Lorain_1[.]0p15[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Lorain_1.0p15.zip
Size

754.6MB
MD5

806a72384affcb28f2d0570be318891d
SHA1

0fd0987ca27ff2f158cc0dde29665ca03f3923e0
SHA256

84669f8c3a9676457ea2cacc64325359e1cbed554472983f57676e3c50e9b4ea
SHA512

7b01f4df189681ba20b470043f17435edd9fae8cdfb173ad5a56847275cbaf595e813cc72a6d50f6a5a141b1d096ee76957a35fb4feb1a387e7e781f79fd5dce
SSDEEP

12582912:GX94RpGHuErSW8ZkLYIyBUEEh4V6HMICIjxE9c0vTt3zawng9ssaxf7lvQqc6gH5:rm1gZxflIL6Wgewg9ssaZuq9xpg4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Lorain_1.0p15/GameAssembly.dll
unpack001/Lorain_1.0p15/Lorain.exe

Files

Lorain_1.0p15.zip
.zip
Lorain_1.0p15/GameAssembly.dll
.dll windows:6 windows x64 arch:x64

e62f5c38a6467680b3283fb9a6cf9d16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\unitySync\LorainV2\Library\il2cpp_cache\linkresult_78C92B64F457E77D6AF5818A094E8373\GameAssembly.pdb

Imports

kernel32

FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
WriteFile
IsDebuggerPresent
CloseHandle
DuplicateHandle
RaiseException
GetLastError
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetOverlappedResult
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SetEvent
ResetEvent
ReleaseSemaphore
ReleaseMutex
SleepEx
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateMutexW
CreateEventW
Sleep
CreateSemaphoreW
QueueUserAPC
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemTimes
GetSystemInfo
GetSystemTimeAsFileTime
GetVersionExW
GetNativeSystemInfo
VirtualAlloc
VirtualQuery
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FindFirstFileExW
GetModuleHandleW
GetProcAddress
LoadLibraryW
GlobalAlloc
GlobalFree
FormatMessageW
GetComputerNameW
GetTimeZoneInformation
GetDynamicTimeZoneInformation
GetFileInformationByHandleEx
WideCharToMultiByte
GetACP
GetLocaleInfoW
GetThreadLocale
GetConsoleMode
SetFilePointer
GetExitCodeThread
SuspendThread
ResumeThread
GetThreadContext
VirtualFree
WriteConsoleW
GetProcessHeap
GetCommandLineW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
RtlUnwind
GetCommandLineA
SetStdHandle
GetOEMCP
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetConsoleOutputCP
ReadConsoleW
GetModuleHandleExW
ExitProcess
TerminateProcess
LoadLibraryExW
TlsFree
SetEnvironmentVariableW
GetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
GetCPInfo
GetStringTypeW
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
InitializeCriticalSectionEx
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
FindNextFileW
GetStdHandle
GetModuleFileNameW
RtlCaptureStackBackTrace

user32

MessageBoxA

advapi32

GetUserNameW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom

ole32

CoCreateFreeThreadedMarshaler
CoGetContextToken
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize

oleaut32

SafeArrayCreate
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetVartype
SysFreeString
SysStringLen

shell32

SHGetKnownFolderPath
SHGetFolderPathW

ws2_32

shutdown
setsockopt
send
select
recvfrom
ntohs
ntohl
WSACleanup
socket
gethostbyaddr
htons
htonl
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
inet_addr
WSAStartup
inet_ntoa
gethostname
WSAGetLastError
inet_ntop
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
WSAPoll
WSASend
WSARecv
listen
WSAIoctl

