Kiwi X[.]rar | Triage™

resource
unpack001/Kiwi X/DiscordRPC.dll
unpack001/Kiwi X/Kiwi X Bootstrapper.exe
unpack001/Kiwi X/KiwiAPI.dll
unpack001/Kiwi X/VMProtectSDK32.dll
unpack001/Kiwi X/WeAreDevs_API.dll
unpack001/Kiwi X/bin/KiwiDLL.dll
unpack001/Kiwi X/bin/exploit-main.dll
unpack001/Kiwi X/bin/rbxfpsunlocker.exe
unpack001/Kiwi X/finj.exe

Kiwi X.rar

SHA256 a693fff41c4e738cfa6b7f0e9bcf51ae341b276b81189fa698f0c0ede4a8a54e
MD5 0aa7defe6f32e1e2e024f62f72178af6
SHA1 d8d318688cbc73faac2adfd8609e110997ee2c68
SHA512 c8e0760d60495a2a9e8e7762132cdeba8ba535effbb58fdfc26fa3fb9b13404f92b7af85b54a185157b43bd5411d2d626048983f02b50cbf9610ce8aad570802
SSDEEP 393216:fvKurZfJU52CyQ59CZpTJFfLMSu3lu15+gsfNncYPpnDTYHN/HKpbQn5pRjq2Y5s:fvvZxky29C5VKY1P3YpD0VH9fFfiXc
MD5 SHA1 SHA512 SSDEEP

Kiwi X/DiscordRPC.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6a18dfc8bdc6030787b5814c76b8663dbe5b8ca469beb65a2ca9f5731fa1906f
MD5 ad463f573775c43a561ade842c41b0e8
SHA1 e70e10a18a3ae85cd1ca9be66a7bb46d99ccccd3
SHA512 0c790e70150148f4cc516cc9abcdf42a5b28a0785a61cd02ab7d59776df25eaeea287c98522d4b3271cae8bf35f98d91049c6474e81cc2745dc32a808832efe0
SSDEEP 768:Jp+8VvNVQPCNRRUzpEqrK0V2Yct83YVhEbqoL/wDIijcJRM2S0B+mhx9HS4i6E4m:nVvNGP6U1bwueoRPMVo+mhxVS4i60
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

87458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Kiwi X/Kiwi X Bootstrapper.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4d819c0df101498676f943c688edcd812161be8e82fd2a1877b5690cd3679ca9
MD5 9f07ff71a41d0707a88c679aeead9bc1
SHA1 4c003b20f81fda703383c3751ac2bdeb41a57987
SHA512 c1537f0050fd22edcbd5e47bf4c13754a9126ebe897a2be42d45e302e1dbad2da69af0487a3d2eb373184ddb1c682dbef27ddef616faf5f0c19bd566ae767d62
SSDEEP 768:TIEJncjFwUuDtL1uogdqbYBKuv4+CdQpKEBy0lGtCvvApflHp+jEJOxCjZonIrjs:TmMmKzz3GMIh5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Kiwi X/Kiwi X WPF.exe.config

SHA256 97ca967656db09e3d7046339e5c9e774c179a8d9d7bc72584eb5a8071871c2ec
MD5 1f48b296eae19f30d6abdd9e1fbc1a14
SHA1 8529346e5c926a9f4ded49320873f70ec6a7f9d0
SHA512 c69e5e0b82a27596bc5e2481d580fdd5588036eec6fc13de31e1dfdfe9a6b81882a69c43a3f3f2f145cf17a55cfb2ce4cd28c21291935fa13336a379f040a7ee
MD5 SHA1 SHA512

Kiwi X/Kiwi X.exe.config

SHA256 97ca967656db09e3d7046339e5c9e774c179a8d9d7bc72584eb5a8071871c2ec
MD5 1f48b296eae19f30d6abdd9e1fbc1a14
SHA1 8529346e5c926a9f4ded49320873f70ec6a7f9d0
SHA512 c69e5e0b82a27596bc5e2481d580fdd5588036eec6fc13de31e1dfdfe9a6b81882a69c43a3f3f2f145cf17a55cfb2ce4cd28c21291935fa13336a379f040a7ee
MD5 SHA1 SHA512

Kiwi X/KiwiAPI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8229e7d6d60f2d7adcbe6fbf43125bd6db1ddb0ed1ed292abed532c4c59d1772
MD5 8c77aea0a5007895eaf6a1bf858d1f7a
SHA1 645b7a55f9aa13ffc8ea9921117df1784311c3d9
SHA512 e69390824fcb7fe63987170b342a74950278eadae5a36538b95ba24f8d710f28adfb42dc419fd11f2aab3741aa7033624fbe73c5a78432809cc33b1c887b6a76
SSDEEP 192:vOpRRMVtiAu0K/NTWjhdyFQOwFq19U02LrURyGCO:2pqlu1/xWzjOwFs9f6rDGL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Kiwi X/Microsoft.Web.WebView2.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 48067eff4963d35a62da51364f886adfe266461dcc49689d63af99e8fd38a0e2
MD5 1475cf2b02eec671df896caa09c987ea
SHA1 636ae4d95c4c6cb163bc43e65216d7ee95ceacdf
SHA512 db4ea22771d8895f6fcef4dcd74682c6f6f145cf8336f9b139078f4fa2fa316f87351d1fcada8645e2eb7e0dffa6aad7a21da479d7918b73d1ee301b1fa2843b
SSDEEP 12288:/AOCXrBI4wf1N2le1gcmK8i7P9pHjRFIEqGIEEIcgCeokpM1SaWLQNZ5tOSQsyuK:42
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bb:ea:24:05:0d:d6:e1:8c:43:ee:3b:82:d1:93:bb:0d:d9:97:fe:c0:d6:67:b5:9e:c7:ce:30:cb:c8:9a:dc:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 4, 2024

Minor OS version

0

Major OS version

4

Entry point

411406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Kiwi X/Microsoft.Web.WebView2.WinForms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 20118f19f82f2594333aeecd2274d0f57a2655a2feee3050551ab3310ecd3ab0
MD5 e6a6ac113347b3f8a12c8417984a751a
SHA1 5f3acbe03cf04c13def8f043c26bb6726d8bc722
SHA512 f0c28bc0fdf9db3e6866a24ef7dbd9226f8b6f8e61cbdb251dec1cc66b7b7616ef8f5b5d45ad60241e36a351d26fca49378e3689daee7f800076f568f0806c7d
SSDEEP 768:XTFzTl1XWYTFePHZDgcE05P4Jjrnh2jwSosuTv1JKa5/Zi/6Lsub4Oz3qLXA153:XTFPHXUPHZDgcE05P4JjrnawSosu71Jb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

33:8d:6b:11:8f:31:09:bb:4e:f5:0d:19:1e:ae:39:b9:c3:f6:46:79:7a:0e:e3:2a:6f:85:a9:bf:c7:cf:f5:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 4, 2024

Minor OS version

0

Major OS version

4

Entry point

30238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Kiwi X/Microsoft.Web.WebView2.Wpf.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 277a57bd954aba3d99005632a2c9d8edfc70a7c902e6d46446a69e2ece8ac85c
MD5 411ff5a99f51b076f9fe7bdd43dccb52
SHA1 23ac0eeb9f31b4ead95a7c830b4a927a53add366
SHA512 b6c80829fe84c41d6959d84e4f1f1a30d9b9bdcaba09ff77c1d19907138641f2b86abc875580d172716f9885743d7dd960b2ba8d33588920ad4e1f31cd987c10
SSDEEP 768:szXGuETke7fYBCn1K8wDP/ryEH0mBO4JjrDXh2jUfUPLkq7FKKa5/Bi/hGvoAb0s:GX0t7CC1K8wDP/ryEH0mBO4JjrDXaUfj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

cb:81:54:3a:59:97:1b:77:d5:08:1d:32:1c:c1:f6:4c:37:3d:e1:b2:9c:aa:eb:ff:ef:03:34:a4:c8:ca:05:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 4, 2024

Minor OS version

0

Major OS version

4

Entry point

36494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Kiwi X/Monaco/Monaco.html

SHA256 c652c0edfd59d5644044049f723ad2d915685dfdb1ddf6841da498ca969eb12e
MD5 ec05dbe07ad593f3c4eccc68d22c4558
SHA1 7ab2bd63a8c0a421e27f2fa214c28ada9489a546
SHA512 df2e364a22b263e00133ba7e0e667a9db3a0fa5d3a6fac3c44a1c9d78ef4ba694b742eb04031e67c5d305c427efe11ca5c8fe89d9e5152f1b32ed4580dcae538
SSDEEP 192:wEod3PorvGym0Qp5keghKcCI2MCTJ3+NLSaPh/WCY/jt:ud3PoLTw5keghHwjt
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/base.txt

SHA256 dbe440c5dee6367ebca919886ffe593246e1e52618e4713373000c9fc77c87cc
MD5 0d834904a252e1ab786f9637bef6819f
SHA1 f8fbbdc4d0c5ebdc4037b32183a7be3027541596
SHA512 72a23e1ccacbaabbd65660b57fe4d9c6bf403f35f46bd439c171eb3682c805a387db25ac2206bb9a868b230aba38de38d25bb2102a2bda688ef7ab7ba67a0b42
MD5 SHA1 SHA512

Kiwi X/Monaco/classfunc.txt

SHA256 519da000de235c331f10660509fab51a1815ace566b8ae5b511b75813922dcb1
MD5 bf32e93d11011eb780619b3e17fb824a
SHA1 f0fa7dbd2577b83a5d5a81622557ca05966d292c
SHA512 5d0b4cc09c5966b3cf806b02816eb95dfc42c7e4c2056b37d254d835459444c796759795e64c3171453b5bd9d70d2705775e7200a0283725676f26a39323dc9d
MD5 SHA1 SHA512

Kiwi X/Monaco/globalf.txt

SHA256 deae98f86c62749e4b642acb41ea5dfce0caf09bc77036aae82ee814a04ed9e0
MD5 1700df0210cda593d3df64f51b3caaea
SHA1 d4832190dc99184f0e0fde832e453fef9330646c
SHA512 76a651129e25bf2ac1f4a1f1e397185ec4eeb292ef64ed44633bde6ecc7b342cb1464224f2c521a69ac51d88dc4d46bc392c5db2ab94939bf84be5ef21f85add
MD5 SHA1 SHA512

Kiwi X/Monaco/globalns.txt

SHA256 5cb987e7c87f2f04cdd45f3a474fb2380bbf846534e38f2b485eafc562b7b482
MD5 ba56c14634b7ae6fb585be396acf5f03
SHA1 8aa4125655cd48073b55c5ea892e5da734220bbc
SHA512 46a904064080fa51e9071e11c44685cdeadf0cdabe5feb038a4a85f2141ef13d46bd0563016ea62e5b1ccb76995c71451f6ba958b5551c31d36231b8f436190f
MD5 SHA1 SHA512

Kiwi X/Monaco/globalv.txt

SHA256 eeb98f2c9911ae8ddd25f1b3be3732000f16788bda60aa962e9f8452012b1062
MD5 5cf9f238d4e62c8bcde351651c3a2a45
SHA1 16f25e5686f1235d1fbd9b9954236b043d2e6260
SHA512 b2fb24e6309303220eead8ac60d68959d189178db62611361440cafd219b45e57d3b79656b51df13eb825097557e9cd735ef228c1fc82e593368ce30fb88ca58
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/base/worker/workerMain.js

SHA256 bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5
MD5 27ead90c7702154755785e0e53398755
SHA1 86b59485fe6f6ccb1805183fa75062a2ac1c859e
SHA512 6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82
SSDEEP 1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/bat/bat.js

SHA256 9bca42394fe8922fec24b768eeb8ce04692de6fad82f9052d5b7e70f5c6b0f40
MD5 4cb475399c4490eea41982dcd6d9653e
SHA1 fc97d57206ff7fa1c89ff0fc9f6e2f04a20ea185
SHA512 27eefe83cf38a7d784414d99b472f6fcd7e595691eb0f368254ba1f71aaf702840b62bf232c30c515a8fada234699fefeef496c0c24669cc158cb567227e4783
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/coffee/coffee.js

SHA256 e706c9f8e5c5a0cb01b2f4e4879ec34a050d6eb2a8840284eb7badd9d78099f9
MD5 9d0c4ac1691eed0a480c3e9246490d29
SHA1 38258864fd070c35cec6b68715d58771df9fe3e1
SHA512 437a703607a9f0cb96ffb56312d149b95f596290591d14098c36d978b2e1fdba3c3712c9099923bc0a709c5c0ebd7eea868f63dfbcc69cdf5a9325b8a67006b6
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/cpp/cpp.js

SHA256 a7c2bea7ca3d9e203a3a286735945fe010c8f4f8d46620386ee8befc6a78b32b
MD5 0a16509e6cd0155fb622e785cfe976c7
SHA1 7afa7f823191c43d7a4bdd7d91577495de62c21a
SHA512 2cbc48cb10c467561c6a84f59405e9c2f864640b3a21e6fe5cd14ad1a7ca5667b766b3c0511df26f28205dd17338a878bd1164a4f5875235a73214f3e4aeb49d
SSDEEP 96:hFDMgRs/rbV1+gqVV1+/LVb9ZRC2seM6jjz13MwVcEghhb6Yw76wGcmvRBNIs:hZGrTOcVv5M61h8hSeiYL
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/csharp/csharp.js

SHA256 6b3be9a86ee8e3202f51745d94d24cc1eefbcf7d9e6d94fbaf70146b084e835f
MD5 f8f841d13c9220e15dcd6bc386b37ba2
SHA1 2b8b7003820d19ed83afde98c845db5e3d5753f8
SHA512 0b167865b8d7847792c80144e83bdf33655db6ecc0934bb3290f8b5793fee8168aeaf9d74b3541a9424c4f180aad496c2d8710e3847a5bf9d4b2c960ddea4ae5
SSDEEP 96:hFDMgRsVx+rbV1+gqGV1+hmQuq1cBh8b7gj8/pLxb6J994wGcKU7dYIkI:hZi+rTtPsRXpw9SiKUJGI
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/csp/csp.js

SHA256 4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789
MD5 22ada25d590811dcff4e5f5d698e583b
SHA1 c43d4846967d5037ef05b102e49d1fbc54e45fbc
SHA512 c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/css/css.js

