WiiGSC.zip
- SHA256 1da88f26ae48afad0815c4399190d92a2941d44cada3566dd026749d76672e82
Overview
overview
4Static
static
33rdParty/w...le.exe
windows10-2004-x64
33rdParty/w...le.exe
windows11-21h2-x64
3BASSMOD.dll
windows10-2004-x64
3BASSMOD.dll
windows11-21h2-x64
3BassMOD.Net.dll
windows10-2004-x64
1BassMOD.Net.dll
windows11-21h2-x64
1CommonHelpers.dll
windows10-2004-x64
3CommonHelpers.dll
windows11-21h2-x64
3CrapInstaller.dll
windows10-2004-x64
3CrapInstaller.dll
windows11-21h2-x64
4CrazyInstaller.exe
windows10-2004-x64
3CrazyInstaller.exe
windows11-21h2-x64
3ExternalLi...et.dll
windows10-2004-x64
1ExternalLi...et.dll
windows11-21h2-x64
1ExternalLi...ET.dll
windows10-2004-x64
3ExternalLi...ET.dll
windows11-21h2-x64
3ICSharpCod...ib.dll
windows10-2004-x64
1ICSharpCod...ib.dll
windows11-21h2-x64
1IOManager.dll
windows10-2004-x64
1IOManager.dll
windows11-21h2-x64
1InstallerS...rm1.js
windows10-2004-x64
3InstallerS...rm1.js
windows11-21h2-x64
3InstallerS...er.vbs
windows10-2004-x64
1InstallerS...er.vbs
windows11-21h2-x64
1InstallerS...es.vbs
windows10-2004-x64
1InstallerS...es.vbs
windows11-21h2-x64
1Ionic.Zlib.dll
windows10-2004-x64
1Ionic.Zlib.dll
windows11-21h2-x64
1KeyStego.exe
windows10-2004-x64
3KeyStego.exe
windows11-21h2-x64
3LoaderManager.dll
windows10-2004-x64
1LoaderManager.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3rdParty/wbfs_file.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3rdParty/wbfs_file.exe
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
BASSMOD.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
BASSMOD.dll
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
BassMOD.Net.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
BassMOD.Net.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
CommonHelpers.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
CommonHelpers.dll
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
CrapInstaller.dll
Resource
win10v2004-20250619-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
CrapInstaller.dll
Resource
win11-20260130-en
windows11-21h2-x64
15 signatures
150 seconds
Behavioral task
behavioral11
Sample
CrazyInstaller.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
CrazyInstaller.exe
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
ExternalLibraries/BassMOD.Net.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
ExternalLibraries/BassMOD.Net.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
ExternalLibraries/irrKlang.NET.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
ExternalLibraries/irrKlang.NET.dll
Resource
win11-20250610-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
ICSharpCode.SharpZipLib.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
IOManager.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
IOManager.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
InstallerStub/Form1.js
Resource
win10v2004-20260130-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
InstallerStub/Form1.js
Resource
win11-20260130-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
InstallerStub/Properties/Resources.Designer.vbs
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
InstallerStub/Properties/Resources.Designer.vbs
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
InstallerStub/Properties/Resources.vbs
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
InstallerStub/Properties/Resources.vbs
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Ionic.Zlib.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Ionic.Zlib.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
KeyStego.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
KeyStego.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
LoaderManager.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
LoaderManager.dll
Resource
win11-20250610-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target WiiGSC.zip
- Size 2.5MB
- Sample260508-tx9s7set2r
- SHA256 1da88f26ae48afad0815c4399190d92a2941d44cada3566dd026749d76672e82
- MD5 02841e25c817528fb1a9980649f2154b
- SHA1 516f44c0717670383c61fe296958849c7d6106cf
- SHA512 a6eea8d058c897d7fbea72858ae76a453bf17c0aca84605b7975fe38498a4eeacf6b3b1b43a55aa9268e1fb8c94b9d3e9b672ce688b8437e103b6e46e69b4070
- SSDEEP 49152:f42VS84/haMqeJ3Knw4l/QjO8msPPzckc+6nOF92cbP3XHRy7n2vYBVy/s4hPfk+:LVBqhIeJd0/QjgsPs+yOFccz3By7uYrg
- TLSH T12BC533D8D28981C8D68A757AD522FD47EA75D2E7A5331117E0542B2A3EE063C0F3A31F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 22 IoCs
Checks for missing Authenticode signature.
resource unpack001/3rdParty/wbfs_file.exe unpack001/BASSMOD.dll unpack001/BassMOD.Net.dll unpack001/CommonHelpers.dll unpack001/CrapInstaller.dll unpack001/CrazyInstaller.exe unpack001/ExternalLibraries/BassMOD.Net.dll unpack001/ExternalLibraries/irrKlang.NET.dll unpack001/ICSharpCode.SharpZipLib.dll unpack001/IOManager.dll unpack001/Ionic.Zlib.dll unpack001/KeyStego.exe unpack001/LoaderManager.dll unpack001/Log.dll unpack001/MultiLanguage.dll unpack001/Schema.dll unpack001/UpdateManager.dll unpack001/WiiBackupFileSystem.dll unpack001/WiiGSC.exe unpack001/WiiHelpers.dll unpack001/WordStegoLib.dll unpack001/zlib1.dll
File Explorer
-
WiiGSC.zip.zip 2.5MB
-
3rdParty/wbfs_file.exe.exe 127KB
-
Alt-Dol/Readme.txt55B
-
BASSMOD.dll.dll 33KB
-
Banners/Readme.txt82B
-
BassMOD.Net.dll.dll 36KB
-
BlockedGames.xml.xml 1KB
-
Changes.txt2KB
-
CommonHelpers.dll.dll 4KB
-
CrapInstaller.dll.dll 443KB
-
CrazyInstaller.exe.exe 16KB
-
ExternalLibraries/BassMOD.Net.dll.dll 36KB
-
ExternalLibraries/irrKlang.NET.dll.dll 432KB
-
ICSharpCode.SharpZipLib.dll.dll 188KB
-
IOManager.dll.dll 27KB
-
InstallerStub/Form1.cs.js 6KB
-
InstallerStub/Form1.designer.cs9KB
-
InstallerStub/Form1.resx.vbs .xml 6KB
-
InstallerStub/Info.cs314B
-
InstallerStub/InstallerStub.csproj3KB
-
InstallerStub/Program.cs485B
-
InstallerStub/Properties/AssemblyInfo.cs1KB
-
InstallerStub/Properties/Resources.Designer.cs.vbs 2KB
-
InstallerStub/Properties/Resources.resx.vbs 5KB
-
InstallerStub/Properties/Settings.Designer.cs1KB
-
InstallerStub/Properties/Settings.settings249B
-
InstallerStub/Resources/InstallerStub.z.rar 20B
-
Ionic.Zlib.dll.dll 96KB
-
KeyStego.exe.exe 25KB
-
Lang/Danish.xml16KB
-
Lang/Deutsch.xml.xml 17KB
-
Lang/Dutch.xml.xml 18KB
-
Lang/English.xml.xml 17KB
-
Lang/French-1.xml17KB
-
Lang/French-2.xml18KB
-
Lang/Italian.xml.xml 18KB
-
Lang/Japanese.xml18KB
-
Lang/Korean.xml.xml 17KB
-
Lang/S.Chinese.xml16KB
-
Lang/Spanish.xml16KB
-
