e76a98d6eec5705329bd4d56de8a9e328e4173e57d8c74c4eae0b9ba6bd9a879
- SHA256 e76a98d6eec5705329bd4d56de8a9e328e4173e57d8c74c4eae0b9ba6bd9a879
Overview
overview
3Static
static
3QNSoft-Win...��.doc
windows10-2004-x64
1QNSoft-Win...��.doc
windows11-ltsc_2024-x64
1QNSoft-Win...��.doc
windows10-2004-x64
1QNSoft-Win...��.doc
windows11-ltsc_2024-x64
1QNSoft-Win...ts.dll
windows10-2004-x64
1QNSoft-Win...ts.dll
windows11-ltsc_2024-x64
1QNSoft-Win...AO.dll
windows10-2004-x64
3QNSoft-Win...AO.dll
windows11-ltsc_2024-x64
3QNSoft-Win...ts.dll
windows10-2004-x64
3QNSoft-Win...ts.dll
windows11-ltsc_2024-x64
3QNSoft-Win...el.dll
windows10-2004-x64
1QNSoft-Win...el.dll
windows11-ltsc_2024-x64
1QNSoft-Win...Vs.dll
windows10-2004-x64
1QNSoft-Win...Vs.dll
windows11-ltsc_2024-x64
1QNSoft-Win...db.dll
windows10-2004-x64
1QNSoft-Win...db.dll
windows11-ltsc_2024-x64
1QNSoft-Win...t.html
windows10-2004-x64
3QNSoft-Win...t.html
windows11-ltsc_2024-x64
3QNSoft-Win...el.xls
windows10-2004-x64
1QNSoft-Win...el.xls
windows11-ltsc_2024-x64
1QNSoft-Win...��.exe
windows10-2004-x64
3QNSoft-Win...��.exe
windows11-ltsc_2024-x64
3QNSoft-Win...mm.dll
windows10-2004-x64
1QNSoft-Win...��.exe
windows10-2004-x64
3QNSoft-Win...��.exe
windows11-ltsc_2024-x64
3QNSoft-Win...��.doc
windows10-2004-x64
1QNSoft-Win...��.doc
windows11-ltsc_2024-x64
1Behavioral task
behavioral1
Sample
QNSoft-Win11/使用必读.doc
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
QNSoft-Win11/使用必读.doc
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
QNSoft-Win11/全能抽奖使用说明.doc
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
QNSoft-Win11/全能抽奖使用说明.doc
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
QNSoft-Win11/全能抽奖软件/AxInterop.ShockwaveFlashObjects.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
QNSoft-Win11/全能抽奖软件/AxInterop.ShockwaveFlashObjects.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
QNSoft-Win11/全能抽奖软件/Interop.DAO.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
QNSoft-Win11/全能抽奖软件/Interop.DAO.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
QNSoft-Win11/全能抽奖软件/Interop.ShockwaveFlashObjects.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
QNSoft-Win11/全能抽奖软件/Interop.ShockwaveFlashObjects.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
QNSoft-Win11/全能抽奖软件/Microsoft.Office.Interop.Excel.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
QNSoft-Win11/全能抽奖软件/Microsoft.Office.Interop.Excel.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
QNSoft-Win11/全能抽奖软件/Microsoft.VisualBasic.PowerPacks.Vs.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
QNSoft-Win11/全能抽奖软件/Microsoft.VisualBasic.PowerPacks.Vs.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
QNSoft-Win11/全能抽奖软件/adodb.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
QNSoft-Win11/全能抽奖软件/adodb.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
QNSoft-Win11/全能抽奖软件/images/sys/about.html
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral18
Sample
QNSoft-Win11/全能抽奖软件/images/sys/about.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral19
Sample
QNSoft-Win11/全能抽奖软件/shuju/excel.xls
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
QNSoft-Win11/全能抽奖软件/shuju/excel.xls
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
QNSoft-Win11/全能抽奖软件/v全能抽奖软件.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
QNSoft-Win11/全能抽奖软件/v全能抽奖软件.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
QNSoft-Win11/全能抽奖软件/winmm.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
QNSoft-Win11/全能抽奖软件/全能抽奖软件.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
QNSoft-Win11/全能抽奖软件/全能抽奖软件.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
QNSoft-Win11/电子表格数据如何导入.doc
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral27
Sample
QNSoft-Win11/电子表格数据如何导入.doc
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target e76a98d6eec5705329bd4d56de8a9e328e4173e57d8c74c4eae0b9ba6bd9a879
- Size 15.5MB
- Sample260919-wl91yaaa92
- SHA256 e76a98d6eec5705329bd4d56de8a9e328e4173e57d8c74c4eae0b9ba6bd9a879
- MD5 f609a3324a7288144340003caee9c111
- SHA1 f69d690d3184c040e68b92c6526f50c5a67c1164
- SHA512 1d892c6d0f06340f99bb1e85e9017260b217fb1503a565d4b7eaaaabde73d5c88f2260e4907c151e27cf45ddb69ea19efc2d4a4003b2e4a64f24cda5ed01f1aa
- SSDEEP 393216:/bpLfk5u5inMccPf10fsXGq7oJinBjLeXeKe/Toibnr:RMc5iNcVapq8MBNToiLr
- TLSH T1F7F633EC6F95CC44E700BFB34DAE4B10964FDA5A145B079C23E6263E7341B16DBE260A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/QNSoft-Win11/全能抽奖软件/AxInterop.ShockwaveFlashObjects.dll unpack001/QNSoft-Win11/全能抽奖软件/Interop.DAO.dll unpack001/QNSoft-Win11/全能抽奖软件/Interop.ShockwaveFlashObjects.dll unpack001/QNSoft-Win11/全能抽奖软件/v全能抽奖软件.exe unpack001/QNSoft-Win11/全能抽奖软件/全能抽奖软件.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/QNSoft-Win11/全能抽奖软件/Microsoft.Office.Interop.Excel.dll
File Explorer
-
e76a98d6eec5705329bd4d56de8a9e328e4173e57d8c74c4eae0b9ba6bd9a879.rar 15.5MB
-
QNSoft-Win11/使用必读.doc.doc 623KB
-
QNSoft-Win11/全能抽奖使用说明.doc.doc 1.7MB
-
QNSoft-Win11/全能抽奖软件/AxInterop.ShockwaveFlashObjects.dll.dll 18KB
-
QNSoft-Win11/全能抽奖软件/Interop.DAO.dll.dll 64KB
-
QNSoft-Win11/全能抽奖软件/Interop.ShockwaveFlashObjects.dll.dll 22KB
-
QNSoft-Win11/全能抽奖软件/Microsoft.Office.Interop.Excel.dll.dll 1.5MB
-
QNSoft-Win11/全能抽奖软件/Microsoft.VisualBasic.PowerPacks.Vs.dll.dll 263KB
-
QNSoft-Win11/全能抽奖软件/Music/中奖音乐1.wav39KB
-
QNSoft-Win11/全能抽奖软件/Music/开始音乐1.wav819KB
