Vulcan1.5 BETA.zip
- SHA256 c89e2b54f3c5d87685524102f4a03430e99d41ff6541c99e97b379ab7f5a413c
Overview
overview
10Static
static
10Vulcan1.5 ...ok.dll
windows7-x64
Vulcan1.5 ...ok.dll
windows10-2004-x64
1Vulcan1.5 ...64.dll
windows7-x64
1Vulcan1.5 ...64.dll
windows10-2004-x64
1Vulcan1.5 ...ok.dll
windows7-x64
1Vulcan1.5 ...ok.dll
windows10-2004-x64
1Vulcan1.5 ...64.dll
windows7-x64
1Vulcan1.5 ...64.dll
windows10-2004-x64
1Vulcan1.5 ...er.exe
windows7-x64
1Vulcan1.5 ...er.exe
windows10-2004-x64
1Vulcan1.5 ....5.exe
windows7-x64
10Vulcan1.5 ....5.exe
windows10-2004-x64
10Vulcan1.5 ...oup.js
windows7-x64
3Vulcan1.5 ...oup.js
windows10-2004-x64
3Vulcan1.5 ...ace.js
windows7-x64
3Vulcan1.5 ...ace.js
windows10-2004-x64
3Vulcan1.5 ...nfo.js
windows7-x64
3Vulcan1.5 ...nfo.js
windows10-2004-x64
3Vulcan1.5 ...rch.js
windows7-x64
3Vulcan1.5 ...rch.js
windows10-2004-x64
3Vulcan1.5 ...log.js
windows7-x64
3Vulcan1.5 ...log.js
windows10-2004-x64
3Vulcan1.5 ...ols.js
windows7-x64
3Vulcan1.5 ...ols.js
windows10-2004-x64
3Vulcan1.5 ...ave.js
windows7-x64
3Vulcan1.5 ...ave.js
windows10-2004-x64
3Vulcan1.5 ...yce.js
windows7-x64
3Vulcan1.5 ...yce.js
windows10-2004-x64
3Vulcan1.5 ...ian.js
windows7-x64
3Vulcan1.5 ...ian.js
windows10-2004-x64
3Vulcan1.5 ...are.js
windows7-x64
3Vulcan1.5 ...are.js
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Vulcan1.5 BETA/CED3D10Hook.dll
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vulcan1.5 BETA/CED3D10Hook.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Vulcan1.5 BETA/CED3D10Hook64.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Vulcan1.5 BETA/CED3D10Hook64.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Vulcan1.5 BETA/CED3D11Hook.dll
Resource
win7-20240215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Vulcan1.5 BETA/CED3D11Hook.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Vulcan1.5 BETA/CED3D11Hook64.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Vulcan1.5 BETA/CED3D11Hook64.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Vulcan1.5 BETA/FPS Fixer.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
Vulcan1.5 BETA/FPS Fixer.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Vulcan1.5 BETA/Vulcan1.5.exe
Resource
win7-20240221-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral12
Sample
Vulcan1.5 BETA/Vulcan1.5.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral13
Sample
Vulcan1.5 BETA/autorun/AddToNewGroup.js
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
Vulcan1.5 BETA/autorun/AddToNewGroup.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
Vulcan1.5 BETA/autorun/DotNetInterface.js
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
Vulcan1.5 BETA/autorun/DotNetInterface.js
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
Vulcan1.5 BETA/autorun/JavaInfo.js
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
Vulcan1.5 BETA/autorun/JavaInfo.js
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
Vulcan1.5 BETA/autorun/JavaSearch.js
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
Vulcan1.5 BETA/autorun/JavaSearch.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
Vulcan1.5 BETA/autorun/MethodInvokeDialog.js
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
Vulcan1.5 BETA/autorun/MethodInvokeDialog.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
Vulcan1.5 BETA/autorun/andtools.js
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
Vulcan1.5 BETA/autorun/andtools.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
Vulcan1.5 BETA/autorun/autosave.js
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
Vulcan1.5 BETA/autorun/autosave.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
Vulcan1.5 BETA/autorun/babyce.js
Resource
win7-20240215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
Vulcan1.5 BETA/autorun/babyce.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
Vulcan1.5 BETA/autorun/bigendian.js
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
Vulcan1.5 BETA/autorun/bigendian.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
Vulcan1.5 BETA/autorun/ceshare.js
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
Vulcan1.5 BETA/autorun/ceshare.js
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Vulcan1.5 BETA.zip
- Size 6.3MB
- Sample240504-mjf6eabb91
- SHA256 c89e2b54f3c5d87685524102f4a03430e99d41ff6541c99e97b379ab7f5a413c
- MD5 b293ff3ae6ad01fafea523441e813442
- SHA1 c1cb4b37b4164bb9660d84f7d1ed407facdd60b2
- SHA512 deea2063ba9488491b5401515ab6ac67d753474b6b7b1713f6cf052f0e98433a87d0a2180123a7fb3a5c6be56702254a34702085281b70371506947140085f98
- SSDEEP 98304:QKE7E9j4HdYqSkhqzDmsMDSaauf537VsrnMFCU+cKXmuf5kXzRGeO2wBjSblCot7:r+HdQAqzRMksEQx+cttDUelwmE5LA
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
asyncrat
Botnet
-
Default
C2
-
127.0.0.1:3232
-
192.168.0.194:3232
Attributes
-
delay
4
-
install
true
-
install_file
sys1.exe
-
install_folder
%Temp%
aes.plain
Signatures
- Async RAT payload 1 IoCs
resource yara_rule static1/unpack001/Vulcan1.5 BETA/Vulcan1.5.exe family_asyncrat - Asyncrat family
- Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vulcan1.5 BETA/FPS Fixer.exe unpack001/Vulcan1.5 BETA/Vulcan1.5.exe unpack001/Vulcan1.5 BETA/clibs64/lfs.dll unpack001/Vulcan1.5 BETA/lua_extra/lua.exe unpack001/Vulcan1.5 BETA/lua_extra/luac32.exe unpack001/Vulcan1.5 BETA/lua_extra/luac64.exe unpack001/Vulcan1.5 BETA/process.exe unpack001/Vulcan1.5 BETA/run.exe unpack001/Vulcan1.5 BETA/standalonephase1.dat unpack001/Vulcan1.5 BETA/tiny.dat unpack001/Vulcan1.5 BETA/win64/sqlite3.dll
File Explorer
-
Vulcan1.5 BETA.zip.zip 6.3MB
-
Vulcan1.5 BETA/CED3D10Hook.dll.dll 128KB
-
Vulcan1.5 BETA/CED3D10Hook64.dll.dll 140KB
-
Vulcan1.5 BETA/CED3D11Hook.dll.dll 137KB
-
Vulcan1.5 BETA/CED3D11Hook64.dll.dll 146KB
-
Vulcan1.5 BETA/FPS Fixer.exe.exe 509KB
-
Vulcan1.5 BETA/Vulcan1.5.exe.exe 78KB
-
Vulcan1.5 BETA/autorun/AddToNewGroup.LUA.js 1KB
-
Vulcan1.5 BETA/autorun/DotNetInject.lua7KB
-
Vulcan1.5 BETA/autorun/DotNetInterface.lua.js 19KB
-
Vulcan1.5 BETA/autorun/JavaInfo.lua.js 28KB
-
Vulcan1.5 BETA/autorun/JavaSearch.lua.js 5KB
-
Vulcan1.5 BETA/autorun/MethodInvokeDialog.lua.js 5KB
-
Vulcan1.5 BETA/autorun/SpeedhackV3.lua6KB
-
Vulcan1.5 BETA/autorun/affinity.lua3KB
-
Vulcan1.5 BETA/autorun/andtools.lua.js 7KB
-
Vulcan1.5 BETA/autorun/andtools/files that should be here.txt275B
-
Vulcan1.5 BETA/autorun/autosave.LUA.js 8KB
-
Vulcan1.5 BETA/autorun/babyce.lua.js 14KB
-
Vulcan1.5 BETA/autorun/bigendian.lua.js 7KB
-
Vulcan1.5 BETA/autorun/bypass.lua596B
-
Vulcan1.5 BETA/autorun/celib.lua1KB
-
Vulcan1.5 BETA/autorun/ceshare.lua.js 13KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_account.lua.js 6KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_comments.lua.js 3KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_fulltablelist.lua.js 12KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_permissions.lua.js 3KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_processlistextention.lua.js 9KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_publish.lua.js 20KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_querycheats.lua.js 23KB
-
Vulcan1.5 BETA/autorun/ceshare/ceshare_requests.lua.js 5KB
-
Vulcan1.5 BETA/autorun/ceshare/forms/BrowseCheats.FRM.ps1 .xml 8KB
-
Vulcan1.5 BETA/autorun/ceshare/forms/CommentsOrRequests.FRM.xml 1KB
-
Vulcan1.5 BETA/autorun/ceshare/forms/InitialSetup.FRM.xml 1KB
-
Vulcan1.5 BETA/autorun/ceshare/forms/Permissions.FRM.xml 1KB
-
Vulcan1.5 BETA/autorun/ceshare/forms/PublishCheat.FRM.xml 2KB
-
Vulcan1.5 BETA/autorun/ceshare/forms/UpdateOrNew.FRM.xml 932B
-
Vulcan1.5 BETA/autorun/ceshare/images/link.png.png 1KB
-
Vulcan1.5 BETA/autorun/copytoclipboardastext.lua.js 695B
-
Vulcan1.5 BETA/autorun/cpuid.lua1KB
-
Vulcan1.5 BETA/autorun/custom/Lua files in this folder get executed automatically as well.txt85B
-
Vulcan1.5 BETA/autorun/dlls/32/CEJVMTI.dll.dll 49KB
-
Vulcan1.5 BETA/autorun/dlls/64/CEJVMTI.dll.dll 60KB
-
Vulcan1.5 BETA/autorun/dotnetinfo.lua.js 80KB
-
Vulcan1.5 BETA/autorun/dotnetpatch.lua7KB
-
Vulcan1.5 BETA/autorun/dotnetsearch.lua.js 14KB
-
Vulcan1.5 BETA/autorun/emurpm.frm.xml 1KB
-
Vulcan1.5 BETA/autorun/emurpm.lua.js 8KB
-
Vulcan1.5 BETA/autorun/forms/DotNetInfo.frm.xml 2KB
-
Vulcan1.5 BETA/autorun/forms/DotNetSearch.frm.xml 992B
-
Vulcan1.5 BETA/autorun/forms/JavaInfo.frm.xml 2KB
-
Vulcan1.5 BETA/autorun/forms/JavaSearch.frm.xml 1KB
-
Vulcan1.5 BETA/autorun/forms/MonoDataCollector.frm.xml 1KB
-
Vulcan1.5 BETA/autorun/forms/frmUltimap2.FRM.xml 796B
-
Vulcan1.5 BETA/autorun/images/export128x128.png.png 1KB
-
Vulcan1.5 BETA/autorun/images/import128x128.png.png 1KB
-
Vulcan1.5 BETA/autorun/java.lua.js 85KB
-
Vulcan1.5 BETA/autorun/java/androidloadagent.CEA4KB
-
Vulcan1.5 BETA/autorun/java/cejvmtiagent.c56KB
-
Vulcan1.5 BETA/autorun/java/jvarscan.c19KB
-
Vulcan1.5 BETA/autorun/javaClassEditor.lua52KB
-
Vulcan1.5 BETA/autorun/javaclass.lua17KB
-
Vulcan1.5 BETA/autorun/luahook.lua12KB
-
Vulcan1.5 BETA/autorun/luasymbols.lua629B
-
Vulcan1.5 BETA/autorun/modulelistscan.lua.js 2KB
-
Vulcan1.5 BETA/autorun/monoscript.lua.js 140KB
-
Vulcan1.5 BETA/autorun/patchscan.lua.js 17KB
-
Vulcan1.5 BETA/autorun/pseudocode.lua.js 7KB
-
Vulcan1.5 BETA/autorun/pseudocodediagram.lua.js 56KB
-
Vulcan1.5 BETA/autorun/roblox.lua.js 33KB
-
Vulcan1.5 BETA/autorun/savesession.lua.js 8KB
-
Vulcan1.5 BETA/autorun/splitscanintonewtab.lua629B
-
Vulcan1.5 BETA/autorun/threadsafegui.lua26B
-
Vulcan1.5 BETA/autorun/ultimap2.lua.js 17KB
-
Vulcan1.5 BETA/autorun/versioncheck.lua.js 7KB
-
Vulcan1.5 BETA/autorun/xml/xmlSimple.lua5KB
-
Vulcan1.5 BETA/buildsigs.bat228B
-
Vulcan1.5 BETA/ced3d9hook.dll.dll 124KB
-
Vulcan1.5 BETA/ced3d9hook64.dll.dll 136KB
-
Vulcan1.5 BETA/cedebug.txt31B
-
Vulcan1.5 BETA/celua.txt214KB
-
Vulcan1.5 BETA/class.lua.js 1KB
-
Vulcan1.5 BETA/classwrapper.lua8KB
-
Vulcan1.5 BETA/clibs64/lfs.dll.dll 125KB
-
Vulcan1.5 BETA/commonmodulelist.txt1KB
-
Vulcan1.5 BETA/d3dhook.dll.dll 119KB
-
Vulcan1.5 BETA/d3dhook64.dll.dll 131KB
-
Vulcan1.5 BETA/defines.lua12KB
-
Vulcan1.5 BETA/donottrace.txt104B
-
Vulcan1.5 BETA/include/_mingw.h3KB
-
Vulcan1.5 BETA/include/assert.h1KB
-
Vulcan1.5 BETA/include/celib.h203B
-
Vulcan1.5 BETA/include/celog.h793B
-
Vulcan1.5 BETA/include/cepipelib.c10KB
-
Vulcan1.5 BETA/include/cesocket.h981B
-
Vulcan1.5 BETA/include/conio.h10KB
-
Vulcan1.5 BETA/include/ctype.h9KB
-
Vulcan1.5 BETA/include/dir.h952B
-
Vulcan1.5 BETA/include/direct.h1KB
-
Vulcan1.5 BETA/include/dirent.h3KB
-
Vulcan1.5 BETA/include/dos.h1KB
-
Vulcan1.5 BETA/include/errno.h1KB
-
Vulcan1.5 BETA/include/excpt.h3KB
-
Vulcan1.5 BETA/include/fcntl.h1KB
-
Vulcan1.5 BETA/include/fenv.h3KB
-
Vulcan1.5 BETA/include/float.h1KB
-
Vulcan1.5 BETA/include/inttypes.h5KB
-
Vulcan1.5 BETA/include/io.h12KB
-
Vulcan1.5 BETA/include/jni.h51KB
-
Vulcan1.5 BETA/include/limits.h2KB
-
Vulcan1.5 BETA/include/locale.h2KB
-
Vulcan1.5 BETA/include/malloc.h5KB
-
Vulcan1.5 BETA/include/math.h22KB
-
Vulcan1.5 BETA/include/mem.h345B
-
Vulcan1.5 BETA/include/memory.h1KB
-
Vulcan1.5 BETA/include/process.h8KB
-
Vulcan1.5 BETA/include/sec_api/conio_s.h1KB
-
Vulcan1.5 BETA/include/sec_api/crtdbg_s.h461B
-
Vulcan1.5 BETA/include/sec_api/io_s.h881B
-
Vulcan1.5 BETA/include/sec_api/mbstring_s.h3KB
-
Vulcan1.5 BETA/include/sec_api/search_s.h796B
-
Vulcan1.5 BETA/include/sec_api/stdio_s.h11KB
-
Vulcan1.5 BETA/include/sec_api/stdlib_s.h4KB
-
Vulcan1.5 BETA/include/sec_api/stralign_s.h824B
-
Vulcan1.5 BETA/include/sec_api/string_s.h1KB
-
Vulcan1.5 BETA/include/sec_api/sys/timeb_s.h653B
-
Vulcan1.5 BETA/include/sec_api/tchar_s.h8KB
-
Vulcan1.5 BETA/include/sec_api/time_s.h2KB
-
Vulcan1.5 BETA/include/sec_api/wchar_s.h7KB
-
Vulcan1.5 BETA/include/setjmp.h3KB
-
Vulcan1.5 BETA/include/share.h639B
-
Vulcan1.5 BETA/include/signal.h1KB
-
Vulcan1.5 BETA/include/stdarg.h2KB
-
Vulcan1.5 BETA/include/stdbool.h176B
-
Vulcan1.5 BETA/include/stddef.h1KB
-
Vulcan1.5 BETA/include/stdint.h6KB
-
Vulcan1.5 BETA/include/stdio.h14KB
-
Vulcan1.5 BETA/include/stdlib.h19KB
-
Vulcan1.5 BETA/include/string.h8KB
-
Vulcan1.5 BETA/include/sys/fcntl.h359B
-
Vulcan1.5 BETA/include/sys/file.h367B
-
Vulcan1.5 BETA/include/sys/locking.h648B
-
Vulcan1.5 BETA/include/sys/stat.h6KB
-
Vulcan1.5 BETA/include/sys/time.h1KB
-
Vulcan1.5 BETA/include/sys/timeb.h2KB
-
Vulcan1.5 BETA/include/sys/types.h2KB
-
Vulcan1.5 BETA/include/sys/unistd.h351B
-
Vulcan1.5 BETA/include/sys/utime.h3KB
-
Vulcan1.5 BETA/include/tccdefs.h9KB
-
Vulcan1.5 BETA/include/tchar.h30KB
-
Vulcan1.5 BETA/include/time.h8KB
-
Vulcan1.5 BETA/include/vadefs.h304B
-
Vulcan1.5 BETA/include/values.h126B
-
Vulcan1.5 BETA/include/varargs.h355B
-
Vulcan1.5 BETA/include/wchar.h33KB
-
Vulcan1.5 BETA/include/wctype.h4KB
-
Vulcan1.5 BETA/include/winapi/basetsd.h5KB
-
Vulcan1.5 BETA/include/winapi/basetyps.h2KB
-
Vulcan1.5 BETA/include/winapi/guiddef.h4KB
-
Vulcan1.5 BETA/include/winapi/poppack.h282B
-
Vulcan1.5 BETA/include/winapi/pshpack1.h285B
-
Vulcan1.5 BETA/include/winapi/pshpack2.h285B
-
Vulcan1.5 BETA/include/winapi/pshpack4.h285B
-
Vulcan1.5 BETA/include/winapi/pshpack8.h285B
-
Vulcan1.5 BETA/include/winapi/winbase.h155KB
-
Vulcan1.5 BETA/include/winapi/wincon.h14KB
-
Vulcan1.5 BETA/include/winapi/windef.h5KB
-
Vulcan1.5 BETA/include/winapi/windows.h2KB
-
Vulcan1.5 BETA/include/winapi/winerror.h146KB
-
Vulcan1.5 BETA/include/winapi/wingdi.h118KB
-
Vulcan1.5 BETA/include/winapi/winnt.h189KB
-
Vulcan1.5 BETA/include/winapi/winreg.h13KB
-
Vulcan1.5 BETA/include/winapi/winuser.h175KB
-
Vulcan1.5 BETA/include/winapi/winver.h5KB
-
Vulcan1.5 BETA/include/windowslite.h1KB
-
Vulcan1.5 BETA/languages/CeShare.po7KB
-
Vulcan1.5 BETA/languages/How to add languages.txt1KB
-
Vulcan1.5 BETA/languages/Java.po4KB
-
Vulcan1.5 BETA/languages/SaveSessions.po284B
-
Vulcan1.5 BETA/languages/VersionCheck.po772B
-
Vulcan1.5 BETA/languages/cheatengine-x86_64.pot237KB
-
Vulcan1.5 BETA/languages/fr_FR/LisezMoi.md1KB
-
Vulcan1.5 BETA/languages/fr_FR/cheatengine-x86_64.mo19KB
-
Vulcan1.5 BETA/languages/fr_FR/cheatengine-x86_64.po393KB
-
Vulcan1.5 BETA/languages/fr_FR/lclstrconsts.mo30KB
-
Vulcan1.5 BETA/languages/fr_FR/lclstrconsts.po43KB
-
Vulcan1.5 BETA/languages/fr_FR/tutorial-x86_64.mo43KB
-
Vulcan1.5 BETA/languages/fr_FR/tutorial-x86_64.po45KB
-
Vulcan1.5 BETA/languages/it_IT/Java.po4KB
-
Vulcan1.5 BETA/languages/it_IT/LICENSE.MD7KB
-
Vulcan1.5 BETA/languages/it_IT/SaveSessions.po339B
-
Vulcan1.5 BETA/languages/it_IT/VersionCheck.po926B
-
Vulcan1.5 BETA/languages/it_IT/lclstrconsts.po30KB
-
Vulcan1.5 BETA/languages/it_IT/monoscript.po2KB
-
Vulcan1.5 BETA/languages/it_IT/name.txt97B
-
Vulcan1.5 BETA/languages/language.ini283B
-
Vulcan1.5 BETA/languages/lclstrconsts.po30KB
-
Vulcan1.5 BETA/languages/monoscript.po2KB
-
Vulcan1.5 BETA/languages/patchscan.po1KB
-
Vulcan1.5 BETA/languages/pseudocodediagram.po3KB
-
Vulcan1.5 BETA/languages/ru_RU/CeShare.po12KB
-
Vulcan1.5 BETA/languages/ru_RU/Java.po7KB
-
Vulcan1.5 BETA/languages/ru_RU/SaveSessions.po543B
-
Vulcan1.5 BETA/languages/ru_RU/VersionCheck.po1KB
-
Vulcan1.5 BETA/languages/ru_RU/cheatengine-x86_64.po666KB
-
Vulcan1.5 BETA/languages/ru_RU/lclstrconsts.po49KB
-
Vulcan1.5 BETA/languages/ru_RU/monoscript.po4KB
-
Vulcan1.5 BETA/languages/ru_RU/name.txt7B
-
Vulcan1.5 BETA/languages/ru_RU/patchscan.po1KB
-
Vulcan1.5 BETA/languages/ru_RU/pseudocodediagram.po5KB
-
Vulcan1.5 BETA/languages/ru_RU/tutorial-x86_64.po69KB
-
Vulcan1.5 BETA/languages/zh_CN/CeShare.po9KB
-
Vulcan1.5 BETA/languages/zh_CN/SaveSessions.po701B
-
Vulcan1.5 BETA/languages/zh_CN/VersionCheck.po1KB
-
Vulcan1.5 BETA/languages/zh_CN/cheatengine-x86_64.po459KB
-
Vulcan1.5 BETA/languages/zh_CN/cheatengine.po271KB
-
Vulcan1.5 BETA/languages/zh_CN/java.po5KB
-
Vulcan1.5 BETA/languages/zh_CN/lclstrconsts.po36KB
-
Vulcan1.5 BETA/languages/zh_CN/monoscript.po3KB
-
Vulcan1.5 BETA/languages/zh_CN/patchscan.po1KB
-
Vulcan1.5 BETA/languages/zh_CN/pseudocodediagram.po3KB
-
Vulcan1.5 BETA/languages/zh_CN/tutorial-x86_64.po50KB
-
Vulcan1.5 BETA/languages/zh_TW/Java.po5KB
-
Vulcan1.5 BETA/languages/zh_TW/SaveSessions.po794B
-
Vulcan1.5 BETA/languages/zh_TW/VersionCheck.po1KB
-
Vulcan1.5 BETA/languages/zh_TW/cheatengine-x86_64.po450KB
-
Vulcan1.5 BETA/languages/zh_TW/lclstrconsts.po31KB
-
Vulcan1.5 BETA/languages/zh_TW/monoscript.po3KB
-
Vulcan1.5 BETA/languages/zh_TW/patchscan.po1KB
-
Vulcan1.5 BETA/languages/zh_TW/pseudocodediagram.po4KB
-
Vulcan1.5 BETA/languages/zh_TW/tutorial-x86_64.po36KB
-
Vulcan1.5 BETA/libipt-32.dll.dll 157KB
-
Vulcan1.5 BETA/libipt-64.dll.dll 182KB
-
Vulcan1.5 BETA/libmikmod32.dll.dll 300KB
-
Vulcan1.5 BETA/libmikmod64.dll.dll 331KB
-
Vulcan1.5 BETA/lua/lauxlib.pas14KB
-
Vulcan1.5 BETA/lua/lua.pas.js 26KB
-
Vulcan1.5 BETA/lua/lualib.pas3KB
-
Vulcan1.5 BETA/lua53-32.dll.dll 453KB
-
Vulcan1.5 BETA/lua53-64.dll.dll 528KB
-
Vulcan1.5 BETA/lua_extra/lua.exe.exe 100KB
-
Vulcan1.5 BETA/lua_extra/lua53-32.exp16KB
-
Vulcan1.5 BETA/lua_extra/lua53-32.lib28KB
-
Vulcan1.5 BETA/lua_extra/lua53-64.dll.dll 528KB
-
Vulcan1.5 BETA/lua_extra/lua53-64.exp16KB
-
Vulcan1.5 BETA/lua_extra/lua53-64.lib28KB
-
Vulcan1.5 BETA/lua_extra/luac32.exe.exe 458KB
-
Vulcan1.5 BETA/lua_extra/luac64.exe.exe 466KB
-
Vulcan1.5 BETA/main.lua201B
-
Vulcan1.5 BETA/nil32B
-
Vulcan1.5 BETA/overlay.fx2KB
-
Vulcan1.5 BETA/packfiles.bat257B
-
Vulcan1.5 BETA/process.exe.exe 101KB
-
Vulcan1.5 BETA/run.exe.exe 144KB
-
Vulcan1.5 BETA/settings330B
-
Vulcan1.5 BETA/standalonephase1.dat.exe 54KB
-
Vulcan1.5 BETA/tiny.dat.exe 65KB
-
Vulcan1.5 BETA/win64/dbghelp.dll.dll 2.0MB
-
Vulcan1.5 BETA/win64/old/dbghelp.dll.dll 1.4MB
-
Vulcan1.5 BETA/win64/old/symsrv.dll.dll 139KB
-
Vulcan1.5 BETA/win64/sqlite3.dll.dll 1.3MB
-
Vulcan1.5 BETA/win64/symsrv.dll.dll 336KB
-
Vulcan1.5 BETA/win64/symsrv.yes1B
Vulcan1.5 BETA/CED3D10Hook.dll
- IMPHASH 54e6baf4a7fc30cce7ae3af2ae401782
- SHA256 148f12445f11a50efbd23509139bf06a47d453e8514733b5a15868d10cc6e066
- MD5 43dac1f3ca6b48263029b348111e3255
- SHA1 9e399fddc2a256292a07b5c3a16b1c8bdd8da5c1
- SHA512 6e77a429923b503fc08895995eb8817e36145169c2937dacc2da92b846f45101846e98191aeb4f0f2f13fff05d0836aa658f505a04208188278718166c5e3032
- SSDEEP 1536:jRXPVJPMo10+PfXl/IRTlsfQstLh66crJWeWyPCUpfrCWV13P1+CUOEvCvOEMI7:BdJPMlMb1g6e0dU9rf3P7UObvOja
- MD5 SHA1 SHA512 SSDEEP
Digest
bd:be:1c:37:94:22:c4:12:f9:57:59:9d:9e:d9:69:c8:c7:5f:45:5f:29:42:f7:33:31:0f:d9:ff:d0:95:ea:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
90:9d:b0:40:58:f8:27:4b:fc:2f:c8:ee:82:5b:7c:3e:02:83:20:b1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
5
Entry point
25719
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\CED3D10Hook.pdb
d3dx10_43
D3DXMatrixRotationZ
D3DX10CompileFromFileA
D3DX10CreateTextureFromMemory
D3DX10SaveTextureToMemory
D3DX10SaveTextureToFileA
kernel32
VirtualFree
FlushFileBuffers
CreateFileA
WriteFile
VirtualQuery
CloseHandle
WaitForSingleObject
OutputDebugStringA
SetEvent
GetTickCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
VirtualAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetClientRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
D3D10Hook_DrawAuto_imp
D3D10Hook_DrawIndexedInstanced_imp
D3D10Hook_DrawIndexed_imp
D3D10Hook_DrawInstanced_imp
D3D10Hook_Draw_imp
D3D10Hook_SwapChain_Present_imp
D3D10Hook_SwapChain_ResizeBuffers_imp
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=149, productName=VS2008 build 21022, version=21022,
count=120, id=131, productName=VS2008 build 21022, version=21022,
count=43, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=203, version=65501,
count=3, id=156, version=21202,
count=98, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/CED3D10Hook64.dll
- IMPHASH 9ecc17e8125484bf6d22b853aa6333a7
- SHA256 a2ac2ba27b0ed9acc3f0ea1bef9909a59169bc2eb16c979ef8e736a784bf2fa4
- MD5 0daf9f07847cceb0f0760bf5d770b8c1
- SHA1 992cc461f67acea58a866a78b6eefb0cbcc3aaa1
- SHA512 b4dda28721de88a372af39d4dfba6e612ce06cc443d6a6d636334865a9f8ca555591fb36d9829b54bc0fb27f486d4f216d50f68e1c2df067439fe8ebbf203b6a
- SSDEEP 3072:Kd3u82FbW5v1B9omLKfBbYWFhFCsfa5z8saPFZ1sL3OD1Ow:Kd+NFbWUMKfBTjFxfa5a1y4N
- MD5 SHA1 SHA512 SSDEEP
Digest
ac:0e:d5:0f:7b:93:84:98:5d:ad:8e:3d:e1:92:46:cf:1b:09:ba:54:93:90:74:92:c2:60:3e:5b:1a:39:5a:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
16:11:4c:cc:ce:00:52:f1:da:59:c0:20:76:16:ac:65:32:89:4f:b5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
29944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\CED3D10Hook64.pdb
d3dx10_43
D3DXMatrixRotationZ
D3DX10CompileFromFileA
D3DX10CreateTextureFromMemory
D3DX10SaveTextureToMemory
D3DX10SaveTextureToFileA
kernel32
GetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileA
WriteFile
VirtualQuery
CloseHandle
WaitForSingleObject
OutputDebugStringA
SetEvent
GetTickCount
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
user32
GetClientRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
D3D10Hook_DrawAuto_imp
D3D10Hook_DrawIndexedInstanced_imp
D3D10Hook_DrawIndexed_imp
D3D10Hook_DrawInstanced_imp
D3D10Hook_Draw_imp
D3D10Hook_SwapChain_Present_imp
D3D10Hook_SwapChain_ResizeBuffers_imp
Name
.text
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=110, id=131, productName=VS2008 build 21022, version=21022,
count=11, id=149, productName=VS2008 build 21022, version=21022,
count=44, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=203, version=65501,
count=3, id=156, version=21202,
count=100, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/CED3D11Hook.dll
- IMPHASH a3258c6ee97d726a9efc2336a95f2c30
- SHA256 1e30126badfffb231a605c6764dd98895208779ef440ea20015ab560263dd288
- MD5 42e2bf4210f8126e3d655218bd2af2e4
- SHA1 78efcb9138eb0c800451cf2bcc10e92a3adf5b72
- SHA512 c985988d0832ce26337f774b160ac369f2957c306a1d82fbbffe87d9062ae5f3af3c1209768cd574182669cd4495dba26b6f1388814c0724a7812218b0b8dc74
- SSDEEP 1536:onOLYqoZQBD3m7bmVLcuVGpGXlWXQznQN8erRxQEmsYOT1GlERbo3iV8n/7DkCWy:o4YqoZNHi7VBAXvXMZ7ll3iyn3WOR3Oc
- MD5 SHA1 SHA512 SSDEEP
Digest
05:cc:b3:71:9c:07:8b:4b:84:b6:b8:13:d6:43:81:62:1b:a7:ee:3f:04:77:d4:62:d4:0d:8f:91:ac:16:7b:19
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
1c:27:96:c2:8f:cf:24:e6:9d:e0:46:2f:b9:64:6f:47:a6:69:f9:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
5
Entry point
27690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\CED3D11Hook.pdb
d3dx11_43
D3DX11CompileFromFileA
D3DX11CreateTextureFromMemory
D3DX11SaveTextureToMemory
D3DX11SaveTextureToFileA
kernel32
VirtualFree
FlushFileBuffers
EnterCriticalSection
CreateFileA
WriteFile
VirtualQuery
CloseHandle
LeaveCriticalSection
WaitForSingleObject
OutputDebugStringA
SetEvent
InitializeCriticalSection
GetTickCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
DeleteCriticalSection
GetModuleHandleA
VirtualAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetClientRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
D3D11Hook_DrawAuto_imp
D3D11Hook_DrawIndexedInstanced_imp
D3D11Hook_DrawIndexed_imp
D3D11Hook_DrawInstanced_imp
D3D11Hook_Draw_imp
D3D11Hook_SwapChain_Present_imp
D3D11Hook_SwapChain_ResizeBuffers_imp
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=149, productName=VS2008 build 21022, version=21022,
count=121, id=131, productName=VS2008 build 21022, version=21022,
count=45, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=203, version=65501,
count=3, id=156, version=21202,
count=98, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/CED3D11Hook64.dll
- IMPHASH 7b490c73f6a24a175ff2ab5985e57ccc
- SHA256 6f505cc5973687bbda1c2d9ac8a635d333f57c12067c54da7453d9448ab40b8f
- MD5 0eaac872aadc457c87ee995bbf45a9c1
- SHA1 5e9e9b98f40424ad5397fc73c13b882d75499d27
- SHA512 164d1e6ef537d44ac4c0fd90d3c708843a74ac2e08fa2b3f0fdd4a180401210847e0f7bb8ec3056f5dc1d5a54d3239c59fb37914ce7742a4c0eb81578657d24b
- SSDEEP 3072:/20T06lYodB6ZcnHgSFulvfV0tYP/ipaQ8PFRBIiOBNOW:1Y6bdB6uHgSwtfV0+P/is1BIpD
- MD5 SHA1 SHA512 SSDEEP
Digest
a3:0c:7a:88:66:a8:cf:56:48:4b:0b:3a:33:74:9c:aa:03:22:cf:0e:e9:9a:29:99:ea:f4:de:91:b0:09:57:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
02:05:3b:2b:7a:d9:f6:4a:bf:53:64:7b:49:65:12:f2:45:93:9e:60
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
31808
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\CED3D11Hook64.pdb
d3dx11_43
D3DX11CompileFromFileA
D3DX11CreateTextureFromMemory
D3DX11SaveTextureToMemory
D3DX11SaveTextureToFileA
kernel32
GetProcAddress
FlushFileBuffers
EnterCriticalSection
CreateFileA
WriteFile
VirtualQuery
CloseHandle
LeaveCriticalSection
WaitForSingleObject
OutputDebugStringA
SetEvent
InitializeCriticalSection
GetTickCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetClientRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
D3D11Hook_DrawAuto_imp
D3D11Hook_DrawIndexedInstanced_imp
D3D11Hook_DrawIndexed_imp
D3D11Hook_DrawInstanced_imp
D3D11Hook_Draw_imp
D3D11Hook_SwapChain_Present_imp
D3D11Hook_SwapChain_ResizeBuffers_imp
Name
.text
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=113, id=131, productName=VS2008 build 21022, version=21022,
count=11, id=149, productName=VS2008 build 21022, version=21022,
count=46, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=203, version=65501,
count=3, id=156, version=21202,
count=100, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/FPS Fixer.exe
- IMPHASH b67b812388a1094acd5db594749b4971
- SHA256 9491b1c563b349ab1c9bc2b8dc76f08019462518ecb6d84bdd2060a7b37f9eac
- MD5 2a60dfd1e0f85fbaeeeedfa3c4ff7082
- SHA1 39818c8615995ab987230598f921c14e2fbc6788
- SHA512 9d3316b136c05ec91b2f9231cea661c6d670277247b627931cf2231b65d3bbb4a9f9967f71bcea7dc9ba2393001cb7540f49a1caea500367afa7d40dea780c8e
- SSDEEP 12288:bKOjJsDc2+WC+D+4H/xeGofENaTSuGCC709:bKyacgDD+4fwG1NaTSw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
211056
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\rbxfpsunlocker\rbxfpsunlocker\x64\Release\rbxfpsunlocker.pdb
kernel32
GetProcessId
CreateMutexA
DuplicateHandle
OpenProcess
Sleep
GetLastError
CloseHandle
ReadProcessMemory
VirtualQueryEx
GetExitCodeProcess
Process32First
CreateToolhelp32Snapshot
QueryFullProcessImageNameA
Process32Next
Module32FirstW
Module32NextW
IsWow64Process
SetConsoleTitleA
TerminateThread
FreeConsole
CreateThread
GetConsoleWindow
AllocConsole
GetStdHandle
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SetConsoleTextAttribute
GetCurrentProcess
GetConsoleScreenBufferInfo
SetEndOfFile
WriteProcessMemory
LCMapStringW
HeapFree
HeapAlloc
GetFileType
SetFilePointerEx
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
AreFileApisANSI
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetFileSizeEx
RtlUnwind
user32
EnumWindows
GetWindowTextA
MessageBoxA
IsWindowVisible
GetSystemMenu
GetMessageA
CheckMenuRadioItem
DispatchMessageA
LoadCursorA
CreatePopupMenu
TrackPopupMenu
ShowWindow
DefWindowProcA
CreateWindowExA
TranslateMessage
LoadIconA
AppendMenuA
CheckMenuItem
PostQuitMessage
EnableMenuItem
RegisterClassExA
SetForegroundWindow
GetCursorPos
GetWindowThreadProcessId
gdi32
GetStockObject
advapi32
RegOpenKeyExA
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
SHGetKnownFolderPath
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
Name
.text
Size
367KB
Virtual Size
366KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
107KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=177, id=261, version=30795,
count=18, id=260, version=30795,
count=17, id=260, version=32533,
count=10, id=259, version=32533,
count=88, id=261, version=32533,
count=1, id=262, version=30795,
count=13, id=257, version=30795,
count=206, id=1, productName=Unmarked objects,
count=6, id=265, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Vulcan1.5 BETA/Vulcan1.5.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 73daf4be0b78f20916eb75bdcf49c55445f24d6966ebb63e27fee354dc670d52
- MD5 282462fa1cf7592d82b8bc63f8cca024
- SHA1 f6d4d971d4bac357ae22a74f68a55b557d5ac69d
- SHA512 b36cd8b0fef03994eb94376ccd09984d50b7e445955accfb6096c696e5219a036ba1e99c6a230045a83d3ae48a3e188b208f96c6395a7ed1567b52822bd806f8
- SSDEEP 1536:1EDhxf8JYs1rRb64YUbah9IuuuNIEMdpqKmY7:iH8qeYUbaV1IEMGz
- MD5 SHA1 SHA512 SSDEEP
-
Async RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Vulcan1.5 BETA/autorun/AddToNewGroup.LUA
- SHA256 87fa0d759d6b36cba2b5cb0a8c5c3c43312b0ee6f03e077c4ad6b9f748c5f8b0
- MD5 83bdbb1ba0dd3c8c5a18f125951c9325
- SHA1 bd0a80c6bfe473209c04800fd295c0c5505513b0
- SHA512 dc2959e6fb806d8bb617bfd2f8be7d524a8e8d639f842a31b37d5c8ce445634a44df03cf03d9aa2f7a74137d7fa50966e284dbf02d3662fa78f68acd5ebf80b3
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/DotNetInject.lua
- SHA256 f93774c321fe590b26f6838889654b7639d251e0190e3509c3e50556ba0d7989
- MD5 019537c21e839ed2dcf6372d4ee5437d
- SHA1 c70622fbd9922a1f98ea100dadb1cdaf73a407df
- SHA512 9cb3a81c77aea77cd12b87fe981b06096760da6d32f83b856a454f30d88067710261f6ded11a75c01181d8a789b6d39c9861f03f237a1da36cc0801168e222a3
- SSDEEP 192:YyiTmTvRu8ff5A3bvoZjCEA5Ugcyqoeg0Ex:YxmLRu5ga
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/DotNetInterface.lua
- SHA256 952bc6a8bfd0070566411ee88ca84f5a7f54c452a4e77790c84cb150595a443b
- MD5 1dce4c5122636604f6ef299e5e6d8211
- SHA1 b7149b4539315c699711403d85fc7b7d6943fb9d
- SHA512 705620c3b2a1bac7de12778fe953ed96c956f04b53c944907e00086fec2774b1202d424e6428c9e1daa0d49376a6f03b4de5b33e56c778c02f6cdcd76cb3ebe9
- SSDEEP 192:DmA6x6gnQPYg7Zlzgng7/QgVgigbgggQ/egegmgKXh5XCZ1C1TRxvnW53ZgmdUMg:D6hQ9i27lKmUgQm
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/JavaInfo.lua
- SHA256 aa530743076cac31f77260beac32b9e0e5b6983c2b3cbc8f348d8abf4f0c9c3b
- MD5 1bd760ada69fca61957f15955faa5909
- SHA1 e445c15d1c6a8b239f30ea91b047d375408fc5cf
- SHA512 e4b57ac348a9d12b9f0be1c96591481d88219fb791d81386c0f66b08058a8182c692186d0eaa27482b427bdc73cd643d57ca3a047be8a52f5790d2abc51d5f5f
- SSDEEP 768:u8A165AMalTUAXV/Odz3JJbeX94/TQIG0UDfCI:uEAfTUAUJ5EH
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/JavaSearch.lua
- SHA256 8af39e86394f7b56023753ca517bfdca29dc4f3dfe64a3310eafc21207a61e95
- MD5 673fc378a0e09bf887e95ffa87d1ada7
- SHA1 12a03af2c137e1dc079f417f67150a7bf70d55d2
- SHA512 dd06ddc7f8ffe6e1fcf142368e1e7035d2f3130b3124a223c9912258552d8984ad8daf12e72253df1c9271cbf1d59d2c40684c4fde5424af16e047882a90ae5e
- SSDEEP 48:StC+Yv1YVq+5pVqZrSA5VixTM0GBHX9bM/oCOHuL6Ei2fqMII1qMII3nOZ22BWyn:KCVt8SFL3Ag0eFM1e19bKfuc275OU3
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/MethodInvokeDialog.lua
- SHA256 eef6cfa2400ab5d1b4c59bbf3bdc977d5600ee07c3edc068de84b16eb48442dd
- MD5 196b14ebdf8de3baf14bca42505990c6
- SHA1 4f0ef4bfac987ba7b7eeab048453ed6eed8897fb
- SHA512 5c2d4163a67b7eb2add77a3ab135e952c04067f62f41cc8db4e4eec7ef20ca299280e1902e53b65f8edbe2605071a96876daf48cb386095684c30a9127e27803
- SSDEEP 96:1pcDQnDy6H+HdHjHbopbdf6vssaSaaHwuHymCvyrx1Ma+H5HndgbAH/Ey/6vi/+H:ncDQnG6H+HdHjHb4bdf6ksaSaaHwuHnj
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/SpeedhackV3.lua
- SHA256 eb2c83c2b9fe8c76914e29c09db7217d08f6a89d7dc8c538661fd3f65c11a14d
- MD5 fe317f2c28b378c0aa1211552a36e445
- SHA1 e9c5d06bb5f0fb9499f4fdb00ef59d462f675fae
- SHA512 8c419738b903c7978b9f7d88253d2cba88af7ba3e2c98764f9d19b4a14d0ebe100027d8fc9fe340c568a164b0fdc8914fdfe799d0355a6783e65770e75bea8f2
- SSDEEP 96:KmgFB0GQJVj3VNiFeeqHxHLfpMUAUjMGZio9TFzbBHgguV3Dga:KvFSGEVbHiFHqHxrf2JA75b9g/V3Dga
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/affinity.lua
- SHA256 6fdfd20755b3ff4f71abbd9f834a916d7f8a9d85fb5e5dca6bbd859cac6de758
- MD5 736a8bbd0d34eefd4c1eb6d02b2f35e2
- SHA1 9adb98705ca79049c9ac9357ad95cb09ca5277e3
- SHA512 5890c5a73beb80acfbe9828d62e54510d02b28384fa97ffe853b16d910cfe39e83a93fb9f7c6e79823a694bc08c658afca6b1430d59a48691e27b88b87d519f3
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/andtools.lua
- SHA256 1142b59d9b5a918b637006fbcd7199c3d561ce08722ecaf192fbf2bcb9b0c3f1
- MD5 dbea35855b986c3e529d5f6dedbe5ef6
- SHA1 3cc8db2ebed5b515ddb6a1cdf54066e8dc0485a7
- SHA512 030fb90f1caaffde1dcdc72d74bbda7874e62171029704efb44e521eb46f2d1eb75a99e8314b7b72843bb1edd236c38f4266c081d471a56951bc29c5226c7250
- SSDEEP 192:br0u5yjRAJgkv4a0vmIVn4vAP9dno/wF+j6IV5yG5A:b4uAjRQgg4tmIR8+95WLj95A
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/andtools/files that should be here.txt
- SHA256 d7c2c90253b29e2e7ad9f2fbb38305be1fa774aaac47fb8de389a31a96c294ce
- MD5 b49879487a12d62b4f3b03ed1909d9f7
- SHA1 6851bd57974bf4521c7a011cf9d01b44a698d97b
- SHA512 1f475f6ef15f817e831e1ec9ea5f51ff52ad9164858df43b6a93dbfd196d824d12883908ede1f22856586e6e0347d10a99a25616ad78fb32dc532294c731805a
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/autosave.LUA
- SHA256 2102c2a017fe0c15d924891750f2108734c1f616bb8155db075109e4368a931e
- MD5 005a675ddbdf7e8359aab9af19dd7000
- SHA1 2dc8ef7abbacff7c11bbdc3e7edfe95a9b2ddeea
- SHA512 a756d3f6b4cfd8ac91d30f768f4d4ce3571250f484c6fe00e3e439062cb6a7eeef506799324c97b02e9367482dffb72ca599361a3261e95d203d645ac8bd267b
- SSDEEP 192:77ODPchjfwp0nUubFgqXz/C/cozwzQtHdBLRs6:o90UKXxqXR
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/babyce.lua
- SHA256 1a0af003b24d7af4aac1da4f635dc2654b909ea4e377aa7f8100e1423fe56156
- MD5 2752eb057b40d4490c866315c6f50055
- SHA1 0e228ca74cc7c15922e8fce81067cc0c6630257f
- SHA512 33c3e6493efb708f06ad3ec2f6072cc24a0f62474734a2307347f43bc4a6e669dc03df9d954337c57aff4e3f7e19cefa0d9740390b2e54fc797c8e8f50e27ce9
- SSDEEP 384:aapaXjubrqWBIsICp4vgbWj5fP24uH8pvn1ehUqmWcCGcZhaGNFwytpeuwFda:aawXSbrqWBIsIq4vgbWj5fP24w8pvE+Q
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/bigendian.lua
- SHA256 ec62e56280d04a8abf6bd1261991a505b2e5901082d8e41c9a6a15592cc9ac27
- MD5 4b2ee1e7fcff5281b4f39698d8ca5a16
- SHA1 9f1924319e471a58c6ee765eaa574baa95918b70
- SHA512 32128583eda5100278f94118bf0fc06c5d34a5812693597f90da4c4fa2303ca4a9e5e69d2f60565492532fdeaf9335272e96c4d2c4897559dede12987ff09bd9
- SSDEEP 192:AQMWG73KlI7UQUWi7lKli7GQYWp7G7wDrcHZfBQQRT8Rw+:ANK7DKJPNTm1
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/bypass.lua
- SHA256 88ad23df814d90e779b739239ad7b866e01c7e16e6df351e3eeb57b2674b08a0
- MD5 2485e0ae8e8b36a52ffadbbd3c5a6b14
- SHA1 4feca5b8f2b7b821a66d1a95761a9408044d2b29
- SHA512 f8f5fbe55f69dee9328e6ddf1709e0b0ebb92330794c14825df29f59456006622c4f1577e8aa40b74dce7b510887e08ec9111cd0a824b3654d03bc8d8fae47e5
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/celib.lua
- SHA256 f601d853c4f6f3224c32496ae7595c5b28e4f1e429400cf877802011d48185ed
- MD5 71d6e0185b6841b5c47600a2fd4700a1
- SHA1 d8cb206d8fefdb21317085a72ab350af4ff3ba92
- SHA512 f43ee6d64e8471224ad635b7ed709ea200d886704eada7d6892d3d70c8dec78f2b4d9870b0b58fd428e7d3ccb3956c92a91d8b2ed4ef1147c57c7ccdcfdc529d
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare.lua
- SHA256 c0a7ad4fd5bc521b04fea71e9d1023d9e36f88bb8f6a53e4e8e014923de4c7d9
- MD5 b58b18c87bde2a935dcd06ded31b3c77
- SHA1 ba8e40d11883ad892bb939dc0317393dc7399b0f
- SHA512 2785aa8957b07822f7e66cd5a9ef0369c21afba29d89bc525de13da43f9fda85a9635d9f3e1dcd56bcf45887645aa795355b0da1bcacfea511a92251b9bcaee3
- SSDEEP 192:p1mSfPL5ThWRM8vLdyWR1hHS+6stplX7ZbaFYBY6tnGb:/fPjylLNkKW6tE
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/ceshare_account.lua
- SHA256 0765d83f004386d898aba55a9bb53d032ee38a422b6eef0770e74f7693e7e69b
- MD5 fb24f06295b3181d16c2097ed6dd1747
- SHA1 37d0f0071cba48aab9f2eec7acd2b1f237bb10e6
- SHA512 6699d2f27d41f9c415a7f3300b019a8afe5f3618be9d1a20e4db201b1026abbb2f3a79ce567509590fc43b77516689d5b7b28d7ce41e1db374cf83ec697bc67a
- SSDEEP 192:9mEzdE7OvG9VfHAemV9HmIcqH2E8VHo09CSADseggWXHaOYOKQWnDYW+VwHiPZJz:9mEJvGHo9NruoyFGAo2f
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/ceshare_comments.lua
- SHA256 67b02bfd7d1351665447d1e6309f66685e762835256e9718bd68f1b0212c059b
- MD5 43c3d935e0ad2cb1df42b20f43a56ad0
- SHA1 a8f4ec68d2bb6235166c54af1afe5bc7859f5d29
- SHA512 47c190dfd1274d44c51ce873125aa482876a43b57208ee8d284638e65b06399fd9dcb120466a99d4aa48e163d074b2ea2c32581aacc80fad42923934f4ecb3e0
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/ceshare_fulltablelist.lua
- SHA256 d67c3f857954e7c49e94bebf62333378408235b2273234180ec0e16f35d9bedf
- MD5 725139185a5ca226abee128b3e04295e
- SHA1 019ead2182ff6d2394d13e38da2ba0b4a25a4b93
- SHA512 6ea119aa2846362fae22cbb488ad31b95b2698b80b4ca9f1ac7624e7d89e2d9dbee8d3075b1942299df314fc196c4791abb0c3515b72c508f2e3d7c52b209322
- SSDEEP 192:0nXu6OpWQ1urJJrYN3FJ/W1O0f0SjBf25Csy4U5nlFJR05O2xBLWplHWHHApN85+:kEWQ1qnsFrseL+K5rHckVuWG
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/ceshare_permissions.lua
- SHA256 3ff8fac3d2fb9a00af04787242eded48a16b4cd7fec923ed28d33bf5806f6885
- MD5 d2bc857c62a33e4bf7398e07cd3cb5bc
- SHA1 ac6324ca159b785dca907b2180ad3b6e97dbb097
- SHA512 262e6220340ed18c777efc5dfbd27515c4dc08cf34d106b8b3cfb377542a40a81e285d044fee86db045aea577a8201737f61327f22a59095000f77b157d47bf2
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/ceshare_processlistextention.lua
- SHA256 ecdb599d5ae02ba220948a8d2f7c2af92d7927a228eafb86cf414f146dd54eba
- MD5 266e292c27213bbbc1b23fd7109c46b8
- SHA1 7884ae225adf631a8252ebf214c3fa8987e68f73
- SHA512 eb768bd8fd249c1285df4c243e70cd0059232c870e890f7f0ac0e5c332fd0e9815308a2bc0ddce93063dfab91900a5a642572ae262e5a9726ac9ab339a0c392e
- SSDEEP 192:3SsWLvI11mbmG74oh1289DVuMiODVa9bHqL6ZmyzoqhH6V4jrRA8DClk4h/DkJ8v:iuEp1Bz4e8DxOzcw
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/ceshare_publish.lua
- SHA256 54d886c65f8dd7e5dd07f653ca449a6b12e64fe5bc1a741cfe48c1a978cfd3ee
- MD5 97f88eb067b9b902079f6a432133f365
- SHA1 afae319799028bcfd842948f20aea014826656fa
- SHA512 97fe3761d83aff92559ef1f19f4cd7fdd0ae433ea72e56c48d205ea239eead332c73f0fe4b992a1338fc77c5f5250d7fd1f069151dacbffa9de445de66ddc808
- SSDEEP 192:KPE/fJQNX7Yp1hpDdUegFx/R1hLFMqTmYQv8f/dJL6FXz0wU+Sms5zcChvZbC4t6:KP77sDdUeQhjiX8Su4ny15t5wBf
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/ceshare_querycheats.lua
- SHA256 90eadb9b816de06bebf10c393924e0bc5f90cdd10e876e83d5aa3aff8a77cc90
- MD5 dfe5c77e0d743c7ffb02065bd3f7e085
- SHA1 6238c5b5d3046b8ddd2bf0429274d27272b37e66
- SHA512 fc753f4520f1627957a731422f8a79166252aef7f0f8ae2e368b1981fad0810fa25f489063bfbbb84dc6a56fdf25314fbc65c636d052ecdfbceb5c1ff64929ce
- SSDEEP 384:pDdUeQN/3V2Zq5S+dv0U9cb/TphQPHjW+5h243ybQ6mG+OreIWBLTRm92px9eu18:pDdUeQ5F2q78rPZ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/ceshare_requests.lua
- SHA256 42e006575047e84cfcef465958a1aa3880f8444459ff8a81415f72a931c3f30d
- MD5 47b43f823355983ba06923b31c01f1ee
- SHA1 e65fe72e1dcfb68ee378a5da4807b649d90ad372
- SHA512 d1f0687bc614b5f621d5e9ab473729d511f84c5dd8dc93d3355f8b952e1f4009031a3f0aa2bd4855fc78da501d06ccecef9fd2a56dec21fac77bd3fc3cf83c62
- SSDEEP 96:w59RxrwzeHiOvIDYzL9cH+VzDPb2VNtrUegV:w+eHiOQDIBoQzDb2VvgrV
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/forms/BrowseCheats.FRM
- SHA256 1cc47113d130f553904a782193f24a70b6889527639dea0d43bf41a53b12c39c
- MD5 e5c6e0a2cb06d7d88b12b9743b2a839a
- SHA1 d7e1d47db322ddd51da52b15f95745933e8334a7
- SHA512 fc62ee4efabf86dc0fbd2bc208fbd44842603be9eb1244dbbb0c0a3fadc6af77c35eb7cfeec7f3bfb391de765a1ed1ee230c0e9fb4fa098d380f565af4589db5
- SSDEEP 192:HmmNyxgIf4EwW+rLEUeD0qdYKjj4vxs78t+ojoFv3Vg:HmniIf4ERWrPM+O8zjoFv3Vg
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/ceshare/forms/CommentsOrRequests.FRM
- SHA256 279d62546aa6fba4e685af9eed63d5c8578c9a40b3c44348d5f7444de88ee048
- MD5 46df3fc19fcecbef339babbe6ac1ab2d
- SHA1 981c78cff4e5bc7c4d0fa194d4253e59bdac618c
- SHA512 43b7ed1683fcc2ef14c1335a1560e23f60caf09e8c97aa7c2972b26335e872090ebd9a03461532ed5d4418df968c93f1ce7dc1962d91dfdb285db7bf2d897821
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/forms/InitialSetup.FRM
- SHA256 3442fd7b468296a50763779454646f7626fa65745a173d83d08f37fe235a7877
- MD5 3e2d9eccfaf4af4892657cc78b608c08
- SHA1 84ff1d8bc8d7f43562dc4284f6d14408510d1ada
- SHA512 38dddc3d02421b6e54b1254bc2360e68989f1366a469d203b8ed42b7478c67373586bb30612c3971e1c824962b0aed19f92ec1565b62fc3dc5f2b85134e9f66a
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/forms/Permissions.FRM
- SHA256 5a69ce155c10aeb4bad9897c833967f8464f30756f6ce0a0e758ae4c9672ad6b
- MD5 741c160390d89d28d9f4ea77660de5a7
- SHA1 bfda02e89639e6c86d19a519f32943ac99df4a1f
- SHA512 86751b0ed889f42d7e8014c997ffa462515a92eeec0ffc79dd5f7164cad4c6b9ec25bc6b2fe2167c7a11f305e83bab6856f6a49c44758419e6c7a4cb80e1f9d5
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/forms/PublishCheat.FRM
- SHA256 8a13434fdb5a8be6703e9e5add2537832d3bb5ea8ef2dc9a09667722de61a8c7
- MD5 2605d731d9f06cfe9291e5e4add3c563
- SHA1 2ab0d52773c8eb1d609852b52d49c557c523e039
- SHA512 a1c4a2da046dc4238fbb2de7a0154c7d656cfc5924189d2b49a1bcce52143b3815fae1f17645998dbb16a1533d6440961122e0c2367cd4bcf112e4bc6a7c5cc2
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/forms/UpdateOrNew.FRM
- SHA256 c394f3deae793f061b266100fa8c68b94a44ae372f0727beb450a70832259474
- MD5 442340b1ce1a2e210ac26fee6410c0f8
- SHA1 67c5d40ca3e0a1a2f7f14bf099d6fccce1eb99ba
- SHA512 f85d69d609a317f900ff9e94cc7e3b7b1564af257c898d06ede0567e441b222045e2825153d3793ed90e784b88f6df324fe6b52a45daba72c6143510cc3c951d
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ceshare/images/link.png
- SHA256 a85170d26b9344dca793c3b2326ec709d2f2d01578e78b855e82b14795b0025c
- MD5 0212208fd406500388f08bc4189cc57e
- SHA1 79a82f1ac86d6c4be3c3e4b0a790bfd4e2f6b27e
- SHA512 33e7e2ae0b3d36d8e909cffc993e6b36923e8775e780832f5d689c15d04712ea412b62cc709c53128d9acad34f1922cb9fee90304da2f879bebeb4f3a67b9523
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/copytoclipboardastext.lua
- SHA256 2a1439ea28c66ac0753eab3a02beb29653683fc438901abd2f5aa426b90210d2
- MD5 f83c9de409b7a119a56462385ff846a5
- SHA1 fa7ce23fe60bb20c7bb01ce73b6b41eb6ac0c675
- SHA512 b36dae4a02b21855c861ed2d99a1bd4f0a8b7b9ac0121d3f811e5dbb49ac12ec05d78f9b1b5ee443a4967182e3ce2e5a6a191977588f6eee8e4f41bdaa4b6dfc
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/cpuid.lua
- SHA256 e23eaa1942ccc7acf92a9ccbc69aa0e4a4d1310de5e2ad92ae688dd3276b4afd
- MD5 fa2ef4f82b9bdb07a9e719ce4d8b094d
- SHA1 7402f942f6f65020919f2e3bad1c7cce3809e59d
- SHA512 0be764d11a9e00723c222f59f3b5aabbd7966be942f2ea5c2e8ae18903b3fe7aed8d6174c164e8ea561d1ae5a56d651848700b34580baf7acf700dcc08bf88c7
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/custom/Lua files in this folder get executed automatically as well.txt
- SHA256 308c1d972eae5fc20b034f480d3786d384888fe369ac15ff64cae16c49e1871b
- MD5 1dca89c3bdc766f7c64cf6d45518810f
- SHA1 ea82ae79196abab20e8953cc84d3dc513f9e9f58
- SHA512 3be5cd676734c4cb25a941a98ad48c57e5c1703904d2cb29ebc0cc230100fd16576a70c1c5c40cd56becfe5205946e07045f24608447e56a9113d1a033f90f17
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/dlls/32/CEJVMTI.dll
- IMPHASH f169cd83c1b5a46b223f247f34ac4096
- SHA256 7bd0d77fd790215bb67337f9f210b05aaab0193d105b8ff86ec422e9875eb033
- MD5 b02fa5c8eefbcd010aaac97a94ff62bb
- SHA1 fd88f2fc529515252cbcab507f322b080853c38b
- SHA512 1d18cb2cffbf83ef949c2a34fa28c4e011c623c62ce743c7f320db1acfbd41bea2ea6d3f0d93a34874973fc43367d6562c630f8b7912b22be7ccc61851001a18
- SSDEEP 768:+B4cf1fqCWPiiyDf+TTmhX2cnX3/OtC2MD0OK9BRbAlQ4z:El38CfKmhXv/Ott20OKvR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dc:1b:76:93:c1:f1:c7:ea:51:8d:8d:ac:a8:61:de:6f:9b:64:79:14
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d
Chains
Dec 24, 2015
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 3, 2015 - Mar 3, 2026
Subject
CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d
Serial Number
11:21:6e:d7:c0:bc:cc:41:4e:44:b3:51:50:de:3a:b6:f9:9d
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 21, 2015 - Sep 21, 2016
Minor OS version
0
Major OS version
5
Entry point
34711
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\autorun\dlls\32\CEJVMTI.pdb
kernel32
OutputDebugStringA
GetCurrentProcessId
CreateNamedPipeW
ConnectNamedPipe
Sleep
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFile
WriteFile
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr90
??0exception@std@@QAE@XZ
free
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
memmove_s
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
malloc
_vswprintf_c_l
??3@YAXPAX@Z
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_amsg_exit
_invalid_parameter_noinfo
calloc
_CxxThrowException
__CxxFrameHandler3
memset
??4CCEJVMTI@@QAEAAV0@ABV0@@Z
_Agent_OnAttach@12
_Agent_OnLoad@12
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=150, version=20413,
count=3, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=4, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=147, productName=VS2008 build 21022, version=21022,
count=3, id=203, version=65501,
count=61, id=1, productName=Unmarked objects,
count=6, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/autorun/dlls/64/CEJVMTI.dll
- IMPHASH 323de1ff7655e597353e5677c1bc8a83
- SHA256 f107dd69b4115864d289f364fafc0e045fd3e9fc4bde5586ce8c1bcf59cc65a7
- MD5 cefc5c56720ca850ccb20faf47733bd2
- SHA1 55f25cf4a7de12607b085e8cfdba0383f0207e9d
- SHA512 1b6fba56feac4f4345b2f6ced82a3dddacc3c0cb6f49c1d30105a8156b8de851e34b9e31478c658c60d907c9f26237d2efb7c2ab85adb49905fdcca6349a4dee
- SSDEEP 768:wm0hfdOrlHVzBkzORZN2UE0TjwNwqGN4cOlA/eQ4z:wNuVBaOohMFOlA/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bc:49:c7:33:0c:3c:dd:77:11:eb:34:d1:57:43:1b:81:d3:6d:88:1a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d
Chains
Dec 24, 2015
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 3, 2015 - Mar 3, 2026
Subject
CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d
Serial Number
11:21:6e:d7:c0:bc:cc:41:4e:44:b3:51:50:de:3a:b6:f9:9d
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 21, 2015 - Sep 21, 2016
Minor OS version
2
Major OS version
5
Entry point
41760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\autorun\dlls\64\CEJVMTI.pdb
kernel32
OutputDebugStringA
GetCurrentProcessId
CreateNamedPipeW
ConnectNamedPipe
Sleep
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFile
WriteFile
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
msvcr90
_invalid_parameter_noinfo
__C_specific_handler
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_initterm
_initterm_e
??0exception@std@@QEAA@XZ
_amsg_exit
__CppXcptFilter
__crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
free
malloc
_vswprintf_c_l
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memmove_s
??0exception@std@@QEAA@AEBQEBD@Z
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBV01@@Z
_encoded_null
??1exception@std@@UEAA@XZ
calloc
_CxxThrowException
__CxxFrameHandler3
memset
??4CCEJVMTI@@QEAAAEAV0@AEBV0@@Z
Agent_OnAttach
Agent_OnLoad
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
198B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=150, version=20413,
count=1, id=149, productName=VS2008 build 21022, version=21022,
count=9, id=131, productName=VS2008 build 21022, version=21022,
count=4, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=147, productName=VS2008 build 21022, version=21022,
count=3, id=203, version=65501,
count=61, id=1, productName=Unmarked objects,
count=6, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/autorun/dotnetinfo.lua
- SHA256 0a74625171588b96539735526e358a108ed911e7c196fb8e6f06b1d4b035aea5
- MD5 61388dba068c03a20a0f8de472268349
- SHA1 665c3804e435427b782f67f9ab04484de129e3c6
- SHA512 bcad2344df701d1099448ddf6e6f77d79f0f58d0aa390afffafde8d426d6ba52d590aee66dd46d0e3a339d0e03456539f0ec20f4679610ea505987181fbe72f9
- SSDEEP 1536:YlMR9DFgWVljYfpMB3tkFVZszKq3Ip9k5BEZwvLdbKE:YlqFtlEfpMB3tsVGD3Ip9lZwvLdbKE
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/dotnetpatch.lua
- SHA256 ef25316d45ad4e9c95908f24ce77fad3f9064178a18bc87fda02001cc835617e
- MD5 01105e6712c4a3bc94dfafd16b17e174
- SHA1 39c267a31e15d8a49467c33d883fc5a388282e85
- SHA512 78fe71cf3afc2f5433df65052a349e6ec153547a16217912a911e6ec40908df121d5c0b7b29e41c7eb62f5e3258ec248cf5dfe9a0b55f9041d3fab0f6c3ef35d
- SSDEEP 192:9saDN+JwDFJvJBomthd7HZmMgm7ZNpcJA1dH3:iZqFJvJNzMG9V
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/dotnetsearch.lua
- SHA256 f6a74f0f4bfcb249d976aca079bc1c52128bad6cd78aaa85930c2dbcdfd80388
- MD5 60543df7087b2882acaac2adf386721b
- SHA1 b31054aeebece5dcabdf78c64b908364545effc0
- SHA512 5875ea77810f79bae658755c413902d04fc318f8dc2d734bbf1396d55c80fe276adce44b36bca6f8b2066d35044583fb155c84d74fdc8c2df3a881adc68f2408
- SSDEEP 384:qeJnJ0JEJo4JEJqkJRzJv3wD7RH0TYQdNV+RItzIzIiOP2x0WI3C3+jyTsgfEJY4:qeJnJ0JEJo4JEJZJRzJv3wD7V0TYQPVB
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/emurpm.frm
- SHA256 931db1b793e0921713998b0789732e13c8d479f15186456b1e2fb9746322732d
- MD5 fa01b87f59a9a20a794004e1421fde53
- SHA1 d14059dcbaba7cfa649256c711e68adcac9979bb
- SHA512 5d77e5635efa2a4928aa28b7f77025ce87bdf4656ea2b9376d699dec92689e7cc7186929d775c1d605261d799c0fbad6367da0759cac6d199aa75f33f598b40b
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/emurpm.lua
- SHA256 8806ea82a0115d322110fe9fcc60796398daeff28ed1c220fe36269462dc99dc
- MD5 d480b6929eb8a674ceb6c8b33c75d446
- SHA1 f590d9aad3a756c6255b2c3d45997bf7107afc1a
- SHA512 566d041d96c50742cf9d048b89aa1cf71eb713714f902fff147c45494308822f14044c7aed9b7792e3a27b261d0e9201bd4efa224e9e662e3f2d29c68327ab1b
- SSDEEP 192:FKC00Sa8kUuoCzC9c/nmJffso1BrsVj1Am+CD+0Ap+FcfzZQ3aka:FGBnLA/nIffso1VGj+m+CO+ufzlx
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/forms/DotNetInfo.frm
- SHA256 552c70ff4c6d764a571922b58b697f4d0284cc9d5b59f9940384f369936c3a69
- MD5 acaeb5f6491a070dbaac25e45f921871
- SHA1 b5c16b332c6c19f1289eb03d119a63932376a88c
- SHA512 120617250ad6436bcfece38a29be3a48688d9145a69d54fcbb6087bd53ab4e22226d2a50fe77ad6d6bc4f539249375fc069136bc99bd81cae5c86e57a2ee48f0
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/forms/DotNetSearch.frm
- SHA256 b92f6491db50191f3083a696b76eddf9b8c8d93abc7c4932fdd9f2cf712711d2
- MD5 27296ba069a8d9c9d50c0ba6ad506f14
- SHA1 9c01524eec4f48988f88b0481d0918449c7ab34a
- SHA512 96e1b661058bca486a4baf0546adee66ee1a0add254102b83f66557e0b534d6df0c097dd4697c87afa980614d0fb85a938b5bfacc77da2a23cef61b3aa03c1ba
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/forms/JavaInfo.frm
- SHA256 a9a8c4fabed592f743eef8b023eb3df1966f9821dcc12cbfbb1984d58a333bcc
- MD5 f8f8e496d28baa5f02d2728333076f33
- SHA1 9e01b5f3c136e6f922e82a616b357ea919175de9
- SHA512 8a10f177dc15180f40eea369550ae31db847dcc7468c5d1a8f8185c7ec814be8a8879caafc033de3dcb0699b2caf418be072c96bae66751c0163ad018cfee2b1
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/forms/JavaSearch.frm
- SHA256 163639034914d493f69c5d75cacdf84e8bef2c40458d5882b1a0d47af38e2c34
- MD5 60d446f50d2e3f8650f9d59c83975f34
- SHA1 68f4562ac4e38a09f19784b1b0f1ccbb58f69128
- SHA512 37f7240632b85e223a6f93235e964b1e2e947617554774714533b07c969eb1f6a44841302a4b2d66649067709b3e9c1db94b89b095d015042041a6441aecad75
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/forms/MonoDataCollector.frm
- SHA256 4f254bbc897ad0e165986d18577e0a04fd31c93cca542a0999fa0093edc5bc61
- MD5 03d4dd46084bcbe16a39d72ba22e5446
- SHA1 ba414e6ba6cd5503baba82a7a96272d850cb9cd1
- SHA512 b37cf277443f3d4d9c8207e17ef146fabe003402750f812c27369210c79e43baf45fb49ac2b370d2b1b1077912c9b9a9ea4aa4f7d5166b9fa1a152384902e19d
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/forms/frmUltimap2.FRM
- SHA256 10e3b379fb6b4d6519283e679f974362895e1109f0fc3cfbb0fc6e8ee4ab932c
- MD5 4e5b77ebb18e7e86a7d9785ecffa701f
- SHA1 b88021f5bb0ce1885fa027028d75e59fb110fa40
- SHA512 da7ec379dc6d309a20a83d8471c6d444a548e9b9788a012c7ab08001632c871c53c5ba8d261905b81624ff765e3ace5f7d2a945e6717ee8203c8142c1452240a
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/images/export128x128.png
- SHA256 3e671ac6a8e77f11b4c6547cf810bc06327e84961c7657340f5ca0f622a966d9
- MD5 a9bcd80603fbcf041bc462918ca48a64
- SHA1 a7908250f042b3454d8ddcb5cb20e569839be135
- SHA512 ce82c8caaba0329656c26efd5f7c86a0b35a161856b975c9918fd1cd503b32b133d6f0b01dafb92aae132dd4c19f23c7349bf146123554700e05aa94320fc0af
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/images/import128x128.png
- SHA256 4923fbf164d8dc0111e28dc1864bac8ca2503fee2b7a688845b4616465529ee6
- MD5 660d8acf876ead3b985f9df515160838
- SHA1 78a858326c16fa917c4a5284a606b824f025af00
- SHA512 81bff98bce7cc6ee066fe8e1ab1fa957e56c62084a33d879a87ca22afdf6d88012f1ecdf5dcf2493d816b96dd08073782f31f36da9bca37c53fc81ccfab1e17a
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/java.lua
- SHA256 10c9644a61d703576766f6152cd585b187291f01302e72463bd66f28d6e7a459
- MD5 8348b162a9493ed769c43cf665789332
- SHA1 a475c3413d6da71517a9c10bdf4576674cb5567e
- SHA512 8de45db04030dbda671fd83b340bf6a924b12005cfe26c81e7c30216e6df04c62dc20df243f7f6e68f225dc77e274af8dd3bfc9e7807910897f1d1e3c0cc0c47
- SSDEEP 1536:JiRtmZhlpsM/bMWohFZWM0h5G87N6F7MCjLmQ3cRCJdGwLDxIB8BFC+N/0ENjokk:JiRtmZhlpsMXM0q87efmQsYBFC+N/0Ms
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/java/androidloadagent.CEA
- SHA256 22c6b3bee52a4ce0a71c8d0effcca9612923699c6ffa9bac55a64bf8ba624937
- MD5 74bd3a88dc4f9c40b499466592d232bf
- SHA1 04acb704768a307531cf777bbf512e099e00a13b
- SHA512 17c689fa2fe8089bfb8854395923cb97b358c21037068ac8189cee9c788aff975b8378019d54c2f3564b7e25096c7ca7359fcc587a5fea0c72bf1e07a13d6bbf
- SSDEEP 96:QU7yZpwj5G45G9o5GycID8aJGFn/lmQ5MNsq5FO4SO6lv1UHH5yucX:nuZajc4c89RoFeNsqHO4d6lv1UHHfY
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/java/cejvmtiagent.c
- SHA256 0af0405dcd9c56cc23f0fa68e545e4aa6ee0791ab492930366da1e3775f199ea
- MD5 66ae7944e718b2b5f9f213c1cd24a64e
- SHA1 351d63f932353f772374f8f1843cff38bc19dfab
- SHA512 86986fc8cd2690a87975e7b7765db421597614271356913904b09f6216dd7b9dd257a54479aff6324c6bdade83716131a3cc02ca8175500dc68933a84eb79b62
- SSDEEP 768:q8HLjW+i3patx54fZx6YE+X66fdUF+am2azGcn:PpCuF+fTn
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/java/jvarscan.c
- SHA256 ecdcece3f105444c2cd27921bf9df336dfd3c3bb3bf37dba33a4337de488c204
- MD5 8d47d0a7c88fb132e6cdf95faa47a946
- SHA1 2df7d0ef1c9e3f4450858071736031e07cf33585
- SHA512 2f2eeef6f5496f48a132db800d19b2215d20e8d6324e0ec73bd8c462b2624d99b1feafe858a5a11ab104bbed52bc64217b68866beefb3b60e9a2ba71ec78ff3b
- SSDEEP 192:90ENXn+jFNoCq6D259qbM7ajnJy0OQluODw37+yKkflWEjoXhuia2seCbhou6Dc0:VNKvoxHgtjJySTULF/UxxCUAls
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/javaClassEditor.lua
- SHA256 4f0e7249a20147fb1e364b5b182d990e6d00bf6a2624edaa368b65142dd08408
- MD5 96a64006f752ecd75faed81f86212f93
- SHA1 1889ebb9c206866a7096f6ecd5b7cec628dcdcbe
- SHA512 01f01661b7c8dddc2940fb8a6e3384c5bebd1560703e510e7ec029a294aa0a49486b6948851d99c01594cbddf75295d2f38ab4c1e7760afa3e40b15151b0fb2b
- SSDEEP 768:kR7JxiEJ1FwKp/UnSkXZh/GZPbZ1/GZU29s4dwHvuhWaPg5jys9:Oiqp/UnSkXZh/GZPbZ1/GZUWm9
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/javaclass.lua
- SHA256 acfb9fda20c347d8b7b2e513d38d2692bd054ae90b88e846460e66b986dd8d1c
- MD5 e4fa493cbf4f5e932dce648a78800616
- SHA1 b82c12b23ae06ac07ae61b0b599f055dc879c949
- SHA512 e0c4b9b757d4f38dbdb2c5ce11fa27ee742eda97a20f098d38300c8dcf27015d5cfc8bfd658b6a7f48cfdece9645da633c32b18050598a368432f7b026826823
- SSDEEP 384:zGYmhPbvqKlu2uzKCM/muwu5gfMs5eQVQgQ2GO:zGkKl4zm/mhR
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/luahook.lua
- SHA256 f9fb29fb5b7fa3a764ab4d58724f3978655d72844f50c12e1b86d3994d627e78
- MD5 08a55bfd1dcf6702c39bd107d350d2c9
- SHA1 adf27ce42051d8b53b1fb011e57b0a05f2c9b8eb
- SHA512 67621a6d86d34296f821381ace800d1ec3f8dda69589104aa83f9f6d23233dd2b39221ed378404d608703587b20a87f3acb15cc5cf7293b353b40374934689db
- SSDEEP 192:47r/hTUKMTJwKH6igCZZRA0c8kISFbF+ICDWit0v0db6jtSvzA/zgWNNfhcPq/zM:cTUK8eF0Ww0UOfNSX0Uj
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/luasymbols.lua
- SHA256 c5a35380af8bebe96b85377f5f41f8c068cb857c74b9cb85b7467b35c1de10c4
- MD5 df4d243ab0407a1f03ccf448232fcf62
- SHA1 62453cfa7abf6fa83158be1ba86c854d9a6b7d4b
- SHA512 4b05b65909673e92f59ab64c1ff4e0b829f5c9085eafa1fff28cb0ccd7e6a7f6ef031633f443e0ba156a4b8f5009f526d0356f39ef77b22706f98f100b1909c2
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/modulelistscan.lua
- SHA256 1f11078b143b92612822f3dfc09d93778471198f203694c8fc911e249fbbc557
- MD5 ca347def8a682d2adf951c4ecbabd948
- SHA1 c65bbc8a5106e9ace9ddc450ec3a5f637704fa62
- SHA512 9f7a08822d9357af72a27707c17fc0d3ec03e72333d88e2ba8e2be95eab7ba9c1b33ea3e2e20d734c382f4732f77443d3aa9c189667a74195987f5db486e2651
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/monoscript.lua
- SHA256 7f038f9d003495c9154336718f3149053dcd0ddce8cdd77302a2b43293ac3372
- MD5 29456abe3b83342a896cd579e013c646
- SHA1 953ac5fa21dedcf373af57d341b5a834e131bf62
- SHA512 a398e82f5120e1c013e0230b736bea8f1216000e934423aa7ed475fb6a3c37556e42e2138d6f771d36f6982f98b3fa88e668428d4c3caed3d79645b7150f7235
- SSDEEP 1536:7V5f6psULJtSiv43QT8Yto6ZVFCzsr36nDZ:7mii4S5tQ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/patchscan.lua
- SHA256 0714bd0f908345d7588a09c856746d76861ce4eb3571692babc1bce2d35a57aa
- MD5 f2896031568f43a7e4a7529a16f4ea12
- SHA1 a24b17aec47fb290ee29bfc01c7386b85827d14e
- SHA512 b4f9ebb1e8375045269ff11fe2b6aec3c31e64ab89cddbff1d26451db3426ae841e28d184539959f84248cf101854f47e8f3497ba8414460abcac3c0d66248b3
- SSDEEP 192:02/2WiurcwWJsFH1bukLWmHwt/5B9ndDiC4fVAslnlKQ8gLIeHkSD//TVxVkB8CZ:HtWIBugO8ieHkSDnTVTnC8i+lLQC/6
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/pseudocode.lua
- SHA256 6704bef60f60f85e76aa19b96a43aca74c4aa8905b4033a20c24b75171b33d0a
- MD5 2be703bf1ff1ea4dd6d1eff673367e48
- SHA1 13c122cfd7eb38d298fa91f3d6021f025578b508
- SHA512 e1fc1c55574f5fecef535734a23db9738d4c5762e085dea721f9cd7f5f9f364dd1428f669f26149f1e49414f38a4c00bc7fd4f5e1a5c03a0e53b24c859b25c5e
- SSDEEP 192:K9yd/VQilJ6HLwxxKF9Znu8KX+qNdYSnatJoqVSQPFLqJ4:K0VPlJMgNdYSnatmqVSQPFLc4
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/pseudocodediagram.lua
- SHA256 43dae8cfaa2c16b3d94c748de250bba2e16e9789c8b2f3395cb6ed4f79e624c6
- MD5 49c105dc0f4e732802284180722747c2
- SHA1 cdc575490b51a252202bb5e37f0536870dd3cca0
- SHA512 b3a582e1fb4baf003f40262c888adf84041874e729a97d8cfaed581c84b7b3f5823dafa4249607d4e79b62aa30bc207632eca9522a0866edf1c57cfc8296efe7
- SSDEEP 1536:SDN7O8gQVISPW3R89Mvybxj/kTdg4YXj2P:SDN7OiPW3W9MvybxjM/dP
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/roblox.lua
- SHA256 64ae4c6de49dea636afc8025e8c64ac0961272af9bb00a3c478967303c69f0a4
- MD5 faff8296fb29fa5dcfae45b7ecdcf271
- SHA1 5d2554b1e9beff14e9ec827f801627d0aefcebb8
- SHA512 ef23ba50ff55a0fe2b70b5c9d4039bdd5e5de8208dd03802d0f74deb88b699d921886f946fc5112f890b35dfab8cb6fde0d4974dcd63c65c0ec54fe5083908f7
- SSDEEP 384:lCtCUxWZb1/gBQ7jnlTZpzwZb1/gBQ7jnIVZplRZb1/gBQ7jnI7+ZpbvIs7:zURBQXpRBQXqlqBQXtl
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/savesession.lua
- SHA256 d99600bd2a0e754423499c963953fbf16b5ff9cecadc44f1332733f08f3d3f6e
- MD5 18d66678d7078c907fddb5cc4e16e94e
- SHA1 681dc425c522d1a87588e224980f539de791f2c2
- SHA512 d22c18c47d93c12ed60bf704c590af3fe7d7d0bcc49b77939f18424f2d15241c084f7288ac1695f22ea97de1c6605351daaf98fb86a6d4269adae2c78642ba10
- SSDEEP 192:b4QnfODIk5ktS+Xp7SjCjL6jSCXNB3mtS+jwKtwTZX:bwDIAoL6jfMbtwX
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/splitscanintonewtab.lua
- SHA256 75721e707117bc87643b69dde6b9c411bb1c43e4616dc4172b0823b4173d3fe3
- MD5 16070ac8ae7c9e1a5dfdf5353de647bd
- SHA1 49f3c67b144aeb935460e46616130e5399c9599f
- SHA512 10a281bae55a7db0e84cfdfd573f60c224f146fd55a009fc8995b6a72da633addf39ff36fb54ac92f593ad8fd8a85b25b8be379b789d8bd636808e5ab9c8da58
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/threadsafegui.lua
- SHA256 8b661a0dcac8454ec5e213b332ccd14e2a85fda9f076ef8ef752f0a8ff792bfd
- MD5 52dfb7bdbadd7775d0479bf916cffcea
- SHA1 e753a9f67021276f6abbf541373522391a8e9f39
- SHA512 d64bf8e7564569f051c1fca0906827e62c4d295ae9a8ed6120b051e16f81629f5b3d5e294e836ff261e33876c7aabd0feb2d06a5e35dbecc00744700da132ef5
- MD5 SHA1 SHA512
Vulcan1.5 BETA/autorun/ultimap2.lua
- SHA256 5bfb455e45d51daa6836ef423a37e5848149da96e87baa2d770c4869cbf124ad
- MD5 0343d5d130e8522727b70aeebbedd02e
- SHA1 31943fe25fbaf4d16ee57eea2f586e2faeb8418c
- SHA512 2ff7edc150c0b6d5090ab477b53f0ee4b4e83eec2e3b6c3d1430470b8b7c0811f857e73b311568fbd99fc96d731c5e38b3a35e59c90a41b13e4b82250e752c16
- SSDEEP 192:9IigIDxb/3+gDrWSvBtE1Dmn0ouVL+rMpDmxmleNyoJzuWSvxL/HYUb:asCcwVL4MtU2OcxDV
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/versioncheck.lua
- SHA256 e0c48c9033c52f77ad7b1df44e2bb81c2fef868ce08d46054723bc8441f0c742
- MD5 d609ea53ad996e63300e703ed98eab08
- SHA1 8e19906c32bee40e9a24cb82ab57d109ae11e038
- SHA512 cc85857d449f507477a12cb7d5be31288baecb3b41bd760ebf1bad289771cc7eaaf608b74e421eda948d0b45e02a6fc188474c0e926eae20510c77d2af8890a6
- SSDEEP 192:J+/R0h8p0wyUYCCTLysSUDfH0HwjOtHdqFB2i6uMPV:LWBUDU9Er4V
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/autorun/xml/xmlSimple.lua
- SHA256 05258e280f53c5905ae374f808f4383cfd0898f6e620d875136edeb0fdba34f5
- MD5 274946677cb1fb1c63a04aeb641e21d0
- SHA1 b4c71b59792773f20878e3ba582331cf4ea7d592
- SHA512 aac74d0da491ac3e9465964a3861f93eacd63d2c445c1f235fed444f60f9ce19d3bf5069bd012ae72593516db96ca4a0fdfa07e83218466743551cbf1a6a64ef
- SSDEEP 96:j2S/HgQOsILKD/nMed210naDVOPkkmVBgB+CPcGhJpl:j2iHgQOsILKD/nMed210ngOPkkmVBPG3
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/buildsigs.bat
- SHA256 1487b1f4a9c37208cf93f2f041aa45f1cd64d09b5377a62be2707f03f68afe93
- MD5 dc3119b4e011d09c240fc78b18b2dd52
- SHA1 51a75928434d66cb1c6cdcaea1c27951881f4dc6
- SHA512 f5e039ec2418148777ba2604232ea65be1119ee670ac906c0da49ac456d6f96c44195df3d8a51671de94b082f11b41db315189b3f1e943792cd9dbcd2fae5ef1
- MD5 SHA1 SHA512
Vulcan1.5 BETA/ced3d9hook.dll
- IMPHASH 1918101ac90906330d7a2616375c55e0
- SHA256 fd2a2b4fe4504c56347c35f24d566cc0510e81706175395d0a2ba26a013c4daf
- MD5 5f1a333671bf167730ed5f70c2c18008
- SHA1 c8233bbc6178ba646252c6566789b82a3296cab5
- SHA512 6986d93e680b3776eb5700143fc35d60ca9dbbdf83498f8731c673f9fd77c8699a24a4849db2a273aa991b8289e4d6c3142bbde77e11f2faf603df43e8fea105
- SSDEEP 1536:yq8Iw0TnMfrUEuKo+w/lT35oBqhSw3kmuqW3Crf0d3N1NsCeOEy6jCMpOEsC:yq8IdTMTyXUR2JJry3NreOnMpOu
- MD5 SHA1 SHA512 SSDEEP
Digest
d9:d9:47:08:30:fc:4e:55:fb:22:f7:9e:29:5a:d2:7e:55:6b:dc:5f:2b:9d:7b:c3:44:a6:0b:b3:47:70:2a:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
d9:06:4e:65:86:aa:82:4d:ab:65:3f:97:82:7b:dc:ec:91:1c:7c:3a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
5
Entry point
21539
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\ced3d9hook.pdb
d3dx9_43
D3DXCreateSprite
D3DXMatrixTransformation2D
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXMatrixTransformation
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileA
kernel32
EnterCriticalSection
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
CreateFileA
WriteFile
VirtualQuery
CloseHandle
WaitForSingleObject
OutputDebugStringA
SetEvent
GetTickCount
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
user32
GetClientRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
D3D9Hook_DrawIndexedPrimitiveUP_imp
D3D9Hook_DrawIndexedPrimitive_imp
D3D9Hook_DrawPrimitiveUP_imp
D3D9Hook_DrawPrimitive_imp
D3D9Hook_DrawRectPatch_imp
D3D9Hook_DrawTriPatch_imp
D3D9Hook_Present_imp
D3D9Hook_Reset_imp
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=149, productName=VS2008 build 21022, version=21022,
count=120, id=131, productName=VS2008 build 21022, version=21022,
count=43, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=203, version=65501,
count=3, id=156, version=21202,
count=100, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/ced3d9hook64.dll
- IMPHASH 4b9b84d7aa5c3523fdc75de4312d466e
- SHA256 8783f06f7b123e16042bb0af91ff196b698d3cd2aa930e3ea97cfc553d9fc0f4
- MD5 61ba5199c4e601fa6340e46bef0dff2d
- SHA1 7c1a51d6d75b001ba1acde2acb0919b939b392c3
- SHA512 8ce180a622a5788bb66c5f3a4abfde62c858e86962f29091e9c157753088ddc826c67c51ff26567bfe2b75737897f14e6bb17ec89f52b525f6577097f1647d31
- SSDEEP 3072:6UoPePVhoZB34/UWFdQomnRepTPFn35eoONSO2:j8ZBvWrnmnR2Un+
- MD5 SHA1 SHA512 SSDEEP
Digest
15:25:9f:28:1c:da:6a:d0:91:39:07:e3:a8:7e:88:b3:f0:fd:02:38:da:dd:68:fe:a0:30:10:07:87:23:fe:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
ea:f3:85:05:5b:92:37:23:6b:00:fe:d7:bb:f7:f6:53:25:01:b8:3d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
25224
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\ced3d9hook64.pdb
d3dx9_43
D3DXCreateSprite
D3DXMatrixTransformation2D
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXMatrixTransformation
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileA
kernel32
ExitProcess
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
WriteFile
VirtualQuery
CloseHandle
WaitForSingleObject
OutputDebugStringA
SetEvent
GetTickCount
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
GetProcAddress
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
user32
GetClientRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
D3D9Hook_DrawIndexedPrimitiveUP_imp
D3D9Hook_DrawIndexedPrimitive_imp
D3D9Hook_DrawPrimitiveUP_imp
D3D9Hook_DrawPrimitive_imp
D3D9Hook_DrawRectPatch_imp
D3D9Hook_DrawTriPatch_imp
D3D9Hook_Present_imp
D3D9Hook_Reset_imp
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=110, id=131, productName=VS2008 build 21022, version=21022,
count=11, id=149, productName=VS2008 build 21022, version=21022,
count=44, id=132, productName=VS2008 build 21022, version=21022,
count=4, id=203, version=65501,
count=3, id=156, version=21202,
count=102, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/cedebug.txt
- SHA256 eee96971e5269be5d3f9eb4f77aa18173008790e0314b27da1bae7d8a62dc9c7
- MD5 7fa3f05149a680ee999f67231791529a
- SHA1 0709486e9cef86e4cc1a3ae0ee56b4b9f3eca32e
- SHA512 34c15cd2d34c293ee8e65886ae09478145ae5c8b057fe0441b8be25cbcd6de15b4f605224ae8b753eaf902e768bef83d3a3c12865312e487e88b1b4081081d04
- MD5 SHA1 SHA512
Vulcan1.5 BETA/celua.txt
- SHA256 d41d9c06fd26cc2a3552898750212e5b733d1dbe23d591ca4abc7128f6f9de39
- MD5 fb7dfcb1f1d64e78f806e7b0719ddef6
- SHA1 5d2b15f9013124dbacce7e4f0b599626863af7c3
- SHA512 2c343851cf4d9720e097b7f00cf5b48336aba8298c7892e0748cac2dd939b1c61c7363cf82ee8d11349ffaba6979af33ed66ffc483700207366d16a59ec3a10f
- SSDEEP 6144:VcIxsXTXbM6RTWJANaOOwubWiSe6lNoCmL/+5y/IcvJVNry+lCtso2NwVWy+cOcY:5r6Rgu+
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/class.lua
- SHA256 d58389c1fd1d5e8d3ea3916f7532e49ac524e6f2c2561c873bea21e092de20c6
- MD5 7b7602c12d5ab2a671d1124504e021f5
- SHA1 e74ba4ab4ef9a0c5e426ea0866b26b1213a51714
- SHA512 3852c291dab3452b0a632ab32e6c78798854884bce2073eca67ceb30ce118d133d1dc9ada76e9f21bb4e77e83a3e5bd74ee2721560707eacf285ac144267b999
- MD5 SHA1 SHA512
Vulcan1.5 BETA/classwrapper.lua
- SHA256 ca3b7e49ff16f252efeeb8d7e13b11fe25b1af3f5b2f397beb28a1c83fbb645f
- MD5 fd75ef1a1fccdfdfceb3e8f2e7ee27aa
- SHA1 16d3a002328bbedf7de2f26a53fa304ca6cc8bbf
- SHA512 e6e0246561c45ea5836ce61208c8b0edd193689f869a0cb83a7259d63794644568d3e4065b7854cac10652b81e92f01cb75b7598c9af0298bf397d5542fc3439
- SSDEEP 192:9e4ylMvo40bRNbDLZOhEUi+BaeBhVVlQe3nGvLzM0CgdnznEngTeAO6x9m7o7I:pyNe9seNgz+UO6q7o7I
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/clibs64/lfs.dll
- IMPHASH 4f96687c5feff2c3645a5c06bd5349eb
- SHA256 4ee8d3375f2eeb8e5afb230d13c2cf9ee0379b0edfa76ad8dbf5ebc686a629c1
- MD5 5e8ad34ff069b6a2e1ae00bdfe96b612
- SHA1 3c83aa3ebd95d9a060ed1f06e236e046c6cd93a7
- SHA512 54404199c3b5b3597dc8fb5a6e3c6772f2729045aa5c9aee648c4306358481def2bc15538899ab5e0f5e33d202cec863348830a090b144e00d1662ccf4175828
- SSDEEP 3072:BzlRkrowTiYa0u6lQUf3V/4MSfayysXZzjGRobJy:BRylTHa+/yMByyupY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
14280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\svn\Cheat Engine\bin\clibs64\LFS.pdb
lua53-64
lua_touserdata
lua_pushboolean
luaL_error
luaL_optinteger
lua_newuserdata
lua_isstring
lua_pushlstring
lua_gettop
lua_pushfstring
lua_setmetatable
lua_pushvalue
luaL_checkudata
luaL_optnumber
lua_setglobal
lua_getfield
lua_pushstring
luaL_argerror
lua_pushinteger
lua_pushnil
luaL_newmetatable
lua_pushcclosure
lua_setfield
lua_settable
luaL_checkversion_
lua_type
lua_rawset
lua_createtable
luaL_checklstring
luaL_checkoption
luaL_setfuncs
lua_tolstring
kernel32
InitializeCriticalSectionAndSpinCount
LCMapStringW
CompareStringW
HeapSize
SetEndOfFile
GetStringTypeW
WriteConsoleW
FlushFileBuffers
GetTimeZoneInformation
HeapReAlloc
OutputDebugStringW
LoadLibraryExW
CreateFileW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileA
GetLastError
CloseHandle
LockFileEx
UnlockFileEx
HeapFree
HeapAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
ReadFile
GetDriveTypeW
GetFullPathNameA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
SetStdHandle
GetFileType
EnterCriticalSection
LeaveCriticalSection
SetFilePointerEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
RtlUnwindEx
GetStdHandle
DeleteCriticalSection
GetProcessHeap
FindFirstFileExW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
WriteFile
GetModuleFileNameW
FindNextFileW
CreateDirectoryW
GetSystemTimeAsFileTime
RemoveDirectoryW
GetConsoleMode
ReadConsoleW
GetCurrentDirectoryW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
luaopen_lfs
Name
.text
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=225, version=20806,
count=155, id=224, version=20806,
count=9, id=223, version=20806,
count=2, id=203, version=65501,
count=3, id=221, productName=VS2013 UPD4 build 31101, version=31101,
count=137, id=1, productName=Unmarked objects,
count=1, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/commonmodulelist.txt
- SHA256 cddd0f35f7351e6f19486ccd7eee5d31f0134c5c3554a12c7d51131dde8e29cd
- MD5 cc0f8b66bfedc67da8dbb2a7df2aa006
- SHA1 c6d86cc43a042581e389dc9a28affddf64294ac8
- SHA512 a4aec40ac6bea2adacf15829aeeebe66117473a542303024669a828710c6afd072c0f4890a6a334b35ac894a1a80a5bdd5e91a6ffcb7149540e304117a7e5800
- MD5 SHA1 SHA512
Vulcan1.5 BETA/d3dhook.dll
- IMPHASH a4cee279203b8eef2b26aa769c0003a5
- SHA256 e2a7df4c380667431f4443d5e5fc43964b76c8fcb9cf4c7db921c4140b225b42
- MD5 2a2ebe526ace7eea5d58e416783d9087
- SHA1 5dabe0f7586f351addc8afc5585ee9f70c99e6c4
- SHA512 94ed0038068abddd108f880df23422e21f9808ce04a0d14299aacc5d573521f52626c0c2752b314cda976f64de52c4d5bcac0158b37d43afb9bc345f31fdbbc0
- SSDEEP 1536:QyfNvGKKZVGcuasOKQBBTff07PSZHCSVKOCDCA32XQaOCKnOEPChMOE6:lNvG7vGcIiBTMS18RD7325YO/hMOr
- MD5 SHA1 SHA512 SSDEEP
Digest
db:62:b3:07:f7:fb:1c:7f:a5:80:2a:7d:d7:42:08:fd:62:21:2f:29:f3:b1:b7:25:10:4b:fa:8a:96:f1:c1:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
b7:8f:0f:b1:70:d8:43:04:dd:64:4b:77:96:93:f6:23:64:9d:dc:d5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
5
Entry point
19216
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\d3dhook.pdb
kernel32
CreateThread
OutputDebugStringA
GetModuleHandleW
LoadLibraryA
GetProcAddress
SetEvent
WaitForSingleObject
GetLastError
GetCurrentProcessId
OpenFileMappingA
MapViewOfFile
OpenEventA
CloseHandle
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetModuleHandleA
user32
SetWindowLongW
GetWindowLongW
CallWindowProcW
PtInRect
ClipCursor
ClientToScreen
GetClientRect
DefWindowProcA
ToAscii
GetKeyboardState
DestroyWindow
CreateWindowExW
AdjustWindowRect
RegisterClassExW
LoadCursorW
DefWindowProcW
Name
.text
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=43, id=132, productName=VS2008 build 21022, version=21022,
count=21, id=149, productName=VS2008 build 21022, version=21022,
count=113, id=131, productName=VS2008 build 21022, version=21022,
count=5, id=203, version=65501,
count=108, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/d3dhook64.dll
- IMPHASH e1df8870766f8039f1e65ca890989bfe
- SHA256 7d82694094c1bbc586e554fa87a4b1ed6ebc9eb14902fd429824dcd501339722
- MD5 2af7afe35ab4825e58f43434f5ae9a0f
- SHA1 b67c51cad09b236ae859a77d0807669283d6342f
- SHA512 23b7c6db0cb9c918ad9f28fa0e4e683c7e2495e89a136b75b7e1be6380591da61b6fb4f7248191f28fd3d80c4a391744a96434b4ab96b9531b5ebb0ec970b9d0
- SSDEEP 3072:ZGrrgbU27p/nFdpF/vwFLUjh2v5VjObfSVMPFtE8PdYO3kOc:crk3ZFdpRYUjh2verh6
- MD5 SHA1 SHA512 SSDEEP
Digest
dc:2f:d1:2f:d9:e4:b1:1e:ec:f0:43:93:2b:e9:00:26:fd:18:f5:30:c2:5d:db:c2:6b:05:9b:00:74:ea:35:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
c0:dc:20:7b:2f:2f:12:5d:4d:8c:5b:e8:f6:0f:e9:17:a1:71:90:8c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
23600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
f:\svn\Cheat Engine\bin\d3dhook64.pdb
kernel32
CreateThread
OutputDebugStringA
GetModuleHandleW
LoadLibraryA
GetProcAddress
SetEvent
WaitForSingleObject
GetLastError
GetCurrentProcessId
OpenFileMappingA
MapViewOfFile
OpenEventA
CloseHandle
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapAlloc
HeapFree
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
ExitProcess
RtlUnwindEx
RaiseException
RtlPcToFileHeader
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
user32
SetWindowLongPtrW
GetWindowLongPtrW
CallWindowProcW
PtInRect
ClipCursor
ClientToScreen
GetClientRect
DefWindowProcA
ToAscii
GetKeyboardState
DestroyWindow
CreateWindowExW
AdjustWindowRect
RegisterClassExW
LoadCursorW
DefWindowProcW
Name
.text
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=44, id=132, productName=VS2008 build 21022, version=21022,
count=104, id=131, productName=VS2008 build 21022, version=21022,
count=10, id=149, productName=VS2008 build 21022, version=21022,
count=5, id=203, version=65501,
count=110, id=1, productName=Unmarked objects,
count=3, id=138, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/defines.lua
- SHA256 82e8ef7df20a86791cef062f2dcacb1d91b4adc9f5dea2fd274886be8365b2f8
- MD5 62e1fa241d417668f7c5da6e4009a5a6
- SHA1 f887409e3c204a87731f317a999dc7e4cc8d3fcd
- SHA512 2283cbb9e1d5d53ad1ed9bc9db6034fb3c53c633b11001f373523640bbbba95da9a3a0866c7d5fa0620facab7d18c8577dfd69496fc7319e0a4a74d0b9e10c45
- SSDEEP 192:0egHuderGTd4G9mSZk/8fdtINfbLmJFcSC5xm+9qh07EBS5pekFrLUK80u9ETxst:AHuderlSZk/8FtIF4umMqEpDg3fT
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/donottrace.txt
- SHA256 dc9354ccf9667d1e5ca13d6468ba2c258256042d7c25e6d91ade7f8e2a2ff3bf
- MD5 a2e60a2f01f69d0da415c58f25c37e5b
- SHA1 fa1a0d6183fee10de5fa4c554370556217e3af26
- SHA512 ce7f5f8365d2ef3da14d4123cc7ef053a7f99e8f98d47e6c5967f267b8ec7fdac2da993d0fc26df8eb2face176ba56b7359ba1f29f021e1dfdd561b15efe64af
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/_mingw.h
- SHA256 ab4be7d34e7fa0e722f0948e0c90ad4d95b8a1ec649c2f186dfa387b57be7833
- MD5 dc2829239704cdd5a5109699666fa573
- SHA1 60c09e102f552444d59ed9ed474e667136c16dc0
- SHA512 f3551aef2a0ffe42a16f1a8be26b2c2722e773a59d21b60b2454ab0b68b008402623f378d2afaa30feba87f560475a52d2899e6d062bd7f88e22119b25231f17
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/assert.h
- SHA256 3ab7edec5e55840c35be252bad52236955c3b4f9143810cdb1f09c34510eb8c4
- MD5 9c022d741996db6d32411bfef4eadb41
- SHA1 4ba93d77927eb8cfdcfe07f56d6edade180af1dd
- SHA512 e448608bfecb770a087cb19934a1b45a5c564ea10bdf5a40bbb250f472830ecee4990c669e90e495ecb5d4e48c3871cc2a33ce84f2d38524449fc9f5fd501da0
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/celib.h
- SHA256 35479a70d8bd27de2e7e3cd0dfc9fc3fe646f9d3fa2463b25ccbed1fed794666
- MD5 93d9c4c3574ff773c0a23108b6403a9f
- SHA1 10fe7fb85ebe263c9faea00ac26503d55117dfb6
- SHA512 d2b6517451cb65f7cbbe48eb8eedf667339754cc4fe330605aa44db25c9ac1bbd634e4270e116431f87b026bc137860a4bdb4e901a814d56ed561625d4cd3214
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/celog.h
- SHA256 5e376318070c787feec7a1acc169d4ceffb3a7402bdb6d15579eb5aa9fea9622
- MD5 586234beef9ce422e746c7a68bcea327
- SHA1 a031360b04ca85dee52dc7bc59684ea0878b9ce2
- SHA512 18f7236f0b359e049bb6f2e2e7895636cc455550383c987d84cbff34dfd2614b3a073b0026f36111b9dd1321f9b0f4cf7ae1e41a377ad1a19fee658c94ef5931
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/cepipelib.c
- SHA256 7c8fab37dce285b6082c80f3429d87690c20e0578cca45b639a0b2bd419b9256
- MD5 dcb6ba3df687ff6dc36bfc0b5ccbf907
- SHA1 d167b43391652e8a9f0f95f89df66cd9e80ebbf6
- SHA512 069fc291258d579e8f44ca48a2fcfa912af431be7f282bfd2b6ddd68407b13d5debc74cb2cdc3dbc97d11fb72505b8f5bf76a712d20df17db3ca4086c70e8b10
- SSDEEP 192:WQkFa54mw3X8UaMzCH8FRsd/tI3aQazeSivBwOqO5ydCor:bEgsR4PpivCj
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/cesocket.h
- SHA256 493c6cf997bed1807fb18a89fc01c2e9aaa66a04c5846dadbe507c1235098c60
- MD5 822b21586749c29cee674d20acb50ad9
- SHA1 e0c21b5cfa1937a45789f6894887fb521fb44847
- SHA512 356afc2b307c8aa024b44c0aa6ff533ede36794218d0776ddba38aeb318564fd76419af22a4177c6817b69fe3925e8df396c9a1f26dcdc58325eb53b02a27cb4
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/conio.h
- SHA256 de7161f85835d98b38fe6a19ef8973dcaf58ec237b1c91cf05ac535b2ff3845f
- MD5 6a61e54ad2614ba528414c7b69147caf
- SHA1 242479133484e15a2af816d95ddb053835bf4c64
- SHA512 468702a606e20ffa893054f676c56dfe6eb3d28a002bae143298422ab388a2f2f78e318714f5274bc9ebd243863f5228d5ebead5f31d892e96d8742c8e6846a1
- SSDEEP 192:R9IFnJJzpoJItwJ+Y31t1d1uF8sFX9B17lHLQWq4QcHyQA3sG1:XI4IJ2WzPw
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/ctype.h
- SHA256 4cfaaa43b3f7414984126e8b1cdf65f9dac0ef68d9a3396be0b8828376a74a6b
- MD5 22e5a00491e32d15b40b196397ad01c1
- SHA1 b0db6fcbf4abd2f4fdea2771399c1e502d9f8106
- SHA512 28839104776441738233334a20de6ce3ada51179fb50366c27ab60432949fc78e1ccf735d2e80216f8779d84328634005c322d0010875e8fe0ff33d699ecc114
- SSDEEP 192:aK0sBzLLoy8q3JHZDrs+UAt0g7WnBeaIlzjD:EALLb8ars+Flzf
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/dir.h
- SHA256 84064b17e501d691c43d47e45b112c2884db467417910b5fa1482b72342badfb
- MD5 ef5c7267df270272bfa8f8ebd1b516f2
- SHA1 1e3f8a9afd814efa8cf7c88dc480e9914a5bc570
- SHA512 8ca2b0e08b66eaa843fc7ad0f8f4063450a469914819a637aa3f8cac39dd38e32cc0403f2b04f767ae486934026585b56f93544c8a1f5d92cce32ce84a4506f4
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/direct.h
- SHA256 179c3204312d7cf8032102773629bcb3e5fff792d1d808931cb6619a431d2435
- MD5 83679da78aaf8f8352acb1883b9ef868
- SHA1 fd89079636571a93755120120ab4f03b91076478
- SHA512 13af1f2c118e898e6055ca61286c9766df75366ff4f30708f613193cd8f89afc4a4cc2fd31fc3ac6dce5d577ee83e203f79aca3b739d9d9e9e60b42cd9c7036e
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/dirent.h
- SHA256 88c1f767fdcd6d51b991ee3234792da48c8576f5f8816f17a42344f9c8bbb1c1
- MD5 afbe32ee6ded8cbad33d6fe3fbbf077d
- SHA1 a7f0d3edee5f49e127575eb25e64e2747108e7c3
- SHA512 f655a40f8c87a0cb43a34ae47612d5cef2cf7814fd2ae9ce1c8566f97f45e91470364bd87e8c12861cce44fb8cca54717546baacc6ccbdace51d0d15206304dd
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/dos.h
- SHA256 3afea4ae85c68987fe59f40592ac5ea3ef1049b4fb72612bb185358d628e2dec
- MD5 3b6fbc94238df0fd001b04d55bc899db
- SHA1 231e18ce6a5488b2353fb9ef052fd6677c2cf555
- SHA512 28ba3ed6cc9511f17798822fa81a2d16da17ca4af9da64f3edc9170fbb883801bf07390214c54b58a32251e6a1c3bb359cb76e892ddb77fbf8c1bf3985e13e5e
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/errno.h
- SHA256 7c8494fe57d944773861c4c1cc1f2b46b3111144a24bf505b3d47b32f0ac1e8a
- MD5 b81e5a965abd076fb52de6dfa22a78c4
- SHA1 dc11acf6a38871e60d79108dad6c3156715f05e7
- SHA512 8f3057882753150fefa734897ecfd8dc4082580e856947910fcd891d744651706338a7df78c1dcf1c7e54ee79ea2a6e8d2646be9dac92ef301d7347801f04273
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/excpt.h
- SHA256 0098e51602c94f8a9702f4b776d3630f56eec27ed67b9fc36d9204933b58ac4d
- MD5 d236372cba09e14c37b4e48f81baef83
- SHA1 11a3bffaacedfa1caa4b4bb836cd95297a4ecc6d
- SHA512 d7c22525fbb97bf8950db69645511420f1198abe33f5d0fe07a5ee8dd6b5cda07038b6db71a2995c6f5ec1b85d8b98e4370330193132e95f2a65e3a847f04408
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/fcntl.h
- SHA256 fbd94f945a57165ac897bdbacd2a861b1351e7850fa76752703c0a622e0646fa
- MD5 478add63d2c741d03a60a11bdc4fc0d3
- SHA1 e9e0c857d2c409f23c346d81b77c5634f1c395ab
- SHA512 bccc563718b1a03e93e5bf8cf0d79bb3128a3fc1fdd6fbc17792cbaf3c5de70de06ec2f88d8eed7105ff62056e32e9a79570f5890e75f4443033421d283b2fec
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/fenv.h
- SHA256 67a827acf4e09653afb5d18f2ecaa5fcdfb7471d8a5b8197c2f33d06e8462f84
- MD5 deec7c35f77ec8e22074667641ca8851
- SHA1 8cce6b663a9a04b3c13aa6621b0798e487a8a88e
- SHA512 8de2b82b0579e6c37546a26bc1ab5d7603090e815d8ce728474b1405339ab4ef4f0794df19ff4cc3780aa7259288d4d93fd50b0e9c63d413ff22ad5e72bfcbe5
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/float.h
- SHA256 c9baaa478e3ba85897b781f7065b9e144faacc8e81cafa5a642b5d49c78434eb
- MD5 3b2e4b0c01e5b0b790f4f6751e977cc9
- SHA1 06db05e1c73809cd442ef58f775a8e87d708421d
- SHA512 28dd57dc4360292b987d38a408771b5e1d5b423bfd9656bee9dfa2f9bc19696af63a7f90cd350c8445bb27c5049987d97d9530ab15f3697d37652a91aaa7f892
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/inttypes.h
- SHA256 4194c0408cdba330b7cfa1d2091d72a0cfbf2077ff1feb19f436f3f3aa2adf18
- MD5 6bb72461c8c72cc3b96f78c73fa803ba
- SHA1 4506fb8bfa1622d4533db176b3dcfab0ae021672
- SHA512 5f6d95651183fbce7490a619d37672f2d3bac516319d0edcd4e782a77632b457632eb83ab54b67132752649fbbfbd1d4eb2b4aba2622bdf729f0c4bd7509db2b
- SSDEEP 96:a0GgtlRUn9ZpD5AgcpqdvDp/pwZzSAGkKTskBkbBpbwlHrhchgM2bRBhuYBbV3VU:a0GgJUn9ZpD+gcpqdvDp/pwZzP1iskSX
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/io.h
- SHA256 5da97c850e8e2ab608c42947a33411f556f6d75b8264e1e5cf29ca7ba7b96256
- MD5 4ac0744ef16453febed8de4242997946
- SHA1 b092c9006de0a8dbe7f0ff568b6caafb00b4c90a
- SHA512 1ec9947c6fe0160954f3922d6990863865d274874c31355f0838ccbb1bbf6650a9a3f0d3590537a189afbf80e33cde5393260fdd5f3ea5a736a066cdcc5ff815
- SSDEEP 384:Y8Bx8BjP8BJPKf37Rw8z/hI9B3mpv6O3O8iONUO5OG0xLIJ8SNgVSAMczPO8cONU:r02oxz7vX+8fNxIG0S8SNgVxz28ZNU
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/jni.h
- SHA256 202c265167c2e189e85f0c9ec1be8a4765061105ce8103ad12856d8f90f85181
- MD5 3d23d9fa1429eda9be383d8b1a8b02c1
- SHA1 a474629c0993b91e0b3a88e0daa53481c6e76076
- SHA512 4eb07daa4d533a22aab7cc57742c6fd93b5cbcda0d570172a9c1873a8a210498f47dbccfd79cf461dd9b81e2f50bc5213273cfb1d26917d3ff4f7a6f5b76f3c8
- SSDEEP 1536:CR1ZTpOtXrNohfbZZhwfx6ekUZ25Qb/s3MikoEI8uUk848KignA3+lId2afDKta/:CR1xpqkUZ25Qb/s3IoWLDYU
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/limits.h
- SHA256 39c0761f0e43d7b936b9b81c85673dd82896ebfa66e9f1b9a19b45f34e4cd52a
- MD5 21ce377183014c3535643c9050306a33
- SHA1 41b25206edd6309884312fd70026096c35a6dbeb
- SHA512 3b0fa5d6ebb7ac47694c7d04b4835af6c089344f7f8337db74b34e3b46a1792295224dc232fac1fd0db482fc32c8a6a4bfcaf4f39c35dccd98600181c314b43d
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/locale.h
- SHA256 882626fa25dbc1b5903e6fd98cc8516f1e54c4e06945026653f05b38125dff2c
- MD5 5f6a3e42f8eb297b888b498d93437c3c
- SHA1 09729d7892a1ed36afaddec40674aceb62b5fa88
- SHA512 587bb7be57dda7db0bf8c454a78dd67d850342d97bc7c99a9804d53fa7929eb42c1194e13456170c0902ca7a15c028a6c635879889f0af6a9ed833c2e046b9ec
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/malloc.h
- SHA256 7307ff330b8d7954d548e19e45887ed64de36da5bee1fda2cc021f0c1c1892bd
- MD5 537bc027e86f7252d88b6bf2fe5b2f35
- SHA1 7f3361d220f96ad1b93669254937929f267cc333
- SHA512 3d7693f46fe1272decba8efb6a01853786419055cf338cc900c9fe3ec1b795ba25e16878a5d53261bf3bc3bab7525110b6f1844501d5fb6be45c57b5d277f625
- SSDEEP 96:y4bSZjA6r8VdQINtNy6XVqB4/mLErYQ015U/dIuvwQRbZBq35jU:9urrSXIzGdIuvwQR9YJo
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/math.h
- SHA256 0bc33882bd2af1e7d33c38c0160e2a0ae737836815360765750cdc7e98e5dfc5
- MD5 631f16c4a65cf2f47fa49c9220d9c500
- SHA1 330eadf08fdcb31747bf7c84182f2a5eecfa3fab
- SHA512 92eb690ca7d563269ceaeffac1f0ffba6d010568431843f2dd82dca7a1aca0e6634c3335202ed5559fe631b0ed7c585dc1c3f5bb248fe3d571ba754b22b6ad5a
- SSDEEP 384:lpwI012C9/SKSP4qROW8JuWucZBFRzWhHONMLPik9OeY:lpq2C9/FA4OOJr
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/mem.h
- SHA256 43956946aefee50e01fdd4d54a6c597418abcb02251f9d7695ed7039fd7a5ff6
- MD5 534517144e5b9ed662526771bb5d7e13
- SHA1 2d1801e4179e2a6e5914764d944a9c472bf65e99
- SHA512 533f30d3288c2b827d29210c6890d600678db4f67b9ffab27046e5ca3931bc119de4af93ffa63929dcd9d7c0babd69a25e7f52e697272f3226ed198c93a9a8cd
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/memory.h
- SHA256 b4341e188913a819fa3bf101078a95ca077780219373f424c39ad86c94e04b6f
- MD5 29f62b1add26dc1aed3faad03fac030d
- SHA1 6f605b9a153a987f2939ae6500d6391fdc107332
- SHA512 3d98e9f039dda694a660ba7d2f7906fcd60016dc6a8fed78ceb7b191618318a68d34169b9480ba5727730f6bd6357a13fd02e0cdca5439a45e06d2f0d61dabe0
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/process.h
- SHA256 6947c954f2af676e66cc38d64b1a165428734000e2e272f883c2d74a85b82020
- MD5 f06edaf6ab750607c33c37bfe50b2eb2
- SHA1 ca3afc7781760d84432b06567afbda24587757dd
- SHA512 9926b19fbd4b30ecf6682ae5945401e4387d2b5ce02d7643b51c660462b761b08f52a99f2b7da73b574c7bc6388cd23ca3ed8451a3cf2b3501ad217925a503eb
- SSDEEP 192:kVIYQ03tIPjxoNimr4mJ6hIO0XtcsQQ05vQTcsBOdFS3b6dyntql+:kVIYQ03tIPjxoNimr4mJ6hIOmcsQQ05E
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/sec_api/conio_s.h
- SHA256 f7375e816739491fbab39531c1d60a77b78ff9a162aba17f817c773bf75f6508
- MD5 5bc78aa26af6ce836f322cd5a432e368
- SHA1 1e99298161f0adb4f7244eb5a067364dc5b47e91
- SHA512 f1bfd5ef34a97e72ec474b2a2fecf4ac5fa1931e08845489623a7c699954b549fede1e4f93c815c0a9944a7d79601a9ed1342d47694528dab54adeaa5bbab443
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/crtdbg_s.h
- SHA256 03630ee83e7c921446a0790853fcadeb5a308553dd3c4ecddd568cda3167c0f1
- MD5 f0c359a5aa08a907a23d2c0c5aa68e5c
- SHA1 b487788ec6aa32458df18f6d10f67573de8fa16e
- SHA512 71bd41e6bd84bffe34beb8ef1b49c63358cb5d8e520972d57046d58e9d9fb6deae512e4cf5554337da2510d6f3afcd6c6d58124a30c4003f9e3a8f60c2ffa896
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/io_s.h
- SHA256 6e02f4ae50d30629af7df34785b6c32642b12d94addd56606f6fc4ab668250ff
- MD5 aaf6330564dc2b4b413908ef435956af
- SHA1 ea59272194493914f4b0cd1375210053a34cfdc2
- SHA512 3fd60615b2dfc257a0cacf1f985af5aa765583db7de6b8e474de52369219da5d2276362add9875a820f0a424a259fe976ebfa1e18fcd7b70008ab8ff70eba03f
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/mbstring_s.h
- SHA256 d962ab8070958953f48b24c9ea068b345b158237826fb71b9a76d36cf2e8a32b
- MD5 ededeec78fa33c84025495013a88bf1a
- SHA1 7cb95b9b6df8927222625ea101a72389b8a5318f
- SHA512 b32e7891109560b4df8bbbd1b3bb6d2acec9158c35743eb97a88f3b1237114979057b00acd2cbb594cb1db555e5af5ddcaa610fe13c141a20494ca47319f65b0
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/search_s.h
- SHA256 96174e09f1c573c7faea85a6d568225a1b946e133c6c04a7bd6aa865c58896a2
- MD5 e0c3256d4be1ad2a506755eb847c2d39
- SHA1 236108eeed6afc8156950dae94a055b90f8d169e
- SHA512 501e4c147aba8cc08d3195bba9328d3ed6186e8bfe60ef4de65f09441f708abdaac9d7ed4c84ccd4ce21075f45d0c8b60b2bf8a927ad8a449c11ef6b2711032a
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/stdio_s.h
- SHA256 5107bed740c6274ffc767ad42ded6ce5a8f51cb0c73239d04d5a647d62edf2f1
- MD5 3c28755c2186dabae016938e1308b77f
- SHA1 9437b43cd64ed70638df695b1b9eab34c1b04f57
- SHA512 9d89fe5e5b8396998a552e443970f45c8e9f2f04f180d14f1cbbdc56a1fd5ae0f2c9f81b8e25d0dcb20fb1437d9bd178a6dad68a323aa0e9eaef31b6b6d40f33
- SSDEEP 192:nzXsE4vla8LmEtTcbA4MfaEU0zwyp0WEP9fF2V:8
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/sec_api/stdlib_s.h
- SHA256 8650e34be241c7d837433126878eb6a30ee71c0b759c23671fd8f0715c7cde65
- MD5 ae13bd6218c4840eacac71f31c45b2bc
- SHA1 e05d796ce8f5aeaa629ca9f1e3f6d4ac154148a2
- SHA512 689808a64c20260f3091e94dce6eaabf8662ba627b4de4c43ed685390565186e69ff229cb4755e9d3bd12b5c46e16ccfd848652703572e790df7bbab3824ff9a
- SSDEEP 96:1ICzd9hzhSzms1NOsG1/zl1EzQm2pppJptakhplumHNNmeN4mfNaAqk58ikTNBkm:tp9hFS6s1gsiB3fnjhTVS24Y4LN
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/sec_api/stralign_s.h
- SHA256 b23f0cf79d5455e232d92792e2b2be38125a02808bc005049367bab68da1300b
- MD5 c46db571cfdb29ea8f977222b4bda152
- SHA1 727f853fe74015580ae152b7da8e1958b19fe22b
- SHA512 747fefa9b6dc0b5b1de13acffbeccdbd7542a1241dee3299f584fd08d65eae8d1814305c44fc5ad580d865cf73ae9a8072f5ad7fd5e8439de034ee82fd789ca7
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/string_s.h
- SHA256 eef32fb505b98a3610923e8ddb3de724c55b44389d25cef7cf50ee3cd14f5d68
- MD5 544899f39ca616ae07d97a2fee8de3d4
- SHA1 2f95831d27cc918e633e8d711087ccf7c3da918b
- SHA512 20dbf6c25ff2270402bb4eb99430b83128f66d577b7c9277cacbf8cdb5438ec58b6b1ea468499d1f48338cf4f2433a1a0e59e242f812b419c6afc637340c86ab
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/sys/timeb_s.h
- SHA256 d153417ec64eb7b1504749bca6477efd51b4b22de670518f4fdc2701080145c0
- MD5 001fd701688e91d3781d43714b993275
- SHA1 a1825995271fe96dc766421cedc606384cd92201
- SHA512 f4f4a8d796e74cb0ad2a06dd153ebaf4cd16c431fdc67b7c2fbbdc4466147593421ae0f60a620503b21dc3c05c6480ca483bd077afb10daca46529996b4391b6
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/tchar_s.h
- SHA256 a5318cceb241962769169c32a3ce5bfb9a075a52edbac31aad33b0d7b897b544
- MD5 1c3243d5951ccf4c4007e89fd366631d
- SHA1 48fe81cea21230097c39ffc92c9b5bcab3b4d0b1
- SHA512 f6d25b5532745933f4320280ac21dd02cd12872639333b3ad04f4efbbb42cfe51f5ad828f6cb2134968f5503979029ac38ad208572ad3fd298bdcc97677ecedd
- SSDEEP 96:bQGkyRvKPf4e80QgHRySdrCcNNXe1FcNNFe1d6O1yv61ycNNue1ccNNYe1e1O1e3:c11WgJ17OBBapWcEqJ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/sec_api/time_s.h
- SHA256 9ae9cb7a3164ad0093e3887b0ca09bb67498da51bb44e9be500b60e72a385dc0
- MD5 edc9cc4a2a0b921d3167f19d2d162f0b
- SHA1 424e2246a5b852cc80ac043f681a12f4ed95882b
- SHA512 3c81d4917e9a47307393ea6af3c6e945f6f6acc1baefa764e500054f84bbaedda83b7ccdbac3a1ec526e389ec7a095b0a6676ae09ceea63ef1e95b5de004b018
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sec_api/wchar_s.h
- SHA256 5a470ac358b2d951202182f9ec1f945331c23a8d79629ad4edb08b7d73cfaee4
- MD5 37c52897cbb44a15bd22203cf8882566
- SHA1 27a8f810adb10bcfd84db971163c98ed81c3bdf9
- SHA512 5217c9246a458eab5657b219d136cec221ef0539cb5c5d02bf9e1fe88159a758b247e2d925312636aa8be4665b9d52641a9d3f2613256c3ff88985ed1d50ca05
- SSDEEP 96:2s3ligWmjN2JcabAOrco1/x+pxJrx8NxDhW21TUSBL/jCh3HzTxpppJptakhplFY:lUEU0zwyx3fnjhTtj7P9AJbfYFa
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/setjmp.h
- SHA256 b6164eb7fae4a12163251492f7f4e56cc50d146ec7a2f5640d86eca4d095046f
- MD5 8bf97dc43b347cbcf622768ef43090ef
- SHA1 e6be2c1b1fe50c19bcd2814e3827c7d94680e51b
- SHA512 f2f1a16a1d719b10a20b8be8b5046e151c50792d8d07a2e7f6bc8eb0d53ffce7e66e53934e688fd1c3fdfe00545bf203267fb59cbd289ad92f3786e473f8198f
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/share.h
- SHA256 6de922c1bd7eedc33308304785c212945064d763eedfb373c09cbbb5cb933dde
- MD5 540ef403878ddbe2d4682540da20095f
- SHA1 4e3230df4b7a906cdc3b6e3e1a5cc768cc79c327
- SHA512 7c27842cb6f3d2b9707a5df55b45bcc5dd613cda8c550f0232f0cb9df8b59013f428ec3fc07fb002dff80d26bb9941ce76caadd22bd4b539c9f11ea13fe12ef5
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/signal.h
- SHA256 045a031b376733ed7a685bc01709f5281403729ff7c601b913b2aca2fe1493bb
- MD5 a106c85866bf88a68510029349149b52
- SHA1 989f8bf922cac5beb03905a0e35c3c7b4b125c85
- SHA512 205611a36897d5a87eb54da5c2c193680dad95dda01a55dcef61665ed09efd322a20f276d9419a64144941cf0b59339ff9d15c1a7a9c86da60f140364eacff73
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/stdarg.h
- SHA256 293c6d5434df4ec0147551ab229bd1304d87eff8462a8501b5c86512a2bcf4cc
- MD5 e196af7b3187bbb24d051785afe81953
- SHA1 aa68e28668180674b8c44f0036e7cb7f3d91c470
- SHA512 c0994b66b0a09a771ed5b4321aaf0cd5c380b75b3d2c8982fff88c1bcd008da7702aac6bf13c8a1b508d47bde2d0cccace7d22c83f8d3ad351449c659685feef
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/stdbool.h
- SHA256 5252824225ddc486b0460677f765e4157af5d3ed7acd65b310a4045eafb56af7
- MD5 7d294f4ec2c9640974803a61153ef3dd
- SHA1 3bc244518f863b754a97ca1b756580974c0d4356
- SHA512 ff09177dcd695a185d66afa8405eb7bf0883d4c1e6507f00a12cd958562e2f0444867f6dabdee6e50cd5977897e4d878f31cb51888ba6878829c96cbf80fb283
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/stddef.h
- SHA256 c91ffaaef5231c6d7e744e0700f1f429c9cfad88a4112fdd5ababb701f3b5a4b
- MD5 8b03f5da84f6175fb1213c1208bb0944
- SHA1 fb7a374705241ee8ba4c59c6bd4829a97b90fa55
- SHA512 038da70ffda4bf66cdf6d0d6792f51b140b0e6eec8351a286a51d454a81e0571779e16985519dab47f3b48e6102a54a40101634b86f556c95c2128dc6aed4283
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/stdint.h
- SHA256 33c6c8da7d564b5702af8c6ff45c00a16842ba3ffe3f95f7f6232752f63c5afd
- MD5 90c1945afa014fc0f8d17078c51502ca
- SHA1 f3a15dc3e32ed97b8cc34c1afa2c66ecba3b3be4
- SHA512 be8557bda158662acc18cbd4445d4d2e6787fb5c78a67f0d0e4a62ffc9d2b1173c30c66ca5c6a247da8fe7c38b7c57aff050bd4a35b0120bd95400cfb4c2c2b6
- SSDEEP 96:Od4Q69/YQhMgPRVQzD+5VO7wRUNsNwxzMD2eT:Ou/f3Riz65VO7wRUNsNwxG
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/stdio.h
- SHA256 749059834143bcd5bdcea13fc863c8b6587a89d6dfc84cd5017a98df190defbd
- MD5 f4948adea7d9f60748de8b427ab85684
- SHA1 101ad5424e182236eb7f537f17ce846c917ced27
- SHA512 49847ca1a78bc100739b3afc8a0d607ac37e340cebbb0c04b2c067cdbdd6ed33ac5557214282699a89e39f4b8bb3a8b6383fc0a25c19265089e09b08765ea693
- SSDEEP 192:VgGovkt8YzcfdLDQgPVj85xhpp0DghdWRUeuzIDcDW40aMsGQLZX9QLbiR:KGr8ocfdL0w5shpwf40lsGQ6biR
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/stdlib.h
- SHA256 5bba095a2d22a6bc0670f73bfebba63cfec65f8b7c248e84e36b3d7ede0a4f3c
- MD5 53d74bf044942015fec4afd293d2f9a8
- SHA1 010ab014e3b81b3a7e2d1d87ff0281a8736a4abc
- SHA512 64b66f0d610d37e6f55702130fad39f39d30f44d33221c6a985cd03948968d4c4cafb7676402a9a4a029c8539efbfa5801c0d1bcbf667b876f3e7bb08f9bf89f
- SSDEEP 384:X5I7a44IVaadf7trkr6vrRcbCGX8XnaTjWb5:Uvf7trkr6vrRHaTjWb5
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/string.h
- SHA256 d5c02c22653784792eeff04cc453467ba22c214d9ace876127eab5fcccbca762
- MD5 7e3ac3220bf883da2db8cdc7b8100d0b
- SHA1 666e6f91306ef6412ae912fa386b3decc6332ad5
- SHA512 1e27e9e73c5d3fbec7ce41cb3b5fd6615bacc416991321bce22b599150902352cf60078cd447bbbbd49f3106254c5e88e3fb01ca7de62da9a4dedb6fd60f9b7a
- SSDEEP 192:9SahrQ/tJUaRaV/f7WtxfeiZDHy6U4diocGLIvHKLhfyW7Ja0+8:9sJlS6H
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/sys/fcntl.h
- SHA256 2b4f660ffd8994afa0387407051e3ca7ecc8fe44beb2add2d431cd52ce8ad9c4
- MD5 26dac89b148799164d02ac701aa67e91
- SHA1 018db361295e5c140de8131bb148a09aba0e3532
- SHA512 94bcf1a20d11adf422b9a83521a5d6950eca35144cdd719c9cbb483bfb9fc0e57d1ba02d29347a9006b25b1dac746fdee952bfded1e55139586bb9d50386b8b3
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/file.h
- SHA256 b6e779c53140c117bc36bd335c64bfcb13ae4c2c486b94783b32149a6eb2d320
- MD5 da489932c3143982e94284f464f835cd
- SHA1 78fc0cce2b7b047712b753af6df40258623d2620
- SHA512 02ece23c55d9c425f2b53c4d3aafb7ce12b15995ab276cefa9254c37499b0735faf43ee32b67bf6a542eec5147294bd5c16dfe51caefec6c5b1c7807a4fd5858
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/locking.h
- SHA256 29786145e9af34a1f96e7368855b19e8879fc80d35a172d9ba97d3c7fc2f6311
- MD5 28bd6385b1c6af18f7b2b2fa7f66827a
- SHA1 ad01251c9d742578f2962d71a17969da842c5a2a
- SHA512 04df92a3257b4a87fc1a00c65f700c6a9f4897ff3e258fbd27a3b3ad5426a35faa7371735f829f4da40e622e75a8259d4022f0f54bf8f52ca5acfd234ed75cbe
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/stat.h
- SHA256 4dc126ab4b3177da85e40ed56a7d4516105e436a4624272992816b23e03915b5
- MD5 c03d618d6697b5e3992feea86a9c4cb8
- SHA1 4536ccd81aaef11cf7480649b8b99836c8b32291
- SHA512 236235aa9b16b4ceb82c05bf526eca702cb7d8c542f88d0bdb2416ac3be8214688e6ba47bd253aaa877e173197035fd1ea7bf88aae6c72c907e898182a5593c0
- SSDEEP 192:1Roa8xTSS9V89V0B9V69VP9VCJQI99wMupDGi+dpq+p:UdTSE44GPkfyDGi+Lq+p
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/sys/time.h
- SHA256 518741f286545434df676572e53bf8553b0496a7138942dc6b20ff252b4293e4
- MD5 d8bdddb8a0b2e59371ce79ef056873c5
- SHA1 25f481b63f4343dcd56d2f15fe205f16bf008cb1
- SHA512 4e009938eb6499f59022d1c2227a7e10fde44c1cc4a38de415b9e2c4e932e302c25845d68c6b2107cc037ab8053fe43350b2312a70130880004881e53edb8f16
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/timeb.h
- SHA256 ef43f9f51660ab8282707f7169cc3d977878e623743d23ec565663fe2b4e9782
- MD5 19e8a20458a7627517ad83c0be798773
- SHA1 fb12989d8b6b899f89f10e39559a46d79addec65
- SHA512 4c21638910d0c87097e2ffc7b28b1011601e7b187297f9b9c2c3db52596f84a0cfe089ef172a0dcda0dcbe0b5b5dc94f36401a233cf7b903520c98b826a769dd
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/types.h
- SHA256 f1c3f9e5c811a63bebae5229042c09cb5e057f4117fd31b45aacbb4c3a626df8
- MD5 c8f3b2f1fcf386398b5f130f0599a72e
- SHA1 242163a76e04f20ce4b3d5d0a959d66b978f43ad
- SHA512 3239360e2f810ebbb853581e01657a69ba9a56f6bbb29288011d6f842ce2c405d27a7d818c5e4809ae053481723dfa7dc37e4778edfe6b6392884eb32804aa03
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/unistd.h
- SHA256 1f595a85caeeef7385a0bda94af51896b214ee26056484af50353e9393de1929
- MD5 244c135562d0b700d037299e0052a855
- SHA1 59f8a3b33c5cc8bbf95e4b57300628e7599df682
- SHA512 1f5def177331b0e4dd86b5fc38fc9cf4f679bca644c26c993d2a911dcf39db452d084bf29d76430f5704e218cbccd86d68f11d38c07b93a818ee446ba249eb53
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/sys/utime.h
- SHA256 524312e3e8a325f7d5afc21ddb8fcbceb85d451175e07ef1beadb7f82fa368b3
- MD5 0fd455848e3b07648883ff0c890ba3b6
- SHA1 22430c3ca7a2fabf95297ba72ca5fb175e37e996
- SHA512 53adbb9316b7ad49bef5018e3c32c10272a2d4a5ccf9a91d818d48c94c4dc4650acc2ad462c2154e010e666b762b0b7f57bad1a471830a0c5bb7422afc62f840
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/tccdefs.h
- SHA256 e8ba9a5549a10a0eb4d6100d0bd6625ec13fca31689ddc70e5f7bbd346a4ac0a
- MD5 42a6d0370be3b3ec3af6cca44a19085f
- SHA1 258c713c560fdb7cd7221eb357aaba5dade4da31
- SHA512 a39a996850dfa1b0c864f2eafea1fc947cc683df39268fa17f9899f045e72a63e48dcafa033f6d220e8353903faa976dad565e5f0770605a262de50e257cd0ce
- SSDEEP 192:nRBzGxHCyoQGSn/MUpi0oR6SieF1h1b1XPyh:RBzG9CdQP/MUYf6ReF1h1b1fyh
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/tchar.h
- SHA256 7fe5fde028ff8f69d2bda910664e2c169e7b92c6e7f2cf7915eb72054a9746ff
- MD5 e237270733edc1cb97b10870a3d50a69
- SHA1 c2406d465b5e8d94e1cb61c6c3f312bdb018ac80
- SHA512 8df9add42ad3c8c378e93af4bec69489d59b8088974a40ec04fb91749dc050e3000674c9388fae9937f87d6abb60199b13d179bf0a8654370a66db64cdd2e1b1
- SSDEEP 768:ngntwzzdfQQbqvoRFCM/CVwLn4wyQoPUQ:PzdfQQbqvo1UwNoPUQ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/time.h
- SHA256 453793a2d6c6fc772d1cdd60e701fb3d393d752937c1d6b2ca64d5f1cec9fd36
- MD5 698ea0c0196ba07e9b949406dbb9ffd7
- SHA1 7296cfe82fab54f08d44ce9cbab92bef7d96c96e
- SHA512 49984ddd4866060d8e310ca6a2bd53dea87aba70778202c5efed126c35b244df90c42d61477775f327b30597138a73fb2b2ee2e1050dc6732faeb766e870c146
- SSDEEP 192:0ih8Bf8Bx8B6qwyKg758H898Bc8BQGDL2XMR6fm4RFeU6sxhE2JFE:0G8Bf8Bx8Bxwyz58O8Bc8Bv208m4RFeD
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/vadefs.h
- SHA256 2e6ab359559319a11a80f8f52aa0472cd0b141137f3a1eaa18c40d8827dc51d4
- MD5 dda4463da15121ed7ad4f091fbf61dff
- SHA1 84b4c4973306ef725c3f61446ab891cac6aa66a4
- SHA512 d3417cf7702a17f0f327cbaf8d167d7830a2955c19d553893329696cdf2312707595cf0f6ddaa36ea18d0cea41f24e6fa9c15ac14d5bc567bc25a1cc81b733fe
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/values.h
- SHA256 fa3758847b33f59abe99b023be00d8a027c391ecd0580a1fe755497c11e0c723
- MD5 621045ae9ca57fe30c8a99dd52ac5703
- SHA1 39b1e30a678eac4df1b78c0ef9d315a18df4f156
- SHA512 aade260048487d82f129a9a51fbdea949793465c33dc147b31943d22523fb1a63c48f80fca370d5929bcca76b89cd15d9786c439a65c396bb4a5416d387e3f3a
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/varargs.h
- SHA256 07858857f4eed0a61df94beb1a9d678b53fc3d67a0b0e8936155f85ddbcd1dcc
- MD5 8c659fcb5ba111c2a40716a84a2540d8
- SHA1 20069af3a3805cf4cb05339f7a7a860f04a1e4b9
- SHA512 d1b19dec523c79320bb3380f29981a49efb178f06c0538bce0a5b36afeabec9be0f2a9d02436edf2ac0970cb14b175b3387bbb14a1e5f62eec9971c0c7648a99
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/wchar.h
- SHA256 c9bf12e02a2ab0783ed1c66dfe43de43c402b33906cada9b1157502a82c7c3e4
- MD5 d6b25f8e3068967751493431b36c4248
- SHA1 3145ed71f286525d1ff492ae920b30694123259e
- SHA512 02a480389cecc909978130585609f57d03728726e72e5fee89874acca4122d971d74fc615949f8675513edcfe3198201ad0118f795b147c6fca10d28e8856645
- SSDEEP 384:2186Orc7LIJ8SNgVx6eG17k8MGOHlE4eGP0+aILsGQ86jWIwF2iiEYbS:2IcE8SNgVx61JC6jry2E
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/wctype.h
- SHA256 e12d9c5bcbe4dfb96ea6c75410ea287917b3c24bff9cd2e716d35e00c1d4906c
- MD5 c238cfa11a44926becd364ab35bfc821
- SHA1 54d68b8ef71d277bd5173e0aac794d6ebdb00360
- SHA512 c64f6a3b18d84c8498a2270e7152c4001d6d7ee1acd04169f616a7808a05a02f34e2876ba0cb8d979ae75752109b50a65a66207c86fe936402bda39ac93833c0
- SSDEEP 96:4+KnaNsLsNwnSTOXNXgXXXVX+1XPXmXIX6QXJX9XZXdwUSv:4+KA6O6XNXgXXXVXkXPXmXIXfXJX9XZK
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/basetsd.h
- SHA256 5c9cbaa16abf57400ed31b49aab7ee015788dbe7d3b58f3d53c86db3807dd6f0
- MD5 4bf8483ca6a55237b88b3fb04917c9b4
- SHA1 1d5a57a8af15ff88521335970f6c547eb2bda403
- SHA512 7c4e012ef32a9529a0fa648320796d2abb287c3c37f22d2cfefe62fd0851cf68b5d373316ad70b51d09f0d0f1f48843a5d6e430c12367b5363648eeff1160466
- SSDEEP 96:xOYJhN+GRWlYdGmc0/5ZLURGFVwae+NmZLaVkGMGMRRMhHmdd7sAKGU1LRlw+4i7:xO8hIGRWl6Gmc0hw8Vre+NmcVk5rSHIQ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/basetyps.h
- SHA256 34842ee3389cb13a72a2b87ec930aadbffce8906eb31480180cff541c7f44134
- MD5 09dfc50c697476fdc240969717c514ce
- SHA1 c9d444c897a96a4b475379c7c6b826fdf2dff2e5
- SHA512 de3e258d4df8e046a131110fadac12572ca14a7359f1c44c41debc7e8f1424a93bec6300e3ca21beeb55ff4b3ab572f0b3059d9399c89cff27d154dcc90238f7
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/guiddef.h
- SHA256 7db1b1fe46513f578a3c777c3ce300d8403d31fbfb6d00eacff93286d2ed1293
- MD5 d65fffb282c1f60ccbfc4dcf1410be1f
- SHA1 2be8badb6c6fb0db0b023bfbc7b6842e0ab73a8f
- SHA512 e7f9554980671dcb14c62ff462ae34961c01e0dd1afa9f8e010370b0941e22ba619abea98dce090762888a1e485586baaa0917167ff6373c8309374ebce8054f
- SSDEEP 96:lVeZAP1SQySDz25/rPjEgE+2VPYFjrQUnL:lVe01S9kNcH
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/poppack.h
- SHA256 81c951e1fb87aa8f6e8871a073277f1cd1ccb9b66f6efa92aff35bcd00a60726
- MD5 584ebd620b89c671805eb5917278c46f
- SHA1 645dca8a4775e323eed290eb1262a898e3bd8df3
- SHA512 f80c37df443967189b8b3e246e860e854a65283b9e7dbbfd87fe30e6e8285c785df2d6f74ac9d7d59cdf655e543b830042a51574fedcf5611714946da2d1d542
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/pshpack1.h
- SHA256 8eb67dd233d5a387d6dc1814cb6eb6c6de9a123438faefca7b442691caf23049
- MD5 f7ce406b57af97c8ba95eeb9d7840c1d
- SHA1 ed211a37e0efca13a0146f9fe775875d32db3496
- SHA512 b7ee10fbfe60f4f6e998d48d88c36095dfa70524b9e24a6e3bdd6c0a62fbfcd66725e28f227da1469448c909d08dc57add7484d7feeca35b2ff3a4f526756256
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/pshpack2.h
- SHA256 d459cbd546929fd44980d32c1680a8f176d717ce9df162f5c5c443dfdccc9e42
- MD5 5f9ba2a3122f6963219bdd95eff0d63b
- SHA1 fc7ef1dbf2d51d9e38e79bc4d2dfe7f89107263e
- SHA512 4339e932da337fc33cb8544fad3065f82f689e17ae9cfd6a3035a0a1c62271ed0efc44553a75c29207e97555e55ff8f76d42fbef57b46b0e117b087a367a5d1f
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/pshpack4.h
- SHA256 cd3ba1258a5dd9c714879d3e499b021c85ee9827c06bac2fc2c1e677b5909531
- MD5 9e2e16a461b193bae9e69c59c9a3e040
- SHA1 17aaa9161d3f9d7270edb80bc850b3ad1cd9151a
- SHA512 37c580b406eb30fc66b0135d91d8dc743a9f2abbf830a58272ecf910e4f4bde10ed9a1cf07a8c0f24bfa2d8e86883af76c5a7805fc70a2ae69f1a9d8225774df
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/pshpack8.h
- SHA256 32fe7b5ff2387c916ad134ef5b5b0ac67447da0e0dccf405c31562aac718d6d8
- MD5 4fa6301a9105c4442fcd8181b17bf100
- SHA1 cd49157fa734af5ecb57bde0e7c57b9bc425ce98
- SHA512 ec6c5d061c788463d3e262e69ed74f5a21022007f4e3bc5dcdaa64ed641d0c4953a60a465e7972756e427e3b9ac71103aa36ef298f8e5d8fc946210152612599
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/winbase.h
- SHA256 47effba4d4bb7dfbe373f1156285a170042fe1a3552bcbbee460e5db68e1ff2d
- MD5 18908ace3445091e5966cc99f9d4b5b9
- SHA1 130d1cfa2d8a8a17fa2afa4ddf4fe3dfba4542d5
- SHA512 0e63d752b56051057c4e553307a708c2359eac58ea96ea0077931642482eb8b6e0b28984a278663d85c6b1739564cab6ffed3d9582306473841a355bd0cbee61
- SSDEEP 3072:p8iWoUKAVEvTQ/BUNRB+NNKjxyfmTcFqTPj:p8iWoUKAVEvTQmcFqTPj
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/wincon.h
- SHA256 c965b8839e100e9aacad333b373218f962a15840583231f968076441e781538b
- MD5 a7eac92053e54e029dc3b8356a49df4a
- SHA1 475df5425a60973ca79c1b0d5fa05dfd59e99e6a
- SHA512 1a1f5032e2ba7a837fb043fc7b3dc15796b27fa481b2d8593f8012d503d1aab5c82ab54404898fed81418ffc3b64712476dbc89acaf92aacac051ff40dd3f7cd
- SSDEEP 192:T3LK2osQDITqQWDVvRwPhOotRrwAIPmNLd1mBTVuRthEVPQKyybPki7wanag+4+M:lcio4tzIuhEVPQKyybrwan1+4+M
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/windef.h
- SHA256 137e9a43a136e4ae19b3a4c844023c6a1611b23685000364f6be3143db1a4c75
- MD5 4149cf07a0fcb5fafab7f58bcc951d8c
- SHA1 dbf6f1002b67da30ce63be5d41e0eaa76263ac9f
- SHA512 1bc969d3700c3beb6416eed13942142315efee5f929c55f539e11fb9196c8865ca05be0a39094c6e7457b671ba33299d3861aec6161dd0429e8a375f378659a9
- SSDEEP 96:l4nmx67GjIz13BkHelji9aF7e4KmCtnLK0kO5Ol60V:4mxbjYkHi+IM4OAO5gv
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/windows.h
- SHA256 3b0d80e4b27e099c8af543d6d9cca295c68e115a0fba7cd79cc0e76d1c3a5c11
- MD5 437b745f448ba343620fef2015b72e78
- SHA1 6e95b00a515154faedb95606f9aa429afe40807e
- SHA512 43ee580b0d94f5556a6d4227b103c52678ceece4566a7ce3a9a494e8f19bcf3b33a3e765e10d62c53cc54552532c3b0b2828241354c4c14df13cc7f90d6ed8ae
- MD5 SHA1 SHA512
Vulcan1.5 BETA/include/winapi/winerror.h
- SHA256 590134000b1b5c4fb7afbcc54a445a42228d74164a9e8b24434d1a993f76852e
- MD5 8a51f06df0cb380eb7e944203bfede79
- SHA1 92b3f5d7ebbaa0f35f30f5fa68698d93a708b0b5
- SHA512 e50c7d2391c84b3f975f5e6e732691102595bbb857987ad0577b370c34d9c9c32de3fea64dc8dd45608320eb0e7455ee306ca50b1f19d4b209bfe1618ef9b22a
- SSDEEP 1536:fAOSurpB+BkRymeRfJOj/7AL1YxEilv+y2aUs/gtvyEmZ1m6tDLiSgF:RHu7LSqiQakytxtDa
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/wingdi.h
- SHA256 df5937ac1805b27abba03277d2c34caee8cb4387edb894adcd73e6172a9fbd94
- MD5 fd80383f6f92379e074379ba54d68bdc
- SHA1 0a4d4926df853e126fcc52150c84822af1ef8035
- SHA512 4ed6c5508c77a8a3272835c6ae1323514e42d015f3cb53168382ffd78fb1a73d806af5421378d1430ed344ba1200e3006d5aaf4150e925c1f2267a8d637a50a4
- SSDEEP 768:mmN0oz+ODr15Ye92/rvZVXkRs4pItxtv7OosWBkEwJaYygZtk+tUtwtmtDlwsigp:nuPn7z57mW7T1QFYLCOdKSbuo8Sl
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/winnt.h
- SHA256 0881debbbd1879a08341e395fa1dced6a7b1007a80a9c6ecc831a7800c90ca02
- MD5 39ab9e1d4a6b6871fc59d837a1910566
- SHA1 cea4a15910a1dc02af23a06ace7b8b7bd6e1001d
- SHA512 652b8695dbbf04c76db183435fddc21034fd9c8c10cf648a21787855417b5050580c424c4da773676bd6a6fd8c30596d905e3c9e91e946b37ea5723fba9df481
- SSDEEP 1536:mgqyl7JPZPZWFLvC3b+tc55bLqkI66qJ+bOaCIzxlWLp9EhxveAMimiAg9+38w8l:FvgTAw+39O8+NQkK9t/k7IM
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/winreg.h
- SHA256 6dbb969dc21e90d9044dabcd190268c1bb33e445862ce2a4a536e9a7134fa4eb
- MD5 0f0e5cb60e379839ac67467a6fd5280f
- SHA1 0783bec9c6f621aedd45d2f1010740d9a6152b0a
- SHA512 06c87ae227bf6d9c00e8404c728cc77de9840237647605aabf197a85131e4835ff6ee96d7bee24fd7b423c86f64d673669d2d2e8061f03473b2b0a1e10dd8bca
- SSDEEP 384:CVb+C+ikI8n1W8l12X3ufMfkebe+XxeceAUgnhicr7Df0ff8uc/1uA1uFZNz6deF:q+C3kI8n1W8l14VzPBAf
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/winuser.h
- SHA256 4356bfcdf5209c4ec58de486e2173ce4b17e0ce75a422b226fdddd18597c9905
- MD5 3243b7c1189cc2c02075c2b175592ea9
- SHA1 b520f45e195a50ab00acc161efec7e6620e652af
- SHA512 cdaa9d91f80127028dc877924d2e41b4ef55714485536c4b64955195c94e8ebfbecf9a0d7545df535cbf4c1977ca53c14379b96abcebf7aec461bcbb87ef040e
- SSDEEP 3072:jgie2EUSlwrMbtENbSJGDN4tSUez2pUQkR:jgie7wrMSSJGDfUe++
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/winapi/winver.h
- SHA256 7d846678ec2a8c70f86308cf6be585d760924c620dfcfb4b048f60d88577b69d
- MD5 f0ef1b8ee3a22c3fa3ca4dd26012e309
- SHA1 4d78773275154677a5bb66d6393636ca2418ee69
- SHA512 7b230b6be986e12c639dee195198ee87ff1e9e0895fe3c101a3e8553d272986b9800c3c74b53a89128821d2d8d439a4968e48c29b2eda43096e48f51b871b18c
- SSDEEP 96:EtGsCwPV1Ihot5C5snyv5vdQSZWVvc22c26T9Dd1s4S/BwS9BYwJw3+wIwV4mDVC:oC4V1Ihot5CFQjs4S/BwS9BmwJp9q1PK
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/include/windowslite.h
- SHA256 5d020c2e449b4d3c4d53fc9168cb4b6133d8c333536ff673057e89ebc7179665
- MD5 224cc44e19c82adda32c4517bd2244a2
- SHA1 01cb67de38976fe3dcd316fcb9c5b274c797d5f0
- SHA512 0aae4b638ad06a22272577d3a246cd7367f71d97247729bf01ed7be35fe66efb3aae24d6fd88f9933016a5b159ea31a55d35ca9b6bad94bd17d7def103530365
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/CeShare.po
- SHA256 3c7ee3c571c89feb745dc2baf138227319f1ba661ba84b34447f5a631e504acb
- MD5 f712b9cbbdc01af1c84eab72ff35945d
- SHA1 b9aaae45a945d3f5611c9bc713184bcd4167e946
- SHA512 5a81ca3a7a0197e75ec98c5e0213226c884c35adaec8d54acfe66b0448a44249623d5b6576238cd575b32ec2383e0eb79f4c2aa7e26813833b44f4dfaa13bd49
- SSDEEP 192:7r3bC+3z5Z8GnEhbhKTdZLhMchFxVY4Io7rMMyC+8OB:7r3bC+3z5eGnQbhKTdZ1MoFxew7x+8OB
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/How to add languages.txt
- SHA256 d8462c8704a83973632d5f38d36f7852bf78d8a81c43bbc2f5ac8ff3a4d8b658
- MD5 05e8f84a134363796895e8ab8089619a
- SHA1 d6925ddde83b117d7310c4a257dd9ee444245612
- SHA512 c63f273edb9411aa15f6b0c94c5fde7189a33dcbd50141bb85d3bd31a4a009b1e5f6cf93e10a4300a39f0431452c49070c37d5907965ce49ccb4ced4bfb70eba
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/Java.po
- SHA256 162e0de680fe0e8bcabb09f9d51259a1ce5f83b481bbfc32de055e0c7cefc33c
- MD5 fc3504dd7281f478fa29530b4bdbc3d8
- SHA1 084d65df95350c869d5ddefb53c0436236fcf4c7
- SHA512 fcdb7f5244dd8efb6448ba15b621b49d5f24e0ad79a02c5f1f91664a9cda2c548540961075fa819dcf7459602efcc41c34670b32b0a16a6639e4598bf76bda28
- SSDEEP 48:IAK8957xHV03E5IDRH3Y8LUHPop+1dpmq3W2D40AujDHZYnAd9BaJ5:IqJ6EURIvOScBj01ZYnAzcH
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/SaveSessions.po
- SHA256 e4283ffab471763663c189527c805c6985b92c252074727a41e304839c45ab91
- MD5 684c9b4a3ee100b044c2bfb0edd64919
- SHA1 9a8ac81c35f3ea58e97d3a083e3feca83f01a0aa
- SHA512 b15dcc949f588c612f3a92d0defed4cea025c86ed4c27e8b3bdf52a218cde913b89ff4079a419d068ca4ea2793534246a4d17eb25ba4a45d6f5a19639b300e37
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/VersionCheck.po
- SHA256 a31280a8cf98b30556bd99b25781d09686e67d85c3eb89d42584832a18962ad0
- MD5 f67f26aecac8f570a9eb02f0929abac5
- SHA1 43db5011e744cfd43e4446b73bec1178fa55c80d
- SHA512 da06e6dfcc7dca2e9f6017d316b2ec685135c6fd0f5c4f0c83960d3c4a3c503cf9ff205d619bda77987a36e789e78804fddd7a9df84562789d2cfe42a7ee6e0c
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/cheatengine-x86_64.pot
- SHA256 3bf0c50a35e924128ff5eeb7786260c37e08d44e759fc1c63d3f30ff6a744545
- MD5 8319dc1e7c2c2b5b66adf2a088dc8f1c
- SHA1 8cba7064d859baa4875bcc22d9fd5b7b230fd9f9
- SHA512 8f1952a5122fd7bf34bc041f37b4ac2b940dc9128a52f9175c7f986a606c3b1e8f51879f0f394cfc9e6db51e43ab0c6a24cce0559cbed4498be9495d31fb0fbf
- SSDEEP 3072:wY4EriDlRO2vY6qyih6yie4UI6x1bZCiLINMUVqKEZ:wY4EB6qyNe48MNM2qKEZ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/fr_FR/LisezMoi.md
- SHA256 2ae304a2e9a3c49eb10c5491e298f9074b8ec9172afe0ac4e5c5ea3eca84575d
- MD5 e54ab571faa01e329df1e3d56ec7f357
- SHA1 a72628bb4ea58d5639486abef9542bca5585ad17
- SHA512 52b73f9f6b6a129c2a8403a64ac41aff4f4f1a283a2b9953b40861313e780a9c4e67af51c1900289af79a1636972becdac3caaa8310be4abec3d9067836cfef6
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/fr_FR/cheatengine-x86_64.mo
- SHA256 e85e12640e2ae6b4edd8e03209ee1946c0b18a279ea5f146f42e8b8aa8c52ecb
- MD5 418d25971cf08b7cb32222276ecf309a
- SHA1 fd6ebb34a41695cc4482bc9a5df8bae3b2c21dcd
- SHA512 a4d109580cbbc007f6736bd5931d0354e145009190c3941ca536bf2d995036cd099ee6d70da23bf88f9a89a48edea53ab4b0414b06928996b0307abdefdb649e
- SSDEEP 384:e+iKp+WLhNbD4fFQuO0Yo57c6T9lBq0R0y6B:lphLh4F1Dc6T9K0R0yA
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/fr_FR/cheatengine-x86_64.po
- SHA256 3247486e3492e7347d29d5f459797fd1ddcb5de432e1a1bb53d823b2ab3ea84a
- MD5 8888ef721b979f6c51f43f28805ec2c8
- SHA1 f182364abfc76dc9a92d9e345cc0b76f7cf2dd74
- SHA512 652f665a4e6a5a5166914f962ab18d41abce931b5df2839c1623581489f914255ad990b18429441b4d5f78dd0ed760621bb3130eca11d06abda0bf189f2abfa3
- SSDEEP 6144:vvFtLxlps4VzCtRS1SuRm23lOn7F2CFgHLpb5:nFt24tCtKC7FXgHL7
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/fr_FR/lclstrconsts.mo
- SHA256 8239151658e92cbb5d2a798733a8380c7994776a166d1f5d2848c4fc79f188ca
- MD5 23b2b28677b8cf7ce5696bb492cfb97e
- SHA1 4a142776c63147571f56b275caacea94cd6704be
- SHA512 baf16d2233c3123da7bc7ab2c6d04737923966a1e84ee5a48a042573ac8d1de9c93b11641d13d45da9aceb36e635e10a229f38e7a9239c1424ff0837747df083
- SSDEEP 768:FHQZdObMuPPOU2dU7ezVCINCSLXqjza3X04TY/:xGObMuPeiiCIzLXqjzaU4TI
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/fr_FR/lclstrconsts.po
- SHA256 1f5894173648756d295df30d85e11ea935d7021fc4741f0b70089cbbd23a8583
- MD5 28a30b419a8f53132b8142c9f8cea001
- SHA1 62fc433aea5bf9a48e06521a97a3207e612f64ab
- SHA512 e65373056a683ce7fc27ead1f9ab26cede5401a21dcb331c2cab2f2e29b81fefd1b6b4d3c4cc03ef3b0a2bac03f1dc84a7ed4b305d22f588edca7f102366c7aa
- SSDEEP 768:gyQKRDFRLPArDREb7I63DXFt2pnv/2G2ti6DsFh:gOPAEb7I63rH2pnv/CvM
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/fr_FR/tutorial-x86_64.mo
- SHA256 2622aa3bd17056e78c44fd4da7a5eb84d048198cc8144adbb586757a561a2dea
- MD5 8712ee7b6e8363f302dcfc8d2fcad9e2
- SHA1 5a2467f754ae555bd98b1933e2ca1d231046906d
- SHA512 ad0e7c10d51e2078768d0a67425606ffc50d753a64312ee62b3533cbc1eeeaa3c9ad8e87e5358797b5d0ffa68d9001510064828f279825fed3211fb4ed110848
- SSDEEP 768:BPB5m7XO+GOQalz3SWznimX2emb/DjZrpz4EMwN1UGsJnHI4I098WEkzj8WEkz0o:BpozO+GbIz3SCnimX2emb/nZrpMnwN4J
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/fr_FR/tutorial-x86_64.po
- SHA256 65c10e8db19e1b0bd13d500038e4a7494b193bb354864db356e67ade5632acbd
- MD5 7c44a9a6cf6c34969513e358a5f0f0d8
- SHA1 ac85294c0561ed7c483c2f5f843da84ae18aa05e
- SHA512 011ee27d32838c34a1a5de7351216fba25becbd26e02a1b74dff8df3beae48c64c9b02471c7a0c206d08f39980c83611fb2393588fff7827ba90fcd1e2e6100c
- SSDEEP 768:XV3NfO+hUCJUrsFZIHv9c/nmNJ7Fv3AWjEiMRRipZnF8g4kW9226HR9IhzMehZB:J8+MBHv9kn+v3AWjEiMRspdF8g4X9QR2
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/it_IT/Java.po
- SHA256 74b934fe3ad08336537c33d340d1dd80169ee877124abe4832c2583d39f9e8ae
- MD5 fb45f5fda48f17ad205d774c17c4eb7e
- SHA1 afb9ddea244d38292e5ea55507248eeb4a7c47f3
- SHA512 88af04bc38027d480f9dc664d8d908a7ed89df0b65ef0d42670833e2fa91401b19ca39ba672c73732cf5a88114be06829be22de3eb0136447d2eb847b81579f3
- SSDEEP 48:IAK8957xHgx03E5IDRH3Y8LUHPop+1dpmq3W2D40AxjDHZYncd9FANpJ5:IqS6EURIvOScBj0sZYnczFAfH
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/it_IT/LICENSE.MD
- SHA256 50478c911c83c50821c7148f5413b082daf768228576a8bae789cc18684dc715
- MD5 5c97b34fc0cc94fcbbf1b512bce8615c
- SHA1 99e07d300949b2266d51e17058a0f7bd236d7138
- SHA512 55fe11e4c0c8984932bb63c86fa6ef0e140b40d86c44887dd29dafd360ee1f1a608df1ecdac98383bbbdbe6ac9b8321217cff943f1e763f2b26c572285050c6d
- SSDEEP 192:BnJvhVL0qhYqlpIle4RrJQSqOBng4kS/cKM6L:fvjxhYWpce48engvA
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/it_IT/SaveSessions.po
- SHA256 1653103cc4147bef03f4430b6e878106dd037a8445b93c22b014032a7906da24
- MD5 323d1f71909174694a300e97b2dfd585
- SHA1 05f7aae3b893b4c36f3d5a4b616d6a42cea90529
- SHA512 f8d8196c69baf7887365f775c6f682dfc6420c6a0f7032a411ba744b2b2acb50b5f0459ce4a94f4bcb888f11667d65687ecda8a8540edec4a5b793dbc73b6cb9
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/it_IT/VersionCheck.po
- SHA256 76024467f07b205c14e88a700c402fcd91e735289075aedd542a4b467330045c
- MD5 1a0f7c0fca4d9d404d9e2032bef11227
- SHA1 a8fb4bc9f69fe6d17e6d0112a9402ec05cecb5a5
- SHA512 916e7b79cce85fab79ad928942a2567a2545b3a9ca2f36ed3381abc52317e409206b22bb868c2700a970dbf8404f33fec243a40e6894d590d71f109a70bad543
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/it_IT/lclstrconsts.po
- SHA256 def40c7d257fdde674cee6b0f45258d0d15c5c1313b2ebc453496565ec5e52c7
- MD5 a834dbcc0942163fcb23f54a60ca4b9e
- SHA1 1818c3aeaa3d8e37a21b87528653c08db8ee531f
- SHA512 469a561317979657eab2eb8b7560113986523439abc09506c210f8056bc614932c1739a9e8085568d1a963d7b233b176425c057c1b9430033bad668d61783759
- SSDEEP 384:gysU0FrPFidzPeudV6uSsT5IpObgjmg7vxAP7:gyspPFCPjmE5IpOcm7
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/it_IT/monoscript.po
- SHA256 aa8977e63d1a0199db0120baffc61461e83389dff070bcba96ab83c1c66c8530
- MD5 88aa70920ca5ac069cd30d17e13348d2
- SHA1 cb005b5a5c5ae606e2bef0bd29493e528a3294f4
- SHA512 5236ad16d8b93680789248c0b5d3fef21715cd28fc92f409da79e1cfa3a5de0dd61fba95cc17034efab4627670f7371fc15161af5a269637c840044ce8955b74
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/it_IT/name.txt
- SHA256 0228f2913e4b14fe14ae990103ba98a14c1b3acf99139c3f2d2f3b182b61d0a4
- MD5 7bf34ebe7ef8552f8c1acc75d47c33c7
- SHA1 9973cfbdecf8c44dcd11ffaa508c57062d955152
- SHA512 8764b3d3e1fa1f4051afe0719824949d38f3279cbf3fe24a08c467637d82bf10eb4e92ba674d57961898b1dfafdd55798abe5a37e64852b5bd3c73b2fe3b921c
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/language.ini
- SHA256 4aa4f0b75548d45c81d8e876e2db1c74bddfd64091f102706d729b50a7af53a5
- MD5 af5ed8f4fe5370516403ae39200f5a4f
- SHA1 9299e9998a0605182683a58a5a6ab01a9b9bc037
- SHA512 f070049a2fae3223861424e7fe79cbae6601c9bee6a56fadde4485ad3c597dc1f3687e720177ab28564a1faab52b6679e9315f74327d02aa1fb31e7b8233a80f
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/lclstrconsts.po
- SHA256 d4940dff786e4b3c2dfe9b0518b64b91a2b8c0f0b8185e2b4cf7784e615f20a1
- MD5 b16c41734ccb91d59d6efd720b8cc5c2
- SHA1 894641756d69268f40a97a659e7fec6422424d74
- SHA512 c38458f79b2a651065c31602bbc9c230c49e1567254a5d044e9a94fe9dc63b19b0eabfe7446688e58f843feb65cf290453b3e8bfb800eebf1459a4134c0cfbb0
- SSDEEP 384:gyw0FrKFidHPeeMV6uSsX5Ipahgjmg7vxAP7:gyFKFwPume5Ipaum7
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/monoscript.po
- SHA256 3842af13d8462a02e6f3a8b3b5c3079eaf1081b030415287f67f10fb6f622109
- MD5 5194e6aac00716ceb7498a8263abdb03
- SHA1 d249cc96e60a36b0b9da99d69903bd81d3f32c8f
- SHA512 a7f89289e3a8827367e827a29224fec0cc9d8699a082d592f372e13fb413bfd8b837a8313ad6530fa4bb6409e06a85bdba890ce00b00dc7ff3fcf873f7f0ef4f
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/patchscan.po
- SHA256 16ec4573ae731bc32397874599f2e2fed68baee932f23da6ddddce99917b8d70
- MD5 9924b578270ab864e800bf38b2fa65be
- SHA1 65174ea0e3fa382bbcf7deeb2e5f5c74aa0e51f4
- SHA512 c27b43a3944bf9a9b6a6e88feaf0ba40c84364580015420075ef89131a23586b7ff2908a2992ca0ffc7bc928aba12a0b111260a592a479ddf97b46375d772714
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/pseudocodediagram.po
- SHA256 37d28d4690bd14d15d9e2198610c7f7ded33dc7d118a1b8bdc2c32ffd0d92c74
- MD5 5d6d7a6a5adc10bb638b085fa47a5a00
- SHA1 c4a2d207f3002767844f1b6130f2ddaf6f45a7f9
- SHA512 8dc87e314afee056f7d6d384f823f71dd5d3802cd0adeeeae5ff856d1e9068a8e981e1f588733c8948fb1b824285f7f093b6cb35dac872327d645ca3912e2a5b
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/ru_RU/CeShare.po
- SHA256 701417e4c880a6242cbf8ff642fe8d7e8ee4ef3cb726d8c5769a2b9c9a63d9b9
- MD5 291031ed68fbadb700fd1b49558b1736
- SHA1 d8bbef40aedbd5c44d6f75fd042a40f4da502fd1
- SHA512 a3bdda092a6c138ce231698254cafacd1d3c44dd1d9a37e15fb171688a32c6b4d9033e558d540c8176183f4ebf774b7e8457fec0915f043a0e05edb6f5460b10
- SSDEEP 384:7Mn8CMVwW9tP69QyDZ8M9cZLGzH7CM5pgREAQEN2p:O9hzH7CM5p+E3ENQ
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/ru_RU/Java.po
- SHA256 69e8aad0300780c9ef16555680feef3735ff3f659c58acad0055dead7ee10a4f
- MD5 d4972617ed3b5e0b39e98eb5ef84a99f
- SHA1 1f68a2c06cc5452f6aca085a262a6b18bb11f6ce
- SHA512 865b1b2fd6cecd1787e818cb9de6b5642d4aea2a7a4acfc070ac31554e509ad44819e77857e7bba50e4cbf047e465cc7a16cce4eeefcb794543fc96eebc5c120
- SSDEEP 96:75CTHWSRekEBS+IrS8i7GFQClDajV/wUCpTgfrgt0k3nAccgtBvJYTZZzc:VCjW6kBS7rujV/kgzk3AccgtBvazc
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/ru_RU/SaveSessions.po
- SHA256 d5deb5745f6bc98fcc37554c6934e203eda22e26d63d43ed3fc0cad1d2883ccb
- MD5 823f764d18b0badc1501ddc26d8f5894
- SHA1 6733a7272d0cb5fc0ffa79f7fb03e2deb481a23e
- SHA512 4945b731c47c46c39ed65558f0c2cbe9a840563de57520cd120c53b037d582552005c0b25b7d82456a8b9bf085086714b148b78dca1ad58644b2476edb194f2c
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/ru_RU/VersionCheck.po
- SHA256 39cd8602bdb76e3d70c298f333b2e0487194f908d6204e565ee06b9fe615e234
- MD5 41ddaf8e3914b83e2775b94509058b37
- SHA1 aba986180ace669228793a06d6ae8251111123bf
- SHA512 dbcb56bc88ba86ea9f502950409ca772812e4e9d9979747a645bca9c58527678b7006e56ce4c6d3cc12db6139cc44bc43101e89f6b7986aff6e207ea5867cea2
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/ru_RU/cheatengine-x86_64.po
- SHA256 455c3997ecac3214953f47d1307a646b586cc52fafab11f0e79dc0a19eff272c
- MD5 2e8359ebee38507ba4e3156765e283c7
- SHA1 a0c7b2559e0a639c16f0af5ca1be3b3a561ce406
- SHA512 336fded1c8373b12627706296ed2fd98a9dc2f2358327f36b71724f8ad324d008b6c07145b06c062152c750fdd31343cf0c0a0dc1fb1bea2d67c6a44be45d08b
- SSDEEP 12288:dihvHFAUaFCZV9HMa4w/NJREOHxzWe8zSUfWk5goZuZMjx/lGrfjlbXtzw/vwFPJ:dihpRDeZvKmDZc3efW
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/ru_RU/lclstrconsts.po
- SHA256 cb75a6bcb8164367dc1850c79191018f28a4e017fa6b56f80afdfab54d27188f
- MD5 ba0200e53e6df38c159f927fbf7cf461
- SHA1 3cf745a2f183dddfe6db3394bb0096438113e643
- SHA512 57e544a9f75f72c04757a2ca64918a78cd0bcd2aa5b62c4d63a8f21795b9e0f62338b80ee9401998abdad458e4cf9cb9decc354512df1df676ae6ce44549eeb4
- SSDEEP 768:T3K+PZJTuN6nkkoRxCnDUxcTA849KgOjyb9O3:/PfTO6nkD8IxqA8ibY
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/ru_RU/monoscript.po
- SHA256 9982a1040cb8047667c5fa3149aa9e4499afe8300db38e726147cdf44391ccb2
- MD5 d274a828683ef41f6dee6cf9869fa1ac
- SHA1 d34ee035eaa65d9e7cf4f3fc4a9dce9ca3a41a4c
- SHA512 18311f31aeff5e6f10a9cd6974fd1780fb9e44a66c090fd7ffe5f9c498c604117200b0b12a365fcc4e17024fdd8c3bb969a01152596308bd08bcc6dee648cad3
- SSDEEP 96:7nW1qQ3FigkuQw68MAcIUDG4XGTGxmL3tXnK9XVBm4VzEHXW9EF96g9hULvPvjVH:bW8eFigkuQw68MbIUDG4XGTaAtXnKFVP
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/ru_RU/name.txt
- SHA256 5bcc40adf6e0a2a9c9317f9ac01481271b45ffdd5850d96b562752eee8167b85
- MD5 deba6920e70615401385fe1fb5a379ec
- SHA1 74ad93cbebf587ac46ab0ef1e3f24139ddd3f535
- SHA512 913b7f3434df10d5e274e6cd594dd7020ceb32b6d81c4df05fd652f41a8b69429635526a4c6979f0dda8e5a0d4351c613f332eac0a01c81486a10f9edbb3b15c
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/ru_RU/patchscan.po
- SHA256 f9cee2f2bb8b3401ddba762e6ca12133d548b731146458c083896e20f38d1645
- MD5 ec74f1d5ca7532c839de714088532d39
- SHA1 6918654db3fde611ca8e41eaa19300bae259ab00
- SHA512 16fdbead83293aefad3ca6a21ada83289f615b4476d01e93d29e83e2888738ebb27b5fbd22e15506416efc7e61492f6223d0698234fc7a64b1cf6aacdd1b7b30
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/ru_RU/pseudocodediagram.po
- SHA256 868840fa8ca227493dcef2c737e88ed87e613401518c25e0723941c8a7bb891a
- MD5 e737bec03cd08471f85f00b014cb198a
- SHA1 c911bed2b3a71f197e402b91adf8413f6afd307c
- SHA512 b0e900dd907cf09c8dff28f851ba6e83217bc1ae56c99946a0eebe54da05ccf8c58afb96a5b314c6a652350e902f26643671d99ef6f059bdd62372072c5702c2
- SSDEEP 96:R47S52WeYAGZ/1hT0RdSdb6CCi4ovs2Gt7TYVtdVOmnzFw:+7s2xYlb4i7E7UVtdVBy
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/ru_RU/tutorial-x86_64.po
- SHA256 2b2a21dff5a1946ac28db6f85f7bad62c9220ab5377206950442e4316c3483e6
- MD5 5945d4ea925111074dcb3d127f0779c9
- SHA1 eb592c5c16ce825fb0980281aad979ffc8e9bd52
- SHA512 d353d11b16dbea089de5388f2079c51c221759feac70f0bf04b74d80ce74f7d3d904bcbb22f957b70ad90a2ef3a9be6e2be5118986ffff50d77e5de69a8f5c11
- SSDEEP 1536:Wm26/FY2AWAWLlcijlJDE5qc15Wxs4gF8MU8LYwyXf9wacCI3jZKZkt0W:b2+62F3lcIg5qc15Wxs4S8MU+Y1XfCag
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_CN/CeShare.po
- SHA256 3c0e0db97de2f634c615f9e7da6bdbbf239ae4ccd1cb05b2dd12abf1a96e7691
- MD5 f0351ee34762307223881130e9238ecc
- SHA1 fbe1d6352ac422d9dee6d9fd045d292a0412f285
- SHA512 50ae13ad31202f62f5ef5d121bf81740cbb6bc3fe7e724d61ada8270ba1043335e552d6b9424fa2758cbb0806f097085d2fb50378775ca62ced2261667ba7885
- SSDEEP 192:7esG0C2qXDZ8+WEGjQ1DoZLGMcsyuTHJSOwD/bTR7X+0rdMnKPID9BZ+C:7es7C2qXDe+W9jQ1DoZSM3yurJSOqw0U
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_CN/SaveSessions.po
- SHA256 dd515c4948f696fde8db926eb8d06dc69cdc1f3ac8796f1611ee230add152213
- MD5 a1af391e6bf1a3832aa2089d4aa5421e
- SHA1 a5be3827cce370f8d766bbf9f48e2a35b42a2feb
- SHA512 2b8aeed9268a469c86c2ed3dbef441a6cf304d429f97a2c9c93fced02a8725958cea3cf494bb3fa38c7fda59eae27a239a66d2ade8eb969d5d28ae7bb37cca89
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_CN/VersionCheck.po
- SHA256 4301b95c2bc87fa6932403d2fbe22e6b503e12c1b0db7ee987ef1313cbf3f5c5
- MD5 c31e6d3826b048523ff5d1443a6fd3f4
- SHA1 e2630e9f245526e66be098242c99a50ff75f41d8
- SHA512 15a885fd9b002b2e94ea81852f0a5810910425815c5058623a511b0803a4a8801ebba1be41f79d60da3cad54fe0921958c97b70273a0f4a1f3a2a9a824c185c9
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_CN/cheatengine-x86_64.po
- SHA256 59b34aac35269e09c95c23fe923460aa618093b61320e351a58ceac7205eec22
- MD5 03efe5b34dea4db3a1886740ff1ed1ce
- SHA1 9f869886bd3fc1244bf23136c64d2a7b8c16a125
- SHA512 c1762cd1ccca0f574cc6a6f77dca1786e03bc3a394da7e6edd3b2b66d0a52e343196e5c3fdc0e4c0255f07bc46a89d4eb2d4936c395924ce7c44cca29650f2d3
- SSDEEP 6144:2EH2cForuPrL5YGCtt+Hb44JBtPFPsFQ2ylRA6E:3H2c1L1CtgFPF2gRG
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_CN/cheatengine.po
- SHA256 41cee04f5cb03238384a83cee8babb2fc597ea23eda9598b4306fd42f539c2b6
- MD5 b457286be90ac2ab656655beae98519b
- SHA1 c2becd8871b380f402692aed445c837bcee1ff4e
- SHA512 bae31c8fc7667524edce4ce3c61449529b01680cbe3d077bbf7ba2fc5057889eb7c6c5cc3bf9729b447032e43de71d6c73a9870be00e45e98dae9f5fea68a5f9
- SSDEEP 3072:RpY+hhbMqQNk5ZjhtDObsB7iMQ5Le1ajfVRfFB7bvu/TgrraZ49xeosa8Yh:R++hHDOMQ5ZbvSY9xbsa8W
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_CN/java.po
- SHA256 314b392457f9ec5bfa29dc810487052496cd5463d4a1d8849f505af045d769cf
- MD5 dc2d145a5eff9193b420427711e76749
- SHA1 48f6ac86a3cd93c4bfd21fe4ccb84e8e60efe64e
- SHA512 e50830bda2f745206c29f442a137cc0e9ef776e73f9fdcb0c4c60e242a31810ca3ef723c8b425a0f82f3535e0b336a975017b9b6c9928434daddfd53540fb2a8
- SSDEEP 96:v47SR5da0g/kEIoOwx7+PeKxpkF5ksvcql+0dnoCASsvgY+kW:A765ktIoBCWKx+F5B0qxtoCASsvJW
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_CN/lclstrconsts.po
- SHA256 ef0d04ce854d393ba2e6343cb839aa46c06f6927a6477f80238e7864bca4d012
- MD5 28153d71c98335c83400dd373c31a696
- SHA1 f4b457af51f3ea9182d91a2220331b2b5ac5e4e8
- SHA512 9802c3cd57c0697ce7a8eddaffb2810faf5f0936dd32019676f79819e4939ae48666d3f514a81a161159d3b5b77e79a688e8b120067d66adf29d65301161fe69
- SSDEEP 768:dTgGA1KFPJjoRjICQdHeTRn6dtPGYJovf:dYSPJjotBTRn6dDJ2
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_CN/monoscript.po
- SHA256 3581e4ad52d3d79fe06729aec6640a7129e5e9354e63dac3f9133fd28357b718
- MD5 d0a354e039ade932fb3f319b7c0ae3d0
- SHA1 1b7464b8405de6469b8621b11904fa252d516e81
- SHA512 05849239187b5b21324f05251bbfd6799b5ae9dfda1bee54dcf5db5704f7eb4a59205b987c602f2b5a133070c8b99b3546824de551a5e3cf09c5cc0a8eff39ab
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_CN/patchscan.po
- SHA256 c5c56838e5c8b269c171af1901d111c342715929185110031a733b3ac413357b
- MD5 5430be56b886b9f46aa43a62b69a6c5c
- SHA1 0bf2ec8a3209c2049ac3054371b96db17e12af2e
- SHA512 277fdf7281281111a36184fd4fe8b2ef4651587792ed2b0e19820273d70dc47df48f27d4b9dd54b02157ed89b2944cf03efca8fa947dd809e86d631ff8064c59
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_CN/pseudocodediagram.po
- SHA256 7811d474c46a50469fc3101395c90772a1266d4a577462e53c74f217d7a0525a
- MD5 159bacad112d63a27f38470ea7b14414
- SHA1 a6bb855e6a00ffcf2cedb8fb5589be891cac0e34
- SHA512 55f4ba1142f3670338b7f8d8b060b3bccdd32221c5c79cc36536d0662631a7e9d60df6261894ace039c95b9c72ef719a337807c542dcaf9d2c9107845a065913
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_CN/tutorial-x86_64.po
- SHA256 c6583a93732d2411058d2edb703605096cd5d201e237e07fe78b345de81c0b68
- MD5 f08829d4862126d571858222924b3f16
- SHA1 b33f050a32f814e4a0e78f3b7e693d1ffdb2b943
- SHA512 5ae9599294c65822ca8603507bdcb4c3612d98f517e7ba8a03b4bc82eac1433f4542f7ebd6612af506c867dcdce55b12d8138a718fb2df6b4906f1b157be341c
- SSDEEP 768:7y9igf+l2DgyLHjMNr7m/VxlBlIt8wwv4v9waLxzIyVGIznOpa+Nkv3FPZ:7ym70Hj8vmNx3El9waLe1I4aj3Fx
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_TW/Java.po
- SHA256 2e7203a08cbd7c6423f6e332436b622456d83c9eeca2bada55d3e6a8b9b56bd4
- MD5 8544d544a02ce4d4cfd70f8507c782f0
- SHA1 a6e280ab4b0edd72b35e077898ff88bea596309c
- SHA512 ae4f8c756958363fbe04ffab414f17e79df41f9b428ef67b0e7df3fbe63635a9f00ddfe0227c483f3bcc54594a8d5d88b6b8e6890d9f32f1f72e0cb3c6782a03
- SSDEEP 96:v47Sffb3J2kElRPQ7DVxAGvwYvLdF0eEzFfPe2vgYedaiv:A7S3lMlRY9xj9zMXzFfPe2vcaiv
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_TW/SaveSessions.po
- SHA256 9f575bd43f57d18c54afce86d335cb48fe2a25b94eab5fff3c4fc9d8d4ecc72c
- MD5 50cce0ae4c4da485e79952508d45f931
- SHA1 6fe662d1e9b08956425e967dcae1f9588d0bedef
- SHA512 bcf2744ee101c2cecd9f629c6d36be2e27e3a4ebf042e12bd94bc0b24c674fc632994320b58d7eca73dbc2170b4421c080192e6f12cf62939764941467cf58bf
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_TW/VersionCheck.po
- SHA256 a7c51317f4b9610a97599a7eec3aa73d24af6550681633cdc351efe59805c52b
- MD5 099b08f773acd9543a090da739a525c5
- SHA1 7594c25cfa1d1bfe80daa6ac99f65a5f94452f4f
- SHA512 b4ed441f03c8a98ae19b335642c1ff16e7a41a3e63d902da53bc4da6c264739ecb6b1467acb831dbe3e0c18c71059d81d1f20fb99339dc7bf28e61f3a3b97c24
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_TW/cheatengine-x86_64.po
- SHA256 54e54e7cfdd73fe13ff4816ed4d1c3fae078e96d27600129a34b0b320516dab5
- MD5 593d9c32ce7fa0b2c3768e9fcb6c2f4d
- SHA1 b3fe6163eed241bebeb287c4518667f449e92d19
- SHA512 7560038652d654083bedc0142b25e7657ad1dd98859850448b06a932084a069618c16fe007ae25b7ffcd26347e76b452080dcabeacc07da889b159e10426f177
- SSDEEP 6144:TM44OwsgGewLMKuWwWYvJafyZ6NOlrQgt4MqK2onjsE:444Ow0LMKSWY7Vugt4M2on7
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_TW/lclstrconsts.po
- SHA256 9b18c44e5647433a228bb0f85d3af3eddd5ca3aff705448dc9f7f891ca0b1595
- MD5 b75bac6436311c4e973437fe7595df0f
- SHA1 a9c1f52dd682798f5d3a0be59ea498aa2fc5cf9f
- SHA512 95d7b813572fd546c89c954eba11a154ee5db9a32ed4c781943df141f3a2bf799b3dc385684d4de70655d09f19e35f5e8cf9ef65069a4beee8616fde1d346833
- SSDEEP 384:gyooW0tvAFAdPPqbbV6uBs0IIpwgg5qYmg7vxAyTq:gy7HAFmPwNjIIpwggscTq
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_TW/monoscript.po
- SHA256 ebf459f1a52c60b2eb9350aed299acbca9a96ea73263dae151ce9674bfa2532c
- MD5 ff7e43456cb15162dd5bc46a4c8fad6c
- SHA1 fa466fe18204ee96f23b386388dbdf2c8f97a9a6
- SHA512 1400a64800b999709611de8f27648698e9d040950d8a78a70ea08048b5d662956dc9508c87443438f0ec798cfe982fb66312b180bba6b54d66d7db4ff6eddab1
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_TW/patchscan.po
- SHA256 857efca8e9d5c29887b3e6c88507c7d50400d0d64ce34cb53b9fadd168536044
- MD5 9aebdbad6495d6bb49f5beb90a14a2e6
- SHA1 d646a2473ecc791d6322e55fa0a031b5e407d99e
- SHA512 dd9305a49b2f272e840bcba9ba3e5868bcd3a9c692acaf73a54c7daa95d059789fe55060e273d6ab327306fc10c7ce3c99b913b536629d7f2f987b05950692e6
- MD5 SHA1 SHA512
Vulcan1.5 BETA/languages/zh_TW/pseudocodediagram.po
- SHA256 f43e430710bb8d299d0cd3ffbaed5446d773476fffb07e876666d29e856fc5e5
- MD5 c450f2e0121d1467fa95cfe66418ef4a
- SHA1 43d87c30e212ef38b619e45035005d2458758676
- SHA512 dec5fd71fe6d0b1a0bd55102293d1b7fec0af81231f6dd330a4779014095f6d1d4904273ec3e2997b0775cae0a219abc8cc4cd4a199c0a8a4bb04efcfad93cea
- SSDEEP 48:MuwElJyTLhVDJJXP605DI2EPLhPai8UYJqmb0nVShHQpGIXJcbBG3Gv:M+lJyRVD1D8PLhiqfmAAQw2JcFG3Gv
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/languages/zh_TW/tutorial-x86_64.po
- SHA256 7e838f8f7077596f7cb495443e9ffffa150087f8e4398780a462cb6511b36f1b
- MD5 c25ae66a8a5d793235ef294477c1fee4
- SHA1 a4f9aa857e9fffc0d4a147e4590c89d74baef629
- SHA512 7baf821c2a06ed26f84b18168adc82115fb9346983611e62b735091b040d776e60d59caf73dfa919a3cbcee8404343752b64ac66f6ed762e8cd755a10661505b
- SSDEEP 768:XWPiDfIKOv9yKv3Eah1/gwzDlDnw18HR9vzMn5:YTKOv9dv3Eg1oOD91R9vA
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/libipt-32.dll
- IMPHASH 1555e32b624d5f5e3a4b0f72821c0777
- SHA256 d14911c838620251f7f64c190b04bb8f4e762318cc763d993c9179376228d8ca
- MD5 df443813546abcef7f33dd9fc0c6070a
- SHA1 635d2d453d48382824e44dd1e59d5c54d735ee2c
- SHA512 9f9bea9112d9db9bcecfc8e4800b7e8032efb240cbbddaf26c133b4ce12d27b47dc4e90bc339c561714bc972f6e809b2ec9c9e1facc6c223fbac66b089a14c25
- SSDEEP 1536:K3uc99F6AOdjfTOZztxlGWGXLQbcpNk6FowD6QcEY7Xjl5hf8keDQa/c7usWjcd6:K3ukXTNGp7+6zaEY7Zf/a0ye3ZoOvKOS
- MD5 SHA1 SHA512 SSDEEP
Digest
f4:ac:eb:10:b8:28:a9:d0:be:91:7b:7a:31:aa:3d:2f:74:dd:77:de:45:2e:84:39:fc:fe:2e:86:ae:e3:83:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
ea:0c:4e:23:27:3c:f1:b3:e2:2e:3e:a8:db:33:36:c8:da:43:4e:7a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
1
Major OS version
5
Entry point
50928
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\svn\Cheat Engine\bin\libipt-32.pdb
kernel32
CreateFileA
MapViewOfFile
UnmapViewOfFile
GetLastError
CreateFileMappingA
GetSystemInfo
CloseHandle
HeapFree
HeapAlloc
ReadFile
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
PeekNamedPipe
FileTimeToSystemTime
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
DeleteCriticalSection
GetStartupInfoW
CreateFileW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
CompareStringW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
RtlUnwind
FlushFileBuffers
GetConsoleCP
GetTimeZoneInformation
SetEndOfFile
HeapReAlloc
HeapSize
WriteConsoleW
SetEnvironmentVariableA
pt_alloc_encoder
pt_cpu_errata
pt_cpu_read
pt_enc_get_config
pt_enc_get_offset
pt_enc_next
pt_enc_sync_set
pt_errstr
pt_free_encoder
pt_image_add_file
pt_image_alloc
pt_image_copy
pt_image_free
pt_image_name
pt_image_remove_by_asid
pt_image_remove_by_filename
pt_image_set_callback
pt_insn_alloc_decoder
pt_insn_core_bus_ratio
pt_insn_free_decoder
pt_insn_get_config
pt_insn_get_image
pt_insn_get_offset
pt_insn_get_sync_offset
pt_insn_next
pt_insn_set_image
pt_insn_sync_backward
pt_insn_sync_forward
pt_insn_sync_set
pt_insn_time
pt_library_version
pt_pkt_alloc_decoder
pt_pkt_free_decoder
pt_pkt_get_config
pt_pkt_get_offset
pt_pkt_get_sync_offset
pt_pkt_next
pt_pkt_sync_backward
pt_pkt_sync_forward
pt_pkt_sync_set
pt_qry_alloc_decoder
pt_qry_cond_branch
pt_qry_core_bus_ratio
pt_qry_event
pt_qry_free_decoder
pt_qry_get_config
pt_qry_get_offset
pt_qry_get_sync_offset
pt_qry_indirect_branch
pt_qry_sync_backward
pt_qry_sync_forward
pt_qry_sync_set
pt_qry_time
Name
.text
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=225, productName=VS2013 build 21005, version=21005,
count=23, id=223, productName=VS2013 build 21005, version=21005,
count=130, id=224, productName=VS2013 build 21005, version=21005,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=25, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/libipt-64.dll
- IMPHASH e32e16398aad7a038ba38d4ca24cf3c9
- SHA256 26ede848dba071eb76c0c0ef8e9d8ad1c53dfab47ca9137abc9d683032f06ebb
- MD5 4a3b7c52ef32d936e3167efc1e920ae6
- SHA1 d5d8daa7a272547419132ddb6e666f7559dbac04
- SHA512 36d7f8a0a749de049a830cc8c8f0d3962d8dce57b445f5f3c771a86dd11aaa10da5f36f95e55d3dc90900e4dbddd0dcc21052c53aa11f939db691362c42e5312
- SSDEEP 3072:XMTS4QqrM7BqUHEwXDVT6B8AF6aBBcFkLODeYJObCkEjOUkOG:XIQqrc7V5Trw6aBBcFk6CtbID4
- MD5 SHA1 SHA512 SSDEEP
Digest
99:df:6f:7c:27:f1:90:3f:02:6c:ce:bb:5e:3c:dd:54:16:6a:00:24:e9:4b:43:80:8f:31:12:46:a2:8f:78:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
bb:0d:27:0e:2f:a3:ef:47:61:7f:45:f2:b1:36:03:ce:8b:b9:cf:4b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
55668
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\svn\Cheat Engine\bin\libipt-64.pdb
kernel32
CreateFileA
MapViewOfFile
UnmapViewOfFile
GetLastError
CreateFileMappingA
GetSystemInfo
CloseHandle
HeapFree
HeapAlloc
ReadFile
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
PeekNamedPipe
FileTimeToSystemTime
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
GetConsoleMode
ReadConsoleW
RtlUnwindEx
SetFilePointerEx
DeleteCriticalSection
GetStartupInfoW
CreateFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
CompareStringW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetTimeZoneInformation
SetEndOfFile
HeapReAlloc
HeapSize
WriteConsoleW
SetEnvironmentVariableA
pt_alloc_encoder
pt_cpu_errata
pt_cpu_read
pt_enc_get_config
pt_enc_get_offset
pt_enc_next
pt_enc_sync_set
pt_errstr
pt_free_encoder
pt_image_add_file
pt_image_alloc
pt_image_copy
pt_image_free
pt_image_name
pt_image_remove_by_asid
pt_image_remove_by_filename
pt_image_set_callback
pt_insn_alloc_decoder
pt_insn_core_bus_ratio
pt_insn_free_decoder
pt_insn_get_config
pt_insn_get_image
pt_insn_get_offset
pt_insn_get_sync_offset
pt_insn_next
pt_insn_set_image
pt_insn_sync_backward
pt_insn_sync_forward
pt_insn_sync_set
pt_insn_time
pt_library_version
pt_pkt_alloc_decoder
pt_pkt_free_decoder
pt_pkt_get_config
pt_pkt_get_offset
pt_pkt_get_sync_offset
pt_pkt_next
pt_pkt_sync_backward
pt_pkt_sync_forward
pt_pkt_sync_set
pt_qry_alloc_decoder
pt_qry_cond_branch
pt_qry_core_bus_ratio
pt_qry_event
pt_qry_free_decoder
pt_qry_get_config
pt_qry_get_offset
pt_qry_get_sync_offset
pt_qry_indirect_branch
pt_qry_sync_backward
pt_qry_sync_forward
pt_qry_sync_set
pt_qry_time
Name
.text
Size
107KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=225, version=20806,
count=127, id=224, version=20806,
count=10, id=223, version=20806,
count=3, id=203, version=65501,
count=92, id=1, productName=Unmarked objects,
count=25, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/libmikmod32.dll
- IMPHASH 83efea949fe36df0b049975dd492d8a8
- SHA256 aedc048fcfec594e7307e4730d850e5e0121820a76ca1a363f4a2e41d084f393
- MD5 462322cc93e55016d5ea78b2b9823657
- SHA1 3e8e00b690a4370d6f2dfdcf730f2d3fda4806a6
- SHA512 a46e56130a8d1ca588d9935d98468543328b42492f1257157d2c7fd99ac341e8a22337ac2228aecf33a70913a7e7161b300bb458e1c07d5d0b94a7aa1dd72d79
- SSDEEP 3072:3QMsoykzuYV4SPaa/Gr+RBmRQ5wipE04CIcFw6eAwE5Sm1Q5jsV+XkO4qOT:3NJyTuxkC57IZEzGmT
- MD5 SHA1 SHA512 SSDEEP
Digest
2a:1a:4a:93:85:c8:c3:e8:de:7f:a9:ca:0f:e6:9f:6d:be:fb:5e:98:e7:15:f9:cc:7f:6b:e9:fa:00:a4:dc:a6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
ce:a3:a2:89:fc:5c:05:34:ec:2f:d6:e8:14:66:09:05:b8:69:ae:9b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
175014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\svn\Cheat Engine\bin\libmikmod32.pdb
dsound
ord1
kernel32
WaitForSingleObject
SetEvent
CreateEventA
ReleaseMutex
CloseHandle
ResumeThread
CreateThread
Sleep
CreateMutexA
HeapSize
OutputDebugStringW
WriteConsoleW
LCMapStringW
GetLastError
HeapFree
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
ReadFile
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
EncodePointer
DecodePointer
CreateFileW
GetFileType
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
RtlUnwind
HeapAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
SetFilePointerEx
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
GetModuleFileNameW
LoadLibraryExW
FlushFileBuffers
GetStringTypeW
DeleteFileW
user32
GetForegroundWindow
winmm
waveOutUnprepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutReset
MikMod_Active
MikMod_DisableOutput
MikMod_DriverFromAlias
MikMod_EnableOutput
MikMod_Exit
MikMod_GetVersion
MikMod_InfoDriver
MikMod_InfoLoader
MikMod_Init
MikMod_InitThreads
MikMod_Lock
MikMod_RegisterAllDrivers
MikMod_RegisterAllLoaders
MikMod_RegisterDriver
MikMod_RegisterErrorHandler
MikMod_RegisterLoader
MikMod_RegisterPlayer
MikMod_Reset
MikMod_SetNumVoices
MikMod_Unlock
MikMod_Update
MikMod_critical
MikMod_errno
MikMod_strerror
Player_Active
Player_Free
Player_GetChannelPeriod
Player_GetChannelVoice
Player_GetLoop
Player_GetModule
Player_GetWrap
Player_Load
Player_LoadFP
Player_LoadGeneric
Player_LoadTitle
Player_LoadTitleFP
Player_Mute
Player_Muted
Player_NextPosition
Player_Paused
Player_PrevPosition
Player_SetLoop
Player_SetPosition
Player_SetSpeed
Player_SetTempo
Player_SetVolume
Player_SetWrap
Player_Start
Player_Stop
Player_ToggleMute
Player_TogglePause
Player_Unmute
Sample_Free
Sample_Load
Sample_LoadFP
Sample_LoadGeneric
Sample_Play
VC_Exit
VC_Init
VC_PlayStart
VC_PlayStop
VC_SampleLength
VC_SampleLoad
VC_SampleSpace
VC_SampleUnload
VC_SetNumVoices
VC_SilenceBytes
VC_VoiceGetFrequency
VC_VoiceGetPanning
VC_VoiceGetPosition
VC_VoiceGetVolume
VC_VoicePlay
VC_VoiceRealVolume
VC_VoiceSetFrequency
VC_VoiceSetPanning
VC_VoiceSetVolume
VC_VoiceStop
VC_VoiceStopped
VC_WriteBytes
Voice_GetFrequency
Voice_GetPanning
Voice_GetPosition
Voice_GetVolume
Voice_Play
Voice_RealVolume
Voice_SetFrequency
Voice_SetPanning
Voice_SetVolume
Voice_Stop
Voice_Stopped
drv_ds
drv_nos
drv_raw
drv_stdout
drv_wav
drv_win
load_669
load_amf
load_dsm
load_far
load_gdm
load_imf
load_it
load_m15
load_med
load_mod
load_mtm
load_okt
load_s3m
load_stm
load_stx
load_ult
load_uni
load_xm
md_device
md_driver
md_mixfreq
md_mode
md_musicvolume
md_pansep
md_reverb
md_sndfxvolume
md_volume
Name
.text
Size
220KB
Virtual Size
219KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=199, version=41118,
count=36, id=225, productName=VS2013 build 21005, version=21005,
count=22, id=223, productName=VS2013 build 21005, version=21005,
count=136, id=224, productName=VS2013 build 21005, version=21005,
count=9, id=203, version=65501,
count=95, id=1, productName=Unmarked objects,
count=40, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/libmikmod64.dll
- IMPHASH 2620c385706125032143f584b27b115a
- SHA256 25c648cfdb4cdbbb13630adc7c14f2bb556c98f5cd1dcbecaffa91629d2d4a4c
- MD5 a358dae60f1c0f6a633f98b1e4d3e850
- SHA1 2016f1fb0f8000e515602498432951b7c5bc5aca
- SHA512 879b5e95cf7f06e105930724bbc6967b367417dce390a15de48bf5ce76ce2435ea4a59095ab67eee5a05fa41126ddb984c2154aba34b33fac895a1ccc2d2a617
- SSDEEP 6144:ZnVdQfxRaiC76I/wZGteu+WJrXeN6joNtMrvMl9u61s1JGTBHpMqdmgIIE5pY2B:jdsxs6I6k9MUoNt2vSs8KqdmgIIE/b
- MD5 SHA1 SHA512 SSDEEP
Digest
37:4b:14:1e:be:cc:84:d4:50:f3:3d:d6:7b:2e:b7:10:78:65:52:03:fd:b9:bb:41:7f:f8:63:e3:bc:2a:f4:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
cb:0b:67:63:bb:28:f7:4c:fc:8d:57:88:36:c8:19:c3:5e:c4:e5:66
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
187072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\svn\Cheat Engine\bin\libmikmod64.pdb
dsound
ord1
kernel32
WaitForSingleObject
SetEvent
CreateEventA
ReleaseMutex
CloseHandle
ResumeThread
CreateThread
Sleep
CreateMutexA
HeapSize
OutputDebugStringW
WriteConsoleW
LCMapStringW
GetLastError
HeapFree
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
ReadFile
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
EncodePointer
DecodePointer
CreateFileW
GetFileType
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
RtlUnwindEx
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
HeapAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
SetFilePointerEx
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
GetModuleFileNameW
LoadLibraryExW
FlushFileBuffers
GetStringTypeW
DeleteFileW
user32
GetForegroundWindow
winmm
waveOutUnprepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutReset
MikMod_Active
MikMod_DisableOutput
MikMod_DriverFromAlias
MikMod_EnableOutput
MikMod_Exit
MikMod_GetVersion
MikMod_InfoDriver
MikMod_InfoLoader
MikMod_Init
MikMod_InitThreads
MikMod_Lock
MikMod_RegisterAllDrivers
MikMod_RegisterAllLoaders
MikMod_RegisterDriver
MikMod_RegisterErrorHandler
MikMod_RegisterLoader
MikMod_RegisterPlayer
MikMod_Reset
MikMod_SetNumVoices
MikMod_Unlock
MikMod_Update
MikMod_critical
MikMod_errno
MikMod_strerror
Player_Active
Player_Free
Player_GetChannelPeriod
Player_GetChannelVoice
Player_GetLoop
Player_GetModule
Player_GetWrap
Player_Load
Player_LoadFP
Player_LoadGeneric
Player_LoadTitle
Player_LoadTitleFP
Player_Mute
Player_Muted
Player_NextPosition
Player_Paused
Player_PrevPosition
Player_SetLoop
Player_SetPosition
Player_SetSpeed
Player_SetTempo
Player_SetVolume
Player_SetWrap
Player_Start
Player_Stop
Player_ToggleMute
Player_TogglePause
Player_Unmute
Sample_Free
Sample_Load
Sample_LoadFP
Sample_LoadGeneric
Sample_Play
VC_Exit
VC_Init
VC_PlayStart
VC_PlayStop
VC_SampleLength
VC_SampleLoad
VC_SampleSpace
VC_SampleUnload
VC_SetNumVoices
VC_SilenceBytes
VC_VoiceGetFrequency
VC_VoiceGetPanning
VC_VoiceGetPosition
VC_VoiceGetVolume
VC_VoicePlay
VC_VoiceRealVolume
VC_VoiceSetFrequency
VC_VoiceSetPanning
VC_VoiceSetVolume
VC_VoiceStop
VC_VoiceStopped
VC_WriteBytes
Voice_GetFrequency
Voice_GetPanning
Voice_GetPosition
Voice_GetVolume
Voice_Play
Voice_RealVolume
Voice_SetFrequency
Voice_SetPanning
Voice_SetVolume
Voice_Stop
Voice_Stopped
drv_ds
drv_nos
drv_raw
drv_stdout
drv_wav
drv_win
load_669
load_amf
load_dsm
load_far
load_gdm
load_imf
load_it
load_m15
load_med
load_mod
load_mtm
load_okt
load_s3m
load_stm
load_stx
load_ult
load_uni
load_xm
md_device
md_driver
md_mixfreq
md_mode
md_musicvolume
md_pansep
md_reverb
md_sndfxvolume
md_volume
Name
.text
Size
235KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=199, version=41118,
count=36, id=225, version=20806,
count=132, id=224, version=20806,
count=11, id=223, version=20806,
count=9, id=203, version=65501,
count=98, id=1, productName=Unmarked objects,
count=40, id=228, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/lua/lauxlib.pas
- SHA256 ec34b882189ef1000009d517bbb3a1138491d65600ef49be29bb832dc70f3456
- MD5 0bd62a0ecf9992908911c6c979310f90
- SHA1 5985ba6147079a3cac5836ff1822b66400ae48a4
- SHA512 b44383fb0ec9ab1e5eb734f500251acc1bb134444bae38e93edd3aa6cea1bc32e1d3205098c6f284b346a7b49e0273d168bd78663d3b36c4a80e4f9858cc1123
- SSDEEP 192:eI3wW7Lpp/4gh0+D3/KDT7dOYm/CaCT5X1ZiEV+/Psf9jvCXOhtiDLj8LBJT7Amy:33vha0wXG9
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/lua/lua.pas
- SHA256 599a1dcd632520113a9c349206cc04c1212d24961bbb899d1caa7f0fad429f85
- MD5 f9bd1c950aa2da4529990e82170d3194
- SHA1 0416915cd0104bbbd731f8cb381e74dd6bf9da53
- SHA512 ef322e4cd54891fb0203070af497fbf013dad0d6794754aa637ac4e815b779ad88679c0fa87067f44d877a99e421a0e9dbaf866c1dfd1c0f20d870736d333b23
- SSDEEP 384:0WSnCYnTcytN19bxy4cGCNVoDgk3IqYx/3NOrgprqs:YfnIytN19bxncGCNV9x/3fpWs
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/lua/lualib.pas
- SHA256 20c9d247fa5252198fc765d99feb6c07ca6361fb987c05cc8b92644a62e94664
- MD5 35556e730e02f12d2420c9161bc591e0
- SHA1 a5e6f42f4f523fe273c197884c6485d25c2a2075
- SHA512 a25fc785e098e6d173c195ad7b2b48ab0870afd06d79005cc75f824d4fcdd2f47009a375e8d2c3905f7e624905d02ab4f1a6c4e65487ec62bbf57368939f11e2
- MD5 SHA1 SHA512
Vulcan1.5 BETA/lua53-32.dll
- IMPHASH 3991c01e50953690ce06a82b4aab452d
- SHA256 58b206ab9a3d84fdafb537b419f721ecdeade489707dbab227b043d5343db369
- MD5 ad3f33bac8eadab224adaf4cf6d5b97a
- SHA1 6ccfb97236c5ad3b48a3eb7a113e3e297422e808
- SHA512 c319a1c3d0d90afefd27dc0379c79e38993490ffa14cb281f419bc94fde5776cd7eab54351c57f6eaeebcacf7f965fa0b8a8dd67489e799fcd84d39393c62a3e
- SSDEEP 12288:dBj8paX8fQ/T/md4OASZAOLRwRai6wXGn+hfy:dxLrLmd4OA4L8DXGnmy
- MD5 SHA1 SHA512 SSDEEP
Digest
66:f1:82:b9:ac:cb:79:f5:91:30:16:5e:f7:1d:55:44:76:8b:4c:b7:eb:fa:3a:28:1b:2b:36:3d:99:e1:ae:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
b7:e3:aa:fa:3a:68:03:ad:48:ef:fc:5e:b7:36:a9:f6:9a:06:cc:08
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
1
Major OS version
5
Entry point
176795
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\git\cheat-engine\Cheat Engine\bin\lua53-32.pdb
kernel32
GetModuleFileNameA
LoadLibraryExA
GetLastError
GetProcAddress
FreeLibrary
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
CloseHandle
DuplicateHandle
