ea294112a604c9fd4d7431ab20216c6d768d5569ab686da6f61be449d0996f78
- SHA256 ea294112a604c9fd4d7431ab20216c6d768d5569ab686da6f61be449d0996f78
Overview
overview
3Static
static
3医务管�...�.docx
windows10-2004-x64
1医务管�...�.docx
windows11-ltsc_2024-x64
1医务管�...�.docx
windows10-2004-x64
1医务管�...�.docx
windows11-ltsc_2024-x64
1医务管�...�.docx
windows10-2004-x64
1医务管�...�.docx
windows11-ltsc_2024-x64
1医务管�...�.docx
windows10-2004-x64
1医务管�...�.docx
windows11-ltsc_2024-x64
1医务管�...�.docx
windows10-2004-x64
1医务管�...�.docx
windows11-ltsc_2024-x64
1医务管�...�.docx
windows10-2004-x64
1医务管�...�.docx
windows11-ltsc_2024-x64
1医务管�...ct.dll
windows10-2004-x64
1医务管�...ct.dll
windows11-ltsc_2024-x64
1医务管�...ty.dll
windows10-2004-x64
1医务管�...ty.dll
windows11-ltsc_2024-x64
1医务管�...rm.dll
windows10-2004-x64
1医务管�...rm.dll
windows11-ltsc_2024-x64
1医务管�...ct.dll
windows10-2004-x64
1医务管�...ct.dll
windows11-ltsc_2024-x64
1医务管�...ct.dll
windows10-2004-x64
1医务管�...ct.dll
windows11-ltsc_2024-x64
1医务管�...ty.dll
windows10-2004-x64
1医务管�...ty.dll
windows11-ltsc_2024-x64
1医务管�...ic.dll
windows10-2004-x64
1医务管�...ic.dll
windows11-ltsc_2024-x64
1医务管�...le.dll
windows10-2004-x64
1医务管�...le.dll
windows11-ltsc_2024-x64
1医务管�...le.dll
windows10-2004-x64
1医务管�...le.dll
windows11-ltsc_2024-x64
1医务管�...ct.dll
windows10-2004-x64
1医务管�...ct.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
医务管理密改/医务/医务管理/~$评分数据库原文.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
医务管理密改/医务/医务管理/~$评分数据库原文.docx
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
医务管理密改/医务/医务管理/病历评分数据库原文.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
医务管理密改/医务/医务管理/病历评分数据库原文.docx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
医务管理密改/医务/医务质控/~$医务质控.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral6
Sample
医务管理密改/医务/医务质控/~$医务质控.docx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral7
Sample
医务管理密改/医务/医务质控/~$质控密改截图.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral8
Sample
医务管理密改/医务/医务质控/~$质控密改截图.docx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral9
Sample
医务管理密改/医务/医务质控/医务质控.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
医务管理密改/医务/医务质控/医务质控.docx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
医务管理密改/医务/医务质控/医务质控密改截图.docx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
医务管理密改/医务/医务质控/医务质控密改截图.docx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Contract.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Contract.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Entity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Entity.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.cDllForm.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.cDllForm.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISZDPF.Contract.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