-
QNSoft-Win11/全能抽奖软件/Music/滚动音乐2.wav5.8MB
-
QNSoft-Win11/全能抽奖软件/Music/背景音乐2.wav4.8MB
-
QNSoft-Win11/全能抽奖软件/adodb.dll.dll 123KB
-
QNSoft-Win11/全能抽奖软件/images/1.jpg.jpg 357KB
-
QNSoft-Win11/全能抽奖软件/images/3.jpg.jpg 1.2MB
-
QNSoft-Win11/全能抽奖软件/images/bg.jpg.jpg 39KB
-
QNSoft-Win11/全能抽奖软件/images/kaishi.png.png 5KB
-
QNSoft-Win11/全能抽奖软件/images/kaishi1.png.png 2KB
-
QNSoft-Win11/全能抽奖软件/images/kaishi2.png.png 6KB
-
QNSoft-Win11/全能抽奖软件/images/logo.png.png 7KB
-
QNSoft-Win11/全能抽奖软件/images/queding.png.png 2KB
-
QNSoft-Win11/全能抽奖软件/images/sys/a1.png.png 10KB
-
QNSoft-Win11/全能抽奖软件/images/sys/a2.png.png 10KB
-
QNSoft-Win11/全能抽奖软件/images/sys/about.html84B
-
QNSoft-Win11/全能抽奖软件/images/sys/about.png.png 73KB
-
QNSoft-Win11/全能抽奖软件/images/sys/b1.png.png 9KB
-
QNSoft-Win11/全能抽奖软件/images/sys/b2.png.png 9KB
-
QNSoft-Win11/全能抽奖软件/images/sys/b3.png.png 9KB
-
QNSoft-Win11/全能抽奖软件/images/sys/b4.png.png 10KB
-
QNSoft-Win11/全能抽奖软件/images/sys/c1.png.png 9KB
-
QNSoft-Win11/全能抽奖软件/images/sys/c2.png.png 9KB
-
QNSoft-Win11/全能抽奖软件/images/sys/d1.png.png 8KB
-
QNSoft-Win11/全能抽奖软件/images/sys/d2.png.png 8KB
-
QNSoft-Win11/全能抽奖软件/images/sys/delete.png.png 4KB
-
QNSoft-Win11/全能抽奖软件/images/sys/error.png.png 13KB
-
QNSoft-Win11/全能抽奖软件/images/sys/good.png.png 7KB
-
QNSoft-Win11/全能抽奖软件/images/sys/guanbi.png.png 761B
-
QNSoft-Win11/全能抽奖软件/images/sys/guanbi_bg.png.png 469B
-
QNSoft-Win11/全能抽奖软件/images/sys/md1.png.png 10KB
-
QNSoft-Win11/全能抽奖软件/images/sys/md2.png.png 10KB
-
QNSoft-Win11/全能抽奖软件/images/sys/sys.ini401B
-
QNSoft-Win11/全能抽奖软件/images/sys/zuixiao.png.png 153B
-
QNSoft-Win11/全能抽奖软件/images/sys/zuixiao_bg.png.png 155B
-
QNSoft-Win11/全能抽奖软件/images/tingzhi.png.png 5KB
-
QNSoft-Win11/全能抽奖软件/images/tingzhi1.png.png 2KB
-
QNSoft-Win11/全能抽奖软件/images/tingzhi2.png.png 5KB
-
QNSoft-Win11/全能抽奖软件/shuju/db.mdb684KB
-
QNSoft-Win11/全能抽奖软件/shuju/excel.xls.xls 20KB
-
QNSoft-Win11/全能抽奖软件/v全能抽奖软件.exe.exe 1.7MB
-
QNSoft-Win11/全能抽奖软件/winmm.dll.dll 126KB
-
QNSoft-Win11/全能抽奖软件/全能抽奖软件.exe.exe 1.7MB
-
QNSoft-Win11/电子表格数据如何导入.doc.doc 336KB
-
QNSoft-Win11/视频教程.txt77B
QNSoft-Win11/使用必读.doc
- SHA256 c4daaaafe3ff3011173f3516d6c12028361c330f9615fe655583368393285903
- MD5 9c07c3bfa2b39114ef58d9a5f08e752d
- SHA1 183e6f9f189497730b2d92b18a9cf828c4b51d2f
- SHA512 44bad62fbc2594c68ef099af9522850c012201e17232b5de27b60762ea44f42e278e890c50e441b0a9facd04a67dc62a01da5e11732c595d2951d5b6fdda98e9
- SSDEEP 12288:J54dbiw5tA7Ljj7IIKLI+oVX6WB4hxgToty8Qfrs:J54ZLA7LjB0I+UX6WuoothQfr
- TLSH T1D8D42305F4C1EE1BEE99863141968780796FFC6A46F8DF67E59DF1A01733360389838A
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖使用说明.doc
- SHA256 e1a0c300d3e8787adc83227e8299b9819d8232017e1464d69828e9182c4d81e7
- MD5 d5044340dbfe11a12355056bc16d3d40
- SHA1 3c9de1d0135d6c78d823ad7b6dd511261da0e335
- SHA512 e6e839d91d7199971e60eb383e5d8441340ee58f7c92abbedbe15d42ecf6a3f4f90438758bf9a01a0013eb7081c0ad040e80c016f2f086421989823391bc61f4
- SSDEEP 24576:5LYI0I+UnxWRVDcbFtGumhp343FOmwpJesYqFWhRrAAIFLf0I+UE9D6Yd4v0I+Ua:5LYbI+yk3njebcgXIFAI+39mC48I+qC
- TLSH T1DF852357B9838F6BC87D453A10C3876865A59C480B72D7A22619BA67BDFB3B434C43CC
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/AxInterop.ShockwaveFlashObjects.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8cbefe58b6b630d866a83755b7f4760f87edee72c62e4087c23ad5ae6d0296ca
- MD5 7967ea8aedd9eff174c907b6b16e7db6
- SHA1 73e1b0b3b04d7937d80c3dfdac620654057f0174
- SHA512 657f5c42e0140eda89c2c170e65f963425ab789d57e6726f8b0d1d474e0ae2c18c4d9bc35bbb9472a5d859fd73c4f6609a0bdb3896f889212763a8f6a5caefe6
- SSDEEP 384:DXO1GCT19SEpTPESNplCPaWs45g72heFm:DXO1N1JTPvCPaiveM
- TLSH T1E582530CCFE47EB8D5F2C3B5F6D291AA46F4E8827063E35B1A4854DAD9437084A932D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/Interop.DAO.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82a6b48fef441d9df4f93e477916a343227eac8a93577fea6b677a09810396fd
- MD5 60416719103bec4e4942536c7df755c9
- SHA1 4c0782a2b19713046d4918dd2fa3b933e3beab71
- SHA512 638948aac472b4d5519d6e7d9a513f92a769e6ccc3a6cea7cfd745bfa8e6c7a4d12af996a04d68c4f8deb9b31736b981e86a00ed744efd939b3e58600aa02a61
- SSDEEP 768:i/Irw/z1znBoFQA64Kds1y2lk01Wz1HltJ+UJiQAFf1/4kdefKY:iQrw/9BTA6fs1yEbA1Z+yIFoh
- TLSH T1A953D73B705CD225C81187BC00A376256338F55523E2CF2BA55E47BE9F0BAE44E876B9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/Interop.ShockwaveFlashObjects.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb00114889783c4e0ea8412caabd2c3ca8517d24799dcc9aedb5205226954907
- MD5 ba5026eec89e16228b3a1d738e29dd97
- SHA1 cf2e55a9cebca7902a54cfcbd64a66175a60ca5e
- SHA512 8416027ad5fd20dae4987a05d7ecee2e6ae92fd96b84c6de5c761ba789f6dbe39af727e7e6d52936413f053077c26785d3abdf80118d06b83d0dd1d36924b705
- SSDEEP 384:4wnxbk2QGLzJk3rF0/tSRW6Wpahz7q+O7WyWO8qTfh/1qGL8L:Vk7GL9kq/ARWzpGxHlO8qT4L
- TLSH T1BEA2D726F22CE529ED7903B689931B300771D2007663CF23915D63B94F5626BAE4737B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/Microsoft.Office.Interop.Excel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3a679b4890095677523a21d1532056f79df9a78c99533321fd97cbeb96920dbb
- MD5 79a6278ff98538e5f3e51d8a01c246e5
- SHA1 00c6221b0db8749541fb435316a20dd5ef92af1f
- SHA512 ad8cd6fa611d62185c63bf81b72f907fba49d919c21b0c5bc043511f3d5f020d09c32918a60d4aa9815222e33fefa0e1bb899f79562bdf6305a9f5a1d1add207
- SSDEEP 24576:FYpni0/+kybHw/oZBo6hQH4kLLm3bDBLUUlmny/B+mE9AkwZWgvA/aJTO2KKphuQ:FYpni0/+kybHw/oZBo6hQH4kLLm3bDBu
