ONEGO-多功能挂机v5.62.zip
- SHA256 d2fb28ce32cf87d455e4b10c6f14e4db8d240491175cd5b0a1bbc0f84009871e
Overview
overview
8Static
static
5Autoruns.exe
windows10-2004-x64
8Autoruns.exe
windows11-ltsc_2024-x64
8基础版�...��.pdf
windows10-2004-x64
3基础版�...��.pdf
windows11-ltsc_2024-x64
3基础版�...��.pdf
windows10-2004-x64
3基础版�...��.pdf
windows11-ltsc_2024-x64
3安卓版�...��.apk
android-9-x86
安卓版�...��.apk
android-10-x64
安卓版�...��.apk
android-11-x64
更新日志.html
windows10-2004-x64
3更新日志.html
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
Autoruns.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Autoruns.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
基础版本使用说明(+自定义)/1-图文识别版教程（推荐）.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
基础版本使用说明(+自定义)/1-图文识别版教程（推荐）.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral5
Sample
基础版本使用说明(+自定义)/2-时间循环-保姆级使用说明.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral6
Sample
基础版本使用说明(+自定义)/2-时间循环-保姆级使用说明.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral7
Sample
安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
更新日志.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral11
Sample
更新日志.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
General
- Target ONEGO-多功能挂机v5.62.zip
- Size 33.3MB
- Sample261007-d32f1scz3p
- SHA256 d2fb28ce32cf87d455e4b10c6f14e4db8d240491175cd5b0a1bbc0f84009871e
- MD5 c300ab04920c3b90f0a67f812fdb88af
- SHA1 79cabd388ae503c67719d1ac99536a60b6b4b4d7
- SHA512 a8439ef90f6e58f8a58cdf14bce77c8de2fd8a24332f1749385bfe6f6c7a0c7ded7def0e9b0d90f0496002c0fdc51a7385ff55a93bffa49a42b8091070c719fd
- SSDEEP 786432:KHTEfAIhnOppkTzBqoXL1+bD723QZ+IFQjm5v+fK:KzEb3vBqoEi0+IL5my
- TLSH T19C77331FD5F0D9D7D233B7341A6E1A2974C63413697F2D2230279D884678B0E29EC6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Autoruns.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk
File Explorer
-
ONEGO-多功能挂机v5.62.zip.zip 33.3MB
-
Autoruns.exe.exe 11.4MB
-
基础版本使用说明(+自定义)/0-【推荐】使用成品包无需设置！.txt199B
-
基础版本使用说明(+自定义)/0-成品增值包使用说明.png.png 738KB
-
基础版本使用说明(+自定义)/1-图文识别版教程（推荐）.pdf.pdf 513KB
-
基础版本使用说明(+自定义)/2-时间循环-保姆级使用说明.pdf.pdf 1.0MB
-
基础版本使用说明(+自定义)/其他说明.txt736B
-
基础版本使用说明(+自定义)/视频版使用说明/1-识图新版大厅.mp45.3MB
-
基础版本使用说明(+自定义)/视频版使用说明/1-识图旧版房间.mp44.3MB
-
基础版本使用说明(+自定义)/视频版使用说明/2-时间新版大厅.mp45.9MB
-
基础版本使用说明(+自定义)/视频版使用说明/2-时间旧版房间.mp46.1MB
-
基础版本使用说明(+自定义)/视频版使用说明/视频看不了点我.txt33B
-
安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk.apk 632KB
-
挂机特别说明.jpg.jpg 265KB
-
更新日志.html.html .js 23KB
Autoruns.exe
- IMPHASH 14c76ebf996b595d6bbd94b0c93a5580
- SHA256 66be72c5803412423e462926764ba9dc73a26a37aeb3cf3670e99ca8be34df9a
- MD5 bc628837d19ae4907e7aeccfbc33f6aa
- SHA1 92fda7048f36ba1da8e6acaa3d92889430f89912
- SHA512 86423e877160c66c1d400ffe7efcd1558a2bdd8332be91f24850515891572a221ece3a021c4b33bf4eade482859c9fabfa520ca40254c5ffd2d0c4b519e49c5b
- SSDEEP 196608:/tuWMg2almpqcC6g6v66666ES66666E6kD66666E66gD66666E664D666U66yH6+:IecC6g6v66666ES66666E6kD66666E6l
- TLSH T1C3C6011ABD98C5EBC47504B614B723A23673DC299B320B1721447D7E3E768A12D3A3DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2057780
