upload.zip
- SHA256 707450e29ae804fa10a8622fbd1aa33542bf62b93ad08252cf736609ba0cbf51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Camera.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Camera.dll
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Main.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Main.dll
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
PS.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral6
Sample
PS.dll
Resource
win11-20260513-en
windows11-21h2-x64
10 signatures
150 seconds
General
- Target upload.zip
- Size 12.5MB
- Sample260527-pd1c7sft21
- SHA256 707450e29ae804fa10a8622fbd1aa33542bf62b93ad08252cf736609ba0cbf51
- MD5 b5265c8ac1a7f9403dec8e749fe5b191
- SHA1 ba9202be6d988b4a42d05a79d0fcf87563095e58
- SHA512 35ccd6ef7965469925b238cc2924b197213bcdaaa24c2c4a59b7ed8243d9d68b593e6cd90045bea5b34d74ddb622f04ab363631ddd10e7cb175d35a662ce4275
- SSDEEP 393216:fGcs6upp6RqHIod6Xtz10mspvAJLFbJQa:NW6RqHAVZp1Qa
- TLSH T1C4D6331D6EDD6143A0C0B2AED24DAB9C585708E909BC8A5FF0F597CFC6C11F29F2A245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack004/PS.dll - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/Camera.dll unpack003/Main.dll
File Explorer
-
upload.zip.zip 12.5MB
-
upload/Camera.dll.zip.zip 46KB
-
Camera.dll.dll 202KB
-
upload/ListaPatch.txt191B
-
upload/Main.dll.zip.zip 1.2MB
-
Main.dll.dll 6.9MB
-
upload/PS.dll.zip.zip 11.1MB
-
PS.dll.dll 11.3MB
-
upload/PS/License.ps.zip.zip 478B
-
License.ps355B
-
upload/PS/Logs/LOG_PSGAMEGUARD_25_03_26.txt.zip.zip 256B
-
LOG_PSGAMEGUARD_25_03_26.txt102B
-
upload/main.premium.zip.zip 382KB
-
main.premium2.4MB
upload/Camera.dll.zip
- SHA256 0e45ebb4d65242ae9098c059b4ddaff29873d4015847837dcd860228c9522e54
- MD5 6648299e3248351edb7159ff09daaa12
- SHA1 15874d61c35705f47992ac2ac7174e27dbb877e4
- SHA512 dc4de68add092199c49313e411ec85695f521de348ebaa81fe635f7da64a7bafad97d0a550fa0f018e2b0e53adfd7aacd6575fede83bde653caa5571e974e24e
- SSDEEP 768:fuIT0AbH7Gy8nIG3s2yWa1hnmgHIbDjswMFgD/MOH1kToF4p1:fHJH7s1HBbB51kEO
- TLSH T10F23F29E82CC428FF0CD8339498D53A4975197C6023FD0CE85EF2A5E9B55978E28D0D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Camera.dll
- IMPHASH 71ed872b6729a9adb354499d33289a97
- SHA256 42749cf8fe2738ae81289bdd1ced5917cd3b374b02831da3fb38a986943882b5
- MD5 83b29d9622cda4c3ff6a5867f6ccfeb3
- SHA1 c0fc848de0dc92622cb7293a82ec49610abcfab3
- SHA512 bc7273f58fd13b4c1289292bf1b6dc5c95c2a9a1829e18a61b1e6fe8e77a0033ffff50fe049f5f4c64f7b5bd93400b0ad3a26c67d694adbd7b056e2926c6557b
- SSDEEP 1536:jAyuA3Yvrk2nCBR7tUI5a1Ref333o333333mUOwOD:jAyNomRpU+gRmwOD
- TLSH T11C1403D22E53CC63F0C1413CA06D6621393B781456AB3D4E6AAFC1677953DC2AE29F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Source\Source MundoMU\Client_EX603\Release\Client.pdb
kernel32
GetCurrentThreadId
VirtualProtect
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetModuleFileNameW
EncodePointer
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
GetLastError
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
WriteFile
user32
CallWindowProcA
wsprintfA
SetWindowLongA
ShowWindow
GetSystemMetrics
LoadImageA
SetWindowsHookExA
CallNextHookEx
GetForegroundWindow
IsWindowVisible
shell32
Shell_NotifyIconA
CameraActive
CameraRestore
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
146KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=171, productName=VS2010 build 30319, version=30319,
