OverwatchWebcam_Win64_v[.]0[.]4-97[.]zip

resource
unpack001/OverwatchWebcam Win64 v.0.4-97/GameAssembly.dll
unpack001/OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam.exe

OverwatchWebcam_Win64_v.0.4-97.zip

SHA256 9a4f371dafc70b6347dc125ec9803df96b2d77511e42bc1c236fbaf1c56be1ef
MD5 56375f1201879ad42b35fb8188c4b3ea
SHA1 fda0d3d93c877be59ca014b514dbfa6797b3946c
SHA512 b3d4c528e337c2f0321db05c5478c66b191e68fa27aa594caf73342a6007b820f1eec4dee5d4ff1683f9d7a8a416838323fd5d797467f895e3564df76da5cfab
SSDEEP 3145728:AVkOLNiyboqjxjAKi5MQ/BdmI/fS9UQ6gNAjV8pTMz0Heg4vWhd8i/ClXtW9cQAf:a9LoCMt5MQ/t3SxyGTCJg4vEqiql6cRp
MD5 SHA1 SHA512 SSDEEP

Password

l

OverwatchWebcam Win64 v.0.4-97/GameAssembly.dll

IMPHASH b421ebe9bcc9cd46ea2c45e0eb8b58c2
SHA256 efc3cee18440bde686fb67954e3ff108d9b4b0e333e36b215ff526986b70d90f
MD5 b3609e85659f053d8b4982d4de1d7065
SHA1 e7b6ab7d7aa9d789cfa427828d3b8dc677e6151a
SHA512 738cd4452f5ed52a7d2b4ccd5b819b71002ecb4396032ce10b0a4234977756626498735626e7d5206eecc85076581ccea37fa803b1233981f1dc0855b2f1ceff
SSDEEP 393216:X7a5Ja7M/92ZSEAYLaTZFt2gJm1Uopz+1qxc7Zw0bi7nG:LcM7MVi12Lbi
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

l

Minor OS version

0

Major OS version

6

Entry point

2330104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Work\GCS\GCS\Unity\Library\Bee\artifacts\WinPlayerBuildProgram\u1oik\GameAssembly.pdb

kernel32

QueryPerformanceCounter QueryPerformanceFrequency InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS GetCurrentProcess GetSystemTimes GetSystemInfo GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetComputerNameW GetStdHandle CreateDirectoryW CreateFileW DeleteFileW DeleteVolumeMountPointW FindFirstFileExW FindNextFileW FlushFileBuffers GetFileAttributesExW GetFileSizeEx GetFileType GetFullPathNameW GetLogicalDrives ReadFile RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFileInformationByHandle SetFilePointerEx WriteFile CloseHandle DuplicateHandle SetThreadErrorMode CreatePipe GetOverlappedResult CancelIoEx GetCurrentProcessId GetNativeSystemInfo FormatMessageW CopyFileExW MoveFileExW ReplaceFileW GetTimeZoneInformation GetDynamicTimeZoneInformation GetFileInformationByHandleEx GetConsoleMode GetLongPathNameW GetTempPathW GetModuleFileNameA GetModuleFileNameW WideCharToMultiByte GetACP GetLocaleInfoW GetThreadLocale GetCurrentDirectoryW FindClose IsDebuggerPresent Sleep GetExitCodeProcess SwitchToThread VirtualAlloc VirtualQuery CreateFileMappingW OpenFileMappingW MapViewOfFile GetEnvironmentVariableW K32GetModuleBaseNameW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection RtlCaptureStackBackTrace RaiseException SetLastError CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority FreeLibrary LoadLibraryW GlobalAlloc GlobalFree SetFilePointer SuspendThread ResumeThread GetThreadContext VirtualFree WriteConsoleW GetProcessHeap GetCommandLineW GetCommandLineA SetStdHandle HeapQueryInformation HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared GetOEMCP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW RtlUnwind FlsFree FlsSetValue FlsGetValue FlsAlloc HeapReAlloc HeapAlloc HeapFree GetConsoleOutputCP ReadConsoleW GetModuleHandleExW ExitProcess LoadLibraryExW InitializeCriticalSectionAndSpinCount InterlockedFlushSList ReleaseSRWLockExclusive InitializeSRWLock GetLastError TlsFree TlsSetValue RtlUnwindEx TerminateProcess InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW GetCPInfo GetStringTypeW LCMapStringEx MultiByteToWideChar DecodePointer EncodePointer InitializeCriticalSectionEx RtlPcToFileHeader SetEnvironmentVariableW TlsGetValue UnmapViewOfFile TlsAlloc

user32

MessageBoxA

advapi32

GetUserNameW CryptAcquireContextW CryptReleaseContext CryptGenRandom

ole32

CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoInitializeEx CoTaskMemFree CoUninitialize CoGetContextToken

oleaut32

SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetDim SafeArrayDestroy SafeArrayGetVartype SafeArrayCreate SysStringLen SysFreeString SysAllocStringLen

shell32

SHGetKnownFolderPath SHGetFolderPathW

ws2_32

inet_ntop inet_pton getnameinfo freeaddrinfo getaddrinfo WSAPoll WSASend gethostbyaddr socket shutdown setsockopt sendto WSACleanup select recvfrom ntohs ntohl listen inet_ntoa inet_addr htons htonl getsockopt getsockname getpeername ioctlsocket connect closesocket bind accept __WSAFDIsSet WSAStartup gethostname WSAGetLastError send WSARecv WSAIoctl

iphlpapi

GetIfEntry GetAdaptersAddresses GetNetworkParams

dbghelp

SymInitialize SymFromAddr

baselib

?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z ?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ ?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z ?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ ?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z ?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z