iphlpapi

GetIfEntry
GetAdaptersAddresses
GetNetworkParams

Exports

Exports

CloseZStream
CreateZStream
DllCanUnloadNow
DllGetActivationFactory
Flush
ReadZStream
UnityPalGetLocalTimeZoneData
UnityPalGetTimeZoneDataForID
UnityPalTimeZoneInfoGetTimeZoneIDs
UseUnityPalForTimeZoneInformation
WriteZStream
il2cpp_add_internal_call
il2cpp_alloc
il2cpp_allocation_granularity
il2cpp_array_class_get
il2cpp_array_element_size
il2cpp_array_get_byte_length
il2cpp_array_length
il2cpp_array_new
il2cpp_array_new_full
il2cpp_array_new_specific
il2cpp_array_object_header_size
il2cpp_assembly_get_image
il2cpp_bounded_array_class_get
il2cpp_capture_memory_snapshot
il2cpp_class_array_element_size
il2cpp_class_enum_basetype
il2cpp_class_for_each
il2cpp_class_from_il2cpp_type
il2cpp_class_from_name
il2cpp_class_from_system_type
il2cpp_class_from_type
il2cpp_class_get_assemblyname
il2cpp_class_get_bitmap
il2cpp_class_get_bitmap_size
il2cpp_class_get_data_size
il2cpp_class_get_declaring_type
il2cpp_class_get_element_class
il2cpp_class_get_events
il2cpp_class_get_field_from_name
il2cpp_class_get_fields
il2cpp_class_get_flags
il2cpp_class_get_image
il2cpp_class_get_interfaces
il2cpp_class_get_method_from_name
il2cpp_class_get_methods
il2cpp_class_get_name
il2cpp_class_get_namespace
il2cpp_class_get_nested_types
il2cpp_class_get_parent
il2cpp_class_get_properties
il2cpp_class_get_property_from_name
il2cpp_class_get_rank
il2cpp_class_get_static_field_data
il2cpp_class_get_type
il2cpp_class_get_type_token
il2cpp_class_get_userdata_offset
il2cpp_class_has_attribute
il2cpp_class_has_parent
il2cpp_class_has_references
il2cpp_class_instance_size
il2cpp_class_is_abstract
il2cpp_class_is_assignable_from
il2cpp_class_is_blittable
il2cpp_class_is_enum
il2cpp_class_is_generic
il2cpp_class_is_inflated
il2cpp_class_is_interface
il2cpp_class_is_subclass_of
il2cpp_class_is_valuetype
il2cpp_class_num_fields
il2cpp_class_set_userdata
il2cpp_class_value_size
il2cpp_current_thread_get_frame_at
il2cpp_current_thread_get_stack_depth
il2cpp_current_thread_get_top_frame
il2cpp_current_thread_walk_frame_stack
il2cpp_custom_attrs_construct
il2cpp_custom_attrs_free
il2cpp_custom_attrs_from_class
il2cpp_custom_attrs_from_method
il2cpp_custom_attrs_get_attr
il2cpp_custom_attrs_has_attr
il2cpp_debug_get_method_info
il2cpp_debugger_set_agent_options
il2cpp_domain_assembly_open
il2cpp_domain_get
il2cpp_domain_get_assemblies
il2cpp_exception_from_name_msg
il2cpp_field_get_flags
il2cpp_field_get_name
il2cpp_field_get_offset
il2cpp_field_get_parent
il2cpp_field_get_type
il2cpp_field_get_value
il2cpp_field_get_value_object
il2cpp_field_has_attribute
il2cpp_field_is_literal
il2cpp_field_set_value
il2cpp_field_set_value_object
il2cpp_field_static_get_value
il2cpp_field_static_set_value
il2cpp_format_exception
il2cpp_format_stack_trace
il2cpp_free
il2cpp_free_captured_memory_snapshot
il2cpp_gc_collect
il2cpp_gc_collect_a_little
il2cpp_gc_disable
il2cpp_gc_enable
il2cpp_gc_foreach_heap
il2cpp_gc_get_heap_size
il2cpp_gc_get_max_time_slice_ns
il2cpp_gc_get_used_size
il2cpp_gc_has_strict_wbarriers
il2cpp_gc_is_disabled
il2cpp_gc_is_incremental
il2cpp_gc_set_external_allocation_tracker
il2cpp_gc_set_external_wbarrier_tracker
il2cpp_gc_set_max_time_slice_ns