count=18, id=158, productName=VS2010 build 30319, version=30319,
count=79, id=170, productName=VS2010 build 30319, version=30319,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=77, id=1, productName=Unmarked objects,
count=6, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
upload/ListaPatch.txt
- SHA256 f102f91eb51b7c748f69f1890b292bca3613c94107e559c9f91ff8d7ad38b9a7
- MD5 fd3e6df5c55cc415299a827cd34e0e43
- SHA1 2a29e1bb59bf75d63eedd70ffe0f0dfaefa09b7b
- SHA512 e6c16532ee9e446cb64912df1ae11969c69333bcda55b144a78faf902d796714a128be79de6da4fac748d6b4a6443e12f8f2dc50f7e8afea66959927070b7af2
- TLSH T183C0C0EC3D1E345CE4C5384C120DC30F21531EE151322DB0C31F0873683173505C0624
- MD5 SHA1 SHA512 TLSH
upload/Main.dll.zip
- SHA256 5e3200bcfe18637e5035d8e03fb38258cb8d1f79cf496f9b60a96c35067e4331
- MD5 7488ca865e691969355eeb9a179cb886
- SHA1 1c7015ce70b3d3ec573fddb156b152fb579c6ee9
- SHA512 7aefa998de66250ccdca836f4eb7fb90a33fc62a4e38934479d6382f8b796d0d0b0f79c668d55cc58c17c842ac4267c9f1f5922f67f30036ecff5318d5cc62b3
- SSDEEP 24576:fQRVrnxl4WrEljrU+9nZQcdufvmdU4StKL1hv3Svir+FF:IRVrEicciicdufvmdcavCve+FF
- TLSH T1DD453328E5CEB796F42C217D676C71948DA71224B8CF0EB8B15ECD8F46E70BEA9110D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Main.dll
- IMPHASH ffdcf18dc7f32f390c653c9d3a78e018
- SHA256 9e1df94e6f71ad58ba37907334fbc48e5b1b1d3985f2230168b6703d5aa569a6
- MD5 1d4fc6f4f05d46dfbbd3bc9fd5030e29
- SHA1 f918caf10e082c6685d4f2aa8d7ba7f2c0ed9b6e
- SHA512 67c5aa2303db9822764a985f3cea8a72734401d527a5784273326308d4ac96440e327fcfbd26035b5d5fe3799008d1f34d3d41d72a5f0d15d0af76e89778f3aa
- SSDEEP 49152:iqubyaKnb1lZLmOYSpHenc1IkCgCx2NKZqhEykwrLrJyTEMb8mgBn+YxAssY:iw1NCgCNCr/JwEMz8nRvs
- TLSH T1D8769D01FD4770B1C68C28F061A7FFBF516A1D684F505DC7ABE0349A85728E35AB2D8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1757778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Source\Source MundoMU\Source Update 40\Main_EX603Vs2019\Release\Main.pdb
kernel32
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetSystemDirectoryA
GetVolumeInformationA
GetSystemInfo
GetStdHandle
SetConsoleTextAttribute
WriteConsoleA
AllocConsole
DeleteFileA
GetFileSize
FindNextFileA
FindFirstFileA
GetPrivateProfileStringA
CreateFileA
VirtualProtect
GetPrivateProfileIntA
Process32Next
GlobalUnlock
GlobalLock
GetCurrentThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
lstrlenA
GetModuleHandleA
CreateThread
SetThreadPriority
SetProcessWorkingSetSize
GetCurrentProcess
Sleep
ExitProcess
GetLocalTime
GetTickCount
HeapSize
SetEndOfFile
GetProcessHeap
CreateToolhelp32Snapshot
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetProcAddress
LoadLibraryA
GetConsoleWindow
WritePrivateProfileStringA
SetConsoleTitleA
MultiByteToWideChar
GetModuleFileNameW
lstrlenW
WaitNamedPipeW
GetCurrentProcessId
CloseHandle
GetLastError
CreateFileW
PeekNamedPipe
WriteFile
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
MoveFileExW
DeleteFileW
CreatePipe
GetFileAttributesExW
GetExitCodeProcess
WaitForSingleObject
HeapReAlloc
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapFree
HeapAlloc
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
CreateProcessW
DuplicateHandle
GetTimeZoneInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
WriteConsoleW
ReadFile
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
SwitchToThread
SleepConditionVariableSRW
GetTickCount64
WakeAllConditionVariable
FormatMessageA
GetTempPathW
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
InterlockedCompareExchange
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
SleepEx
MoveFileExA
GetEnvironmentVariableA
GetFileType
WaitForMultipleObjects
FormatMessageW
VerSetConditionMask
VerifyVersionInfoA
GetFileSizeEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
user32
wsprintfA
GetDC
ShowCursor
MessageBoxA
LoadImageA
SendMessageA
SetWindowsHookExA
GetForegroundWindow
CallNextHookEx
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
MapVirtualKeyA
OpenClipboard
GetClipboardData
CloseClipboard
GetKeyState
FindWindowA
VkKeyScanA
keybd_event
GetSystemMenu
DeleteMenu
SetWindowTextA
GetAsyncKeyState
SetWindowPos
gdi32
GetTextExtentPoint32A
SelectObject
CreateFontA
SwapBuffers
GetTextExtentPointA
advapi32
CryptDestroyKey
CryptEncrypt
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExW
RegSetValueExW
CryptImportKey
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
ole32
CoInitialize
ws2_32
ntohl
socket
htons
sendto
gethostbyname
connect
closesocket
getpeername
ntohs
recvfrom
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
listen
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
setsockopt
getsockopt
getsockname
bind
WSAGetLastError
send
recv
gethostname
inet_addr
winmm
timeGetTime
mmioClose
mmioOpenA
mmioDescend
mmioRead
mmioAscend
timeBeginPeriod
opengl32
glVertex4fv
glTexCoord2fv
glColor4fv
glCallLists
glRasterPos2f
glListBase
glGetFloatv
wglUseFontBitmapsA
glGenLists
glLoadIdentity
glPushMatrix
glHint
glFogi
glTexParameteri
glGetIntegerv
glTexImage2D
glBindTexture
glEnd
glTexEnvf
glBegin
glClear
glMatrixMode
glPopMatrix
glDisable
glFogf
glFogfv
glEnable
glClearColor
glDisableClientState
glDrawArrays
glEnableClientState
glColorPointer
glVertexPointer
glTexCoordPointer
glColor3fv
glColor3f
glColor4f
dsound
ord1
crypt32
CertFreeCertificateChain
PFXImportCertStore
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertGetCertificateChain
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
wldap32
ord41
ord50
ord45
ord26
ord211
ord46
ord217
ord143
ord27
ord32
ord33
ord35
ord79
ord30
ord22
ord60
ord301
ord200
normaliz
IdnToAscii
AmdPowerXpressRequestHighPerformance
EntryProc
NvOptimusEnablement
SetWidePosX
SetWidePosXExp
SetWidePosY
SetWidePosYExp
SetWinWidePosMax
UpdatePositionWide
XClosePersonalStore
XDisableShadow
XGetAccountLevel
XGetBaseExperience
XGetCoin1
XGetCoin2
XGetCoin3
XGetExperience
XGetMasterExperience
XGetMasterNextExperience
XGetMasterReset
XGetNextExperience
XGetReset
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resume
lua_rotate
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove
lua_yieldk
luaopen_base
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
216KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4.4MB
Virtual Size
20.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
368KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=49, id=259, version=33140,
count=31, id=260, version=33140,
count=226, id=261, version=33140,
count=9, id=253, version=35207,
count=28, id=259, version=35207,
count=18, id=260, version=35207,
count=111, id=260, productName=VS2019 v16.9.0 build 29910, version=29910,
count=32, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=207, version=50522,
count=84, id=261, version=35207,
count=27, id=257, version=33140,
count=382, id=1, productName=Unmarked objects,
count=154, id=265, version=35209,
count=1, id=256, version=35209,
count=1, id=255, version=35209,
count=1, id=151,
count=1, id=258, version=35209,
upload/PS.dll.zip
- SHA256 16fc4631112075ce4ae734518127b93f311fe95a2c9c0c84e94d4a38a597bfb9
- MD5 8e95fbdc88ca29761c17f6ace3f750d7
- SHA1 bc7c0b6812084233c270f557bc95be2ce7df6776
- SHA512 732a4d65d757fbed8474656c4fd95b71e1d127212dccb505971beae66d8128cf9a444071476aca3ed92b7d7034e6cc029860d47aa851d4401e1f39c18a3d6bed
- SSDEEP 196608:SmPmZoz3Xohf0SR4jeqCDoY8hyBFZ9qyzz5pM0Ejx6itpa71xKSu2dwmgmdq+w8D:7mazH6LiJw8hIZT5Fm6itpa7FRtrA8
- TLSH T1BEC6335E2EEA410756C0F2ADD54D9B9C69575CE90A78864FB0F0E1CFC3811E29F2AB09
- MD5 SHA1 SHA512 SSDEEP TLSH
PS.dll
- IMPHASH 1f54094ba415d270ed2881d961e5fcf6
- SHA256 aa00d6e8239a05365b186fceed05dcf02b57ecca0ce29f55180aeec19754584b
- MD5 beeea263f678a9dc8325068d8eb81c47
- SHA1 a3c631a292de0b80189dbbcda68ba3b25802ef43
- SHA512 c78b0261da88400f1f2dba8e36dfa2b3fafcb0c59626da53e19fdd8a76c8ac0eb0164a6e0424be938b2d7a7b73b677054ee1f0bae3dcb0b2fa844aa72f5fd69a
- SSDEEP 196608:Vfdl1ukpoZX0CZaZOqETC6wRk1R3TqoHTfXE2mfzIIhJMhPJioAwQp0mQy3ndN7/:Vld2lyBOwRW3BfTcIIhJMh6NzdN
- TLSH T1EAC633F36A790146E0E5CF3D8A2BFFD436F1036B87411879A5DD66CB11892E0A752E83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
61:0c:e3:21:30:4c:f5:31:27:23:ec:c5:9f:c1:15:5a:01:13:d0:f3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=27.728.128 DOUGLAS PONTES RUIZ,O=27.728.128 DOUGLAS PONTES RUIZ,L=PRAIA GRANDE,ST=Sao Paulo,C=BR
Chains
Feb 11, 2025
CN=27.728.128 DOUGLAS PONTES RUIZ,O=27.728.128 DOUGLAS PONTES RUIZ,L=PRAIA GRANDE,ST=Sao Paulo,C=BR
CN=GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1,O=EnVers Group SIA,C=LV
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=27.728.128 DOUGLAS PONTES RUIZ,O=27.728.128 DOUGLAS PONTES RUIZ,L=PRAIA GRANDE,ST=Sao Paulo,C=BR
CN=GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1,O=EnVers Group SIA,C=LV
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1,O=EnVers Group SIA,C=LV
Serial Number
07:84:3d:ad:01:c1:15:c2:74:ee:41:a7:28:22:46:79
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 23, 2022 - Jun 22, 2032
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=27.728.128 DOUGLAS PONTES RUIZ,O=27.728.128 DOUGLAS PONTES RUIZ,L=PRAIA GRANDE,ST=Sao Paulo,C=BR
Serial Number
0f:be:e6:f6:0f:77:0c:61:7d:a1:60:8a:cb:ef:5d:79
Issuer
CN=GoGetSSL G4 CS RSA4096 SHA256 2022 CA-1,O=EnVers Group SIA,C=LV
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 25, 2024 - Sep 27, 2025
Minor OS version
0
Major OS version
5
Entry point
27442920
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegUnLoadKeyW
RegSetValueExA
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyA
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyA
RegConnectRegistryW
RegCloseKey
OpenProcessToken
LookupAccountSidA
LookupAccountSidW
InitializeSecurityDescriptor
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
GetKernelObjectSecurity
user32
CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
WindowFromPoint
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWinEventHook
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageCallbackA
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropA
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostThreadMessageA
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenInputDesktop
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxA
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
HideCaret
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUserObjectInformationA
GetTopWindow
GetThreadDesktop
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExA
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumDisplayDevicesW
EnumChildWindows
EndPaint
EndMenu
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyImage
CopyIcon
CloseDesktop
CloseClipboard
ClientToScreen
ChildWindowFromPointEx
CheckMenuItem
CharUpperBuffW
CharUpperW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AttachThreadInput
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
RegisterRawInputDevices
GetRawInputData
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenA
lstrlenW
lstrcpynA
lstrcpynW
lstrcpyA
lstrcpyW
lstrcmpA
lstrcatW
WriteProcessMemory
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtectEx
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TryEnterCriticalSection
TerminateThread
TerminateProcess
SystemTimeToTzSpecificLocalTime
SwitchToThread
SuspendThread
SleepEx
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetThreadContext
SetThreadAffinityMask
SetPriorityClass
SetLastError
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
QueryDosDeviceW
PulseEvent
IsDebuggerPresent
OpenProcess
OpenFileMappingA
OpenFileMappingW
OpenEventA
MulDiv
MapViewOfFileEx
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
LeaveCriticalSection
LCMapStringW
IsValidLocale
InitializeCriticalSection
HeapSize
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExA
GetVersionExW
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemDefaultLangID
GetStdHandle
GetStartupInfoW
GetProcessVersion
GetProcessAffinityMask
GetProcAddress
GetPrivateProfileStringW
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetMailslotInfo
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocalTime
GetLastError
GetHandleInformation
GetFullPathNameW
GetFileSize
GetFileAttributesExW
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCommandLineA
GetCommandLineW
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageA
FormatMessageW
FlushInstructionCache
FindResourceW
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessA
CreateMutexA
CreateMutexW
CreateMailslotA
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CloseHandle
Sleep
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
GlobalFree
GetProcAddress
LocalAlloc
LocalFree
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
gdi32
UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetRectRgn
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStretchBltMode
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
ArcTo
Arc
AngleArc
AbortDoc
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
netapi32
NetApiBufferFree
NetWkstaGetInfo
ole32
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID
GetHGlobalFromStream
CreateStreamOnHGlobal
ntdll
RtlAdjustPrivilege
RtlNtStatusToDosError
RtlAdjustPrivilege
RtlInitUnicodeString
ZwLoadDriver
RtlComputeCrc32
RtlGetVersion
RtlAdjustPrivilege
wsock32
ntohs
getpeername
shell32
SHGetFileInfoA
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
IsUserAnAdmin
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ImageList_Write
iphlpapi
GetAdaptersInfo
msvcrt
memset
memcpy
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
wintrust
WinVerifyTrust
crypt32
CertFreeCertificateContext
CertGetNameStringW
CryptVerifyMessageSignature
imagehlp
ImageGetCertificateData
ImageGetCertificateHeader
ImageEnumerateCertificates
sfc
SfcIsFileProtected
wtsapi32
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
wzAudioCreate
wzAudioDestroy
wzAudioGetStreamOffsetRange
wzAudioOption
wzAudioPlay
wzAudioStop
Name
.text
Size
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
26KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
Virtual Size
311B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pr0
Size
Virtual Size
12.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.pr1
Size
11.3MB
Virtual Size
11.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
upload/PS/License.ps.zip
- SHA256 39b6264935a7de4a2fa6bfa83c9e42119a85efd57ce2bac494b5a23509457b28
- MD5 378a54875a4827d083275e7a5c94d528
- SHA1 02f89ad14524ed5efab86d03dd76ae282ec7d270
- SHA512 7e7a6ea65d31c2a1c6835121a61d5a958429ac168b1366e81170a05063af94a9a0fa8e538f05b286a8f313f697e92f523fc2765b22bf505ec7ce8a8d204adf4c
- TLSH T1DCF0235A38861A03D2E62038ED9A8E7A5BDFD40A1010070A428FB01DAC155E4DE85FAE
- MD5 SHA1 SHA512 TLSH
License.ps
- SHA256 1338cbfa8efef56bc8d320c89a51ca63db525544a8672272f4482418712b6820
- MD5 0d866be70a6f48782048c28e3fd67bb4
- SHA1 f600935c65e89a701fd9ae5b7f5634214a0bd2e5
- SHA512 5f245bd39f1ec2d21bfe5b8cbd62d9450e7e73ae47213bdfda20ddac0f855a0538fa89ff787407f10c75ea9b3a6603e373c813d475fbff0b1576c7ceb87f59af
- TLSH T1BCE0C02224462F02A27420099EE8DAA959DFD51A24100716514EF019B9188F09256FBE
- MD5 SHA1 SHA512 TLSH
upload/PS/Logs/LOG_PSGAMEGUARD_25_03_26.txt.zip
- SHA256 7e751ab03bb96ff9a3ac635287cae19073dfc9d3c186973b16bcf034ad16c673
- MD5 0d5054a3d0b8d59e47b57695cd53e1f9
- SHA1 5a8707ebcc4ea6cf2bbc3a25df078d7aa8c7c798
- SHA512 f1b6795b18487aed8ee4197c560a0026b491523830b0b8cb2c62152e069ed436c3ff4369d4bb15de2831879b0f6a393bcdd908f2137824136a9d60b21a38e0cb
- TLSH T1E1D0A7EDCDDF4D8CCCD2D1B69B602616C66B7427904D47DA6D5BC5F00841D108A2A249
- MD5 SHA1 SHA512 TLSH
LOG_PSGAMEGUARD_25_03_26.txt
- SHA256 552c26c5ee363083b7c5d2e2fde1aedfad2c456f03eafc6718338a71a5b4f6dc
- MD5 2cadf6e21cde4064f0871d4c77001e02
- SHA1 da0fe6d1b2fc1af025dbe34fcb1c0e140cb210c1
- SHA512 42c873bb9ed133e71bbde925870e4a44de75c8c67d5ae3924f5a3dc2d6b8089cf2cad408774eb420dbf6c440160772defdbdc871fc5c5be901a855e42bb9863c
- TLSH T196B01215B28551E99BBFE080261BACE010079645D525956064F4C491898D00B910EF1F
- MD5 SHA1 SHA512 TLSH
upload/main.premium.zip
- SHA256 4fbdf9cdc817a17422660b2b7d065c11c582c93e05157c2df478c6e920b0720b
- MD5 684a1a265b751db35ab2df8a7ef8eed6
- SHA1 9a2a5e68020c11d20ce74f3fb37a2ac135bc5984
- SHA512 e55e21bbb1e917cee6c3e83690191b0af3100fec0b5ba9d4959c1d435a7023ee5119947cf5445075dd939bd61b05e8f2846396047c7f5b419e826f6dedb986af
- SSDEEP 6144:IYt048XMM9Is6MbjoSE0Dfr3PXdE92Zc6CAJsow16TDMfw4R5YO9n23f3ykqNpnd:IAD4uMbjoS5PrqvNmaKO92rQnppB5xYC
- TLSH T1E28402F8C0B80F454DA83D2BB900225F5A1B5B7857ACA16EB19FCA5FD1230BC7C615D9
- MD5 SHA1 SHA512 SSDEEP TLSH
main.premium
- SHA256 32c4ece120f965c1468d02839349efde7d10c6a63f16cfdb7837d9a89e4c48f5
- MD5 1875cf3874958de7b4d6e6d59f73ae71
- SHA1 bbac016c9a86dc91d1c2fe39d1787b0f9f1f6634
- SHA512 f75aa80fd255bb0db84b02601d9218fdd795018e7799c73fe7a6ade1b952a1156788742997006ba18705e2eea090d50d0bfa25f0bedb9cee88f343a74718d39f
- SSDEEP 12288:f2lEkIsYTb36KI/sdKNkOZoNjk9zeAYZWFo/gMce03ESMwIBYh1jtuHGfXE59H3W:lLlWn1FnuHM675+mHu
- TLSH T1CEB53CDBC7F51E9C9A333DE5E5AE5082D849C370079A82AF936958D702640F38B77C62
- MD5 SHA1 SHA512 SSDEEP TLSH