SHA256 bd331fd3bd2c37b0c3150035325f163ac9266bf6d942310764815e676d856d91
MD5 49ad30f1151cfd7a74677fdc6dd13da9
SHA1 286d47f0a4cfa26da2e4d1f1317a8c87000bb5fc
SHA512 7337706bfd5bd54938da0fba35e97f8e5780491c04b58d43fc6d905bd2dca92897f1ed8d48e42665f166da7684cc6e29a63ae73f8d3779a9feb97c397a642f0d
SSDEEP 96:hFDMgRsozIq+q17qcq6V1+/aMj1cqTroIrqjKf8O3lzXY0Jc:hZzzv9VmjoOf8O39XbJc
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/dockerfile/dockerfile.js

SHA256 65b86fc54e9b35d6cb84f01dfb905680dbcad6605757de1d6bca84e3029889af
MD5 e32de981bdaf75e6ffb8fe40bc955a68
SHA1 bef1af7b26ea01c987c7a6295bb7192d83a32068
SHA512 a3eadd8c1389dff6c2c6e595efff69be3a573d01e4e16b8e4a8b28f63e4c48c9c439b5dd93666d81d703d1c6b5bf927cc8e47d04af270128095f0d579407c2f4
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/fsharp/fsharp.js

SHA256 1390079babc117d3f376735780d98f409f317eb4628d17106642c6933ea1da7f
MD5 de122b3bc44a8714f386dc80282dcb12
SHA1 06888a9b616993e9af9797cec64c6d419065f2cb
SHA512 ab48f2e5bfa6ea0024530141bb5d35b9090ee0254a3e8f8b86fa36cc8c2fca8000a3caafcfffc1d83e21c488e1f1990c91f537290b54fbbca1d3c7be090dfba5
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/go/go.js

SHA256 46d1757c3cd3dbc3c7b465a338880144922a1c34c30e36f06ff2db8c2ff75b86
MD5 5b4484c914cd97aff4510b803f2517ef
SHA1 8f275ac36c57c4c464e30f92f525ffbd0fd436c6
SHA512 b34c64f9997f4b72760eca270d2a0c2e22d83467d3f0bc82e7c0e63d62d8f9d74a144a28d676a223cdefef417af723801ac0535375d0dd64bb3a81e87617fed0
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/handlebars/handlebars.js

SHA256 31d25588d120e7c79f3332ff3b3c794cebd0554c7578e3bb37b3cac366e4f6c2
MD5 3ca7cf83292b56444548f2914c0e1811
SHA1 4be5b1adaa187d82a94967e6960d811acd700b93
SHA512 2d337b64def0d42f8bd6476cf31e806f67f77d26c95c68e75574fc310f7974852a810f8b197238559a2cb20d07914de5844481477321cdcb2c68c47da9088eb8
SSDEEP 96:hFDMgRspITV1+/I/+B1BerJzlWK2BZwIBTIwbcdg6EHpf4Og6E8S6g6EB+FpAjE3:hZhbYbQRld2BZ1O0p4OE60+dMZLDs
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/html/html.js

SHA256 c717ac0701d3b1e22dc52a0c53608214297e5fab7bc7011cf4e964f2eca9d62f
MD5 630fa41f59a189aed68b4db82559de95
SHA1 14a527d27240ba0effcfa43a5c46b9289e96b822
SHA512 e15c602788f13afd1e19e5f82de7a35eb9656950553bc3913205ba3e70ddf87199b7f9b358db7b7704efd3dc85029ad277692b6b84f5f549964b9dd7cce1ad60
SSDEEP 96:hFDMgRsfInV1+/6mQVV1+HBwBRl0GSytHd6EHaK4T6Ef6EByyEhcKMgEQEJWf:hZLP+4+GLl0GSytHLaK4ccKM2
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/ini/ini.js

SHA256 1f0feeae58c32f6e1f31b78f7e2aab3c91da387e464234c0f55ebff0e77444a2
MD5 b9252b74381fe17565d494711f4c9093
SHA1 9ed6a00a166c0b5abdbb3ea45fa7df3a5defc8ee
SHA512 2fe594de8ac3444223edc011cbd7f08a6f8ab2de2bf56919c2d6f1208e22391652d14549c3822c21c4999139ffce711fdbf00725e95aa01068bf5f223c3b8710
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/java/java.js

SHA256 44be702cae05d5844dc1c452f9bd94020007b9e543a765db4e6649278607d218
MD5 826546e08f178d68e8aa2ab29194c03a
SHA1 444ed723cadc4231f2dce5c54597fa8558893d12
SHA512 8edb46eefaa3277374ba5dc656423115735573a57e82002745ce6112f666079d6ab7d9b5a79ed208ff51487e9ec2b757c45ec1b3c8119d8cbcd4f7cd30347ef9
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/less/less.js

SHA256 ed8d1a9da4e62d1cffe4c83580c9df57d688e850a45ace72c11bdeb064520a16
MD5 696ef3dca27b4f9313deba6f99710154
SHA1 d3b377cae3355c3facbecc85bb342d4af34436ca
SHA512 f9f65f8730fac803cb01d127c467359f428dbcc8e368f40a15fd56b7150b2258e9c581c3a35712ccc2fcde8a7108c89a33b80cb72721fea663a11a553657dc29
SSDEEP 96:hFDMgRsR6rMq+q17qcq6V1+/v+ufj1cCzBbu/2nOgeJamEulIHrraW4NUa:hZE6rr9PuhlzBbu4OLaDuKqW4NUa
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/lua/lua.js

SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
MD5 8706d861294e09a1f2f7e63d19e5fcb7
SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/markdown/markdown.js

SHA256 eaaf453e0a9f9a604547e564a24e682503189cb9b85c87715bc9b5b6492b6f62
MD5 caf4799639d5df40dfb1b979ed68af9c
SHA1 6578ccc5111ddc190c354449be2630d91a21523b
SHA512 e787f3f849a40c608c3b35b732f16e4400c2d47e89ff309566afbc879fe37a7018722b959dc8ddc8c859d76e2f7bc0b85555cd27f7fc5e4d8e51e460ed32c9ca
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/msdax/msdax.js

SHA256 6ab13356e083c4334e93d3167bdd17d02552508bfd11ea044c880af3a1dd94f9
MD5 eaa7bff8662633aec211d57fd17cb8ce
SHA1 3d783a13339a5797fa701165484bbdb70ffc0616
SHA512 b3c5069dd3b8b56c0c945cd36909e2d7b575d3b804714b724b7f80bf03de1983a29e33dce050ff599017ece4ce22dce1f01bddda7ae2d41b25779455b96f4c00
SSDEEP 96:hFDMgRsHrviqgq+q17qU/E18Qby0qbmofEsl93Bjy2rzR9sJDJOuz3O+PYLq+v6I:hZmrTY8Ey0UJfEI9z+zz3O+PYLZy4axE
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/mysql/mysql.js

SHA256 7ba586bf9c623dc23f27a46e95a22342caa1f42d3b19fd9c018eb3b7298206dd
MD5 6482b3f16ca4f1436d5a5c9b54ab8956
SHA1 bec1d967c0db6ca73cde65debd418f3e2c4db36c
SHA512 24b0dcb75254f4d69209d42bed81730c7c9ccac2230047a8fe46c81dab5a65618ce59be1b09100a1a2e42c515ea2a923a9c7084280bc567b2a6ee987cfb11039
SSDEEP 384:hALxoDo1S36rNh/xkxnethQZZ62lANnY0k7N6AVzIAtSc2F9/0yW:SLxoDo1e4Nh/xNthQZZgNn67N6AVzIAp
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/objective-c/objective-c.js

SHA256 35af39baf166f7c2e3c95345b10ec46aa523f98783daa745aef64503019e3253
MD5 3ba48944ccda06514bf9723a2308b4c8
SHA1 e9ebac91264e0510f8ff80710244c3ce56aee1b4
SHA512 b8b1096188bf3837a696353988c4bd1b21f1cbde54a9ce8436f139765189c5dc8ffb02ad931a364d4780fb7fbb7dc18a600cc19a5db3e1a412f38d7269a24030
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/pgsql/pgsql.js

SHA256 a9487e85b74fd293c0131ae9bc181e72baecf5a0a6f8b71e97770d79332c09c0
MD5 7183810944428c812b3f9f4ed4adbb6d
SHA1 5931e0e973678b836f548d11095b77398f7c38e5
SHA512 a0eb6a021b24db38b98c7db1c5584bf190f789e5cb65fe13b7fb881fff1665cdaa7914556e0c0984f620b55b63a7b9f7902b706d596b2603e8720dc85dfa185f
SSDEEP 384:hhLx5HtCBHHfrxrOmYbatR9uwX6l+qCVFQBTI7e9/asW:PLx5HtCBHHfrxrOmGaZKgKBTIuisW
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/php/php.js

SHA256 af43769fa1bdef70da786c2296c3a5f91552163c78d5c8ede46620a146edda92
MD5 fffc04cacea00100299900c7969e44dd
SHA1 d15b7aff67d8fa813c43e35ac58ec08a74f4701b
SHA512 19dd22739eb9373a2b8f4acd7712d7631adf1cfbadbdec9dac2bda25e8594731ab30caa5cf2deb241c76429f8e381775b60ae5857e4ac6b735f493885c4dac6f
SSDEEP 192:hZe+rrpRld2BZwd0C4Ov6f+AME/gujcm91wIJ3tjPq:hQ+rr7xPSVrgm91w+3t2
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/postiats/postiats.js

SHA256 e49fe4654ae374d12dc7a4cb210ba95f490982a014886ede88a0dad3fd99a760
MD5 0c7a2538121071fd75d9f08806500ea3
SHA1 968d9ee1b928cf62712ec69d5f02aeb025cc3623
SHA512 ae39edd35bd9caa13c4e263910ce93375beadebbee846ef8d5e5da1d8f054e236ff3310e2938fcf3f9d1eefde1bbe03c20ddaad243a73f6249d8a1563f6afe67
SSDEEP 192:hZCrsRJNHUKhfdGiAQ3Sv0vExaeZtSkgsv:hsrsbNHsQ3SMMYcF
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/powershell/powershell.js

SHA256 d47b6e2970b4bbcd0eb8e4ef69eb2052b117e36ab20c68605a1750ad5991eb51
MD5 25cbb67f273e62a6d0e6dd5c123f5963
SHA1 81fcaf88c071e6b72648464f1bfdf8fc4fe8cca6
SHA512 94d265eb4e5c91abf3edac2cf17bb37b0402cae1dbfdf950c12c7b176bae89eda618286da5f51286d2ba684c4fd894dbc138ebdcf2a0b497bbf51be892a8606e
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/pug/pug.js

SHA256 cdad9f84576583b68a10519c4f23ba36cd4422cbb7a44fded2c99a1e823e8043
MD5 4cce0b17d4f7bf474a5101763ec17c9c
SHA1 880f10cb67ab667c20d20ee7a53182f5c841da87
SHA512 9a4b988c88f888355d67f650b8cc3db8601743037b48497050cedbd61bf0b1c8864b230279322b4f05ffa8d628fd2979e6fc61e366c7efe633afa5439c6f38c7
SSDEEP 96:hFDMgRsnreqgq+q+q15cmFIfnzvN0EJ40LW+LmlgKGJ6V0+piF6ywZ62x3Yxx:hZGrj5xQvKgK2boV0YivwZ6e3Ax
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/python/python.js

SHA256 8b98aeb80e1fd053e80cdfbf79437338d8b1081ccbd999c5373da225777296ad
MD5 d3618ce8d5aec23fff67ced39c79ebd9
SHA1 2c66c7b3d631784ce297ad081fdffe48e1739eec
SHA512 8a6d270aa09fa215fde2333febf0f012c803e83f7ee4091688b91c423408e7b0754d9e1ac3dbc4cb1d8cde7c06e59a6f140aa38f5c18e43bd2ef544f22b2dce8
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/r/r.js

SHA256 710905ba785b707484afed8404c2b092f0b7ca4bf5aa35a7d333a7c07afee712
MD5 bb2637578ba902dcd3ea172cf8c7b7ea
SHA1 28c77f1e22ffe267c5ac0960938a9e0bc510fe22
SHA512 b14e61cbd53971bbbee1f237b8c44aaf567c738c54376625ade5dd121a2364dce69d39f20d6c4f28bd66348dc0832d2b6540d0acc85b5054e0b6fd81a8999c25
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/razor/razor.js

SHA256 2ad872aa67a12a578e652762c21136b9c9e2a741c2752d69ef48c2eb22cc621c
MD5 c87e5b4654c9011e1df9eeaa10fa4379
SHA1 25871cadcebb9eab44d65ef8483f03c6e4c44723
SHA512 aae1eb996d6c157899ea466a184b263dc4380f56615a4c69bc49a49bb30856f55374d8c7dcf159b0d0a8250c24eaa0b8a7b9a40ff2084f20b51becd3dd5e9535
SSDEEP 192:hZnmP+xRERld2BZW40v4Ou6e+vMHjIoQceC8TElNOYJXW:hYP+tsP3zkIoQceCE6JG
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/redis/redis.js

SHA256 81d912c3bd211ab866500ebc901eeb628b21e5979587901adece649baff48f30
MD5 947b18f3f04fe16fc51beea925aab14b
SHA1 246f89fe753b6c98202e02bccb7d4cb4d47ed045
SHA512 54356cfc1b4f280e3b653e8ec073efb633bebaa15386f2cdefddb232f141c66b55de062601ef8306146fc7662bca6a110f9464da1b27e481df2faf66d035bd6d
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/redshift/redshift.js

SHA256 b461f7951effbf085cd7a090dd4e69e54f812a2543f55a4ecacaee7ef6649bdf
MD5 c08941967ac5ba8cc4a2971b2c888456
SHA1 22d1a7f1e89d9850507d5eba78bf734764d7197f
SHA512 9311c13be9e19c0062870bd4c2b92815bf4427056dbbbd6a2ec71ed76c8c66c4138f929776ce788c918c51813a61f0e05f00eac984b51fbcc16620958f3655ca
SSDEEP 192:hZnzLxzLJlx3dDC5QPsHoa2WMrtSCV0bPjNQoMyIG6r9TjasW:hBLxztR+MJ/WfCuFQobIGe9/asW
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/ruby/ruby.js

