Pack Full fps (1)[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Pack Full fps (1).zip
Size

95.1MB
MD5

e600f12ad85f43614ca152d564fcb92f
SHA1

86f910b05dcf2c072a51d7a9b0b68424e6927b6a
SHA256

2817b7733239db0a11ea2e10e97f2ad0649af895826ba86ca525e3876565bf39
SHA512

5e7d6955dde068f7f334e294fc774831ca91b36e1302903c6b50b8e0b15666b658be066d5362dffe01cc574f76917c77292c9fef6f64106c4fdb6a67be1b7d10
SSDEEP

1572864:QAxDhSq/COZoEBWMCEpS33Q5a4Yc3afvQZC/ufKis4pS3rFTmgmJs0MbpYwTS7:QAxVXKOZvBWicg5Oc3VZCGXc5aJAdYwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 21 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pack Full fps/10AppsManager/10AppsManager.exe
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.Client.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.CSharp.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.Posix.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/MsgPack.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Configuration.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Core.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Data.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Drawing.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.EnterpriseServices.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Runtime.Serialization.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.ServiceModel.Internals.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.Linq.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/mscorlib.dll
unpack001/Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/ref/CitizenFX.Core.Client.dll
unpack001/Pack Full fps/Executar apos ligar o pc/Cleano.exe
unpack001/Pack Full fps/Limpa memoria ram/memreduct-3.4-setup.exe

Files

Pack Full fps (1).zip
.zip
Pack Full fps/10AppsManager/10AppsManager.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/10AppsManager/LEIA.txt
Pack Full fps/Citizen/citizen/.gitignore
Pack Full fps/Citizen/citizen/VisualElements/VisualElements_150.png
.png
Pack Full fps/Citizen/citizen/VisualElements/VisualElements_70.png
.png
Pack Full fps/Citizen/citizen/bloodfx.dat
Pack Full fps/Citizen/citizen/citizen_common.rpf
Pack Full fps/Citizen/citizen/citizen_platform.rpf
Pack Full fps/Citizen/citizen/clr2/cfg/mono/4.5/machine.config
.xml
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.Client.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.dll
.dll windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.pdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.xml
.xml
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.CSharp.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.CSharp.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.Posix.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/MsgPack.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/MsgPack.xml
.xml
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Collections.Immutable.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

00:cf:2c:ae:fc:fe:fe:84:33:2d:46:7f:fc:49:4a:06:37:45:82:46:4b:71:6a:82:48:24:8b:4e:1a:33:ff:61
Signer

Actual PE Digest

00:cf:2c:ae:fc:fe:fe:84:33:2d:46:7f:fc:49:4a:06:37:45:82:46:4b:71:6a:82:48:24:8b:4e:1a:33:ff:61

Digest Algorithm

sha256

PE Digest Matches

true

27:65:e1:9e:a2:10:7f:36:c6:f5:ef:04:26:4e:78:39:02:72:da:e2
Signer

Actual PE Digest

27:65:e1:9e:a2:10:7f:36:c6:f5:ef:04:26:4e:78:39:02:72:da:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Configuration.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Core.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Core.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Data.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Drawing.dll
.dll windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Drawing.pdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.EnterpriseServices.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Numerics.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

20:0f:f0:f1:3e:4b:ad:e3:c5:f5:6b:f5:fc:2a:99:62:de:6b:a2:60
Signer

Actual PE Digest

20:0f:f0:f1:3e:4b:ad:e3:c5:f5:6b:f5:fc:2a:99:62:de:6b:a2:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Reflection.Metadata.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:d4:e6:7c:62:aa:bf:7c:99:a4:a4:0d:3a:85:01:d8:c6:b0:ce:32:97:17:aa:02:e1:cd:21:5d:27:e1:97:bf
Signer

Actual PE Digest

d0:d4:e6:7c:62:aa:bf:7c:99:a4:a4:0d:3a:85:01:d8:c6:b0:ce:32:97:17:aa:02:e1:cd:21:5d:27:e1:97:bf