Lang/Turkish.xml18KB
-
LoaderConfig.xml4KB
-
LoaderManager.dll.dll 12KB
-
Loaders/CFGUSBForwarder.dol296KB
-
Loaders/Readme.txt136B
-
Loaders/USBLoaderGXForwarder.dol296KB
-
Loaders/USBLoaderGXForwarderSD.dol296KB
-
Loaders/WiiFlowForwarder.dol296KB
-
Log.dll.dll 7KB
-
MultiLanguage.dll.dll 6KB
-
Muzak/jt_1999.txt4KB
-
Muzak/jt_1999.xm1KB
-
Muzak/jt_breez.txt4KB
-
Muzak/jt_breez.xm614KB
-
Muzak/jt_letgo.txt4KB
-
Muzak/jt_letgo.xm97KB
-
Muzak/jt_mind.txt228B
-
Muzak/jt_mind.xm951KB
-
Muzak/jt_xmas.txt4KB
-
Muzak/jt_xmas.xm63KB
-
NandLoaders/Readme.txt68B
-
NandLoaders/universal-base.wxd4KB
-
Readme.txt4KB
-
Schema.dll.dll 15KB
-
Shared/Readme.txt34B
-
UpdateManager.dll.dll 7KB
-
UpdateManifest.xml1KB
-
Wad/Readme.txt40B
-
WiiBackupFileSystem.dll.dll 55KB
-
WiiGSC.exe.exe 150KB
-
WiiGSC.exe.Config.xml 1KB
-
WiiHackingHistory.txt1KB
-
WiiHelpers.dll.dll 60KB
-
WordStegoLib.dll.dll 6KB
-
Words.txt.vbs 3KB
-
temp/Readme.txt151B
-
temp/update/Readme.txt49B
-
uninstall.bat60B
-
zlib1.dll.dll 58KB
3rdParty/wbfs_file.exe
- IMPHASH 743aa73ce239941b1a9a3bbc6f09c1b6
- SHA256 4b15a50c279769f6890ff2c8565a1612e1ef409e0c2cd77b2974988a80316d7b
- MD5 fa8dcae8d7fab4837ae0958d173ad954
- SHA1 fb73e11a1ec063364fa1915fd191a8577d980949
- SHA512 4577b7fa2819f396cbaf7748b6e4b93a0aca2e45ebde31a3f9e317e9c2214d02e0d3f621702018f05182a3979016854bbbb1e3d1ea20bd083a9051e5d454a684
- SSDEEP 1536:wgYGn7a+oUZ1Aw6MRrA7lDGV40tBskL8+Ac+JnIqMs7tYi0Gnhkhoc/o:8MRZ2w6MtGUJBsm8+J+JnPM4rR
- TLSH T160D3E885B9874CFAEA16167CC9E3D32F173CB5D086238B12D6644976CF13A923ED9342
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4736
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddAtomA
CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExitProcess
FindAtomA
FormatMessageA
GetAtomNameA
GetLastError
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetEndOfFile
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte
WriteFile
msvcrt
_chdir
_mkdir
_strdup
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filelengthi64
_get_osfhandle
_iob
_isctype
_onexit
_pctype
_setmode
_stricmp
abort
atexit
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
getenv
localeconv
malloc
mbstowcs
memchr
memcpy
memset
perror
printf
putchar
puts
realloc
rename
setlocale
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncpy
strrchr
system
time
wcslen
wcstombs
wsock32
htonl
htons
ntohl
ntohs
Name
.text
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Alt-Dol/Readme.txt
- SHA256 f2e6644de317e05d494702723d6950e2b18b2089b0242575f6acd3b44ba897dd
- MD5 fc541591711b81fc939bb85d3659a425
- SHA1 3d10279d95d9fc621032de3753a938352aa1555d
- SHA512 8051d780816e0c395c1e053564152153d0e3c1748e50fa47bef1ba2caae6bad91bc40bff26defcd1dc02fa94138b816884a871e35b302fd01d2876b4ef447b10
- TLSH T1EF900210598363951E9381C8F14D1684E4D6159404365125170C009C24F9955A175875
- MD5 SHA1 SHA512 TLSH
BASSMOD.dll
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
73795
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASSMOD_ErrorGetCode
BASSMOD_Free
BASSMOD_GetCPU
BASSMOD_GetDeviceDescription
BASSMOD_GetVersion
BASSMOD_GetVolume
BASSMOD_Init
BASSMOD_MusicDecode
BASSMOD_MusicFree
BASSMOD_MusicGetLength
BASSMOD_MusicGetName
BASSMOD_MusicGetPosition
BASSMOD_MusicGetVolume
BASSMOD_MusicIsActive
BASSMOD_MusicLoad
BASSMOD_MusicPause
BASSMOD_MusicPlay
BASSMOD_MusicPlayEx
BASSMOD_MusicRemoveSync
BASSMOD_MusicSetAmplify
BASSMOD_MusicSetPanSep
BASSMOD_MusicSetPosition
BASSMOD_MusicSetPositionScaler
BASSMOD_MusicSetSync
BASSMOD_MusicSetVolume
BASSMOD_MusicStop
BASSMOD_SetVolume
Name
Size
31KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Banners/Readme.txt
- SHA256 3d0ddb70e2e27fd7f841edb7ab3dd543ce62f6ddc4bc21d8a44985af8045af5c
- MD5 7d6f6c8ae4bf5dd0a33b035d86e33ca9
- SHA1 14d507ac676033b9f22bd05d3a523c821e979d5e
- SHA512 a8a76afc3e362e85917679e21d40425e8848c0698237385d5142bbc898e328e4fe0bec840639d731d7a5f87c587bd84b2a390983fe25201cc6a65e279a3842b9
- TLSH T1D7A0129317D189540956C240FA008826410CC81C808C02403F4C100945145A60201E50
- MD5 SHA1 SHA512 TLSH
BassMOD.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 80bdf8004412973fe55f3bb101f98609f7996f76ac065607c9c2702a9b6ebdc6
- MD5 c605590dcfc401899b3c89398345afb9
- SHA1 f001fe3a242cd487990afdaec66abf540bc5da3f
- SHA512 0caaebbf399bad28feacd38dbaacbc356905600e15b71c5ab16d491414450462a726e83d483bd630e615ca69da1c4ec381b8084e4ba6568484ce91daf4b4542e
- SSDEEP 384:YvizfGYIpAkS0F/+51vEHqtiIviB1daAB1xBB18CqNmDlWR+hO0jj7WgPDj:TpH++5J8OifdaAfTfybSF3
- TLSH T1EDF22925AF5CF122C8D9873254638BB50970E9004BF6BFDB76DF641EDC622CA0932B85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Development\BASS\BassMOD.Net\obj\Release\BassMOD.Net.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BlockedGames.xml
- SHA256 a2cb35190f4b3bc0207204852c6d9fc81693a0f4453072ff01440418db7bf36b
- MD5 5d5cc6869e265b415295f77447f1d120
- SHA1 8d60aad2742e16784c875a3568ac81f19a8ae378
- SHA512 45beff3ff4a3d21d99b8eb07a6e93f6ad82b463a356b152162c2e4ad8608b6c91f658025ab8b39e3ba2c6ea1dc49e05e59bd0f1c8c82a2049a35b9b2d40d094c
- TLSH T1FA410762F4E0A5047538E53C7AE211DA9D4AD2BF49CA9E20B0C1614B3F3E4A1DB77F60
- MD5 SHA1 SHA512 TLSH
Changes.txt
- SHA256 66d3e9db00a5e9db22b761218f3066482f32d2e00be9b6096bf9e0e7057eddea
- MD5 69b131485b88e91ae6eb2382654d844a
- SHA1 8e23b5a97f2bec645175f886da81918c1995cb37
- SHA512 238c4c75e98621c8cdf878abaaddfa0e186107ddf31213b919bd456b5db1a1f58e44959e9c2a9b3e80ab4a9609f5d8c22733a136255c70a765bdc9ad5c6536a9
- TLSH T1DF5175122E0BB36F0172C38152C9283DDB9E034992D54679F03E88DC2B66492A7DF66D
- MD5 SHA1 SHA512 TLSH
CommonHelpers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4254539ddef0c3f8d39513874aa8f682f0573393010c2d47cd6241fec84b2c39
- MD5 4ec9e2d60374f39309d24012383719e0
- SHA1 99b9c630ff3ab7fbeba471ef2a472a4c91790848
- SHA512 d7b0c48512ef2d40f75b827ad265d4f95bb044080d9e6983b7f29a0d25974ff64724344a1285ae1e607c9779545a84abd65bed5d4c0aefbe1bebd3543fe117c7
- SSDEEP 48:6cZhou1qe6k/uycmziWh3fAIWWuJgK3/rfyXYyQXOsBtuHleWXvg3aF:ruyok4MLh3fAHPPE1/
- TLSH T1A991641163E84776E8360BF1AD732251927AFA408F634B2F0588531A9C2AD398F52F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\CommonHelpers\obj\Release\CommonHelpers.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CrapInstaller.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ef0a5fac4ccb9d8146917a29893fe8ce6ebaa3eb7f6189402462e288a8736c9
- MD5 82e12e6e66e6711106b27012d1dbeef1
- SHA1 3d06ab461d370385815c292fbe08c601a7b69d15