- TLSH T1DE758312F34AD864CAD8E27E7C63EE2457B8A25626F0DF0A361C76345F572868F41732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0e:e3:1e:ba:ba:58:f4:b4:76:a9:dc:5e:9c:e7:c2:20:0a:ba:5a:75
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 13, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1537838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/Microsoft.VisualBasic.PowerPacks.Vs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ddb71776b12fc6011e8af0e1df4fb4b72414b05d4d11cb0b17fae71a356405e
- MD5 cd5acc88e72e848430b8fe12b977b07d
- SHA1 7c63e7c1645081eede0d7e9895483cc91b9bcd22
- SHA512 6a499fc328129808538cb46665cf8773fb38098cda599d376ae17af5dcfbae6db4427c37b18bec4a1376ac4df05e46d5924d1e8d1bb5ee24a9f0b20f117fd72f
- SSDEEP 3072:9TJE5gj3ZGlg/riRFyE36k48hoUeVeeIWb0BZmem73C5P9HdYbFwFmL4207HbA6D:9TZZDir3B4YW8Zmem73C51SNNW
- TLSH T13F44171377E85A2AE4FF0378A9B445A5CBF8FA428653EB0F185530BE18A7750DE15323
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
42:fd:a2:0b:23:61:98:79:a0:85:46:04:02:42:ed:82:25:47:ed:6e:81:02:26:84:30:41:a3:99:62:e1:b3:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
c6:cc:2e:85:56:e7:1c:eb:6c:e3:dc:cf:b0:63:32:91:7d:25:dd:10
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0d:af:8d:00:00:00:00:00:28
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Timespan
Feb 20, 2012 - May 20, 2013
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:e2:88:00:00:00:00:00:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 20, 2012 - May 20, 2013
Minor OS version
0
Major OS version
4
Entry point
257966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\binaries\Intermediate\vbextras\vbpowerpacks.vbproj__268534120\objr\x86\Microsoft.VisualBasic.PowerPacks.Vs.pdb
mscoree
_CorDllMain
Name
.text
Size
244KB
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/Music/中奖音乐1.wav
- SHA256 ddca176d311e936a0098ca5a9d5ef1c11982ab4554486e7172f1f596af75b755
- MD5 3fb6784e92776327c5f4575f5693e0d9
- SHA1 58a24c0fab294463155d2c2106ade89b13223e74
- SHA512 a7ed75ff3ab8d29e425d48ebed059a5e5beebcfc71ebcad239ae0f1ebabc55a01283a1bf9c5e35d26f037bfea896aa73c75308b522ae5b816bcbd3461d5eb81a
- SSDEEP 768:mDYalHa7qWsinBT2yR24vBl6tMhuZVYifoZVbHPvEmpcbVlu33alBB6VOZE:3AHa7Q/u26/6tEuZVzfoZVMu3qZhE
- TLSH T10F03E0EB9E168957C86410F221B300F83B1ACF8485E54D41BE255A2FD46F2F0EE6FD95
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/Music/开始音乐1.wav
- SHA256 6e58b548136ad9fd8b7b7dd758a8f37fa4fb7c5be270f8591ca21a2299491756
- MD5 964d4c5bd961953bad2f8a6d831c3299
- SHA1 4bc7537fcd7fe2d93c0ec345020aa6a4707c3d3e
- SHA512 898fe8ee073203e2977e48de628a638a22f4ccae3c8fc0ba0b8d90402af39a5330478acbebc71ff9f9b8d13e5e917f9acabed8eb9a71206a80411b46e87a892e
- SSDEEP 24576:ZZtjroQwzH1zt7Ub+TYbkU0N7d/1NX/q:ZPEYr0NB1NP
- TLSH T13D05F183F101A520C5AA8B358D669E6483327D5EFF471F5B2188FA057CD35C2BB263DA
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/Music/滚动音乐2.wav
- SHA256 4062df58517813c453654db1c6519bf9d08678f298d6bbe96ca869c20254820a
- MD5 6626f722c0ddd292ff38a9cccd64c79f
- SHA1 ec1edd7428cd2ed713f68ebbeffb56fdfdbb35f3
- SHA512 6c8d5b7073cdef6bd039ef82baae61a5c00dcf7107d6a0576c1956ce0bea36323a22e3e42d8e491d0da537772df3e3225aa60ab708185e0603f04d4169a0d7bd
- SSDEEP 98304:P7Kr6F/nRrhy8/9lebmT7gtjmKcxZOWEyP6s6DS6xAQBGk3d+1gsNuJ+isxhN1ti:P7ouRr5FISojmDPOWZP6J26xZXt+1FN+
- TLSH T14C562297E622A7483D38471644C11C180B89FA1E38654E6FFB2ECBC1F2133567E6976E
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/Music/背景音乐2.wav
- SHA256 06a25249c8cb918edb6fdeffcf81c78214b14953d33512f148d7cd955c5e2640
- MD5 e91c70d2f41fec59f1633c3c4d5d75d3
- SHA1 f92f3b61d1255325f082d8396a2e3c60e1e6fb98
- SHA512 e1fa4a99b7fee48e859ccb4b7ed739800ab1a004dca069a6af1cf3030d17f8e5d576a233942a0f18ddf85751e79f9bd39a3cce63578b0204055ffb7fb51e1dbb
- SSDEEP 98304:h4+VRNh1AfIDFuIzVuc1awQWmChGsY4fqrGanlzlrzwU:h4+Vh1RFuouclDhGxbHlrN
- TLSH T1743633D9D4401986E530F63547C0ACA016A37DF4BC248E4BF79EAD1FF817218BB25A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/adodb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e8a15679f8805f21429e83bb1402f7065ab569c1a26a02521c2811b6f212de61
- MD5 c962046b61bccbcf8eac0eafd8bb93b5
- SHA1 7f128a72100105ae28a52071c6c4fb54ba9c3b72
- SHA512 ad410bfccebc4156e658ca75914e346d014ab0bca04fccbd5ab647beb1bca64f62e5a06b9c94aaa5b0ab2f4bfd44eb6068d24ba5fb4ae0a70105b3c54f3876be
- SSDEEP 3072:owfedbeMdhIHvBcDuegvSU4OhCsXTgME3+aOfWXn:owfedbTdhIHvBcDuegvSU4OhCsjgd3X
- TLSH T108C33A02B26C0432D98846BD9266A7215730F77266D2CF4B226DBBE25F537C3CE06776
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d1:59:f2:fb:97:18:b8:ea:8c:77:2f:d3:b9:86:f7:41:16:c7:b3:23:62:da:aa:90:ba:6f:dd:d1:70:d5:4d:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
75:b8:c0:43:b6:ab:06:d8:4b:e6:74:ed:71:76:ec:83:b8:d7:18:7a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:d4:55:00:00:00:00:00:0e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
106478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/images/1.jpg
- SHA256 bdc3626d09f4a8fc043985659305e19706e9b779239b2dc793e9ebb117222f9a
- MD5 c374d0bd5469a745b51a90f18cebdb65
- SHA1 97a0ab2fd9e57edf55d99f40ee01c1aa8b129df1
- SHA512 4b9897691f8b07aaf166f0031011cf7696ca1bee24e29bcb4971af830e50429c6f590aa27874279f1d3841fdf9f65d16c57df07a44a3d2765f9db903f135f24b
- SSDEEP 6144:aki1GXPJyvlCao0OxL50BqqBSMt//vRpj2jXJ67f3R6tSFNPxJMNpiEnzctXu:FRMlCPv+BVVnPj0J67PxFPJMNLzcxu
