FOX OS PAID (BEST TWEAKS) (1).7z
- SHA256 b756ea7f7bdb457e4e982c080668c268b573050bc3381492b2575036d75cb706
Overview
overview
9Static
static
3FOX OS PAI...ed.bat
windows11-ltsc_2024-x64
1FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
7FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
7FOX OS PAI...ks.exe
windows11-ltsc_2024-x64
9FOX OS PAI...rt.bat
windows11-ltsc_2024-x64
8FOX OS PAI...rt.bat
windows11-ltsc_2024-x64
8FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
9FOX OS PAI...64.exe
windows11-ltsc_2024-x64
6FOX OS PAI...64.sys
windows11-ltsc_2024-x64
1FOX OS PAI...64.sys
windows11-ltsc_2024-x64
6FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
9FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
7FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
8FOX OS PAI...un.exe
windows11-ltsc_2024-x64
3FOX OS PAI...64.exe
windows11-ltsc_2024-x64
3FOX OS PAI...le.bat
windows11-ltsc_2024-x64
8FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
7FOX OS PAI...OP.exe
windows11-ltsc_2024-x64
7RegFromApp.chm
windows11-ltsc_2024-x64
1systeminfo...up.exe
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
FOX OS PAID (BEST TWEAKS)/Amd Bios Tweak By CatGamerOP/SPOILER_AMD_BIOS_Tweaks for Customer REAL_bytepressed.bat
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/Disable ETS by CatGamerOP.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/Ethernet Driver Tweaks by CatGamerOP.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral4
Sample
FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/Fortnite Strip by Foxy Tweaks.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
7 signatures
900 seconds
Behavioral task
behavioral5
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Export.bat
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral6
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Import.bat
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral7
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Intel BIOS Tweak by CatGamerOP.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
7 signatures
900 seconds
Behavioral task
behavioral8
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/SCEWIN_64.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral9
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/amifldrv64.sys
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/amigendrv64.sys
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral11
Sample
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/Intel BIOS Tweak by CatGamerOP.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
7 signatures
900 seconds
Behavioral task
behavioral12
Sample
FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/Nvidia Driver Strip by CatGamerOP.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral13
Sample
FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/Services&Drivers Tweak by CatGamerOP.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral14
Sample
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
5 signatures
900 seconds
Behavioral task
behavioral15
Sample
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun_x64.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
Behavioral task
behavioral16
Sample
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/SID_Example.bat
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral17
Sample
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Task Scheduler Tweak by CatGamerOP.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral18
Sample
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/Task Scheduler Tweak by CatGamerOP.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral19
Sample
RegFromApp.chm
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
1 signatures
900 seconds
Behavioral task
behavioral20
Sample
systeminformer-3.2.25011-release-setup.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
1 signatures
900 seconds
General
- Target FOX OS PAID (BEST TWEAKS) (1).7z
- Size 61.1MB
- Sample260620-nnqfbaew5m
- SHA256 b756ea7f7bdb457e4e982c080668c268b573050bc3381492b2575036d75cb706
- MD5 68a9c5de8c17a4129f6d1f3247305858
- SHA1 ecd3cc4523ada937c71b76d34655aa5d2fa0069f
- SHA512 442c87e482c0c5ed28ef96051ab9b8e14375397a54f6a5ba35dc5c24e51248398ff92f433cf0cdd5539070a35ee4d0acfa00ec7c652b19ac955a4320a345136d
- SSDEEP 1572864:toshOB0ejWMGGWlEoQmPh09B9IaR9ZwHy8zcRKPGv3K19LJzEfFA6KXY:vhk3tsPQl9DIO9mSdoPX9ap+Y
- TLSH T189E733D5B17659C7DAE913C4B7E24D9A88BB40D834A2C8C76BD804D40E835EA8DF7E70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyarmor 7 IoCs
resource yara_rule static1/unpack001/FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/Disable ETS by CatGamerOP.exe pyarmor static1/unpack001/FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/Fortnite Strip by Foxy Tweaks.exe pyarmor static1/unpack001/FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Intel BIOS Tweak by CatGamerOP.exe pyarmor static1/unpack001/FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/Intel BIOS Tweak by CatGamerOP.exe pyarmor static1/unpack001/FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/Nvidia Driver Strip by CatGamerOP.exe pyarmor static1/unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Task Scheduler Tweak by CatGamerOP.exe pyarmor static1/unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/Task Scheduler Tweak by CatGamerOP.exe pyarmor - Detects Pyinstaller 9 IoCs
resource yara_rule static1/unpack001/FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/Disable ETS by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/Ethernet Driver Tweaks by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/Fortnite Strip by Foxy Tweaks.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Intel BIOS Tweak by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/Intel BIOS Tweak by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/Nvidia Driver Strip by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/Services&Drivers Tweak by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Task Scheduler Tweak by CatGamerOP.exe pyinstaller static1/unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/Task Scheduler Tweak by CatGamerOP.exe pyinstaller - Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/Disable ETS by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/Ethernet Driver Tweaks by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/Fortnite Strip by Foxy Tweaks.exe unpack001/FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Intel BIOS Tweak by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/Intel BIOS Tweak by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/Nvidia Driver Strip by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/Services&Drivers Tweak by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Task Scheduler Tweak by CatGamerOP.exe unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/Task Scheduler Tweak by CatGamerOP.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun.exe unpack001/FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun_x64.exe
File Explorer
-
FOX OS PAID (BEST TWEAKS) (1).7z.7z 61.1MB
-
FOX OS PAID (BEST TWEAKS)/Amd Bios Tweak By CatGamerOP/SPOILER_AMD_BIOS_Tweaks for Customer REAL_bytepressed.bat.bat 17KB
-
FOX OS PAID (BEST TWEAKS)/Amd Bios Tweak By CatGamerOP/instrucciones.txt22B
-
FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/Disable ETS by CatGamerOP.exe.exe 8.5MB
-
Disable ETS by CatGamerOP.pyc6KB
-
FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/instrucciones.txt338B
-
FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/Ethernet Driver Tweaks by CatGamerOP.exe.exe 11.2MB
-
Network Tweaks Good v3.pyc52KB
-
FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/instrucciones.txt302B
-