- SHA512 41916edcf834f810c16defa41bbe10cae554e2eb9c3c3d9f45684b0c93ff9c96025bcd783606df9fe05825fefc368e5b29f016b1385d52cf1c27eb5c1c0640f5
- SSDEEP 12288:mUUtBBK7QgaSkrH8i1A4oY+ljM52YmHeOz:mzUQgCci1A4oY+VM52tHeO
- TLSH T1B4A479C3C0E314E9DF666A3923F46224069EEE051CAFDE351E0C466C4469B87996BFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
459950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\Helpers\obj\Release\CrapInstaller.pdb
mscoree
_CorDllMain
Name
.text
Size
441KB
Virtual Size
441KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CrazyInstaller.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 236fe4dd5adac51e61822113b15187cfac67f15e375f9dc40677db134a196fa3
- MD5 676839fa5d6e736ced7022813dfb8490
- SHA1 8bb519e2614fa74d9be92e96d1476ee5707c7b12
- SHA512 6056d1f6f5d79275c02add494e4adee1fa920ad0032e88ae57a6b86e49e4df50e65bd02a4c207749bc882207b232e282480a248709f03f7c35a847b83fb3377d
- SSDEEP 192:xkk4iGTvP96k9z3ao2H2Ga84ICOEptTfWQFXUQ5Il/wJW:xkWgvP96uz3yHtR4NppBfW9zw
- TLSH T1DB72F75533E4413BD9BA1F712C3356914B32FD128A72DEAF1D86015E0EF2B048A62FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\CBackup\projects\crapwii\Crap\CrazyInstaller\obj\Release\CrazyInstaller.pdb
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ExternalLibraries/BassMOD.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 80bdf8004412973fe55f3bb101f98609f7996f76ac065607c9c2702a9b6ebdc6
- MD5 c605590dcfc401899b3c89398345afb9
- SHA1 f001fe3a242cd487990afdaec66abf540bc5da3f
- SHA512 0caaebbf399bad28feacd38dbaacbc356905600e15b71c5ab16d491414450462a726e83d483bd630e615ca69da1c4ec381b8084e4ba6568484ce91daf4b4542e
- SSDEEP 384:YvizfGYIpAkS0F/+51vEHqtiIviB1daAB1xBB18CqNmDlWR+hO0jj7WgPDj:TpH++5J8OifdaAfTfybSF3
- TLSH T1EDF22925AF5CF122C8D9873254638BB50970E9004BF6BFDB76DF641EDC622CA0932B85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Development\BASS\BassMOD.Net\obj\Release\BassMOD.Net.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ExternalLibraries/irrKlang.NET.dll
- IMPHASH 04638470c533528df7f77167c472f0c4
- SHA256 c29a1fa42e7fd1d5a844a8a1686160c8976f147fb6aea0f263309886aec437e6
- MD5 6be3efd04667f517e2f292c3ba9505ac
- SHA1 ec6f2c03a3b029ad618ec10f847e93c2586837a9
- SHA512 65652f1ecb2f40bdc52471829d2152bd738bd311ee8cc82b8afde730a757d623886e80d2a27bcec5203af8e15fbb057cf8e83bafe359692aff1a66468aa69740
- SSDEEP 6144:kRSQ3HqvYZjVjmo8uzAhgcNN95g+PpniViEoj+dwLSf9da8bCuVd2peCMwR01hj:1QrjVPPgfg+BSE8572pHIR
- TLSH T183948D3362D2893FC0DB12B656467AA9EAFDCB5E81F6AE930F0418F51518D478E583C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\irrTech\irrKlang\source\irrKlang.NET\Release\irrKlang.NET.pdb
msvcr71
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
malloc
_initterm
free
??_V@YAXPAX@Z
__CxxCallUnwindDtor
??2@YAPAXI@Z
wcstombs
__security_error_handler
_except_handler3
strcmp
memset
strcat
sprintf
printf
strlen
_getcwd
?terminate@@YAXXZ
fclose
fopen
_errno
_splitpath
memcmp
log
memcpy
fmod
sqrt
atan
_findclose
_findnext
_findfirst
fread
fseek
ftell
_beginthreadex
strstr
exp
pow
qsort
fprintf
exit
abort
realloc
floor
calloc
strcpy
memmove
memchr
toupper
perror
ceil
abs
fabs
ldexp
labs
sin
cos
frexp
acos
_mkdir
_iob
wcslen
wcscat
_amsg_exit
_purecall
_chdir
??3@YAXPAX@Z
kernel32
CloseHandle
QueryPerformanceFrequency
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
CreateEventA
SetEvent
ResumeThread
SetThreadPriority
OutputDebugStringA
GetProcAddress
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
LeaveCriticalSection
GetVersionExA
GetModuleFileNameA
DeleteCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InterlockedExchange
Sleep
mscoree
_CorDllMain
winmm
waveOutUnprepareHeader
waveOutReset
waveOutWrite
waveOutPrepareHeader
waveOutClose
waveOutOpen
user32
DestroyWindow
RegisterClassA
CreateWindowExA
MessageBoxA
MsgWaitForMultipleObjects
DefWindowProcA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Name
.text
Size
300KB
Virtual Size
296KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=42, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=2, id=93, version=2067,
count=6, id=93, version=2179,
count=3, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=105, version=2067,
count=2, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=10, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=7, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=93, version=2148,
count=113, id=1, productName=Unmarked objects,
count=47, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
ICSharpCode.SharpZipLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71df669b79cb90305f3e9fbd6c7ba7bcadc39cdd6869e3e98342e6042b9f601c
- MD5 b6c6413803d21915fd60b86b0a5fc13b
- SHA1 fb9ad07294de59e0e1e46ba8aac4c055eeb8debe
- SHA512 06e981c499a86cd30cdd465c0957a711b94eaec4cc760253b8a6314559fd1227bd8a10a5975d3083375588dfd9e9f8ac17be87a722575cf48353122711c4600d
- SSDEEP 3072:VOrnIiXObo/bDmFkCVNMOGc2G9dnxSCWovacOsvKhU/amDwR9f/kI3zjrAf:unIiXObmHkNNxfTOsIt
- TLSH T12014171537EC475BF6EA9B78E075155483F1B997363EE78E8E0580FE1C22BA08921363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
185806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
176KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
IOManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f6e485bbdd29e79576c286db782a6b7e16c67a1e5bd2c39b92a6f7ee7bdaa45
- MD5 50929a744e9cd4e1f26b690297ffa280
- SHA1 5f02e72c0529b9cf7f3f7d8fe2a3141c6eb9014e
- SHA512 ee4dba41220d78c7ca587e0e473aea4cd016861a5266095e67e87d22536cb02d6863bb4a29c4ae9ad2409abc029331ee835e46912dc5df8905b0e0b2d8d381dd
- SSDEEP 384:bT30yDKKkfx8tgs/Ps2zV3JUKHDRygMGGSZOyZwYgH1pHFujmTm2:X0iKKkp0083dRySz36pHFujv2
- TLSH T13FC2E786A79E9E37D10D47FE94B36322A772C2F56903C35354C8019E2433795BE22A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\IOManager\obj\Release\IOManager.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
InstallerStub/Form1.cs
- SHA256 ce43639973b8cbfba86046b94f55b4779a9a43f218c345d616d8258100bb05b7
- MD5 6471294abe3fe7ffd048115a738c2bd9
- SHA1 987cec82ed62427bc814f2db1b985f237ef339ce
- SHA512 f83177fa4174d6d429575aca3db31e87903b3a41ccf481d963ccd6e0813c733080bca1c8e2a721cd80e0e102d0d67865b67cef463261f216152efed40b28a4da
- SSDEEP 96:Jo4h4Dcz0XyUlVGbnIFqbqAqZaHmmkmqdoTYx6xoSC4ugrkngYcb/t1u1a+GwfNB:9KGQpgQZ6mmkmU4Kgrkght1u1a+JfNB
- TLSH T147D174388F0749FAD633923ACF514E1DFB221207A216139CBADD45185F32164CA74EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
InstallerStub/Form1.designer.cs