- TLSH T1C97422731EBE6D85E5C6A777A404FE61B2BD2BC907320FDB0B547908F4B99A6844120F
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/3.jpg
- SHA256 bd0bfe9d8e5a9434f0d5faec2323149c7297da1cf0636ac60c45f71c3d3533ee
- MD5 104e9d6380da4d2ff474d2abccb29657
- SHA1 2c44a902a1842e480e8a7d12fdc731a6b01b2437
- SHA512 70940e277b8445d038d7abe74aad8a86731b7f79a63ae11368fdbafeff914cfd13203f03d4c2b8524e93c33c62ab603046b882530b2e04f9acf8e5ddde560936
- SSDEEP 24576:gxPfEefIYbUiSMY549w33qhLA5IGhn3onKmFsKb2gsOr68UcxYQU:gBfbfBUX5wLA/h4nf2zzSOQU
- TLSH T1824522BABB308C21BB75B37E09C9E09D59BD74EA194FAF1F8D63A8112774160742643C
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/bg.jpg
- SHA256 1e1d4e31ff9ed2c9370c315f9021129a2d81bdb9d46c5cdbaa80f15fa492be5d
- MD5 ec98edb467993009702cd719662662ff
- SHA1 d1a50a5b70efd2ea8f1b70c8b6c6fc933b66558a
- SHA512 96be7a85d4f338cf70b0a415eaae0a17ab9d8f7412dc750b722a5b9b92246fab4ba20ce6e3a883353d28cfba3352276eb30aafc0b78922dfca3485615cca4fd5
- SSDEEP 768:sbT34afLY+Bi1rK2il/vGvKM1hgbTLknE7fWgoXCgh3h:8Tp/uvKM1hgbTQYuRzth
- TLSH T13E03F1071B8597DFC46BE63194570E77B7322B7C0285C90360F6ABBAA172F48740A729
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/kaishi.png
- SHA256 abfc7019fc2818572655d695e496ee5ee8afbaf7f44bada422aad2381c3206c8
- MD5 3d0d207791d531c8fbb61e08b8b08272
- SHA1 5e64d491a221a9f915ff41d923791f275fc3f256
- SHA512 70435ca60f7fcc152238c741a2e34fbd1ddbad9bd316bf33e35c74fb58f716dd1c4f80db487363cc6d541121cbcbf87fbbb2ce366cac64423f38725af2205217
- SSDEEP 96:JsrYrdZ31WPzCBv5iRQdahBhEKjNJND/v9aMLjebkUWY7vVzPI5VCLkAyXS6F3CQ:JnUbCcThvjNJN7IzTWsi8gRXS61CQ
- TLSH T112C19FFD510A2428354ABCB5E3B1D4D1546EE6AA8442A8C6039793F3FBB8C01B4F815B
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/kaishi1.png
- SHA256 7a2e4c1e2c6ca832e4de79ef0a86296e191f9bc421f97159c34ec2c93f3e5f29
- MD5 864edc27090d806312b9dbdf5beab87e
- SHA1 289ed9af6482ff34cd0ac4f48d3efcb2bed99ddd
- SHA512 976917915638893e56fd39f77050a215a3a76ca15157c283091785f84d978f8b31423d7a125d1c81c19202c93b89fe18e9d063047d4325b22e194f1e7e24c777
- TLSH T11F513CFABB141DE4C37801F9216A7DB108F88541A35CE6FF2459CC6DFA867804E29E1C
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/kaishi2.png
- SHA256 1421528cdd3313711a714bb3f9f71c73890998f46de66c526fef50b41800a897
- MD5 50af57436631337c823c67e8554f4865
- SHA1 fc3380b0ed108525abba63e1753368af48107e66
- SHA512 641f25458ff8e4cfdb334edac9ef3dbc83ae3b48696b0ab6f1fecc02a6cd85666e5ec827457f60b06f6de58a9c8c3e8aabd95f9209a60449223f1d5672afcbfd
- SSDEEP 192:bz64MpSloMUSKNwCuftkVQqySHfGCaRCBBS8GUkZ:bG4T2ML5CuftYScB/0Z
- TLSH T108E1AF80AB5088BFEE2603341A757F6C715213BCD765DAE086949D710DDBA71C7E7321
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/logo.png
- SHA256 5e3a827fa60f2794649f6c43b65ef27928f5e0cfd62e6c9ca77e1f5b8951b2fc
- MD5 2082e4de551478d96861b159a7adb970
- SHA1 f089945999f677916619823a27f00639c0f9b727
- SHA512 d1fe58e03186432926154f8c58aa1985e9f81f5f33215191a9deeb7a615d8ff26d305e94831b6f37f8e43d36a2a8bbd01e2e6614b1ad014c4ed0a5dca5dbc3d8
- SSDEEP 192:7+O6PqJA7c8kbmutX/yBLlsya/3ZwJN5BG6+ZXwG:6Hie7c8wMLVBR8gG
- TLSH T10DF18FA654A4C414FA3425AFC3941F8F0738B56118C2D9B6A543A78A0538ED632F417B
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/queding.png
- SHA256 aab1a7c1296f43c4dc7df86565682a476f47baeb4f25234549ae701753e53e0c
- MD5 6e3c285c72760ee00ffe2c3b6c7d50fb
- SHA1 b0e4134536d503aa31f0f880ef4d5328f29889d0
- SHA512 c3bea06d00971650f5b29e497c65e30e72bd1e6747a86a8d4b81106254c208234681c4958f59c2cc29e23018db7d8a78406bede52610197ddbcce1e6c6e02bcf
- TLSH T18D515D4EEAF58DBD3A20C2A3F5BA605E4C8A014A87A05F15DD3708316D016DC7593116
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/sys/a1.png
- SHA256 933f8bbf5cb8fe6b7dbd1788743dd028ac161de971c1b447647610bdc32c0aae
- MD5 38ea3f394f7c324a1393e0cfb78a64dd
- SHA1 a0902ac07446a5827e18f0c662ed704aa07304d5
- SHA512 7cc2f0c00f9cc4bbcd25c16217cbc28040a98cbfd1638f6441362e949f6e1d1cb49da6afddb58c221c9d3313c438d7630b529a5bea4a0ad7da602290da0d9fdd
- SSDEEP 192:OfzyAafMqSXWEDGkdQbjDMZR+7ksr7XrNzuPOJcm/vi8r:KyAafFSXlD3ubMWR/XrN9ZvTr
- TLSH T15522CF53FBE0159305B6E7E23C6597EEFDA0A1D192C936E80C05D8F500A9B1689DDF81
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/a2.png
- SHA256 ce07759a699f2b83fbef72169677f2bffae372bcc1bae2d72f706227b774c761
- MD5 7e400334e8de3306482dd888fb3449de
- SHA1 3d2afbd689c8c9750cc1df2b36874eb3f756c1fd
- SHA512 29663f4d8fa0eef9b4e13cbc23f1758a9986bafb2e4d67c98aeef06f6b59f5be8f7feb65e02246ca34bc5f2a45fafdc4be5726d5fe31042557c63e21441c3e7d
- SSDEEP 192:0zEZGbwCqndUgAyLNj04nT2Et+zvArBsf3zwR6uBwsVOxWCM+SToWtQIMprx:03bQ0yLB045QkafDwtBvVOs/ToWtQtj
- TLSH T1C622CF59CAEC68C25F2130EB4718247DAB9F0CF20B1EE627B482D404372EDA5436A63D
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/about.html
- SHA256 6465eb290d98f19e832b20f7cd8d66ed05cf53f86a5b7e4c5cccfdd4a5a1407b
- MD5 49a1bca7a25066cad593d3892b67d2f8
- SHA1 6b39df8d0f6179cf003af2e248cbb561fe9445e6
- SHA512 62b9ad1483ffa811c526662ca5df98645ab88a6ff5b9b66f49727473f8025b68f9dca3969f0d3a5c0fe42e13fb42bb44ef15a3d806ece1dd0fab7be1f04214b4
- TLSH T118A01280333150FC0940B1C1C608040014081D34994F0128261272346250424B48B130
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/sys/about.png
- SHA256 7b9dbec9a5158fa6da2337955be5fd3f10e0a50973c699aaa126935e37228ecb
- MD5 80bcff53012bae00a49b6ab2be67cec7
- SHA1 6b44de55a10779c5125582b7883258f908624d87
