JJSploit_7[.]4[.]1_x86-setup[.]exe

resource
JJSploit_7.4.1_x86-setup.exe
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsis_tauri_utils.dll
unpack001/JJSploit.exe
unpack001/uninstall.exe
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsis_tauri_utils.dll

JJSploit_7.4.1_x86-setup.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 92e9e6765bf36034b5eba64e2609a4f53cbb4d8e234d06286504167a1ed39c62
MD5 b48c24c1e69762b21699602e13bbb5ba
SHA1 fd79240f45d5e05ea2c8a979bfb4876e1d71ce0b
SHA512 98b079ba339b7e6899f3551c401f1a6a53508272f5620439431ee48380e040f112775d32b65c326dae38a0f7e201fcbb81e05101f9931e843a9543de217632d3
SSDEEP 98304:hfKmigKi75v19R+4AfwQP7M2fbR2YIjK0iopecuh8aaXm0bd5S5/LAIXznZ6:him7/5vfdAvP7MWwYIuDojUAZ5S5/sIs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/NSISdl.dll

IMPHASH ed06d61f6957c32cd324837726a5a070
SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
MD5 ee68463fed225c5c98d800bdbd205598
SHA1 306364af624de3028e2078c4d8c234fa497bd723
SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StartMenu.dll

IMPHASH 80469f6834e579db68a646d49780b9d5
SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
MD5 d070f3275df715bf3708beff2c6c307d
SHA1 93d3725801e07303e9727c4369e19fd139e69023
SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 17cb20871354b907f678c7c220e4ca60
SHA256 c0f2b928bc4c81cc5ca30a8932a6dc8cd617dd016679c057e23355fe732b2333
MD5 8def0196223484f8aed4106148dd3f08
SHA1 e0fc0951deb0e5e741df10328f95c7d6678ad3aa
SHA512 9ffa66181bce5aa5210da0fe5edc6c80aa9e46e2bd1fafd840f468965f4d06bc03f9a77e04b975ffc9f25c886c274196e3fedae6cfb57f366ef39f1e31e1ada7
SSDEEP 768:97F3QRyGmiZZ1FCeu2rcFKpnq0jdhK7W+qdxi:hJQRtmaF7YMX/q
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4415

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

JJSploit.exe

IMPHASH bdf8646dd054a896cfd3542a140a522c
SHA256 e02832385c39f13876f7416350a9d76a93b4e97648c77e073e226217802832a6
MD5 5aa8497659e32136c48465a91e092d1a
SHA1 f03bd00ad306305630d647805648822b542beb60
SHA512 abf442476c2d2646e62695bd4c3b9b56c445e0bf58b0add81a9f933227835a7ee959646ddb426a152b507b503c3df670b20e8ebb2c3a6f8fd69d023b6c128751
SSDEEP 196608:X0CW7PVmsuHfDpHHZ0ry9bUhLnCHpw4aGIE9XBp:X0CW794HfDpHHz1iWw4a/oXBp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5596343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