il2cpp_gc_wbarrier_set_field
il2cpp_gchandle_foreach_get_target
il2cpp_gchandle_free
il2cpp_gchandle_get_target
il2cpp_gchandle_new
il2cpp_gchandle_new_weakref
il2cpp_get_corlib
il2cpp_get_exception_argument_null
il2cpp_image_get_assembly
il2cpp_image_get_class
il2cpp_image_get_class_count
il2cpp_image_get_entry_point
il2cpp_image_get_filename
il2cpp_image_get_name
il2cpp_init
il2cpp_init_utf16
il2cpp_is_debugger_attached
il2cpp_is_vm_thread
il2cpp_method_get_class
il2cpp_method_get_declaring_type
il2cpp_method_get_flags
il2cpp_method_get_from_reflection
il2cpp_method_get_name
il2cpp_method_get_object
il2cpp_method_get_param
il2cpp_method_get_param_count
il2cpp_method_get_param_name
il2cpp_method_get_return_type
il2cpp_method_get_token
il2cpp_method_has_attribute
il2cpp_method_is_generic
il2cpp_method_is_inflated
il2cpp_method_is_instance
il2cpp_monitor_enter
il2cpp_monitor_exit
il2cpp_monitor_pulse
il2cpp_monitor_pulse_all
il2cpp_monitor_try_enter
il2cpp_monitor_try_wait
il2cpp_monitor_wait
il2cpp_object_get_class
il2cpp_object_get_size
il2cpp_object_get_virtual_method
il2cpp_object_header_size
il2cpp_object_new
il2cpp_object_unbox
il2cpp_offset_of_array_bounds_in_array_object_header
il2cpp_offset_of_array_length_in_array_object_header
il2cpp_override_stack_backtrace
il2cpp_profiler_install
il2cpp_profiler_install_allocation
il2cpp_profiler_install_enter_leave
il2cpp_profiler_install_fileio
il2cpp_profiler_install_gc
il2cpp_profiler_install_thread
il2cpp_profiler_set_events
il2cpp_property_get_flags
il2cpp_property_get_get_method
il2cpp_property_get_name
il2cpp_property_get_parent
il2cpp_property_get_set_method
il2cpp_raise_exception
il2cpp_register_debugger_agent_transport
il2cpp_register_log_callback
il2cpp_resolve_icall
il2cpp_runtime_class_init
il2cpp_runtime_invoke
il2cpp_runtime_invoke_convert_args
il2cpp_runtime_object_init
il2cpp_runtime_object_init_exception
il2cpp_runtime_unhandled_exception_policy_set
il2cpp_set_commandline_arguments
il2cpp_set_commandline_arguments_utf16
il2cpp_set_config
il2cpp_set_config_dir
il2cpp_set_config_utf16
il2cpp_set_data_dir
il2cpp_set_default_thread_affinity
il2cpp_set_find_plugin_callback
il2cpp_set_memory_callbacks
il2cpp_set_temp_dir
il2cpp_shutdown
il2cpp_start_gc_world
il2cpp_stats_dump_to_file
il2cpp_stats_get_value
il2cpp_stop_gc_world
il2cpp_string_chars
il2cpp_string_intern
il2cpp_string_is_interned
il2cpp_string_length
il2cpp_string_new
il2cpp_string_new_len
il2cpp_string_new_utf16
il2cpp_string_new_wrapper
il2cpp_thread_attach
il2cpp_thread_current
il2cpp_thread_detach
il2cpp_thread_get_all_attached_threads
il2cpp_thread_get_frame_at
il2cpp_thread_get_stack_depth
il2cpp_thread_get_top_frame
il2cpp_thread_walk_frame_stack
il2cpp_type_equals
il2cpp_type_get_assembly_qualified_name
il2cpp_type_get_attrs
il2cpp_type_get_class_or_element_class
il2cpp_type_get_name
il2cpp_type_get_name_chunked
il2cpp_type_get_object
il2cpp_type_get_type
il2cpp_type_is_byref
il2cpp_type_is_pointer_type
il2cpp_type_is_static
il2cpp_unhandled_exception
il2cpp_unity_install_unitytls_interface
il2cpp_unity_liveness_calculation_begin
il2cpp_unity_liveness_calculation_end
il2cpp_unity_liveness_calculation_from_root
il2cpp_unity_liveness_calculation_from_statics
il2cpp_value_box