Digest Algorithm

sha256

PE Digest Matches

true

26:33:9b:16:dc:12:47:f9:a4:c4:fd:8b:19:df:f3:94:80:89:47:53
Signer

Actual PE Digest

26:33:9b:16:dc:12:47:f9:a4:c4:fd:8b:19:df:f3:94:80:89:47:53

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Runtime.Serialization.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 464KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Runtime.Serialization.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.ServiceModel.Internals.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Web.dll
.dll .js windows:4 windows x86
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.Linq.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.Linq.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/mscorlib.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/mscorlib.dll.mdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/ref/CitizenFX.Core.Client.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/ref/CitizenFX.Core.Client.pdb
Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/ref/CitizenFX.Core.Client.xml
.xml
Pack Full fps/Citizen/citizen/common-sp/data/gameconfig.xml
.xml
Pack Full fps/Citizen/citizen/common/data/cloudkeyframes.xml
.xml
Pack Full fps/Citizen/citizen/common/data/cloudkeyframes.xml.bak
.xml
Pack Full fps/Citizen/citizen/common/data/clouds.xml
.xml
Pack Full fps/Citizen/citizen/common/data/cpqsmix_ssaosettings.xml
.xml
Pack Full fps/Citizen/citizen/common/data/dlclist.xml
.xml
Pack Full fps/Citizen/citizen/common/data/effects/bloodfx.dat
Pack Full fps/Citizen/citizen/common/data/effects/decals.dat
Pack Full fps/Citizen/citizen/common/data/effects/decals_cs.dat
Pack Full fps/Citizen/citizen/common/data/effects/entityfx.dat
Pack Full fps/Citizen/citizen/common/data/effects/explosionfx.dat
Pack Full fps/Citizen/citizen/common/data/effects/liquidfx.dat
Pack Full fps/Citizen/citizen/common/data/effects/wheelfx.dat
Pack Full fps/Citizen/citizen/common/data/fragment.xml
.xml
Pack Full fps/Citizen/citizen/common/data/gameconfig.xml
.xml
Pack Full fps/Citizen/citizen/common/data/grasslodsettings.xml
.xml
Pack Full fps/Citizen/citizen/common/data/grassshadowlodsettings.xml
.xml
Pack Full fps/Citizen/citizen/common/data/gta5_cache_y.dat
Pack Full fps/Citizen/citizen/common/data/hbaosettings.xml
.xml
Pack Full fps/Citizen/citizen/common/data/levels/gta5/cloudkeyframes.xml
.xml
Pack Full fps/Citizen/citizen/common/data/levels/gta5/water.xml
.xml
Pack Full fps/Citizen/citizen/common/data/levels/gta5/weather.xml
.xml
Pack Full fps/Citizen/citizen/common/data/levels/gta5/weather.xml.bak
.xml
Pack Full fps/Citizen/citizen/common/data/materials/procedural.meta
Pack Full fps/Citizen/citizen/common/data/metadata/explosion.ymt
.xml
Pack Full fps/Citizen/citizen/common/data/tcinstbox_types.meta
Pack Full fps/Citizen/citizen/common/data/terraintessellation.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/timecycle_mods_1.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/timecycle_mods_2.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/timecycle_mods_3.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/timecycle_mods_4.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_blizzard.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_clear.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_clearing.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_clouds.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_extrasunny.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_foggy.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_neutral.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_overcast.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_rain.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_smog.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_snow.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_snowlight.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_thunder.xml
.xml
Pack Full fps/Citizen/citizen/common/data/timecycle/w_xmas.xml
.xml
Pack Full fps/Citizen/citizen/common/data/ui/pausemenu.xml
.xml
Pack Full fps/Citizen/citizen/common/data/visualsettings.dat
Pack Full fps/Citizen/citizen/common/shaders/db/trees_lod.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_foam.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_fountain.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_mesh.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_poolenv.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_river.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_rivershallow.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_shallow.sps
Pack Full fps/Citizen/citizen/common/shaders/db/water_terrainfoam.sps
Pack Full fps/Citizen/citizen/consolefont.ttf
Pack Full fps/Citizen/citizen/crash-data.json
Pack Full fps/Citizen/citizen/dlc/dlc_mpBikerCRC/content.xml
