recoded_um.rar
- SHA256 6343966e725c5afd9016379afd882dc284f643b696926f004ea8a8ee2e11d97a
Overview
overview
3Static
static
3recoded_um.rar
windows7-x64
3recoded_um.rar
windows10-2004-x64
3Build/Inte...ed.log
windows7-x64
1Build/Inte...ed.log
windows10-2004-x64
1Build/Inte...1.tlog
windows7-x64
3Build/Inte...1.tlog
windows10-2004-x64
3Build/Inte...1.tlog
windows7-x64
3Build/Inte...1.tlog
windows10-2004-x64
3Build/Inte...1.tlog
windows7-x64
3Build/Inte...1.tlog
windows10-2004-x64
3Build/Inte...s.tlog
windows7-x64
3Build/Inte...s.tlog
windows10-2004-x64
3Build/Inte...dstate
windows7-x64
3Build/Inte...dstate
windows10-2004-x64
3Build/Inte...1.tlog
windows7-x64
3Build/Inte...1.tlog
windows10-2004-x64
3Build/Inte...1.tlog
windows7-x64
3Build/Inte...1.tlog
windows10-2004-x64
3Build/Inte...1.tlog
windows7-x64
3Build/Inte...1.tlog
windows10-2004-x64
3Build/Inte...de.log
windows7-x64
1Build/Inte...de.log
windows10-2004-x64
1Build/Inte...64.obj
windows7-x64
3Build/Inte...64.obj
windows10-2004-x64
3Build/Inte...ui.obj
windows7-x64
3Build/Inte...ui.obj
windows10-2004-x64
3Build/Inte...aw.obj
windows7-x64
3Build/Inte...aw.obj
windows10-2004-x64
3Build/Inte...11.obj
windows7-x64
3Build/Inte...11.obj
windows10-2004-x64
3Build/Inte...32.obj
windows7-x64
3Build/Inte...32.obj
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
recoded_um.rar
Resource
win7-20240508-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
recoded_um.rar
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Build/Intermediate/Ethify Recoded.log
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Build/Intermediate/Ethify Recoded.log
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Build/Intermediate/Ethify Recoded.tlog/CL.command.1.tlog
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
Build/Intermediate/Ethify Recoded.tlog/CL.command.1.tlog
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
Build/Intermediate/Ethify Recoded.tlog/CL.read.1.tlog
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
Build/Intermediate/Ethify Recoded.tlog/CL.read.1.tlog
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
Build/Intermediate/Ethify Recoded.tlog/CL.write.1.tlog
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral10
Sample
Build/Intermediate/Ethify Recoded.tlog/CL.write.1.tlog
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Build/Intermediate/Ethify Recoded.tlog/Cl.items.tlog
Resource
win7-20240220-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral12
Sample
Build/Intermediate/Ethify Recoded.tlog/Cl.items.tlog
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
Build/Intermediate/Ethify Recoded.tlog/Ethify Recoded.lastbuildstate
Resource
win7-20240419-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral14
Sample
Build/Intermediate/Ethify Recoded.tlog/Ethify Recoded.lastbuildstate
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
Build/Intermediate/Ethify Recoded.tlog/link.command.1.tlog
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral16
Sample
Build/Intermediate/Ethify Recoded.tlog/link.command.1.tlog
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
Build/Intermediate/Ethify Recoded.tlog/link.read.1.tlog
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral18
Sample
Build/Intermediate/Ethify Recoded.tlog/link.read.1.tlog
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Build/Intermediate/Ethify Recoded.tlog/link.write.1.tlog
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral20
Sample
Build/Intermediate/Ethify Recoded.tlog/link.write.1.tlog
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
Build/Intermediate/Usermode.log
Resource
win7-20240419-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
Build/Intermediate/Usermode.log
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
Build/Intermediate/hde64.obj
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral24
Sample
Build/Intermediate/hde64.obj
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
Build/Intermediate/imgui.obj
Resource
win7-20231129-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral26
Sample
Build/Intermediate/imgui.obj
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
Build/Intermediate/imgui_draw.obj
Resource
win7-20240220-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral28
Sample
Build/Intermediate/imgui_draw.obj
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
Build/Intermediate/imgui_impl_dx11.obj
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral30
Sample
Build/Intermediate/imgui_impl_dx11.obj
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
Build/Intermediate/imgui_impl_win32.obj
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral32
Sample
Build/Intermediate/imgui_impl_win32.obj
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target recoded_um.rar
- Size 7.7MB
- Sample240608-llr51sbf45
- SHA256 6343966e725c5afd9016379afd882dc284f643b696926f004ea8a8ee2e11d97a
- MD5 819aa1992a9829dfc2cfeb5a218724a3
- SHA1 f4d2f47a2b74b20f2c8d516814e87b15728c371a
- SHA512 807ade3294cfa0ed837fba19abbac4d146b80e19244e47988fa0a6f6cfcf5ebc8e5a250cd57a2544bd1817f703002cf739a6dafb6c22723a1ff70bc46bc58987
- SSDEEP 196608:bUj4z64NFbWGQ3ZSgeXNFAA+RQy5S76btaowwAyvs+qfJ:bU0PFaH38fX7AA+fcYUtwdkJ
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Build/recode.exe
File Explorer
-
recoded_um.rar.rar 7.7MB
-
Build/Intermediate/Ethify Recoded.log5KB
-
Build/Intermediate/Ethify Recoded.tlog/CL.command.1.tlog16KB
-
Build/Intermediate/Ethify Recoded.tlog/CL.read.1.tlog241KB
-
Build/Intermediate/Ethify Recoded.tlog/CL.write.1.tlog6KB
-
Build/Intermediate/Ethify Recoded.tlog/Cl.items.tlog1KB
-
Build/Intermediate/Ethify Recoded.tlog/Ethify Recoded.lastbuildstate178B
-
Build/Intermediate/Ethify Recoded.tlog/link.command.1.tlog6KB
-
Build/Intermediate/Ethify Recoded.tlog/link.read.1.tlog8KB
-
Build/Intermediate/Ethify Recoded.tlog/link.write.1.tlog1KB
-
Build/Intermediate/Usermode.log984B
-
Build/Intermediate/hde64.obj11KB
-
Build/Intermediate/imgui.obj1.5MB
-
Build/Intermediate/imgui_draw.obj692KB
-
Build/Intermediate/imgui_impl_dx11.obj168KB
-
Build/Intermediate/imgui_impl_win32.obj87KB
-
Build/Intermediate/imgui_tables.obj308KB
-
Build/Intermediate/imgui_widgets.obj1.1MB
-
Build/Intermediate/main.obj1.5MB
-
Build/Intermediate/pe.obj66KB
-
Build/Intermediate/recode.Build.CppClean.log1KB
-
Build/Intermediate/recode.exe.recipe306B
-
Build/Intermediate/swind2.obj115KB
-
Build/Intermediate/vc143.pdb2.0MB
-
Build/imgui.ini1002B
-
Build/recode.exe.exe 858KB
-
Build/recode.pdb3.7MB
-
Ethify Recoded.sln1KB
-
Usermode/Ethify Recoded.vcxproj.xml 9KB
-
Usermode/Ethify Recoded.vcxproj.filters6KB
-
Usermode/Ethify Recoded.vcxproj.user168B
-
Usermode/ImGui/d3d11.lib13KB
-
Usermode/ImGui/imconfig.h9KB
-
Usermode/ImGui/imgui.cpp729KB
-
Usermode/ImGui/imgui.h304KB
-
Usermode/ImGui/imgui_draw.cpp210KB
-
Usermode/ImGui/imgui_impl_dx11.cpp28KB
-
Usermode/ImGui/imgui_impl_dx11.h1KB
-
Usermode/ImGui/imgui_impl_win32.cpp42KB
-
Usermode/ImGui/imgui_impl_win32.h3KB
-
Usermode/ImGui/imgui_internal.h235KB
-
Usermode/ImGui/imgui_tables.cpp215KB
-
Usermode/ImGui/imgui_widgets.cpp409KB
-
Usermode/ImGui/imstb_rectpack.h19KB
-
Usermode/ImGui/imstb_textedit.h53KB
-
Usermode/ImGui/imstb_truetype.h194KB
-
Usermode/SkCrypt.h2KB
-
Usermode/Usermode.vcxproj.xml 9KB
-
Usermode/Usermode.vcxproj.filters7KB
-
Usermode/Usermode.vcxproj.user168B
-
Usermode/aimbot.h1KB
-
Usermode/animation.h1KB
-
Usermode/auth.hpp2KB
-
Usermode/defs.h11KB
-
Usermode/driver.hpp3KB
-
Usermode/driver_1.h6KB
-
Usermode/fa_solid_900.h1.2MB
-
Usermode/font_awesome_5.h94KB
-
Usermode/fonts.h425KB
-
Usermode/functions.h5KB
-
Usermode/globals.h2KB
-
Usermode/grdv/binary/bytes.h157KB
-
Usermode/grdv/binary/dropper.h642B
-
Usermode/grdv/exploit/pe.cpp5KB
-
Usermode/grdv/exploit/swind2.cpp17KB
-
Usermode/grdv/global.h4KB
