OshinoLoveyoriKoinoLove.zip
- SHA256 fc91a3d13f6854ed77b92c31b8bcff0f7350c873b8a49ab7ef91f7136502fd97
Overview
overview
6Static
static
5Oshi no Lo...GI.gdb
windows10-2004-x64
3Oshi no Lo...GI.gdb
windows11-ltsc_2024-x64
3Oshi no Lo...GI.hvl
windows10-2004-x64
3Oshi no Lo...GI.hvl
windows11-ltsc_2024-x64
3Oshi no Lo...VC.exe
windows10-2004-x64
3Oshi no Lo...VC.exe
windows11-ltsc_2024-x64
3Oshi no Lo...KF.dll
windows10-2004-x64
3Oshi no Lo...KF.dll
windows11-ltsc_2024-x64
3Oshi no Lo...OD.exe
windows10-2004-x64
6Oshi no Lo...OD.exe
windows11-ltsc_2024-x64
6Oshi no Lo...OD.exe
windows10-2004-x64
5Oshi no Lo...OD.exe
windows11-ltsc_2024-x64
5Oshi no Lo...up.exe
windows10-2004-x64
5Oshi no Lo...up.exe
windows11-ltsc_2024-x64
5Oshi no Lo...rp.arc
windows10-2004-x64
3Oshi no Lo...rp.arc
windows11-ltsc_2024-x64
3Oshi no Lo...rg.arc
windows10-2004-x64
3Oshi no Lo...rg.arc
windows11-ltsc_2024-x64
3Oshi no Lo...nd.arc
windows10-2004-x64
3Oshi no Lo...nd.arc
windows11-ltsc_2024-x64
3Oshi no Lo...em.arc
windows10-2004-x64
3Oshi no Lo...em.arc
windows11-ltsc_2024-x64
3Oshi no Lo...OD.exe
windows10-2004-x64
5Oshi no Lo...OD.exe
windows11-ltsc_2024-x64
5Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Oshi no Love yori Koi no Love ~Love or Die~/BGI.gdb
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Oshi no Love yori Koi no Love ~Love or Die~/BGI.gdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Oshi no Love yori Koi no Love ~Love or Die~/BGI.hvl
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Oshi no Love yori Koi no Love ~Love or Die~/BGI.hvl
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
Oshi no Love yori Koi no Love ~Love or Die~/BHVC.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Oshi no Love yori Koi no Love ~Love or Die~/BHVC.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Oshi no Love yori Koi no Love ~Love or Die~/[email protected]
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
Oshi no Love yori Koi no Love ~Love or Die~/[email protected]
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
Oshi no Love yori Koi no Love ~Love or Die~/startup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral14
Sample
Oshi no Love yori Koi no Love ~Love or Die~/startup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral15
Sample
Oshi no Love yori Koi no Love ~Love or Die~/sysgrp.arc
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
Oshi no Love yori Koi no Love ~Love or Die~/sysgrp.arc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
Oshi no Love yori Koi no Love ~Love or Die~/sysprg.arc
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
Oshi no Love yori Koi no Love ~Love or Die~/sysprg.arc
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral19
Sample
Oshi no Love yori Koi no Love ~Love or Die~/syssnd.arc
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
Oshi no Love yori Koi no Love ~Love or Die~/syssnd.arc
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
Oshi no Love yori Koi no Love ~Love or Die~/system.arc
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
Oshi no Love yori Koi no Love ~Love or Die~/system.arc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
Oshi no Love yori Koi no Love ~Love or Die~/原版备份/OshiloveLOD.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