.xml
Pack Full fps/Citizen/citizen/font_lib_cfx.gfx
Pack Full fps/Citizen/citizen/game_compliance.bin
Pack Full fps/Citizen/citizen/hints.dat
Pack Full fps/Citizen/citizen/load_profile.json
Pack Full fps/Citizen/citizen/locales/ar/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/ar/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/ca/LC_MESSAGES/cfx.mo
.eml
Pack Full fps/Citizen/citizen/locales/ca/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/cfx.pot
Pack Full fps/Citizen/citizen/locales/cs/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/cs/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/de/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/de/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/es/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/es/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/fi/LC_MESSAGES/cfx.mo
.eml
Pack Full fps/Citizen/citizen/locales/fi/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/fil/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/fil/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/fr/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/fr/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/he/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/he/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/hu/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/hu/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/it/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/it/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/ko/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/ko/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/nb_NO/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/nb_NO/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/nl/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/nl/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/pl/LC_MESSAGES/cfx.mo
.eml
Pack Full fps/Citizen/citizen/locales/pl/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/pt/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/pt/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/ru/LC_MESSAGES/cfx.mo
.eml
Pack Full fps/Citizen/citizen/locales/ru/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/sv/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/sv/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/tr/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/tr/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/vi/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/vi/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/zh_Hans/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/zh_Hans/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/locales/zh_Hant/LC_MESSAGES/cfx.mo
Pack Full fps/Citizen/citizen/locales/zh_Hant/LC_MESSAGES/cfx.po
Pack Full fps/Citizen/citizen/mensch.ttf
Pack Full fps/Citizen/citizen/natives_blob.dat
Pack Full fps/Citizen/citizen/natives_blob_372.dat
Pack Full fps/Citizen/citizen/plataform/fxdecal.ytd
Pack Full fps/Citizen/citizen/platform-2060/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform-2189/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform-2372/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform-2545/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform-2612/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform-2699/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform/audio/config/categories.dat22.rel
Pack Full fps/Citizen/citizen/platform/data/control/default.meta
.xml
Pack Full fps/Citizen/citizen/platform/data/control/keyboard layout/da.meta
.xml
Pack Full fps/Citizen/citizen/platform/data/control/settings.meta
.xml
Pack Full fps/Citizen/citizen/platform/data/metadata/explosion.ymt
.xml
Pack Full fps/Citizen/citizen/platform/levels/gta5/_hills/cs_xref.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/recreational/v_sports.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_bins.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_construction.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_fences.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_rubbish.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_seating_tables.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_signs.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_storage.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/roadside/v_traffic_lights.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/vegetation/v_cacti.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/vegetation/v_crops.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/vegetation/v_fanpalm.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/vegetation/v_potted.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/vegetation/v_rocks.rpf
Pack Full fps/Citizen/citizen/platform/levels/gta5/props/vegetation/v_trees.rpf
Pack Full fps/Citizen/citizen/release.txt
Pack Full fps/Citizen/citizen/resources/background_main.jpg
Pack Full fps/Citizen/citizen/resources/base_color.png
.png
Pack Full fps/Citizen/citizen/resources/citizen_cursor.png
.png
Pack Full fps/Citizen/citizen/resources/icons/animation.png
.png
Pack Full fps/Citizen/citizen/resources/icons/bounds.png
.png
Pack Full fps/Citizen/citizen/resources/icons/class.png
.png
Pack Full fps/Citizen/citizen/resources/icons/cloth.png
.png
Pack Full fps/Citizen/citizen/resources/icons/cube.png
.png
Pack Full fps/Citizen/citizen/resources/icons/dict.png
.png
Pack Full fps/Citizen/citizen/resources/icons/effect.png
.png
Pack Full fps/Citizen/citizen/resources/icons/gfx.png
.png
Pack Full fps/Citizen/citizen/resources/icons/image.png
.png
Pack Full fps/Citizen/citizen/resources/icons/instance.png
.png
Pack Full fps/Citizen/citizen/resources/icons/modelthreed.png
.png
Pack Full fps/Citizen/citizen/resources/icons/move.png
.png
Pack Full fps/Citizen/citizen/resources/icons/navigationpath.png
.png
Pack Full fps/Citizen/citizen/resources/icons/node.png
.png
Pack Full fps/Citizen/citizen/resources/icons/part.png
.png
Pack Full fps/Citizen/citizen/resources/icons/pose.png
.png
Pack Full fps/Citizen/citizen/resources/icons/recording.png
.png
Pack Full fps/Citizen/citizen/resources/icons/rpf.png
.png
Pack Full fps/Citizen/citizen/resources/icons/script.png
.png
Pack Full fps/Citizen/citizen/resources/icons/xmlfile.png
.png
Pack Full fps/Citizen/citizen/ros/font-awesome.css
Pack Full fps/Citizen/citizen/ros/fontawesome-webfont.ttf
Pack Full fps/Citizen/citizen/ros/launcher_online_config.xml
Pack Full fps/Citizen/citizen/ros/legacy_titles.json
Pack Full fps/Citizen/citizen/ros/logotype.ttf
Pack Full fps/Citizen/citizen/ros/recognised_titles.json
Pack Full fps/Citizen/citizen/ros/roboto.ttf
Pack Full fps/Citizen/citizen/ros/ros.crt
Pack Full fps/Citizen/citizen/ros/ros.key
Pack Full fps/Citizen/citizen/ros/scui.html
.html .js
Pack Full fps/Citizen/citizen/ros/splash.png
.png
Pack Full fps/Citizen/citizen/ros/title_metadata.json
Pack Full fps/Citizen/citizen/ros/versioning.xml
.xml
Pack Full fps/Citizen/citizen/scripting/.gitignore
Pack Full fps/Citizen/citizen/scripting/lua/.gitignore
Pack Full fps/Citizen/citizen/scripting/lua/MessagePack.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/deferred.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/graph.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/json.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/natives_0193D0AF.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/natives_0193D0AF.zip
.zip
Pack Full fps/Citizen/citizen/scripting/lua/natives_21E43A33.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/natives_21E43A33.zip
.zip
Pack Full fps/Citizen/citizen/scripting/lua/natives_cfx.lua
Pack Full fps/Citizen/citizen/scripting/lua/natives_global.lua
Pack Full fps/Citizen/citizen/scripting/lua/natives_loader.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/natives_rdr3.lua
Pack Full fps/Citizen/citizen/scripting/lua/natives_server.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/natives_server.zip
.zip
Pack Full fps/Citizen/citizen/scripting/lua/natives_universal.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/natives_universal.zip
.zip
Pack Full fps/Citizen/citizen/scripting/lua/ny_universal.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/ny_universal.zip
.zip
Pack Full fps/Citizen/citizen/scripting/lua/rdr3_universal.lua
.js
Pack Full fps/Citizen/citizen/scripting/lua/rdr3_universal.zip
.zip
Pack Full fps/Citizen/citizen/scripting/lua/scheduler.lua
.js
Pack Full fps/Citizen/citizen/scripting/resource_init.lua
.js
Pack Full fps/Citizen/citizen/scripting/rpc_natives.json
Pack Full fps/Citizen/citizen/scripting/v8/.gitattributes
Pack Full fps/Citizen/citizen/scripting/v8/.gitignore
Pack Full fps/Citizen/citizen/scripting/v8/9.3/icudtl.dat
Pack Full fps/Citizen/citizen/scripting/v8/9.3/icudtl_extra.dat
Pack Full fps/Citizen/citizen/scripting/v8/9.3/snapshot_blob.bin
Pack Full fps/Citizen/citizen/scripting/v8/console.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/eventemitter2.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/icudtl.dat
Pack Full fps/Citizen/citizen/scripting/v8/index.d.ts
.js
Pack Full fps/Citizen/citizen/scripting/v8/main.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/msgpack.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/natives_0193D0AF.d.ts
Pack Full fps/Citizen/citizen/scripting/v8/natives_0193D0AF.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/natives_21E43A33.d.ts
Pack Full fps/Citizen/citizen/scripting/v8/natives_21E43A33.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/natives_blob.bin
.js
Pack Full fps/Citizen/citizen/scripting/v8/natives_server.d.ts
.vbs