SHA256 5f249877eef9e52f52dbe2bb4b158da3a6f7fc2d267487298d537292596b6089
MD5 9d0eddeae6d9bf3d3d9eebf7858b45bd
SHA1 6f0fb7feb21491fa8e46763945c266880d904461
SHA512 eeee65842033cc4f122689ffc7c3c660317d5c5d411c452ea73a26f71d041ab05c8beb6d0fd3b2d8a8fc787ac408007b0f6785b867fbdb1c55ab94eb75c017d3
SSDEEP 192:hZn4cxI35E7BuN7MVziYlG3z9GEpWyuy7:hScx+E7cMwj9Fsvu
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/rust/rust.js

SHA256 7c4e77f3bc6f3fb580c1c329f515e30830e6f6352d088b7948f73fa1662a3664
MD5 f48a41336bcc1a195503c7a020ea508c
SHA1 75f5bc806c449422e7a56de8fc3c1e3626768a12
SHA512 f4e94b5c3dcb1fb90373f92637618e774737ac1646e5b24cb28bdfdd5188af3f61ddf49224d1459b22ddcf89b6a1fcd86884cbe2df62f826ec9cb94c5af1277b
SSDEEP 96:hFDMgRs6Q9rbV1+gqVV1+/yldNmlf9LJ5MnWe1l0gHY4Rt04TW:hZnYrTO6llLJ5de3i4Y
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/sb/sb.js

SHA256 51c0bbde8b266514a37f00707c34bab27571b7eb38bddc5a45bb3f987ce5227d
MD5 95a88fd3ac1433bc136a792bd892c1d2
SHA1 7e75796e0896b429e4d4dbdeaf83adff3c8aef29
SHA512 0cdecc828bcf7e49fdd7be2f2e27b099d1fb3465d13b18e61b4baf1bccb8d78560666ae503ef1adf6be62975f96b685bb922c59ecc203e598c502e2e91cddc94
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/scss/scss.js

SHA256 438f781e751495302a0e2359ea93b54d7f9cba383fb44185d73bc6e2a5a38e81
MD5 3e266f1f8eaaae110c8ae9e31fe5cb41
SHA1 d939d3b5cb8a5df6fca3ce2531fd633e59fe34b2
SHA512 4bbef3febbdcebcaf8242107bf5e260ebd92bd99d00777316a2dfe29865a2d20ab11808b23d9616d77550e82d69af71fadda95eb41e83387516c21480deffbe0
SSDEEP 96:hFDMgRsJ6rMq+q17qcq6V1+/Zpj1ctjT0PIVhUE5CsqdpvcWLPMlxXALYJvc:hZe6rr9AnhPKIsuvcWLPMfXALCvc
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/solidity/solidity.js

SHA256 e71c1df85ced6a51254a45152ceb9bab1ec3a003e8e4911ab35c737b52d42ae4
MD5 0c117b4dc07c6a0a0d063d1504e04ea6
SHA1 3f72a2469df69925e2c9fa31066a56a4327acde4
SHA512 8a209f5cb7503e716c470728d744e0674717e63df2db3590086f09866047c6f668d8d393a510320c2a1658d9026b5a968164ba3fcead36b270c364b0e663f5f2
SSDEEP 384:hSrtoAZRoMteOKV6TXRcJcWlXvEnMemjVjlVuRHBziYQ:crtoZOA6TKJccXcnMemZ+HFA
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/sql/sql.js

SHA256 d1ab939c0ba1033252787f1f13b503d870ee5784a23a3b0b89857860075c035b
MD5 4788f14a5c95a359af5ee52efbcf862d
SHA1 dd4bd763cadf57a529a0732224ec6e27cb08cbb9
SHA512 f24ad9e95c092ba62c9646876858368b095234e212797ea76df8c708efcd4622f872ab30a21d3ec1b341e9d69924d22faeec8d949784a4ccbd02e3c877c68617
SSDEEP 384:hwLxocwBLdRtOmmeuA7It3OMvZi3vzVga+hFyPWg8N7+HLJfh+kQ9/3W:KLxocwlU26lvZi7Vga+7yPkshAfW
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/st/st.js

SHA256 29e530c3a0dae1dc1b630a0867132a2513b1996b7eb0d1f4090336bd6004ff09
MD5 7f3ef65a0f0f0aeedcd64d57f191d7a6
SHA1 b5a95d5fef3fc22c865cc176c0664928a2610582
SHA512 ea0508987801b487dc5370bf7d1a37c486994853eb0e1991f0ec4c9b5ffe378c7c8f701df7d4defedc34c5e23512305c6297d70a51d478e292e40c25c4a40c6a
SSDEEP 96:hFDMgRslrafEUAV1+wCXaVcJlkGLaTNzFgigKNVKVpzVxmKRBzb/eV1+/mQVcJl3:hZIrEol2JJi1VJJsjWaGr5aVl2Xaw
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/swift/swift.js

SHA256 5e9896a1e113b93502a1249b0cc78a844b000b803410a9a956854faac8528366
MD5 1bdd6f185cd2b5f4e11c6fac19e86175
SHA1 e812770ef107ecdf3ccf779eeba58e0b8c0487a8
SHA512 e8d3811f1b7d776ea49e1de61b5c1234d55eb0257664d8234c94eb22cd9289f7d304676d9565a69f44dc065ba569ca8b7e6a45c0ff9c62a673104c95ba4a7982
SSDEEP 96:hFDMgRswdrbV1+/mQcV1+/mQSMFyb0EUiyH/l3w6Bh1D0rth:hZldrT1x1480Dv2h
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/vb/vb.js

SHA256 5ca2ef383ccbfd449dceb76db571211374314054e22977bbeb785e2aaf8ecf24
MD5 fd92faac5b4b3dfc2aa8cd7deb8efecf
SHA1 39bd460afa0c614d4106602a2afb5c2c9d7cb1b0
SHA512 fdec42d463673cbace6b50081190f0f9d2adf57130da04abaa4513c4f569ae2b676883e5d1140b38d17d0aadd602a583c0fd27d7ed071112c5093c3051266338
SSDEEP 96:hFDMgRsrSVNv2q+q17qcqR5FX5BmzpMCgkxIcKYWKkVe9Nu6Ke7UivaQ:hZem1q5FJOZxWYlkVe+ewW
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/basic-languages/xml/xml.js

SHA256 01896b21ba9fe9106316197da8118596101b966d4597aa794720f2561cbe15d8
MD5 837efa6cbae0c226509b3f496c20660d
SHA1 1a6263d04cd8eea94e31583611a9c7246351482a
SHA512 a2787c69cd3989d239cce372fe141dde121caf8a637843413d590f4ff77941f10d8a8f8590bbfdb2255e97528289a7673e5377e469bedd8f63135ef70c12a46a
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/basic-languages/yaml/yaml.js

SHA256 3730024b6d24b2ea2e9794123b038eee4383e9ae94fabd849aceb9596ad9d2d0
MD5 a812c4e3188d84d073a481b2cadc21bd
SHA1 a3988727891fdbcd6a0a9b88fd8aeee6767ada99
SHA512 c6b9fa1cd85870dd9ce718d7d598a0456eb3e6d8ce762fc0a39fe59472d0a6cd000c2fecf0c39beb7dfe00ecf12cf4586850fb9a93005ecea8b23fe1538b7087
MD5 SHA1 SHA512

Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_16x.svg

SHA256 d1aa361f33564e8f9d527a01a66c7ce35d73f23417432e80ddf51f562770ee79
MD5 48e754cb54c78a85dcc9aaea9a27847e
SHA1 8d79b23037deb6586e4954305dcb4caee14afbd2
SHA512 f6d902b5c73b59636cb71d4019ff45cb77532bf22aab28a8314697e24a62163a94140c97495ad5ce421c09c26e4bcbfe5a815eae27e945c51ccd80c2ba9c3a77
SSDEEP 48:CnN6wkEX+c9Vlt4AFCj93Z0hDC7hSBnukNyhDFtrJGuG2XvS+yZCahDC7hSBnhKm:zJWFCMcfkCFGE6+yZCacJImkArbbqrAm
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg

SHA256 7d23c0f30cb9c05c81bb15785a3299772ae3cfbe51f3e04895aa1f23ffbeba5b
MD5 6e5c0ce7ec09969f07ea6ee078ef8ad6
SHA1 deadc5357a26852d872bffa77d1aa19108603b25
SHA512 2b02cb82f9e4720ee43bfc8b7fe5d6de38228329aafbedb589d5a219057c15f073023deca3c1ca5b65cea4a4f0d863ebd88c889b1d67119639fae2ce180863bf
SSDEEP 48:Cn7wkEX+c9Vlt4AFCj93Z0hDC7hSBnukNyhDFtrJGuG2XvS+yZCahDC7hSBnhKHG:EJWFCMcfkCFGE6+yZCacJImkArbbqrAm
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.css

SHA256 2ec118616a1370e7c37342da85834ca1819400c28f83abfcbbb1ef50b51f7701
MD5 233217455a3ef3604bf4942024b94f98
SHA1 95cd3ce46f4ca65708ec25d59dddbfa3fc44e143
SHA512 6f4cb7b88673666b7dc1beab3ec2aec4d7d353e6da9f6f14ed2fee8848c7da34ee5060d9eb34ecbb5db71b5b98e3f8582c09ef3efe4f2d9d3135dea87d497455
SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq5bbhLynlDTkDatDF8Jmmvgs0aMJkn:p2bIRkDSYmmvgs0aMJK
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.js

SHA256 2750f0a823d154a14e617603c6e8b30d52bc6ab7329588e5760ce130737387b8
MD5 92153e6e63881e04aa882f5bd550e677
SHA1 b14568093da2d953d6ab921550aa789b8a47e5e2
SHA512 279fba40570e02c8852ff5c59277ad1964301d1838d7816b7e192140890fbc6ecc256f1e3da5b321b67256a3c10ab42c8c51601c555e5c0302d65bb62a8465de
SSDEEP 24576:SmmBNDw4gCXJkB4nIg2xxhbaeuYIMsNjvit4F:wDw4gCXJk62haeJIMsNjvit4F
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.de.js

SHA256 0dee462d5fb231f169f6cbc432465a43fd445c011fe650e29f5fb2bccc31eaae
MD5 4d83bc1bced6f773423be6f939472cfe
SHA1 1b42889a7f580df9f7d399c33141d38548143ed1
SHA512 c53d522438767a15b5711099fee0acb62ff21289b62640d1a4823a90c8a7d8836bc932daae477d5188b1ba78c50c581284c4d7379efb532f37d356add97ac8e4
SSDEEP 768:jADv7LbgRyefe80QqYax/mZgb2ET1UZ0IMlYmz7w0hxH1N1Bg93RyFGAIDB7wZ9m:jADDx80QqYax/mmb2YLIEYmz7JhxH10D
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.es.js

SHA256 203ff3591e02eb7b55a591e53919cc337f8dea73e6446fc3493227761c0794ba
MD5 b371235f971baa51f58f123f40c4435a
SHA1 843d4a2d214c7d9da650cf4d0c6981ac1dab69c6
SHA512 77d43490f1208dde16b6773551ea983cb2352455178ea0e3d4d4b2f2e05dc406cafae89738001d708b780b58882cf5448eb7a8d1c11aa7b8e87915a390da618a
SSDEEP 384:hwuiA9wZFjNzWZQz7uDlnDEuoKZvGrkEq1EhBR3H6Sg4eUz+JWCHcxS+S9SxS9tf:Y9ZCZQOtDZSj1XJS+S9SxS9tx78teB
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.fr.js

SHA256 7fde40b2b212d274617232de09452c6cb896e8a3c6b9e0b459f067cd07f31a99
MD5 d319e61fc6b357b9a5d8e3bbaa44ce3c
SHA1 b1539b082b2b8290f05dfe17d6fee3d64b2ec244
SHA512 6ba80b90242dc55ecfa1678e7f8506ed9add4bf08067b125ba63d42b8e8e4455507a86369f6fac6c9d10565d083e7364d4fc79d62e9bd460fe49957c91f598e6
SSDEEP 768:HlKogi6Q3JbQWxxGmmrHeHPO10xSgGvJ1COIoJoZjbEMO9ms:Hl8KbQwKRavGJoZG
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.it.js

SHA256 f67cec6dbf98c98c834638d20df53c5a770edada7f26ebf6d0b7dfec60f7a4ab
MD5 a8855a662eb4d3a771fdab7ba6287def
SHA1 a78b57810ac8e9704e97897c6168f4140d2eadf7
SHA512 1c03f8b243701870d8a17e5565da6c65c3f1d76dfb55c88cf68578a4754434a071565da9147e7c833de588a5907b5ece07e018dec52c79d9b2914c964a48a4b5
SSDEEP 768:4klNUuMam1xYhz2LyXSXBjlHtvnYyjMbRgD5SL2KAqI0UGmGfpspuoeu317K93Ph:5f0SL2KAqKKNpCi
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.ja.js

SHA256 ea9f5e8993017f858cd9ee70aac3d7990ca85eaf40a052025e530fb1c300837f
MD5 a1f3c9e940206ca310147d644305a6e1
SHA1 005a8f7023b9d873962c7272203cc0c0d0ccc624
SHA512 f98ad1e4c127c3aa4a4ff2fa7ed2a65b5d32644211679e42d70aae03f9c0af1da7704061c28e95cbb25ad14745b1d086c9a49492119d0f97653a0b817823bc69
SSDEEP 384:hIDtFoY0u0ZAITlMRFG1yu9RwJUcQ8bo6CdXtK+c3YcnI+PjnN3H6Sg4dcRID9Dh:VW6RwJrQNdbc9N1aBDzTG7e2ZLlx/
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.js

SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
MD5 74dd2381ddbb5af80ce28aefed3068fc
SHA1 0996dc91842ab20387e08a46f3807a3f77958902
SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.ko.js