Oshi no Love yori Koi no Love ~Love or Die~/原版备份/OshiloveLOD.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target OshinoLoveyoriKoinoLove.zip
- Size 506.2MB
- Sample260721-d953saft3x
- SHA256 fc91a3d13f6854ed77b92c31b8bcff0f7350c873b8a49ab7ef91f7136502fd97
- MD5 333511ad935b07955cb930878d1d7f5c
- SHA1 39b2711fca1a0513a767beb8420aa75d8324aa18
- SHA512 568621fb8a6b6fd83e5644c0dbd7d5060fa7dad4ad988f5d1b0b52033963a6a5ee9510fb9264207c32344199ffb02efa537b843ea6163b48b4344b4a537dd0b8
- SSDEEP 12582912:S10dRQwnhUs3ETH2KSHFc63Lpkk3I3gP6UV1kICgVr1+p:S6zJKTUZ9ggP3go+p
- TLSH T1564933849171F91378A2EABD98428F4D3C810371BC5ED1D2F0951EC87D972B9E2EB94B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe - Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe.org unpack001/Oshi no Love yori Koi no Love ~Love or Die~/startup.exe unpack001/Oshi no Love yori Koi no Love ~Love or Die~/原版备份/OshiloveLOD.exe - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Oshi no Love yori Koi no Love ~Love or Die~/BHVC.exe unpack001/Oshi no Love yori Koi no Love ~Love or Die~/[email protected]
File Explorer
-
OshinoLoveyoriKoinoLove.zip.zip 506.2MB
-
Oshi no Love yori Koi no Love ~Love or Die~/BGI.gdb120KB
-
Oshi no Love yori Koi no Love ~Love or Die~/BGI.hvl4KB
-
Oshi no Love yori Koi no Love ~Love or Die~/BHVC.exe.exe 60KB
-
Oshi no Love yori Koi no Love ~Love or Die~/[email protected].dll 703KB
-
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe.exe 2.7MB
-
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe.org.exe 2.7MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data01000.arc175KB
-
Oshi no Love yori Koi no Love ~Love or Die~/data01100.arc65KB
-
Oshi no Love yori Koi no Love ~Love or Die~/data02100.arc418.2MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data02200.arc1.6MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data03000.arc2.3MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data04000.arc40.8MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data04100.arc10.9MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data05000.arc39.3MB
-
Oshi no Love yori Koi no Love ~Love or Die~/data07000.arc560KB
-
Oshi no Love yori Koi no Love ~Love or Die~/startup.exe.exe 30.4MB
-
Oshi no Love yori Koi no Love ~Love or Die~/sysgrp.arc52.5MB
-
Oshi no Love yori Koi no Love ~Love or Die~/sysprg.arc307KB
-
Oshi no Love yori Koi no Love ~Love or Die~/syssnd.arc1.5MB
-
Oshi no Love yori Koi no Love ~Love or Die~/system.arc35.5MB
-
Oshi no Love yori Koi no Love ~Love or Die~/原版备份/OshiloveLOD.exe.exe 2.7MB
Oshi no Love yori Koi no Love ~Love or Die~/BGI.gdb
- SHA256 0068b4913e28e2002f89ed7e0c19d9867810ff6386a04c72ac5110e82d722c09
- MD5 a949d02e4243b4bb377558c27ac4704f
- SHA1 f1cb673e583a2b21836b802934a4b9b821db856c
- SHA512 739ba1bb4106f6f6cb1e17c90474e5f41f70c2753abb131afaa9a011a65752926cbe38789322490b35ebc9899c980f9901ae3fae66d669d13b700ab40437fbab
- SSDEEP 3072:Lz85ehgt1UT8Nxjj+vm3UPbUY17iJICYpQOhM0nQyizQoNEpDLP:LI5ehrof+tPw+7i+XpxdQtzQoNEBLP
- TLSH T1EBC31214CE39E2D64B7FE3BBA111880D87306D7814AB8A76907B52FBE70C4AB64DF050
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/BGI.hvl
- SHA256 91cabbd112ad13f5a04cb481c95f008338ef87cf9c7d3f59f83709ae72df6466
- MD5 e8dedc61ba1df6077a43c27936bdbc4f
- SHA1 48a0493093a2de21a4b127cf397a936a0ca146b2
