waif_v4.5.4_[unknowncheats.me]_.zip
- SHA256 ec389764533c951abb21da3476a2f5cd1102398e7e6d833f62955890bc004c82
Overview
overview
7Static
static
3waif_v4.5....]_.zip
windows10-2004-x64
6waif_v4.5....]_.zip
windows11-ltsc_2024-x64
1waif_v4.5....XX.dll
windows10-2004-x64
1waif_v4.5....XX.dll
windows11-ltsc_2024-x64
1waif_v4.5....WU.dll
windows10-2004-x64
1waif_v4.5....WU.dll
windows11-ltsc_2024-x64
1waif_v4.5....up.txt
windows10-2004-x64
1waif_v4.5....up.txt
windows11-ltsc_2024-x64
1waif_v4.5....s.json
windows10-2004-x64
3waif_v4.5....s.json
windows11-ltsc_2024-x64
3waif_v4.5....re.dll
windows10-2004-x64
1waif_v4.5....re.dll
windows11-ltsc_2024-x64
1waif_v4.5....re.lib
windows10-2004-x64
3waif_v4.5....re.lib
windows11-ltsc_2024-x64
3waif_v4.5....indata
windows10-2004-x64
6waif_v4.5....indata
windows11-ltsc_2024-x64
6waif_v4.5....indata
windows10-2004-x64
6waif_v4.5....indata
windows11-ltsc_2024-x64
6waif_v4.5....me.txt
windows10-2004-x64
1waif_v4.5....me.txt
windows11-ltsc_2024-x64
1waif_v4.5....mm.dll
windows10-2004-x64
1waif_v4.5....mm.dll
windows11-ltsc_2024-x64
1waif_v4.5....mm.lib
windows10-2004-x64
3waif_v4.5....mm.lib
windows11-ltsc_2024-x64
3waif_v4.5....if.exe
windows10-2004-x64
1waif_v4.5....if.exe
windows11-ltsc_2024-x64
1waif_v4.5....if.otf
windows10-2004-x64
7waif_v4.5....if.otf
windows11-ltsc_2024-x64
3waif_v4.5....ly.bat
windows10-2004-x64
3waif_v4.5....ly.bat
windows11-ltsc_2024-x64
3waif_v4.5....a.json
windows10-2004-x64
3waif_v4.5....a.json
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
waif_v4.5.4_[unknowncheats.me]_.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
waif_v4.5.4_[unknowncheats.me]_.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
waif_v4.5.4/Release/FTD3XX.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
waif_v4.5.4/Release/FTD3XX.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
waif_v4.5.4/Release/FTD3XXWU.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral6
Sample
waif_v4.5.4/Release/FTD3XXWU.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral7
Sample
waif_v4.5.4/Release/discordoverlay_setup.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
300 seconds
Behavioral task
behavioral8
Sample
waif_v4.5.4/Release/discordoverlay_setup.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
300 seconds
Behavioral task
behavioral9
Sample
waif_v4.5.4/Release/grenades.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral10
Sample
waif_v4.5.4/Release/grenades.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
300 seconds
Behavioral task
behavioral11
Sample
waif_v4.5.4/Release/leechcore.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral12
Sample
waif_v4.5.4/Release/leechcore.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral13
Sample
waif_v4.5.4/Release/leechcore.lib
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
300 seconds
Behavioral task
behavioral14
Sample
waif_v4.5.4/Release/leechcore.lib
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
300 seconds
Behavioral task
behavioral15
Sample
waif_v4.5.4/Release/player models/player_ct.skindata
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
300 seconds
Behavioral task
behavioral16
Sample
waif_v4.5.4/Release/player models/player_ct.skindata
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
300 seconds
Behavioral task
behavioral17
Sample
waif_v4.5.4/Release/player models/player_t.skindata
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
300 seconds
Behavioral task
behavioral18
Sample
waif_v4.5.4/Release/player models/player_t.skindata
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
300 seconds
Behavioral task
behavioral19
Sample
waif_v4.5.4/Release/readme.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
300 seconds
Behavioral task
behavioral20
Sample
waif_v4.5.4/Release/readme.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
300 seconds
Behavioral task
behavioral21
Sample
waif_v4.5.4/Release/vmm.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral22
Sample
waif_v4.5.4/Release/vmm.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral23
Sample
waif_v4.5.4/Release/vmm.lib
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral24
Sample
waif_v4.5.4/Release/vmm.lib
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral25
Sample
waif_v4.5.4/Release/waif.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral26
Sample
waif_v4.5.4/Release/waif.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral27
Sample
waif_v4.5.4/Release/waif.otf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral28
Sample
waif_v4.5.4/Release/waif.otf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral29
Sample
waif_v4.5.4/Release/webradar-only.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
Behavioral task
behavioral30
Sample
waif_v4.5.4/Release/webradar-only.bat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
300 seconds
Behavioral task
behavioral31
Sample
waif_v4.5.4/Release/webradar/data/cs_agency/data.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral32
Sample
waif_v4.5.4/Release/webradar/data/cs_agency/data.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
General
- Target waif_v4.5.4_[unknowncheats.me]_.zip
- Size 6.5MB
- Sample260730-xt72zsec43
- SHA256 ec389764533c951abb21da3476a2f5cd1102398e7e6d833f62955890bc004c82
- MD5 b3025595e800df7438260c502e1990dc
- SHA1 2f7520d288fec0a7afb7056a763bc23ded76b24b
- SHA512 15b58ae3227a867c8c385a3d566450c591bdae6b384bc01c7054831ba8ccaeefe5dd138af29b3c0ec4381d0664482152d027ac4176aacd9196bf896842b1dccd
- SSDEEP 196608:XMOlJ0DHplpX4XiCD64XurDgiUdcREQTR8TWeHRyXSZ8sT:X30llpWFXurDFUdcSQTR8aOZxT
- TLSH T1B36633592A20FD27ED4E343FCB5B1907345B33A96324BDA85A745E03A85B23A1CD2F35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/waif_v4.5.4/Release/FTD3XXWU.dll unpack001/waif_v4.5.4/Release/waif.exe
File Explorer
-
waif_v4.5.4_[unknowncheats.me]_.zip.zip 6.5MB
-
waif_v4.5.4/Release/FTD3XX.dll.dll 501KB
-
waif_v4.5.4/Release/FTD3XXWU.dll.dll 503KB
-
waif_v4.5.4/Release/discordoverlay_setup.txt2KB
-
waif_v4.5.4/Release/grenades.json131KB
-
waif_v4.5.4/Release/leechcore.dll.dll 150KB
-
waif_v4.5.4/Release/leechcore.lib5KB
-
waif_v4.5.4/Release/player models/player_ct.skindata1.2MB
-
waif_v4.5.4/Release/player models/player_t.skindata708KB
-
waif_v4.5.4/Release/readme.txt1KB
-
waif_v4.5.4/Release/vmm.dll.dll 2.3MB
-
waif_v4.5.4/Release/vmm.lib30KB
-
waif_v4.5.4/Release/waif.exe.exe 3.2MB
-
waif_v4.5.4/Release/waif.otf42KB
-
waif_v4.5.4/Release/webradar-only.bat170B
-
waif_v4.5.4/Release/webradar/data/cs_agency/data.json59B
