Bootsrappper-9.999.zip
- SHA256 02c185448e1eac964729d8430483032d79937254e6857d69422c720d80bd3f9b
Password
bluys
Overview
overview
10Static
static
5Bootstrapp...er.exe
windows10-2004-x64
10Bootstrapp...che.js
windows10-2004-x64
3Bootstrapp...che.js
windows11-21h2-x64
3Bootstrapp...nt.dll
windows10-2004-x64
10Bootstrapp...nt.dll
windows11-21h2-x64
10Bootstrapp...ng.dll
windows10-2004-x64
3Bootstrapp...ng.dll
windows11-21h2-x64
3Bootstrapp...ng.dll
windows10-2004-x64
3Bootstrapp...ng.dll
windows11-21h2-x64
3Bootstrapp...ng.dll
windows10-2004-x64
3Bootstrapp...ng.dll
windows11-21h2-x64
3Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
BootstrapperNET/Bootsrappper.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
BootstrapperNET/Workspace/373f5d42922fa6b5ac57adbb41b8015f-cache.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
BootstrapperNET/Workspace/373f5d42922fa6b5ac57adbb41b8015f-cache.js
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
BootstrapperNET/mpclient.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
BootstrapperNET/mpclient.dll
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target Bootsrappper-9.999.zip
- Size 6.5MB
- Sample260608-qgercaex3s
- SHA256 02c185448e1eac964729d8430483032d79937254e6857d69422c720d80bd3f9b
- MD5 5c9e7a5d56c54019bf2a2ffc9614a88b
- SHA1 f9c3d69145cd0fe1ad2e0a3118f7988a79e3ce15
- SHA512 c26af2d3efa3f9393be07301c5439ccbe8b46f460b83cf0a65cca29b7f7c7d274fe77f2eb8f8227f0ebf8803b725680cf91c5d83113f4ac92c18281439a85248
- SSDEEP 98304:8OhREnQKuR0p/z5X+1vioooh+qdtGrEDfs2D0ExxIVbP9KSs7KoX6v9UfLCHrxs2:lzKuR0p/k1vd5Df10EotPA3Kou9UTCLr
- TLSH T183663375077100CEE3E8617D96278156AEE5EE3B740C3ADB9D5A46B44B009D3A23AECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- DLL Hijacking vulnerability 1 IoCs
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
resource unpack001/BootstrapperNET/mpclient.dll - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/BootstrapperNET/runtimes/app.asar.unpacked/node_modules/btime/binding.node unpack001/BootstrapperNET/runtimes/app.asar.unpacked/node_modules/get-fonts/binding.node unpack001/BootstrapperNET/runtimes/app.asar.unpacked/node_modules/vibrancy-win/binding.node - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/BootstrapperNET/mpclient.dll
File Explorer
-
Bootsrappper-9.999.zip.zip 6.5MB
-
BootstrapperNET/Bootsrappper.exe.exe 683KB
-
BootstrapperNET/Scripts/th.pak704KB
-
BootstrapperNET/Workspace/.tests/appendfile.txt7B
-
BootstrapperNET/Workspace/.tests/getcustomasset.txt7B
-
BootstrapperNET/Workspace/.tests/isfile.txt7B
-
BootstrapperNET/Workspace/.tests/listfiles/test_1.txt7B
-
BootstrapperNET/Workspace/.tests/listfiles/test_2.txt7B
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/af.pak327KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sk.pak383KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sl.pak369KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sr.pak572KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sv.pak334KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sw.pak351KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/ta.pak899KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/te.pak836KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/th.pak704KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/tr.pak357KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/uk.pak605KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/ur.pak532KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/vi.pak424KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/zh-CN.pak308KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/zh-TW.pak305KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/af.pak327KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sk.pak383KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sl.pak369KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sr.pak572KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sv.pak334KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/tr.pak357KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/ur.pak532KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/vi.pak424KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/zh-CN.pak308KB
-
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/zh-TW.pak305KB
-
BootstrapperNET/Workspace/.tests/loadfile.txt1B
-
BootstrapperNET/Workspace/.tests/readfile.txt7B
-
BootstrapperNET/Workspace/.tests/writefile7B
-
BootstrapperNET/Workspace/.tests/writefile.txt7B
-
BootstrapperNET/Workspace/373f5d42922fa6b5ac57adbb41b8015f-cache.lua.js 327KB
-
BootstrapperNET/Workspace/IY_FE.iy552B
-
BootstrapperNET/Workspace/RiftAssets/Gradient.png.png 56KB
-
BootstrapperNET/Workspace/RiftAssets/IconSprite.png.png 236KB
-
BootstrapperNET/Workspace/RiftAssets/Logo.png.png 35KB
-
BootstrapperNET/Workspace/RiftAssets/SavedKey.txt32B
-
BootstrapperNET/Workspace/RiftAssets/Tiles.png472B
-
BootstrapperNET/Workspace/_orca/options.json91B
-
BootstrapperNET/Workspace/dex/assets/af.pak327KB
-
BootstrapperNET/Workspace/dex/assets/sk.pak383KB
-
BootstrapperNET/Workspace/dex/assets/sl.pak369KB
-
BootstrapperNET/Workspace/dex/assets/sv.pak334KB
-
BootstrapperNET/Workspace/dex/assets/sw.pak351KB
-
BootstrapperNET/Workspace/dex/assets/tr.pak357KB
-
BootstrapperNET/Workspace/dex/assets/zh-TW.pak305KB
-
BootstrapperNET/Workspace/dex/deps_version.dat40B
-
BootstrapperNET/Workspace/dex/rbx_api.dat3.9MB
-
BootstrapperNET/Workspace/dex/rbx_rmd.dat403KB
-
BootstrapperNET/Workspace/infiniteyield/assets/bindsandplugins.png.png 212KB
-
BootstrapperNET/Workspace/infiniteyield/assets/close.png.png 232B
-
BootstrapperNET/Workspace/infiniteyield/assets/editaliases.png.png 236B
-
BootstrapperNET/Workspace/infiniteyield/assets/editkeybinds.png.png 6KB
-
BootstrapperNET/Workspace/infiniteyield/assets/edittheme.png.png 23KB