- SHA512 69c4211d1ce62aff8870475940f7b5a29821de0645f70015354c65d3cff638a08cd2949934f61955f6a6578894182de72c7eecc70db53cfc9066f04e140089d8
- SSDEEP 12:M4KLPBJtOJmwZftQxtBWcGSllPXN9Rxt2Iv86:3KNAmw9SbWcG4lDTUI86
- TLSH T1DD9122D6F4AC1094D2060EFD936B3345B261B9F25794306342604E3F05D6FF1B41B0D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/BHVC.exe
- IMPHASH 04ffa341c87e79aead3cc32073a51ddd
- SHA256 7df5b5157a238e2d4688bd7fdabc311bfdf10683337e509b29a64164d5b2e3dd
- MD5 812971b5dc0d5b03912523dd52531caf
- SHA1 5c3187247230a9acf41e118df6698f05777d6f82
- SHA512 f92bcc4e1aaa9e76efc0a19de6a6041efdc42325d1d738db1cc838b04b10051c17e5e5d66efe02225bdf801d514d9e89778de2079496daccce113f4e7856e504
- SSDEEP 1536:r90dzkhwbMVIUzPK3sX/UyfIkLlRTuqrS:h0Zkhwb2P1vTTrS
- TLSH T142535B1636A5C032C85619305878C2B39AAB7C3256B5C58BBF9817BE4FB13D06E39377
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8779
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
CreateFileA
CloseHandle
ReadFile
WriteFile
SetFilePointer
GetFileSize
GetModuleFileNameA
RtlUnwind
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetCommandLineA
HeapSetInformation
GetLastError
HeapFree
EncodePointer
DecodePointer
HeapAlloc
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
CreateFileW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
GetConsoleCP
LoadLibraryW
HeapReAlloc
LCMapStringW
GetStringTypeW
FlushFileBuffers
SetStdHandle
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=93, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=86, id=1, productName=Unmarked objects,
count=37, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Oshi no Love yori Koi no Love ~Love or Die~/[email protected]
- IMPHASH 433ee8e29549c4bf2e3d8bd7d77e5c35
- SHA256 79aa12f9f36fc29cbd4dc4b596c879a3e6a64f0b10d977f4e5938641a03be264
- MD5 a9c4010faa91afd5679ed9d6152254a3
- SHA1 410ffc266eb84607f0265fdff681ec8fd968bbe5
- SHA512 d157a0a0d6bd0c552e5bd13cd1729208627ce0d1600b059d16bdeb3eb0867d9a474d18e5385b722b23fc690e7a3c7378f805213195a8e28a966193a200ec2750
- SSDEEP 6144:q9v/ZgzOK+E6rZ4qr+/Iml0eTn5APeFZ6lxz0hDlWHpOCYR:ahwOK+FZH+/I/cn5Ue3MxDXe
- TLSH T18BE46C51A640B033E4AE32B125AEB6923A7CBF704F1265CB97D42D5F1A746D27334B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
134741
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
htonl
kernel32
WriteProcessMemory
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
K32EnumProcessModules
K32GetModuleFileNameExW
VirtualProtect
ExitProcess
CreateFileA
CreateFileW
CreateProcessW
GetModuleHandleW
IsDebuggerPresent
CloseHandle
SetUnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
VirtualAlloc
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
GetModuleHandleA
SetProcessDEPPolicy
GetPrivateProfileStringW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateProcessA
ReadFile
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeA
GetTempPathW
WaitForSingleObject
CreatePipe
SetHandleInformation
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
VirtualProtectEx
VirtualAllocEx
ResumeThread
SuspendThread
HeapCreate
InitializeCriticalSection
MoveFileExW
MapViewOfFile
GetLastError
SetFilePointer
SetEndOfFile
GetFileSize
GetFileAttributesW
IsProcessorFeaturePresent
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
HeapAlloc
RaiseException
HeapDestroy
HeapFree
UnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
