CUPHEADAIRSHIPDEMO-20260723T235745Z-1-001[.]zip

resource
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/mono.dll

resource
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO.exe
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Assembly-CSharp-firstpass.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Assembly-CSharp.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Mono.Posix.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Mono.Security.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Rewired_Core.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Rewired_Windows_Lib.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Configuration.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Core.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Runtime.CompilerServices.Unsafe.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Runtime.InteropServices.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Security.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Xml.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.CloudBuild.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.Networking.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.UI.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/mscorlib.dll
unpack001/CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/MonoPosixHelper.dll

CUPHEADAIRSHIPDEMO-20260723T235745Z-1-001.zip

SHA256 c40daaa932f9e30bbdb024e677b216e3ff0df3da14ebe8936893e5e0fd47b3e7
MD5 70c3b53b13ae43f45f3279771090ee65
SHA1 04a8ea29f85e57f7be5f85e92ce7181828adbfb0
SHA512 886e31a0b1bfe164c7329fe1eda66dd09571f65ad7e71b992fe09b88fa3fb91a08ddd252c1083e0458b882b919162a1940b3aea6a7a75979e585b9a7528d1ba2
SSDEEP 6291456:cqVJ5hMtKNRo87xo9DWccW4ofc1pHl486IQoVhPRsQC0V4Fl5XL+Zhtjc47/F0bz:lVJItKNK87O9DxcW4oUxp6DahP6hC4zd
TLSH
T1CBE8331250CE1FADEBFF20B3CEF47E934735A9B67BD38E216945E9029CA17516430682
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO.exe

IMPHASH d5edf21ea2a499c977b32b10050a86b8
SHA256 32222aed1a3739650bfddd2662856bdbd41c872701f812edd175555ed00ba05a
MD5 a6038719a8cd2a092f72f33137f9a039
SHA1 0feaafd73376e25bb1fc3f20f1af3f4728c86f0b
SHA512 45332e768ae3b12b143a11ebf00307581e011f99128f9b4ef46d21932e34198f5555f7e23fb9dd7c4a1e3ea77f23cfa7fc135a08048e940b22e7b1409df58bac
SSDEEP 393216:86xwD0BTGTHupnmuc3/lub0gKuPUuA2uGeOX2CWhxRMgVjDWzrDKEWSKuYUHbKML:t6SDWSRKML
TLSH
T1AA079E21A818D171E99141B2E5BD7ABF5A389D25032C41D367E439C4EE741E33EFB2A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8954919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win32_nondevelopment_mono\player_win_x86.pdb

hid

HidP_GetCaps HidD_GetPreparsedData HidD_GetProductString HidD_GetManufacturerString HidD_GetSerialNumberString HidD_GetIndexedString HidP_GetButtonCaps HidP_MaxDataListLength HidD_FreePreparsedData HidP_GetData HidP_GetValueCaps HidD_GetHidGuid

kernel32

InterlockedIncrement InterlockedDecrement GetFullPathNameW GetCurrentProcessId GetCurrentProcess GetCurrentThread GetWindowsDirectoryW FormatMessageA SystemTimeToFileTime GetLocalTime GetTimeZoneInformation LocalFree GetSystemInfo GetModuleFileNameW InitializeCriticalSection ResetEvent GetTickCount ReadFile SetFilePointerEx WriteFile SetEndOfFile GetFileAttributesExW CreateFileW SetFileAttributesW GetFileAttributesW MoveFileExW FindClose FindNextFileW FindFirstFileW FindFirstFileExW SetFilePointer ReplaceFileW GetTempFileNameW LoadLibraryExW CreateEventW GlobalUnlock GlobalLock GlobalAlloc RemoveDirectoryW SetFileTime GetSystemTime GetDiskFreeSpaceExA lstrcpynA lstrcpyA lstrcpynW GetCommandLineW ExpandEnvironmentStringsW ResumeThread GetThreadContext SuspendThread OutputDebugStringA GetEnvironmentVariableA GetFileAttributesA GetModuleFileNameA GetVersionExA GetCurrentDirectoryA VerifyVersionInfoW VerSetConditionMask GetVersionExW GetSystemPowerStatus GlobalMemoryStatusEx GetUserDefaultUILanguage GetComputerNameW GetTempPathW LocalAlloc SetUnhandledExceptionFilter OpenEventW DebugBreak GetCurrentDirectoryW GetOverlappedResult CancelIo GetFileSize FileTimeToDosDateTime FileTimeToLocalFileTime lstrlenA GetFileTime VirtualQuery GlobalMemoryStatus RaiseException DecodePointer EncodePointer HeapAlloc HeapFree RtlUnwind HeapReAlloc HeapQueryInformation GetModuleHandleA GetCurrentThreadId ExitProcess SetConsoleCtrlHandler ExitThread GetCommandLineA HeapSetInformation GetStartupInfoW FileTimeToSystemTime GetDriveTypeA FindFirstFileExA IsProcessorFeaturePresent GetStdHandle GetLocaleInfoW UnhandledExceptionFilter TerminateProcess HeapCreate SetHandleCount GetFileType GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage FlushFileBuffers SetStdHandle InterlockedExchange GetStringTypeW LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA WriteConsoleW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CompareStringW SetEnvironmentVariableA GetDriveTypeW GetProcessHeap GetProcessAffinityMask InterlockedExchangeAdd VirtualProtect VirtualAlloc VirtualFree FlushConsoleInputBuffer SwitchToThread SetThreadAffinityMask InitializeSListHead InterlockedPushEntrySList InterlockedPopEntrySList InterlockedFlushSList OpenEventA SetWaitableTimer CreateWaitableTimerA GetSystemDirectoryA SetConsoleMode ReadConsoleInputA GetDateFormatA GetTimeFormatA CreateMutexW FlushInstructionCache CreateSemaphoreW SignalObjectAndWait VerifyVersionInfoA ExpandEnvironmentStringsA GetVersion SleepEx GetQueuedCompletionStatus CreateIoCompletionPort SetHandleInformation FormatMessageW GetSystemTimeAsFileTime HeapSize InitializeCriticalSectionAndSpinCount CreateFileMappingA MapViewOfFile UnmapViewOfFile SetThreadPriority CreateThread TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection DuplicateHandle CreateMutexA ReleaseMutex InterlockedCompareExchange GetModuleHandleW SetDllDirectoryW CreateDirectoryW WaitForSingleObject WideCharToMultiByte LoadLibraryA SetEvent IsDebuggerPresent ReleaseSemaphore WaitForSingleObjectEx CreateSemaphoreA TlsSetValue TlsGetValue TlsFree TlsAlloc DeleteFileW CopyFileW GetStartupInfoA LoadLibraryW GetProcAddress FreeLibrary CreateEventA CloseHandle Sleep SetLastError GetLastError MultiByteToWideChar QueryPerformanceFrequency QueryPerformanceCounter SetErrorMode

user32

SystemParametersInfoW GetAsyncKeyState ClientToScreen RegisterRawInputDevices GetMessageTime MapVirtualKeyExA GetMessagePos GetRawInputData GetKeyNameTextW LoadKeyboardLayoutA GetRawInputDeviceInfoW GetRawInputDeviceList wvsprintfA GetWindowLongW SetWindowLongW PostQuitMessage GetMonitorInfoA SetFocus GetFocus ShowCursor SetWindowTextW GetDlgItem IsDlgButtonChecked CopyImage SetWindowLongA KillTimer GetMessageA PeekMessageA SetWindowPos SetCursorPos RegisterDeviceNotificationW GetMessageExtraInfo PtInRect MessageBoxA DispatchMessageA UnregisterDeviceNotification ReleaseCapture DestroyIcon DestroyCursor ChangeDisplaySettingsA SetCursor GetSystemMetrics GetDC ReleaseDC CreateIconIndirect IsClipboardFormatAvailable GetClipboardData OpenClipboard EmptyClipboard CloseClipboard SetClipboardData GetCursorPos WindowFromPoint IsWindowVisible GetCaretBlinkTime MessageBoxW UpdateWindow GetKeyState LoadImageW DialogBoxParamA EndDialog SetForegroundWindow ScreenToClient CheckDlgButton GetAncestor CreateDialogParamW PeekMessageW IsDialogMessageW DispatchMessageW MsgWaitForMultipleObjects SetCapture RegisterClassExW DialogBoxParamW LoadIconA SendDlgItemMessageW SetDlgItemTextA SetDlgItemTextW CopyRect OffsetRect GetDesktopWindow AdjustWindowRectEx GetWindowPlacement ClipCursor MonitorFromWindow GetWindowRect TranslateMessage GetProcessWindowStation GetUserObjectInformationW SendMessageA UnregisterClassW DestroyWindow DefWindowProcW RegisterClassW CreateWindowExW EnumDisplayMonitors EnumDisplaySettingsA EnumDisplayDevicesA GetClientRect EnableWindow SetTimer ShowWindow GetParent ValidateRect CreateDialogParamA GetWindowLongA GetThreadDesktop GetUserObjectInformationA EnumWindows RegisterWindowMessageA SendMessageTimeoutA IsIconic LoadCursorA wsprintfA

version

GetFileVersionInfoSizeA GetFileVersionInfoA GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueA

ole32

PropVariantClear CoCreateGuid CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoUninitialize CoSetProxyBlanket StringFromGUID2 CoInitialize

shlwapi

PathFileExistsW SHDeleteKeyW PathCanonicalizeW

advapi32

RegCloseKey RegisterEventSourceA ReportEventA DeregisterEventSource CryptImportKey CryptVerifySignatureA CryptDestroyKey OpenProcessToken GetTokenInformation GetSidSubAuthority GetUserNameA RegOpenKeyExW RegCreateKeyW RegSetValueExA RegQueryValueExA RegDeleteValueA CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextA RegQueryValueExW RegSetValueExW RegCreateKeyExW

gdi32

ChoosePixelFormat SwapBuffers GetDeviceCaps SetPixelFormat GetObjectA DeleteObject CreateBitmap CreateDIBSection

shell32

SHFileOperationW SHGetFolderPathW ShellExecuteW CommandLineToArgvW

opengl32

wglGetCurrentContext wglCreateContext wglMakeCurrent wglDeleteContext wglGetProcAddress wglGetCurrentDC

winmm

waveInGetNumDevs timeGetTime timeEndPeriod waveOutGetNumDevs waveOutGetDevCapsA waveOutGetDevCapsW waveOutClose waveOutOpen waveOutUnprepareHeader waveOutWrite waveOutReset waveOutGetPosition waveInAddBuffer waveInPrepareHeader waveInUnprepareHeader waveInGetDevCapsA waveInGetDevCapsW waveInStart waveInOpen waveInClose waveInReset waveOutPrepareHeader timeBeginPeriod

ws2_32

WSAEnumNetworkEvents WSAResetEvent WSAWaitForMultipleEvents WSACloseEvent WSAEventSelect WSACreateEvent WSASetEvent WSACancelAsyncRequest WSAAsyncGetHostByName WSACleanup ntohl htonl ntohs htons getpeername getprotobyname recv gethostbyname shutdown listen accept WSARecvFrom WSAIoctl getnameinfo getaddrinfo recvfrom sendto send gethostname socket connect bind inet_addr WSAStartup select __WSAFDIsSet inet_ntoa getsockname freeaddrinfo WSASocketA WSASetLastError WSAGetLastError setsockopt ioctlsocket getsockopt closesocket

oleaut32

VariantClear SysAllocString SysFreeString VariantChangeType VariantInit

imm32

ImmReleaseContext ImmSetOpenStatus ImmGetConversionStatus ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmGetContext ImmSetCompositionStringW

dnsapi

DnsQuery_A DnsFree

iphlpapi

GetIpAddrTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Name

.text

Size

14.2MB

Virtual Size

14.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

257KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.trace

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data1

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

554KB

Virtual Size

553KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

582KB

Virtual Size

581KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=34, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=36, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=8, id=171, productName=VS2010 build 30319, version=30319,

count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=534, id=1, productName=Unmarked objects,

count=6, id=152, version=20115,

count=73, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=195, productName=Unmarked objects (old),

count=1043, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=1204, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Assembly-CSharp-firstpass.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbd36e5f57e6e5f5e304449f58e5b1f6586f3b85ba085713240377beac7eb067
MD5 a8859a0c7163c59d9f2e03eb976889b3
SHA1 fd9b6c57f755bf52b9459e954fea870432ac8f10
SHA512 b594cd9f5c128ce1fc9a691cec296ce1f222d7af7f7a38af26c416ad713a548eb6514e8b17f08d511aa23ae375acddf03b2e6123984316bb258fcd448a3b4d56
TLSH
T18E51F21253E8057BFCB78B346EB3434223B8F9205F739A7E0994122DAC61258CB31F61
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Assembly-CSharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 271626d88b4699bd63b778cbe0801af181b020c093845978f0c19b4ec972b327
MD5 42913f5f262dd7dc0ec192312c85e4f0
SHA1 0a8efda991c157b2ecf44a54fbcb4e54333fe69f
SHA512 d6d7e3aed73a118cc1e95359e83769c0faf207b8aedada918ae4a49ba354700454a459788edc76e825231b5a68f75a55eef3ecadb4b1fb80b2c7f4108feccfb7
SSDEEP 49152:pZckxcbrhhWJLsu/l3a+dnqR09hseEf5HgikbMpYZ9Ag9CQxAXmM57:pZ7cHh4vd7/
TLSH
T153060624F7E85D37D17E67FA80E56D0197B1E041A746E39AFB86A1BCE842B402C43367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3916894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Mono.Posix.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6d503c2d76dbbf6039cf2ae638b44eb71fa35201034bbe9fff690b668f2dc614
MD5 b54078e3bc3a5978de4661ceae413868
SHA1 4aa2e5087b082d66c8e1ef160188f86544b9eb94
SHA512 6b8a6f39375ea2e52ceef4f0db88469292f10463fb91d287a7e7cdad96af66b11cb9c82f3377abd064be313d23eb8d48d72350aea1104f8d419ee6f18b64d5ff
SSDEEP 3072:X45qmT1uMRot8wHx8BeWFfh8Yahpj34iOuoe333eJTtTWdPOhY9SQeMXT:XMl8Ya7j4uo233eJTEOye
TLSH
T139047E55A7B58A1AE6AD5734E8731F058738F54EBE23E38E1BB9A63818373405C012F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

182498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Mono.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a43d90462146205b8c1e80b41d009e4810883fbf96fd9f725f09af64b51c161e
MD5 aa14196e1d16294b87185ecfffcf64cf
SHA1 cd9bae6041f73399bffa87c461edab659dcc0a92
SHA512 9efbc7810212efa5c193798333d39d787aea7307f9fcdbd11f67ba8a9b2235296b5ec0703838bb266d52b7bf890feffaa04d01b736f208844b96e2b495c60d8c
SSDEEP 6144:wxtgJ7SzJWhaeQTVJRj02o0nF2yUpub7H:ZB5ceQ502o02O
TLSH
T1915439082BE8DB2BF1BE53F8D0F04415CBF8A556B69BEF4E1C9610E818537419A05B6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Rewired_Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ccfc87681d5f59f642402f63a64c861ac86facd10296f254809999af6cbb67f8
MD5 34350599c8eef76d27afc3499554f051
SHA1 1af68cd287a12e41c3aef3251c1ae3a36731a72d
SHA512 bbef8fea2bfc7b847ae2e6911bfc0a7de5bcaf7b95af502b37f3fffa2c3faea63f53318f95e9eeff5b655c4fe98a14e6ebc17780016696c56229c88c5adec5f8
SSDEEP 24576:t7FLDcRyAHSs82uh8q4LwCGOVV0LEFoddBdw4O81:pFLCyr2QndddBdDO81
TLSH
T1D8457C007BF9A637D59E4B7BC8A59A4573B4E045AB1BFB5B38C0B76C1C823949D02393
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1285032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/Rewired_Windows_Lib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 01554e805dc824fbfcac02cb7075fcbab2984b1a8c6b93a44a0d14a5d2a891b1
MD5 6790f6da8d835ccbc95926b023ddfbf9
SHA1 8398bb9a148ece7394e6aa4a1267455558262356
SHA512 df5345523cbea0233a8d1c721d0ada5985eacde0cf79116890bfb58b04835a6db90091f4bddac3d10427207c4b53a9519f05ea67b10f3fab2773fb434bc07d70
SSDEEP 24576:kbLYfEgGMj0idcBJ6+zW4q1QSHkYyKytmJTGcI2kH5lD:kvywiA/S4qjRyLkQxpZl
TLSH
T18C25337A869D4280CDCBB77FC132352E9A3E7209EF89362146FC05B4B06919E1D78979
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1004073

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Guavaman\Rewired\Unity\RewiredSolutions\Rewired\Windows_U5_DLLWrapper\obj\Release\Rewired_Windows_Lib.pdb

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Configuration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c65d6a55bcd8cf5607fcce4925b422b920f7772932b9d0e90d1409481b4c77fd
MD5 6377fc21f82737ecf7421729c2c02b0e
SHA1 9b2b8bf386d1195cd8655221177268f8263d744b
SHA512 5d94dbf1ce28fdb2d0c03ae4d3735a7b7b7854f2aa29c2eb3e7daa760dae5716be990741384008474371489830ed5be44ad2a8846add2298eed904e17dff7adc
SSDEEP 3072:9rU7V0IiwJ16/jMPiyC9yCHpCA7QGfrS6CnFYaylev1p:a7VT1VKyC9yCHpCA7QAS6Na
TLSH
T187C3072527F8872BE7EE1779F4B104245BB0F60AB423D74E5889B0ED181B78186527BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

124738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a45cec889abe7ca6f4e613f95a229a79db0168902fbdaeda11a1a99af3fbb2d9
MD5 a3d61103e0ca37ba1d6cffde73a8a7d0
SHA1 75771cdf6cddd228aaea69478ea6cff45285a623
SHA512 54bfa3f8d4fedbd121e6dd86aa490a93947c3ab53698a9c63af6b011e9f72f0a606d0ef4a554933794bb5fcd03fa38908db615dd3222af4a797fb7ad9996fd7e
SSDEEP 6144:z0rxcnyyZrWiXjnGtL5HDx0/5tZwfms6dQhFxsNhGCzlMpOMGDV3u6GZD+o:ycnyyZrWiXjnGtL5H2RtOOKxQhGCzlMJ
TLSH
T1C8544B54A7DD9612E7BF63BAE4F0150143F1B8E379ABE75D28D840E90C9B740AE013A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Runtime.CompilerServices.Unsafe.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b27ab2dd6f3b7d12406fe69e8fafb66852575395e44d0a2778c19ebbef2e4930
MD5 dd332fb08b7241283572b23a76329013
SHA1 7478d114c62399b56b6dfe1d8d9e7def321f015b
SHA512 ff6542071a32213fdf6928f7c2c509baea40980cd3a0aa128a2a4270531d3dd6190580869cca384eafbd056790334a85e0f4206bb892e246d2f26a75e9a97d64
TLSH
T11B314C279BE444BBE159033A0B93479137B1D229176A575A2DD50129BC0027E4D16BA5
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Runtime.InteropServices.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d06923309efda2b79f1fd086263e4724ff54cf417cf1ce66304155b794c20a7e
MD5 e5ada8338dcb4ff25344408260bf7f7e
SHA1 57c6739a7a35273c098896a18b6e81f7dbc7eef0
SHA512 98ea0ef54bd6a8199cca7fcf6e3f0099bb208ca7d895c8933b7e00e7ba169edf6c6a7201a5e8791f90adbfec9e7be79040e35fe51c0137e36125d7a2a1e4bb06
SSDEEP 96:JGIO1zxxQQf/CzfrVYLIIeLhEEgJgYlvEyLoHbN+SElzxlSlBPP:PO1NmcqzUIIelEEsTZQHbW9xoXX
TLSH
T1B0F13E36EE08657BCC7E12B98EB224F203B324FC119E4D2A95CC867B51CF2660932365
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7ec7c4ec632691c431ec06a4b68c6c1a43875061bd71ac8cba7fd8dde13fce2d
MD5 b6eadb05a75cc270c159de49630dea18
SHA1 63951ad8d986ac1645e923bedf72c664b499fa3e
SHA512 8835bc3bc8ac7d4a1b4f7185f8a47d8f44b53622ec4392b92919a2bf36fd152e294c1ea0de1d11ead5a3e9bf4d96ad992e9e54dd7e72a9ba0568b8cb212670c3
SSDEEP 3072:nCbIP9QfljtJe22f3mhqYeqKjns8drZBb9LwoqoMZFsIHHrnmRKSCzwn+8sI1pU:RGfljtJnRhwwoqL8sA
TLSH
T121D309283BE8CB1AFBFA57B9F0F0041157B0E606B562DB4E1D9151DD2C27B421A12A7F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

135514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9d7f6d24dbb453771bde990ba2b439bb6936e97cbc2c4a014e74e203b1675867
MD5 32b9c54bec54955a352532511b377ffc
SHA1 a88cc15101a638fa14a088d048f72e3810c4938e
SHA512 b34a754e14b8ef4bb6d8ab0d24585d572a7affb7942e3711072eeece214ea3c1077537885b1bc9dd37c5590999a5543407adddc5dfa43d27ec9a1b27eb6e140e
SSDEEP 12288:sY/AQi7KrtoHqE8KBvdWfFb3X84qoECPqTJOCjbr9hSFswDJZi:sYtT5CqEdBVKbAYCjbr9hSrDDi
TLSH
T11B4508006BF8DA1BE2BF67B499B016244BF1B851F2B6EB9F284124D91C537009E5277F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/System.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 785e6b6f9f3d9089ba2ff693251143311d943c10e04cf14b23e8cb4f129745f5
MD5 577c35506fccb10d10e05c330b65ef06
SHA1 e43983972577c4c8e44907bc27f6bc317d638653
SHA512 34be6955a93faaca87fa98710190d0b8239714341d4c219d1e8a404e46c886b42768fe2cf4250bbd070c37c481d0540d36fcfe7358935b7e4017fcbecaefbd0d
SSDEEP 49152:Kv5u0KPEXzM3padHvYApy2kGWIU8V+sFP10AM2:KoiwgdHvYAesFP
TLSH
T17E756C0067E8CB2BE16E1379F0B209110BB4F50AF792E76F5EA568BC1C57B018D517AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.CloudBuild.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bbfbcec8300a33cc4170f5099fcfb79ae4cadd6e3bb7bbd4dd239f3ee406adca
MD5 6a4d2e336d21860ba43599c6f2bfc932
SHA1 1b22e44b74151f99867ba30787bde781415c5180
SHA512 87bba1e3d94b85c00fefbd4165d8548b3eeb349612727aac6149d04f9675717b88b17130111b0781af78960c9f717b1cffd0145bbfa449b2dbf8d92ecd985616
SSDEEP 192:+TuO3KB8FN8I5WJH9Evak2ZgfQPHM1oWdfUJDsZZeuAvi2u//aowhBlk:+q0AJrgfQPH8ofJDceuLaF
TLSH
T14632E95AA7F88626CD9D6B7698F302404734FA46A872DD5F0CC452DB1C133E54D92B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.Networking.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 847d51c7f5953006d3adcb01c6671bd83c8fbabb476640f3afc5a4274cd8bf0f
MD5 de0a1b431822a69f80588513be2b0d8d
SHA1 4006b147e562c24162eee75b0b7784d58fbfe4bf
SHA512 9865b17d2471c235c0070cef336350f99988201d1adf78914a0d6d60e3e426b8289cef8a05de0019657e6881e992fc4cffa669e61107c5dd065c5b1e2632309f
SSDEEP 6144:gpid4JqyX+Azoq4ZQXjycLujLq8BHrLpTurT4NgbdVrU:gpikFX+r7WXjycqydVr
TLSH
T1C444091027F98516F6FE27B9D8F450004B74BC42A46AEB8D06A060FE1D63794DDA63BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