SHA256 100ca482c015571ed9aad97c2dcc5e266b270a650ce892507443b5d4f32df64f
MD5 9ccf83d22e9a9bfafa2000f366ac47e6
SHA1 be61e121af1a363aa66d875f46e78562a603566e
SHA512 3d68816994abff5c528610733cc729e91d390422c2ee2259dcef3cc4db9a599c1f3800f412259fe2f9a700bf2847b942a253986c011c659868bc9edaae6c2f16
SSDEEP 384:hS67TmO5oU1Yh4XK8ApE6/z2dHDNV1KiAaA+17tDDN3H6Sg4s/zKz8G3uyroDXYd:rmO5oGXrmi1zDB12zKzuyroKcNVk
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.ru.js

SHA256 fa180f7b77ee252aefe73ba5993fbe7c89f43482358d7fd32e8e2f50b3b21bed
MD5 fd1aa66906d2b3c0c9b734b17f04d73b
SHA1 299145469d5d5397a42274ccc908c865ebc46cfa
SHA512 235c2ea1806c13dc0b85f06b5c9f2f811bd145968e2a0ad47c3fa1e063d408efc034dca7baf0b91942cc34e995d1274692c5556c2fb875dbb1054157da9c0132
SSDEEP 768:CXH0AKgvFBBK1ED81Z0LVdcan9oUxPr1TPgFuEFYPm/XftWZc:CXHXNtBBK1SLVdcan9oWPgFuEFYPm/d
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.zh-cn.js

SHA256 ac881e6f56544ed9b8dd4fd8fd8a73f1da864fb8d79d91c45f5a51f923bd5287
MD5 f954ac1091c6d0b640ed5f0abdcd8adb
SHA1 43e0d5e39910d124c384549df0b119ad1ebb12b3
SHA512 8aff4877bf97ca29dfd5555fe5078ed3f05ac99c43f12c9b1c4d77ca11b1d040a81e0769c10a46a0bb32f3ffe72ae1a223faf5276d05a11f981aa7677e140c83
SSDEEP 768:FzMPbIhYBG5OcP2WyCzVsEJvjA1agnGMR:F8fcPN8Gw
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/editor.main.nls.zh-tw.js

SHA256 7751df224ac12dbc2e918b12fdbaa465306b6c511e4e1587790163edac18ad46
MD5 73031ff9956da03354038b3185222af8
SHA1 712cbf8027cae6c422490499538ec4a0928c6a78
SHA512 48b80e78a6751ff58eb33ae92f3ad0e31d2e719d9dc9f4926db41e44f8ca9819cea7b657196f4f96c8a1291d57c59c70ffcd64cc9f8cdffc12bc6b5ff6c50e77
SSDEEP 768:pEOtM9oECeRbdFF0D1N+QZyzB0StZ4XUeqJ1wrv6Vl9YLz1/ewyOm:HXEJpdFF0xN+QyoUeqJ1wrv6Vl9Y8wo
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg

SHA256 fcc3026b97068f3d9e1743d36ca26b96ffdbcd2841fa9d804caccc4f249911c8
MD5 649fb0a55b0e0fc9d79e6b7872a14c10
SHA1 b33619c9dfd65d3f2e5a5fcb767a752123d51607
SHA512 3fb4b07e9313b69c84f887c9ca0464e4c8d06a98a8f2ad7d0b48452d068bd526004c21633d0279b4b5e17ad882acf8c7e99b4c3e7650be43b495b670a87d0cbd
SSDEEP 384:cyPJZCcKWPJuCNoSmvcar1PNY6g2HdSjEc3/WD3:DCdCNkvcaQ6x9SjES/W7
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/css/cssMode.js

SHA256 d3108af9ffcdad3133345686646cafe3b628ad6b25a3758786b2aa7b7b51809d
MD5 40a99739f89d382c92eb26f05a9a4497
SHA1 30e6c52658f49bf5c6103a95d1c3ed50d71b02f2
SHA512 9011557bc41865dc6b44495174ea2f27c700e95dabdaa67d8bdd4b798a367a29cea91def2171c5176160f5791d7bfcc2cd65b58db4ded721ed2868e4198049e7
SSDEEP 384:h1kwG9aih9phed6ZwRVwCs8fTxUfyP0sYrkoJWMGIk8:aQih9pwd6KsuTxUfyFikkWMGC
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/css/cssWorker.js

SHA256 288bb68a2c685957b5dc3e5353b1a03dc482b10858059063b99c1549d5fef01c
MD5 152244e2ab4f663141e9466a8282ebe8
SHA1 e9c0e86fbc108600d3e42a6654c5de073607ddce
SHA512 112039647883a1cdb6a860ce1d2980562222b593508da1ea8c9838b7184e76f72de9eb68d2727ce12c78e3c0be7e85101591df6ebde1e73dcf8c2495c8454855
SSDEEP 6144:PhKjqIze+tAxt+A7zOM1L0G52ppgGDcoFGPL2gXwiOcFt+oiEipHxJKnVZPUsf:IqkA7zO/pUIPsf
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/html/htmlMode.js

SHA256 80d6f099563af129b4deff66f7b9d4dfb27ad0058dcb5b77d927e460022dafee
MD5 c944ad9527d22b6ca6c0d54fd0723296
SHA1 ddfb323ded66de709fa8b05abe0ada931ac9dd43
SHA512 3a6abb3a15401d28e4926ac008f991b7a19b359c8420d7e5bb6804061b6f82a2bedfb86823862e1ccfbc046e896cb1a5759199f7e723fd7b1b5e6aeb19f92f58
SSDEEP 192:hA6ZF2Cw7DrFcelxzEKfxmflhyLpYvws8edvt9vKVwZVtDFzp6RMSyotuK1sD5Sv:hJw7DTfAlhCpvedmw+MS+KOD5Sc7Pzo
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/html/htmlWorker.js

SHA256 e80444d8fa519ff86e5c696a40843bc8392b2d3afb83118a2dd92da5497c9212
MD5 3f5802a91a29e4504d5cd2f10ac280b8
SHA1 368d01e59eaf25f164ab1d80b7f5d74b625b242d
SHA512 2f3670227710c291e5e9136b2cac5c70421c2537b86219fe17ed33161136a08f5cb2069822b16a58ce377b6d1a265cf33215a1695bda5a701bae566410ce33e7
SSDEEP 3072:wNxSv2ym9FNq9m8iktJFu/TgHdcyDnLEOhUm3xSvp:wNxSv2ym9FNimBmFu/TgHdcgnLEOhUmE
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/json/jsonMode.js

SHA256 08af59e449f6c058514bf05c54511ee6ec83934ab9dc3e803257196b2812e8ae
MD5 44955b6c43b7aac58492233efeeb70ad
SHA1 528b1f0d8ebce7a607c008aa66a1d0ecd903d3d3
SHA512 5a86921260ae9f87eb134513809231c9b512200cd2f330df37a098124db0da8c8bcef5dc668875e21328ce9a6c79440811dbbc3371147690c71d31b97745666e
SSDEEP 768:ghT0rpM0GwBsUWdD5Sw7NibC2FyGf5Zot3OYoHAymtVoQvafg+HfNc75eEWAdy0h:gyM0GwBeD5jhiA3B7VjIQfdy0h
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/json/jsonWorker.js

SHA256 7c6d37bb341cf59335f6a3e5e336d0de863124fa40a8f9b5f29d8da07891b649
MD5 61e9b732bedc39b547804ac7e8897aab
SHA1 187cba5fbd9c31257119dde24a28573b4973ef5c
SHA512 200e32143bbcda809b0003298aa561ebb27509d309168de81ad8529476ab64caee0502b9fe0b513469c21b82edb421b642183a250d2ba4d65c74ba4c1cbe39dc
SSDEEP 1536:rIAGGhzNFVAg0Edqq6L05i4Xw9dA+IKFt:cRyzNFV5jXOA+IKT
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/typescript/lib/typescriptServices.js

SHA256 90e98063c644749a948edd5a7801f7b00c554e3189fe7c2811926b01eaf1b41f
MD5 0a1a293455f5451ba11e07386ea62d4f
SHA1 d6a43c68812a3dcddc2973db3f2dd8a6b0e45f1e
SHA512 1674e2ad75c53f99475743618ec59d90ce8eb262131c15daead963ecb847cb70278a6d4608c66710c3cd5e92e03b5552a05401b6b008184dbf892683b27ca34a
SSDEEP 49152:G6qR6wZ7g2oZNDR3Oy4mtYsT2ACKRRrcLHd5:W61/4mTy
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/typescript/tsMode.js

SHA256 70957c5ede2834adf1b5bc264e119f82b4e8e6c169fc8ff140d637d1c5287bd9
MD5 8c1a82479c380d2b2c6b096e12ee9632
SHA1 78e429dd4a9279267679423ddb0b6d06c11172ac
SHA512 409c8724ecfa045a7563b5c142ef0a107bffe126140bcbe5202dad59b9ba5ec0db91c74c77d5a60be92110b9d0c942fac61a782ee30a4288774f547f303e1c4a
SSDEEP 384:hgFzm27hrrEZAmdHpjHenNvaOm/6xS1oTEXx3KjFRMqxRh2l3eBVq1A8WKm3d5vp:2FyHhzHenNvaF6xCoSx3KjFqqxL21eBp
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/language/typescript/tsWorker.js

SHA256 2ccc6b6b1b5d884fe8df3e7b2f2bacca0c4529b68bbfe3c547fcc74f204cc5d1
MD5 1e0047691c3637ad1e0da62023ba0e0d
SHA1 64902c923c2194e007bc727f7ea4f30b3a796dab
SHA512 c1bef7bfd60acfcfb206b9631f8a730b787e94101d519d157d346d8377104d1302c0e9853ba2db944d63f03b181511950b9ea25dd21e41f40b4aeba4bc44c0c8
SSDEEP 24576:pQIJc020hIvUjQQ0s2oI4Q0s2oI4QIJc020hIvUjQQ0s2oI4Q0s2oIq:Qo3MfgfHo3Mfgfq
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Monaco/vs/loader.js

SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
MD5 8a3086f6c6298f986bda09080dd003b1
SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
MD5 SHA1 SHA512 SSDEEP

Kiwi X/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3719bdb7856342943273b37db921b0c30edd59cc33e32fafad4a63092454de66
MD5 60be12d21a15106d15286398b00e7172
SHA1 92559df19edd14b6ccd88ff394c6a18f86acd3f6
SHA512 fd333ea6932585cb06473f425297dce46b2c265966b9ab238c19e4d7edd5c4f79990efa723af1fb657ef8e7232cd7d8caddd3d6ca02f14fe520804407fcc64fa
SSDEEP 12288:2TqbaRtmrSv0/NlqtAag5X1+NqX6t4yQG5RwZFBGjZ1zDnG1QGEhZqzg8:2TqOtWq0mAHQ4dyRMFBGjZ1zDnG1QG5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

26:27:e5:18:c3:15:22:41:f3:26:eb:77:7d:c4:55:13:4c:7f:13:f3:31:4c:c4:a7:45:25:d0:2a:5a:0d:81:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Aug 30, 2022

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Serial Number

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 29, 2022 - Mar 14, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

703386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Kiwi X/VMProtectSDK32.dll

IMPHASH 02e88351c3784f615719503b75919424
SHA256 bab83974a97254d80497b450315c8604649db739914eb0928afe375f31ff825d
MD5 35ee156609a7c3bffba0e1c6fce8b7d1
SHA1 c15f0ce78325a00e8d0dc96d34942baba4ba369a
SHA512 65c476b0cc7cecde9f19906163db3ca7dc4df5e291dbf1ee8e292523bbb3a46fff64f9e2c3f2dedab621a23ea599ae26f5af0507153d9bd178845c37b1032a26
SSDEEP 768:doPxJEvm79UXEHoJ9Zu+mCpvuJx/cH/3raj5ckespr6vv6USYhCDgAkhHHqD+b8:doP7EvctUT3Gejaj5He66KUScM+b8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Kiwi X/WRDAPICONF.json

SHA256 a52aed34a368ec553e7f89067ec65b7d6205208640f8357f76247e406d80452e
MD5 e980ad71e4e5ed465831d732d3175c98
SHA1 f07e0767a4d9d53bfd8a4028fcd6b2ecd2df8c30
SHA512 d440156035b849287f7ad719345e99b06e481b27c6c9f794ab9fc8c3319de44dd42f62cee454608389feda7d803eaf475bc0215c3d589b0a4d50fd1215bc7861
MD5 SHA1 SHA512

Kiwi X/WeAreDevs_API.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5353f8e7cb55cd8c2a3a9a2b0a9d06e322543e80dee38727ca5436eba5138553
MD5 910d8f0c06cf80204029e2f1134e8372
SHA1 1e8111a3af237e2904ff401c83b59898ab0f7985
SHA512 6267f6b0b15c4b58ff49d13faf4de947f0deeb6c978b2ef53a7fd84a7d3c1813b507de709dff72adc4559ad9e6a8e9ace91f16c6cd7bdc9869d991960cc51310
SSDEEP 6144:DYCkxxiw0qvLJXnlUGujCtjno6itQl+REw6FMG/UHQS8PUHIRA8yVYtFm6axHUOm:sJkqjVnl36ud0zR/6CtQ9PUHIG8Dn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

319870

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Kiwi X/bin/KiwiDLL.dll

SHA256 e5a5d7c8866ecb1b4ea7322eedbd869e622ac2476335a9a4b50aa52cbf2de66e
MD5 35f49db7ae846a9e88cfd879dd36bfa1
SHA1 d7a7c803dff7a677e79bc013c8cc4612110d205b
SHA512 34e93864975bd76ed02c4b99a27185144a9807beb46cce499bb47a43a6349fc12121773fa0e7fb9c03e3d556b5dc2a4efda434262941a5783454d00461919217
SSDEEP 196608:5TZ2q2Ua/1BqoGG4Yfntsjl20tkkFj/BaC96v++g710WFc53kIBaLl:BIq2Uiv8dYElTrBaC96W7iZ0IB4l
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

16830552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

Size

1.6MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

720KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

90KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

520B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

89KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

ez

Size

Virtual Size

11.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

7.1MB

Virtual Size

7.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

16B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Kiwi X/bin/RobloxPlayerLauncher.exe

IMPHASH c07a4ba227db3782e12f36219d41b123
SHA256 e53af118f00fe7a28472f7a218355c935213eaf61f2a24bce818eece0f098e1a
MD5 827b41009c18e6dacc8622acb5b037da
SHA1 c6d98932e45819d02fce38a438573dc2ce733056
SHA512 de529a59fac61daf5af493735a8828623be321fa382c81b1c0c8bafe058db25bed48ba3b96aab18d8b019ec465178cbefce0b39a25d1d0c5a1d3974624abbc56
SSDEEP 49152:zbkfwfXrCiKVUJdY9PTzKaWo78b+TLYMdPMQ3dAwZTAsSs:cfwfbCSJdYNg8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

70:c8:1e:ac:0e:4c:f8:fe:4c:99:58:a9:dd:b0:23:97:de:36:54:a7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 13, 2022

SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

02:47:e5:a2:c3:22:71:bd:9e:93:5f:b8:6f:31:49:93

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 15, 2021 - Jan 18, 2023

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Serial Number

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 29, 2022 - Mar 14, 2033

Minor OS version

1

Major OS version

5

Entry point

1119298

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

freeaddrinfo inet_ntop getaddrinfo

shell32

Shell_NotifyIconA ord165 ShellExecuteExW CommandLineToArgvW ShellExecuteW SHGetFolderPathAndSubDirW

powrprof

CallNtPowerInformation

winhttp

WinHttpConnect WinHttpOpenRequest WinHttpSendRequest WinHttpCrackUrl WinHttpReadData WinHttpWriteData WinHttpSetOption WinHttpSetTimeouts WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpReceiveResponse WinHttpQueryHeaders WinHttpOpen

kernel32

GetFileSize ReadFile WriteFile GetTempPathW InitializeCriticalSectionEx LocalAlloc LocalFree FormatMessageW FindResourceA CopyFileW MoveFileW VerifyVersionInfoW GetSystemTimeAsFileTime GetStdHandle FindClose FindFirstFileW FindNextFileW GetDiskFreeSpaceExW RemoveDirectoryW SetFileAttributesW DebugBreak Sleep GetCurrentProcess TerminateProcess GetExitCodeProcess GetCurrentThreadId CreateProcessW OpenProcess GetSystemTime GetLocalTime GetTickCount GetVersionExW CreateFileMappingW MapViewOfFile UnmapViewOfFile FreeLibrary GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW LoadLibraryW lstrlenW BeginUpdateResourceW UpdateResourceA EndUpdateResourceW SystemTimeToFileTime GetGeoInfoW GetUserGeoID GetUserDefaultLCID FreeConsole AttachConsole GetConsoleScreenBufferInfo SetConsoleTextAttribute CreateEventA K32EnumProcesses K32GetProcessImageFileNameW GetCommandLineW GetShortPathNameW SetLastError ReleaseSemaphore CreateSemaphoreW GlobalAlloc GlobalUnlock GlobalLock GlobalFree IsWow64Process FlushFileBuffers GetFileSizeEx SetFileTime lstrcpyW OpenEventA WaitForSingleObjectEx GetCurrentProcessId LoadLibraryA IsDebuggerPresent OutputDebugStringW GetFileTime CreateFileA CreateMutexA GetModuleHandleA GetProcessTimes GetSystemInfo GetVersionExA QueryPerformanceCounter QueryPerformanceFrequency OpenSemaphoreW CreateMutexExW CreateSemaphoreExW VerSetConditionMask DeleteCriticalSection InitializeCriticalSection EnterCriticalSection LeaveCriticalSection SizeofResource FileTimeToSystemTime FormatMessageA WaitForMultipleObjectsEx SetWaitableTimer ResumeThread TlsAlloc TlsGetValue TlsSetValue TlsFree CreateMutexW CreateWaitableTimerA GetCurrentDirectoryW GetFileInformationByHandle GetFullPathNameW SetEndOfFile SetFilePointerEx GetFileType SetUnhandledExceptionFilter SleepEx CreateThread GetExitCodeThread GetVersion SetProcessShutdownParameters SetConsoleCtrlHandler LockFileEx UnlockFileEx SuspendThread GetProcessId GetThreadContext IsProcessorFeaturePresent GetTimeZoneInformation GetThreadLocale GetSystemDefaultLCID DuplicateHandle VirtualQueryEx ReadProcessMemory SetNamedPipeHandleState TransactNamedPipe CreateNamedPipeW WaitNamedPipeW ConnectNamedPipe DisconnectNamedPipe CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus UnregisterWaitEx RegisterWaitForSingleObject FindFirstFileExW TryEnterCriticalSection InitOnceExecuteOnce SleepConditionVariableCS SleepConditionVariableSRW InitOnceBeginInitialize WaitForSingleObject ReleaseMutex ResetEvent SetEvent InitOnceComplete EncodePointer LCMapStringEx FindResourceW CloseHandle InitializeCriticalSectionAndSpinCount GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer ExitThread FreeLibraryAndExitThread GetCommandLineA GetConsoleMode ReadConsoleW GetConsoleOutputCP SetStdHandle GetDriveTypeW PeekNamedPipe SystemTimeToTzSpecificLocalTime LoadLibraryExW LockResource LoadResource FindResourceExW GetFileAttributesW CreateFileW CreateDirectoryW MulDiv WideCharToMultiByte MultiByteToWideChar lstrcmpW GetProcAddress GetModuleHandleW OpenEventW RtlUnwind GetCPInfo GetStringTypeW ExitProcess CompareStringW LCMapStringW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock InitializeSListHead GetStartupInfoW GetLocaleInfoW IsValidLocale EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP CreateEventW DeleteFileW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW UnhandledExceptionFilter

user32

EnableWindow GetSystemMetrics DrawTextW ReleaseDC BeginPaint EndPaint KillTimer SetTimer GetDlgItem RegisterClassW PostQuitMessage LoadBitmapW GetWindowThreadProcessId FillRect GetDlgCtrlID EnumWindows SetWindowTextW TranslateAcceleratorW LoadAcceleratorsW PostThreadMessageW DispatchMessageW TranslateMessage GetMessageW GetParent SetWindowLongW GetWindowLongW MessageBoxW GetWindowRect InvalidateRect GetDC ShowWindow CreateWindowExW CallWindowProcW DefWindowProcW SendMessageW MessageBoxExW AllowSetForegroundWindow CharNextW CharUpperW UnregisterClassW PostMessageW IsWindowVisible LoadIconW SetForegroundWindow GetWindowTextW MessageBoxA DestroyWindow

gdi32

SetTextColor SetBkMode SetDCPenColor SetDCBrushColor SelectObject RoundRect Rectangle GetStockObject CreatePen GetDeviceCaps DeleteObject CreateSolidBrush CreateFontW

ole32

CoCreateGuid CreateStreamOnHGlobal CoInitialize CoUninitialize CoCreateInstance StringFromGUID2

advapi32

RegQueryInfoKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteKeyExW RegDeleteKeyW GetUserNameW OpenProcessToken RegCreateKeyExW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegDeleteValueW RegCloseKey RegQueryValueExA GetTokenInformation CryptAcquireContextW CryptReleaseContext CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash RegGetValueW RegDeleteTreeW RegCreateKeyExA RegSetValueExA SystemFunction036 BuildSecurityDescriptorW BuildExplicitAccessWithNameW ConvertStringSecurityDescriptorToSecurityDescriptorW ImpersonateNamedPipeClient RevertToSelf RegOpenKeyExA

shlwapi

PathRemoveFileSpecW PathAppendW SHCopyKeyW PathRemoveExtensionW PathFileExistsW StrCmpW StrStrW PathAddBackslashW SHDeleteKeyW StrCmpNW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

sensapi

IsNetworkAlive

wininet

HttpAddRequestHeadersA HttpOpenRequestW InternetSetOptionW InternetQueryOptionW InternetQueryDataAvailable InternetWriteFile HttpSendRequestExW InternetConnectW InternetCloseHandle InternetOpenW HttpEndRequestW HttpQueryInfoA HttpQueryInfoW InternetReadFile HttpSendRequestW HttpAddRequestHeadersW

comctl32

_TrackMouseEvent InitCommonControlsEx ord345

gdiplus

GdipCloneImage GdipDisposeImage GdipCreateBitmapFromStream GdipCreateHBITMAPFromBitmap GdipFree GdipAlloc GdiplusShutdown GdiplusStartup

winmm

timeGetTime timeSetEvent timeGetDevCaps timeBeginPeriod

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

474KB

Virtual Size

474KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

139KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Kiwi X/bin/exploit-main.dll

IMPHASH 2d7a7ee26f70ae2d3f844ffc7c352dd8
SHA256 1b76c6f04752e659290e888149b84cf32ffc6e410f125ec36590ea6a34ea6647
MD5 de243f1799224f4900784c6609008922
SHA1 5aae028ebeeb5afa19f24b0615224aaa0363b7a9
SHA512 18fc14b41a38a28b47a11566c361d62391704ffecf37af4113042efaee3db9d6f27afdae117cf6a3db5f3eec5eab7395b7c4c5ce7e8c051407caed4e0a4196d2
SSDEEP 196608:rXTW1ouGABXku5EGzt6oFgyjyyoJvKclyJQazResyzhmmble:7TluVB08Rqn1KcciuResE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11915174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

__WSAFDIsSet WSACleanup WSAGetLastError recv send closesocket ioctlsocket connect listen accept sendto recvfrom select WSACloseEvent WSACreateEvent WSASetLastError WSAStartup WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents bind inet_addr getsockname socket WSAResetEvent getpeername getsockopt WSAIoctl htonl gethostname gethostbyname inet_ntoa gethostbyaddr getservbyport getservbyname shutdown ntohs htons setsockopt getaddrinfo freeaddrinfo

dbghelp

SymFunctionTableAccess UnDecorateSymbolName StackWalk SymCleanup SymGetModuleBase SymGetSymFromAddr SymInitialize SymGetLineFromAddr

kernel32

GetProcAddress GetCurrentProcessId GetConsoleWindow SetConsoleTextAttribute GetStdHandle MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock LoadLibraryA QueryPerformanceFrequency VerSetConditionMask QueryPerformanceCounter GetTickCount64 FormatMessageA SetEvent ResetEvent SetConsoleTitleA ReadFile WriteProcessMemory CreateNamedPipeA SetConsoleMode WaitForSingleObject DisconnectNamedPipe GetExitCodeThread GetConsoleMode DisableThreadLibraryCalls FreeConsole Module32FirstW VirtualAllocEx ReadProcessMemory FreeLibrary CreateRemoteThread VerifyVersionInfoW Module32NextW VirtualFreeEx AllocConsole ConnectNamedPipe DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WakeAllConditionVariable GetLastError GetEnvironmentVariableA CreateFileA GetFileSizeEx InitializeSRWLock ReleaseSRWLockShared AcquireSRWLockShared GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleHandleW GetEnvironmentVariableW GetModuleHandleExW GetSystemTimeAsFileTime VirtualFree GetACP LoadLibraryW FindClose FindFirstFileW FindNextFileW ReadConsoleA ReadConsoleW LocalFree CreateDirectoryW CreateFileW FindFirstFileExW GetFileAttributesExW Sleep OpenProcess GetModuleHandleA GetCurrentProcess GetModuleFileNameA CloseHandle IsDebuggerPresent CreateToolhelp32Snapshot WaitForMultipleObjects PeekNamedPipe GetFileType WaitForSingleObjectEx MoveFileExA CreateEventW InitializeCriticalSectionAndSpinCount InitializeSListHead IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter InitOnceBeginInitialize InitOnceComplete GetFileInformationByHandleEx AreFileApisANSI FormatMessageW SetLastError GetTickCount GetSystemDirectoryA SleepEx InitializeCriticalSectionEx GetCurrentThread AcquireSRWLockExclusive ReleaseSRWLockExclusive SetFileInformationByHandle GetSystemTimeAsFileTime GetModuleHandleA CreateEventA GetModuleFileNameW TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree LocalAlloc LocalFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetModuleHandleW LoadResource MultiByteToWideChar FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers WriteConsoleW SetStdHandle IsProcessorFeaturePresent DecodePointer GetCommandLineA RaiseException HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc LCMapStringW GetStringTypeW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter HeapSize WriteFile RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc VirtualQuery LocalAlloc LocalFree GetModuleFileNameW ExitProcess LoadLibraryA GetModuleHandleA GetProcAddress

user32

MessageBoxW GetUserObjectInformationW MessageBoxA ShowWindow RegisterClassExA UnregisterClassA CreateWindowExA DefWindowProcA GetWindowLongA CallWindowProcA SetWindowLongA DestroyWindow GetWindowRect SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetProcessWindowStation GetCursorPos SetCursorPos ReleaseCapture GetSystemMenu MonitorFromPoint DeleteMenu keybd_event GetSystemMetrics MapVirtualKeyA mouse_event SendInput LoadCursorA ScreenToClient GetCapture ClientToScreen IsChild TrackMouseEvent GetForegroundWindow SetCapture SetCursor GetClientRect CharUpperBuffW

advapi32

CryptEncrypt CryptAcquireContextW CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptSignHashW CryptEnumProvidersW CryptGenRandom CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey DeregisterEventSource RegisterEventSourceW CryptGetHashParam GetCurrentHwProfileA CryptReleaseContext CryptAcquireContextA ReportEventW

msvcp140

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Winerror_map@std@@YAHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?_Random_device@std@@YAIXZ ?_Throw_Cpp_error@std@@YAXH@Z ?_Throw_C_error@std@@YAXH@Z _Cnd_do_broadcast_at_thread_exit _Thrd_detach ?_Xbad_function_call@std@@YAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ _Query_perf_frequency _Query_perf_counter ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z _Xtime_get_ticks _Thrd_sleep ?_Xinvalid_argument@std@@YAXPBD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

vcruntime140

memcpy __std_type_info_destroy_list _CxxThrowException __CxxFrameHandler3 __std_exception_destroy __std_exception_copy __std_terminate strstr _purecall strchr _except_handler4_common memset memmove strrchr memchr wcsstr __current_exception __current_exception_context

api-ms-win-crt-heap-l1-1-0

calloc free realloc malloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_beginthreadex _getpid terminate abort exit _invalid_parameter_noinfo_noreturn _errno system __sys_nerr __sys_errlist _exit _initterm_e _initterm _seh_filter_dll _cexit _configure_narrow_argv raise _initialize_narrow_environment _initialize_onexit_table strerror_s _crt_atexit _execute_onexit_table _register_onexit_function signal

api-ms-win-crt-string-l1-1-0

isspace strcat_s tolower strcpy_s strncpy strcmp isdigit _strdup isalnum strncmp strnlen strpbrk strcspn strspn isupper strncpy_s

api-ms-win-crt-stdio-l1-1-0

ferror feof __stdio_common_vswprintf freopen_s _setmode _write fopen _close _open __stdio_common_vsscanf _read __stdio_common_vsprintf _wfopen fputc __acrt_iob_func fseek fflush ftell fclose fgets _lseeki64 _get_stream_buffer_pointers _fseeki64 fread fsetpos ungetc __stdio_common_vsprintf_s fgetc setvbuf fgetpos fwrite fputs _fileno __stdio_common_vfprintf

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 strftime _localtime64 _gmtime64

api-ms-win-crt-filesystem-l1-1-0

_access _stat64 _lock_file _unlink _unlock_file _fstat64 _stat64i32

api-ms-win-crt-utility-l1-1-0

qsort rand

api-ms-win-crt-convert-l1-1-0

strtol atoi wcstombs strtoul strtoll strtod strtoull

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise _libm_sse2_cos_precise _libm_sse2_asin_precise _CIatan2 _libm_sse2_exp_precise _fdopen _CIcosh _CIfmod _libm_sse2_log_precise _libm_sse2_pow_precise floor log2 ldexp _libm_sse2_sin_precise round _dsign _CIsinh _libm_sse2_sqrt_precise _CItanh _dclass _libm_sse2_tan_precise ceil _libm_sse2_log10_precise _libm_sse2_acos_precise

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func localeconv

api-ms-win-crt-environment-l1-1-0

getenv

crypt32

CertDuplicateCertificateContext CertFreeCertificateChain CertFreeCertificateContext CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringA CertGetCertificateContextProperty CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryA CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFindExtension

wldap32

ord211 ord60 ord45 ord32 ord41 ord22 ord26 ord27 ord143 ord46 ord50 ord217 ord33 ord301 ord200 ord30 ord79 ord35

normaliz

IdnToAscii

Name

.text

Size

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.DCI

Size

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.$0V

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YNZ

Size

9.9MB

Virtual Size

9.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

233B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Kiwi X/bin/rbxfpsunlocker.exe

IMPHASH e990d7f0100453070ffacc114d7fece9
SHA256 bc16c090da0f70d81984c2ddcdf23369b0f9cc2d45bf62502a8211e77338c469
MD5 70f5aa0e8f8a69bdc3bcedbf01a14bec
SHA1 f13d49a385a87fcbb907ef9b15fdbfce09769524
SHA512 9b30c8ba0ffa9092c4b44e458ce2e18c48b09d06aaa33f0307894e3c836f81f1581b4d4dbd60ddc37617ea81d5fa8740811e99433b48a8a3a2b0535cb46ad82b
SSDEEP 6144:KOYqTNFe3T652nwlynQEqtRWatlwhovBlGypp5mdN7yTohZyfLZAn:hBNFeFw4npqtRWIlw8BlGoM/7go6i
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

96888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetConsoleTextAttribute GetStdHandle GetProcessId CreateMutexA Sleep GetLastError CloseHandle ReadProcessMemory GetExitCodeProcess Process32First K32EnumProcessModulesEx OpenProcess CreateToolhelp32Snapshot K32GetModuleFileNameExA QueryFullProcessImageNameA Process32Next K32GetModuleInformation IsWow64Process VirtualQueryEx GetCurrentProcess SetConsoleTitleA TerminateThread FreeConsole CreateThread GetConsoleWindow GetConsoleScreenBufferInfo WriteConsoleW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileSizeEx GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale AllocConsole WriteProcessMemory GetLocaleInfoW LCMapStringW FlsFree FlsSetValue FlsGetValue LocalFree FormatMessageA CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileInformationByHandle SetEndOfFile SetFilePointerEx AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx CompareStringEx GetCPInfo GetStringTypeW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW WriteFile HeapAlloc HeapFree FlsAlloc RtlUnwind

user32

GetWindowTextA MessageBoxA EnumWindows IsWindowVisible GetSystemMenu GetMessageA CheckMenuRadioItem DispatchMessageA LoadCursorA CreatePopupMenu TrackPopupMenu ShowWindow DefWindowProcA CreateWindowExA TranslateMessage LoadIconA AppendMenuA CheckMenuItem PostQuitMessage EnableMenuItem RegisterClassExA SetForegroundWindow GetCursorPos GetWindowThreadProcessId

gdi32

GetStockObject

shell32

ShellExecuteA Shell_NotifyIconA

wininet

InternetOpenA InternetCloseHandle InternetReadFile InternetOpenUrlA

Name

.text

Size

255KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

101KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Kiwi X/bin/settings

SHA256 fd2fd379b401aa0ff97e2bc97722f48687eafe4646bb5d1a13c86fc99389f1e2
MD5 79c8e6ac5ae2710242f3fc143da005b2
SHA1 411125556d5063030a4a7a2f86acf913ccff13c8
SHA512 b0807e1cd50895872cff33e614e29237b30099db97ddb27bb2360e6921f21ad68a7debcec32047836a6f623fac181f3e7d17a416aa5d2fa9dd827d5f3e4235ae
MD5 SHA1 SHA512

Kiwi X/bin/ver.txt

SHA256 1cc4396d79cf3c9c177e0e536f2c2894f1dd386a4ea91330b631703a321b9ab8
MD5 a5531945d8ab786b0d9225da5cabd495
SHA1 1c9cb55e882c7f72ca209c735b3808f156f880cb
SHA512 26aaf1c53bc9aa8cb38951ca2c3c5e2df58a3c304542aea84d1319350282fe8fdff5f29cd0d05de7f5d83156bab2f54b0217834fd31ccebace121dbc76b6eeab
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Empty Servers.txt

SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Servers With Fruits.txt

SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
MD5 cfcd208495d565ef66e7dff9f98764da
SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Total Servers.txt

SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Fruit Farm Logs.txt

SHA256 a0ff1bc9fae8f3ad6a9484cc0d550836837548b39b5cd649d51e01cea0ef7f60
MD5 da6bd1d5590351d30da3f979e1dc0c7e
SHA1 dcc06b6ab882ee7c2ee7ae0708734c55d4f227e5
SHA512 e48d0b7b581e19c709c6e14b43f630469ee102ee74c05bc950fcdde599d148afa69af98663cea3ce5b539b15dff22db97bd649f83437047bb84ac1cad3e46504
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Mukuro/BF/kiwiecksfruits_3897567374.json

SHA256 777dedb5a83a2c099f7265fa2cf0cf95a29a376e003d34e47290b4c036bf9db8
MD5 092edb0d866c05c9b9dd1534245e568d
SHA1 fd0f39a3130d832fc9c0b4fb57b27a31daa09a27
SHA512 4b5a2d09f3470bc3c55556b52e1396fdbbcfc04298e90bfedc279ddc78313e1bb9d137de264462c8456bd1d77dc0e64ef0e3ba95ac9cbc3380c712b95f136f88
MD5 SHA1 SHA512

Kiwi X/bin/workspace/NotSameServers.json

SHA256 525ec3b5ad9afc0f09a5f7e0eb865e97f5b4b614a85cf93f3ae644f8e5f874f0
MD5 15f019b4deb70b75c09cbc1ae50533a4
SHA1 758a1332c2766376e9de99c2b3c2f5b8e0f84b17
SHA512 7b860f89b9feb2e49dcf90f9db3e166e1d3f6c62c6c145fe81ea92fbf59c91fa2cabd5677a04402ac837e8c24652b9f49a30c181f83364ed91d25633e84a4896
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Enter.txt

SHA256 b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482
MD5 118e5315caf3e357c30c45affa9e8e3e
SHA1 114e3cf096058a901a98443adb14aa035edeb7ff
SHA512 c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/ExtoriusOnTop.txt

SHA256 b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482
MD5 118e5315caf3e357c30c45affa9e8e3e
SHA1 114e3cf096058a901a98443adb14aa035edeb7ff
SHA512 c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Here.txt

SHA256 b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482
MD5 118e5315caf3e357c30c45affa9e8e3e
SHA1 114e3cf096058a901a98443adb14aa035edeb7ff
SHA512 c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Usernames.txt

SHA256 b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482
MD5 118e5315caf3e357c30c45affa9e8e3e
SHA1 114e3cf096058a901a98443adb14aa035edeb7ff
SHA512 c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_blacklists/Enter.txt

SHA256 39a03b432aeccd71796d0494dad5e9e2c11344ea2b03577e5c8140f1941fc211
MD5 7dcb7074a3da5cc9caacc305db15f3dd
SHA1 f72eee6a207fdd5d9d1881dec34fc2d57fe41a4b
SHA512 d78565fb1d81d17da53d61544ee6bb1ca2ae5022749e2f3b155b4b5bf070cdb00a18996faaaf8150b5715f05d37f41692f0ca9e9ef0136e3d5a8efd4f2318ebf
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_blacklists/Here.txt

SHA256 39a03b432aeccd71796d0494dad5e9e2c11344ea2b03577e5c8140f1941fc211
MD5 7dcb7074a3da5cc9caacc305db15f3dd
SHA1 f72eee6a207fdd5d9d1881dec34fc2d57fe41a4b
SHA512 d78565fb1d81d17da53d61544ee6bb1ca2ae5022749e2f3b155b4b5bf070cdb00a18996faaaf8150b5715f05d37f41692f0ca9e9ef0136e3d5a8efd4f2318ebf
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_blacklists/Usernames.txt

SHA256 39a03b432aeccd71796d0494dad5e9e2c11344ea2b03577e5c8140f1941fc211
MD5 7dcb7074a3da5cc9caacc305db15f3dd
SHA1 f72eee6a207fdd5d9d1881dec34fc2d57fe41a4b
SHA512 d78565fb1d81d17da53d61544ee6bb1ca2ae5022749e2f3b155b4b5bf070cdb00a18996faaaf8150b5715f05d37f41692f0ca9e9ef0136e3d5a8efd4f2318ebf
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/ATOW3D.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/MegaJacob3072.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/MemoTV85.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/N4riXD.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/Nicholas_lauuu.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/SophiaVCabrera.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/XM77712.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/XxGoldenWarior365.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/knowkial.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/newroblox_lol2020.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/sixpacker_2131.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Self Bot RMA/saved_points/sunny1383.txt

SHA256 1a6562590ef19d1045d06c4055742d38288e9e6dcd71ccde5cee80f1d5a774eb
MD5 c0c7c76d30bd3dcaefc96f40275bdc0a
SHA1 e1822db470e60d090affd0956d743cb0e7cdf113
SHA512 e62b01e8497ab6b7d89432599e21804eca278bb4a9c4b6ef5f7bae00bd5e45ae6c8cf3a18b74296f9a8e69cd2f416a8f41eeb2128f4e280ecf438ffef6244e14
MD5 SHA1 SHA512

Kiwi X/bin/workspace/Serverbin.json

SHA256 080a9ed428559ef602668b4c00f114f1a11c3f6b02a435f0bdc154578e4d7f22
MD5 35dba5d75538a9bbe0b4da4422759a0e
SHA1 f629ae44b7b3dcfed444d363e626edf411ec69a8
SHA512 cb0b42c73bc373fa2c695ffb4d4c801571f23397aead7c5b793269801e740ed666f83149b1eed6eaab5f07876236f166da5ae3deb8ab52e85dfd9bdd7c3c9432
MD5 SHA1 SHA512

Kiwi X/bin/workspace/server-hop-temp.json

SHA256 3ab4b7860b2db728bf8d45b972812dcf319495949f9200c6a5f2a64d3f0520aa
MD5 a1da469043388a6391b4038d3ba61cb1
SHA1 7288ca877736b980fd739340654d741a071265cf
SHA512 020ffc0be5a506eba29fb9745d74e241c550154209eab8d6d31a45c8d9dfe73fc718fda96fff8199d24074ff04d34c1e644990fb3ae609689aff65142814b042
MD5 SHA1 SHA512

Kiwi X/finj.exe

IMPHASH 39ae286c462c7fa9fbe2711a25012bf0
SHA256 237ece227d239ca11f090e1ddde4ee8f68ef5f7aaf5fcb0ecba14424ea276d76
MD5 bb8df28332e308cf40dfd2df00161f34
SHA1 888f2213a68c61cc635fbfbddab694f517b0c315
SHA512 09d67c94ed331f2383627db1317f5480a0ef9fc8809cb075f9e603b7a653a4931725fd32776492ee4aa163035912535934a310aa2f8eb8790e4736555c28f4cc
SSDEEP 98304:2AONPewHLRESPB2KC6Z36S0GQpZLff+RaDDyw3W92wUpIU9Yj86eL1DXSJBN2lAB:CJXHLqU2tkw+wRG92wURDovpR9sA
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6035669

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.p+-

Size

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Lxj

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.<$M

Size

6.2MB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

469B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Kiwi X/logs/02-10-2022_00-54-09_Crash.txt

SHA256 a7eb0bb7a82d4b6012936d5b4649562448ad7967f86d7e715ffb14e338512ad1
MD5 379ed58c6cbcab273c1970ac2840f8c1
SHA1 54da0afd20ca5fc6c01dec6dbcf8c99fd8c6f183
SHA512 72f251c579c2166ba446ef051f6738a7756b0c9daff34ccc8c76fceef02d5815f31f38312f363fdf42efe8b7ef589d5bb0cb23a626c348e55f34118c35d0a5ac
SSDEEP 768:ViWVz7dN6Ay419Jo1P78JwfLbzoFY/pkAe9SAoPt/7RxOtymvS/CzAZ/:ViWVz7dN6Ay419Jo1P78JwfN/p11OzSx
MD5 SHA1 SHA512 SSDEEP