医务管理密改/医务管理/DLLAPP/Fugle.CISZDPF.Contract.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
医务管理密改/医务管理/Fugle.CISYWGL.Contract.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
医务管理密改/医务管理/Fugle.CISYWGL.Contract.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
医务管理密改/医务管理/Fugle.CISYWGL.Entity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
医务管理密改/医务管理/Fugle.CISYWGL.Entity.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
医务管理密改/医务管理/Fugle.CISYWGL.sBizLogic.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
医务管理密改/医务管理/Fugle.CISYWGL.sBizLogic.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
医务管理密改/医务管理/Fugle.CISYWGL.sBizRule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
医务管理密改/医务管理/Fugle.CISYWGL.sBizRule.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
医务管理密改/医务管理/Fugle.CISYWGL.sDBBaseRule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
医务管理密改/医务管理/Fugle.CISYWGL.sDBBaseRule.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
医务管理密改/医务管理/Fugle.CISZDPF.Contract.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
医务管理密改/医务管理/Fugle.CISZDPF.Contract.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target ea294112a604c9fd4d7431ab20216c6d768d5569ab686da6f61be449d0996f78
- Size 3.1MB
- Sample260813-eterbs1fqf
- SHA256 ea294112a604c9fd4d7431ab20216c6d768d5569ab686da6f61be449d0996f78
- MD5 eb10541d1f8f746d7e9829132083c813
- SHA1 0030e310e3fd4214bd1caed6c8db8ab77def2aea
- SHA512 04074f0a27d0c98f46117da10162a9f22de1c9973466028b140257c47a5c2e0086a10c5bf75ba2dad9267e58c3f1a9c29736983f70e0b765ae5ab01a5af1d162
- SSDEEP 98304:BeuMIz149yfGfMwbboXR/fD+bt0NftQefFriVjEN6jOR9g:9MyfQjbq7G+1QehMjD
- TLSH T149E5339DFB3D9A6AEC119C56472FB3B3149C32AEAF467DB1C92B4A717C1281F6507200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Contract.dll unpack001/医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Entity.dll unpack001/医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.cDllForm.dll unpack001/医务管理密改/医务管理/DLLAPP/Fugle.CISZDPF.Contract.dll unpack001/医务管理密改/医务管理/Fugle.CISYWGL.Contract.dll unpack001/医务管理密改/医务管理/Fugle.CISYWGL.Entity.dll unpack001/医务管理密改/医务管理/Fugle.CISYWGL.sBizLogic.dll unpack001/医务管理密改/医务管理/Fugle.CISYWGL.sBizRule.dll unpack001/医务管理密改/医务管理/Fugle.CISYWGL.sDBBaseRule.dll unpack001/医务管理密改/医务管理/Fugle.CISZDPF.Contract.dll unpack001/医务管理密改/医务管理/Fugle.CISZDPF.sBizLogic.dll unpack001/医务管理密改/医务管理/Fugle.CISZDPF.sBizRule.dll unpack001/医务管理密改/医务管理/Fugle.CISZDPF.sCosnoleHost.exe unpack001/医务管理密改/医务管理/Fugle.CISZDPF.sDBBaseRule.dll
File Explorer
-
ea294112a604c9fd4d7431ab20216c6d768d5569ab686da6f61be449d0996f78.zip 3.1MB
-
医务管理密改/医务/医务管理/~$评分数据库原文.docx162B
-
医务管理密改/医务/医务管理/病历评分数据库原文.docx.docx 948KB
-
医务管理密改/医务/医务质控/~$医务质控.docx162B
-
医务管理密改/医务/医务质控/~$质控密改截图.docx162B
-
医务管理密改/医务/医务质控/医务质控.docx.docx 860KB
-
医务管理密改/医务/医务质控/医务质控密改截图.docx.docx 199KB
-