wearedevs_net.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

CancelIo CreateEventW GetFinalPathNameByHandleW InitializeSListHead ExitProcess CreateSymbolicLinkW DeleteFileW FindFirstFileW CreateDirectoryW GetFileInformationByHandleEx FindClose FindNextFileW CreateMutexA WaitForSingleObjectEx HeapReAlloc GetSystemTimePreciseAsFileTime QueryPerformanceFrequency ReadFileEx SleepEx GetFileAttributesW GetModuleFileNameW OutputDebugStringA OutputDebugStringW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter CreateNamedPipeW WaitForMultipleObjects IsProcessorFeaturePresent RtlUnwind RaiseException GetEnvironmentVariableW WriteFileEx GetStdHandle SetFilePointerEx SetFileInformationByHandle GetSystemDirectoryW GetWindowsDirectoryW GetCommandLineW EncodePointer DeleteCriticalSection CreateProcessW InitializeProcThreadAttributeList UpdateProcThreadAttribute MultiByteToWideChar WriteConsoleW WideCharToMultiByte CreateThread GetFullPathNameW GetTempPathW GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable InitializeCriticalSectionAndSpinCount AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsAlloc GetModuleHandleW lstrlenW SetFileTime GetProcessHeap HeapFree GetLastError LoadLibraryA LoadLibraryW GetProcAddress LCIDToLocaleName GetUserDefaultUILanguage SetEnvironmentVariableW GetEnvironmentStringsW FreeLibrary HeapAlloc GetCurrentDirectoryW SetLastError ReleaseMutex GetCurrentProcess DuplicateHandle RtlCaptureContext QueryPerformanceCounter SetWaitableTimer CreateWaitableTimerExW SwitchToThread GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CompareStringOrdinal DeleteProcThreadAttributeList SetHandleInformation FreeEnvironmentStringsW DeviceIoControl GetVolumeInformationW GetDriveTypeW GetCurrentThreadId TlsGetValue TerminateProcess FormatMessageW TlsFree LoadLibraryExW CreateFileW OpenProcess TlsSetValue PostQueuedCompletionStatus CloseHandle CreateIoCompletionPort SetFileCompletionNotificationModes GetQueuedCompletionStatusEx GetSystemInfo ReadFile GetOverlappedResult Sleep GetModuleHandleA GetFileInformationByHandle GetConsoleMode SetFileAttributesW MoveFileExW GetProcessIoCounters GetSystemTimes WaitForSingleObject CreateHardLinkW GetCurrentProcessId GetExitCodeProcess GetProcessTimes GetTickCount64 GlobalMemoryStatusEx GetLogicalDrives GetDiskFreeSpaceExW

ws2_32

getaddrinfo freeaddrinfo closesocket getpeername getsockname WSASocketW bind connect ioctlsocket getsockopt WSACleanup WSAStartup shutdown recv send WSASend WSAIoctl WSAGetLastError socket setsockopt

user32

SendInput SetForegroundWindow SetWindowDisplayAffinity GetWindowTextW GetWindowTextLengthW SetWindowTextW GetTouchInputInfo ValidateRect VkKeyScanW GetAsyncKeyState GetKeyboardState CreateAcceleratorTableW ToUnicodeEx GetKeyState MapVirtualKeyExW GetKeyboardLayout MonitorFromPoint EnumDisplayMonitors IsProcessDPIAware TrackMouseEvent GetUpdateRect MapVirtualKeyW MonitorFromRect ChangeDisplaySettingsExW SystemParametersInfoA SetCursor SetWindowPlacement IsWindowVisible AdjustWindowRectEx GetMenu CheckMenuItem GetWindowRect LoadCursorW ClientToScreen GetClientRect GetWindowLongW ShowCursor InvalidateRgn FlashWindowEx DefWindowProcW SetMenuItemInfoW CreateMenu SetWindowPos AppendMenuW RedrawWindow PostThreadMessageW PostQuitMessage ClipCursor GetClipCursor SendMessageW EnableMenuItem GetSystemMenu ShowWindow DestroyAcceleratorTable DestroyIcon GetRawInputData SetCapture SetWindowLongW MsgWaitForMultipleObjectsEx RegisterRawInputDevices RegisterWindowMessageA RegisterClassExW PostMessageW ScreenToClient EnumChildWindows GetMessageA PeekMessageW DispatchMessageW TranslateMessage TranslateAcceleratorW GetAncestor GetMessageW DispatchMessageA GetMonitorInfoW MonitorFromWindow CloseTouchInputHandle GetCursorPos GetDC DestroyWindow CreateIcon RegisterTouchWindow GetSystemMetrics IsWindow CreateWindowExW GetForegroundWindow SetCursorPos ReleaseCapture IsIconic GetActiveWindow SetMenu GetWindowPlacement

shell32

DragFinish SHCreateItemFromParsingName ShellExecuteW SHAppBarMessage DragQueryFileW SHGetKnownFolderPath

comctl32

RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect DefSubclassProc

ole32

CoSetProxyBlanket RegisterDragDrop RevokeDragDrop CoTaskMemAlloc CoInitializeSecurity CoTaskMemFree CoInitializeEx CoUninitialize CoCreateInstance CreateStreamOnHGlobal OleInitialize