Kiwi X/runtimes/win-arm64/native/WebView2Loader.dll

SHA256 00e1239198653aac1d89eeeb14c9d73a9f7114f396cd2e351959f19d8cac7b42
MD5 04a615920538b4e4332cf382b83e7715
SHA1 76484ed0c8e59ed19a0d0d551a1b4c6e550c79fc
SHA512 a5f9e38608e44a024fbace737c3a6676c913db17fa43ab94b22db807f6468565490a2fc95391a51292c0a1d6c855fa0c1f83ec7908d2ba9b5e84ec93302f38cb
SSDEEP 1536:RloHrOPzv4t1hmtcGXrGv8QitveGIsWLdgVWTFxEtzeW+CzW1af:RloH67v4tCe42G4gVWT/Et6WTC+
MD5 SHA1 SHA512 SSDEEP

Kiwi X/runtimes/win-x64/native/WebView2Loader.dll

IMPHASH 2a83d48aba3833cd76509f4d745e10bb
SHA256 4371042e8a74159ee8751e85887693cc1b710bb3c849d863a6c4f88f0d69287f
MD5 ee07a77c1f96d18d16566f18689f2379
SHA1 8e8920f165547cf5a26089ed008752fe13dec3d4
SHA512 c7ee16d51b908ce89af4690737361d8f6b8925ca23a3c3f3eb8e91ba47244bf72e9eaa3d8d4f1c1d9683a892f31a751065d5aa77d731825cd53823770c037c2a
SSDEEP 3072:4Vl3u395AFm23fMZamo5Ha/9V8mgg2esFTYEtBnezYSzDA:6YAFmKyazpa/9JjEtUzE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

aa:fa:cb:96:22:e2:03:d9:07:8d:16:51:19:a9:7b:28:d0:dc:1f:d5:f9:ff:5d:c5:a2:93:10:6e:ae:20:9f:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 4, 2024

Minor OS version

2

Major OS version

5

Entry point

17456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateEventW CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

62B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Kiwi X/runtimes/win-x86/native/WebView2Loader.dll

IMPHASH 608537c42a46a95b31cc1ef01ab6eeb0
SHA256 a867f316cba3c915aa2ab1047a20f22bc3c865409e175bc5bb2839b9e076a43e
MD5 f7903311dcaf0d06036817995e421baf
SHA1 e14d20d7ab8fc9d5c0b40eec3d3e954b3577942c
SHA512 4f2980a6b8f58e25feb4982085806112c1096c0de4dab92a68b0ce9524fa110b7d2ad20f8908072f064fede9696b638a8aa7d84af40d835ebecafd73e422a5f2
SSDEEP 3072:KykiJ1Z1K95jvS8BBw/qZqocqQT+Et9WSY4Mld:pkiHTMBBaSEtUSMld
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a9:54:b4:bf:58:bc:7e:90:ab:2c:19:1f:d5:6c:60:62:00:6f:fa:32:f0:4f:21:80:de:51:20:2e:5c:09:91:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 4, 2024

Minor OS version

1

Major OS version

5

Entry point

15936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateEventW CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ResetEvent RtlUnwind SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

72B

Characteristics

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Kiwi X/workspace/IY_FE.iy

SHA256 c200134edf6be96d118e862688ab5d0fa3cd47b1a6ab7f1c656ba505ac7e0ef0
MD5 d201ac1cea2210c0b150946fd1776566
SHA1 d6e06c12bd0f625fb0494d15d454d430bc3c68a6
SHA512 87c9c74b1aca05ba98d57ebd02d20ff8cbfe3c72fef7d5cbdc440062433030ab2df561287f23f2ec5416056d7a9ad74a4634c65133692744326b4e3ba06a52af
MD5 SHA1 SHA512

Kiwi X/workspace/Mukuro/BF/kiwix2good_4191165852.json

SHA256 a250d64020d55ee60211b4d1ac0bb90d4f9295cee140a71604914370d6aab3cc
MD5 234fe647368244d75d7e61ca20c612df
SHA1 75930152bc09ded85d4856a4219ee8eed9e7c51b
SHA512 1138cd1b4eb6cf9fa4c2c9fe3293ce4f9e569cf190fefb6254f7a592aa7723385283ab780c55f4472000f3769576138466367b1d0608f7b19f5b0b0af500fd0d
MD5 SHA1 SHA512

Kiwi X/workspace/Mukuro/BF/kiwix2pro_4228266744.json

SHA256 69d818d67c1e55c772e10ba34a5220e607ea7efde3b4ab82ab71f58530782be1
MD5 9eac29f500a761e7356735e3d32595d8
SHA1 68502e5af0650b8d56856b0a599ff7ca2656000b
SHA512 ad30f69211a84acfa3f7e1e850d0de5ed097a8082cf8f8a40db6ede60ead41a4c8ab8154f063a8be22a74f11d1d3ed6b41ad608cb8172bffe4578adb694997f5
MD5 SHA1 SHA512

Kiwi X/workspace/Mukuro/Key.txt

SHA256 2ed82ee98aecfe032772933b0cfe192e801989a8e1e62c745fc0c41b4d9a2028
MD5 6ae7a345382f28d087bab19012b1a438
SHA1 4d89635965d76e369e8df0542f54768f108d057b
SHA512 3f2f8aacc01bbd79b8da108c71a13f7e983c5a5ca56878dc112cecf7c9f0665f7e3965e8ebc15ec5ec5519ebed95436385b33e1cbba17be9b1a3bca19cff0781
MD5 SHA1 SHA512

Kiwi X/workspace/Serverbin.json

SHA256 eb3c4eb5d08cfdfeccc15734ae86cde2e5f247299e3b6d5742dc35e67da62fad
MD5 60ac310cd2c4508e89cf6df176aec86e
SHA1 5c6c1ddfd015813fec98a50c954f51cfc11c9eea
SHA512 e4bb7d5c4ce606d875831607e49660ba4259ba73ab3852ba418e59b60975d15e8f1e6bd67bb4709d66477d3b8229dccb2f31c2af019986eccdae685d7c58e115
MD5 SHA1 SHA512

Kiwi X/workspace/TurtleSpySettings.json

SHA256 b3eb78f5616a4522d6f459efd8ff2108cbfdc88212e378c69ab7b11f69504318
MD5 a9a2f447ad64d1487874d711aedf6e4c
SHA1 131942ecf40cd71b59e7377cb052c5729613cef4
SHA512 e7d17b348066a792d48a65b45b879f2fc39bba50403beca31bfbd349ccbfbed445a4c972f3b602b7a924cb4bdf78e2c3f62fbe07715c06c33237c775de29f5f3
MD5 SHA1 SHA512

Kiwi X/workspace/fates-esp.json

SHA256 1fc3659fe0af547d44efd2abaa89455f1ac22c37640e5291a73fcd93e501ac41
MD5 9a95200f4c31c5e23ccf8c717a8eb71a
SHA1 3b76e9fbb96a42c494ac73cb0eb4ff2c0b2ab259
SHA512 492834c6569a06699e91ec3779b66f4eb7944e6ca1962d909cca5939696873ebdfe9798363ac1cad658c9de7310ee5bad23952a55a84db730330593a97f443ac
MD5 SHA1 SHA512

Kiwi X/workspace/items.txt

SHA256 25735f429e75961c25ac39f1c1bff8eae142107231b87041ed8e28971b16e960
MD5 ded11bde50d31ca5ec87531952897fed
SHA1 82c65f5ab94b2025f329f6b949bb5aa918b2b809
SHA512 b11f25dd01bfb8d322175366d7b209506f0fb10ee74e94928854691c47e2a5ba2882090b77eabd038f4f210412f023edc16245f239d2e89b32a70d4971ac3811
MD5 SHA1 SHA512

Kiwi X/workspace/roadtogrambys.json

SHA256 e140ae35dc0be55379303368e0db4d56a1e1d6e0c9e73199d026e37c579c920c
MD5 a9cfe407bb11fdc27d2c37b9ffdaeefa
SHA1 6963fb77af0e8c1160b55998970fdec442174cf9
SHA512 0cf0e38caba4b4c4117b22ef17b17d6e9f163bae2f7f92baacbd30acd4fb3b43a7ca0eb729372b6807c104e705fee353391d064d35e3701850471d691e41e75e
MD5 SHA1 SHA512

Kiwi X/workspace/roadtogrambys.txt

SHA256 17926db291a6f7a14168bc42591e47c23481b58342532801553a40f19f367c8d
MD5 2c0a1849612678e7e0aae0343d76d446
SHA1 64d5ada5b8352b5c41ea5f417feee281aa797936
SHA512 8ac9627fa2cb54cff9be0c86b8d97c425636133437bc8cec46ed32466eb316d294a6a3969d8b2ac0b2c0a779ca22756405f3efd721b90f05d6af19f5eddc36c4
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/release_tags.json

SHA256 43ecef4abfef9b2e4da7bb5d9bb51f28c09b299b0a831d555506af6ff5663db5
MD5 feea89471bcab9da0f8a2fccf8ca5f1f
SHA1 ee892a04baaccfc6fa0a4d2c1d3ad54246a9a434
SHA512 c867a1de391cc5763b5aed30825f5380abe1db998668910707bffb77e38302626cb5215f15e1ef04aedc0458d1eb04f5b8f008c4e74efe29d5c7d7d934171cf7
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/.gitattributes

SHA256 1a1dbe176bc233b499d35a57db7513f2941c99ab9759f177830c9149be99005b
MD5 05bdb783ee6514c8c072e47680af8ff7
SHA1 ba3dfe345280bdcc5e817bb02cf49b8b8d8e1c4c
SHA512 9e820d6126d62c0b89e380c69685f6668b2f131283f57e524f59492fa6df22844dda1b90d244d4a1f8aea78a84e65d47b1a878168c4e41001459a947ef275ffe
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/README.md

SHA256 47938525c3986a4cd80df6fc4d532fea2252045b7e4c4e27bb84e244c0f910f9
MD5 c874257fcab661f388af80b2104af3a3
SHA1 f5e8dbbd71f1611c42ff0e6d30a0b270efec9ad5
SHA512 e748bcb09677e57c87f420ccbd0f8de2a31c29e044ece09ba826e6db720917384b25db6d4fa690cd3d7ba950a84d3ef8805a8a0d0a26bd9ce2ddaadb932d10b4
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/extension.toml

SHA256 c464e7169e20705763c2ad2e6ebee35165643058a6a34e6ca099dffeed09626c
MD5 089bc5a829e9ab13f41363ee90618af1
SHA1 9a55c694024dc8dd48840e1b6c5e9e616980634c
SHA512 592fc8ef50e163e4ffe03f08c627617d5d36e119ec54aceccf87c42a22e7afdf7409177a1b0d5f610ea50b6799c0e3deb20de8a1809a7db1b95f4d6f55cbd1a5
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/img/midi-folder.png

SHA256 ff325c38e3f06dcb370482a35b88f992c5efadd3c3e3d3538b3e87468c0b76bf
MD5 e5f7c001ce377d5af651679819a9e775
SHA1 52190fe5409454182c5084b64d7f409a514a3c49
SHA512 415ddf73a88f8da51acf34e6357c1dfb498c27b8c2cdaaecfcac676b0eb4380aef4a0ceaff6969bfb94bada1f71a77e68533e7797c7f85dc9247da8fa9f737da
SSDEEP 192:gUfAZrYywA0tAUAkGsKNXZfehncBtccXo7GDgnI+9QKqk/q:gqA4AFKGlEuw+oSgI+jo
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/package.lua

SHA256 74a9d37d411e981f87fe850aadd993e00b78a118f7923dd9a68ee9356cac6fdf
MD5 be76d11a30639dd08f4704cc1ec3866b
SHA1 d66f8ed9546fe646d44f1d357d5d119455fecadd
SHA512 d8b28701d6027fc784ff80fd3ac0b79cc285bc5977725a118b2fbd2cf468cbabe8850197f4cdf76d0d8b1e0a22fd11f4f8b317aea567045218063a2c3b81d339
SSDEEP 3072:lGPnAKVkgrGblRlL8cn1bIYn4uEpAbLgnoZlxk:0PnAKVjrGblRlL8cnBIY4uEpAbLgnoZM
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/roblox.toml

SHA256 b77794f8888a54510809bc047e272c9635fbe64996e57cf83f2e98464cd5b0ef
MD5 b92a0b2989979674e12999026c4643f9
SHA1 a1d0285d8c0ac758dccf325238602922a0b83b86
SHA512 71d1aafb774c7f93a39e575f6913127fb9c5e6e385d7dc2b7969264a828398da4477650962dc7db420a1b8cd4dbf5028c8f3c961fb44e46ac2f52416749900c9
SSDEEP 3072:Fjnp8AfQk85AEnI0e0odPIIJgg5vJud8aeLvUQCgbHYlc2OgD89N:Fjnp8AfQkSAEnI0e0odPIIJgg5vJud9W
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/selene.toml

SHA256 7ab5e46ff74b730c13b2a920c7caca48cc678022f95aba5ed3fcfe060e36e9b5
MD5 d3fc0e116a36d7fe0354efaa66ce4722
SHA1 3d3942f888455bcf8f65806ff2ed831bf1d9e569
SHA512 63b0f5962a736640376150c4ac03a4fc56b08f22d856fb82682529e096fab72877f291bebb52b35e844835eff1bae623e688d7f6bb26b3333368622a3abb53cb
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Assets/ScreenGui.rbxm

SHA256 97544e36b4180dc7241074f50f684472e71cb104d1b77818146092567dd7fe4e
MD5 c6003c10043ccfe7a97ea39cfcff36e1
SHA1 20bd8343d365407460fa18ebd0792bb831732d03
SHA512 cb954c80d42e9f8e8dbf697da69a40ff4c7d74bafacfec0c12eafe1a7e18c30d77e6ee9ad306379f70864811c5368a05dec1657753028dbbcab8005777098d57
SSDEEP 96:9cIAAHo+EE98+Rb3t9cIvht492bFSnbCM7z+MzVMVumudHWqh/UIzpMQTnStw:SIA6onABR73cIpoZz+yETcWa/d2yKw
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/App.lua

SHA256 0bafa2e536c08844759c3f19416b2f603c08deea71906d6bfd22afc5cbb205dc
MD5 c246e1aa083c48255e17e030d3ecca1c
SHA1 2f2881d9e3f73f2162b62600d2e3eb28043ac9e6
SHA512 497dd4b33b05a9caf37e71984364e555eb7853ac1d899b7366e33eb66dc6c057f3761c9cd3df34a95ea46a02e860294b20f60f051e3c1210e1c24e0bb0b3cbd6
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Controller.lua