-
Usermode/grdv/hde/hde64.c9KB
-
Usermode/grdv/hde/hde64.h2KB
-
Usermode/grdv/hde/table64.h3KB
-
Usermode/grdv/resource.h733B
-
Usermode/grdv/utils/ntdll.h242KB
-
Usermode/icon.h96KB
-
Usermode/icons.h377KB
-
Usermode/image.h65KB
-
Usermode/imgui_notify.h10KB
-
Usermode/imports.h11KB
-
Usermode/includes.h986B
-
Usermode/json.hpp912KB
-
Usermode/keybind.h3KB
-
Usermode/lazy.h19KB
-
Usermode/libcurl.lib1.8MB
-
Usermode/library_x64.lib3.2MB
-
Usermode/loop.h31KB
-
Usermode/main.cpp3KB
-
Usermode/mouse.cpp2KB
-
Usermode/mouse.hpp687B
-
Usermode/offsets.h1KB
-
Usermode/other/fonts/burbank.hpp5.5MB
-
Usermode/other/fonts/font.h881KB
-
Usermode/other/fonts/iconcpp.h377KB
-
Usermode/other/fonts/icons.h96KB
-
Usermode/other/globals.hpp1KB
-
Usermode/other/hexarray.hpp11KB
-
Usermode/other/include.hpp678B
-
Usermode/other/lazyimporter.hpp25KB
-
Usermode/other/mouse/mouse.hpp2KB
-
Usermode/other/skcrypt.hpp2KB
-
Usermode/protect/SDK/keygen64.dll.dll 698KB
-
Usermode/protect/SDK/keygen64.h13KB
-
Usermode/protect/SDK/obsidium.h748B
-
Usermode/protect/SDK/obsidium64.a5KB
-
Usermode/protect/SDK/obsidium64.def1KB
-
Usermode/protect/SDK/obsidium64.dll.dll 324KB
-
Usermode/protect/SDK/obsidium64.h11KB
-
Usermode/protect/SDK/obsidiumlib.obj512B
-
Usermode/protect/blowfish/blowfish.cpp23KB
-
Usermode/protect/blowfish/blowfish.h4KB
-
Usermode/render.h34KB
-
Usermode/sdk.h5KB
-
Usermode/spoofer.h6KB
-
Usermode/ue.h13KB
-
Usermode/utils_1.h5KB
-
Usermode/xorst.h7KB
Build/Intermediate/Ethify Recoded.log
- SHA256 861ca9722ecd8f80bd3206b5f1a534d5e9880668052f3bc508aad65a12b3e0c2
- MD5 fdf4dccd99052f68ca71f02f38f709fa
- SHA1 ce4c81b4fe25c73544a7c4842a96aa7eaea91f52
- SHA512 6009535b1c5f9391fee7e5fa8defc1a396818185d8c616db7c70c1e35881cb50d4f9edfbfa9c28f5ff4ea65dc634c61eb0b194443cb671896363ad993a9834f5
- SSDEEP 96:mUgSMtWUgbMtLI4IcIzI1IaIjPaaKUBo7UxIgULIcIcIzI1IaIjPFKUn07URGIgJ:W/7rUB+U4jUnCURx54
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/Ethify Recoded.tlog/CL.command.1.tlog
- SHA256 248a59e4d6001501b306b8ae45637dc3f0f418b1bb822760cde462283ae06048
- MD5 d128edf9aea665fdc3c62a94300505f5
- SHA1 f5f23a5189d03ee1d4c2ad40e9128b686fbe4a7b
- SHA512 0b81cfb9a1e1635b3196bab08ae75f89745d8f25d8d6bf16d69279f11bb703f3154aa097c1ddb8c53163363eac79a525fe46016f59e5b69c5acf70266a97f8c1
- SSDEEP 96:T50cV50vj50550t50b50950U5035Bb50H50kV50Uw50Z50d50L50t50s50R50Q5V:Q
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/Ethify Recoded.tlog/CL.read.1.tlog
- SHA256 4e7784da77904f5ef667c807cb689c1b025ed8fb297b3406069c17512f11abe4
- MD5 9576a6b6159966e46e90dc5f02184189
- SHA1 058186bdcd7ce44548341546ca9656cbbef0e7b1
- SHA512 6f2952496af816cedcb50ba916957c07b0b721c7dc4e4bc007d37694f8ab600afd76fe73e92981ffee3510cdb78010b2fc765dcec0ce498d74cd9b48226b95d5
- SSDEEP 384:gt8LDRDgPCt8LDRDgPS6pvLDRDgPiYpvLDRDgPXpvLDRDgPqjHt8LDRDgPrjrtjg:e5Pk5PSwuPXuP5uPqjN5Prjra
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/Ethify Recoded.tlog/CL.write.1.tlog
- SHA256 7c7841ae185ea1f8e535d4ecf2549b2d0fd9ea3f61fe4e15c82c567dffd72150
- MD5 97822b6bdca69785048fd2afd5ec626c
- SHA1 b7a5fb72273801923bfa332d306f22f4930ef91c
- SHA512 dc19d95765fd2da5d6a84986ac5c1cf0b8bf6e5fdb070f8134800adf2687409aa4b48e4ab42dbad0144c2cf5f069af32d11f6f5de97494b2d103b1d1d6dc53ae
- SSDEEP 48:XSK/nQL+1vfrLxdLKLoJLL4LvLiLBLOLdhoL6X5L1KcL10L1rL1oL11L11sL18LP:fSUm
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/Ethify Recoded.tlog/Cl.items.tlog
- SHA256 3b7da3306fbd10bdd3d8e842b80119b2cffed2b58f86c11f743f24dcf70e2d20
- MD5 5bc5347b2c901d4a55ded4b413ba64f5
- SHA1 9dbc833ec556cde695f23a611bbed362f4dcf0f5
- SHA512 ab1ec79f43b4518d2b7cbb3cb6acf468eb54f47025b2489055f588bd0967c52d7e381ceb15b4f6b293c6786146e2c49769e650473e81e8676ca3f67a7198eb62
- MD5 SHA1 SHA512
Build/Intermediate/Ethify Recoded.tlog/Ethify Recoded.lastbuildstate
- SHA256 3ddda277d72397a1cc18f15e1b4d8d67e9976be24698422109eb77a7a55effd3
- MD5 ef6c38491735db77a448b7c275f1de4c
- SHA1 9a8a2af2496c597042e071796efb020432b157ba
- SHA512 f22da41055b2985f154e64fb555fdac8eac0cc00ababdc94711cd434af279354779b0609def25a0e3ff329ef3a52c2cdea4eb750a3fd5a1983109622a8be75c5
- MD5 SHA1 SHA512
Build/Intermediate/Ethify Recoded.tlog/link.command.1.tlog
- SHA256 e8d5601e1cf4c7c2df3b60d3454eaa1dcc3892f833b6a31db176defca505331b
- MD5 7b0bc60f1119c742dd673a2c0e1b169b
- SHA1 35a98a8350feaebc2c261e339b42ac7c57e0dca1
- SHA512 357c1ad599a9e82c4f97f52d668df88d726ffcf1c37fe12271307b763f5c8eb5cd6b0dc67bb7f7056a1431c211b9b05cb140a6bfc304a81f2ebbe3886fb2bc0d
- SSDEEP 96:0otMDGQsekzQDghZ3kfZLYhcVu7ZtTHzRDghZ3kfZLV:0otMDGQseOUMZ3IMhcVu7ZtTTlMZ3Ix
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/Ethify Recoded.tlog/link.read.1.tlog
- SHA256 bc5168f10f48e830c7fa4e76b723e9e9c390298c2cba40946280ebff0531005b
- MD5 93474828e1b64f807370d3108d6ceca9
- SHA1 93e890807f6f608cc3e789ff7e06fe5be929976a
- SHA512 06ae627bf519c8fccd47198fa5ad316f93047dc52d0e85596cd1e37bc01fc3fab7f0f03569fdcad176e2fd03bf08b5aa29d6e7ba36d914ffc1590e2b5da60983
- SSDEEP 96:9hcVu7ZtTHz0Zt1E8MdMwtAZl9tYdtPp/J7RrmtVIODrmry/n:9hcVu7ZtTTjpJyn
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/Ethify Recoded.tlog/link.write.1.tlog
- SHA256 587c0f525a30d1b30ef332e9de4f83c412765e6172c368beca08da967c3f4ea5
- MD5 b496d4808a6044da81e647224ea60d83
- SHA1 0d0ddf0c41897dd10f0b7655c79dd6d560edd68d
- SHA512 995aa83d3c77428bf5427e506f2f108001933c462b8846620522752be0883c3e75f4136b641f40d5606fa09fe104e1a2738c86dd478ea777be6fab418704b6d1
- MD5 SHA1 SHA512
Build/Intermediate/Usermode.log
- SHA256 63a80541578f304debb4cce685c0e37743c20581061a808013e3852e482fe3c6
- MD5 8fcd07614703ed6b1d39426b0e8eebec
- SHA1 a87685b107a8c5ebf2f228cf91bf46c4c128b7fb
- SHA512 756e3693e4199f19bbf3cdce09a437f492f94f50ce1826e04f27d4cd6fc67ee422bd4e34eb164654985b878a3c18ae36b06c878df5511354e92f53e3a4456467
- MD5 SHA1 SHA512
Build/Intermediate/hde64.obj
- SHA256 e3578f93e920411e610f86cc9415c995abd92761ef60414126d4256cd9a003ff
- MD5 1ddd1cf709de4a95d3c7c2470a6debfb
- SHA1 ee84c845dd44814302599f3fdf2f4f3fc7f5d98f
- SHA512 a6b7b24314318fd62a3836268e135303f4a534d11bdff0494a669cc3cbfe6209a609163b06b28d517ffef471ae277e811c4b4dcd0ff9550b956181c709f28c3f
- SSDEEP 192:BV0BV+ycWA4bbTMXxBRQGGWn7mcF+fJNy6KSFk5dAKaryfL7tAGGq/PSd:BV0BoycIWJGY7mcYRNy6KSmoNmL7zF/S
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/imgui.obj
- SHA256 768ee9cdd4fae8ef80246847a0e4c84324234cecf81a5bd589a4ee242b7d2752
- MD5 253130be71bce009a048f1063af87fba
- SHA1 65a767a80dbfdfeb8351b6800fca8c6ac4c035b2
- SHA512 721cd5d9800bd7d56a65598f12c612501beb428b9b497a75809b813cd4c75d0a099f3060e1d99a4f8132615d10950abec828c33b20674f535446593707cf5202
- SSDEEP 24576:vO6qhZnTZK72aIdCVCt+1Si68r523laaGBv9trdObP1YTK/Fov++vi:AN6ez6BW
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/imgui_draw.obj
- SHA256 cc4f21e7ad44a8eead48920fd5bfa1705d85980e3532eeebfcd1ea6497b92a90
- MD5 aa805cd56ae65b7b6e98980000e7e96e
- SHA1 4517d6589168ae50c0bcacd368c5a45a31b22dee
- SHA512 f3d6a3ea5748c2712a382b95b9489716d255ea545acb76777ff2b54c1905de8fab831c564565497b37d6657fbd71ebd7dc057054466c9eb4f485bfe7fec329d0
- SSDEEP 6144:+GyNraBmLKKp3KbuQMEMw3wIc4sRdlkiVvXCPCL5TZSGNuuOtrmITSTRihO5vaRc:TMraBmLKKp6blpw54e+FPCFYuBSC/Iu
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/imgui_impl_dx11.obj
- SHA256 b6ceb3720333b36e9b4b7eb6f4a31f61b3ef835b45cbf7813c408dd79a74967d
- MD5 429cc2a8e004ed6c01e3387ab35906e6
- SHA1 d2516149b33e3135817bd6fc90804af9ecc3170c
- SHA512 790a38f77fd9aa2c3a056f76d556168f4054e7fa26086ce5c877ac0bbfd45830ef1652ad23010ea5df9802591ad8b155122693519766e548ad82fc21bc0c1216
- SSDEEP 1536:wGKlzUqCeTXm8ByO84f9QIb/YUF+WB9hakyH2pSC4KATD8BujFBJi2:wG/qCe7ByOLfAUIWB9GWpSC4KATD889
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/imgui_impl_win32.obj
- SHA256 74421d4be413dadda71779141902004794d843d5f4007d97f99da6b806a40eeb
- MD5 1453c2e686730324663f383b49fd9b45
- SHA1 51c346dd8a391ba59bc6a44626bab238e9b3722f
- SHA512 a4230b927665814d51c19ef84f57196b40590a1c5ba31ac3de9ed606ed0c52dcafc95ebb90dd977556cfa8b72b345bc122bc55087a73a006a26ab55c392c500b
- SSDEEP 1536:Ywq1QY9E0EeKGhD7vBF17AluEwI85wnoF1RnqEX6ALchjHGM:rqhq0EeKZOfEZ
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/imgui_tables.obj
- SHA256 be6fa9b38f178574c72e36b4452b1531f170ca1b8582715455393c0743fe0acb
- MD5 59d55c729cd23601748210ce0240acb1
- SHA1 cab989c92315ad536ae4b893af1fdd117faa234c
- SHA512 222614daa58037ae997fb887866640b8b4e7d58b87ea29db30a43182f31000f3db95d8adcf430c298e326a6cf07c9751d908c640fefd264c87321d015dda0116
- SSDEEP 6144:dXZ4HJJrOaKNPy8D6wTlONVTCrzszxuAEb:dXZ4HvrOaKRa5CrzUNE
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/imgui_widgets.obj
- SHA256 258f940c443c03b339be04901cc762019c436fd3cc2b30ce05ddc1b990c896af
- MD5 ba8b8f554f906d7b44a48b6e1cac5662
- SHA1 dfbbe84b1d2526eb3333a390bce014b3bb8a2101
- SHA512 ff0491a71382d45d94c4c1b20da61018b54b20c782f0664b20670903706174ac6a18891f0331b174710ad2adf79bbece4f8f780b229ea5177ba7de6c8305a319
- SSDEEP 12288:yCadU5CGOgHlsi2q8P9HlEofhkaB0X05kXlL+NpHZZlq1/pCfPirXhyduhU:yCaC5CGOgHlsuoJk4ZZlSpCfS6uhU
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/main.obj
- SHA256 be62a6ef9efae0415087ebad154fa23b8b7b641596feb36654a2c303f0275bed
- MD5 0acfcf9d01fa03656122153c091690e6
- SHA1 73f60c63999c797f7ac1d3296ab8a4e0dacbda87
- SHA512 0d1466ab93bf6338e9e4cbff6cafde2b0a436685cbc883a7cb19c34c25131187d08aa3fdde894cffc51c064eaa60b396f566513c1d26613e06d13bd321d2534b
- SSDEEP 24576:6B5QHABF3lSjGOy8JC1tGzWecaEEhWrj1i2APAeGo2wNRVifcbLaX1sULuGKFGRV:+5iABF3lSjBUkXli3jGvCuPTxsf
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/pe.obj
- SHA256 82683c631df806156b599f54b52ee2c64c6196b11fc5949c4247d8974ac61f6a
- MD5 44b050d3bf8534a8636b0482ab7fb2e5
- SHA1 bf40d189cec2ebf40a0d47397d9a6c18f72c95e9
- SHA512 7189199d843112452446cda173e1732426c90359fec43405d4f7ed342bedf236d489a88f5f1aee4c9d9c50c275487d7009243eeb81563ee1abdf18a9fabd54ab
- SSDEEP 768:h1fkSK1vnoFuo/3FM+3D4ca/re1DpwBXHECuX0Y+3Q5IkLRZRP2+KMj2qjZWmHYV:hdkUqm0Y+3Q5IGv1KMj2qjZB4Tse
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/recode.Build.CppClean.log
- SHA256 9d73bc28d3541302514fb52b29cde40f180683fe5fd294f43745130f42182eda
- MD5 17bce23cec87fc62abc68522bf823b76
- SHA1 5655b6b66d7ac72a7b4531f5dbd32dd5ac0bf2b9
- SHA512 e74bbac74ecc011c5fdd6db7dde20082d95a02790c65c61bd5c0de9853e36cf0ee0158007b23cc1ffe690f3c09cce537611b49dcc463292a835881552dc1bf7a
- MD5 SHA1 SHA512
Build/Intermediate/recode.exe.recipe
- SHA256 b8b34a7f38a7a671ffec6c1f3f6f344f1bd7734134b2bdeee07b9d53b7273818
- MD5 4370dd82cfa59b03af9141ceb041fcf5
- SHA1 b5b8cb3624bf57b3e28085c4d220f4aa58c30eda
- SHA512 c6850af1b5d864a328d47ca71f2868686d263a474158ab022368642c2740426f71e4d5fc59afe56ade7f2fa307958c06d6640d1b2f63e9f03efafd565341f337
- MD5 SHA1 SHA512
Build/Intermediate/swind2.obj
- SHA256 34017f338df69db9cb36c3779d8771572b1884095ff7b268fa1f53f9d215688d
- MD5 86e9df031c58bd5afab6890ec088f8a2
- SHA1 6a59f5ec908aaac5b29a3cd6f3a13e6889f09aff
- SHA512 057d3e946adefea15c38c85fdceb8279da48f215bf384226e4101699144213bf5cd611b53ce33c83bb2f789c4d082f566688fa58c336b0878d87ecabd03333d8
- SSDEEP 1536:FsgQ6dc+mBFxu3macFK/2+T+LZWMjfecWl2VGFWNO5KjM/YZbqXaACySaaTR2iBK:Fsg7evFxvHI/0ZWMjpLRbRNPg
- MD5 SHA1 SHA512 SSDEEP
Build/Intermediate/vc143.pdb
- SHA256 35f4b195a4442537156267c01decc5ffb2b7428feece5a7bd1a60b0b7d1cdfb2
- MD5 c817603503445c78f126116d531a0d44
- SHA1 595db8d6d13a82cd3fbb93fe83cd7238203c1e10
- SHA512 9fbc6e71098c28bb3cde7bd0acccee5f579fadf640511981dc43d422fda188d7f235c189900fb5df3ff793ebdba256a6dd28451c0931e22362f80eb4c9941735
- SSDEEP 49152:AKK4EgYTXsEzd9c1u0KQ44EJ/kIzBYHZBuJT38IEwn:Se6
- MD5 SHA1 SHA512 SSDEEP
Build/imgui.ini
- SHA256 81d5f59fd47340a04c0a67c96f2f5a05d7a6bbd99427b99b2b5ea81cc7abdb91
- MD5 294a5420dd9ae3016c7687ccac0da920
- SHA1 8f21c2638a51744efec66a63ef5095be0a2ba5c9
- SHA512 c525e1e477fc52015c69743dc07ccfe754d39c4957e8a54d433cc00fb1dd2a1730e8c00699e9f79c055013fd8ffd9cb49c863bb9f7f5bdd2471f7565961efcb1
- MD5 SHA1 SHA512
Build/recode.exe
- IMPHASH fbeca4817700d3c4dd300acf208dd486
- SHA256 32d61459f6f3dc674e9c74377f46f223cf173c7624f87ce1acc9ed1e105b9270
- MD5 b13e0388706b69a0a24b7230d60f55b2
- SHA1 795e7e8e3da3637f0525cd8fb508407edf714798
- SHA512 6d103bef5eec13eb3c4b1acff7daf1750f8a2b26250f362d8d8d83eaa9bffb40089c34eda29ec34e051339215c405bdc78b86f69ef9de5f9bdd1a9adb4fddbd1
- SSDEEP 12288:E6SBqXu3Jn3cDiV0V+6n9UxCj2AqeMQm96TnSEl1yt6zzng0LK8dym2jO+Aem8w1:vSIu5n3cDO0V+6n9uGKFGRKqX1sU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
358152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\dvl\Downloads\recoded_um_1\recoded um\Build\recode.pdb
d3d11
D3D11CreateDeviceAndSwapChain
dwmapi
DwmExtendFrameIntoClientArea
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
kernel32
UnhandledExceptionFilter
SleepConditionVariableSRW
SetUnhandledExceptionFilter
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentProcess
TerminateProcess
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
WakeAllConditionVariable
Process32Next
Process32First
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetProcAddress
LoadLibraryA
CreateFileW
CloseHandle
DeviceIoControl
CreateThread
lstrcmpiA
CreateToolhelp32Snapshot
user32
LoadCursorA
DispatchMessageA
DestroyWindow
GetAsyncKeyState
ScreenToClient
GetSystemMetrics
MessageBoxA
GetWindowLongA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
GetForegroundWindow
GetKeyState
mouse_event
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_sleep
_Thrd_detach
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?_Xlength_error@std@@YAXPEBD@Z
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
d3dcompiler_47
D3DCompile
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
wcsstr
memset
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memcmp
memmove
memcpy
memchr
__std_terminate
strstr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
__p__commode
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
__stdio_common_vsprintf
fwrite
ftell
fseek
fread
fflush
fclose
_wfopen
__stdio_common_vfprintf
_set_fmode
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
_set_new_mode
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
cos
cosf
powf
log
ceilf
acosf
sinf
asin
sqrtf
atan2
logf
pow
sin
tanf
__setusermatherr
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_get_initial_narrow_environment
_initterm
__p___argv
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_beginthreadex
__p___argc
_exit
exit
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
terminate
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
354KB
Virtual Size
354KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
380KB
Virtual Size
379KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
107KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=32, id=261, version=33030,
count=10, id=260, version=33030,
count=6, id=259, version=33030,
count=6, id=257, version=33030,
count=17, id=257, version=30795,
count=212, id=1, productName=Unmarked objects,
count=1, id=260, version=33130,
count=9, id=261, version=33130,
count=1, id=255, version=33130,
count=1, id=258, version=33130,
Build/recode.pdb
- SHA256 2b317842e94f1da00c146fedc47d655189cf3b51223d2266d6fd539bce6c8596
- MD5 8c01d101026c0146abae3ba3ad8d357c
- SHA1 21457573e7efb2d73cb05f943d36d8e5b7d9cefa
- SHA512 b056bb7459048b446c4c32bc296dd3b9bf1743c4a5394bf25fefaa8767230c7dbb77ae22aafd6f9d19aea92b8e5c3b54213dc06317189d43c42d05611c9b7148
- SSDEEP 49152:WFeZSiBFE7JiBPn5DJ1MCij+RrAp05mQQEzEWY5OoFA8O4CET0vXaGEeukGWocJO:saqp05mQyaPBE7
- MD5 SHA1 SHA512 SSDEEP
Ethify Recoded.sln
- SHA256 9094d55efc6f220874176bc88d8557c04569bd28a5b22786d32ec65a56c49735
- MD5 0ca0294b788076fe43b08f2f18531f3c
- SHA1 28d4d43561adf7171bb167725e3ef813676edc03
- SHA512 2c62f45d0f57ed1cec79ec7b6554dbc4fc3f856b99e0d1a8daf64f03d6faeb9ee625a29e9f2cfc20171080ccbbad8cdb87c69b5699da7703d4b71a5634e0541d
- MD5 SHA1 SHA512
Usermode/Ethify Recoded.vcxproj
- SHA256 735dab2928557eed8a738cfda9eecbebc140b3f0b99cb1b9a81faaa51a0fe0c9
- MD5 5ad72bae180040d88039d2c2d873f1b9
- SHA1 aeb4e6a8ce122782be9fba832a05b661f2d797a1
- SHA512 224a7fff1b83bf2a8f4664d20d86c45150dd18c0683284ae48ad7ac86df17b977dcef1fe34398cee1c5a98b565a3c705e85257f1804ed295b7136d2291086a57
- SSDEEP 192:e/zc/PAs4NFKip/YPce/JPct/gPcG/xPc0Vr4Cc:G4nKf/cD/dg/k//lnVr4Cc
- MD5 SHA1 SHA512 SSDEEP
Usermode/Ethify Recoded.vcxproj.filters
- SHA256 1b1bce4907e30abea1effe52fcc12ea6613751934e70eec84187619a1ee0eded
- MD5 6f78d9fc9411a2184fc06727bad69d2f
- SHA1 3bddf6d9dda212c1bf462c4a8f4f96de0561f412
- SHA512 1bb0c09b94facc5e964e842b10f3915c950b2c3be7de95deef3e68b364e65da58a36728627bc384e7e29f2ccc3e425d8569b6e7db946e9e353fe824bcfecb36c
- SSDEEP 48:3QlRxB7lum+D168UQQHkt9ipDPDpR34b4WRlO1S7zQNjYbMVUIE1WsmQlRn:As363HhpfpR3ERlIazQNUyUJWszlRn
- MD5 SHA1 SHA512 SSDEEP
Usermode/Ethify Recoded.vcxproj.user
- SHA256 c06a75b13f855a94d46616796e024c52b499f8f92cf00ccb571ddbc6ff574676
- MD5 244d056f5e959be6d9a2f7e94686f1c8
- SHA1 3ba38385380485d9ff25eb142eca0a01d8ce2fab
- SHA512 8d5c4c9e54c85c90224f7610fef69d9c7e8d0db6be369181ebed13e2be9c86b651a438f1978f99c3ef432a8cb6bc5b8df26c476e7e5b32511d0d31cd49b55f20
- MD5 SHA1 SHA512
Usermode/ImGui/d3d11.lib
- SHA256 497890503f98f0f164745cde7d9cd5137b8a09d7c1cda4cda01403c5bc61b9eb
- MD5 f969d7ad705df271ba5f3119ecb97489
- SHA1 162800730fa693f9e4bc54ed850695149ccf0172
- SHA512 f9ff6ed80fb5f5cb1322fa42c8038922f1a253ded0418f6f43e10f167ab103cd8e141a9c47f010a929108cf55c6bc395bb5ee3af295070f76155a1729ca647b9
- SSDEEP 384:T84U+2WCxGPYQzBbXk82UxxKX2NRfepfLjw20x9XSbCbmaoLyF4jQs7TIrINqk:T84U+2WCaYQzBb082UHKX2NRfepffw2n
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imconfig.h
- SHA256 8d887055ad9b411a677d7c873f693a511522eb9473353f563b597db9142398c9
- MD5 d590791d81fc7b2d931b13eb5cf9a4d4
- SHA1 62a02f9da9f089159edb0fe0f41394a23ddde5c9
- SHA512 8454f0221d0be19680b423addf13f7677edcc38701c6b9dce294b6c8247dc07275c6252ea5c4fc924f4318fce7268bb5f5e321983af7c243301eb69c16d86795
- SSDEEP 192:9fgoLWD2IgdiisJzqCcQKPbwFH1LcD0aUjn5mYU+xhQft+a:9fyD6UVqCcQKTwFH1LcD0aCn5VUuQftv
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui.cpp
- SHA256 6115fc1e2fb5eaab778839c5e1e7e1e0f8d27807652bd842d50250cee6807cf4
- MD5 27c1be9180521d120ab7ce3e1c32248f
- SHA1 7991eeac3d03bf3adff005e1be05d01dfabcb8d2
- SHA512 de0427308481ff5ff20bbc6ace178306527e2f189e5a2d56a8f459836814999980c7e1e5fe2c52ea2d2e3d5e70bbfde5ed6a3bdfcd0a0c1c77aeb2bda78dd259
- SSDEEP 6144:MFZLq5HR/L67R96e16IgDy+zR5O5w9kmcyvaU/N3359qadC4AhYrG3g2r0pbYQrB:MCHRzu16HDFeYC85mT699/ZUCCn7y
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui.h
- SHA256 99ace691e4e6447474d18b14b47c0e53ec873a85abcc47422ca570fca0e01d3e
- MD5 fb40cb577bcf5b06d3377328401f2642
- SHA1 b5dac0a0fa427da2719d536bd916bab6f4805654
- SHA512 50d3eb3bf2856933f7103f4fc3f4f904d7033ab0bae8fd6c077f254b4184e6ebb077d0c818771223aacb55d92ad4104605aa909616cba6dfc4d9d1c5f82f1968
- SSDEEP 6144:dlSaY1gMgDAoFERmTZAdjR03rNcquxVQK3u0Mtffk:dzMlQTZA5R03raXPo0M6
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui_draw.cpp
- SHA256 c7a2c9b72a89e3e31599200f3afb396231b7907a5b1d0a75d47f6d1198cfbe20
- MD5 e56537e6f521bb24fd6295ee5bd98c57
- SHA1 0165dfb8c7e6a360611625cb567b2eb24cc656d4
- SHA512 d3663447b63c09df7bbbbde14674934dcc761d9af176b93b577da9d00b4c86dcfddde984827c56c78ce73a07db64a76183a4ec00d4cb664dea184cd866809f6b
- SSDEEP 3072:dZ7m1XrxQyCUiK9kvUxf45Yq9X3w8QywCmI2b:dZ7mnCUevUBjq2ye
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui_impl_dx11.cpp
- SHA256 f6b06153167a57c4beb0881e41dd11d2b4f7335e6ddb05310a8a162837286b24
- MD5 ebd6bd9db153cf8f86b453d846e790bb
- SHA1 2dadd389168035e31918d9860caae2bb9ee2601d
- SHA512 c4d63a0995e23f5135a1947accae34f228198060801f9ea031a74ef30c907d42f6b19e63dbfe3f4896c7b026483bd0b419653e4289a77404b3aa3126a17f224f
- SSDEEP 384:Uc8EM3euC4FHeSbcH1wj6LAahvSFn40RDlumyiPnfFn73gwLmRTPyBz9EsWHsQl7:jM671wj6L3u41i97WPyBz+sWHsQKOEM
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui_impl_dx11.h
- SHA256 de2b5eebd2e4d14b4db418dc71319d729c826ea8e1b13b76d38f6d9823fbbc2c
- MD5 c9f500b9371c4d5f9e1c52a28e74a9c8
- SHA1 734cef934e6beaa9fcd2b12e8acece96376786d4
- SHA512 cc3df9df8a0a2d614e0c4f9eca8612b876d77aa49a14d27992601274d81b7a744dc9687398cba4b3dc4ed249a67cf825ddb7c358e7939a835f2bc6a74d79707f
- MD5 SHA1 SHA512
Usermode/ImGui/imgui_impl_win32.cpp
- SHA256 fa948957ae0eb42d1bf19494fea9c37a751f792e98dc5d5ab67bbfc33a5791b0
- MD5 f8751645b217b3a1a1b151d5ac832a81
- SHA1 30eb9a9d228f6f2d001e5f21c828a0ae9d902bf7
- SHA512 e4783d22e0faeb15c720b33edcf39b4a619d396b3b288783da122db3aa21f648765607c83be29fd7fda51fd5068d546d504bbfa6713763d405bd1fb999799ead
- SSDEEP 768:ztJMXufrBQiy/mHQ3RKNIDCRb9/NJ2WNMdfNq6mjnzz++/ZHcpCefl67i:RFNkzUJQJNmdcd
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui_impl_win32.h
- SHA256 3ecd38a93b1577ed8123ab17b8e4bd79bdf72a9eaf81ae266c778efe78f314f5
- MD5 3cfedd26dc2da348651c215d8d15d585
- SHA1 cea87cf57518f795f729f0ba4ff03012e0eaf825
- SHA512 a5d9f69a26c5547ca53c891127155e2d58be2b96fca1f2e315c55ae846ae576ff6132268c316b418b9e2f4cc16761aecbf4c54769b97416a4843524759ea2cec
- MD5 SHA1 SHA512
Usermode/ImGui/imgui_internal.h
- SHA256 c784353532c6e84a63a8ece7b4ada065f3ef062acd4d614472e8d5b39f57e08c
- MD5 9d1084763d3d473a984fcd3021dafe97
- SHA1 54138ceabb801df82c6c5e8fc55341706b2901bc
- SHA512 de4c7438711a0a9173c18904379eb6260f1cdd67b036191b0eb5cd8563d743daedda5007df32975b186d0014def49c08a3218b799ff6bb47f8e0b9f1d5d66409
- SSDEEP 3072:98t8vOC94QY+fZBQKPXR7Vjoe37AJvRT+r:98KYgblPX5u1JvE
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui_tables.cpp
- SHA256 bad97e0cad20eded56894545b78282aab0e67a721122b49e91eb81fe08191e49
- MD5 b6828830e5bfc5af824eac90266f4d4f
- SHA1 44459e960b94405d127e9c20d6665a515aecac09
- SHA512 2470cf1375d17af24bae2d46db65c7b6ac6d5308b3277df487956dd6ffcfbd8c6e5aaab365a781f757b6c5451ae9f68fa4a8df8d4c40fa0b46bcba2c906fbc27
- SSDEEP 6144:xQxMwGz54rJY1rQm+eFfodGmavEXW3wRluwpN7A1fV8:xQx3GNsY1rgClmcEXW3wRluwpN7ABV8
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imgui_widgets.cpp
- SHA256 64a37cf845a324250e7a8fcfe7aabd4012fef9c5be72acbc6923a7ed7d567697
- MD5 3264fd5516a523317d4a5b6223dfc04a
- SHA1 95e19644361cd7503e9d8a2cf7fc9b31b6585d26
- SHA512 4125cc72d673d7badb65a225bcb29d5d7bbd530b5ff0ad235932f525d21dcb36669f938d8f4159757f05f4bdbb30d31d71b6addcd99595a60a3cb869173c5a67
- SSDEEP 6144:ak2xY3n9Y5ILCbL1LGULLp+Qf1cjMP2M+mcR5x5UEs86w:ak2xY3n9Y5ILCRp4MP2M+LR5x5UEs8L
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imstb_rectpack.h
- SHA256 2efa3d5f7d003c19743b15155dad9f46d9f9fc783a18893d703b431d3c990972
- MD5 b1de604efbfb907f986a2751375a400b
- SHA1 25bb050e65a76af30b529aff6f394a024de67033
- SHA512 35d7b7c0d28fb982d9ee7aec6d75487b4a34b4a4f27534146953750cf9066d968622dacf00c2d08ab63150c896fee38d97aa064be60726a1a7c100c0afbbaf6d
- SSDEEP 384:VEko6kzUPyJm8Ss6RaQ6wNOHxR4ZGHFre1Frebs06Y4LG:VNwzUPyc8Ss6RaQ0xRVFre1FrebWYgG
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imstb_textedit.h
- SHA256 3f4cf71a2b771d938f62ce4225df3ebe429b334fcdb3b89f1fedf43eeb0a3e1e
- MD5 7c9f512cfe1f4df596efcfbbae1ee313
- SHA1 8bc62ea4e400c8bfa36a691fd08bf1e8af0ca53a
- SHA512 fdfa26e80ac1de66bb2c3e755be3c36f9997f635b5e07518957f540ecc5f7b1acfff81cbaee85bf288c50769e12ecd5c41ca63ea51162a5b6662a32b362a1549
- SSDEEP 768:ET3O9VOxj8ZJd6oSg+jkFmUfXWGn3MMl8cR8OsaLn5IM6MLLUYgG:Ifr7uvLUYgG
- MD5 SHA1 SHA512 SSDEEP
Usermode/ImGui/imstb_truetype.h
- SHA256 5b7693f174b0458c7bec5522c8d6be4fe606d3f5da5082351959c14e59269b53
- MD5 ea2c837b0aafe5581b247bf88f55a4f6
- SHA1 32762a4296ece1f1b7bd5d2c851a4cf46651ea11