259998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.UI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 28a590e2606e51b6d63162a109dbb54dfa566b30dd3cea797d49d718a947fe40
MD5 19653098afaee7d4fd1e826417995614
SHA1 a7a99315fc0b25cf8a009ecdd1254d3846375e31
SHA512 7d593196441eafd8574222f2e7044cadffebc51c9f23a045b82e1a2ec75abef73aacec5d9622640f7e3795bf0a4b1ed16651a9fc70aa9362ea1578c3d62986a6
SSDEEP 6144:jwlXZCXqvksq9kh03kAfNqdB10P8SMQXQMn5tnqbN8lf4sTg11Bf:jAXIXqvksq9kh00YNq2P8rIgf
TLSH
T1553429146AA9D93BD79E27BAE4E05000C3B48347F08BEF491AD458FD1D47360989A7EF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

250254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7764d0b747cd64830002cb6f4549d6dada1fc9970b2c0dbb2362613ca066ccab
MD5 95d0bf4375d93eb307322f9967f8f253
SHA1 96aae5e756767e07a8343d801c47f56adafa8c2a
SHA512 9b9a3f0919e23ab9a79a52366b12d21f0cde9d086573c5ba900f605ebde2dbd736aa78a9612d7a13d83304f5ad60bf279791797efbb2c5e5b548a9404f60face
SSDEEP 24576:Epj/51rCC2wTr6E94qxZo5EaEk7fwrCOCd:EBCC2QrlylE8
TLSH
T1B0552845BBE9DD6BCE6D13B6E0A520181371C9C53303E78B25B851FC2CD73A48E626DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1398126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/UnityEngine.dll.mdb

SHA256 9ad56467a47ec87f0e5bb9a59ca691f8dffe2c0d057db4fc05891329a979de54
MD5 449575b81d2cb5d28b2f4f0812c693dd
SHA1 b7a32ba81d39b4f7ae756180f9713b2a1de8299b
SHA512 f4717c16c900c0e823374163e4214ef4020b280e81e8f398aafa323b451530bfda66058c50d6eb184828753ca8ba5a213999ea3200c42d17f1a3c4e4a966608e
SSDEEP 6144:IByi+sox+nQrB+OEl+Ge8+7eyljmhtEUuyArbkKOlyjKkyaPGHsw1K40vUOnFn5A:II5xDrBMlkdvUuyArbkKOlyfP9eT2DJC
TLSH
T1FBA42780B02A4918F4278CB260FF97587BBCF409179FF75B32C59628FC77542AD91692
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Managed/mscorlib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6ca0315d6a79db97e1a11cd6b6978d9ea5cce33bdfda417ddf301d213ba39213
MD5 d7b0356799bd8395c20b2c4412604da5
SHA1 fda702c0562d4572bae1ecc3b112f5a1e6deb34c
SHA512 ffb2b0101ef86967f23ffbad81329f6505adf56e0b8b6feeaa397c2a2b66b6a535788d4c2d612cb993d8a50873195b22b5d502c2dc175e0bf19142035813f190
SSDEEP 24576:1V5wkIy4l/hEZolbghHKPtKhfZzYbFeeeeeN+3XG4kvRpXM/+FXM3L0IG:BB4jEZgbg6tKLK3XG4kvRpXMmFXy
TLSH
T1D1C53A50ABF8DA27F67A6775E8B140250BF0F441A762E74F365825F80CA3340AD167BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/MonoPosixHelper.dll

IMPHASH d144d27e19528e4de6c17bb2b1590bbe
SHA256 64c9c71f071e45accfdd2f23592535ae966252da6087ae0dd36f10c87d250c63
MD5 9dcafe743078980586b13ffcc9ac15ed
SHA1 a8e70837888a58aab1a3a051d7271a462d0074bf
SHA512 1af846ddd29409256d363edfa35c868e66f488031eebbcbe584aac3ac2d940824df4acbc45c065096fed81675083c07c25a7be905d3db3ef0267282b697b8955
SSDEEP 1536:SqOdWf+L5JjQ03xhhNmOXImx7RoZYDinz99wcUP4LpIOlIOjnToIf46:YdWKhmMIkte99wiLDvzTBfN
TLSH
T1AAA38E507290C672C0F6263C48E7C73D5A7E79269EB4888B3B4C6BAD1E613516B713CE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

37103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\buildslave\mono\build\msvc\Win32_Release_eglib\bin\monoposixhelper.pdb

CloseZStream CreateZStream Flush Mono_Posix_FromAccessModes Mono_Posix_FromConfstrName Mono_Posix_FromDirectoryNotifyFlags Mono_Posix_FromErrno Mono_Posix_FromFcntlCommand Mono_Posix_FromFilePermissions Mono_Posix_FromLockType Mono_Posix_FromLockfCommand Mono_Posix_FromMlockallFlags Mono_Posix_FromMmapFlags Mono_Posix_FromMmapProts Mono_Posix_FromMountFlags Mono_Posix_FromMremapFlags Mono_Posix_FromMsyncFlags Mono_Posix_FromOpenFlags Mono_Posix_FromPathconfName Mono_Posix_FromPollEvents Mono_Posix_FromPosixFadviseAdvice Mono_Posix_FromPosixMadviseAdvice Mono_Posix_FromSeekFlags Mono_Posix_FromSignum Mono_Posix_FromSysconfName Mono_Posix_FromSyslogFacility Mono_Posix_FromSyslogLevel Mono_Posix_FromSyslogOptions Mono_Posix_FromWaitOptions Mono_Posix_FromXattrFlags Mono_Posix_Stdlib_BUFSIZ Mono_Posix_Stdlib_CreateFilePosition Mono_Posix_Stdlib_DumpFilePosition Mono_Posix_Stdlib_EOF Mono_Posix_Stdlib_EXIT_FAILURE Mono_Posix_Stdlib_EXIT_SUCCESS Mono_Posix_Stdlib_FILENAME_MAX Mono_Posix_Stdlib_FOPEN_MAX Mono_Posix_Stdlib_InvokeSignalHandler Mono_Posix_Stdlib_L_tmpnam Mono_Posix_Stdlib_MB_CUR_MAX Mono_Posix_Stdlib_RAND_MAX Mono_Posix_Stdlib_SIG_DFL Mono_Posix_Stdlib_SIG_ERR Mono_Posix_Stdlib_SIG_IGN Mono_Posix_Stdlib_SetLastError Mono_Posix_Stdlib_TMP_MAX Mono_Posix_Stdlib__IOFBF Mono_Posix_Stdlib__IOLBF Mono_Posix_Stdlib__IONBF Mono_Posix_Stdlib_calloc Mono_Posix_Stdlib_clearerr Mono_Posix_Stdlib_fgetpos Mono_Posix_Stdlib_fread Mono_Posix_Stdlib_fseek Mono_Posix_Stdlib_fsetpos Mono_Posix_Stdlib_ftell Mono_Posix_Stdlib_fwrite Mono_Posix_Stdlib_malloc Mono_Posix_Stdlib_perror Mono_Posix_Stdlib_realloc Mono_Posix_Stdlib_rewind Mono_Posix_Stdlib_setbuf Mono_Posix_Stdlib_setvbuf Mono_Posix_Stdlib_stderr Mono_Posix_Stdlib_stdin Mono_Posix_Stdlib_stdout Mono_Posix_Stdlib_strlen Mono_Posix_ToAccessModes Mono_Posix_ToConfstrName Mono_Posix_ToDirectoryNotifyFlags Mono_Posix_ToErrno Mono_Posix_ToFcntlCommand Mono_Posix_ToFilePermissions Mono_Posix_ToLockType Mono_Posix_ToLockfCommand Mono_Posix_ToMlockallFlags Mono_Posix_ToMmapFlags Mono_Posix_ToMmapProts Mono_Posix_ToMountFlags Mono_Posix_ToMremapFlags Mono_Posix_ToMsyncFlags Mono_Posix_ToOpenFlags Mono_Posix_ToPathconfName Mono_Posix_ToPollEvents Mono_Posix_ToPosixFadviseAdvice Mono_Posix_ToPosixMadviseAdvice Mono_Posix_ToSeekFlags Mono_Posix_ToSignum Mono_Posix_ToSysconfName Mono_Posix_ToSyslogFacility Mono_Posix_ToSyslogLevel Mono_Posix_ToSyslogOptions Mono_Posix_ToWaitOptions Mono_Posix_ToXattrFlags ReadZStream WriteZStream

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx

SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
MD5 66fed2411c14a0fc8ce4c593ef601bfb
SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
TLSH
T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/1.0/machine.config

SHA256 eded908c507a7a230ee7ad3146d8893cf140638e6eaeab58bff05c95c2f3a7e3
MD5 4bad452a2ffc4c6f982e2f43fb44f6b9
SHA1 4445d53dc755ca2f977b01bf9d77357b3dfb0cc7
SHA512 1611968d2c19f3c9472a43d692a4451fd140dec1d6d5da6b819d33e62936f1d69d69e65c13b893158aacf985093bd7167f50d9c80c0789a79303fe66a9ad956c
SSDEEP 192:lhUisXjWXWPeEe90sEG9+RbwlP/waMGyR29yaDVPpAayW2x02GFGyC2xI2nb2kZX:lhU/Uvmbw5t/
TLSH
T1C4721230670DBD1ECA4126629870A9D1067F7B4E96ACED4CA5FF232EE917087D3521E3
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/2.0/Browsers/Compat.browser.html

SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx

SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
MD5 3b3452c399f27a24ea5a589c7bfe750b
SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04
SSDEEP 768:6CEPutHjWpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/q6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T19F43D4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/2.0/machine.config

SHA256 531d0d5bc30466a8a7ea6c032639721d7f16aab57c9701ef0afab5fdb432792f
MD5 433d143955ab359dff61c0bff982a176
SHA1 7eab623c58d853d733c0a5e586a47e09c4e3efdb
SHA512 914e7043806fcc2788dbe388f94a2c9cbc6b0d5eae59609ee411a4815926d879b05ba8f338ee07b88e95a44304ebc9cbefa19a948fa52ffc0f786957c9729c39
SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/yeRpQXWBEj3g:DuH
TLSH
T19FC2F0703609BDAE494227235C54FA8046BF57196BA86C0CB5FF626CFD2688BD3132D7
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/2.0/settings.map

SHA256 ca89036b7d7f1ae9311a6a2fbcf05fc5b997bd43fd21dd54e11c18018ef65f08
MD5 55dac562878b7dd98ee8a7ad203a26e6
SHA1 d16baa15e7d3042bcf9d7318209c696f4daf2cb0
SHA512 987c5cd86a9825953de670e5c15404694feb15cd5fa9afa8af4c2d5bda9d805839c9695d44122b32e0ffafe08d720c3df58000e89c8822fd9a5eb28eaf2ad478
TLSH
T1BB511138F344B5F50782052EA45B95D243B6053FA77A499C31ACD13D6F2984B83B32DD
MD5 SHA1 SHA512 TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/2.0/web.config

SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
MD5 2b6303c4f12762b71051db6e947f90a4
SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
TLSH
T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/browscap.ini

SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
MD5 378be809df7d15aac75a175693e25fbb
SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
TLSH
T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/config

SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
MD5 f95c345c1c53b820487f6b72e62d5485
SHA1 957e4e50e74c50347af92abf240c2c7aab3f3f79
SHA512 6b06434d07ee51be064a3efdca65b73e6c8e7560b43fb61633b08c7d2a0d792fe0670e57088c1dabd23929e0b7f7a27f65f503f2b640587042c8bbe98946368b
TLSH
T1FC318CDBE16C9DF9B071276592FEFBDC04B380A4CD1E31099E12DA411D25F9788439CA
MD5 SHA1 SHA512 TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/etc/mono/mconfig/config.xml

SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
MD5 f34b330f20dce1bdcce9058fca287099
SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
TLSH
T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Mono/mono.dll

IMPHASH 7c5bdfe0ad1d0025e63e5a860ea02671
SHA256 01954b99b6e05fa43d2784ec09d59d56198809b5c0714f79ac67ccaf3a207b51
MD5 aa23be9ce3051e7948a5101b1fbeb07d
SHA1 e0d87585c337dab596a89f8e3cbe6ae269002303
SHA512 8359b547f396078ec66b1ef2874cf9ef03e1db4e609cee5ddeb01b7c011becd5e10908374538330095cac21c9c41c37e723daa98c6326b0312c7571b4e59129d
SSDEEP 49152:vuUV+3SBzOyhBeAD9RO28789BX280eqkYFr42XoreLKay:v8pCzXO24NVLM
TLSH
T1ACA56B91E542D232C082007D4565572A0ABB6C62FF3698D7668CB4CFE5B42F0A79B37F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

1f:05:99:ae:3f:18:5e:72:ea:40:62:df:ea:5b:c7:c8:1b:29:9d:59

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US

Chains

Jun 25, 2017

CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US

Serial Number

07:57:79:00:b9:b5:a8:e4:48:a6:65:28:c7:76:0d:31

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 12, 2015 - Jul 11, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 10, 2013 - Dec 9, 2023

Minor OS version

1

Major OS version

5

Entry point

1149365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\buildslave\mono\build\builds\embedruntimes\win32\mono.pdb

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ws2_32

__WSAFDIsSet WSAGetLastError select socket WSACleanup WSAStartup inet_addr shutdown setsockopt getsockopt sendto WSASend send recvfrom WSARecv recv WSAIoctl connect bind getpeername getsockname ntohl listen WSACreateEvent WSAEventSelect WSACloseEvent accept ioctlsocket closesocket WSASocketW getprotobyname WSASetLastError getservbyport ntohs gethostbyaddr htons getservbyname htonl inet_ntoa gethostbyname gethostname

psapi

EnumProcessModules GetModuleInformation GetModuleFileNameExW GetModuleBaseNameW EnumProcesses

winmm

timeEndPeriod timeGetDevCaps timeBeginPeriod timeSetEvent

mswsock

TransmitFile

kernel32

WideCharToMultiByte RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetStartupInfoW SetHandleCount IsProcessorFeaturePresent HeapDestroy HeapCreate EncodePointer IsDebuggerPresent UnhandledExceptionFilter FindFirstFileExW HeapReAlloc GetCommandLineA DecodePointer ExitProcess CreateDirectoryA MoveFileA LocalFileTimeToFileTime FindFirstFileExA GetDriveTypeA InitializeCriticalSectionAndSpinCount SetStdHandle PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime FileTimeToSystemTime HeapFree HeapAlloc GetFullPathNameA CreateFileA LCMapStringW GetFileAttributesA GetConsoleCP VirtualAlloc VirtualFree VirtualQuery Sleep InterlockedCompareExchange InterlockedExchange GetSystemInfo LocalFree FormatMessageW GetLastError GetCurrentProcess GetProcAddress GetModuleHandleW SetLastError LoadLibraryW SetErrorMode FreeLibrary CloseHandle MapViewOfFile CreateFileMappingW UnmapViewOfFile VirtualProtect WaitForSingleObjectEx ReleaseSemaphore GetTickCount GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency LeaveCriticalSection EnterCriticalSection SetFileAttributesW CopyFileW DeleteFileW WriteFile CreateFileW ResumeThread InitializeCriticalSection InterlockedIncrement InterlockedDecrement DeleteCriticalSection GetFileType GetModuleFileNameW TlsGetValue GetConsoleMode TlsAlloc TlsFree GetVersionExW FindClose FindFirstFileW GetFileAttributesW GetFileAttributesExW CreateDirectoryW RemoveDirectoryW FindNextFileW GetCurrentDirectoryW SetCurrentDirectoryW MoveFileW ReplaceFileW ReadFile SetFilePointer FlushFileBuffers GetFileSize SetEndOfFile SetFileTime GetStdHandle CreatePipe DuplicateHandle GetTempPathW LockFile UnlockFile ResetEvent SetEvent CreateSemaphoreW CreateEventW SystemTimeToFileTime GetTimeZoneInformation GetComputerNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetDriveTypeW OutputDebugStringW GlobalAlloc DeleteFileA GlobalFree GetCurrentThreadId OpenProcess GetCurrentProcessId VerLanguageNameW CreateProcessW GetProcessTimes GetExitCodeProcess GetProcessWorkingSetSize SetProcessWorkingSetSize TerminateProcess GetPriorityClass SetPriorityClass GetCurrentThread GetVolumeInformationW LoadLibraryA GetSystemDirectoryA WaitForSingleObject SleepEx CreateMutexW ReleaseMutex OpenMutexW OpenSemaphoreW OpenEventW OpenThread GetExitCodeThread ExitThread WaitForMultipleObjectsEx SignalObjectAndWait QueueUserAPC FreeConsole GetThreadContext RemoveVectoredExceptionHandler SetUnhandledExceptionFilter AddVectoredExceptionHandler MultiByteToWideChar DebugBreak SuspendThread CreateThread GetVersion RaiseException GetEnvironmentVariableW GetACP GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW GetModuleFileNameA GetProcessHeap GetFullPathNameW CompareStringW SetEnvironmentVariableA CreateProcessA WriteConsoleW HeapSize TlsSetValue GlobalReAlloc

user32

WaitForInputIdle MessageBoxA SendMessageTimeoutW

advapi32

AllocateAndInitializeSid ImpersonateLoggedOnUser DuplicateToken GetTokenInformation OpenThreadToken OpenProcessToken LookupAccountSidW CryptReleaseContext CryptAcquireContextW CryptGenRandom CreateProcessWithLogonW CopySid GetLengthSid GetEffectiveRightsFromAclW BuildTrusteeWithSidW RevertToSelf FreeSid GetNamedSecurityInfoW SetNamedSecurityInfoW SetEntriesInAclW

shell32

ShellExecuteExW SHGetFolderPathW

ole32

CoTaskMemFree CoTaskMemRealloc CoInitializeEx CoUninitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler

oleaut32

SafeArrayDestroy SafeArrayCreate SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SysFreeString SysStringLen SysAllocStringLen