FOX OS PAID (BEST TWEAKS)/Fortnite Profile by Foxy Tweaks (Travis & CatGamerOP)/Fortnite Profile by Foxy Tweaks (Travis & CatGamerOP).nip50KB
-
FOX OS PAID (BEST TWEAKS)/Fortnite Profile by Foxy Tweaks (Travis & CatGamerOP)/instrucciones.txt444B
-
FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/Fortnite Strip by Foxy Tweaks.exe.exe 12.4MB
-
Fortnite Strip by Foxy Tweaks.pyc31KB
-
FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/instrucciones.txt411B
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Export.bat.bat 529B
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Import.bat.bat 739B
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Intel BIOS Tweak by CatGamerOP.exe.exe 15.5MB
-
2.pyc63KB
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/SCEWIN_64.exe.exe 668KB
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/SCEWIN_FIX.reg294B
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/amifldrv64.sys.sys 28KB
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/amigendrv64.sys.sys 34KB
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/log-file.txt324B
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/Intel BIOS Tweak by CatGamerOP.exe.exe 15.5MB
-
2.pyc63KB
-
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/instrucciones.txt1KB
-
FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/Nvidia Driver Strip by CatGamerOP.exe.exe 11.2MB
-
Nvidia Driver Strip.pyc40KB
-
FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/password.txt12B
-
FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/Services&Drivers Tweak by CatGamerOP.exe.exe 11.2MB
-
Services&Drivers Tweak by CatGamerOP.pyc37KB
-
FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/password.txt12B
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun.exe.exe 891KB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun.ini57KB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun_x64.exe.exe 1.0MB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/SID_Example.bat.bat 1KB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Task Scheduler Tweak by CatGamerOP.exe.exe 11.2MB
-
Task Scheduler.pyc40KB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Version_History.txt3KB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/Task Scheduler Tweak by CatGamerOP.exe.exe 11.2MB
-
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/instrucciones.txt423B
-
RegFromApp.chm.chm 14KB
-
systeminformer-3.2.25011-release-setup.exe.exe 22.6MB
FOX OS PAID (BEST TWEAKS)/Amd Bios Tweak By CatGamerOP/SPOILER_AMD_BIOS_Tweaks for Customer REAL_bytepressed.bat
- SHA256 e878525d4563b54cb51fdf0972c917c1761c181616afe51534cf43a70cd0095b
- MD5 83c58c8b4dabbd4b26b170813c53d631
- SHA1 cb9bf76d2b93cc1950546551c8c59bb7bba8ce12
- SHA512 b1b0c3d002504ac3534b822727a3619d60accfee38ee850719125e6deb6c2518d80a670189816229716e1518be7ac946df240729bec3c7acb03c5da73e7405a2
- SSDEEP 192:PJDCLNagI7fiNfZ+NxSg8tINl1yaKpAobO6ZXgrgCg5gwgng+mvkN/RNYfKz9mH0:PJDCkgI7mAxXdze8GLbbeL8jka8
- TLSH T1C182624A653BEC02F1E2E99748392811CA0701DF86C6E662F3BD1D751F6F9B4E40FA52
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Amd Bios Tweak By CatGamerOP/instrucciones.txt
- SHA256 c3b01d33d9920aabfa052d473ee68faf05c5de6eba7eea89cb99126370b140bc
- MD5 ace7ac2c7eb160f59093176ec11cd895
- SHA1 b28a7c30fa574f849942a18e20ccd4c05aa0fdee
- SHA512 23d533b1c46725eab8fb41f71afb166420fe685f5c8ea95d0402f10bcd16b0ec0da22a970faade8eb62ee7489e3f34a0ab1752d4417148f395fbac3054da32e9
- MD5 SHA1 SHA512
FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/Disable ETS by CatGamerOP.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 8687a42c7f89909cd142a08fe35203421c3e7f6a44bedf111a92e82a62d947d9
- MD5 8539a43543946460ecc638c05cbe3c80
- SHA1 0781ca4016be802132cb8943646587546528cb36
- SHA512 e052de1e14a9e7f3d36b02a62fd7cc3d7ffe568bb46cd2593cb16416fddc96f4c648a1cc5d1586419f7933a940f40b27ce3de72dfc506db0490ffb92523e6ed1
- SSDEEP 196608:1sNTwhL8exA1HeT39Iig9SvKub75bcjWgbPVk0ax8ozfl5kjKB8+:PL41+TtIibvB5IjWqPfaxrz4
- TLSH T1259633B162A71DE5DAB3433445A2844ADAE1FC862771C6C743B43E8E1F372ED4EB9610
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
Disable ETS by CatGamerOP.pyc
- SHA256 a8215a555f592884ce81f40892279456deb7db878bafd8e993c81e79d089827b
- MD5 81020f8b6ea53ceb58bc2d7585174227
- SHA1 275b9c8fc886edc60547332378d9970f2462af03
- SHA512 5d119e0662dc820df321b05da5fd09eb251b83d24a3a8ed1299df3c41505219842d019a795f4ea1aa17672a283b2a2ee7f783feafc359576fe0cfd860e33d89f
- SSDEEP 192:T0FQNojWZNrp1Hhma1uigAj8fdLT/sV+K/O:CZKvrTLQAAlydO
- TLSH T116D18E8537669B4AFE4C01BA88AFB67A8FC2868C186A254EFD05D1370A716394D1093B
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Disable Event Trace Sessions by CatGamerOP/instrucciones.txt
- SHA256 da923d14bb445533120dfed38813d611143d2b8eb43e8a3c9f38a16162372e58
- MD5 14d6ccc8c653a576558007a616e4c177
- SHA1 fb818d0e73a454ddcb7fd5dabfa103f427014804
- SHA512 ec7b071f17b45f12e106aa7c2a7d8af3a083f11504345201e700a41598e3cf9e3a31743acac7c78c13bab45483a3443e8e4836c72872d3e5c823370900d58c2f
- TLSH T1EDE0C06E1DD007330FE1D604FBE4474B951199D5B460C0A1B6A88A19143870EC6FA9DF
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/Ethernet Driver Tweaks by CatGamerOP.exe
- IMPHASH a06f302f71edd380da3d5bf4a6d94ebd
- SHA256 002bd329c7366fd3ca7776f842d17dcfa1ea4d27b5e329af4a74ccdf587ff9c2
- MD5 f4b524dfb07d0a8fe926223e372e338b
- SHA1 0a56169843d5089dd50d46cf5a1b6eba2e214e17
- SHA512 6e30500588d5c971016282c555f02f8b90ead20487919ca6c1bcc801b91e6e04afd30334e67d555009b2c02391ffd6e080a0f90915f59c0cc570a502560fddd0
- SSDEEP 196608:tIz/0W8/LSNTwhLCA1HeT39IigKPvKub75bcjWgbwau5thoANN9k0ax8ozf4Akjf:HW8LLL1+TtIirPvB5IjWqwau5thoA/3T
- TLSH T14BC63384379908E8E9EA633499D1CA175BE174A513F1C6C76BF80DC21E532D9EFB8720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
50048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
FormatMessageW
GetLastError
GetModuleFileNameW
LoadLibraryExW
SetDllDirectoryW
CreateSymbolicLinkW
GetProcAddress
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
HeapSize
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetDriveTypeW
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=179, id=261, version=30795,
count=10, id=260, version=30795,
count=2, id=253, version=33808,
count=9, id=259, version=33808,
count=17, id=260, version=33808,
count=40, id=261, version=33808,
count=7, id=257, version=30795,
count=137, id=1, productName=Unmarked objects,
count=25, id=260, version=34123,
count=1, id=258, version=34123,
Network Tweaks Good v3.pyc
- SHA256 e92e108549c5d479b708f79135c87d2d3cebee423cb4857093fcc42a73e1c252
- MD5 b845dc241189bf1db522e1328a876c21
- SHA1 cb81303112b518518842e97f74e7420388a06a1a
- SHA512 f66ab13354897aee9b102479af8afbc1c460df618b19448f7b361dfb23a47a36c9fd1377be2a1570c91b71dce8479321a5aa9b88dca09f4681988b2f2d7c65c7
- SSDEEP 1536:Y26lCdAhCN8ijqFudISp6XNohkb/4qy0igDB0oEuwW72:Sl7hCiXY6XNoqb/4dLgaoEJH
- TLSH T17033020BF9901314EB097AF923215AD9CAEC92098DC9C33A8E19C0563C15AF9D7B325E
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Ethernet Driver Tweaks by CatGamerOP/instrucciones.txt
- SHA256 62b3f2ab29bf4d3349b8cf38ff9a4ccdf8bc1c55e16691915dcb323f4a978d78
- MD5 dba3df3aba1fbdbbf638c19885e9987f
- SHA1 914e59370a913264c04cfe5921b85c5f160e0b5d
- SHA512 9317e32f38a41056c50b17c416ee9b56cf1cc0abce7d47d1c1127a3af5d5ca6681b03ddbb0078121c9cecc93b70e995ae7f4eee390d61c414b21cf9892c00c7b
- TLSH T14DE0CD6ECB51D564B26244C289BA4903F065B1494705C9EB224A270DB2D6E5CD058BF7
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Fortnite Profile by Foxy Tweaks (Travis & CatGamerOP)/Fortnite Profile by Foxy Tweaks (Travis & CatGamerOP).nip
- SHA256 77ad67264b28e70c079cfa2b75149dbe5f46b99c651e353cc1deff0e3bbf66e7
- MD5 34ddaeb8fc28b80e2a375d8a55b2d74d
- SHA1 c8beace4abdc904c5690aa7e596f290c939ebd07