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Contract.dll.dll 30KB
-
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Entity.dll.dll 107KB
-
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.cDllForm.dll.dll 3.7MB
-
医务管理密改/医务管理/DLLAPP/Fugle.CISZDPF.Contract.dll.dll 8KB
-
医务管理密改/医务管理/Fugle.CISYWGL.Contract.dll.dll 30KB
-
医务管理密改/医务管理/Fugle.CISYWGL.Entity.dll.dll 107KB
-
医务管理密改/医务管理/Fugle.CISYWGL.sBizLogic.dll.dll 42KB
-
医务管理密改/医务管理/Fugle.CISYWGL.sBizRule.dll.dll 113KB
-
医务管理密改/医务管理/Fugle.CISYWGL.sDBBaseRule.dll.dll 802KB
-
医务管理密改/医务管理/Fugle.CISZDPF.Contract.dll.dll 8KB
-
医务管理密改/医务管理/Fugle.CISZDPF.sBizLogic.dll.dll 5KB
-
医务管理密改/医务管理/Fugle.CISZDPF.sBizRule.dll.dll 61KB
-
医务管理密改/医务管理/Fugle.CISZDPF.sCosnoleHost.exe.exe 8KB
-
医务管理密改/医务管理/Fugle.CISZDPF.sCosnoleHost.exe.config.xml 7KB
-
医务管理密改/医务管理/Fugle.CISZDPF.sDBBaseRule.dll.dll 63KB
医务管理密改/医务/医务管理/~$评分数据库原文.docx
- SHA256 be8de34d77f172f557c670212f6b1e845997dd27b221bac11bc37d86d4206bdf
- MD5 31acc4712ed25dc9317536cf762bcc7c
- SHA1 4746210f0ce41afad8d7aa873239bef5aa1bcb5b
- SHA512 9ab3b7ba526c3822d1a77a3ab5a3d2ce9f642f46b5679378541646566ac8dbc001f479462e151116d4e6e6b0662a904850c60d1518e0e04e1f72fe89306e4754
- MD5 SHA1 SHA512
医务管理密改/医务/医务管理/病历评分数据库原文.docx
- SHA256 a196c28c9fa2a46265ad438596c21fadac0f5bcda7f0e4009786fa4f6b44ef85
- MD5 9d26d4d409a9960384fb64f3c32aeab0
- SHA1 f48c4e40555bb25e0886d6d8979a89ffd806b281
- SHA512 0e33d54fb71ff61efe1bdde85f0d6b68b94077900ff74e9aacb6a9cdfca8d66a691b5d6412814dda4c7b181620472b6d6817926c41537c5f158305225693b030
- SSDEEP 12288:DCZzyM3SfizKUxCZFO8YZTttM2IfF3ZPR+TvQBwHYK4qDEmpI7rqDw8QFU36Op:WZOkSffUxC0ZTtYfR2OwHYK4Mqq9y6
- TLSH T16725E037B1A00C99CD7CA930B0E7054349971C79473BD6B99D4B9AE2F1EEF85BC012A6
- MD5 SHA1 SHA512 SSDEEP TLSH
医务管理密改/医务/医务质控/~$医务质控.docx
- SHA256 be8de34d77f172f557c670212f6b1e845997dd27b221bac11bc37d86d4206bdf
- MD5 31acc4712ed25dc9317536cf762bcc7c
- SHA1 4746210f0ce41afad8d7aa873239bef5aa1bcb5b
- SHA512 9ab3b7ba526c3822d1a77a3ab5a3d2ce9f642f46b5679378541646566ac8dbc001f479462e151116d4e6e6b0662a904850c60d1518e0e04e1f72fe89306e4754
- MD5 SHA1 SHA512
医务管理密改/医务/医务质控/~$质控密改截图.docx
- SHA256 be8de34d77f172f557c670212f6b1e845997dd27b221bac11bc37d86d4206bdf
- MD5 31acc4712ed25dc9317536cf762bcc7c
- SHA1 4746210f0ce41afad8d7aa873239bef5aa1bcb5b
- SHA512 9ab3b7ba526c3822d1a77a3ab5a3d2ce9f642f46b5679378541646566ac8dbc001f479462e151116d4e6e6b0662a904850c60d1518e0e04e1f72fe89306e4754
- MD5 SHA1 SHA512
医务管理密改/医务/医务质控/医务质控.docx
- SHA256 dc04e52cfc4d60a4d03ab89ca31101496a877257cca4efdaaea707e5fc91b684
- MD5 4007043cc7a3a7e69802d3b2e4b02024
- SHA1 537b010800c0876249f9c6a9cf67076fca811f0f
- SHA512 47d7e58b48b6c3e59e8f5cb4a30d0622c99c8359b2a5655aba8f02ef80c5d176df8874d7f97bb64ab2ecbdc8e03dd7c9acf8e422d3a6eecfa8c5424a6482b054
- SSDEEP 24576:vdvx279QPejyTASd4sjhfAcvDRUUQqaVYcBhWweH8:Vq2ejyTASd9hpvW7ScLWwO8