BrotliDecoderCreateInstance BrotliDecoderDecompress BrotliDecoderDecompressStream BrotliDecoderDestroyInstance BrotliDecoderIsFinished BrotliEncoderCompress BrotliEncoderCompressStream BrotliEncoderCreateInstance BrotliEncoderDestroyInstance BrotliEncoderHasMoreOutput BrotliEncoderSetParameter CloseNLSocket CloseZStream CreateNLSocket CreateZStream DllCanUnloadNow DllGetActivationFactory Flush GlobalizationNative_GetTimeZoneDisplayName ReadEvents ReadZStream SystemNative_FStat2 SystemNative_UTime WriteZStream il2cpp_add_internal_call il2cpp_alloc il2cpp_allocation_granularity il2cpp_array_class_get il2cpp_array_element_size il2cpp_array_get_byte_length il2cpp_array_length il2cpp_array_new il2cpp_array_new_full il2cpp_array_new_specific il2cpp_array_object_header_size il2cpp_assembly_get_image il2cpp_bounded_array_class_get il2cpp_capture_memory_snapshot il2cpp_class_array_element_size il2cpp_class_enum_basetype il2cpp_class_for_each il2cpp_class_from_il2cpp_type il2cpp_class_from_name il2cpp_class_from_system_type il2cpp_class_from_type il2cpp_class_get_assemblyname il2cpp_class_get_bitmap il2cpp_class_get_bitmap_size il2cpp_class_get_data_size il2cpp_class_get_declaring_type il2cpp_class_get_element_class il2cpp_class_get_events il2cpp_class_get_field_from_name il2cpp_class_get_fields il2cpp_class_get_flags il2cpp_class_get_image il2cpp_class_get_interfaces il2cpp_class_get_method_from_name il2cpp_class_get_methods il2cpp_class_get_name il2cpp_class_get_namespace il2cpp_class_get_nested_types il2cpp_class_get_parent il2cpp_class_get_properties il2cpp_class_get_property_from_name il2cpp_class_get_rank il2cpp_class_get_static_field_data il2cpp_class_get_type il2cpp_class_get_type_token il2cpp_class_get_userdata_offset il2cpp_class_has_attribute il2cpp_class_has_parent il2cpp_class_has_references il2cpp_class_instance_size il2cpp_class_is_abstract il2cpp_class_is_assignable_from il2cpp_class_is_blittable il2cpp_class_is_enum il2cpp_class_is_generic il2cpp_class_is_inflated il2cpp_class_is_inited il2cpp_class_is_interface il2cpp_class_is_subclass_of il2cpp_class_is_valuetype il2cpp_class_num_fields il2cpp_class_set_userdata il2cpp_class_value_size il2cpp_current_thread_get_frame_at il2cpp_current_thread_get_stack_depth il2cpp_current_thread_get_top_frame il2cpp_current_thread_walk_frame_stack il2cpp_custom_attrs_construct il2cpp_custom_attrs_free il2cpp_custom_attrs_from_class il2cpp_custom_attrs_from_field il2cpp_custom_attrs_from_method il2cpp_custom_attrs_get_attr il2cpp_custom_attrs_has_attr il2cpp_debug_get_method_info il2cpp_debugger_set_agent_options il2cpp_domain_assembly_open il2cpp_domain_get il2cpp_domain_get_assemblies il2cpp_exception_from_name_msg il2cpp_field_get_flags il2cpp_field_get_name il2cpp_field_get_offset il2cpp_field_get_parent il2cpp_field_get_type il2cpp_field_get_value il2cpp_field_get_value_object il2cpp_field_has_attribute il2cpp_field_is_literal il2cpp_field_set_value il2cpp_field_set_value_object il2cpp_field_static_get_value il2cpp_field_static_set_value il2cpp_format_exception il2cpp_format_stack_trace il2cpp_free il2cpp_free_captured_memory_snapshot il2cpp_gc_alloc_fixed il2cpp_gc_collect il2cpp_gc_collect_a_little il2cpp_gc_disable il2cpp_gc_enable il2cpp_gc_foreach_heap il2cpp_gc_free_fixed il2cpp_gc_get_heap_size il2cpp_gc_get_max_time_slice_ns il2cpp_gc_get_used_size il2cpp_gc_has_strict_wbarriers il2cpp_gc_is_disabled il2cpp_gc_is_incremental il2cpp_gc_set_external_allocation_tracker il2cpp_gc_set_external_wbarrier_tracker il2cpp_gc_set_max_time_slice_ns il2cpp_gc_set_mode il2cpp_gc_start_incremental_collection il2cpp_gc_wbarrier_set_field il2cpp_gchandle_foreach_get_target il2cpp_gchandle_free il2cpp_gchandle_get_target il2cpp_gchandle_new il2cpp_gchandle_new_weakref il2cpp_get_corlib il2cpp_get_exception_argument_null il2cpp_image_get_assembly il2cpp_image_get_class il2cpp_image_get_class_count il2cpp_image_get_entry_point il2cpp_image_get_filename il2cpp_image_get_name il2cpp_init il2cpp_init_utf16 il2cpp_is_debugger_attached il2cpp_is_vm_thread il2cpp_method_get_class il2cpp_method_get_declaring_type il2cpp_method_get_flags il2cpp_method_get_from_reflection il2cpp_method_get_name il2cpp_method_get_object il2cpp_method_get_param il2cpp_method_get_param_count il2cpp_method_get_param_name il2cpp_method_get_return_type il2cpp_method_get_token il2cpp_method_has_attribute il2cpp_method_is_generic il2cpp_method_is_inflated il2cpp_method_is_instance il2cpp_monitor_enter il2cpp_monitor_exit il2cpp_monitor_pulse il2cpp_monitor_pulse_all il2cpp_monitor_try_enter il2cpp_monitor_try_wait il2cpp_monitor_wait il2cpp_native_stack_trace il2cpp_object_get_class il2cpp_object_get_size il2cpp_object_get_virtual_method il2cpp_object_header_size il2cpp_object_new il2cpp_object_unbox il2cpp_offset_of_array_bounds_in_array_object_header il2cpp_offset_of_array_length_in_array_object_header il2cpp_override_stack_backtrace il2cpp_profiler_install il2cpp_profiler_install_allocation il2cpp_profiler_install_enter_leave il2cpp_profiler_install_fileio il2cpp_profiler_install_gc il2cpp_profiler_install_thread il2cpp_profiler_set_events il2cpp_property_get_flags il2cpp_property_get_get_method il2cpp_property_get_name il2cpp_property_get_parent il2cpp_property_get_set_method il2cpp_raise_exception il2cpp_register_debugger_agent_transport il2cpp_register_log_callback il2cpp_resolve_icall il2cpp_runtime_class_init il2cpp_runtime_invoke il2cpp_runtime_invoke_convert_args il2cpp_runtime_object_init il2cpp_runtime_object_init_exception il2cpp_runtime_unhandled_exception_policy_set il2cpp_set_commandline_arguments il2cpp_set_commandline_arguments_utf16 il2cpp_set_config il2cpp_set_config_dir il2cpp_set_config_utf16 il2cpp_set_data_dir il2cpp_set_default_thread_affinity il2cpp_set_find_plugin_callback il2cpp_set_memory_callbacks il2cpp_set_temp_dir il2cpp_shutdown il2cpp_start_gc_world il2cpp_stats_dump_to_file il2cpp_stats_get_value il2cpp_stop_gc_world il2cpp_string_chars il2cpp_string_intern il2cpp_string_is_interned il2cpp_string_length il2cpp_string_new il2cpp_string_new_len il2cpp_string_new_utf16 il2cpp_string_new_wrapper il2cpp_thread_attach il2cpp_thread_current il2cpp_thread_detach il2cpp_thread_get_all_attached_threads il2cpp_thread_get_frame_at il2cpp_thread_get_stack_depth il2cpp_thread_get_top_frame il2cpp_thread_walk_frame_stack il2cpp_type_equals il2cpp_type_get_assembly_qualified_name il2cpp_type_get_attrs il2cpp_type_get_class_or_element_class il2cpp_type_get_name il2cpp_type_get_name_chunked il2cpp_type_get_object il2cpp_type_get_reflection_name il2cpp_type_get_type il2cpp_type_is_byref il2cpp_type_is_pointer_type il2cpp_type_is_static il2cpp_unhandled_exception il2cpp_unity_install_unitytls_interface il2cpp_unity_liveness_allocate_struct il2cpp_unity_liveness_calculation_from_root il2cpp_unity_liveness_calculation_from_statics il2cpp_unity_liveness_finalize il2cpp_unity_liveness_free_struct il2cpp_unity_set_android_network_up_state_func il2cpp_value_box jinfo_get_method mini_get_interp_callbacks mini_jit_info_table_find mono_arch_clear_breakpoint mono_arch_context_get_int_reg mono_arch_context_set_int_reg mono_arch_set_breakpoint mono_arch_setup_resume_sighandler_ctx mono_arch_skip_breakpoint mono_arch_skip_single_step mono_arch_start_single_stepping mono_arch_stop_single_stepping mono_array_element_size mono_array_length mono_class_get_byref_type mono_class_get_checked mono_class_get_context mono_class_get_element_class mono_class_get_flags mono_class_get_image mono_class_get_interfaces mono_class_get_methods mono_class_get_name mono_class_get_namespace mono_class_get_nested_types mono_class_get_parent mono_class_get_properties mono_class_get_rank mono_class_get_type mono_class_get_type_token mono_class_has_parent mono_class_instance_size mono_class_is_enum mono_class_is_valuetype mono_class_num_fields mono_class_num_methods mono_class_num_properties mono_class_value_size mono_debug_find_method mono_debug_free_locals mono_debug_il_offset_from_address mono_debug_lookup_locals mono_domain_foreach mono_domain_get mono_domain_get_assemblies_iter mono_domain_get_corlib mono_domain_is_unloading mono_environment_exitcode_get mono_environment_exitcode_set mono_field_get_name mono_field_get_offset mono_field_get_parent mono_field_get_type mono_field_set_value mono_find_prev_seq_point_for_native_offset mono_free_method_signatures mono_gc_register_root mono_get_byte_class mono_get_lmf_addr mono_get_root_domain mono_get_runtime_build_info mono_get_string_class mono_image_get_assembly mono_image_get_entry_point mono_image_get_filename mono_image_get_guid mono_image_get_name mono_image_is_dynamic mono_jit_find_compiled_method_with_jit_info mono_jit_info_get_method mono_jit_info_table_find mono_marshal_method_from_wrapper mono_metadata_free_mh mono_metadata_generic_class_is_valuetype mono_method_full_name mono_method_get_class mono_method_get_context mono_method_get_declaring_generic_method mono_method_get_flags mono_method_get_generic_container mono_method_get_header_checked mono_method_get_name mono_method_get_param_names mono_method_get_token mono_method_is_generic mono_method_is_inflated mono_object_get_type mono_object_unbox_internal mono_pal_init mono_property_get_get_method mono_property_get_name mono_property_get_parent mono_property_get_set_method mono_restore_context mono_runtime_is_shutting_down mono_runtime_quit mono_set_is_debugger_attached mono_set_lmf mono_string_chars mono_string_free mono_string_length mono_string_new mono_thread_attach mono_thread_current mono_thread_detach mono_thread_get_main mono_thread_set_name mono_thread_state_init_from_current mono_thread_state_init_from_monoctx mono_thread_suspend_all_other_threads mono_type_full_name mono_type_generic_inst_is_valuetype mono_type_get_attrs mono_type_get_class mono_type_get_name_full mono_type_get_type mono_type_is_byref mono_type_is_generic_parameter mono_type_is_reference mono_type_is_struct mono_type_size

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

il2cpp

Size

21.1MB

Virtual Size

21.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.6MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

526KB

Virtual Size

525KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam.exe

IMPHASH ce1183cc150987a99aef5749f22af81e
SHA256 4f5f0c809a174a4292988d01df8d580e7f6b97895d60cdaf42fd47ffa3541f37
MD5 bc581da5a7f76f659b1429bace87ef0d
SHA1 a3950bf7abcaf572383d193b0acd5bf7fa281af3
SHA512 c5b2e9248ee73de4a5db47f02a269872ebe8fe8736fa4e09a2cdc2770b205b17b95b031dbb2d773f7b259f1dfc628c9100935302feb4ebe1a39bdf5a8e4d6b25
SSDEEP 12288:C/744aOD8sgZnQtUIbX7D3Jl/i6//m/Utbj9qmseloiUFB6yBQHP:o9aOmQX7D7/i6//m/Ut19sEoFr3BCP
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

l

Minor OS version

0

Major OS version

6

Entry point

4704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

unityplayer

UnityMain

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

552KB

Virtual Size

552KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/Resources/unity default resources

SHA256 447caf3737cc58e2cf965f9829ae1c00c2c88505c055df2e8be0d8ede76b4da9
MD5 143dc232c9457e1bb787ca819754dd9b
SHA1 86c8eefd06d786c341d8f563c1b56899f09e7d93
SHA512 de3d8771a43b0a0f584cd6d769dc0fe73c7279e3d0f19fb6975ce5f75430ce7312bc9057f8f2aaf2647dd6b07440f3b97f789e0ee0a6a51f8f8b56f0f764b3bc
SSDEEP 6144:MWJxVJ0aYR1CCVX8BAiZahS3YW+/OJ9WqCmKISHCkcCqw:L8TpQahHvOjdCTew
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/RuntimeInitializeOnLoads.json

SHA256 f9eac363e79a5052c2c5b8fc118b60aaa8de3e043c84ed7546254e6986964971
MD5 0f53f5695521a1324677395209a9095f
SHA1 ce3a07079ea22befdc0eaaae54c389c759e5a649
SHA512 5666b0aedff955287dd9c7b66eb9c73b6a7b50890325b8ab24d0ba55b24122f52b42cc9861f75c76598828fff69d1af7166011d0a5e5fba760a26f0a8702b90c
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/ScriptingAssemblies.json