-
BootstrapperNET/Workspace/infiniteyield/assets/editwaypoints.png.png 293B
-
BootstrapperNET/Workspace/infiniteyield/assets/imgstudiopluginlogo.png.png 11KB
-
BootstrapperNET/Workspace/infiniteyield/assets/logo.png.png 45KB
-
BootstrapperNET/Workspace/infiniteyield/assets/minimize.png.png 15KB
-
BootstrapperNET/Workspace/infiniteyield/assets/pin.png.png 34KB
-
BootstrapperNET/Workspace/infiniteyield/assets/reference.png.png 453B
-
BootstrapperNET/Workspace/infiniteyield/assets/settings.png.png 728B
-
BootstrapperNET/mpclient.dll.dll 2.6MB
-
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/btime/binding.node.dll 118KB
-
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/get-fonts/binding.node.dll 125KB
-
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/vibrancy-win/binding.node.dll 118KB
-
ReadME.txt70B
BootstrapperNET/Bootsrappper.exe
- IMPHASH 7a6da7c5d1116b706b7932d3f11a50c9
- SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
- MD5 6669e10c960f6c2297bcd3d5a27412aa
- SHA1 73bee544b24312d0057d9ce5e62daa9f73243d00
- SHA512 feb1e93aed3f1a0ade6e6ab169af46ddd438aa80f6667fb24421d2f0b7da1c4a4902438421079a75eecfc9a3347c3ebe7f62b88ea9e67a9c951954d8555ea497
- SSDEEP 12288:tiGbyLR32C4NHhZoLCZcvDaLgf5pB6Nwi5//E7soazN0uahRg:MGboR3P4NHboLCevWLGL6//E7sTN0hhC
- TLSH T1ECE48E2AB3E401F9D1B7D276C9535A26FB71780A1731CBCF03A046562F276A49E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
bluys
Digest
b5:4a:2b:77:f5:94:37:43:7c:5b:64:08:db:b0:59:cc:3d:1c:db:be:4a:3b:94:26:c5:c8:55:bf:49:e9:8a:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 6, 2023
CN=Microsoft Windows Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:51:99:0a:2a:60:f6:35:67:60:00:00:00:00:04:51
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 8, 2023 - Aug 7, 2024
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d4:e4:e9:03:2f:c0:ac:69:ac:00:01:00:00:01:d4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
21472
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
MpDlpService.pdb
advapi32
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage
RegCloseKey
GetSecurityDescriptorSacl
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
CopySid
FreeSid
CheckTokenMembership
EventUnregister
EventRegister
EventWriteTransfer
ChangeServiceConfig2W
LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatus
NotifyServiceStatusChangeW
StartServiceW
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW
GetLengthSid
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
OpenProcessToken
ChangeServiceConfigW
QueryServiceConfigW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
GetTokenInformation
ConvertSidToStringSidW
SetSecurityInfo
InitializeAcl
kernel32
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RaiseException
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
DebugBreak
GetFileAttributesW
WaitForSingleObject
GetTickCount64
OutputDebugStringW
FormatMessageW
GetProcessTimes
ProcessIdToSessionId
LoadLibraryW
GetFileInformationByHandle
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ExpandEnvironmentStringsW
QueryDosDeviceW
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
GetModuleHandleExW
ReleaseMutex
OpenSemaphoreW
CreateMutexExW
GetProcessHeap
CompareFileTime
lstrcmpW
DeleteFileW
FindClose
OpenProcess
SleepEx
CreateFileW
LocalFree
GetDriveTypeW
DeleteTimerQueueTimer
LCMapStringW
UnregisterWaitEx
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
GetModuleFileNameW
GetSystemDirectoryW
HeapSetInformation
CreateProcessW
CreateDirectoryW
ReadFile
FindFirstFileW
GetFileSizeEx
CreateTimerQueueTimer
FindNextFileW
WriteFile
RegisterWaitForSingleObject
SetEnvironmentVariableW
SetFilePointerEx
LoadLibraryExW
FileTimeToSystemTime
GetLocalTime
GetSystemTime
DeviceIoControl
HeapAlloc
GetFinalPathNameByHandleW
WriteConsoleW
SetEndOfFile
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
CompareStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindFirstFileExW
HeapReAlloc
GetOEMCP
GetACP
IsValidCodePage
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
ExitProcess
GetStdHandle
GetCPInfo
LCMapStringEx
DecodePointer
InitOnceComplete
InitOnceBeginInitialize
GetLocaleInfoEx
SetErrorMode
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetStringTypeW
VirtualLock
mpclient
MpConfigUninitialize
MpClientUtilExportFunctions
MpFreeMemory
MpAllocMemory
MpConfigRegisterForNotifications
MpConfigGetValue
MpConfigOpen
MpConfigUnregisterNotifications
MpConfigClose
MpConfigGetValueAlloc
MpConfigSetValue
MpConfigInitialize
wtsapi32
WTSQueryUserToken
ntdll
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlNtStatusToDosError
NtQueryInformationProcess
RtlGetVersion
crypt32
CertVerifyCertificateChainPolicy
ole32
CreateBindCtx
CoSetProxyBlanket
CoTaskMemFree
CoCreateInstance
rpcrt4
RpcImpersonateClient
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcBindingInqAuthClientW
RpcStringFreeW
RpcServerRegisterAuthInfoW
RpcServerUseProtseqW
RpcRevertToSelf
RpcServerInqBindings
RpcEpRegisterW
RpcServerRegisterIfEx
RpcBindingVectorFree
RpcEpUnregister
RpcServerUnregisterIf
NdrServerCallAll
NdrServerCall2
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
ExpandEnvironmentStringsForUserW
wintrust
WTHelperGetProvSignerFromChain
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
WTHelperProvDataFromStateData
CryptCATAdminEnumCatalogFromHash
urlmon
MkParseDisplayNameEx
Name
.text
Size
464KB
Virtual Size
461KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
152KB
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=260, version=32595,
count=229, id=261, version=32595,
count=23, id=259, version=32595,
count=31, id=257, version=32595,
count=434, id=1, productName=Unmarked objects,
count=10, id=126, version=50727,
count=175, id=265, version=32595,
count=1, id=255, version=32595,
count=1, id=258, version=32595,
BootstrapperNET/Scripts/th.pak