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
winmm
midiStreamProperty
waveOutRestart
PlaySoundA
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutPause
waveOutReset
midiStreamStop
midiOutReset
midiStreamRestart
midiStreamClose
midiStreamOut
midiOutPrepareHeader
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
ws2_32
WSAStartup
gethostbyname
inet_ntoa
inet_addr
gethostname
WSACleanup
send
closesocket
htons
socket
setsockopt
recvfrom
ioctlsocket
connect
recv
getpeername
accept
WSASetLastError
shutdown
WSAGetLastError
__WSAFDIsSet
ntohl
WSAAsyncSelect
select
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
AVIStreamGetFrame
rasapi32
RasGetConnectStatusA
RasHangUpA
kernel32
GetVersion
TerminateThread
GetTimeZoneInformation
lstrcmpA
lstrcmpiA
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FlushViewOfFile
Beep
FileTimeToSystemTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
DuplicateHandle
SystemTimeToFileTime
GetLocalTime
DosDateTimeToFileTime
SetFileTime
GetTempFileNameA
CreateMutexA
ReleaseMutex
SuspendThread
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetThreadLocale
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
GetCurrentThread
GlobalFlags
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
RtlUnwind
GetSystemTime
RaiseException
HeapSize
GetACP
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetCurrentProcessId
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
SetLastError
GetSystemDirectoryA
LoadLibraryExA
GetWindowsDirectoryA
OpenProcess
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
CreateThread
CreateEventA
Sleep
ExpandEnvironmentStringsA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
SetFileAttributesA
GetFileAttributesA
MoveFileA
DeleteFileA
CreateDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
InterlockedExchange
IsDBCSLeadByte
user32
MapDialogRect
GetSysColorBrush
GetNextDlgGroupItem
PostThreadMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
GetScrollPos
RegisterClassA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
RegisterWindowMessageA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetWindowTextLengthA
CreateIconIndirect
GetIconInfo
CopyIcon
LoadStringA
SetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetMenuItemCount
GetMenuItemID
GetMenuState
UnregisterClassA
DrawStateA
FrameRect
GetNextDlgTabItem
UnregisterHotKey
RegisterHotKey
CreateWindowExA
CallWindowProcA
CharUpperA
GetForegroundWindow
EnumWindows
GetWindowTextA
FindWindowExA
GetDlgItem
FindWindowA
GetWindowThreadProcessId
mouse_event
keybd_event
GetClassNameA
GetDesktopWindow
VkKeyScanExA
GetKeyboardLayout
LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
SetWindowContextHelpId
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBeep
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
CharNextA
WindowFromPoint
SetScrollPos
gdi32
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
GetStretchBltMode
GetPolyFillMode
CreateEllipticRgn
CreateCompatibleBitmap
CreateDCA
CreateBitmap
CreatePatternBrush