- SHA512 2aae0741cf334f8af2496a87fcd3751b6961516314a21549201aa4b637c0cc5f9de8032d926c964d2bf6a89eab0f8744a1c8903354fa5852e81de2c21e4171b2
- SSDEEP 96:PK94WT5pDztinScH5HRHjHOHIHxH1HGHqvHdHQHkHZHuHVHpHAHMHhHbHXH0HoH8:i94WT5pDztin8WXb0oRIszQECy24Pymr
- TLSH T12D33C06D71C56A0FA2385DD6F6669739DF28616704534070B89E360F2F339EA03E7E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Fortnite Profile by Foxy Tweaks (Travis & CatGamerOP)/instrucciones.txt
- SHA256 1c18d18a4d4f9f4073e6489842b51ddba3b2fb6b8392ac4adfd29993cdad463b
- MD5 038a14e53ffd0f4d971cdc2f30b5676a
- SHA1 d5325e0722d1230e54516eb96d1a5d20504e5dd6
- SHA512 4c8c192ff65dba3ed98729aa95f30e234b460c3279c7de75fd07d58aeee2cdceb1f112197cfd5535deb818caff319e13108447ede360204b7d2dea99b9b844fe
- TLSH T101F027567285269755F2666AA8000E97F08484A559598090D7A9832C142DD4C87AAA8B
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/Fortnite Strip by Foxy Tweaks.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 b3e619831a024d0fc48b3765a5b89665bbf1fccf6d0973d5d321b01686dec1c1
- MD5 bed60576efe133fbe180a7c1a7fc9152
- SHA1 2ec02648b3a0a13e8a1d06ef37f56ab4d28df591
- SHA512 35963ec7b6a267d28290217a313eea10b996ba7c672db4e6e9e6c0a48c479c6045ca358076dd08858e113d8d3e7644cfa3b9027f455462d8d010516c9226876f
- SSDEEP 393216:Dm1mZ/91FJ7L5ZLrhKGJbdq1B7LfHsoqEbpiJ:q1md9h55rhK2g1Nnlbp
- TLSH T1DBD633BA11C30D92E4B7923D4AA16592C1E2FC502B20C99B0B947E7D2F372FD9D39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
Fortnite Strip by Foxy Tweaks.pyc
- SHA256 61509c128e5bf80f37e4001eac20e11af7c97362dc84459cdef265502865909a
- MD5 9119f4b25fe130ec2ed5dc52430a460a
- SHA1 c60028e884a32814eb5a90a0b4629ddc0fbe3b78
- SHA512 15c08d0beaf47ad55559d943e6ef732eb7ba4e39199d0913b92fcc96f8a53f624600a4b08f0449d22981dff2f9c21b6fc4514af8efc18d96805c8c1b445a77c7
- SSDEEP 768:cbFLOaHFJQ0gg21+faGvesO21JrmHAduPu/68SOo73q:HaHFJF28Sq/1JrmquLi4q
- TLSH T1BCE2F1922C8D6562E9BA427DFB743B9DC6C704B1CD35A538C08060BE1DD3CA65AA1EF0
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Fortnite Strip by Foxy Tweaks/instrucciones.txt
- SHA256 94d973e27283f1100a2793d4de2496902cfe3e24e446be483ea5fb08274f3134
- MD5 f430bce5ffdce5998fb5481719dddd9e
- SHA1 de91530c5f19fa64f85764c1e75731bf8f2ed6e2
- SHA512 66af98e6d9a29e1aa60f6451d1af580c5ff3becad4d186e6a6c738997525a093897d4802729b773352014d22e2d5083d063c84816b898e5e94780a4def1933eb
- TLSH T18EE0E5C9FC27CFF460F25351EB89C8D26248344D91A9A862503251B1A41E0A8B1F3BE1
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Export.bat
- SHA256 283d6ea32f1aa30985dc7ff1564e345ef62ca8193d764418b3031bbba82bb7da
- MD5 bf354baed02884dc4cf002db55818873
- SHA1 66475f4de3baf56280ead4fc7c1303f5acbad307
- SHA512 205c681c36b856f46c4cb91ae7adab2bd006c4950a660414dffd12ddafd23828d82a2128a19eef4cf05124a2b1237a8f1a3c50643479c91c0cef045df7c98134
- TLSH T137F0C0433B4A1F72C0B281738F1012D9F0C541172491C6A83C0C46B16F3C8704BE05C8
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Import.bat
- SHA256 dc0f3e8f2d484742469d768266ca833fe7330d618770b628bcbaeb6bb40df6fd
- MD5 69ef99d985f7bc5e5e35471b251a84a3
- SHA1 36d08bc2cbf4cc6a1203fe1de18be71eac6a1cd2
- SHA512 f76067a1802be0dd45111ee85f9e69f989a716db962595b58898291ed3fd5178e0eb97c9c54742650b2969ab45184dedf6d8158975c93823c2b60117beec7b40
- TLSH T1FA01C0427E4D1EB7C0F29573CE2021D9E58A811B3591D9A93C8C86F2AFBC8744BE46CC
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/Intel BIOS Tweak by CatGamerOP.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 492f07ca3b12ee2f0977da7e8d9fa733d78c3877c972958be67c51ace2981bdd
- MD5 56aad06970de12fd29ea69843ee7eb74
- SHA1 de38015470b48b05f538be04c699ec3658d6674a
- SHA512 561dc674a6a0b7a8fc82ac3d6f2d5b768750f1c6f8b3a975da550c321e7610ce27f14f73fd1581b58129ef2becc8d2f687214cd6bdd3070629e1caa0f41a7b72
- SSDEEP 393216:WFu1tZ/91FJ7L5ZLrhKGJPdq1B7ZeXpcHsoqBbpiO:Wo1td9h55rhKeg13a8nIbp
- TLSH T16AF633B623C70D90E46AA23D96E15A57C1E1FC601B20CE9B1BA07DAC1E371EDED31B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
2.pyc
- SHA256 aeeb7602c8f98108cad7979b283340474b50864ad21d172e48910d813d7965b9
- MD5 7e1f57d8f2e48235d9c520fdc43d696e
- SHA1 1836eb01e4a9ffd891516ee810cf6da656e499aa
- SHA512 68cc6fd71c969f48f51e208b3509f4c9b91705548a44fe9e307473a8a7ca4569448a849d385a40a05b0973c37dd800ffbc98624eb382816cdc2fc21ab5e65600
- SSDEEP 1536:w6rElhVGA3O6gxE77eWa3mCqIBIkO4eJHqJ7EU:unVXDgK77eWymCqInDeJHqJ7v
- TLSH T16D5302B81F877C97BC638537A7A9EEB5029AFED7EDE1B106205D097A31B4D40A47420C
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/SCEWIN_64.exe
- IMPHASH c6ad08a1589dd9cf353748c20ce378ce
- SHA256 2d78e7bb62fcab44c54fe853f51e8836ada45ea374027423bcb6d7a5db46502b
- MD5 d89e8173dc0b82d80add7451d4aa4622
- SHA1 578358cd958756b1786f30e913e4195c0003333c
- SHA512 cb5e4ebf895b5414b70caa243d032ec1d8820ff3aac155aa065a449f3a3f7ef0b01a29b006d49c69c8c1f8c11235742f0a453b120132942d32d310c7b2d3808a
- SSDEEP 6144:Jk/u4+ss7CVVs7DYebnaGSEM1JLCUdDcwDfTx1ZdeuLJzVpEKz7k32lobAYBhXcP:JTjC/s7DjkDZdeuLHuEm2ybAYBc/3+s
- TLSH T11AE40956E7F351E8D8B6D03489A22236FAB178548738DBC78794860B0B72FF0993E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:4f:56:4e:4f:9b:a7:68:c9:b1:53:d9:6b:ae:32:32:e5:c1:99:ae:20:01:3d:d6:fd:62:2d:be:df:b4:f3:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=7155083,CN=AMI US HOLDINGS INC,O=AMI US HOLDINGS INC,POSTALCODE=30093,STREET=5555 Oakbrook Parkway Suite 200,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 22, 2021
SERIALNUMBER=7155083,CN=AMI US HOLDINGS INC,O=AMI US HOLDINGS INC,POSTALCODE=30093,STREET=5555 Oakbrook Parkway Suite 200,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
SERIALNUMBER=7155083,CN=AMI US HOLDINGS INC,O=AMI US HOLDINGS INC,POSTALCODE=30093,STREET=5555 Oakbrook Parkway Suite 200,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
b9:96:37:58:ea:d2:36:c6:e1:5c:d4:8b:a5:43:3a:ae
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 21, 2020 - Sep 21, 2023
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
61:18:54:86:00:00:00:00:00:24
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 11, 2011 - Apr 11, 2021
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2020 - Jan 22, 2032
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
2
Major OS version
5
Entry point
4652
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
SetConsoleCtrlHandler
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
HeapFree
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
RaiseException
RtlPcToFileHeader
HeapSize
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
SetUnhandledExceptionFilter
GetVersionExW
LoadLibraryExW
GetCommandLineA
GetProcessHeap
SetEndOfFile
GetWindowsDirectoryA
LoadLibraryA
GetSystemDirectoryA
CloseHandle
GetFullPathNameA
GetSystemFirmwareTable
SetThreadExecutionState
CreateMutexA
SetProcessAffinityMask
GetVersionExA
GetCurrentDirectoryA
GetModuleHandleA
DeleteFileA
CreateFileA
DeviceIoControl
CreateNamedPipeA
ReadFile
CreateThread
LocalFree
GetLocalTime
DebugBreak
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointer
CreateFileW
WriteConsoleW
SetStdHandle
advapi32
DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
OpenSCManagerA
shell32
ShellExecuteA
user32
SystemParametersInfoA
BlockInput
ExitWindowsEx
MessageBoxA
RegisterClassExA
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
wsprintfA
Name
.text
Size
523KB
Virtual Size
523KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=14, id=170, productName=VS2010 build 30319, version=30319,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=136, version=30729,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=135, id=1, productName=Unmarked objects,
count=2, id=150, version=20413,
count=12, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=164, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=111, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/SCEWIN_FIX.reg
- SHA256 81c6521083f562167b7960c823a4dd9e12ad8ac04ab07fc281f5700b6b609828
- MD5 0c8e09abb151b56d45419209234b2066
- SHA1 d7e5fe0aa0a458752c485311005dd3ca918ae448
- SHA512 a61cc685a98c948aea86ed2c5211a745eb2a41aea0ab0fb0309601c2353ba2c12717537c6618b573ff811ca3f88480173a6a545e77f7f79221465bad36be5e90
- TLSH T136E0171107F5250AF3F31E854EF8E9579A33AA941D26C49C1294474E45B0A50D83137B
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/amifldrv64.sys
- IMPHASH 4fbdc03e4487f98fb59360ea5b3e640d
- SHA256 e7cbfb16261de1c7f009431d374d90e9eb049ba78246e38bc4c8b9e06f324b6f
- MD5 e5e8ecb20bc5630414707295327d755e
- SHA1 06ecf73790f0277b8e27c8138e2c9ad0fc876438
- SHA512 f8949a43b5d0b08349b719daac12089fd94e824e307ae5265fd39885029a19a91d35a45dd3f3ff41cd0e3d563d4419d96221212d96b5a9a10e5ebe952dfb16aa
- SSDEEP 384:xv+wvxzpsQbQS5Z5OxV0HM2DecoLiZFnJtQSZsHLPK6jzHpNMbvFRJl6p+w:xvPvxtV5lgCM8eBLgJt6PKgDpNMPO
- TLSH T11CD23B91C6789C43EEA3DD3062F8E6177E34B6822760C6DF4165D4904F92BD2AB3C369
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
70:9a:b9:53:02:bb:44:c7:a7:da:fa:f3:42:ca:93:34:22:ea:03:ed:7b:49:2b:e2:04:a3:19:16:1f:eb:35:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 11, 2020
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
c4:2f:ea:a6:c9:78:8b:71:61:b7:65:f7:25:07:02:04:f7:b5:e3:ec
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 11, 2020
SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
61:20:4d:b4:00:00:00:00:00:27
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0e:55:cd:b4:e7:e8:ee:b9:dd:5d:89:fc:1d:75:88:ca
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 30, 2017 - Sep 24, 2020
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:97:d7:9f:85:90:6e:a3:18:a4:00:00:00:00:00:97
Issuer
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 11, 2020 - Mar 5, 2021
Subject
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0b:aa:c1:00:00:00:00:00:09
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:16:93:22:ea:bf:bb:2d:4d:e6:00:00:00:00:01:16
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
6
Entry point
24676
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d:\amibios\utility\amiflashdriver\flashdriverwin64\Release\amd64\amifldrv64.pdb
ntoskrnl.exe
ZwMapViewOfSection
RtlInitUnicodeString
ZwUnmapViewOfSection
ZwClose
ObReferenceObjectByHandle
ZwOpenSection
MmUnmapLockedPages
MmFreeContiguousMemory
MmBuildMdlForNonPagedPool
IoFreeMdl
MmMapIoSpace
MmMapLockedPagesSpecifyCache
IoAllocateMdl
MmAllocateContiguousMemory
IoDeleteSymbolicLink
IoDeleteDevice
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
KeBugCheckEx
MmGetPhysicalAddress
MmUnmapIoSpace
hal
HalTranslateBusAddress
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
604B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
264B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
910B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=23, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=137, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/amigendrv64.sys
- IMPHASH 07a42e80559d960b176c0fc8fd309bfe
- SHA256 ffc72f0bde21ba20aa97bee99d9e96870e5aa40cce9884e44c612757f939494f
- MD5 7b9717c608a5f5a1c816128a609e9575
- SHA1 ec457a53ea03287cbbd1edcd5f27835a518ef144
- SHA512 4138ca89d0d74799ff10e512c247ea626846d107f0e054aef403adafeb7c7708415cb9e4ce7dbf0d168e98101f9faf5d5d3567ca7fc64406f72b1bd7a751664c
- SSDEEP 384:79TBPBgGLd6veRHilu/XWncQ528rQjX+kl811pZFnJtQSZsHLPK6jzE9bvFRrqP8:pFsvSClu/mRH8lklJt6PKg49Puti
- TLSH T159F24C9197B44886FDA79E3062E4D2277E75F7923A30C7DF0160D0641FA3BC2A63835A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
51:67:b3:3a:95:b4:db:0a:12:44:cb:3b:95:d4:02:45:87:d9:a5:a9:52:22:ba:bb:03:32:10:e6:b1:11:d2:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 23, 2020
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
60:55:db:c4:53:c1:11:e5:7c:85:ec:8c:fa:d9:e6:e1:14:21:c8:d4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 22, 2020
SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
61:20:4d:b4:00:00:00:00:00:27
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0e:55:cd:b4:e7:e8:ee:b9:dd:5d:89:fc:1d:75:88:ca
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 30, 2017 - Sep 24, 2020
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:97:d7:9f:85:90:6e:a3:18:a4:00:00:00:00:00:97
Issuer
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 11, 2020 - Mar 5, 2021
Subject
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0b:aa:c1:00:00:00:00:00:09
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:0a:52:c8:39:01:52:d1:70:4b:00:00:00:00:01:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
36864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\AMIBIOS\Utility\AmiFlashDriver\AmiFlashDriverSrc\sys\x64\Release\amifldrv64.pdb
ntoskrnl.exe
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmAllocateContiguousMemory
MmFreeContiguousMemory
IoAllocateMdl
IoFreeMdl
MmGetPhysicalAddress
RtlInitUnicodeString
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
KeLowerIrql
KfRaiseIrql
MmBuildMdlForNonPagedPool
MmUnmapIoSpace
ObReferenceObjectByHandle
ZwClose
ZwOpenSection
ZwMapViewOfSection
ZwUnmapViewOfSection
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
MmMapIoSpace
RtlCompareMemory
hal
HalTranslateBusAddress
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
508B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
512B
Virtual Size
328B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=1, productName=Unmarked objects,
count=5, id=257, version=24610,
count=5, id=259, version=24610,
count=4, id=262, version=24610,
count=4, id=260, version=24610,
count=2, id=259, productName=VS2015 UPD3 build 24210, version=24210,
count=9, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/5.05.01.0002/log-file.txt
- SHA256 5be8f43fd866ef86658707f15416c8f9e0bdc03351c8144a054ebd0f305d0c64
- MD5 7cc69f76c78246c2ec6c2c17d25b6046
- SHA1 95ea90735ec20e9f47d24d19ecb92e12641c8d1c
- SHA512 d71d9220471b3a17f4df4178965cb38051c0d28c2be135489bc369484f9c6e05493f91912e3380a9ee10d4500a770c7e6b1e4684057bcabb97728a466c2ca219
- TLSH T1CFE09BDD5C64E1511430D2475953559DED05525756170643775D474B0731511166C051
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/Intel BIOS Tweak by CatGamerOP.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 492f07ca3b12ee2f0977da7e8d9fa733d78c3877c972958be67c51ace2981bdd
- MD5 56aad06970de12fd29ea69843ee7eb74
- SHA1 de38015470b48b05f538be04c699ec3658d6674a
- SHA512 561dc674a6a0b7a8fc82ac3d6f2d5b768750f1c6f8b3a975da550c321e7610ce27f14f73fd1581b58129ef2becc8d2f687214cd6bdd3070629e1caa0f41a7b72
- SSDEEP 393216:WFu1tZ/91FJ7L5ZLrhKGJPdq1B7ZeXpcHsoqBbpiO:Wo1td9h55rhKeg13a8nIbp
- TLSH T16AF633B623C70D90E46AA23D96E15A57C1E1FC601B20CE9B1BA07DAC1E371EDED31B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
2.pyc
- SHA256 aeeb7602c8f98108cad7979b283340474b50864ad21d172e48910d813d7965b9
- MD5 7e1f57d8f2e48235d9c520fdc43d696e
- SHA1 1836eb01e4a9ffd891516ee810cf6da656e499aa
- SHA512 68cc6fd71c969f48f51e208b3509f4c9b91705548a44fe9e307473a8a7ca4569448a849d385a40a05b0973c37dd800ffbc98624eb382816cdc2fc21ab5e65600
- SSDEEP 1536:w6rElhVGA3O6gxE77eWa3mCqIBIkO4eJHqJ7EU:unVXDgK77eWymCqInDeJHqJ7v
- TLSH T16D5302B81F877C97BC638537A7A9EEB5029AFED7EDE1B106205D097A31B4D40A47420C
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Intel BIOS Tweak by CatGamerOP/instrucciones.txt
- SHA256 722c18d84b4b1a75101e0e0de69245ae444d4169e9db68195dae6c25b765d5c1
- MD5 7abbcccdce831bc3fc092bd2bb9db532
- SHA1 08413a08ee7263d3c1ef3ffcce90a2667f9a936d
- SHA512 4b44a62e85a6e23eec712be2dcbe677228aeefb53f997c109bd9126128379865bcab4d1a71300ec527bdedf545fee7f1a5852b65f4e6c2386daf04d7661958be
- TLSH T1FB21673B85D53F6341D01702F7829637F1548541605DD7BDF6A2D21CA329E48E22770D
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/Nvidia Driver Strip by CatGamerOP.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 8cc93489c7473feafc71bee71dbd99f6828fa77fb93f13cc27ecb41ccdfcaef6
- MD5 ca4abb212d7def9ffc402e6a5bc98544
- SHA1 6c423a38f7e7f6193c3f210c8d5b9ba4b272a3fa
- SHA512 b0f614e9800f2875bafe64e891294baa35467bcafb6f2d6b6e11ede4457bfde77c5ecdbc6a74a13f75a98a567676cefbadcaca1dedcf40f36f36da24ac2070c4
- SSDEEP 196608:zY/0W8/LSNTwhL0A1HeT39Iig9hvKub75bcjWgbwau5thoANN9k0ax8ozfh5kjK1:TW8LLN1+TtIimvB5IjWqwau5thoA/3ai
- TLSH T126C63380339918D8E9DB533499D1CA2B9FA274A553B1C6C717F80DC21E632D9EFB9720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
Nvidia Driver Strip.pyc
- SHA256 2003ab87ee3c3d4ea5d7b1b6740cd9682004c832de3a557a7b23dce51e255286
- MD5 f81eae624bb7c3e189d42069b2392c4d
- SHA1 2ec1a77322f2a6646b52a53947e8723d55b5de68
- SHA512 7995f3c83f2a2a1bff130aeb40fc7b92df411067770fed2cd8f6208a0eb95834647332ebaebec0a7297f793860526e832f7a30b129e6c16c71e27cbb670a2371
- SSDEEP 768:adVIiVAzaqs5KWtavNydDNJJv1hG6FJKFg+e5UUo16XP+RKbi:adVfUax0W5DzJthnFJeFN6XPzm
- TLSH T1B4130285F82EF66FC9A5FBF5EC614D7C3C1FA849BA0CCD901012A1EBD12116F79182A4
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Nvidia Driver Strip by CatGamerOP/password.txt
- SHA256 6b36a794ee9ebf6eb5930e06368229e66f4a216d861619d421d71a2fcb41412e
- MD5 b339d75f27732592bfb221b50df9d9d7
- SHA1 10fb9ed19e773729ad755c50c9fc30eb5df66443
- SHA512 a9bfc8939805c0771ecd9bfe46f8a969a9665a4dccba70129bf31a96fe92a16a846ca36095f4c75aa6b52a15ca2e9e512a6ecdde607d80d877ff7c0d43009f33
- MD5 SHA1 SHA512
FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/Services&Drivers Tweak by CatGamerOP.exe
- IMPHASH a06f302f71edd380da3d5bf4a6d94ebd
- SHA256 a81c90c74932a9d1f5cda6de0c6f66c8e07c3f2a858fd9a866c0a19d8768f6fd
- MD5 8d639a394d8af051227e267e67fd025c
- SHA1 0f1753bbce9b63e30c2e9d76e27f12be1823fad9
- SHA512 69330aba5175115c345760d02afde821693b2313929fbac9242db871a3b0594787703192e1e856669ae7cbde74473246680c9566a151fb335d3fd8f5105e4134
- SSDEEP 196608:qyi/0W8/LSNTwhLCA1HeT39IigKWvKub75bcjWgbwau5thoANN9k0ax8ozf4Akjf:FW8LLL1+TtIirWvB5IjWqwau5thoA/3T
- TLSH T1D7C6338037990CE8E9EA533499D1CA175BA274A513F1C6C76BF80DC21E572D8EFB8760
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
50048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
FormatMessageW
GetLastError
GetModuleFileNameW
LoadLibraryExW
SetDllDirectoryW
CreateSymbolicLinkW
GetProcAddress
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
HeapSize
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetDriveTypeW
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=179, id=261, version=30795,
count=10, id=260, version=30795,
count=2, id=253, version=33808,
count=9, id=259, version=33808,
count=17, id=260, version=33808,
count=40, id=261, version=33808,
count=7, id=257, version=30795,
count=137, id=1, productName=Unmarked objects,
count=25, id=260, version=34123,
count=1, id=258, version=34123,
Services&Drivers Tweak by CatGamerOP.pyc
- SHA256 57f98395b97aa29c0924ed84887a3350c017763f71a1d1e483de322a13fda90b
- MD5 1f10ae71a284882e6ae9e97e49276c8a
- SHA1 02ba3c50253ba21f0a681a93652af9c03955ae19
- SHA512 4fcf897dd97c5e6d4d846328ab77ee3aa7ae2ff730eb55b7dcd425025aed24f66a563a1c0d41bc3f244974d2d501ea12209274896cf83d7dbaccc841687da8c8
- SSDEEP 768:xKt0UIhNgT13QpmkX5UPndMhnRlLsk5ZJX/xK5g9hVb7x3InLmIctN6:8t0UWNw3mmG5UPm1soJKKHb7dmmIctN6
- TLSH T1E60301F1D1C49EB7DE4E9FB186B348219B726AE054376BF8847F6375268D8094C1C362
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Services&Drivers Tweak by CatGamerOP/password.txt
- SHA256 d68764b08cd6583e5ed76ae00a551c2f60eb2b3005b14bfb25cc15ba72acb63c
- MD5 d99d726a57ca52f285beb9573fc22c90
- SHA1 c0b27b8f90f6be41f116e2cd2b339d87deb6fe78
- SHA512 6139d6e41202137a1c9a6fd48c1fbc012c97150cc5776c836c9a16600bf5a18728f55a97cea4b4d307262ed167515e43c77ae0111988b1248b20bafa209c8670
- MD5 SHA1 SHA512
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun.exe
- IMPHASH 870b8e75c7190e202e9c6c81dff1040c
- SHA256 4545392a2d54b613e67fc801ca478b89f69f9adbf7e7e6fafbe424fb26b97abd
- MD5 819a19117d17c92e08eb85a2262727d3
- SHA1 bcc884921ed8d23a40ebeb2e134cba50c95959ab
- SHA512 1d0d50c96dd2014923633c82f2a4f1baf9e84246bef0a8e6504682042b93479e9fe7386e80ddfbd3098d4181fba0e8a9d96709cb92573c4dcde77d7b7b842ee8
- SSDEEP 12288:qaWzgMg7v3qnCikErQohh0F4aCJ8lnyrQP8tbb9ROjEn4N5iTiDdYXxFGJ:FaHMv6C0rjynyrQIbnOwn4N5iTiDm/GJ
- TLSH T13415CF52B7D680F2D99239B1197BE727EB357D190726C4C7A7E03E768E311009B3A362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
6d:58:eb:44:3a:6f:b9:91:f8:da:5a:74:15:aa:f9:54:23:53:9a:50:71:9f:ea:b4:a0:7c:ad:81:a4:5f:e2:36
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Chains
Aug 4, 2025
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
PE Signature issue
Digest
3a:17:e3:5e:ad:da:93:75:e8:9b:54:0c:67:5e:1d:2b:f6:d8:04:3f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Chains
Aug 4, 2025
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Subject
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Serial Number
2d:ae:06:b0:59:46:95:56
Issuer
CN=Sordum Software Root,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 4, 2025 - Aug 3, 2034
Subject
CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 11, 2025 - Dec 10, 2034
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
0
Major OS version
5
Entry point
90896
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
wsock32
__WSAFDIsSet
setsockopt
ntohs
recvfrom
sendto
htons
select
listen
WSAStartup
bind
closesocket
connect
socket
send
WSACleanup
ioctlsocket
accept
WSAGetLastError
inet_addr
gethostbyname
gethostname
recv
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
timeGetTime
waveOutSetVolume
mciSendStringW
comctl32
ImageList_Remove
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Create
InitCommonControlsEx
ImageList_Destroy
mpr
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
WNetUseConnectionW
wininet
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetCrackUrlW
HttpQueryInfoW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
FtpOpenFileW
FtpGetFileSize
InternetOpenUrlW
InternetQueryOptionW
InternetQueryDataAvailable
psapi
EnumProcesses
GetModuleBaseNameW
GetProcessMemoryInfo
EnumProcessModules
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
LoadUserProfileW
kernel32
HeapAlloc
Sleep
GetCurrentThreadId
RaiseException
MulDiv
GetVersionExW
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
QueryPerformanceCounter
VirtualFreeEx
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
CreateFileW
SetFilePointerEx
ReadFile
WriteFile
FlushFileBuffers
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetFileTime
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
FindNextFileW
lstrcmpiW
MoveFileW
CopyFileW
CreateDirectoryW
RemoveDirectoryW
SetSystemPowerState
QueryPerformanceFrequency
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
OutputDebugStringW
GetLocalTime
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
CreatePipe
InterlockedExchange
TerminateThread
GetTempPathW
GetTempFileNameW
VirtualFree
FormatMessageW
GetExitCodeProcess
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumeInformationW
SetVolumeLabelW
CreateHardLinkW
DeviceIoControl
SetFileAttributesW
GetShortPathNameW
CreateEventW
SetEvent
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalLock
GlobalUnlock
GlobalAlloc
GetFileSize
GlobalFree
GlobalMemoryStatusEx
Beep
GetComputerNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcessId
GetCurrentThread
GetProcessIoCounters
CreateProcessW
SetPriorityClass
LoadLibraryW
VirtualAlloc
LoadLibraryExW
HeapFree
WaitForSingleObject
CreateThread
DuplicateHandle
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameW
GetFullPathNameW
ExitProcess
ExitThread
GetSystemTimeAsFileTime
SetCurrentDirectoryW
IsDebuggerPresent
GetCurrentDirectoryW
ResumeThread
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
HeapReAlloc
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringW
LCMapStringA
RtlUnwind
SetFilePointer
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetTickCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
EnumResourceNamesW
SetEnvironmentVariableA
user32
SetWindowPos
GetCursorInfo
RegisterHotKey
ClientToScreen
GetKeyboardLayoutNameW
IsCharAlphaW
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperW
GetMenuStringW
GetSubMenu
GetCaretPos
IsZoomed
MonitorFromPoint
GetMonitorInfoW
SetWindowLongW
SetLayeredWindowAttributes
FlashWindow
GetClassLongW
TranslateAcceleratorW
IsDialogMessageW
GetSysColor
InflateRect
DrawFocusRect
DrawTextW
FrameRect
DrawFrameControl
FillRect
PtInRect
DestroyAcceleratorTable
CreateAcceleratorTableW
SetCursor
GetWindowDC
GetSystemMetrics
GetActiveWindow
CharNextW
wsprintfW
RedrawWindow
DrawMenuBar
DestroyMenu
SetMenu
GetWindowTextLengthW
CreateMenu
IsDlgButtonChecked
DefDlgProcW
ReleaseCapture
SetCapture
WindowFromPoint
CreateIconFromResourceEx
mouse_event
ExitWindowsEx
SetActiveWindow
FindWindowExW
EnumThreadWindows
SetMenuDefaultItem
InsertMenuItemW
IsMenu
TrackPopupMenuEx
GetCursorPos
DeleteMenu
CheckMenuRadioItem
CopyImage
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
SetForegroundWindow
IsIconic
FindWindowW
SystemParametersInfoW
PeekMessageW
SendInput
GetAsyncKeyState
SetKeyboardState
GetKeyboardState
GetKeyState
VkKeyScanW
LoadStringW
DialogBoxParamW
MessageBeep
EndDialog
SendDlgItemMessageW
GetDlgItem
SetWindowTextW
CopyRect
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
GetMenu
DestroyWindow
EnumWindows
GetDesktopWindow
IsWindow
IsWindowEnabled
IsWindowVisible
EnableWindow
InvalidateRect
GetWindowThreadProcessId
AttachThreadInput
GetFocus
GetWindowTextW
ScreenToClient
SendMessageTimeoutW
EnumChildWindows
CharUpperBuffW
GetClassNameW
GetParent
GetDlgCtrlID
SendMessageW
MapVirtualKeyW
PostMessageW
GetWindowRect
SetUserObjectSecurity
GetUserObjectSecurity
CloseDesktop
CloseWindowStation
OpenDesktopW
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
MessageBoxW
DefWindowProcW
MoveWindow
AdjustWindowRectEx
SetRect
SetClipboardData
EmptyClipboard
CountClipboardFormats
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
BlockInput
GetMessageW
LockWindowUpdate
DispatchMessageW
GetMenuItemID
TranslateMessage
SetFocus
PostQuitMessage
KillTimer
CreatePopupMenu
RegisterWindowMessageW
SetTimer
ShowWindow
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
GetSysColorBrush
GetForegroundWindow
MessageBoxA
DestroyIcon
UnregisterHotKey
CharLowerBuffW
MonitorFromRect
keybd_event
LoadImageW
GetWindowLongW
gdi32
DeleteObject
GetObjectW
GetTextExtentPoint32W
ExtCreatePen
StrokeAndFillPath
StrokePath
EndPath
SetPixel
CloseFigure
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchBlt
GetDIBits
LineTo
AngleArc
MoveToEx
Ellipse
PolyDraw
BeginPath
Rectangle
GetDeviceCaps
SetBkMode
RoundRect
SetBkColor
CreatePen
CreateSolidBrush
SetTextColor
CreateFontW
GetTextFaceW
GetStockObject
CreateDCW
GetPixel
DeleteDC
SetViewportOrgEx
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
RegConnectRegistryW
RegEnumKeyExW
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
InitiateSystemShutdownExW
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
CreateProcessAsUserW
CreateProcessWithLogonW
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
SetSecurityDescriptorDacl
CopySid
LogonUserW
GetTokenInformation
GetAclInformation
GetAce
AddAce
GetSecurityDescriptorDacl
shell32
DragQueryPoint
ShellExecuteExW
SHGetFolderPathW
DragQueryFileW
SHEmptyRecycleBinW
SHBrowseForFolderW
SHFileOperationW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc
ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
DragFinish
ole32
OleSetMenuDescriptor
MkParseDisplayName
OleSetContainedObject
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
IIDFromString
StringFromIID
OleInitialize
CreateBindCtx
CLSIDFromProgID
CoInitializeSecurity
CoCreateInstanceEx
CoSetProxyBlanket
OleUninitialize
oleaut32
SafeArrayAllocData
SafeArrayAllocDescriptorEx
SysAllocString
OleLoadPicture
SafeArrayGetVartype
SafeArrayDestroyData
SafeArrayAccessData
VarR8FromDec
VariantTimeToSystemTime
VariantClear
VariantCopy
VariantInit
SafeArrayDestroyDescriptor
LoadRegTypeLi
GetActiveObject
SafeArrayUnaccessData
Name
.text
Size
512KB
Virtual Size
512KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=150, version=20413,
count=30, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=178, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=109, productName=VS2005 build 50727, version=50727,
count=33, id=123, productName=VS2005 build 50727, version=50727,
count=525, id=1, productName=Unmarked objects,
count=70, id=143, version=30729,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun.ini
- SHA256 d8d27d3b0224d0a5ee935c7bbe900f7c3866bd267eb277822790816fa7297ea6
- MD5 c635bb75ee56fc1c49677c1f5f848389
- SHA1 9669b61f258b5784ceb93087a7829a269c33b1dc
- SHA512 999199458d83bb566fd17970953c9af652a536590eae9e5f0846a2a4c21338f25a4dfa41cd98268982a7f602bcd30bf4698d7b0114557a637d3d41fa39646c56
- SSDEEP 768:TBw5vS4nrmaZfEqMjxnXyNBcdkgzNxnrKx0iq1ujOF:TevS4KaZfEqMjxnWBQj/rTujg
- TLSH T15543321A17EB4116F3F3AB50E9B40A625B37BD92A93CD44D1EC10D4D09F8D50A862BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/PowerRun_x64.exe
- IMPHASH 42b8d4fa3bc2c4336a20de1bdf1422d8
- SHA256 b066ca2702853c2fcbf686897c18f6d315be7ae753007ac2c1d73c87b0a30de9
- MD5 ab06eeb603656d3943cd30396f82a45f
- SHA1 1a12519bdeb372e8b1836d78ec61617bbac166aa
- SHA512 74e4752cd6e36a6b517685ec93ba8404a0c3c51a21cfdcc12498c896cfcf4a0ea14af1cd512471f9d3dfb19e80b28b275fb1ecedc6a5ec07faeb5fff3a60ff56
- SSDEEP 24576:02DW/xbqX2YIb4Qsu3/PNLZQeHy0ed1uli7:02EWXtQsW/PNdQ2gMlu
- TLSH T16C359E59F6A444F4C47AE1B6CE56C12BE2F1BC08477597CB06607E6A1F33BD0693A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f9:af:d1:0a:d6:1c:ca:5e:b2:10:24:11:ee:36:47:87:09:2f:a1:5c:52:11:72:01:67:0d:45:12:c6:c5:51:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Chains
Aug 4, 2025
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
PE Signature issue
Digest
86:7a:10:30:d2:e0:af:22:b2:35:4a:1a:f6:6e:c8:36:b7:3b:7d:d8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Chains
Aug 4, 2025
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Subject
CN=Sordum Software,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Serial Number
2d:ae:06:b0:59:46:95:56
Issuer
CN=Sordum Software Root,O=sordum.org,2.5.4.13=#134446696e64206f757420746865206c6174657374206e65777320616e6420736f6674776172652066726f6d20536f7264756d2061743a207777772e736f7264756d2e6f7267
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 4, 2025 - Aug 3, 2034
Subject
CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 11, 2025 - Dec 10, 2034
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
2
Major OS version
5
Entry point
119932
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wsock32
__WSAFDIsSet
setsockopt
ntohs
recvfrom
sendto
htons
select
listen
WSAStartup
bind
closesocket
connect
socket
send
WSACleanup
ioctlsocket
accept
WSAGetLastError
inet_addr
gethostbyname
gethostname
recv
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
timeGetTime
waveOutSetVolume
mciSendStringW
comctl32
ImageList_Remove
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Create
InitCommonControlsEx
ImageList_Destroy
mpr
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
WNetUseConnectionW
wininet
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetCrackUrlW
HttpQueryInfoW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
FtpOpenFileW
FtpGetFileSize
InternetOpenUrlW
InternetQueryOptionW
InternetQueryDataAvailable
psapi
EnumProcesses
GetModuleBaseNameW
GetProcessMemoryInfo
EnumProcessModules
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
LoadUserProfileW
kernel32
HeapAlloc
Sleep
GetCurrentThreadId
RaiseException
MulDiv
GetVersionExW
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
QueryPerformanceCounter
VirtualFreeEx
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
CreateFileW
SetFilePointerEx
ReadFile
WriteFile
FlushFileBuffers
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetFileTime
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
FindNextFileW
lstrcmpiW
MoveFileW
CopyFileW
CreateDirectoryW
RemoveDirectoryW
SetSystemPowerState
QueryPerformanceFrequency
FindResourceW
LoadResource
LockResource
SizeofResource
EnumResourceNamesW
OutputDebugStringW
GetProcessHeap
CompareStringW
CompareStringA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
CreatePipe
TerminateThread
GetTempPathW
GetTempFileNameW
VirtualFree
FormatMessageW
GetExitCodeProcess
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumeInformationW
SetVolumeLabelW
CreateHardLinkW
DeviceIoControl
SetFileAttributesW
GetShortPathNameW
CreateEventW
SetEvent
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalLock
GlobalUnlock
GlobalAlloc
GetFileSize
GlobalFree
GlobalMemoryStatusEx
Beep
GetComputerNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcessId
GetCurrentThread
GetProcessIoCounters
CreateProcessW
SetPriorityClass
LoadLibraryW
VirtualAlloc
LoadLibraryExW
HeapFree
WaitForSingleObject
CreateThread
DuplicateHandle
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameW
GetFullPathNameW
ExitProcess
ExitThread
GetSystemTimeAsFileTime
ResumeThread
GetStartupInfoW
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
SetCurrentDirectoryW
IsDebuggerPresent
GetCurrentDirectoryW
FlsFree
SetLastError
FlsAlloc
HeapSize
RtlUnwindEx
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
GetModuleFileNameA
HeapSetInformation
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringW
LCMapStringA
SetFilePointer
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetTickCount
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetLocalTime
SetEnvironmentVariableA
user32
IsCharLowerW
IsCharUpperW
GetMenuStringW
GetSubMenu
GetCaretPos
IsZoomed
GetWindowLongW
MonitorFromPoint
GetMonitorInfoW
SetWindowLongW
SetLayeredWindowAttributes
FlashWindow
GetClassLongPtrW
TranslateAcceleratorW
IsDialogMessageW
GetSysColor
InflateRect
DrawFocusRect
DrawTextW
FrameRect
DrawFrameControl
FillRect
PtInRect
DestroyAcceleratorTable
CreateAcceleratorTableW
SetCursor
GetWindowDC
GetSystemMetrics
SetWindowLongPtrW
GetActiveWindow
CharNextW
wsprintfW
RedrawWindow
DrawMenuBar
DestroyMenu
SetMenu
GetWindowTextLengthW
CreateMenu
IsDlgButtonChecked
DefDlgProcW
ReleaseCapture
SetCapture
WindowFromPoint
DispatchMessageW
TranslateMessage
PeekMessageW
UnregisterHotKey
CharLowerBuffW
MonitorFromRect
LoadImageW
CreateIconFromResourceEx
mouse_event
ExitWindowsEx
SetActiveWindow
FindWindowExW
EnumThreadWindows
SetMenuDefaultItem
InsertMenuItemW
IsMenu
IsCharAlphaNumericW
GetCursorPos
DeleteMenu
CheckMenuRadioItem
GetMenuItemID
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
SetForegroundWindow
IsIconic
FindWindowW
IsClipboardFormatAvailable
keybd_event
SendInput
GetAsyncKeyState
SetKeyboardState
GetKeyboardState
GetKeyState
VkKeyScanW
LoadStringW
DialogBoxParamW
MessageBeep
EndDialog
SendDlgItemMessageW
GetDlgItem
SetWindowTextW
CopyRect
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
GetMenu
DestroyWindow
EnumWindows
IsWindow
IsWindowEnabled
IsWindowVisible
EnableWindow
InvalidateRect
GetWindowLongPtrW
GetWindowThreadProcessId
AttachThreadInput
GetFocus
GetWindowTextW
ScreenToClient
SendMessageTimeoutW
EnumChildWindows
CharUpperBuffW
GetClassNameW
GetParent
GetDlgCtrlID
SendMessageW
MapVirtualKeyW
PostMessageW
GetWindowRect
SetUserObjectSecurity
GetUserObjectSecurity
CloseDesktop
CloseWindowStation
IsCharAlphaW
GetKeyboardLayoutNameW
ClientToScreen
RegisterHotKey
GetCursorInfo
SetWindowPos
CopyImage
AdjustWindowRectEx
SetRect
SetClipboardData
EmptyClipboard
CountClipboardFormats
CloseClipboard
TrackPopupMenuEx
GetClipboardData
OpenDesktopW
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
MessageBoxW
DefWindowProcW
MoveWindow
SetFocus
PostQuitMessage
KillTimer
CreatePopupMenu
RegisterWindowMessageW
SetTimer
ShowWindow
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
GetSysColorBrush
GetForegroundWindow
MessageBoxA
DestroyIcon
OpenClipboard
BlockInput
GetMessageW
SystemParametersInfoW
LockWindowUpdate
GetDesktopWindow
gdi32
DeleteObject
GetObjectW
GetTextExtentPoint32W
ExtCreatePen
StrokeAndFillPath
StrokePath
EndPath
SetPixel
CloseFigure
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchBlt
GetDIBits
LineTo
AngleArc
MoveToEx
Ellipse
PolyDraw
BeginPath
Rectangle
GetDeviceCaps
SetBkMode
RoundRect
SetBkColor
CreatePen
CreateSolidBrush
SetTextColor
CreateFontW
GetTextFaceW
GetStockObject
CreateDCW
GetPixel
DeleteDC
SetViewportOrgEx
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
RegConnectRegistryW
RegEnumKeyExW
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
InitiateSystemShutdownExW
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
CreateProcessAsUserW
CreateProcessWithLogonW
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
CopySid
SetSecurityDescriptorDacl
LogonUserW
GetTokenInformation
GetAclInformation
GetAce
AddAce
GetSecurityDescriptorDacl
shell32
DragQueryPoint
ShellExecuteExW
SHGetFolderPathW
DragQueryFileW
SHEmptyRecycleBinW
SHBrowseForFolderW
SHFileOperationW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc
ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
DragFinish
ole32
OleSetMenuDescriptor
MkParseDisplayName
OleSetContainedObject
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
IIDFromString
StringFromIID
OleInitialize
CreateBindCtx
CLSIDFromProgID
CoInitializeSecurity
CoCreateInstanceEx
CoSetProxyBlanket
OleUninitialize
oleaut32
SafeArrayAllocData
SafeArrayAllocDescriptorEx
SysAllocString
OleLoadPicture
SafeArrayGetVartype
SafeArrayDestroyData
SafeArrayAccessData
VariantInit
VariantCopy
VariantClear
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
LoadRegTypeLi
GetActiveObject
SafeArrayUnaccessData
VarR8FromDec
Name
.text
Size
599KB
Virtual Size
598KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
29KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=150, version=20413,
count=185, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=128, version=50727,
count=33, id=123, productName=VS2005 build 50727, version=50727,
count=531, id=1, productName=Unmarked objects,
count=70, id=143, version=30729,
count=2, id=149, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/SID_Example.bat
- SHA256 5a296e04fa900c4999aee9e449fb6c928176dcca82aed0338f8edeae5743b69a
- MD5 bafcdbf4c34dd286b59b0829ae6a38c9
- SHA1 f434674d8c647e113cf66a412f97844697440019
- SHA512 00d536ea84fd424c229893b901b3b7b927fc86f6f7df5c4622f383566cfde7e41f4ab953aa77df933f1f2baa80f3d6b85268b2a9c204107cb69120dcdfd72fb1
- TLSH T16E21354E085F834212E22E51952DA037FBF1D92378F0594E78F4195C61D39DA4B5D8DF
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Task Scheduler Tweak by CatGamerOP.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 0572f26706338b1165b02f5175f2174ff6991c72c4c18c7740e3bec176f78c97
- MD5 7de3deb4846a7dbebd06a7bdaf45c030
- SHA1 bd879d186659ff3efb9d12642c20ce3be7308ed1
- SHA512 a56ca547bf05abf6444e528f115aac887d03280513688d304b5f4dbfe4c6f9e8a499cdce0ca5a81a0aab28079bafeaa3c7c74ff041d09b38c3a87c42414c7659
- SSDEEP 196608:Z/0W8/LSNTwhLOA1HeT39Iig9kvKub75bcjWgbwau5thoANN9k0ax8ozfh5kjKBH:CW8LL31+TtIibvB5IjWqwau5thoA/3ai
- TLSH T1EBC633B0339B0C94E9AA533499E08A169AE1FCA557A1C6C757F43D8D0E732DCEEB4710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
Task Scheduler.pyc
- SHA256 ceaf79035f40a71c8880683947c67863c5dbc763ee9d40502c2997aa3ab31239
- MD5 6fa61eadc66e880c0192d629da838f69
- SHA1 c3afba417ca3e3728b217822c42c993522bd3f6e
- SHA512 02b4bece83cb872a3875e8c7f89f549ed6f0982fe921969476d69719f61dff7026b5eb347257f4926eb009f4045dec830a53aaa238f8a6231abe825ed9d0fa93
- SSDEEP 768:n4qIwiufSRhUrCnasB/KZubDFxmRHd1MgehKEy1slZOQu:n4lwinhUrCnaVZuvuR9Gf3yuGh
- TLSH T1D013F29E247BC6B9DAE05BBC31EA7FD16BC3ED0418A5D949874962417230AD7BC53808
- MD5 SHA1 SHA512 SSDEEP TLSH
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/PowerRun/Version_History.txt
- SHA256 9f6c6c135aa273c77dc0f4d3c539d3ecf9895b7b286fdde4391f5ab3c79b76bc
- MD5 74311cda876dd54a0b026ca4009233ec
- SHA1 1892176a1613c7239039b9a54d11516e5e4fe647
- SHA512 51ca28153081bd60106ede14c5234963282b63201767090d2da7c8375c88479a903ff9b628371a223ea39845d25f6bae9a86cc4aaa494b790bc73334d523728b
- TLSH T10E61F03B4D131E7A2BF7C39D7A662530DA89A4D1FE3B4A1B35DC86911281C1DF34D254
- MD5 SHA1 SHA512 TLSH
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/Task Scheduler Tweak by CatGamerOP.exe
- IMPHASH 351592d5ead6df0859b0cc0056827c95
- SHA256 0572f26706338b1165b02f5175f2174ff6991c72c4c18c7740e3bec176f78c97
- MD5 7de3deb4846a7dbebd06a7bdaf45c030
- SHA1 bd879d186659ff3efb9d12642c20ce3be7308ed1
- SHA512 a56ca547bf05abf6444e528f115aac887d03280513688d304b5f4dbfe4c6f9e8a499cdce0ca5a81a0aab28079bafeaa3c7c74ff041d09b38c3a87c42414c7659
- SSDEEP 196608:Z/0W8/LSNTwhLOA1HeT39Iig9kvKub75bcjWgbwau5thoANN9k0ax8ozfh5kjKBH:CW8LL31+TtIibvB5IjWqwau5thoA/3ai
- TLSH T1EBC633B0339B0C94E9AA533499E08A169AE1FCA557A1C6C757F43D8D0E732DCEEB4710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyarmor
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
54432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
HeapSize
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=182, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=7, id=257, version=33145,
count=141, id=1, productName=Unmarked objects,
count=27, id=260, version=35222,
count=1, id=258, version=35222,
FOX OS PAID (BEST TWEAKS)/Task Scheduler Tweak by CatGamerOP/instrucciones.txt
- SHA256 e5f199ce972c8519babe544df82176751dda9ddfd02fc0619ee5dd704cc48291
- MD5 cf10707b5ff5428cd8a6054e934974f2
- SHA1 e29dd6354157a127aff094d2c8b855bc266f7b8a
- SHA512 c53222aecec320529cc474e831daa549f1f043df52632e5f8b7bdddba0def9cd5b3eaf3aa59d72f58dcc19d411489a8565cb7df765a7d4c4c98d9bf4f64d9dcd
- TLSH T10BE0A3041DE09463056B194DD90E83138489C945B4134161B42ECD1621B5C4AC30EADC
- MD5 SHA1 SHA512 TLSH
RegFromApp.chm
- SHA256 72336f3128f5287aefd47302b9ef9c1b7ea4aae70e0a69d2254c033ea406fe97
- MD5 c27adfd1e08ee7214d5c7ecfa054d432
- SHA1 b6228a8c850e2614c3eda22e0e284cf359c73efa
- SHA512 37d9350b800b0f0cca212f9938e061f97b01d73db084ec975a46be68635aac98be91b39739a9b731fef6aef62b802767a14c9a64108ab9892c26257aa6549e2e
- SSDEEP 192:RZx+q7UCBaymVQqCahNMydtk1olTgomm0:RZx15m7CahNMz12Tgzp
- TLSH T12C62AF24F73A4730ED14C67D7BCB1955264DADC1FA44235B5242831B8693B8A9E0CDEB
- MD5 SHA1 SHA512 SSDEEP TLSH
systeminformer-3.2.25011-release-setup.exe
- IMPHASH efe21c21df1b4adb62fad1b8c66a71a0
- SHA256 7612d5e44a5a392ab9f0d1b5b8a79bda3cdbe19848e8ee9ec23909aaf3daad45
- MD5 979b20755ddf86eddb3e2892003a2ca6
- SHA1 3a0b6f9ee4ee12872e733948465be5ece5b25629
- SHA512 3238f77f7810460cb7cdfe7692892879c28e14ccd95969e80cf83d1dff320c8354173a87503b893b7095b99ee81c61e195004ad5f5e6a28e09e3e9c1fc080d44
- SSDEEP 393216:Cg+SqZ3hd0y0HNQvVun6kljEGVHXQYGSE1fggY6Q1Gv0ZOfBKy48/ZtwnvmFO4lL:CB/Z3hd0heVu8GyYGSE19eGv0Zvyd/31
- TLSH T1F5373390F6B242E4E9F1177069A3EB19907C28D01F2489FF0BE95C845FB16D1973AF29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:90:aa:d4:cd:7c:b8:23:b7:6b:36:aa:75:05:af:81:bc:ba:93:52:de:e6:d7:ba:3c:ee:ce:43:2c:4a:83:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Winsider Seminars & Solutions Inc.,O=Winsider Seminars & Solutions Inc.,L=Montréal,ST=Quebec,C=CA
Chains
Jan 11, 2025
CN=Winsider Seminars & Solutions Inc.,O=Winsider Seminars & Solutions Inc.,L=Montréal,ST=Quebec,C=CA
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Winsider Seminars & Solutions Inc.,O=Winsider Seminars & Solutions Inc.,L=Montréal,ST=Quebec,C=CA
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Winsider Seminars & Solutions Inc.,O=Winsider Seminars & Solutions Inc.,L=Montréal,ST=Quebec,C=CA
Serial Number
05:0a:5a:39:6d:03:ea:60:cd:53:68:b3:d7:ba:f7:a6
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 21, 2023 - Sep 15, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
6
Entry point
133696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
CustomSetupTool.pdb
ntdll
NtQueryDirectoryObject
NtCreateKey
NtCreateFile
NtQueryDirectoryFile
NtSetValueKey
RtlQueryEnvironmentVariable
RtlNtStatusToDosErrorNoTeb
NtCreateDirectoryObject
RtlRandomEx
RtlGetFullPathName_UEx
NtDelayExecution
RtlAddAccessAllowedAce
RtlFindMessage
NtQueryDefaultLocale
RtlExpandEnvironmentStrings_U
LdrFindResource_U
LdrAccessResource
NtSetEvent
NtReleaseKeyedEvent
NtWaitForKeyedEvent
NtCreateKeyedEvent
LdrGetProcedureAddress
RtlUnwind
NtQueryAttributesFile
NtDeleteValueKey
NtQueryInformationToken
NtSetInformationFile
NtOpenProcess
NtQuerySystemInformationEx
NtQuerySymbolicLinkObject
RtlConvertSidToUnicodeString
RtlDosPathNameToNtPathName_U_WithStatus
NtOpenKey
NtEnumerateValueKey
NtOpenSymbolicLinkObject
NtOpenProcessToken
RtlCreateHeap
RtlSetHeapInformation
RtlGetVersion
NtQuerySystemInformation
RtlInterlockedPopEntrySList
RtlFindClearBitsAndSet
RtlLeaveCriticalSection
RtlUnicodeToUTF8N
RtlFreeHeap
RtlQueryPerformanceCounter
RtlMultiByteToUnicodeSize
RtlMultiByteToUnicodeN
RtlEnterCriticalSection
RtlUTF8ToUnicodeN
RtlReAllocateHeap
NtAllocateVirtualMemory
NtCreateThreadEx
RtlUpcaseUnicodeChar
RtlAllocateHeap
NtFreeVirtualMemory
RtlRaiseStatus
RtlInterlockedPushEntrySList
NtCreateEvent
NtTerminateProcess
NtQueryMutant
NtQueryInformationFile
NtReadFile
NtWriteFile
NtDeleteKey
NtOpenMutant
NtWaitForSingleObject
NtCreateMutant
NtClose
NtQueryValueKey
NtQueryInformationProcess
kernel32
DecodePointer
SetEnvironmentVariableW
GetCommandLineW
GetCommandLineA
FindNextFileW
FindFirstFileExW
FindClose
WideCharToMultiByte
WriteConsoleW
SetFilePointerEx
GetLastError
GetNativeSystemInfo
MoveFileExW
TlsSetValue
SetLastError
TlsAlloc
TlsGetValue
TlsFree
GetLocaleInfoW
MultiByteToWideChar
FlushFileBuffers
IsProcessorFeaturePresent
FormatMessageW
LocalFree
LoadLibraryExW
FreeLibrary
GetStdHandle
GetTimeZoneInformation
SetStdHandle
LCMapStringW
CompareStringW
InitializeCriticalSectionEx
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetCPInfo
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
HeapAlloc
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetConsoleOutputCP
WriteFile
GetConsoleMode
CloseHandle
GetFileType
CreateFileW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
GetProcAddress
GetModuleHandleW
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
GetProcessHeap
Name
.text
Size
260KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
172KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
4KB
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
4KB
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
22.0MB
Virtual Size
22.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=33138,
count=23, id=259, version=34321,
count=18, id=260, version=34321,
count=29, id=260, version=33138,
count=1, id=262, version=33138,
count=180, id=261, version=33138,
count=7, id=257, version=33138,
count=474, id=1, productName=Unmarked objects,
count=47, id=261, version=34321,
count=62, id=264, version=34435,
count=1, id=255, version=34435,
count=1, id=151,
count=1, id=258, version=34435,