Pack Full fps/Citizen/citizen/scripting/v8/natives_server.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/natives_universal.d.ts
Pack Full fps/Citizen/citizen/scripting/v8/natives_universal.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/ny_universal.d.ts
.vbs
Pack Full fps/Citizen/citizen/scripting/v8/ny_universal.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/rdr3_universal.d.ts
.vbs
Pack Full fps/Citizen/citizen/scripting/v8/rdr3_universal.js
.js
Pack Full fps/Citizen/citizen/scripting/v8/snapshot_blob.bin
Pack Full fps/Citizen/citizen/scripting/v8/timer.js
.js
Pack Full fps/Citizen/citizen/scripting/v8next/icudtl.dat
Pack Full fps/Citizen/citizen/scripting/v8next/snapshot_blob.bin
Pack Full fps/Citizen/citizen/shaderz/im3d.fx
Pack Full fps/Citizen/citizen/shaderz/im3d.fxh
Pack Full fps/Citizen/citizen/shaderz/makeshader.cmd
.cmd .vbs
Pack Full fps/Citizen/citizen/shaderz/makeshaders.cmd
Pack Full fps/Citizen/citizen/shaderz/outlinez.fx
Pack Full fps/Citizen/citizen/shaderz/outlinez_firm.fx
Pack Full fps/Citizen/citizen/shaderz/outlinez_mask.fx
Pack Full fps/Citizen/citizen/shaderz/preloadcfx.list
Pack Full fps/Citizen/citizen/shaderz/win32_40_final/im3d.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_final/outlinez.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_final/outlinez_firm.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_final/outlinez_mask.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_lq_final/im3d.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_lq_final/outlinez.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_lq_final/outlinez_firm.fxc
Pack Full fps/Citizen/citizen/shaderz/win32_40_lq_final/outlinez_mask.fxc
Pack Full fps/Citizen/citizen/ui-big.zip
.zip
Pack Full fps/Citizen/citizen/ui.zip
.zip .js
Pack Full fps/Citizen/citizen/ui/.commit
Pack Full fps/Citizen/citizen/ui/.gitignore
Pack Full fps/Citizen/citizen/ui/app/3rdpartylicenses.txt
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-da.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-de.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-en.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-fr.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-it.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-nl.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-pl.json
Pack Full fps/Citizen/citizen/ui/app/assets/languages/locale-pt.json
Pack Full fps/Citizen/citizen/ui/app/bg-night.jpg
.png
Pack Full fps/Citizen/citizen/ui/app/bg.jpg
Pack Full fps/Citizen/citizen/ui/app/favicon.ico
Pack Full fps/Citizen/citizen/ui/app/index.html
.html .js
Pack Full fps/Citizen/citizen/ui/app/main.js
.js
Pack Full fps/Citizen/citizen/ui/app/polyfills-es5.js
.js
Pack Full fps/Citizen/citizen/ui/app/polyfills.js
.js
Pack Full fps/Citizen/citizen/ui/app/roboto_light.woff
Pack Full fps/Citizen/citizen/ui/app/roboto_medium.woff
Pack Full fps/Citizen/citizen/ui/app/roboto_regular.woff
Pack Full fps/Citizen/citizen/ui/app/runtime.js
.js
Pack Full fps/Citizen/citizen/ui/app/styles.css
Pack Full fps/Citizen/citizen/ui/app/worker.f703693cd28474dcb311.js
.js
Pack Full fps/Citizen/citizen/ui/jquery.js
.js
Pack Full fps/Citizen/citizen/ui/jquery.mustache.js
.js
Pack Full fps/Citizen/citizen/ui/loadscreen/babel.min.js
.js
Pack Full fps/Citizen/citizen/ui/loadscreen/backdrop.jpg
.jpg
Pack Full fps/Citizen/citizen/ui/loadscreen/code.js
.js
Pack Full fps/Citizen/citizen/ui/loadscreen/color-scheme.min.js
.js
Pack Full fps/Citizen/citizen/ui/loadscreen/index.html
.html
Pack Full fps/Citizen/citizen/ui/loadscreen/preact.min.js
.js
Pack Full fps/Citizen/citizen/ui/loadscreen/style.css
Pack Full fps/Citizen/citizen/ui/mustache.js
.js
Pack Full fps/Citizen/citizen/ui/root.html
.html .js
Pack Full fps/Citizen/citizen/version.txt
Pack Full fps/Citizen/citizen/x64/data/metadata/explosion.ymt
.xml
Pack Full fps/Cmds/DELETAR-ARQUIVOS-TEMPORARIOS.bat
Pack Full fps/Cmds/DIMINUIR-IMPUT-LAG.bat
Pack Full fps/Cmds/DIMINUIR-LATENCIA-MONITOR.bat
Pack Full fps/Cmds/DIMINUIR-LATENCIA.bat
Pack Full fps/Cmds/LIMPEZA-COMPLETA.bat
Pack Full fps/Cmds/Limpador de Cache.bat
Pack Full fps/Cmds/OTIMIZAR-INTERNET.cmd
Pack Full fps/Cmds/OTIMIZAR-MEMORIA.bat
Pack Full fps/Desabilitar Serviços/Desativar Anti Malware.reg
Pack Full fps/Desabilitar Serviços/Desativar Bluetooth.reg
Pack Full fps/Desabilitar Serviços/Desativar Diagnóstico e Telemetria.reg
Pack Full fps/Desabilitar Serviços/Desativar Gerenciador de Mapas.reg
Pack Full fps/Desabilitar Serviços/Desativar Printer Serviço.reg
Pack Full fps/Desabilitar Serviços/Desativar Serviços Extras Desnecessários.reg
Pack Full fps/Desabilitar Serviços/Desativar Serviços Xbox PARA WINDOWS 10.reg
Pack Full fps/Destravamento de fps/comando.txt
Pack Full fps/Executar apos ligar o pc/+FPS.cmd
Pack Full fps/Executar apos ligar o pc/Cleano.exe
.exe windows:5 windows x86