- SHA256 54a55adc9908d7921da26aff81cbe7c11742979aafec833496aaa614140bd3e7
- MD5 594e1c294592a81020989314f5c447f0
- SHA1 a48b8299358de17509888a7a7cd417b039196529
- SHA512 b3c07899765dd6a41e78b2dc8f2b2795817615b0a79cbb976635e2f0f14726477e5f7ae0d0834982963fce0f11d6ad39b5475100ddaa3a23afa099eacf9348b8
- SSDEEP 192:Dwa+W9O7V4Pm+v5tdiGflLKmgjd29m6Xy6oZ1VOoYSbBif8dHV67nUbrft3lYyz7:Dw1WO7V4Pmo5iOly29TE/YSbBif8dY7E
- TLSH T1AE124928131E8154DAF2914D8F15E380EFA9161B7C1B8A1CB9DE4B90DF3B2788375AF5
- MD5 SHA1 SHA512 SSDEEP TLSH
InstallerStub/Form1.resx
- SHA256 8b07889235bff35ecae1ca9d7781eb9887d51a3f715dc7f3cdc73ff10109acb1
- MD5 40b06bcfd22b0145dde6a3f5b51f1dbd
- SHA1 2ff211eeb3f9df56c6ac75d4c644974ba69f4c93
- SHA512 b129d1674025f40c3d1affbf185306ecf401437b5d78d7390636af720664e705d0cf2caf2dcd819b6488b011ae7c25aff6160c697cfae91d18fabcb15a0adebc
- SSDEEP 96:KijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvcXbapGJ:vjrbLPD9sLvIzSvKgIqUyaHbaqbaA
- TLSH T186D10145B1C1DD260FB3482CE6527A88F7A8923B02356C54B4DC661F6F72C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
InstallerStub/Info.cs
- SHA256 326e0f787cb115c2fa4ee5c0731b4e218fd2ad78bcea3a594bb5c1ce5a41613d
- MD5 409cf121dc20b8a69774c1c12c035c42
- SHA1 a0bbf79930e335963785ce95f6f2ab29f92f9a93
- SHA512 4bed76c7506643f6a20298f6763dc81ba665447a4e03544d7b23b972967fed94e04580cc8832a3e9db3dd5f14740415c1088900629f3a3fe0099e1eaeed87ac9
- TLSH T1F5E08C647705CA30DC86A842C311E672874737FAC77AAB46CA584A288F5614E56B8A2F
- MD5 SHA1 SHA512 TLSH
InstallerStub/InstallerStub.csproj
- SHA256 35caca2649f8ab822ee98e3916282539bb4edbaea5111b50d6c89a1ab5c1d068
- MD5 dbdc3edb5fdbd9d5a3b2a1d5e122d0f5
- SHA1 3ef187703e696df78b02127f408514b2b4f738fe
- SHA512 7a8fe9847e6a7bc7d09ad02fe00a63f635e353508e9a2ab09e5b98f8f00b266b58b633f00a274933f43b29738eaa5d8de8916764f7d18d5673a7f47a8c8dde6a
- TLSH T1F861F034D2DC2DBA437151B3D253AE01EE64B3A354740438F99CE6475FB2A981247B7B
- MD5 SHA1 SHA512 TLSH
InstallerStub/Program.cs
- SHA256 ef5ce08ee5fa7aef041cbdc44480b4b2c6c7a29902caab2ff32f00995d73b89f
- MD5 b99fae00010e3d5e1cb0569d0e2d71e5
- SHA1 68f38644cab1701b119e32860a74fdf87e55be34
- SHA512 0089302c06ca92f6eac700aab173a3979fa46db26aab4fdb22f4202e9e676413618df20718ebb3df46e931bd4a302ebc909d1ad41a25f353a653c238bdb13e71
- TLSH T1ACF0E5A9325DD7981EB351F71716E0C8D773253F4AB6B410B86E0A41CF35045433AD02
- MD5 SHA1 SHA512 TLSH
InstallerStub/Properties/AssemblyInfo.cs
- SHA256 7c68337a847d5655e8d5c9c6fd5a0fcaee73d76f84b98a7c06d39ed35b0f57d4
- MD5 b5385bef53f4203791387abe27206484
- SHA1 82c9ad9c2534cbf3319cfb2c98ac7de8022069ac
- SHA512 a9a1474ccd272831a796da72b08cd8e0020da10982d402fd1087fe359e9a48b2678e1625141c886891ef2dca739c69ef3e19920c2cec878a71cdda7995909caa
- TLSH T11F318D6D6741E37E8F210193AE6B35D4C36D632882FB0C1934B8B813F301A3842A95BB
- MD5 SHA1 SHA512 TLSH
InstallerStub/Properties/Resources.Designer.cs
- SHA256 18b63f724e1bfb2c1de78eb2ea861282d05402f738d085a16039945cfa48ef0a
- MD5 d23f7a2b50224b67d3ddd850db73c4c4
- SHA1 f72e922f1b43267e4713b9faa711368a93c049fb
- SHA512 c0704eb8a00e24d891eb420be61a3e9e6d317b68689d9935461c71cf981398af1be72266fb1c62b6a0c0f728297a69b8d578d0a62b61d7b455ffdd575c426b49
- TLSH T13551AAB71F95C1324934D99B8701F851CB662113CA7CD578B8EE02640FB739443AEEAE
- MD5 SHA1 SHA512 TLSH
InstallerStub/Properties/Resources.resx
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
InstallerStub/Properties/Settings.Designer.cs
- SHA256 efec78b9bad457ad146436f277fbcc661143991d1170a37ba675879ff5c489e6
- MD5 0894fa6af3b480c426f4fc72798054f6
- SHA1 c188f3f1dc6ae9e426cbfcda29933ae69484fe59
- SHA512 459276f60deef456d8e90cdd9978d19e8c35b301d68405d3450c7337ce60732db2763b5daabc492b59780f041401d63cc741166dc6f533b34cfe5a79de9ee385
- TLSH T14C1199F52E9287370662E69ACB06E163CF32522BCB2E5435358C0605EF2654493AEF99
- MD5 SHA1 SHA512 TLSH
InstallerStub/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
InstallerStub/Resources/InstallerStub.z
- SHA256 30cbdc8b7afd4e079e93f1666220080b31a9b177f4d94ddcc1e5555fb8821f41
- MD5 ad08fe53a5e484ea568d60544ef3f05c
- SHA1 18629208273779dfa28472d5da28542b69b4dfd2
- SHA512 f7dc9796341490b53d6a44eda6ec9e2644ab40959177db1d28682a28460747eefda3a9fc0b7d496e15d745e518e98d541078bd61a9517ff3264e304852206962
- MD5 SHA1 SHA512
Ionic.Zlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e807430987409061556bfc603b07659df515ef3b519f4b95bb4adc666948ec2c
- MD5 e9b7d2091ac935464a65410ca9deabb1
- SHA1 11a866270d23be30cca1de6eb5f255be73af1be6
- SHA512 ddf90fd8115a74bce84cc31563d19472aa1ff470a1f88d0344d2399cf12172118c03fa40437892519ede4c020e67d066d2f9a9d5f4f0bbb3281da1e1f641326d
- SSDEEP 1536:5HJLSQbe61w3FoG6Ypn4cL33O/iYC4Z5BCdI/KpN73WmU8Ij:3LZbDqB6UJL3+vf0dI/KpN73WmY
- TLSH T186A3290855ED4FBBD4744BFE54F522B113B17065EFAFE78A58A820EE29223406A143DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\Zlib\obj\Release\Ionic.Zlib.pdb
mscoree
_CorDllMain
Name
.text
Size
84KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KeyStego.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e7bb93cfe7adf88918ce9eff9dadf5eb5b09e65c367285ac1046fdd5c0abf9bd
- MD5 82fc21e0104b957c03831b2d109f1fcd
- SHA1 1fda99d3c09b2572bba9c50fdba085311e60cd68
- SHA512 4cb845642d322352bd00a14479a04bbb962a75e70f7f7fe22208e7325eebf07dea00ccd8229899226afa47b3e1c1eb495960e7277ef27d848a822cd3c37ebe1f
- SSDEEP 384:+xrdpxq0ocOSF0vDI3p2dqsHuxgb2vP96uJLY53vf6QzUn4KlAlXJ947aRULY5f:+xrUSF0vDIZ2dqsHuxgbqTQWgw8U
- TLSH T114B2B72133688A27DAB816B1C87791EC0370BD169D54D69F2DE37BCF2EB1B040255E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\CBackup\projects\crapwii\Crap\KeyStego\obj\Release\KeyStego.pdb
mscoree
_CorExeMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lang/Danish.xml
- SHA256 9a4099aafff4f84fed81ce6fa94a55d4b3177df894c2dc7787fb1ed828914bee
- MD5 cd82d4cc3c7f0a3a69b0627395a56106
- SHA1 d7baaab54ff48f37fd30a1d0ec8ec54444881f8d
- SHA512 11f43f47ae38cf14bd9a52d653e7b712daedf7ab30205a1df44dfae32473fbe1a41aac3ea0ae3eae88b9ebc437a2ce666b12b4f485c27425729f7b6c6402aa46
- SSDEEP 384:qu+c8NTV56gfEIh131LwpZw5dwVhJRa1q:R8NTVFf55wc4S1q
- TLSH T14F72818F77C42FD1263802BFACDE60672B6DF9DC5E842581175F810A1CD79A4837AEA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Deutsch.xml
- SHA256 368f45b964eca5d40ef7b23bd6ee5b25061957c4617ce93941645cc2da5728bc
- MD5 3a239abd84765d92491c099e8f4c0b79
- SHA1 79108810fa8d1c5f656117972dc0a891f5236d9e
- SHA512 4298ade8f1fef6eb7831f91763cbde7ad74abca3ea1cde11e68e5105511f59cb10dceae7dbeb8229af5b3f7a8858ad55a8fc3175235d9e81d1bca6f48f3fc979