- TLSH T1781522145172DE60EDDB077624571F823A36AA5E02F1CF23C3B9BD2CFD4ACAA8901647
- MD5 SHA1 SHA512 SSDEEP TLSH
医务管理密改/医务/医务质控/医务质控密改截图.docx
- SHA256 7030dbc01b6fc55102617e572f035a170287a3ecd5efb32f1c894fa47fa8bf64
- MD5 d6eb43318862a2cd0fa4252952b7f0b3
- SHA1 2a9c5286f41214aabc7e5d633a251dc3a58692ce
- SHA512 bb4d7dae4cc2297e0da3f3274531e6f370725693d8448c99310bbfd0c08a3e97b25dd6b0e508a470f511870ed9be9f8832054b7855eb9a1fec2ac1b06ed84152
- SSDEEP 6144:7DMnKx0YI9Ik6sHub12KoUXB5ypeEvvppR7v1y:7DSKx0YSIk6sI2KyVvvpLk
- TLSH T17F14120C9E66C807EB63633461A05F79BB2D1A7FF459A347C631686A5E12F18322F71C
- MD5 SHA1 SHA512 SSDEEP TLSH
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Contract.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18d310a9ed03c59047adf4732f403c4aedfe8525096105677a3525522ed8dbdb
- MD5 2a52ecef1ea0a9cae2c2c63fa2eb7898
- SHA1 f6b44befd242983b73d34bb3928708fce34feb55
- SHA512 626504f0287e9cbe93cf97bd8fcc1e8472c0ab63c1a6927e08b0038cb630d5d02d35289844797a97af7b5236c7bbc8e017fa4c52271ff44f1054289bb97d39db
- SSDEEP 768:yR5IoYKFAMC1fTq0Jii8pVK+cwr68a6hjg2:yR5r/3Co80pVK9a68a6h7
- TLSH T1C2E2D5D5AB9CC8FAF889923DFC5DA4492369D768421387DA32809C795E077C5234C3BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.Contract\obj\Debug\Fugle.CISYWGL.Contract.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.Entity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2e648c81099d40e5a7355d97f2b01d23b9b97893e4931bc5adc69cd876df5c9
- MD5 bdfd5cb4b8b1d6e0a454354fb39a15e0
- SHA1 d2b6623f040d747db4811bfdb42d4ad9245cdb5f
- SHA512 07f20be0e85d1971322c4cb4ae3749291e77898bdd32b1e0d88ad44ea9f691c7d98d8e2f869b96f7b72625b7bd8613b529e6d83f9db268e7194ed98775fa2409
- SSDEEP 1536:ml8m7JMSfe5/t3AM22QiN/iBUPwNZQesfaGN61dUrR44qcXhZ2XG/:8idPhQvHnsfxNmq
- TLSH T11AB362D11378D36DD9590576F2294C3E0647BA4D7476EAF2CB10F88B3A2CBCA61188BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
115410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.Entity\obj\Debug\Fugle.CISYWGL.Entity.pdb
mscoree
_CorDllMain
Name
.text
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/DLLAPP/Fugle.CISYWGL.cDllForm.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1daf02675af54ce472bbd1bc246cc96cbdc24e910059b3024bb7c5fc9b54e47e
- MD5 7faed4489563a6ce677c3c6e645f8649
- SHA1 7671feb1c625baae8cd68ff3308b8890f87bfb03
- SHA512 f09301a50776f78b3fb3b3480fa646d7b2e8ab100fa5bac57630c0e66b30e667827188a9f9095bb8f1fdb239af60712182b7442f5d170e52dd5f8354b9bc2b02
- SSDEEP 49152:YrBRV/sWxpGjS8osKTdth1f5TC6KPRrW+x:YrdNx15THKP
- TLSH T14D0683903A344F51D03E83F6225B152617F8AB1F85A4DA5ACCD2B9CA1CE1FC01A9FD5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3874650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.cDllForm\obj\x86\Debug\Fugle.CISYWGL.cDllForm.pdb
mscoree
_CorDllMain
Name
.text
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/DLLAPP/Fugle.CISZDPF.Contract.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91044419b198a9275124517a32c5abbf533e793050751b3b75525589ec7e1be9
- MD5 409a1629e231a1ad729a6e12888774b0
- SHA1 82b7043993500c93cab42b833db1252e4f8c537f
- SHA512 7be8400d37caeacaf94da43001d5af20908d6daf7b08e2933e36650ec6c20f6971a67e9d3aa1c29643e3e64c9607b21799e0b40c7c48ec70b6a015d245992b99
- SSDEEP 192:CvS4i6IQTrOu0KrUvNGZJUq9vAt7oB5mHHPMe/ejSolf:ES4i6cR0U1GZJdFaPMLJ
- TLSH T17BF1B755EBF64733DDBB0AB9ECAA57400BB5EB108C42DF1F098A201B5C53E610E52676
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISZDPF\Fugle.CISZDPF.Contract\obj\Debug\Fugle.CISZDPF.Contract.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISYWGL.Contract.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18d310a9ed03c59047adf4732f403c4aedfe8525096105677a3525522ed8dbdb
- MD5 2a52ecef1ea0a9cae2c2c63fa2eb7898
- SHA1 f6b44befd242983b73d34bb3928708fce34feb55
- SHA512 626504f0287e9cbe93cf97bd8fcc1e8472c0ab63c1a6927e08b0038cb630d5d02d35289844797a97af7b5236c7bbc8e017fa4c52271ff44f1054289bb97d39db
- SSDEEP 768:yR5IoYKFAMC1fTq0Jii8pVK+cwr68a6hjg2:yR5r/3Co80pVK9a68a6h7
- TLSH T1C2E2D5D5AB9CC8FAF889923DFC5DA4492369D768421387DA32809C795E077C5234C3BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.Contract\obj\Debug\Fugle.CISYWGL.Contract.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISYWGL.Entity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2e648c81099d40e5a7355d97f2b01d23b9b97893e4931bc5adc69cd876df5c9
- MD5 bdfd5cb4b8b1d6e0a454354fb39a15e0
- SHA1 d2b6623f040d747db4811bfdb42d4ad9245cdb5f
- SHA512 07f20be0e85d1971322c4cb4ae3749291e77898bdd32b1e0d88ad44ea9f691c7d98d8e2f869b96f7b72625b7bd8613b529e6d83f9db268e7194ed98775fa2409
- SSDEEP 1536:ml8m7JMSfe5/t3AM22QiN/iBUPwNZQesfaGN61dUrR44qcXhZ2XG/:8idPhQvHnsfxNmq
- TLSH T11AB362D11378D36DD9590576F2294C3E0647BA4D7476EAF2CB10F88B3A2CBCA61188BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
115410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.Entity\obj\Debug\Fugle.CISYWGL.Entity.pdb
mscoree
_CorDllMain
Name
.text
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISYWGL.sBizLogic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22290f25c00d832948324512b60c995421dba7729f8ff010365cf40c225be489
- MD5 27f81bc0e7ef09128f16f7d3d3f7eddb
- SHA1 0eddacef8e92ac37f6bb53ec9b6b52b82367ee51
- SHA512 4830bb2894437b372a8e5fdf0f640c45ece83310d501624c2a38ad877020218adc802e9737c6aabc8a2313e1556ec9ca280a4e90834202954754cfcfafd24d67
- SSDEEP 768:Pqnp3zIJiHD1MibjI7ZORkHej0y43VKfT65Y68a6hjgmM:Pqnp1xMcjUZORk+YJ3VK+e68a6hu
- TLSH T1D813DC6C5EF42436C88CD3FC44EA45324B259A46CA53E3272781B0F6D8B771ADA471EE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.sBizLogic\obj\Debug\Fugle.CISYWGL.sBizLogic.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISYWGL.sBizRule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac83bf65136387e29ecf42db34cfe6019dcbb992447ffdd140ca9e24443753dd