CreateProcessA
GetTempPathW
ReadFile
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetACP
ReadConsoleW
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
CreatePipe
CreateFileW
SetFilePointerEx
GetStringTypeW
DeleteFileW
GetTimeZoneInformation
MoveFileExW
GetCPInfo
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
WriteConsoleW
HeapSize
SetEndOfFile
DecodePointer
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushmodule
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resume
lua_rotate
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove
lua_yieldk
luaopen_base
luaopen_bit32
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8
Name
.text
Size
328KB
Virtual Size
327KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=43, id=241, version=40116,
count=186, id=243, version=40116,
count=36, id=242, version=40116,
count=29, id=261, version=26706,
count=18, id=260, version=26706,
count=25, id=259, version=26706,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=102, id=1, productName=Unmarked objects,
count=36, id=264, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Vulcan1.5 BETA/lua53-64.dll
- IMPHASH 779703c2d47ce86829a9221b077786f6
- SHA256 6d0a06b90213f082cb98950890518c0f08b9fc16dbfab34d400267cb6cdadeff
- MD5 b7c9f1e7e640f1a034be84af86970d45
- SHA1 f795dc3d781b9578a96c92658b9f95806fc9bdde
- SHA512 da63992b68f1112c0d6b33e6004f38e85b3c3e251e0d5457cd63804a49c5aa05aa23249e0614dacad4fec28ca6efdb5ddee06da5bfbfa07e21942976201079f3
- SSDEEP 6144:FshVOadaiL9mUHQMpgL8LgpqClZNKX6SumisBEb/NUidzSky3uDMK/LXTMBQqN5T:hOL9J2L8E5VKKSuLGEhXGstCXoYkc7BV
- MD5 SHA1 SHA512 SSDEEP
Digest
81:24:f5:6e:29:14:f8:4e:f1:41:77:d6:d5:6f:d1:de:1e:6f:c9:aa:eb:80:59:e4:25:e8:0a:a4:2e:7e:d4:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
63:38:84:cf:4a:92:39:93:31:3d:d1:94:0f:fe:b6:98:63:14:7b:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
211692
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\git\cheat-engine\Cheat Engine\bin\lua53-64.pdb
kernel32
GetModuleFileNameA
LoadLibraryExA
GetLastError
GetProcAddress
FreeLibrary
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlPcToFileHeader
CloseHandle
DuplicateHandle
CreateProcessA
GetTempPathW
ReadFile
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetACP
ReadConsoleW
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
CreatePipe
CreateFileW
SetFilePointerEx
GetStringTypeW
DeleteFileW
GetTimeZoneInformation
MoveFileExW
GetCPInfo
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
WriteConsoleW
HeapSize
SetEndOfFile
RtlUnwind
?luaL_buffinit@@YAXPEAUlua_State@@PEAUluaL_Buffer@@@Z
?luaL_openlib@@YAXPEAUlua_State@@PEBDPEBUluaL_Reg@@H@Z
?luaL_pushmodule@@YAXPEAUlua_State@@PEBDH@Z
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resume
lua_rotate
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove
lua_yieldk
luaopen_base
luaopen_bit32
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8
Name
.text
Size
374KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=241, version=40116,
count=186, id=243, version=40116,
count=33, id=242, version=40116,
count=30, id=261, version=26706,
count=16, id=260, version=26706,
count=9, id=259, version=26706,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=36, id=265, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Vulcan1.5 BETA/lua_extra/lua.exe
- IMPHASH 305a3483275b958c6b18c492ecca8d26
- SHA256 702502820320538d06409d7818754ce529087ef8ff608a723f49b1ccffdc2d6f
- MD5 47eb9bc40eaff591fb8ad620fcd5ddb6
- SHA1 4972e99e71cc73995014c17b2dbee33bf3a7c1ec
- SHA512 d57e6e86c4a78dc7d70942c00f34f26546fed7c32eea674cff1e9311610bae6ad0a6a86e821ac296d577809a9f2067808cee065d702b25c2956fd5adda31cfb8
- SSDEEP 3072:piYL/0TXMvmmDjuTVi9V+/lqiFZG2tfvt:pimsTXMNDjci9w/MS/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
13900
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
lua53-64
luaL_openlibs
luaL_traceback
luaL_len
luaL_newstate
luaL_loadbufferx
luaL_loadfilex
luaL_error
luaL_checkstack
luaL_callmeta
luaL_checkversion_
lua_sethook
lua_concat
lua_pcallk
lua_rawseti
lua_setfield
lua_setglobal
lua_createtable
lua_rawgeti
lua_getglobal
lua_pushlightuserdata
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushstring
lua_pushlstring
lua_pushinteger
lua_touserdata
lua_tolstring
lua_toboolean
lua_tointegerx
lua_typename
lua_type
lua_rotate
lua_pushvalue
lua_settop
lua_gettop
lua_close
kernel32
FlushFileBuffers
CreateFileW
CloseHandle
LCMapStringW
CompareStringW
HeapSize
GetStringTypeW
OutputDebugStringW
SetEnvironmentVariableA
ReadConsoleW
ReadFile
WriteConsoleW
SetFilePointerEx
SetStdHandle
HeapReAlloc
HeapAlloc
LoadLibraryExW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
EncodePointer
DecodePointer
GetLastError
SetConsoleCtrlHandler
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteCriticalSection
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
RtlUnwindEx
HeapFree
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
GetStartupInfoW
GetProcessHeap
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=203, version=65501,
count=35, id=225, version=20806,
count=114, id=224, version=20806,
count=8, id=223, version=20806,
count=3, id=221, productName=VS2013 UPD3 build 30723, version=30723,
count=118, id=1, productName=Unmarked objects,
count=1, id=224, productName=VS2013 UPD3 build 30723, version=30723,
count=1, id=222, productName=VS2013 UPD3 build 30723, version=30723,
Vulcan1.5 BETA/lua_extra/lua53-32.exp
- SHA256 ce96c4511df7df460bada3147e017e9e5e1aa085b74ce3e75336e0aa100108d8
- MD5 8e2f1f78a05726e9ef16c8312265a33c
- SHA1 271a64ba6cdd71c74c2fb7a0d9e08b184211d698
- SHA512 e9a7124d613dc14188930c4b933e34d12ece51847bf47733b026a326d9a1f93278865fe7b0691a15b157a322a47b3b8bf9df47798057ce89c67f186135430ccd
- SSDEEP 384:Jwmvh8c6sMTnrQfIF2ilrWRGpx/OIxAfv/hrI/b6Cs983wYX38c67oTnnQfXF+:+mJ8c6syrQfyQ0x/OVfn+/+9ZYn8c672
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/lua_extra/lua53-32.lib
- SHA256 c2ffc94ed8280e5f9e3f486f546c69ba272805b05e744ff1a6d3ab6a372ced7f
- MD5 20c07f6190b01a71aeab0a895a13f27e
- SHA1 01d887212abfcb4530e49ae1fcc1d8038f654ea9
- SHA512 79aa69de3c11c84e3ff2345d754ab74ce38bcaff99676f569ec1cf44b614e7f03bf8779af3950e549a33fc43aa2053900eca91a761778aac91b8256e1d895535
- SSDEEP 768:kID5EFSDPDGJGrUyfgxmJ8c6syrQfkoLnOXMWzOEIiIg0LkDi2fkIKWcIQWoSfn4:soLnOXMWzOzlg0LkDi2fTKW7QWoSfnzs
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/lua_extra/lua53-64.dll
- IMPHASH 779703c2d47ce86829a9221b077786f6
- SHA256 6d0a06b90213f082cb98950890518c0f08b9fc16dbfab34d400267cb6cdadeff
- MD5 b7c9f1e7e640f1a034be84af86970d45
- SHA1 f795dc3d781b9578a96c92658b9f95806fc9bdde
- SHA512 da63992b68f1112c0d6b33e6004f38e85b3c3e251e0d5457cd63804a49c5aa05aa23249e0614dacad4fec28ca6efdb5ddee06da5bfbfa07e21942976201079f3
- SSDEEP 6144:FshVOadaiL9mUHQMpgL8LgpqClZNKX6SumisBEb/NUidzSky3uDMK/LXTMBQqN5T:hOL9J2L8E5VKKSuLGEhXGstCXoYkc7BV
- MD5 SHA1 SHA512 SSDEEP
Digest
81:24:f5:6e:29:14:f8:4e:f1:41:77:d6:d5:6f:d1:de:1e:6f:c9:aa:eb:80:59:e4:25:e8:0a:a4:2e:7e:d4:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
63:38:84:cf:4a:92:39:93:31:3d:d1:94:0f:fe:b6:98:63:14:7b:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
211692
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\git\cheat-engine\Cheat Engine\bin\lua53-64.pdb
kernel32
GetModuleFileNameA
LoadLibraryExA
GetLastError
GetProcAddress
FreeLibrary
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlPcToFileHeader
CloseHandle
DuplicateHandle
CreateProcessA
GetTempPathW
ReadFile
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetACP
ReadConsoleW
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
CreatePipe
CreateFileW
SetFilePointerEx
GetStringTypeW
DeleteFileW
GetTimeZoneInformation
MoveFileExW
GetCPInfo
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
WriteConsoleW
HeapSize
SetEndOfFile
RtlUnwind
?luaL_buffinit@@YAXPEAUlua_State@@PEAUluaL_Buffer@@@Z
?luaL_openlib@@YAXPEAUlua_State@@PEBDPEBUluaL_Reg@@H@Z
?luaL_pushmodule@@YAXPEAUlua_State@@PEBDH@Z
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resume
lua_rotate
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove
lua_yieldk
luaopen_base
luaopen_bit32
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8
Name
.text
Size
374KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=241, version=40116,
count=186, id=243, version=40116,
count=33, id=242, version=40116,
count=30, id=261, version=26706,
count=16, id=260, version=26706,
count=9, id=259, version=26706,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=36, id=265, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Vulcan1.5 BETA/lua_extra/lua53-64.exp
- SHA256 af99ac4b6ab25b79b98db9447ce96fa2e15fef49f94fdc3438278dca0538d5b6
- MD5 8982cef561f3b993bc5d6ac9ee65eafb
- SHA1 89a20c8370459cba7c6c47e76a3558e76bfca5d7
- SHA512 7f09d64c0aa9ede3d6b117bb963f80ac2832e87130a361dba70a04e9dcba4d4deb59c8abe933a5b540ec3a610f346c80c05edd261bfd24bb2ad5922f091118a3
- SSDEEP 384:Kwmvh8c6sMTnrQfIF2ilrWRGpx/ORxAfv/hrI/b6Cs983wYX38c67oTnnQfXF+:jmJ8c6syrQfyQ0x/OIfn+/+9ZYn8c672
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/lua_extra/lua53-64.lib
- SHA256 c1ebc8cd4fb408de9bfc8c2460d7811c3389cb7d112757e054b2496ab1dfe47d
- MD5 e8309f93c098abb4050d71721f4b5cbd
- SHA1 c9036cbcf193850d24f7b2168ad4028b70e5353e
- SHA512 d3790990f9b5d6415de6bc83818067edf028f590e82fda1a472c3721e45c6a3c253a4818de5bc88a6ba452fb9b8273f711f238ce6db7bdc66e3d39ce70a086ac
- SSDEEP 768:niD5EFSDPDGJGrUAfgxmJ8c6syrQfgEbwDN/xaOzvmQLa:3M
- MD5 SHA1 SHA512 SSDEEP
Vulcan1.5 BETA/lua_extra/luac32.exe
- IMPHASH df3bb821a427e60e03315ecf0d446170
- SHA256 3e586a3868303ba4824ba4c76f207843c3da1b1cab46030a4ccf3f8d80bab478
- MD5 fc079563300f94faebe1766b38f6ea7f
- SHA1 e66de759afe2234dd7333dd68232b346c8e65a21
- SHA512 3862ef61397049eb55dbc5b8bf9f7b88ec79c8e2a4de5551f2939282aedca22502a46a40b3ddee6df0147bd473d74ebe724e2b5793ed6691b18192244e0fb1f5
- SSDEEP 12288:CaIYfHKwkYHmdDWE1Vt6OaJ00LEvNHX3xk3sOsW:KaM0LuRg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
208506
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\svn\Cheat Engine\bin\lua_extra\luac32.pdb
kernel32
FreeLibrary
FormatMessageA
GetLastError
GetProcAddress
GetModuleFileNameA
LoadLibraryExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapFree
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
GetTempPathA
ReadFile
CloseHandle
DuplicateHandle
GetCurrentProcess
CreateProcessA
AreFileApisANSI
MultiByteToWideChar
GetSystemTimeAsFileTime
WideCharToMultiByte
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetProcessHeap
SetLastError
GetCurrentThreadId
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetStartupInfoW
HeapAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentProcessId
SetFilePointerEx
WaitForSingleObject
GetExitCodeProcess
CreatePipe
RaiseException
MoveFileExW
GetTimeZoneInformation
DeleteFileW
GetModuleFileNameW
LoadLibraryExW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetFileAttributesExW
CreateFileW
SetEnvironmentVariableA
OutputDebugStringW
HeapSize
SetEndOfFile
Name
.text
Size
316KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=47, id=225, productName=VS2013 build 21005, version=21005,
count=69, id=223, productName=VS2013 build 21005, version=21005,
count=190, id=224, productName=VS2013 build 21005, version=21005,
count=3, id=203, version=65501,
count=93, id=1, productName=Unmarked objects,
count=36, id=228, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/lua_extra/luac64.exe
- IMPHASH 7c1b0e130d7d46ddb9e63b559288e6d4
- SHA256 b8907a77039d74848f26cb76283f3fa3b0d428265e3224358a42e1d09894950a
- MD5 11bf3ec9ca538fd344e8ac08504a3fae
- SHA1 41d05681cc6cb8202e96f15553033499731b55b1
- SHA512 5e6fde596a5228ba9452784bee27744073626cc1105bff5f933281ed15f70941b78f2c3fffd845a04528acea4823cb9f3fea2c9126cc0ddb5a1cce6e3a2a5a6a
- SSDEEP 12288:+0CEVOFKBYhPv2wnBNruH++xtchxnf4yZfiM+5JZojVKW0:+cOF5jnBNrsalfT8v7V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
244204
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\svn\Cheat Engine\bin\lua_extra\luac64.pdb
kernel32
FreeLibrary
FormatMessageA
GetLastError
GetProcAddress
GetModuleFileNameA
LoadLibraryExA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapFree
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwindEx
GetTempPathA
ReadFile
CloseHandle
DuplicateHandle
GetCurrentProcess
CreateProcessA
AreFileApisANSI
MultiByteToWideChar
GetSystemTimeAsFileTime
WideCharToMultiByte
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetProcessHeap
SetLastError
GetCurrentThreadId
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetStartupInfoW
HeapAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentProcessId
SetFilePointerEx
WaitForSingleObject
GetExitCodeProcess
CreatePipe
RaiseException
MoveFileExW
GetTimeZoneInformation
DeleteFileW
GetModuleFileNameW
LoadLibraryExW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetFileAttributesExW
CreateFileW
SetEnvironmentVariableA
OutputDebugStringW
HeapSize
SetEndOfFile
Name
.text
Size
350KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=47, id=225, version=20806,
count=196, id=224, version=20806,
count=29, id=223, version=20806,
count=3, id=203, version=65501,
count=96, id=1, productName=Unmarked objects,
count=36, id=228, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Vulcan1.5 BETA/main.lua
- SHA256 5c16124ba0b39214becb1af4161bd82147ad8468879a3fd8e9facc656a1d2e6f
- MD5 62771a63fdc87764bff87d82918ab02a
- SHA1 8e468ded8ced87a10470bd5594337a854ff344ba
- SHA512 8d1792b712504336cac0b175146f2b7eaeda043bd3941c7b7c54cf926a4ba4835f0eff7a2ad5c7b5509f80e7420c3f5f94200d4c3f922db92b807e20e09a84d0
- MD5 SHA1 SHA512
Vulcan1.5 BETA/nil
- SHA256 82779c8aad19bf0628043de5c28e5345aee1823226189b1e731dbd24e07daa43
- MD5 a07a697a3f0c8ad11a573a53f6c716e9
- SHA1 3aceff14f9f62ccf18fc60edc107a724ada2a050
- SHA512 087f81cbb240115dc355bc3fb54a6d24e47ef45fd70832d8df55d40b214897013de6b21485a8bbdf1fd227a964396656f5297499678ef300f96e6bc2999293ce
- MD5 SHA1 SHA512
Vulcan1.5 BETA/overlay.fx
- SHA256 c4d23db8effb359b4aa4d1e1e480486fe3a4586ce8243397a94250627ba4f8cc
- MD5 650c02fc9f949d14d62e32dd7a894f5e
- SHA1 fa5399b01aadd9f1a4a5632f8632711c186ec0de
- SHA512 f2caaf604c271283fc7af3aa9674b9d647c4ac53dffca031dbf1220d3ed2e867943f5409a95f41c61d716879bed7c888735f43a068f1cc1452b4196d611cb76d
- MD5 SHA1 SHA512
Vulcan1.5 BETA/packfiles.bat
- SHA256 767fc9fad0242f452eba9545cf73a4ff2d4675e9c4a9eb0812cbac72e99db3f9
- MD5 76515d7229e5e892557c9a8c92fd7809
- SHA1 c9ad9da49f58b9bc099d8c54a799010fc9085b28
- SHA512 7460c4f728af4eaa5691f2cc1c601563c33b643b9163c5f753451984c9052650c84ea160ef268d003d5affc7ae0dfd0dd5220f5b1a8afd251c66040638a10e75
- MD5 SHA1 SHA512
Vulcan1.5 BETA/process.exe
- IMPHASH 321579003198ff3fdb695d3cf3016d0b
- SHA256 6c51d32a4e45effadcf5a1d4ef29b39b39932ee1b44a02a198749b0df2e05a8b
- MD5 0929566e04a5e598d98f5244fff343c0
- SHA1 fa9b5b07945116705afe94cc26cdf65b4f2deb2b
- SHA512 e51007b8cfc670ba8feaf3a9cf4c13e5096055fe8a7ae0fbaff265cb670c7f90e8b293c0fcfae64372dee0e442cc619063d4514f7f8833021299de2ef9d6bb08
- SSDEEP 768:8B/B07b4SyxSXYVvyGZvzZwHMxMLqKBuuZsDIovaaaaXr1A59:807blybVz5zZtM+KBNZYICnr1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
70787
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\walee\Downloads\netflix\netflix\process\x64\Debug\process.pdb
kernel32
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrcmpW
LocalFree
LocalAlloc
OpenProcess
GetLastError
FreeLibrary
CloseHandle
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent
GetCurrentThreadId
GetProcAddress
advapi32
SetKernelObjectSecurity
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
FreeSid
AllocateAndInitializeSid
AddAccessDeniedAce
SetSecurityDescriptorDacl
msvcp140d
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1_Lockit@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
??0_Lockit@std@@QEAA@H@Z
vcruntime140d
__vcrt_LoadLibraryExW
__vcrt_GetModuleHandleW
__vcrt_GetModuleFileNameW
__std_exception_destroy
__current_exception
__std_type_info_destroy_list
__C_specific_handler_noexcept
__C_specific_handler
__current_exception_context
memcpy
memmove
__std_exception_copy
_CxxThrowException
vcruntime140_1d
__CxxFrameHandler4
ucrtbased
_free_dbg
_set_new_mode
strcat_s
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_configthreadlocale
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
malloc
_callnewh
_CrtDbgReport
strlen
_invalid_parameter
__p__commode
strcpy_s
_CrtDbgReportW
Name
.textbss
Size
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.msvcjmc
Size
1024B
Virtual Size
551B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
373B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
821B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=261, version=32533,
count=11, id=260, version=32533,
count=3, id=259, version=32533,
count=6, id=257, version=32533,
count=7, id=257, version=30795,
count=113, id=1, productName=Unmarked objects,
count=1, id=261, version=32825,
count=1, id=255, version=32825,
count=1, id=258, version=32825,
Vulcan1.5 BETA/run.exe
- IMPHASH 61cdc111e7101e7b3a062ae5a6f976c5
- SHA256 8b67c8a310e1decdc701f627e654106ecdff94c33f5c25210126056417aa8640
- MD5 87b2e541bd839db2e6dfc0a6d1990c03
- SHA1 f517a8e977672b6dbc2705459584912f31d87408
- SHA512 3acda5460a4cc9946c0e4d168d54f91760f4fe50f43720fa9e011b398987e88414937cecf7f60f0aab312e10f715e005bcb706720642fdabba7d8ddefd44aaa9
- SSDEEP 1536:VKXovvLCr3TjS7hSZZb6Dexs7VbNEsZ8z8B4lcFc4ynurWVt:g4bCX28ZZ+Def8B4lcFc4VWD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
71252
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Flami\Downloads\runece-main\runece-main\runece_cpp\x64\Debug\blindness.pdb
kernel32
OpenThread
SuspendThread
ResumeThread
CreateProcessW
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetConsoleWindow
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Thread32First
Thread32Next
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
Sleep
WaitForSingleObject
GetLastError
DuplicateHandle
CloseHandle
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
LocalFree
GetStdHandle
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent
GetCurrentThreadId
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
VirtualQuery
user32
SetWindowTextW
FindWindowW
advapi32
SetKernelObjectSecurity
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
FreeSid
AllocateAndInitializeSid
AddAccessDeniedAce
SetSecurityDescriptorDacl
shell32
ShellExecuteExW
msvcp140d
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?iword@ios_base@std@@QEAAAEAJH@Z
?xalloc@ios_base@std@@SAHXZ
?width@ios_base@std@@QEAA_J_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
vcruntime140_1d
__CxxFrameHandler4
vcruntime140d
__current_exception_context
__current_exception
__std_type_info_destroy_list
__vcrt_LoadLibraryExW
__C_specific_handler
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
__vcrt_GetModuleHandleW
__C_specific_handler_noexcept
__vcrt_GetModuleFileNameW
ucrtbased
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
strcpy_s
strcat_s
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
_callnewh
_CrtDbgReportW
system
rand
malloc
free
_wcsicmp
wcslen
wcscmp
_isatty
strlen
_fileno
__acrt_iob_func
_CrtDbgReport
_invalid_parameter
_exit
exit
_set_fmode
Name
.textbss
Size
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.msvcjmc
Size
1024B
Virtual Size
863B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1024B
Virtual Size
777B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
373B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=261, version=33030,
count=11, id=260, version=33030,
count=3, id=259, version=33030,
count=6, id=257, version=33030,
count=11, id=257, version=30795,
count=151, id=1, productName=Unmarked objects,
count=2, id=261, version=33134,
count=1, id=255, version=33134,
count=1, id=258, version=33134,
Vulcan1.5 BETA/settings
- SHA256 33cb0de9957ac2da703cdb5ba707217e5e65dc89573ca414a7c4c344b83845a0
- MD5 6ad74483f0c3262b4426a94ba442d4a5
- SHA1 4762208e6fb77f4ccb4c355fa34ccb37447b98aa
- SHA512 1beed0c718c8b05a1f2d372affcf04090bedfca4fefa042dd60356796e613986f7f2b8b307910987653b42aed22bb6b68313dda8ba9aca1b6b72e9f33e105aa7
- MD5 SHA1 SHA512
Vulcan1.5 BETA/standalonephase1.dat
- IMPHASH 8d92fa1956a6a631c642190121740197
- SHA256 88bb94c3ce727db13b77abdbdb75a4c878e91d651692f3618178dec5bbb7080c
- MD5 eb339eecec8aa8c0fd3b08d39799d4d8
- SHA1 860efd5893e4dd4e820227b7dead144f974456ac
- SHA512 bc29778386853f2340eb2e58be9ae3c64e2f8a1df5f7301fdd06c42e3ef2463bea9c8e854d58d912d444f2c2e24f9541fb3715f0cb5f50fa89eafcec6bba87fa
- SSDEEP 768:IlSyUIeWkNgcT1+z/9ADX38J8u46Z09XPe+vpgEGfk6rAlpdej5fe6di:0Jdu+D9Ar38f46ZcPe+vpgE6AC5fe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
5611
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
shlwapi
PathAddBackslashA
PathStripPathA
PathRemoveFileSpecA
kernel32
GetModuleFileNameA
FindResourceA
GetModuleHandleA
SizeofResource
LoadResource
GetTempPathA
CreateDirectoryA
DeleteFileA
CreateFileA
WriteFile
CloseHandle
CreateProcessA
WaitForSingleObject
RemoveDirectoryA
FlushFileBuffers
GetTempFileNameA
GetCurrentThreadId
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
user32
MessageBoxA
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=31, id=132, productName=VS2008 build 21022, version=21022,
count=16, id=149, productName=VS2008 build 21022, version=21022,
count=96, id=131, productName=VS2008 build 21022, version=21022,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=99, id=1, productName=Unmarked objects,
count=2, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/tiny.dat
- IMPHASH eae719b7384e30dfa50a17f56fc10efb
- SHA256 d1a3add2a0fa8e8c8e18c2831342746f3059d9e886e6c44d3074967b1217d9c5
- MD5 419bfebb2f430bc8a246515bd55e024e
- SHA1 af3d6d7b21b88445b0d243eb2d7c340e9b9494f9
- SHA512 dfa6dbf8eca0d628554a40daf48c0648254efd25c6c7f365bf6e7ced7ed3adc56fd4174a12f1bf90f640af0b6e9cfd45f7d29d9c87dbb798b56ad7497901f472
- SSDEEP 1536:bxPJqQwzwa2S21C+HhJ4GwDgJtx+j9wCFmgkxI5fF:zwzwtoy4GXV+JrFmgkxI5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
7490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
shlwapi
PathAddBackslashA
PathStripPathA
AssocQueryStringA
PathRemoveFileSpecA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
CompareStringA
FlushFileBuffers
HeapSize
GetLocaleInfoA
GetModuleFileNameA
FindResourceA
GetModuleHandleA
SizeofResource
LoadResource
CompareStringW
CreateDirectoryA
GetTempFileNameA
DeleteFileA
CreateFileA
WriteFile
CloseHandle
CreateProcessA
Sleep
RemoveDirectoryA
GetTempPathA
GetStdHandle
GetStringTypeW
HeapAlloc
GetLastError
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
GetProcAddress
ExitProcess
SetEnvironmentVariableA
GetFullPathNameA
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetTimeZoneInformation
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
user32
MessageBoxA
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
shell32
ShellExecuteA
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=17, id=149, productName=VS2008 build 21022, version=21022,
count=103, id=131, productName=VS2008 build 21022, version=21022,
count=13, id=123, productName=VS2005 build 50727, version=50727,
count=111, id=1, productName=Unmarked objects,
count=2, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Vulcan1.5 BETA/win64/dbghelp.dll
- IMPHASH c3c7540a73aa6487d00a1f12dd6033c8
- SHA256 009681092f6a13c5c28bb3b08ea14bb03ba959f9ce1a53730d069550da376c48
- MD5 7a7a9cd081ab016f84249ef4f06493ad
- SHA1 8dc1bebfae34c118fe3810dc9131cbf8ccbd9edc
- SHA512 d2b3f302f653741298fb62d237bfc61e1555792aad73c14395b4dd4b97fe37f745e916b9f586945042b1eded19c2bc0e9efd4be57e44610d465296bd0c544e84
- SSDEEP 49152:21CydAIdaqDwWXf6J6eFyIfbIwDLk2A/R1UTwyIuZ:21fd7dxinRDLkF/R1zuZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:fb:94:17:e1:94:de:8d:50:b3:3e:f9:f8:2d:e3:16:13:55:3a:ca:e5:b5:ab:84:fb:43:cf:df:01:01:79:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 3, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
516176
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
dbghelp.pdb
api-ms-win-crt-string-l1-1-0
memset
wcsnlen
strlen
wcsncmp
strcmp
strcspn
strncmp
wcscmp
api-ms-win-crt-time-l1-1-0
_time64
_ctime64
api-ms-win-crt-locale-l1-1-0
_unlock_locales
_lock_locales
api-ms-win-crt-runtime-l1-1-0
__doserrno
_initterm
_initterm_e
api-ms-win-crt-private-l1-1-0
_o__filelengthi64
_o__fullpath
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__itoa_s
_o__lseeki64
_o__ltoa
_o__mbscmp
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__splitpath_s
_o__stricmp
_o__strlwr
_o__strnicmp
_o__wcsdup
_o__wcsicmp
_o__wcslwr
_o__wcsnicmp
_o__wctime64
_o__wdupenv_s
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__wsplitpath_s
_o__wtoi
_o_abort
_o_atoi
_o_atol
_o_bsearch
_o_calloc
_o_ceilf
_o_fclose
_o_fflush
_o_fread
_o_free
_o_frexp
_o_fseek
_o_ftell
_o_isspace
_o_iswprint
_o_iswspace
_o_iswxdigit
_o_localeconv
_o_malloc
_o_qsort
_o_realloc
_o_setlocale
_o_strcat_s
_o_strcpy_s
_o_strncat_s
_o_strncpy_s
_o_terminate
_o_tolower
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
_o_wmemcpy_s
__uncaught_exception
_CxxThrowException
_o___stdio_common_vfprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___pctype_func
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__close
_o____mb_cur_max_func
_o____lc_locale_name_func
_o__cexit
_o__calloc_base
_o__callnewh
_o____lc_codepage_func
wcsrchr
strstr
wcsstr
wcschr
__C_specific_handler
__CxxFrameHandler3
_o__aligned_malloc
_o__aligned_free
strchr
memcpy
__unDName
strrchr
__unDNameEx
memcmp
memmove
_o___stdio_common_vswprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
api-ms-win-core-file-l1-1-0
SetFilePointerEx
FindClose
DeleteFileW
GetFileType
SetEndOfFile
CreateFileA
GetFileSize
CreateFileW
SetFileAttributesW
RemoveDirectoryW
GetFinalPathNameByHandleW
GetFileAttributesA
FindNextFileW
SetFileTime
FindFirstFileW
CreateDirectoryW
GetFileSizeEx
WriteFile
ReadFile
SetFilePointer
CreateDirectoryA
GetFileAttributesW
GetFullPathNameW
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
SetLastError
RaiseException
SetErrorMode
GetLastError
UnhandledExceptionFilter
api-ms-win-core-synch-l1-1-0
InitializeCriticalSection
OpenProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
InitializeSRWLock
ReleaseSRWLockShared
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
AcquireSRWLockShared
api-ms-win-core-misc-l1-1-0
Sleep
LocalAlloc
LocalFree
FormatMessageW
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
api-ms-win-core-processthreads-l1-1-0
TlsSetValue
GetCurrentProcess
TlsFree
TerminateProcess
TlsAlloc
GetCurrentProcessId
TlsGetValue
GetCurrentThread
OpenThreadToken
GetCurrentThreadId
api-ms-win-core-heap-l1-1-0
HeapFree
GetProcessHeap
HeapReAlloc
HeapAlloc
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
GetVersionExW
GetVersionExA
GetSystemTime
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
SystemTimeToFileTime
api-ms-win-core-libraryloader-l1-1-0
GetProcAddress
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
GetModuleHandleExW
api-ms-win-core-processenvironment-l1-1-0
ExpandEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableA
api-ms-win-security-base-l1-1-0
GetFileSecurityW
AccessCheck
RevertToSelf
ImpersonateSelf
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
api-ms-win-core-memory-l1-1-0
ReadProcessMemory
MapViewOfFile
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
VirtualAlloc
VirtualQuery
VirtualProtect
VirtualFree
api-ms-win-core-debug-l1-1-0
OutputDebugStringA
OutputDebugStringW
IsDebuggerPresent
DebugBreak
api-ms-win-core-localregistry-l1-1-0
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
api-ms-win-core-rtlsupport-l1-1-0
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-localization-l1-1-0
LCMapStringEx
LCMapStringW
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
ntdll
RtlUTF8ToUnicodeN
RtlRunOnceExecuteOnce
api-ms-win-downlevel-kernel32-l2-1-0
CreateFileMappingA
api-ms-win-core-io-l1-1-0
DeviceIoControl
api-ms-win-core-threadpool-l1-1-0
CloseThreadpoolWork
WaitForThreadpoolWorkCallbacks
SubmitThreadpoolWork
CreateThreadpoolWork
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetSymLoadError
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MiniDumpReadDumpStream
MiniDumpWriteDump
RangeMapAddPeImageSections
RangeMapCreate
RangeMapFree
RangeMapRead
RangeMapRemove
RangeMapWrite
RemoveInvalidModuleList
ReportSymbolLoadSummary
SearchTreeForFile
SearchTreeForFileW
SetCheckUserInterruptShared
SetSymLoadError
StackWalk
StackWalk64
StackWalkEx
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymAddrIncludeInlineTrace
SymAllocDiaString
SymCleanup
SymCompareInlineTrace
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsEx
SymEnumSymbolsExW
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFreeDiaString
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromInlineContext
SymFromInlineContextW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymFunctionTableAccess64AccessRoutines
SymGetDiaSession
SymGetDiaSource
SymGetExtendedOption
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrEx
SymGetLineFromAddrW64
SymGetLineFromInlineContext
SymGetLineFromInlineContextW
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameEx
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextEx
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevEx
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileChecksum
SymGetSourceFileChecksumW
SymGetSourceFileFromToken
SymGetSourceFileFromTokenByTokenName
SymGetSourceFileFromTokenByTokenNameW
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenByTokenName
SymGetSourceFileTokenByTokenNameW
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymQueryInlineTrace
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymRegisterGetSourcePathPartCallback
SymRegisterSourceFileUrlListCallback
SymSearch
SymSearchW
SymSetContext
SymSetDiaSession
SymSetExtendedOption
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetScopeFromInlineContext
SymSetSearchPath
SymSetSearchPathW
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
WinDbgExtensionDllInit
_EFN_DumpImage
block
chksym
dbghelp
dh
fptr
homedir
inlinedbg
itoldyouso
lmi
lminfo
omap
optdbgdump
optdbgdumpaddr
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
364KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
76KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
4KB
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.mrdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=29395,
count=61, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1264, id=1, productName=Unmarked objects,
count=19, id=260, version=29395,
count=4, id=259, version=29395,
count=1, id=256, version=29395,
count=104, id=264, version=29395,
count=2, id=253, version=29395,
count=93, id=261, version=29395,
count=1, id=255, version=29395,
count=1, id=258, version=29395,
Vulcan1.5 BETA/win64/old/dbghelp.dll
- IMPHASH 1070d0a734a349d697cec96febe8448f
- SHA256 21c398a2292f04652795c7d4ee7890bb62ac7039e58ac04ece91ff05ee0801ee
- MD5 893ec728b6fa9d7277963847bd408f4f
- SHA1 99d461999f631457b38df82d849d81b8fad946aa
- SHA512 44d6b3073e2363e0cf8a8aec7384a5a386d2a8eb21716640569a2eb00ad5dd75d1b6d159aa59cea9e60d5b4305573f206a85e54b40d2160d2d2416d2882b6a76
- SSDEEP 24576:8p8iMrylctFcscX1ZxgCf0a+hGxSUwqK6Zq3OUkcgp0OT:C8UzHXT0a+hGxSUs3OUVy1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
68:87:e2:48:69:c7:7c:2e:c6:a9:c0:b9:fc:ce:a2:ee:7d:25:4f:ba:15:68:4c:d7:09:17:df:2c:d2:bd:00:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 3, 2024
PE Signature issue
Digest
bd:f5:ff:62:11:dc:7f:f9:cc:14:b8:b8:6f:f4:51:08:f7:ff:de:8a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 4, 2012 - Dec 4, 2013
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 24, 2013 - Apr 24, 2014
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 30, 2012 - Nov 30, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
3
Major OS version
6
Entry point
611924
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
dbghelp.pdb
msvcrt
_lseeki64
_write
_isatty
__pioinfo
__badioinfo
_read
ferror
wctomb
_itoa
_snprintf
_iob
__mb_cur_max
mbtowc
_fileno
isleadbyte
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
memset
memcpy
_ismbblead
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
memmove
__CxxFrameHandler
_errno
iswspace
calloc
_wcsdup
towlower
tolower
_wcslwr
_wctime
time
_ltoa
_strnicmp
_purecall
ctime
malloc
strncmp
isspace
_stricmp
_strlwr
_vsnwprintf
iswprint
fprintf
fflush
atol
fclose
iswdigit
__unDName
bsearch
memcmp
strchr
fread
fseek
_wfsopen
wcstoul
_wfullpath
_time64
_chsize
_close
_get_osfhandle
_open_osfhandle
ftell
_mbscmp
_memicmp
_wgetenv
wcsrchr
strstr
free
realloc
qsort
iswxdigit
wcsncmp
wcschr
_wcsnicmp
_wcsicmp
wcsstr
_wsopen
strcmp
wcscmp
kernel32
SetFileAttributesW
__chkstk
LCMapStringW
LocalFree
CopyFileExW
GetVersion
LoadLibraryExA
GetModuleHandleW
GetFileType
DeviceIoControl
InitializeCriticalSectionAndSpinCount
MapViewOfFileEx
FlushViewOfFile
MoveFileW
HeapCreate
HeapDestroy
VirtualQueryEx
GetThreadTimes
GetThreadPriority
GetPriorityClass
GetThreadContext
ResumeThread
SuspendThread
CreateFileMappingA
IsProcessorFeaturePresent
GetSystemInfo
LoadLibraryA
lstrcmpiW
GetCurrentThreadId
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReadProcessMemory
LoadLibraryW
GetSystemDirectoryW
GetFileAttributesA
SetErrorMode
GetVersionExW
OutputDebugStringW
OutputDebugStringA
WriteFile
VirtualFree
OpenProcess
GetCurrentProcessId
GetModuleHandleA
MapViewOfFile
LocalAlloc
RaiseException
FormatMessageW
SetLastError
FindFirstFileW
FindClose
FindNextFileW
GetDriveTypeW
EnterCriticalSection
LeaveCriticalSection
GetLastError
DeleteCriticalSection
ExitThread
GetTickCount
CloseHandle
InitializeCriticalSection
CreateThread
WaitForSingleObject
GetExitCodeThread
DeleteFileW
RemoveDirectoryW
CreateFileA
GetFileSize
ReadFile
TlsGetValue
TlsSetValue
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsAlloc
TlsFree
GetVersionExA
GetTempPathW
GetProcessHeap
HeapReAlloc
HeapAlloc
HeapFree
IsDBCSLeadByte
Sleep
GetEnvironmentVariableW
SetEnvironmentVariableA
GetModuleFileNameW
CreateFileW
CopyFileW
CreateDirectoryW
CreateFileMappingW
SetFilePointer
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameW
GetFileAttributesW
CreateDirectoryA
VirtualAlloc
VirtualProtect
DuplicateHandle
GetCurrentProcess
UnmapViewOfFile
DelayLoadFailureHook
advapi32
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetSymLoadError
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MiniDumpReadDumpStream
MiniDumpWriteDump
RangeMapAddPeImageSections
RangeMapCreate
RangeMapFree
RangeMapRead
RangeMapRemove
RangeMapWrite
RemoveInvalidModuleList
ReportSymbolLoadSummary
SearchTreeForFile
SearchTreeForFileW
SetCheckUserInterruptShared
SetSymLoadError
StackWalk
StackWalk64
StackWalkEx
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymAddrIncludeInlineTrace
SymCleanup
SymCompareInlineTrace
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsEx
SymEnumSymbolsExW
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromInlineContext
SymFromInlineContextW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymFunctionTableAccess64AccessRoutines
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrW64
SymGetLineFromInlineContext
SymGetLineFromInlineContextW
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileFromToken
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymQueryInlineTrace
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSearch
SymSearchW
SymSetContext
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetScopeFromInlineContext
SymSetSearchPath
SymSetSearchPathW
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
WinDbgExtensionDllInit
block
chksym
dbghelp
dh
fptr
homedir
inlinedbg
itoldyouso
lmi
lminfo
omap
optdbgdump
optdbgdumpaddr
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=53, id=207, version=65500,
count=1, id=206, version=65500,
count=265, id=1, productName=Unmarked objects,
count=7, id=203, version=65501,
count=21, id=207, version=65501,
count=63, id=206, version=65501,
count=1, id=205, version=65501,
count=1, id=202, version=65501,
count=52, id=211, version=65501,
count=1, id=126, version=50727,
count=1, id=201, version=65501,
count=1, id=204, version=65501,
Vulcan1.5 BETA/win64/old/symsrv.dll
- IMPHASH 9e212ffe0679a2b77355884e27f8770c
- SHA256 62e6e7efba96592e2e13af4c7f3ec7aaa0750f10e63984c26c7f26e11a0e528e
- MD5 896ab17393ec4956d4dfded6a769bbbc
- SHA1 4d32d29ff4c90c1607b4210875cbb8f91f3a4de8
- SHA512 96a10f0f3253f39e6424f80b0331984c1b1c380768ae67cfec96d7a1a8b862d25482aa5032ca826ee475a8d81bb8fa0f40876240c1edc2545417c75b2668455b
- SSDEEP 3072:UUfirZpKkcwzutOkwCVQHSt6S6g7OZ9LI+G:2rjcOutJboq6S65q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
17:16:5a:7f:4e:7a:38:4c:53:a9:04:b6:29:44:95:c1:12:7c:0a:c0:ae:e2:33:bc:71:e1:e4:8a:12:21:50:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 3, 2024
PE Signature issue
Digest
15:c1:af:8a:58:5a:d0:36:44:c3:55:7d:9c:d1:ca:34:ca:13:e4:cb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 25, 2014
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:00:59:d6:73:cd:51:8e:f0:22:c5:00:00:00:00:00:59
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 23, 2014 - Aug 23, 2015
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 22, 2014 - Jul 22, 2015
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:7b:a2:81:0b:87:11:ab:e7:fc:00:00:00:00:00:7b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2014 - Jan 1, 2016
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
3
Major OS version
6
Entry point
88160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
symsrv.pdb
msvcrt
ferror
wctomb
_itoa
_snprintf
_iob
__mb_cur_max
mbtowc
_fileno
isleadbyte
memset
memcpy
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
__badioinfo
__pioinfo
_errno
_isatty
_write
_lseeki64
_vsnwprintf
malloc
free
_wtoi64
_wcslwr
strrchr
fclose
wcsrchr
fgetws
_wfopen
_stricmp
??2@YAPEAX_K@Z
getenv
iswspace
??3@YAXPEAX@Z
wcsstr
tolower
isspace
towlower
_wcsnicmp
_wcsicmp
wcschr
wcscmp
kernel32
FreeLibrary
LoadLibraryExA
VirtualQuery
RaiseException
GetSystemInfo
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
OutputDebugStringA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VirtualProtect
Sleep
SetErrorMode
GetDriveTypeW
GlobalFree
ReleaseMutex
OpenMutexW
LoadLibraryW
GetSystemDirectoryW
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetModuleFileNameW
LocalFileTimeToFileTime
ExpandEnvironmentStringsW
DeleteFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
SetFileTime
SetFilePointer
CreateFileA
DosDateTimeToFileTime
FileTimeToDosDateTime
DeleteCriticalSection
InitializeCriticalSection
CreateThread
GetSystemTime
CopyFileW
LeaveCriticalSection
GetFileAttributesW
GetLastError
SetLastError
EnterCriticalSection
GetEnvironmentVariableW
GetCurrentProcess
CreateDirectoryW
OutputDebugStringW
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
WriteFile
WideCharToMultiByte
FormatMessageW
GetVersionExW
LocalReAlloc
CreateFileW
MultiByteToWideChar
GetProcAddress
LocalAlloc
RemoveDirectoryW
CloseHandle
DebugBreak
LocalFree
DeleteFileW
GetFileSize
CopyFileExW
SetWaitableTimer
WaitForSingleObject
ReadFile
MoveFileW
CreateWaitableTimerW
GetFileTime
LoadLibraryA
advapi32
GetTokenInformation
EqualSid
AllocateAndInitializeSid
FreeSid
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
shlwapi
PathIsUNCServerW
PathFindNextComponentW
PathIsUNCW
ws2_32
WSAStartup
FreeAddrInfoW
GetAddrInfoW
WSACleanup
EulaDlgProc
RunDllEntry
SymbolServer
SymbolServerByIndex
SymbolServerByIndexW
SymbolServerClose
SymbolServerDeltaName
SymbolServerDeltaNameW
SymbolServerGetIndexString
SymbolServerGetIndexStringW
SymbolServerGetOptions
SymbolServerGetSupplement
SymbolServerGetSupplementW
SymbolServerGetVersion
SymbolServerIsStore
SymbolServerIsStoreW
SymbolServerPing
SymbolServerPingW
SymbolServerPingWEx
SymbolServerSetOptions
SymbolServerSetOptionsW
SymbolServerStoreFile
SymbolServerStoreFileW
SymbolServerStoreSupplement
SymbolServerStoreSupplementW
SymbolServerW
SymbolServerWEx
httpCloseHandle
httpOpenFileHandle
httpOpenFileHandleW
httpQueryDataAvailable
httpReadFile
Name
.text
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=205, version=65501,
count=60, id=206, version=65501,
count=15, id=207, version=65501,
count=253, id=1, productName=Unmarked objects,
count=13, id=203, version=65501,
count=1, id=202, version=65501,
count=18, id=211, version=65501,
count=1, id=126, version=50727,
count=1, id=201, version=65501,
count=1, id=204, version=65501,
Vulcan1.5 BETA/win64/sqlite3.dll
- IMPHASH 6cc72dfd29b7bcfb61ec75e3082dfc41
- SHA256 60c16c2fab14b344b8343778dcd6bbfdee3dfe5f83d1ac8d2e50c6877419eee4
- MD5 c11138204609ea63a3e88b4c8c09b035
- SHA1 b0829124f7e275b0f341c6af0fdd3dd5f65667a4
- SHA512 28d9e92498433c1f6ec41893fc17db76d6cb7a1c565461eb6e67eebc2b924dd4aa65486c29874caa9ac5c78f804a8799c7ce1c641dd9f080bf1bf94b58ca208c
- SSDEEP 12288:aHnKY5WcmiyfogSknJbjhrbXBbrxaLsBDJbVQAjXwcasznMbDz43X6dmM:aqY5Wcmi4FJbXdsLsBNRQAjgH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
936256
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\MinGW\msys\1.0\home\drh\sqlite\sqlite\sqlite3.pdb
kernel32
GetVersionExA
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetProcAddress
GetLastError
GetTempPathW
FlushFileBuffers
MultiByteToWideChar
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
GetVersionExW
FormatMessageW
Sleep
LoadLibraryW
WideCharToMultiByte
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
WaitForSingleObjectEx
LockFile
UnlockFile
WaitForSingleObject
HeapFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapAlloc
FreeLibrary
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
HeapCompact
CreateMutexW
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetCurrentProcessId
DeleteFileW
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
CreateThread
ExitThread
LoadLibraryExW
GetCommandLineA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetModuleHandleW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
GetTimeZoneInformation
SetLastError
GetCurrentThread
RtlUnwindEx
GetFileType
InitializeCriticalSectionAndSpinCount
InitOnceExecuteOnce
GetModuleFileNameA
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
FatalAppExitA
SetConsoleCtrlHandler
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetLocaleInfoEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
WriteConsoleW
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_data_directory
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_strglob
sqlite3_stricmp
sqlite3_strnicmp
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_config
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_set_directory
sqlite3_win32_sleep
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_write_debug
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
167KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=126, id=1, productName=Unmarked objects,
count=3, id=185, version=30716,
count=30, id=207, version=50628,
count=110, id=206, version=50628,
count=9, id=205, version=50628,
count=1, id=206, productName=VS2012 build 50727, version=50727,
count=1, id=202, productName=VS2012 build 50727, version=50727,
count=1, id=201, productName=VS2012 build 50727, version=50727,
count=1, id=204, productName=VS2012 build 50727, version=50727,
Vulcan1.5 BETA/win64/symsrv.dll
- IMPHASH 05f149f096a6c7f86365ddf52ede142f
- SHA256 f118fd9d6ba4c36db3556d1035efe90e99c00bf879a22abebe1dadfdbb3074d7
- MD5 1473a9ccb67526d4010f1b0f9e6b2977
- SHA1 7fe8c168e976200cf1562b8e8991245226b16b9a
- SHA512 3f459a8c9536b615bbd3b8bfec9970f432cc72bd3287937f9f915fcbe9b2a13fcb4c45946a1722018f89db505b418957bd513bd32a64580484d4ac7d3896a551
- SSDEEP 6144:yT/zGgy2HzkCwmkfCl00EiwtHgadXIezwnzx7I91DR9J2:y3GL2HzkCwmkfClHbghpINzZmBRa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
65:32:07:62:84:03:4f:2f:ad:93:2c:09:a2:4d:fd:81:85:44:fc:0c:25:d0:bf:8d:f8:8e:d7:c8:1f:b4:38:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 3, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
173728
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
symsrv.pdb
msvcrt
_stricmp
_wtoi64
getenv
swprintf_s
_unlock
__dllonexit
vswprintf_s
_wcslwr
tolower
_wsplitpath_s
_onexit
__CxxFrameHandler3
?terminate@@YAXXZ
_wcslwr_s
_wmakepath_s
iswspace
wcsrchr
fgetws
_wcsdup
??1type_info@@UEAA@XZ
_wfopen
??_V@YAXPEAX@Z
__C_specific_handler
wcsncpy_s
memmove
wcschr
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
memcmp
memcpy
_CxxThrowException
strcat_s
??0exception@@QEAA@XZ
memset
fclose
??1exception@@UEAA@XZ
_purecall
??3@YAXPEAX@Z
free
wcsstr
_lock
_initterm
calloc
_amsg_exit
_wcsicmp
_XcptFilter
strpbrk
strstr
realloc
iswprint
_vsnwprintf_s
isspace
memcpy_s
towlower
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
strrchr
_callnewh
wcsnlen
malloc
_wcsupr
wcsncmp
_vsnwprintf
strnlen
wcscpy_s
_wcsnicmp
wcscat_s
??0exception@@QEAA@AEBQEBD@Z
swscanf_s
_errno
strcpy_s
wcscmp
api-ms-win-core-libraryloader-l1-1-0
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
GetModuleHandleW
LoadLibraryExA
FreeLibrary
api-ms-win-core-heap-l1-1-0
HeapAlloc
GetProcessHeap
HeapFree
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetExitCodeThread
GetCurrentProcessId
CreateThread
TerminateProcess
GetCurrentProcess
OpenProcessToken
api-ms-win-core-misc-l1-1-0
LocalAlloc
LocalReAlloc
GlobalFree
LocalFree
FormatMessageW
Sleep
api-ms-win-core-debug-l1-1-0
DebugBreak
IsDebuggerPresent
OutputDebugStringW
api-ms-win-security-base-l1-1-0
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
api-ms-win-core-file-l1-1-0
GetFileAttributesExW
WriteFile
GetFileTime
GetDriveTypeW
SetFilePointerEx
CreateFileW
CreateDirectoryW
DeleteFileW
GetFileAttributesW
GetFinalPathNameByHandleW
GetFullPathNameW
GetFileSizeEx
ReadFile
GetFileSize
FileTimeToLocalFileTime
DeleteFileA
CreateFileA
LocalFileTimeToFileTime
GetFileInformationByHandle
SetFilePointer
SetFileTime
RemoveDirectoryW
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RaiseException
SetLastError
SetErrorMode
api-ms-win-core-processenvironment-l1-1-0
GetEnvironmentVariableW
ExpandEnvironmentStringsW
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
GetVersionExW
GetTickCount64
GetSystemTimeAsFileTime
GetTickCount
GetSystemDirectoryW
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
WideCharToMultiByte
api-ms-win-core-synch-l1-1-0
ReleaseSRWLockShared
SetWaitableTimer
EnterCriticalSection
AcquireSRWLockShared
InitializeCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
OpenMutexW
SetEvent
WaitForSingleObject
InitializeSRWLock
DeleteCriticalSection
CreateEventW
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreExW
TryAcquireSRWLockExclusive
LeaveCriticalSection
api-ms-win-core-handle-l1-1-0
CloseHandle
rpcrt4
UuidCreate
api-ms-win-core-localregistry-l1-1-0
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ws2_32
GetAddrInfoW
WSACleanup
FreeAddrInfoW
WSAStartup
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-rtlsupport-l1-1-0
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
oleaut32
SysFreeString
shlwapi
PathFindFileNameW
kernel32
CancelSynchronousIo
WaitForMultipleObjects
ntdll
RtlRunOnceExecuteOnce
RtlUTF8ToUnicodeN
crypt32
CryptStringToBinaryW
CryptBinaryToStringW
bcrypt
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
api-ms-win-core-threadpool-l1-1-0
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CloseThreadpoolTimer
SetThreadpoolTimer
EulaDlgProc
RunDllEntry
SymbolServer
SymbolServerByIndex
SymbolServerByIndexAndChecksumsW
SymbolServerByIndexW
SymbolServerClose
SymbolServerDeltaName
SymbolServerDeltaNameW
SymbolServerGetIndexString
SymbolServerGetIndexStringW
SymbolServerGetOptionData
SymbolServerGetOptions
SymbolServerGetSupplement
SymbolServerGetSupplementW
SymbolServerGetVersion
SymbolServerIsStore
SymbolServerIsStoreW
SymbolServerPing
SymbolServerPingW
SymbolServerPingWEx
SymbolServerSetHttpAuthHeader
SymbolServerSetOptions
SymbolServerSetOptionsW
SymbolServerStoreFile
SymbolServerStoreFileW
SymbolServerStoreSupplement
SymbolServerStoreSupplementW
SymbolServerW
SymbolServerWEx
SymbolServerWithChecksumsW
httpCloseHandle
httpOpenFileHandle
httpOpenFileHandleW
httpQueryDataAvailable
httpReadFile
Name
.text
Size
176KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
4KB
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.mrdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=48, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=29395,
count=16, id=260, version=29395,
count=291, id=1, productName=Unmarked objects,
count=9, id=257, version=29395,
count=12, id=261, version=29395,
count=1, id=256, version=29395,
count=61, id=264, version=29395,
count=1, id=255, version=29395,
count=1, id=258, version=29395,
Vulcan1.5 BETA/win64/symsrv.yes
- SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- MD5 7215ee9c7d9dc229d2921a40e899ec5f
- SHA1 b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA512 f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
- MD5 SHA1 SHA512