- SHA512 4ab5185f9e614f201fcde8e85b7231c6bd09e662c1ece8d70db42cd009df0c18f3aff73febbfc863db2b3687e2cda3f19d0cd5b8e9045322fa72c1f2316416e0
- SSDEEP 1536:vBtAza9vAMrerPM1QyAmzxtm7i37qMag+8vo7gZDaXT82ANopyjBGzAN0YgG:vBUa9vAMyrPM1HzxI7gvow2ANopU
- MD5 SHA1 SHA512 SSDEEP
Usermode/SkCrypt.h
- SHA256 e13c10f6489fe8f0624d5e18d8d34dbf50c2f275bbaba259a0c6bb664d196dfb
- MD5 4ce6d3cb782e085a7fcd1c09a869d181
- SHA1 a91467a053f0dc09b1277151f5112356622ca282
- SHA512 b1e8e62266664bd5827bafe74eeb617056c315956b464769916bb84f97ffaa9ae0e916ce81e9ccccc35d5f9c86f4df8293eb120884829697fde0887cae2bb4b4
- MD5 SHA1 SHA512
Usermode/Usermode.vcxproj
- SHA256 cdbf76520252e9041d67462568e12891348ae600f6527e29f3f989d3ca3b9e74
- MD5 4aeae881dafd9251488d6bf547428d08
- SHA1 490660c6067c878de598dd582e3e5c8b6ced74d1
- SHA512 70c280a759ea195ab4d550d44c0afb51e3a55faec96a03ad1f1cf78c47cf88ed310e3d822809555b6237c024d4ecae271c13cc3b9eadc02f69df9e20e8d5be25
- SSDEEP 192:e/zc/PAs4NFKip/YPce/JPct/gPcG/xPc0criCG:G4nKf/cD/dg/k//lncriCG
- MD5 SHA1 SHA512 SSDEEP
Usermode/Usermode.vcxproj.filters
- SHA256 da34df018774c022652c19177006844163e064dc2f846cfdd511776e9f21bccf
- MD5 21e2ae1eda9152f1223d751fc8ff1c45
- SHA1 d6ba5f0e72f582e1842b9cd749cbf3a7b96cdac8
- SHA512 1da41e801bd4e44ad484a4c1ab022ead0bba34a0be44e417b5f4ab1bffa1a04dfd3afe8c8e2bea3f1a1c8a11ce2bd115ae4fe679f73bd92bfb05df51d132b4a7
- SSDEEP 48:3QlRxB7lum+D168UQQHkt9ipDPDpR34j7g4WRlO1S7zQNjYbMVUIE1WspQlRjJd:As363HhpfpR327GRlIazQNUyUJWselRj
- MD5 SHA1 SHA512 SSDEEP
Usermode/Usermode.vcxproj.user
- SHA256 c06a75b13f855a94d46616796e024c52b499f8f92cf00ccb571ddbc6ff574676
- MD5 244d056f5e959be6d9a2f7e94686f1c8
- SHA1 3ba38385380485d9ff25eb142eca0a01d8ce2fab
- SHA512 8d5c4c9e54c85c90224f7610fef69d9c7e8d0db6be369181ebed13e2be9c86b651a438f1978f99c3ef432a8cb6bc5b8df26c476e7e5b32511d0d31cd49b55f20
- MD5 SHA1 SHA512
Usermode/aimbot.h
- SHA256 af4703f69d99a726453377ed5265adb91b90b6747cb207aa00e2bc6ef2f4df8e
- MD5 79e83b25f45432895c232979c5e7e23a
- SHA1 3bb55a535e3c073f3c1cf5c9091cf11fe6061449
- SHA512 1d1d3e5819e092cfca671c1d1b36684ef28e3f471f62d572e51c8420495dced23623dc609b89a9d34c85b37ecc925d1e225eb55f5acd11bf8def90fadf3e0cb5
- MD5 SHA1 SHA512
Usermode/animation.h
- SHA256 8c0e57632e87e929c3c6b64f8a70ca4fafd307923815b5208d03e9f6e31badb9
- MD5 4ff9aa0093856484149c5d22b96348a8
- SHA1 44658509e31e98cd32caf924f4adff539b5cfb2f
- SHA512 4e6d6c04473c9d5e4bd9c44f7d067df2bf862fac6ca00add4a1fa6cea77426b5200796911f8e70ae6b308261e944f4f362d1ec40cfef4e11cef5183a8c820b0a
- MD5 SHA1 SHA512
Usermode/auth.hpp
- SHA256 460e42e880d3c6e1872bee93fd97ba93de7113f762c400b8777f0ba2825785bf
- MD5 87b41ce8558fdccccec963cf660b24a5
- SHA1 74aa5a7bd75fbebf0efd218378411e7a243766de
- SHA512 c115e228a3fa057d60628e9f8bfaf359f88999fafe48d00c8e793b490ca0be5d96078809a4c0f2fd210a170739f465fac640011f0b91aa84c94fdb816b531716
- MD5 SHA1 SHA512
Usermode/defs.h
- SHA256 cd69c28645e50771c116effefbd3a00e46d91c4ccbe3ebb986e097496804c707
- MD5 6dc197dcdd2d41a4794d479a980f8e9a
- SHA1 cb8058470fea76b57e14802ee7c842c5639f11ca
- SHA512 16d747e64c80dbf2fb2f0cfd8cd72ba926bfc925b9cc1153067e194000456906874e58401d88667e590d999878fd4a96b0ff3f42c28f58f75aed65182fa698d7
- SSDEEP 192:4B8j/5Y3M8pPUx5ODcSccHvO1PrayJCCqK+fP1QempCnhFaFrwr:U8j/5Y3M8pfcSccG1xqVfP1QemonhUCr
- MD5 SHA1 SHA512 SSDEEP
Usermode/driver.hpp
- SHA256 f5908eee433c1a3f53aec050916f5ee4c5b750574c6010bd25a841552a141c89
- MD5 94cf1d79a00662e96633bdbc939aa69a
- SHA1 dd4cf7e44fa7d665f0682807c25cbe5bf6a4affb
- SHA512 fd8f2441d17f6c70353bad4d9a3257b1b27d5ee6899f544b08a37f710e34e7cb30d24e48bdc23b7625b23aa3c95ba5658d5d3c3696560d33aaa22f9ea38530dd
- MD5 SHA1 SHA512
Usermode/driver_1.h
- SHA256 6d8d9783ca0ee6d0d446a435e12b4897f7eb450f822b8f40f198ed7239c9b539
- MD5 a3d29e32328320363be811b385204ffd
- SHA1 98e7084eaeec1472734a757ef62c4a021b5d1d9d
- SHA512 8fa6d739b859de64ef4f4538b03827826e27c37bb2243a3dc6de68349c4313faf7b91bba44f9a4629e8b829a887de5c0c755ab8dec3b144b67859c409ca2c9d2
- SSDEEP 192:Il/8cS4sRv4v7ZCFhmx0ZDlxyNDM/1n8N:IlLwKsnZio/GN
- MD5 SHA1 SHA512 SSDEEP
Usermode/fa_solid_900.h
- SHA256 f030f2536f43a2eed79101269ebdcb1243f71c4a00a5d32ae1be0d0cc3e81f80
- MD5 6e8793dde33818f4b6c6769c2c8cf742
- SHA1 b7c579c0fe897118d0cb704e08e67d0700a0f9aa
- SHA512 57131df97b4e3a74cbb68d9bcac69cb7b2c350f4f48330088b2c96245b6ab8a24a1fae4bbbe543533b3c8bb305e5a687048dabaed9beee06c313db545c21517d
- SSDEEP 3072:kt27nMFmMkOM+A/7z8WlVgVEMrOb6yNrGPak3R12QbETIOWERquqJBnZfM2ELWnP:kteg3
- MD5 SHA1 SHA512 SSDEEP
Usermode/font_awesome_5.h
- SHA256 295fc48d33cc58106db80df81ffad46cd58b3cdd8b32c91d864f4d5098030936
- MD5 f2440c9ba6ebf19d38626c4b62c9f187
- SHA1 aa01a4ef87f4d436cf70d31475f70708c105f0ad
- SHA512 63aa449c10a4664f8bd7c0920ffed0e3b022648dc928b95bffbbd7e11ebbc3d6fb3c6ba33e83c7871f81e6a0869af256cbf561ac270f328d15210add5afcd2da
- SSDEEP 1536:adkxMOHwjNZPHvV+FmIA6txBDkdVpKu4Y9yHwC7sewmKWoDo:tHwjbPHvcIIA6txBDkdVpKu4Y9yHwC7X
- MD5 SHA1 SHA512 SSDEEP
Usermode/fonts.h
- SHA256 0819049a20cab16074f9917bdf5d41f183f548af58a330f2bd29313a35195fb3
- MD5 0510786ee9ba11663da89a60901ab94d
- SHA1 32de906c41e3bc0c2fd2f0d13c4a2061c538ea8c
- SHA512 d22f7c6687be837f748ede228c4f5416efd0f018630aa7b8ca0d8d83de7846bf4f0f9bc8bb49a3dd3c7d4ddad1093489123bb15ebf6592ebcbb8d2c9361b7d8d
- SSDEEP 1536:S8cI8LKLWV5K6+bSWuBAVv0R5Y+NodkAW7dB+TfJl/wbAx9CsA:ODBAVv0RO+NodPib+TfJl/wYCsA
- MD5 SHA1 SHA512 SSDEEP
Usermode/functions.h
- SHA256 be0f32a9aee5eb0c19709944bdd5a446c13388f389474e0400985448bbc5dca7
- MD5 828957f25fec7c9cea210ef6cf83c180
- SHA1 ad752ee602e9c6cef2161b4a23c2bf952d87d7c4
- SHA512 b680f5d0f8a3420e5013439a50e51cc2c445b131daa6b27c24ba3ed7f5aa416f9fdc6129e69fdc631e9bc33981c9e4bf89406ff3ca2e5f2c589ae3a4c1999d5b
- SSDEEP 96:qpQ2foYJwUQBlap48aevkzLTzrIzvFjnl01EGKO2O1YfW:qN/Qmai6L/szNjnNfW
- MD5 SHA1 SHA512 SSDEEP
Usermode/globals.h
- SHA256 1283a716aae004e8f70e7176cfa105f249c40e83bd2cab9e254f0aede3bc654d
- MD5 516639a515d3b3491a008ff0cabf0e30
- SHA1 be9ad2cc32760400dfae05840cfe72caf1e26e8a
- SHA512 2ee584df4f45b06035763859305d70ba21a213b9b7626c2eda493bd930ea68d1f33cfdf25044cbe412a0fca2d92758cbcb4f6f60c0adef70b78165580abd2af5
- MD5 SHA1 SHA512
Usermode/grdv/binary/bytes.h
- SHA256 910658daa3616e8128f83d1cc006eb9bb33ba4210640b1d93c6e6b1fb62e0ebb
- MD5 385244a9bbef5ea513b8a6f35dc9b81b
- SHA1 c2cbdd58c7fe6c4af7c664e214723e0becb3d9fd
- SHA512 ddbfa99f8e4c9305a0b4c019c8416693f5605546fde0417aa19a10166ee2f00abcee0c3d043e8ffdffa88bf43e6aa6ade369f58284f5bb664d9698c778259893
- SSDEEP 768:rMGtOcaPou8We7lou52lXb3b1coMambmvZb6y9tAGPqetyyhiGMWyiQmUEML462y:rkF8WKotjtyhGM9Eztl23awMc
- MD5 SHA1 SHA512 SSDEEP
Usermode/grdv/binary/dropper.h
- SHA256 5cbbde21462d3ee1e7cf5219ec24ba5085bf361ffa79dbb5f2b7ffae91fd0067
- MD5 02a3cf3ce957376a3f5388fec7711912
- SHA1 cc58beb1ced7bbc14cabac4daba4d3da633f866d
- SHA512 d54126679497263d57a82f8d57fc130d58b3223830e827550f045cc9fa14ba606da72f83599b42098dc7bf802c5fe16744b273619caeb65b4115b328d403d58b
- MD5 SHA1 SHA512
Usermode/grdv/exploit/pe.cpp
- SHA256 bd6c094898b3518a99d179142c5856556616f5c7ce64e8df844cb4e9baae9fdc
- MD5 f3b5407fa325ba4d72b31b96f2eb43c3
- SHA1 92586f26bd6b5a772ebd7eae1115fe6af9ffab5e
- SHA512 b64c769e5e4ad8862770d63a5e6db9cbb041de0bbac46be3ff5dbe02f596898be79f45cbfb5c874c91d2280cb589582586d88d888c5cc732515af2264328addd
- SSDEEP 96:TdOWLa1hjPH4wDWAiqHSy81TsPOW0iqDLaSoCNrQG5SlgTGGKLrrx7wLh:0lh9iL0OW0iqDr5SlD372
- MD5 SHA1 SHA512 SSDEEP
Usermode/grdv/exploit/swind2.cpp
- SHA256 db60e4796f67d73060c1db8bae746156d47eb3a577dca6edc62ebd7d947ab45c
- MD5 ca287ab848546e5faacee34a00da8f52
- SHA1 5bb6cde6c29109a2d6cf11e06fa52c9a787571e0
- SHA512 3f66d172502c29636e1d7895d3af13af2631f5e56dcccd3c67be357a26bed111bd02e133fb29d6a5a095e86eb7b719b95d029b3568e9b1588855a059925be2f7
- SSDEEP 384:zTtv/s6zFTSkQdYVKMEEqb0k6g6EOTU+Yl3:Nnz3GYVHi16gr
- MD5 SHA1 SHA512 SSDEEP
Usermode/grdv/global.h
- SHA256 8d767eeda2bb1ef7bf53bbd173a271f53a35f2fe1bfc643ee02d91a6b9ab6d5b
- MD5 7c6f66979b312403142b9d75c0e547c2
- SHA1 b82aff4727993f383b95755e15396bf0901a82c2
- SHA512 443d0b48202ba9f34b2245a8e67c31e2fb2a9d2276bd7a16344a7af2319e29618218d575056d5c90b25973ef925667c1f6d283889029ed223cc801f62ce3a38b
- SSDEEP 96:6GIrviax+E0yOgDD8sjQ8xq9RijiNxA3JhPnoPMJfSFSKMuUBkNDK80Y:Dw+ENnDD8uqHijiN6RoPMclNDK8T
- MD5 SHA1 SHA512 SSDEEP
Usermode/grdv/hde/hde64.c
- SHA256 795a99620c582de160e4a1df9c230a6730643f700d8d0d14fbe2f61086403670
- MD5 ebae73e5dc8879eff2fcf6afa0da345e
- SHA1 c1baa2233446cf8e27fc095e84c2672cf1cb30a1
- SHA512 148f634c6cc7e099c4259e5c9f42aaba3d337a89a0317c12faa1c7fbd4e7ea6571ea43afa9c634bb0bbe44d32ebb673c60462961600a8f3564685c4c6a6cd7f7
- SSDEEP 192:j4hgvAh9FC9ziMNAHNh8nIwhQtaZVou9UdEtmQJEUVmjTplgJrlF8o:kCvAhC9ziMNAHNh8nIwhQgZVou9U1m13
- MD5 SHA1 SHA512 SSDEEP
Usermode/grdv/hde/hde64.h
- SHA256 678f40c26bba1782ca1f434b25857d839e564ad47babce58ed9d7d3de41f2aae
- MD5 80231ef5e15d5de0c8c32b5bd0818df9
- SHA1 8969de5930fcd174b63b046151b378f63849acf6
- SHA512 18517c380267f6331f26caf5329fe74fa99f69c608190e0f06929da6bafa3cdd1fbe5c72b8c01ad3c7118db653e847a39c1c1503f1e7c07f726e3add174ec50b
- MD5 SHA1 SHA512
Usermode/grdv/hde/table64.h
- SHA256 0b6c69ad498e67907e0c574ab06123aee4ec30c99fa181099ea929a8d820bfc1
- MD5 154ad84a1c44ea554e024acc665f0ff1
- SHA1 80618f8c2482421fb5428dc61a9d79bf549336e7
- SHA512 3c58ac46434a1930ac87eb59c760382cecd9163947130ecc7310aa7a9bf302e99bf53fce01c9dcff45580ee3d49b67cb438bff811a121edf86a1c5c8f6409ba7
- MD5 SHA1 SHA512
Usermode/grdv/resource.h
- SHA256 1f4e8b0d4713c8f583d547d6368efba3098e825e832233ca58bf9f933fcbf31f
- MD5 b43aa4e688267dce757eacbfe554ad05
- SHA1 2434c5083543298f728e33d6efc56ba427e1b22b
- SHA512 2fdf3f222108d33f53c8f975d13d2764899f83bb0036ca0d06fc8629eced1491d8f61087dcb7d1f1ee803ec12f404c1c14aefbafd6e970b9c5a5af05dfa21fcf
- MD5 SHA1 SHA512
Usermode/grdv/utils/ntdll.h
- SHA256 076debc97281d63d5e7b87ce1842f459e02fa2c2c07c27759e5e57755c560cdd
- MD5 a07de3d816e883a1b893fe6daf2b8ded
- SHA1 bef489e1a49eb156182da3c3905f3171beb469a9
- SHA512 d93b00250e2fa2696560316064347e76486a27f2027f4cdbaba6f7843e51c59364c5e273f3560a47129378cd622a6f4b935fe2ed9c4100740b5f27fe705a5a62
- SSDEEP 3072:zb+xUEje7pUdvGeLremH4JQshHEmiGfUyz3NIthWeexrF9xjQGjWucL4h:ziUaGe3emHWky1
- MD5 SHA1 SHA512 SSDEEP
Usermode/icon.h
- SHA256 c9b620997513c3a72c6c30565885d01b7a7eda9d08cc036bf31c7fca9446d6b5
- MD5 049d51e8228a89459c02123b0df70db5
- SHA1 02550a60dc4a50fb4598e301a1be1929f092d425
- SHA512 6de1247853299c04a1357b4e7d53fa322a6197d47f56d374565cf96a21584213794c89476ffa6aa17fe9a1f7eb51ea29a0931a41e3ef24592008421666ceb465
- SSDEEP 3072:QCwPxPH+gdIW6thDDkdVpKu4Y9yHwC7sewmJWHZ:opPc3DDkdVpKu4Y9yHwC7sewmI5
- MD5 SHA1 SHA512 SSDEEP
Usermode/icons.h
- SHA256 63acc9fc6238fde0ac2cec23a803b56f916d5a10a92aecb72bc5755b76d5ad62
- MD5 7ce58dc526487264397223af271bc66e
- SHA1 54dc0010adff759f27b2979212352ec4a3998ca9
- SHA512 27a13e774b7ffc6a1b94abc921933d4789c756ef8c44a37c9903c05e71769e885c6b2b4d0ce3575a425afeb4a176d274fab34f734b7e8ea6faf87492645a3c49
- SSDEEP 6144:Ut9yWOuh6ANiYwui9s889i3WAt/jbO8X5lMYqRLf84ELemRK1GhE8YzHxpOBDEpv:C9bvdwuiCvivFbnJGBlmUVRmg8kJY3xU
- MD5 SHA1 SHA512 SSDEEP
Usermode/image.h
- SHA256 3495b572c793e4f8659562cd5eb987e1ee2bedb9b37f869f4454a9af6cbaee14
- MD5 3e609cca5380e634e8d5fbf47ea2b997
- SHA1 72b15a0a49bfe0cb4f8a6fefbf166ba280357045
- SHA512 61b9b630d5df4559cfcef7592008e663746e92f5d323f2d49665c6ab70f13f7c29a2991400e143eefe1781f1479a98c0860a66adda4d05e9e0f52127c896896e
- SSDEEP 768:1Rlll/lBBy97HzBF3R3rHQKqk3o4CHBK3UqIsobnf19JbZjJ:0R7wUJ4bd9R
- MD5 SHA1 SHA512 SSDEEP
Usermode/imgui_notify.h
- SHA256 9aee86a59d2b6774b6bfccf219c56b9080152193cff81bba91fbaf7331ce81f3
- MD5 294b2d6457778198e4c98e2547507b83
- SHA1 c3e3d8807c69b028876199fef859ddf6166281ee
- SHA512 28ea1c3796102160b047bdf38b65ec75f6df0412b296300c8da453d548d21e50a7e132515ba68682cf9e26575f534df3addc797f477d2d688eed645e8967211c
- SSDEEP 192:vQ07ppnIUAW77LKo796d4y8rW0z0SJKpJaa+4kiwqzukvF1wkE:vQsjnIUtHGoodX8C0z0SJMJaa+VivquO
- MD5 SHA1 SHA512 SSDEEP
Usermode/imports.h
- SHA256 2dca2e070327492e6ca03391d45a37d3604c9c34fa6d70c01e2f430c708faf4b
- MD5 541d8db4614c090561b7f280016a746e
- SHA1 11fc98070a13ae0db966c0b4602a5106f74a3745
- SHA512 62934987d054d3f64fca4d5a7a0af0b81bf2dc35f4a00f37321c4a2e9ded9b44720f7faae53b3086ce438b3acd70a5daada148b829aa1a87bf592a12ac08f08e
- SSDEEP 192:wEIBTlC3IaKEjfjKz+tR9aieqBE8Rx+GollXFrvQyJbHp881NwyjlHZbtBh/3aa5:wEIBk4a/jfjKsRAiBBrRx+VllhvQyJTX
- MD5 SHA1 SHA512 SSDEEP
Usermode/includes.h
- SHA256 78e6ff87c6e903ca13440a49f13195ea21701f692b69d29389b6e4dca357d96c
- MD5 45321ad5249a4a71347ad0185ae9024b
- SHA1 c8cff15a738b36ca432dcb08e87ea9a1357278b4
- SHA512 fb87e99ae1b9f97cc0c069f6d76ca2459209c65229ab588a74f1696ed2f6ecd93cf2e44a649000b3924677d5793c4cdf3ae0f6e5832eff8900450d04e86e5d14
- MD5 SHA1 SHA512
Usermode/json.hpp
- SHA256 880847f356556c7d209b83586623da16a2162a1c7f67a4678de032badccf457c
- MD5 de7b0e989abac2f94433f5d4f50d3b28
- SHA1 61c5dccfbf1d6aa498df2f8ae822c01553363e77
- SHA512 41320995e503999ff9a6c3cf9b10996928d9be09c87c3ee93d421e6f1ea0967db2a04db654fdc3b0fe405abeebc25b3631cd3a736f09956f68828fbdeedf2c90
- SSDEEP 24576:FXsIhURgu8pVzfvelEvK/KPAapFJMFAe4Vvlzsvg9zHB2P2VQm/7U6sg:FXsIhURgu8pVzOlEvK/KPAapFKFAe4V9
- MD5 SHA1 SHA512 SSDEEP
Usermode/keybind.h
- SHA256 9c44b6c20f2cddcd61ee6866d7f513a273ad53df597a0c3182fdf0855708788c
- MD5 fcfb9e9513104ea4a9c31e01a30d1c3d
- SHA1 bcadc5b5fd0082d4907ab242288f9cad1af2c10e
- SHA512 4a7beabd7b83e9dd5265bf3fabc0cc089e7983bb628ed2cc6e66e0c3fc437ab0c31308f1613a3f3da45f4a3207284fab6954f7db9868fed01a7c0fe4cf7b40f8
- MD5 SHA1 SHA512
Usermode/lazy.h
- SHA256 6c3fd3fb1f16d6a364765dce3f7dd3c669551646082b30850a0ae9769a1d5a07
- MD5 89747e4631360f805507370add93240b
- SHA1 1040cb632a7a319e2acb1495fbeecf7779a92f3d
- SHA512 0dd0f0432a243519e012855a98b2f31df98253308d783e8bd82daf5f456621f0b2c16024723d8827539b740c9db231a09f14dfe89722a8df7945b13c146d6d06
- SSDEEP 192:tMfGkb8ANKb8A5j/H1VBm75vD6hQ75KTD697LMOJ3nZ431j1rfGDpnNgUXSj5siG:Tk8dJkMKrkvf+lO7wKZtNAE8UF4px
- MD5 SHA1 SHA512 SSDEEP
Usermode/libcurl.lib
- SHA256 171b9e0163f62bc1060c9f0b1b2b255150b79d86a92383b5cded6d4b242bf319
- MD5 734cfc45c4e8f596a008379853051e87
- SHA1 07c1b631ae39caee646c14cb14a18c8b03c8eb60
- SHA512 51ba7ab841779c75c42c8c846ce2bd3320bbf44141108b6d15bc06af8fbefebcde7fd6edf94b395747b49baa23cc51160a9c62f6f938071e05a081d494e40bf8
- SSDEEP 24576:iaRP6BJyOqlDxy4fOXfpiOOcHPuU0XLHtJjAFczG:ZIPy7lD44f0McjCZzG
- MD5 SHA1 SHA512 SSDEEP
Usermode/library_x64.lib
- SHA256 5b40b61cd487872a8943076f4f8e96e5e7c43ed47fadf91f89107cd1ea0eae6f
- MD5 51f2d4a386f82e895cf7ca78b704b547
- SHA1 356d549ab5045d97010c2a2bc657f626d8619f39
- SHA512 90b703b94a883072868a1c23007d384beaaf889da7e0b1a2d04b0e6ddaf1b0917242e65610dc96ddcc152483d2b5d15d1e1634a7f95c784adebd27de04c12fa7
- SSDEEP 24576:7iqNfcUUnckJjAG8rXDuU9HFOYi4fOXffHPDMsHyZL37O7mCIb:Jdj7Ky9EKf0XvDMay4i
- MD5 SHA1 SHA512 SSDEEP
Usermode/loop.h
- SHA256 a40ba602399f501eb2ca36120fff297b21aae9b3bca903c667ef0481fb4dca20
- MD5 4c8202ba845af683133d1e03650791e3
- SHA1 c7306612cca716a1bfeeaf926d952a02588d77e8
- SHA512 245354ae6c95a714152ff88517dd7a392a33640ab129b274b98287911d020f59649b0fa6343ccc7bea7ab3e25915c7f03f34145752c0db28fe1567f4232adb84
- SSDEEP 384:EqC3zlJM39cJyWX7lCZkq6E/fjNG5duZ57LFWVvihiBgR1zHEw:23zDMtcJyY5CZ9vfjNG5duZ57ZgDiR1b
- MD5 SHA1 SHA512 SSDEEP
Usermode/main.cpp
- SHA256 0c92b3d1fb4f0dc58acd49e0d1c4601e4f3428c4fe603c7972211e3f9e9fbb08
- MD5 52370712d1096b47c15f391e71daccd5
- SHA1 fb195fb7d7c7d724022f43306ea736b3b089d90e
- SHA512 a44f6668bab177462841869abbeff0bc609828c26ba1ab30a98d2cbea2d9aaa4f7abcf4211b66ec3deeed12b6f77a15e9d71170cc5325657823945c21b275e67
- MD5 SHA1 SHA512
Usermode/mouse.cpp
- SHA256 37da08fb4709df3a2f7c518be6c18bae28d96739c5fb7c428cc47882bca3be2c
- MD5 b437d6cced1b0b28891942fc0a5ee35b
- SHA1 ae0726a1b594209eaeee06862adf7313272e2da1
- SHA512 02d7c83d1e757328cb8587f6a1c0cdf36bda5451bf6a7d61dc53b113133c8c95265153364f6ca46a9bfe11762ba0793b5481ea47f8bb70f2af0167eb20574c5c
- MD5 SHA1 SHA512
Usermode/mouse.hpp
- SHA256 9955f83cb69e523314144dd7255dac5f963f394a33be9f2c3fdbdbd598367b51
- MD5 f4173b9c7a50f3288795064a21c9e807
- SHA1 1afd9f00e85248a11ec0fa1ee673c68ccb3f2674
- SHA512 28efa756d5c589592df6a879f10a6c3e5922a066b92a02e82de93e7dedf8a404852e1d2e039db366702778629bb10a381bb3ded6e68cb046e6afba5f9c0c3f98
- MD5 SHA1 SHA512
Usermode/offsets.h
- SHA256 9c02a4bd8831c835d34f245aaffd045cf6a2adc92ec5e56a39bc0f58f9fe1203
- MD5 833e1831652482551d7833112b8ce157
- SHA1 7a77736883840eefa6094fdc1f8ae6281209d923
- SHA512 59be9047ed2b48f9ed58886ff5f48ac87a46df7a4eb06bd2c02cdbace61f2b4453fe9feb5db1950c45b11f861f646aef605324c1cd78d3169ef5b4553385bd19
- MD5 SHA1 SHA512
Usermode/other/fonts/burbank.hpp
- SHA256 b653a3a72fb538291f6b8dd4bf292a321d6272a4ae51f212bc934c8f11f5185d
- MD5 fff2089be3267567c87542efb5b33b92
- SHA1 7136ca1e20871b25a782a2b14a956936d034ad9a
- SHA512 660f8b34d424e51d2bbe15185966edc20c857d2266feb5ab494e8a9efe4d8dddb65409eeed65d7713b5871db8e9fa2bd76b250d7cf81b209bf9a55fee144ecaa
- SSDEEP 12288:gHM3qlc54yZ2L123PXQPtjm1ELheTATlgXvXberuefu6cI:a
- MD5 SHA1 SHA512 SSDEEP
Usermode/other/fonts/font.h
- SHA256 6ca40f6b8c3961e4d7f67f2f3b8184046ae17172e91f046c5170e90a865732db
- MD5 8f0ed3939bfc1331aefa8754563e0cda
- SHA1 ccf737a69260afa1ac2f36426c52f7b7cbb85451
- SHA512 361b0f787ee0e21084540bfbdb13d9e19c04921fa465d133b4595c983e67149030e17c062a02b119b5772656e5730d16a8bde4c3975d17f6ae0e348f70b0445c
- SSDEEP 6144:1Jq5MQwT/9aoCdp4nGPP0Qf7woYQ5QcHmvTUWDofTyfqoTTRgY+QP8RpFZE9YeVp:EoXTbk37GD
- MD5 SHA1 SHA512 SSDEEP
Usermode/other/fonts/iconcpp.h
- SHA256 63acc9fc6238fde0ac2cec23a803b56f916d5a10a92aecb72bc5755b76d5ad62
- MD5 7ce58dc526487264397223af271bc66e
- SHA1 54dc0010adff759f27b2979212352ec4a3998ca9
- SHA512 27a13e774b7ffc6a1b94abc921933d4789c756ef8c44a37c9903c05e71769e885c6b2b4d0ce3575a425afeb4a176d274fab34f734b7e8ea6faf87492645a3c49
- SSDEEP 6144:Ut9yWOuh6ANiYwui9s889i3WAt/jbO8X5lMYqRLf84ELemRK1GhE8YzHxpOBDEpv:C9bvdwuiCvivFbnJGBlmUVRmg8kJY3xU
- MD5 SHA1 SHA512 SSDEEP
Usermode/other/fonts/icons.h
- SHA256 c9b620997513c3a72c6c30565885d01b7a7eda9d08cc036bf31c7fca9446d6b5
- MD5 049d51e8228a89459c02123b0df70db5
- SHA1 02550a60dc4a50fb4598e301a1be1929f092d425
- SHA512 6de1247853299c04a1357b4e7d53fa322a6197d47f56d374565cf96a21584213794c89476ffa6aa17fe9a1f7eb51ea29a0931a41e3ef24592008421666ceb465
- SSDEEP 3072:QCwPxPH+gdIW6thDDkdVpKu4Y9yHwC7sewmJWHZ:opPc3DDkdVpKu4Y9yHwC7sewmI5
- MD5 SHA1 SHA512 SSDEEP
Usermode/other/globals.hpp
- SHA256 69d4eb531054efbd4d5cd1e405029b4ae1593dbf63fb397ae296c1038019abc6
- MD5 409ec388fd074f712c29cec4e3585f91
- SHA1 8e6cd05030d129ecc7c1c7ef9c68634458b34410
- SHA512 3e43c8e8b111563cb843b09dfe747194bed7cd0fca613521f6d4cf41b9c014a131dd92a810f7edb2796c6d6f4681277cc30ed8d5cb044283ac624d2e8545383d
- MD5 SHA1 SHA512
Usermode/other/hexarray.hpp
- SHA256 1e0ef06e10b7c479776637b3339f3a435ea9a1139c364b2192f4e2888c583977
- MD5 087dec47005731e868829cc6303e42f2
- SHA1 b0212ecb940e5d8c98e8738fd37c38993448bc10
- SHA512 3835f7ecec6f76f54aeed7180cb94a6b6d510439fafb0a3c440d403069bd29fb78fd4b4a23cf48b36869b6d3fce106c6ab4d713fd71f0cd8a4f11c488bda5fb4
- SSDEEP 192:4B8j/5Y3W8pPUx5ODcSccHvO1PrayJCCqK+fP1QempCnhFaFrwr:U8j/5Y3W8pfcSccG1xqVfP1QemonhUCr
- MD5 SHA1 SHA512 SSDEEP
Usermode/other/include.hpp
- SHA256 c597048d1a48ab8268353d52a4629fb9f3ea539ebdf0b871b9c34e33c5da5213
- MD5 23a319f79c6d6c17434771b81fc53432
- SHA1 c18f803d3bf1bbdd20b63f67e036b6d739694b62
- SHA512 f190225b92eb66e9cb4a2e95052bba7600be81da69a3a0a26bb60c6f80719e15f3d640734bb321f4309a2f5de03ef7e6858f0aede310a471efd3cfce4e4cf65e
- MD5 SHA1 SHA512
Usermode/other/lazyimporter.hpp
- SHA256 084d4dd379a60d001bb9569873e58ee640a2768ba95236a10d51e68a97affdbf
- MD5 f29fe101505730aa3e58db4b611cbbd2
- SHA1 1a4ad4ecda769cd27f58bb167bff8912654043fe
- SHA512 9ffed5f4c193c5c1eec1bb944bd5bc227568329b6ba0ed7a1fbbcbeed826a73f1cc7b1211d4445f5a551915cc6a203bf54a4b6ef04521ef5b13aa07533fa3ba2
- SSDEEP 384:IbKs6/8XITSx2dI04HckVRQkeuf8d1asBc2jkVuErg1Sg:I3/XITSx8I04H60sBc2jqLrg17
- MD5 SHA1 SHA512 SSDEEP
Usermode/other/mouse/mouse.hpp
- SHA256 b3dc4310f029180e723f678254385e3d875db13f77d5caf1b3f0721907d2a143
- MD5 77e89dfdce8348f23aaa764c8c823170
- SHA1 7e0b18f81196a69952289ea8bacd7482f43ba07f
- SHA512 9852402647171cf32f1ae139add8c6aa250eeae71351d7908a42c2022a414371a53ebf9a09e5eed9650656ba36fe862d6d6cc5f701c2f49fbed80cc056ff1f18
- MD5 SHA1 SHA512
Usermode/other/skcrypt.hpp
- SHA256 659f329164ee2827fb24f4d8a6ca1b08e1b4873c0e4cb56f8e7341460732a635
- MD5 773f82ec92f79e3833b5634c9d9ec83a
- SHA1 e1faf23d458613a65d8939909420c6600a149a98
- SHA512 273955c37b789158ac8d453d2ac59295148055d10329245750e10b598ef7682f9e64c7628a4e8246a6240540f8b9df3e498c9fd8b5beccc563c26487dd4248d4
- MD5 SHA1 SHA512
Usermode/protect/SDK/keygen64.dll
- IMPHASH 749e98e56844c5a066e829cd37b6dee6
- SHA256 02a397c69d6fa7d0072a5664d656e745e69f3b9e3c9689b61d98aa5f8e77a0c3
- MD5 690f0b11176294c29202140a243dbd80
- SHA1 d3f1844b8a7e2af989d24d90515d8ce6838b12ca
- SHA512 2255b84ee089f25d0aadfafb91f622cc4293b5f8bc7184a40f426bfb6b775083a961cbbc4ad44bc4f92d2611fe2e64aebfc9af597f9208777c5cf3e57277dfef
- SSDEEP 12288:qULb6W5lbSWWYjQoGHHHZ/tCiMvdmAA0+KAn+TU529W+IKJENYDAeeUOrE:qUaYkBH5/tF0m9AU529LJ7UV4
- MD5 SHA1 SHA512 SSDEEP
Digest
60:84:ae:1e:98:03:fd:9b:5a:bf:9c:2c:2b:25:d6:d3:6a:5b:0d:d4:ec:86:8e:43:a2:fc:cf:b2:77:1f:3a:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
Chains
Aug 5, 2022
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
Serial Number
f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:cc
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 19, 2020 - Nov 19, 2022
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
0
Major OS version
6
Entry point
1292040
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
setupapi
CM_Get_Parent
version
GetFileVersionInfoW
kernel32
GetTimeFormatW
GetModuleHandleA
user32
DestroyIcon
CreateWindowExW
advapi32
CryptGenRandom
RegisterEventSourceW
shell32
SHGetFileInfoW
ShellAboutW
ole32
StringFromGUID2
shlwapi
StrCmpLogicalW
CompareSystemIds
CompareSystemIdsW
ConvertLicenseLongToBin
ConvertLicenseLongToStr
GenerateAppCertificate
GenerateLicenseLong
GenerateLicenseLongW
GenerateLicenseShort
GenerateLicenseShortW
GenerateServerConfiguration
GenerateSignature
GenerateSignatureFromFile
GenerateSignatureFromFileW
GenerateSignatureW
GetLicenseHash
VerifyLicenseLong
VerifyLicenseLongW
VerifyLicenseShort
VerifyLicenseShortW
VerifySignature
VerifySignatureFromFile
VerifySignatureFromFileW
VerifySignatureW
Name
.text
Size
Virtual Size
955KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
Virtual Size
194KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Name
.data
Size
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Usermode/protect/SDK/keygen64.h
- SHA256 f6b999c7dcef7cbfed3949f1ab926a7a0da1689338520cf025c0efd8a88dbaec
- MD5 9f69d9376fe218f7525eaaa813ac074d
- SHA1 4df23377d9decc8b1aa372971c0b5b19e3817db7
- SHA512 bd975ebbff68e2d1e87183ad833fa41b380dbf01f4111bd6cf480f56221c92aa10f5a52b050f02a095cba27f23ab2acef7e14b9091807af3f29194aeace80d21
- SSDEEP 384:Mj2pdmlVkKIj+31eco8/bwcoH/b3JeheB3q:BmlVkKIjw1eco8/bwcoH/b3Jehehq
- MD5 SHA1 SHA512 SSDEEP
Usermode/protect/SDK/obsidium.h
- SHA256 bab3e71bd7c72d18c8df05f3bd6f9b379393cc78fd80cd928759434ed9d09e5e
- MD5 dae3a4d8b1ea5f06db4a8cf445a756e6
- SHA1 ac8f9ddacd38ab6ee9c1f1a6ea601480be5886fc
- SHA512 63bdff0ac15adc800df5f010ef1345b44f2360542081058c982f3753fddd4d284a0321b1cbfdf03835ea82539e5c3bc5eadfa06968d0a08727fc5c75157ba18f
- MD5 SHA1 SHA512
Usermode/protect/SDK/obsidium64.a
- SHA256 eeca678d65813ad721cc59448d39283c9bf6dc3de4c7676021437b5dcf4a8861
- MD5 7a96b2f61bc3f4c4495d275b1166adb6
- SHA1 af4700aeda085c975d209f61aaa5498426f62fe0
- SHA512 b49668fed2a1a9c6af222770585fa677aa32a081c1e833cd5a4bee1a7d7846b52460b89bc989d44c6bc29f0f684405fc132b38f3eab926a8844c8d63b7b9a71d
- SSDEEP 48:rW+ybfwy9cgQd3JxChD6MmYNzZkeRtQW+ybfwy9cgQd3JxChD9W4ATQ:vy9ct3JxEBzhjuy9ct3JxBTQ
- MD5 SHA1 SHA512 SSDEEP
Usermode/protect/SDK/obsidium64.def
- SHA256 2225817de079cd304073c2757ad7097b9e3d85bc1a82b2a92b98dc6a10d9eccb
- MD5 432aafbe8143f882ac8f18780b300d1c
- SHA1 476c1ecd1dfb4ce5b8242cb2fe4ce89b22541074
- SHA512 59e10636bf7254ee33874ba53ffdfc27ea8dd8172eaf281a0956aecc9d7ca819acf521bd4ac53632d88519237b83d6d12ebb15b4b2bdda2c82e3c9c329aa2f5e
- MD5 SHA1 SHA512
Usermode/protect/SDK/obsidium64.dll
- IMPHASH d7abc9f08ea9c7772ea0a9736b2816f4
- SHA256 90f210b79538e41e21d918208665f1cbe8bd0b5a48a96431a8cf90ad505c75b8
- MD5 0871abdad28adda93509c0baa346416f
- SHA1 fd3ab480335ee1d42cfb939cc95fbcfa3fcd7133
- SHA512 14f48806134c1472ea82419a24632ef9de69cc6e80ed2b1c9e54b931735dadad0c4dfd48eceffe260297ecb1f9308e75a4eca01985a4f5d1cb1c6134676c1b8a
- SSDEEP 6144:uaaUAfzrrA3Q5svEm81s70OOSL9ZIgv7dIPvrHV6p:uaan3E3hECaSpZbDdi7V6p
- MD5 SHA1 SHA512 SSDEEP
Digest
1f:14:85:03:59:d1:71:a7:0c:75:2e:e1:3f:9c:fe:94:1c:df:fd:c1:a9:44:ff:c3:06:e0:3a:0c:19:d0:d7:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
Chains
Aug 5, 2022
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE
Serial Number
f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:cc
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 19, 2020 - Nov 19, 2022
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
0
Major OS version
6
Entry point
432624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleExW
GetModuleHandleA
shell32
PathMakeUniqueName
advapi32
GetUserNameA
user32
PeekMessageA
obsBlacklistLicenses
obsConvertLicenseToBinary
obsConvertLicenseToString
obsDecTrialCounter
obsDeleteLicenseData
obsDeleteTrialData
obsDisableLicense
obsEncDecData
obsGetActiveLicensingSystem
obsGetCustomValue
obsGetExpirationDate
obsGetInitialTrialCounter
obsGetInitialTrialDays
obsGetInitialTrialRuns
obsGetInstanceCount
obsGetLicenseCreation
obsGetLicenseData
obsGetLicenseExpiration
obsGetLicenseHash
obsGetLicenseInfo
obsGetLicenseInfoEx
obsGetLicenseInfoExW
obsGetLicenseInfoW
obsGetLicenseStatus
obsGetLicenseSystemId
obsGetProtectionDate
obsGetSystemId
obsGetTrialCounter
obsGetTrialDays
obsGetTrialEndDate
obsGetTrialIdentifier
obsGetTrialRuns
obsIsLicensed
obsIsProtected
obsIsVm
obsNetLicConnect
obsNetLicDisconnect
obsNetLicGetAppCertId
obsNetLicGetAppCertName
obsNetLicGetAppCertUserData
obsNetLicRegisterCallback
obsReloadLicense
obsReprotectString
obsSecureString
obsSecureStringW
obsSetExternalKey
obsSetLicense
obsSetLicenseShort
obsSetLicenseShortW
obsSetLicenseW
obsStoreLicense
obsStoreLicenseShort
obsStoreLicenseShortW
obsStoreLicenseW
obsUsbDecrypt
obsUsbEncrypt
obsUsbEnumDevices
obsUsbExecute
obsUsbGetDeviceId
obsUsbGetLicenseDeviceId
obsUsbReadData
obsUsbRegisterCallback
obsUsbWriteData
obsVerifyLicense
obsVerifyLicenseShort
obsVerifyLicenseShortW
obsVerifySignatureData
obsVerifySignatureFile
obsVerifySignatureFileW
Name
.reloc
Size
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.text
Size
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Name
.pexe
Size
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Usermode/protect/SDK/obsidium64.h
- SHA256 525e873445caf125b9b306c26d5c0b9d0a4903bc7634b4d05384b3e7a3edc833
- MD5 a4e9c85b5367b2de15be414a484c5c97
- SHA1 4b34b7d9c4da329c14ffed1f69852903cb563de3
- SHA512 4e2f6d0cb634d2a64eba98c72b29d791a57898084d9fe6b9851137edc261b50c183fe326fcf80138d14da8efde6fe01c03abfe214bd8a7a0953c2b69a1a7d193
- SSDEEP 96:GZ/4z66+dVRX6PHyTigmMG77Nvbv8uWwm6CpCtCDn82C8G4ZhFWvYVeYqdD:0gz016/yTigm3dzZWwMA0Yd8QgVevR
- MD5 SHA1 SHA512 SSDEEP
Usermode/protect/SDK/obsidiumlib.obj
- SHA256 fbb4060e8c406eab454e389db4bd2d3689664d4e77f646cae81107cb276397d9
- MD5 0a8b241d7d5f8b155e475d5f9ca5c652
- SHA1 3f292fa665e8e467776cc42ae582d45dedacd429
- SHA512 f39cd1d8e6b07524cc33384d33b7bb34feb872186d73dfccc33d6942855fe605824f5288b15c84c3e003ada7e41c40ed57c44ddde39ee72285cfe4a6c10678f8
- MD5 SHA1 SHA512
Usermode/protect/blowfish/blowfish.cpp
- SHA256 aa89876bd9797a9417d65f32d12294983c9a404b6ea6ee64d15b9acb31b321b2
- MD5 3b1148f0ee1af4d71cbe21e74177f296
- SHA1 3f762cfc52bebe2ba94a62087876764209e48151
- SHA512 f8f21f1f97208e4de7d1e06a4da8dfcf8242e6fc92ba00a8dde8089767b174b527910a1e829bca7de340f12ce8a6e424ad4db7094280e41bcad1eca0030bd498
- SSDEEP 384:XNyI942prFISslP+C01kcQx9Txtxcdy60eNedwAYQ7TeXviXw7LEV8UpyNdfKYDE:XN7hISGP3T6y602CNYuAVng86OlA
- MD5 SHA1 SHA512 SSDEEP
Usermode/protect/blowfish/blowfish.h
- SHA256 ce068fc6df62aea6e078f4baaef4e06c0bff21585a47fb2a22bddfdad0c6314a
- MD5 c335ea3de86cc9d744dbe27143b10e39
- SHA1 630b8e5a9781d5dace35e290feb12ecdd08159cd
- SHA512 1292bc3487c1846738de78830084b49cbb3c5d27a399f16a8be2dfcbf545e619fcaf40a8108c8f37f96660d6c7258bf8f0fd177eee25a26816d2f67a550462ce
- SSDEEP 48:ZVIZsOHrrvMZJChR+LQAJCAJ9aSaXf3NnmqjfgOkKbj3mRnCr9qrw0tZlJY:XROLrvMZJY+LQPycdXjYOhb+GwsoX+
- MD5 SHA1 SHA512 SSDEEP
Usermode/render.h
- SHA256 1d0fa1f1da803ad3bc9014e14e1e4ad2aa2664ae4a3ba94cb22def87b546fc91
- MD5 d403de83549d34f7de03bcf2f0462097
- SHA1 77c9087149cbfca0b4cd5af40f0c864b7c58fb9c
- SHA512 af62b26a03499cc9f13678e45be6f5df2e667eefa5d68ca3560d188e96354710f5f05c086d18fc3671741769f70b34037400d4959bdc4de083e094207ffc3eee
- SSDEEP 768:XlVhm6kpU0x8Xmbz/8TqSzr8rYqzg8Dvz+MJEWJMIHWptz4yC:hm6kpU69ao
- MD5 SHA1 SHA512 SSDEEP
Usermode/sdk.h
- SHA256 15f4bc26f4aafcecff3817e77d7419b306b164761cd8d994b7e3cef2c7bc2700
- MD5 f337b8c6a71d017c4ea170828ad8ca20
- SHA1 dd9941309ef05e60790906d0133111efceac95a4
- SHA512 8255362e8d74204afafb11681eed8994ae4241e5ff0935b9699a22a6d97ede34f8eaa7f8daaea40326c89fa154416fa1b2b8e4af6822c59b9767d137eca0680e
- SSDEEP 96:++P0KKJKIX1rPpfP+7IvnCEkF8FR3VgfrQxjrzbbQKnWmnaCKP+TscJEkZ2xOa5:tPipA6nCEkF8FRFgfsxjrzbbXWmnayXu
- MD5 SHA1 SHA512 SSDEEP
Usermode/spoofer.h
- SHA256 4205fc90e08221db5f9219166b4a57ebfc93ee46c1c911d4da1a6ccf44d6d958
- MD5 b9192b1d2c27f1214ed2121054ef494b
- SHA1 43d17d092a94d25d7a4e0f50780469f76f1993f6
- SHA512 156eafcdbe9e7a61bf3ce8f1c4c09fb3c7b66e7b3ae21363d802d7b6e722e44d865c9a0403551ca3ba3ba91dbaf9b938727140a862c9916383493f3568773b0c
- SSDEEP 96:D3z4G5PHF7oZNBqvOvaIleT4EqtN9l9QxfweMuXKX1ILoIDIhhhZEi:D3zl5PHUBMOvDm4EuCxIeMuak0L
- MD5 SHA1 SHA512 SSDEEP
Usermode/ue.h
- SHA256 7064095d2674385c45a428edd7c8bb1374510e0c1f58b0633e06c0426f0c1fa5
- MD5 95994d543d3c96305c84eb2460a88270
- SHA1 99508c27f4182f11257b386cda1d2cf09caecf55
- SHA512 66f8ddd9bc40652b7486ec1aa82af0e0b0375f82625593d837e9dedf0f6f4c11f2a12550a0ebe317d6ecebce6c896c21d6583370f31c69c365f7f224933db860
- SSDEEP 384:ipjENlXMCmoE1swfoGEKbWpJttMbHttMbSttMb4ttMb/ttMbgttMbmttMbLttMbD:zZwJOfN2Frq805
- MD5 SHA1 SHA512 SSDEEP
Usermode/utils_1.h
- SHA256 d85d8587e0ba4775d42eac6cfcda032fd1792b4381568803b8660e76eb37e7bc
- MD5 cadd8604099f38f0b65e334e97e170b9
- SHA1 6e3a95934f4ea11795c5ab5ed24ffe301f4119fc
- SHA512 8c358eaf120e6b56083e8368a3a747f05a5bf11947e9407abd11a7659bdf43f3bd4e4a736262826e6ea6e8368912a4264ced0c979725061d1b647ff1be31158a
- SSDEEP 96:A0sijDNSkonIKNSkoqStN6mdofyboXb7acGyoscKWEkLIzi/Gyosc7cV:AS9SkcImSkVStN6GzboXb7foHKXk6i/f
- MD5 SHA1 SHA512 SSDEEP
Usermode/xorst.h
- SHA256 80c4adcc9c440e21332c465f255b8eae72b2706e542e51e3cab2e1ace0c2872b
- MD5 4c7941870de291eaeb71efbef83abe00
- SHA1 3634f5ebef67646d733204657ad0c2665c49132d
- SHA512 7e2b723cbda52a73999a5b53bf7a33c56ba15147d61ba2df601273ff307a836d758e6f03bb714152138c8c0f40987c1e6a433d6fcacfef449e294d31a1e94eda
- SSDEEP 96:K3+zj/1O9dMjHMK+yJCpLvIJhUeFf+0rtP4c:KUTgrMjsK+yJCpLvIJhUKmUP
- MD5 SHA1 SHA512 SSDEEP