422661a7fc2be2926b0
- SHA1 313428ff5c836fc91e2207bf885d06a2ea3d6f1d
- SHA512 e9f2604b47ec1aa2443d2d7aefbb543513c0e871cde2c45ffdc349c21eda3ddfec1990a96385079e2c2794a8ed503e108bddd28017b4c6f4b450cb7fa1dc824e
- SSDEEP 24576:4DR6Q+5CmxSlh6nD1QTjCVCIA3nPNfwTixRVIHuu2WxYFPM:lv9xMlTGVZAVfIiwxV
- TLSH T14665F10388548792E65856F5BE072F5D2A1A3719F4D236FB312E8EDA3F205364C8E53E
- MD5 SHA1 SHA512 SSDEEP TLSH
Pdfs/机器翻译/阿里云机器翻译密钥获取.pdf
- SHA256 dca774bcb30247fe2c9a9554df75309bece498318eacb08424751b39ab527851
- MD5 8224f843ba36d47e087fa05310dd8bc9
- SHA1 bef2d29840eb2f33169877e95d123d661d824105
- SHA512 53b9c17b77feb6964b87644fe26590808117c9186ff7ccf0d3a6f3db67f246064d1740dc8cfb0175e937dae477d64c003d9c91a283213b07707db83f1fcaec91
- SSDEEP 12288:wx9/xebcWQcsoUUbl9GvXDZ04dTpIp3ocpnyMnZ1/IwREP6aTAD3ptoGTHzZz1M2:wrrvTfdTbynyMnIwRfacDjo8Zzd5
- TLSH T1FCF4D00388589B86D16893F5BE072DAD3F4A371D98C126EE352E5DCB3F606364C5E12E
- MD5 SHA1 SHA512 SSDEEP TLSH
双击打开-获取更多黑科技软件.url
- SHA256 b0e3b5ffce374ae68f88cb3f58521c59adc7f6520247b948b025ecd16191cd17
- MD5 39d7d155b7cbd9754a00e2ced8a2340a
- SHA1 7aefa69e17f174b775c1f241e934a7ec856512c7
- SHA512 245d1652b22ea5d910f51d71248e1d3b70f72720836c29c8d595e33afebc2ee34c5b69c00b7a0f8f12d71cf271b3ced8811cb9ec11484a25307d0b1b92183051
- TLSH T1B9B012BE410682CAD341980B60F0F8089C4F7AA84CD3D0AC6648EEDF5D8D0D3D948B3B
- MD5 SHA1 SHA512 TLSH
双击进免费资源群，每日更新.url
- SHA256 9c80a169c35366b2bc4170e571a8b0c5f0375a84d5c4e09ff04ffa607b22bc99
- MD5 f5bcd317a9f14e1b98049881255221a0
- SHA1 a956070a44f2571f4cd2258218fb47de939e6ed3
- SHA512 0defa0ae807e7c6e01e4f8c7318f5bb7efff3bc81a9d8febca17ca4ecc90db48c25f45561e45b0899ad0d86c57f638511859b82f13b90b044b5210405e938ef9
- TLSH T1F4C09BAE650641D5D251540650B1F814484F75D44DD2D09C5258FD9BDD4D0D7D544637
- MD5 SHA1 SHA512 TLSH
文件名精灵2026.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c52e406d61d2be5ed9bcd3227402f789f6c827b5d64e9bdc8f96b11ec1ba9cf4
- MD5 f7d8595e4c3800b4ffe7a73898d7b499
- SHA1 2cc96e188db37b7136d5535b7cb1ea1e927a4698
- SHA512 cde5259b8c485c4816a1037c5d860264254f58c516d2b46623206313a17f021fa84510fc1aa2454f376ec09f5c0394989783bb8e8688655701fcd93e3db4bb33
- SSDEEP 49152:rcPjH2EsCmoHqSuoHSoHioHSoHuwFmoHKoH5dqYjCoHiPy7gbAW6hhz:Ak3s7usSsisSsuwFmsKs5RWsj/L
- TLSH T1D1D5CF072A50CB16E07D03FB14B7295487B1AC06A3E1E74E5CD2B7EA1D83B814E5FA5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2995838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
?????2026.pdb
mscoree
_CorExeMain
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