CreateSemaphoreW
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
OutputDebugStringW
GetStringTypeW
HeapSize
VirtualFree
CreateThread
DeleteFileW
user32
RegisterClassExA
MessageBoxA
RegisterClassA
wsprintfW
MessageBoxW
LoadStringA
CreateWindowExA
gdi32
EnumFontFamiliesExW
advapi32
RegOpenKeyExW
RegOpenKeyExA
imagehlp
MakeSureDirectoryPathExists
imm32
ImmAssociateContext
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
M0
M1
M10
M11
M12
M13
M14
M15
M2
M3
M4
M5
M6
M7
M8
M9
M_S0
M_S1
MaiDMFunc
MaiSfDummyEp
MmkeSureDirectoryPathExists
_MmmAssociateContext@8
Name
.text
Size
293KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
339KB
Virtual Size
736KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=44, id=225, productName=VS2013 build 21005, version=21005,
count=19, id=223, productName=VS2013 build 21005, version=21005,
count=122, id=224, productName=VS2013 build 21005, version=21005,
count=17, id=203, version=65501,
count=144, id=1, productName=Unmarked objects,
count=6, id=224, productName=VS2013 UPD5 build 40629, version=40629,
count=37, id=225, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe
- SHA256 937dcba6aae5fae791ab383272494de6e792242bcef718dfb68218bab27c648e
- MD5 89b1de213fefb7867020b3055150fe37
- SHA1 d6f6f27787a7eaec38c8a3d1dd168f7f06ab8921
- SHA512 a942aaae933d2d53f665aa2df3c835cc2ff1184b6a169719ef7fe4700962b0110322829ccece1b309bc1e402dce562c1f0bb07929c17e1dcf7c6d7e692c14769
- SSDEEP 49152:IIyBo6/219QsrY0CgtUbxltV/eOr43bQqMgJarQI+i5F21dwr+YwLMXrkSB8:IIyV/W9JtTtnOwBFJHI95wd7YwIXrkSe
- TLSH T187D533D3EA1D19E3DF1ED075E26B0A3A46BB586699DF084808533387464B307AE0DBDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
PE Signature issue
Digest
ba:18:d7:26:d8:18:67:85:49:14:92:1c:ec:20:2e:5a:ea:cc:b7:eb
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Chains
Jul 28, 2021
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Serial Number
4c:3e:29:65:db:a9:26:ec:7b:1b:7d:a2
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 26, 2021 - Jul 9, 2022
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
11400292
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
??4SThreadParam@@QAEAAU0@$$QAU0@@Z
??4SThreadParam@@QAEAAU0@ABU0@@Z
Name
Size
441KB
Virtual Size
976KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
87KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
6KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
30KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
179KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=35, id=259, version=26213,
count=158, id=261, version=26213,
count=1, id=263, version=26213,
count=10, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,
count=48, id=261, version=26706,
count=17, id=260, version=26706,
count=27, id=259, version=26706,
count=1, id=262, version=26213,
count=1, id=171, productName=VS2010 build 30319, version=30319,
count=30, id=257, version=26213,
count=39, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=29, id=260, version=26213,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=392, id=1, productName=Unmarked objects,
count=228, id=265, version=27032,
count=1, id=256, version=27032,
count=1, id=255, version=27032,
count=1, id=151,
count=1, id=258, version=27032,
Oshi no Love yori Koi no Love ~Love or Die~/OshiloveLOD.exe.org
