undertale-last-breath-scrapped-beta.zip
- SHA256 af2c8f55cc7ad2405ef50d2e8de3c49f9337299c54d0b1000bde01b22379d071
Overview
overview
3Static
static
3Undertale ...se.dll
windows10-2004-x64
3Undertale ...se.dll
windows11-ltsc_2024-x64
3Undertale ...ic.dll
windows10-2004-x64
3Undertale ...ic.dll
windows11-ltsc_2024-x64
3Undertale ...PC.dll
windows10-2004-x64
3Undertale ...PC.dll
windows11-ltsc_2024-x64
3Undertale ...ng.dll
windows10-2004-x64
3Undertale ...ng.dll
windows11-ltsc_2024-x64
3Undertale ...er.dll
windows10-2004-x64
3Undertale ...er.dll
windows11-ltsc_2024-x64
3Undertale ...Ls.dll
windows10-2004-x64
3Undertale ...Ls.dll
windows11-ltsc_2024-x64
3Undertale ...ve.dll
windows10-2004-x64
3Undertale ...ve.dll
windows11-ltsc_2024-x64
3Undertale ...te.dll
windows10-2004-x64
3Undertale ...te.dll
windows11-ltsc_2024-x64
3Undertale ...rt.dll
windows10-2004-x64
3Undertale ...rt.dll
windows11-ltsc_2024-x64
3Undertale ...lt.dll
windows10-2004-x64
3Undertale ...lt.dll
windows11-ltsc_2024-x64
3Undertale ...lt.dll
windows10-2004-x64
3Undertale ...lt.dll
windows11-ltsc_2024-x64
3Undertale ...ns.dll
windows10-2004-x64
3Undertale ...ns.dll
windows11-ltsc_2024-x64
3Undertale ...op.dll
windows10-2004-x64
3Undertale ...op.dll
windows11-ltsc_2024-x64
3Undertale ...lt.dll
windows10-2004-x64
3Undertale ...lt.dll
windows11-ltsc_2024-x64
3Undertale ...ed.dll
windows10-2004-x64
3Undertale ...ed.dll
windows11-ltsc_2024-x64
3Undertale ...lt.dll
windows10-2004-x64
3Undertale ...lt.dll
windows11-ltsc_2024-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Undertale Last Breath Scrapped BETA/Modules/Box2DBase.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Undertale Last Breath Scrapped BETA/Modules/Box2DBase.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Undertale Last Breath Scrapped BETA/Modules/Box2DStatic.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Undertale Last Breath Scrapped BETA/Modules/Box2DStatic.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Undertale Last Breath Scrapped BETA/Modules/DRPC.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
Undertale Last Breath Scrapped BETA/Modules/DRPC.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
Undertale Last Breath Scrapped BETA/Modules/Easing.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
Undertale Last Breath Scrapped BETA/Modules/Easing.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
Undertale Last Breath Scrapped BETA/Modules/Layer.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
Undertale Last Breath Scrapped BETA/Modules/Layer.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
Undertale Last Breath Scrapped BETA/Modules/OpenURLs.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Undertale Last Breath Scrapped BETA/Modules/OpenURLs.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
Undertale Last Breath Scrapped BETA/Modules/Perspective.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
Undertale Last Breath Scrapped BETA/Modules/Perspective.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
Undertale Last Breath Scrapped BETA/Modules/TextSprite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
Undertale Last Breath Scrapped BETA/Modules/TextSprite.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
Undertale Last Breath Scrapped BETA/Modules/Viewport.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
Undertale Last Breath Scrapped BETA/Modules/Viewport.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
Undertale Last Breath Scrapped BETA/Modules/aviflt.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
Undertale Last Breath Scrapped BETA/Modules/aviflt.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
Undertale Last Breath Scrapped BETA/Modules/bmpflt.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
Undertale Last Breath Scrapped BETA/Modules/bmpflt.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
Undertale Last Breath Scrapped BETA/Modules/cctrans.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
Undertale Last Breath Scrapped BETA/Modules/cctrans.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
Undertale Last Breath Scrapped BETA/Modules/clickteam-dragdrop.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
Undertale Last Breath Scrapped BETA/Modules/clickteam-dragdrop.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
Undertale Last Breath Scrapped BETA/Modules/fliflt.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
Undertale Last Breath Scrapped BETA/Modules/fliflt.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
Undertale Last Breath Scrapped BETA/Modules/fontembed.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
Undertale Last Breath Scrapped BETA/Modules/fontembed.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
Undertale Last Breath Scrapped BETA/Modules/gifflt.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
Undertale Last Breath Scrapped BETA/Modules/gifflt.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target undertale-last-breath-scrapped-beta.zip
- Size 69.6MB
- Sample260802-ef7vyscg23
- SHA256 af2c8f55cc7ad2405ef50d2e8de3c49f9337299c54d0b1000bde01b22379d071
- MD5 746e009f7a736a2ab68726a278cc165a
- SHA1 005bca7613c3b6365e1df753e7c4893b2028a1a3
- SHA512 d332e4e80d0d87ab396bc7837671d6a45578811b0691bd6b972286a4a25e42296e54099299a8868860e09359ec6123c53a55d554e7d98d20fd835c8b37f99219
- SSDEEP 1572864:nCZWzLmEgv9grb8HHfQa6uAHS4+RhELbN8OWxeqY9+y9EXrAK:oWzL9gk8HHDSHS4+fEayqYz9Op
- TLSH T163F733D1BB5A8A02BEA5B827C041FA32426701DF960CE879FF3C5941331A5F856EF875
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 7 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Undertale Last Breath Scrapped BETA/Modules/Box2DBase.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/Box2DStatic.mvx unpack001/Undertale Last Breath Scrapped BETA/Modules/Layer.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/cctrans.dll unpack001/Undertale Last Breath Scrapped BETA/Modules/mmf2d3d8.dll unpack001/Undertale Last Breath Scrapped BETA/Modules/mmf2d3d9.dll unpack001/Undertale Last Breath Scrapped BETA/Modules/mmfs2.dll - Unsigned PE 27 IoCs
Checks for missing Authenticode signature.
resource unpack001/Undertale Last Breath Scrapped BETA/Modules/DRPC.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/Easing.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/OpenURLs.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/Perspective.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/TextSprite.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/Viewport.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/aviflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/bmpflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/clickteam-dragdrop.mvx unpack001/Undertale Last Breath Scrapped BETA/Modules/fliflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/fontembed.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/gifflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/jpgflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/kcanim.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/kcedit.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/kcini.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/kclist.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/mp3flt.sft unpack001/Undertale Last Breath Scrapped BETA/Modules/oggflt.sft unpack001/Undertale Last Breath Scrapped BETA/Modules/parser.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/pcxflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/pngflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/tgaflt.ift unpack001/Undertale Last Breath Scrapped BETA/Modules/txtblt.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/ultimatefullscreen.mfx unpack001/Undertale Last Breath Scrapped BETA/Modules/waveflt.sft unpack001/Undertale Last Breath Scrapped BETA/Undertale Last Breath Scrapped.exe
File Explorer
-
undertale-last-breath-scrapped-beta.zip.zip 69.6MB
-
Undertale Last Breath Scrapped BETA/Data.ini43B
-
Undertale Last Breath Scrapped BETA/Modules/Box2DBase.mfx.dll 287KB
-
Undertale Last Breath Scrapped BETA/Modules/Box2DStatic.mvx.dll 126KB
-
Undertale Last Breath Scrapped BETA/Modules/DRPC.mfx.dll 1.8MB
-
Undertale Last Breath Scrapped BETA/Modules/Easing.mfx.dll 181KB
-
Undertale Last Breath Scrapped BETA/Modules/Layer.mfx.dll 140KB
-
Undertale Last Breath Scrapped BETA/Modules/OpenURLs.mfx.dll 90KB
-
Undertale Last Breath Scrapped BETA/Modules/Perspective.mfx.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/TextSprite.mfx.dll 395KB
-
Undertale Last Breath Scrapped BETA/Modules/Viewport.mfx.dll 18KB
-
Undertale Last Breath Scrapped BETA/Modules/aviflt.ift.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/bmpflt.ift.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/cctrans.dll.dll 141KB
-
Undertale Last Breath Scrapped BETA/Modules/clickteam-dragdrop.mvx.dll 28KB
-
Undertale Last Breath Scrapped BETA/Modules/fliflt.ift.dll 28KB
-
Undertale Last Breath Scrapped BETA/Modules/fontembed.mfx.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/gifflt.ift.dll 28KB
-
Undertale Last Breath Scrapped BETA/Modules/jpgflt.ift.dll 96KB
-
Undertale Last Breath Scrapped BETA/Modules/kcanim.mfx.dll 28KB
-
Undertale Last Breath Scrapped BETA/Modules/kcedit.mfx.dll 32KB
-
Undertale Last Breath Scrapped BETA/Modules/kcini.mfx.dll 114KB
-
Undertale Last Breath Scrapped BETA/Modules/kclist.mfx.dll 32KB
-
Undertale Last Breath Scrapped BETA/Modules/mmf2d3d8.dll.dll 446KB
-
Undertale Last Breath Scrapped BETA/Modules/mmf2d3d9.dll.dll 1.1MB
-
Undertale Last Breath Scrapped BETA/Modules/mmfs2.dll.dll 510KB
-
Undertale Last Breath Scrapped BETA/Modules/mp3flt.sft.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/oggflt.sft.dll 130KB
-
Undertale Last Breath Scrapped BETA/Modules/parser.mfx.dll 40KB
-
Undertale Last Breath Scrapped BETA/Modules/pcxflt.ift.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/pngflt.ift.dll 288KB
-
Undertale Last Breath Scrapped BETA/Modules/tgaflt.ift.dll 24KB
-
Undertale Last Breath Scrapped BETA/Modules/txtblt.mfx.dll 116KB
-
Undertale Last Breath Scrapped BETA/Modules/ultimatefullscreen.mfx.dll 86KB
-
Undertale Last Breath Scrapped BETA/Modules/waveflt.sft.dll 8KB
-
Undertale Last Breath Scrapped BETA/Resources/Animations/Sans/Phase2_End.gif.gif 22.6MB
-
Undertale Last Breath Scrapped BETA/Resources/Animations/Sans/Phase2_FinallAttack.gif.gif 863KB
-
Undertale Last Breath Scrapped BETA/Resources/Fonts/8bitoperator.ttf1.8MB
-
Undertale Last Breath Scrapped BETA/Undertale Last Breath Scrapped.dat63.3MB
-
Undertale Last Breath Scrapped BETA/Undertale Last Breath Scrapped.exe.exe 939KB
Undertale Last Breath Scrapped BETA/Data.ini
- SHA256 e1582ab8797d8f2dc39b57acbd3cf64a119309484767cea34e5a3fe3a457663b
- MD5 33788d4325cb90b0596d982494295456
- SHA1 13d03eb0e8715c9d3b186ed84689e3daab00f1df
- SHA512 0c8e549a430eee5825f43820c4a617ef2c8601e2f40d4d92a598b41c52a8fcd4ea16284c11c66af2c9d7c3d6a6e7271fb6aff78ba95ea7cdb69c389c8f0ebde6
- MD5 SHA1 SHA512
Undertale Last Breath Scrapped BETA/Modules/Box2DBase.mfx
- IMPHASH ea7035d62396d3e0c291684a39c6488b
- SHA256 c4507e348be20dacff1caf80047009924a7dafde2f6d4fcd3a119e36c3b0a259
- MD5 0572d03da13e13cecdccff2e64f9f4f5
- SHA1 a1fcc08ac261edeb3c2b95f007c93fe1398583c7
- SHA512 68790d0a9b0ccac5389e551408c10bcb2430daa28162bf8de29fe327c78c72bc61181366d6e0f61ba661977daa825aa865255b71ba4cd0ecbc0f403d608d71d0
- SSDEEP 6144:n3Hyu+yR3JQ5vqrs5+WK3SjNubJa11F6ZoalgbFOZNu:n3SujQZjEaDF6Rybd
- TLSH T15A544940B0B1C5B2E57D2934B968716B7C7E3D640B38C5DBA3D4046DCEB46C19AF2BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
81:ac:21:8c:fc:9d:46:dd:1e:5e:28:81:50:b0:fc:83:7a:00:7c:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Chains
Jun 25, 2021
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Serial Number
05:06:71:9c:4a:1a:31:e2:5f:f2:72:51:72:f1:b6:3c
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2020 - Jan 8, 2023
Minor OS version
1
Major OS version
5
Entry point
149415
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord171
ord153
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
WriteConsoleW
CloseHandle
SetFilePointerEx
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
GetFileType
DecodePointer
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
user32
LoadMenuW
GetMenuStringW
DestroyMenu
LoadStringW
ContinueRunObject
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetPropCheck
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
HandleRunObject
Initialize
IsPropEnabled
PauseRunObject
PrepareToWriteObject
ReInitRunObject
SetPropCheck
SetPropValue
Name
.text
Size
217KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=241, version=40116,
count=119, id=243, version=40116,
count=27, id=242, version=40116,
count=15, id=260, version=26706,
count=19, id=259, version=26706,
count=31, id=261, version=26706,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=27044,
count=91, id=1, productName=Unmarked objects,
count=46, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Undertale Last Breath Scrapped BETA/Modules/Box2DStatic.mvx
- IMPHASH 2c9b5dbbebc9a70237e1b2365bfbba79
- SHA256 f1b78b67fa0ec761b5ef24b074b6805a0713c9b8f1bd48b8c0822cf01a642645
- MD5 4fdd5e5d3f9d15622e741160f8359d80
- SHA1 08af8b2e361b4c73c17bca4a1de92aa57157207d
- SHA512 f8db8c0ef40c6293ea684f6ad8ab3dede3bddc91c65dbfe4dbe9c39b478d04e75d15adbf16fa178cf4016b247665af7b1b62c6957f24a6fd9f29e13db614513c
- SSDEEP 3072:xJqVd8h4UxwLz+yyBvyoyDMhbLUsrE1SSZz:xJqVd8KP+XtUZz
- TLSH T137C35A10B691C472E0FE6D38287596215B3E7C60EFB889EB2784126D5F742C1AE35F36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
fe:a1:2e:84:c7:8a:ac:98:51:09:65:4b:91:ca:f4:64:a4:18:5e:61
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Chains
Jun 25, 2021
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Serial Number
05:06:71:9c:4a:1a:31:e2:5f:f2:72:51:72:f1:b6:3c
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2020 - Jan 8, 2023
Minor OS version
1
Major OS version
5
Entry point
15114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
DecodePointer
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
CreateFileW
user32
MessageBoxW
LoadStringW
LoadIconW
CreateMvt
GetMvtID
GetMvtIcon
GetMvtName
GetNumberOfMvts
IsUnicode
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=241, version=40116,
count=118, id=243, version=40116,
count=24, id=242, version=40116,
count=30, id=261, version=26706,
count=15, id=260, version=26706,
count=19, id=259, version=26706,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=87, id=1, productName=Unmarked objects,
count=3, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Undertale Last Breath Scrapped BETA/Modules/DRPC.mfx
- IMPHASH ae74f3a2628ced8f8e4875769f934129
- SHA256 a16fac771f5b676dc0963a538491922d42f5efbe5bd673ef5a05e4fcd1caee7a
- MD5 7b78ab9a2798746a19a991261d150cde
- SHA1 6f6ccb465d518c6b70a2ced376afd6a9779b4768
- SHA512 048a271b5d441e8a6356d42de9c384e9d43e4fe93b7b43677e4030239340812aa510d236b0d2fc037daf932c4ed277d7d338febd80ddc78f2afa3921a22918ba
- SSDEEP 49152:pmNk5akQzptkbKl71j3dlPeZStgfYbcbx:geu3dsAtYqc
- TLSH T144952A11B7519039F9FB01F78EFE60AC553CB9A0176850C7B2C859EE4B2AAE17D3160B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
572944
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\edif\MFX\Extensions\Unicode\DRPC_Full.pdb
kernel32
WaitForSingleObject
CreateEventW
CreateThread
SetEvent
GetFileAttributesW
DebugBreak
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
CopyFileW
OutputDebugStringA
MultiByteToWideChar
GetModuleFileNameA
GetLastError
LoadLibraryExW
GetFileAttributesA
SetEndOfFile
SetStdHandle
GetConsoleCP
FlushFileBuffers
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
lstrlenW
CreateFileW
ReadFile
WriteFile
CloseHandle
PeekNamedPipe
WaitNamedPipeW
GetCurrentProcessId
FormatMessageW
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
GetStartupInfoW
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
LoadLibraryW
RtlUnwind
HeapSize
HeapValidate
GetSystemInfo
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
ExitThread
ResumeThread
ExitProcess
GetACP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
HeapReAlloc
HeapQueryInformation
SetConsoleCtrlHandler
GetDateFormatW
RtlCaptureStackBackTrace
user32
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
AppendMenuW
CreatePopupMenu
CreateMenu
LoadStringW
MessageBoxA
GetMenuItemCount
mmfs2
ord366
ord638
ord587
ord286
ord264
ord137
ord753
ord344
ord520
ord585
ord401
ord355
ord34
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EditorDisplay
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
LoadRunObject
MakeIconEx
PauseRunObject
PrepareFlexBuild
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SaveRunObject
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
324KB
Virtual Size
323KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=259, version=24610,
count=175, id=261, version=24610,
count=26, id=260, version=24610,
count=23, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=123, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=33, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=5, id=261, version=25019,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=7, id=257, version=24610,
count=176, id=1, productName=Unmarked objects,
count=22, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=260, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
Undertale Last Breath Scrapped BETA/Modules/Easing.mfx
- IMPHASH a95ffd16cd26eb779016961aa86b3ba4
- SHA256 d0409d7558ef6b61574f5907179fd77e8b41553be0a588940243ffa2d1cdf9c2
- MD5 c3728db47cf34a1dd117c42511ae7213
- SHA1 8e006ab527da565312c9877effaa76ec17b440d2
- SHA512 f61e49ba1e1fe8d1e4c13605f34663b1bd25b16c8bc6adfe5de6dd443633a54881c0d105426c3c1d6cd9649a5a6380db9ab6859c9e1036f22a3f5bf95a0bbc85
- SSDEEP 3072:JwVg9FDqbIjXjmPoZ4+ABNEAg0FuQBNmAg0FuP5s7Xtby1D2r:JwVg9FDqbGXjVZ4ZiAO4EAOQUUr
- TLSH T1E7045A0165F2C972D5BE06750878AB460A7E79124BB5C9FF2BE45D4E4DB03C04EB2BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
27954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
HeapReAlloc
EnterCriticalSection
LCMapStringW
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
LocalFree
LocalAlloc
QueryPerformanceFrequency
LeaveCriticalSection
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapSize
Sleep
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
EncodePointer
DecodePointer
RtlUnwind
RaiseException
GetCommandLineA
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
IsDebuggerPresent
SetLastError
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
CreateFileW
user32
SetWindowLongA
GetWindowLongA
ScreenToClient
GetWindowRect
RedrawWindow
EndPaint
AppendMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
DestroyMenu
CreatePopupMenu
GetMenuState
GetMenuStringA
LoadMenuA
EnableWindow
IsDlgButtonChecked
CheckRadioButton
GetDlgItem
EndDialog
DialogBoxParamA
SendMessageA
wsprintfA
LoadStringA
BeginPaint
gdi32
RealizePalette
GetDeviceCaps
CreatePalette
SelectPalette
mmfs2
ord547
ord742
ord611
ord679
ord440
ord344
ord373
ord372
ord286
ord264
ord172
ord120
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
LoadRunObject
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SaveRunObject
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=205, version=50929,
count=112, id=206, version=50929,
count=39, id=207, version=50929,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=122, id=1, productName=Unmarked objects,
count=7, id=185, version=30716,
count=6, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Undertale Last Breath Scrapped BETA/Modules/Layer.mfx
- IMPHASH d82a75f35f09c2900baf6b3b35d9f046
- SHA256 b8612eb76d8967e49e9ba74a2cbd557096bacfbdb2c6e84d69d381b76d42052e
- MD5 ef12eb1b8b4a804bca741734787fdfd2
- SHA1 43b8f7571067bfd2d7762f6d5c69fb6978894f37
- SHA512 55c2aa823ff69bea48948b04912e1d31465d9a9817ef53fda2957d44451d58fdb2efcf3c40c8431d26d8663f70729e57bbddaeca848ab4d6658f0d5b211d2f2d
- SSDEEP 3072:JLkEGK6OJm7Y+VvdRTOIXsR6hkCXHip+glO2kkM/9W0Ol1OtKweNmfx6TJ:FkEZ5J8jVvSIcR1Cyp463fN
- TLSH T1AAE38C11B9D18032E9A71A31497C9A711AADB910BFB4DDDF535C523D0F703D0AA38BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
64:15:0f:6f:ad:e1:fb:5f:f8:25:d4:9b:e8:18:91:e5:d8:b8:7a:be
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
Chains
May 27, 2023
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
Serial Number
08:44:a1:db:15:21:35:40:ff:50:83:0f:00:86:1a:f6
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 5, 2023 - Feb 11, 2025
Minor OS version
1
Major OS version
5
Entry point
25975
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord1036
ord1048
ord945
ord76
kernel32
WriteFile
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
HeapAlloc
HeapFree
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
WriteConsoleW
ContinueRunObject
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
Initialize
PauseRunObject
SelectPopup
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UpdateEditStructure
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=118, id=243, version=40116,
count=24, id=242, version=40116,
count=31, id=261, version=26706,
count=15, id=260, version=26706,
count=18, id=259, version=26706,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=27044,
count=89, id=1, productName=Unmarked objects,
count=6, id=261, version=27049,
count=1, id=256, version=27049,
count=1, id=255, version=27049,
count=1, id=151,
count=1, id=258, version=27049,
Undertale Last Breath Scrapped BETA/Modules/OpenURLs.mfx
- IMPHASH 6039dc72b64f50f8676aefc3cb5494e1
- SHA256 f31ef0a0bc3e2af3fe69f0323182e92db005df2d639b6597de3e14abb23590d8
- MD5 03f4826273d8e050314aa2bd6da4bb80
- SHA1 2a2d4ab3340dcb516ddd0386ba6d7ed4384fb8a8
- SHA512 3287d0984f5908cb44fc38b99de3d1ae14fce087d97ca61f748aa13ca9f015ddba2f3a2148f1ca3bf473215ae7ba371407b78f78584d6fac85d5d3eb98f133fd
- SSDEEP 1536:BaCF4Hk5p4JGwea89pB+OAgEy7bJsHvXcFRiVs:b5pwk46GcFRiV
- TLSH T10B934913B590C072C04A9639C4679F696B7FBC109BA095CB7BA80A7F5FF03D27A35246
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
20662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalFree
LocalAlloc
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
user32
CreateMenu
LoadMenuA
DestroyMenu
GetMenuItemCount
AppendMenuA
GetMenuStringA
GetMenuState
CreatePopupMenu
GetSubMenu
GetMenuItemID
shell32
ShellExecuteA
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRegID
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=149, productName=VS2008 build 21022, version=21022,
count=90, id=131, productName=VS2008 build 21022, version=21022,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=88, id=1, productName=Unmarked objects,
count=43, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Undertale Last Breath Scrapped BETA/Modules/Perspective.mfx
- IMPHASH 08ed72ddb315dafa78128176088e9151
- SHA256 42285d953d9688e2d44f3b2a11d78b6a97ad3a26ed8042ab3a98527678e82bba
- MD5 2df0fc606f26c7261c67a0330e641740
- SHA1 2a2b47b8c3f5904c411f8ee20ed4d082987986b1
- SHA512 82fce30edec7a59119e482875e93d162c83448ccde435dae7407a4d67df556088fa8af4a716f6be8d78c2ba97125122b0d2f1ab4e6d55c32751f8e9a9eeccc02
- SSDEEP 384:xHvIlmiFdNdsXYo0CY5gb7G+RbfXAXLwPLwrBbI/u0W:xaF/aYUX7tSbwzwrS/uH
- TLSH T192B21893F3E0086AF1BB2A73497F072A9339BD626EB9D70E4651700C9E71711AD71322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11249
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
OutputDebugStringA
LocalFree
user32
LoadStringA
GetSubMenu
CreatePopupMenu
GetMenuState
GetMenuStringA
GetMenuItemID
AppendMenuA
GetMenuItemCount
DestroyMenu
LoadMenuA
wsprintfA
mmfs2
ord493
ord610
ord1014
ord341
ord756
ord343
ord417
ord1016
ord50
ord1003
ord982
ord34
ord487
ord172
ord286
ord344
ord679
ord611
ord440
ord372
ord264
msvcrt
_adjust_fdiv
malloc
_initterm
free
_ftol
sin
memset
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EditorDisplay
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SetEditSize
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
558B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=50, id=1, productName=Unmarked objects,
count=5, id=93, version=2179,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/TextSprite.mfx
- IMPHASH 02801ad0e8c100c16d02088fc06f71b5
- SHA256 a7ecbe39606b91a9b1a7f20fa2457e0738abfa388fcdc180125cdac96780743c
- MD5 4777c896f560bce201eebd4eac75aa67
- SHA1 17833aedd59736c841b3c61c4d1008ccf2b69777
- SHA512 092c8e185f3e1b89892882cd8d52a697ed562021e3a6a4738b52076ec29d74cf3d30f29ad161ad9627102e52971a6f62bbfd22061348d0bcbe1ef2c2f6545478
- SSDEEP 12288:Y5T5PZVkIQ5IconiHJQ/LW+lTlNnYTD18yLnG:YxPVq+3LW+5YTB8k
- TLSH T10C847D21B981C031D6BB38304578E6B20D7DA8302F789ACF6398597E6F745C1AA35B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
52214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\ts-okamoto\Desktop\cf25\#sdk\Fusion25SDK_winext\Extensions\TextSprite\Obj\Unicode\Run_Only\Template.pdb
kernel32
SetEndOfFile
WriteConsoleW
OutputDebugStringW
GetCurrentDirectoryW
HeapReAlloc
HeapSize
FlushFileBuffers
SetStdHandle
CreateFileW
GetStringTypeW
SetConsoleCtrlHandler
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapAlloc
SetFilePointerEx
GetFileSizeEx
GetConsoleCP
WriteFile
ReadConsoleW
GetConsoleMode
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
HeapFree
CloseHandle
DecodePointer
user32
MessageBoxW
wsprintfW
gdi32
SelectObject
TextOutW
StrokeAndFillPath
FillPath
EndPath
CreatePen
CreateSolidBrush
DeleteObject
GetGlyphOutlineW
GetTextMetricsW
SetBkMode
SetTextColor
BeginPath
mmfs2
ord34
ord1003
ord982
ord1030
ord1050
ord824
ord823
ord375
ord587
ord439
ord445
ord849
ord343
ord344
ord342
ord556
ord744
ord745
ord682
ord484
ord417
ord341
ord520
ord585
ord401
ord355
ord170
ord169
ord1072
ord39
ord487
ord493
ord372
ord286
ord264
ord172
msimg32
GradientFill
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
LoadRunObject
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SaveRunObject
SetEditSize
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
327KB
Virtual Size
327KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=26213,
count=149, id=261, version=26213,
count=19, id=260, version=26213,
count=16, id=260, version=26706,
count=17, id=259, version=26706,
count=33, id=261, version=26706,
count=2, id=257, version=27044,
count=9, id=257, version=26213,
count=134, id=1, productName=Unmarked objects,
count=5, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=258, version=27045,
Undertale Last Breath Scrapped BETA/Modules/Viewport.mfx
- IMPHASH 72a9bcc0925586bd3a595c657049ed7e
- SHA256 6844c309375856b2a0b10ff17f628969e51058468fb6ae8e4b1c992f62cf712d
- MD5 b7fe6d5636f6531d44a69bc5454d0c0e
- SHA1 4372f26fd43eb42d4e5fbbeb6a7a48c3fe2b0951
- SHA512 7bd88e496e7e3e199d2dc8046fd6ecf1af20c393089eb72f812214a3952360baafb18db4a098c957398b5fa8c36081fec0e67a5e0ba48fb90c000709ea402426
- SSDEEP 384:5O/Q5NdEyVhKC/txVd33+y1/Am/AFUZ8Z:/FtrROyBAsAOZ8Z
- TLSH T1C3823B02FBE0406BE4FB17B2A4BF01639775F9507A38FA094B82596C1E367565DB0336
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8787
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
OutputDebugStringA
LocalFree
user32
GetSubMenu
CreatePopupMenu
GetMenuState
GetMenuStringA
GetMenuItemID
AppendMenuA
GetMenuItemCount
DestroyMenu
LoadMenuA
wsprintfA
LoadStringA
mmfs2
ord493
ord487
ord172
ord610
ord343
ord849
ord702
ord401
ord697
ord699
ord50
ord1003
ord982
ord34
ord286
ord344
ord679
ord611
ord756
ord440
ord616
ord372
ord264
msvcrt
_adjust_fdiv
malloc
_initterm
free
_ftol
sin
abs
cos
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EditorDisplay
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SetEditSize
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
372B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=53, id=1, productName=Unmarked objects,
count=5, id=93, version=2179,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/aviflt.ift
- IMPHASH 71306f7eea1cffe44ecde8ca7a9eb18f
- SHA256 cb5f43c24df39973b983b7fda4abcef60f425061d880c7dd9514b501b84790f8
- MD5 97b3b613ed1f994389b1a963b6e781c9
- SHA1 13b38afdfd6ea283a2012bb8e5c652e13175440c
- SHA512 97cb23d76d926fe03573c127862b738217f91b0cb61517df7514597fdc50844ccb3d4f799b9a8b23b8da37a2b802ee2bd1e56b5e9fdb699bc3d511868ffd417c
- SSDEEP 96:MPg8rc9zp9HvjsedGNPUNAjtPq8y37QgavioyUuBdqaIZiMUj4epz5WY8FfH:MdcBvvjsedaPUctzyihSIZ80+dWBf
- TLSH T1D9B2B539B38205ABFF1A0E71989733B35730F9B09B9682D75F10E98D2C61613D819B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7563
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord815
ord544
ord482
ord485
ord549
ord518
ord583
ord349
ord347
ord358
ord817
ord589
ord237
ord270
ord357
ord11
ord334
ord360
ord729
ord479
ord538
ord574
ord577
ord579
ord463
ord514
ord528
ord531
ord376
ord706
ord727
ord331
kernel32
GetVersionExW
GetLastError
avifil32
AVIFileInit
AVIStreamOpenFromFileA
AVIStreamReadFormat
AVIStreamInfoW
AVIStreamInfoA
AVIStreamLength
AVIStreamRead
AVIStreamRelease
AVIFileExit
AVIStreamOpenFromFileW
msvfw32
ICClose
ICSendMessage
ICDecompress
ICLocate
msvcrt
__CxxFrameHandler
_adjust_fdiv
malloc
??3@YAXPAX@Z
free
??2@YAPAXI@Z
calloc
_initterm
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
346B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=6, id=93, version=2179,
count=58, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/bmpflt.ift
- IMPHASH 170db9ebe595f9cd844916df22bbd8d7
- SHA256 02d03c4847e34c9029cca452e37ada5ef40167406d4474a9393e11aace024c3d
- MD5 a73a9c8e91ef95cf4eabadf8f7334abf
- SHA1 763195d19f5467c593ab638dbdd0a0277a3048f3
- SHA512 cb5f451d8e637d466fec2dde865d5daac5a15ea44b6e2ce0506070c123ffad506f5f9739a9ea440f01c8f331cc9d42802cc14f82e1252ac667fa7318bcdf3acb
- SSDEEP 96:vw4ZE3IPfFPLM2MF9dDm47Rz9gB+pOvi6FXKxQM5/b:vw+E3IPNK9JP6EgqvGW/b
- TLSH T127B2D532A7D605B2EE978F3116A263325271FAF01BA0D3C74F94EA1E4D36443E8357A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7403
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord331
ord706
ord376
ord692
ord531
ord528
ord514
ord463
ord579
ord577
ord574
ord479
ord538
ord600
ord729
ord358
ord815
ord544
ord482
ord485
ord549
ord518