- SSDEEP 384:I4wGIbiaM/YnU84lWWD7LMVTsQl0PS/AccgIC:vwan/YU8eMTP4c3
- TLSH T1DB825F6F03F52B4867B8027F9DDED0832B6D96CB7A8A015426DF91490F4FDE0427B8A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Dutch.xml
- SHA256 5cd34824edfe3e516fffdfd80854c0b09b221ddb183071ad5db69e5887c8de98
- MD5 fc0263cccea3619960053a5faccb81f9
- SHA1 dbe83dc9001b8a7675b9cf066aee41de8db44613
- SHA512 ec8b3ef462afd0c71c016acd1702b528728064093c84b62189f9c2cfff199dcfc80b9ef8abd2ba4ef23694db6de3574052634c4ea83f61874ced27b02b341e83
- SSDEEP 384:PFjZZC5sgwYNB7rSE4WstwxkN16oJky4YgOhpi59wEDp5hyFj:I7B7ctwxkNUoJky4Ygqpi43Fj
- TLSH T175826E4F73C81F20273801BFACDED087EF5E958E5A9A42A5365D811A0FE7D54823B9E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/English.xml
- SHA256 3b8b6b5e6354e022b1a58bbf0f300dad3f5125fefda93c9d8ae511351d81db65
- MD5 fa287486eae20a6b28e6986a296e98c6
- SHA1 e81e2a4f7fdb8c089f752c707b23994a41c95bfa
- SHA512 c32a039888ac2760a19f5843a23abc3e6861f931c696588b2f6b9b28ba8e1f155be97b183da5a731da3b42650ac8d5075e34e9a2780ac43581dbadf8a2b61318
- SSDEEP 192:uQSgGZmZV5pGDaj+YnDcMb1iDjW65N4ON2eH5wulOQZv9yUN1cS2ziWX9wWrF5Wg:u8xYa7R965N4ON2gwePv9RW59w85hyF6
- TLSH T11C823D4B73C42F62233802BF5CDEE083AF5D55DE2A9A01913A5D810A5FFBD6083779A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/French-1.xml
- SHA256 d40f73c5059e2084271a807a1ebaaa14e5becedf3c51f812d118e1aebd9a0535
- MD5 63685add101a243a6a375b4ca3cb2c28
- SHA1 a22538ba9fcabc00cfb387211447f28c75c16707
- SHA512 cf66250ca2e4a903a57fd618b28608a20129c743c5c2ecb899d6ba590704d4c6d2462004b7f2fb5776d09950438b578e78db60398f5952585c884a9d529c927e
- SSDEEP 384:1hDH4x3VXXLl1NQyRMtBzkSLC5dw9hJa1T:PYrlqtBzk/4g1T
- TLSH T14E82734F73C42FD1167802BF6CCFA043AB6DE98C6989B590265F814B0DC796983779E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/French-2.xml
- SHA256 3de7141f493358a2fd8c4a6c719823894de3cf8efeaa1bd9b1599140dd285570
- MD5 d35af294637ba055460484fe07a41e48
- SHA1 9edfee8295fa5c8dd6cd59cd9e33b00d9b833674
- SHA512 982e4c4d3b5b181c70fad33ee061d7c87338cf274f24b6d6e2c62745f813f3caa150034cc664d4a1567e4cfb9aa4b99bafe59685bc2fa0b8050b2a8b19bb9656
- SSDEEP 384:ZZwtzq6UbGsniOUuwb+oR+it1C5dwuhJa1q:MA1irEoMEI4Z1q
- TLSH T11082744F77C02FD1167802BF6CCFA4576B2CE99C2999B240565F920B0DDB96483778E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Italian.xml
- SHA256 2323d3a901772abefb97edb9f6a7c798e910a05216a8cf78c6ef3092d33631ce
- MD5 80dbb77944785130de98795b8f715d6f
- SHA1 dbbdefb3c811901eaffa7d0ed698a6a1fc98b987
- SHA512 1c61fa7bfd460bb56a0a0bbb9ad048a5ca83dfd6e100c2a106e3d06636b73d72ce6af6e37e41eb986aa310cdee95f9b58d16d41dc829dd1ff4d407056ea225ca
- SSDEEP 384:2Lm1O0umU2Tu1/5UbXVFCJbuYTmu5Vu59wn5hyF6:uEO0bU/EFCJuYbDu4SF6
- TLSH T138825E5B63C02F511B7802BF5CDEE047EF6D88CE6E9A1290325E514A4FE7E908277DA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Japanese.xml
- SHA256 b0d2eee6c965077507c11e8232b3e4d997ae6d5d2267d34611de48f7d5ef5c11
- MD5 2b92d1c196883bb123aac3b04025bae1
- SHA1 da49f9bb813ea9bcebfb9de5141eefc6ec68b6d7
- SHA512 25a25e39b31d45abd5aa093458a803425d1ea6f4773e336a3c7518511be90fa85933c8edb1579a418cba95d6b6f90b623e2a9ad17286578d4a47ff3ccd70b7ab
- SSDEEP 384:PDlkfdimZ8GdM1SY0turraw6I6jJvVJgvBzH6A:0p8x1Sw8JGBT6A
- TLSH T16B923F6E53E11B5146B8027F4CDEA0871B1D8C9FFD82296522AF80805FABDD9D637CB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Korean.xml
- SHA256 9edfbf27a1e090d1e55b336982e496de2963095304d3170eb427f63ce4e7734f
- MD5 bdf3ad0d235c3527a2e7e63199375ada
- SHA1 d432920238042228758c48e5b3450c2608d89ddd
- SHA512 3790770d91932b84b9193da41202a63131c807a3eb19d3abbb6f6124b553b2274fbf224a1c7899fa2d3d6732441422694bf28f787aab61b3015bee6a95760e3f
- SSDEEP 192:ITYMFuo7WWstBLiiT6hEmIaFm3tIlavNJdtc7ojl8neuLrClYhj:ITTAoa33LOhEmIaFm3uavfEoo
- TLSH T1C4822D6B22E2178462B9416F5DEEE0471B8C99EF7BC700807ACE8A844F5BDD50637CB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/S.Chinese.xml
- SHA256 b1058699013dd74b47a4ed4ec31e24dbbf40f8df2430e38370effa9a58d30911
- MD5 48af95bd22ff71edf7961aa887e71836
- SHA1 50c032f0285a78af5308d2caea3859219f127f3d
- SHA512 d7bd7cb6f3e6e9f1c7911891ae34dc8f1f96a93c0b79dbf52cc0d5707f45ad8cf9c1185350c64597d7ec0a48070be8b76e04dfebf34455b074d33cbe2c41c506
- SSDEEP 192:rxKsafTVuV1amp6h/gwR0bBbycrryvpmVR50juf//VBZTeSmzHVFZZ0rLjCHKPhh:eLVKamY/zRwrryvpmVR55ffZSZqrLW4
- TLSH T1A3721B8E26D15F50273802AF1CEED0A7AE5C598E6EC765953A8C45861FF7E600337CA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Spanish.xml
- SHA256 3a62a712d14fae035e9391ef7c143dc358b8ed8a5ad7abba73f7ed8c52fcf165
- MD5 b3965854ece8652bae28f402c777f292
- SHA1 bfe674389013edd963e93570bb94222da4725af7
- SHA512 73cee5836df001708832ff1352cbdfe3066e68ea4f736c8ca424c284fa6c2c811a601b5bfdee17a5dd2366197af6268ad3f10d0d0283901ac6fe4aaaa5887ac3
- SSDEEP 384:7NFgl/iZyhdz4YRVOzIaclZgfJ4Axrky1vOCZSJGz:7NFM/erfW+BF9
- TLSH T12A723C7F92E01B5126B8517F6CCBD0176A9C88DB7D9A428072EF42540F9FED886339A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Lang/Turkish.xml
- SHA256 766ceb6528f62883fde7a0e696986c4530c79a366fedd085e2307bcf44d8d813
- MD5 73a45a7110df8bc99ac7d4599dd033de
- SHA1 bee808a58f5e68bb3d3b3b061d24bad217d05f32
- SHA512 61d9c074399ab93d3619d5a0c8ba30a60492e9faecdea580b29b3f2e2fb3cd8d39964e739d9db54ad4b20caaa49788e4a8df753b4a544c22306776a610bca0f6
- SSDEEP 384:RyGR781u+Peu9I9/toP1UWxSR1KWc6GzRq+pKJ1BuImD04urDo:/R784+PeuqDgUsSY6GzRq+pk1o04urDo
- TLSH T190826F4E76D02F04533802BF9CDED05BAE9E4ACB6D931582321E86171FE7D5183BB9A4
- MD5 SHA1 SHA512 SSDEEP TLSH
LoaderConfig.xml
- SHA256 eef049e19b7b501481a1c8a8342a98536579eaedd584b9ca71b04a439c06ac80
- MD5 332469b168bd2ec75f136b4b4ce721d4
- SHA1 cba3884cf209eb18f5326da2878ff39f1d5e39f0
- SHA512 e83bb5bc0dcc1ae2351125d3fe4e3bdba0dc50231006d1579ff3bb9d58dc2d01edf977a07cc68d98b55c9b892cfce322fbcfb46f2bd81b3493a3f8390706c10b
- SSDEEP 96:kRK2KNVL40jB6a2pa2mPa+Za9P/cVSfA4aKbaKuPabW:ZZVKJ6ecVeAEjHW
- TLSH T16781DC19B79EB633640FE30B39F17E85662FEE7E100048E305A61A3F419E0E467492F9
- MD5 SHA1 SHA512 SSDEEP TLSH
LoaderManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 10c8a47b0b60a37ebfa0a78419dbb2132191764f0bd9e37e1ad162b1ac55b24d
- MD5 cbb50dfacd33b29b8b3ef1b40fd4d494
- SHA1 e019c4fd1283588dba169cf8599abfc45a0e7c6c
- SHA512 7b6479ab8378dd71bf5d687d955b48ed29022b0b609ce0015d0e2c30f93033b8c05850e7bdbfefbb3abe9865d8db48fc6f8aa19e593bf3610730eff26e88e182
- SSDEEP 192:gfUIRcbpv/4Ir9R1nHWqHU20cNJRMleYy9a:gepvjVHWqeYklRy9a