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

il2cpp
Size: 15.1MB - Virtual size: 15.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 996KB - Virtual size: 995KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lorain_1.0p15/Lorain.exe
.exe windows:6 windows x64 arch:x64

fd60dddc87379c239e8ac49516966c3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\buildslave\unity\build\artifacts\WindowsPlayer\Win64_nondev_i_r\WindowsPlayer_Master_il2cpp_x64.pdb

Imports

unityplayer

UnityMain

kernel32

GetModuleHandleExW
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 552KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lorain_1.0p15/Lorain_Data/Resources/unity default resources
Lorain_1.0p15/Lorain_Data/Resources/unity_builtin_extra
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/StandaloneWindows64
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/StandaloneWindows64.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/futanari
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/futanari.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/gallery
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/gallery.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc00_securitytrcamp
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc00_securitytrcamp.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_anchienteye
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_anchienteye.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_gravbot
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_gravbot.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_satyrmale
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_satyrmale.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_slime
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_slime.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_stumper
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_stumper.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_swordgirl
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc01_swordgirl.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_android
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_android.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_fluffy
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_fluffy.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_icebot
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_icebot.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_icedaemongirl
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc02_icedaemongirl.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_electricbot
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_electricbot.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_gargoule
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_gargoule.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_leech
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_leech.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_satyrfemale
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc03_satyrfemale.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc04_lamia
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc04_lamia.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc04_minotourus
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/loc04_minotourus.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location1
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location1.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location2
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location2.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location3
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location3.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location4
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/location4.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/main
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/main.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/shared
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/shared.manifest
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/training
Lorain_1.0p15/Lorain_Data/StreamingAssets/AssetBundles/StandaloneWindows64/training.manifest
Lorain_1.0p15/Lorain_Data/app.info
Lorain_1.0p15/Lorain_Data/boot.config
Lorain_1.0p15/Lorain_Data/globalgamemanagers
Lorain_1.0p15/Lorain_Data/globalgamemanagers.assets
Lorain_1.0p15/Lorain_Data/globalgamemanagers.assets.resS
Lorain_1.0p15/Lorain_Data/il2cpp_data/Metadata/global-metadata.dat
Lorain_1.0p15/Lorain_Data/il2cpp_data/Resources/System.Data.dll-resources.dat
Lorain_1.0p15/Lorain_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/2.0/Browsers/Compat.browser
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
.js
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/2.0/machine.config
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/2.0/settings.map
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/2.0/web.config
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.0/Browsers/Compat.browser
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
.js
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.0/machine.config
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.0/settings.map
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.0/web.config
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.5/Browsers/Compat.browser
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
.js
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.5/machine.config
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.5/settings.map
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/4.5/web.config
.xml
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/browscap.ini
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/config
Lorain_1.0p15/Lorain_Data/il2cpp_data/etc/mono/mconfig/config.xml
.xml
Lorain_1.0p15/Lorain_Data/level0
Lorain_1.0p15/Lorain_Data/resources.assets
Lorain_1.0p15/Lorain_Data/resources.assets.resS
Lorain_1.0p15/Lorain_Data/sharedassets0.assets
Lorain_1.0p15/Lorain_Data/sharedassets0.assets.resS
Lorain_1.0p15/UnityCrashHandler64.exe
.exe windows:6 windows x64 arch:x64

ffab7ddc7715b84ea7a3d6d231211c46

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

14/07/2021, 00:00

Not After

18/07/2024, 23:59

Subject

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e8:63:cf:20:61:51:9e:d1:b5:7f:82:3f:eb:7b:a0:0d:59:f4:1f:b6
Signer

Actual PE Digest

e8:63:cf:20:61:51:9e:d1:b5:7f:82:3f:eb:7b:a0:0d:59:f4:1f:b6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\buildslave\unity\build\artifacts\UnityCrashHandler\release_win64\UnityCrashHandler64.pdb

