Xerin-v4.0.1.2-Cracked-main.zip
- SHA256 50d805e32213ae99fa2a9ca15e4107cad60bb54f74bd4b65723777a54e378379
Overview
overview
7Static
static
7Xerin-v4.0...in.zip
windows10-2004-x64
1Xerin-v4.0...in.zip
windows11-21h2-x64
1Xerin-v4.0...st.ini
windows10-2004-x64
1Xerin-v4.0...st.ini
windows11-21h2-x64
3Xerin-v4.0...I2.dll
windows10-2004-x64
1Xerin-v4.0...I2.dll
windows11-21h2-x64
1Xerin-v4.0...on.dll
windows10-2004-x64
1Xerin-v4.0...on.dll
windows11-21h2-x64
1Xerin-v4.0...DME.md
windows10-2004-x64
3Xerin-v4.0...DME.md
windows11-21h2-x64
3Xerin-v4.0...sy.dll
windows10-2004-x64
1Xerin-v4.0...sy.dll
windows11-21h2-x64
1Xerin-v4.0...or.dll
windows10-2004-x64
1Xerin-v4.0...or.dll
windows11-21h2-x64
1Xerin-v4.0...re.dll
windows10-2004-x64
1Xerin-v4.0...re.dll
windows11-21h2-x64
1Xerin-v4.0...me.dll
windows10-2004-x64
1Xerin-v4.0...me.dll
windows11-21h2-x64
1Xerin-v4.0...th.dll
windows10-2004-x64
1Xerin-v4.0...th.dll
windows11-21h2-x64
1Xerin-v4.0...LI.exe
windows10-2004-x64
7Xerin-v4.0...LI.exe
windows11-21h2-x64
7Xerin-v4.0...re.dll
windows10-2004-x64
1Xerin-v4.0...re.dll
windows11-21h2-x64
1Xerin-v4.0...er.dll
windows10-2004-x64
1Xerin-v4.0...er.dll
windows11-21h2-x64
1Xerin-v4.0...ns.dll
windows10-2004-x64
1Xerin-v4.0...ns.dll
windows11-21h2-x64
1Xerin-v4.0...me.dll
windows10-2004-x64
1Xerin-v4.0...me.dll
windows11-21h2-x64
1Xerin-v4.0...G3.exe
windows10-2004-x64
3Xerin-v4.0...G3.exe
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
Xerin-v4.0.1.2-Cracked-main.zip
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xerin-v4.0.1.2-Cracked-main.zip
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Xerin-v4.0.1.2-Cracked-main/Config/Processes list.ini
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Xerin-v4.0.1.2-Cracked-main/Config/Processes list.ini
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
Xerin-v4.0.1.2-Cracked-main/Guna.UI2.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Xerin-v4.0.1.2-Cracked-main/Guna.UI2.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Xerin-v4.0.1.2-Cracked-main/Newtonsoft.Json.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Xerin-v4.0.1.2-Cracked-main/Newtonsoft.Json.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Xerin-v4.0.1.2-Cracked-main/README.md
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Xerin-v4.0.1.2-Cracked-main/README.md
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Xerin-v4.0.1.2-Cracked-main/Ressy.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Xerin-v4.0.1.2-Cracked-main/Ressy.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Xerin-v4.0.1.2-Cracked-main/Terminator.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Xerin-v4.0.1.2-Cracked-main/Terminator.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Xerin-v4.0.1.2-Cracked-main/XVM.Core.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Xerin-v4.0.1.2-Cracked-main/XVM.Core.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Xerin-v4.0.1.2-Cracked-main/XVM.Runtime.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Xerin-v4.0.1.2-Cracked-main/XVM.Runtime.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Auth.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Auth.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.CLI.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.CLI.exe
Resource
win11-20260130-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Core.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Core.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Loader.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Loader.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Protections.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Protections.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Runtime.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Xerin-v4.0.1.2-Cracked-main/Xerin.Runtime.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target Xerin-v4.0.1.2-Cracked-main.zip
- Size 9.9MB
- Sample260419-enppcact2j
- SHA256 50d805e32213ae99fa2a9ca15e4107cad60bb54f74bd4b65723777a54e378379
- MD5 b24152c782e3f4c4520b595c5cc0cb8f
- SHA1 38eae0beea9de09f5feb909a96db281b70f38166
- SHA512 7e5cdfcb5e1ae3b9da713b8090420cfa30192d13fabeb74558422065d57c54d8674ed28b619ed2dfa1e3ef938876741002494af36e221388ab3ad360386459f5
- SSDEEP 196608:GcftkSIPfqxmtXcgQcKvv2WkZQfUM2dCx8vyPn3kHh8CDC9An14baGU:blkSwyxEfpWZZx8QA8sC9Anoa7
- TLSH T101A63374344FF8FE85D88A696362384F661BD9666321D61CB2500E885CD0DD3BCBE36E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obfuscated with Agile.Net obfuscator 2 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule static1/unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Auth.dll agile_net static1/unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Protections.dll agile_net - Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/Xerin-v4.0.1.2-Cracked-main/Guna.UI2.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Ressy.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Terminator.dll unpack001/Xerin-v4.0.1.2-Cracked-main/XVM.Core.dll unpack001/Xerin-v4.0.1.2-Cracked-main/XVM.Runtime.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Auth.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.CLI.exe unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Core.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Loader.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Protections.dll unpack001/Xerin-v4.0.1.2-Cracked-main/Xerin.Runtime.dll unpack001/Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe unpack001/Xerin-v4.0.1.2-Cracked-main/dnlib.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Xerin-v4.0.1.2-Cracked-main/Newtonsoft.Json.dll
File Explorer
-
Xerin-v4.0.1.2-Cracked-main.zip.zip 9.9MB
-
Xerin-v4.0.1.2-Cracked-main/Config/Processes list.ini2KB
-
Xerin-v4.0.1.2-Cracked-main/Guna.UI2.dll.dll 2.1MB
-
Xerin-v4.0.1.2-Cracked-main/Newtonsoft.Json.dll.dll 695KB
-
Xerin-v4.0.1.2-Cracked-main/README.md261B
-
Xerin-v4.0.1.2-Cracked-main/Ressy.dll.dll 129KB
-
Xerin-v4.0.1.2-Cracked-main/Terminator.dll.dll 350KB
-
Xerin-v4.0.1.2-Cracked-main/XVM.Core.dll.dll 1.4MB
-
Xerin-v4.0.1.2-Cracked-main/XVM.Runtime.dll.dll 101KB
-
Xerin-v4.0.1.2-Cracked-main/Xerin.Auth.dll.dll 492KB
-
Xerin-v4.0.1.2-Cracked-main/Xerin.CLI.exe.exe 424KB
-
Xerin-v4.0.1.2-Cracked-main/Xerin.Core.dll.dll 725KB
-
Xerin-v4.0.1.2-Cracked-main/Xerin.Loader.dll.dll 120KB
-
Xerin-v4.0.1.2-Cracked-main/Xerin.Protections.dll.dll 2.4MB
-
Xerin-v4.0.1.2-Cracked-main/Xerin.Runtime.dll.dll 40KB
-
Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe.exe 5.9MB
-
Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe.config.xml 876B
-
Xerin-v4.0.1.2-Cracked-main/dnlib.dll.dll 1.1MB
Xerin-v4.0.1.2-Cracked-main/Config/Processes list.ini
- SHA256 0a192466ea90673475a8d9278cd583d3f281c35e46956c48b0b9671be849f8aa
- MD5 35d6b5c8c609a3a2f2ee516a85b36650
- SHA1 95a958d93c67a8b486cff465c2bb02c1134262d3
- SHA512 9e0dd862aaa0a786039ef9aa54ea8285c76aacfef8358a86c0af801c19d15bfb3b873d12e06c3fca47a7a14ebacc0834333d05bf1543351db0daf8557e49e278
- TLSH T1B34165B29789706603FE3E5AD3756130B08F02874E6036759AC7DB58268B5F45B686B0
- MD5 SHA1 SHA512 TLSH
Xerin-v4.0.1.2-Cracked-main/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 538e6ca6001d609e251f88243409a2cbc9bc0517751843e76485a2c335e7829b
- MD5 278752062981db6fe27ba55f5099b8ae
- SHA1 8446637986cf4a24e9135ee5c54f3170600e1e83
- SHA512 142ff82ca90ca63a6a854e866615d742b585c102e8c4de5c773edeb1ac30c2cc2f6bcb190da394e4aadb4ef9518d194d99904463d6e952170d2924b16fcb00a5
- SSDEEP 49152:PQNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckFjvkoEFB:PAhck1
- TLSH T196A5F9153DD4EE27C16ECE3796E35011E2F1A4933AB2EB0E62D35768184274978873BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2158494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
704578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/README.md
- SHA256 c3555fbda88d6dc9478b4327ed75f1c462d1c675bcac3d544045f4a09c61b0a5
- MD5 667e87ad7288073d5c5a5feeefabcf71
- SHA1 84da60a196e148afbe904730f70c76f9e710b0f2
- SHA512 449acbafb8795d2e94653cc521a34dddb682d4ebe4462f23060960611efdd7ba974bea3a7cb8126ecf5f79f78deda42e27046f4ff5b708c363464830c79df497
- TLSH T141D02B1379CD492E461D9554098722D4B76AC6BD073A411A9A07407E01058158E1D49A
- MD5 SHA1 SHA512 TLSH
Xerin-v4.0.1.2-Cracked-main/Ressy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3974229973a2216ff24fd14cb045f1b3ffd1f2f147291797441a5504400c4463
- MD5 d4d917fc4fa0e0aa1d2c1d3f3c06e128
- SHA1 4c1ecd42a75bfb0a625f1f465a9da18863392b75
- SHA512 2f4e92b74cd3a0389cd15ddba51417bb84ff4438f62fcad3ef38fff3daf7eb5de384885cdcdeb915061c3355d83bc89262a71a51ea9b5c1cb6daf84649ef8a9e
- SSDEEP 3072:AuMV3QTvgGrGDl5Hc+0LgdwX9GkfcrbPc0NOOSnpl:aVbl58TLvOiOSnp
- TLSH T1A2D3AE1C63AD4B27C7EECE3AB0A841421B71E1069537F72F8D9CB0ED2A4379909502F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
137782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Ressy.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Terminator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b1a2d9414dd02d38f59a0d1a834a268ba346fba1e4b67b2955ec1ba62950f0d8
- MD5 c75d1feffcf5a0703fdbbcc1f066966c
- SHA1 a9556778b6b7deaf37f1b6cba8e5a151c289acf7
- SHA512 89bc326b1c7f14902f12438c7b2edccac80039a8ba8209acbd2ba332bf371e17747b25ff421875275a0b3f833853aea40d9acdd9caa4f41623930cd8d34d0630
- SSDEEP 6144:ANSkLNy8oskKUAox9o5ZzVCMe36bsXTa7uycigl4tWrSfBX:Szy8onAWoL1e7e+lliBX
- TLSH T12E749D0CB2E2CF60D2EB963099B7101923F6A65272E7FB5D3A5C0371AC833ED55992D4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
364382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Terminator.pdb
mscoree
_CorDllMain
Name
.text
Size
348KB
Virtual Size
347KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/XVM.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 edd6518a2cee258b01ff850a1a3d39c774f8f6d7ec24de49f89ffcc10cd55181
- MD5 20b7c99c378be1b10b0880d16a827d79
- SHA1 96d9feb87a130fc957b22395c03daecfe94dd6f8
- SHA512 0944bf90587928cffcc89ba8bf0df8f2501fad22e4afe81c77600dc65e88902b30b802a0a1c79ead45ae6c49bf1c5f4ef707c1530dafd03a34ec02261fad43eb
- SSDEEP 24576:ciN4P+uCL2k1niIYw2ZO3pBCuYbtnrasIFpe3QGbsfz+KKLlBr:VukYw2ZcpcuQtnGsskQGbkzKLlB
- TLSH T163659D84E3E11F27CA6C3B73C5352C94E7F7E60535ABF34C76B78521B9422A892925C8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1493854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/XVM.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fdbe113d0e49d917d3b11201e5032e480c302416d928a98090ed3d121ea35ecc
- MD5 90f48f496e1c36f7c5d938d0619f1b9a
- SHA1 7953583df11398ae3dced8da756082ce45190e07
- SHA512 6d04e38733def1661c99d51295d3988fa411853e1f8353a92d1484789696592cba9a65a18e99013df8e40dc87e04c92ba950d2d1cf7e4054a9011ed4730957e2
- SSDEEP 1536:IzX8M05JuIJGyAIlBIqu1mysIdtYbSo0lamo0/9NYchTf/o:ID8LvGyAITAqKYb4o0/9NYCT3o
- TLSH T19CA3B43E8DB06E61C9DC41BC98473E1887ADA34259CED3A62EC070F67E533931576A83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
109546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
99KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Xerin.Auth.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a816d36011d569bdae458b339738950d26351d6057d2ab8799bc638691c0acd
- MD5 41ddcfb6d126ec5f21637f8d7ac1b03d
- SHA1 7f3a036eb9e57425bec07472774795f0e53b0222
- SHA512 90a8a6b973555e09b245e94c0dfda6ad6fc0d8d8522643817152ae3cc9d783208f764bacd62ee2c9bf63fe96fa6efa045381780b7f78018a594e18288662f46f
- SSDEEP 12288:tGusTgfYI3WDrIxtpqwZp6YnombwjeeJqIs7qGi:tGufvGqqwnxnomxeJ
- TLSH T18BB4E0297BDD9E92E9DD87FD9061019097B2BD11F24BF3C6285D5FF42A833A0D90128B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
542731
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
I:\[ #Luxurious Projects ]\XerinFuscator G3 -\Xerin.Auth\obj\Debug\Xerin.Auth.pdb
mscoree
_CorDllMain
Name
.text
Size
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
489KB
Virtual Size
488KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Xerin.CLI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b280b10565b3ffe9f61540e6e899c7aabd70198339251f389222330b34a6695a
- MD5 eb24cfc9c05f097c5e6d30a2e9263880
- SHA1 e09a64e0337bd4aad8cd170d68adbd07f90fa367
- SHA512 a880e1848b8feb7e1f4e2a38cc6e4739c44da289b2326f02df187c53c93a32bc398539fc45c5e150b42f748028aeba1980a6bed2de1bdab1532357616b33dcc6
- SSDEEP 12288:NbzNqjoICFGXllPOamyoj8rPjvyubnwUjQSsUqgao:N9+ZX/GMojY2wvjQwao
- TLSH T15194D029BADFCB52C6CD0379A18204909FB1A516F28BEFDB706956F82F433518E5134B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
281136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
Virtual Size
214KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
418KB
Virtual Size
417KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Xerin.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 591eea96d01bf41fbd828624936b64cb1cecf0ee0fc63d62d5be3a3b41f9be68
- MD5 212d007908ff6dc4a0a19ff8616aa48f
- SHA1 3ce0930fb201a12c0c58a6214e52656a01425481
- SHA512 ba618d11986632d7e00e979bc295edb1b55697d5981b20d8ae2da67ca9c5345cb66534fa11c64508ab9445841e61154886a4264720d9d90f81d07f5b0fca4993
- SSDEEP 12288:2j2p/x3+Am6XVRwjJvxPugcbSdz16U1x413dMhoeUH/sY1tpL7:2j2p/9UTtJPRiSVoL13Cc/sY1Ln
- TLSH T120F48D02E5FACF65E1CF1D71A1B255000BB3B75455E3EB283BB0A9763C193E45AB22E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
748206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
723KB
Virtual Size
722KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Xerin.Loader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5e623d8bf3d55c77b003468017d28c8c81618a184e660b5ac2e5c4d0b296e01
- MD5 a4177da367f122fd007c3c63d878b384
- SHA1 61a53132f4d3aef74c72a98b74d9b6ee1c0158c1
- SHA512 e9aa68100a65f5120e070476826c81702b783c3d00af471b10db061a7524f2c823e386131bc731bcc2b9681843b2162f8198020e1c6c2d942c20734203045c8b