-
waif_v4.5.4/Release/webradar/data/cs_agency/radar.png.png 187KB
-
waif_v4.5.4/Release/webradar/data/cs_italy/data.json43B
-
waif_v4.5.4/Release/webradar/data/cs_italy/radar.png.png 104KB
-
waif_v4.5.4/Release/webradar/data/cs_office/data.json43B
-
waif_v4.5.4/Release/webradar/data/cs_office/radar.png.png 186KB
-
waif_v4.5.4/Release/webradar/data/de_ancient/data.json42B
-
waif_v4.5.4/Release/webradar/data/de_ancient/radar.png.png 88KB
-
waif_v4.5.4/Release/webradar/data/de_anubis/data.json45B
-
waif_v4.5.4/Release/webradar/data/de_anubis/radar.png.png 103KB
-
waif_v4.5.4/Release/webradar/data/de_dust2/data.json42B
-
waif_v4.5.4/Release/webradar/data/de_dust2/radar.png.png 155KB
-
waif_v4.5.4/Release/webradar/data/de_golden/data.json57B
-
waif_v4.5.4/Release/webradar/data/de_golden/radar.png.png 178KB
-
waif_v4.5.4/Release/webradar/data/de_grail/data.json57B
-
waif_v4.5.4/Release/webradar/data/de_grail/radar.png.png 442KB
-
waif_v4.5.4/Release/webradar/data/de_inferno/data.json43B
-
waif_v4.5.4/Release/webradar/data/de_inferno/radar.png.png 125KB
-
waif_v4.5.4/Release/webradar/data/de_mirage/data.json44B
-
waif_v4.5.4/Release/webradar/data/de_mirage/radar.png.png 137KB
-
waif_v4.5.4/Release/webradar/data/de_nuke/data.json41B
-
waif_v4.5.4/Release/webradar/data/de_nuke/radar.png.png 75KB
-
waif_v4.5.4/Release/webradar/data/de_overpass/data.json43B
-
waif_v4.5.4/Release/webradar/data/de_overpass/radar.png.png 196KB
-
waif_v4.5.4/Release/webradar/data/de_palacio/data.json58B
-
waif_v4.5.4/Release/webradar/data/de_palacio/radar.png.png 539KB
-
waif_v4.5.4/Release/webradar/data/de_thera/data.json58B
-
waif_v4.5.4/Release/webradar/data/de_thera/radar.png.png 203KB
-
waif_v4.5.4/Release/webradar/data/de_train/data.json48B
-
waif_v4.5.4/Release/webradar/data/de_train/radar.png.png 143KB
-
waif_v4.5.4/Release/webradar/data/de_vertigo/data.json60B
-
waif_v4.5.4/Release/webradar/data/de_vertigo/radar.png.png 75KB
-
waif_v4.5.4/Release/webradar/data/waif.otf42KB
waif_v4.5.4/Release/FTD3XX.dll
- IMPHASH 94eff8313f705d14c2421a2e17c00648
- SHA256 3c0fc158fd4aa604c526d58ed8274ae830d53e69e01210cc5b5fa54ec5a9b7c0
- MD5 f7a94af3b5f2f815866f97e8e0e393de
- SHA1 b9bcaad236c9ce5e938c7477e79e13e621c962af
- SHA512 7877f2a3d78a7a3cf72d117b4111a83f67f9e193c7c1f6daa29cd08e3d0833533aebc34c1e3cbdb17f0b243c963443790880e6ad9ced2a7c3171ef6f2fe6d1b8
- SSDEEP 6144:wOJfCxZ2hUellRG5MJV8SAzLk5MKOE3LwEDHYG4LWNE7W5oP8E:dC/2LzG4leI5MKf3LtrCWCig
- TLSH T1C4B48D1673A503B5E0B7D139CA568E85FAB2BC550720E74B03F496B62F237A0563F326
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:5c:ac:00:16:9d:ec:c9:e9:0e:e9:09:1c:00:26:82:3b:38:45:0e:51:ba:8d:3a:1f:80:20:11:47:fe:98:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
Chains
Jun 18, 2024
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=SC136640,CN=Future Technology Devices International Ltd,O=Future Technology Devices International Ltd,L=Glasgow,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
Serial Number
0d:33:e9:cf:fb:d8:97:32:48:3f:b9:94:35:b5:b7:8e
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 1, 2024 - Mar 27, 2027
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
18996
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Work\Project\D3xx\trunk\D3XX\d2xxdll\x64\Release\FTD3XX.pdb
setupapi
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
kernel32
ExitThread
WriteConsoleW
OutputDebugStringW
ReadConsoleW
ReadFile
SetFilePointerEx
CreateFileW
CloseHandle
GetLastError
DeviceIoControl
GetOverlappedResult
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
WaitForMultipleObjects
GetFileSizeEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
CreateThread
RtlUnwind
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
MultiByteToWideChar
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
FT_AbortPipe
FT_ClearNotificationCallback
FT_ClearStreamPipe
FT_Close
FT_ControlTransfer
FT_Create
FT_CreateDeviceInfoList
FT_CycleDevicePort
FT_EnableGPIO
FT_FlushPipe
FT_GetChipConfiguration
FT_GetConfigurationDescriptor
FT_GetDescriptor
FT_GetDeviceDescriptor
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetFirmwareVersion
FT_GetGPIO
FT_GetInterfaceDescriptor
FT_GetLibraryVersion
FT_GetOverlappedResult
FT_GetPipeInformation
FT_GetPipeTimeout
FT_GetStringDescriptor
FT_GetSuspendTimeout
FT_GetVIDPID
FT_InitializeOverlapped
FT_IsDevicePath
FT_ListDevices
FT_ReadGPIO
FT_ReadPipe
FT_ReadPipeEx
FT_ReleaseOverlapped
FT_ResetDevicePort
FT_SetChipConfiguration
FT_SetGPIO
FT_SetGPIOLevel
FT_SetGPIOPull
FT_SetNotificationCallback
FT_SetPipeTimeout
FT_SetStreamPipe
FT_SetSuspendTimeout
FT_WriteGPIO
FT_WritePipe
FT_WritePipeEx
Name
.text
Size
384KB
Virtual Size
384KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=136, id=261, version=30795,
count=10, id=260, version=30795,
count=35, id=261, version=32533,
count=14, id=260, version=32533,
count=9, id=259, version=32533,
count=5, id=257, version=30795,
count=108, id=1, productName=Unmarked objects,
count=2, id=261, version=32824,
count=1, id=256, version=32824,
count=1, id=255, version=32824,
count=1, id=151,
count=1, id=258, version=32824,
waif_v4.5.4/Release/FTD3XXWU.dll
- IMPHASH 80a1db259f019af2ece76ce002dd4aed
- SHA256 f0315b7f20ebdf1303082b63d6dd598ff7d98d3b738fc7444d000a4b64913666
- MD5 26da2c5e0a4b587e65be02dcdc35e895
- SHA1 2fdde9f5eb5dfc764fe0afb0b02d59593b9ea7c6
- SHA512 aa93434a2c1c9776ddcfc57827e3d15f698e57ffe4940f1ea9d273c22f311afeb2562087c09564615e43ce71da58d2b4204950bbe7408635ce04c6b703375d5d
- SSDEEP 6144:5FahD1cN6+ZnknBYWBlVyBBlAqd9GevQl3q921/+DaTFDbNG7O/:5QhDmN6aknZBqBBqe9GevQAa6aT1AS/
- TLSH T1AAB49E5673E503F5E0B3D239CA568E95F6B2B8550720E34B03E496B62F233A1467F326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
20500
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Work\Project\Apps\trunk\FT600_USB_Host_SW_D3XX\WU_FTD3XXLib\Lib\Dynamic\x64\FTD3XXWU.pdb
kernel32
HeapFree
CreateFileW
GetLastError
CloseHandle
HeapAlloc
GetProcessHeap
SetLastError
GetStdHandle
WaitForSingleObject
CreateEventW
Sleep
CreateThread
OutputDebugStringW
WriteConsoleW
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
WideCharToMultiByte
MultiByteToWideChar
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
RtlUnwind
api-ms-win-devices-config-l1-1-1
CM_MapCrToWin32Err
CM_Get_DevNode_PropertyW
CM_Get_Device_Interface_PropertyW
setupapi
CM_Locate_DevNodeW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW
winusb
WinUsb_WritePipe
WinUsb_SetPowerPolicy
WinUsb_SetPipePolicy
WinUsb_GetOverlappedResult
WinUsb_Free
WinUsb_ControlTransfer