Imports

user32

CreateIconFromResourceEx
SetWindowPos
GetWindowLongA
InflateRect
AdjustWindowRect
SendMessageW
DialogBoxParamA
LookupIconIdFromDirectoryEx
SetWindowTextW
OffsetRect
EndDialog
GetDlgItem
SendDlgItemMessageA
UnionRect
LoadImageA
GetIconInfo
SetForegroundWindow

kernel32

InterlockedPopEntrySList
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
FreeLibraryAndExitThread
CloseHandle
RaiseException
GetCurrentThread
OpenThread
GetThreadTimes
GetModuleHandleA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
SwitchToThread
CreateThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
VerSetConditionMask
FreeLibrary
GetModuleFileNameA
GetModuleHandleW
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
GetCurrentDirectoryA
GetFileAttributesA
OutputDebugStringA
GetLastError
SetLastError
WaitForSingleObject
CreateEventW
GetCurrentProcess
QueryDepthSList
SuspendThread
ResumeThread
GetThreadContext
ReadProcessMemory
LocalFree
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
LoadLibraryW
SetEvent
WaitForMultipleObjectsEx
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetProcessId
GetThreadId
OpenProcess
GetStdHandle
CreateFileW
DeleteFileW
GetFileAttributesW
GetFileSize
ReadFile
GetTempPathW
GetSystemTime
GetSystemTimeAsFileTime
CopyFileExW
AllocConsole
SetErrorMode
GetCommandLineW
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
WriteFile
InitializeCriticalSection
CreateEventA
TerminateThread
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceA
EnumResourceNamesA
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
TlsAlloc
TlsFree
VirtualAlloc
VirtualFree
GetModuleFileNameW
SetFilePointerEx
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
UnregisterWaitEx
RtlPcToFileHeader
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
TlsSetValue
TlsGetValue
DecodePointer
GetCurrentProcessId
GetExitCodeThread
EncodePointer
GetCPInfo
DuplicateHandle
GetStringTypeW
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent

dbghelp

SymRegisterFunctionEntryCallback64
SymLoadModuleEx

shell32

CommandLineToArgvW
SHCreateDirectoryExW

ole32

CoCreateGuid
CoTaskMemFree
CoInitializeEx

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA

gdi32

GetObjectA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lorain_1.0p15/UnityPlayer.dll
.dll windows:6 windows x64 arch:x64

9132c084a62ed59ac4529437c0229495

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

14/07/2021, 00:00

Not After

18/07/2024, 23:59

Subject

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

92:4a:72:ed:12:72:6d:78:20:20:a6:dc:37:6b:47:30:5c:9b:ce:d5
Signer

Actual PE Digest

92:4a:72:ed:12:72:6d:78:20:20:a6:dc:37:6b:47:30:5c:9b:ce:d5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\buildslave\unity\build\artifacts\UnityPlayer\Win64_nondev_i_r\UnityPlayer_Win64_il2cpp_x64.pdb

Imports

kernel32

GetFullPathNameW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
LocalFree
FormatMessageW
CopyFileW
MoveFileExW
ReplaceFileW
SystemTimeToFileTime
Thread32First
Thread32Next
CreateMutexA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesA
DebugBreak
SetUnhandledExceptionFilter
SetLastError
GetErrorMode
TerminateProcess
CreateThread
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
LocalAlloc
GetOverlappedResult
CancelIo
ResetEvent
GetStartupInfoA
SetConsoleCtrlHandler
GetSystemInfo
SetDllDirectoryW
SleepEx
RaiseException
GetThreadTimes
SwitchToThread
SetThreadPriority
GetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GetWindowsDirectoryW
CreateIoCompletionPort
GetQueuedCompletionStatus
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
ReleaseSemaphore
GetLocalTime
GetTimeZoneInformation
IsDebuggerPresent
CreateSemaphoreExW
TlsAlloc
TlsFree
GetNativeSystemInfo
VirtualQuery
GetFileSize
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessId
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
CreateEventW
CreatePipe
SetHandleInformation
OutputDebugStringA
WriteConsoleW
FindFirstFileW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetDiskFreeSpaceExW
IsValidCodePage
SetConsoleMode
SetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
ReadConsoleW
GetConsoleMode
GetConsoleCP
HeapQueryInformation
HeapSize
HeapReAlloc
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
GetVersionExW
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
DuplicateHandle
GetSystemDirectoryW
InitializeCriticalSectionEx
GlobalMemoryStatus
GetTickCount
GetFileType
ExitThread
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
CreateWaitableTimerA
SetWaitableTimer
OpenEventA
ReadConsoleInputW
FlushConsoleInputBuffer
SetThreadAffinityMask
GetStdHandle
GetTempPathW
WriteFile
FlushFileBuffers
CreateFileA
GetCommandLineW
GetLogicalProcessorInformationEx
GetSystemDirectoryA
FindClose
CreateFileW
CreateDirectoryW
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
GetSystemTime
GlobalLock
GlobalUnlock
GlobalAlloc
GetTempFileNameW
GetFileAttributesW
DeleteFileW
CreateToolhelp32Snapshot
GetFileAttributesExW
FindNextFileW
GetACP
GlobalMemoryStatusEx
SetErrorMode
LoadLibraryExW
FindFirstFileExW
RtlUnwind
GetUserDefaultLocaleName
GetSystemPowerStatus
GetComputerNameW
LoadLibraryW
GetModuleHandleW
SetEnvironmentVariableW
GetModuleFileNameW
GetCurrentThread
GetCurrentProcess
GetLastError
GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
Sleep
CreateEventA
WaitForSingleObjectEx
VerifyVersionInfoW
CloseHandle
CreateEventExW
WaitForMultipleObjectsEx
SetEvent
VerSetConditionMask
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
TlsSetValue
TlsGetValue