- SHA256 4fe2b7b6886e3ce068be0b7a0a71d45756eb797eda1e7d4fad52ab8a370e8336
- MD5 85f59bf2f1167e34ab2b666608805420
- SHA1 f0d8e8fc644c15c52c5f9d3419f88e6072799736
- SHA512 86d6061895c996ad1caa3f3871c014b656e7ba7bb91f05c72a591cb5877c3db61965bc1a5094dcf7c4127d11f8106622355464704fd0695372627d8400a16ddd
- SSDEEP 12288:kCoJR/3RMVqsUs5Uv/cLRflrj87rS6DotyeuLADu7Kle9don7j9Fo09XAyFHPL4i:poH25p5p
- TLSH T142E44BB33247D9D479441B5B262A7789673DAE693F73F8E00489215A73F071A8422EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/appendfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/getcustomasset.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/isfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/listfiles/test_1.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/listfiles/test_2.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/af.pak
- SHA256 b1987cdcbb8d76598422aa1739a246ed6690dc1b211f950fcbf2f040491ed7a8
- MD5 c9312ff081e600e5fb4483b46ddd7c23
- SHA1 1ff05a6a06cc73caf2d7545a3821d90c228ac0af
- SHA512 20c136b44770aa0e06259687656675a3e14310ea4e8ba214726b216bc1bcad6026267bf0132cbca642c0b5c49293386d0a1bd93ba40e1c33b648ae70416e8898
- SSDEEP 6144:ZP+kgc+kVWlEvC9Z5D49Em7kLjB6oAYxjYgDbwxesB+xSK1IA3y25tHwDwv22iGe:ZPfclEvC2im4LjB6oAYxjYgDbwAVSK16
- TLSH T170641B0ADB80273D05E07696FA0445F7BB9CB26DD770B2BADD9981321962EFC01BD1D8
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sk.pak
- SHA256 dbd82a2a08f8e9ba9581b2672bc49e0fa5c89f073b58f152225f9e2815228ddf
- MD5 989d000fbe286c0fd4bfb35305b52f48
- SHA1 5a30a2cc1abe9977b1ffc4c4712452e6d55bc7df
- SHA512 ed57c66237d5226d4d5cb63e98248c0df9d381ef86b6d4ef339523f430c54aab14f84121e05e9fedaf273323ec04b8a539c0aeb791245858890126de2ce38283
- SSDEEP 6144:HX/6WrhCQ+koL+vMFVxyXiFJ7VC35hJYLjaQ3yGLBGR:HX/6Wr8Q2hnxyXiHVO5hJYLjaQ3yGL2
- TLSH T1BD845E3FCFE61C1E8E990108DEF57210F9BE4690864DA4A6D44F328724E37DD9AB8D49
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sl.pak
- SHA256 d0415bfa061b36a6eb93fa2c78563448da8b63c91e0523086c7eb2714933ab99
- MD5 234e628a62f822bd7b3546b91e79cab2
- SHA1 10f48382495bdbfa3b30c15b91768817df13d828
- SHA512 51234fc3fb5199a3a86dcb7ca68d3c471f1b97897b1a9f90139cfff9846a6c6fd039a0c817e7611e0e59637746cc51045f6ce493cd6f2d4e144fec1c6a561456
- SSDEEP 6144:mK8+KqhWYynnbANj7nHZiGm4ocyxPbPDZFu+Hr7ftjQLm55gdrcKx6EIbi/fzMNS:z8+awi91L55Arc7EMi/fzMiqg
- TLSH T1EB842B35ABA75E0E0DAA66CBFDB203017BDC048CD641D6A6FC4F33695012B2827BD599
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sr.pak
- SHA256 d459c1a781ddc344de76558211983dd07d47e3ca6cacffb518043bd78dc48fbe
- MD5 aa4e2e54b648f66794f485318651b730
- SHA1 18c1d5badcc5c05dfcf9e68df66f53c69e33e0ab
- SHA512 cda7b189f48f28463d045174f3641f16737288b159adcf41da0c131a05a396a40e562b2f0aa10b08d323290f19d864755f238b074a698efa3c573d2b5512948d
- SSDEEP 12288:AqOufVklJRr1HI/Y11PPeHyxsYQf5uaxbbNK6374Xzt/k/t:AVIkh3HNcf53xnZ
- TLSH T1EDC457B19B9E64DB0501F41BD808BE493DAF41FE3FAB975611201DBD34E20B847B929E
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sv.pak
- SHA256 3f0acf6f6319636c3e72cdc392b7b80ab0cfd8ae1a5a8e319624e4b46bcd3c42
- MD5 c5437bb175fed93e85c5e7caf76ff352
- SHA1 0d74f7df049ea73a47fe93b75c98e356b9bdd4b7
- SHA512 00af14e7d89a12f4f39fb45a3f9c136e20c06752f98fdedbad426ac9a5b820260a329059659cd82fd089ab1d94c1f51ab4202fb6b142b27538d0139e67877239
- SSDEEP 6144:UIcs6Ou/WpIjSwjcT+BjxEEkb/LX6uTSOoDE/xUDSS35655egbH:It/vjtBok5U5h
- TLSH T1D5743B428A20F536FBB2170DB904115F4ADDE15CE7E2848E78D9883DAE87D9845FF24B
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/sw.pak
- SHA256 dea6947693fceb6457801d912ea7c716add3c0cfb4c34782a9cfa4c4e06b9402
- MD5 e37fc1c3dce484bd0ce496f548f14a43
- SHA1 02b088a11363b0a4c0527053669af32737f1403b
- SHA512 c5c39d54f4eb6b0659903ce9b5c8804a750a254bf88cc7c6e729e7813ecbbcc88df882af9294b5b795ef5b8afe8f1a60fcb46b3929a9b2cdf41c84188e5852b2
- SSDEEP 6144:HhUmBklgBZcaZwoRdkN6Csdq0rnKKcLLK+9s35FSaDN+q5CwAyeKnHwQ0/:mplGCkp9KhHW35gyCHyG
- TLSH T1E974E76288B1D0195733518603D8FF7317DCED9C292B28A35A46BF4F218F98C57ABE49
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/ta.pak
- SHA256 e0421b4cf2736bb465ec02cd85c2df09809f86479cb7624195373f25edbcedd3
- MD5 5002d84bffb908a2dcc7e1b69836c265
- SHA1 4cbbe387a6744aa6c51b15b5a3a223135a3f6115
- SHA512 c2a4a46a27304eb080b066f049d2eae733470dbf0f8107220049eaefdd73fd8b41abd1b02b4a2ee6934b4cae18de97bca5360022a8e295427a0bd63603bec410
- SSDEEP 1536:gozNJu8JvUHZZvrdAYWSXR1q+y5fNU1prH+O8ep3EvFZRj2IpewYxg3ZHa4dpeJT:gsNJvUXdWSXRUlUj9yw5fG7zWtRjcA2S
- TLSH T159151CCE923EEE890F93288F0319536912996155C07BE3A27C756E1298ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/te.pak
- SHA256 f53e06181c9fa0f6028906a7388fd4e8f000ffb7277330634462433d34572395
- MD5 b1a4d471fd8af54dfb8ff252246bfde1
- SHA1 2044ee38f8d8d76176a735e726de189feac14985
- SHA512 18248d3fa8f4cc409788d28a244889230b074fff416ba5998f25f3b67ad0c627172a5e7e3947e61e72ce28a5b4cb2134d6627b6252b3d282b54f84b424136c87
- SSDEEP 12288:VluBe3p1F9fBiTlbUYgiNFOSdrUH4GrQKZkC28+5HX0Dkq9GyAdsoAkhodSMtS6f:VlUh4D5nM2
- TLSH T14B0592023A6AD310DAE70273752CF66C49681B8161D6732C1EAFA357FB87D7E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/th.pak
- SHA256 4fe2b7b6886e3ce068be0b7a0a71d45756eb797eda1e7d4fad52ab8a370e8336
- MD5 85f59bf2f1167e34ab2b666608805420
- SHA1 f0d8e8fc644c15c52c5f9d3419f88e6072799736
- SHA512 86d6061895c996ad1caa3f3871c014b656e7ba7bb91f05c72a591cb5877c3db61965bc1a5094dcf7c4127d11f8106622355464704fd0695372627d8400a16ddd
- SSDEEP 12288:kCoJR/3RMVqsUs5Uv/cLRflrj87rS6DotyeuLADu7Kle9don7j9Fo09XAyFHPL4i:poH25p5p
- TLSH T142E44BB33247D9D479441B5B262A7789673DAE693F73F8E00489215A73F071A8422EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/tr.pak
- SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
- MD5 da4c47bef469c086cdb7e5b74310304a
- SHA1 9f0569659eb21261003a232d5d92d3aae8d47b7a
- SHA512 55c745cd8d0aba6f4a2454c494b80eb4cc74f733771e7279b9033d52716551a85154e9eb31eebe17dce05ba71e0213e581c4b98b59a6b88aa8b9569c411e397a
- SSDEEP 6144:GqgGhItL0rKiPxTcQXKVSIOD7rB/78GgeD58/D+iMi1AxZE9VwiBsJm7:JhIN/i5TTmUrZ7f58/5
- TLSH T1FE740A8178EF382C8BB9278FD2E50626F99F0766F331E4469A169636774674703F620C
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/uk.pak
- SHA256 3fb15957c77f3635aa7cfca796b045a1ee1f1abfc0c12c163cfb537364f3c80a
- MD5 229325584cd98c8408f7fc5c5603c6de
- SHA1 dd31356ede30833a138fc3a6b8838cef89344a00
- SHA512 3b57f57649877700f03aee73bc6e6e863ad65ec7c13b9851a3fc7e5d06d11ea154ce087d0a64dc689cfc55aca9eb6492154c9eb18130f6d17b8d94ac8c37a6df
- SSDEEP 12288:c5cHmNYribnlyvk7KQ0N1nteW51B3IjNtE6TxLNiXEFqIDV2:c5cP+kT552Ef
- TLSH T10BD488B19A9D58DF0105F05BE84C7A0D7DA741FE7FA6871625A43DBF28F20248A3C71A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/ur.pak
- SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
- MD5 6310a289e55b1022f12b4f3cc29fe831
- SHA1 150d81ec8db4d9aec6c0e83e5577dcb7f1956b38
- SHA512 acb538fce25486e6a01401aa0e9204a6f519cd1dfbca48663d6142e1fb6280bab271dfd2b4c5ddc858de6920805e539b791c48eddcad124d0aae298d479dcf48
- SSDEEP 12288:K6Du8PzOYzXPyn+jAcMR5RQEA2WzRbQYrkuvco/9NjjFpvUu:cYiD59WZ
- TLSH T115C410D1E6BC92B25A21D92780E33C34CB635F13D34BF286E56106C54E9A1136F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/vi.pak
- SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
- MD5 1b1b14f542bb4a9f014d1801fb2e4007
- SHA1 0f56c35b2515fc92690126c54d57aa763a5c3288
- SHA512 3e98c44ad74d905fee06851eab16576f6261a15336f1c1f625f646af725988b75957ed89c16876ec6127150e2b28778a5b65f897b9540ad1e4cec98be705cde7
- SSDEEP 12288:PJnzrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV1ZH:xnzTsPgnzj0VySwSG1n5/TiW+UaliV1N
- TLSH T1A094861216E0702680AC553EC5CE540E6FCAE42FF7808FE57FE4297576221A56F21BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/zh-CN.pak
- SHA256 97fe793b325d0c27669f62235bd157c51a3e1aeaffba30e7fe028c9d64939c5f
- MD5 32b1659c7abe8a01a702e46c69f0a3ce
- SHA1 43eba1f94417109834f25006a81653bf635ce9a0
- SHA512 72b932cb9e19788a67a1a7beaea0b9b076af0a5f1c568f9d2d6e8653d3c9fd4bc17db1a39db1f12b8184112b8e67125f443b8b2b60f31e62e16ef9c6a8e2c4a6
- SSDEEP 6144:ZdzIbmDPgQyQ74nqKm0YnHrYE85UN6RregFlo:DEm8QunqKRYnHx85UN6Rr4
- TLSH T18D647EE900FDBDEC054640902724617E7980620BF667AFB77ED244ED27A2F9E0757A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_1/zh-TW.pak
- SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
- MD5 14f3f547a54713f91251b38459a096b5
- SHA1 02ac592a2eb4a7c6631dad5aae83726ef9c33ec0
- SHA512 0ad8c6a6eb0dcbcbbf6f9e114c93bc2cf6004dfa9ad7b68dba31c2a9856c0a56acb66507f65b1823434b1ad362c1ac812b72c254e5329a2858e888a761f45ec1
- SSDEEP 6144:c0oQX1m/Xs2eI7uhvxO4/x5wuznWMc/9yJTl:cQX1m6IaxO4/x5wuzWZ/u
- TLSH T151646CA608FFDEEE0901F884B3C9462F7C8B742CDD377637FC4918992E76A541A5214A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/af.pak
- SHA256 b1987cdcbb8d76598422aa1739a246ed6690dc1b211f950fcbf2f040491ed7a8
- MD5 c9312ff081e600e5fb4483b46ddd7c23
- SHA1 1ff05a6a06cc73caf2d7545a3821d90c228ac0af
- SHA512 20c136b44770aa0e06259687656675a3e14310ea4e8ba214726b216bc1bcad6026267bf0132cbca642c0b5c49293386d0a1bd93ba40e1c33b648ae70416e8898
- SSDEEP 6144:ZP+kgc+kVWlEvC9Z5D49Em7kLjB6oAYxjYgDbwxesB+xSK1IA3y25tHwDwv22iGe:ZPfclEvC2im4LjB6oAYxjYgDbwAVSK16
- TLSH T170641B0ADB80273D05E07696FA0445F7BB9CB26DD770B2BADD9981321962EFC01BD1D8
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sk.pak
- SHA256 dbd82a2a08f8e9ba9581b2672bc49e0fa5c89f073b58f152225f9e2815228ddf
- MD5 989d000fbe286c0fd4bfb35305b52f48
- SHA1 5a30a2cc1abe9977b1ffc4c4712452e6d55bc7df
- SHA512 ed57c66237d5226d4d5cb63e98248c0df9d381ef86b6d4ef339523f430c54aab14f84121e05e9fedaf273323ec04b8a539c0aeb791245858890126de2ce38283
- SSDEEP 6144:HX/6WrhCQ+koL+vMFVxyXiFJ7VC35hJYLjaQ3yGLBGR:HX/6Wr8Q2hnxyXiHVO5hJYLjaQ3yGL2
- TLSH T1BD845E3FCFE61C1E8E990108DEF57210F9BE4690864DA4A6D44F328724E37DD9AB8D49
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sl.pak
- SHA256 d0415bfa061b36a6eb93fa2c78563448da8b63c91e0523086c7eb2714933ab99
- MD5 234e628a62f822bd7b3546b91e79cab2
- SHA1 10f48382495bdbfa3b30c15b91768817df13d828
- SHA512 51234fc3fb5199a3a86dcb7ca68d3c471f1b97897b1a9f90139cfff9846a6c6fd039a0c817e7611e0e59637746cc51045f6ce493cd6f2d4e144fec1c6a561456
- SSDEEP 6144:mK8+KqhWYynnbANj7nHZiGm4ocyxPbPDZFu+Hr7ftjQLm55gdrcKx6EIbi/fzMNS:z8+awi91L55Arc7EMi/fzMiqg
- TLSH T1EB842B35ABA75E0E0DAA66CBFDB203017BDC048CD641D6A6FC4F33695012B2827BD599
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sr.pak
- SHA256 d459c1a781ddc344de76558211983dd07d47e3ca6cacffb518043bd78dc48fbe
- MD5 aa4e2e54b648f66794f485318651b730
- SHA1 18c1d5badcc5c05dfcf9e68df66f53c69e33e0ab
- SHA512 cda7b189f48f28463d045174f3641f16737288b159adcf41da0c131a05a396a40e562b2f0aa10b08d323290f19d864755f238b074a698efa3c573d2b5512948d
- SSDEEP 12288:AqOufVklJRr1HI/Y11PPeHyxsYQf5uaxbbNK6374Xzt/k/t:AVIkh3HNcf53xnZ
- TLSH T1EDC457B19B9E64DB0501F41BD808BE493DAF41FE3FAB975611201DBD34E20B847B929E
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/sv.pak
- SHA256 3f0acf6f6319636c3e72cdc392b7b80ab0cfd8ae1a5a8e319624e4b46bcd3c42
- MD5 c5437bb175fed93e85c5e7caf76ff352
- SHA1 0d74f7df049ea73a47fe93b75c98e356b9bdd4b7
- SHA512 00af14e7d89a12f4f39fb45a3f9c136e20c06752f98fdedbad426ac9a5b820260a329059659cd82fd089ab1d94c1f51ab4202fb6b142b27538d0139e67877239
- SSDEEP 6144:UIcs6Ou/WpIjSwjcT+BjxEEkb/LX6uTSOoDE/xUDSS35655egbH:It/vjtBok5U5h
- TLSH T1D5743B428A20F536FBB2170DB904115F4ADDE15CE7E2848E78D9883DAE87D9845FF24B
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/tr.pak
- SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
- MD5 da4c47bef469c086cdb7e5b74310304a
- SHA1 9f0569659eb21261003a232d5d92d3aae8d47b7a
- SHA512 55c745cd8d0aba6f4a2454c494b80eb4cc74f733771e7279b9033d52716551a85154e9eb31eebe17dce05ba71e0213e581c4b98b59a6b88aa8b9569c411e397a