- MD5 45b72fd0503ada652cc1b526cb18ed36
- SHA1 b315eaf63cb55f363fe734845047f5737a3ca3d2
- SHA512 4e9bc26f8729c1111eabe6501c3be23e373a5a059e267481a77122f802395401286bf6df0538f147d371f711219ceaa47b5cb1b4b3a5600ebefe3d683fe85893
- SSDEEP 3072:n4fE233xE9BsL+/+6hC+UinSf+BBmWWZ2BGFrPK0EWz:4fE233xELBmPoQrPK0
- TLSH T13FB3D6887BF49F25EA7D85F5D6A0413153F0849AC181EBEA0CC6B4F70CB13AA5B49C67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.sBizRule\obj\Debug\Fugle.CISYWGL.sBizRule.pdb
mscoree
_CorDllMain
Name
.text
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISYWGL.sDBBaseRule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3eb73cf0a7e626d720b14212ada9e909ecf71e8a6ff264f61e2db6866d87522b
- MD5 e2b4c623e17b93a7805a3dccdfb139be
- SHA1 115201821063e8e1617848d0e7a93271033b4ddd
- SHA512 95eced067b160d524e6cb019cf372c324ff4a39b5f26a0a1ebb420efcd31bf26ed7a5c374c406aa57df368bd537e7f9099d69a9035aa370ffe8ea62d511b2e09
- SSDEEP 6144:ZmMlMWmJeT7kMiPPsu4crta8NeVGCq31gCPPe:ZmMlMWm4sa8NeVGCq31gCPP
- TLSH T14F05A44C338D4204D57C296556B84B2886B7B9BBD039D3BE0CCD69768BB37498960FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
827054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISYWGL\Fugle.CISYWGL.sDBRule\obj\Debug\Fugle.CISYWGL.sDBBaseRule.pdb
mscoree
_CorDllMain
Name
.text
Size
800KB
Virtual Size
799KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISZDPF.Contract.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91044419b198a9275124517a32c5abbf533e793050751b3b75525589ec7e1be9
- MD5 409a1629e231a1ad729a6e12888774b0
- SHA1 82b7043993500c93cab42b833db1252e4f8c537f
- SHA512 7be8400d37caeacaf94da43001d5af20908d6daf7b08e2933e36650ec6c20f6971a67e9d3aa1c29643e3e64c9607b21799e0b40c7c48ec70b6a015d245992b99
- SSDEEP 192:CvS4i6IQTrOu0KrUvNGZJUq9vAt7oB5mHHPMe/ejSolf:ES4i6cR0U1GZJdFaPMLJ
- TLSH T17BF1B755EBF64733DDBB0AB9ECAA57400BB5EB108C42DF1F098A201B5C53E610E52676
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISZDPF\Fugle.CISZDPF.Contract\obj\Debug\Fugle.CISZDPF.Contract.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISZDPF.sBizLogic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 20e6d5a90695abee39cc1b3632483214523f15320d762a6d82df492ce23fceaa
- MD5 ee9d861fecf2d43f0312fcfa188c4e1a
- SHA1 b35fde43b14421f68bd1dcc56d73381743720e58
- SHA512 ed2c617bc2c2bcc659825dfff4930a75a3aad359018fe6abad179b480c39240e6485bd2c668692d62095949c5d5c01c39e22fb38f2eb00b9fc581539ad0b4179
- SSDEEP 48:6vOVxBvz15DeOvlpgduxxSMRvVgosimNMDYoT+snDMtviqgzvNzzAutBINKMdlIT:VBxZeOrKuxx17YiSHsDMtv6+NNdlu