f91879cabbc32923eef532ddb43e9089

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetPropW

gdi32

GetClipBox

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW

advapi32

RegCreateKeyExW

shell32

SHFileOperationW

comctl32

InitCommonControlsEx

shlwapi

StrCpyW

oledlg

OleUIBusyW

ole32

OleUninitialize

oleaut32

SysStringLen

wininet

FindCloseUrlCache

oleacc

LresultFromObject

Sections

.text
Size: 173KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pack Full fps/Executar apos ligar o pc/ClearTemp.bat
Pack Full fps/Executar apos ligar o pc/LIMPAR PC.bat
Pack Full fps/Executar apos ligar o pc/LIMPEZA 01.BAT
Pack Full fps/Executar apos ligar o pc/LIMPEZA 02.BAT
Pack Full fps/Executar apos ligar o pc/LIMPEZA TOTAL DO SISTEMA.bat
.bat .vbs
Pack Full fps/Executar apos ligar o pc/Limpaçao de HDD.bat
Pack Full fps/Greditos JN XP NO YT.txt
Pack Full fps/Limpa memoria ram/MemClean.exe
.exe windows:4 windows x86

0c40996f6e1e5f2a82b51e9950881bf1

Code Sign

89:ed:ca:e4:ab:32:d6:45:e3:38:84:49:9f:cb:a7:f4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/03/2020, 00:00

Not After

31/05/2023, 23:59

Subject

CN=Koshy John,O=Koshy John,POSTALCODE=98052,STREET=12311 178th Pl NE,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:4f:70:e7:f1:56:d7:bf:c6:5e:26:7f:86:03:ae:8c:c0:99:83:fd
Signer

Actual PE Digest

33:4f:70:e7:f1:56:d7:bf:c6:5e:26:7f:86:03:ae:8c:c0:99:83:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
MultiByteToWideChar
WideCharToMultiByte
CompareFileTime
FindClose
FindFirstFileW
GetFileAttributesW
GetLastError
CreateDirectoryW
ExpandEnvironmentStringsW
lstrlenA
WriteFile
GetStdHandle
lstrcmpW
GetSystemTimeAsFileTime
lstrlenW
RemoveDirectoryW
FindNextFileW
DeleteFileW
VirtualAlloc
VirtualFree
GetACP
GetOEMCP
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTempPathW
SetEnvironmentVariableW
SetCurrentDirectoryW
CloseHandle
lstrcmpiW
GetModuleFileNameW
CreateThread
GetVersionExW
CreateFileW
GetDriveTypeW
GetModuleHandleW
GetProcAddress
LoadLibraryA
MulDiv
GetSystemDirectoryW
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
GetModuleHandleA
WaitForSingleObject
GetExitCodeThread
GetLocalTime
SystemTimeToFileTime
GetCommandLineW
SetFileAttributesW
GetStartupInfoA

user32

CharUpperW
GetWindowLongW
wsprintfW
wsprintfA
MessageBoxA
GetKeyState
SendMessageW
wvsprintfW
KillTimer
GetSystemMenu
EnableMenuItem
SetTimer
GetWindowTextW
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
MessageBeep
DialogBoxIndirectParamW
GetWindow
GetParent
GetClientRect
ClientToScreen
GetWindowTextLengthW
SetWindowPos
GetDC
DrawTextW
ReleaseDC
ShowWindow
GetWindowRect
ScreenToClient
LoadIconW
LoadImageW
SetWindowLongW
SetDlgItemTextW
SystemParametersInfoW
GetSystemMetrics
GetDlgItem
SetFocus
EndDialog
SetWindowTextW

gdi32

DeleteObject
SelectObject
GetDeviceCaps
GetObjectW
CreateFontIndirectW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFileInfoW

ole32

CoCreateInstance
CoInitialize

oleaut32

SysAllocString
VariantClear

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
_beginthreadex
_CxxThrowException
_purecall
memset
_wcsnicmp
malloc
free
_wtol
memcpy
memmove
memcmp
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_controlfp

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Pack Full fps/Limpa memoria ram/memreduct-3.4-setup.exe
.exe windows:4 windows x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Pack Full fps/Plano de energia/Amit_v3_Idle_Enabled.pow
Pack Full fps/Plano de energia/Importar Plano de Energia.bat
Pack Full fps/Plano de energia/Opções de Energia.lnk
.lnk
Pack Full fps/Regedits/Aumentar Capacidade de Resposta.reg
Pack Full fps/Regedits/Aumente FPS nos Jogos.reg
Pack Full fps/Regedits/Baixa-Média Otimização.reg
Pack Full fps/Regedits/Boost FPS em jogos.reg
Pack Full fps/Regedits/Desativar DVR de jogo.reg
Pack Full fps/Regedits/Fullscreen Fix.reg
Pack Full fps/Regedits/GPU Tweaks.reg
Pack Full fps/Regedits/GPU Tweaks1.reg
Pack Full fps/Regedits/Monitore Tolerância a Latência.reg
Pack Full fps/Regedits/Média-Alta Otimização.reg
Pack Full fps/Regedits/Otimização PC Baixo.reg
Pack Full fps/Regedits/Otimização de Jogos.reg
Pack Full fps/Regedits/Prioridade CPU.reg
Pack Full fps/Regedits/Prioridade CPU2.reg
Pack Full fps/Resoluçao/Resoluçoes.txt
Pack Full fps/gta5 settings/Settings para pc fraco 4gb ram!!!.rar
.rar
Pack Full fps/gta5 settings/settings mine.rar
.rar

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 135KB - Virtual size: 135KB

.sdata Size: 512B - Virtual size: 312B

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rsrc Size: 1KB - Virtual size: 1KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 27KB - Virtual size: 27KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.sdata Size: 97KB - Virtual size: 96KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 382KB - Virtual size: 381KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8Certificate

Extended Key Usages

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

.text
Size: 135KB - Virtual size: 135KB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3.3MB - Virtual size: 3.3MB

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.2MB - Virtual size: 1.2MB

.sdata
Size: 97KB - Virtual size: 96KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 382KB - Virtual size: 381KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

00:cf:2c:ae:fc:fe:fe:84:33:2d:46:7f:fc:49:4a:06:37:45:82:46:4b:71:6a:82:48:24:8b:4e:1a:33:ff:61
Signer

27:65:e1:9e:a2:10:7f:36:c6:f5:ef:04:26:4e:78:39:02:72:da:e2
Signer

.text
Size: 158KB - Virtual size: 158KB

.rsrc
Size: 63KB - Virtual size: 63KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 62KB - Virtual size: 61KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 564KB - Virtual size: 564KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 804B

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate