Fun.With.Ragdolls.The.Game.v2.0.3.zip
- SHA256 64e73eb11bf614e3b9b663bec9a71a78f1a3ce3f9bea1feb9a876be2fc78433c
Overview
overview
4Static
static
3Fun.With.R...ls.exe
windows10-2004-x64
1Fun.With.R...ls.exe
windows11-21h2-x64
1Fun.With.R...rp.dll
windows10-2004-x64
1Fun.With.R...rp.dll
windows11-21h2-x64
1Fun.With.R...ty.dll
windows10-2004-x64
1Fun.With.R...ty.dll
windows11-21h2-x64
1Fun.With.R...ts.dll
windows10-2004-x64
1Fun.With.R...ts.dll
windows11-21h2-x64
1Fun.With.R...on.dll
windows10-2004-x64
1Fun.With.R...on.dll
windows11-21h2-x64
4Fun.With.R...re.dll
windows10-2004-x64
1Fun.With.R...re.dll
windows11-21h2-x64
1Fun.With.R.../S.dll
windows10-2004-x64
1Fun.With.R.../S.dll
windows11-21h2-x64
1Fun.With.R.../S.dll
windows10-2004-x64
1Fun.With.R.../S.dll
windows11-21h2-x64
1Fun.With.R.../S.dll
windows10-2004-x64
1Fun.With.R.../S.dll
windows11-21h2-x64
1Fun.With.R...em.dll
windows10-2004-x64
1Fun.With.R...em.dll
windows11-21h2-x64
1Fun.With.R.../U.dll
windows10-2004-x64
1Fun.With.R.../U.dll
windows11-21h2-x64
1Fun.With.R.../U.dll
windows10-2004-x64
1Fun.With.R.../U.dll
windows11-21h2-x64
1Fun.With.R.../U.dll
windows10-2004-x64
1Fun.With.R.../U.dll
windows11-21h2-x64
1Fun.With.R...le.dll
windows10-2004-x64
1Fun.With.R...le.dll
windows11-21h2-x64
1Fun.With.R.../U.dll
windows10-2004-x64
1Fun.With.R.../U.dll
windows11-21h2-x64
1Fun.With.R.../U.dll
windows10-2004-x64
1Fun.With.R.../U.dll
windows11-21h2-x64
1Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Assembly-CSharp.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Ionic.Zip.Unity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Ionic.Zip.Unity.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/NavMeshComponents.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/NavMeshComponents.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Newtonsoft.Json.dll
Resource
win11-20260513-en
windows11-21h2-x64
12 signatures
900 seconds
Behavioral task
behavioral11
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Core.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/S.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/S.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral15
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/S.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/S.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/S.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/S.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral19
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral22
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral23
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral24
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral26
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AIModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral28
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AIModule.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral29
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral30
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral31
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral32
Sample
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/U.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
General
- Target Fun.With.Ragdolls.The.Game.v2.0.3.zip
- Size 189.8MB
- Sample260602-x1t4psev2p
- SHA256 64e73eb11bf614e3b9b663bec9a71a78f1a3ce3f9bea1feb9a876be2fc78433c
- MD5 1d1883b561230c39ee15c1f175c25ab5
- SHA1 a96bf9aefbc1f3b3c8f1489fb7b13c82614abf07
- SHA512 aa01eb80408bec335a43355e23204fd906c8b9bc5da6a8eee1dff6a89b97f3918fa2f9258c99ef8c8983eb0a2beb18f671eaa27497fcb41e95beae0e851a14bc
- SSDEEP 3145728:pXBeWwNdt+Ybb7cbbgmb8roG017umvf5NyJ9o/JlhivhmKs/Ykp+ZeXCi3JA2C4:pXQ8qIqu77vxNAJJmKs/YkUZeXCi5A2f
- TLSH T1DA983303B08E4D2AD78B58B615737E0F660AD56A37D8EAF3620DE6D00F727C15AB2711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/UnityCrashHandler64.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/UnityPlayer.dll - Unsigned PE 51 IoCs
Checks for missing Authenticode signature.
resource unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Assembly-CSharp.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Ionic.Zip.Unity.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/NavMeshComponents.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Newtonsoft.Json.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Core.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Diagnostics.StackTrace.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Globalization.Extensions.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Runtime.Serialization.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipeline.Universal.ShaderLibrary.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipelines.Core.Runtime.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipelines.Universal.Runtime.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AIModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AndroidJNIModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AnimationModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AssetBundleModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AudioModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.CoreModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.DirectorModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.GridModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.IMGUIModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ImageConversionModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.InputLegacyModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.InputModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.JSONSerializeModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ParticleSystemModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.Physics2DModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.PhysicsModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ScreenCaptureModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.SharedInternalsModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.SubsystemsModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TerrainModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TextRenderingModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TilemapModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UI.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UIElementsModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UIModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityAnalyticsModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityWebRequestModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VFXModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VRModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VehiclesModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VideoModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.XRModule.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/mod.io.UnityPlugin.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/mscorlib.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/netstandard.dll unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll - Untrusted Codesign Signers 8 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dxwebsetup.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/oalinst.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x86.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dotNetFx40_Full_setup.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dxwebsetup.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/oalinst.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x64.exe unpack001/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x86.exe
File Explorer
-
Fun.With.Ragdolls.The.Game.v2.0.3.zip.zip 189.8MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls.exe.exe 635KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Assembly-CSharp.dll.dll 320KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/EditorToUnityLinkerData.json156KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Ionic.Zip.Unity.dll.dll 178KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/NavMeshComponents.dll.dll 16KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Newtonsoft.Json.dll.dll 258KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Core.dll.dll 36KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Diagnostics.StackTrace.dll.dll 4KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Globalization.Extensions.dll.dll 4KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Runtime.Serialization.dll.dll 5KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.dll.dll 195KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/TypesInScenes.xml27KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipeline.Universal.ShaderLibrary.dll.dll 3KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipelines.Core.Runtime.dll.dll 69KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipelines.Universal.Runtime.dll.dll 125KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AIModule.dll.dll 18KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AndroidJNIModule.dll.dll 37KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AnimationModule.dll.dll 21KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AssetBundleModule.dll.dll 9KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AudioModule.dll.dll 13KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.CoreModule.dll.dll 300KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.DirectorModule.dll.dll 9KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.GridModule.dll.dll 8KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.IMGUIModule.dll.dll 59KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ImageConversionModule.dll.dll 9KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.InputLegacyModule.dll.dll 14KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.InputModule.dll.dll 10KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.JSONSerializeModule.dll.dll 10KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ParticleSystemModule.dll.dll 12KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.Physics2DModule.dll.dll 16KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.PhysicsModule.dll.dll 27KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ScreenCaptureModule.dll.dll 9KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.SharedInternalsModule.dll.dll 15KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.SubsystemsModule.dll.dll 12KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TerrainModule.dll.dll 16KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TextRenderingModule.dll.dll 18KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TilemapModule.dll.dll 12KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UI.dll.dll 207KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UIElementsModule.dll.dll 105KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UIModule.dll.dll 17KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityAnalyticsModule.dll.dll 11KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityWebRequestModule.dll.dll 27KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll.dll 9KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VFXModule.dll.dll 11KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VRModule.dll.dll 11KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VehiclesModule.dll.dll 9KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VideoModule.dll.dll 12KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.XRModule.dll.dll 19KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.dll.dll 37KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityLinkerToEditorData.json2KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/mod.io.UnityPlugin.dll.dll 286KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/mscorlib.dll.dll 1.8MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/netstandard.dll.dll 26KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Resources/unity default resources3.7MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Resources/unity_builtin_extra454KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/app.info30B
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/boot.config106B
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/globalgamemanagers126KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/globalgamemanagers.assets786KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/globalgamemanagers.assets.resS6.5MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level05KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level1270KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level2133KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level3131KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/resources.assets211KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/resources.assets.resS7KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets0.assets4KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets0.resource1.4MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets1.assets11.4MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets1.assets.resS26.1MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets1.resource27.0MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets2.assets4.4MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets2.assets.resS153.0MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets2.resource31.8MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets3.assets262KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets3.assets.resS4.1MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets3.resource2.1MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Icon.ico549KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll.dll 762KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll.dll 4.7MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser1KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx.js 59KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/machine.config.xml 28KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/settings.map.xml 2KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/web.config.xml 11KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser1KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx.js 59KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/machine.config.xml 32KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/settings.map.xml 2KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/web.config.xml 18KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser1KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx.js 59KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/machine.config.xml 33KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/settings.map.xml 2KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/web.config.xml 18KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/browscap.ini304KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/config3KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/mconfig/config.xml.xml 25KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/UnityCrashHandler64.exe.exe 1.0MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/UnityPlayer.dll.dll 24.7MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dxwebsetup.exe.exe 281KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/oalinst.exe.exe 790KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x86.exe.exe 4.8MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/HOW TO RUN GAME!!.txt318B
-
Fun.With.Ragdolls.The.Game.v2.0.3/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url52B
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dotNetFx40_Full_setup.exe.exe 868KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dxwebsetup.exe.exe 281KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/oalinst.exe.exe 790KB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_2015-2019_x64.exe.exe 14.3MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_2015-2019_x86.exe.exe 13.7MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x64.exe.exe 5.5MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x86.exe.exe 4.8MB