- SHA512 eed1f1371f6e90b6595583fc6d97278fa1995161023db0c485a3f03c611818ab0addae7d3323f5fb191612d79648656b5c07aea13f41936005ecf4646b3dbef7
- SSDEEP 1536:X1RqMjIwDsEZZTYyStGeSPButO7Y8B64l1/QypyGtKiZkvbmWS+e4VjZ:FRBjIidZ90SPEtOU8oZiyG3mvKWS+e4n
- TLSH T1737302E7B8E9EA41DF8CA5ACCB2C12983659D9D9523F6932F1476074DFF481480B4B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
qr http://u.wechat.com/EB4EU_qtKVVSaFh6pF_GLPg
QNSoft-Win11/全能抽奖软件/images/sys/b1.png
- SHA256 2053b771448a669b3ac7813aac470df6d58476ede0345346c831a306eeda5cce
- MD5 717783ee1508fff525eddcccb21b0975
- SHA1 cbe91a9158eb4da7d04c5aca40f70da8252f7ba0
- SHA512 b731191c17d2a6eddd5b65cfde7764df1ac4c94febafbb9e37fc120411ac1aabe54e99aee8e9226ba769d40d7a8eae74bb13c94ffed768c45f905cb47869ad9e
- SSDEEP 192:IxHZc0RsmPtEyP69P9TnRft0pn059H5XkiEJscf4wUKE9:Q5lak89Rf6N4XkBscf4aE9
- TLSH T17812A0DD54744F9DF23AA1099A5E4208300921B76AFF13BF671134E2653F81FE93D284
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/b2.png
- SHA256 a78a5af2d746d57b4620a8c32df47747f4aee0b18959bac2dfd344b07b4a83cf
- MD5 b9c2ba84b4e5c59d4f3a6c1bcca5c668
- SHA1 405ac13e4248dc744080a08a8c2fc29767c90c1b
- SHA512 0400c371f3072abb8ab90389ba04441b68bc417bf7d0f31a01b5963a4fd5c34d9b80404da21559a146111463111b9cd95bb52dd6ad71b2aa9eb14def0f6668a9
- SSDEEP 192:JWWIm+wQ/BS9yzxEWqVJsvlNu/J08Sbp2qIt8QXAjjK54ooYiHIUkSf6HJXjVzj:JWWI4tdL/8nJbpYBGG54oSN1fmXZ
- TLSH T10D22C0B8CE10069468B5370693BD8AB8BCF08C1C553CB15D837C867AA105BCA392A667
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/b3.png
- SHA256 d74dd88b9b8b5ad125658f213affb466a719d06aeaf73155c16b4ae5f86e8d93
- MD5 e262e584941ef1d96c0848bf5ca55625
- SHA1 604008646548796a692e0b33b08e43084639193f
- SHA512 0521723847a4c365ea177e50ca15b070033a4865129bb176947a2cb5fa85b8ef2774f6a05cf6be2a16560e8b3075c641957e43c92c48058f06ff59aa64afc934
- SSDEEP 192:HoyMlMSVrX49A2aJ+GbwMaATNFRi72+lCwRAmoyx+FVC70+E60b9M5GFNSt:IyMlMSVmc+E/Ti72+wwRloyMAc60YGFg
- TLSH T1D922BE204E5C25A2F35390FBB8C1288366BA34F7938421982092AB447130A37593FBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/b4.png
- SHA256 f88b1219205a2819a22ce00df977a2e3758beb966d4f56618a820938b9000e12
- MD5 7d89a9451271160f9b5dc2bb03427a34
- SHA1 cc58ef6a7446278eb1bb6594334542e574468ba7
- SHA512 63ff989c4860e30784b2184ec480cf0a588860b478a3df28430542bccadfdab15c661819886e756b9f30242697fd78cadfb8f67d6e15b80fb8830287f272b985
- SSDEEP 192:mc1jbb8P27vSO2ITbMd/epFNxSHX/ti5uHCrZCldT3Izlz:n3b8PSqO2WIAFNgYsCrZQIJ
- TLSH T1C322AF9895D065F0E258214EFB921B69A1E7B7B2D46027EF7237D0F761FA13A07341C1
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/c1.png
- SHA256 684f68b028c69d53921d1a866804c0acc66f8bd3da62496f20cfc2a0b42cee1b
- MD5 918ecec3858769fa8c6a1437423bbb17
- SHA1 088b1f7b47f7413f5966312dd17efb84414daf75
- SHA512 f459454bd27c6afde3d624db7d65bfd1a4ef5187d59d8c0cb2eab5629f51043f2dd48463425b3df4f25c6df7b9e01be87092a6b46e6a927881e680fa333ea8f7
- SSDEEP 192:4CbBE5jeyJwdcGuHftXGjMLOyKXHvf/wGnFu5R0L1waTUazQdJIapUM:4CbBMid0/tXGjMLOVffoS8H0L1waTUaG
- TLSH T1AA12C0A8F1FC7B6093970905439172A7DC7BB7CE42A915DB0BC2AE384C7C57A3205798
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/c2.png
- SHA256 09c79faeebc7bccee30997e67e20196faf7c9363be82270a9878357130b0392c
- MD5 237d853b89c08681b10639f124d38374
- SHA1 e529dafd4de16406404602e935d6cc08216f0049
- SHA512 ce714221e0d1915f893dbe9786ba9f1fb39082e846af1fe541f846b9f6ad2a723628f87dae45deb3d6fabc107b8516b00ac254569292fa8d92cc51415849740a
- SSDEEP 192:vAlQNUWrcT+Gfk4hKq1ieyDuS7yXTfqYOdtv3RWvMU+qs:vQQG93hKq1qDN2GYuv6MUg
- TLSH T15022BFB07EC840A6C52E19E5FE464410ADA149278CD17EFF73B46B7D22AB52E634D420
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/d1.png
- SHA256 381c6a9f2aca8b58ac23c8629a2f33cecd4a060c646f8940da672ab2d166e52b
- MD5 8f4251fc0e50224d7e239a75187255f7
- SHA1 ac496583ce7039231fd32f0ae158e9df41df63f6
- SHA512 e111d636ce5da69b479e31275ae6d66f7f408551c53cfc115b9e6a7b506fec15e7fa22594841ff13fdc5270fb0472679b3e901de00128ba04d32331d920ab25a
- SSDEEP 192:MQLwoMgUWiotl5ekEx1lSbv4Z1AUnyTDKQSR3PPyF:M2wGtl3Exsg0MIAXyF
- TLSH T12A02BE7976BF0E21E41041618C28F8BDE85CD695E37FBFB84165F10C34B86A669AC01F
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/d2.png
- SHA256 c4eb500398fb8636e456b70e0dffb1a705ea883c626eef3f1f45f806afb0931a
- MD5 b0a8480ec66d5ee6b55a998b68e2b06b
- SHA1 c192d0bd847a7fa10b473c34c1eadc39e5af50bb
- SHA512 6622b271f28073ae0371461ed0245df5272ff56c1cf12fcb4a3a4373347a1a4c8179c5cad0510f0583f1454d126cc05656ed860b634c5c33e2274cf57c2fa900
- SSDEEP 192:+mKMnzKjUWvH9JEwVicUpvX0txIRsUm0FbINN2b2ISHHUflHT7:PEUW/9JJA5UxIJm0FsNcb1z7
- TLSH T1CD02BFC1B1E0B5B420E3DFD0431F07E64BA21ECF5E809A3C529D6A5C72D5B5DC918B98
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/delete.png
- SHA256 7f4122c450b3274233c4266fc449b6f458ce3911d6f10409ffdad7fa2567af6d
- MD5 d95bf6191270927f5e7e2de07148b57b
- SHA1 af0cc11a5006303c3afad4dacef1955afbb1b827
- SHA512 e02f6e8602d57ac720859c128e793d266985bb9ccd9b780092358205b424297c24202c6b0ab2c481997e16b9e1a37e8daeacbbc029dfb8e891158a2dc17aa733
- SSDEEP 96:Ig5ke33KD4c+V2epnpiN+JspNa2ZgoN1cLdi/5tNCYYM:NnKT+IOnpi3pNZZ74wtCc
- TLSH T192A17EF2AD43284400D45CDB35D4D407DA52357A3E74878FB776953CC9EEE042AAC279
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/error.png
- SHA256 f515b3ae38b335bafe8ce3264773e744a6bee3990720f239a0e5c4aadc883ed7
- MD5 3f50219cb4d690b166707daf940824ea