PathToRegion
SelectObject
CreatePen
PatBlt
EndPath
CombineRgn
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
FrameRgn
OffsetRgn
GetTextMetricsA
LineTo
MoveToEx
SaveDC
CreateRectRgn
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
FillRgn
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
GetMapMode
SetBkMode
TextOutA
TranslateCharsetInfo
CreateFontA
SetBkColor
CreateRectRgnIndirect
CreateDIBSection
SetPixel
ExtCreateRegion
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
CreateCompatibleDC
ScaleViewportExtEx
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
SetDIBitsToDevice
RestoreDC
GetDeviceCaps
StretchBlt
SetTextColor
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
ChooseColorA
advapi32
RegCreateKeyExA
RegQueryValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
DragQueryFileA
DragAcceptFiles
DragFinish
Shell_NotifyIconA
SHGetSpecialFolderPathA
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
OleInitialize
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
CoCreateInstance
OleRun
oleaut32
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElement
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
OleCreatePictureIndirect
OleCreateFontIndirect
UnRegisterTypeLi
SysFreeString
SafeArrayGetElemsize
SysAllocStringByteLen
comctl32
ImageList_Read
ImageList_Duplicate
_TrackMouseEvent
ord17
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_DragMove
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
oledlg
ord8
wldap32
ord29
wininet
InternetOpenA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
9.3MB
Virtual Size
9.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
168KB
Virtual Size
651KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=6, id=12, version=7291,
count=45, id=19, version=8022,
count=44, id=14, version=7299,
count=36, id=19, version=8034,
count=779, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=241, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=18, version=8444,
count=166, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=156, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=144, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=128, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
基础版本使用说明(+自定义)/0-【推荐】使用成品包无需设置！.txt
- SHA256 6f6b70f80a0c38ce9df8b1a97e9b6d97c0834c7f65c8065f21fd6e69a20e8a0e
- MD5 ace429ce6a0cbf532db2335d26b0c987
- SHA1 e757cad835ef753ae83105a53d846edde0a3a2cf
- SHA512 cfb7984bdf9454e8d315a596cffa3d3bf0c1a116412f0da381d6f953437cac993aa2df4b0b3e7f8e301642a7ba74a9bb14cd308614a7fe8b486bf807e3049e71
- TLSH T190D01248349701C907992896D9235A4BD55CB3A3F42AE1D679E05A11D8B4CB13B6921D
- MD5 SHA1 SHA512 TLSH
基础版本使用说明(+自定义)/0-成品增值包使用说明.png
- SHA256 a87a0a0eeb576b62ddfeb46b2b9d845be1d7e982e618ecb6598d33ce08d1285d
- MD5 261f4ed13decc6066d674a775edb9351
- SHA1 7ddc634ac9fa74a09aaa5469f4065220b9b2e05c
- SHA512 183f109bf15ded4941c840cbcc80928790b1cd45102221b65e0d2d2a323635d133c35367c5168d1514d3055f8b7459bc2f74b291f8dc76fd5b693e54ac5af278
- SSDEEP 12288:iN3K4ovxRfupBNFwf0NKe70mNnkj4FRUv3RsiK68H127gmDvw2BJNmy6v6gD:iN3K4kfurNFZNKeYYnkEFy2iK688sm5k
- TLSH T10FF4332BD0DDE649EE8B052C733201647F613B7323BA6CAC39667E57811276D1248ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
基础版本使用说明(+自定义)/1-图文识别版教程（推荐）.pdf
- SHA256 420eb24d64fc12e73e92082ffffeb818b5ff30f930851a8464a8da8f89f634b0
- MD5 2dc43e367a6fe15a9792ddb15ed10844
- SHA1 edce6a282dc0b2147a4d9688a2204d02d2ac0007
- SHA512 ccdbb219f19c1b2926fb27d61a1a2c1dfd089f84d0d5935e6d43dd234b22d0f075ead6bb82735166b1a46002b741cbe2e5c162a7154f17dc3e72aacd549eb665
- SSDEEP 12288:o2r0J9M86y7JQeyTwzP0DMUML6QEHDcvtUt16:lIyytQrhK6rDctUt16
- TLSH T1FAB41207170189C49B2E83E1FF171EA5B9C5692D71D106FE10784DAB7EE8FB2AC6920D
- MD5 SHA1 SHA512 SSDEEP TLSH
基础版本使用说明(+自定义)/2-时间循环-保姆级使用说明.pdf
- SHA256 604401b63342ac58d580a0b4ebf7f2d90c0ba65436a45c5c64ba95ed605c61a5
- MD5 297bba4520e9752a9dee471daa878220
- SHA1 a04890b3175acf1d3dcfc675001c0fa2ce327cce
- SHA512 66886329ccd96d8f161d5068715e97249d16becccde5495d6ee3e9448225bbc6e4f304381acc2ca017aad9b0cde2c0b281c766ffe9637c0f31b4fe19f23bd989
- SSDEEP 24576:Eumey+QDk7Q7uGxe31hpIW5OTWFdbS9NY8cAJK:Eumeynk7Q7uj31bIW5OudG88cQK
- TLSH T1A4352287E900CA95FE1C57B4F9172E2D471C3388B9817BA504684FC6BE80FB4AD9E16D
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file https://5za1205499wm.vicp.fun/CF/1/CFG.html
基础版本使用说明(+自定义)/其他说明.txt
- SHA256 6cf5984467f6db98a48ee0a15062352ff417f0bda2d4040085f44362ef41918d
- MD5 56ae0e81fa2f675fee8477371b06dd90
- SHA1 39567ed4122adf4956972cf45c246166938b2dcf
- SHA512 837df4b70da195f32fd14b9f5a9c884b8d6ceb1ea6cc6a5262e9995e3cab266fd77e2d52f70996a2c489229fb02f6ce9a4888bf61ce972752eba19b40d81e67b
- TLSH T1A60128D7ECB7C042A54EC2E094323139D64701B78CA7F4E9F45034E1499026795CE75C
- MD5 SHA1 SHA512 TLSH
基础版本使用说明(+自定义)/视频版使用说明/1-识图新版大厅.mp4
- SHA256 f4075933f1d4bdf04dd70add46432d9ea22d03d345bd8b26818c4f3821da30fe
- MD5 7cec959773a782eeb89863f31a901a26
- SHA1 3231e87063318972824c474f7515ccde302414df
- SHA512 ac9145436658ac37f26a17c4425ad03adb464ac4ee1268972a9498099292493713e479bd5dee42f5abecfe07c014deccdad4bfd0bdb940ce83dceb53b67e1ab8
- SSDEEP 98304:IwtJ2hBvTVb5k/fOWQ1JZbBvGgZ1D+j0vnt3ijV2Ju/WdQhM7nywu4:IIJEgC7/sKtyy7ehMTvf
- TLSH T13046334C5F7AA1EBF939933CAE3BE3157705E5811B56E3636B423014F8746A8CDC2982
- MD5 SHA1 SHA512 SSDEEP TLSH
基础版本使用说明(+自定义)/视频版使用说明/1-识图旧版房间.mp4
- SHA256 fa2719b180763b12663c950bb72d830b0743cfe2cfc18e83fd8eabc7063bcc5c
- MD5 060317e13c3905661fd145c03cddf905
- SHA1 9b1e3ddc84a857a69a9b30d6d7bf7f854e7bdb39
- SHA512 d47ec624b2f74889467149ae37dfaa581168994c9c1b06e924469ed0590530a2fb504848fbd3b408bef611817ed512665275926aaec941cde65b7a89d8577f20
- SSDEEP 98304:hAdWTKczGGUZ5TTsFALGVSXXePVeQo10UhObmqK3C8LEWRS:SKTQ5cFDS+PIKuSK3LL4
- TLSH T1B82633605EF24CD7D26B463D2CB7C322375894536B7ADB0393723186FAB952AF5C8242
- MD5 SHA1 SHA512 SSDEEP TLSH
基础版本使用说明(+自定义)/视频版使用说明/2-时间新版大厅.mp4
- SHA256 453b7bcf7ad2bf307a5320777921c5239778c8dac69f98e56faf52b3af4b2ce4
- MD5 1628d9d378ab8e4486e788483fa89172
- SHA1 a9ce55c763d2b5d8eb15bcfbb76dc8dda8303589
- SHA512 544dfe935cc1ccea1eb2f3e91b988638b042120c11375fc8f12f3813b8376bbe0218211690860acd1aeb2bdc1e3c66c27c01561dd1516175fa8a0be3f0cfa273