ord583
ord642
ord641
ord349
ord409
ord727
ord817
ord589
ord237
ord270
ord334
ord357
ord360
ord775
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
934B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
308B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=45, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/cctrans.dll
- IMPHASH 10f7671c7ae2b31eb10c6a797d2a33e9
- SHA256 55e75e784e436cccd978192fba869656f879f0f126e99b375c3849c99872ec56
- MD5 ce3a36f85d2ea504b6d19c5f366c3f47
- SHA1 972629c730b65c17ac2c751aafeb612d0c7432f2
- SHA512 c6df293b4373552c3165ac27f2070973a8278bc72001a8c10f300ea30699a03811dc6a84864ff22aaa2b35d1ec75d41ceb2a8fee85b5404d4a5bbfd8333f248c
- SSDEEP 3072:EjqYJijkm4k6wR/NQzjFEgYfriCJ+7NgGWb9UetPTztsYsRn:UqoY4sNQFE1fJZNTZxg
- TLSH T11FE35B00BAA08830E6FB543D08B5DBA52B7E79A4CFB08DDB2B54177D4E702C15F35A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d5:10:d9:1b:0e:fe:f4:d0:ca:dd:07:4a:40:60:4a:e6:00:42:0f:de
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam S.A.R.L.,O=Clickteam S.A.R.L.,L=BOULOGNE BILLANCOURT,ST=Paris,C=FR
Chains
Oct 23, 2020
CN=Clickteam S.A.R.L.,O=Clickteam S.A.R.L.,L=BOULOGNE BILLANCOURT,ST=Paris,C=FR
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Serial Number
71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Clickteam S.A.R.L.,O=Clickteam S.A.R.L.,L=BOULOGNE BILLANCOURT,ST=Paris,C=FR
Serial Number
6d:a5:3f:b9:e4:d2:d3:75:06:fc:f3:31:68:db:11:10
Issuer
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2018 - Dec 5, 2020
Minor OS version
1
Major OS version
5
Entry point
41786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord753
ord585
ord520
ord342
ord343
ord756
ord493
ord341
ord417
ord344
ord757
ord172
ord264
ord286
ord372
ord487
ord740
ord546
ord571
ord610
winmm
timeGetTime
user32
SetWindowLongW
GetWindowLongW
CheckRadioButton
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemInt
SendDlgItemMessageW
CheckDlgButton
wsprintfW
SetDlgItemTextW
LoadStringW
IsWindow
DestroyWindow
CreateDialogParamW
kernel32
InitializeCriticalSectionAndSpinCount
CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
CreateTransition
GetModuleID
GetModuleName
GetModuleType
GetTransCount
GetTransID
GetTransMode
GetTransName
IsUnicode
Name
.text
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=241, version=40116,
count=119, id=243, version=40116,
count=25, id=242, version=40116,
count=30, id=261, version=26706,
count=15, id=260, version=26706,
count=19, id=259, version=26706,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=27043,
count=119, id=1, productName=Unmarked objects,
count=24, id=261, version=27043,
count=1, id=256, version=27043,
count=1, id=255, version=27043,
count=1, id=258, version=27043,
Undertale Last Breath Scrapped BETA/Modules/clickteam-dragdrop.mvx
- IMPHASH 3b545875edca336e4c91b78919ea922d
- SHA256 b1f9227e4bd66a8a00bd50dbe088c25984443881dce16d168912f3ac282eb646
- MD5 7c3b681e4eea7724bc5346be05967f6a
- SHA1 73ca262186777c05bf2b02b040903ec5c0ea38ed
- SHA512 0d636cfda7780ebfea059dbe5b356755ac9e237aeb72f66bc0f9cb3f710481b9ab14898ed999ad5411d67b5ff67d79ace66770873faafecd2c67240a102c0d74
- SSDEEP 192:Tfxm5LcHAjzHvFyVWMNllqLdGVjQC04u2XAKQeXr:DxMztdo8n8XaG
- TLSH T150D20A82A3C650B1F1033D3A1DAE133F7625AE02A5C949576E6BD90BEE77401FC26326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8747
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAddAtomW
GlobalDeleteAtom
WriteFile
ReadFile
GetCurrentThreadId
user32
LoadStringW
GetKeyState
UnhookWindowsHookEx
RemovePropW
SetPropW
SetWindowsHookExW
GetPropW
CallNextHookEx
LoadIconW
mmfs2
ord70
ord77
msvcrt
_adjust_fdiv
_initterm
free
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
CreateMvt
GetMvtHelpFileName
GetMvtID
GetMvtIcon
GetMvtName
GetNumberOfMvts
IsUnicode
Name
.text
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
548B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=25, id=1, productName=Unmarked objects,
count=5, id=93, version=2179,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/fliflt.ift
- IMPHASH a97d8bdd63c6ba7900f6b409d8e5a0b9
- SHA256 4b651eaa60da09038984a9b7027826941f61f6da58d3f57d11349c8c1896a6d4
- MD5 91b37f29180a7bcca82dd4682d677b3d
- SHA1 bca27cb7ddb271e6649f264777e04970f5ad1276
- SHA512 2fb10952f2671e6a42a9748279aa94e9ce9b307d57d562f9ebbaaa88e27ca96eda36a5fa209df0f791adab7e8d896916b30330ba759b9278cac4bff43600d6e2
- SSDEEP 96:yGmPknHTCymEDV/P8JWYrP2YQaVfsOtUpHtdwReGp6FZiZz5Gu:b3nt1V/EJHrP2YPtsfttGzwidGu
- TLSH T1E1D22956E3D554F6E96B857052D75A339230BDB84F88CA8BCF51CE4D0C23242AC25BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8497
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord331
ord706
ord376
ord531
ord528
ord514
ord463
ord579
ord577
ord479
ord538
ord729
ord358
ord815
ord544
ord482
ord485
ord549
ord518
ord583
ord642
ord641
ord704
ord349
ord347
ord410
ord727
ord817
ord589
ord237
ord270
ord334
ord357
ord360
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_ftol
free
malloc
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
934B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
342B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=44, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/fontembed.mfx
- IMPHASH be501521b39bbd8041f2690b189ba5d1
- SHA256 fe31bbec80dce0cf6e5ec48493f3bc8dda68d30c514204674a5c59244c05809c
- MD5 2328b5d9fe439136d6b316c536e4f4ae
- SHA1 977f20a2ce9b3c4135740595a645b7bf16976a47
- SHA512 87b22669cd2c90a93fb9933666da04e095fbf604f273425c0c94fc711973c2f45ccad75bf25917f991e9cdcfa01f6f6bd19e8a0f58e76fb66b310531cefdaf57
- SSDEEP 384:Y0Ls5OfKYqXSIUjJgZslrC/CD0Q0nTZX4joPPS0nTZX4joPPEP:8mzFjYslrCFnXHX6P
- TLSH T15EB2EA417AB58AF2C99E5678285BF1362B3CED2137FAA0D34682B58E1F713D31834129
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
11337
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
LocalAlloc
SetUnhandledExceptionFilter
LocalFree
InterlockedExchange
GetSystemTimeAsFileTime
user32
LoadMenuA
DestroyMenu
CreateMenu
GetMenuItemCount
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
CreatePopupMenu
GetSubMenu
gdi32
AddFontResourceExA
RemoveFontResourceExA
msvcr90
realloc
??_U@YAPAXI@Z
__CxxFrameHandler3
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
_unlock
__dllonexit
free
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
malloc
_encode_pointer
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRegID
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
982B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=51, id=1, productName=Unmarked objects,
count=6, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Undertale Last Breath Scrapped BETA/Modules/gifflt.ift
- IMPHASH 12f8256339348c205f6d48bb4e491a8f
- SHA256 8fadc250c2afc00b0430c5df576cfd2d444367ad928027334c5d03829241cf92
- MD5 9a1a0b8e7045c06c47abeb52d861c377
- SHA1 6a1c36eb8354f62d5eab6d7c62316fd7d0e1aa92
- SHA512 918a672f82be50a42c237eeb361b971c724a1d7b11cab183dfd5125bdb7663cae588fa92b142dc99a88407a133bbe58bd7bc0c5c60d93287c470375fc094f079
- SSDEEP 192:KwanxqXUW6VDpwYMJP0R40392Wtcg4G9MsryrwfI:lUDiJ00WP9MOuw
- TLSH T163D21A4797544DB6E24582F0265E7B37467237A04FA18B47CCE1DE5E2C22282ED38B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9995
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord331
ord706
ord376
ord531
ord463
ord579
ord577
ord479
ord538
ord729
ord358
ord544
ord482
ord485
ord549
ord518
ord583
ord642
ord641
ord349
ord347
ord727
ord817
ord589
ord237
ord270
ord357
ord334
ord574
ord360
ord635
msvcrt
??3@YAXPAX@Z
free
??2@YAPAXI@Z
__CxxFrameHandler
realloc
calloc
malloc
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
934B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
346B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=42, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/jpgflt.ift
- IMPHASH dbbd88f111f221490799fbe41aeebecb
- SHA256 5bcaaff4c698581603d4165308260412b38ac6cf708486b53bda3bc76241098d
- MD5 ba4a1f5006fc3fc33f30e82a964cd7b3
- SHA1 8099283e645b6ef523757afdf552da3dc9b72924
- SHA512 8eaa1bae465a0ddd498372fcc9bd9c2b3bd9ba861abcc9158a0e3b8cf14f2a6fc8aae8fb129f96ea090c023247dec56524b2f42fa25239c08145dbe7c664a11e
- SSDEEP 1536:XVVotZiwEws9BGEumoVmLRhDeCKvmP7D50vBxJbdy01FLWdC:XUtZiLJ3GENTheRvu+HFLCC
- TLSH T1A9A36CC1BA8740F1D9852B7060ABA7739F391B07158FDB93D725ED625C23622FC253A8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77605
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord331
ord706
ord376
ord692
ord531
ord528
ord514
ord463
ord579
ord577
ord574
ord479
ord538
ord600
ord729
ord358
ord815
ord544
ord482
ord485
ord549
ord518
ord583
ord642
ord349
ord409
ord817
ord589
ord237
ord270
ord357
ord360
msvcrt
_ftol
exit
sscanf
getenv
malloc
free
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
76KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=50, id=1, productName=Unmarked objects,
count=46, id=48, version=9044,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/kcanim.mfx
- IMPHASH 7ad0da141aff6e9abbfaeea75a56498e
- SHA256 98fccdcd1bfe5f3b621d7472904df2e43f0f933ad13133ac0158702b2d98f079
- MD5 913cfd77a201854385bd6df283d2e594
- SHA1 e9bc389b1bf741e4b928806812cb4831415406fc
- SHA512 2886b734d56ad4ace8eaa746ba62686f7164ab776a8883b1e4de02c67f806110cf7f1698a3bb61e2e4f2d1027657970e6da54074519c4421de81af43506f0b52
- SSDEEP 192:RUkzK5wbjIbnqWIlJv4QN6xrs0VNwv0EOA33t1pVqGbVxu:RVjiqWIlGQN6xQjsFy1pV1bvu
- TLSH T189D2E782A29BFCA3C8475AB7D8BB02BEB73DDF90971EC9E34E64D11C1615305B02661D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11161
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetVersion
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
GlobalFree
ReadFile
WriteFile
user32
MessageBoxW
wsprintfW
LoadStringW
winmm
timeGetTime
mmfs2
ord78
ord384
ord480
ord515
ord818
ord272
ord356
ord1064
ord241
ord1023
ord1152
ord1148
ord1150
ord1039
ord496
ord458
ord472
ord403
ord337
ord713
ord524
ord558
ord662
ord657
ord658
ord1153
ord1149
ord1151
ord1040
ord497
ord459
ord473
ord404
ord338
ord714
ord525
ord559
ord674
ord672
ord676
ord668
ord666
ord670
ord673
ord667
ord671
ord675
ord665
ord669
ord663
ord659
ord660
ord398
ord445
ord372
ord172
ord487
ord34
ord401
ord264
ord519
ord584
ord539
ord645
ord792
ord791
ord249
ord1140
ord1144
ord1024
ord245
ord274
ord276
ord286
ord753
ord554
ord816
ord762
ord613
ord585
ord520
ord551
ord693
ord620
msvcrt
wcscpy
_adjust_fdiv
_initterm
malloc
wcslen
free
_wmakepath
_wsplitpath
calloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_wcsicmp
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditObject
EditorDisplay
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetPropCheck
GetPropValue
GetProperties
GetRunObjectCollisionMask
GetRunObjectDataSize
GetRunObjectInfos
GetRunObjectSurface
HandleRunObject
IsPropEnabled
LoadObject
LoadRunObject
MakeIconEx
PauseRunObject
ReInitRunObject
SaveRunObject
SetPropCheck
SetPropValue
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
328B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
772B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=257, version=27044,
count=110, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/kcedit.mfx
- IMPHASH 7151a7218ab54b5257a153c7e592ff93
- SHA256 1fb56c1a5fb313c8c51fead10472566328c9260aacc72aa8dde8d345acf53203
- MD5 62f67209e7995da3f14f4b697235a99b
- SHA1 158248b41de5449ef647a2caeda431dc544aa59d
- SHA512 3857939c51b5045030df233393597b9b56a0534a2ea570d748a002b19b0b20de16b0d5181cf9eb6180d24b4de0a159e21275d12bdc7673a3f891ce155db42325
- SSDEEP 384:w1Ye/oItJWae34vFRVBX5xDEECeyHoPy0KYKmI:ivQ2JBrL50eqoHKY1I
- TLSH T146E2B202ABA20811E5F69D357C7FB776A5B7BD821A3AD5074520DD3D2932607EC2CB23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13329
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
GlobalAlloc
GlobalFree
WriteFile
GlobalFindAtomW
ReadFile
user32
InvalidateRect
SetWindowLongW
SendMessageW
GetWindowRect
CreateWindowExW
DestroyWindow
UpdateWindow
ShowWindow
SetWindowPos
MapWindowPoints
GetParent
SetFocus
GetSysColor
LoadStringW
SetWindowTextW
GetFocus
GetKeyState
CallWindowProcW
EnableWindow
GetWindowTextLengthW
GetWindowTextW
GetClientRect
GetPropW
gdi32
BitBlt
CreateFontIndirectW
DeleteObject
RealizePalette
SelectPalette
SetBkColor
GetStockObject
SetTextColor
SetBkMode
CreateSolidBrush
comdlg32
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
ChooseFontW
mmfs2
ord47
ord16
ord30
ord28
ord1075
ord1076
ord17
msvcrt
free
wcscpy
calloc
wcsspn
wcscat
wcsncpy
wcslen
_wtol
_ftol
malloc
_adjust_fdiv
_initterm
ContinueRunObject
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditDebugItem
EditorDisplay
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetPropCheck
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectFont
GetRunObjectInfos
GetRunObjectTextColor
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
Initialize
IsPropEnabled
LoadRunObject
PauseRunObject
ReInitRunObject
SaveRunObject
SetEditSize
SetPropCheck
SetPropValue
SetRunObjectFont
SetRunObjectTextColor
SetTextAlignment
SetTextClr
SetTextFont
UpdateEditStructure
WToA
WindowProc
Name
.text
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=257, version=27044,
count=65, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/kcini.mfx
- IMPHASH e2787d9a548bd0a3d6305062f94cc683
- SHA256 d1471b2685d45956c323baa2cab11dfe479eb1021f04e2949f03557527c5fc84
- MD5 7c0cb7fdc0d3519520cd4b8137edbd80
- SHA1 bd4eddd8316a51baf4a3ae68b56acfbba734f46c
- SHA512 601c16892bef77d5842e0778f27d4f82e19ae66333b2b75c9a34b3ba6441169946e1167ceb21ed270bddba305abfe50f2e8f8ab2e9dc410c96a31944e597034a
- SSDEEP 3072:pMHMC6xa0D4hBC3lwTu45NI6WRZG3vR5ULU:pMHMCIMhrlrJlRF
- TLSH T145B36C50B682C431E5BE0A314878EFA98A7DB9500F714DFB6398026D4F346D26F35E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
29503
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WriteFile
ReadFile
FindClose
OpenFile
GetPrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
GetWindowsDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindFirstFileW
CopyFileW
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
SetEnvironmentVariableW
CreateDirectoryW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapAlloc
HeapFree
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
CreateFileW
user32
wsprintfW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditDebugItem
EditObject
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetPropCheck
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectInfos
HandleRunObject
Initialize
IsPropEnabled
LoadRunObject
PauseRunObject
ReInitRunObject
SaveRunObject
SetPropCheck
SetPropValue
UpdateEditStructure
UpdateFileNames
UsesFile
WToA
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=125, id=243, version=40116,
count=24, id=242, version=40116,
count=16, id=260, version=26706,
count=18, id=259, version=26706,
count=31, id=261, version=26706,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=116, id=1, productName=Unmarked objects,
count=3, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Undertale Last Breath Scrapped BETA/Modules/kclist.mfx
- IMPHASH a5c593c4385b38deaa1e81d1b807f282
- SHA256 c83bcec56f1666d6871e077cc54d0ee7f6462773c03afbb301b9180a4ad0a31a
- MD5 de7d289ea419cc82784cefc87e652c70
- SHA1 9035cf539cd9d3c14fdda73eb2c23452750cfade
- SHA512 f02d5aa3822218517d3c6f9114f0fb90c37ed7281ab09f3a868f251e2975d6da10bd1616a9e13eab0e1f138f2bd2e7953686d3cf7e18e2a67b1bba9fbd762ea0
- SSDEEP 192:lME7dUtmvkkZx+CjaAGnI2469E+750SXv+rKaw6OXOGS3xy8z5m9m:mE7dUTMeAuxWw5aYXOGShy8zs
- TLSH T107E239A39B426CA6CEC64C78DC9F353BE328DED747CD588305E2C9391662116BC14BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13969
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
GlobalLock
MultiByteToWideChar
GlobalUnlock
GlobalAlloc
MulDiv
FindFirstFileW
FindNextFileW
FindClose
ReadFile
WideCharToMultiByte
WriteFile
user32
GetSysColor
InvalidateRect
SetFocus
GetDC
wsprintfW
GetWindowDC
ReleaseDC
GetFocus
GetPropW
EnableWindow
GetClientRect
SetWindowPos
ShowWindow
UpdateWindow
DestroyWindow
CreateWindowExW
SendMessageW
gdi32
CreateSolidBrush
DeleteObject
SetBkColor
SetBkMode
SetTextColor
EnumFontFamiliesExW
GetDeviceCaps
EnumFontFamiliesW
CreateFontIndirectW
mmfs2
ord47
ord17
ord1076
ord1075
ord16
msvcrt
wcslen
_ftol
free
wcscpy
wcscat
swprintf
calloc
_initterm
_adjust_fdiv
malloc
ContinueRunObject
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditObject
EditorDisplay
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetPropCheck
GetPropValue
GetProperties
GetRunObjectDataSize
GetRunObjectFont
GetRunObjectInfos
GetRunObjectTextColor
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
IsPropEnabled
LoadRunObject
PauseRunObject
ReInitRunObject
SaveRunObject
SetEditSize
SetPropCheck
SetPropValue
SetRunObjectFont
SetRunObjectTextColor
SetTextClr
SetTextFont
UpdateEditStructure
WToA
WindowProc
Name
.text
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
644B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=257, version=27044,
count=55, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=2, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/mmf2d3d8.dll
- IMPHASH 64b0686318eee36fb6b5e0aeeba27718
- SHA256 9cba4d670209c69039d0d92598aab6d916d9fbd215b634012ff9cef55bfaf559
- MD5 59aeab50440b9f50389a997bc6c44866
- SHA1 61e7a377a98df935bc4a0c94776cf8e4b49c4cb8
- SHA512 fd0c8a94d47af3149ac32406294c4ef25e741249126e0fdd0f8e3ea46a7a85e83921edd08d26b17beec00afe102bb9a897664e17da58e8c2ece2d277e058275f
- SSDEEP 12288:FET+JrnmtBKpjh7RhObbSstL7pDt35JXF/GRK:FA+Jrakjh710HpDt3nVuRK
- TLSH T174A4BE00B5D28432C0FB0630056D6BAB77BE6E204B5CD9DBABD859BF2E701C55732796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
fb:80:97:cd:2c:62:ef:b6:15:81:d8:a9:14:ce:d6:f1:9c:dc:58:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Chains
Feb 25, 2022
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Serial Number
05:06:71:9c:4a:1a:31:e2:5f:f2:72:51:72:f1:b6:3c
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2020 - Jan 8, 2023
Minor OS version
1
Major OS version
5
Entry point
208487
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord397
ord395
ord751
ord568
ord610
ord286
ord264
ord1112
ord1111
ord1110
ord971
ord969
ord978
ord1095
ord966
ord965
ord1018
ord962
ord961
ord1138
ord960
ord1107
ord956
ord955
ord952
ord951
ord950
ord949
ord977
ord947
ord946
ord903
ord943
ord941
ord940
ord1001
ord396
ord836
ord838
ord925
ord844
ord924
ord968
ord855
ord394
ord981
ord1137
ord1100
ord845
ord846
ord850
ord851
ord852
ord939
ord938
ord937
ord936
ord935
ord1005
ord934
ord1103
ord933
ord932
ord1002
ord931
ord930
ord1109
ord928
ord624
ord926
ord922
ord921
ord920
ord919
ord918
ord1102
ord917
ord995
ord915
ord912
ord993
ord992
ord908
ord907
ord906
ord987
ord904
ord1015
ord902
ord899
ord898
ord892
ord891
ord890
ord889
ord888
ord887
ord886
ord879
ord877
ord1013
ord874
ord973
ord873
ord872
ord871
ord870
ord869
ord1090
ord868
ord1136
ord863
ord862
ord861
ord860
ord857
ord854
ord853
d3d8
Direct3DCreate8
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
DecodePointer
GetStringTypeW
HeapAlloc
GetACP
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
IsProcessorFeaturePresent
WriteFile
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetProcessHeap
HeapFree
CloseHandle
GetVersionExA
CreateFileW
GetLastError
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentThreadId
MultiByteToWideChar
Sleep
user32
DrawTextW
DrawTextA
GetMonitorInfoA
MonitorFromWindow
SystemParametersInfoA
GetParent
SetWindowLongA
GetWindowLongA
OffsetRect
ShowWindow
ReleaseDC
GetDC
DrawTextExW
GetSystemMetrics
SetWindowPos
GetWindowRect
gdi32
SetBkColor
DeleteDC
CreateDIBSection
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
SetBkMode
SetTextColor
SelectObject
GetObjectA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
SEFree
SEGetSIPrototype
SEInitialize
Name
.text
Size
313KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=241, version=40116,
count=130, id=243, version=40116,
count=29, id=242, version=40116,
count=17, id=260, version=26706,
count=21, id=259, version=26706,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=25, version=9210,
count=1, id=28, version=9178,
count=1, id=18, version=8444,
count=90, id=29, version=9178,
count=8, productName=Unmarked objects (old),
count=3, id=257, version=27045,
count=255, id=1, productName=Unmarked objects,
count=34, id=261, version=26706,
count=5, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=258, version=27045,
Undertale Last Breath Scrapped BETA/Modules/mmf2d3d9.dll
- IMPHASH 180c83ab59795576d7f7665df0409410
- SHA256 3cde7a9181ab63a42cd3535d279d0ab1397b7b78fa3ddddef832757ab2024101
- MD5 72bb9180f8905c0da95566b778cdac5e
- SHA1 e96145e8120514092b35f67f1f120b958997f921
- SHA512 c2c8d8c74c53a78545e69f27a7fe1a6d1291888158962e93e16e6ec9950f86e74c68bd2eb50d04db0bff58e8dc93455aa384245991c5afe34abee36fef53710f
- SSDEEP 24576:EE6cfv6jilsTCw8RCmttZtcJPFGySBDmXA4HwLSJcl:CyA8omXGSFmdkl
- TLSH T14135BE51F292C036C0AB23710657A3B932BDAF251D7585CB1A88BDBA3F345E147293DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d5:63:e3:05:16:c5:02:56:ce:72:6c:97:3e:4e:65:0c:5a:21:38:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Chains
Jan 3, 2023
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Clickteam SARL,O=Clickteam SARL,L=Boulogne Billancourt,ST=Ile de France,C=FR
Serial Number
05:06:71:9c:4a:1a:31:e2:5f:f2:72:51:72:f1:b6:3c
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2020 - Jan 8, 2023
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Minor OS version
1
Major OS version
5
Entry point
786425
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord397
ord395
ord751
ord568
ord610
ord286
ord264
ord1112
ord1111
ord1110
ord971
ord969
ord978
ord1095
ord966
ord965
ord1018
ord926
ord396
ord836
ord838
ord925
ord844
ord924
ord968
ord855
ord394
ord981
ord1137
ord1100
ord845
ord846
ord850
ord851
ord962
ord961
ord1138
ord960
ord1107
ord956
ord955
ord952
ord951
ord950
ord949
ord977
ord947
ord946
ord903
ord943
ord941
ord940
ord939
ord938
ord937
ord936
ord935
ord1005
ord934
ord1103
ord933
ord932
ord1002
ord931
ord930
ord1109
ord928
ord1001
ord624
ord922
ord921
ord920
ord919
ord918
ord1102
ord917
ord995
ord915
ord912
ord993
ord992
ord908
ord907
ord906
ord987
ord904
ord1015
ord902
ord899
ord898
ord892
ord891
ord890
ord889
ord888
ord887
ord886
ord879
ord877
ord1013
ord874
ord973
ord873
ord872
ord871
ord870
ord869
ord1090
ord868
ord1136
ord863
ord862
ord861
ord860
ord857
ord854
ord853
ord852
d3d9
Direct3DCreate9
kernel32
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
DecodePointer
GetStringTypeW
GetACP
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetStdHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
VirtualQuery
EncodePointer
SetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
GetConsoleCP
FindClose
SetFilePointerEx
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlushFileBuffers
WriteConsoleW
HeapSize
HeapReAlloc
FreeLibrary
GetFullPathNameA
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiA
WriteFile
OutputDebugStringA
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileA
CreateFileMappingA
GetFileSize
MapViewOfFile
Sleep
MultiByteToWideChar
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetVersionExA
WideCharToMultiByte
GetSystemInfo
IsProcessorFeaturePresent
LoadLibraryA
GetModuleHandleA
GetProcAddress
VirtualFree
VirtualAlloc
InterlockedExchange
InterlockedCompareExchange
GetLastError
user32
GetMonitorInfoA
MonitorFromWindow
SystemParametersInfoA
GetParent
SetWindowLongA
GetWindowLongA
OffsetRect
GetWindowRect
ShowWindow
GetDC
GetTabbedTextExtentW
DrawTextExW
GetSystemMetrics
SetWindowPos
ReleaseDC
gdi32
CreateDIBSection
DeleteDC
DeleteObject
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetGlyphOutlineA
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
ExtTextOutW
GetTextMetricsA
GetObjectW
GetTextMetricsW
SelectObject
GetObjectA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
SEFree
SEGetSIPrototype
SEInitialize
Name
.text
Size
877KB
Virtual Size
876KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
168KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=241, version=40116,
count=151, id=243, version=40116,
count=34, id=242, version=40116,
count=20, id=260, version=26706,
count=23, id=259, version=26706,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=95, version=2067,
count=6, id=18, version=8444,
count=126, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=257, version=27048,
count=273, id=1, productName=Unmarked objects,
count=34, id=261, version=26706,
count=5, id=261, version=27048,
count=1, id=256, version=27048,
count=1, id=255, version=27048,
count=1, id=258, version=27048,
Undertale Last Breath Scrapped BETA/Modules/mmfs2.dll
- IMPHASH fb76a0ebed426f70a384439c25a3c837
- SHA256 6c9ff6036404e71b0bc2c12bc739eeef0d9200925f5796487af2aa4ef5c5ef97
- MD5 1e0e5acec2f2d3567c40491e39aa8f50
- SHA1 101ec3bbd32c005b12b38c0f7988faa9329a019f
- SHA512 80bbdd2dcc44494a53b14098b7e99db7c20b40650938454105b423e70906ad7371274ed73d3fccd114b9396112a695aebf37f6916976a972154cd562d10e01de
- SSDEEP 12288:tl2w5SNFe2TMNMfeZJyxqNEQ8W7zf+IL2SUoOHxwVoipcVDNLTrgLiFs+:edNFe2TMNMG4qNEQ8W7zGWYd1DLTEWy+
- TLSH T198B4AE10B982C231E4EA51B28AFDBFBE152C677047B858D75B4859BD1D301E32F3266B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
bf:e3:ab:6d:70:47:a9:85:28:35:06:1e:41:52:b0:f8:38:c5:e4:a0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
Chains
Nov 9, 2023
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=Clickteam SAS,O=Clickteam SAS,L=Boulogne Billancourt,C=FR
Serial Number
08:44:a1:db:15:21:35:40:ff:50:83:0f:00:86:1a:f6
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 5, 2023 - Feb 11, 2025
Minor OS version
1
Major OS version
5
Entry point
357370
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeSetEvent
timeGetTime
mciSendCommandW
mciSendCommandA
timeKillEvent
ddraw
DirectDrawCreate
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
LCMapStringW
DecodePointer
GetProcessHeap
HeapReAlloc
GetACP
GetStdHandle
HeapAlloc
GetModuleHandleExW
ExitProcess
HeapCompact
HeapSize
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetVersion
InterlockedExchange
LocalFree
LocalAlloc
WriteConsoleW
SetErrorMode
GetCurrentProcessId
FindResourceA
GetSystemInfo
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentThreadId
FreeResource
CreateFileW
CreateFileA
CloseHandle
SetFilePointerEx
SetFilePointer
ReadFile
WriteFile
GetLastError
GetVersionExW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
LoadLibraryW
LoadLibraryA
FindClose
GetProcAddress
FreeLibrary
GetVersionExA
FindResourceW
LoadResource
LockResource
Sleep
GetModuleFileNameA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WideCharToMultiByte
MultiByteToWideChar
HeapFree
user32
GetWindow
SetActiveWindow
RegisterClassExA
RegisterClassA
PeekMessageA
DispatchMessageA
TranslateMessage
ChangeDisplaySettingsA
ClientToScreen
GetClassNameA
GetWindowDC
CreateIconIndirect
IntersectRect
DrawTextExW
DrawTextExA
SetRect
LoadStringW
LoadStringA
SetDlgItemTextW
GetWindowLongA
GetSysColor
ScreenToClient
MessageBoxW
InvalidateRect
SetDlgItemTextA
SetDlgItemInt
GetDlgItem
ShowWindow
DrawEdge
wsprintfW
CopyRect
DrawFocusRect
SendMessageW
DefMDIChildProcW
DefMDIChildProcA
DefFrameProcW
DefFrameProcA
GetClassNameW
GetParent
FillRect
EndPaint
BeginPaint
IsIconic
DefWindowProcW
DefWindowProcA
EnumDisplaySettingsA
LoadCursorA
SetWindowLongW
SetWindowLongA
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
ReleaseDC
GetDC
SetMenu
GetSystemMetrics
GetKeyboardState
SetWindowPos
DestroyWindow
CreateWindowExW
CreateWindowExA
SendMessageA
gdi32
BitBlt
SetDIBits
SelectClipRgn
IntersectClipRect
GetDIBits
GetClipRgn
DeleteDC
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
ExtTextOutW
ExtTextOutA
GetObjectW
GetObjectA
SetTextAlign
SetTextColor
GetTextAlign
CreateFontIndirectW
StretchBlt
RealizePalette
GetPaletteEntries
CreatePalette
GdiFlush
Polyline
SetROP2
SetBkMode
SetBkColor
SelectObject
Rectangle
GetClipBox
SetPixel
SelectPalette
GetSystemPaletteEntries
GetStockObject
GetPixel
GetDeviceCaps
DeleteObject
CreateFontIndirectA
StretchDIBits
MoveToEx
Polygon
CreateDIBSection
SetDIBColorTable
SetWindowOrgEx
CreateSolidBrush
Ellipse
CreateHalftonePalette
CreatePen
LineTo
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameA
dsound
ord1
Name
.text
Size
405KB
Virtual Size
405KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=241, version=40116,
count=124, id=243, version=40116,
count=27, id=242, version=40116,
count=15, id=260, version=26706,
count=20, id=259, version=26706,
count=36, id=261, version=26706,
count=11, id=260, version=27049,
count=6, productName=Unmarked objects (old),
count=2, id=25, version=9210,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=235, id=1, productName=Unmarked objects,
count=3, id=259, version=27049,
count=48, id=261, version=27049,
count=1, id=256, version=27049,
count=1, id=255, version=27049,
count=1, id=151,
count=1, id=258, version=27049,
Undertale Last Breath Scrapped BETA/Modules/mp3flt.sft
- IMPHASH f4e44e69456f6a20409ba6250920533d
- SHA256 ddeafda7b28bf7545e3ba164aa4a74219eb961c36bb974e0f5085a07daf18f44
- MD5 dadc138be9d36e6e4b8e4bf9ef2de4bc
- SHA1 2758db786c544ec7889f26edf9bc4634c9240af0
- SHA512 63a21c5eda225c7fb8a67595c3180d4fdc1bc37d3b45f839e1b562ef946bf5b2237a9ff17c3f6f5de489779bbb9652ac2a1a74b83f153883bd436756acf249e1
- SSDEEP 96:YDe4ApKjaU5qIu9my5F3hM+EX0025ZpMx07/nYwHZLoDK585qQ+5l:YDhAc2uXw32rX0ffMxdINoD5zEl
- TLSH T1E3B21A22B7A50CF6E1564E317DDB0377A57AFF9457A462479E82C23D0C33A02981B673
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7623
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord259
ord283
ord738
msacm32
acmStreamPrepareHeader
acmStreamClose
acmStreamSize
acmStreamOpen
acmMetrics
acmStreamUnprepareHeader
acmStreamConvert
msvcrt
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
free
calloc
_ftol
_initterm
malloc
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
GetPriority
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=93, version=2179,
count=25, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/oggflt.sft
- IMPHASH 8c071a971a35f2e806d3d72ab5fda000
- SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
- MD5 0c8c1ee3ba92189f4ce21d1b396a2765
- SHA1 b7daa4a6e16416151dccbb0a89f304961b6cb627
- SHA512 0a4339092ac55bac3b1bdfaaa3401020f8f49918bd2fdb14524f3d558eb840b876aedfdeb54a1da163fa36393abf3fe8ab7e112a34ea9d891e82a22e96c85ddc
- SSDEEP 1536:Ww+JHBmul5IMIPkmLnFfUs3OF+KQ51PGTUBHnEJj0AtDLPJwdMSIiRaEUsXxTTUI:CCul5jEkSbOF+31PGTUBwoA8uMR0IjD
- TLSH T142D39E529687A0FEE8CE1978146F367FDE261A0D7218CD539314EEF69C61E10BE1930B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70737
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord259
ord283
ord738
msvcrt
malloc
realloc
memmove
free
memchr
floor
_ftol
calloc
qsort
exit
frexp
ceil
_CIpow
ldexp
_errno
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=35, id=1, productName=Unmarked objects,
count=22, id=48, version=9044,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/parser.mfx
- IMPHASH 6eb326f7007c388919c23a3aabddc127
- SHA256 19417d80bbcf961e4941ad9fc839a7f266fa58cc6156ccb012c9a09eb4929054
- MD5 aecd3e2e63217d6fe7f15e950555f9bc
- SHA1 9fc29cd71decdceaed7da262e09b498a3fb21dbb
- SHA512 03cbf4b6253029008112883209ccd1713303b2ee0ab2aac91d975083c0c2019f3f5b4f5feda8365082b7ce498d1222b8f05506377eb75c5eda3865e0e49c2ddc
- SSDEEP 768:IGuqbXplBuz1ZLKB2n7VWC1Kuqeth3wmG5j:IabBuz1Z14C1Kuqeth3wmG5j
- TLSH T19313F61593D100B2EABA1D79197F1A32BA31FC861B7682DF5321DC3959722A5EC3132B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24033
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
LocalFree
user32
LoadMenuA
DestroyMenu
GetMenuItemCount
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
CreatePopupMenu
GetSubMenu
GetWindowLongA
EndDialog
GetDlgItemTextA
IsDlgButtonChecked
SetWindowLongA
SetDlgItemTextA
CheckDlgButton
DialogBoxParamA
LoadStringA
msvcrt
_adjust_fdiv
_initterm
_ltoa
isalnum
isspace
realloc
_read
_open
_write
_close
_itoa
_strlwr
_strupr
strncpy
malloc
_strnicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
tolower
_stricmp
strncmp
strtok
ContinueRunObject
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditObject
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetRunObjectDataSize
GetRunObjectInfos
HandleRunObject
PauseRunObject
ReInitRunObject
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
650B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=46, id=1, productName=Unmarked objects,
count=5, id=93, version=2179,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/pcxflt.ift
- IMPHASH 5bc99a60c87ad3f48e853bfa515bd95b
- SHA256 c9e1db8689c11a87f9ab30ebc705eeccc0fbd909ca493a6f589d6a9a5c2a1b15
- MD5 56f80b514fa7cc1dd7fb24ef195c30eb
- SHA1 e61d7dcbbb623219c625bc67ed0f382f26308600
- SHA512 f391e04bd3e67317b3bb1f9541c94782d14e8b8287f5fd3e2f753688d85cc38bf5164c8faa5dc85b8c44a480f81462a4ddc16aafe64313601d21a608b546e721
- SSDEEP 48:CGVoIxd/dFALrcgFTudzDVQLwYdHf29btyU+CgjENjwXmwG8gjw6FnpJ0nwwlums:x/uq/YNufyU+9kw3CE6Fnn0wKJz5mB
- TLSH T1A8B29433B3A605B6EF5B4E7065E2A2335775B9E05FA8C2871F41EA9D1C26943EC20713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5947
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord331
ord706
ord376
ord692
ord531
ord528
ord514
ord463
ord579
ord577
ord574
ord479
ord538
ord600
ord729
ord358
ord815
ord544
ord482
ord485
ord549
ord518
ord583
ord642
ord641
ord349
ord347
ord409
ord727
ord817
ord589
ord237
ord270
ord334
ord357
ord360
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
GetPriority
Name
.text
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
956B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
302B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=45, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/pngflt.ift
- IMPHASH bd36738c7a82e43a1deb87054f1744d9
- SHA256 df948630fdb53ddad68d66994f5d2b18a67df32478b6b8b3720c28f40bde7b1f
- MD5 d57365ca275388910be7b09d95ee65b9
- SHA1 477e9afa81c0ba97323be56d15ade8fb17c45d78
- SHA512 b6a7266c47245cdd5ccc1e4c1b490a22996cac3db53500405354d1a5892896f66aba255ff725808770489a199626a844a86cb80e081a47ed27671bd82ca1cfbb
- SSDEEP 6144:1wgm0uEIwmYcu8zvsLe7RyAObcAOa8qYF:1wgm0uEIJ97RyKCYF
- TLSH T18554AE52B4E2C033E4F60271B47C9B7A0A7D3A32137DC4FB6BD819986D342E1A635766
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
138543
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord729
ord727
ord706
ord692
ord642
ord641
ord600
ord589
ord583
ord817
ord579
ord577
ord574
ord815
ord549
ord544
ord538
ord531
ord528
ord518
ord514
ord485
ord482
ord479
ord463
ord409
ord376
ord358
ord349
ord331
ord360
ord334
ord357
ord270
ord237
ord210
ord213
ord207
ord209
ord219
ord217
ord216
ord226
ord206
ord220
kernel32
SetUnhandledExceptionFilter
CreateFileW
LCMapStringW
HeapSize
WriteConsoleW
SetFilePointerEx
LoadLibraryW
OutputDebugStringW
GetStringTypeW
HeapReAlloc
LoadLibraryExW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
DeleteFileW
GetConsoleCP
WideCharToMultiByte
FlushFileBuffers
ReadConsoleW
GetConsoleMode
ReadFile
GetModuleFileNameW
WriteFile
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
InterlockedIncrement
GetFileType
GetStdHandle
Sleep
ExitProcess
GetLastError
HeapFree
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RaiseException
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
EncodePointer
DecodePointer
CloseHandle
UnhandledExceptionFilter
SetEndOfFile
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
InterlockedDecrement
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
DeleteCriticalSection
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
Name
.text
Size
194KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=207, version=50929,
count=30, id=205, version=50929,
count=145, id=206, version=50929,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=127, id=1, productName=Unmarked objects,
count=15, id=206, productName=VS2012 UPD4 build 61030, version=61030,
count=3, id=207, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Undertale Last Breath Scrapped BETA/Modules/tgaflt.ift
- IMPHASH 5bc99a60c87ad3f48e853bfa515bd95b
- SHA256 756725f247592504d42c67257c3957e972ee490af06f12b00467b389e0ee6bbc
- MD5 00a5f50c4a0f8a2c8704fb0640dfcfb6
- SHA1 960ff3909de1395de49bd9f36600b989851591ea
- SHA512 2be74193a33f1b70f39be9a5565326d425ce02b6eb98b783f8749a209b95fdcbe8724c38c9dbd33e4a12b40756c5ad9177e557f62748b52be2cd7c4bc344b577
- SSDEEP 96:Ew31ACNxdaqSRKuUyU+xfE6FoQJz5mpn4/:ErCNxxZ0SFUdmpn4/
- TLSH T1BCB2B43167AA1AB7EF970E3824FA62335779B9B01BE0C7864F80C61E0C36543ED51722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6603
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord331
ord706
ord376
ord692
ord531
ord528
ord514
ord463
ord579
ord577
ord574
ord479
ord538
ord600
ord729
ord358
ord815
ord544
ord482
ord485
ord549
ord518
ord583
ord642
ord641
ord349
ord347
ord409
ord727
ord817
ord589
ord237
ord270
ord334
ord357
ord360
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
934B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=45, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/txtblt.mfx
- IMPHASH 1752a693d7a4ab0f62360cef67954579
- SHA256 2aa0648b598998286ec19139dcb0d674b34763072ed4d61b8abcc3d76a5f4dd9
- MD5 9bd25734fc8cb60669deff0932feb4a4
- SHA1 d4fcdbeb9163b12aebebac297181c0e793bcd606
- SHA512 ee216029cefac6e4ac08f88a577642f2d94ac14afae6a0ae608fe229bcb20a49e472aac698b697048861dadf78b977e7c303f969594435932b9d8b5f1688da23
- SSDEEP 1536:qDvW3Wr7MEB5pLTyeN8s8W3g6vIEOnZIaM7FjsHEg+JAiZKVU:U3MENX8xWv2ZIH7FQ6JAiZKVU
- TLSH T137C3B5527FE58450F0B61E75587A27B26B31FC629A75C70F1A20F90EECF16C29C14BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45217
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
ReadFile
WideCharToMultiByte
WriteFile
GetModuleFileNameA
CreateFileA
CloseHandle
LocalAlloc
LocalFree
GlobalAlloc
FindResourceA
SizeofResource
LoadResource
LockResource
GetFileSize
FreeResource
user32
MessageBoxA
DialogBoxParamA
SetScrollPos
TrackPopupMenu
LoadStringA
DestroyMenu
GetMenuItemCount
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
CreatePopupMenu
GetParent
SetWindowPos
SetRect
EnableWindow
ShowWindow
IsDlgButtonChecked
CheckDlgButton
GetWindowLongA
GetDlgItem
GetWindowTextLengthA
BeginPaint
GetWindowRect
ScreenToClient
GetDlgItemInt
GetSysColor
GetDlgItemTextA
EndPaint
SetWindowLongA
SendMessageA
SetDlgItemTextA
SetDlgItemInt
SetWindowTextA
EndDialog
GetWindowTextA
InvalidateRect
LoadMenuA
GetSubMenu
gdi32
CreateFontIndirectA
RealizePalette
SelectPalette
CreatePalette
GetDeviceCaps
GetStockObject
SetBkColor
SetTextColor
CreateSolidBrush
SetBkMode
DeleteObject
comdlg32
GetSaveFileNameA
ChooseFontA
GetOpenFileNameA
ChooseColorA
shell32
ShellExecuteA
mmfs2
ord520
ord343
ord170
ord373
ord344
ord585
ord610
ord50
ord487
ord493
ord554
ord691
ord753
ord140
ord401
ord423
ord245
ord363
ord137
ord274
ord611
ord414
ord679
ord745
ord34
ord724
ord620
ord169
ord445
ord547
ord742
ord120
ord372
ord264
ord172
ord711
ord342
ord162
ord756
ord762
ord354
ord37
ord286
ord45
ord158
ord163
ord160
ord152
ord411
msvcrt
strncpy
strrchr
free
malloc
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
calloc
_strdup
_ftol
_initterm
_adjust_fdiv
_strupr
_strlwr
_strrev
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditObject
EditorDisplay
EnumElts
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
HandleRunObject
Initialize
IsTransparent
LoadObject
MakeIcon
PauseRunObject
PrepareToWriteObject
PutObject
RemoveObject
SetEditSize
SetTextAlignment
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
WToA
Name
.text
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=12, version=7291,
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=138, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=5, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Modules/ultimatefullscreen.mfx
- IMPHASH 3be06363457c7c1731f47c8736093ee9
- SHA256 111c61d9e54b037a2c492b89cf6a82c62f81712fb9fd64a91c9dfc9486887349
- MD5 d9ae994eadde0d3418aedda4f712dc33
- SHA1 402e8ca669a4fd6ff69399b7e08d2707f216c68f
- SHA512 0c6b0a6df08ef8ecbd2bbbc1dd4534f42ea4f440eed45c98647d712945fd71b5fe484f1a76388724a82a6acb2b98e73efcbf82f0d3a329890215d0eecac20c9c
- SSDEEP 768:O0tk38+IToRb7/6GLKB/XR0haFH2KhLBhpJVt7EnV1F4TkedlsHAqED+nLF1XJwg:O0tk6+KJOhoL/pJAn54TkJHpZKTXh6V
- TLSH T156834A13B1E0B331F8961A39D47E27631A7EAC225BB552CB5B9CC53A5E903D009B436F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
18837
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord616
ord286
ord344
ord372
ord264
ord34
ord753
kernel32
TerminateProcess
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LocalFree
LocalAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
RtlUnwind
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
Sleep
HeapSize
IsProcessorFeaturePresent
RaiseException
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
user32
DestroyMenu
CreateMenu
GetMenuItemCount
GetMenuItemID
LoadMenuA
GetMenuStringA
GetMenuState
CreatePopupMenu
GetSubMenu
GetSystemMetrics
GetWindowRect
SetWindowPos
ShowWindow
IsZoomed
MessageBoxA
AppendMenuA
ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
DuplicateObject
EditDebugItem
EditObject
EditParameter
EditProp
EditorDisplay
EndApp
EndFrame
Free
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetDependencies
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionParam
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetParameterString
GetPropCheck
GetPropCreateParam
GetPropValue
GetProperties
GetRegID
GetRunObjectDataSize
GetRunObjectInfos
GetTextAlignment
GetTextCaps
GetTextClr
GetTextFont
HandleRunObject
InitParameter
Initialize
IsPropEnabled
IsTransparent
LoadObject
MakeIconEx
PauseRunObject
PrepareToWriteObject
PutObject
ReleasePropCreateParam
ReleaseProperties
RemoveObject
SetPropCheck
SetPropValue
SetTextAlignment
SetTextClr
SetTextFont
StartApp
StartFrame
UnloadObject
UpdateEditStructure
UpdateFileNames
UsesFile
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=158, productName=VS2010 build 30319, version=30319,
count=80, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=91, id=1, productName=Unmarked objects,
count=36, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Undertale Last Breath Scrapped BETA/Modules/waveflt.sft
- IMPHASH a37b82eab5fe34efed01d6399d87638b
- SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
- MD5 57ea61dd14314ef155e80c6a0be8a664
- SHA1 963b0ef2fe976ff77044a821fe1e29be4a8cf8a7
- SHA512 cc23cb30d76d22500c3ed7ce9ee0388588309d0779441b95559fce25a42f1eff52ca285c347655f8b33c15b75f9d2067738a151f81f605d3b563799a3a06c9a9
- SSDEEP 96:vLor1Jnr+4O1tLj+Ct2KTOGTrgHchhAfETVdnPstJgxl8V6N/8cKH+ewp:v26Dj9t2ubTVdGJgOcGvw
- TLSH T16FF11B12A7A500F5F8DD0B7134B7627BE875FA285B11C24FC580DE6C0C301E2D928BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7559
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mmfs2
ord259
ord283
ord738
msvcrt
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
malloc
_ftol
free
_initterm
_adjust_fdiv
CanReadFile
CreateFilter
GetFilterExts
GetFilterID
GetFilterName
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
583B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
182B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=13, id=1, productName=Unmarked objects,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Undertale Last Breath Scrapped BETA/Resources/Animations/Sans/Phase2_End.gif
- SHA256 e45124415e7e9e7e83fc4f35246c19c43d60197e551a718ac7ef30d5f09edd1f
- MD5 b2b96dca85c694a73840f3f36a42320a
- SHA1 af3b58315d37ad870617bc98412150b2f52ce8dc
- SHA512 80fcb67610b632e6a5251ba9fa1f5f50af0722d380a10e615e382c85b3ad6775adf8da93d5e0e21fb1c2c44de6d7561cf264a573b9135a4a850a4eeb462c7366
- SSDEEP 196608:Bd/SeeeSENYdK4GK4l1T5P4NofBANc4U4gFmbJF2ZM9VpMbSXllVFRFFFFRFFFS:eEmdpKNQy4U4DJ+ONXllVFRFFFFRFFFS
- TLSH T1A437332351AD7D81FD581B323A1AA7801607B1AF79F7F3023BE6E9168B87605D8D08F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Undertale Last Breath Scrapped BETA/Resources/Animations/Sans/Phase2_FinallAttack.gif
- SHA256 4e9eb95b62c2b98aa4ae03d0e12a8bf8fd1d22152decd7a7c6332e1804a92faf
- MD5 a84009c66a8bcc51e57d9679c153afa5
- SHA1 bbfdb9ef934f5e9221e7d942b56fe82e26e42b58
- SHA512 bc6b713b5efde80a5646389834fe005fb68a7a0920c90ac634e0dbd22bc6953b53d5b615f8112b0a6543a3952129c627b7efed140400f69350fd13875140fd19
- SSDEEP 24576:oNdQpDB3QXiYY+OYY+OYYYYYYYwImW34I8pW2:HpDB3QXiYY5YY5YYYYYYYwLB
- TLSH T19E15026E49F54A16E605203426707762079A30ECCBFEBD3273C0FE0A877BD2AB5E4516
- MD5 SHA1 SHA512 SSDEEP TLSH
Undertale Last Breath Scrapped BETA/Resources/Fonts/8bitoperator.ttf
- SHA256 c0dd4ac5bcfc609b63fa4ff8b7c680360595b8e5184971209d6579f4a57c042c
- MD5 d3aef142bf34b7d1a15e0af410b61bcd
- SHA1 a7ed0b2c11abaf8dd9ebc145449e994aad1db209
- SHA512 72953f2d1c05cbfb88773b6f7897f428c87c14a87875d084175ef8f149ae20daed0dd8dbd39396ffa5e6cd5cb8ede02aaa1e93df18d0b4c205f483f9bd34a414
- SSDEEP 3072:yXYl0vRgO+eCgHH9ZcIz6v5xBYUj3Y8Rsm12KNZPf619i9pJYj2wz1/Oy+Ymm+:yXYuRJ19iv
- TLSH T14B95B5966A6164A980F29F7B78D2CD057F41761C03680C7EE52130DAEA2FDDEB6014EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Undertale Last Breath Scrapped BETA/Undertale Last Breath Scrapped.dat
- SHA256 8561055d08a16a8ff57882b2a9588832e12de577925203283943a4fefd62edd0
- MD5 4b2f580ecef1f2595c9b9ee6d697a2a4
- SHA1 54437c8384a89ce6738c1fe277c655ecab310fe3
- SHA512 57cd84692e1c6f2b4d240a97881a5d429c8a627592ce33ed19c8635bd6784e0fc1637aedcd286de3a7c8ec1dde9e1cf2a4bf178fd3ca11d07dc2e3df829b9496
- SSDEEP 1572864:pjnSC4FanpQLvk8j01toSN902+u8bloXavMR1wkQSmvoBTx:pRWQ8j01ySNWpuOogMR1w97Cx
- TLSH T1E9E71290C71784ABB45AE4F045D564C3605AECD66EEE0921431DFA1CBEFFA2C28D83B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Undertale Last Breath Scrapped BETA/Undertale Last Breath Scrapped.exe
- IMPHASH 1c4661ad7d3fc8350c55edf0f712d992
- SHA256 3d787c0f2bb13b99f6430fb8785bf3ef58e757b688af24fcc3dd5832c4f90060
- MD5 3875cb961165ed113d2b0c7950589419
- SHA1 7794992129a10f7f438076b19de361791852f1d0
- SHA512 2cf049135f8686efe562eabbf7462b1f22ef105c0a2bd35cf9a458907457ee850001893ff0acf273601f5bc3bbdcb92bc8dc73ec87d5d7da69085e35999c7766
- SSDEEP 12288:Iacp1LPvpmdRi9HWd+OD07TecFVnScX3FW02JhZIdXhVbNHF/:IF1LCp0hxW02JhZIdpR
- TLSH T1F915C3E0F9F18029D8A2C033C569DA76212B5E1F177827C7E2F06E5B35378C3653A696
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
399595
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
ord17
winmm
timeBeginPeriod
joyGetDevCapsW
joyGetPosEx
timeEndPeriod
kernel32
WideCharToMultiByte
GlobalAddAtomW
GlobalDeleteAtom
lstrlenW
GetCommandLineW
GetExitCodeProcess
GlobalAlloc
GlobalLock
GlobalUnlock
SetErrorMode
GetCurrentDirectoryW
GlobalFree
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindNextFileA
FindFirstFileExA
DecodePointer
GetFileType
GetProcessHeap
LCMapStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
HeapFree
HeapReAlloc
HeapAlloc
GetStdHandle
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
SetEnvironmentVariableW
DeleteFileW
HeapSize
GetACP
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RtlUnwind
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
SetCurrentDirectoryW
FindNextFileW
CreateMutexW
WriteFile
GetModuleFileNameW
Sleep
ReleaseMutex
WaitForSingleObject
FindClose
FindFirstFileW
CloseHandle
SetFilePointer
GetLastError
ReadFile
CreateFileW
CreateDirectoryW
GetTempFileNameW
GetTempPathW
WriteConsoleW
RemoveDirectoryW
GetVersionExW
GetLocaleInfoW
FreeLibrary
GetProcAddress
LoadLibraryExW
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
GetModuleFileNameA
user32
OffsetRect
DestroyWindow
PostQuitMessage
DrawTextW
FillRect
GetUpdateRect
DefMDIChildProcW
EndPaint
BeginPaint
InflateRect
GetClassNameW
GetDlgItemTextW
SendDlgItemMessageW
EndDialog
GetDlgItem
SetDlgItemTextW
DrawEdge
MapVirtualKeyW
GetInputState
DrawMenuBar
SetMenuInfo
DestroyMenu
LoadMenuIndirectW
GetMenuItemCount
SetWindowPlacement
GetWindowPlacement
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetDesktopWindow
GetSystemMenu
UpdateWindow
GetWindow
RegisterClassW
GetTabbedTextExtentW
ModifyMenuW
GetMenuStringW
DialogBoxIndirectParamW
GetMenuItemID
RegisterClassExW
LoadImageW
LoadIconW
GetMonitorInfoW
MonitorFromWindow
GetSystemMetrics
RedrawWindow
IsIconic
IsDialogMessageW
SetTimer
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
IsClipboardFormatAvailable
CheckMenuItem
EnableMenuItem
GetMenu
PtInRect
PostMessageW
InvalidateRect
SetFocus
GetFocus
CallWindowProcW
RemovePropW
SetPropW
SetWindowLongW
GetPropW
MessageBoxW
GetParent
GetActiveWindow
ShowCursor
SetCapture
ReleaseCapture
GetKeyState
GetWindowRect
GetWindowDC
SetCursorPos
ClientToScreen
ScreenToClient
GetCursorPos
LoadStringW
MapWindowPoints
SetWindowPos
IsZoomed
GetWindowLongW
AdjustWindowRectEx
SendMessageW
LockWindowUpdate
ShowWindow
IsWindowVisible
GetClientRect
SetWindowTextW
wsprintfW
IntersectRect
KillTimer
DestroyIcon
GetSubMenu
DeleteMenu
GetMenuState
LoadCursorW
SetCursor
SystemParametersInfoW
GetSysColor
ReleaseDC
CreateIconIndirect
GetDC
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
TranslateMDISysAccel
GetMessageW
PeekMessageW
DialogBoxParamW
gdi32
CreatePalette
SelectPalette
RealizePalette
EnumFontFamiliesExW
GetStockObject
SelectObject
GetTextExtentPointW
GetDeviceCaps
GetObjectW
CreateFontIndirectW
DeleteObject
CreatePen
Rectangle
LineTo
SetBkColor
ExtTextOutW
SetTextColor
SetBkMode
CreateRectRgn
GetClipRgn
ExcludeClipRect
SelectClipRgn
SetDIBits
CreateCompatibleBitmap
CreateSolidBrush
CreateBitmap
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
DragFinish
DragQueryFileW
ShellExecuteExW
DragAcceptFiles
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
521KB
Virtual Size
520KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
289KB
Virtual Size
289KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=46, id=241, version=40116,
count=139, id=243, version=40116,
count=35, id=242, version=40116,
count=20, id=259, version=26706,
count=20, id=260, version=26706,
count=43, id=261, version=26706,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=618, id=1, productName=Unmarked objects,
count=43, id=265, version=27049,
count=1, id=256, version=27049,
count=1, id=255, version=27049,
count=1, id=258, version=27049,