- SHA1 2743c0a324568fe2b1fd404762f0421a91ce635b
- SHA512 5fba1808c87e5b63b35b91f75222419540857a195cc45beb841578e806d411e708a45ad7d1a68306a95698814622af370d502304924064a8cc37a945d1c41a6c
- SSDEEP 384:icHkiSUhzSk7SKWcnc7hHPDV0SghuGInRNIGplU:iPiSCSKWcnc7V7V0T4GArU
- TLSH T1AA52B1046216C1EB1D0A7FFC92DA6C45484B89F388BBB3B9F4E5D73771B44569414607
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/good.png
- SHA256 7f7efb754609fa59b45048a5fa2d46195b4f6720bb0fefa0ec98b532e1ddf660
- MD5 f7837693c9685368795c099f9e31b464
- SHA1 d8bd5325e4b65b7e2a0654a780a289a8313847fe
- SHA512 93a112b6cedc287c9be6773d7630390bc515b29f362df079375e081fd511cb3a7a0393cc936762721c5a5e331b1a7923329cd352ac155d3e30a3dc9c1998d8ad
- SSDEEP 192:cBtT3cT4hGn0Z6nHr++m7FgRInIxg/Zk+l+vv:8/hGnVrG76RInIxCS
- TLSH T1A9F19EF491FE8C59A3C7D227B1F638A7ECA302578253933502985D99BF2A37D51D1142
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/guanbi.png
- SHA256 6036dc064e4fb2056f435bc4c77dfb2a1be7394588637389025bba3a91eeb45c
- MD5 d5fdbcf15fe5e07ad4447160b018bcb8
- SHA1 1cdb29907bbe417242dc962e0d8d5c061152370d
- SHA512 f718665d2fd3156b5fbe3491090de5afb10ca6a146b51ce768ca6ac5b305d0417a70972a82adfc2be0d279c93777aa191eb93459adbf7cfedb1b59b892e92f36
- TLSH T17201C587A3986C3F6230585326D6483EE5B17300C4A1A201FE555BC34C2C24864E0F09
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/sys/guanbi_bg.png
- SHA256 3891e0b8b186536e2dc51f32e57cdd2c79754cfa61390c2aa7a87d62c6ee66ee
- MD5 09dabb87a805284ed729d15b0d7ca0ae
- SHA1 0538e512495268c33fe92fb886b8d3359bbe17b1
- SHA512 3e790792a3a29869272c08f8d180d22bda50b6014487ceceb7c4553bdd69387a4741937113bb374f431935f267c2b915ab1c933f242f5e85f4ac0b3e7581bbbd
- TLSH T1C2F0D494F174D8B0D12945956434C1D6E37E47631508C3218447C47EAAE5A0991F4441
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/sys/md1.png
- SHA256 8789cddbff89b3ed37d4797bb31bf7d89fadcb165544428ce20edc5d3b3985cb
- MD5 40eefff63fc461ec157f769f852eb139
- SHA1 b513408f0777b441c37a25adca4661aa8240ef50
- SHA512 38298b9d4ddb1a55505f4e2661b0c4e08c8e431e0d506f109a58dff05c63a0f5e944582a47de6db46e6ad94f1a5783e544a589e94ad2dd6e405df000050f502c
- SSDEEP 192:OLapK2ThY15EUN/k9cggHsyENNMf55E9FEff6cEHEkmd8E1KCJfxoSv6Vdm:zKChY1j6asNNMvE9FEffikb8E1KCoI
- TLSH T1B432B0C66346B2D9DD60A50EC817DA00DB3B5DD6D04B2EACB86211BA941BD7722CFF06
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/md2.png
- SHA256 b43a68952350a4b206d2c403d0b23b11bc7e3ba6e93aaf0ad3b8e653a30ba2d0
- MD5 4ebcd18c535e1c2802cfe2d0e0e0683f
- SHA1 0e13891b0d3b421f4ded7887805d1233a4be8f5b
- SHA512 dba05ef16834670d888fe2e17fbf54875f01dd4c3a8f1c37a4b155bb06fcf364651c9f65809a29ccee5329f970a71fd435da4fdcb57bd3575d244225eeb24839
- SSDEEP 192:qMoVmCKhUw4wuw+KA37NXN7IcAX/Wr/vroRi8zLPNg5ESHn1SlmgAFxlDOzxAr0j:qMoVmUxwgNXpIcAPa/jgT1cNgl0FzOzf
- TLSH T13A22BFF67A38D011CF2D32413CCFD86435DE0A24D9A8255EEE315CA94B5162EFC97C48
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/sys/sys.ini
- SHA256 8a640e598fda93c506579ada712217fe4acf295141abf805f0a92195470a3f66
- MD5 141893f5b8db964a9ca3372039414cea
- SHA1 36579be592c3646a13434de91fdbd4e6b4adc2d7
- SHA512 814a2a23069b93c65f4a75fded4d1cf1c533b6a80bc7b0008db50d0ddc626d0a08b741bb6ab91363e3365f9cc636e67eb75eb137f8b7a5c48b6de723f2b1a0be
- TLSH T16AE09A4377B625568C31DC0B4F8245A016F05D7A76F687DDDC0B0D5263C48A30E3AE9E
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/sys/zuixiao.png
- SHA256 45eab6150bf5960660c9699b6bbbb7b94326db14139a5a8d58cd39d08a307b5f
- MD5 60b674abe1d61fa1756b2c76ae7fb7f2
- SHA1 8b5f9ce4cbe74c0766a0f1f8a285436207b52729
- SHA512 90abb1947d73bac486f7a91bb5aee890a1a0d7715ced71e31cf8b441bc5e6ea369475f3436170459d6138ac3afe30c77afb643d3019468664eb88d672bf3e1f6
- TLSH T11CC08CE2FA544D28920A21A24615C410E4A24381B602832827CEA81C62B5B12E8D838A
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/sys/zuixiao_bg.png
- SHA256 0eba6cac941a3bde2a45075113b96cedb004b2cb1f3278f041b92ebe881017dc
- MD5 f73ee9b09bfa37ede9e6f72de2ac9bf8
- SHA1 68673e92f5b1f010dd9c1dc3cc5266bbfa4ed70c
- SHA512 e70b2573d835ea650b5c698543ece0f76125d3543ee5b3542431fe38719bdaf75fcce70b380192442c39fcb9715dc237656dc5744c04b2599fe30bee2e850a9d
- TLSH T125C080C1FF504B14810F357940055510F0514550E610833C055DD51D5721615989438D
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/tingzhi.png
- SHA256 e55a3929f864f29c1997f2beebd0ad0ddb465e1a9507410cc41c03637eb761cf
- MD5 7da2865c366e09c2820310b3d0d486b4
- SHA1 af3006ac962ef12bb84b72ff2b8cdad9d4b110b3
- SHA512 efdd656b0516bf5c0a5d946c3dbd1dce62641559324a16dab2e5e5e70d309e7bba3da5917976a2c03d1393d87944667ca1970bc590b4371166832eeb7b18ab70
- SSDEEP 96:/v7TI1JTVbi4+AgGNIGbXK6M3tm9H6wrYbahUr3u0HWvT/RqRkA5O227XVx:37TMTiGOGmJm9HFcbVVYIkuIXVx
- TLSH T1DBC17DF5AE11F889E00AF1A349D4127235E88E126673209570D9F72FCBE0D47E9A59D0
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/images/tingzhi1.png
- SHA256 69319cb146f83023aa2b244bcbcb7574c718baac13dad9ae141304fd9bc3fc72
- MD5 bd7cba950b358bdb3832acc6498a1fdc
- SHA1 201cc3b9a1da7fb78f6c2f2e205c3cc5c0916005
- SHA512 a9a09e3a002003a36795d1f6888b52db2a98dff8b2b311c4810c4161770f93f8f669dd2e23e79a8b6fc2c96954fce95cbc52e39fe0bd0cf1194e4f2758bc6874
- TLSH T128410B78B6A436FB45EF012E29E8C641467093044722C938DD5A7011FAD3A6D95129A7
- MD5 SHA1 SHA512 TLSH
QNSoft-Win11/全能抽奖软件/images/tingzhi2.png
- SHA256 10ac306b0e387cdfbd21feb116906dd543626a96dad7a2352bd9cf10533c2724
- MD5 42d7ff719c6f8065e487b1ea5c549ef8