g_free mono_add_internal_call mono_alloc_special_static_data mono_array_addr_with_size mono_array_class_get mono_array_clone mono_array_element_size mono_array_new mono_array_new_full mono_array_new_specific mono_assemblies_cleanup mono_assemblies_init mono_assembly_close mono_assembly_fill_assembly_name mono_assembly_foreach mono_assembly_get_assemblyref mono_assembly_get_image mono_assembly_get_main mono_assembly_get_object mono_assembly_getrootdir mono_assembly_invoke_load_hook mono_assembly_invoke_search_hook mono_assembly_load mono_assembly_load_from mono_assembly_load_from_full mono_assembly_load_full mono_assembly_load_module mono_assembly_load_reference mono_assembly_load_references mono_assembly_load_with_partial_name mono_assembly_loaded mono_assembly_loaded_full mono_assembly_name_parse mono_assembly_names_equal mono_assembly_open mono_assembly_open_full mono_assembly_set_main mono_assembly_setrootdir mono_backtrace_from_context mono_bitset_alloc_size mono_bitset_clear mono_bitset_clear_all mono_bitset_clone mono_bitset_copyto mono_bitset_count mono_bitset_equal mono_bitset_find_first mono_bitset_find_first_unset mono_bitset_find_last mono_bitset_find_start mono_bitset_foreach mono_bitset_free mono_bitset_intersection mono_bitset_intersection_2 mono_bitset_invert mono_bitset_mem_new mono_bitset_new mono_bitset_set mono_bitset_set_all mono_bitset_size mono_bitset_sub mono_bitset_test mono_bitset_test_bulk mono_bitset_union mono_bounded_array_class_get mono_check_corlib_version mono_class_array_element_size mono_class_data_size mono_class_describe_statics mono_class_enum_basetype mono_class_from_generic_parameter mono_class_from_mono_type mono_class_from_name mono_class_from_name_case mono_class_from_typeref mono_class_get mono_class_get_byref_type mono_class_get_element_class mono_class_get_event_token mono_class_get_events mono_class_get_field mono_class_get_field_from_name mono_class_get_field_token mono_class_get_fields mono_class_get_flags mono_class_get_full mono_class_get_image mono_class_get_interfaces mono_class_get_method_from_name mono_class_get_method_from_name_flags mono_class_get_methods mono_class_get_name mono_class_get_namespace mono_class_get_nested_types mono_class_get_nesting_type mono_class_get_parent mono_class_get_properties mono_class_get_property_from_name mono_class_get_property_token mono_class_get_rank mono_class_get_type mono_class_get_type_token mono_class_get_userdata mono_class_get_userdata_offset mono_class_inflate_generic_method mono_class_inflate_generic_method_full mono_class_inflate_generic_type mono_class_init mono_class_instance_size mono_class_is_assignable_from mono_class_is_blittable mono_class_is_enum mono_class_is_generic mono_class_is_inflated mono_class_is_subclass_of mono_class_is_valuetype mono_class_min_align mono_class_name_from_token mono_class_num_events mono_class_num_fields mono_class_num_methods mono_class_num_properties mono_class_set_userdata mono_class_value_size mono_class_vtable mono_cli_rva_image_map mono_code_manager_commit mono_code_manager_destroy mono_code_manager_foreach mono_code_manager_invalidate mono_code_manager_new mono_code_manager_new_dynamic mono_code_manager_reserve mono_compile_method mono_config_for_assembly mono_config_parse mono_config_parse_memory mono_config_string_for_assembly_file mono_context_get mono_context_init mono_context_set mono_counters_dump mono_counters_enable mono_counters_register mono_custom_attrs_construct mono_custom_attrs_free mono_custom_attrs_from_assembly mono_custom_attrs_from_class mono_custom_attrs_from_event mono_custom_attrs_from_field mono_custom_attrs_from_index mono_custom_attrs_from_method mono_custom_attrs_from_param mono_custom_attrs_from_property mono_custom_attrs_get_attr mono_custom_attrs_has_attr mono_debug_add_method mono_debug_cleanup mono_debug_close_mono_symbol_file mono_debug_domain_create mono_debug_domain_unload mono_debug_find_method mono_debug_free_source_location mono_debug_init mono_debug_lookup_method mono_debug_lookup_source_location mono_debug_open_image_from_memory mono_debug_open_mono_symbols mono_debug_print_stack_frame mono_debug_print_vars mono_debug_symfile_lookup_location mono_debug_symfile_lookup_method mono_debug_using_mono_debugger mono_debugger_breakpoint_callback mono_debugger_check_runtime_version mono_debugger_cleanup mono_debugger_event mono_debugger_handle_exception mono_debugger_initialize mono_debugger_insert_breakpoint mono_debugger_insert_breakpoint_full mono_debugger_lock mono_debugger_method_has_breakpoint mono_debugger_remove_breakpoint mono_debugger_run_finally mono_debugger_unlock mono_declsec_flags_from_assembly mono_declsec_flags_from_class mono_declsec_flags_from_method mono_declsec_get_assembly_action mono_declsec_get_class_action mono_declsec_get_demands mono_declsec_get_inheritdemands_class mono_declsec_get_inheritdemands_method mono_declsec_get_linkdemands mono_declsec_get_method_action mono_digest_get_public_token mono_disasm_code mono_disasm_code_one mono_dl_fallback_register mono_dl_fallback_unregister mono_dllmap_insert mono_domain_add_class_static_data mono_domain_assembly_open mono_domain_create mono_domain_create_appdomain mono_domain_finalize mono_domain_foreach mono_domain_free mono_domain_get mono_domain_get_by_id mono_domain_get_id mono_domain_has_type_resolve mono_domain_is_unloading mono_domain_owns_vtable_slot mono_domain_set mono_domain_set_internal mono_domain_try_type_resolve mono_domain_unload mono_environment_exitcode_get mono_environment_exitcode_set mono_escape_uri_string mono_event_get_add_method mono_event_get_flags mono_event_get_name mono_event_get_object mono_event_get_parent mono_event_get_raise_method mono_event_get_remove_method mono_exception_from_name mono_exception_from_name_domain mono_exception_from_name_msg mono_exception_from_name_two_strings mono_exception_from_token mono_field_from_token mono_field_get_data mono_field_get_flags mono_field_get_name mono_field_get_object mono_field_get_offset mono_field_get_parent mono_field_get_type mono_field_get_value mono_field_get_value_object mono_field_set_value mono_field_static_get_value mono_field_static_set_value mono_file_map mono_file_unmap mono_free_method mono_free_verify_list mono_g_hash_table_destroy mono_g_hash_table_foreach mono_g_hash_table_foreach_remove mono_g_hash_table_insert mono_g_hash_table_lookup mono_g_hash_table_lookup_extended mono_g_hash_table_new mono_g_hash_table_new_full mono_g_hash_table_new_type mono_g_hash_table_remove mono_g_hash_table_replace mono_g_hash_table_size mono_gc_collect mono_gc_collection_count mono_gc_enable_events mono_gc_get_generation mono_gc_get_heap_size mono_gc_get_used_size mono_gc_is_finalizer_thread mono_gc_max_generation mono_gc_out_of_memory mono_gc_wbarrier_arrayref_copy mono_gc_wbarrier_generic_store mono_gc_wbarrier_set_arrayref mono_gc_wbarrier_set_field mono_gc_wbarrier_value_copy mono_gchandle_free mono_gchandle_get_target mono_gchandle_is_in_domain mono_gchandle_new mono_gchandle_new_weakref mono_get_array_class mono_get_boolean_class mono_get_byte_class mono_get_char_class mono_get_config_dir mono_get_corlib mono_get_dbnull_object mono_get_delegate_invoke mono_get_double_class mono_get_enum_class mono_get_exception_appdomain_unloaded mono_get_exception_argument mono_get_exception_argument_null mono_get_exception_argument_out_of_range mono_get_exception_arithmetic mono_get_exception_array_type_mismatch mono_get_exception_bad_image_format mono_get_exception_bad_image_format2 mono_get_exception_cannot_unload_appdomain mono_get_exception_class mono_get_exception_divide_by_zero mono_get_exception_execution_engine mono_get_exception_file_not_found mono_get_exception_file_not_found2 mono_get_exception_index_out_of_range mono_get_exception_invalid_cast mono_get_exception_invalid_operation mono_get_exception_io mono_get_exception_missing_field mono_get_exception_missing_method mono_get_exception_not_implemented mono_get_exception_not_supported mono_get_exception_null_reference mono_get_exception_overflow mono_get_exception_reflection_type_load mono_get_exception_security mono_get_exception_serialization mono_get_exception_stack_overflow mono_get_exception_synchronization_lock mono_get_exception_thread_abort mono_get_exception_thread_interrupted mono_get_exception_thread_state mono_get_exception_type_initialization mono_get_exception_type_load mono_get_inflated_method mono_get_int16_class mono_get_int32_class mono_get_int64_class mono_get_intptr_class mono_get_machine_config mono_get_method mono_get_method_constrained mono_get_method_full mono_get_object_class mono_get_root_domain mono_get_sbyte_class mono_get_single_class mono_get_special_static_data mono_get_string_class mono_get_thread_class mono_get_uint16_class mono_get_uint32_class mono_get_uint64_class mono_get_uintptr_class mono_get_void_class mono_guid_to_string mono_image_add_to_name_cache mono_image_addref mono_image_close mono_image_ensure_section mono_image_ensure_section_idx mono_image_get_assembly mono_image_get_entry_point mono_image_get_filename mono_image_get_guid mono_image_get_name mono_image_get_public_key mono_image_get_resource mono_image_get_strong_name mono_image_get_table_info mono_image_get_table_rows mono_image_has_authenticode_entry mono_image_init mono_image_init_name_cache mono_image_is_dynamic mono_image_load_file_for_image mono_image_loaded mono_image_loaded_by_guid mono_image_loaded_by_guid_full mono_image_loaded_full mono_image_lookup_resource mono_image_open mono_image_open_from_data mono_image_open_from_data_full mono_image_open_from_data_with_name mono_image_open_full mono_image_rva_map mono_image_strerror mono_image_strong_name_position mono_image_verify_tables mono_images_cleanup mono_images_init mono_init mono_init_from_assembly mono_init_version mono_inst_name mono_install_assembly_load_hook mono_install_assembly_postload_refonly_search_hook mono_install_assembly_postload_search_hook mono_install_assembly_preload_hook mono_install_assembly_refonly_preload_hook mono_install_assembly_refonly_search_hook mono_install_assembly_search_hook mono_install_runtime_cleanup mono_is_debugger_attached mono_jit_cleanup mono_jit_exec mono_jit_info_get_code_size mono_jit_info_get_code_start mono_jit_info_get_method mono_jit_info_table_find mono_jit_init mono_jit_init_version mono_jit_parse_options mono_jit_set_trace_options mono_jit_thread_attach mono_ldstr mono_ldtoken mono_load_remote_field mono_load_remote_field_new mono_loader_error_prepare_exception mono_loader_get_last_error mono_locks_dump mono_lookup_internal_call mono_lookup_pinvoke_call mono_main mono_marshal_string_to_utf16 mono_mb_free mono_md5_final mono_md5_get_digest mono_md5_get_digest_from_file mono_md5_init mono_md5_update mono_mempool_alloc mono_mempool_alloc0 mono_mempool_contains_addr mono_mempool_destroy mono_mempool_empty mono_mempool_get_allocated mono_mempool_invalidate mono_mempool_new mono_mempool_stats mono_mempool_strdup mono_metadata_blob_heap mono_metadata_cleanup mono_metadata_compute_size mono_metadata_custom_attrs_from_index mono_metadata_declsec_from_index mono_metadata_decode_blob_size mono_metadata_decode_row mono_metadata_decode_row_col mono_metadata_decode_signed_value mono_metadata_decode_table_row mono_metadata_decode_table_row_col mono_metadata_decode_value mono_metadata_encode_value mono_metadata_events_from_typedef mono_metadata_field_info mono_metadata_free_array mono_metadata_free_marshal_spec mono_metadata_free_method_signature mono_metadata_free_mh mono_metadata_free_type mono_metadata_generic_class_is_valuetype mono_metadata_get_constant_index mono_metadata_get_generic_param_row mono_metadata_get_marshal_info mono_metadata_get_param_attrs mono_metadata_guid_heap mono_metadata_implmap_from_method mono_metadata_init mono_metadata_interfaces_from_typedef mono_metadata_load_generic_param_constraints mono_metadata_load_generic_params mono_metadata_locate mono_metadata_locate_token mono_metadata_methods_from_event mono_metadata_methods_from_property mono_metadata_nested_in_typedef mono_metadata_nesting_typedef mono_metadata_packing_from_typedef mono_metadata_parse_array mono_metadata_parse_custom_mod mono_metadata_parse_field_type mono_metadata_parse_marshal_spec mono_metadata_parse_method_signature mono_metadata_parse_method_signature_full mono_metadata_parse_mh mono_metadata_parse_mh_full mono_metadata_parse_param mono_metadata_parse_signature mono_metadata_parse_type mono_metadata_parse_type_full mono_metadata_parse_typedef_or_ref mono_metadata_properties_from_typedef mono_metadata_signature_alloc mono_metadata_signature_dup mono_metadata_signature_equal mono_metadata_string_heap mono_metadata_token_from_dor mono_metadata_translate_token_index mono_metadata_type_equal mono_metadata_type_hash mono_metadata_typedef_from_field mono_metadata_typedef_from_method mono_metadata_user_string mono_method_body_get_object mono_method_desc_free mono_method_desc_from_method mono_method_desc_full_match mono_method_desc_match mono_method_desc_new mono_method_desc_search_in_class mono_method_desc_search_in_image mono_method_full_name mono_method_get_class mono_method_get_flags mono_method_get_header mono_method_get_index mono_method_get_last_managed mono_method_get_marshal_info mono_method_get_name mono_method_get_object mono_method_get_param_names mono_method_get_param_token mono_method_get_signature mono_method_get_signature_full mono_method_get_token mono_method_has_marshal_info mono_method_header_get_clauses mono_method_header_get_code mono_method_header_get_locals mono_method_header_get_num_clauses mono_method_signature mono_method_verify mono_mlist_alloc mono_mlist_append mono_mlist_get_data mono_mlist_last mono_mlist_length mono_mlist_next mono_mlist_prepend mono_mlist_remove_item mono_mlist_set_data mono_module_file_get_object mono_module_get_object mono_monitor_enter mono_monitor_exit mono_monitor_try_enter mono_mprotect mono_object_castclass_mbyref mono_object_clone mono_object_describe mono_object_describe_fields mono_object_get_class mono_object_get_domain mono_object_get_size mono_object_get_virtual_method mono_object_hash mono_object_is_alive mono_object_isinst mono_object_isinst_mbyref mono_object_new mono_object_new_alloc_specific mono_object_new_fast mono_object_new_from_token mono_object_new_specific mono_object_unbox mono_opcode_name mono_opcode_value mono_pagesize mono_param_get_objects mono_parse_default_optimizations mono_path_canonicalize mono_path_resolve_symlinks mono_pe_file_open mono_pmip mono_poll mono_print_method_from_ip mono_print_thread_dump mono_print_unhandled_exception mono_profiler_coverage_get mono_profiler_get_events mono_profiler_install mono_profiler_install_allocation mono_profiler_install_appdomain mono_profiler_install_assembly mono_profiler_install_class mono_profiler_install_coverage_filter mono_profiler_install_enter_leave mono_profiler_install_exception mono_profiler_install_gc mono_profiler_install_jit_compile mono_profiler_install_jit_end mono_profiler_install_module mono_profiler_install_statistical mono_profiler_install_thread mono_profiler_install_transition mono_profiler_load mono_profiler_set_events mono_property_get_flags mono_property_get_get_method mono_property_get_name mono_property_get_object mono_property_get_parent mono_property_get_set_method mono_property_get_value mono_property_set_value mono_ptr_class_get mono_raise_exception mono_reflection_get_custom_attrs mono_reflection_get_custom_attrs_blob mono_reflection_get_custom_attrs_by_type mono_reflection_get_custom_attrs_data mono_reflection_get_custom_attrs_info mono_reflection_get_token mono_reflection_get_type mono_reflection_parse_type mono_reflection_type_from_name mono_reflection_type_get_handle mono_register_bundled_assemblies mono_register_config_for_assembly mono_register_machine_config mono_remote_class mono_runtime_class_init mono_runtime_cleanup mono_runtime_delegate_invoke mono_runtime_exec_main mono_runtime_exec_managed_code mono_runtime_get_main_args mono_runtime_init mono_runtime_invoke mono_runtime_invoke_array mono_runtime_is_shutting_down mono_runtime_object_init mono_runtime_quit mono_runtime_run_main mono_runtime_set_shutting_down mono_runtime_unhandled_exception_policy_get mono_runtime_unhandled_exception_policy_set mono_security_enable_core_clr mono_security_set_core_clr_platform_callback mono_security_set_mode mono_set_assemblies_path mono_set_break_policy mono_set_commandline_arguments mono_set_config_dir mono_set_defaults mono_set_dirs mono_set_find_plugin_callback mono_set_ignore_version_and_key_when_finding_assemblies_already_loaded mono_set_rootdir mono_set_signal_chaining mono_sha1_final mono_sha1_get_digest mono_sha1_get_digest_from_file mono_sha1_init mono_sha1_update mono_signature_explicit_this mono_signature_get_call_conv mono_signature_get_desc mono_signature_get_param_count mono_signature_get_params mono_signature_get_return_type mono_signature_hash mono_signature_is_instance mono_signature_vararg_start mono_signbit_double mono_signbit_float mono_stack_walk mono_stack_walk_no_il mono_store_remote_field mono_store_remote_field_new mono_string_equal mono_string_from_utf16 mono_string_hash mono_string_intern mono_string_is_interned mono_string_new mono_string_new_len mono_string_new_size mono_string_new_utf16 mono_string_new_wrapper mono_string_to_utf16 mono_string_to_utf8 mono_stringify_assembly_name mono_table_info_get_rows mono_thread_abort_all_other_threads mono_thread_attach mono_thread_cleanup mono_thread_create mono_thread_current mono_thread_detach mono_thread_exit mono_thread_force_interruption_checkpoint mono_thread_get_abort_signal mono_thread_get_main mono_thread_has_appdomain_ref mono_thread_init mono_thread_interruption_checkpoint mono_thread_interruption_request_flag mono_thread_interruption_requested mono_thread_manage mono_thread_new_init mono_thread_pool_cleanup mono_thread_pop_appdomain_ref mono_thread_push_appdomain_ref mono_thread_request_interruption mono_thread_set_main mono_thread_stop mono_thread_suspend_all_other_threads mono_threads_abort_appdomain_threads mono_threads_clear_cached_culture mono_threads_get_default_stacksize mono_threads_install_cleanup mono_threads_request_thread_dump mono_threads_set_default_stacksize mono_threads_set_shutting_down mono_trace mono_trace_cleanup mono_trace_is_traced mono_trace_pop mono_trace_push mono_trace_set_level mono_trace_set_level_string mono_trace_set_mask mono_trace_set_mask_string mono_tracev mono_type_create_from_typespec mono_type_full_name mono_type_generic_inst_is_valuetype mono_type_get_array_type mono_type_get_class mono_type_get_desc mono_type_get_modifiers mono_type_get_name mono_type_get_name_full mono_type_get_object mono_type_get_ptr_type mono_type_get_signature mono_type_get_type mono_type_get_underlying_type mono_type_is_byref mono_type_is_reference mono_type_size mono_type_stack_size mono_type_to_unmanaged mono_unhandled_exception mono_unicode_from_external mono_unicode_to_external mono_unity_class_is_abstract mono_unity_class_is_interface mono_unity_get_all_classes_with_name_case mono_unity_liveness_allocate_struct mono_unity_liveness_calculation_begin mono_unity_liveness_calculation_end mono_unity_liveness_calculation_from_root mono_unity_liveness_calculation_from_root_managed mono_unity_liveness_calculation_from_statics mono_unity_liveness_calculation_from_statics_managed mono_unity_liveness_finalize mono_unity_liveness_free_struct mono_unity_liveness_start_gc_world mono_unity_liveness_stop_gc_world mono_unity_seh_handler mono_unity_set_embeddinghostname mono_unity_set_unhandled_exception_handler mono_unity_set_vprintf_func mono_unity_socket_security_enabled_set mono_upgrade_remote_class_wrapper mono_utf8_from_external mono_valloc mono_value_box mono_value_copy mono_value_copy_array mono_value_describe_fields mono_verifier_set_mode mono_verify_corlib mono_vfree mono_vtable_get_static_field_data mono_walk_stack set_vprintf_func unity_mono_close_output unity_mono_install_memory_callbacks unity_mono_method_is_generic unity_mono_method_is_inflated unity_mono_redirect_output unity_mono_reflection_method_get_method