- SHA256 4d9bf4fc251a45b8142cfac8b7dab33d08cc994853d83b2e301a61807fd64858
- MD5 f8662d9e9a6d672f0b83ca70d7cd4512
- SHA1 93fd18e0e88717b5888f460bb3199c0687b05e00
- SHA512 e4ecfad75439f36dddb5112e203415c6be888d10228d022c49a288591bcdae85e6ac2a2d0e15813e35aaf986ace412226094a60c576bb9f2cc3cefcb87c7baf6
- SSDEEP 49152:IIyBo6/219QsrY0CgtUbxltV/eOr43bQqMgJarQI+i5F21dwr+YwLMXrkSB8:IIyV/W9JtXtnOwBFJHI95wd7YwIXrkSe
- TLSH T119D533D3EA1D19E3DB1ED075E26B0A3A46BF586699DF084808533387464B307AE0DBDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4b:dc:cd:f4:05:51:7f:27:0d:0d:7c:ac:cb:48:aa:14:61:d4:37:3e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Chains
Jul 28, 2021
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Serial Number
4c:3e:29:65:db:a9:26:ec:7b:1b:7d:a2
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 26, 2021 - Jul 9, 2022
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
11400292
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
??4SThreadParam@@QAEAAU0@$$QAU0@@Z
??4SThreadParam@@QAEAAU0@ABU0@@Z
Name
Size
441KB
Virtual Size
976KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
87KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
6KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
30KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
179KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=35, id=259, version=26213,
count=158, id=261, version=26213,
count=1, id=263, version=26213,
count=10, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,
count=48, id=261, version=26706,
count=17, id=260, version=26706,
count=27, id=259, version=26706,
count=1, id=262, version=26213,
count=1, id=171, productName=VS2010 build 30319, version=30319,
count=30, id=257, version=26213,
count=39, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=29, id=260, version=26213,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=392, id=1, productName=Unmarked objects,
count=228, id=265, version=27032,
count=1, id=256, version=27032,
count=1, id=255, version=27032,
count=1, id=151,
count=1, id=258, version=27032,
Oshi no Love yori Koi no Love ~Love or Die~/data01000.arc
- SHA256 0a59d3f0c0e47ef16e59d4e01458de3498c668bf2426d285953f9c7ce45da4d8
- MD5 3c143f52338cbeaf5146c4477d7a1673
- SHA1 37c64bd28dd7978e20948345cbfdf47d16551052
- SHA512 438404606357a6d373003d3e05256b378a3bf59d82adefe13c79578ebd8c7be90ff8d3e1c0afb10b9fb11fa68551420bd3876f28ddaf79a328e6ca7e691695ec
- SSDEEP 3072:bL5PGaz+cs+n0hhgCXgdczFuhtMfsPEfcXbM7iLTlbQb53oiyv+6oKWVgm2E:bL5P3z+cUDgZczFwM0o7qlEo8/fj
- TLSH T10C040265BB9D1E1DC02D7AB6777E3B30E482769EE4139AFED10324C405B62A39E8D10D
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data01100.arc
- SHA256 87492f01a8621c12bc353c76a82e201f7d7d9e3c2aa2be243a7bceca41ee6ff1
- MD5 b9e575fedd2db767a1291944899bc053
- SHA1 987e1f26fe119ee01456b2b704fa557ed323a2a3
- SHA512 7f5723b29531dfb781a46a00eb89086b4d78cade308a7ddbeedd0e238ff96d816cd9bfc82f0f0116d91a32c3324aaeaf26e1895e27a8a7dd33c490b2eaa73a6f
- SSDEEP 1536:Ss8Pp917uUEWuSsRmdK2wpKCeM9d1WddBu8XujxqHukfYj0:Ssgp9c/9SsFXHp+bRujwOsYw
- TLSH T1CE63F26C5E2351C6E3A2983C20439063D495CFB655438FEB539374642A0BC79F5FA7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data02100.arc
- SHA256 380ee95a17ef420b4f3d9fa83a7e5f307306f9296aa53f433fa0ab849ccacb6c
- MD5 b2c0dd5ca0b33f1053106c072cf5fd05
- SHA1 66688b22abc59c6826409e29158c690f5dd40259
- SHA512 a71e1e73629daf01229e9714f9ae04624b93254c17e460dec22afee588a006fd4ca857f401539cf92e74746d4f0531c96919393ec0e2445095831e0557699b1c
- SSDEEP 6291456:Ngw18jqV22dscE+SZl1w2KXTRiTF+YKCYufORxY0zBOwtyh8haVGKOmLxk3Am/L:NnajorEzujRi+CYu2RBOwlhaNLxkwm/L
- TLSH T155293386E8E51BD9E638A1B81099673669229FB59803C73F453F4F6814C3E9FC68F443
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data02200.arc
- SHA256 0f6abebe8943733d1dfe9af82999e1b5a57814469f8927daed714a19a0aae9bb
- MD5 bb2c0d6595246c91943ce3497ef64017
- SHA1 b385e614450aeac476de2b26ac592e37a4a8408e
- SHA512 546e1805c631ed45326da63969332c6173da2fd9df812427e4353ab15ffab74e2e3ef036d574540e5085349c9b1a9cda74e20b0e0f31d13a18ee9b9f651d758f
- SSDEEP 24576:aEexdfAEJeywpphBU8lOT0000000000000000000000Hpqs0MuCns9bI1CI6Cl4m:5xEdwpjB6R0MunUkd+
- TLSH T10D85F11236B7A8900B7AF45C4AFB5233E642363753B8AECF242C13ED96D7065D772981
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data03000.arc
- SHA256 548413988a963deb367358e5355797f6edf96df1c92fff182a10bd687b56a677
- MD5 f996e387e92970b6cebbd3f5390f3f3d
- SHA1 31204c462311044ff0fd75bee1be2178502369b7
- SHA512 4a44574c238e38e35b91cc8ca7270f592263fe52ededfcb676edf5a776bebc881f93f0b1054db6120d35f600eefb9e856ed759343ccc48f74242fb0685f036ed
- SSDEEP 49152:bEktue1d0wLadvOHK/RgJS4Ifg2ZUPCRXtH5T0Xp:bHf1iwL+2HK/AShfTZ2CRnO
- TLSH T167B512E5CFE5E05AD423B2FAF56B07B83FF9277C123443D2EE98512A0DA69918D1009D
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data04000.arc
- SHA256 8c755c6ce699d2b47f841029a8523134b399531d8c452aca72e540c73b099a99
- MD5 50c50c64533d0926bcbcedfa7da613eb
- SHA1 b5a723d0a16280ae6772bb1f4c6dbb6b886acff0
- SHA512 c00a50a6743b7c69e8c2af3c43f3a49892f3e9517dc8278f22f98cefadda1cc0dd24610d2821682936f33dfe3a6907046d00e6bdf7d2ff7ec9d7cfcaa112f273
- SSDEEP 786432:RROR3XowGG6JjoYV7P0ZgBVJ7q6s9WDeOoZGzUrdul0UQpyg3GV/ya:XY27dNJDdUxZu1wG1r
- TLSH T1979722F9EDB4F98AD42630B496140BA13FBA757C2635D7E1FFC8123E4852E81C9901AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data04100.arc
- SHA256 d2b8cd6e967f201643c4e008098a8d89b68b8f2a03df6df9b2ab9b46fe59de09
- MD5 960f3c79054d70eb592735b95b6b9fcb
- SHA1 fb002d462ddbeded5dafdfa67f70818cef8e4ad4
- SHA512 d53c9fa99af637f9ae797de5be9ea05ae4b1320a1b68b51764593597bd4e68775f38b8722e3b57b6f406cd456edf9e23eb92c500a36192d0a5c32bd89b503ac8
- SSDEEP 196608:OjDzWYS8MPv8BvjnSCmoVcgki7fMnzxyYKUDdjxlz7WODiTz8hvjzYCL:KjSPkSCPcgdfMzHKURMTz8JgCL
- TLSH T1E7B622F9EAB4F98AD42630F895140BE17FBA757C1136D6D1FF88123E4856E81CDA00AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data05000.arc
- SHA256 bb115b43e3df21b543ad0ff7a0211be66e5aca8a75d88ff6ea3095f3e8418947
- MD5 fd63fa7431be639fc668d056acff93f0
- SHA1 9a07afe0f4d05438f2863f7f113f4994be7a16b9
- SHA512 5bb02d9b1453d2e6ba18a175113ec19d4bf8036a0e45c0223f69b8db0bbebeed71fcdd8436ac68a1a90b06853ae3954790cc676c43cbfbfb1995a6dce2908f01
- SSDEEP 786432:Yd6Ci8koyTxdsZJf11pO/8A/NRW4B13jMRouor8PLhY9vRcHPgH+x9:IUdSVO/7/N4uVuOAG96Yq9
- TLSH T1A097338EEECE8CEED02435FA5D6709A436BD907DC3D983035EF5816E6DAA9482D03147
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/data07000.arc
- SHA256 5c8013af8b3d4a38c94ec91eeeda5df20c438ba7a469003b5aa53c404f3565a0
- MD5 4d1828acf4a7d04f3b5cbd90e3fa92db
- SHA1 77d83163077cebdbee394c1825ff7cfeb193cb92