user32

SetForegroundWindow
RegisterClassExW
DialogBoxParamW
EndDialog
UnregisterClassW
EnumWindows
SetDlgItemTextW
SendDlgItemMessageW
MessageBoxA
CopyRect
OffsetRect
LoadIconA
GetKeyboardLayoutNameW
GetKeyboardLayout
TranslateMessage
DispatchMessageA
GetMessagePos
GetMessageExtraInfo
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetDoubleClickTime
IsWindowVisible
SetFocus
GetActiveWindow
EnumDisplaySettingsW
LoadIconW
SetWindowLongA
AdjustWindowRectEx
GetWindowPlacement
GetDC
MsgWaitForMultipleObjects
EnumDisplayMonitors
GetMonitorInfoW
GetMonitorInfoA
MonitorFromRect
SetWindowLongPtrW
GetWindowLongPtrW
ClipCursor
ShowCursor
GetKeyState
GetAsyncKeyState
GetKeyNameTextW
SetDlgItemTextA
EnumDisplaySettingsA
GetCaretBlinkTime
DestroyWindow
CreateWindowExW
ShowWindow
UpdateWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
ReleaseDC
AllowSetForegroundWindow
IsIconic
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
TrackMouseEvent
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
SetCursor
LoadCursorA
DestroyCursor
DestroyIcon
LoadImageW
DefWindowProcW
SetWindowPos
GetClientRect
GetWindowRect
ScreenToClient
MapVirtualKeyA
GetWindowLongA
SetWindowLongPtrA
GetParent
GetThreadDesktop
GetUserObjectInformationA
RegisterWindowMessageA
SendMessageTimeoutA
MapVirtualKeyExA
SetWindowTextW
ValidateRect
DragDetect
KillTimer
SetTimer
GetFocus
RegisterClassW
PostQuitMessage
SendMessageW
PeekMessageA
GetMessageA
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputData
SystemParametersInfoW
PtInRect
ClientToScreen
GetCursorPos
SetCursorPos
GetSystemMetrics
ReleaseCapture
SetCapture

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoSetProxyBlanket
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
PropVariantCopy
PropVariantClear
CoCreateFreeThreadedMarshaler

shlwapi

PathCanonicalizeW
SHDeleteKeyW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyW
GetUserNameA
GetTokenInformation
GetSidSubAuthority
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegisterEventSourceW
DeregisterEventSource
CryptDestroyHash
ReportEventW
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptAcquireContextW

gdi32

SwapBuffers
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat

shell32

SHGetFolderPathW
SHFileOperationW
ShellExecuteW
CommandLineToArgvW

opengl32

wglCreateContext
wglGetCurrentContext
wglGetProcAddress
wglDeleteContext
wglGetCurrentDC
wglMakeCurrent

winmm

timeGetTime
waveOutOpen
waveOutUnprepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutPrepareHeader
waveOutReset
waveOutGetPosition
waveInGetNumDevs
waveInGetDevCapsA
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInReset
waveOutGetDevCapsW
timeEndPeriod
timeBeginPeriod
waveOutClose