WinUsb_Initialize
WinUsb_GetDescriptor
WinUsb_GetPowerPolicy
WinUsb_GetAssociatedInterface
WinUsb_ReadPipe
WinUsb_AbortPipe
WinUsb_GetPipePolicy
FT_AbortPipe
FT_ClearNotificationCallback
FT_ClearStreamPipe
FT_Close
FT_ControlTransfer
FT_Create
FT_CreateDeviceInfoList
FT_CycleDevicePort
FT_EnableGPIO
FT_FlushPipe
FT_GetChipConfiguration
FT_GetConfigurationDescriptor
FT_GetDescriptor
FT_GetDeviceDescriptor
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetFirmwareVersion
FT_GetInterfaceDescriptor
FT_GetLibraryVersion
FT_GetOverlappedResult
FT_GetPipeInformation
FT_GetPipeTimeout
FT_GetStringDescriptor
FT_GetSuspendTimeout
FT_GetVIDPID
FT_InitializeOverlapped
FT_IsDevicePath
FT_ListDevices
FT_ReadGPIO
FT_ReadPipe
FT_ReadPipeEx
FT_ReleaseOverlapped
FT_ResetDevicePort
FT_SetChipConfiguration
FT_SetDeviceFilter
FT_SetGPIOLevel
FT_SetGPIOPull
FT_SetNotificationCallback
FT_SetPipeTimeout
FT_SetStreamPipe
FT_SetSuspendTimeout
FT_WriteGPIO
FT_WritePipe
FT_WritePipeEx
Name
.text
Size
397KB
Virtual Size
396KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=33, id=261, version=32533,
count=15, id=260, version=32533,
count=9, id=259, version=32533,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=30795,
count=112, id=1, productName=Unmarked objects,
count=2, id=265, version=32824,
count=1, id=256, version=32824,
count=1, id=255, version=32824,
count=1, id=151,
count=1, id=258, version=32824,
waif_v4.5.4/Release/discordoverlay_setup.txt
- SHA256 c9261844bf83e64e1fde8a32541c3b9ed5ba00689b4cd19012dd3644a16fce2d
- MD5 7e22718967d2397eb38e9e729e9b3c4c
- SHA1 422ea6e11aa5c2b57335efc9552e8482d014b6b6
- SHA512 066232eaf3a9bf179fe1ee67b80b60debb3916cdbb296ec461172cf346c5548a0ddd7382e8473d798e1052e4caf89604f6af7103d4925902252555d65e2a9ed7
- TLSH T1F551986F6237597369E622B9F70FB676E7001888821F2172721DA2AD3008316C63ED4F
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/grenades.json
- SHA256 ed700774421f5c5c4ebd5b9655bbd1061a1eb046e1f83d0d1a4fea73a89447cd
- MD5 80bacf4beb3cfa56b1538df8bf426c47
- SHA1 0172cfaab3ad68ac3770bc46319b9524c2be62bc
- SHA512 0be7432342f6c9397aa8cd78520d2975dda496645bd55787c4bef402eddc5285b189c229cf10a6d1b01642f8654b5af8fc026a91c3910d42dc70b340d9a7fd6f
- SSDEEP 768:JRqYEhWcuQ99TWQbcmLNDZBkbr+3cag6dyG/ujTmOSO5BEU4IpPLmyHMavX7d8pm:JRoucJ3/g6d0jCKl1X+63KFKrF1
- TLSH T19FD3F5B6C46C4C27262D04B618EE2B0637A817DB5CD87C097384495D5F8F98FB9FA60E
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/leechcore.dll
- IMPHASH d21a9e8cc4c45a2d0dd2fedf01166d30
- SHA256 ddc54f880fecca1bc0e04542c9612365f9f741cdaf87b6ff34baef714cd29735
- MD5 54f2055fd24c2cd98290400500a06db3
- SHA1 24a6d0ff5b34829ceaaba9e672c3d6b5785ede2d
- SHA512 8a1f60ac90c637cefbea7737d310fe664adad8e24076f358ca6b22ace4622ac90465b8e0edf056271eab21d16a9b653f5cce14593dd1e54fe48a04dd69ff06cc
- SSDEEP 3072:1H/5SnDL3rfvPF5BJ/tKTcrSzPJJ0XZMkLxgOVEKipesSkE:Z/YDXH3/qcr4JiXZMkLxgOVE6R
- TLSH T145E33A4BB79424BEC967C138C956D62BFAB3B41813106BEF0260C6B52F637A17A3D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
66:36:6e:c9:70:ee:e6:29:27:24:01:a5:47:4f:27:bc:e2:0e:7f:02:cf:da:98:b4:e1:31:95:71:c0:83:bb:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
Chains
Jan 28, 2026
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
Serial Number
03:05:5a:50:76:3b:06:c8:e6:f1:69:ac:51:6e:3a:8a
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Oct 15, 2026
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
105744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Github\production\LeechCore\files\lib\leechcore.pdb
credui
CredUIPromptForWindowsCredentialsW
CredUnPackAuthenticationBufferW
rpcrt4
NdrClientCall3
RpcBindingSetAuthInfoExA
RpcBindingFree
RpcStringFreeA
RpcBindingSetAuthInfoExW
RpcStringBindingComposeA
RpcBindingFromStringBindingA
secur32
LsaDeregisterLogonProcess
LsaLookupAuthenticationPackage
LsaConnectUntrusted
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
winusb
WinUsb_WritePipe
WinUsb_Free
WinUsb_SetPipePolicy
WinUsb_ReadPipe
WinUsb_Initialize
ws2_32
setsockopt
WSAGetLastError
htons
recvfrom
connect
socket
send
inet_addr
WSAStartup
closesocket
ioctlsocket
kernel32
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
LoadLibraryW
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeSRWLock
LocalAlloc
LocalFree
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
Sleep
GetTickCount64
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
LoadLibraryA
CloseHandle
CreateThread
SwitchToThread
GetProcAddress
FreeLibrary
ReadFile
DeviceIoControl
GetLastError
CreateFileA
SetFilePointerEx
VirtualFree
VirtualAlloc
CreateFileW
VerSetConditionMask
VerifyVersionInfoW
WriteProcessMemory
GetCurrentProcess
K32GetModuleFileNameExW
OpenProcess
K32EnumProcesses
ReadProcessMemory
K32GetMappedFileNameW
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
CreateEventW
SetEvent
QueryPerformanceFrequency
ResetEvent
QueryPerformanceCounter
IsProcessorFeaturePresent
advapi32
OpenServiceA
ControlService
DeleteService
OpenSCManagerA
OpenSCManagerW
CloseServiceHandle
CreateServiceA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
StartServiceA
ole32
CoTaskMemFree
vcruntime140
memset
__C_specific_handler
memcpy
strstr
__std_type_info_destroy_list
memcmp
wcsstr
api-ms-win-crt-string-l1-1-0
strncpy_s
wcsncpy_s
strtok_s
wcsncat_s
_wcsicmp
wcscpy_s
strcat_s
strncat_s
_stricmp
_strnicmp
strcmp
strcpy_s
api-ms-win-crt-stdio-l1-1-0
_wfopen_s
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s
fread
fclose
__stdio_common_vfprintf
fwrite
__acrt_iob_func
getchar
__stdio_common_vsnprintf_s
_fseeki64
__stdio_common_vsprintf
_ftelli64
api-ms-win-crt-convert-l1-1-0
atoi
strtoull
_itoa_s
strtol
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_initterm
_cexit
_execute_onexit_table
_initialize_narrow_environment
_initterm_e
LcAllocScatter1
LcAllocScatter2
LcAllocScatter3
LcClose
LcCommand
LcCreate
LcCreateEx
LcDeviceParameterGet
LcDeviceParameterGetNumeric
LcGetOption
LcMemFree
LcMemMap_AddRange
LcMemMap_GetMaxAddress
LcMemMap_IsInitialized
LcRead
LcReadScatter
LcSetOption
LcWrite
LcWriteScatter
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=19, id=257, version=33145,
count=168, id=1, productName=Unmarked objects,
count=20, id=264, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=151,
count=1, id=258, version=35222,
waif_v4.5.4/Release/leechcore.lib
- SHA256 21fbc53b326028cff6f990347428dae0593c56e2b4db9d98b49cc371d37d1c92
- MD5 22fdd9e621964f58df975eff6e122d46
- SHA1 cc2644c987f542ecec91936b2884dc05abcd9e39
- SHA512 d7e99be0c9acc69deb372c668e1465da77c97de8c2c8b8379e89990969fc4ff100d452127a6d43d34ae3eb94446d3d1c50a0e7cd058d145e16846cc08787703e
- SSDEEP 96:IkZGC3kIAxoVm+iLSwKeKEKLQ5ZoWJ6WfAL:Im3ZAEQ5ZLc
- TLSH T1A0B1A037F55A5F1FF2DE20B4822190FCE52C54143602546B7C8C78CBEBAF62E960A54B
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/player models/player_ct.skindata
- SHA256 b39e6080e8acf9a406f181c5e3495d1c335feaef5629a771dd948db86de7eae0
- MD5 13cff49c9d0b5798db64cb47a7bf2175
- SHA1 6472256d88c66f0d499b80b0233bc8a8a0197355
- SHA512 9c4bf04b8fd1c25881046a07fd915c987ff45ee4f7c997ed565d0b8c399c059e102e30a5197103480b5b645f617460bf68132684281741cb5a0ab40531a7b4ee
- SSDEEP 24576:/OgMHi/14zOgMHi/14zOgMHi/14inXZhJ0HEqCWDkXjwRlvvx7lm:/OgMHi/14zOgMHi/14zOgMHi/14iXZh8
- TLSH T1EA455965DC27467CD4B52932006B5F19E6B8E1AE91B418371331FAAC3CE071F49EAE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/player models/player_t.skindata
- SHA256 c3bf851d34f9f658eafa66448af4602d874fc88f836cbda94189e973532efe2f
- MD5 6c179150b792565ed9ea924e775e5950
- SHA1 3b5440fa0c7fca005b385d2d267f546d6dc2d5c7
- SHA512 857bfab876352fcf1f67d2c8b51ac1314ee16018297114cda11a0d10100a78f77562cc3c8df8d97b9649713f342aca9fe2d67b96876492dc3c266b9752bb2bb9
- SSDEEP 12288:PxggxL8zLC1Gyb9L+QjOxUsO2ZFCkCX30o9Y/oSsNz3cu:pgSL8z/yd+QjmUKCkCXk/oSsNz3c
- TLSH T178F43957B8539B3DC1BD02B180FF0E6A993E8945891229B3A33995583EE371B75C37C8
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/readme.txt
- SHA256 d26375dadf57085fde8ec501c09e1245136aad4c882259ea0066d7c799c1f2d8
- MD5 3b224d697f47dae31a5e5799ed0d064e
- SHA1 0d0f21186058c702836fa328d03ccec498a9689d
- SHA512 c53af8462b187548400f633185d85d244454bf426204c9803a6f5fa7a8148910fdd63deea76f853d980c1edf82d1683e44e0a9f950e5e1b18445b7751830b79d
- TLSH T17241C842E5FA31A78DBE4B59338650A3BF1DC140471D952EBCBC634CE4140AC4612ADE
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/vmm.dll
- IMPHASH 159e4c251eed54e507068d7a0f7fa807
- SHA256 4183df81c914f9b3719fd276c3c7e1642da55d16de8f0bf5e8eb88c6f4cec68c
- MD5 40bea58281462aedc8c25214ce6782ad
- SHA1 8e02fe8a0047494b916c3d7f8a67cbf85e2080e7
- SHA512 bf2d752207ec72a20a5eebd64115c454fc8b7408fd395b516d4b37bc1b7c341dcc98dd46cff1cde6f0b104e3fdb21a82737807221050bf6dcfe10aa421b8cae9
- SSDEEP 49152:yza+8D+y1c00gbGrY5iNLBASV/IZVyTSx1cuUqfOvwPaPdn2j4KtKPraV0Rx6:n1c00gbGc5yuS+ZTuu7fA2R0z6
- TLSH T1B8B58E47B7A800B9C06BC139C91B5F07E6B174052364AADF76ACC9A52F63FE2127E315
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d2:49:22:1a:5f:4d:01:0a:15:c2:47:6d:bb:2e:92:00:88:9a:44:72:7e:d4:23:5c:f6:34:ce:20:ca:86:6d:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
Chains
Feb 7, 2026
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Ulf Frisk,O=Open Source Developer,L=Stockholm,ST=Stockholm,C=SE
Serial Number
03:05:5a:50:76:3b:06:c8:e6:f1:69:ac:51:6e:3a:8a
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Oct 15, 2026
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
1808292
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Github\production\MemProcFS\files\lib\vmm.pdb
leechcore
LcRead
LcCreateEx
LcClose
LcSetOption
LcReadScatter
LcAllocScatter1
LcWriteScatter
LcGetOption
LcCommand
LcAllocScatter2
LcMemFree
bcrypt
BCryptCreateHash
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
crypt32
CertCreateCertificateContext
CertFreeCertificateContext
CertGetNameStringW
shlwapi
StrStrIA
ws2_32
inet_ntop
kernel32
UnhandledExceptionFilter
RtlCaptureContext
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RtlLookupFunctionEntry
RtlVirtualUnwind
IsProcessorFeaturePresent
GetCurrentProcess
LoadResource
ResetEvent
FindClose
LocalAlloc
LocalFree
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
GetLongPathNameW
WaitForMultipleObjects
CreateEventW
GetTickCount64
SetEvent
GetLocalTime
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeSRWLock
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryExW
QueryPerformanceFrequency
GetModuleFileNameA
SizeofResource
GetModuleHandleExW
GetModuleFileNameW
FileTimeToSystemTime
LockResource
LoadLibraryExA
FindResourceW
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
InterlockedPushEntrySList
InitializeSListHead
InterlockedPopEntrySList
QueryDepthSList
GetStdHandle
ReadConsoleA
SwitchToThread
CreateThread
FindFirstFileW
FindNextFileW
advapi32
LookupAccountSidA
RegDeleteValueA
IsValidSid
ConvertStringSidToSidA
RegCreateKeyA
RegCloseKey
RegGetValueA
RegSetValueExA
RegOpenKeyExA
ConvertSidToStringSidA
vcruntime140
strrchr
strchr
__C_specific_handler
memset
memchr
memcmp
memcpy
memmove
strstr
__std_type_info_destroy_list
api-ms-win-crt-string-l1-1-0
wcscat_s
toupper
_wcsnicmp
strncmp
strcspn
strcmp
strtok_s
strcat_s
strnlen
strcpy_s
_stricmp
strncpy_s
strncat_s
strspn
wcsnlen
_strnicmp
api-ms-win-crt-heap-l1-1-0
malloc
realloc
_msize
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_beginthreadex
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
exit
_endthreadex
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-stdio-l1-1-0
tmpnam_s
__stdio_common_vsprintf_s
fwrite
__stdio_common_vsnprintf_s
__acrt_iob_func
__stdio_common_vfprintf
_wfopen_s
__stdio_common_vsprintf
fclose
fread
__stdio_common_vsnwprintf_s
__stdio_common_vsscanf
_fseeki64
fflush
_fsopen
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
strtoull
strtoul
api-ms-win-crt-filesystem-l1-1-0
_access_s
remove
api-ms-win-crt-math-l1-1-0
log10
floor
log2
VMMDLL_Close
VMMDLL_CloseAll
VMMDLL_ConfigGet
VMMDLL_ConfigSet
VMMDLL_ForensicFileAppend
VMMDLL_Initialize
VMMDLL_InitializeEx
VMMDLL_InitializePlugins
VMMDLL_LicensedTo
VMMDLL_Log
VMMDLL_LogCallback
VMMDLL_LogEx
VMMDLL_Map_GetEATU
VMMDLL_Map_GetEATW
VMMDLL_Map_GetHandleU
VMMDLL_Map_GetHandleW
VMMDLL_Map_GetHeap
VMMDLL_Map_GetHeapAlloc
VMMDLL_Map_GetIATU
VMMDLL_Map_GetIATW
VMMDLL_Map_GetKDeviceU
VMMDLL_Map_GetKDeviceW
VMMDLL_Map_GetKDriverU
VMMDLL_Map_GetKDriverW
VMMDLL_Map_GetKObjectU
VMMDLL_Map_GetKObjectW
VMMDLL_Map_GetModuleFromNameU
VMMDLL_Map_GetModuleFromNameW
VMMDLL_Map_GetModuleU
VMMDLL_Map_GetModuleW
VMMDLL_Map_GetNetU
VMMDLL_Map_GetNetW
VMMDLL_Map_GetPfn
VMMDLL_Map_GetPfnEx
VMMDLL_Map_GetPhysMem
VMMDLL_Map_GetPool
VMMDLL_Map_GetPteU
VMMDLL_Map_GetPteW
VMMDLL_Map_GetServicesU
VMMDLL_Map_GetServicesW
VMMDLL_Map_GetThread
VMMDLL_Map_GetThread_CallstackU
VMMDLL_Map_GetThread_CallstackW
VMMDLL_Map_GetUnloadedModuleU
VMMDLL_Map_GetUnloadedModuleW
VMMDLL_Map_GetUsersU
VMMDLL_Map_GetUsersW
VMMDLL_Map_GetVMU
VMMDLL_Map_GetVMW
VMMDLL_Map_GetVadEx
VMMDLL_Map_GetVadU
VMMDLL_Map_GetVadW
VMMDLL_MemCallback
VMMDLL_MemFree
VMMDLL_MemPrefetchPages
VMMDLL_MemRead
VMMDLL_MemReadEx
VMMDLL_MemReadPage
VMMDLL_MemReadScatter
VMMDLL_MemSearch
VMMDLL_MemSize
VMMDLL_MemVirt2Phys
VMMDLL_MemWrite
VMMDLL_MemWriteScatter
VMMDLL_PdbLoad
VMMDLL_PdbSymbolAddress
VMMDLL_PdbSymbolName
VMMDLL_PdbTypeChildOffset
VMMDLL_PdbTypeSize
VMMDLL_PidGetFromName
VMMDLL_PidList
VMMDLL_ProcessGetDirectoriesU
VMMDLL_ProcessGetDirectoriesW
VMMDLL_ProcessGetInformation
VMMDLL_ProcessGetInformationAll
VMMDLL_ProcessGetInformationString
VMMDLL_ProcessGetModuleBaseU
VMMDLL_ProcessGetModuleBaseW
VMMDLL_ProcessGetProcAddressU
VMMDLL_ProcessGetProcAddressW
VMMDLL_ProcessGetSectionsU
VMMDLL_ProcessGetSectionsW
VMMDLL_Scatter_Clear
VMMDLL_Scatter_CloseHandle
VMMDLL_Scatter_Execute
VMMDLL_Scatter_ExecuteRead
VMMDLL_Scatter_Initialize
VMMDLL_Scatter_Prepare
VMMDLL_Scatter_PrepareEx
VMMDLL_Scatter_PrepareWrite
VMMDLL_Scatter_PrepareWriteEx
VMMDLL_Scatter_Read
VMMDLL_UtilFillHexAscii
VMMDLL_UtilVfsReadFile_FromBOOL
VMMDLL_UtilVfsReadFile_FromDWORD
VMMDLL_UtilVfsReadFile_FromPBYTE
VMMDLL_UtilVfsReadFile_FromQWORD
VMMDLL_UtilVfsWriteFile_BOOL
VMMDLL_UtilVfsWriteFile_DWORD
VMMDLL_VfsListBlobU
VMMDLL_VfsListU
VMMDLL_VfsListW
VMMDLL_VfsList_AddDirectory
VMMDLL_VfsList_AddDirectoryW
VMMDLL_VfsList_AddFile
VMMDLL_VfsList_AddFileW
VMMDLL_VfsReadU
VMMDLL_VfsReadW
VMMDLL_VfsWriteU
VMMDLL_VfsWriteW
VMMDLL_VmGetVmmHandle
VMMDLL_VmMemRead
VMMDLL_VmMemReadScatter
VMMDLL_VmMemTranslateGPA
VMMDLL_VmMemWrite
VMMDLL_VmMemWriteScatter
VMMDLL_VmScatterInitialize
VMMDLL_WinGetThunkInfoIATU
VMMDLL_WinGetThunkInfoIATW
VMMDLL_WinReg_EnumKeyExU
VMMDLL_WinReg_EnumKeyExW
VMMDLL_WinReg_EnumValueU
VMMDLL_WinReg_EnumValueW
VMMDLL_WinReg_HiveList
VMMDLL_WinReg_HiveReadEx
VMMDLL_WinReg_HiveWrite
VMMDLL_WinReg_QueryValueExU
VMMDLL_WinReg_QueryValueExW
VMMDLL_YaraSearch
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
338KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=12, id=257, version=33145,
count=3, id=257, version=35222,
count=224, id=1, productName=Unmarked objects,
count=115, id=264, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=151,
count=1, id=258, version=35222,
waif_v4.5.4/Release/vmm.lib
- SHA256 6336540a4e94f4f4ca568feca633dff5a5c5e83dcae27057f4246689e12a2d08
- MD5 c17d6460be56a5cdfe3d80967ed17b6c
- SHA1 07470b9a85a11df604abd62c087bdf1c651de589
- SHA512 a6c779f05cbaa31370f2d2a51e71cd168f702ea46485a45262ae2d47c81f3d433d772d1e3f3604529e6475476ecfadb3955165e3bc4a6c4dcda14ea81bde35d4
- SSDEEP 192:1cJnExsJLglCMlj1oJI9Y3Ib+p3+WtyfhpwEWBWZ39EIAgv9Korvio7XLCijptM5:KJHJQCMvu+MyfRIcio7XLCije7QC0Q
- TLSH T196E2362C48785C4AE27D93BE8B6298F8EE984703014A65B7379D5CD1CF3A51F2B47E02
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/waif.exe
- IMPHASH f6d133df36031334b7d1d9ee0f9b9425
- SHA256 034fefe03fd217d42bdf22e51b5b80cfa0b970d5895ed075f440398c6b5b3cb2
- MD5 895676f2495baf00704ac7201fd2b7e4
- SHA1 7196b347d601f4b666133cec638a5029484c0514
- SHA512 d2dc9dfa4459aa327dee2f16ba01e6279e898b51c2aba64bfd8ae729130f3bc2bc211bde0c3e962cef7398d9719ca0a29867dab122e8996b18e0ece099b2accc
- SSDEEP 49152:B9jPNkbVpWS5mgs+6u5a16pDxBhZM0vYZFMn/RuUDg:nCmCMz
- TLSH T1CDF5E70BDAB751E0C6BAD038B552722BF9703499C33897E7ABD15B061BA17E0E57E700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2490500
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\zapre\Documents\DMA Projects\whatamifacing\2903\waif v4.4.8 src\waif v4.4.8 src\map test\dma-cheat-base-main\Out\Release\waif.pdb
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
vmm
VMMDLL_Scatter_Clear
VMMDLL_ConfigGet
VMMDLL_ProcessGetInformationAll
VMMDLL_Map_GetModuleU
VMMDLL_ProcessGetModuleBaseU
VMMDLL_ProcessGetInformation
VMMDLL_InitializePlugins
VMMDLL_Map_GetEATU
VMMDLL_Map_GetModuleFromNameW
VMMDLL_PdbLoad
VMMDLL_PdbSymbolAddress
VMMDLL_Close
VMMDLL_Initialize
VMMDLL_Map_GetPhysMem
VMMDLL_MemFree
VMMDLL_VfsReadW
VMMDLL_VfsListU
VMMDLL_Map_GetModuleFromNameU
VMMDLL_Scatter_Initialize
VMMDLL_Scatter_PrepareEx
VMMDLL_Scatter_PrepareWrite
VMMDLL_ConfigSet
VMMDLL_PidGetFromName
VMMDLL_MemReadEx
VMMDLL_Scatter_ExecuteRead
VMMDLL_WinReg_QueryValueExU
VMMDLL_ProcessGetSectionsU
VMMDLL_Scatter_Execute
VMMDLL_Scatter_CloseHandle
VMMDLL_MemWrite
leechcore
LcCommand
LcClose
LcCreate
kernel32
AreFileApisANSI
CreateFile2
GetTempPathW
SetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileExW
FindFirstFileW
CreateDirectoryW
GetLocaleInfoEx
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetLocaleInfoA
GetStdHandle
WriteFile
GetCurrentProcessId
GetCurrentThreadId
GetConsoleMode
WriteConsoleA
GetFileInformationByHandleEx
SetConsoleTextAttribute
GetConsoleWindow
GetCommandLineA
CreateDirectoryA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
ReadFile
CloseHandle
SetHandleInformation
AddVectoredExceptionHandler
CreatePipe
PeekNamedPipe
WaitForSingleObject
Sleep
GetCurrentProcess
ExitProcess
TerminateProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
SetPriorityClass
GlobalMemoryStatusEx
VirtualQuery
GetModuleFileNameA
GetModuleHandleW
GetCommState
PurgeComm
SetCommState
SetCommTimeouts
SetConsoleMode
SetConsoleCtrlHandler
SetConsoleTitleA
GetLastError
LocalAlloc
FormatMessageA
LocalFree
SleepConditionVariableSRW
ReleaseSRWLockExclusive
GetConsoleScreenBufferInfo
GetTickCount64
WakeAllConditionVariable
AcquireSRWLockExclusive
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetDynamicTimeZoneInformation
InitializeSListHead
user32
RegisterRawInputDevices
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetClassNameA
EnumWindows
FindWindowA
IsWindowVisible
IsWindow
GetRawInputData
SetWindowLongPtrW
FillRect
GetWindowRect
EndPaint
BeginPaint
SetForegroundWindow
UpdateWindow
GetAsyncKeyState
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
SetClipboardData
RegisterClassExW
UnregisterClassW
PostQuitMessage
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetSystemMetrics
SetProcessDPIAware
MonitorFromWindow
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseDC
GetDC
GetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
CreateWindowExW
GetKeyState
GetMessageExtraInfo
TrackMouseEvent
GetKeyboardLayout
EmptyClipboard
GetClipboardData
CloseClipboard
OpenClipboard
gdi32
DeleteObject
GetStockObject
GetDeviceCaps
CreateRectRgn
advapi32
RegEnumValueA
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteA
msvcp140
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?eof@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
_Thrd_hardware_concurrency
_Thrd_yield
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?_Xinvalid_argument@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_lock
_Mtx_unlock
_Cnd_signal
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcat@facet@locale@std@@SA_KPEAPEBV123@PEBV23@@Z
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_function_call@std@@YAXXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$numpunct@D@std@@2V0locale@2@A
?uncaught_exceptions@std@@YAHXZ
_Query_perf_counter
_Query_perf_frequency
?_Winerror_map@std@@YAHH@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?rdstate@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
dwmapi
DwmEnableBlurBehindWindow
DwmGetColorizationColor
DwmExtendFrameIntoClientArea
DwmIsCompositionEnabled
ws2_32
setsockopt
closesocket
htons
inet_addr
freeaddrinfo
inet_ntop
recvfrom
sendto
socket
accept
getaddrinfo
send
WSAStartup
select
recv
WSACleanup
listen
gethostname
__WSAFDIsSet
WSAGetLastError
bind
api-ms-win-shcore-scaling-l1-1-1
SetProcessDpiAwareness
winmm
timeBeginPeriod
timeEndPeriod
bcrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
crypt32
CryptBinaryToStringA
vcruntime140
strrchr
_purecall
strchr
strstr
memcmp
memchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
__current_exception_context
__std_terminate
__current_exception
__C_specific_handler
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
strcpy
strncmp
toupper
wcslen
isdigit
strncpy_s
strcspn
strnlen
strncpy
strcmp
strlen
strcpy_s
tolower
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_wfopen
fclose
_ftelli64
ungetc
setvbuf
_fseeki64
fsetpos
fputc
fopen
fgetpos
_set_fmode
fgetc
_get_stream_buffer_pointers
fflush
fseek
ftell
__p__commode
fread
fwrite
__stdio_common_vfprintf
__stdio_common_vsscanf
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
calloc
api-ms-win-crt-utility-l1-1-0
srand
abs
rand
qsort
api-ms-win-crt-math-l1-1-0
powf
logf
_dsign
_dtest
sqrt
atan2f
pow
_ldtest
fabs
cosf
fmodf
roundf
_hypotf
fminf
fmaxf
__setusermatherr
sqrtf
ceilf
acosf
log
_fdsign
sinf
floorf
_fdtest
_ldsign
api-ms-win-crt-convert-l1-1-0
strtof
atoi
atoll
strtod
strtol
strtoul
strtoull
atof
strtoll
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
_set_app_type
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_c_exit
_beginthreadex
system
_seh_filter_exe
_cexit
_crt_atexit
_register_thread_local_exe_atexit_callback
_errno
abort
terminate
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
api-ms-win-crt-time-l1-1-0
_localtime64_s
_time64
_gmtime64_s
_ctime64_s
strftime
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
_configthreadlocale
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
667KB
Virtual Size
666KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
42KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=10, id=260, version=35403,
count=41, id=261, version=35403,
count=6, id=257, version=35403,
count=4, id=257, version=35222,
count=5, id=265, version=35728,
count=27, id=257, version=33145,
count=503, id=1, productName=Unmarked objects,
count=18, id=261, version=35728,
count=1, id=255, version=35728,
count=1, id=151,
count=1, id=258, version=35728,
waif_v4.5.4/Release/waif.otf
- SHA256 cf81efa5626f4756b6e35dc09608029f8693078997a2e640e7251c8949bf2295
- MD5 6a94fa8447b1b4d150eafaad46fe9254
- SHA1 e4033ed3777811306d18c934257a82e78083d4e5
- SHA512 943d1916785f147b20077dd9f53505bbe86662c39526770db48f9f260410f569b7ec275a8f91293f05a72adc545087cd1bde4084d052c61139f579bc9726d2f9
- SSDEEP 384:liV8eLgWeK8mkhEwFwBBtYXZH8UhzpBGIr560lZOzcBtO1iwVnkEigUWAn:liieLghKUc2XZ/9j9RlZccBtO12nd
- TLSH T19413AF1FF6E021C3C45762BF65D0C6BEB211B01F5BAD7506750A43AE8EBB9464E88B13
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar-only.bat
- SHA256 3a7d1a3e38beac6e4f5c1f2a26e53a7479af124fa489092f4ffd492df17cf668
- MD5 c290d9a7a40d4a870fe0c1672373ede5
- SHA1 82e5fc5a8934b65714bae2e966c5d46098131d4c
- SHA512 82d73bd044cf2babd4c028cd5e7630eb525be069c764d61291b880ff77ecafaa58023bfd538f2bad102937c2f37944ebc88f6fee84dbcbc1648e1a2c062efb04
- TLSH T1CAC08C023136BAC590E556429FB6D6E8B90B33DE8A41EE0AF09225306D042D2F5383A1
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/cs_agency/data.json
- SHA256 03edefc663855f5924dca8e4941e0ba9e3467088287a52ed1c5cc3497752ae36
- MD5 204e854ad018ec1a3a476cd92c18eafa
- SHA1 1d77b8fa1e08372a1870acfb303b927afce753ea
- SHA512 02e34b1d8dfdd027bb9c419a8494b5cdf61de5f2174127b2b133024385050315f91846f827df820a16f5ace44171b9250a9dc12b686b4c511a45611ac9a4eb5c
- TLSH T172A0025906365E546109184790695AC418253ACA45D76E79F2449455C9348321F65952
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/cs_agency/radar.png
- SHA256 f80b8f4030249163841bd91068ad9b2490c7fcb3c0deefdda87fd027354bde98
- MD5 d496d49ad05230c7ffc332a4fe54f160
- SHA1 15aca83efb37edcf8fe17915fa304aee3cc31f59
- SHA512 05b6ba60896f63a0fd1e7eca277856feae681c8e095b9f092c07c54f0fa88d0cbf7ccc10a0455f127330b377daca3740fdfa4e96746f65b322aeef56cc7a4949
- SSDEEP 3072:Nxk/tRC254EQfqljNLfNHqjj5fQj848vnVxnDLqOon5PPunGwtDjbbS8:N6m+FfNLfNHOdffRQn1epP
- TLSH T18E1412AAC697C0635C920839D4716A1253647E3321EEB8B58097B846375E17C397F3FB
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/cs_italy/data.json
- SHA256 d22926c471738276a325d4136ea10493033ea7ad796135286acbcb03097ff1f8
- MD5 fd5ab3116e5d6fb10721a58dd723bd9b
- SHA1 a8dba5dc47260be771fe855509ca40fbedfa03b8
- SHA512 41556b4dc96ebcd30c3b72a976685498f2589e6bcde8e0ba3264d581f914dd4dcf8a08508a23e684020dcfc8bbbecd7c88b40821e88f52bdf86f78d4e12650ee
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/cs_italy/radar.png
- SHA256 09b373a13df847d6486c0f326d4258fea977d4ce4064bebd2712bb2e4ef61fba
- MD5 c3d55ca33dc01fb1d2e072feec43fb11
- SHA1 88ddf4a8e3aa90c6f4f063cf4369b015079b8807
- SHA512 3369328dbbaf6b4650d4d48c252ff50ee9b6077aa8fad7dee3f0158cab4c49d5041d964c33c5f14ca4a193f1bb6530aac311844e0593b1149adbd3755eedd4cc
- SSDEEP 1536:I3+w0U/oiffs6DbpT4AA4vzoVGzQ17DH5OJn4I2NNosusO0/9xa+zwC/9QZ:BfyjbpTG4oVGI7DHInv2Nks/LzAZ
- TLSH T103A302DE1A71DE8AC84F0C375EE59D1E387E20DDCA2484659B5FC01A331687A5CCA4AA
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/cs_office/data.json
- SHA256 c152b0df6b78ef20e4d6bf2859238c0136a8a99ce5c6ecde76f2655d36a191ad
- MD5 c0b25f05fdf22eecdf31e5881e2e68df
- SHA1 29b0214deae849a8b1034afc2652b73eb0dd2e0d
- SHA512 1146ccf395ce4c38698e34cfea2a90a0c05e2ac78eb5efcdf72027c74be151bcb541436690e513fd749f85430afd34c08b3bd6c939f97bfe5b44116e91810a1d
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/cs_office/radar.png
- SHA256 5bff719cdd754aada5377792bb25338142e5ac5e9a77b7d7eeb9ea3b2efbbe50
- MD5 40f8038cc6d9c88baf905ad9afc180bb
- SHA1 143092af92321de526dcea85b8110b3d2f37321d
- SHA512 1effb2c30612b976563ca305a9543b98ce68af5d2db0132eb04d183030af6312a3abe3db4625d2a985708b8bd0de14506e163b9e71d214b03ecde9c7e2623d89
- SSDEEP 3072:PhN9cyaasXaRslRMJsxTXEUrxrsfVtEvhJ7w2/hl6jCnnd/eHEeG7j4Q:ZN9cyaahe+JsxZVSVtEZJ7w2/n6jCnZx
- TLSH T10514125378EDF53ECFA3483CDA4C4FC1D8A2C94B92D654B99461227CB57DCB84884B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_ancient/data.json
- SHA256 3ee143ba373a740ae322a5a2679a306f21891a606a10d5287a429fefcadf2b73
- MD5 934814870d172468b647a7483b015db1
- SHA1 e196dd0edfcb15507853f99229ec3870cd40881b
- SHA512 9a1b5b1230f98cad9d4a2666916f2ac69916c97684ae1a0e10427a76b300717d835a1ffffcecda7682e63faae4039b242bb634148c11cd8e6dbfef06dce896a1
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_ancient/radar.png
- SHA256 cb2105652a05c12dcdaac26d4fa03a3124bfd212835e91791b5aad35d1ff426c
- MD5 68d7302f48483ac255d90511511b8281
- SHA1 0112c2dd6c15ee9ebf8729c226a5e4d9a054ea6a
- SHA512 644f9185bcf2420559a146424d3a64d954f8059dacd512936e3c549c66f3d69d468392f78bda3ef12625a134204b080e8bd59fa36ea5fab7b77ec31d07455f7b
- SSDEEP 1536:Im8Iu7YHIrY+eKAiOF6jj3HVv5qLZg5BZ9EKXfz8yCpVaacagnZI0ifJ1eLm5:J83YoryiZjV0Z4BDtL8yCpVpcagnZrit
- TLSH T137930287C53BF641FC1FD2B01AE004471A674E9F90A412B6EEBA5826F2B6D747D4C398
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_anubis/data.json
- SHA256 33958d4cfa5bb28e3667f7dddfe137e465abea29ba2c14750147082da50c1c36
- MD5 58550b3b46581ec7f4bc12f1ca652200
- SHA1 15967e5cad0aa18022cf0567fab51dad1ef32780
- SHA512 576b26eff91f6e85a3b0fde1fdc2ab4ba3a89b862e8f339d48f79b9b9c6b3c8b5ec9a6dd491ff1bc5bf8ab5a2fd079ca45b1cc8bb07ccedd07c573ae480c79cb
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_anubis/radar.png
- SHA256 5d8cc88ab13769344bfc358c3cce5a5d77f73be453ec34edcb767f5b30eb77ec
- MD5 a14979a5c1664822d2548841c35e22cc
- SHA1 b5630294a5e1882ff9b07fffaf3cc84632703ca5
- SHA512 ce0d23acba7ee7d4cbefbf685cc2e45bfc5fe75dc70f5288a466b95abae0305df1230eb0835e2403a70e0d0ce05fa9207b6e80faec5eb52d5a14f29715edfe7e
- SSDEEP 3072:Ji6+mOPCkr6KABsr0QvhXdzuwM5nGFuNfJmz:wdHe3B80oRdzu9IuNm
- TLSH T178A3020FCFB75EAD2EBE1F68A8D8865414BD8AC09094CE71C3DE0E5752AD18861C5BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_dust2/data.json
- SHA256 16ef4b1010c016622031d1822f73bb605067ceda343b28a983152425dfd4ed80
- MD5 1858b7e75fb6fc4dca384fc9695e6a97
- SHA1 7ec570bcdcdf1d85a423f078589682254bfe1ef3
- SHA512 2aaf1eec57225de08030d2cda1675de3ff6daa61df23c50fc48d1799cfbcbb127705313c17869d0eaa7bcaa7437c6bdf93f18b7ec53af32511a8dec3fb039c6e
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_dust2/radar.png
- SHA256 101b34b6a853c5042e69635c669b6f29fec8ba38fa642f5beea9eadeaa174eb1
- MD5 ad7830e26cb29413649eaded25f4e359
- SHA1 86ec148c0509c84f714ed582bbab5bbe7251134b
- SHA512 5847e5688c9a6d1e7758c385cb74581ec7499175b37f44c6c3889bf5cb72fe3588e3308bca56f0867d0e8411075db91a37a7519d349ec9f4f40e65d8351563a6
- SSDEEP 3072:nGK6o5A6g53vHfxIOGoCAmc8sUYnmjtC+JrdeOPasndUmf:nGK0r1ffxI3HEUCkt7deOPasdBf
- TLSH T1A1F30253C39F9688DDAF743B6291DC8C0E889D40495A8F789CF08E2EF6AE4D81D563C5
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_golden/data.json
- SHA256 408daebe14ab35b5315568ac238317bb1f340d5c062a6783dd74523df509350b
- MD5 0cdd67e2aa895fdaa5d6c57edd2016f6
- SHA1 63eced4cb5e2b6848292d21d099c2956b10f8b2d
- SHA512 f7d905baf21dc6288ee07bea93c8021669026be2dd74d06c9d4cb80ed3ca2629387511cb450dcd7a71733285ae31586b0d75db8a07cbaf4ef54c2549bf951dd5
- TLSH T15390024861330D54764F5E1CA00C4A94465C255911C609942354F1A08D204750A41938
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/de_golden/radar.png
- SHA256 7b4d6b966b8e8166d86ea8fd8d0e9ec30bed801cd7f494aadca9ae445f7efc10
- MD5 47d2b1c964e7dc61afa10ee8dddb66a9
- SHA1 5a2941bd6561e4bb63cdb7099a89d08cc715fe7c
- SHA512 8723631ae5915f566743e3a3c901892dd712ae3b015c1c62560b23494552ac916e8f91e29ad299398abd48259c0775774edf7481b7b8129be2d5c8adc605b0c6
- SSDEEP 3072:rTc7xx3SrTYXXogeXjthrbmrJHIXUOk4Ew/bpGMkeX0JT0Dx+c3rAjrUxxLx:rTcNx3SrcX4geX5FbmekOknw/bib0V+c
- TLSH T18004125D8C649515F200C5B1809B22036F2DB56FFFB5CF19A14B3E6E4D22AFE7812B49
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_grail/data.json
- SHA256 977efcc9c840b4e1d49a11609a25d5e43693009267b2b86770a7f27513f607bf
- MD5 b37582b5521d2b8898fc59649c0b3070
- SHA1 b98913ea26f325702f15075a7ea96d2b9654c133
- SHA512 44a60d4ecdadf046586a86d9a48ad71fd71fe8e367386b1242c207c660cd3e137908c9d51f3bd5b94327214b45d619a62b01ef60bd744c5cd1c116b5693c0afb
- TLSH T18890029F52170C55550A544DC02E84485E4B1F4A45D25460230465108C31735BEE2CA0
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/de_grail/radar.png
- SHA256 42f9c09aacc083b0d6df1ec445cf2214abbc1c8f7a8642d8a6698895e0b33b78
- MD5 bfa33ec92832061052e3c8c998551291
- SHA1 1b36c5898df922d3865aa33073eb9f034e9844b6
- SHA512 23d21ea58a97b4f8ada8c8b2e3664120299b82cd9cae5829ac85a20158c543d699e5042579eece62efc53f0cbc9aa98b629c6e5b9787e8956c1d327ac2770a0d
- SSDEEP 12288:OTf2Epgl+y2YDL6vJc8WKFN3yQhMRATS+3Ml/woORxEA:OTuF4ynENXeRAu+cF1ORT
- TLSH T1A8A423EB1F72D338564410AB653D22310B6A675EC790BD2ABE0D853A017C82D1E379FB
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_inferno/data.json
- SHA256 b7f101608b3cfe71ed4c6c2ce10a96c5f4a2796cb616eb324cbb208630281fbf
- MD5 cfc2ca94dd0f9b2a8679ee205448a194
- SHA1 6d1374354c8cb4b258b9463c78ec896bcf1232ce
- SHA512 6440d417c9d0f32a495211abe255f209b4fd9425fcab6b2cdc6530f18dc2bbd192e978b099014f347921ef945896750480b3855f0c96f7aff9e836c43b07b583
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_inferno/radar.png
- SHA256 003daf59bc7514fbef8d72fe946858dd214acc9d1342ab298f953c58d4959025
- MD5 ac191119a33075e0ffeee055cee1a7ba
- SHA1 02ec36246b1587c7490623820a8296d1944cd0ed
- SHA512 96432b207bfd7753f38c3e7dad3ccc211917189ad6769c3c8b76ed58be94cb026e01e6f997e420128bc08297d80a79f067f3d952f8ce65be4de87e9be08da696
- SSDEEP 3072:o5LJ7qZqYG9KlTUamHLAfpvM2puIRi9ZQauKkbQFoQO:+dkG9KlT+01i9ZQaiktO
- TLSH T154C3024A8139E308CE5A0C7DFAEA2CE14D41CD999E456FB58F8C244DF3350266DDADE8
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_mirage/data.json
- SHA256 1b1ae2d4a5bfe41fc9d8fd60771d337958a020e3bb18cac5e7c0b1fef969befc
- MD5 68353c40eca49783c69c66f6e9e782f7
- SHA1 a767f6d40a7e60902688ee93e6a2303010f3c4d4
- SHA512 396acaceec4e08a5db7b564964c4e41ec49f14e0b7602af0e9c2d61790160bdb9cf29d73d927f3de51cc3825d1ac5eea2042c89590dbf816ccd465dbc91aadbb
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_mirage/radar.png
- SHA256 77ff8c4d75b3f63e72090f49d5755b406ca0dadc72a2cf2217a12a0e378db869
- MD5 cb253fad4e95ac1fbfac9c2976acfe7a
- SHA1 78693cfc34503e27fff6795eba485a907dcc17ef
- SHA512 8bc70806f8a048c03826f72e28dddf42b0761f307044438e0cabb2b0c77371921471d2de3be5e9f11c3187548201c90370fc2ec5a4da2e0820c925cbd7a9bbd3
- SSDEEP 3072:Nv1Wiw11SrtO6lzKoXUsI9osF4Yv10xC29bCoO0miS2j:lfw7S06lz/XUsI9hv10xpBm4
- TLSH T157D312A9E2DFEE96CE4C51F4F4098ED7C2C384757C5906CCE178A8ADDB2C1B0A992701
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_nuke/data.json
- SHA256 b0a9bae27bc045198b91ca90a69728828ea76d7ab290a725b7a4d63277d1e2a3
- MD5 18336a1ba7f234894f31de3583345e94
- SHA1 4a34392d802419a14ef44842312ba9407afe848c
- SHA512 0e756d88b8f6b0e906d08afaa334bc00f802a03610ae5aab2b44536eeaa1b9e9667daab766929f771c914b624551d5d0c5d2e16e6db29e3d30ecd1fe4995594e
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_nuke/radar.png
- SHA256 b0ef2f2f91ce38942531cfd3e62cf9fea450294a272580788f551faaa96cbb2b
- MD5 bbb149f1ca32faed045628c5c4c49439
- SHA1 a960471cc84ab377433e582677b30573e9b59a18
- SHA512 e7e7ed17e856465bafb08668b50e4c537588faf59dd7752b54b0c8f71fd622b07e5a991112bdab37103c328b036afa9f645f7c684977d4dda13367e3d301c800
- SSDEEP 1536:nTux1hoz2yo8tkAZfEoPqudb8ZiBql4KlnGLwfmr/3+DfDDcU2eIma8DoJr7hWaW:A1hPDufEje8ZuqBGLwmrBeImaTJrVWaW
- TLSH T1B97302B881CF0426C4BB5AB7C290675737A32F67BD15CD6F0C8C912247875652F1B789
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_overpass/data.json
- SHA256 186fb002903d538995dd10b7b1cc963172e0860874404a64d6463d59f8869d1b
- MD5 a2153322395607a9f79091fc2c6a7bb0
- SHA1 4ea5d9c8d5cc68069f3791de71166ca469ec55e0
- SHA512 b30cbea72f05b5051076b56ce1578cb0004428a0449123555f1c7cedc33e54652741f90221ec2762cd1acc9e6ad6d570e5d284b5948bd6b3b362c1e92c69a228
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_overpass/radar.png
- SHA256 78adf7a325cf1f16c20c35a201459dbb37f00460e8d4f36c9925cb2e237b302f
- MD5 bf8b107bdfa465edf0849a3bd2650858
- SHA1 828d04b123f1d1c3e95794863f42fdf42cbc440c
- SHA512 4b39ef726e5d16d5f2bcc3547d2aa7fb6ea0ab15669ff70b15e63e7d9207bae7e932b1b41810154f95b4b052604a539a3b338cf9f12a219ecf33309ad4693d1e
- SSDEEP 6144:9Smol7g878Uq8B1jHhBBOSur4lwVLizIYS/:9oxr/BBHhBBOh4lw9cIYS/
- TLSH T1861412A25A5588235E6FC23351E700B0FDD8018C6A7E73A39654AB72E528F119CD3FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_palacio/data.json
- SHA256 104b2d0c58e3e9183db155f46b26fe0e9104c742f6a36b053c9f8480ecd4039d
- MD5 ea28372c5a833865bfe62c670f897d1a
- SHA1 bc4c39a90b1069e1bbb010ec560a644f303ca356
- SHA512 a2b930ec0025fc665a35f46a6d94f69c1c00795eff36ac7f7f39bd1a82455efe38ea4adf6884c0f848985f654ebda1bd59bb3b13014ca2b24c233bc657e08fc6
- TLSH T1DBA0020855B10884E25C245CC91E80544B55165C56C75404E3165474C829DB50EC5067
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/de_palacio/radar.png
- SHA256 5ef54765b9a3439e110252c6a8007f3122ee12f5ba4ae7f1cc6a643d81a8a446
- MD5 bf05d80129c965be9fdc792f998b42e8
- SHA1 381dd9982c8b560b95b6f857cfe49664ee80aacb
- SHA512 910ab774ec9807d60f1fec2d7b52244976f4a8dedc9ad943ee33079467986da695e2e1a7b0af3a792c480038bfae074e9e5c1626627a6170d5378b2f6bfb89bb
- SSDEEP 12288:Sw1UMXZLe3W03d34na3nA7QDSOwpfsYDkNF1mwZlf2VyGM7s3j:SapK3NN34na32hTAf6M7S
- TLSH T1B8C42368D52BE839239E2C5A03975C989B6DE05CB63D7EA00F45C64F922B30D7C6274E
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_thera/data.json
- SHA256 e285c229a58c63c026eadedd92ce7a115bdb41a9876ff6ec6f6ace1aea567b72
- MD5 eabaf75d3caebf2b3af9fa1933869c34
- SHA1 17385a46589d2aae3243514939ebfcffd3e574d5
- SHA512 582544ba30e7d486b7107e06c6aafcfc9cd7b71e02c1d5cc5ed5b2850f158a6274535f7ebaf13aa1a291f8d62758964a409240570a8d9b84b11cd75f1c450236
- TLSH T1F7A0021E46331D84B289185C80085A499C193D5C42C2483851485861DD70C760A45D19
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/de_thera/radar.png
- SHA256 ade2948d3e030f319c7be8fa07a179af26923c615d84fabb3e1cc1fa5012df70
- MD5 740dad7dd99bd7f1b7a1874504f034e1
- SHA1 9e058b9d9abe52b2348fd689c6665165eebcfc66
- SHA512 1a6f05dee9560d7ab161d5267e376425b5f502345815ac1926162a058bb800bab211870595e7a309594a5e69349837795d260acf8c87e0b0b2a5db6da6e546b5
- SSDEEP 6144:fM9YnSTS9ovaGibW0JAt3a5O1tlBwBAYdx75Fxe2Ze:09Yvotii73J/zqx5FY2Ze
- TLSH T18A14127BCF9DB6C25D8EC2499ABF001F125A42AE67D12CC820FF70C0DA2697A55847C7
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_train/data.json
- SHA256 38188a8ab3be7ff67a564e9d90eb2dfe0aa930b46b070c32ec8eced5b39a3595
- MD5 b6a9a3c6ff21450836bbd02e87df622d
- SHA1 a12fb328681f21a8b6ea06a5d55151810a55025b
- SHA512 ce9574fa318acf473feb80f5b76b74c0175a33dd3c53eb4a7d973f5dfa6439ebafb69b145f7f9322f34a7b3a38ffdf74a7bfb29d0d4213ef0ea87ffe9dd61bb9
- MD5 SHA1 SHA512
waif_v4.5.4/Release/webradar/data/de_train/radar.png
- SHA256 735e104c007d2cd500309f6fd49a999e4f1b389ef85be7bd58cb25aca69f383d
- MD5 9b54017a30b08dd75f2b719b8c5eaa5e
- SHA1 410a0da2edc921d01545edb8fceb4a59bb8ab175
- SHA512 11c43314bc6c6a9dadf8d6d4ea7e5c4845af2954ba6b0688044bebb7c691bbc002e0450025d95ab95c3d09416450aa7d9705250ed7a700ecfe234c768a5ab299
- SSDEEP 3072:zOGdWbgiKcTxjvctAXuFez7b1A8WSlB/IUb4jqjeHA4xOJxggv:yGdWbndBvcAofdSUmjeHA4xOJD
- TLSH T111E31229584D40B7DD5D613323ACA1C25D1078D28FF475FAAB6830F8D63447AE638FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/de_vertigo/data.json
- SHA256 3e673ddd4dc26ccce74b2dec35aae3eba869750d2d3e79f2e51a94f28ee2c6a8
- MD5 01e22b765b6446283c832c2de4cda163
- SHA1 68d8456afcca9f69a9ede08788ef26709d045224
- SHA512 40cda6dd3fde9410e6b138abd033c7535ba038b979dc3f49879b9628806eb998b74fedce69ec594bead5143a80328482473144219891785ebbc66daaea5b120c
- TLSH T1B7A0021C51220816B14D0C6AA11D444919A8071C1DC774A022099062DD79EB74BD7C62
- MD5 SHA1 SHA512 TLSH
waif_v4.5.4/Release/webradar/data/de_vertigo/radar.png
- SHA256 d795fac38a04f9488495d1bc822b55fdfd585e11633d39e2bca8467d4d29e90b
- MD5 29a0286ec11e71aeacaeb4319a9c1c8a
- SHA1 304c71ae9a929bc8618b2d9779a0e085d9d9a0b7
- SHA512 7523d4e3d21e370b41625e88e7639bce92b22fa9f90482d686d06d46ec260a5a8b103e4733ab2c118c0bfbef76e1df4da7314680f6102aa3f2bdce760690d5e0
- SSDEEP 1536:hHRv6RWCz+WbsPaBKle233hvIBMVkBQP/0DaRh4zsQoAF5OQcGjWV:REHvYiBT0xvFkE/0mPQoAOUKV
- TLSH T1DA73F185FC653C54CC7CB9F310C177E1A4B604F78279F728507AA2A8354AACA67863F5
- MD5 SHA1 SHA512 SSDEEP TLSH
waif_v4.5.4/Release/webradar/data/waif.otf
- SHA256 cf81efa5626f4756b6e35dc09608029f8693078997a2e640e7251c8949bf2295
- MD5 6a94fa8447b1b4d150eafaad46fe9254
- SHA1 e4033ed3777811306d18c934257a82e78083d4e5
- SHA512 943d1916785f147b20077dd9f53505bbe86662c39526770db48f9f260410f569b7ec275a8f91293f05a72adc545087cd1bde4084d052c61139f579bc9726d2f9
- SSDEEP 384:liV8eLgWeK8mkhEwFwBBtYXZH8UhzpBGIr560lZOzcBtO1iwVnkEigUWAn:liieLghKUc2XZ/9j9RlZccBtO12nd
- TLSH T19413AF1FF6E021C3C45762BF65D0C6BEB211B01F5BAD7506750A43AE8EBB9464E88B13
- MD5 SHA1 SHA512 SSDEEP TLSH