SHA256 074d7c8738f6205add801ca30b3ebdbbc3059f10d8b7be1f66c8cb51ad84864d
MD5 80a831ab6505bd61d6f798b314ec6c7b
SHA1 4956cb08df436f00f00112e915fc580bc6cbb460
SHA512 224b6ba45c86c4c95b8f2e11031f55ea80d030669cb5d9faf60c1c006d94824660fb66a248e6fb7250fc5581cc85fe9de9b6fc664bbb90da8179554749f4f751
SSDEEP 48:HBd+6nK8MK+ibvx2dErmTnZ2mRQx8Hd/BRcrm+mWZF2OFz2kOLUyjiyC8/uCklRY:h46KkUdEanZ26dfcL5WC8WCyhbiNA4
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Preview.lua

SHA256 18514576ad63c970698f046ae67bd198571956a0b81f3a9bd8d96425325b8fca
MD5 f53e3aee9ed188c1670289426bba1f59
SHA1 e972a42f61bde0600b70ab0e6e7008be21c39f95
SHA512 50a880ca8ea05fff68cca242ceba34fb0c2fa3aed89ffbb0e72599ad613550ca13b2c4ada3dcffca1d1c869541e4b461b7a0d82da33aa9133b4e121c9cabcd27
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Components/Sidebar.lua

SHA256 ac6d6c9b8c9301dc24bbc6d493b9f1d49efdaaf62d03303366c5367e0e4a3209
MD5 844e0e404f511f6f094aff991a9f39a0
SHA1 b3337b112f3c30dced918e10c63b6ab9cac050b5
SHA512 2b2ec541893f2c974ea7ac430e35ce8290286433b618693f21fd98a18572619cf4d797d6d5c1ea73289b20a8c05779ab22b6bf3fbc520bceaca9a4edd74df6ba
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/FastDraggable.lua

SHA256 b9a5940a4f9e5835bc2c2ce6125a20c6685cf10fe59b681ac06fce3a841ee676
MD5 2dcbadb2674ed20cee820b7011c6d9a9
SHA1 11b63c7c556e654c87eb31e4d28f94e44a04f610
SHA512 8ca5902cd611f3dd574cbf527a66717b910d037618d07661ee52b55b79df6e1a8c7b0e58dcb28a5ff6d26f9f7d2a6b328df82c5ad5c728cb7a98bf1cdb2568e2
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/FastTween.lua

SHA256 30fd92a650aac16b2ded392b75a0b7466d65d5a6787fafee4f827d9c908f25e9
MD5 3fbc9ff9164bbec95243527814b29103
SHA1 ce243f6437665debbc6f207014b1dd9cf5f9e7c7
SHA512 1b6e787f4448b1e9973da1c5119a269d55b6b85cd24eee220f8618db7def3ceb1b5a3f182bb7d20d19678db9095d3ccdf3e78deca14e16fd25ab73cd6bafcc50
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Input.lua

SHA256 434f17e980b5303c75c4756164cc13a95c0ee3660cafba3513ea4b03669a584f
MD5 817bc618ec8494f342390215bda3b680
SHA1 49b40af20d2fa0b7de74a5a3f92385431c28e548
SHA512 6e99e4a77b8c517049fd09a177ff2bca9c87f3c0b9d47c17fc04b13cc0b04c117388d1fcf7cbf8c11d7fc21ee4e42c7c3d0ad6a07e04cbe5cc2dd00d28d441c8
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/MIDI.lua

SHA256 57b1d641d524f49f5e280eb9a163f04284921c8a1756e902fa0d6465a6460787
MD5 de2617b5de723b0cf9c73e621667077e
SHA1 49ecaebe1741642aa30bbc44cbd1c1a94b95c021
SHA512 1a9bc9aff6a0a3a9b919ed60a9c84757667a5b7d74d416e63dbdfc56c387e64f6d61446c4a368cda62e80a226c5761b18de1119bfb51c0e51a9919528fb6d41d
SSDEEP 768:P5s+4B4jfuy4BxT9lfyITIhHiPAflD8IT2j5GlMuETriNlqjfkoItQ/9/ItvKP5f:PQXnOlDWG+HHkltQ/xIp+5Sqw/w
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Song.lua

SHA256 4073cf63bec57560ec021ecb5d60b8a36df78e55fb43f0957353b0233d1e4f3b
MD5 6352c4ddfeff3baeb121ff8fcca99d17
SHA1 df76288a376fa59d10b5c599aba43da75e9fe7cb
SHA512 9559befc9a397f0194e063171bd63381c49164f1d196bd1d3eec3866aee8d18c2cb3b75b0925a13dfec3680f21129c483944645282d55a67447acf825916f05e
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/TaskScheduler.lua

SHA256 adfdf3a18734582c813d04b5151a0cbf6007a8ff9292e581f05fa2c71a1345c7
MD5 393276ba47c01f982d7167b02c0351e1
SHA1 9330b8f599841168e5510df7ea6b5d24bf4f94db
SHA512 cb9d40b1b52cee1ae9b211754ca6b187873891301fde94d4d14f417384f2012615dc20217200cef3c6aa283da4a9982030ba2b57f5132f43e1b14e6a89a6a574
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Date.lua

SHA256 ff528e1ddc9ba61c01d5f41c235bb1845ddbdd2129b7498fdb3965c21b7d3e8e
MD5 0d24bf55b9f83d516a95a4adb6047b59
SHA1 0dba7ba76fc9aa99443e6d8c1fa0518df293ff3d
SHA512 a95fb586a6f7879995efa364be63163caa9d92620f64e414e5ffd86144e0cb5579dea26390bf3122fe89aed450988ec3001c3097a5d52a9640ea7657d27a45b0
SSDEEP 96:edavFmGRAv4oNR/IAvphBVfUdxQLyFzW3PzZkZZWEHJ+Nj1SdLYitYqks5c6i:AGRtCFvphBVUdxQL4kP9gHJ+WdUpqkWM
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Maid.lua

SHA256 e59b66fc1b03c9bf30b4811417d000e1196dc582495ac5d35f2c639bf8a5385e
MD5 f7a648f108a89e24a7a988cb77dfb589
SHA1 6c2e89d4b90e56eb33f86eb6a8a2acba0170c162
SHA512 31912937b216d6f17011627d0cf0ec6ff976be460a7cd30e19a8de379b4f24b7342c2f6cdaf373c72741c9964f79ecc9974ced6a471bc86a77efbf9c2a96b998
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Promise.lua

SHA256 1c017dc3f8f592e47117ae9e61ba406289982d07c7dcefdc567616d8395b22a3
MD5 6f33986baa0be18d5edf466245dcf2e5
SHA1 77df987e990933765720da6c3507446c9d4d1bfd
SHA512 93e1f148978f091328ddd097357ceb72d1b711c5f314065054a5211524e96f98761ca6c79729e7425647e1c66bdc902dc814a05ebd1db55910854c71ab7a71e1
SSDEEP 768:78b79yLTkB47KN2+i4d2QuB+82I9GoAYT66/sNCgY8Q/MSTpdfLyR:gb7y/Y+oBotTv2dLQFi
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Signal.lua

SHA256 87db2a04a014b0af5d554666f969d9752af7d40e811aafd22a90a5036ccb4e37
MD5 a1303fa07706ea4752fe6330fbd9012e
SHA1 a7359b8d9deb409e6765243340553ca790a73a20
SHA512 faa1c5107ffdfe0302eb9edf0cd544263632c14e38f5988fa5d6d94b393efb0076ce50bb7a536f22ec2827198818ca98da548155be5fb0d67fdb272018825924
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/TableUtil.lua

SHA256 e1eae807378e3f690ebdf32f55cd8607d9bbed76b29c0ba7b7f21dbe8f13e549
MD5 a47d6225dfd1221d16a879bf28686e37
SHA1 dafdf17072603d6f6b5de18973f391fd5866e287
SHA512 d0edf01c7e12db9309f1fbc79b3be106afc55a4b1246f050fe74a67b16bb1a0bd5a9b88b709383a6b4984f41d360b39e5edd5174c42b3c7e55d261d331055980
SSDEEP 192:Euak0Z3fWNKaoXThUpFgpcO9+/bFSAaQZNh7WK86dENRCWym29hfQhRx2NbFknvD:rak0Z3fWNKaoDhSJO9+/bFpaQLhSK86S
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Thread.lua

SHA256 c515d46c7529b9ea6793c8fb1f5f7671cbf5c4778a9a7d82ee1a74813e91e0d0
MD5 195a0d1062aa3f27b40c262fbeeb7619
SHA1 20644c5d9312cd0934a2bd162b291b17f9119549
SHA512 30f0128e1ef4ecbb952956ba424261462d5779597a4fe3e10a55f5cf74a751ed0f4e5c917f6a29df026d933012e4be6a1114dcf5358bacc15cd9d0eb845468d0
SSDEEP 96:jqnHCwy7ssYgb6PC3W0wPJsoC2rPVwSOQ+CJLY5aBj/p/XdM51n:jSV7obo17PJsoC2rPVnOOY5aBj/p/i1n
MD5 SHA1 SHA512 SSDEEP

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/init.client.lua

SHA256 1078aa3122e28f12e4e9f0310d0697fe0e1cc1592b6fe0d20fe2214035d7afa6
MD5 5f703c83c0784930290ef6483a8a54e4
SHA1 3c44daca9845384fdc62594c58be70a672fcb95b
SHA512 40945d1604317b6630612273cade2174783d4143194e7573fe869321fe70f567079471736b788819ab280a06c33acf6dd5aca10f034409c65a10997ef9d3a74d
MD5 SHA1 SHA512

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/init.meta.json

SHA256 5086d43baeeceac86056e5207e7deac5d29f801b6d7961d061afd8892099d2da
MD5 2087d4f705d4e0a4f2888a7237ce647e
SHA1 e896c4817cac600af8b0ee4836a774d25937009b
SHA512 c040b2b7af62d57d9d38ef6b3b5a79cc766595aab9e24521deee34b1ea54206fa35f3d269b19012e6925d26c694fadb72dc956da7af0aa56b468fad029c64856
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer

Kiwi X.rar

Kiwi X/DiscordRPC.dll

mscoree

dotnet

Kiwi X/Kiwi X Bootstrapper.exe

mscoree

dotnet

Kiwi X/Kiwi X WPF.exe.config

Kiwi X/Kiwi X.exe.config

Kiwi X/KiwiAPI.dll

mscoree

dotnet

Kiwi X/Microsoft.Web.WebView2.Core.dll

PE Signature issue

mscoree

dotnet

Kiwi X/Microsoft.Web.WebView2.WinForms.dll

PE Signature issue

mscoree

dotnet

Kiwi X/Microsoft.Web.WebView2.Wpf.dll

PE Signature issue

mscoree

dotnet

Kiwi X/Monaco/Monaco.html

Kiwi X/Monaco/base.txt

Kiwi X/Monaco/classfunc.txt

Kiwi X/Monaco/globalf.txt

Kiwi X/Monaco/globalns.txt

Kiwi X/Monaco/globalv.txt

Kiwi X/Monaco/vs/base/worker/workerMain.js

Kiwi X/Monaco/vs/basic-languages/bat/bat.js

Kiwi X/Monaco/vs/basic-languages/coffee/coffee.js

Kiwi X/Monaco/vs/basic-languages/cpp/cpp.js

Kiwi X/Monaco/vs/basic-languages/csharp/csharp.js

Kiwi X/Monaco/vs/basic-languages/csp/csp.js

Kiwi X/Monaco/vs/basic-languages/css/css.js

Kiwi X/Monaco/vs/basic-languages/dockerfile/dockerfile.js

Kiwi X/Monaco/vs/basic-languages/fsharp/fsharp.js

Kiwi X/Monaco/vs/basic-languages/go/go.js

Kiwi X/Monaco/vs/basic-languages/handlebars/handlebars.js

Kiwi X/Monaco/vs/basic-languages/html/html.js

Kiwi X/Monaco/vs/basic-languages/ini/ini.js

Kiwi X/Monaco/vs/basic-languages/java/java.js

Kiwi X/Monaco/vs/basic-languages/less/less.js

Kiwi X/Monaco/vs/basic-languages/lua/lua.js

Kiwi X/Monaco/vs/basic-languages/markdown/markdown.js

Kiwi X/Monaco/vs/basic-languages/msdax/msdax.js

Kiwi X/Monaco/vs/basic-languages/mysql/mysql.js

Kiwi X/Monaco/vs/basic-languages/objective-c/objective-c.js

Kiwi X/Monaco/vs/basic-languages/pgsql/pgsql.js

Kiwi X/Monaco/vs/basic-languages/php/php.js

Kiwi X/Monaco/vs/basic-languages/postiats/postiats.js

Kiwi X/Monaco/vs/basic-languages/powershell/powershell.js

Kiwi X/Monaco/vs/basic-languages/pug/pug.js

Kiwi X/Monaco/vs/basic-languages/python/python.js

Kiwi X/Monaco/vs/basic-languages/r/r.js

Kiwi X/Monaco/vs/basic-languages/razor/razor.js

Kiwi X/Monaco/vs/basic-languages/redis/redis.js

Kiwi X/Monaco/vs/basic-languages/redshift/redshift.js

Kiwi X/Monaco/vs/basic-languages/ruby/ruby.js

Kiwi X/Monaco/vs/basic-languages/rust/rust.js

Kiwi X/Monaco/vs/basic-languages/sb/sb.js

Kiwi X/Monaco/vs/basic-languages/scss/scss.js

Kiwi X/Monaco/vs/basic-languages/solidity/solidity.js

Kiwi X/Monaco/vs/basic-languages/sql/sql.js

Kiwi X/Monaco/vs/basic-languages/st/st.js

Kiwi X/Monaco/vs/basic-languages/swift/swift.js

Kiwi X/Monaco/vs/basic-languages/vb/vb.js

Kiwi X/Monaco/vs/basic-languages/xml/xml.js

Kiwi X/Monaco/vs/basic-languages/yaml/yaml.js

Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_16x.svg

Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg

Kiwi X/Monaco/vs/editor/editor.main.css

Kiwi X/Monaco/vs/editor/editor.main.js