gdi32

DeleteObject GetDeviceCaps CreateRectRgn

dwmapi

DwmEnableBlurBehindWindow

oleaut32

SetErrorInfo GetErrorInfo VariantClear SysAllocString SysStringLen SysFreeString

uxtheme

SetWindowTheme

advapi32

OpenProcessToken EventRegister EventSetInformation EventWriteTransfer GetTokenInformation EventUnregister IsValidSid GetLengthSid CopySid LookupAccountSidW SystemFunction036 RegOpenKeyExW RegGetValueW RegCloseKey RegQueryValueExW

bcrypt

BCryptGenRandom

secur32

LsaFreeReturnBuffer DecryptMessage AcquireCredentialsHandleA InitializeSecurityContextW AcceptSecurityContext LsaGetLogonSessionData FreeCredentialsHandle ApplyControlToken LsaEnumerateLogonSessions DeleteSecurityContext QueryContextAttributesW FreeContextBuffer EncryptMessage

crypt32

CertEnumCertificatesInStore CertAddCertificateContextToStore CertOpenStore CertCloseStore CertDuplicateCertificateChain CertFreeCertificateChain CertFreeCertificateContext CertDuplicateCertificateContext CertVerifyCertificateChainPolicy CertGetCertificateChain CertDuplicateStore

ntdll

NtDeviceIoControlFile NtCancelIoFileEx RtlNtStatusToDosError NtCreateFile NtReadFile NtWriteFile NtQuerySystemInformation

pdh

PdhCollectQueryData PdhRemoveCounter PdhGetFormattedCounterValue PdhCloseQuery PdhOpenQueryA PdhAddEnglishCounterW

powrprof

CallNtPowerInformation

netapi32

NetUserGetInfo NetUserGetLocalGroups NetUserEnum NetApiBufferFree

iphlpapi

GetIfEntry2 GetAdaptersAddresses FreeMibTable GetIfTable2

psapi

GetPerformanceInfo GetModuleFileNameExW

api-ms-win-crt-math-l1-1-0

round __setusermatherr trunc floor pow

api-ms-win-crt-string-l1-1-0

_wcsicmp wcsncmp wcslen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free calloc _set_new_mode

api-ms-win-crt-runtime-l1-1-0

abort _initterm _set_app_type terminate _controlfp_s _crt_atexit _exit _register_onexit_function _initialize_onexit_table exit _configure_narrow_argv _initterm_e __p___argc _initialize_narrow_environment _get_initial_narrow_environment _register_thread_local_exe_atexit_callback __p___argv _seh_filter_exe _c_exit _cexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

resources/luascripts/animations/dab.lua

SHA256 43f4602d306d3546201e663f1940f7ce39870549a892f9ed79bc37e090ecaf2f
MD5 fb2c8f520063c5bb68ea74e15d5633c4
SHA1 601694199fc5bcd9fd1fcdd396381c86402799d6
SHA512 4a557c0954dfd9421632ef6907f1a909e9962db8428289a10bc2189f575fa1a86eedfd0d7a3e4bdb9ae4e6ccd8f525e0ff07d27f7a4c94243e92c1872db6de52
MD5 SHA1 SHA512

resources/luascripts/animations/energizegui.lua

SHA256 0529358b29f4f6e153742cb96123bcd7e6e1ea4e865ea0aa9bbe0fec0c5d0152
MD5 ed3dfb140afc2dd6d0e743e98afdfcdf
SHA1 5b109156e02b2b9cfd1cb0adf01acbbc07e73c76
SHA512 5264c1c219be4c88fd36db24cb7efdd5753e4a1f440447fd03be636e732826690e61bb5bb1d12c1642628d99ea136733a37096cb4b452bd32b3985aa18797eb5
SSDEEP 1536:uq2YCOZhtJW/C0myh01rjdDiqg8JkhX3nRIWyxWWXPGNp3ML9q:uq2YCOZhtJW/C0myh01rjdDiqg8JkhXd
MD5 SHA1 SHA512 SSDEEP