- TLSH T18942B71763F9833EED6AC739B4B20A174078E7163613D67A0DEB918D1CB6304CA5267B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\LoaderManager\obj\Release\LoaderManager.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Loaders/CFGUSBForwarder.dol
- SHA256 7080f8e904c597cb63f647bacfb86a9545b2b131e42b2712a9304a0f6b0a422e
- MD5 b75b8c0ae6f91d0134555b6f534919b1
- SHA1 73e12ba5366f9405f72ca255242a3ef5d63d7e73
- SHA512 3004505a33d18c7983a069f541e1826dbf23170721efd114b476197ec419a4b2dfbfdfdffd6091ebfa3f27e70ee3c8965e5c2066d923bcbd3ebaec720f5d2825
- SSDEEP 6144:WoaOO3tYkyUcaMptHFtFuKkMsabdKaPMnwBZXKEJN04ot+AA003m0BSLw4P:vaOO3tYlnaMptwKkLavPMnwBZVJN04of
- TLSH T15C545B00BB0D04A3E2C34EF06A3F5BE1C3EF5EA501FD6A45281A7B4B47B1E7115965EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Loaders/Readme.txt
- SHA256 f339a64bb148fac89fa241bae69f840306c0c42ee293e8d6b7f901cb38ef5b20
- MD5 ebdffeb9a4c48c4b7973791914c8dc20
- SHA1 bb99b9b94133557c71f703fc92972f4a855abce9
- SHA512 8369a2a8390d93c7936e532141923d3cc98b14711ce77f63acb11a5bf3a421935eeee3a047a88014d3f18837feb26321c990945852c367434ccf883ad75318bb
- TLSH T11AC02B084F00C0B14C71C103E3080C435B18CE2F000094972C343F1C14850E1E1BE0F3
- MD5 SHA1 SHA512 TLSH
Loaders/USBLoaderGXForwarder.dol
- SHA256 ff31340547ddf9eaad6ccc10491333fe59770d0fe978fc233e504c0399d7d671
- MD5 34c57c1e6d7f5f6b4af5af57436a8fd0
- SHA1 fcc9892702db1a2af865c5a16e35a986f8285251
- SHA512 e801a71a2abdbf614f00f259abc87af6145a137a90f217bcd1e5ba822737704e19721ffd8d60d93ffdc697f09e21ef68afc0f1a48bb4d97b384c432ca0adec13
- SSDEEP 6144:jxaOO3/MzsQaipczagAhqktsaYdTfPMrwHtxmEjN/+ZGAq/226Wg7F9RKCPl:taOO3/EjaipckqkuaqPMrwHtrjN/+ZGW
- TLSH T139545B01AB0D08A3E1C34EF06A3F5BE1C3BF5EA501FD6A41681A7B4B07B1F7155A64E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Loaders/USBLoaderGXForwarderSD.dol
- SHA256 7702a375d7bd35354e51997c14f861f42e369e706fc8c1704b9b2d7cb1302cfb
- MD5 f6b6d93cbcf8728f7665fa0df58bc639
- SHA1 7bebee274e0a6362e690c748c4a49867fd83f3b8
- SHA512 1c0e43fb5c4a376deb1045d1db2d8307b78abc43da7b63d9b105942cdb6bc1b6e2869c8cf7222e8c05faa7cb265be83d25416118fc341d442d59f49f50ad6bba
- SSDEEP 6144:kIRaOO3boFXkaBpMLPhA9xJk03as7nLOPMrwHxbsE+NVJ47AbmR6cyJ6m0Py:7RaOO3buUaBpMCXkwaiiPMrwHx7+NVJE
- TLSH T103545C01AB0D04A3E1C34DF46A3F5BE1C3EE5EE501FE6A52680E7B8B47B4E7115924DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Loaders/WiiFlowForwarder.dol
- SHA256 8da0262f446a9b910033367c428bbc8868fc55deb55f8db7cdf609bf43ce783f
- MD5 fc787a56ad08d7c6adcb52e7dab6a5a5
- SHA1 88834f47b2be00f85f9af720bd51436420fc252e
- SHA512 e7cc99864a703fc8bf036976f2965b1424dd6769580f17c45d9da84d5360ca221d9115c769344d281f0657c00d1094f2e8e205ea3d5228691e81839db34468eb
- SSDEEP 6144:tHaOO3y0sFfaep/sCcqUNk0+aKTzsuPMvwwaoOENNKvsmxA9xl/m0+oDb3FP:xaOO3yjNaep/CNk9aePMvwwaENNKvsie
- TLSH T195545B01AB0D04A7E1C34DF06A3F5BE2C3BF5EA501FD6A41680A7B4B07B1E7115A65EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Log.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e214df9b3dd41aea62529f87adff19b47adaa57c2a4ffc99e814430ad744b2a3
- MD5 a1d95b7b49b30454173441c0b571328b
- SHA1 17994c9a7a1cf1f3c77dfafa1093fa36a0f208c8
- SHA512 5ca79063471d0ed7dfa306a730b26c1ab4d89c3534bb767f92584ed4ecf6e7161d8a5db412f618e3d1aef3f994e5d778ce907cccf1efab6d056b9af379904d44
- SSDEEP 96:liDW+NzTTSHPamZJ24GatSLCV/TUXXiTV0ejs:liK+tTTSHPamZJ9GawCWyTFjs
- TLSH T1F9F1E90273B40D67D9EF5A757C936342C371F6A28913EF1B9CCD267E080B3544661B92
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\Log\obj\Release\Log.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MultiLanguage.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7e746ef34373d2585d056b0719000c958368e9fa69bcb092eb8055c580138caf
- MD5 ea7d11c209380e2e9e15ede971fb1e64
- SHA1 a06e4e8043e4da57d4f1812cbc5470428d0b93c7
- SHA512 59ce65dfb3c7d43ad554952c713463acd8383a81a5c116eca16f0846465a87a2999815b200d0fa634199fd43d6cc0554445d5c947641d6a845f00f6df3c75b82
- SSDEEP 96:Tkyq2VhUSyr8zzDoTszQmZCtG5rrCQV/b/RjBtS8g5ts0T:Qyq2wSyryzDssz9E/QhbJw/
- TLSH T1E8C1C61697E8473BE8BB0B71E8B303821631F7519D63DB3F0D8661969CA67444F21AB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\MultiLanguage\obj\Release\MultiLanguage.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Muzak/jt_1999.txt
- SHA256 0aaae3f0cbb88940077e3c364b16139ee10fb8017a7fadd91de3f8fd86b66d0c
- MD5 72f97aec98316e646dde69b144d00bb3
- SHA1 e50a85102bb07166c101d985226ae315f8d3a8cf
- SHA512 9ff2ed3942cda7f1122e09c91064c0817f8aa47dcf18ae1d1334a1c86ea0e75007d58abfa8ce8a9d55f83fc195423670425bea03308f79f218c73361c2cdeb0a
- SSDEEP 48:LlGtmSUgh9WUvko0M0ehtWxY51k4CfLtgOe5VP+lnJ:LlGtmSUgh9XcRtsWq5rCRgDDGlJ
- TLSH T1FBA188DDAE5CD62204BEF3B36AE3B72DFD71014BDD06648130BF104A9B3669160EE196
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_1999.xm
- SHA256 d8eb6db534e678fb5f98da3a6f39f9b2e33aad1a4e46a39a8cba46e999c087f0
- MD5 e63ab083c1d0ff42eff59fb9b5bcd1a9
- SHA1 194da91458efc030b207accf493d88b2886c55b4
- SHA512 a4bf6dde09b38761720b0209484371c5975788057c9aa8b53f030a3ea8ecc4817babaf3f18fb62f50ee39e6eb31b7a77aca5182dd8fb7149e4dde1d850466fe8
- TLSH T128414D3455770262D853CAF46D4EAC7C62830AE33651B36FE358FC83FA1AA970485D30
- MD5 SHA1 SHA512 TLSH
Muzak/jt_breez.txt
- SHA256 95d8ae22fa0e229757660efc506d9bf2cc978d28286f465ddb038f7fb5920410
- MD5 9aa9e280ced1d93cae291f3c8ec3fbdd
- SHA1 4718e4e9dc59e1084ca30a13fd83cabf17ea0404
- SHA512 dbec8998f0e700f43ac4e4364a78e4cd9d00f9e776243b95550702a8ccc8045e1532aefc904bdefa39799cfeb7eb11a4d9897e7cc37c581694c67dc59248ef74
- SSDEEP 48:LeiGXl9SIq029WUvko0M0ehtWxY51k4CfLtgOe5VP+lnJ:LjGXTSIq029XcRtsWq5rCRgDDGlJ
- TLSH T186A1A9DDAE5CC62204BEF3B36AE3B32CFD70014BD906644130FF104A9B3669160EE256
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_breez.xm
- SHA256 e6c5fb0fd91d5b86bb4d802251816a7754e5e38e83976e76b0e41f80c535a533
- MD5 807f5aa5452e9395f7284ae7a17a0d59
- SHA1 8bec04f50b50014ce3efa924189eba056a4d933a
- SHA512 02cdf20df9ef5a44fc85d931c51d86f861fe205ae1a37a61a56fd6a6c9aa76a499ec7b3ccd67f94537c1eb0a77e7376327097d0517d55bc1505c38ad1cba98cd
- SSDEEP 12288:Xyj8WpT+YDrx+Ki9/3isjvnllCl8gmVLuzs9yIew5mVX3YAXl+A:k8iIDnCl8Ro49yIew5mVX3YAXl+A
- TLSH T1BDD4E802E7896245E5793A368C3D0F9983217F493E75A64F6F89BE56B7BB3C31C21201
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_letgo.txt
- SHA256 4aba04f83909a1937bd00c5513ab956ac5b09a81bf23fd70485cf3f7d7d49a48
- MD5 bac76fcb8f21f4929fed5336f6227b9c
- SHA1 e306f272d542039c466ad69e3e6ead8901174a67
- SHA512 33ff3fbf063cc7715ae37943319610f44d2252249e12a7809afbdf2fd80eadc250e41f2233262c73221525fceabe481d048f6b69130df1c40122eef8bdbf7490
- SSDEEP 48:LLUGTsvSUgq9WUvko0M0ehtWxY51k4CfLtgOe5VP+lnJ:LgGTsvSUgq9XcRtsWq5rCRgDDGlJ
- TLSH T1F5A19BDDAE5CD62204BEF3B36AD3B72DFD71014BDD06644230BF104A9B3669160EE296
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_letgo.xm
- SHA256 fe858dbc887fedca43d34bd4c547756c0685fbc77ba3ba1be59b520f01aa7928
- MD5 612021aa77b20893128edadcdc469321
- SHA1 c3ebbdd2d69542029204bc52bd32fff9c37728b3
- SHA512 947689a9b96d920e26bec60aad59613d5c3192c1b3e7ba6e9f420ea6776fc73d144b04278ed92113993951b1b098dde83c7027d2f6466ae651d1c91876019649
- SSDEEP 768:ELzmHLL07WHbo9bbmtTDyf5XKGA67K57w58HDsp9DU0LLI9/LzrWHqgO7w2LHgbT:dRB7q1mCEPW5RL
- TLSH T1D0A3EB616A0E7427F62433B64F1D568321B31B82B21D331BC2365EBA692E925F3DC54F
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_mind.txt
- SHA256 41eb412aa8d0d554d8fc79323a86b1f5fb3c727c3ddf8b6896ed30df4a905503
- MD5 8df3c6aafeaae78ff87967bd185c4332
- SHA1 19035879cb8efc3433d06e33fb799f164209229a
- SHA512 db1ba0c2eda275cc52ad8a697140cefb7d74399fd6d9aa92af6d4be1b039f741c440553183f5cc98a181ac0b18d6f2544789042ea510bbe4c7dcf8e3b14817ee
- TLSH T150D0807774E15846F730D169E97AC565F35E024711504545F9DD28343FB507B5C80B47
- MD5 SHA1 SHA512 TLSH
Muzak/jt_mind.xm
- SHA256 606f38330cf0c5ca47014bb47202392c15b81142c88509beecf0609aa1122b47
- MD5 4219cc94645d8c223c9501174b3d84ba
- SHA1 cb0a73db0a91e1ede78cc8a94652c3f41e2cdf61
- SHA512 baaa47c72c33879bc9db6b6e04c36cbe6b0602f699d3c1b5977c8c75a24c6c5c11f3b7d8a0e9c584b3fbf17dc589bad41c88775a7b228e264e97148cd4efb0b7
- SSDEEP 12288:C31bJl64Yenqy1z/Uw0UNuDA8Ma6G/mtt3NbrRsV6hhzh6Ib5FEIlOt:4b/ienH/UVUNP0ONbrRsVsGIbMeU
- TLSH T194259E01AE125A14D8312E33CE1C23AD86E53D09FE6ADD5F7B8B7F32723B5E14949264
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_xmas.txt
- SHA256 3d7d9bc4dd813202e26a24257eae6644396a89659797246d1ee41dced333efef
- MD5 2b5b33356eeb0d6f2191ba689adfb97e
- SHA1 e4fce454fdefd2bf551ed7da1aab8a0e24e1f9f1
- SHA512 6df542edc5a20f7207eddaa8383d3bc7aece192cad0de3a039854a389828ca5e176149f1b5aa471f786ddcc073ce260ba4270283a0979c0ebd22584f34659dbf
- SSDEEP 48:LQUGMSUg69WUvko0M0ehtWxY51k4CfLtgOe5VP+lnJ:LzGMSUg69XcRtsWq5rCRgDDGlJ
- TLSH T1FAA1A8D9AE5CD62204BEF3B36AE3B72DFD71014BDD06648130BF104A9B3669160EE156
- MD5 SHA1 SHA512 SSDEEP TLSH
Muzak/jt_xmas.xm
- SHA256 8ac3c021ed630e6bacd736d82fcb0c689e4223594195f34b919a831d6a9f976b
- MD5 ad53d3fd29e54e6b6884ff39be640c69
- SHA1 d745d7a568fc9f578a00a51e811559aabd363fbe
- SHA512 ee37dd5bb950559fad873367b8a2afbd97149bbfdcf1df32cd25bfc654d66396643e8581133639dbac127e7d1608a9d8d89d0f1ef15570329fd09f096af0bebd
- SSDEEP 768:biOeI62Nkgn1F/w+5yZL2rY63VMTPTvkLM04GGveMzDeJe:ITwNw8yf6eTPTz0huxOe
- TLSH T1F953A602767AD481D2679F30CDBE060418B92213E86F71EF6F5A1D63DB7BE40E919386
- MD5 SHA1 SHA512 SSDEEP TLSH
NandLoaders/Readme.txt
- SHA256 2d19869f43d946bb77481fd1721c8bdeb3be661cd1c4f45f2d299b46985b0229
- MD5 061c629fd55ae452947c787842b11a14
- SHA1 3acc63f60926bf9cd8d4753f622340a4fe644abb
- SHA512 e3a4dd20b7f66ae7aba6fd8d48a35bdf9a925492ec8ab7a6d473c57dcf106fddbd58ae9c36668401c83b9df8742f996817d4fb84303cef1494a8c3e547b9596b
- TLSH T1F4A02202EE0822F82C038A8EB8000000A2AB3030BC300CA020300B0C20F000E80332C0
- MD5 SHA1 SHA512 TLSH
NandLoaders/universal-base.wxd
- SHA256 bca7b274795423f7f101f07c04425a24bdbcd6c766dd63bba92dcf723ea7ea49
- MD5 14b45dff50aefe73c14c779b09c50897
- SHA1 ca8b9403ab881865b8a2499fcf2f6792b0bdcef3
- SHA512 6fb9de0a23dd28e6e0633f7c3b8464045c2c1aa7da392882a9e96d3c8f389e302e68ee25a09ffa36469a189d0b32eeadf12c340791e0c071e895a09ef67ed7c5
- TLSH T1F9816B2527E6A01AC813073C58BF3721AB09BE8788C3B7077606B92CEE3C4C06F25468
- MD5 SHA1 SHA512 TLSH
Readme.txt
- SHA256 026bad012a2a44062af125600a01742a75d98a9992e4f9a1412a4e232409a6ac
- MD5 b3015906d4140a2a3cced9c90eacfd22
- SHA1 6c4097fdb644056f639706dea139abb8b75f1762
- SHA512 048f25d5f2442cae4bf490653014768b5dc8673e9bda1ed09018a01067b5597d4675a6c530b24cea979b93bc063e2b5a2c6da37b8531fcb9e7f8b7cf7fa59fb7
- SSDEEP 96:jFsdO6S84fZKpkVPSzpvFVlpqiThynpeQuYOzeTa:jmdHj4fZK6VPuvXlwvp1uYOea
- TLSH T15BA18397BE08837A9D12C102524E38C4E72FD35AD6768422F929909D67784B683BE3CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Schema.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bdfdf8690241d0d49d56e84f46c43c14d0fde0b73a4fea9845ce13475a7efa06
- MD5 464a16943f83a56d5941e49914f660f4
- SHA1 9fdc736fc29d5e4482da03e68d2cba3623ebc570
- SHA512 8a91f8f3a34214090b354a6b13d368b8a835fb6d00b4f9c3585e1602b5ac41e9949731428d6c2c3edbde6965249695c72118eeadd8d2bf11b9297b3bfe461aa2
- SSDEEP 192:ovjfb7db6oyaJrwA1xDxYfPJjaRLBD8AP/VnxVz2a3kQk9rlcZkgekB9eygFMXQQ:EjvVpyKrw9dG184/xyLyWgekGuXpT
- TLSH T1DB624C066798D72BCABF6738FD91108206B0D2E9B6A3C776FDC1E14B5CD770106126D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\Schema\obj\Release\Schema.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Shared/Readme.txt
- SHA256 c4d69f16d3512836b84d0c999de21aaa2a418b596e8169ba4bb91245e02da179
- MD5 be60b84830d74e3d8b355f3279590a29
- SHA1 a5c27c2fa1560e66329ef3d47b89fd05dca56e0f
- SHA512 cef1139f19b9dbb17adb71cfd0a18210d0cb6f3eb7cf7a28db519084e00e4aafa2abcb2348260c5b3414c804b5e821abb51524f17540ca799b003167ddb0fd60
- MD5 SHA1 SHA512
UpdateManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d042996490258cdaa83fee5841e4e2798d9eb04841f2ff29cbffe60a5bf781f8
- MD5 806918729d23c3b93e14568d0638ef39
- SHA1 c813d424c7f31064c3681354d1618c9c10c68d63
- SHA512 7a874179f0face3082e2ad6a0f8112e4ca7391821b4f2a0b10fd68b8e87b252cf88abfb0b1fdb988a1ebef2e20b5ededfa9958283f48de1df4bc0ed13d6c17ec
- SSDEEP 96:/Y2jR8NNOkGsuJPJSNXk3hRZsVQS3My2gYwA4dfcZsLzMKB78:/Y2R2HG7LDRZKQS3F2ZwAokZ6
- TLSH T1DCF19702A7E4CE3BED7B477AAC7207902360F6929593DB5E8DC4916F1C5B3048F11B62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\UpdateManager\obj\Release\UpdateManager.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpdateManifest.xml
- SHA256 3b28de04b99a6abae14950e19f190424c816f8a296631181fdc3c64343884b4b
- MD5 d9d3e6a7366d432bc7a4814845468c2c
- SHA1 792985de1228eb9e4690a2339761432e4388d122
- SHA512 deeb1a93bb4d5f1cd22398c7a22c2bfaeb16c1968e959c0fa73e6ae5ddcb27579604ca72b42d974995a6a2f994402522345c6da98c17f5c28d1bc33dda2ed9c7
- TLSH T1153156260CF0DA7A220A226F1BD4FC056E34478F554082D0768E439D6FD3B9946BF2B1
- MD5 SHA1 SHA512 TLSH
Wad/Readme.txt
- SHA256 22ac248a4a4fa2267bdff78b2facb8b11a3c5e85984b2cd07931c41a8c48e82c
- MD5 d901e2ca6093d489ffa4811bc48931f1
- SHA1 39f251ac3aaa6314d3fdc41abab3fbf2511a6816
- SHA512 bd05c89d20f717010b048b5f15b40c7741bc84532e941b41019ea5574058c7f36bc34d5a83d1e64db80a723d9000a711fb1306a577b1509a57422d114c06e5a2
- MD5 SHA1 SHA512
WiiBackupFileSystem.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a1ce549b4dc0089b6e11110cdba502690b50bc0bb2a3aef1c3ca4dd218a9be69
- MD5 027e09b3aaa6841010f3e536bce3fff2
- SHA1 6a0e6a0dfdca543303e636bc05ceed10fc429966
- SHA512 86923599900394649bf46b8856ad032cdbdd61c9738fad3a6ac5ed4b5406339944b4b0c3d15a43282604ad63f56834d8be2ea04d4a8ae192e149fae8b44603df
- SSDEEP 1536:BWJt02RAY/Yaa6JX3Pt8Od0gs+kUGenD6qwGexI:MtZX1JXRs+kUXD6XGB
- TLSH T144434D1CF3AD6633CBAE56BE71E01592073EC2235A23E7176D8870A31C1274A7D65AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\WiiBackupFileSystem\obj\Release\WiiBackupFileSystem.pdb
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WiiGSC.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 614d37613e3a247e9090f5e43b255505efe1e4ccdda8fc7178e21c5bbfef2ab2
- MD5 ce0e85d332f1d56d2c01e25b0409df90
- SHA1 6c78d0f5ad64bd7c8c165415c13a1c1a51623028
- SHA512 82b505160670ff79de9d5c2bc13c7a44f842c0c5db78c72e72edf2ebf8f9c9c063d00e59e127b05cbb92b4a3df6cf00bb47458b22b66e2a6b511b2f32481c505
- SSDEEP 3072:KvFVs2wJfd8xecew7w4xSAY24u5Lrf2F9TF2edubzm:sFVsdJfiecekxO240fY9Zg
- TLSH T13BE3D80037E85957C53DEBF60AA1A18487B6B96A603BDBDC0DC664CE56F3B504A13F23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
154398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\CBackup\projects\crapwii\Crap\WiiGCC\obj\Release\WiiGSC.pdb
mscoree
_CorExeMain
Name
.text
Size
143KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WiiGSC.exe.Config
- SHA256 b87a3d2cb2b27d60cc8e927ea2782b7956a70ac6239a9ba8d0c6f3fdae712521
- MD5 5264e03a344a3188eeebc2988093e1e5
- SHA1 f82801f0fd34e3913851a88b648276c110796893
- SHA512 22a45b39e5b623135ab93a5b8061d4be66659b72338fcc0d29beea51014f4b4c511133954f45160b6588013388854186a8e4a4ca1d3b5956362e09adce359be6
- TLSH T1DD21AF1A2F42C863EE35469E64774E48E93E54CF220504C8B4699A964EF689461637C2
- MD5 SHA1 SHA512 TLSH
WiiHackingHistory.txt
- SHA256 136ff316b4ab9c5ce67b18b227d78b833fe709eb843f07081259edc2273abd3f
- MD5 1d059f8022a4b5b38aa50444e8e2057d
- SHA1 5459052b7fc5173e88b108664857c42fa4ecb58f
- SHA512 b596630bdd590847cd91327f99a92fa53ea42a05e01ab7166777b837247f21984c9fa3c18e022c30dab1a22a55593fc333d93053b2faf07ad5bfedc22d74fb63
- TLSH T1EA418537B26C233499A502277B59BEEA775B80BC6752A13821DE186C322AC7853375CC
- MD5 SHA1 SHA512 TLSH
WiiHelpers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b571b74bed4b5a5cff0be659d6da9d37467e53e742fd26668f9769f33c339079
- MD5 3bc1165e918b7538d0aabcd9ec902a56
- SHA1 15b2eaab8ef6e7f517e05a5758c1fbefc8c40011
- SHA512 73e7d3989b9ed54f13c95940b7b3c2db0fab9440357609ce4a50aeef507876ff0290a9fd0c7033f04a92d2f0bf6efa0556d93443d880974a9d7c2247bc2c01b9
- SSDEEP 1536:PCcl2aFCnsDODG/MCvOsTZdIOcc6Lk2CWM:Kcl2aFCnUMCvOs3CcqM
- TLSH T18C53FA0D7798A633E3AE873191FC532C8333517B6627E39F6D8A48B42A237D64015EE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\WiiHelpers\obj\Release\WiiHelpers.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WordStegoLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3971b8d7e7d667daec97154f36f2b7c53c5688e863c1ab6f2033c737454fe48c
- MD5 fc9f7512b17123e514ea709b89465e1f
- SHA1 1dab0cf1284315d428d76a287990354a83fce6ba
- SHA512 b8174853fb1cc2c7199f619baeb7714d0e8f0b4822b56991fc9419dcc2ef14dc9369f32305d2090befd310575e064ab02241842296054e8aa2511bbb45fc3bb6
- SSDEEP 96:O/KlqAddFgzqJPrOhEf4sNXMWlXuRGS3X38k7odo:+Klx4+nMWlXmGak
- TLSH T1B0C1B30663E4D777E9FE0732E49313A102B6F2029963D79A1CE71A996C327251B22F53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\CBackup\projects\crapwii\Crap\WordStegoLib\obj\Release\WordStegoLib.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Words.txt
- SHA256 bf7864cca6bf9ac9c55486ba7044b0c383f327665abd42b4bfd468378d2d239e
- MD5 5e75b58ffc14a32c684465718e47021e
- SHA1 bf6b080932090ba2a187a736c83c905b1b23b23e
- SHA512 58e04d8c7853113ce54c3f4dcdce5e5558c35d7d59064742b5fd776a1c26801e3a7f7ecd117d13071f5de0d1e09b1d0b4af815b6c25433077003270afe15bf75
- TLSH T19261433E97E24494DCF67B95B005B412F22E60245F737909694BB0EA34CBB3E2B15635
- MD5 SHA1 SHA512 TLSH
temp/Readme.txt
- SHA256 1d158908f9797635cde78cf74f43d73bd069c0ce62e179bee6ece0de73fb17e6
- MD5 e687de16e7ebb943b8112aed9f7de6d4
- SHA1 22280f01b54fa8b61dee14a15a299e513301d5b0
- SHA512 a380ebd6052877fccddde89e9bf2b1a630c3057ed637e594f1610bf7fbc6d30c730ef14ff8443eac7b69dd03ea9ded22580493db09bf49db9e6fe16b027a2184
- TLSH T1F7C08C8363880A7004C6A3898E0694239E2D81CC95B10200384CB88C1AA08515BA2CB4
- MD5 SHA1 SHA512 TLSH
temp/update/Readme.txt
- SHA256 d3fffb972cf4e0e6d8090aaa37ae3d51bc0faf7ce933e77def06ef1e9fdec4fc
- MD5 8f3ca2f803ffbda1cd421fa0f9abcff8
- SHA1 010d8dbae7b03102c2bfa645f8129c15cb599df4
- SHA512 b40acf88d4c2cb8dc40aae3a065ce3e9aa51fb063b1314a6577e7a36752a1bf0c15760af30facd9cd4968278785b2d316cdea540a01a0cbfdd09052cf1a7faba
- MD5 SHA1 SHA512
uninstall.bat
- SHA256 a1f585135045316b849dc17f4bb37192fb0bd0b1e92baf88a1e72e24e3189bf6
- MD5 f588226c8df4c03ff74adb8cc6a65d5b
- SHA1 45479c2b5f95bda26981092ca43c157b53ff31c1
- SHA512 dc5e483a05f996f152729774101601c3bc7f23537c0615eec5c4a95887b065641d17f721e50450b56412e0b988351072645404440a0817c1dedd0a21bfa190a4
- TLSH T1BCA00263011C5AA14462445910A5089EB7BFA7D227F54CC5740A61A48DA98B94596582
- MD5 SHA1 SHA512 TLSH
zlib1.dll
- IMPHASH 7e3560e4dd2deaa398fa039458dd4b4b
- SHA256 b09537250201236472ccd3caff5c0c12a5fad262e1e951350e9e5ed2a81d9dde
- MD5 80e41408f6d641dc1c0f5353a0cc8125
- SHA1 6d957ba632df5b06d49a901f2772df4301610a2a
- SHA512 857d4dc087c73f00d79bf70edfc67ddc0b15a86a4fff366d91e5ef6684af43eed7dcf8579f6b4fb35dedd090973e2bde1a82aae07642136b608eeb1d567e5c03
- SSDEEP 1536:b/jUwfZ7BURaHUry7nToIfYIOlIO+CM6:1x7BURaHUrgTBfev+CM6
- TLSH T1F9437D1293C197A6D8FC263554DA972DCB32B6050BAEC6D3A4CC6FE558523E0E6312CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
free
malloc
strerror
fflush
_errno
fopen
fread
fprintf
_vsnprintf
sprintf
ftell
fseek
fclose
clearerr
_fdopen
_initterm
_adjust_fdiv
fwrite
fputc
kernel32
DisableThreadLibraryCalls
adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=19, version=8034,
count=22, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=5, id=10, version=8047,
count=1, id=14, version=7299,
count=13, id=99, version=3077,
count=1, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=18, version=8444,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,