oleaut32

SysAllocString
VariantInit
VariantClear
VariantChangeType
SysFreeString

imm32

ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetConversionStatus
ImmNotifyIME
ImmGetContext

winhttp

WinHttpGetIEProxyConfigForCurrentUser

bcrypt

BCryptGenRandom

hid

HidP_SetUsageValue
HidP_SetUsages
HidP_GetData
HidP_MaxDataListLength
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetAttributes

crypt32

CertCloseStore
CertFreeCertificateContext
CertAddEncodedCertificateToStore
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertOpenStore

ws2_32

WSASendDisconnect
gethostbyaddr
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSASetEvent
WSAResetEvent
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketW
WSACreateEvent
WSACloseEvent
WSARecvFrom
getprotobyname
gethostbyname
getpeername
ntohl
getnameinfo
freeaddrinfo
getaddrinfo
WSAIoctl
WSACleanup
WSAStartup
gethostname
socket
shutdown
setsockopt
sendto
recvfrom
htonl
WSASocketA
WSAGetLastError
WSASetLastError
send
select
recv
ntohs
listen
inet_addr
htons
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
getsockopt
WSAEventSelect

Exports

Exports

UnityMain

Sections

.text
Size: 20.3MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1020KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e62f5c38a6467680b3283fb9a6cf9d16

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

oleaut32

shell32

ws2_32

iphlpapi

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

il2cpp Size: 15.1MB - Virtual size: 15.1MB

.rdata Size: 4.8MB - Virtual size: 4.8MB

.data Size: 1.4MB - Virtual size: 4.3MB

.pdata Size: 996KB - Virtual size: 995KB

_RDATA Size: 512B - Virtual size: 348B

.reloc Size: 541KB - Virtual size: 541KB

fd60dddc87379c239e8ac49516966c3e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

unityplayer

kernel32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 6KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 552KB - Virtual size: 552KB

.reloc Size: 2KB - Virtual size: 1KB

ffab7ddc7715b84ea7a3d6d231211c46

Code Sign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52Certificate

Extended Key Usages

Key Usages

e8:63:cf:20:61:51:9e:d1:b5:7f:82:3f:eb:7b:a0:0d:59:f4:1f:b6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

kernel32

dbghelp

shell32

ole32

psapi

advapi32

wininet

gdi32

version

Sections

.text Size: 496KB - Virtual size: 496KB

.rdata Size: 174KB - Virtual size: 174KB

.data Size: 10KB - Virtual size: 18KB

.text
Size: 2.0MB - Virtual size: 2.0MB

il2cpp
Size: 15.1MB - Virtual size: 15.1MB

.rdata
Size: 4.8MB - Virtual size: 4.8MB

.data
Size: 1.4MB - Virtual size: 4.3MB

.pdata
Size: 996KB - Virtual size: 995KB

_RDATA
Size: 512B - Virtual size: 348B

.reloc
Size: 541KB - Virtual size: 541KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 6KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 552KB - Virtual size: 552KB

.reloc
Size: 2KB - Virtual size: 1KB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Certificate

e8:63:cf:20:61:51:9e:d1:b5:7f:82:3f:eb:7b:a0:0d:59:f4:1f:b6
Signer

.text
Size: 496KB - Virtual size: 496KB

.rdata
Size: 174KB - Virtual size: 174KB

.data
Size: 10KB - Virtual size: 18KB

.pdata
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 327KB - Virtual size: 326KB

.reloc
Size: 5KB - Virtual size: 4KB

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Certificate

92:4a:72:ed:12:72:6d:78:20:20:a6:dc:37:6b:47:30:5c:9b:ce:d5
Signer

.text
Size: 20.3MB - Virtual size: 20.3MB

.rdata
Size: 3.2MB - Virtual size: 3.2MB

.data
Size: 254KB - Virtual size: 1.1MB

.pdata
Size: 1020KB - Virtual size: 1020KB

.rodata
Size: 3KB - Virtual size: 2KB

_RDATA
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 89KB - Virtual size: 89KB