resources/luascripts/animations/jumpland.lua

SHA256 18722b1d3a7c36937ba964ecfcb39da4f32edb07bbc2800a6b6b168fcda628c4
MD5 e1bca62c7303c6cab7fd74aedf693eff
SHA1 55c3f436ecb9798a8b1e1dd7e1d674c1ce9bf949
SHA512 d8957912c84ff30068915559b619e6e294af5c9595102517b2dd18bdf6794b6ca213344151258a90d550b4317d5e711e6807d8b1201ca9468f0bd3e729b4bd5f
MD5 SHA1 SHA512

resources/luascripts/animations/levitate.lua

SHA256 0f471cb5527e96ed48ed21f59714b78c64c944d528d65109946d8f91e0d76792
MD5 648e324c30233817a5e8beba883ec83b
SHA1 361e263c1a83419d3697de6ddb95499ac944f732
SHA512 268a9e099330594f910fd2667a64d323b502c835849f644932515e927c86745393a1832e837da6678a980e4d2abeeb08f318fcc221c0fc278704b79328ef02ae
MD5 SHA1 SHA512

resources/luascripts/animations/walkthrough.lua

SHA256 bdbb65085c0243f9bbb52e93a69a986124454d9ecee5c715e3f2dcd945b55d7c
MD5 9163555c03919dd219ea4d9148eb8197
SHA1 1f11d683f759202e477159da3821efb3717e0f2a
SHA512 d0bba456a6c25e6e8e45576a5a9d2f98bb803ff0ee1fa725a3c6fbca0bf58d4fae516fdc5b8a5db4ac32c68c4e2fc6d1acdf4b20444c1100e8a6ae87671f5050
MD5 SHA1 SHA512

resources/luascripts/beesim/autodig.lua

SHA256 966ec09731f7ba1189608d2eb8a5c720b5ae3084e1fdf67edea1a8b4112c025b
MD5 5dc1d76f6de7094c6b6920567670f7bf
SHA1 6fd07a5bf578f892a045840c68387b537d6d8a45
SHA512 6d86d0c60086723c3a65fe33e390b778268cad2895763abe1267abe2aa765f30a3ed7da6d1248461c25f3774ea7204b1a24c8d2890d8fb2afe7e6017d4d046e5
MD5 SHA1 SHA512

resources/luascripts/general/aimbot.lua

SHA256 31f3508e1aede13141b14aa64cf3600d55385921ca196c796fcc2f69a2d241c0
MD5 591a23901728cb358be97994465d6781
SHA1 8a065c6d62140b9a2472a14e8d369b9543de2cf7
SHA512 099dc99442515a1383dab8e9a12a67b3ce49cb23b69361f4f9125be537ee997da3a21ff6bf42e28b00508dc13376cecdf0dcfe7600e8ec808e0f2629bd8e9a53
SSDEEP 1536:2Yz6ZB5LmvK0d9DQ2JjYhOFW3ajLCSCtWT0y:2XZ92HFW+LCSM6
MD5 SHA1 SHA512 SSDEEP

resources/luascripts/general/chattroll.lua

SHA256 70146fdf2eb371d4651ae9282bea038648ba31b0eecbf25ef1c59eed13571b22
MD5 83cfe90b286ddf7219b98293c07a172b
SHA1 dca7b00f25052146d4384694c935c33242cdc1d7
SHA512 0759620f8e175bfc134b412b0324ac9695f49e3853567d1b5b2465d0cd36476e6e943b56a650b9e2043fbe53e0d14b32992125e7a6afc27ad1f0cfc5cfc854d5
MD5 SHA1 SHA512

resources/luascripts/general/fly.lua

SHA256 61f75b7c49ba22df960e6cb80b0f1ff2357c94312e056a0a34ccb76dcf444132
MD5 2eb9b507b40e8d0e32711427acebc0c7
SHA1 cc3b87bceef3e7371da4965c938bc0edb3230bd4
SHA512 cd70e51ba1b644dca084d881bd9833b752f8b2e9cb47fa334391694d5acc9bd3cc8b4144d001847358d75e3b240592a3f2c1f422f225a5f20dfa65dffc977938
MD5 SHA1 SHA512

