dialog
initDialog
show
Overview
overview
7Static
static
3gmod_9_0_4.exe
windows10-1703-x64
7gmod_9_0_4.exe
windows11-21h2-x64
7$PLUGINSDI...ns.dll
windows10-1703-x64
3$PLUGINSDI...ns.dll
windows11-21h2-x64
3bin/client.dll
windows10-1703-x64
3bin/client.dll
windows11-21h2-x64
3bin/game_s...ry.dll
windows10-1703-x64
3bin/game_s...ry.dll
windows11-21h2-x64
3bin/server.dll
windows10-1703-x64
3bin/server.dll
windows11-21h2-x64
3lua/Lua_Help.html
windows10-1703-x64
4lua/Lua_Help.html
windows11-21h2-x64
3motd.html
windows10-1703-x64
4motd.html
windows11-21h2-x64
3readme.html
windows10-1703-x64
4readme.html
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
gmod_9_0_4.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
gmod_9_0_4.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
bin/client.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
bin/client.dll
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
bin/game_shader_generic_garry.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
bin/game_shader_generic_garry.dll
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
bin/server.dll
Resource
win10-20240611-en
Behavioral task
behavioral10
Sample
bin/server.dll
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
lua/Lua_Help.html
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
lua/Lua_Help.html
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
motd.html
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
motd.html
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
readme.html
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
readme.html
Resource
win11-20240802-en
Target
gmod_9_0_4.exe
Size
26.7MB
MD5
d97df1a1f5af14e33d1558e78306b09b
SHA1
4cd63119b2d1cbb28b5c27f89fbf191587a3b554
SHA256
af4e403df22c7d70e3b1b2e9ed7ef5a9763d5070c9daaa66f7c5e85fbba2fe08
SHA512
68dcde19a1671bb7dbbe11824dceacdec25d63d21c8a383fc7c991543ca0b5e7cd6c5ae3791b6f5631ef0c828d6c5398848739ed0f3415807750040c6b1c2f62
SSDEEP
786432:6Dj1Y0gzUaEKApA+N3RtvlJQL/YU4Am6B0a1188:6DxFgzUaEKMNhnJWgeMa11r
Checks for missing Authenticode signature.
resource |
---|
gmod_9_0_4.exe |
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/bin/client.dll |
unpack001/bin/game_shader_generic_garry.dll |
unpack001/bin/server.dll |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
CloseHandle
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClassA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
FindWindowExA
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\workspace\garrysmod\src\cl_dll\cl_dll___Win32_HL2MP_Release\client.pdb
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
CloseHandle
GetVersionExA
GetCommandLineA
RaiseException
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
Sleep
RtlUnwind
GetFullPathNameA
FlushFileBuffers
GetTimeZoneInformation
GetLocaleInfoW
SetConsoleCtrlHandler
SetStdHandle
ReadFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDateFormatA
GetTimeFormatA
IsBadCodePtr
IsBadWritePtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetFilePointer
GetOEMCP
GetACP
InterlockedExchange
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
WriteFile
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
LCMapStringW
GetLastError
LCMapStringA
GetCurrentDirectoryA
GetSystemInfo
VirtualAlloc
IsBadReadPtr
ExitProcess
TerminateProcess
GetCurrentProcess
GetDriveTypeA
VirtualProtect
SystemParametersInfoA
Warning
DevMsg
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
g_VProfCurrentProfile
?ExitScope@CVProfile@@QAEXXZ
Error
?DevMsg@@YAXPBDZZ
DevWarning
MemFreeScratch
MemAllocScratch
GetCPUInformation
g_pMemAlloc
?DevWarning@@YAXPBDZZ
?FindOrCreateCounter@CVProfile@@QAEPAHPBDW4CounterGroup_t@@@Z
g_ClockSpeed
Msg
Q_strncasecmp
Q_stristr
CommandLine
Q_binarytohex
Q_FileBase
RandomFloat
Q_atoi
Q_strncmp
Q_snprintf
Q_vsnprintf
RandomInt
Q_strcasecmp
Q_strncpy
Q_MakeAbsolutePath
?AttachToStream@CGaussianRandomStream@@QAEXPAVIUniformRandomStream@@@Z
??0CGaussianRandomStream@@QAE@PAVIUniformRandomStream@@@Z
??0CUniformRandomStream@@QAE@XZ
Q_StripExtension
?Q_stristr@@YAPBDPBD0@Z
Q_IsAbsolutePath
KeyValuesSystem
Q_strncat
Q_strcat
?RandomFloat@CGaussianRandomStream@@QAEMMM@Z
Q_strnlwr
Q_pretifymem
Q_strnicmp
Q_StripFilename
RandomSeed
Q_atof
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCPUInformation
GetStdHandle
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetModuleHandleA
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
RaiseException
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetLocaleInfoA
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\workspace\garrysmod\src\dlls\Release_hl2mp\server.pdb
timeEndPeriod
timeBeginPeriod
timeGetTime
GetTimeZoneInformation
RtlUnwind
RaiseException
GetDriveTypeA
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
Sleep
FormatMessageA
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentDirectoryA
GetFullPathNameA
ExitProcess
TerminateProcess
SetEndOfFile
SetConsoleCtrlHandler
SetEnvironmentVariableA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetLocaleInfoA
GetSystemInfo
VirtualAlloc
VirtualProtect
IsBadCodePtr
IsBadWritePtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetOEMCP
GetACP
InterlockedExchange
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
CompareStringW
GetCPInfo
CompareStringA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
CloseHandle
ReadFile
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetVersionExA
GetCommandLineA
GetCurrentProcess
IsBadReadPtr
FindWindowA
SendMessageA
MessageBoxA
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
Msg
Warning
g_VProfCurrentProfile
?ExitScope@CVProfile@@QAEXXZ
g_ClockSpeedMillisecondsMultiplier
?DevMsg@@YAXPBDZZ
DevMsg
DevWarning
g_pVCR
?OutputReport@CVProfile@@QAEXHPBDH@Z
?BudgetGroupNameToBudgetGroupID@CVProfile@@QAEHPBD@Z
g_ClockSpeedSecondsMultiplier
Error
MemFreeScratch
MemAllocScratch
GetCPUInformation
g_pMemAlloc
Plat_FloatTime
?Pause@CVProfile@@QAEXXZ
?DevWarning@@YAXPBDZZ
?MarkFrame@CVProfile@@QAEXXZ
?Reset@CVProfNode@@QAEXXZ
?EnterScope@CVProfNode@@QAEXXZ
?Resume@CVProfNode@@QAEXXZ
vtune
Q_vsnprintf
Q_strncpy
Q_strncat
Q_snprintf
Q_strcasecmp
RandomInt
Q_SetExtension
Q_strnicmp
Q_strncmp
RandomSeed
RandomFloat
Q_FileBase
Q_binarytohex
Q_FixSlashes
Q_atoi
?Q_stristr@@YAPBDPBD0@Z
??0CUniformRandomStream@@QAE@XZ
CommandLine
Q_IsAbsolutePath
Q_atof
Q_strcat
Q_pretifymem
Q_strncasecmp
Q_ExtractFilePath
Q_StripExtension
Q_StripFilename
Q_stristr
KeyValuesSystem
htons
WSAStartup
closesocket
recv
connect
ioctlsocket
socket
getprotobyname
gethostbyname
send
select
WSAGetLastError
?Detonate@CGrenadeAR2@@UAEXXZ
?Detonate@CGrenadeHomer@@UAEXXZ
?Detonate@CGrenadePathfollower@@UAEXXZ
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