SHA256 9b117f62d813ab84abdf94bd674ea78972411b3464de4bcad4d32d5240108022
MD5 91623b423efe4b15c7824066151a4d10
SHA1 cf39e4d66a4688fd7a3587900269589525e055a7
SHA512 58b68dd1fafcd8b8481d7c6b4586fa250f86d67c5723d719b4ac4c147b40dbe0def5b4e79bc0b54cf075a7afb11566d485922973fe91d0895238ea8f045b4e26
SSDEEP 48:YXNAYrKXrjFRlClouNuQGoSfTG/fj5P7hHdmlhd9bmUFpDq7:G0jrlMouNtjfHdmbm/7
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/Android_version.txt

SHA256 eb1e33e8a81b697b75855af6bfcdbcbf7cbbde9f94962ceaec1ed8af21f5a50f
MD5 c16a5320fa475530d9583c34fd356ef5
SHA1 632667547e7cd3e0466547863e1207a8c0c0c549
SHA512 5305f867c631e8335813a103a4942a93037c3d3b1982eab342fb495047dcc79e13299ab65b5f4a34400f15af384eda2ed7144671e83996334c0669fc8377a130
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/UnityServicesProjectConfiguration.json

SHA256 56d63edcecd2c75f08f22583a3033fca7cedb02aa3f7022f65322718586da2d0
MD5 ae7b42d887960485453f5c1089d14c0b
SHA1 e83af71e4ac0d971f77a0362ee44c7e50ea92219
SHA512 dddad9372d25b5aad9d3ab612b991c5c4792a54fa2de10bd1fe7260944e78e8f6802ddfea9de3471639f104dde448d5f56edef2c6bf333dcdb721e295eade3a9
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/WindowsEditor_version.txt

SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/WindowsPlayer_version.txt

SHA256 7b1a278f5abe8e9da907fc9c29dfd432d60dc76e17b0fabab659d2a508bc65c4
MD5 26657d5ff9020d2abefe558796b99584
SHA1 6fb84aed32facd1299ee1e77c8fd2b1a6352669e
SHA512 891014f3aa311091ca567206aa98adf7d0395b10e39c5dc51fd2cec15e0732fa0d24a725cbfa5435e8973e2d2e4786c28c204bcab6c2c43c284fe08996be6b77
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/AddressablesLink/link.xml

SHA256 87bd2fbab92657c0100108d3be918e0ebc4a50d9afc9c8c2100c583798075cd7
MD5 7fd1b8ba1f988493a45ded42e44edeaf
SHA1 457caed3f67b6bd723ac664d1b05dc57e5c38be5
SHA512 346c59a77f3ca34543eba9bb1d495d49cba32bff3b7a8c46c1447d63335e1a8cbec81d313ad0b9542eac594183164c3c43b3e55dbc94d354182723882759fc3e
SSDEEP 192:FecuoJvsuTakc762HCQKSP4DfahKoEKbOrurTFTfTITL1RAQ50s:Fe0siakc7LEfwKoOe+j
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/_unitybuiltinshaders_34ee23b107d57e68e8da5959cd25d819.bundle

SHA256 9d4eafc1c11f3808bb114818640b3cadbb7986556e035261a7ec34e1c3e605c6
MD5 87a31e963824f487771312cde939623b
SHA1 baf56dab9e8fda1ed6e6f70c7e54d4970a36b3c8
SHA512 1207d48a11967bfd51b35afb87713840367df32241525bf832873f91c5ffbbd3cc13f3d5214a4ab5cefcdefb43f9e0886398d19cb1dc22544c6dfbe9c8104fd6
SSDEEP 768:bZm5KbbwXoR1Dt78rWm9QTUrU9u17YFr7KrbACX+lRMYTrQBOIsDcm:b7cw1tcWm2TTu1uOrn+lWYghsDcm
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_19_ridingpov_dva.bundle

SHA256 5567802d0f0f9c65cedded03efc2aa9cdaddf8c5b9695c8a0f65b96237bf355b
MD5 a906580c3bb6ffda507a2215e5f82d13
SHA1 c032cdc0d4bf8578b7fd955fabea8f5f901a9312
SHA512 ed0dc8dee0e59698f06107c7837dcf2c07f858e7e05ff249d619ed3b8fa866670183b12954863f33916b3f86510099b5cb0e0bf7d882d5dd46d807ad9fabe9c1
SSDEEP 384:pntkN8wIHA7Vt5+wxHKz859FnNfE/Dfw+PpgUF:ptk+wIIJ9HvPpNoY+B1F
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_20_facesit_dva.bundle

SHA256 a6ba446fe68129240f6432888cfd3b7051dbb0ee4456a78cc79c5d1f6c272280
MD5 6c0eaf6b583c696bb4e7718570b5e2cd
SHA1 da7f8e37861b950ee20ef792d7dc43ede855451c
SHA512 b4445f1f4ad9874f9dc106341220bcca2ef12035c77c07172d52e7c4f375b7b59789889bac67e2a8d96106e2c2b6a4064d9debbbcca53c544db065242511cc5b
SSDEEP 98304:DXSkqfRyhtt8zC6tN4Ug13NY+MRVlyJMihnXlm/TqrgNwj3Gkgyi0npi:Xhtt8ZQUaMXahn1ET/p1yli
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_23_stretching_tracer.bundle

SHA256 bef9655845b9f423e1f4cd7e518ae8407eb4af2cfd62a3841b1c6d43e552e372
MD5 610d130e22a49c1a0e153a2a4d1ea158
SHA1 8b78b7126a36d84571130e4537f9fa2a2f8da442
SHA512 0dd43efc435ec64b6f3c6454af62aa932b074402f5eb3acfd5f4806af2b3c05b6fdda924299fd7e71554c90f8548ea5137a90bd30b6f1ac6d32fb66c3208151d
SSDEEP 98304:vQXGUpep0SmvndHjuobejVDfo/8aX+QEZI8WQ00vj2HbRrbYhu/KUMs7LR8kCe8v:vrs/Tx7warBKL9ggq2
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_25_sandwich_dva.bundle

SHA256 c3039a764f1b20d52b1cd58067713612ce81b39fe9510cdd8e6dbd2811158cd0
MD5 ef5ff9aa32dbfab3ca059b1369b4b21a
SHA1 52ff0075462c223338c44dd0f423698af1ac8444
SHA512 301c59c0405e69ea90891acce599414173fa8aeaab904169e1e54c5e9e55674f67a71c28d257c1de23bf6c8474b6243c5e67d5a93ba59c2bf084861d1565ae07
SSDEEP 384:A1Bu/+vi+9/AsBOJVEgdrE3isV0NCEHajRyW5QCRAUFBDjdB:AnKcie/AsBjgRaXV5EHwRyUBDjdB
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_29_slap.bundle

SHA256 7b3a153f106930bc6422ae1654bf2b70cda08c23e157c57ede5098e1c6f774a7
MD5 6ee3e2c65cc8824990a74f3915cdc2ee
SHA1 ce43d51420a4dda9349e1aff657412ba90b4cec2
SHA512 b06cbe960701adcf7b99d2759bf0548f049db38f2ac3b8c7062b8b0f83e7d2d18b7a5275922a7800893bbb9fc1f2815e8c11f274e3381adfe22a78017efaefae
SSDEEP 49152:fwpVLheokwv+p4qR2miu/gAdvGv2TxZMC1TxNi:nVwW6/ZuoAhGvCxKSFA
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_31_missionary.bundle

SHA256 01ed2bd7f8c56febacc9bb756a4e2ca357c04169c814a9f6d674bb4ee1f86287
MD5 1ca62a30d1dddea72d24ac266e4cd314
SHA1 06a4f015d00976bd5fd594032d53ef918c605cfc
SHA512 8c54ba6a0259325bfaa6bb6321f35aca099aa8614fcbb32e1f7c72aefa2d27784d594e0dd2e6ae49365d72b16c8b222b5203a2070e913e139ff5c9755cdf9b7c
SSDEEP 49152:SFZhBD4+PyLl/k1QIOv9tJDOkZthZQJiccE03:SjjDlk9dIOVtJikhZmcp3
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_33_povanal_dva.bundle

SHA256 c95ccfb1cc7121fc993f088250085e64aab4474e885f6233440452326d5da518
MD5 cb95e9f7cd049ff55b4ce86a974f689f
SHA1 cde9d322a88a5525fb3b88dd4c6dc9191d3328a6
SHA512 76376b7dbb08e29286781a36689257a02d10543ce70cca922d585a137943bf924dff01b388211547925f22f9fa4ee6cd6fc45a7b43634a09e58f621f15f388ef
SSDEEP 384:aHILLyD0HNa6sKFrC06DShVc93nDXY7KsrlOP4Pn8UIJMqHnmfyopFp8Yh3Ijbmj:aGdHErKhCTShK3nDI/1PnafHQzkYh3ky
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_38_frombacklaying_dva.bundle

SHA256 b8f70f43540077df894e34a80da488fca195372ed7f71246accc36aac3204578
MD5 d081f60c411a5c031120e8ac560a88a4
SHA1 98276c9e97a9cdd267ce1a8e3194de6c6f3b7e81
SHA512 d7999e78d1a72eef783a5bb414a6084ec543138f7ab676a673cb22f7b5034c2030d5dc4754e4da47b687c51f92e4f1f8507f919d3dcd2a90d4e680606ac641f2
SSDEEP 196608:OlWYZqiW16NiZFdzuCafHj8flhUl/wcEHhPQurExK6rLNON:OlWjiW16A1qHfHy+twhHBQTK6PNG
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_39_squatsbarbell.bundle

SHA256 503586a0b93748dbffdf71f1d8fc7ebf45708d0085e0effea60612fd8e582d91
MD5 a5e805ce73dbbf0c08068186402694f4
SHA1 2318a23ec8605303c99b7eb087d5f7aedc3495c4
SHA512 364db609ae35aba2600caaf949fb03b224c66ae9eee704c9f47c77a5b1de5a85206ec7b46d6bccfb64afce44f4100c39c989feaba7375cb95212e58477a5cdb9
SSDEEP 384:iVrstAe1VAF1fjtnwPlD02/BQuOtnHDnQNjnumZECIggsF0ibd+XK8AtNQaP:iVsAgAF1rtnulDr/8JnQNjnzE0jwX5An
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_42_poledance_dva.bundle