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Resources/unity default resources

SHA256 0e611340905acf28f0ac1a0b54596d545033e71c903a42432380dc66d8e42812
MD5 42879b28fda0f431f16838954dab8265
SHA1 3ac96a51f77d5d37890484ac986eab6bef8ba4d0
SHA512 3be7e8ffb8212c7ad7896d18bd0a2b66763151137287cb569fe923a0a11a300c4995401c10c7780f6b5c0df730704d1523b97ddb268bc155396f1aa78e438a5f
SSDEEP 6144:hhJt9GPohSfZ2AOJeNosdzobLend5UOC:hhwPohSBHDZove9C
TLSH
T111F4FB257206C13AD41109328C76DFFE5232BCE8DEB94A177AE67F9F7CB52842660235
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/Resources/unity_builtin_extra

SHA256 d33deaf79dd82b501354015dfb8abf9a2f40fb9c778976877a2f92b061f5b1c9
MD5 444b3b9dd58f3df3f10b507b0dd86c2b
SHA1 1f2ea711a3c83c3824a50a17f72a88da2826c34e
SHA512 4c055140ad7e64971cfb8e3ea566f311c438dffe394dbc056b7b02919a09a93875670321175430f2a78c77f0a444ce47d61283fc18b78ac21cc0d16cfe17f954
SSDEEP 1536:xnMwLhYjlprJs7X5SZFzOA4s2OUMs7DRo/X26ihiYiEisiaxlDAj9fBf6F1x9/Ei:xn3yVs7X5iFH4sTs/RzkcX+tdDO
TLSH
T18424627DA357483FCC20153748B60B33A336A5F81BEE4F236E2C5B6C68D6298AB55744
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/app.info

SHA256 fca2c8518d709ff09a147d8dd06934998168314ade4f88ad806d129526f9074f
MD5 4462d048179b908ab614c598e70efb97
SHA1 9670de51fb005dc9fbc264740b0cc49310cd866e
SHA512 fc700e203ae6a5ec1c34f809a419860484fd6b9729376a0ded7f95b68a32830e24aa524127c35824cb8c6c078bd5ff7a800d774c442043849d5fc385fb326ef0
MD5 SHA1 SHA512

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/globalgamemanagers

SHA256 96c256bd095ddaaef8a55e74061d562e362dd843f69b680aef299f3230f7395b
MD5 165dbaa8f262108988be5384de88dd16
SHA1 b8453da33b5320eee06199499cb4539caf2f1860
SHA512 1f28f05ac9fe53efa0151883f5d1fb27fa90d7dd95b729f926b8bfcf13795b5acbd5db41ff9755cc8f7626b571c914652b824957be0473279274aa7cf4d7ca73
SSDEEP 1536:3t1CnYzznw+I5LX32KBFhEzdA0jfIWw6MtBjhsbOfO8I+gOpQdFZl86rzaO8dDRL:3t1RC5r32KBFspIIMjbi8fn3FsE+
TLSH
T126241D48CEB0DA6BD696167D44B74B217370D0DCAE02EB2B535CB4B43CA67881FC7629
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/globalgamemanagers.assets

SHA256 39bed8c1bdf328e7a89411aa3d17395039875a31606ca26be86f90ee591aeae9
MD5 14afae32b12cccf12d137807af862e10
SHA1 456e5133a964e33750933ffc64cdda930f8df9a0
SHA512 df433be0c3b0edd9a25d5f3f30c84c58fb5c42a3780ba01caab0fb7d8dbd445a06ac5182f570497f22601bc5646c095a2adabf09491630ee73e8cd05404628cf
SSDEEP 6144:6MoRVhVlgYg3etRo2E6d0Q01PNP6lslU:J2zp
TLSH
T11424FFBA02A08F9AEB940D37B8631948B1F9735917C0777E10B01A37967D1AA0F7572B
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level0

SHA256 e62110e226d5eba00e659001a4639a50459c8593921774a13e8a1fd61583234d
MD5 ac7f6cfc0387c109f119475aa477371f
SHA1 07cb39df42020918b2f908d1756e41fe51db2e28
SHA512 8166d7515a12eaad2217f4451f563ec191ff39697bf4dc1dfea34db958f71fad4725f857e4e4a7a8afb12b0e16c45f83206778119c3838d60a39cc1295323b17
SSDEEP 12:EGGcvVvoEJDzgXMsz65caItByESQR6tlsRtUEmxlXsBH4Fjq6FJvNniKEKC:wc9XPC65ItByESV/wO5jkAfFJv1s
TLSH
T13DA128467768492BC4B4773688E30F85F7B1F8852A6FC72326B87A3C2CE27C90D45554
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level1

SHA256 3fd1f63208dc511d1ab7c52c98ae0055042e0c9d9dccd7e15127505e185eab0c
MD5 c140b3fbe44a7dd12cb49353c65af69c
SHA1 bb26d441b6ffaa909bec5d4d3814b8315afec328
SHA512 a91dd7aafc60b384447035ce36e95fd15ef8d9f6b0755b162abf404836e33d0a7f8dcc0fe04a536385dbbf474245577ac42c42da7e07371cc093f6eb3b014415
SSDEEP 192:ErxTCMnZX140nLTiC8x9/k4aDwQSKXw/6qB9u/kMSC1psQlu:q3XjfiC292SKXw/6qB9u/cC1psQlu
TLSH
T112C294A2AB21A55BC9783B3309D70F80FB31C5964B7E9B371374156C6DF638E1E46580
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level2

SHA256 c1c84339997a4de1f082303b4b41f9f07a01204c2f8ab02f48d1d401ddd5d344
MD5 309b5751dc5ab32cb14592f45987f39b
SHA1 050b873a696aa475369a124bed62ffd16e983aba
SHA512 ff56ead7c04585e6dcdafc675a0a751da4c077c7882cb7059e44387a6a375c3b968ac800b1e1644448603a056dd2685e8bf90446746764543e86eaa475b928bf
SSDEEP 3072:19qDxiyvxQHuAm5cOZEt54Eh5uvTf2rHRVqqeGxdzngTFAbJZhNTIi8bFqpnBh:19qDxJvG4NZyD0grnX6i8JqpnBh
TLSH
T1F7F46766DB80B95AC9646B3249AB0F85F332C0DA8FBDC73B0739642D6DE729F1E45440
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level3

SHA256 a9e4f5f77b463b693f8784ba03eb4c38cb11e508d449c9be963312821b82f8b6
MD5 aa663ccff163f0817435170d1bfeb9e6
SHA1 6d25b53db471076c17117986e6db07f8c3f9fce7
SHA512 01130e41a24025c879329f13db868cb7c1fb914009f16462c82736aa2018ba1fb992fe2171caacd263ffbfe3cea501c97743663536424c39bd90c179e2fe22d6
SSDEEP 768:RseFlvoxXjCokh8nZYrobn8XjKoTd/oSlEeOVqiDCmCVpd5jb0zNlgVji2Sk8O70:RXJoxXjH
TLSH
T1EA7387719751A448C9746B3B8A970F86E322C1DA8FBDC77B0771384CADEA29F5F42490
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level4

SHA256 7f247df02eb6d267699cabde80375059927a5f7a9129c9a5e594fe19f974266c
MD5 284f7fb16ed6c05b9fced73e1575e7cc
SHA1 fa15e86ccef380a6103878368983faea282240ed
SHA512 2d71649dc1efcf80d97f2d43ee60a13ef0870e6e400b9f66a86225cea0980a73de05b50236b815f19455c3165f276e299e4c3d885b62f671ba9dd5f9852315c8
SSDEEP 1536:0PIML1uTd4U1nGtfg8LJiyhAk5HCOhtw82ksxtGa4lBknelWc2tSIcLp//8sAfmV:WocBknhgSs
TLSH
T127F36262AB90A85AD9647B33499B0F81F771C19A8FBDC73B0771156D6DFA38F0E42480
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level5

SHA256 c5908d4338764b48f76cd5b69543b0a07dd4c8349fc7dd328be8ae265cec6f57
MD5 f20bf15174d252e2f4cf74c9fba04f7e
SHA1 b093131ca2cf92e32f0b4a388b6c640cf2e9ef74
SHA512 2a3fe69136cad4139a025985c08642ad9a694e0065cc9de2b5a59f9de95f4517cade24230dccbe64353dbf0d92d4b2dbab49eb9477acd4da12c731127f608eca
SSDEEP 768:sIiBU6uO9ir3vXz36ZZ+qlmraTsL/ZlSa5C56vv6Xurhqt3pbbFYECBFrn9tjwkq:2a6uO9ir3vX7ohkh0
TLSH
T1AEA37162AB80A94EDA343B3319970F94FB31C5998FBE873B1771156D2DF678E0E42490
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level6

SHA256 e8874a68768727a9e9cc32167bf253d1f7508140a148e6e9a04cc34d5c97dac2
MD5 0511f2419676b4a6a05ab783ae2c8c01
SHA1 1b5e39ef98d99719f45be3c5c83df221e67164c4
SHA512 de1f95bf87a46141bfe32c07ba3fd3c1fc7ad24afe924eb5ee13a0c317599e53aec3a6c0bd04ceef8863b2ad1f21bd35c39ebfa4580ab9cea6f2913695160ca7
SSDEEP 3072:VoYhgcV76jBowZMJan0KUGSwncY5nutSw+08//:VoYhjV71Pe
TLSH
T11F743D65DB90AA2FC876273209E70F81FB31C0995B7B8B775374547D2DEA78E0E82484
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level7

SHA256 1afcf67c6bbab1988486f34ab60d2bc2eb535b3c287f2ee4534f022c5e0ac8eb
MD5 faad6f844d2af126a9470a1f71702957
SHA1 a818e19dadfb4e4e0ea5b9f61c667f8b8547dd54
SHA512 877267f494ab629d0cae078cad755e5a45f52cb7b8ea8f69d5c14fe587a25d5620922e710785d2ee8148c26bf1bb230ebba4824a80e69827ae5688b76fb17070
SSDEEP 1536:AU48aAhtoi37aJNW8rbMWN0artZLGxcgxyAuIzOQkvBWhAMjDWJ8d5rZUJlnde:AU4pixdkMAOuE
TLSH
T1AB144122EB90A95BC970673249EB0F85F771C1D94FBE873B4375552D6DEA38E0E82480
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level8

SHA256 bd8b053d5a43dfe5a2104d1f0d38797f20fbf54d0df450af9fff07cb4bf52e3c
MD5 4f93ff9bf916b3fcde4051e93fb2e3fd
SHA1 447c65ef50d169fa29de44442460c42f722e9e0f
SHA512 62304bb05eb50f0a36f854f9de954846cf8995fb4c1177b620d1907c0eb40e56c8c533a3f8ab0df5207a940d3d21e9f07b78bae164831ee844bd44c6e31282d6
SSDEEP 3072:5PoVeXG3/FkrDM1EIG4rxUrPiwfyv6nvx:RoVeo0qQvx
TLSH
T1CE743D659B90AE2FC975273206E70F81FB31C1995B7B87375374643C2DEA38E0E86588
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/level8.resS

SHA256 85cc2196f391eef90aa90e0b4c1c0f60aaab89eeb4dc7429799c4f4171cc47c5
MD5 9e7bf81269dce86377d86c81851551fc
SHA1 e53937002483a5bfb66172fb38c4a6267ad9518d
SHA512 8ff707106853c2411bc1c6b2bcc28a58e098203dcdc6ed012cd42b80b89edc24c0a3bfe99b52ff12d14dad64b694049c47bffcc5f0ce24d26bd491e7e4950d9e
SSDEEP 3072:zBiT08dAZROgNQ1re9IdrreQjNE4pR3KvluOne:zB58+ZRrEreD4pR3KRe
TLSH
T14BD36B0FB631D1456D32E6A9AC1F0E80E78187CE4888AF257525C78FF56E46CE0996FC
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/output_log.txt

SHA256 43bde61cd6a83641a361b340fb661c824c1dc76f59cb48720f7cca78e09562e0
MD5 5f073465e5860de27a4480862fa44d76
SHA1 097d0a80c75440113facc614cf5db895b24e85c7
SHA512 244badecf488fcb041c00ffe523f0d85d5f974ef832935aead5723318fa3398b8ad5f26d520bab6352e7a5ac8b7e2826d389c19ffb650b643c487bb4315724de
SSDEEP 384:y9ZzJ4Mn+MO4Mn+MkJBUGNDZ88gcBxlSDZ844DZ8pzBbBeNGOfyZq7:yqyJJBUY6806p6tBbBCyK
TLSH
T132649E34688F92B97AE466C7717387D5B73285B520915CBEB4A8B14CAEC3C63B433D42
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/resources.assets

SHA256 e452ef48fa51f1220c77776e088212fb12cd71a8230b94386708b714efea5119
MD5 9976fc6dea92b303eb54c86cfcd420c7
SHA1 c1ed056d089a4bd10921a3d469eb0983c4c410ad
SHA512 55168ae2a25c14fe26c250df19a7b23f744719a78c5fda7aff6ff5fe743a6ea4698075f4670cfbbe61c653e498543985bbb560a35098e2d30959dd868f32a05b
SSDEEP 98304:WbU0oPkCVWPpzjYLR2jmMTJ4BXiB/9g2CETrbU0oWEy5sg33AImgnJik7SRSa9zT:msVqOH5S1uJWgO6PFsmCLIz5vIXk
TLSH
T12BD6A473A78A9B61F430EAB052DFAAA0DE23ECB5471502C27975A25C9C733457CB32C5
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/resources.assets.resS

SHA256 fc914dd570b1605294ddd51c6d06cffb58649253902a3e30463715f56399f4de
MD5 3350704014c2ff237228111c0110c2f3
SHA1 06d5ab622eececa7c64f9c79b6816e07100d2d81
SHA512 21ae9f12b256b4fa24c2fa1aaa4a76f86dd1333649ec57810c783c3cff6168f5d74efadfc1728f3c2ccc3299118e2a66158decbf3a5116610ead79f5c8610526
SSDEEP 3145728:UL/npySX4gZjQe2infaeAtIo0wuTfb50h:InpvXTqmdAtH8fb5w
TLSH
T1E378BA06D90CC13CE4A08EB481D6FFB9D909BE94EE3E46C33AD9735A263718D66172C5
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/resources.resource

SHA256 4c0357215fa8181bdb19a3b2becc4b3c779639a74bb87d01131f690a725fcca7
MD5 f5882143cbdc9727e033de0c6eee57f8
SHA1 034346286091b004ccb8af838234c584c3882129
SHA512 6c515c0a9a629ce03ff6f864c429a9cc60061c97a7a68a2e64ca6b290b67f027ac952d4f7e3e5c1f4f08bb16ca58fdba75b333185f3c2e9bd54a62847246863d
SSDEEP 24576:GeD39F1NAKxQm4qKwlwT7Lk4GSFywAkr9R:HT9bNAsZK+wT7wqFyG9R
TLSH
T1992523805AA7C1D3F434BDBB6CDAA026391EB1799F764E3848B27324D9A72C0345B94D
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets0.assets

SHA256 1601fe2b71ce8085f3dd55f546c7b076dc11433564716400757c26e6da4ccd67
MD5 197b457682ba915798731ad1e5ac06a9
SHA1 5c41eae54f0d50d470ef92924cb1037705b81d52
SHA512 dd77af202f890db7d1c67c7cbece012c930de22d1eec2debdf2a47885c1449d11259610da6f547416960775bb3298f9238257d55e234e2a83d7e79924895dd06
SSDEEP 6:uAlv/iLHwhonZPkCCOSQR7Wr/lMjONXWK:tHeZPkCVSQR6tMBK
TLSH
T130818C82730E8123C0F8013508780A8EB02286544BCB95119890A2299C92BE65960D9C
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets1.assets

SHA256 f34e29c6f78d4b93b2e5d5fd73c76a22f50290477b704868fe66c80400453726
MD5 1b592cd4f201a152d535d6f405555ccb
SHA1 b53d87973a191ffce7e2f9fe4564a74bb8e3c4e4
SHA512 cf861d75d279231f696791d7a54826a0bab428ef0741b18d148fcfc3a67620ed1995da47d3fbf24213c73465cebca5c1c4eea6799353ee1c74bad4e216ed507e
SSDEEP 1536:fk287xcSwWnFbJnFqySYySKySeySVyS54rPLDS5cUK4jiXjHaJjHaqjHadjHa0j4:M9DxF9F9YfuFzxBS326VE
TLSH
T14434712697A05F52C4A61E3B01D73F61D231CF8447D58B2743F8BA6FBCB11882A62F65
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets1.assets.resS

SHA256 c63cbba3515cb551a76623bdc6935d90f7e577d934317a548a39831dc26801c0
MD5 5c00110f353c45ff251478eb69d0ea1f
SHA1 57722918c5c43f473c2e205c75898861a63c6b94
SHA512 b93c6249667dad94f4e44645fb0d9f6bf066ba77e7bff5b85272e5575875ec05f7d302954eb0a75cddd748915aa9ddb001d950c682e2a3e6e1ff3be9335bb1ac
SSDEEP 786432:ruhpwQbfffffffffffffffffnkkkkkkkkkkkkkkF6:r+qQQ
TLSH
T1C1382FCA7606F683F5248C783EBBD784AB18993B4EDF04B3144569F930BED18A326547
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets1.resource

SHA256 db408cdb1826066c912f22e7b2227177702eda67bbe2864e151186f3e1e1649d
MD5 75de785487fb56c4ff84a83b7f995e54
SHA1 6e884f8cafa2bb8148c8945a49eab39e93e27a3c
SHA512 f592d3f4ead6d7797811b6013a2ababe0173b605364ff8a03630b3b2cd7cf69dbfbe5c921b6a28ea5934127b8910fd72a67d48752ab639f20bb266280e1e01ef
TLSH
T1B8F0419B7A806E2CF33C8075FD5E4E428F9A91621774282366F59901BA34390E1E7146
MD5 SHA1 SHA512 TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets2.assets

SHA256 f9e3a320c862d5d734d596be2ac73a3dc7fa8593accbf617daff7fe43d8370c0
MD5 1474c88180509bc134a079bf659232d7
SHA1 636792b3ae5a7a9c017b6eaef95b904bee1d983a
SHA512 f4747481c060d44ab07ebb59be7c7f386e9081300290d4be97957d937b566550b5352068e29df88b953b625b2bc911883f0095c77e756d11eb86c6930b9b6ada
SSDEEP 24576:dsDOTmxOe9WX5+hwwWyE1F8PskGdNM1cEC:Iimu5OwwWyE1DdNM1cEC
TLSH
T11216CC23A6899B34E470EAB115DF6EA4DF23DCB44B1443D26A34715CACB334A3D73296
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets2.assets.resS

SHA256 3ae15e3393649b357b5ec49c43965e9246bd094b1d837106e0bde1692e8779f6
MD5 b91a3c91000cda5498f2a74918d19e47
SHA1 ac9f1b8b19761e5d9021ebfe964ef1bc2fde2249
SHA512 04dd4e7e19864d600bad89138ec6575f28cdf3161e30afdc0018e4861052e0211c354be2eaa24b1c7be6643ff786118a0c4d6d4573a8b82b1b1549d19cfe6f93
SSDEEP 196608:NthDkl5LnUOB2q7d1EJF0Hsy36B4Ee4CVh5znTOdSuokmCrQlZ9YjRZrpG:lsgg7dGJ6N3lpnS+3C0lZ9cRZrpG
TLSH
T105B7840369ACC20DE06799FD95EF289EDC584538EBB28CE0166576ADC4733C0717B6E8
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets2.resource

SHA256 8296aec7f249d6adfeec445b82497f0b6966276373c8a65e109f985c5219188e
MD5 dc5da50a6cefb45245eaf19f83767d2d
SHA1 34461b9be66f7b3bc822c888bd6ca14ee78e5c04
SHA512 7228ecf1b4f654981f2c9fcee78856b69ab8ff4bf1fcf9f9424246d7ff6286738c0bc9a7050da095d53aa34640a589fc5b475a496d266808dca07573f496e7ad
SSDEEP 98304:R1FxNmOFxvyNXROLnhkI+dj0bA+koa6ZiA6unY+9ADCjHAzi:RNZxKNXkhfU+khEiA6M+Cjgz
TLSH
T163263310CF4786CADCEC49704EF61F666BFAE09B11255B1F153A316CAF923A97C0E528
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets3.assets

SHA256 147b11db6e4c1efb337b6ad49cc82392451760003c0e9e5b896bee330a2c249d
MD5 7aefaab06a450370c67fe36c53446b39
SHA1 444ed24b19e1604bb09167285a58e2e5769a9687
SHA512 cd7f6667c7aa4a10b6ca6c6e7158a41d48b46a1e309b34d79fd1d91d8c9885d300a486f7d294019fba994e42c585536e4c23784bca175ca8847f331243e3002c
SSDEEP 24:s4kZPvdBuJ/1SVqDOa8XOPrUWj43K62e/:HkZvdIn6a8Ye2e/
TLSH
T19CA128426E959887C490873001F7079272B2C29C4763E30B506CB1386E4ABC42EE5568
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets3.assets.resS

SHA256 52d8df36212b2e03de8e57e9bf4e4e6a93fba45baecef270f17cc394d37be255
MD5 dcacedeaab824e6db3f75bb2e290f6a3
SHA1 853042ace89db6c306a25e82e4c43a16e34181de
SHA512 d7d6bcac86172d1e9a77c59879688f713f2ac2b65c4646681602e652454b9539440330ae9f0567e9a3e61adcf27a71e675483077303adb77c3b5d0aa54d6eb63
SSDEEP 6:X00000000000000000000000000000000000000000000000000000000000000j:DoEuEpCHG/myy2ynjyy2j
TLSH
T17AB10131926AD157889937C0CC43B2F13D887ED5EC046A83879C7C1D783D60941BC4C5
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets4.assets

SHA256 bdf99cc886e26021126b3d295ea2161a2a7d2c2a693cab0fb39ed6c168f8a2af
MD5 a94a621e0bbb06b1533e333bf219c235
SHA1 ddbfe17595183f359cd76528f9dbb0678ebbc854
SHA512 d197c4d7b4c5b182521dc51b3c50a9088aef777a4de4fd6d914e239cb92c7fc1d9314ff08b485004a305eb789f127afcd704d57c51aaeaa3a48f4fc2d7444321
SSDEEP 24576:IJPha265e3u27RzHQ701fxoJDMDDlmIm/+MdjtsXREWQ:IJJ27KfxoSmXXNtsXREl
TLSH
T160465062A6915ED7C4A01B3784D73F30E335CE058A569727D3B4732EACF6A5C1E02EA4
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets4.assets.resS

SHA256 dccf2796637bc640218483200b49509b944db3dd2a1264e85d441adcd357d454
MD5 145742591cfc5e4923ae54fc54f1c040
SHA1 7e6fc60182138baa87e49d1428e4bb08d81fdb5d
SHA512 f877cbaa356be6b083b3e7843c6da775b71448993675ba647bb6642100cfc1bbfc784bbb30a0773d3caaca908141adaa92cebb6a7584ffc49527670430eb1f1f
SSDEEP 12582912:fVRSUIeja+8T6sImhdvZWfo3ltfgkoQ6berE:fVRFIeja+8T6sImhdvZWfo3ltfkQW
TLSH
T14139F55FD28DC228F8A5E7FC54DF7A9AD84856208F7288F754096ACDD5B3384607B2C2
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets4.resource

SHA256 9f739065dbbb0cf4afc82b6dca657ab1ba1432ae3b2e95f0caad4f980ba5c1a5
MD5 ea3322886be506a1b7f0e36949e30eed
SHA1 b64459410886e3e77034db05ceb36d0e00616fe1
SHA512 8cfdc041f4c12120e7f1d1c3685e371e78b3018b860ae219f13df6dc097f15a409faa0967146cd3b0317a775848927e1413045999ff0e3757579d4ae615996d8
SSDEEP 49152:NmdvLwoJGi+DnaACsTFQkbH/Yb5Ea8BUcmiOW:NAlf+DagZ7Y2BvOW
TLSH
T1A5A52322D04755D1E4BE8A318ED54B456379F12FBF40292F28889F34FEDB241ADA7B18
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets5.assets

SHA256 b78c1e078fbaad34f0aec1020cd35546bd8f5a7951a9d3549f7b5d1a273085fb
MD5 1cf39beb1c109c601dbe942f1d8f764b
SHA1 eaabdbc578333a5b1519720d96db014b38a85b8d
SHA512 6117bf97b5eaca7636708e030892e39b85f4c450b3bde1910b7f5205d416174622cff335b5530c5f949015ddbbfe3c7542b895347d3457077f98eb32bde3bcb0
SSDEEP 3072:hlIXdmw1EzOqV48qu5lyZdudIdWdzbs2aMM:LwmaqV48qu5lyZdudIdWdzo2ab
TLSH
T1334482A267911D86C8712B3790D33F60E321DE094A6AE73393B4772DBCF659D2D0AE44
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets5.assets.resS

SHA256 5d8eb88d361c2dc78621962efdecfeaa534e245166327e5e540c1206474bad14
MD5 d3acd65eb144c88591cc014bbd0f19e0
SHA1 64244786aa59151c211f2f81471b4fb6c8b28359
SHA512 d8fcf32c6cf661bf38ddac25d35e063e74807773464ff6cc3f3cba58923263a8274c8babf778b9fac532e5e72b1e273d66f75a1a3d3a35f2aed7647a6b29a6f9
SSDEEP 393216:CZdhx1E4Hnrttttttttttttttttttttttttttttttttttttttoo+plQBWs:CZd31/LttttttttttttttttttttttttH
TLSH
T1FF071C83D65AC70AE066DABCA6FBF5BDCD188D609B3788D505DA2D9B783378434631C0
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets5.resource

SHA256 6bb53bde0f3779ff2b7be279d0cc3ac99377109262b4c0592adf90f929581078
MD5 f937e2c2e5b7d4a20e5802d4e99247e4
SHA1 90e95a581c580438f1331ae5b3bece7a35df4e14
SHA512 d55559e1edbaab229e5dcf402cf48ff62e6accd3951b7f669cc8ab6471ce1d093ac26a7e26f30f19522d337e44fcdde594253903d166a3a1a9a3b1689645463e
SSDEEP 12288:Ao6doiG7TP/+6io0NHqnxz0elAQUWSg9nTCjMhoKn4HYmmgy3ivMZe:Ao6uicr/5iXgnxz0elA/SnTCwau44mmn
TLSH
T1A7E423AAA01687E1E714C9F9C7EC2582684671320FA67A71D7519F718FE03D429F2F0B
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets6.assets

SHA256 2687a8b48c7f83668b5a3cd098a636c75f56fbb4fc0c6e4fe8bfe8e4d1dcea2a
MD5 3f03ea13c65044273233b217d46c24c8
SHA1 9eff4b8b1643fcc7004e99d3a5c287e07fd3636d
SHA512 323d583b018cb2534a49a402a34b2b7d294d05c52487778bd38856aa392894bf96a5fea0c3d2041f283f106b0b7f5d157caa9c2b3127e51bc41ca2e816e24cc0
SSDEEP 3072:jRAjwJRSbgFoN+wqyaMgUunijZrR2RJLcWrRKP2cyr/5fb/:NFR0NMyaMgUun+ARJ4WrRK+v/
TLSH
T190B45362A6708F67C4601B3F50E72F64D331CE884B65972783B4B63E7CF27981E45AA4
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets6.assets.resS

SHA256 0b17302ffd2cc95dc976c9f038c9b89bbfbb039021c469a5509c8888f96c84bc
MD5 b33323dd5a56f767c8a17b230a495e67
SHA1 e24873320a6d6a2788d27e409f6e203a3cedc230
SHA512 d6dbbccef5b9c720867720c22ae2b00db90ef196b7f2c11359bb815f36d83c7c6a153e65341519487de64c4548b6272a373f799b53412b28aa1e03f56be75c00
SSDEEP 1572864:Gz2DzP4tk7GMC7oN1xzabtudtVJW/kgEThzcBrBq49yo1:rfy6M7CxzabtunT4kfNgBr/9yQ
TLSH
T142286F063545D419CB4269739FD3EE9CF48AFAA9DD36241B3DC43B8F81BBA442C93168
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets6.resource

SHA256 713addce6484e039899f45abfbc9cc9556b4259f103a8b3ea305d6ac1e8b9f27
MD5 6aa08b9260efe7927d1b4d0bcf712d13
SHA1 c84443cfb0fe49676c70b06af4b9cf5842d2be1b
SHA512 57dcd8ae0b7d4278cd257bf82522a01fc6cbefec571d3af921aff247bca65fa7acc0e0221073de9f519ccb22e95e9fdfd5069bb5b0fddbd0726a70441b0c11a5
SSDEEP 196608:ANcssINa2WAW2CybbTGc32zC8/thRniHPzTcnAN5/6DVYyjckSoWjrx+G0szhZ:ANsI7WV2CAQthRniLTcnuIPAVZ39Z
TLSH
T150A63315EE022ED7FB9803B069FF37846279A5F607D722EBC83364659DFA182554382C
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets7.assets

SHA256 b269139cbbc6ea149a2627787b0e5d2739d78cedc5d363c1b76a7c6a38bc3df7
MD5 e02d166f086d0fc537967dd27c210d9e
SHA1 7736a5229dbc79fcbdaab964362ea998a38382d0
SHA512 9285c9a40dfb4d35e0f2c086727ec04ae1e0f92496bb13fe4f397723ae94aed07290e958234aaa99693f508ae00e9418f21c694c833e8f146f196384f979ca60
SSDEEP 1536:nCBOv6hBqPcuJLKnLD5JD0qSAOpW11VAgJPxEnCoOr51tREXspoQCe5n0j7I2h7i:nC8vjwJRSGbz1OCltzCc30oOHXFc
TLSH
T17D54414ADA74DF66C8A41B3F44AB2F14E331CE889A599B3703B8753D3CF32981E45694
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets7.assets.resS

SHA256 9480b651c7836c134a131a7300cc1648568a579d1a450de84a03766a674a303f
MD5 5e1b102a294571794011c038ebb3d465
SHA1 a9bfdf2dcdc279dcfa256b34e7bc33a1f736cfb5
SHA512 e713b65df83b5cad0b325deb949c279074e15f61de618b77911cc1c42cea55c44f0c12ca01a8ff892b1be084958a20ae357010df6746a63e7b66d5450948581d
SSDEEP 98304:tGN0BxotavDV6m7GT9rrkPv/F7E3i4jwY9554xhVzSgXh:AQGINqhr4n6S4j92xhVe
TLSH
T157C7F0613E65FA6EE40694B0AC80C9DCD9AF3CBACC01401775D2BBEF54B3D699B68311
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets7.resource

SHA256 e4c899e484f5c96ad5055e14312a0d1a328efa6573333c0244bbf439675c6a53
MD5 1eee6c796c8dd1c8fa186ecf5b7b03a5
SHA1 bdd464f72d9466a9ff9dd550233e7d3fb491ca1a
SHA512 edc10c3a7b54bdc40ce9944dbf85478df34da0fb19da8cc591d9f3889c29b747cb2b5a2872dec6b954637c2f1ffde9ef4263b36797432a21ffb8f4edc405381b
SSDEEP 196608:cLRoNAlQRCGi6AdHe8b5NrtK3jJxkykgr8UAY0CWbjEXFsieqPoN:cdoZC8Ade2pEk1gYrRDmFRoN
TLSH
T114A633208C911643EFE64DB608FF79A857B959CE16C21B5FD87330ADAEEF5C12E22015
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets8.assets

SHA256 c26aa729dc37969a6079f3943f9e847fb7c38c99bf8805d988c38d51277355e8
MD5 aca79f87120d6ea1d43d4dc38de03728
SHA1 4c4b129ad54c3512f2ab5051486e4f5bbcb60fd7
SHA512 8f59428aec32cea99c21069a8e7de9bac25eb631ad43db8ff635ad4a3051f3344436b6be4d27894197bbfa1732877ed1347992917d5f634e5f6f84e5650c624b
SSDEEP 1536:bfo6hBqPcuJLKnLD5JD0qSAOpWVB+9IpBBYLcLaBHRf5ke:rojwJRS0+IpDuHRfue
TLSH
T144F3405ED9B0CF36C998023E887B1E687735CD88EE899B27571875383CB33541E8666C
MD5 SHA1 SHA512 SSDEEP TLSH

CUPHEADAIRSHIPDEMO/CUPHEADBETAAIRSHIPDEMO_Data/sharedassets8.assets.resS

SHA256 26fe121e034e18d0acb723831471b44af1f8def2c9e56fbc1eab95558cdbcb22
MD5 ae2f02bfb5f049288af30b13cd195df3
SHA1 1d699c9e23fbf6d06b0829998ca8bdf0e252e552
SHA512 4dfddbfb8fae69cf4a2d42ce18d7b9810ddaa2101832766aaab3afcf3110fcf1ad1af380b26f82f575c69db5a8e8b3ca1f2e44baf8334986068b6dda260e46ba
SSDEEP 196608:np6JJ0TIE7BStqQ7Wmk9vAv2eJvrgYV/Af9XtqZ:ngJ67BStqQ7WfJU2eFrgrxtA
TLSH
T19ED619BBA08EDC73E6906879E86489FA01402D4EDF6110A72FE47C5BF77F524468B607
MD5 SHA1 SHA512 SSDEEP TLSH

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer