RiskierTrafficStops 3.4.0.zip
- SHA256 cdd6e987cf99e9702388aca623f099c5caa1638845da635be5e689e883de29fd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RiskierTrafficStops 3.4.0.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
RiskierTrafficStops 3.4.0.zip
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
12 signatures
150 seconds
General
- Target RiskierTrafficStops 3.4.0.zip
- Size 591KB
- Sample260629-q9gfmsgx5r
- SHA256 cdd6e987cf99e9702388aca623f099c5caa1638845da635be5e689e883de29fd
- MD5 84dcc74b29fc1e68a34af8437c82897e
- SHA1 a38a3aa57af30a1737c0421356dd18d65d4bc3a4
- SHA512 519e56e8278500f17eea7f403f393470b61c3bbd1fe3f450476f11a1be117e255bff801a7e07824ab2bf957a84c213b471071d7af220e35ecd610d7a8d802423
- SSDEEP 12288:Bjt/7j0PrxrR9yLE0IRtaciACf0gpWTPjf9FmVQEFD3hUDF:dt/3AKLYOHfQ2VQC3hUDF
- TLSH T149D423B7A186FBC6C42F2775E70CEC6A2BDD5171D67259C22D24310CEEED600867829D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Plugins/LSPDFR/CommonDataFramework.dll unpack001/Plugins/LSPDFR/RiskierTrafficStops.dll unpack002/costura.dll unpack002/ragenativeui.dll
File Explorer
-
RiskierTrafficStops 3.4.0.zip.zip 591KB
-
Plugins/LSPDFR/CommonDataFramework.dll.dll 48KB
-
Plugins/LSPDFR/CommonDataFramework.pdb145KB
-
Plugins/LSPDFR/CommonDataFramework/PostalXMLs/ocrp.xml114KB
-
Plugins/LSPDFR/CommonDataFramework/PostalXMLs/priest0802.xml61KB
-
Plugins/LSPDFR/CommonDataFramework/PostalXMLs/virus_city.xml226KB
-
Plugins/LSPDFR/CommonDataFramework/Settings.ini1KB
-
Plugins/LSPDFR/RiskierTrafficStops.dll.dll 481KB
-
costura.dll.dll 5KB
-
costura.pdb7KB
-
newtonsoft.json.dll.dll 704KB
-
ragenativeui.dll.dll 284KB
-
Plugins/LSPDFR/RiskierTrafficStops.ini2KB
-
Plugins/LSPDFR/RiskierTrafficStops.pdb225KB
-
Plugins/LSPDFR/RiskierTrafficStops/Localization.json1KB
-
READ ME.txt207B
-
RNUI LICENSE.md1KB
Plugins/LSPDFR/CommonDataFramework.dll
- SHA256 3a65203efa61598e73e9a44778a75d1b48f2f307c5050d37dbef432133782ad3
- MD5 555b1303dac5e007b93f381219320e13
- SHA1 82ae5035ac804d5bad855384eaaccb42ee1cbd2a
- SHA512 dcfdee57f7fe20635c06ac8eed35d22b8cbb447ad177e97a88fe65a76b98c499a51db9fb2ebf675893ce1573d42d663344c8dd2541fcaefc255db8b1c218fa1a
- SSDEEP 768:m8WldWLNd06DlzTSyxRkJWl9VuVCdfvKjV2h81M/E4hs:bLZ4yxRkcl2gKR2h81f5
- TLSH T138234B00ABACC72AC7FF1B7AB4715115027AD349F662E7894DCCA89E18537C068627F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Dev Projects\GTA V\CommonDataFramework\CommonDataFramework\obj\Release\CommonDataFramework.pdb
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Plugins/LSPDFR/CommonDataFramework.pdb
- SHA256 3590066716da1f830c6539a357dbddf5a6db765182b4a20f4b7288e25f742f88
- MD5 d0ae068ca25ee9db7bca5d109d5a8fb0
- SHA1 7d10c0af5cc09fc114c3b8b04827c6b050c49fb6
- SHA512 72326178456eac22fee102013c0407ee7b5de914c3345c251e52277bd11e9011e91eef9517c826300ac296188f0b9d17ba100f66ccac6607b465534e5b25bcf8
- SSDEEP 768:eL6HDCqUoP0GWKkHWjShX5YlHC108DgcVdbCUdEEtqGoUzuOBB6S1AExenoSI1S:AwcVdbCUTblSgdAXo9c5sRU20m
- TLSH T10EE3B30E7B44C235C8684578B25BAB0D83B6FA887FC15B5B264AB14C3DF1B693E87351
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugins/LSPDFR/CommonDataFramework/PostalXMLs/ocrp.xml
- SHA256 a10d7589f39394420ff7fb1891638373a001d746daad649423474dd53b70eeca
- MD5 460988747f23a650b66afce85a909cec
- SHA1 f28eefb4a416da0f273996c0d3a563bd70a21e23
- SHA512 3aaea65011cf733c788b455b305b526ca5a3ac696e4531822f7a61bd911a5142d8a69349d05e2aaab3193994423f092c30f68e777b565942a35fe20c51fb1bee
- SSDEEP 3072:V3AsC6h46T8OX1toNu/WsFkIwCcWT0AjC6rqXmfvkceL+CTjfpZZg3gXLkuHTEIT:V+6h46T8OFtj/WsFz2LXmnkceL+CTjfb
- TLSH T15AB3643A4D5F42365179D908E4B52857F9B52E03B53D9E0844E31E0E9CB3693BA82FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugins/LSPDFR/CommonDataFramework/PostalXMLs/priest0802.xml
- SHA256 23f1a04f1c9351fd28b20115abba857e4031ab0794115bcae934132185aa89a2
- MD5 8d99ebb51240669e570ec02151edc472
- SHA1 dc696894b15f632f9f55a8ae24df6822042b8f8f
- SHA512 06b837e3bbad565bfd724e678caa8259c1aa2d4a9ff747fb155b5ad64c0b1c217c30b3755b66ad9431b6347d601924c5ce81fc78cddfbe08a4362f13725daa69
- SSDEEP 1536:hxzcEeLKzicHaKsja7rKTNEBdgMoZIsnNVUUfWthRMVlaqcQz56akTw:hxzcEeLKzicHaKsja7rKTNEBdgMoZIsz
- TLSH T16353A2390E5E423651B9D908E4F52457F9A52E03B53D9E0844E31F0E9CB3693BA82FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugins/LSPDFR/CommonDataFramework/PostalXMLs/virus_city.xml
- SHA256 9674a760fe2f6d123089c7b25f39d54e56aa16e559436581b51d538f0306cb99
- MD5 6afd784cc5d62096b23c9210ee871747
- SHA1 a26bc963688e0d281c4b88c257f1bc5afe1d4424
- SHA512 647592a9911f94514f8d8b996ea6d179c1fff0fc21d92f32d10e95af6e2883db306bc19d64f809c9c96135c7dd38cb3cf4ec120e7c1db5992057778d5a8d460c
- SSDEEP 6144:S7XxCkTlVGUTjB7d7rDafS74ZsOzBhQUcThrh4Rj5mXNb7zE9zT/nZQBg/Xo2y9F:GXEkxBB3DaEmd9Ksy
- TLSH T18C3461394D5F423651B9D908E4F52857F9A52E03B53D9E0844E31F0E9CA3693BA82FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugins/LSPDFR/CommonDataFramework/Settings.ini
- SHA256 f95c17f8b92cb77373af1825fe0f3b4b3e84d9570684da7feeb55e5167698a7b
- MD5 01d95bc7ffb7d0433ea817dbced40363
- SHA1 2d237bde0d5cf556af13052bad98f882a40959aa
- SHA512 48b5c58333b7c9e85f68ae3b216890f8e51d1d869aa6c93dbc7229aba8b1189fe40a3219fb9fa5d1c32f8730076b5960b2a93ded6ebdd89704abec3f2b5d3702
- TLSH T12431E33DC582642DC883C63395C5E873B9DFE6E8CE31988423CB513D91446B864AF99C
- MD5 SHA1 SHA512 TLSH
Plugins/LSPDFR/RiskierTrafficStops.dll
- SHA256 77a7ea05aa97eee1ddd9e5a7849547642c82d14965680d0be392c9384c5d91db
- MD5 7c4fe27c0f42b6a2caa0035922a7f001
- SHA1 c0d246e760e6d389f7661eb3f6b94c7fa80409a3
- SHA512 0845bc7e1e129d44f4e5f3b7300586ce1d2a585fae3bfda5f7553012385cf8c19e490991a2c8818787c2cb15444f44cff4b1cfe9cd0dfdf50877a5698ffb2c2a
- SSDEEP 12288:RXRPyxE0I7ty3hMHK1LRvyfPjSkuRjCHdg+KwX2:R8xYcxMNBKw
- TLSH T174A4026523F81B19F2FF2F71A9B856650E7AFD93A431D38D5490A8DD0812B809EB1733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Dev Projects\GTA V\RiskierTrafficStops\RiskierTrafficStops\obj\Debug\RiskierTrafficStops.pdb
Name
.text
Size
480KB
Virtual Size
479KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6771700a3bbd39251648d73bae181c3a4fa978ac40cccf4d5e2ac7815f18b406
- MD5 27180a8ccb9c7d93bc5e1a95d67d3dbe
- SHA1 31531eea4711cf48d5e834ff92738769389ee1cd
- SHA512 f7ef2014320f82ff98c825b90a7229d74fe39b0e33fa7826b35f214dd5c51918c61e63acae8c19c42d817bd6ad571c9983766516c791b304db697df9dc5cf564
- SSDEEP 48:6vP2nhx3BTjtRiaAVLEF4iZ6iMtTg706YElaWTJFu2FY+cYH6AWk1qyFVw2Ib8:JHtRYVLE4YjYELTru2FZFWv2
- TLSH T1A6B1FB28A7B8533BEF7BCB72585353804374BD10D92B5B1F1AC562172C323948931722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\CI_WS\Ws\303409\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.pdb
- SHA256 4675077d1bcf2a5f380521ef624a03fee29e13310d39c80223c5e6d889a12ba2
- MD5 60a922c4e3b7177c537adb1b1130f026
- SHA1 4de073819643de254b17cb83360e10e74eb57f0e
- SHA512 e221ba6abcdc01a8b19393dcabc9c2e9fa2df8c51acffc900825f4198167ff60db6c5419599aa6a5c619843a5dfaf4a784810a19f25de0435e5796368138433f
- SSDEEP 192:FzyMDB2vUloPI6jMai+NLy5nj4SCBg5MRkCIFQkC8g7AHOuXk/N/8Hu0T:FWXv1PI6jMai+NLy5nj4SCm5Mz6QkOAn
- TLSH T18BF1B33FAB48C463C89559724521C09CB67343242674EC78F3CB2A08EDAF699C7B5B72
- MD5 SHA1 SHA512 SSDEEP TLSH
newtonsoft.json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
08:39:56:e4:21:43:4f:90:03:ee:08:ba:76:09:c5:58:d4:a5:2a:73:28:78:a1:5f:f6:46:d6:59:61:a9:2a:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 16, 2025
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0c:0d:22:a2:ef:64:2e:b8:88:c4:4f:a0:18:f0:0a:1b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 4, 2024 - Nov 3, 2027
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:4b:a1:b1:ad:e1:59:fc:e7:34:00:00:00:00:00:4b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 26, 2024 - Nov 19, 2025
Minor OS version
0
Major OS version
4
Entry point
713798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
690KB
Virtual Size
689KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ragenativeui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2607481b206e7907c9c1f2cabf15797654aacaaf1746ea202740dcdd5eb8bbb
- MD5 6d3dcf81370dd5ebb3df42ab43a91009
- SHA1 3f932b0586ca05da61bdfbedbbcaaab2481ffbca
- SHA512 8f1f12212e3ea44b2ed7dca8070e392734d63d84d7536e605d4d9da768effe15bafb797aa8fb79376ab4c5384b4725a9c523744d6ae4033dc2e67a34d434243a
- SSDEEP 6144:4XCI2k3BOvzqlh88alxoYA1ngX+IStZApAZwPn4WYkmbCE:4XC03BO70h6kYAhNxerKx
- TLSH T1E9545C14EF6CDA33E2AF7776D19B07408778D1C7B18BE78F088864A92E427457E112E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
296814
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\runneradmin\AppData\Local\Temp\RAGENativeUI.pdb
mscoree
_CorDllMain
Name
.text
Size
282KB
Virtual Size
281KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Plugins/LSPDFR/RiskierTrafficStops.ini
- SHA256 292b30300fd838817664fbe5c9fd49ae51f576fa72258edbdb6ad2886b6580a0
- MD5 103b0e68d94c1337ef06abd1982f9bcd
- SHA1 3e773bd5ca93a07294676f678fca256a2692c730
- SHA512 fc166a59ecb71c1c054bac517b3b1a9b74bf3bffd7cf1a9bfcba5f821784b11907ab7255273bfb13bcf4f023bab60c1f826714d134ee72620e45e08e44828c94
- TLSH T18D4121B23A02311FE6F61243DB49321AE7EC505CA721E05423ACCD5C5545C1FB5EE46F
- MD5 SHA1 SHA512 TLSH
Plugins/LSPDFR/RiskierTrafficStops.pdb
- SHA256 ccc106d8c65189762bc99a8cf652c3e49f1f985c59d45b5d0ce0167c680de653
- MD5 cf10ac3c6ce70f0ae9f630d29be42dfb
- SHA1 0d796723665429cadd7f0bcc8a0b875c9167c873
- SHA512 ac026d40490db2bd33130d634f5ba9b718430265a3868f1de1c13a5bb6a96c4e79b543074a27bcfddb74c18f81e18e42a286a270c8355348f2e96f771eba3b27
- SSDEEP 1536:HaPjO6vH/G+cZHyo1vFtqiyisSx+j3Hf+qliyVPVI+K0NZKTHN:+tXuSo1RdsSxFyVS0+TH
- TLSH T1DB3461217F00D936C4D94B79DF974F6C8676D5450B83FB2B6B8AB10D2CA07026FB6298
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugins/LSPDFR/RiskierTrafficStops/Localization.json
- SHA256 8661bac7d62ad4c61707d7a62a20df3c0518b49389224b3f0eea21746e73b207
- MD5 84db63f981a7051e7b60e116dd97932c
- SHA1 21ca6e437a289645270c67375090a0ce3c9ef7bd
- SHA512 c31078d404c366114026dc6d590e8de3ca71925e59861d41c527deda2427bab1a643a934433438382019c21d51f5ceceb5eb9a30ba00049e249da07e064b25c6
- TLSH T1713109669E00721B24BE47154FA6485EAE35CB2F523C6C2E3CBA204D410E660C5FAFB2
- MD5 SHA1 SHA512 TLSH
READ ME.txt
- SHA256 e865fb305d1a63bc1f119f6479dcfff70a65a26ee777f92bb16e5f6b828e59d0
- MD5 ae20f34e520331ccf04238f8ac3a7db4
- SHA1 363208f79ab64225b01eeb3620132da015c00b6e
- SHA512 0cd42857df67c71cb8cda90c4dd643e1bfcda924fb85466dd8c3af232e331be78821a3c2e44cd03b25d2e13b8b66b71c78d53c7f399697be5ce3aee0462dc495
- TLSH T1A0D023333A288A230041708373AE19F530CA030565830C35CE73E0080634870CB6F093
- MD5 SHA1 SHA512 TLSH
RNUI LICENSE.md
- SHA256 fb494bfcf1c72829eb4560f9abe06a0b3c8b67679d0611951e443ad6fddb4372
- MD5 a900a65ef92337a43af41e0fea33ccaa
- SHA1 0765902a564b86ce1fbe4276482acbbeb5740b21
- SHA512 3b6e1917139c62050e9bce8ba27f1b470f84d39ce89bd532a150628393f0c5e03b02fa3a6a10af58909d28acd2063da8722fe73dfb96b074ab9c63d47b57e982
- TLSH T1FB11B61E725407721C9A13608575ACD5F13B714F7AAF2A80242DF341233A06CD6FF840
- MD5 SHA1 SHA512 TLSH