- TLSH T1F3C1876D57FC0B35DCEB8BB6C8E746421770FA91DA53AF1F0882056ABC225214A32F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISZDPF\Fugle.CISZDPF.sBizLogic\obj\Debug\Fugle.CISZDPF.sBizLogic.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISZDPF.sBizRule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b2aef14b9535db93a9aa4a44280dbc27267a7db62090317acb2d9e4eb19852e
- MD5 0903686ac7b3f85904c71b3869edeef8
- SHA1 8d5595493f5161fc4ce3bde8a28dd69986d5e71f
- SHA512 6f07d165a662bcc9e63f1860d11e2bcab9b0d9cece35d47005fd606557592dddc88b71a8ddaafcfd10e9e9bad2a3f773898303c8a0f5e7f42c8bdb31524e552d
- SSDEEP 768:ToVzeWNxzprVr5DtzJ7g0bZi6b+lxv+864d/ON90wv8imMrOI6Slgpwbx2TbIarZ:T8TbCs34W0K8EF4Hd
- TLSH T10E53F78CFAF3AE31C6BD8930069AC9D607B586CB9515EB054CC9A4DB1F387015D0A9BF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISZDPF\Fugle.CISZDPF.sBizRule\obj\Debug\Fugle.CISZDPF.sBizRule.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
医务管理密改/医务管理/Fugle.CISZDPF.sCosnoleHost.exe
- SHA256 e71883a3de674709b6719b5e03989aebe49220b36e44afc7011009fd57b02119
- MD5 2a8d318c003a9e3ac480307f9739ed03
- SHA1 627544a9f5de950946ca3357335738401cb4fd80
- SHA512 4a5c966ea292fb4a8762ac1f01354b426aa8f04ff264c5d290fb9e67fdc016988633d95665fdeaf808cdc7b8cfc3657017290a77f154cc1d6571bca46436c2e5
- SSDEEP 192:rVmmiQk9me6zC9lCaAi1xE3yLf4WHMoeOylx:rG9mXzIlCaL123ycWHMND
- TLSH T1C3F1FA4DF7E44B16D4FF4E7558A256100372F383DF2ACB1F28CE54166E226054942BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\复高项目\CIS\Fugle.CISZDPF\Fugle.CISZDPF.sCosnoleHost\obj\x86\Debug\Fugle.CISZDPF.sCosnoleHost.pdb
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
医务管理密改/医务管理/Fugle.CISZDPF.sCosnoleHost.exe.config
- SHA256 c0566c6ab8da85c2cfdca486b9943264dda4c9364c82a3c99c734019bc5d8e57
- MD5 2232a11dae1c4e27d42354961d627cc2
- SHA1 c4c4fd1580bf2567b3f62be6868f1c0d70cd8a87
- SHA512 a91bae63291dac248a8b79e4b9cfc44b999152b195c0290f43054e6317d017e56f78b472ebaa019ad48afae8935cc7a5f1525653cdf6a9894550aa7fc40048bc
- SSDEEP 192:YAXTjUK/BsG1LNR+1ym1LNt+1VnKS/JpsJ+J/qJ9rD:YA/UMtajtejm
- TLSH T10EF121A1F5C05E6241F20222A9715D85DE3683B7120E2888F1FFB6678FF3CD97613266
- MD5 SHA1 SHA512 SSDEEP TLSH
医务管理密改/医务管理/Fugle.CISZDPF.sDBBaseRule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d6239b0f3631f04a06f513770600ed4c60eba1c612f59d1833400e7779ee4d42
- MD5 d0f373c4c113546e0c81c55bccd60d38
- SHA1 e964f1ce48a14497164c55d4402ff57634d2ff19
- SHA512 b952bac2f90caf07ec1570a580374e6af43887e3575cf221e495846e6211d1611832f59d8bd1985360874f112acdbc57475df284acdb590900874ab5028f0e5c
- SSDEEP 1536:dpWi7i2aOxntqOfiSumchrhYbXtSyBt3PzS1fRyDyRCGHr:dpWi7i2aOxntqOfiSumchrhYbXtSyBts
- TLSH T11253FEBDE6885114FEBC2A74167A2904427328AFA138A71D1CDF3CA4AFD37C592917D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
69942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\复高项目\CIS\Fugle.CISZDPF\Fugle.CISZDPF.sDBRule\obj\Debug\Fugle.CISZDPF.sDBBaseRule.pdb
mscoree
_CorDllMain
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