- SHA1 e2d8c96e76c1093b351c865442cecbdaafa85ca8
- SHA512 5db7b920bdf0c8b8e93e5565e22aa09024a2ee36498b82d6e13ead05bd410934876a8f08020893a19f4edf928f361cd616d7b4b467adcb7ddcdfcd9c21f856a5
- SSDEEP 96:tEEm9ymBOrW7peXWn/z4DuWN6riYrH49HxMMWJvAcTGAlrMGuRFuc/:ty9mkvn/83N6zqds9lAzru+
- TLSH T1FFB190CD62C5C53D4E73D6AD455C638332050EDEE77040A8625A63728D7B515DC3673D
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/shuju/db.mdb
- SHA256 79dcebeedbf5d71b9995c76f5a85f3deddef5c1764d6ee7e6de5fb87a6d98107
- MD5 43d54bbbd3e11f84df83f2514460f07c
- SHA1 0ee8c68db1850fd045ec7d9793eb46e7fa12fa78
- SHA512 4380d0bca58fdeffabdac31e1dfb9a417bd845a6cdf4db93c0fa48c9c64d27aeb17d9bb71c912838641bd75ab516ccda9185cd07c1e7ebd77b6d5fccb91cf7a5
- SSDEEP 6144:ptEbxJ4UHGD2ngjLWLO2zcloclwBvycp:obf4UHqjLZMcOcqB
- TLSH T127E433AE86910123FD6A873044D2072F6733697E4E1A7E1B1CE2F7697EE338174546AC
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/shuju/excel.xls
- SHA256 c67a4f0f4331652108553430713325d841ddfb6779a70f57231040997924939d
- MD5 4d69637c3d2f5d2f116842bab12a71fc
- SHA1 2f3e42b4054c1e5abe605a635cabd8903b86703f
- SHA512 b6d69762d95f0023051519d15143b8cca8f5dc7a35331f26e328fa7734661cb91172d8c3a0623dbb152f7fe2430c390abf8bc2f85727d13c0f410b45234eac1c
- SSDEEP 384:ruuuTQzQl4SbbEfoeP0K8XRwfvIgMLk8bsErJU4fbT8f3rr2eYl0f7EunsqyqSGj:ruuuTQzQl4SbbEfoeP0K8XR30f7Eusxj
- TLSH T1AF924056E6D38985CA1D837691CBA61233337C408B73474B7A98B3572FB19D0C983B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/全能抽奖软件/v全能抽奖软件.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 70a583f26e660df2d2dd6827b6317f9e4ffebc4da88da819dc878f6baa4b2208
- MD5 df6fa720071f0115e95100ee5c06371c
- SHA1 714a7e1c42b1191d272931ec813f5f6241382b78
- SHA512 4c807be3bffc5636bf0ecbfef783d7152162ea3ecf7286bf928544d5489b958cfc97ab965b9546d24079974f6de434c5b670e2d6124cb784098dab4b01e9ff2d
- SSDEEP 24576:rpmIZPqhz4DKsrLn+igJqi4xrvYf/99D3MzXjZk9m4DpwlDLPT4D:FmGQcKsrqigJqi4xrs/9KzX9kr+lPE
- TLSH T1D485F3C52A4C0517DD2EC6FD6147CC0CAAF08D3EC5E5DA4A3C81B5B92ABBA4A7F01716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1807438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/全能抽奖软件/winmm.dll
- IMPHASH 6d0cf242319887a443589cfa0a273333
- SHA256 ad43d686930eae0f57a55ee75d10bd1882747089a291371ffe1e131eb5f76938
- MD5 965eb822d0ef8fda78ccb1f41def093d
- SHA1 67e25361dce72026b1472607ec389040dbaf5e94
- SHA512 8bab39864859029c78af420d0df67a52bea44059aca22f37d1c5dd90b3cd26d6f481b5c0f4971fc020d100d02102a2f93cf79fbb2ebcfbb03ba5ae83c97c774f
- SSDEEP 3072:rbYdrhPYFRgwtvic8sz9Vfy9URbyTZLhfXj6:nYdrhItvcsK7hO
- TLSH T17BC3295973F824AAE5B74BB888B216059730B8750B22D3EF05A0957D1F27FD49E30F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
65:cf:bf:61:d4:3d:27:bc:32:55:63:e5:47:a1:a2:91:7d:b0:fd:90:87:c9:f7:62:f9:1b:72:2c:4c:ac:a8:49
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 3, 2018 - Jul 26, 2019
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:d4:4f:19:c3:d8:84:cb:45:63:00:00:00:00:00:d4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 23, 2018 - Nov 23, 2019
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
14512
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
winmm.pdb
ntdll
memset
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
RtlGetActiveConsoleId
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
RtlMultiByteToUnicodeN
RtlUnicodeToMultiByteN
wcschr
iswdigit
towlower
__C_specific_handler
_vsnwprintf
NtQueryTimerResolution
NtCreateTimer
NtWaitForMultipleObjects
NtSetEvent
NtCreateEvent
NtCancelTimer
NtClose
EtwTraceMessage
__chkstk
memcmp
memcpy
memmove
NtSetTimer
winmmbase
mmTaskSignal
mmTaskCreate
mmTaskBlock
mmTaskYield
mmGetCurrentTask
DefDriverProc
CloseDriver
OpenDriver
GetDriverModuleHandle
SendDriverMessage
DrvGetModuleHandle
winmmbaseFreeMMEHandles
api-ms-win-mm-mme-l1-1-0
mixerMessage
waveOutGetPosition
midiOutGetVolume
auxGetDevCapsA
waveInAddBuffer
midiOutGetErrorTextW
midiInMessage
waveOutGetDevCapsA
mixerClose
waveOutSetPitch
waveInGetID
waveInGetErrorTextA
midiInUnprepareHeader
midiConnect
midiOutCacheDrumPatches
midiInOpen
waveInStart
waveOutPrepareHeader
mixerGetNumDevs
midiOutGetDevCapsW
midiOutPrepareHeader
mixerSetControlDetails
waveOutOpen
midiOutOpen
midiDisconnect
midiInReset
mixerOpen
midiOutGetDevCapsA
waveOutBreakLoop
midiInGetDevCapsA
midiOutReset
midiInStop
mixerGetLineControlsW
midiOutGetErrorTextA
waveOutGetPlaybackRate
waveInClose
waveOutGetErrorTextA
waveInStop
midiStreamRestart
waveInPrepareHeader
waveInGetErrorTextW
waveOutWrite
waveOutGetErrorTextW
waveOutGetID
auxOutMessage
midiOutClose
midiOutLongMsg
midiOutGetNumDevs
midiStreamPosition
midiOutShortMsg
auxSetVolume
mixerGetLineInfoA
mixerGetControlDetailsW
mixerGetLineControlsA
mixerGetControlDetailsA
waveOutMessage
midiOutSetVolume
midiOutGetID
waveOutSetVolume
midiInGetID
mixerGetDevCapsW
waveOutGetNumDevs
midiStreamOut
midiInGetNumDevs
midiInGetErrorTextA
mixerGetID
midiOutMessage
waveInGetNumDevs
waveOutGetDevCapsW
mixerGetLineInfoW
midiInAddBuffer
waveInReset
waveInGetPosition
waveInMessage
auxGetVolume
waveInUnprepareHeader
waveOutUnprepareHeader
waveOutClose
waveInGetDevCapsA
waveInGetDevCapsW
midiStreamClose
waveOutRestart
midiInGetErrorTextW
waveOutReset
midiStreamPause
waveOutGetVolume
waveOutGetPitch
midiInClose
midiStreamProperty
midiStreamOpen
waveOutSetPlaybackRate
midiInStart
mixerGetDevCapsA
midiInGetDevCapsW
midiOutCachePatches