- SSDEEP 98304:iZ4+gvTR5Zg33ZaOpnXVIDktVl/21Q64jVK6e0Q9Q9WQ8RpqkmWkkMB/K5:iZL6TQ3hnlI6lO1Q64jGScQIMkmWiB/k
- TLSH T14C563307DEF26CD7C521113D5EBBC3093BA865131799D3921F36B289F8BAA4AF8D0506
- MD5 SHA1 SHA512 SSDEEP TLSH
基础版本使用说明(+自定义)/视频版使用说明/2-时间旧版房间.mp4
- SHA256 aef37a8ddd1f9d703eecb29c90c9bf489185e909cf7c91b8090abf7befc95d0f
- MD5 bbebda4c8cd629097eafb2cb773e8ffd
- SHA1 4c59b764957fa96e2e02da90873294281116f6b9
- SHA512 401e205a82d812d56f46974f3ea0a396db9aa5b59f6dac36e545b3abdf425a05a39efddb28923c596f88c5c6d0ea999392323122c81948efd596fb16424066ef
- SSDEEP 98304:F17z8z/Anc0eiQUUrkVskSqm627/1C/er+BKtTIRgcpuSJZiVLXbU6dEq4:z/8z/AckZsk6Rs/++stygcFYLXmq4
- TLSH T1CE5623156EF04CDBC026893C2EBBC72C3765A913A728D703832379CDF979A09E5DA594
- MD5 SHA1 SHA512 SSDEEP TLSH
基础版本使用说明(+自定义)/视频版使用说明/视频看不了点我.txt
- SHA256 09b632d4c505f29bc034d840e2740cce5f6794376f62aa2e903e138e63d78ca2
- MD5 977b6944f964ecbb7b58aacfbd22e6b9
- SHA1 f836816bfa2977e3992e015abb202994667e1492
- SHA512 41dfe0a8faeb32950229614ff8bc9d11c4e80a75bfb353721a56f6548dac8b13ab589850e01c411de3bf3f7d7093d88cb0b01f01fd8a3e1a788e5f7d25c5ef70
- MD5 SHA1 SHA512
安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk
- SHA256 c2b6fcd7d2cb860db38cb6f75e0c030f6036e53f1f63e3537ebabeeddc308a8b
- MD5 fbc91e6f5ff919faefc82b43a7768406
- SHA1 84927c04c36f6db7a9a5a1989e201ced8dc91bc0
- SHA512 b78836a97804e30b389dc80f0a96b054b0ac260e00a36a015a7d0e1a76cadef01777baabda7a2b2613af7124cb7977ec86d5ea5d47c07875926f95dbaea05c48
- SSDEEP 12288:jfpfKoElyGq04x2OkwjHQZfizn2BXhSfalYQ5p5IWJUYXBxHi:jfpfMlyGq0Y2J7lYyUYXq
- TLSH T15ED4E16BE2DEA26AD933E23591751C47C849009C590CFE3B3EB1D55C8FDBC44968AF88
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
021262bfd12c87e522e34470ef21a9f498073d2b
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
webapp.onegoyouxiyonghuzhongxin
cn.woobx.webapp.WebAppMainActivity
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
cn.woobx.webapp.WebAppMainActivity
android.intent.action.MAIN
挂机特别说明.jpg
- SHA256 dcfa4e4c06ded83c0225155eb6b0801fa97de9ce952b587cbdb3dd592ef6185c
- MD5 9f36c146308d5a78b83c94b26a16b781
- SHA1 066036ffe2b3c223ceba268dd559a3301fe08a76
- SHA512 dde3972f18b78661cdd533e56891297abe331289ef97a68afca39e9bfc7b21c1bc941d3baa8d3e3b96e2243031a66648aab7815fdab13736db98ad9fe1adee02
- SSDEEP 6144:Cprbg5wNkVM3jxonj2WLqvSmk9c5zfEg8sFEljcD+zsim:ClbgeX3jx2BmlpF8suljcWsim
- TLSH T18444F11357DBDD64C7BD507530CBDA59A08201AA2A6FD17CE997CDE8A8D8FA9B100F40
- MD5 SHA1 SHA512 SSDEEP TLSH
更新日志.html
- SHA256 7372f96cdbed9aabd44125103bb5a176888967fe9860fa9609a46ca022a482e8
- MD5 173b9eff587538ff56ee2f501420e05e
- SHA1 72e9b8d67413a5185831e1bbe358f00824ff4b91
- SHA512 f4f526e682518ed53ef575950246cc82f269c434c2803e95d781c6b84034ba4371fa839862125ef8971465d82a8f2ac8bfbc7e557f2422848ae24f7d98efa326
- SSDEEP 192:j9aQQTTKXk3+bV2b9PYL2rD0aEaW3MGwG0mPEwIzpdyjyC6sfBL4cZx9X:j9J+W8GwG0mcwIddgPfBrX
- TLSH T156B21E29D59140621077E3F59BB24B4AFEE28057C207862A7BEC63874FF2D68CC53E95
- MD5 SHA1 SHA512 SSDEEP TLSH