- SSDEEP 6144:GqgGhItL0rKiPxTcQXKVSIOD7rB/78GgeD58/D+iMi1AxZE9VwiBsJm7:JhIN/i5TTmUrZ7f58/5
- TLSH T1FE740A8178EF382C8BB9278FD2E50626F99F0766F331E4469A169636774674703F620C
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/ur.pak
- SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
- MD5 6310a289e55b1022f12b4f3cc29fe831
- SHA1 150d81ec8db4d9aec6c0e83e5577dcb7f1956b38
- SHA512 acb538fce25486e6a01401aa0e9204a6f519cd1dfbca48663d6142e1fb6280bab271dfd2b4c5ddc858de6920805e539b791c48eddcad124d0aae298d479dcf48
- SSDEEP 12288:K6Du8PzOYzXPyn+jAcMR5RQEA2WzRbQYrkuvco/9NjjFpvUu:cYiD59WZ
- TLSH T115C410D1E6BC92B25A21D92780E33C34CB635F13D34BF286E56106C54E9A1136F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/vi.pak
- SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
- MD5 1b1b14f542bb4a9f014d1801fb2e4007
- SHA1 0f56c35b2515fc92690126c54d57aa763a5c3288
- SHA512 3e98c44ad74d905fee06851eab16576f6261a15336f1c1f625f646af725988b75957ed89c16876ec6127150e2b28778a5b65f897b9540ad1e4cec98be705cde7
- SSDEEP 12288:PJnzrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV1ZH:xnzTsPgnzj0VySwSG1n5/TiW+UaliV1N
- TLSH T1A094861216E0702680AC553EC5CE540E6FCAE42FF7808FE57FE4297576221A56F21BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/zh-CN.pak
- SHA256 97fe793b325d0c27669f62235bd157c51a3e1aeaffba30e7fe028c9d64939c5f
- MD5 32b1659c7abe8a01a702e46c69f0a3ce
- SHA1 43eba1f94417109834f25006a81653bf635ce9a0
- SHA512 72b932cb9e19788a67a1a7beaea0b9b076af0a5f1c568f9d2d6e8653d3c9fd4bc17db1a39db1f12b8184112b8e67125f443b8b2b60f31e62e16ef9c6a8e2c4a6
- SSDEEP 6144:ZdzIbmDPgQyQ74nqKm0YnHrYE85UN6RregFlo:DEm8QunqKRYnHx85UN6Rr4
- TLSH T18D647EE900FDBDEC054640902724617E7980620BF667AFB77ED244ED27A2F9E0757A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/listfiles_2/test_2/zh-TW.pak
- SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
- MD5 14f3f547a54713f91251b38459a096b5
- SHA1 02ac592a2eb4a7c6631dad5aae83726ef9c33ec0
- SHA512 0ad8c6a6eb0dcbcbbf6f9e114c93bc2cf6004dfa9ad7b68dba31c2a9856c0a56acb66507f65b1823434b1ad362c1ac812b72c254e5329a2858e888a761f45ec1
- SSDEEP 6144:c0oQX1m/Xs2eI7uhvxO4/x5wuznWMc/9yJTl:cQX1m6IaxO4/x5wuzWZ/u
- TLSH T151646CA608FFDEEE0901F884B3C9462F7C8B742CDD377637FC4918992E76A541A5214A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/.tests/loadfile.txt
- SHA256 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111
- MD5 8fa14cdd754f91cc6554c9e71929cce7
- SHA1 4a0a19218e082a343a1b17e5333409af9d98f0f5
- SHA512 711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/readfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/writefile
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/.tests/writefile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/373f5d42922fa6b5ac57adbb41b8015f-cache.lua
- SHA256 d10aa3cabff1a991014244e4349f77730bbf1c6e6ac16b0411dca5c4d4efa4ae
- MD5 3cf835cb8c9c25b2debfd164f3b5acab
- SHA1 973c8195b710079e72cf4f0c9e819f9434b85900
- SHA512 0089a54f08fe6c211984610de8489c2a899b1f74ed806c25c69a80736fd14dfa617b47cd3ee954f9c27b9b70ce262c2e7729fec800d4b7546b4950df3a1ba0bf
- SSDEEP 6144:IU0todyyPGaBeAUZIhrYckgZO1et/rrxpAzSefTE59JtzZNqy/:IUuo0y9TUGh8vQYO/rdiVe7p
- TLSH T1EA649EE871CD23D4EB2079E14E2B189CB35304E9A4AB5A99444CB1763E81379CE7CB77
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/IY_FE.iy
- SHA256 f989c59dff975cac62390435d957ecc1c00f2279420d0b3584273931007b0656
- MD5 04d5214df20664e815743b375df22158
- SHA1 4353bf9e97336398c4d29e41ef3b46d8f52c48e9
- SHA512 844c89d1760c3e25d558957383c508036e616a1747e4f95df9d92754caa41356630b33fe76af7041aefa6f638d76b8d81349723e588b4139bbff3416648d45eb
- TLSH T130F02B6E530D0ABAC0515260D63531BFD6FF4FB77020D855A6BC5D6D13EAEA24EB0903
- MD5 SHA1 SHA512 TLSH
BootstrapperNET/Workspace/RiftAssets/Gradient.png
- SHA256 ef952e4524a680d09cbc731d8e5330aee9de213e3c46c025fd0676f66835f9f1
- MD5 4a753daf82bbd85fb6b79de1c563ffef
- SHA1 969b4ad59b31070b846b6fe546f511d576d04f54
- SHA512 8535af8e59468f2b42fe3a6ae56096c9daa3f47fc1aa11b9a6278463d0bdcbce221a9f4e242fe81d5328b062f89c51924cb0ec45e498390bc3babe35dc5cbc8e
- SSDEEP 1536:dVAmcbdBaywVLBa/jnm4PPiICr1NTDbr8Y9Q:dVA1wVoq4V2DvO
- TLSH T1F6430288F3901998B436BF19EFBFD515E3D44310A1FF9D6963929460FD4AA0422DE3D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
bluys
BootstrapperNET/Workspace/RiftAssets/IconSprite.png
- SHA256 c48c79a2a665ecc6504efd676a8a0fc60548af75202a317e13635ee342be324e
- MD5 5edd353fe2f387e4a5f1bc2f8afb8b87
- SHA1 22b707ea074ce7cc26e3dd18d62ddd6c8a1d6561
- SHA512 93332736c35bc5480bfa570909a271e85fd10432a66454e578b302024df8c9eee2cd335a6440601f8755b42daa9067fd8142b18efd02d1e63f76fd85302a734f
- SSDEEP 6144:AkexSCdDyKlo8ta4RTvLZglnLEFoO2XAA:OtyKdtVqlnlO2XL
- TLSH T1ED3423B3A7E0E61A14F854F0F5558E839AE77DC14E9B8C585900FB93B0182B4F63D2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
bluys
BootstrapperNET/Workspace/RiftAssets/Logo.png
- SHA256 47f4e2a970cc8e1c8146d24413a7b048721ee44f243943c7fc964a18c87d1604
- MD5 9799d09cb360202c4fc05ea0d82769c9
- SHA1 9db006c768db3bf29c7f10b29e984a9376bfb2f7
- SHA512 8e62719d2f71d36fcb9eafd03cb6fa08145982ddfb45993a433b90cf17b0c8119f3af87b225be038aade42a0f32aa32e8683bcaebfaa81ef7214223ff5bfc210
- SSDEEP 768:bYdF/5zewiOV2QAA5sbrR3t+nzH3yTulVISwr:bI/ewz2QAqsbrR3gzCTuTISwr
- TLSH T1E2F2E1538434E9B6EF9B49FA016B4FBB0413618E1CD66983C4588A6CD84DC1DD3EB9DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
bluys
BootstrapperNET/Workspace/RiftAssets/SavedKey.txt
- SHA256 e15902f6cbdd3bc646afadf5239a4b2157ebd0666ac72108d78b44d244f42ffe
- MD5 ff9eddcd2743ce49ec9a8f89254b0be8
- SHA1 149c75fecc2837fa9486327f79de5dcdac3ab4e5
- SHA512 29b7869544ca3b34024b89ea7fcbf6eed5eeffbe495f1342f1f5c5d8a7a1f72cfcc98aa00f9320437637badbf2330b2bf7f901726c3873097371dd55c38a12c0
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/RiftAssets/Tiles.png
- SHA256 6983dde278d93ed80794669e49c693e8785865a6b6340ae6c7fa8db1444a014f
- MD5 5f056669225e182a10010097c14b8dc0
- SHA1 dfdef72c5946f9aae156dfc23a1956f6a9ae9027
- SHA512 cb2ad5f30f7d4693342acd3666339ccb2e0a98783017243699234f3d3eddb1f6c996cfd3772a9de828cfaf8cb64331eb60789b0a03bc1f1f9e4ab1bd4d43b905
- TLSH T1ECF0DC1E0C23A935CCCA6CBB79779E26A1C3D41C837148B05DB19DAA2C6730323C1420
- MD5 SHA1 SHA512 TLSH
BootstrapperNET/Workspace/_orca/options.json
- SHA256 18165b42890aa34e2021b1fabd293b61d3312dba09e4fc328baf966d72dc7838
- MD5 a0f313f41feaac5afa3c3e2e467ccbef
- SHA1 d57038ef9a34563efb9bbe6af31eb383fb62b1ec
- SHA512 4ef4afdec4cb9c091e0972853978bd4519a5b572c0ee5f088b8690e6e73ab15b8bfe541c8d48da53dc068e3920334a7a1a77d164dd63ce1fa609f1b87d6e6278
- TLSH T18FB01206200C6935D79A08CCC10429384CA3035416419418C11FFD0801308184346056
- MD5 SHA1 SHA512 TLSH
BootstrapperNET/Workspace/dex/assets/af.pak
- SHA256 b1987cdcbb8d76598422aa1739a246ed6690dc1b211f950fcbf2f040491ed7a8
- MD5 c9312ff081e600e5fb4483b46ddd7c23
- SHA1 1ff05a6a06cc73caf2d7545a3821d90c228ac0af
- SHA512 20c136b44770aa0e06259687656675a3e14310ea4e8ba214726b216bc1bcad6026267bf0132cbca642c0b5c49293386d0a1bd93ba40e1c33b648ae70416e8898
- SSDEEP 6144:ZP+kgc+kVWlEvC9Z5D49Em7kLjB6oAYxjYgDbwxesB+xSK1IA3y25tHwDwv22iGe:ZPfclEvC2im4LjB6oAYxjYgDbwAVSK16
- TLSH T170641B0ADB80273D05E07696FA0445F7BB9CB26DD770B2BADD9981321962EFC01BD1D8
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/assets/sk.pak
- SHA256 dbd82a2a08f8e9ba9581b2672bc49e0fa5c89f073b58f152225f9e2815228ddf
- MD5 989d000fbe286c0fd4bfb35305b52f48
- SHA1 5a30a2cc1abe9977b1ffc4c4712452e6d55bc7df
- SHA512 ed57c66237d5226d4d5cb63e98248c0df9d381ef86b6d4ef339523f430c54aab14f84121e05e9fedaf273323ec04b8a539c0aeb791245858890126de2ce38283
- SSDEEP 6144:HX/6WrhCQ+koL+vMFVxyXiFJ7VC35hJYLjaQ3yGLBGR:HX/6Wr8Q2hnxyXiHVO5hJYLjaQ3yGL2
- TLSH T1BD845E3FCFE61C1E8E990108DEF57210F9BE4690864DA4A6D44F328724E37DD9AB8D49
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/assets/sl.pak
- SHA256 d0415bfa061b36a6eb93fa2c78563448da8b63c91e0523086c7eb2714933ab99
- MD5 234e628a62f822bd7b3546b91e79cab2
- SHA1 10f48382495bdbfa3b30c15b91768817df13d828
- SHA512 51234fc3fb5199a3a86dcb7ca68d3c471f1b97897b1a9f90139cfff9846a6c6fd039a0c817e7611e0e59637746cc51045f6ce493cd6f2d4e144fec1c6a561456
- SSDEEP 6144:mK8+KqhWYynnbANj7nHZiGm4ocyxPbPDZFu+Hr7ftjQLm55gdrcKx6EIbi/fzMNS:z8+awi91L55Arc7EMi/fzMiqg
- TLSH T1EB842B35ABA75E0E0DAA66CBFDB203017BDC048CD641D6A6FC4F33695012B2827BD599
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/assets/sv.pak
- SHA256 3f0acf6f6319636c3e72cdc392b7b80ab0cfd8ae1a5a8e319624e4b46bcd3c42
- MD5 c5437bb175fed93e85c5e7caf76ff352
- SHA1 0d74f7df049ea73a47fe93b75c98e356b9bdd4b7
- SHA512 00af14e7d89a12f4f39fb45a3f9c136e20c06752f98fdedbad426ac9a5b820260a329059659cd82fd089ab1d94c1f51ab4202fb6b142b27538d0139e67877239
- SSDEEP 6144:UIcs6Ou/WpIjSwjcT+BjxEEkb/LX6uTSOoDE/xUDSS35655egbH:It/vjtBok5U5h
- TLSH T1D5743B428A20F536FBB2170DB904115F4ADDE15CE7E2848E78D9883DAE87D9845FF24B
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/assets/sw.pak
- SHA256 dea6947693fceb6457801d912ea7c716add3c0cfb4c34782a9cfa4c4e06b9402
- MD5 e37fc1c3dce484bd0ce496f548f14a43
- SHA1 02b088a11363b0a4c0527053669af32737f1403b
- SHA512 c5c39d54f4eb6b0659903ce9b5c8804a750a254bf88cc7c6e729e7813ecbbcc88df882af9294b5b795ef5b8afe8f1a60fcb46b3929a9b2cdf41c84188e5852b2
- SSDEEP 6144:HhUmBklgBZcaZwoRdkN6Csdq0rnKKcLLK+9s35FSaDN+q5CwAyeKnHwQ0/:mplGCkp9KhHW35gyCHyG
- TLSH T1E974E76288B1D0195733518603D8FF7317DCED9C292B28A35A46BF4F218F98C57ABE49
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/assets/tr.pak
- SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
- MD5 da4c47bef469c086cdb7e5b74310304a
- SHA1 9f0569659eb21261003a232d5d92d3aae8d47b7a
- SHA512 55c745cd8d0aba6f4a2454c494b80eb4cc74f733771e7279b9033d52716551a85154e9eb31eebe17dce05ba71e0213e581c4b98b59a6b88aa8b9569c411e397a
- SSDEEP 6144:GqgGhItL0rKiPxTcQXKVSIOD7rB/78GgeD58/D+iMi1AxZE9VwiBsJm7:JhIN/i5TTmUrZ7f58/5
- TLSH T1FE740A8178EF382C8BB9278FD2E50626F99F0766F331E4469A169636774674703F620C
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/assets/zh-TW.pak
- SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
- MD5 14f3f547a54713f91251b38459a096b5
- SHA1 02ac592a2eb4a7c6631dad5aae83726ef9c33ec0
- SHA512 0ad8c6a6eb0dcbcbbf6f9e114c93bc2cf6004dfa9ad7b68dba31c2a9856c0a56acb66507f65b1823434b1ad362c1ac812b72c254e5329a2858e888a761f45ec1
- SSDEEP 6144:c0oQX1m/Xs2eI7uhvxO4/x5wuznWMc/9yJTl:cQX1m6IaxO4/x5wuzWZ/u
- TLSH T151646CA608FFDEEE0901F884B3C9462F7C8B742CDD377637FC4918992E76A541A5214A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/deps_version.dat
- SHA256 fe519677cbb45c6945eb0f3b2f9290c36eb446d78cb5c7b043794e6d788dc30a
- MD5 3229a89fe560e91ff001592d188f2e38
- SHA1 83c8d27551b59a9005fc11450b4d1285f6ea4c33
- SHA512 2fa505dd1387628d74c83aac5d85d512d108f58183afc176f6ed548c9e6b20da6045dae4725d225cfaa087435d69f89e2232521dc59a700bd7e8b27dda6333b8
- MD5 SHA1 SHA512
BootstrapperNET/Workspace/dex/rbx_api.dat
- SHA256 02276f872886a6bc29e2e05a2e551a8c92c0e1745276520f4203d52a15679856
- MD5 c31c192974d091badb971fde16825795
- SHA1 2d72dace0c277e6c94a361576dea524627b7278a
- SHA512 2267bf393ca8da01a20497fbab8583b4839bc6b7f8cfdbc40707242b78f38c3ae1947e9e4fa8986099ceecdd58017569d0d4144824210a584a5972f4ed76688f
- SSDEEP 3072:dH3MzPTBhlIe9ZMWTyjOQl11g1wPxMIrKCf6ZKgnMj9zgp7VqgT2rwFrGBHOCo80:dkVleRs8TGLczG
- TLSH T17A16B57EE6AC4D770ABA63B069B94A07F420537F9641094F75FC480C6FBAC16118AF4E
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/dex/rbx_rmd.dat
- SHA256 9a786886e47c0e54b6162ba11fc25adfc20bebf159864d4136899e51328d245d
- MD5 989e79c2dbee3783ee3c4ac5aa1df139
- SHA1 57e48004db0048ade5e578cddacbc6adb1da357f
- SHA512 fb7264db2ceb71357f911e6064d530c202eed14d43ba5277de6c0f65113953c7661fa98d63c43c406e364f5cf5af69dde726f7f4b08cb1b93689327e56b1d47d
- SSDEEP 768:bh3EKcqlkyOUIO6cNdGuxvzDvcMSSwKaK3DKPi4q9U+PMI:FU0lkyOUv6SXUvP0DKPi4q9U+Pt
- TLSH T1F6948F04A1C46F2A4A764962CDCAA4B5EE5834A7867750F8F6DE37178F79C720833837
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/infiniteyield/assets/bindsandplugins.png
- SHA256 706263037beb626e53a1a6ecf6a4b6760424404e415ca9a6762888b614b6f1d8
- MD5 1a7c0cfce88cbe3f85070bca073d1f1d
- SHA1 da850ba6de7595d057a74061d52a464510eb7338
- SHA512 ae96122ec188b8e36b137fdff09af309e95cfce11618b4a182e2fe9eec1fdd88eb5ee78e4c1da6c08ae15f9780563d93fc456819359680558de95b6f9b3b9cb0
- SSDEEP 6144:AWz8+HzaaXJeNxhK7ZQ3LcHDQqbCSShzT0xwJVBmxb5Krk:xNkqULcsk/ShP0xwuVd
- TLSH T15C2423C4F2C09C69CD1D9EF9D3B635C46A7857AF11DB2E2329ABA71513A36E7001413E
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
bluys
BootstrapperNET/Workspace/infiniteyield/assets/close.png
- SHA256 7cb32428adef5c0d12de05ebe4a32af0980f58bea7765220633686bc412f0eee
- MD5 217b5f0cb8e9c85cb272fd63b8997ddd
- SHA1 608f574eca5958acf891d5479a11d6b4bb6a5955
- SHA512 17bfa9cc79abd19eb0e7758c77617afdbd92d53e7470d72f6280506987bff9b39fb9439e4583e32e81b0ddce9b8cb0b59e6b51beda27b5c361bbab6f92ce501b
- TLSH T1AED023E371C5AAECC603037810131001FE3704CF112E1C4874EC7A1D08603C8CAC1BC1
- MD5 SHA1 SHA512 TLSH
Password
bluys
BootstrapperNET/Workspace/infiniteyield/assets/editaliases.png
- SHA256 dcf9533481cc28b2d5d46ef94a3b42aef9c6807675808376599392227ba04e62
- MD5 78ea9e9fcaba6a0562477435fa30eb51
- SHA1 a69b889ac8a5a355c1d76639d8b09a72b6789ffc
- SHA512 4c7d80e5ac288f7273687a395865e2cb41fcad09d5b0db0c5a0e89bb7a19a1a12751023bfe3f31bdc46ad70253c1ce2ab972a7f5e3bf9f157b60d58f6fbc3636
- TLSH T193D097F21BC8FC7AC40F0322006141817EBB60230A6A0D07492A908848003C4D1D2E00
- MD5 SHA1 SHA512 TLSH
Password
bluys
BootstrapperNET/Workspace/infiniteyield/assets/editkeybinds.png
- SHA256 03d5dbbb6c04e4ceb7e0f9f26450da198b33ec85a91892149873553b8aadce7e
- MD5 4ce0bc48e5a913633b434b6e70d73dfe
- SHA1 6178765aa254907517030bce20935590cf1eeff1
- SHA512 7ddbb3a483d49bc284d1c4248ff031e81f552c5c7fe5a0aeab1c4ef00732d4baf6d17c4975628e60dae2c120788845fc2bd3c46f8bd1458010351ae1ab76cb90
- SSDEEP 96:ibggJFOlg09z+4u/NbhuwmaJk0AVc19OJF5dc5LAXbw9LERtWLKGJBJeDmDmhRgG:1l/aT3m0F1MwzE7LY0
- TLSH T131D18ED7C4BF16964D3597A25E09DF41393127AE1438B8A917987D6C8330EF96B1120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
bluys
BootstrapperNET/Workspace/infiniteyield/assets/edittheme.png
- SHA256 7937053abef56e47f3efebe8c05ae7d4dc94b8d69db8a81665fdc420ce5db2e9
- MD5 38c243e8227a925987f2d8b186d43134
- SHA1 e1d9c77bcd801aaea8c834cb6a5c4ae7a6d8e7de
- SHA512 736b7a821fef6906638fdbf5d24aaacde12f449c58e7f4a7b7172990ae94511b0c003f3f1d00cf29d2d57c9d61374deec666752099d1857186c813c268e273ad
- SSDEEP 384:+MAhabTUwLQnz0Np0bPbZLudf0YgqZ2weeVKH/+U1dQ3MbLwiG5gUw0N:+MAhcUwEamlyOYVwR1y3OUp5Fw0N
- TLSH T130B2D1B27E199CF547023D73AC22C93612D7CA4E09B6977763A1105F6A643878FDB12C
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/infiniteyield/assets/editwaypoints.png
- SHA256 f3bbb30719f819924cfb71a7ed4a24fc9c1f9be450afa2282cf96ad275de8f58
- MD5 a3f53528eef1f8241cbe5f2778eefe45
- SHA1 6b0158787ebab223acac3a722304d8d6c328c79e
- SHA512 24c6b856ad9af1542ccdd42a130cb495dc602edbb8a58fc1b48aa71b55efd035129e6d110afcc1bc6fe91a2b5d11fddf83a64650e1eaea253aeb691ad7fe31f6
- TLSH T188E0EBD352DCBB3AC40E0F2291840080BCBC042B2BBD0A04454C6C4D5F2138C90E3B50
- MD5 SHA1 SHA512 TLSH
BootstrapperNET/Workspace/infiniteyield/assets/imgstudiopluginlogo.png
- SHA256 90dc0bd9fd516440090255315bdbc7f51c14f7a01db21d3a116e1bfce55de85d
- MD5 46fc29e2f9e4cdab3711eef70b2eb7b4
- SHA1 6dcf4b2d91335f6f3081c309bb33ce7364625b24
- SHA512 b19d46ae24b805dd28c0760c8c1820bc700267ad8d08b13f7141e01c3ed86f2b5edf6a8e15359c9b475f292d98ed9132587facd4ae2718709950ce1d11770ab4
- SSDEEP 192:m6nGHrtn8lpIhO02rsXHQ1g7oth84k9/iIh+KoazHaZ3D7CI6ZmgSq5vq56:m6nypHO0v4S9/iIYKocHaZ3/CI6f86
- TLSH T1C2324C4C23E68D34EF98520971BB6A12DE73CA9396741AED719A94842EC104F3C7C2A6
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/infiniteyield/assets/logo.png
- SHA256 779b4c6061c80ce15be46eb57293c43447838317b32ebd3e873d22499fbc91da
- MD5 28272541c3c70b595d3227c462d0582e
- SHA1 25b4cbf82ac21bb35812b8e2369eac447671246a
- SHA512 626dd4561f715390644f6cfae680ed0dc88631085e87dcf749bcd7d06c9952ab1f53a49e83514d5cbb7a1ae868eac9d1c0e5f05763e00f7d5ec3a5be6a410222
- SSDEEP 768:oOEt3lI7MDilr2xg+3Cx/nv6oEsA3CJZ2p8bMPRaaT34csDE4qpF:GNpGlSFo18CJ0Wb67Ea
- TLSH T1B623F16ED5F44A5EB493B0C0C778BCDE16A35D0364309276E82FDA9C3A85CF7949093A
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/infiniteyield/assets/minimize.png
- SHA256 71bce62ec70d14dc4c10268888fea7c2e48a1b3e653c250319b433a6faa56835
- MD5 626ce5d4c71a7e49c87d033f24bb4148
- SHA1 a475f9f6f96a02762996a96cf5dd929f08bec65b
- SHA512 7bc7e46f3d41da10fd6baf49b4a731ee978c4f05aa5112f52140a05c8f9fdf044716a20cea9cd9b913d36d6992b5199eed33ae4cfde1ab9598ac279362caf5ac
- SSDEEP 384:s47NBpH4T59RIfsp4EWjh7QelXBsE4ClDHUjImE:Hu/ifsO1VQelxTR7ME
- TLSH T1BD62496BE4530D26A9CF21AF3F2D47E739B75B446E01220BFC048D4A31043A3B8197E4
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/infiniteyield/assets/pin.png
- SHA256 45ec478b7ed697034ccb49513da7af5cfe1f1011f4fe346cee81ea3f6a034c5f
- MD5 4c64f45835175eedb420c1036a001f8d
- SHA1 5a7912dc5a2b6e67ab01e464037d51624a5a9ebd
- SHA512 cbdf1c41c6bbd5c9859eeca3c33e57e42b790fdf6fdc102ad728e2101715033c71edc225cf686f198467c4c39883dc7d006ab329c55d40ec8cce8f99823ff949
- SSDEEP 768:sjr9mGbOc2cDMqm7QOWYGOIAX1B7qzeoQi7PflWX:crogB+/eDAX1INH7Q
- TLSH T1EDF2028FAC44F8ECF4FDB3975E602E2701B2746EE95FF1D2190A0888B9A52411F59D00
- MD5 SHA1 SHA512 SSDEEP TLSH
BootstrapperNET/Workspace/infiniteyield/assets/reference.png
- SHA256 2337bdc1df60a46dae38e5741636f08aab9f63f2a7d893e54b194021693dab82
- MD5 449777ba3927a2ac75e793831b4bee1f
- SHA1 cd74439ed67241b3ad69e72cdd27ede159712c8a
- SHA512 38f55a468f68efacb9ce07568b57a589817fbd2183d246f6d76f1712e427adf160cd4206cf3b6c9803507627063d3ff79fdb60d16fc13b608877f42ce1fbef18
- TLSH T148F0DCED5A20A2A4D12D397D0B2190D99C3A0082C0A74B0F7E098908D4F959992625F9
- MD5 SHA1 SHA512 TLSH
BootstrapperNET/Workspace/infiniteyield/assets/settings.png
- SHA256 c4a6379a8c4ca33ccf3110b5b522ad7dffe9d979966139f3362c671fb273e29e
- MD5 812a2dbcc553b3f6e7cd265100b1c3ee
- SHA1 94f8c9746e827263db6bc90c9ed9d394fbe6189c
- SHA512 b19b722016a23d494e27a92d65fc5230969f86387e5624d5fb776c50d42b9b71f5fbad53dab2b73055d8f35a034352564e316b505f6afef3dffa9d6ce06e2cd1
- TLSH T1950160C0396A8C7E8889B94BCA4EC041BCA3418D5B2B0E9A8678D304890524783C2A9B
- MD5 SHA1 SHA512 TLSH
BootstrapperNET/mpclient.dll
- IMPHASH d8b31f8c03e0c76ff245ed05a15ffe6c
- SHA256 c20dc658f8aa9b49e8f2bbf46880f8d6598723020d21e97e8bb5468660eaa698
- MD5 e463a3559c5c1c4cb67dea6737a0ab3f
- SHA1 f7042f2f81aad68430cc2eead7adf2c0d7fad16e
- SHA512 89667e30414f1166d0a646f08ac3a0b6651e5661fca5acb32ef1dbc2f26a7cc2789819cbff65436beb6cd9f5852f911932c976ed98f11f08175b18e20e689ce8
- SSDEEP 24576:TITTJx6KSAYMxWG73R+8DJRGQLkiNpXGZFDm2Cqa3PMQy0cq/nBele7tKDQ5IF2Q:kTVxUA/D7hVDzG2kZm2OID4v+uRkzF
- TLSH T1B1D54A06BCD048ADC099733188F626567B3DBC480B2263C72FA17A7A2E73BD16C76755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a9:75:85:fe:93:e0:4b:64:0a:d3:84:3e:cc:2a:9a:b2:e2:c8:06:0c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=*.ifixit.com
Chains
Jun 4, 2026
CN=*.ifixit.com
Subject
CN=*.ifixit.com
Serial Number
08:e0:aa:cf:eb:43:5c:8c:e3:93:6a:c6:3e:18:4c:b4
Issuer
CN=Amazon RSA 2048 M01
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Mar 23, 2026 - Oct 6, 2026
Minor OS version
1
Major OS version
6
Entry point
4944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStringsW
GetErrorMode
GetLastError
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetThreadContext
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
PostQueuedCompletionStatus
RaiseFailFastException
ResumeThread
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WerGetFlags
WerSetFlags
WideCharToMultiByte
WriteConsoleW
WriteFile
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
strerror
strlen
strncmp
vfprintf
wcslen
MpAllocMemory
MpClientUtilExportFunctions
MpConfigClose
MpConfigGetValue
MpConfigGetValueAlloc
MpConfigInitialize
MpConfigOpen
MpConfigRegisterForNotifications
MpConfigSetValue
MpConfigUninitialize
MpConfigUnregisterNotifications
MpFreeMemory
_cgo_dummy_export
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/btime/binding.node
- IMPHASH 0242ceb286e744ddd6dd8e963da637ee
- SHA256 98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
- MD5 13a2579ed95366185a6247c9e4b9f0cc
- SHA1 61fef12da622484e44b3c9ddcd61706c9af00aa0
- SHA512 7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0
- SSDEEP 1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t
- TLSH T1ECC36C57B2E541BFD4768278C9930A45D3B2B82507309BDF07A4425A1F237E1AE3EB72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
12732
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\obsidian-stage\electron\btime\build\Release\binding.pdb
kernel32
GetModuleHandleA
SetFileTime
CreateFileW
MultiByteToWideChar
GetLastError
CloseHandle
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
_register_binding_
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=3, id=257, version=27412,
count=120, id=1, productName=Unmarked objects,
count=2, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/get-fonts/binding.node
- IMPHASH 2a1b9a0a23b390c22659b30f7660d0da
- SHA256 149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
- MD5 eeb1d1ea9fc3f870f292161cfa79850d
- SHA1 ea4f4324245f9f4d6280ef285151f688221d6023
- SHA512 795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254
- SSDEEP 3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG
- TLSH T1E4C35B1B73A440BBE4778179C8531A05E772B8610B71DBDF07A0429A1F637E1AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16972
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\obsidian-stage\electron\get-fonts\build\Release\binding.pdb
kernel32
LoadLibraryExA
WideCharToMultiByte
GetUserDefaultLocaleName
GetModuleHandleA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
dwrite
DWriteCreateFactory
_register_binding_
Name
.text
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=5, id=257, version=27412,
count=125, id=1, productName=Unmarked objects,
count=3, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
BootstrapperNET/runtimes/app.asar.unpacked/node_modules/vibrancy-win/binding.node
- IMPHASH 56e83fb6e818a708f7895cf9d6058c3a
- SHA256 094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
- MD5 6c12c930f974e5bc7872b58964f42359
- SHA1 805c5c899c32535d2ee8b2bc12deefe5fdaae566
- SHA512 f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
- SSDEEP 3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
- TLSH T18AC35C1BB3E540BBE1768138C8671A15D372B8214B61DBAF13A4465D1F237E0AD3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
12204
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\obsidian-stage\electron\vibrancy-win\build\Release\binding.pdb
kernel32
GetModuleHandleA
GetProcAddress
GetModuleHandleW
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
_register_binding_
Name
.text
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=3, id=257, version=27412,
count=118, id=1, productName=Unmarked objects,
count=2, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
ReadME.txt
- SHA256 4b6f0259fff0b0381278bb1678364a5ddff54b380460b58f881425bd6155853f
- MD5 45c73baf2bf7e3586f4496a048c2c580
- SHA1 e868daf243f11892dc8c995bcca9f86a346af527
- SHA512 c77b9b3490aca196dd9a625873fac69b79fc62b28d8b655deaee7a458d3df772d11e61c5adc59463674b8461ce4b3b23bbfd10d828958b9afecd887213b04b73
- TLSH T12AA0014A89292DD312A158982B08B690C82E8042E3114D02EC16B20D561C899C0119EA
- MD5 SHA1 SHA512 TLSH