- SHA512 6002b17000f4b7f1c8f761dada33cb54317674d8f4cf0eefa9290a64e4e90d6bbc3900aa941a1200fe05e114527921114942db27f2c13fe3b3f5bd6e78b3d681
- SSDEEP 12288:IXH2EjR6jfzuC3jFlARG5tJN+ctMNDqAp22cscpp1vlrUKK7XR:EjRwzuyBXtLHtAqApMsGp1vSBR
- TLSH T12BC423EE459E21A7F6B4B930C6A44A3F055FBD5345933E66148910CABAAF41CF1C4CB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/startup.exe
- SHA256 2aa9daf53af17d12a19fc87c07b8b26b43ba788f8a29e8c1e7f8dddfbb18cd74
- MD5 221e02e88ffae42cf48e33c1af95a797
- SHA1 fee29ab5d7bcde40d5b87523be3149864747f973
- SHA512 729c3a42ef9bb40da4f78ce24b04c3d6c5dfa42c1be990ee921b1b88998ed69ba020994f940918481e76fcbc9964e62a3a1ce94bfdf39a79af9cb3b4e0263746
- SSDEEP 786432:O4fV298405s/kOy2OYiTwcHcBqjIIzYwoPQyb9+yrz0PnVX4:rL4Gs/kOwYiscGmnzto4yb9+YCI
- TLSH T1D26733960BC83B59CC82DA3BD709E64AE5E32B001FC101D9E419136EF5FA6E1A5D3CD9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d1:a8:86:63:e1:6e:5a:e4:d6:97:4a:ab:2e:04:c0:89:9b:03:13:31
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Chains
Jul 28, 2021
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Serial Number
4c:3e:29:65:db:a9:26:ec:7b:1b:7d:a2
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 26, 2021 - Jul 9, 2022
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
1
Major OS version
5
Entry point
50064068
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
11.8MB
Virtual Size
29.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1.8MB
Virtual Size
6.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
107KB
Virtual Size
660KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
179KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13.9MB
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=20, id=152, version=20115,
count=69, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=171, productName=VS2010 build 30319, version=30319,
count=3, id=189, version=30716,
count=3, id=191, version=30716,
count=10, id=188, version=30716,
count=3, id=190, version=30716,
count=1047, id=1, productName=Unmarked objects,
count=53, id=185, version=30716,
count=79, productName=Unmarked objects (old),
count=1729, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6268, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Oshi no Love yori Koi no Love ~Love or Die~/sysgrp.arc
- SHA256 75758b74c396e5f6d585526b7f237c09fde8bcd0404dfd3f8b8ecad8208d1362
- MD5 fff878820d51b98f243ca9bf45edeb62
- SHA1 ff1033b55a03e579067254544f673731550084bf
- SHA512 7940089cf3b15d298d8dfcb3bd3c5bbe19c7c3ffc87a7c9551cce34bd50de68b77489f36537585650bc15685bed003e4002a8d08616bb1c266059f59876fe3d2
- SSDEEP 786432:FjJiGo5ZnH//ar6vJnDLRwncqERC+438SzXzGhAzXzGhM06u:hJi95Znf/aro1acRVSLnLQL
- TLSH T1B9C71182E30704B683B12D6E7905AF351333F4337122191F6A789AD24D7A784A979FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/sysprg.arc
- SHA256 02a01a177847910f7b4d1ef2a41e1236a7a229c60941eb945178099ce0422289
- MD5 100553a8875bd70c1757bc8d04cabb21
- SHA1 c5b2812d996c814a0f08ad6f29f7dde0956501ee
- SHA512 46b66ca6bfcea8321f851d06fa00c17bbe285c63d4260e3bf8e8324a6f1d9dfea617505dfc2710a378b53c4c16d7052e9b8d1d6eed176232fb1d522b88293e78
- SSDEEP 6144:nGJDm7ElZJwqUy5LLfSwsI0peRptFUSXY3lqqxOf9BeIO8:rq15LLfSsZ5XY3l1sVQZ8
- TLSH T198641281AF55BD2BD179DF7DB7CF3A825904C0525C13EDCBA2931883428B71CEC269A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/syssnd.arc
- SHA256 38c554507edcef94410d63cd0fcf5a31aeeea56fb7bd66ffc9626ed3537dfbe5
- MD5 2d885991321e9ab75f6014aad1a097b3
- SHA1 f5f16ba25cfd09c116016a54b04003f9919a7661
- SHA512 9f2e07d80bf28380fb75b81637a5eb37ef7739a8cbdd861bf916cbfcf186c8027cea1941a10dbf597f6ee5abc112a527d0ac99228d3f2df5cd8b9c3cbd40c248
- SSDEEP 49152:DVfPB+HRnjUyehACE7UzUAHi2qlqztOf1emgI:RfUhvex+aUiiplAE
- TLSH T14E7533AE1E8B7A9FC0237CFC49C7C188CA7E598E43D8034D2B919D1E6567E942DD814B
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/system.arc
- SHA256 bc59e81ffda70dd6d0a25dc55086e2b0216fc7e52862eea6f35b24af8d1591cd
- MD5 f61721c3ae2b02e646073d07c4fffb8d
- SHA1 aaa1307ef278edf907894de64b1178982f6156db
- SHA512 6cc8fa33b656e293330351d6bbab4c822eaa3b93c21490cffdcfeb83ae81fdf83c9d113d8ad3ee024ba07cad718ae8bedad3a4d8ae1455971234a0f2f0bb18bf
- SSDEEP 786432:4aCP46f/ZQIykPbruYlvl8F//YhJCnpwX1HZaCP46f/ZQIykPbruYlvl8F//YhJW:47rf/ZQUCYlvleG/5Z7rf/ZQUCYlvleP
- TLSH T1CB87123E65F9F918C853D17ABD16B27A66954C08910FE0FAB9C37F7228E52240B1D7C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Oshi no Love yori Koi no Love ~Love or Die~/原版备份/OshiloveLOD.exe
- SHA256 4d9bf4fc251a45b8142cfac8b7dab33d08cc994853d83b2e301a61807fd64858
- MD5 f8662d9e9a6d672f0b83ca70d7cd4512
- SHA1 93fd18e0e88717b5888f460bb3199c0687b05e00
- SHA512 e4ecfad75439f36dddb5112e203415c6be888d10228d022c49a288591bcdae85e6ac2a2d0e15813e35aaf986ace412226094a60c576bb9f2cc3cefcb87c7baf6
- SSDEEP 49152:IIyBo6/219QsrY0CgtUbxltV/eOr43bQqMgJarQI+i5F21dwr+YwLMXrkSB8:IIyV/W9JtXtnOwBFJHI95wd7YwIXrkSe
- TLSH T119D533D3EA1D19E3DB1ED075E26B0A3A46BF586699DF084808533387464B307AE0DBDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4b:dc:cd:f4:05:51:7f:27:0d:0d:7c:ac:cb:48:aa:14:61:d4:37:3e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Chains
Jul 28, 2021
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=Eisys Inc,O=Eisys Inc,L=Chiyoda,ST=Tokyo,C=JP,1.2.840.113549.1.9.1=#0c10696e66726140646c736974652e636f6d
Serial Number
4c:3e:29:65:db:a9:26:ec:7b:1b:7d:a2
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 26, 2021 - Jul 9, 2022
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
0
Major OS version
6
Entry point
11400292
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
??4SThreadParam@@QAEAAU0@$$QAU0@@Z
??4SThreadParam@@QAEAAU0@ABU0@@Z
Name
Size
441KB
Virtual Size
976KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
87KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
6KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
30KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
179KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=35, id=259, version=26213,
count=158, id=261, version=26213,
count=1, id=263, version=26213,
count=10, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,
count=48, id=261, version=26706,
count=17, id=260, version=26706,
count=27, id=259, version=26706,
count=1, id=262, version=26213,
count=1, id=171, productName=VS2010 build 30319, version=30319,
count=30, id=257, version=26213,
count=39, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=29, id=260, version=26213,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=392, id=1, productName=Unmarked objects,
count=228, id=265, version=27032,
count=1, id=256, version=27032,
count=1, id=255, version=27032,
count=1, id=151,
count=1, id=258, version=27032,