waveOutPause
auxGetDevCapsW
midiStreamStop
midiOutUnprepareHeader
midiInPrepareHeader
waveInOpen
auxGetNumDevs
api-ms-win-mm-misc-l1-1-0
mmioWrite
mmDrvInstall
mmioRenameA
mmioOpenW
mmioRead
mmioGetInfo
mmioInstallIOProcA
mmioSeek
mmioInstallIOProcW
mmioSetBuffer
mmioSendMessage
mmioCreateChunk
mmioSetInfo
mmioAscend
mmioFlush
mmioOpenA
mmioDescend
mmioAdvance
mmioStringToFOURCCW
mmioRenameW
mmioClose
mmioStringToFOURCCA
msvcrt
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
api-ms-win-mm-time-l1-1-0
timeBeginPeriod
timeGetSystemTime
timeGetTime
timeGetDevCaps
timeEndPeriod
api-ms-win-core-libraryloader-l1-2-0
GetModuleFileNameW
FreeLibrary
LoadStringA
GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA
FreeResource
LoadStringW
DisableThreadLibraryCalls
LockResource
SizeofResource
LoadResource
GetProcAddress
LoadLibraryExW
api-ms-win-core-synch-l1-1-0
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
CreateEventW
EnterCriticalSection
CreateEventA
ResetEvent
SetEvent
api-ms-win-core-processthreads-l1-1-0
ProcessIdToSessionId
SetThreadPriority
ExitThread
GetCurrentThread
TlsFree
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
TlsAlloc
CreateThread
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-kernel32-legacy-l1-1-0
PulseEvent
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegGetValueW
RegOpenKeyExW
RegOpenCurrentUser
api-ms-win-core-heap-l1-1-0
HeapFree
HeapAlloc
HeapSize
api-ms-win-core-processenvironment-l1-1-0
SetCurrentDirectoryW
SearchPathW
GetCurrentDirectoryW
api-ms-win-core-string-obsolete-l1-1-0
lstrcmpW
lstrcmpiW
api-ms-win-core-errorhandling-l1-1-0
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetErrorMode
api-ms-win-core-libraryloader-l1-2-1
FindResourceW
api-ms-win-core-privateprofile-l1-1-0
GetPrivateProfileStringW
GetProfileStringW
api-ms-win-core-heap-l2-1-0
LocalAlloc
LocalFree
api-ms-win-core-file-l1-1-0
GetFileSize
CompareFileTime
GetFileAttributesW
CreateFileW
GetFileTime
api-ms-win-core-path-l1-1-0
PathCchIsRoot
PathCchStripToRoot
api-ms-win-core-util-l1-1-0
Beep
api-ms-win-core-kernel32-private-l1-1-2
CheckForReadOnlyResource
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetSystemInfo
GetTickCount
api-ms-win-core-kernel32-private-l1-1-0
_lread
api-ms-win-core-localization-l1-2-0
GetACP
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-eventing-provider-l1-1-0
EventRegister
EventUnregister
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
CloseDriver
DefDriverProc
DriverCallback
DrvGetModuleHandle
GetDriverModuleHandle
OpenDriver
PlaySound
PlaySoundA
PlaySoundW
SendDriverMessage
WOWAppExit
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
mciDriverNotify
mciDriverYield
mciExecute
mciFreeCommandResource
mciGetCreatorTask
mciGetDeviceIDA
mciGetDeviceIDFromElementIDA
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
mciGetDriverData
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
mciLoadCommandResource
mciSendCommandA
mciSendCommandW
mciSendStringA
mciSendStringW
mciSetDriverData
mciSetYieldProc
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
mmsystemGetVersion
sndPlaySoundA
sndPlaySoundW
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetPitch
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
408B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.guids
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=259, version=26715,
count=15, id=260, version=26715,
count=9, id=261, version=26715,
count=70, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=257, version=26715,
count=324, id=1, productName=Unmarked objects,
count=1, id=256, version=26715,
count=20, id=269, version=26715,
count=1, id=255, version=26715,
count=1, id=258, version=26715,
QNSoft-Win11/全能抽奖软件/全能抽奖软件.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 efa7294acd77ffd30fbee48d82abb4d18d80014b2c60e7542b9d217946772276
- MD5 cf7cee81218cecde771bbb1ece913822
- SHA1 1b80d18f14a2b52cf21bec4a3463f5dbadb5eabf
- SHA512 f38f4bf4fcaa11069da5b044d4a70a454659de96687b63141e7ffb0dcc5e8c67fa153c92631fed0498aae1c58e7036fd0b6ee1fafcb3e3db8948603277c3fc25
- SSDEEP 24576:MOXmXn2Re7Mz201f8wlDLPT4DS4DKsgKLn+igJqi4xrvYf/99D3MzXjZk9m4D:hmLM/lPElKsgKqigJqi4xrs/9KzX9kr
- TLSH T13E85E3C52A4C0557CD2EC6FD6113CC0C9AF19E3EC4D5EA4A3C81B9B92AB7A4A7F01716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1807518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QNSoft-Win11/电子表格数据如何导入.doc
- SHA256 914cf3d5ac0529bd21e7c5ba28488aedd3ce87c9c8438f99d86e1b9499d1023a
- MD5 f8956449b747caac9b9311597ba9f2a1
- SHA1 f54702fca3ffe11f9c7f8ea951c8b3452ab615e0
- SHA512 5e12af24e61b8ae43aeb914c47d3471510d5452e4096c082f41fbadca6c67a5cb5a8f944ddf890ac4ba4e138553be498dc3e613790b34684878d64b0fd8d7ac8
- SSDEEP 6144:iTB60PsF5agPrvdxcVtIBcILGIc4O1+AhkjoPcPatb5ab9npMK:b0PsFJ/GtIBcMLc44hcPb
- TLSH T1AD741245FA85E323E00BA57A06961B57AB37EC205D316F1E36AD36A636B37F41D00B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
QNSoft-Win11/视频教程.txt
- SHA256 c88c21798ff90d7207139779548d33b9a2903e15a678b773f5c01ea3b779fca8
- MD5 f59359bd870cea5b0856a171eae7964d
- SHA1 24ed31deafb3e0eef772832daf7048e6064faea3
- SHA512 332a93d447344ed8360c637486ef12f3c3badbfff9ed107d788047cd1d756af3887db783426f171a2497cfbb3e7b3b70d5a7415bdf2b60ea8334dc8b36cd78eb
- TLSH T152A0228C8000803CC0F0E83020F80A03B2C22CF0E8C0088080B80203C030B302080BB0
- MD5 SHA1 SHA512 TLSH