-
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/xnafx40_redist.msi.msi 6.7MB
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls.exe
- IMPHASH fd60dddc87379c239e8ac49516966c3e
- SHA256 41c37856ca9e05131b86a819fe1364d36a296cb1f1e7d7bac3bf6acf1365f398
- MD5 317d48e00ad464e6f15c6851fbc46d68
- SHA1 27f39fd2f2c77390ec20e92a74397dd987fe3fb8
- SHA512 a9a6a6886031515b9b20415fe89e8d1d5638528f1f740e6213a6afd9411fa0db41a857d2f3ff14646df0f6d3220f91f75092cd43eef91fe78589a1027e7c2173
- SSDEEP 12288:77qTURxAnhvnOdyA7sNqmwK5HSX8px8XT30WmFyWHTQn:3quOGdyXJwK8c8AWOyWcn
- TLSH T17AD44D19DA13F4FCD522987A9D82B0F59CBC5C310EC79B274190B3A6DF36D58EE42A48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildslave\unity\build\artifacts\WindowsPlayer\Win64_nondev_m_r\WindowsPlayer_Master_mono_x64.pdb
unityplayer
UnityMain
kernel32
GetModuleHandleExW
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
552KB
Virtual Size
552KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=25711,
count=5, id=259, version=25711,
count=141, id=261, version=25711,
count=2, id=257, version=25711,
count=38, id=261, version=26706,
count=16, id=260, version=26706,
count=8, id=259, version=26706,
count=3, id=257, version=27012,
count=82, id=1, productName=Unmarked objects,
count=2, id=261, version=27012,
count=1, id=256, version=27012,
count=1, id=255, version=27012,
count=1, id=258, version=27012,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Assembly-CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1c5f8d7fb4997f5601ffe44b435c1e0ce604ad856ea793c348f16cc2d5756188
- MD5 7aa5e5d57cc9dfff5a4921fa757c5df3
- SHA1 308bf96942690f6b3fc218ed29b6665a1d98c288
- SHA512 61101d408987ee4a3f3a355520c2f003b8dee25da7d838a39e47d0d8178901c3d1b37452cd31439688068af6d1087e503f808bb87fff7fa8f2508508f55ad1a9
- SSDEEP 6144:i/o+d+Mfv1SWZTpdmBQTcwW44s0X8VwY3nsWJUlf87:Sokv15ZTpdJ5W4j0XNIlJUW
- TLSH T1E6644A6262B4193BC6FF27BBD0541C1A67F6948BB69AF7CC4CC195FC2C53760A4122A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
333390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
318KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/EditorToUnityLinkerData.json
- SHA256 10055f44a4a916a9715c4948503734e3c347eb89e21122ed174606538cd166c7
- MD5 07fe03c82db7a91077ec5e431d214cd9
- SHA1 d1ce465d9cfb0f7d960cb6c8c5e8eb834a72e26d
- SHA512 2a67b125f5201debcaf635db1de0c5d9524b09073637a8f726e3430e4b442ce5e28a06fa9d29a3afe48c3b27360eef18997bc76d0e7944f73ee28edefcacfc70
- SSDEEP 3072:9uq9L5RhQ7Ie9xcMKePOqoBB5aDxWb4rcwjl/A7geaw2/zPM2qSPSqRL3hhgb75U:jO
- TLSH T194F3133AE5644C835BDE14D774BB19832A6011978C847800BBAC6D5E9FDEC6F3AB231D
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Ionic.Zip.Unity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea25cb4edb5c87843ec1545ce7bdefd26933670e768c27da92e4b7860298b7cc
- MD5 1de89bdb9af3a74f9500ac3775dc50ad
- SHA1 f0d04b28964b55c00d5a6e3206e7efb55d5eb9e2
- SHA512 8ec05eb652c0acf84cb55c42492f62a53313d0c2147f8602f71eb06a2482924a4684212ef58fcb040d0b520e3aad56e038d80a4e97f6f9a2586be6b9eb395089
- SSDEEP 3072:iPH+McbvtQXrYqzZ/DNo6gdQ7qOBTVsck4T+LrVzY9SPscSC9Uek+BssI/Kh73WV:BM6SXrYq9a6gdQ7qOBT6cPTodTPUD
- TLSH T1FF045C1463DC4B6BF1BA4BB5D0BAA1A0C3B1B5A3B93ED74F5C4024FF29163909A14793
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
188222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
176KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/NavMeshComponents.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49eb51b213b203e21ff96426aaf4ae6ad6735f142f9da7a519f491568b09a910
- MD5 876cf90d1948ef7a23b179ce274857a8
- SHA1 0bee2d5ddf2c673ec4acbfaaff7e4d34a80722a3
- SHA512 bd1632358bcbd618610719d7f1bd0930aff6f46f1713bb0b34043f26e3b132841a1788d556b25ba47063372e1357938994fdfffe9a722d50f1d30741d9c55264
- SSDEEP 192:26ZjRQfr7KdKWxQphYNR+vR/draKFVUwMbQFt7P/vQARsQTxIR9qIHrciEXwaDHe:vZjRM2c8MdrzymFdXbPdE7rB9muhj
- TLSH T150721B26A618C23FD79E0F3AB475022603B082567942F39DEECCE1AD3D1379909921F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5910f89d085a91af2878b871b9c46a90faa9c82ec49d431d79d88e3121fd7d6
- MD5 0d896d12fe3d78c6fe3a05924ab6c4d1
- SHA1 7d456abf88763ba8341194fcd18870d7ab1acc5e
- SHA512 9c9f261eb0f57ebd8cff1ede2bdb41af467a595c8857b085678514626b3dd4378533a5669f5f3686868615915a0c2150928c1191b9964801f6248d35f901d638
- SSDEEP 3072:AFXrQ2N56rY6Tv6SikkGXZmBVJGdSi7jC//O+LypJy9nFfMz1YLMdS1oq:AxrLN5QY6kGCHGdSyjkz0KGz1YL3
- TLSH T1E144295163FC8B26E2EF3734D0740904C7F6F897A6BAD74E5D00A8BA1D6378069607A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
269966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
256KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 06434fa4e8c2ba0f905248e7f0e18024376a137572d67603cd66810bcef23afe
- MD5 f6b6abd62f6f9a0ec20150e7fe28ba8d
- SHA1 b8c75d03334d00e75189ad08324924b63aa7fefe
- SHA512 d9ffc3e042d30ab0e74be1995398e04bf56b1a225c6be14ce86559e23b17a248c3e4d2e348704ba5c39052c094d359fb08c3f65398f15b76ce7fd3910e3580a7
- SSDEEP 768:XgEWq6XLDAMbqbnGii5I0+DhlZyx1PRoG:XgG6bDR5Xz+DByx1T
- TLSH T119F20A1473DC8333C2FF12FF64B1509616B5EA9AA423FB49148CD7998C92B851EB136B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Diagnostics.StackTrace.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fafc1cc08b1b57e55e73724b06436aae84f593f51bf5d1e4f953a0edc6d7a7df
- MD5 a6246b5fc85d0afecc2562893afd053d
- SHA1 d0b16130c189aba74face91ad899991bf63eb069
- SHA512 68873658e958d43ec7046e30a69c7c55fc23256d7db1b8fb7fe99802791400a1f102f479ea3e03797b67f9b0032ab4b2a579c06163ede27115566849fb7b0e62
- SSDEEP 48:6hMyTm1SMQ/+Iv3bxOCMpCZ44iMflLbe1xK5IhefV+:FIh/xv1OCua5fpbe1xa0
- TLSH T1F6911111A3F843A6FC774F756DAB874216B5BE21CD27D75F2181420E6C25A608E32B62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Globalization.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59622fe03b6e8d80a403f1d4a8f5a7d77338103dae5da1d503ee96081b3c3e4b
- MD5 3b6d7732c43665e03de5d6308e4d5860
- SHA1 a8b0666e085321bf3c44d3a295a661e5119f17cd
- SHA512 ba95f0c153c0aa46aaffa3fa354e6323127d0b5bb22150268aaab7892e4f6bb71dcd1b04796df27ee8d4d1422ef0d2b35ae0d1eb9d0b5ce0c8ffe580b9fcf04a
- SSDEEP 48:64la5e/pRSOQYQMkwqN/+IvbxOL8R1qOZ44feXBR1qrl8R1q3en0R1qG5IhefV+:ZSKpRuT/xvlOARPtcRQKRWen0R/0
- TLSH T1BB91335097FC432AF8778F31BDAB938152B5BD20DD278A7F2581464D6C126548B32F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.Runtime.Serialization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2229a5089e7c7b246c47b91ccefde9d4d1ea78dfe857aa50adc3e15038637481
- MD5 94cc9fa4b5e6bc65e0976756acf69a09
- SHA1 683142ca7445d222b144bdbdc8940ef7ec0b82d8
- SHA512 c108cb34d4319919b5dbfb8df8fdd6215261dea74f19c68a7ba4f7a0fc9b629e57f9cce1a420ce3ced7e06f037136decbe78fdc1ef800ad13049358a2eeb0dba
- SSDEEP 96:5NqPm9pNEoIj7AJU8OQAxtzXRurSeGBb0:iPm5Eoe758OQ4TRurSeGBb
- TLSH T1BAC14F21F3E8937AEDB70B32AC77A25315B5BE11DD23CB2E1982625B5C066440B71B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3272b69cf571eb4f84c7f6bfb753199d48965653e581febbeb6f097ae6ea77bb
- MD5 f3176bd9ea4caac0b945e41ad9d88c5b
- SHA1 d6bdb3b39c10063e8c3f911038dc43a2beae6c4d
- SHA512 d8b0b768c247943349d80f2e9fc9c478bd93b1a712113178a7416dcb76641afbfdc7b4761b2cba4c68a7b16f5a73da630c88bd319404d7b0da98350a4b275a99
- SSDEEP 3072:u9phNVML0lvb5w1kr89cK5cr/36q+zoFR/gsIUuF804Anh2Hn04SvkFLbq0DmnEV:ipSL0lvbu1n9cfXmF804Ah2fSCLVZt
- TLSH T1CB147C3873EC8F62EBFE577AD0B521418BF5A117AA6EEB0A4CB154EE1C127815C10727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
205502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
193KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/TypesInScenes.xml
- SHA256 4f8afedc25010bfff2986a440a8a1f094dd95aa3a9377ea05f68a873c8960d10
- MD5 20d60337c7a15091e1949eafa7140dc4
- SHA1 102730c617e49e690a8322d04f2f70104651a6c2
- SHA512 2f2b613be9dff6885eb288fdd0b93b146a1ff02b7421ca32728343930e0e8328ec5385dcf35e0834654986ace8f34d7e02fa358b7996cc988a856f1f17eef08a
- SSDEEP 192:eZYVlZXj+bpPesUKWnN6WzgDJSGXyuUNd1AsD6c:vVlJC1PXUKAN6WzgDJSGXyuU3SsDl
- TLSH T14EC278B901043F9B6FF6EE35951C9496342F85FE132AA0B9AEB33E37BC55A455021343
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipeline.Universal.ShaderLibrary.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 00b8815b472c115e5c6000f5adf4cd1f9e60a8a303a344cb48ed76c471b3b42a
- MD5 5d666329a782bc96637fbe5dae2e9447
- SHA1 177dd228ad6d298ad92671ec76966c5ef9e702a7
- SHA512 d63641943a94d199148c17e82e750bc2818025a859944f871c7c696e0090f54a8b326217ddbf853543dfcb745ec9e1cef81cc4f3feda926bfb2136bc8035032b
- TLSH T1B9713022A7E91267F0F707759CF28B8627B5BC228E72836F298412297C311605E61F35
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipelines.Core.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ef2efb38406b547c79335528b8193a3a977f6fb20c17aa05521764984a240a3
- MD5 220fcb188e1ec76045bbd4a814795a6b
- SHA1 7e0f5d465aa8bcf596e09220eae9eea87299186f
- SHA512 82af2aa8809c802dd105a58da99b6bf3c7daf7c33bbca25ee36fbdeb20b3811390f879a5d8d40ec0ecc0d1563c67e12957c88caa1190300eaac6bd699ea185ba
- SSDEEP 1536:WbeDCzae8kgUAGkzJWF1V9m3CEBsuaihZI:KCSae207kxNU
- TLSH T163632921A3AC07B3CBCF17BEF26018455771D69A7217EB9A1D4CFDED081339129522AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/Unity.RenderPipelines.Universal.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ed7460a9100e5eb37649708c6201aa9080a5f4eef3cfd7d6daaa57eaaa1ff18
- MD5 0c9154d590be6d7f45824b58aa5dfd30
- SHA1 f13e33b09b23736125812c2c97004743aa75b2e4
- SHA512 894687570693e081b9ef040408545aad5b04509395ece00298007f46f18bb5eea902e1219963a99451327777720922fee16bc99b8b5255582d2731c2e9ca5041
- SSDEEP 1536:kF5XizSSMjKXcxB9oNHQBWfdkAs+K6A+rqq2K1m8u6hqrDfw9tqrgznjbMvcDezm:Q6mKsoNakNBqTesvcDe8UA
- TLSH T137C34B2127E85A3AFDEF0B7AA07099019739F9C7586BF35D0D44A4ED3897BD08818357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
134510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dc8f7c0671e10e2b236e7c0d88bd5ff860afd25f3f5dda1fb6df844e69b90555
- MD5 fff83abb78f42e74dad3975db551885a
- SHA1 e34e1a9ad3b4a5170fe3eeb68c450ace9070e147
- SHA512 6988ddc23e3943c46fc2160c6aa741a63b513ddfe68a87028e08399cf340c5c573e8630839795a2b2747b3b06c40554ea3e171932720692cc19141088f1b3633
- SSDEEP 384:TRq0xDBG7hVv8lIOaoXokyZ3OOncjOEOS:FtlQLqzaoXXyxOOnhW
- TLSH T1BE8251B576C5523BEC591F37D03587403EA0C416CA32E746C68E62A8783F2AE7E316E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AndroidJNIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f99e05e2327a504226e444e8ca21f82aac2a7938d34dc22c559eba7fe905a07
- MD5 b887e09d2d07fe86d63eb934457142ea
- SHA1 47f6501555d569cd4a72297503f813d4e5752035
- SHA512 db4af4503269ba57ec2a68f3d939d17ea32f7abc58d5987e3853721265ca05ee79ca5c9a406323eeec8080836893d8c29b736605484021f7c012e96d0e764236
- SSDEEP 768:8QDyRR8Y6jhUGjXXbm9Vrmc0AqfIPfakkkKBitHJHavNOoJh879:8GyLE1l8avNOoJhO
- TLSH T12903E6E4BF944606E07F1F7C58B203049771E4A385B7F709968921743A7A3CA6F11BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AnimationModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1356cd71866499eb16acb0b8ec9284cfb3e550e11d9e0c290f5e6873c0aa8231
- MD5 68e8cc92d4c4a2534eaabe3c9caed7a2
- SHA1 090c35297bf57aa78405d4ef721363888451284b
- SHA512 1f5bee9b3b60beaf131feb1964925362ea9ad7d4b98efaba382bde1c317d2fc581102c38a0d0b6ba810f9991d43b7bbad96989e884d532eb97da1c4074a66a57
- SSDEEP 384:kPD+reE/s/5HIoFpHyEJVF0IkLPMzz7TkHeiTcai+CdR+OhcjONbF9:kPD+reE/s/5ogp1bdbkzAdR+OhhB
- TLSH T15CA285F075902117CE9E1FB394B9D3413E70D02BC53AEA6EA35E6168683D19CAF22771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28296af4dc6be7eb1c84236339bb99e8144879d01279cca6aeebd13a0a7af1b3
- MD5 cd6087bc95bef28e47063c56a5c7ec75
- SHA1 4435cafe5595e88a5e1a4955ad5e2b64b7ea9f09
- SHA512 6c33d293385d19d9f45ccfbcc07f828c704f00d9996feef3d0b6dad7a37be43f69cf3d82336317379f2a9b7b09a67c9ef542aa5cae7e09564acc14131e332c40
- SSDEEP 96:IkxgFa5qUSxqOTWD3IZd7UsuC8fELcjOb6EQUOQwOwIYFy7h:YF0qUYqOT03QDuC8fQcjOcUObOwLmh
- TLSH T1ED1268F57685229BEC4ADF73D439938039D0C027CE72E215468F22A4B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.AudioModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 947f3179c745d6bf3906dc34bc3f25b49caf15240f1c158e869107b46f52381d
- MD5 59d98deafc3bb56c65d5fa47fd3327ae
- SHA1 c7e8c332980d1f51fc85a20fba1a0697e2346a02
- SHA512 6386f3cdc0437565bc734f9b93a6dd233b1063fb842257a9167d09da46c8214acb98836ec2bea1d249f62e1caedd1aae144a33a4d90a0a3463200d0deb56a205
- SSDEEP 384:kymvdjmdzK2bcb0OY/Sl8+CROozcjOPbt:kymVwbcblivROozh5
- TLSH T1A85253F176842597DC492FB3E62593813B90C027CF33E719068E62A4BA7E1DD7E217A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.CoreModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25c5cf2df9e9081e5970f2250cc9fbdfed62134d9b364266c811d7558ed4aae8
- MD5 0b9d097127db3490ccda347cdbce21e9
- SHA1 601ab42dc706a252c840bbfb3bfb8eb8d8eac76f
- SHA512 bcffb81f74381133c53ed41f6a24b66756d89e1961b4215331bcdf841dfac16486cb98d2c59e4c935557efc4b147312e344a960ccce27d3f858c78f588b6b7b4
- SSDEEP 6144:dieZibme/AdxEVmIHeCUpqcUP4PakfBP+Ez6mnYsi:De/NmsKpqcUpk8Sn
- TLSH T172645B746BD4A566DEAF1B7AF0724D048B34E4260437E78F1248D6BC2CA7314CE26B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
313406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
298KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.DirectorModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d17a3d897d18c5ba9d98cb19c496c646a62c01642699277eaee74eeef058fed9
- MD5 e995805685c4b0361f86eeb92f6747c4
- SHA1 c6c1cc003025ee1ae4fc4673643c7c57f327ecda
- SHA512 c7b5583c11df41e332b4c202399055b6f89a2e6041c2770be9bedbcbf1f9eb99d780f6b6b91d93749a17efd1bce6cb336341eb3bab84bce617b25cfb25df6519
- SSDEEP 96:pe5w3ARNqr2fGz/2Z73Y2A2LcjObhQf5iiFTkCVoaLMqql:WwwRk2oOZbY2A+cjONEdFTkCSaw3l
- TLSH T12212BCF17AC8229BEC4A1F33903997803990C027CF76E755468F62A5B47D1EE7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.GridModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e680a2603ab18e8e3bbb5819114ea4f4c962cb9db297daf92821f3c715cf551a
- MD5 b6423f33e08a1db7a1e910aa0cf4a7cf
- SHA1 b5de40f391b29b03dea4986a38f9f6bf5d142151
- SHA512 2a1e44f6f1cd7b570afbda48707a6a9ed7b6f89e1cb98e7c34eea95f272b30b3ac146fe195b6a4b0790eb405f601d8ad52ce21260d47ce3232e6d88069816336
- SSDEEP 96:wExBrgNWRQQEwhmqIL8jObijOQh1CLb9h5QS8wqmt:3gEQBwwqU8jOujO2CLRh5Qijt
- TLSH T16602AAF17689215BEC4A1FF3943993803D90C027CF72D7254A8E22A5B47E1EE7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.IMGUIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 33d1a54a782c233d2c1fb25af800dfc880500326560250c215cb9e6f57a1c60c
- MD5 b63470fafb1287ec96df0e0771fb5095
- SHA1 014dc1bd70140a54a421ff92971250301f1d9d49
- SHA512 2e83c198b0393a96e7d1842612c02c89dc1a3dd1904e0b2f70c0cdbcae16b16bbafd0f1e585e8773067cb872e1804c1c03f140662f906f9c3a887ae74e61c70c
- SSDEEP 1536:+v6TOq0sKbRrJVoNE62DDBLl1edDTYche:A6uFXoNE1aDT8
- TLSH T1D3532BBC72EC4927D8AE4BBDA0A192413771C1328313F7954A59B1E82C7B3D4DD21B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ImageConversionModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 953d15782ec8df9ea16d52c0c0eb9d1625f7f5017149c34cfa185cd4a5328c94
- MD5 050b306c6c9e3193b016272eeab92b70
- SHA1 3a8454b6beb9fdf747ddb18457ec9772f5e69d69
- SHA512 4758f179eadd92e81b7f42884fde41c8df962c6b2eba3018276782cd2a41600315353ddce0eef9e5d036b30b736bc0d1a66b259925db7595405b88a8735d7f5b
- SSDEEP 96:gZv6vcRucdsqHldtuHU58A2LcjObhQukkiqTPtxvQwIyPo:ECvcRt2qHHtu058A+cjONQ/qTFxvGao
- TLSH T10612D2F17688269BEC451FF3943993803E90D027CF72E755468E22A4B47E1DE7E213A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.InputLegacyModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e3367f9ae2c70c860f881c2933e881a5db3ecef75061132a9b083874c0b16cd
- MD5 b34d4dc26c6ca34d26ebefd243969eef
- SHA1 21a51ed04e39c713bcf55c8916a5c64607630ccc
- SHA512 a7a185753cd5f890207e824e7a904ccffae50013619883c076a3dc42a8a461e0cbe98939e5d45d031cc7f5620dc8e89a8c80e1b3dfe82f1c00c220f9679c8874
- SSDEEP 384:ojl79yVED/IBppbVCQItl3vYeycjOzO+mOB:oyVMItV3ILhyh3mOB
- TLSH T1F56273F1B6D8111BDC491F37A07543823A68D423CAF2E715165E21A8B53E2EF7E327A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.InputModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8d33a9f8ff2089c22d22d060061946af8045f893a32e87fa9eff5509198a0852
- MD5 a49301d3facf40e989bdca6a8c44b74b
- SHA1 be76887b511f799fcb04ac306f1f0c9b4888a62a
- SHA512 3f158fe58bf979be051338e97b2b5182d8bdbaf5582bd473e057e9898208e71c99fc670d24aa2aa06a6069c1ee25c1b7f3990498dde8c8eeb951cd6c3e817823
- SSDEEP 192:GqKLkVkhKpr1/ldj8Jg9CxYh3vWxIOcjlT8CdJ4QT:GqCvwdog9CxYh/WxIOsT8CdJf
- TLSH T1C022DCF17689268BEC492F37D47993813990C037CE72E3554A8F22A4B47D1EE7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.JSONSerializeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e3bee249b6866797988e1d3e29e73c37e35ce5d93de576630bda68f8ae9121f
- MD5 c4bdf4fa7d1abedbdb5fa47a3e6ad4d1
- SHA1 82cf9ee7ce21ef642f7f56d9416ae05168858738
- SHA512 bc36149603dfd32ad7dbcd425f6dc1bd1579726553d8e7df3547f6362693f3a2c6e40cc92c85b82d41739925bbb149afc80894d3a0b9da8135b009afa2e289ec
- SSDEEP 96:+RrPF+JwkKaMlzelIoEL+mxyH0XQMh+byYCrbDnVQqLi5TtVCdjztyp7:UoDMhwI/LVrQM8by1nn+5TtVCdjJo7
- TLSH T1B922BCF176C9265FEC4A2F33D439978139A0D427CB32D319468E22A5B07E1ED7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ParticleSystemModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdf6b5e0dcc0b85a3adf21bd60c42f1f71262e6396fb0cd965334b6cde9842c9
- MD5 1edf7ba00d325869690aec4bd34ff2f3
- SHA1 449d550b28a12fab1ce7f6465d758e9565661d08
- SHA512 87f43ff47fb9326bb3f2cc9503e3112b0dcdd124480c18c1a62251c018d7358dd759cce51717397a41c6e93b66250827715da85ae3a352c7215cbb4643a74950
- SSDEEP 384:cL6rzPxCBjk8PMTGusZpyZ6Oo5cjOTbHH:cL6rzPijZEGusZpywOo5hn
- TLSH T1964210F136C5556BEC591F33D8FAC3403AA0C417CE72D658468E22A5B47D2AE7E217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.Physics2DModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de71b5f5fa3e3ddd2105020a7f24038e0f6fd13398a19c69e3b92ea5270c2617
- MD5 59ff41f36530447fb1c184d29e137b88
- SHA1 47c8fc45cb98e72fb97611b9bdbce971e2f33a0a
- SHA512 0a78eef50ded58fc379376e0c68a3111d53d5d22e92a560958d629ec7d2eb8747db81cc260db5959eaabc7a523ef5a3b70dd9a0503a88391c9a7088d041e555e
- SSDEEP 192:brk+EnferQlD400ZfKDD+fz36vBKQjkDfBIQ/b66kP6WHtYykmryZ0BOBnccjOje:5En0/SyLEljkDt27ryZAOBccjOjablM
- TLSH T11F7271F9BAC46157DC4A1F33962587807E60D02ACB73D351068D3264B57E2EE7D223E8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.PhysicsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb28d34c344d859b5957e0bff0d9c0bd020daf37e949ec5ba7626bef031374bc
- MD5 b48e4491e1caec3f062562f223714f36
- SHA1 68dad326f8d59fbdce4ef2f8a59d657d54af56b9
- SHA512 33ff36122cdc809d30f8cd4edfcedef225ba8526b74fe9459d7021f05d1807ae1ac352e46245285fc7572790df7617bb7f41e4e0898686239e929fd5f9e4aa55
- SSDEEP 768:2wcc4aw/fIFqX94lCdBbbltkfoW/erBUHKhw4:2wcc4aw/fgqelCdxkIrBUHKhw4
- TLSH T14BC2F7BA6FD1D267CD4C0B71E0696E10BA20C116CA63E384625E5178743E3FDBE217DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.ScreenCaptureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5dc4772b7abab40977656b6e5c6ba18a561eed4bc0c170dda7dce76e16ef0ea
- MD5 45595d262abf2b5942d22e2b94ca2a66
- SHA1 9a1306b469aaea6e3ac5e40951b1da5d18eb755a
- SHA512 661682080d3a1e1a0fff534a03f7fb047d8e1ed212c6f47fcc8d7637767743dc22da0e337e7ff558e655eed846379a2efe6397910507fef1a7d8124d7bcf6069
- SSDEEP 96:LuzPcMFv99W7pvRBcF05t2ITZ+rnkyyDPbDnVrRLi5TvAsCdB7ypN:CzPBFv998RRbZGRyDPnnW5TvAsCd9oN
- TLSH T1581279F57689229BEC49DF739439938039D0C417CF32E315468E22A4B57D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.SharedInternalsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d1735a9ebd06db295689cf3aa89a4d31ab7e5910a31a25f81756a367697957be
- MD5 31ffca85c6be16e8fa3a6cb26e8e8a63
- SHA1 d1c23b2ec6bf80536935d282e700cf9f81c5d403
- SHA512 945ba29571910a09ab3e364bae383d24ac4642577f39b7c0d949bd3617ada18b2c275dd87079ad3b289ee21e56e04afb8d202bd4584c0226e130782a704c7536
- SSDEEP 192:+4dic4NNQcS3CFLw+KPI39I1dSMPKbwVVVvZvJbORlyZ2qyGYJaG:hicyFLw+z392s5oZvJbMyZPyGV
- TLSH T1156230B173A8526BDD090F37D0F953407A40C11ACA33D756878E62A5763E2EEBD21BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.SubsystemsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4995c267ec0368083cad97ebc2e904cea01c9d328017fd99c68ce4ac4407106
- MD5 9e53d947d43d2e78dd2dcbebe17265f7
- SHA1 9dc293eea2f083d498043d0dd868e2aafa3672fc
- SHA512 3e23ed1981fd98a937c27cfe2c88f77932707e789f99a1a90d016eb9f5ea842627a485d341a21d86cb211ec225a5fbfb17938545a007613c4d971d58ec353f27
- SSDEEP 192:m5bjQSo8V+iJanSXpPAb6lVNHZ6TyZ2kfcjOeOO5D00tn:IjeQEnSXpob6KTyZbcjOeOKD0S
- TLSH T1B842E1B27B891257EC791F33943A53403DA0D017CAF1E3160AEE62A5B47D1DA7E31AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TerrainModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9af4cf5698cfb0886b66966604dd2a8aca5ba5a8723c87cd5e89e3c5a69b475b
- MD5 1895cb234f78c15418abe610afc6f12a
- SHA1 f5ff92b25bcab92f4db6eb5d2528aff26d4c9a51
- SHA512 a566cd49739ff173dd1c7e85f33af9a0524add0fb0b7b3255d43800a3746f1f4f7fb6679fce1cf230f0cc3d30d55ad6f2e0627d23144050e35931860921b5ce7
- SSDEEP 384:qZ/AUju7Y7yjGMHHPOo1vKMT2MVyyZCAOxcjOXO+:/UjucOjLPx7VyyAAOxhX
- TLSH T1037283B47685069BDC891F77D476834039A0C016CAF3E7158E9EB1B13A3E2EE7F112A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TextRenderingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b9d77415021b99b66809f62af0a655821bd696281e522ad2c87bfb37e5585a25
- MD5 f88dd56cd756b59bf02f013f3855bfa0
- SHA1 81b51837ea0d89d0f6093f331777663e1d589ee2
- SHA512 8569800d463bc0cf10355d3c743a8e53faf3d8e107b47503ff7c475f589ecded6e269b8a95cd05983e170a4228ae6ca4b338ef13332aaae5e113dde33b5662c1
- SSDEEP 384:fQcU/b3lCAukyo3l0Ny9j59oL7w8jSOyOCR+yZXcjONOA7gH:8eDal0NO/47wTR+yxhn7gH
- TLSH T1E68295B47B8C152BEC491F37D02447803AA0C017CBB3E755468EA165B17F2ED6E327AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.TilemapModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a9cbcc7906cdefed569e70d70d534277c677b7f514fbd546a2d317f110bd8bb
- MD5 86f29f122a05b909baf2224b5855c76b
- SHA1 345d28d32b9f3ff10deefc02695a3d784d1ef4ca
- SHA512 635ca2d6eff25f5ec715cbc5994b46f779259967ff776bda730540dc9855d30f46e1c8685dbc875a2fcc1e97ddc6d28d0c1a925d6e0323deb5d6b71ced4275f5
- SSDEEP 192:ThrrCz6PU1w7DkOFgef6+6+TwD3iKEXwq9AvDyZzCjOwUAWNTrOITGCt:TBrCz6PU1KDBFmu9AryZzCjOnlNTnT7
- TLSH T1F3423EF1B694215BED891F3BA469934039A0C027CF32E31B466E62B4B47D1ED7E217B4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 78d7927fe704db2a7f000274d191320f3fe81fb697427cc69d384ca0ffb1edb1
- MD5 0bf4588a67e3ff2cb2669313bee9e1f6
- SHA1 aeed75b42b160bcfe85d52cbedf9b59453e28ca7
- SHA512 0640cce1ab8bbf20896d0c75b85458aad3aaaa786b471dcc9a94e2f4d5132d295a8f619569a5b878b5da7bed897a00ff06b2e4e953ddbad70d1f5883263cb7f1
- SSDEEP 6144:5cqMmcuO4mueefylN1n5vzTSIi2yQYD1DAwOUu1:DMmcsmuryfbC9Y
- TLSH T169245C6827AC8E7FD39F077AF068540993B48217F69ED7998D89E5FC2C4339189413A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
218382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
205KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UIElementsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e3d54b6512e81ad3d29ac2fdf70d20e6a44867cb04a3dea70565bcd5e933a82
- MD5 48d92d034687ce8666831502aa786f6b
- SHA1 490e36c3992a415a32d04942fb3b978dd17cee09
- SHA512 69431e9686b12ebb18518d2494f95976d1556c3e19e16240ba3fb00093fc18333986fd7f721747a40ae646adf92c971d8496f07cc95e280286e79a2c304654d1
- SSDEEP 1536:wyVwRC73Ehooj9oXZNq1G7WZAYbOiFKBDKxRXYi3xbiCZ7k2jbOl28/CmOnkHHqD:/V373EZZ0vEpbOiFYC6tO7kEd1GOr
- TLSH T1E3B36E3457BA4827D8AD4B3ED069050027F4E11B5A53E3695B6879F63C373C0CE1ABEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
113422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e0959a3c488fe8a046e13bda8d7b033ed9e1edc2ca5953b0f244d4a775dd39e0
- MD5 3c92ced5a0c241dbff85fcecbcf2cb93
- SHA1 c17a9bb4a12ed07ebee241c87502b050e24d61e7
- SHA512 3b267abe1923e33bdfc3e196820cbef73a654908de4e5a7c3039ffcb7c8a448d7bc70e5cfeaeab653067c2f93351ea0ec35cab5183a5c37498b2bd4942136c15
- SSDEEP 384:73zJRnHs7LBXBmfJpNPOyZI9jOJOtTEl0:7FRnHYBXMRHmy6MuTEl0
- TLSH T12A7270B13A85504BDC491F33E46607407A60C41BC6F3EF950A9E62A9787B1DFBE22BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityAnalyticsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 766bb3856fd8fb2cdedc5e4593c25a1009a2c9bfd696a618155ef3c2ff36b104
- MD5 6af2acb5abdcd43c3d105f48ac06acb7
- SHA1 45eb6d3b7ad2601894b01316c7cd87db153830ba
- SHA512 d5f2a57cdbf1e702962135b44b45b89009e8ca5fbed2d380cc5a1dac1c1ff0ea4e80b83019f7ff6e6cc78f8277c495aea5fbe4097e11fc3814f7513cc4fd8746
- SSDEEP 192:cvk5lNgBIGgMn77RYtZ2RUAAcjOfDUOmpZS:Ew2CGx7tYtZu9AcjOfgOq
- TLSH T1A83221F57684259BEC091F73A43993433990C017CF72E7260B8E62A4B17D1EE7E627A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityWebRequestModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d8b7c6aefba0e689af340a81e1df5326fa53b4b8214a05aa05bfd58207721a6
- MD5 a0cb8c80f5e46bde67245a7cab9f78bb
- SHA1 c719210cf58b74f5bf95a87bb101ca6fb96fd166
- SHA512 3436cf5a21e596cc5fd64eba9b8b623d99710df90a332206963419e760167b23b6eac55f609d3190d33e9057713e21c816c643677b050c9693b22c7966b23d6a
- SSDEEP 768:leLntpzR8rea+m6DBEYEBMN2jxgIh71m:s1xm6DBLYI6xgIh71m
- TLSH T151C2FAB97AC85507DD6E1F76C436C74036B1E0176A33D75A8B8E21A834363E8BD20B75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52baa07bba2967e78757cf398dca72623556e6256500a0994c45caaf67cea8a8
- MD5 e0ce9565051b8d1c905ffb4a460a3d2e
- SHA1 a8a8224466859a540f5a7c016b381a36ab1e363b
- SHA512 694228aed436f445934782651e98a57d3031f4cecb434e3a10f6a94bdd373019a01c033d9e21adbfe852309a8dcbd7a7d13e47802d3ec2fe1b93db95628a49bb
- SSDEEP 192:SdKfIzlI6B1bi5by1nn48ZTMsCd4CBHC:ScIJ71bi5bKnnPZTXCd4oH
- TLSH T1DB12DEF23A88629BEC0A1F73943993833D80D017CE72D755468E62A4B47E1EE7D217E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VFXModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a410d61da4c58be91cacd0340fdc07d27c46ea11452255b09055c3d65439ae08
- MD5 c97cf30a0841fc4c952b4e66029cd450
- SHA1 220ed3768278747facccc1169ebd9a3e0ce79a6d
- SHA512 4a60c35ea193f25d94d530c40736198c274fd43b5806920f405a611f30cf412007cd62ce984120929b0aba8f9d3541e5936e1000d5f9b5aef67fe2a43f621d26
- SSDEEP 96:aZjJrjWtMxeKo/3GLXWcos00Z2NbO8SexEaHbrVRbYSJyjF:axRMM8KXrouZ2NbO81PfTbYweF
- TLSH T18832ECF17688265BEC491F33943997803DA0C427CF72E21746BE22A4B53E1ED7E217A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 926d047a613e42f87af88d77396513e0b35e4d1b75c360f6d904e42946331b1b
- MD5 802694c060e63ffed05f5d3d5e23a8e5
- SHA1 7e6f90d6c7f92e72588578d7fbc32b7d00151e80
- SHA512 71a4b8dd95af99a7a41cb62ab370f7fa8c7171ce4994f36d9ae7a54a2aad83c89d1218269037ce52611e8a6c6f88143792f928bbd9233832222cdafb31461e0d
- SSDEEP 192:RYZPn5uy1oju1fwgmJbaiLRumql/muAnRvmyZgUfFDj7uVJ:RYBN1cudwh5aiLBqlOuiRuyZgqFDj7o
- TLSH T10D321FF17A89219FEC091F33D47993807990C417CB33D7564A8E22A5B07E1EE7E21BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VehiclesModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c9531d0cb82d115a9d6858024b10e388ca7067e6f59f03684a7305d3dd693c7b
- MD5 f0cfe78d2ba031372a0fa5d23d4df5a9
- SHA1 b04f2aaa93ae95a66bb3a40c1d4e360674a8b3fd
- SHA512 0426cbcc45f087fe14b00445c3c330cba704f3351bcf3df87bd686fef02d35ad2da084b93f7932ce3dbb17e12811d209cfef9ebc1f82499d33e1778414d060d5
- SSDEEP 96:bA8zKjQxkVZFFIYN7/TRKL7ObXiaRi5TVvCdJBD5qqI5:bi5dIYNTTRC7ObU5T5CdJT3s
- TLSH T1C81277F57685229BEC4A1F73943993803D90C017CE7AE725468E32A4B43E1EE7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.VideoModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b29ff77d78c5019228a761a6fea099b85b5d02d8efc7e6445af968222bce6447
- MD5 f258cc667fc4cdd0987448e6915d3228
- SHA1 b06daf341f27ea20a8e5945e9b2bfc363499e3db
- SHA512 99a6838bc4d4771f455228f27d4ce45229459d95dcba555bb1397e34e2bd79bb6952f43382302ba4fc0fa8ce0174c7a2d2987e360840bd2396469130b695c60e
- SSDEEP 192:712iBpgviZ4kvgE9qZFRCPv3rej9hsyZ2NATcjOpUOBabVQS:B2iBmnkvgGqWKAyZ5TcjOWOBOe
- TLSH T1154210F176852587DD491F339036934139A0D01BCBF2E35F068E62A5B47E2DE7E227A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.XRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d465faa80f3a00678a6f50d6473ced0d6d313a3ff10157da1893a86938e44413
- MD5 abf56db1a7e21bd8f6659035d74f4aae
- SHA1 9f5ae4a06624ecab5556e66fff5fa528df872b26
- SHA512 3d40c5f4a873697ae5e1177cefb9f7602227264a4a83c3db971cca4269621a8380f32934cba323f3e08a63a6a841892ed369b51812706f09fb630613de056e58
- SSDEEP 384:297nj0PkAYTOJiNQrM+yHS7RZp/ItALJMbjyZrNOm/uq:297gPziXNUwS9QtaJqy9NOmGq
- TLSH T10292C5F2BB8111ABDC091F73987643403AB4C41B8AE3D716479D21A2713E2EE7E257E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityEngine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 00d7c7bee64309344e04e80d25cb9c2cb0729ecb6b341255760e7bfd8b2dad91
- MD5 144ca5ad0eee2f6dd9eb85a76bb4019a
- SHA1 fcb744cfa2bb75af67fd3effd2f0c6d8fee7b9a9
- SHA512 2a7ebddd774489237fad4aa380291a5139b5c43957eef175b66653e1d09494b579cb2dd22aacf2e01dac9da00415e4cccb55df38dd8d5ad9588aaba1f21a1c85
- SSDEEP 768:HmDtyGmOomui6mu4S+RadogThdeLtudB/jAckYeiuZ:HOtyMJtJS+R4xotmVk3i+
- TLSH T1EB03E5713746AF7ECD5E0FF79C6F89861BF006872839CBA4304AD95264FA5881F1A748
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/UnityLinkerToEditorData.json
- SHA256 e2e8b48fa64b11cc27e5e1444cb8ad47e6f75b4fd4ff04aa447a9be6e3979e40
- MD5 c603a9dbd3d805a5313471a87b517caf
- SHA1 d067f3fca743429b4870f2f2d52218f300a5bb07
- SHA512 cba61f29e766bbdcd26fe5c28594e785c91b2e5f2245bead5831cc9b27e68d776a97bebe312a9f72d2ac2b279b10c8b3fcf95a5a4db6d392425005b726c9316b
- TLSH T10241659D4011BEBE1B366ED1F4EB0D6BBDE6204720ECCC740CD42ABC821829F1DA9576
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/mod.io.UnityPlugin.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 130b65d7b442d0a51925d3cc53ad5068e82a8278475ed3b9e270f397b051cc37
- MD5 b913f64b421790e801130a7d1ffadcb1
- SHA1 3de4470deeb8faae3331658e166b249a09ccacbb
- SHA512 4cbfb9547340c6adba8e777b99baecf8b0e91ef9f2b99d7c39539207fb841d7a650fd97b56cf1b75bf3cd3bb4e3877030ddd6383f80b13474dee4f6d0ce77d4c
- SSDEEP 6144:AVCJuRKkAfJnRzIt6rg3E0wJFw7KY3tkTeNgfGQO:f/hRkt6rg3Eq9tRgfGQO
- TLSH T1FC545B68A3B80BB6E1BF6778F42A0C558775B053A4BEE75D0D8CA4E82C537A44D81373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
298670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
284KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/mscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eff56c87cd91125326a4f63674a162d37830f5e52e977f0d45268452f177a170
- MD5 501c382da388048ccf1391cc2016aa53
- SHA1 10cf21df99fe706978d9b0d28a9340ccf543129e
- SHA512 65d5fd5982c8b5c5bf551b8cc1129ca2e091a2e2e2e83d721ee4a1d1883929a0f6ede428f139f10b0a9d8eb9738997e21e0420f617949c804d5884c25ab8473a
- SSDEEP 24576:fv6qzDFByZ+2Ct0bgh8PPu0xHMoICOKiUWR8dt3y:nDKbgUPuJCoUWR8dt3
- TLSH T119957B4477FC4A27E5AB6B39D07A05259FF1F812A727AB1F2802A77D0C637404D24B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1897550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Managed/netstandard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bcc8c6a653a0fe1d87d9904fae466707a226fdb3869c0b479d85882636dbd718
- MD5 abf3081035e1e6f778a0b1378d545460
- SHA1 866b5271c754c91d5e45de757f6a869b3be607df
- SHA512 e6652d247d6261c868eae8549a1b0572911bebaf990e584c9e774a10ecadad4731b71a2acbec1f479aacf5c94a72f790c4e0ca198140822bec8e8d22ccd670f7
- SSDEEP 384:mLr7LLQiuGwK8wLHl3MuamomvtMhMaKRix2CGFjAKribLaUsOd8eO:Er7LLzuHKv2h8ix0mYOdb
- TLSH T14FC2D635AE7A4337CDCF47758873A9C012FAB3CE047E9EBA1481991654CBE91563233A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Resources/unity default resources
- SHA256 e6136f697e9f054f115e01ae81c54d2884090cffd7975a9d57862a6940a8d30f
- MD5 76b3b15554fa6ee2bb6a07cc1f434879
- SHA1 1cf625764dec8d287decec5fec36dd772ffc3222
- SHA512 6dc0b21e2bd31f7852268343763918f1762d3cc65c4fe51f3b35f065613775f6d0ce70870669faa55a6a35982ead3e3bd97a4dcfa7faa2b6245c4dc83d6ea512
- SSDEEP 6144:G+aTJxwrJh1L3YWf/OJ9WqYmK6SHCkcCAFdj38mXpgkS/n:h9hmOOjdYN0FdrEn
- TLSH T1AD06AD532A20F09AD897243C4E730DE1D16FAAF4C5D54FC227272178ABF35E676129E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/Resources/unity_builtin_extra
- SHA256 0386f7b252fafcfef920f3a57578d2122e8a08b77dd7339be7f965abb4feb9b1
- MD5 a65125799ab771a6ec3427d3de030bdf
- SHA1 bec2b6e1bdc99a0d2c5f8aaf04181f132c831fc5
- SHA512 786940e9be87b918900af9d5c9ec2ff850626aa5558f154ae0adade60694b3db6813575b148c60866ca8abcff978e761d6951c74d5098ca935656cca6e4b1b68
- SSDEEP 3072:6SBIK6wLYEBBOBbyHMmDGLiuP42n1deXPPJ7FKaz5iBQ:96KL1BBOBPniuQ21dSPPJFca
- TLSH T179A4437DA757493FCC20063748B60B736332A5F81BEE4F276E2C5B6C68E5288AB54744
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/app.info
- SHA256 71660fd97fa44224be5422d449036843d23688016e223c5e4d302eff0d6406b2
- MD5 277f6245cfa6a18e73f0e77abd041100
- SHA1 c097fcd74e67cdb9b5aa3a00028931334dab34a7
- SHA512 e2ce4c1da9ec7d24115172e0b0b7c413ee759e5e2b731bf83ce581a110b1322e99a52f1840351db5c20d527a0ed0c2c294b8729916c8a4916f1da0e5916b601c
- MD5 SHA1 SHA512
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/boot.config
- SHA256 9d6d5a5ebd9ae9d5fcd732bc02e7cf7332de0ab5a6fce0f6e38f799cfbc67103
- MD5 2e6518fdf3c60ee592d2160d54a93a75
- SHA1 9415f9249df9c1cbafe56e8371eeb287cb372093
- SHA512 a779d544a52b474d1c312cab923ff90e444df516f64c8ce54cb37c06e1258ec4611b58f11423548db92fa425cbcca1cc1dcc58cabb685d272a0ba6da3378a8de
- TLSH T15DB01240FBFC3BC5149CC02699F62DC3B3764445981630F6EAD020F9330540E12C3876
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/globalgamemanagers
- SHA256 e6ad212badfbf6f123527f19497471e067c018485a5379f7d20b6d11d1288053
- MD5 0e8a0944239cb03f972642c69f3e4cd2
- SHA1 e892f0d1eca2dcb2275731b2c2fefbb799cb6950
- SHA512 6e688c11e85b1de44c9991a5d74b1d01120673228889b58dfde841b9be8dc00e940bbb5772b9f4f2dc9d15328ed6402d6f22b6311c9aa969353a5bf9c9712647
- SSDEEP 1536:d+HmTpex6cw00PAkfjudFIbcvN0Rk9cZbskQEXaHN7ME8K:vox6cl0PXusbwuV5QhR8K
- TLSH T1F9C3B256D7F68C43CC2287BE88D707613772E891476BCB1723A8B9793C6B3C96D48285
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/globalgamemanagers.assets
- SHA256 bc598c651a1bc2661a3321790ca35308b631ef38100fdbe824ce5ce289636809
- MD5 cebc65261446a8be6c923c1d2f52a094
- SHA1 88a459cb6cb24b03f62bfc66848ae673491f10bf
- SHA512 9a1a045c50d7d4426edc31c22adb24b53c97ee9fec100eb2f68429eef923dabb62ed90b768ab6c98d3d81a63ba83744f0f891362ddd04c657a4652d7bd174624
- SSDEEP 6144:zBosRcVOjLSbgIG8vr9Nuu2JhzdzSeQU2n4ivzHTXfMGnBad63fLzI+ri+Ya/g:gvr9IzhKzbvLzI+Wi/g
- TLSH T1CC059969F7538D37C804153748A707DA32B5EEAA8ADE8B1F65983B2D3CF52D91E21310
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/globalgamemanagers.assets.resS
- SHA256 be1d56f8d27ceefda07d7c2e6383ddf0e359789d045d968c5e5b34354cd21d5d
- MD5 8d9867e3db1008a49ea3bcf8af4214ca
- SHA1 60a7523a11e4368abef03797917388deb01e6fd1
- SHA512 5c6f0d7858b40c480c8c295a3487b2d1ef722e5d2e1c505ffa314c305d0046a487cf1010e534fc8c77639ecfbd4958298a02792f9d7e3128129ea7027198a4fd
- SSDEEP 98304:fsTZAvSYIAJR1hZAAJc56NFbqnxptKpOuoeK:fsTZAvSMz1hZAASMNPJK
- TLSH T17466C2A34951F185D44BA1B8EE378D9CE00E5AF4DAC88FC5021765B0A3B31A6B349DFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level0
- SHA256 dc50aad3e2038f7145f7c57a0d114aba5ac8e64a51a33ca25c1368979082947b
- MD5 78a27de0e98f2f7ed50b2454e264e715
- SHA1 9bb9f4222e0fc3e308a0df28f1b12242a093940e
- SHA512 5751e6b5e8dbfd58cb18938d5fe754fe61f1b93b461267443d16f029f5e712f8bda649063f9b1dbbb4816eeedf446a373e6931af57d4acf98da4f14c3dd8349c
- SSDEEP 24:MC9e1ousLxvMwo5pjrkS1ZoTV/CFjn79i70MMnBMvRtF25McY6Y1:9coz1Ynb9kRzuML
- TLSH T16AC16746B75AAE5BC4746B3689930F94F331D944572E872323B8913C2CE37886F93195
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level1
- SHA256 567ec890b3cbb40a29a3ef5c2f4f21f9941a7e12cc1d720e8a191cbb113a6450
- MD5 b3547e5a4c268ff16103b09e31fe7093
- SHA1 647734fb85b4d00e3d7378fce1c8e6d06d204858
- SHA512 17dce9f44cc06e6335e966b9ca69a1ab4a726461a42faf759f1fab0f7ad2e4453247a5d162dced4fc5e6f2c8107534084349754484906ba5ef08f3392ab1bb74
- SSDEEP 1536:tV9M9WvMC4Jw8QTlUMcpGo5721sJCoGd86v8+D20p03Lm8u8c6F:j9lMC4ScpGeonE+D2DZc6
- TLSH T10044FC56EB91AA8EC830333759A31F64E730C5882A7DD33303B8A12D3CD735D5E96999
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level2
- SHA256 c52c52237061f5ac2f29a27e165b42c574e4fac709bcd07069ee784a2c443b77
- MD5 7bafa8e6336dd5deb2684dc5b38c4473
- SHA1 8ea38e854cc36fa00fb86f676ce8e4c287f0cf71
- SHA512 1a02d67e0d458077d79947b76d61385a8437154beb517ad80af9dbafad0b336fc8e036371fbb49fd2020da8696d9d41ec08b671345caa4e061a63b35bb8b082a
- SSDEEP 768:Az/VhTG47EQwOv5XXvyAjLsS0uUiIqFOMVtGN:WdhJ7E/Ov5HvyAnbRXV
- TLSH T155D38642ABD29E4BD476373705D35F58F330E5444B6FE32322B8263D6CE2388AE52592
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/level3
- SHA256 7114fe5beb92ea267f0ed5e4049dc4872c1c7e912e84d4353607af9a40fcf016
- MD5 311853843778611de758430e03416c34
- SHA1 41e42e8212c7d2a58f499d1915d430c18bc5ffd5
- SHA512 cf2ff559415bcb15dcd04194939c4682c8120c6b78edc5fd7d694055bedf8f4bda9127263c4347b6acd6a8ac43e37bdcbddc730654bd37a042e7e24df94df254
- SSDEEP 768:POaoJiozFU8UIMRMCOHLXLwvB0A3UkGXRAg5fbJm2aQeSX9fJ7GNU39FOMHFOMCP:fpIMRM/rkB0A3WXmg5fdmmX7VXHXC
- TLSH T16BD35E12ABD29D4BE870233245A72F95F331D6C81B79C3274374613C6CE27DDAE529A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/resources.assets
- SHA256 a52a8192f703a1f9d226d0119fd1f3ce6c81bb1b1975df122045a8adf91e3d35
- MD5 b2d493eda1933d26c7688f4e046e14df
- SHA1 1a2d8d1ec722e3211356dcaff9cfc2d94bc54c52
- SHA512 c1985ce303af2c1d5bf285d07b4ebcf6e02e297a7c0bd1743d985bb51205bf1250286cc8e01dedc3fe3cc8745b63430f3f30c56cc59932ecb83f952c300ccb4e
- SSDEEP 1536:U2LxiNgZUBOCqkWsGiyZh0xSqxJofiqY2u5Gs75xh3vcTjIkdBX2qETnea6:FdU8EfyZheSqxmqQSZhc37dBLQX6
- TLSH T17A2479C1EAE66C0BD57127324C978F52E730D8498E78D72B06E0692CEDFB2D52C16DA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/resources.assets.resS
- SHA256 4436b3f0d55e084d4aa73e1fc659e96817f72aae8b11e0e73626eb3b154d1b25
- MD5 3ef6f67d0b67c62558705636d84a2f41
- SHA1 f3c6f5a0f473aaf9127cc12db7eb16299da3c5b9
- SHA512 18c6f6b480649d09b45a98d09031c3dac0142fe1f9af2daec0e3f70587af8cd4296875955264810a7d607862f921ccc6728750511932eb394309fedbdeecf68a
- SSDEEP 6:X00000000000000000000000000000000000000000000000000000000000000T:DoEuEpCHG/myy2ynjyy2T
- TLSH T1AEE10721926AD156C89937B0CC43E2FD3D887ED5EC046A8396BC7F5E7C3D60941B84C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets0.assets
- SHA256 dec3707368d6d71e6811a3cbd0d45339020f309f4118117d4d0bf9f1b0dd46c6
- MD5 0a933b3b5d2511a9b92253e49aa26eef
- SHA1 32ad314c26349a8252ccc1fdda8cf3108602224f
- SHA512 c20142aaa412ec4219450c23c437bbf4b3c891410d3fdb9d504f6c38a8b688abc5e8141964dc4db0dc5ff1258ac211fb23f7e98d089ce9aebde7226289e8032a
- SSDEEP 6:S6RLG8AwSP2/52y8K64KUQR7Wr/lMjONTWS/a/Kllf6Ihk/cveEQNE2W6Al3lllq:TRLGJmt64KUQR6tMVSyC/3R8Eplllq
- TLSH T1C89172AB3A0A4853C0A44B7661F803CBB730CB098BCBA60B10A0803C0D46BC30E80EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets0.resource
- SHA256 ad4a9bccb550abe82c1c395e9d3ac6381cf3be929e65e6fb037ffe7e39692866
- MD5 12fed4440df9d6678e422d1750c314a4
- SHA1 efb60febe297fe686f0389f1f84de1d1301b0919
- SHA512 eeebd1d4b88721caa1d2cc44687876632d61f96e810a71fc6947ae96d3e54b4ec8d1c3c0c8d7cf3b6f64d07b2efc0a48c4ebf9b95f219e155147a46fd800ce52
- SSDEEP 24576:o0Q/oYoLR1+U6CK9sJGvx2OPpHx5/Qss5+sn79Exx8laPY6vL3MFY8Z01ZxJ/gW:o0Q/oxHK9syNHx5BsYs79E78lgLEZ+Z/
- TLSH T1146533DAB52B796040DC1EAE44625A0DE324437749FA091F23997C66FE7148E3C94FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets1.assets
- SHA256 d53b1ef71b1be7fec710877e5e9354a1ad5a5aab28ab45bbe1736c24b7a0f6da
- MD5 613e83468226cbfcb9cac50b1ac4dd09
- SHA1 ddbfe6bda2def7aef57141d3fcf612d73eaf8577
- SHA512 03ccff501580fe2cbf6a4c62805bb92cea696fcff174dad6609a5e4044290c8551f32da3a13745e7848cde1beddcc440fe26b33d97b5dd12a538c877f80b74a3
- SSDEEP 98304:g7v5SjWL8tB7hD7h1pmXG7QIt0fsyfOs1LiHEGddPtQRMNaiPlS8HpKbIxvy1369:9jWLi7f1ww7t0fsy13klS8fxvy136x
- TLSH T113C6C45AEFD04E57C955037588D30B56B335EE98CB238B0B862C7529BCB33C86CA6E54
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets1.assets.resS
- SHA256 d4daff9200c7f21d691e115371a6154c5efd8f35308e76ab4eb9ca53a0b5087f
- MD5 8b8988baa3f65f6ea8317b1447d739b7
- SHA1 492144e75d18554660e40466750c55e19d6bc4b7
- SHA512 641daae6f7f12f81f5acafb658f419d82aa3b43161a2d84d789f3ab234699480b41e0472559ebc8325c4af6d56527f36c0fbe8898621778fd98f833633027d2f
- SSDEEP 786432:GuWlqOaUIsJqtAykMbp2P3uxRPgTnHiMZc63BgpUs8XNlmiI7LTThVo5+zYcLii1:1DCLzNE5
- TLSH T1A457B5570E20F1AE8596616C8D768DF4C06F1EF4C5E01FDB1A636A62A7F78E23600DC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets1.resource
- SHA256 9b4bff0140e7e9cf4d2064b42338700e16712ce7aaddd8285e97d4809ff3a2e1
- MD5 41c9ef1f8e1ae81f7e62b35d5c622474
- SHA1 a2d6f20eade8a4ade35ebcca1cca6c109e37e2d8
- SHA512 1f5d06c8cdd3f4c948385156041b2e935a9099f95c168243e864c8313f10fe21c1892a1f17f6d165ba8f329f80d4d70c72362accf03a42ab7591fb9873faa184
- SSDEEP 393216:cIpGIEyoqtySeG81DBZ5RQKHvZNMUwd6aCb/Z7/:kyntHeG81Df5RQKHBN1wd6aCb/Zj
- TLSH T10A57126CB698C036DC3A857B345322DE1731B41E7A4F8F67312D9D2BAE924AC1E35E50
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets2.assets
- SHA256 35780e8f9a67a56df198a3178e38893ee964bb0dcfcac98c02639cc48190ed24
- MD5 72ace290b78e50ac52c53447b1fff01d
- SHA1 14c0d678d2184606e6bd2163599607973b981f71
- SHA512 bead033ff4d047dc14792667ef84127c2fb46760b4d25c611289da7d2e7bdf7000c1fa178a9107583eb40e2f6e4289eeebcbc9b5a1a85cbf2260a8e2536f62e5
- SSDEEP 49152:mYyeHz2/CERYCZJLcsG5kIlujM9b7DfbF7DC2hd7R:mYyeHz2/tRYCZJLcs4dkgZTZ3hd7
- TLSH T1AE266F16EB828A2BC465233388E70F51F335DDD887AF5B235678762C7CF23886E55660
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets2.assets.resS
- SHA256 0d6a2dcc15d47fd2122026db75107a817892c30bf630487c114f2c8ee800cd03
- MD5 6625f6b7cb6211600520a0bc874bd3af
- SHA1 b6f99170baccdfadd2b25bdcd4bdcb899dc7e52d
- SHA512 04b4845130bf39c2a372a369796e0bfdac978d85a6ed2d3c4bf221652130e5d16f14d5802899b498af7ad620e9161b313340ca18aac2d5d3827e2a358b60787d
- SSDEEP 786432:apgMhV2FgxyF4RpLBxv6cQOesb7ytACSXLoKBONszcMI88VK/E42uPHB6Ks52lSn:aKMX2FlipnhRvXWOcM38M/aTNbT
- TLSH T13178F383D9C1C2EED29A30BCD93B29C5E0DF09B9C3A49FD6A2631250E663577A7500DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets2.resource
- SHA256 19a52be3abf53baadcb9960fc46e4254ec417c4d49aef0a84021e24d9d6ce572
- MD5 8291adfe3303784b3b7200f1725a77c5
- SHA1 1bf5e9bc31ced10729b0ebf3baad031edfe9bc6e
- SHA512 bdde2a1c8bf3f3a4821186e7e6f86e3b966c35c47de939a4523c74a2ae24951690a133b5c1d471052eb977b420448867a9d7df9b9a18744a3e09adc75bda892d
- SSDEEP 786432:6t4Rp4ATH1CGV0PXFhj1nMgh7Ei5FI9dTTVQk:y6lmPXDRMgh7Z5FcGk
- TLSH T157773358B10A1FF5DD9DA4B708978B1FA3A8C5732693166DC1184B88EFF6F0098BF905
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets3.assets
- SHA256 6ef45bff8e8a2f235a7fb035f7a610f2328cce795f297fadc9f60fbb01f3d212
- MD5 b9f812109db41b1c53a506778ddfc4d2
- SHA1 b11f4f61bb08c940c1417b64743fbf145b7083b5
- SHA512 69f6e6c47dba1b8880ea79b8bfc24a4bf520fa31d205ca8694a7e387eafe1225040b81977fa471725b74faa8c05a371f84e78c71ba54854af53f75e342791c87
- SSDEEP 3072:N94c11P/9w6JxkdasXzuMYhHutCWIqIs8kKssX+LmcioLuZL+H:w2FUd5Iqx8k2MLuZiH
- TLSH T16F446146FECADE9BC8A41572CCBB4E94B635DCC99F5186232238B22C3CB37585DC5294
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets3.assets.resS
- SHA256 cacd2ec6d40a91c2f6925e0c9c801e19d5fc6c8dfda25079150910df765e6c73
- MD5 4f76586f89a96e8c409d4abd1dfe4225
- SHA1 676a8376631f2b006547e79d4e7e92410c6b38d0
- SHA512 2e6156e5b7c37ba82e505a20a2d2a56f0cadb3b05797b88f875df9f426bd25160db706f19b355643313f3ecee86105405bd500577978af6dc19cb925c237e364
- SSDEEP 98304:ntScPPPPPPP9PPPPPPPSPPPPPPP5PPPPPPPJPPPPPPPdPPPPPPPsPPPPPPPGPPPM:n70aaaPnItjmBj
- TLSH T11616BE988162CED2AB518A7C15763CEDD870EC73F791AFF49E072AC658733B852412C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Fun with Ragdolls_Data/sharedassets3.resource
- SHA256 8db288d6244c90d5878767837869b9ce2410a336153a2c91645f0931d0925d8f
- MD5 986ddf4781bc3616fed38d84284957bd
- SHA1 988a5fd490f1405802f80c234aadaeba8e99b16c
- SHA512 4af288a8428bd271fd84c9cd0f66d7a209ec2d11682ac85f5547868fb0388e5b936e21c2f410e8427ac2bcf4ad3fee171e60e280525fb706f53bf07770ed4203
- SSDEEP 49152:S4f3SLe6SJzX2LWTdRRiZiM7d+8WB+RS03mt+y4BKPFcy+IRFa:d3SXazXcOB6iQdbt3mYy4BKqSa
- TLSH T17AA53397F5918ECCD25F8A73231EF934E79B4469A7AB9C9C3873D2199E51B120FE8040
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/Icon.ico
- SHA256 45cd4915d61b4d0df8eb90cb2d7d9772518733931fee096c361e53a08abae9e6
- MD5 595acf2c8a16252b61a307b0426be1a6
- SHA1 81da6b9ff67f01fb03d7d0e4792035b5f3b52aa9
- SHA512 bcbd3d85be521c3ac9d6c42b2de4ac7625ec8f15982e12fb7a18fe81f115fd5ebe0ba5924710fe95a3d2ae238172053649db12cefe26fdc5025a4fa76ed00b64
- SSDEEP 12288:NAnhvnOdyA7sNqmwK5HSX8px8XT30WmFyWHTQo:KGdyXJwK8c8AWOyWco
- TLSH T10AC41C19DA13F4FCD522987AAD82F0F59CAC4C311EC79B234550F3A6DF36D58EA42A48
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- IMPHASH 7bb847402c0f918eb21efbfc5c2baccb
- SHA256 74b4f349e77f1aac8907d4d57965b5eecebf2d7df265ffb88401789dd23d7c85
- MD5 183f2624b562437edac4f3b0e597304f
- SHA1 353893e764165ad645562c610eec30e5ea432487
- SHA512 4b8f950aaceec4a112b66dfc4da42629323e2ce4dfca78a6c7c8baaf27d93557fb0dc50a695da3b392fb7d54cc30950b25ebac4474e69b5567ff7d36d6bee8c5
- SSDEEP 12288:vDO9tW5xZpTCJvEFvN9TH+m36rm+QFk0Po1TnmfqXvymL:qILZpTCJvEFvN9Tp2DQFk0Po1TIqvL
- TLSH T1E4F49D953BA41296C57BD13DCAC74B69DA71B8150321A7CF019843BE2F13BF82A3B764
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
18516
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\build\output\Unity-Technologies\mono\msvc\build\bdwgc\x64\bin\Release\MonoPosixHelper.pdb
kernel32
CreateFileW
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetLastError
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FileTimeToDosDateTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetTempPathW
GetCPInfo
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetConsoleCP
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetACP
GetStringTypeW
FlushFileBuffers
SetStdHandle
GetFileAttributesExW
HeapReAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
HeapSize
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
RaiseException
CloseZStream
CreateZStream
Flush
Mono_Posix_FromAccessModes
Mono_Posix_FromConfstrName
Mono_Posix_FromDirectoryNotifyFlags
Mono_Posix_FromErrno
Mono_Posix_FromFcntlCommand
Mono_Posix_FromFilePermissions
Mono_Posix_FromLockType
Mono_Posix_FromLockfCommand
Mono_Posix_FromMlockallFlags
Mono_Posix_FromMmapFlags
Mono_Posix_FromMmapProts
Mono_Posix_FromMountFlags
Mono_Posix_FromMremapFlags
Mono_Posix_FromMsyncFlags
Mono_Posix_FromOpenFlags
Mono_Posix_FromPathconfName
Mono_Posix_FromPollEvents
Mono_Posix_FromPosixFadviseAdvice
Mono_Posix_FromPosixMadviseAdvice
Mono_Posix_FromSeekFlags
Mono_Posix_FromSignum
Mono_Posix_FromSysconfName
Mono_Posix_FromSyslogFacility
Mono_Posix_FromSyslogLevel
Mono_Posix_FromSyslogOptions
Mono_Posix_FromWaitOptions
Mono_Posix_FromXattrFlags
Mono_Posix_Stdlib_BUFSIZ
Mono_Posix_Stdlib_CreateFilePosition
Mono_Posix_Stdlib_DumpFilePosition
Mono_Posix_Stdlib_EOF
Mono_Posix_Stdlib_EXIT_FAILURE
Mono_Posix_Stdlib_EXIT_SUCCESS
Mono_Posix_Stdlib_FILENAME_MAX
Mono_Posix_Stdlib_FOPEN_MAX
Mono_Posix_Stdlib_GetLastError
Mono_Posix_Stdlib_InvokeSignalHandler
Mono_Posix_Stdlib_L_tmpnam
Mono_Posix_Stdlib_MB_CUR_MAX
Mono_Posix_Stdlib_RAND_MAX
Mono_Posix_Stdlib_SIG_DFL
Mono_Posix_Stdlib_SIG_ERR
Mono_Posix_Stdlib_SIG_IGN
Mono_Posix_Stdlib_SetLastError
Mono_Posix_Stdlib_TMP_MAX
Mono_Posix_Stdlib__IOFBF
Mono_Posix_Stdlib__IOLBF
Mono_Posix_Stdlib__IONBF
Mono_Posix_Stdlib_calloc
Mono_Posix_Stdlib_clearerr
Mono_Posix_Stdlib_fclose
Mono_Posix_Stdlib_feof
Mono_Posix_Stdlib_ferror
Mono_Posix_Stdlib_fflush
Mono_Posix_Stdlib_fgetc
Mono_Posix_Stdlib_fgetpos
Mono_Posix_Stdlib_fgets
Mono_Posix_Stdlib_fopen
Mono_Posix_Stdlib_fprintf
Mono_Posix_Stdlib_fputc
Mono_Posix_Stdlib_fputs
Mono_Posix_Stdlib_fread
Mono_Posix_Stdlib_free
Mono_Posix_Stdlib_freopen
Mono_Posix_Stdlib_fseek
Mono_Posix_Stdlib_fsetpos
Mono_Posix_Stdlib_ftell
Mono_Posix_Stdlib_fwrite
Mono_Posix_Stdlib_malloc
Mono_Posix_Stdlib_perror
Mono_Posix_Stdlib_realloc
Mono_Posix_Stdlib_rewind
Mono_Posix_Stdlib_setbuf
Mono_Posix_Stdlib_setvbuf
Mono_Posix_Stdlib_stderr
Mono_Posix_Stdlib_stdin
Mono_Posix_Stdlib_stdout
Mono_Posix_Stdlib_strlen
Mono_Posix_Stdlib_tmpfile
Mono_Posix_Stdlib_ungetc
Mono_Posix_Syscall_L_ctermid
Mono_Posix_Syscall_L_cuserid
Mono_Posix_Syscall_get_at_fdcwd
Mono_Posix_Syscall_get_utime_now
Mono_Posix_Syscall_get_utime_omit
Mono_Posix_ToAccessModes
Mono_Posix_ToConfstrName
Mono_Posix_ToDirectoryNotifyFlags
Mono_Posix_ToErrno
Mono_Posix_ToFcntlCommand
Mono_Posix_ToFilePermissions
Mono_Posix_ToLockType
Mono_Posix_ToLockfCommand
Mono_Posix_ToMlockallFlags
Mono_Posix_ToMmapFlags
Mono_Posix_ToMmapProts
Mono_Posix_ToMountFlags
Mono_Posix_ToMremapFlags
Mono_Posix_ToMsyncFlags
Mono_Posix_ToOpenFlags
Mono_Posix_ToPathconfName
Mono_Posix_ToPollEvents
Mono_Posix_ToPosixFadviseAdvice
Mono_Posix_ToPosixMadviseAdvice
Mono_Posix_ToSeekFlags
Mono_Posix_ToSignum
Mono_Posix_ToSysconfName
Mono_Posix_ToSyslogFacility
Mono_Posix_ToSyslogLevel
Mono_Posix_ToSyslogOptions
Mono_Posix_ToWaitOptions
Mono_Posix_ToXattrFlags
Mono_Unix_VersionString
ReadZStream
WriteZStream
unzClose
unzCloseCurrentFile
unzGetCurrentFileInfo
unzGoToFirstFile
unzGoToNextFile
unzLocateFile
unzOpen2
unzOpenCurrentFile2
unzReadCurrentFile
unztell
zipClose
zipCloseFileInZip
zipOpen2
zipOpenNewFileInZip
zipWriteInFileInZip
Name
.text
Size
596KB
Virtual Size
596KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
1024B
Virtual Size
977B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
283B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=171, id=243, version=40116,
count=14, id=242, version=40116,
count=2, id=199, version=41118,
count=7, id=259, version=24123,
count=21, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=203, version=65501,
count=103, id=1, productName=Unmarked objects,
count=25, id=260, version=24234,
count=1, id=256, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- IMPHASH 15457a2c34e647244c5bd1a162405922
- SHA256 6b7bce05f9541c425cad603d131ab30e4ccf37679db5383b1bbf34933bfb6064
- MD5 aba9a936e1973c3fa4e2e359de74df78
- SHA1 6e1fa9e24f50b14dcb65adf147c5d340a65f919a
- SHA512 9325a5aad41fada559522dc5d699d855fd4bbdc31928f77f56cab7984d88d6527a18f4ea2f050029045fc75b5d4e6e26b011e6d7f513fb509d49eaf5c3764df0
- SSDEEP 49152:/EaG3DzG+6RBjDIZ8swzow/xQWhdz0vZ55C4+OrhUjNMf2y+KxlwxQZhq1aDo3Z9:S3yvDT/uWhK53UjAwxiMoTW3mNiEm2s
- TLSH T167364995B6B910A5C427C27C8FA75263FA7570449330A6DF8BA017A62F23EE0173D7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
78:4e:f1:c0:16:bf:4a:fd:1b:8d:d9:56:88:d2:f2:bc:5d:ee:91:f5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
Chains
Aug 18, 2020
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
Serial Number
03:88:3b:fb:88:38:ac:27:c4:5b:74:c5:0f:42:b2:5b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 11, 2018 - Jul 10, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Minor OS version
0
Major OS version
6
Entry point
3240940
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\build\output\Unity-Technologies\mono\msvc\build\bdwgc\x64\bin\Release\mono-2.0-bdwgc.pdb
ws2_32
select
WSAGetLastError
htons
getprotobyname
__WSAFDIsSet
getaddrinfo
freeaddrinfo
WSASend
WSARecv
WSASetLastError
sendto
recvfrom
socket
send
recv
inet_addr
ioctlsocket
connect
accept
inet_pton
WSASocketW
WSAIoctl
gethostname
shutdown
setsockopt
ntohs
ntohl
listen
htonl
getsockopt
getsockname
getpeername
closesocket
bind
WSAWaitForMultipleEvents
WSACleanup
WSAStartup
getnameinfo
ole32
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoTaskMemFree
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayPutElement
SafeArrayPtrOfIndex
psapi
EnumProcesses
GetModuleInformation
GetModuleFileNameExW
EnumProcessModules
GetModuleBaseNameW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
advapi32
BuildTrusteeWithSidW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetEffectiveRightsFromAclW
SetEntriesInAclW
LookupAccountSidW
GetTokenInformation
GetLengthSid
FreeSid
DuplicateToken
CopySid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
RevertToSelf
ImpersonateLoggedOnUser
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
CreateProcessWithLogonW
winmm
timeSetEvent
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
kernel32
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetFullPathNameA
GetFullPathNameW
ReadConsoleW
WriteConsoleW
FreeLibraryAndExitThread
SetConsoleMode
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
GetConsoleCP
SetStdHandle
WideCharToMultiByte
SystemTimeToTzSpecificLocalTime
IsValidLocale
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleA
GetModuleFileNameA
GetExitCodeThread
InitializeCriticalSection
GetEnvironmentVariableA
GetModuleHandleExW
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeSRWLock
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
SetConsoleCtrlHandler
MoveFileExW
SetFilePointerEx
GetTimeZoneInformation
GetStringTypeW
CreateProcessA
OutputDebugStringA
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
SetEnvironmentVariableA
GetProcessHeap
PeekNamedPipe
CreateEventW
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
RtlInstallFunctionTableCallback
RtlDeleteFunctionTable
CreateFileA
FreeLibrary
Sleep
GetTickCount
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetLastError
GetLocaleInfoA
GetThreadLocale
GetCurrentProcess
GetModuleHandleW
GetProcAddress
LocalFree
FormatMessageW
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
SetLastError
SetErrorMode
CloseHandle
VirtualProtect
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcessId
GetSystemTimes
GetSystemTimeAsFileTime
GetTickCount64
TryEnterCriticalSection
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ReleaseSemaphore
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreW
DuplicateHandle
RaiseException
CancelIo
CancelSynchronousIo
WaitForSingleObject
QueueUserAPC
SwitchToThread
CreateThread
GetCurrentThread
GetCurrentThreadId
OpenThread
ExitThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
SetEvent
ResetEvent
HeapSize
SleepEx
WaitForSingleObjectEx
WaitForMultipleObjectsEx
SignalObjectAndWait
DeleteCriticalSection
GetCommandLineW
CreateFileW
GetFileSize
ExitProcess
GetSystemDirectoryW
DisableThreadLibraryCalls
GetModuleFileNameW
GetVersionExW
GlobalMemoryStatusEx
GetProcessId
VerLanguageNameW
SetThreadPriority
WakeConditionVariable
DeleteFileW
GetFileAttributesExW
SetHandleInformation
OpenFileMappingW
FlushViewOfFile
GetFileInformationByHandleEx
GetConsoleMode
GetStdHandle
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
FlushFileBuffers
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileTime
GetFileType
GetLogicalDriveStringsW
GetVolumeInformationW
LockFile
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
UnlockFile
WriteFile
CreatePipe
CancelIoEx
CopyFileW
MoveFileW
ReplaceFileW
FileTimeToSystemTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
GetComputerNameW
GlobalAlloc
GlobalReAlloc
GlobalFree
ReleaseMutex
CreateMutexW
OpenMutexW
OpenSemaphoreW
OpenEventW
GetProcessTimes
TerminateProcess
GetExitCodeProcess
CreateProcessW
SetPriorityClass
GetPriorityClass
OpenProcess
GetProcessWorkingSetSize
SetProcessWorkingSetSize
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
FreeConsole
MultiByteToWideChar
user32
MessageBoxA
MsgWaitForMultipleObjectsEx
SendMessageTimeoutW
MessageBoxW
WaitForInputIdle
shell32
SHGetKnownFolderPath
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
GC_dirty_inner
GC_free
GC_gcj_malloc
GC_make_descriptor
GC_malloc
GC_malloc_atomic
GC_malloc_kind
GC_malloc_uncollectable
MonoFixupCorEE
mini_get_debug_options
mini_parse_debug_option
mono_add_internal_call
mono_aot_register_module
mono_array_addr_with_size
mono_array_class_get
mono_array_clone
mono_array_element_size
mono_array_length
mono_array_new
mono_array_new_full
mono_array_new_specific
mono_assemblies_cleanup
mono_assemblies_init
mono_assembly_addref
mono_assembly_close
mono_assembly_fill_assembly_name
mono_assembly_foreach
mono_assembly_get_assemblyref
mono_assembly_get_image
mono_assembly_get_main
mono_assembly_get_name
mono_assembly_get_object
mono_assembly_getrootdir
mono_assembly_invoke_load_hook
mono_assembly_invoke_search_hook
mono_assembly_load
mono_assembly_load_from
mono_assembly_load_from_full
mono_assembly_load_full
mono_assembly_load_module
mono_assembly_load_module_checked
mono_assembly_load_reference
mono_assembly_load_references
mono_assembly_load_with_partial_name
mono_assembly_loaded
mono_assembly_loaded_full
mono_assembly_name_free
mono_assembly_name_get_culture
mono_assembly_name_get_name
mono_assembly_name_get_pubkeytoken
mono_assembly_name_get_version
mono_assembly_name_new
mono_assembly_name_parse
mono_assembly_names_equal
mono_assembly_open
mono_assembly_open_full
mono_assembly_set_main
mono_assembly_setrootdir
mono_bitset_alloc_size
mono_bitset_clear
mono_bitset_clear_all
mono_bitset_clone
mono_bitset_copyto
mono_bitset_count
mono_bitset_equal
mono_bitset_find_first
mono_bitset_find_first_unset
mono_bitset_find_last
mono_bitset_find_start
mono_bitset_foreach
mono_bitset_free
mono_bitset_intersection
mono_bitset_intersection_2
mono_bitset_invert
mono_bitset_mem_new
mono_bitset_new
mono_bitset_set
mono_bitset_set_all
mono_bitset_size
mono_bitset_sub
mono_bitset_test
mono_bitset_test_bulk
mono_bitset_union
mono_bounded_array_class_get
mono_breakpoint_clean_code
mono_build_date
mono_callspec_cleanup
mono_callspec_eval
mono_callspec_eval_exception
mono_callspec_parse
mono_check_corlib_version
mono_class_array_element_size
mono_class_data_size
mono_class_describe_statics
mono_class_enum_basetype
mono_class_from_generic_parameter
mono_class_from_mono_type
mono_class_from_name
mono_class_from_name_case
mono_class_from_typeref
mono_class_from_typeref_checked
mono_class_get
mono_class_get_byref_type
mono_class_get_context
mono_class_get_element_class
mono_class_get_event_token
mono_class_get_events
mono_class_get_field
mono_class_get_field_from_name
mono_class_get_field_token
mono_class_get_fields
mono_class_get_flags
mono_class_get_full
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_method_from_name_flags
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_nesting_type
mono_class_get_parent
mono_class_get_properties
mono_class_get_property_from_name
mono_class_get_property_token
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_get_userdata
mono_class_get_userdata_offset
mono_class_implements_interface
mono_class_inflate_generic_method
mono_class_inflate_generic_type
mono_class_init
mono_class_instance_size
mono_class_interface_offset
mono_class_is_assignable_from
mono_class_is_blittable
mono_class_is_delegate
mono_class_is_enum
mono_class_is_generic
mono_class_is_inflated
mono_class_is_subclass_of
mono_class_is_valid_enum
mono_class_is_valuetype
mono_class_min_align
mono_class_name_from_token
mono_class_num_events
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_set_userdata
mono_class_value_size
mono_class_vtable
mono_cli_rva_image_map
mono_code_manager_cleanup
mono_code_manager_commit
mono_code_manager_destroy
mono_code_manager_init
mono_code_manager_install_callbacks
mono_code_manager_invalidate
mono_code_manager_new
mono_code_manager_new_dynamic
mono_code_manager_reserve
mono_code_manager_reserve_align
mono_code_manager_set_read_only
mono_code_manager_size
mono_compile_method
mono_conc_hashtable_destroy
mono_conc_hashtable_foreach
mono_conc_hashtable_foreach_steal
mono_conc_hashtable_insert
mono_conc_hashtable_lookup
mono_conc_hashtable_new
mono_conc_hashtable_new_full
mono_conc_hashtable_remove
mono_config_cleanup
mono_config_for_assembly
mono_config_get_cpu
mono_config_get_os
mono_config_get_wordsize
mono_config_is_server_mode
mono_config_parse
mono_config_parse_memory
mono_config_set_server_mode
mono_config_string_for_assembly_file
mono_context_get
mono_context_get_desc
mono_context_get_domain_id
mono_context_get_id
mono_context_init
mono_context_set
mono_counter_get_name
mono_counter_get_section
mono_counter_get_size
mono_counter_get_type
mono_counter_get_unit
mono_counter_get_variance
mono_counters_cleanup
mono_counters_dump
mono_counters_enable
mono_counters_foreach
mono_counters_init
mono_counters_on_register
mono_counters_register
mono_counters_register_with_size
mono_counters_sample
mono_cpu_count
mono_custom_attrs_construct
mono_custom_attrs_free
mono_custom_attrs_from_assembly
mono_custom_attrs_from_class
mono_custom_attrs_from_event
mono_custom_attrs_from_field
mono_custom_attrs_from_index
mono_custom_attrs_from_method
mono_custom_attrs_from_param
mono_custom_attrs_from_property
mono_custom_attrs_get_attr
mono_custom_attrs_get_attrs
mono_custom_attrs_has_attr
mono_debug_add_delegate_trampoline
mono_debug_add_method
mono_debug_cleanup
mono_debug_close_image
mono_debug_close_mono_symbol_file
mono_debug_domain_create
mono_debug_domain_unload
mono_debug_enabled
mono_debug_find_method
mono_debug_free_locals
mono_debug_free_method_jit_info
mono_debug_free_source_location
mono_debug_il_offset_from_address
mono_debug_init
mono_debug_lookup_locals
mono_debug_lookup_method
mono_debug_lookup_method_addresses
mono_debug_lookup_source_location
mono_debug_lookup_source_location_by_il
mono_debug_open_image_from_memory
mono_debug_open_mono_symbols
mono_debug_print_stack_frame
mono_debug_print_vars
mono_debug_remove_method
mono_debug_symfile_free_location
mono_debug_symfile_is_loaded
mono_debug_symfile_lookup_locals
mono_debug_symfile_lookup_location
mono_debug_symfile_lookup_method
mono_debugger_agent_parse_options
mono_debugger_agent_register_transport
mono_debugger_agent_transport_handshake
mono_debugger_disconnect
mono_debugger_get_generate_debug_info
mono_debugger_insert_breakpoint
mono_debugger_install_attach_detach_callback
mono_debugger_method_has_breakpoint
mono_debugger_run_finally
mono_debugger_set_generate_debug_info
mono_declsec_flags_from_assembly
mono_declsec_flags_from_class
mono_declsec_flags_from_method
mono_declsec_get_assembly_action
mono_declsec_get_class_action
mono_declsec_get_demands
mono_declsec_get_inheritdemands_class
mono_declsec_get_inheritdemands_method
mono_declsec_get_linkdemands
mono_declsec_get_method_action
mono_digest_get_public_token
mono_disasm_code
mono_disasm_code_one
mono_dl_fallback_register
mono_dl_fallback_unregister
mono_dl_open
mono_dllmap_insert
mono_domain_assembly_foreach
mono_domain_assembly_open
mono_domain_create
mono_domain_create_appdomain
mono_domain_finalize
mono_domain_foreach
mono_domain_free
mono_domain_from_appdomain
mono_domain_get
mono_domain_get_by_id
mono_domain_get_friendly_name
mono_domain_get_id
mono_domain_has_type_resolve
mono_domain_is_unloading
mono_domain_owns_vtable_slot
mono_domain_set
mono_domain_set_config
mono_domain_set_internal
mono_domain_try_type_resolve
mono_domain_try_unload
mono_domain_unload
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_error_cleanup
mono_error_get_error_code
mono_error_get_message
mono_error_init
mono_error_init_flags
mono_error_ok
mono_escape_uri_string
mono_event_get_add_method
mono_event_get_flags
mono_event_get_name
mono_event_get_object
mono_event_get_parent
mono_event_get_raise_method
mono_event_get_remove_method
mono_exception_from_name
mono_exception_from_name_domain
mono_exception_from_name_msg
mono_exception_from_name_two_strings
mono_exception_from_token
mono_exception_from_token_two_strings
mono_exception_walk_trace
mono_field_from_token
mono_field_full_name
mono_field_get_data
mono_field_get_flags
mono_field_get_name
mono_field_get_object
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_get_value
mono_field_get_value_object
mono_field_set_value
mono_field_static_get_value
mono_field_static_set_value
mono_file_map
mono_file_map_close
mono_file_map_fd
mono_file_map_open
mono_file_map_size
mono_file_unmap
mono_free
mono_free_bstr
mono_free_method
mono_free_verify_list
mono_g_hash_table_destroy
mono_g_hash_table_find
mono_g_hash_table_foreach
mono_g_hash_table_foreach_remove
mono_g_hash_table_insert
mono_g_hash_table_lookup
mono_g_hash_table_lookup_extended
mono_g_hash_table_new_type
mono_g_hash_table_print_stats
mono_g_hash_table_remove
mono_g_hash_table_replace
mono_g_hash_table_size
mono_gc_collect
mono_gc_collect_a_little
mono_gc_collection_count
mono_gc_finalize_notify
mono_gc_get_generation
mono_gc_get_heap_size
mono_gc_get_max_time_slice_ns
mono_gc_get_used_size
mono_gc_invoke_finalizers
mono_gc_is_incremental
mono_gc_max_generation
mono_gc_pending_finalizers
mono_gc_reference_queue_add
mono_gc_reference_queue_free
mono_gc_reference_queue_new
mono_gc_register_finalizer_callbacks
mono_gc_register_root
mono_gc_set_incremental
mono_gc_set_max_time_slice_ns
mono_gc_toggleref_add
mono_gc_toggleref_register_callback
mono_gc_walk_heap
mono_gc_wbarrier_arrayref_copy
mono_gc_wbarrier_generic_nostore
mono_gc_wbarrier_generic_store
mono_gc_wbarrier_generic_store_atomic
mono_gc_wbarrier_object_copy
mono_gc_wbarrier_set_arrayref
mono_gc_wbarrier_set_field
mono_gc_wbarrier_value_copy
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_is_in_domain
mono_gchandle_new
mono_gchandle_new_weakref
mono_get_array_class
mono_get_boolean_class
mono_get_byte_class
mono_get_char_class
mono_get_config_dir
mono_get_corlib
mono_get_dbnull_object
mono_get_delegate_begin_invoke
mono_get_delegate_end_invoke
mono_get_delegate_invoke
mono_get_double_class
mono_get_enum_class
mono_get_exception_appdomain_unloaded
mono_get_exception_argument
mono_get_exception_argument_null
mono_get_exception_argument_out_of_range
mono_get_exception_arithmetic
mono_get_exception_array_type_mismatch
mono_get_exception_bad_image_format
mono_get_exception_bad_image_format2
mono_get_exception_cannot_unload_appdomain
mono_get_exception_class
mono_get_exception_divide_by_zero
mono_get_exception_execution_engine
mono_get_exception_field_access
mono_get_exception_file_not_found
mono_get_exception_file_not_found2
mono_get_exception_index_out_of_range
mono_get_exception_invalid_cast
mono_get_exception_invalid_operation
mono_get_exception_io
mono_get_exception_method_access
mono_get_exception_missing_field
mono_get_exception_missing_method
mono_get_exception_not_implemented
mono_get_exception_not_supported
mono_get_exception_null_reference
mono_get_exception_out_of_memory
mono_get_exception_overflow
mono_get_exception_reflection_type_load
mono_get_exception_runtime_wrapped
mono_get_exception_security
mono_get_exception_serialization
mono_get_exception_stack_overflow
mono_get_exception_synchronization_lock
mono_get_exception_thread_abort
mono_get_exception_thread_interrupted
mono_get_exception_thread_state
mono_get_exception_type_initialization
mono_get_exception_type_load
mono_get_find_plugin_callback
mono_get_inflated_method
mono_get_int16_class
mono_get_int32_class
mono_get_int64_class
mono_get_intptr_class
mono_get_machine_config
mono_get_method
mono_get_method_constrained
mono_get_method_full
mono_get_object_class
mono_get_root_domain
mono_get_runtime_build_info
mono_get_sbyte_class
mono_get_single_class
mono_get_string_class
mono_get_thread_class
mono_get_uint16_class
mono_get_uint32_class
mono_get_uint64_class
mono_get_uintptr_class
mono_get_void_class
mono_guid_to_string
mono_guid_to_string_minimal
mono_hazard_pointer_get
mono_image_add_to_name_cache
mono_image_addref
mono_image_close
mono_image_ensure_section
mono_image_ensure_section_idx
mono_image_fixup_vtable
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_get_public_key
mono_image_get_resource
mono_image_get_strong_name
mono_image_get_table_info
mono_image_get_table_rows
mono_image_has_authenticode_entry
mono_image_init
mono_image_init_name_cache
mono_image_is_dynamic
mono_image_load_file_for_image
mono_image_load_module
mono_image_loaded
mono_image_loaded_by_guid
mono_image_loaded_by_guid_full
mono_image_loaded_full
mono_image_lookup_resource
mono_image_open
mono_image_open_from_data
mono_image_open_from_data_full
mono_image_open_from_data_with_name
mono_image_open_full
mono_image_rva_map
mono_image_strerror
mono_image_strong_name_position
mono_images_cleanup
mono_images_init
mono_init
mono_init_from_assembly
mono_init_version
mono_install_assembly_load_hook
mono_install_assembly_postload_refonly_search_hook
mono_install_assembly_postload_search_hook
mono_install_assembly_preload_hook
mono_install_assembly_refonly_preload_hook
mono_install_assembly_refonly_search_hook
mono_install_assembly_search_hook
mono_install_ftnptr_eh_callback
mono_install_load_aot_data_hook
mono_install_runtime_cleanup
mono_install_unhandled_exception_hook
mono_internal_current_level
mono_internal_current_mask
mono_is_debugger_attached
mono_jit_aot_compiling
mono_jit_cleanup
mono_jit_exec
mono_jit_info_get_code_size
mono_jit_info_get_code_start
mono_jit_info_get_method
mono_jit_info_table_find
mono_jit_init
mono_jit_init_version
mono_jit_parse_options
mono_jit_set_aot_mode
mono_jit_set_aot_only
mono_jit_set_domain
mono_jit_set_trace_options
mono_jit_thread_attach
mono_ldstr
mono_ldtoken
mono_lls_find
mono_lls_get_hazardous_pointer_with_mask
mono_lls_init
mono_lls_insert
mono_lls_remove
mono_load_remote_field
mono_load_remote_field_new
mono_loader_register_module
mono_lock_free_alloc
mono_lock_free_allocator_check_consistency
mono_lock_free_allocator_init_allocator
mono_lock_free_allocator_init_size_class
mono_lock_free_free
mono_lock_free_queue_dequeue
mono_lock_free_queue_enqueue
mono_lock_free_queue_init
mono_lock_free_queue_node_init
mono_lock_free_queue_node_unpoison
mono_locks_dump
mono_lookup_icall_symbol
mono_lookup_internal_call
mono_lookup_pinvoke_call
mono_main
mono_marshal_string_to_utf16
mono_md5_final
mono_md5_get_digest
mono_md5_get_digest_from_file
mono_md5_init
mono_md5_update
mono_mem_account_register_counters
mono_mem_account_type_name
mono_mempool_alloc
mono_mempool_alloc0
mono_mempool_contains_addr
mono_mempool_destroy
mono_mempool_foreach_block
mono_mempool_get_allocated
mono_mempool_invalidate
mono_mempool_new
mono_mempool_new_size
mono_mempool_stats
mono_mempool_strdup
mono_metadata_blob_heap
mono_metadata_cleanup
mono_metadata_compute_size
mono_metadata_custom_attrs_from_index
mono_metadata_declsec_from_index
mono_metadata_decode_blob_size
mono_metadata_decode_row
mono_metadata_decode_row_col
mono_metadata_decode_signed_value
mono_metadata_decode_table_row
mono_metadata_decode_table_row_col
mono_metadata_decode_value
mono_metadata_encode_value
mono_metadata_events_from_typedef
mono_metadata_field_info
mono_metadata_field_info_with_mempool
mono_metadata_free_array
mono_metadata_free_inflated_signature
mono_metadata_free_marshal_spec
mono_metadata_free_method_signature
mono_metadata_free_mh
mono_metadata_free_type
mono_metadata_generic_class_foreach
mono_metadata_generic_class_is_valuetype
mono_metadata_get_constant_index
mono_metadata_get_generic_param_row
mono_metadata_get_inflated_signature
mono_metadata_get_marshal_info
mono_metadata_guid_heap
mono_metadata_implmap_from_method
mono_metadata_init
mono_metadata_interfaces_from_typedef
mono_metadata_load_generic_param_constraints_checked
mono_metadata_load_generic_params
mono_metadata_locate
mono_metadata_locate_token
mono_metadata_methods_from_event
mono_metadata_methods_from_property
mono_metadata_nested_in_typedef
mono_metadata_nesting_typedef
mono_metadata_packing_from_typedef
mono_metadata_parse_array
mono_metadata_parse_custom_mod
mono_metadata_parse_field_type
mono_metadata_parse_marshal_spec
mono_metadata_parse_method_signature
mono_metadata_parse_method_signature_full
mono_metadata_parse_mh
mono_metadata_parse_mh_full
mono_metadata_parse_param
mono_metadata_parse_signature
mono_metadata_parse_type
mono_metadata_parse_typedef_or_ref
mono_metadata_properties_from_typedef
mono_metadata_signature_alloc
mono_metadata_signature_dup
mono_metadata_signature_equal
mono_metadata_string_heap
mono_metadata_token_from_dor
mono_metadata_translate_token_index
mono_metadata_type_equal
mono_metadata_type_hash
mono_metadata_typedef_from_field
mono_metadata_typedef_from_method
mono_metadata_user_string
mono_method_body_get_object
mono_method_can_access_field
mono_method_can_access_method
mono_method_desc_free
mono_method_desc_from_method
mono_method_desc_full_match
mono_method_desc_is_full
mono_method_desc_match
mono_method_desc_new
mono_method_desc_search_in_class
mono_method_desc_search_in_image
mono_method_full_name
mono_method_get_class
mono_method_get_context
mono_method_get_flags
mono_method_get_generic_container
mono_method_get_header
mono_method_get_header_checked
mono_method_get_index
mono_method_get_last_managed
mono_method_get_marshal_info
mono_method_get_name
mono_method_get_object
mono_method_get_param_names
mono_method_get_param_token
mono_method_get_reflection_name
mono_method_get_signature
mono_method_get_signature_full
mono_method_get_token
mono_method_get_unmanaged_thunk
mono_method_has_marshal_info
mono_method_header_get_clauses
mono_method_header_get_code
mono_method_header_get_locals
mono_method_header_get_num_clauses
mono_method_print_code
mono_method_signature
mono_method_signature_checked
mono_method_verify
mono_mlist_alloc
mono_mlist_append
mono_mlist_get_data
mono_mlist_last
mono_mlist_length
mono_mlist_next
mono_mlist_prepend
mono_mlist_remove_item
mono_mlist_set_data
mono_mlist_set_next
mono_module_file_get_object
mono_module_get_object
mono_monitor_enter
mono_monitor_enter_v4
mono_monitor_exit
mono_monitor_try_enter
mono_mprotect
mono_native_getrootdir
mono_native_thread_create
mono_native_thread_id_equals
mono_native_thread_id_get
mono_native_thread_join
mono_native_thread_set_name
mono_object_castclass_mbyref
mono_object_clone
mono_object_describe
mono_object_describe_fields
mono_object_get_class
mono_object_get_domain
mono_object_get_size
mono_object_get_virtual_method
mono_object_get_vtable
mono_object_hash
mono_object_is_alive
mono_object_isinst
mono_object_isinst_mbyref
mono_object_new
mono_object_new_alloc_specific
mono_object_new_fast
mono_object_new_from_token
mono_object_new_specific
mono_object_to_string
mono_object_unbox
mono_opcode_name
mono_opcode_value
mono_opcodes
mono_pagesize
mono_param_get_objects
mono_parse_default_optimizations
mono_parse_env_options
mono_parse_options_from
mono_path_canonicalize
mono_path_resolve_symlinks
mono_pe_file_open
mono_perfcounter_foreach
mono_perfcounters_init
mono_personality
mono_pmip
mono_poll
mono_print_method_from_ip
mono_print_thread_dump
mono_print_thread_dump_from_ctx
mono_print_unhandled_exception
mono_profiler_call_context_free_buffer
mono_profiler_call_context_get_argument
mono_profiler_call_context_get_local
mono_profiler_call_context_get_result
mono_profiler_call_context_get_this
mono_profiler_create
mono_profiler_enable_allocations
mono_profiler_enable_call_context_introspection
mono_profiler_enable_coverage
mono_profiler_enable_fileio
mono_profiler_enable_sampling
mono_profiler_get_all_coverage_data
mono_profiler_get_coverage_data
mono_profiler_get_sample_mode
mono_profiler_install
mono_profiler_install_allocation
mono_profiler_install_enter_leave
mono_profiler_install_exception
mono_profiler_install_fileio
mono_profiler_install_gc
mono_profiler_install_jit_end
mono_profiler_install_thread
mono_profiler_load
mono_profiler_reset_all_coverage
mono_profiler_reset_coverage
mono_profiler_set_assembly_loaded_callback
mono_profiler_set_assembly_loading_callback
mono_profiler_set_assembly_unloaded_callback
mono_profiler_set_assembly_unloading_callback
mono_profiler_set_call_instrumentation_filter_callback
mono_profiler_set_class_failed_callback
mono_profiler_set_class_loaded_callback
mono_profiler_set_class_loading_callback
mono_profiler_set_cleanup_callback
mono_profiler_set_context_loaded_callback
mono_profiler_set_context_unloaded_callback
mono_profiler_set_coverage_filter_callback
mono_profiler_set_domain_loaded_callback
mono_profiler_set_domain_loading_callback
mono_profiler_set_domain_name_callback
mono_profiler_set_domain_unloaded_callback
mono_profiler_set_domain_unloading_callback
mono_profiler_set_events
mono_profiler_set_exception_clause_callback
mono_profiler_set_exception_throw_callback
mono_profiler_set_fileio_callback
mono_profiler_set_gc_allocation_callback
mono_profiler_set_gc_event_callback
mono_profiler_set_gc_finalized_callback
mono_profiler_set_gc_finalized_object_callback
mono_profiler_set_gc_finalizing_callback
mono_profiler_set_gc_finalizing_object_callback
mono_profiler_set_gc_handle_created_callback
mono_profiler_set_gc_handle_deleted_callback
mono_profiler_set_gc_moves_callback
mono_profiler_set_gc_resize_callback
mono_profiler_set_gc_root_register_callback
mono_profiler_set_gc_root_unregister_callback
mono_profiler_set_gc_roots_callback
mono_profiler_set_image_failed_callback
mono_profiler_set_image_loaded_callback
mono_profiler_set_image_loading_callback
mono_profiler_set_image_unloaded_callback
mono_profiler_set_image_unloading_callback
mono_profiler_set_iomap_report_callback
mono_profiler_set_jit_begin_callback
mono_profiler_set_jit_chunk_created_callback
mono_profiler_set_jit_chunk_destroyed_callback
mono_profiler_set_jit_code_buffer_callback
mono_profiler_set_jit_done_callback
mono_profiler_set_jit_failed_callback
mono_profiler_set_method_begin_invoke_callback
mono_profiler_set_method_end_invoke_callback
mono_profiler_set_method_enter_callback
mono_profiler_set_method_exception_leave_callback
mono_profiler_set_method_free_callback
mono_profiler_set_method_leave_callback
mono_profiler_set_method_tail_call_callback
mono_profiler_set_monitor_acquired_callback
mono_profiler_set_monitor_contention_callback
mono_profiler_set_monitor_failed_callback
mono_profiler_set_runtime_initialized_callback
mono_profiler_set_runtime_shutdown_begin_callback
mono_profiler_set_runtime_shutdown_end_callback
mono_profiler_set_sample_hit_callback
mono_profiler_set_sample_mode
mono_profiler_set_thread_exited_callback
mono_profiler_set_thread_name_callback
mono_profiler_set_thread_started_callback
mono_profiler_set_thread_stopped_callback
mono_profiler_set_thread_stopping_callback
mono_profiler_set_vtable_failed_callback
mono_profiler_set_vtable_loaded_callback
mono_profiler_set_vtable_loading_callback
mono_property_get_flags
mono_property_get_get_method
mono_property_get_name
mono_property_get_object
mono_property_get_parent
mono_property_get_set_method
mono_property_get_value
mono_property_hash_destroy
mono_property_hash_insert
mono_property_hash_lookup
mono_property_hash_new
mono_property_hash_remove_object
mono_property_set_value
mono_ptr_class_get
mono_raise_exception
mono_reflection_assembly_get_assembly
mono_reflection_free_type_info
mono_reflection_get_custom_attrs
mono_reflection_get_custom_attrs_blob
mono_reflection_get_custom_attrs_by_type
mono_reflection_get_custom_attrs_data
mono_reflection_get_custom_attrs_info
mono_reflection_get_token
mono_reflection_get_type
mono_reflection_parse_type
mono_reflection_type_from_name
mono_reflection_type_get_type
mono_register_bundled_assemblies
mono_register_config_for_assembly
mono_register_machine_config
mono_register_symfile_for_assembly
mono_reraise_exception
mono_runtime_class_init
mono_runtime_cleanup
mono_runtime_delegate_invoke
mono_runtime_exec_main
mono_runtime_exec_managed_code
mono_runtime_get_main_args
mono_runtime_init
mono_runtime_invoke
mono_runtime_invoke_array
mono_runtime_is_shutting_down
mono_runtime_object_init
mono_runtime_quit
mono_runtime_resource_check_limit
mono_runtime_resource_limit
mono_runtime_resource_set_callback
mono_runtime_run_main
mono_runtime_set_main_args
mono_runtime_set_shutting_down
mono_runtime_unhandled_exception_policy_set
mono_security_core_clr_get_options
mono_security_core_clr_require_elevated_permissions
mono_security_core_clr_set_options
mono_security_enable_core_clr
mono_security_set_core_clr_platform_callback
mono_security_set_mode
mono_set_allocator_vtable
mono_set_assemblies_path
mono_set_assemblies_path_null_separated
mono_set_break_policy
mono_set_config_dir
mono_set_crash_chaining
mono_set_defaults
mono_set_dirs
mono_set_find_plugin_callback
mono_set_is_debugger_attached
mono_set_rootdir
mono_set_signal_chaining
mono_sha1_final
mono_sha1_get_digest
mono_sha1_get_digest_from_file
mono_sha1_init
mono_sha1_update
mono_shared_area
mono_shared_area_for_pid
mono_shared_area_instances
mono_shared_area_remove
mono_shared_area_unload
mono_signature_explicit_this
mono_signature_full_name
mono_signature_get_call_conv
mono_signature_get_desc
mono_signature_get_param_count
mono_signature_get_params
mono_signature_get_return_type
mono_signature_hash
mono_signature_is_instance
mono_signature_param_is_out
mono_signature_vararg_start
mono_signbit_double
mono_signbit_float
mono_stack_walk
mono_stack_walk_async_safe
mono_stack_walk_no_il
mono_store_remote_field
mono_store_remote_field_new
mono_string_chars
mono_string_empty
mono_string_empty_wrapper
mono_string_equal
mono_string_from_bstr
mono_string_from_utf16
mono_string_from_utf32
mono_string_hash
mono_string_intern
mono_string_is_interned
mono_string_length
mono_string_new
mono_string_new_len
mono_string_new_size
mono_string_new_utf16
mono_string_new_utf32
mono_string_new_wrapper
mono_string_to_utf16
mono_string_to_utf32
mono_string_to_utf8
mono_string_to_utf8_checked
mono_stringify_assembly_name
mono_table_info_get_rows
mono_thread_attach
mono_thread_cleanup
mono_thread_create
mono_thread_current
mono_thread_detach
mono_thread_detach_if_exiting
mono_thread_exit
mono_thread_get_main
mono_thread_get_managed_id
mono_thread_get_name_utf8
mono_thread_get_undeniable_exception
mono_thread_hazardous_queue_free
mono_thread_hazardous_try_free
mono_thread_hazardous_try_free_all
mono_thread_info_detach
mono_thread_info_get_small_id
mono_thread_info_register_small_id
mono_thread_info_yield
mono_thread_init
mono_thread_is_foreign
mono_thread_manage
mono_thread_new_init
mono_thread_pool_cleanup
mono_thread_pop_appdomain_ref
mono_thread_push_appdomain_ref
mono_thread_set_main
mono_thread_set_manage_callback
mono_thread_stop
mono_thread_suspend_all_other_threads
mono_threads_assert_gc_safe_region
mono_threads_assert_gc_unsafe_region
mono_threads_attach_coop
mono_threads_attach_tools_thread
mono_threads_detach_coop
mono_threads_enter_gc_safe_region
mono_threads_enter_gc_safe_region_unbalanced
mono_threads_enter_gc_unsafe_region
mono_threads_enter_gc_unsafe_region_unbalanced
mono_threads_exit_gc_safe_region
mono_threads_exit_gc_safe_region_unbalanced
mono_threads_exit_gc_unsafe_region
mono_threads_exit_gc_unsafe_region_unbalanced
mono_threads_get_default_stacksize
mono_threads_request_thread_dump
mono_threads_set_default_stacksize
mono_threads_set_shutting_down
mono_trace_init
mono_trace_set_level_string
mono_trace_set_log_handler
mono_trace_set_mask_string
mono_trace_set_print_handler
mono_trace_set_printerr_handler
mono_tracev_inner
mono_type_create_from_typespec
mono_type_full_name
mono_type_generic_inst_is_valuetype
mono_type_get_array_type
mono_type_get_attrs
mono_type_get_class
mono_type_get_desc
mono_type_get_modifiers
mono_type_get_name
mono_type_get_name_full
mono_type_get_object
mono_type_get_ptr_type
mono_type_get_signature
mono_type_get_type
mono_type_get_underlying_type
mono_type_is_byref
mono_type_is_pointer
mono_type_is_primitive
mono_type_is_reference
mono_type_is_struct
mono_type_is_valid_enum_basetype
mono_type_is_void
mono_type_size
mono_type_stack_size
mono_type_to_unmanaged
mono_unhandled_exception
mono_unicode_from_external
mono_unicode_to_external
mono_unity_alloc
mono_unity_allocation_granularity
mono_unity_array_new_2d
mono_unity_array_new_3d
mono_unity_array_object_header_size
mono_unity_assembly_mempool_chunk_foreach
mono_unity_backtrace_from_context
mono_unity_capture_memory_snapshot
mono_unity_class_field_is_literal
mono_unity_class_for_each
mono_unity_class_get
mono_unity_class_get_data_size
mono_unity_class_get_generic_argument_at
mono_unity_class_get_generic_argument_count
mono_unity_class_get_generic_parameter_at
mono_unity_class_get_generic_parameter_count
mono_unity_class_get_generic_type_definition
mono_unity_class_is_abstract
mono_unity_class_is_interface
mono_unity_class_try_get_vtable
mono_unity_domain_mempool_chunk_foreach
mono_unity_domain_set_config
mono_unity_domain_unload
mono_unity_free_captured_memory_snapshot
mono_unity_g_free
mono_unity_gc_disable
mono_unity_gc_enable
mono_unity_gc_handles_foreach_get_target
mono_unity_gc_heap_foreach
mono_unity_gc_is_disabled
mono_unity_get_data_dir
mono_unity_get_unitytls_interface
mono_unity_image_set_mempool_chunk_foreach
mono_unity_install_memory_callbacks
mono_unity_install_unitytls_interface
mono_unity_jit_cleanup
mono_unity_liveness_allocate_struct
mono_unity_liveness_calculation_begin
mono_unity_liveness_calculation_end
mono_unity_liveness_calculation_from_root
mono_unity_liveness_calculation_from_statics
mono_unity_liveness_finalize
mono_unity_liveness_free_struct
mono_unity_liveness_start_gc_world
mono_unity_liveness_stop_gc_world
mono_unity_loader_get_last_error_and_error_prepare_exception
mono_unity_lock_dynamic_function_access_tables64
mono_unity_object_header_size
mono_unity_offset_of_array_bounds_in_array_object_header
mono_unity_offset_of_array_length_in_array_object_header
mono_unity_oop_get_dynamic_function_access_table64
mono_unity_oop_get_stack_frame_details
mono_unity_oop_init
mono_unity_oop_iterate_dynamic_function_access_tables64
mono_unity_oop_shutdown
mono_unity_register_path_remapper
mono_unity_root_domain_mempool_chunk_foreach
mono_unity_runtime_set_main_args
mono_unity_set_data_dir
mono_unity_set_embeddinghostname
mono_unity_set_enable_handler_block_guards
mono_unity_set_vprintf_func
mono_unity_socket_security_enabled_set
mono_unity_start_gc_world
mono_unity_stop_gc_world
mono_unity_string_empty_wrapper
mono_unity_thread_fast_attach
mono_unity_thread_fast_detach
mono_unity_type_get_name_full_chunked
mono_unity_type_is_pointer_type
mono_unity_type_is_static
mono_unity_unlock_dynamic_function_access_tables64
mono_unity_vtable_get_static_field_data
mono_upgrade_remote_class_wrapper
mono_use_interpreter
mono_use_llvm
mono_utf8_from_external
mono_utf8_validate_and_len
mono_utf8_validate_and_len_with_bounds
mono_valloc
mono_valloc_aligned
mono_valloc_granule
mono_value_box
mono_value_copy
mono_value_copy_array
mono_value_describe_fields
mono_verifier_set_mode
mono_verify_corlib
mono_vfree
mono_vtable_class
mono_vtable_domain
mono_vtable_get_static_field_data
mono_win32_compat_CopyMemory
mono_win32_compat_FillMemory
mono_win32_compat_MoveMemory
mono_win32_compat_ZeroMemory
unity_mono_method_is_generic
unity_mono_method_is_inflated
unity_mono_reflection_method_get_method
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
372B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=241, version=40116,
count=193, id=243, version=40116,
count=48, id=242, version=40116,
count=9, id=199, version=41118,
count=8, id=259, version=24123,
count=20, id=261, version=24123,
count=20, id=260, version=24123,
count=1, id=208, version=65501,
count=21, id=203, version=65501,
count=313, id=1, productName=Unmarked objects,
count=1, id=259, version=24234,
count=245, id=260, version=24234,
count=1, id=256, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/machine.config
- SHA256 edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce
- MD5 cad24142abba464dd90777c3d347ef88
- SHA1 d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12
- SHA512 5d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454
- SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/y4RpQXWBE43g:DuY
- TLSH T11ED203703609BDAE494227235C54FA8046BF57196BA86D0CB5FF625CFE2688BD3032D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/settings.map
- SHA256 49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2
- MD5 22c818a23169e12bd3c8587b6394c731
- SHA1 dd2be2dbccd34736719301aee92429d4258ea5a0
- SHA512 c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7
- TLSH T1D3511138F708B5F50682052EA45A94D243B6023FA779495C71ECC13D6F2684B83B32DD
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/2.0/web.config
- SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
- MD5 2b6303c4f12762b71051db6e947f90a4
- SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
- SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
- SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
- TLSH T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/machine.config
- SHA256 6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664
- MD5 24c866ce8037fcdca2287234eddff637
- SHA1 9245befcd116458e9619694f1a785c50fa61b58e
- SHA512 f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtBDRp5Rt70gRt2RtTf1RDRty6ugyunHMSeuWuGR0:7Kn
- TLSH T1FAE2F0703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/settings.map
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.0/web.config
- SHA256 f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31
- MD5 b127480ee9f0b8dab6a3f73ad79dd332
- SHA1 7d776d730cbd253564713f36573dd8366782788c
- SHA512 00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwahst/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJX91Xbi
- TLSH T1E1820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/machine.config
- SHA256 ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
- MD5 0869544722561f5aff0eefc83fc7b001
- SHA1 1e118f4b5c1c6a7b1858e3fccb1b1d1095561976
- SHA512 ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn
- TLSH T13CE2F1703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/settings.map
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/4.5/web.config
- SHA256 15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb
- MD5 08101241b15b53ef0ab908f6d388881f
- SHA1 ea3e2ad6d71d483c54b12852dcbdcd0baa569988
- SHA512 a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwa6st/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJi91Xbi
- TLSH T14D820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/browscap.ini
- SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
- MD5 378be809df7d15aac75a175693e25fbb
- SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
- SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
- SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
- TLSH T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/config
- SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
- MD5 d9bc824737177af5792846f26507231c
- SHA1 c44835e4881d95a97b597bebff5deba0233a5887
- SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
- TLSH T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/MonoBleedingEdge/etc/mono/mconfig/config.xml
- SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
- MD5 f34b330f20dce1bdcce9058fca287099
- SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
- SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
- SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
- TLSH T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/UnityCrashHandler64.exe
- IMPHASH 4c171eb95098a673298b5922d38b1833
- SHA256 1b93991db0023cce4e2f6abb0fdcaa0073f9c3a2d01176995ebc8bcf00a59e99
- MD5 c6abc9d80a19a7847be4b8871cd9bd9e
- SHA1 9d6325fd8fae0acad3424c9881ebaa66dbcb48df
- SHA512 7acfbf2a703201c945acd658c3e298e4027822fc5aef5d7e32ca60b341aed35a7a50f00c268e78d64b5ce9e9976ddda5bfd51c479065ee2a5d85406681e643e7
- SSDEEP 12288:Z+tBorZZPWqHE9chovpJ9DxBU7epbTDqo9+nCkuT:Z+Lo1ZPWheovpDX0abTDqyT
- TLSH T112356B6A6BA405F8D5779139C952890FF6B27C0607609ADF03A0736B2F376E51E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
68:ab:b2:ae:ac:8f:84:93:15:7d:8b:46:5d:34:74:d9:e7:36:75:69
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
Chains
Aug 18, 2020
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
Serial Number
03:88:3b:fb:88:38:ac:27:c4:5b:74:c5:0f:42:b2:5b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 11, 2018 - Jul 10, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Minor OS version
0
Major OS version
6
Entry point
256192
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildslave\unity\build\artifacts\UnityCrashHandler\release_win64\UnityCrashHandler64.pdb
user32
SetWindowPos
OffsetRect
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
UnionRect
InflateRect
AdjustWindowRect
SendMessageW
DialogBoxParamA
SetWindowTextW
EndDialog
GetDlgItem
SendDlgItemMessageA
GetWindowLongA
LoadImageA
GetIconInfo
SetForegroundWindow
kernel32
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
FreeLibraryAndExitThread
CloseHandle
RaiseException
GetCurrentThread
OpenThread
GetThreadTimes
GetModuleHandleA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
SwitchToThread
CreateThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
VerSetConditionMask
FreeLibrary
GetModuleFileNameA
GetModuleHandleW
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
GetCurrentDirectoryA
GetFileAttributesA
OutputDebugStringA
GetLastError
SetLastError
WaitForSingleObject
CreateEventW
GetCurrentProcess
GetCurrentProcessId
SuspendThread
ResumeThread
GetThreadContext
ReadProcessMemory
InterlockedPopEntrySList
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
SetEvent
WaitForMultipleObjectsEx
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetProcessId
GetThreadId
OpenProcess
GetStdHandle
CreateFileW
DeleteFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileSize
ReadFile
GetTempPathW
GetSystemTime
GetSystemTimeAsFileTime
CopyFileExW
AllocConsole
SetErrorMode
GetCommandLineW
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetFileTime
WriteFile
InitializeCriticalSection
CreateEventA
TerminateThread
GetExitCodeThread
GlobalMemoryStatusEx
GetSystemInfo
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LoadLibraryW
FileTimeToDosDateTime
lstrlenA
FindResourceA
EnumResourceNamesA
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
TlsAlloc
TlsFree
VirtualAlloc
VirtualFree
GetModuleFileNameW
SetFilePointerEx
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
RtlPcToFileHeader
GetLocaleInfoW
QueryDepthSList
UnregisterWaitEx
LCMapStringW
CompareStringW
GetTickCount
TlsSetValue
TlsGetValue
DecodePointer
EncodePointer
GetCPInfo
LocalFree
VirtualQueryEx
DuplicateHandle
GetStringTypeW
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
dbghelp
SymRegisterFunctionEntryCallback64
SymLoadModuleEx
shell32
CommandLineToArgvW
SHCreateDirectoryExW
ole32
CoCreateGuid
CoTaskMemFree
CoInitializeEx
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
GetPerformanceInfo
advapi32
GetUserNameW
GetUserNameA
wininet
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
gdi32
GetObjectA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeW
Name
.text
Size
508KB
Virtual Size
508KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
327KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=260, version=25711,
count=13, id=259, version=25711,
count=178, id=261, version=25711,
count=1, id=199, version=41118,
count=122, id=261, version=26706,
count=38, id=260, version=26706,
count=9, id=259, version=26706,
count=1, id=262, version=25711,
count=25, id=257, version=25711,
count=251, id=1, productName=Unmarked objects,
count=9, id=260, version=27012,
count=28, id=261, version=27012,
count=1, id=255, version=27012,
count=1, id=258, version=27012,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/UnityPlayer.dll
- IMPHASH a5d993926ca6e22ca4d422310f1632f5
- SHA256 0d1c5b318c1e77cbb845b77b65e7bcd5bd86248467267e1f02ea5d0e1d10de2f
- MD5 dbaa12e5dc1b1b540061e6afa73bb289
- SHA1 17bb21124b704aaf409e80ebdf6c8d61646f6eb7
- SHA512 cace47777c466c54d1c7a23d498dc7b1bd7b95cf7a93a506f89d4cd382e087ffe2b788489b4bae7762c1ce506b5843dc80978ab0c92f71ad0b4e70ca3e7b3d59
- SSDEEP 393216:VJ+MxkpGys/97ZA4Gp3PIgJOhYEtrRwM+D7:Vu5aJbTwM+3
- TLSH T1D3479D9A62F840D8C83BE038D65BA91BF7B1344A03309ADB12E106596F73BF15A7F751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
15:c6:21:83:69:32:1c:82:64:74:b6:d2:42:28:b1:ba:1c:c0:32:a4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
Chains
Aug 18, 2020
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Unity Technologies Aps,OU=Core Developer Services,O=Unity Technologies Aps,L=København K,C=DK
Serial Number
03:88:3b:fb:88:38:ac:27:c4:5b:74:c5:0f:42:b2:5b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 11, 2018 - Jul 10, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Minor OS version
0
Major OS version
6
Entry point
20665352
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\buildslave\unity\build\artifacts\UnityPlayer\Win64_nondev_m_r\UnityPlayer_Win64_mono_x64.pdb
kernel32
SetFilePointer
SetFilePointerEx
SetFileTime
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
LocalFree
FormatMessageW
CopyFileW
MoveFileExW
ReplaceFileW
SystemTimeToFileTime
Thread32First
Thread32Next
CreateMutexA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesA
DebugBreak
SetUnhandledExceptionFilter
SetLastError
GetErrorMode
TerminateProcess
CreateThread
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
LocalAlloc
GetOverlappedResult
CancelIo
ResetEvent
GetTickCount
GetStartupInfoA
SetConsoleCtrlHandler
GetSystemInfo
SetDllDirectoryW
SleepEx
RaiseException
GetThreadTimes
SwitchToThread
SetThreadPriority
GetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GetWindowsDirectoryW
CreateIoCompletionPort
GetQueuedCompletionStatus
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
ReleaseSemaphore
GetLocalTime
GetTimeZoneInformation
IsDebuggerPresent
CreateSemaphoreExW
TlsAlloc
TlsFree
GetNativeSystemInfo
VirtualQuery
GetFileSize
GetSystemPowerStatus
GetComputerNameW
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessId
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
CreateEventW
WriteConsoleW
SetEnvironmentVariableW
GetTempFileNameW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetEndOfFile
SetConsoleMode
SetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
HeapFree
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
ReadConsoleW
GetConsoleMode
GetConsoleCP
HeapQueryInformation
HeapSize
HeapReAlloc
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
GetVersionExW
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
DuplicateHandle
VerifyVersionInfoA
ExpandEnvironmentStringsA
InitializeCriticalSectionEx
GetTickCount64
GlobalMemoryStatus
GetFileType
ExitThread
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
CreateWaitableTimerA
SetWaitableTimer
OpenEventA
ReadConsoleInputW
FlushConsoleInputBuffer
SetThreadAffinityMask
GetStdHandle
CreatePipe
SetHandleInformation
OutputDebugStringA
GetTempPathW
WriteFile
FlushFileBuffers
CreateFileA
GetFullPathNameW
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
GetSystemTime
GlobalLock
SetFileAttributesW
RemoveDirectoryW
GetCommandLineW
GetLogicalProcessorInformationEx
GetSystemDirectoryA
ReadFile
RtlUnwind
GlobalUnlock
GlobalAlloc
CreateToolhelp32Snapshot
GetUserDefaultLocaleName
FreeEnvironmentStringsW
GlobalMemoryStatusEx
SetErrorMode
LoadLibraryExW
GetCurrentThread
GetCurrentProcess
GetLastError
GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
Sleep
CreateEventA
WaitForSingleObjectEx
VerifyVersionInfoW
CloseHandle
CreateEventExW
WaitForMultipleObjectsEx
SetEvent
VerSetConditionMask
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
TlsSetValue
TlsGetValue
user32
EnumDisplaySettingsA
GetCaretBlinkTime
DestroyWindow
CreateWindowExW
ShowWindow
UpdateWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
ReleaseDC
AllowSetForegroundWindow
TrackMouseEvent
OpenClipboard
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetSystemMetrics
GetDC
SetCursor
EnumDisplaySettingsW
SetWindowLongA
AdjustWindowRectEx
GetWindowPlacement
MsgWaitForMultipleObjects
EnumDisplayMonitors
GetMonitorInfoW
GetMonitorInfoA
MonitorFromRect
LoadCursorA
DestroyCursor
DestroyIcon
CreateIconIndirect
DefWindowProcW
SetWindowPos
GetClientRect
GetWindowRect
ScreenToClient
GetWindowLongA
SetWindowLongPtrA
GetParent
GetThreadDesktop
GetUserObjectInformationA
RegisterWindowMessageA
SendMessageTimeoutA
IsIconic
SetForegroundWindow
EnumWindows
UnregisterClassW
RegisterClassExW
DialogBoxParamW
EndDialog
SetDlgItemTextA
SetDlgItemTextW
SendDlgItemMessageW
MessageBoxA
CopyRect
OffsetRect
LoadIconA
GetKeyboardLayoutNameW
TranslateMessage
DispatchMessageA
GetMessagePos
GetMessageTime
GetMessageExtraInfo
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetDoubleClickTime
IsWindowVisible
GetKeyState
GetAsyncKeyState
GetKeyNameTextW
SetCapture
ReleaseCapture
SetWindowLongPtrW
GetWindowLongPtrW
SetCursorPos
ShowCursor
SetWindowTextW
ValidateRect
DragDetect
KillTimer
SetTimer
GetFocus
GetActiveWindow
SetFocus
RegisterClassW
PostQuitMessage
SendMessageW
PeekMessageA
GetMessageA
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputData
SystemParametersInfoW
PtInRect
ClientToScreen
GetCursorPos
ClipCursor
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
ole32
CoCreateFreeThreadedMarshaler
CoInitialize
CoUninitialize
PropVariantCopy
PropVariantClear
CoTaskMemAlloc
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
shlwapi
PathCanonicalizeW
PathFileExistsW
SHDeleteKeyW
setupapi
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
advapi32
CryptImportKey
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyW
GetUserNameA
GetTokenInformation
GetSidSubAuthority
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
CryptGetHashParam
CryptEncrypt
gdi32
DeleteObject
CreateDIBSection
ChoosePixelFormat
SetPixelFormat
GetDeviceCaps
CreateBitmap
SwapBuffers
shell32
SHGetFolderPathW
CommandLineToArgvW
SHFileOperationW
ShellExecuteW
opengl32
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglMakeCurrent
wglGetProcAddress
wglGetCurrentDC
winmm
waveOutGetPosition
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveInGetNumDevs
waveOutOpen
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetTime
timeBeginPeriod
waveInGetDevCapsA
waveInOpen
waveInGetDevCapsW
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInReset
waveInStart
waveOutClose
timeEndPeriod
oleaut32
VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString
imm32
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetConversionStatus
ImmSetOpenStatus
ImmGetContext
winhttp
WinHttpGetIEProxyConfigForCurrentUser
bcrypt
BCryptGenRandom
hid
HidP_SetUsageValue
HidP_SetUsages
HidP_GetData
HidP_MaxDataListLength
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetAttributes
crypt32
CertCloseStore
CertFreeCertificateContext
CertAddEncodedCertificateToStore
CertGetCertificateChain
CertOpenStore
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
ws2_32
WSASocketA
WSAGetLastError
WSASetLastError
send
select
recv
ntohs
listen
inet_addr
htons
getsockname
ioctlsocket
connect
closesocket
bind
accept
recvfrom
sendto
setsockopt
shutdown
socket
gethostname
WSAStartup
WSACleanup
getsockopt
WSASendDisconnect
gethostbyaddr
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSASetEvent
WSAResetEvent
__WSAFDIsSet
WSAIoctl
getaddrinfo
WSAEventSelect
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketW
WSACreateEvent
WSACloseEvent
WSARecvFrom
htonl
freeaddrinfo
getnameinfo
ntohl
getpeername
gethostbyname
getprotobyname
UnityMain
Name
.text
Size
20.1MB
Virtual Size
20.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
252KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1009KB
Virtual Size
1008KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rodata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=259, version=25711,
count=31, id=259, version=26706,
count=37, id=260, version=26706,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=111, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=542, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=123, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=173, version=30319,
count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=219, id=261, version=25711,
count=2, id=262, version=25711,
count=62, id=260, version=25711,
count=39, id=257, version=25711,
count=550, id=1, productName=Unmarked objects,
count=7, id=199, version=41118,
count=120, id=261, version=26706,
count=265, id=260, version=27012,
count=59, productName=Unmarked objects (old),
count=778, id=261, version=27012,
count=1, id=256, version=27012,
count=1, id=255, version=27012,
count=1, id=258, version=27012,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dxwebsetup.exe
- IMPHASH 1494de9b53e05fc1f40cb92afbdd6ce4
- SHA256 111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
- MD5 fd6057b33e15a553ddc5d9873723ce8f
- SHA1 f90efb623b5abea70af63c470daa8674444fb1df
- SHA512 d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
- SSDEEP 6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
- TLSH T1F154F11267D9853BE0F56B705DF341236B75BCA15E7AF32E5246A88C0C32784B83A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
23134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
239KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/oalinst.exe
- IMPHASH 1ff011c2e13ea492fe69b2fbfc802083
- SHA256 b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- MD5 694f54bd227916b89fc3eb1db53f0685
- SHA1 21fdc367291bbef14dac27925cae698d3928eead
- SHA512 55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP 12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
- TLSH T1E005F10020D5CC73E4EB32B3843586746EBA7E912F0A285B7FC476AEE673176DA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Chains
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Serial Number
36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 30, 2006 - Jul 14, 2009
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
61:0c:12:06:00:00:00:00:00:1b
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 23, 2006 - May 23, 2016
Minor OS version
0
Major OS version
4
Entry point
27713
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary
user32
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
636KB
Virtual Size
633KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Fun.With.Ragdolls.The.Game.v2.0.3/Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x86.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8
- MD5 b88228d5fef4b6dc019d69d4471f23ec
- SHA1 372d9c1670343d3fb252209ba210d4dc4d67d358
- SHA512 cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8
- SSDEEP 98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0
- TLSH T1D3363341B7A660F9D20778B256377FDB1C28C2CC7B28130AA365E5E87ADB7C08355798
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4.8MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Fun.With.Ragdolls.The.Game.v2.0.3/HOW TO RUN GAME!!.txt
- SHA256 85217c339fb09dec4d6f739e7334a6c19376875438620788dd6f285ab0624f6e
- MD5 50db411d036173b2a34f22966f60d36d
- SHA1 7e21bd300113bae3f19a9236dca43043bd8ae418
- SHA512 d9b08584ddb2b4e6614aa6568e75be346d5e44af16f17feff9fe13fdb4376ba068c9f68fc6e8ca83f439531e7e25a6f1cceab9af54ce0280267b723f2f804605
- TLSH T165E07D6EE8420B632EF044E6518E2E88BA0CD41D737010487C7783AA4315779F138DF4
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
- SHA256 677d2e85447eea64fa541b8e8a9e92b41e20456360bef8642f898e7eb1b2f0db
- MD5 92672216743fd0ad8799d25ec99e5096
- SHA1 68103be0fa83db8a4a2efac6bb6169ce959a0290
- SHA512 1ca286141902e64c4cac05fabc1ce0ef4d910582e720c8b38f3cf2799cadaab7cbc9d8fc925eff17e0d3280d5d074ebd856dc75d6cadbd95872cae14eddb7719
- TLSH T1299002574119C05D9316084C8411955689426199456AC4A4D241DF0D5D8B1589AE4708
- MD5 SHA1 SHA512 TLSH
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dotNetFx40_Full_setup.exe
- IMPHASH 02483cd76378259a50b7b66146b45f06
- SHA256 fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425
- MD5 53406e9988306cbd4537677c5336aba4
- SHA1 06becadb92a5fcca2529c0b93687c2a0c6d0d610
- SHA512 4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99
- SSDEEP 24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD
- TLSH T1F2151232ABA0C133D4DB28B48ADDB6B2657DE6610374C4C7B7440BEEAC307D1697964B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
102854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
boxstub.pdb
advapi32
CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA
kernel32
Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException
comctl32
ord17
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
shlwapi
PathRemoveExtensionW
user32
MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW
cabinet
ord22
ord23
ord20
oleaut32
SysAllocString
VariantClear
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boxld01
Size
512B
Virtual Size
194B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=158, version=20928,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=171, version=21009,
count=18, id=158, version=21009,
count=105, id=170, version=21009,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=194, id=1, productName=Unmarked objects,
count=69, id=175, version=20928,
count=1, id=171, version=20928,
count=1, id=155, version=20928,
count=1, id=154, version=20928,
count=1, id=157, version=20928,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/dxwebsetup.exe
- IMPHASH 1494de9b53e05fc1f40cb92afbdd6ce4
- SHA256 111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
- MD5 fd6057b33e15a553ddc5d9873723ce8f
- SHA1 f90efb623b5abea70af63c470daa8674444fb1df
- SHA512 d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
- SSDEEP 6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
- TLSH T1F154F11267D9853BE0F56B705DF341236B75BCA15E7AF32E5246A88C0C32784B83A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
23134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
239KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/oalinst.exe
- IMPHASH 1ff011c2e13ea492fe69b2fbfc802083
- SHA256 b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- MD5 694f54bd227916b89fc3eb1db53f0685
- SHA1 21fdc367291bbef14dac27925cae698d3928eead
- SHA512 55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP 12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
- TLSH T1E005F10020D5CC73E4EB32B3843586746EBA7E912F0A285B7FC476AEE673176DA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Chains
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Serial Number
36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 30, 2006 - Jul 14, 2009
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
61:0c:12:06:00:00:00:00:00:1b
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 23, 2006 - May 23, 2016
Minor OS version
0
Major OS version
4
Entry point
27713
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary
user32
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
636KB
Virtual Size
633KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_2015-2019_x64.exe
- IMPHASH 1a5cdbf711fee14b077e599d13fddab2
- SHA256 b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
- MD5 f0248d477e74687c5619ae16498b13d4
- SHA1 9ed4b091148c9b53f66b3f2c69be7e60e74c486a
- SHA512 0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
- SSDEEP 393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
- TLSH T1AFE63332A598402BDBF20473EA94F9242E3DD119735589BBE2DCDD0E1F7818217FBA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 8, 2019 - Jan 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:13:b3:70:87:3d:fa:f0:c8:24:00:00:00:00:01:13
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
188525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
294KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_2015-2019_x86.exe
- IMPHASH 1a5cdbf711fee14b077e599d13fddab2
- SHA256 ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6
- MD5 de34b1c517e0463602624bbc8294c08d
- SHA1 5ce7923ffea712468c05e7ac376dd9c29ea9f6be
- SHA512 114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac
- SSDEEP 393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9
- TLSH T134E633326554402AEBF20573AAA4F5342E7DE62D230449AEE3DCEC0D2FB919357F7612
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:0b:e4:f9:be:8f:6f:4c:1d:d0:00:00:00:00:01:0b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
188525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
294KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x64.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 b06546ddc8ca1e3d532f3f2593e88a6f49e81b66a9c2051d58508cc97b6a2023
- MD5 630d75210b325a280c3352f879297ed5
- SHA1 b330b760a8f16d5a31c2dc815627f5eb40861008
- SHA512 b6e107fa34764d336c9b59802c858845df9f8661a1beb41436fd638a044580557921e69883ed32737f853e203f0083358f642f3efe0a80fae7932c5e6137331f
- SSDEEP 98304:EuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:V7wqheSVYK/bua/BlWWnuVhsus8nm+qi
- TLSH T19A4633229343E243EC97FEB8E16E484FDD65C2B31736D6677326848D9D3DB1848A0399
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5.4MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/vcredist_x86.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8
- MD5 b88228d5fef4b6dc019d69d4471f23ec
- SHA1 372d9c1670343d3fb252209ba210d4dc4d67d358
- SHA512 cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8
- SSDEEP 98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0
- TLSH T1D3363341B7A660F9D20778B256377FDB1C28C2CC7B28130AA365E5E87ADB7C08355798
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4.8MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Fun.With.Ragdolls.The.Game.v2.0.3/_Redist/xnafx40_redist.msi
- SHA256 e6c41d692ebcba854dad4b1c52bb7ddd05926bad3105595d6596b8bab01c25e7
- MD5 97c2eebb30c5a88c68c8f24f37183f1d
- SHA1 49efdc29f65fc8263c196338552c7009fc96c5de
- SHA512 c9d1017b274ceb1b4ee624cf7e628787c32a727c64f715fbce1f1ae929d9114f8fe1291e34583cec615619b0128c01206b07efc878e7a5c57b792453f73fd0da
- SSDEEP 98304:wynfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:wYD3C1XXfzH+4cLHU5PM/Mnt+YGlq
- TLSH T1906622A2751AFF41DDF406BCE970CA490925CF3782270C686929356A7BF7E1202E9D4F
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
e047394a41c0b78705eac1f84562a953cc3f8361
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:08:77:5f:00:00:00:00:00:4a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 19, 2010 - Oct 19, 2011
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:04:b3:f5:00:00:00:00:00:0d
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2011
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017