SHA256 e4138e2667dd54d96ccf6afccc772a41d8dfaebc23beca7386798b72f1aa3f7c
MD5 7360ba46bb8f953c614c8332532c1896
SHA1 013ac1f017720c31e5784781ca2fc4e0f784962d
SHA512 18f24e56b4f10e84f57450a3b3908406959d261c3413ce17de79db04397ce20514ee732c88ff3614b99616c8c7b93cd5f82193dd612b44ebe5455b04f2a9c0dd
SSDEEP 196608:X8T/GmjKWdegNC6RKn4D+lcqwTWYufPkAIMw:X8T+kegNuhlc/ufIMw
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_44_wallfuck.bundle

SHA256 1fb1ac3c4aa709db227f5ff3f80755486c5e621da355772610790c2bc1367af3
MD5 c28828768f40d3482adb16e247894617
SHA1 e414d5db7512d329d08d55efbf97a7cf29db843a
SHA512 e3920996bb73c9a3dff57023cdb418264e825ef168ccb1fb16228a3aaddc89de3aa96ed54d012bbe24052d5494cef07cc9d9a86093a1a8acfb157241f60fb8d3
SSDEEP 49152:6NCG412sZsgMKXHPrvP17DP8Xi560LSYPUQkwGj1NMq8E:rGTsZsgLp7DEyeapkH8E
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_46_deepblowjob.bundle

SHA256 b3a8b409aeb5775fa89acf2c3ae7fb4a98e9f71bbe2bafdfb63ddd9856f00ebb
MD5 742ccbd91ec8dafceda5eed5a0fe0eca
SHA1 ec991e3d61498acdb4a8ca2b0b03f7d0f3f55124
SHA512 a430c8828a45d3e15db6b55669d7a417ec42f703aa968ea3d2ffc836a76dddacb64e227b0a465da11ec2711027d971370f2cddf7078ee24b7cdc76cd6f82ace5
SSDEEP 49152:fAA5tub7vEqfxPiWM95QLFDBTnn2THB8xA5IKjwnOsxupiX9++S:oA5tubT3A5UFd2sA5IvnOs4G9PS
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_48_sideblowjob_dva.bundle

SHA256 568e84223c720a1a6b79d37305a653930fde4a10805027ea6f0405a06b56d411
MD5 dc224252e39d1815e6962dc8d0c8b24e
SHA1 0f96e13975ff7b5a689026809c34ce696aced2af
SHA512 dbadc0ff127749e282c66ce5a2a9e10a6b6410714fb1740279bcb15ffea2b608edcc916b09d6f3c9fb754e6f20091ba68e06fe069ddd12101434ce6ef1c78944
SSDEEP 196608:8Q842oG+cburys2ZY0PiLcNnx2FE5VQ9f4ViDTJH:d8doG+cyTviCwnH5IWEJH
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_49_frombehindonknees_tracer.bundle

SHA256 58fa16a8e19ab64552e087f8423d41dfca81a2025a491c34f8f620f9a9e34306
MD5 5bb85b635222e603c9c0dbd5bdb31349
SHA1 2d3a612b0310de12a2ab2d0aa0130badedd714cf
SHA512 a216d5e3f214b706ab2a9b11bc7895e21d9f99c94796431420d37558eff9a2ac7a75584fb2aa554ca671d95ef64e3a6bb56433c6b74efa939579512c00809120
SSDEEP 98304:S+XRBjNYYvLHuPGHgVo86V43rWOoURdaynN/SGcdDBAsCDjGgKf:FXRB1vLHuPc2o86IrxWyd+BCD6f
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_4_ridingreverse_backside_dva.bundle

SHA256 4fdd27cc53154bbeb528e405e17853f0f2e8699267e7eee33c2ef6000930ed4d
MD5 11d7d0f9518034af1b79c779200d636a
SHA1 d43654d21075cbd580f310089e9112527cd58623
SHA512 f1f25df7f4826e6eb7feadce6ad8efc69a3b54799b265c1495bd2b005a15ee73e40a3bb0d53104ccde2f7461e5dbdfc44b281176ed6b8602e0d7f58ac86763d1
SSDEEP 384:IvN+bQKpxqtBagaareUqPGfi68VSsgWLxnSXHOo5ZT4:IvCTqtBzaw60iFS29SX3fs
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_6_floor_bottomsup_dva.bundle

SHA256 91d62511cb7fbca62b48076e43620268ab14a2fb1ad1af27caa39911564691a6
MD5 292bbecd3d1f32cf04ec6f0b56bf73ae
SHA1 7d4a59276541d92016d330fa7d7dc9c4511f3238
SHA512 649cc2d75d3d573400a57de2dae37006a963ecffe26b7a51c1b709d5ad417bcba4951ab69ca81f7d2817748edde47eedc54705f79ba2e209c4e918b7a7cc6638
SSDEEP 384:90Z+LMuvpF9e5zs9QvxQF/OHZJDGjDBVogoDKwmzTzZFnDkSf1jaa8EwQ:9cKMmpPwweQF6J2BygoDATlxQSN3lf
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_shared.bundle

SHA256 166b0659b12bf16dd19a5f2524ad7107c8760d80b807a3723907e136dcb0a86d
MD5 b26d85ec16f260dbde50c1d0296a53ff
SHA1 23590d23cc25c51d485ca4baec5d7433576b3e2b
SHA512 b320d902fe8ad71e89d731a28f22cdc8e695d81a96f8d065c4f120325781d2cab956a658866bea50145bde4f2dedf8acc02c0f208e1d9982f391e504133c1be3
SSDEEP 98304:c+b0jCRJDIFua6fv1WH/cnCRc2SKoo64j9Awcp5srWo/CAWrvi2MmrzSue/n7efL:c9CfIFuaMWH/cnF4jLcvsrT/CAWm2VMS
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_shared1.bundle

SHA256 ccfab2729b3dd66f6b9b40517fdab886d3bf0d2f4cf8e4ba3a9159200957db65
MD5 eccdbee0e3f39c07f972e6fed634c116
SHA1 7e21644c90b120aef4764818d2b74145a6596708
SHA512 533af37300e84c9988e8a874ec7b2af85d7f546a31f02dbd324b29c329ce8cafebebe197afa9bd01f0b6ffb981ff007f26d85f1d0b3dd8819de6153215c753e8
SSDEEP 196608:JuXRMnwc8D+/OMPmRBITmSv2cJtTLqTgnzGBni:JuhMnwcY0PmRBsmX8TLqTgzGFi
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_shared2.bundle

SHA256 697f9778b56748800999a95dca0a46f62a7e23287ec9047e37791a341a1ceeac
MD5 e55334c7b2f8a9caae0c5affcc66ab5b
SHA1 a689eb9d991e0a877f07c290a4e35ae06420688b
SHA512 b996816e689a51c77aa3466b44d775a73f40f9d72f42683f7697066409712d84160be8ad6357e931649aee3ee4264331b0a81f37c2e912342dc0997235038790
SSDEEP 196608:Wuq138aF4YZQ39szEMoYr54Uo6yKcFeG2Kb:Dql8aF4YO3hgVo6yKAeG2E
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_shared3.bundle

SHA256 701f053c2a6385e6f458240bfce89d35d26242d6299ba187c6878b4d2a723ac2
MD5 7a6fd2901c804c0d4b94b60461291059
SHA1 18cb669d939582e14c1e1e957f3d1b4bdf400a6d
SHA512 71a97e9eed70e68b79c0477dd66f9ccda4c8aabedef53679344ec16e29d274981182fdb77c114d26a04c3415388272d42790bf733e0d936cfc1368f65454af02
SSDEEP 393216:vuZ2lWyCU+lh5jfw5D8b/jL3LgzokDoho:mZgwh5Mw/Dgsr6
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_shared4.bundle

SHA256 4ac5ceb58a933924939aef76abf34589a6e540beb3239b0db7f26ef56f63511f
MD5 c3ca63b51d35d337927383f437d6aa0c
SHA1 39e8bdf37fad192d3016828a0c4b34633c7a4b20
SHA512 3a139f69f28ba0a62a44c1b511df67391a830101793795e751f8b4ab0737b2c67eb8ae11c8d513d5995f09055f7e8b873fbc6b42c2a4df08c77fd31fe0dc7aad
SSDEEP 98304:iKos4r26JA6L10aLsBSjAz7RZlHbzfX4v:ibyH6GJ/9ZlHbTIv
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_shared5.bundle

SHA256 2fed2e161ef9120bd3466737cb72077aae8e27df9fa43a2b1395ae1fbb077ec0
MD5 035ded1e7a7bbfe2d958c187581546b0
SHA1 ee85ce10e2328ecb2e831b315df36a5101758a56
SHA512 62737b724c957e485b0c3ca851bc536b5cf686d02c8ddf974d20952d02d9cdcd19b34de44ed4cb777c721f9ad6d459b54a6ab99044d417c9037b7c49c7e77290
SSDEEP 98304:5MvEQtb3wsszBjXGLP+3Q51K8nwb7GXP5XBsF8rgRyQVhNpLoTYLIrqPVV7TzAEw:5MEQR3wsszBjWL6+1KsxqjPiqPXThlel
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_streamdva.bundle

SHA256 17b657e1295ea81ad6189bc89deef9bfac1c99c1b9da5fa2dcfccd2bc9450fbe
MD5 354034a718e3a6aa4b9c83f97ea16f89
SHA1 230bad15b3b6fae733c98addd91cbe3440079852
SHA512 ad6c1ac8e450b17472aea2adc09327da13aae779bcec18e63cc4aacfa70e65dd1071625762d7f4dc93ed55f83b428f58bad13d0723666a91b467ac2f954fe09b
SSDEEP 24576:kbeZp9tyj7Z9ZFnk/JNiEjv7fzxZq19tvNyC49Ho6snsbrRV8FnX3iVZrQ4dUbUq:HZD67ZczfzhVLdXx8SswBSB
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_streamtracer.bundle

SHA256 ededf6577da1b3e5a48243de3ed5aa417221e841062e2d3505d11d9d793eae92
MD5 bd3cfe5d089f041d92a4f9e65c73e841
SHA1 75add559d2f617caa249daa4eb0b15def93c15cb
SHA512 74209eab7544b47495cbeb479ca798e155d0707ff817a126c10fdc33da78fc374161366379249c517999f4ab44ad32879b35798bb383380eaa8c6e01a90f07df
SSDEEP 49152:e8/AXwlTjl2FIxdGm4xatGNkJGMwWJ5cn/GK:RAXwlPlky0mYatGKJ315cn/GK
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/actionscenes_assets_streamwidowmaker.bundle

SHA256 76660c083c8f72918a62e5233dc5c6d37726842a5b599b76b7096bd89a394339
MD5 23bdd8f5add814d8bda8cff652fb6725
SHA1 ebb2b477b3f0d56190483bbe97f90d8eecfbe2fd
SHA512 e9f9df74566572f57e2e8ccb867e8e75db368a7728fbc228b4ab003845223c97e28154a95ef93247bde304f595c1f4b2263aa69c378e4f05c4abc7ee1aa0d84b
SSDEEP 49152:kCDcgMPAnOweZJPUOuapN9m21azuc6kg9Kvk4z0Z:3cgMPADeZJPUODpTm1uc6kgXZ
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/activities_assets_actionsceneactivity.bundle

SHA256 78da9490e2e61a4da1eb0452bd4c8068c46eac7f0b9cbdf3edad7013232cf867
MD5 b56d56e67e55aebac554c46cde1452db
SHA1 822bde7cc8a94ec861ce2584ace1363ae57bc5ac
SHA512 2c74f0dffb5d31ed4b770e5dff89731776f5de34a9500f3816c911a9d81b69ab3f158dc6ec0fb797a0008f2495c61ddf77e8922a9c910140464b4aeb1d77bf57
SSDEEP 96:vQXnyCLrNVx0YyI3wNcWppweIxmbq7s/58voWQ4JhZT5fc:IX5V+IA+eIwIiigWQ4vZFc
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/activities_assets_storeactivity.bundle

SHA256 9676caa045707686e2b65de597708d0efecce56d4e74aeae1ea0bae754742586
MD5 91b1283c9726fc793c06c4985c0ca2ad
SHA1 db844f1cdb3eb1f5a20a0d546ae101745db2cf9a
SHA512 1fc7015ebee2c5bc07c3f1c08367e673743c21eaabd2370d51a4c1f55e31a5eaec611832538108c0538db41cc5f7df71afb5ae5aed2efdf3902a453a659ef8e7
SSDEEP 49152:4HdF/ZMuUpKKBcyT7Uo1wVc7Qsnuyf2zyKjPLif6miFnHXf7esALWAvqKX:49PMRfcoD6Vc7Qs1fIy2ifAF3eqKX
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/activities_assets_streamactivity.bundle

SHA256 b46a9cf64c5dc79e7a77ef6a6ccd85ea709ea27772c371c08fa807f46fc0cbfa
MD5 91e368736ab5e37c480eeeee561bc013
SHA1 8be372640340ad90a645d4a170463f8aa56d5e5a
SHA512 5d9891a16e3b2dd68e29c5998f1c13234291fd511f8c9479f563339c41dd0c232feee41eb6a51661752b780561a9579b0550c452530f5d711ac565c420379848
SSDEEP 96:3b6NnyCLrUkEy8il38e1o/7G7FSb6KZp6vphDxDu9YlsvNJzIIqkkW4WL:U5EkbscQSmD6vphDxDdGvNWaL
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/appinitial_assets_all.bundle

SHA256 d021c2305bd3f6074f41c8f9b8ba3df7f668dcf41157ccbe094d55bb44e0ffd0
MD5 776a8dfdc6297dcde7833c81317421f5
SHA1 096583ed1e3df229ef512ed242f4b9da3eef1633
SHA512 a5b62baa9ed91aa60d25f4471a685845862a69c64db8510b8e5213df1eca2f14292963cc57bb957cf3ea8e53ef3fdc25624e9d0bf76aba7c8350b4bf0a54756f
SSDEEP 786432:FMoM3zzbMuhXTrrC0GtwJBnzEllMVB+mbivZ8ZMo9Mo569Y5waF:FZ8/h+QhOMVB+PKMhAwaF
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/fonts_assets_all.bundle

SHA256 b454bf487d4f5eaccf13397a058f1db96b7782e2e00b3836cbd12439c80438c2
MD5 b3359e25b548a5c400191a5618d65caa
SHA1 de1a1bd0ffba758d170d2f47c6a37873485104f1
SHA512 6524a3a6006e99a59fb68b47aa28188cf7f9c43883799263e037148e12fb9bdf5b289251713c69538acc861bb3a25952f793193115d5b4c8061b89f139334767
SSDEEP 24576:9J1loLVknWMV0uNoXFBhvVLQ3YVyb4N4Z7/7DkZedzRE2ILTATpf0N1C:X1Kq3ILhKAB4Z7/uClJeg
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/frameworkinitial_assets_all.bundle

SHA256 65b1271de0c6f41d7f820f96bf9e4b196cb6a9d4db42003a136d3d31291494b0
MD5 d94b21c8183ba0010df7f95404a87244
SHA1 766aac9ddbafb4151d242af9be222826926ebc96
SHA512 069cebae940d4c6f612ea1c7dfdefbe04818f742bd6f38aa8c19734198ed10c5cb6d42cb4e6810b85c1c1cbf12f5518b64630165df67f59c5b57b7aec8d7f7c4
SSDEEP 24576:AbouL+/uPSr9Ool3Sjce6VGgZZcA7fpXBKWd8e0ZM8htNL0:Az62PC30ceIGsZP7fpQgMMqtq
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/shaders_assets_all.bundle

SHA256 648a96f8e8f1f5d9fd3085a67a0bad5f7e3e59724895dbdeb0442ca15200d905
MD5 2bf20d57cf356fba5c3e6f5bc8427847
SHA1 39bd961700a5ccf6f0e113560beba192aaa0aeba
SHA512 234efaa47ce374f79c7305761613f66933313bf418b6e846b997d943ec1868b738cbd49ed9365e74aac83d5ffe9af3650307ae6b15f7ceea76ced0951c5908be
SSDEEP 3072:B7n1XuyEEzUFoqEHFUwdjAfHnHx2HDVGiIrY6eB:V93fz/lHKP6D+rYF
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/StandaloneWindows64/tmp_assets_all.bundle

SHA256 c21c4bc7af859d9e06b1a5126f3d73454e123a1a3fc6ede282135334da236c7e
MD5 8d45314a90180a3e9ff16284e925f089
SHA1 e5518894d0b9a692e2266194128cd07b8996af26
SHA512 977c04d318c49ad19bbd2a04fdd0cdac9a62c19976aefb02950084e265f1d74c7340da7c475f4229f15f26f7839369ebc69fccf8e59ef3943ee454942f6ce91c
SSDEEP 196608:Za4lhVuHPTkQePmw1lNznM5Y5nfj6qLi7hU:c4huHPZePflNLXRfxLS+
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/catalog.json

SHA256 a31495595c6a9560a992e0c367c34d65d518cc43d49e9fc23a0014d3d561ab42
MD5 ecf2543f221bdbf4b62a575858081cd7
SHA1 2efaeda95697b7232d81b4b0100cb12ce5aaa693
SHA512 4de464137445eb68d10e5a7a8cf5e807a51030b84eb232b862ea2ee57759067e7dfa123150e2fadd21fb450e6c1707e980f70c4105631717ba3335e8bf58e65a
SSDEEP 1536:4qknYVzZSJhpaCAqZtaWYsArkRnFwgM6Oi3Id1Ee+zR9K0m7OqSzTyrjplD74KVk:fFOcCAqZtarHQEbaRj
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/aa/settings.json

SHA256 f22c0664c91b427a36fda8a507af6f4322afba62c370129b47c1eab06a1f092d
MD5 992977456fb58d9b40146d0f2b73b52f
SHA1 7e9ac119c8be3f3c9e2405e2d96ba49cba22b173
SHA512 715623abbcbcee04ca7facc2c50480634ac1b992ff325e276f5cbe04c5e1ce0b83e45b17db8d6dff62f6462bcedc181420ae57c5867b4ffd973ca99856c53f5e
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/build_info

SHA256 550c692ac3a7e1e8312bac9a7d27022acf411fdb383bb8da1e9aeaa5e4c82475
MD5 fce7a662426701f3d298d88835e0eef9
SHA1 44ab9e684b114024f589ffcbee499b4bdef76b03
SHA512 6f73c2cba08c150560847862d57d55e8ba7cf44b062822bc166500190f2b5790203199812db02a1d94d9d2286e74d82f8d75c11edac287b36c342ce824f06fb4
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/app.info

SHA256 a303787716c356519b3dcc44475dbc0e11a9988e64178e360ce196d592acab0b
MD5 3f1f089503f008c224683bad82688f18
SHA1 86679a74796341848e1758550097bb60f1dd255f
SHA512 c83ed30b7b61b593d1bf77bf3f133331e1abc2bcab04f0b543063e05acd024cecc419ef785964cf05f6010e0c68fc06b9dfb08e3a91241d516be468a741552f7
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/boot.config

SHA256 5deec81070e52ec64fb0ad3505f20d31a3cd0d0c2958f7b66ddadc152fc68f75
MD5 c830ae0feb5a92669c8a0364293f16fb
SHA1 67e2aef56be72d641cccb781aa6e7fe1d5ecc3c9
SHA512 b28977ac842b85eb40c0e04a50c9bd933633c2222567475f11106900b0729aa70377233720fc8c7a48be8817a4f3f835a3b3bb00b97082a57b2a2f76bbcf61e0
MD5 SHA1 SHA512

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/data.unity3d

SHA256 7a76ef975440c28877577dd5a5f3d5260940159eec0d855c2cdc7e04357aa263
MD5 57cefb4532d47ff03e76998440189e79
SHA1 669d6a0e8a1089ffcd40c6e938b49fca279844e2
SHA512 c856d2fc73b324900c5dd6ccefb54c42b83163d743a063fcac5b99d99f80fc832c0823941c6d6d623337811b806b0dd0a38d621580f5b8a4359ac96e2cc0c64a
SSDEEP 6144:qXn6F7ZfQe8F+vnCB83LvnDWqIgwR3E81nUulVVjU:+nKVdnb3TD3wJEgnUuK
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/il2cpp_data/Metadata/global-metadata.dat

SHA256 cc4122ada8bc4786b2099a7cd7ef2db6ab059cd734212dca7bc1c2f6bb0044b4
MD5 1d961bbcaa44ded0bf6f23d366cb4386
SHA1 c58183989da314db0eac00a914343f792bf240f9
SHA512 988281d8847e7e1fd7dfb478ad955942c422a96f2bac03785370b36ad70ac272ed17738af033a72105b4e3ec79d518fb376f496f967df4909b80157a23d3847d
SSDEEP 49152:qVnlVNSWc1DorDpkNevDxRYvcnQ0DtDCnBHSitSzV2ktppTvmrzRKdFb/6RM647k:qOorLhQnS9DmXcdF7bnm
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/il2cpp_data/Resources/System.Data.dll-resources.dat

SHA256 98a7950ec6de3242c2e190dfa630188dfa32511a125542b94baa952d1c757d49
MD5 4860ddd4350579f8fcacb1881582335a
SHA1 493c03e9cfef6f72a00f92023cdb88527dfdf72c
SHA512 51421a1e79914cb6d828305103c5f7cdb020d98107586abd7e04614f65bae8004101e5567a873f52fe2daa3a7984bf4f7a4930e628cc5f86e709e3a37f812a95
SSDEEP 1536:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FBFdFzF+FUF8FvFOFvFNciFEFvFxF5FHFj:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FI
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/il2cpp_data/Resources/System.Drawing.dll-resources.dat

SHA256 7c33aa707bc3fdc83991b81a97d6fc622b140762a767300f08f616c2c0a91255
MD5 be7be6458aead12c07a04f26e260c3d1
SHA1 34d46d957520cb1a525ea9eab36cc40d57a3715a
SHA512 554a6b2983fdd055bab56b7f210340521b7e7b480f38aa6368691ea9e38fbaa5eb93aab0137e6c9d7f3b58feb0780753d48eac951a83ea8db67a91df1db0ced6
SSDEEP 384:P7zRaGwlR7QlkaaVaaazEZnbkPHLuecbAEYURxMX:DzRaGwlR74kaaVaaaYnbGsAEjSX
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat

SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
MD5 21d06dbc8af6432b2b49536ed30609af
SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/sharedassets0.resource

SHA256 5dec8436cb59ee5d95f659b6e05fe50c75c90ca6c22d7174921218850f620753
MD5 b8a220bf6c3fc09c051557a1504ac0b5
SHA1 6c6b5fd866f18853785be5651e991df9e1800a4d
SHA512 e6f0272dfbd81c421247f35713b7f6d28da46c4da3107804421d54fde56d20e818302a2cbac0eddbe8750f93cdd87445f3b0dfb4ad6c1bd082b49fa9a8db0925
SSDEEP 49152:2+Uiatav3QaxLmDjNDL7/AMcdWsq2XKslN2veCVcdmFd:cgvgaxLmfNj/A7g72XKIqBVumFd
MD5 SHA1 SHA512 SSDEEP

OverwatchWebcam Win64 v.0.4-97/UnityCrashHandler64.exe

IMPHASH e0c5e69afa875a866c2460bd9f523336
SHA256 568f62a32cc660cb488a6def162c03e7915a5209dd61da3899feccbec5ab4dff
MD5 dbb3a4351818395b78ec3e3d7ad4f0f6
SHA1 689e2861b8291006085f7eae32c253756eeb6629
SHA512 f218b06fac6138eea018cf012eea348c4f6d4940e17c52d2014c16f39778e7318600068475c2ee6d2c91636a4fcb878eef22870f5a5e6a608a616ef1d3d3299d
SSDEEP 12288:rdQguUWSv0LZ0dkXepg517sB0I5NTBpoEfHfR2o/EoK/m60pJgQfz2fzA7:rdlupSMLag1700IAiw1/QJdz+zA7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Password

l

PE Signature issue

Digest

be:46:ec:1a:4e:fc:94:2e:73:ee:3f:81:e3:b1:11:69:73:ea:90:08:e9:9e:d5:d1:f4:7a:cd:ed:ae:93:49:0a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 19, 2024

Minor OS version

0

Major OS version

6

Entry point

247552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win64_VS2019_nondev_i_m\UnityCrashHandler64.pdb

user32

GetWindowLongA DialogBoxParamA EndDialog SendMessageW SendDlgItemMessageA GetIconInfo SetForegroundWindow AdjustWindowRect UnionRect SetWindowTextW GetDlgItem LookupIconIdFromDirectoryEx InflateRect OffsetRect CreateIconFromResourceEx LoadImageA SetWindowPos

kernel32

InterlockedPopEntrySList DuplicateHandle VirtualProtect GetVersionExW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale FlsFree FlsSetValue FlsGetValue FlsAlloc FreeLibraryAndExitThread GetConsoleOutputCP GetConsoleMode SetConsoleCtrlHandler GetFileType SetStdHandle GetModuleHandleExW ExitProcess GetModuleHandleA GetLastError GetCurrentThread WaitForSingleObjectEx CloseHandle RaiseException GetProcAddress GetThreadTimes OpenThread TryEnterCriticalSection EnterCriticalSection SetThreadPriority InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetCurrentThreadId ResumeThread GetThreadPriority CreateThread SwitchToThread DeleteCriticalSection ReadFile GetModuleFileNameA FindFirstFileW FindFirstFileExW TlsSetValue SetLastError RtlCaptureContext FindNextFileW GetCurrentProcess WriteFile OutputDebugStringA RtlVirtualUnwind GetModuleFileNameW RtlLookupFunctionEntry GetEnvironmentVariableA FindClose CreateFileW GetFileAttributesW SuspendThread QueryDepthSList CreateEventW MultiByteToWideChar GetFileAttributesA LoadLibraryA DeleteFileW LoadLibraryW GetThreadContext SetFilePointerEx ReadProcessMemory FreeLibrary WideCharToMultiByte TlsGetValue GetSystemTime FlushFileBuffers HeapFree Thread32Next Thread32First WaitForSingleObject CreateToolhelp32Snapshot FormatMessageW HeapAlloc LocalFree VerSetConditionMask GetCurrentProcessId GetProcessHeap GetModuleHandleW VerifyVersionInfoW GetSystemTimeAsFileTime GetStdHandle TerminateProcess GetProcessId WaitForMultipleObjectsEx OpenProcess Sleep SetEvent GetThreadId GetFileSize CreateProcessW CopyFileExW AllocConsole GetExitCodeProcess SizeofResource GetCommandLineW EnumResourceNamesA InitializeCriticalSection SetErrorMode FindResourceA GetExitCodeThread TerminateThread LockResource LoadResource CreateEventA LoadLibraryExW GetFileSizeEx VirtualFree ReleaseSemaphore VirtualAlloc TlsAlloc QueryPerformanceFrequency TlsFree QueryPerformanceCounter IsDebuggerPresent RtlPcToFileHeader InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx GetLocaleInfoW LCMapStringW CompareStringW GetTickCount GetCPInfo DecodePointer EncodePointer GetStringTypeW InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnregisterWaitEx UnhandledExceptionFilter ResetEvent GetCurrentDirectoryA GetTempPathW

dbghelp

SymRegisterFunctionEntryCallback64 SymLoadModuleEx

shell32

CommandLineToArgvW SHCreateDirectoryExW

ole32

CoCreateGuid CoTaskMemFree CoInitializeEx

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

InternetCloseHandle InternetCrackUrlA InternetOpenA InternetConnectA HttpSendRequestA HttpOpenRequestA HttpQueryInfoA

gdi32

GetObjectA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Name

.text

Size

524KB

Virtual Size

523KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

349KB

Virtual Size

349KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

OverwatchWebcam Win64 v.0.4-97/UnityPlayer.dll

IMPHASH 94ac6588f87e70db9356b11557216216
SHA256 56138336fd3c7e52e99b99b5f74fe4c10df72bed34e57fc7715da50282da45f2
MD5 4452b0cad08cdfdfd1793af00731fedd
SHA1 9e6cf9a533cc2cee7033e9e6cf830f57f5f5715c
SHA512 a3d322ff484eb2c54aa87088d9dc7911a0aee36c354d0e4e52b5c226bfb63d383d384d2dfeaef563ced65991665f4a44069fc712f6ecbde359f4650b266d5291
SSDEEP 393216:HlF5Dt5XVviBTAyna9/obfFOPkhe0yc7dVbvax:Hma5cjzG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Password

l

PE Signature issue

Digest

b7:86:2c:38:8a:b1:c6:1d:31:37:91:85:01:1d:92:c6:ee:7f:2f:90:32:ac:44:b7:f4:6c:05:87:a7:85:cb:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 19, 2024

Minor OS version

0

Major OS version

6

Entry point

25022416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\build\output\unity\unity\artifacts\UnityPlayer\Win64_VS2019_nondev_i_m\UnityPlayer_Win64_player_il2cpp_x64.pdb

kernel32

GetProcessId OutputDebugStringA WaitForMultipleObjects GetExitCodeProcess SetErrorMode WriteFile CreateEventW GetSystemPowerStatus GlobalMemoryStatusEx CreateToolhelp32Snapshot GetTempPathW GetUserDefaultLocaleName GetSystemDirectoryA CreateFileA GetComputerNameW GlobalLock GlobalUnlock GlobalAlloc GetTempFileNameW DeleteFileW K32GetProcessMemoryInfo GetNativeSystemInfo VirtualQuery GetSystemTimeAsFileTime LocalFree GetFileAttributesExW CreateFileW CreateDirectoryW RemoveDirectoryW SetFileAttributesW CopyFileW MoveFileExW FindFirstFileExW FindFirstFileW FindNextFileW FindClose SetFilePointer SetFilePointerEx ReadFile SetEndOfFile ReplaceFileW GetFullPathNameW GetSystemTime SystemTimeToFileTime SetFileTime GetDiskFreeSpaceExW Thread32First Thread32Next SuspendThread ExpandEnvironmentStringsW CreateMutexA RtlCaptureContext SetUnhandledExceptionFilter GetErrorMode GetModuleFileNameA GetFileAttributesA GetEnvironmentVariableA GetCurrentDirectoryA GetThreadContext RtlLookupFunctionEntry RtlVirtualUnwind ReadProcessMemory LocalAlloc GetCurrentDirectoryW DebugBreak GetTickCount GetOverlappedResult ResetEvent CancelIo FormatMessageA GetWindowsDirectoryW GetModuleHandleW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DeleteProcThreadAttributeList InitializeCriticalSectionAndSpinCount TryEnterCriticalSection GetLocalTime GetTimeZoneInformation CreatePipe GetFileSizeEx CreateSemaphoreExW TlsAlloc TlsFree IsDebuggerPresent GetStdHandle SetThreadAffinityMask InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList GetFileSize OpenEventA CreateWaitableTimerA ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx GetSystemDirectoryW EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW CreateTimerQueue SignalObjectAndWait GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask RegisterWaitForSingleObject UnregisterWait FreeLibraryAndExitThread GetVersionExW DuplicateHandle QueryDepthSList UnregisterWaitEx RtlUnwindEx RtlPcToFileHeader RtlUnwind HeapSize HeapReAlloc SwitchToThread GetCurrentThreadId GetThreadPriority SetThreadPriority ResumeThread CreateThread GetThreadTimes OpenThread UpdateProcThreadAttribute GetProcessHeap HeapAlloc InitializeProcThreadAttributeList GetCommandLineW OutputDebugStringW GetLogicalProcessorInformationEx LoadLibraryExW WaitForMultipleObjectsEx CreateEventExW ExitThread QueryPerformanceFrequency QueryPerformanceCounter VerifyVersionInfoW VerSetConditionMask HeapQueryInformation ExitProcess GetModuleHandleExW GetConsoleOutputCP GetConsoleMode GetFileType ReadConsoleW FlushFileBuffers CreateProcessW ReleaseSemaphore GetModuleHandleA GetCurrentThread RaiseException HeapFree GetCurrentProcess TerminateProcess SetConsoleCtrlHandler WaitForSingleObject GetStartupInfoA SetLastError GetFileAttributesW AttachConsole GetDriveTypeW GetFileInformationByHandle PeekNamedPipe GetModuleFileNameW SleepEx SetWaitableTimer CreateWaitableTimerExW SetEvent SetHandleInformation Sleep WaitForSingleObjectEx CloseHandle CreateEventA FormatMessageW LoadLibraryW SetDllDirectoryW FreeLibrary GetProcAddress LoadLibraryA WideCharToMultiByte GetCurrentProcessId MultiByteToWideChar VirtualProtect VirtualFree VirtualAlloc GetSystemInfo GetLastError TlsGetValue InitializeCriticalSection TlsSetValue WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc FileTimeToSystemTime SystemTimeToTzSpecificLocalTime

user32

ScreenToClient MapVirtualKeyExA GetKeyboardLayout GetRawInputDeviceInfoW GetMessageExtraInfo GetKeyState MapVirtualKeyA GetKeyboardLayoutNameW ToUnicode MapVirtualKeyW GetKeyNameTextW RegisterRawInputDevices GetRawInputDeviceList GetRawInputData GetRawInputBuffer GetCursorPos PtInRect EnumDisplaySettingsA GetDC SetWindowLongA LoadIconW GetWindowPlacement AdjustWindowRectEx GetForegroundWindow EnumDisplaySettingsW GetWindowLongA DispatchMessageA TranslateMessage SystemParametersInfoW UnregisterDeviceNotification RegisterDeviceNotificationW SetCapture ReleaseCapture GetSystemMetrics RegisterClassExW GetAsyncKeyState EndDialog SetDlgItemTextW SetDlgItemTextA LoadIconA SendDlgItemMessageW OffsetRect CopyRect SendMessageTimeoutA SetForegroundWindow EnumWindows GetUserObjectInformationA GetThreadDesktop DestroyIcon DestroyCursor TrackMouseEvent SetCursor LoadCursorA LoadImageW SetClipboardData EmptyClipboard CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard AllowSetForegroundWindow ReleaseDC GetDesktopWindow DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes UpdateWindow SendMessageW GetMessageA SetWindowTextW DragDetect ShowWindow GetActiveWindow GetParent ValidateRect IsIconic MonitorFromRect SetWindowLongPtrA IsWindowVisible SetCursorPos ClientToScreen ClipCursor MonitorFromWindow ShowCursor GetClientRect MoveWindow GetWindowRect GetMonitorInfoW SetFocus GetFocus SetWindowPos EnumDisplayMonitors EnumDisplayDevicesA GetMonitorInfoA PostQuitMessage DefWindowProcW SetWindowLongPtrW GetWindowLongPtrW DestroyWindow UnregisterClassW RegisterClassW CreateWindowExW KillTimer MessageBoxA SetTimer PeekMessageA MsgWaitForMultipleObjects GetCaretBlinkTime GetDoubleClickTime DialogBoxParamW RegisterWindowMessageA

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

ole32

CoUninitialize StringFromGUID2 CoCreateFreeThreadedMarshaler CoInitialize PropVariantCopy CoCreateInstance CoCreateGuid CoSetProxyBlanket CoTaskMemAlloc PropVariantClear CoTaskMemFree

shlwapi

SHDeleteKeyW PathCanonicalizeW

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsA SetupDiEnumDeviceInterfaces SetupDiEnumDeviceInfo

advapi32

RegCreateKeyW RegCloseKey RegQueryValueExA RegSetValueExA RegDeleteValueA RegQueryValueExW RegCreateKeyExW RegSetValueExW GetUserNameA OpenProcessToken GetTokenInformation GetSidSubAuthority CryptReleaseContext CryptGenRandom CryptAcquireContextA CryptAcquireContextW CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash RegOpenKeyExW

gdi32

ChoosePixelFormat SetPixelFormat GetDeviceCaps SwapBuffers

shell32

ShellExecuteW SHGetFolderPathW SHFileOperationW CommandLineToArgvW

opengl32

wglGetCurrentContext wglGetProcAddress wglDeleteContext wglMakeCurrent wglGetCurrentDC wglCreateContext

winmm

waveOutGetNumDevs waveOutGetDevCapsA waveOutGetDevCapsW waveInPrepareHeader waveOutClose waveOutPrepareHeader waveOutUnprepareHeader waveOutWrite waveOutReset waveOutGetPosition waveInGetNumDevs waveInGetDevCapsA waveInGetDevCapsW waveInOpen timeBeginPeriod timeEndPeriod waveInUnprepareHeader waveInAddBuffer waveInStart waveOutOpen waveInReset waveInClose timeGetTime

oleaut32

SysAllocString VariantClear SysFreeString VariantInit VariantChangeType

imm32

ImmSetCompositionStringW ImmNotifyIME ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmGetConversionStatus ImmReleaseContext ImmGetContext

winhttp

WinHttpGetProxyForUrl WinHttpOpen WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle

bcrypt

BCryptGenRandom

hid

HidP_GetData HidP_MaxDataListLength HidD_GetSerialNumberString HidD_GetManufacturerString HidD_GetProductString HidD_FreePreparsedData HidD_GetPreparsedData HidD_GetHidGuid HidP_SetUsages HidP_SetUsageValue HidP_GetButtonCaps HidP_GetValueCaps HidD_GetAttributes HidP_GetCaps

crypt32

CertFreeCertificateContext CertFreeCertificateChain CertVerifyCertificateChainPolicy CertGetCertificateChain CertAddEncodedCertificateToStore CertOpenStore CertCloseStore

ws2_32

gethostname getsockname connect WSAGetLastError ntohs closesocket WSACleanup WSAStartup bind htonl inet_addr htons WSAIoctl WSASetLastError WSAEnumNetworkEvents accept shutdown select __WSAFDIsSet ioctlsocket setsockopt listen sendto send recvfrom recv WSASocketA getaddrinfo freeaddrinfo ntohl gethostbyname getprotobyname getpeername getsockopt WSAWaitForMultipleEvents WSASocketW WSACreateEvent WSACloseEvent gethostbyaddr WSASendDisconnect WSAAsyncGetHostByName WSACancelAsyncRequest WSAResetEvent WSAEventSelect socket

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute

Name

.text

Size

24.3MB

Virtual Size

24.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

300KB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

117KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=36, id=259, version=28900,

count=18, id=260, version=29118,

count=31, id=259, version=29118,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=104, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,

count=34, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=233, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=67, id=260, version=28900,

count=43, id=257, version=28900,

count=547, id=1, productName=Unmarked objects,

count=9, id=199, version=41118,

count=144, id=261, version=29118,

count=222, id=261, version=28900,

count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=32, productName=Unmarked objects (old),

count=1174, id=265, version=29333,

count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,

count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,

count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,

OverwatchWebcam Win64 v.0.4-97/baselib.dll

IMPHASH db9c6dbbb87b8c007ce6d9eae665e766
SHA256 3288f2771a350745e66f6567718313585c5d37eb26e30ae25ab1a6c07bd924bd
MD5 5e1efe6f9d0f17002ef36d0c4481c096
SHA1 cd71603d2eb942d0ae7454fc17fa44737f144cd0
SHA512 a7c24660405b399e5a362b0f93edd89f94f3f1b3346748010f2408b8994dcba019c6c1c089359acc9c5a5fa8c463cd6fd9a6415bfb8967a05611d94963fc79bf
SSDEEP 6144:muInkY6mJtoLpzxkzt0R60Htptb+REDqDY92q31YM9Ci4DTFu9GCXTnD0:JInZ6mXWM0NptoDY92qFn9n7D0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Password

l

PE Signature issue

Digest

70:e3:63:ef:1e:3d:f3:20:3d:5e:54:20:9e:96:f1:5b:61:63:a9:f9:ae:b9:ba:af:72:2a:67:93:55:8d:e5:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 19, 2024

Minor OS version

0

Major OS version

6

Entry point

64624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\build\output\unity\unity\artifacts\baselib\Win64_VS2019_nondev_i_m\baselib_Win64_player_Master_il2cpp_x64.pdb

ws2_32

setsockopt __WSAFDIsSet accept bind WSAIoctl closesocket select shutdown listen WSACloseEvent WSACreateEvent WSASocketW getsockname send connect WSAWaitForMultipleEvents recvfrom recv getsockopt sendto ioctlsocket WSAGetLastError

kernel32

InitializeSListHead WriteConsoleW GetStringTypeW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapQueryInformation ReadFile GetFileSizeEx CreateSemaphoreExW VirtualFree ReleaseSemaphore WriteFile VirtualAlloc SetEndOfFile WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId ResumeThread FormatMessageW GetLastError WaitForSingleObjectEx TlsAlloc QueryPerformanceFrequency CloseHandle GetNativeSystemInfo RaiseException LoadLibraryW CreateThread SwitchToThread GetProcAddress SetFilePointerEx GetThreadId GetModuleHandleW FreeLibrary TlsFree QueryPerformanceCounter VirtualQuery IsDebuggerPresent FlushFileBuffers EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection Sleep SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsGetValue TlsSetValue GetSystemTimeAsFileTime GetTickCount SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcessId GetCurrentProcess TerminateProcess CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait EncodePointer GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualProtect DuplicateHandle InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx HeapSize RtlUnwindEx RtlPcToFileHeader GetModuleHandleExW ExitProcess HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode HeapReAlloc

??0AbortShim@il2cpp_baselib@@QEAA@P6A_NW4Baselib_ErrorCode@1@PEAX@Z1@Z ??0Thread@il2cpp_baselib@baselib@@QEAA@$$QEAV012@@Z ??0Thread@il2cpp_baselib@baselib@@QEAA@XZ ??1Thread@il2cpp_baselib@baselib@@QEAA@XZ ??4AbortShim@il2cpp_baselib@@QEAAAEAV01@$$QEAV01@@Z ??4AbortShim@il2cpp_baselib@@QEAAAEAV01@AEBV01@@Z ??4Thread@il2cpp_baselib@baselib@@QEAAAEAV012@$$QEAV012@@Z ??6il2cpp_baselib@@YAAEAVomemstream@0@AEAV10@AEBW4Baselib_ErrorCode@0@@Z ?Baselib_Debug_IsDebuggerAttached@il2cpp_baselib@@YA_NXZ ?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z ?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenProgramHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenUtf8@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z ?Baselib_ErrorState_FormatAndStoreExtraInformation@il2cpp_baselib@@YA_KPEBDPEAD@Z ?Baselib_FileIO_AsyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@@Z ?Baselib_FileIO_AsyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_AsyncFile@1@UBaselib_FileIO_EventQueue@1@PEBD_KW4Baselib_FileIO_Priority@1@@Z ?Baselib_FileIO_AsyncRead@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@QEAUBaselib_FileIO_ReadRequest@1@_K2W4Baselib_FileIO_Priority@1@@Z ?Baselib_FileIO_EventQueue_Create@il2cpp_baselib@@YA?AUBaselib_FileIO_EventQueue@1@XZ ?Baselib_FileIO_EventQueue_Dequeue@il2cpp_baselib@@YA_KUBaselib_FileIO_EventQueue@1@QEAUBaselib_FileIO_EventQueue_Result@1@_KI@Z ?Baselib_FileIO_EventQueue_Free@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@@Z ?Baselib_FileIO_EventQueue_Shutdown@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@I@Z ?Baselib_FileIO_SyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncFileFromNativeHandle@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@_KI@Z ?Baselib_FileIO_SyncFlush@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncGetFileSize@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@PEBDIPEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncRead@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEAX1PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncSetFileSize@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@_KPEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncWrite@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEBX1PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_AlignedAllocate@il2cpp_baselib@@YAPEAX_K0@Z ?Baselib_Memory_AlignedFree@il2cpp_baselib@@YAXPEAX@Z ?Baselib_Memory_AlignedReallocate@il2cpp_baselib@@YAPEAXPEAX_K1@Z ?Baselib_Memory_Allocate@il2cpp_baselib@@YAPEAX_K@Z ?Baselib_Memory_AllocatePages@il2cpp_baselib@@YA?AUBaselib_Memory_PageAllocation@1@_K00W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_Free@il2cpp_baselib@@YAXPEAX@Z ?Baselib_Memory_GetPageSizeInfo@il2cpp_baselib@@YAXPEAUBaselib_Memory_PageSizeInfo@1@@Z ?Baselib_Memory_Reallocate@il2cpp_baselib@@YAPEAXPEAX_K@Z ?Baselib_Memory_ReleasePages@il2cpp_baselib@@YAXUBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_SetPageState@il2cpp_baselib@@YAXPEAX_K1W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_NetworkAddress_Decode@il2cpp_baselib@@YAXPEBUBaselib_NetworkAddress@1@PEAW4Baselib_NetworkAddress_Family@1@QEADIPEAGPEAUBaselib_ErrorState@1@@Z ?Baselib_NetworkAddress_Encode@il2cpp_baselib@@YAXPEAUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_Family@1@QEBDGPEAUBaselib_ErrorState@1@@Z ?Baselib_Process_Abort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z ?Baselib_RegisteredNetwork_BufferSlice_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@UBaselib_RegisteredNetwork_Buffer@1@II@Z ?Baselib_RegisteredNetwork_BufferSlice_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@XZ ?Baselib_RegisteredNetwork_Buffer_Deregister@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Buffer@1@@Z ?Baselib_RegisteredNetwork_Buffer_Register@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Buffer@1@UBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Endpoint_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@PEBUBaselib_NetworkAddress@1@UBaselib_RegisteredNetwork_BufferSlice@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Endpoint_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@XZ ?Baselib_RegisteredNetwork_Endpoint_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Endpoint@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_Close@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@IIPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_DequeueRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_DequeueSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ProcessRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ProcessSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ScheduleRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ScheduleSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Bind@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Close@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@@Z ?Baselib_Socket_Create@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@W4Baselib_NetworkAddress_Family@1@W4Baselib_Socket_Protocol@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_GetAddress@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Poll@il2cpp_baselib@@YAXPEAUBaselib_Socket_PollFd@1@IIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Accept@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@U21@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Connect@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Listen@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_UDP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_UDP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_SystemFutex_Notify@il2cpp_baselib@@YAXPEAHIW4Baselib_WakeupFallbackStrategy@1@@Z ?Baselib_SystemFutex_Wait@il2cpp_baselib@@YAXPEAHHI@Z ?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ ?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z ?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_TLS_Alloc@il2cpp_baselib@@YA_KXZ ?Baselib_TLS_Free@il2cpp_baselib@@YAX_K@Z ?Baselib_Thread_Create@il2cpp_baselib@@YAPEAUBaselib_Thread@1@UBaselib_Thread_Config@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ ?Baselib_Thread_GetId@il2cpp_baselib@@YA_JPEAUBaselib_Thread@1@@Z ?Baselib_Thread_Join@il2cpp_baselib@@YAXPEAUBaselib_Thread@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_SupportsThreads@il2cpp_baselib@@YA_NXZ ?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ ?Baselib_Timer_GetHighPrecisionTimerTicks@il2cpp_baselib@@YA_KXZ ?Baselib_Timer_GetTicksToNanosecondsConversionRatio@il2cpp_baselib@@YA?AUBaselib_Timer_TickToNanosecondConversionRatio@1@XZ ?Baselib_Timer_GetTimeSinceStartupInSeconds@il2cpp_baselib@@YANXZ ?Baselib_Timer_TickToNanosecondsConversionFactor@il2cpp_baselib@@3NB ?Baselib_Timer_WaitForAtLeast@il2cpp_baselib@@YAXI@Z ?Call@AbortShim@il2cpp_baselib@@QEAA_NW4Baselib_ErrorCode@2@@Z ?CreateThread@Thread@il2cpp_baselib@baselib@@CAPEAUBaselib_Thread@2@P6AXPEAX@Z0@Z ?Detail_Baselib_EventSemaphore_SemaphoreBased_AcquireNonSet@il2cpp_baselib@@YAXHPEAUBaselib_EventSemaphore@@@Z ?Detail_Baselib_EventSemaphore_SemaphoreBased_TryTimedAcquireNonSet@il2cpp_baselib@@YA_NHPEAUBaselib_EventSemaphore@@I@Z ?Empty@AbortShim@il2cpp_baselib@@SA?AV12@XZ ?GetCurrentId@Thread@il2cpp_baselib@baselib@@SA_JXZ ?GetId@Thread@il2cpp_baselib@baselib@@QEAA_JXZ ?SetAbortShim@il2cpp_baselib@@YA?AVAbortShim@1@V21@@Z ?ShimmableAbort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z ?SupportsThreads@Thread@il2cpp_baselib@baselib@@SA_NXZ ?TryJoin@Thread@il2cpp_baselib@baselib@@QEAA_NV?$duration@IU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z ?YieldExecution@Thread@il2cpp_baselib@baselib@@SAXXZ ?detail_AssertLog@il2cpp_baselib@@YAXPEBDZZ ?detail_AssertLogMute@il2cpp_baselib@@YAX_N@Z

Sharing

General

Malware Config

Signatures

File Explorer