- SSDEEP 3072:86vY6ut9qY++MhI2AFIRbqldPTYXzzQT6:7+/qYMOZCzQ
- TLSH T1C4C34A39BA9C9597C38E2374E4D113E2C2F2A9127647D1EBAC195DE63E633E54C0720B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.[][0
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Xerin.Protections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe2d18fcc65a94c347f2b62ac3d11a84c31158193862c95927f5453384545b7a
- MD5 b9c471d2182213c3166dfc590b62ac47
- SHA1 55d58427e4484d96c0d84c0306083b310c551f56
- SHA512 bbe8813888976b4bd17d0dede384b3dbe113cae0fe4e544d332ab92fdf9a8aa95d70d4d6d8e5903e2d900fe201198fa2d52eb0b1d15037bc5ae638e8635b9e98
- SSDEEP 49152:dwy6lbDLArBGJ8pwReJd5IcO9LJHszEw2wfX5eT+h2/+bfOhcXza:ubDLAwRe9OnHszGwfXCn/+bGG
- TLSH T16FB50213A9FC8F06D4C41636D4762064C7B277CA3527FB1E2AB6426EE4133A5CDE6389
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2485406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Xerin.Protections.pdb
mscoree
_CorDllMain
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/Xerin.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 30d9f6d3c398eea0e6a101e511705989b7f4aad4171ad5418232baa1a740687b
- MD5 e3b5c3b2fcf599f7e1e9cbfc925dd4d6
- SHA1 b20e72015c8c7cb477e487bf73c0157aeab4e14b
- SHA512 d0f689f16c51676368f2c62586d5c78a65e74f1ab2605d43d47810fd035900eb968da770cd6ac0ede1856681c6deb2bf1e50fee358b5f80cf573a600a4b8695d
- SSDEEP 768:cnFoAjlEXMX1nZ0qlV8TN3lmSy1xnw4SEj+bAltLXBM8dngN8KAo:hiEXMdZ0EON1e1xnwDDbAl1fdg2K1
- TLSH T1BA033B85BBE89A60C1BD66B748B721100377E1531A32F61F1DCDE8AD2F737845618BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4d0c46035922e6a99271fffb9bc617753bcdfdcf9a0a3c8348c707f7881bf70b
- MD5 799c5f5ac22990187f99f034b47bd29c
- SHA1 3bdac40fc039f3c1e18c997a9e2c089f9adc50e7
- SHA512 f523d493aaf3e0d72217544bc77b9c5b9154599d3e6c8a8258d6e27b10218144970bcce6b64c7416fdf581f709ebb0442dd802ae2f947a01c24dff9991fd4679
- SSDEEP 98304:SCx/KAk8WZxtJr3nmXSARoPmyC0EaJEa0Ea/EaWmEa:SkKUWZtn6RhyC05J505/5D5
- TLSH T1B1563918351CCC8BEB380975C8D7E309D5399CE0AD5A85C2DBE834E57EF6A6CAC4186D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5693294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5.4MB
Virtual Size
5.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
519KB
Virtual Size
518KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xerin-v4.0.1.2-Cracked-main/XerinFuscator G3.exe.config
- SHA256 1458931beec207fb43ae2e52fc4210940a3f617995b6519c29c4c89972a4b88f
- MD5 f035d83b59eef4b73f8487bfe45bd706
- SHA1 2bf6a91b46a7c0a72d46a21b3ddd848d71c63a96
- SHA512 52e04d98fc0d8210cdb39b3cd9b33e482a8736b354122380fedd17685d8e57f8fb2dace44e8139757a43870c1d6d775e87390289a239dd4778078e206f9332b7
- TLSH T19611822190C8BF554F7155A33F7B6418CB690373288C048CB0EE6D578F215995107173
- MD5 SHA1 SHA512 TLSH
Xerin-v4.0.1.2-Cracked-main/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bdb84aa16678189510def7c589851f6ea15e60ff977ea4c7c8c156504e6ac0ff
- MD5 3d913aab7b1c514502c6a232e37d470e
- SHA1 28ac2d1519ec5ea58b81fe40777645acc043b349
- SHA512 311e8f73c52dd65cbaf9f6e008b3231090ea99edf3471bac63cca4156a37a0d874ac590b19c01b15e05345bb6a5b636a11698bbd4e88c59c138dd3f358800027
- SSDEEP 24576:2gW20arTgWkk7z2B3Kqwf11Ot9Awr89Iv7f+NGGL:XC3o4swrY
- TLSH T105456C1177EC9BB7E0EE4737E8320A5807F2D5066693EB4F5610ABA96C833589D013B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1182782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/obj/Release/net45/dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