resources/luascripts/general/god.lua

SHA256 3788a83407b6352fc754c8c4075d7e8013e0c91125d1641426946b22247f537d
MD5 65a7b1c2d9d18c73744dc9f919d068d1
SHA1 84cd781eef9bb3ab5efc291408529a794f1bac25
SHA512 bde11640c7fcaed9ac3b6047a30f3579fa50f8cf8bd7b4f33a259e36a071a08ced67b163327baf291f4558cb836347b0e4f2de4d9433a39445ba69bb890181a4
MD5 SHA1 SHA512

resources/luascripts/general/infinitejump.lua

SHA256 496af192b1a41c54f22257ed174f75de2f722ca18c7a98bc9cef58e45acfa880
MD5 bc3b3ade9d29745d015f532903112df7
SHA1 04ca868e0ab0a04fb90ac35b594f7cbfabb675c8
SHA512 8639a03c9f65d512eba0b9ef5fba2ddcac7e3cf37f991b2188f0eb2e6a846184f72d6cd13d6e035394cc7cc174188ff8cf89c2d649aa6a719e37ca59b9814842
MD5 SHA1 SHA512

resources/luascripts/general/magnetizeto.lua

SHA256 34f475ef15fa8bf22cd63c6e82d6093d23fb6d855b122e7f95bc7862c7deb873
MD5 ab899d0bd0acf78a70de1c0cb5470497
SHA1 3b3c368ff93847bd6d6133b8a55f155d9cd051c7
SHA512 9b7d1a50a1e6c87bfcadb7e429cbec93bbb13cce3ede33269666680174aeab6c9554748909414e39b4bc140a2f2ae36729c95c758e828e21cb032678476f83b2
MD5 SHA1 SHA512

resources/luascripts/general/multidimensionalcharacter.lua

SHA256 79a3f1ada3e71d1d63c1b8ec3bc84e4684c6da729e367aa6f4ee435344aea523
MD5 0a8f324f104efeb2ef75d8f6f2912923
SHA1 069062b137c8b11d22ddb77cbf5c96c06171fbf2
SHA512 d212dd36d20a62a2f50da3c964b06fd6e6361216d6f32a35810ba5b10a5d35dd334c4c178085985265b1266733f04274a6cbf75f619ceeaa825896b223948178
MD5 SHA1 SHA512

resources/luascripts/general/noclip.lua

SHA256 e61471834f3a99b8b2ebfa166db499edf871ffe68fcb9fff6f113428291d4abb
MD5 f41312c46f3b932b0b6005907eca2d83
SHA1 49577a4d46948ce2ec5aa9c681443e79e7ac25db
SHA512 c873d2403773b072f5ee1c0a4e3de8b4c9799847374ad40a36d25f1937c1110a6e818734d034d7c479815b317efb02c392e5ec0859c0c447cbf648a32ff530b6
MD5 SHA1 SHA512

resources/luascripts/general/teleportto.lua

SHA256 a22a6ef7a55035961c0a6f529c77d1100a333ec7a4caa6384962e273c76cba33
MD5 cd719ca0e57c68facfacef67c2aafe90
SHA1 14a7b929d49c7c2d446fbe1b3e2c9365810ba419
SHA512 280f3f9ca3900a46817ccc2949e95ac380dfcda7652e8ed79a8087e823de7953bc7b6b6a42ba531a98abee5d5bccb87e43c25b588de15ea420a5c821a824256c
MD5 SHA1 SHA512

resources/luascripts/general/tptool.lua

SHA256 c086735b5123a71846ec742c6556d7397519582087fc63d66eed6ddaece7fcb9
MD5 ce07879f513f20ac125f628254bb02e9
SHA1 ffde7a09bf22f8effaff6421191a61501094cceb
SHA512 7ec35ce7ff9a6ae4b90b3351b9f9b26eff6d2633c28c7e3d66d0fcda1fb5d05d55b3b41a56a305b8ff131512c80f31d3a84a37ca413a5c80e57d43a27d33a539
MD5 SHA1 SHA512

resources/luascripts/jailbreak/criminalesp.lua

SHA256 0dc2d5d4c654efd4cf8677d24002c2487eb3dea110a80f1ac58a37875edeebf9
MD5 e652bc139eed69903cb20822f193c0fa
SHA1 0a69925502e1c6c108dbdeff05b5e542a02f45da
SHA512 9c61f59183c3d99fb3825ada92e4bd047914c55cb6a75008dd4dafc550765e7de26999fd2303fa52639c5131ec0b22a642a3780211c8eeafa642bccc4c5c17c7
MD5 SHA1 SHA512

resources/luascripts/jailbreak/policeesp.lua

SHA256 0a9f3745bb074473888e110979277bdcd95ca4e52a7772fa58e285e049b1a747
MD5 0440edff4319e62cfa3ac610db592f98
SHA1 15aebabbdcec9ea2aff63b5e0c13090f5428f6e8
SHA512 0cc783b8aba6736cea884e90e7be63c2f08185f6b0bd92f9c369532d90c34b44d261c7f14f87efb71fcc9e83da56f90e75af5655c6254f17b0500b8425184c00
MD5 SHA1 SHA512

resources/luascripts/jailbreak/removewalls.lua

SHA256 ce46e1d958fe2770ad6750c1f452dc9daa368e37145f5ff408673124145b3ff1
MD5 8cc7ec56d1705fd483d117e2bde7abbd
SHA1 c355b9fb702ef0beb7f8b2230ed10af60b047794
SHA512 a7eb10abe1af88b84bb8527debb27d9ee6134df85d5b90bbc6c4594aa3616e6c755cfa57a92413dd6e81ae6cfb51cbd5d77a202d31c72c573f01fe37e6520130
MD5 SHA1 SHA512

resources/luascripts/jailbreak/walkspeed.lua

SHA256 f0add705381c5c115182376041ebf26cd2b9c79c0a7ca85aba40ef7ba7abca4c
MD5 714c4b5cd399740f7b4199b73b70343c
SHA1 3ea5a72de529b01711b1427790a64972c48aa3af
SHA512 9ccff52549d1c139a8a82cca06a159bd93a31701126fd589c1d8c9c690aa43fe6a163d9caa5ff623b80c0d1569f3aa5800f9dba42a46ec6b3c693c4a6dfe34b5
MD5 SHA1 SHA512

uninstall.exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 98ae0830319fa79dd71f47c9d2e8eb710139041b6bc2457853bdfba922b7833a
MD5 0f0414e77a5159adbbdff7dee55e6afd
SHA1 f354af7244665951f08fb41cf8a28269e6b39577
SHA512 431c9c54301cdc9f7263075755e98af677d9c9f7322f083664d91a024d0bc8adb001713c8d11ab9539b2cba85eeb10c7cc969f0c64d17ad99eae4773f68d7340
SSDEEP 1536:XmsAYBdTU9fEAIS2PEtuugdLeAyNxyPqfZgqFoligcbq4:WfY/TU9fE9PEtuuceAr6ZgqyiH1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
MD5 68b287f4067ba013e34a1339afdb1ea8
SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 17cb20871354b907f678c7c220e4ca60
SHA256 c0f2b928bc4c81cc5ca30a8932a6dc8cd617dd016679c057e23355fe732b2333
MD5 8def0196223484f8aed4106148dd3f08
SHA1 e0fc0951deb0e5e741df10328f95c7d6678ad3aa
SHA512 9ffa66181bce5aa5210da0fe5edc6c80aa9e46e2bd1fafd840f468965f4d06bc03f9a77e04b975ffc9f25c886c274196e3fedae6cfb57f366ef39f1e31e1ada7
SSDEEP 768:97F3QRyGmiZZ1FCeu2rcFKpnq0jdhK7W+qdxi:hJQRtmaF7YMX/q
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4415

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer