R6_Paster_Six_external.rar
- SHA256 ed58764b9e72f68dce01cdc0a94e931dc33873a449c23dfab20096010ccdb475
Overview
overview
5Static
static
3R6 Paster ...ts.vbs
windows10-2004-x64
5R6 Paster ...ts.vbs
windows11-ltsc_2024-x64
5R6 Paster ...sy.sys
windows10-2004-x64
3R6 Paster ...sy.sys
windows11-ltsc_2024-x64
3R6 Paster ...ad.exe
windows10-2004-x64
3R6 Paster ...ad.exe
windows11-ltsc_2024-x64
3Release/BeDaisy.sys
windows10-2004-x64
3Release/BeDaisy.sys
windows11-ltsc_2024-x64
3Release/Pa...ad.exe
windows10-2004-x64
3Release/Pa...ad.exe
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
R6 Paster Six external/reverse/Imgui/imgui_widgets.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
R6 Paster Six external/reverse/Imgui/imgui_widgets.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
R6 Paster Six external/x64/Release/BeDaisy.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
R6 Paster Six external/x64/Release/BeDaisy.sys
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
R6 Paster Six external/x64/Release/PasterSix RainbowSix made by Overhead.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
R6 Paster Six external/x64/Release/PasterSix RainbowSix made by Overhead.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
Release/BeDaisy.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
Release/BeDaisy.sys
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Release/PasterSix RainbowSix made by Overhead.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
Release/PasterSix RainbowSix made by Overhead.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target R6_Paster_Six_external.rar
- Size 5.7MB
- Sample260804-er487scf87
- SHA256 ed58764b9e72f68dce01cdc0a94e931dc33873a449c23dfab20096010ccdb475
- MD5 e9f1f90be0bb148c0f811fa7a8f8d6c5
- SHA1 e52c97770dc811c2a2c947bcef09bd2b3ec52640
- SHA512 6817ad79f9ddd26c53e6d28f54d6498fa0cc2618c315a5beea2104e77012e423fa0bf8344a0ae1fe16b0471f90a98df4aa5e1b7d4ccb989f861cef11baf0532b
- SSDEEP 98304:7qhR1sub4odQrF8Wr1LeInKlV/mh8OsbYnNTt4228RJYlJ/QKMt/9JAtIIi:7q59mF1r1LTn2QhyYnT42PIiVJ+C
- TLSH T1F2563334FBD4A466281BFCF4945D2DF3F001E4643E9836385AC8C2856A37EAE45E863D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/R6 Paster Six external/x64/Release/BeDaisy.sys unpack001/R6 Paster Six external/x64/Release/PasterSix RainbowSix made by Overhead.exe unpack002/Release/BeDaisy.sys unpack002/Release/PasterSix RainbowSix made by Overhead.exe
File Explorer
-
R6_Paster_Six_external.rar.rar 5.7MB
-
R6 Paster Six external/reverse.sln952B
-
R6 Paster Six external/reverse/FVector.h14B
-
R6 Paster Six external/reverse/Imgui/imconfig.h4KB
-
R6 Paster Six external/reverse/Imgui/imgui.cpp434KB
-
R6 Paster Six external/reverse/Imgui/imgui.h195KB
-
R6 Paster Six external/reverse/Imgui/imgui_demo.cpp204KB
-
R6 Paster Six external/reverse/Imgui/imgui_draw.cpp152KB
-
R6 Paster Six external/reverse/Imgui/imgui_impl_dx9.cpp11KB
-
R6 Paster Six external/reverse/Imgui/imgui_impl_dx9.h1011B
-
R6 Paster Six external/reverse/Imgui/imgui_impl_win32.cpp10KB
-
R6 Paster Six external/reverse/Imgui/imgui_impl_win32.h1KB
-
R6 Paster Six external/reverse/Imgui/imgui_internal.h95KB
-
R6 Paster Six external/reverse/Imgui/imgui_widgets.cpp.vbs 300KB
-
R6 Paster Six external/reverse/Imgui/imstb_rectpack.h19KB
-
R6 Paster Six external/reverse/Imgui/imstb_textedit.h51KB
-
R6 Paster Six external/reverse/Imgui/imstb_truetype.h185KB
-
R6 Paster Six external/reverse/Keybind.h9KB
-
R6 Paster Six external/reverse/Skicript.hpp1KB
-
R6 Paster Six external/reverse/antitamper.h7KB
-
R6 Paster Six external/reverse/auth.hpp1KB
-
R6 Paster Six external/reverse/color.hpp21KB
-
R6 Paster Six external/reverse/d3d9_x.h2KB
-
R6 Paster Six external/reverse/defs.h11KB
-
R6 Paster Six external/reverse/directx9/d3dx9.h1KB
-
R6 Paster Six external/reverse/directx9/d3dx9.lib4.2MB
-
R6 Paster Six external/reverse/directx9/d3dx9anim.h42KB
-
R6 Paster Six external/reverse/directx9/d3dx9core.h23KB
-
R6 Paster Six external/reverse/directx9/d3dx9effect.h41KB
-
R6 Paster Six external/reverse/directx9/d3dx9math.h58KB
-
R6 Paster Six external/reverse/directx9/d3dx9math.inl44KB
-
R6 Paster Six external/reverse/directx9/d3dx9mesh.h100KB
-
R6 Paster Six external/reverse/directx9/d3dx9shader.h38KB
-
R6 Paster Six external/reverse/directx9/d3dx9shape.h7KB
-
R6 Paster Six external/reverse/directx9/d3dx9tex.h60KB
-
R6 Paster Six external/reverse/directx9/d3dx9xof.h11KB
-
R6 Paster Six external/reverse/driver.h10KB
-
R6 Paster Six external/reverse/driverdefs.h4KB
-
R6 Paster Six external/reverse/json.hpp912KB
-
R6 Paster Six external/reverse/lazy.h24KB
-
R6 Paster Six external/reverse/libcurl.lib1.8MB
-
R6 Paster Six external/reverse/library_x64.lib3.2MB
-
R6 Paster Six external/reverse/main.cpp33KB
-
R6 Paster Six external/reverse/offsets.h1KB
-
R6 Paster Six external/reverse/operator_esp.h5KB
-
R6 Paster Six external/reverse/operator_icons.h3.8MB
-
R6 Paster Six external/reverse/pasterx.h8KB
-
R6 Paster Six external/reverse/r6_entities.h38KB
-
R6 Paster Six external/reverse/r6_scanner.h15KB
-
R6 Paster Six external/reverse/resource.h450B
-
R6 Paster Six external/reverse/reverse.rc1KB
-
R6 Paster Six external/reverse/reverse.vcxproj8KB
-
R6 Paster Six external/reverse/reverse.vcxproj.filters1KB
-
R6 Paster Six external/reverse/reverse.vcxproj.user168B
-
R6 Paster Six external/reverse/skeleton_emu.h652B
-
R6 Paster Six external/reverse/stb_image.h291KB
-
R6 Paster Six external/reverse/ud.h2KB
-
R6 Paster Six external/reverse/utils.hpp985B
-
R6 Paster Six external/reverse/weather_fx.h8KB
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/CL.command.1.tlog5KB
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/CL.read.1.tlog146KB
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/CL.write.1.tlog3KB
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/Cl.items.tlog928B
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/PasterSix RainbowSix made by Overhead.lastbuildstate201B
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.command.1.tlog3KB
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.read.1.tlog6KB
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.secondary.1.tlog484B
-
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.write.1.tlog1KB
-
R6 Paster Six external/reverse/x64/Release/PasterSix RainbowSix made by Overhead.exe.recipe341B
-
R6 Paster Six external/reverse/x64/Release/imgui.obj794KB
-
R6 Paster Six external/reverse/x64/Release/imgui_draw.obj455KB
-
R6 Paster Six external/reverse/x64/Release/imgui_impl_dx9.obj56KB
-
R6 Paster Six external/reverse/x64/Release/imgui_impl_win32.obj29KB
-
R6 Paster Six external/reverse/x64/Release/imgui_widgets.obj695KB
-
R6 Paster Six external/reverse/x64/Release/main.obj6.6MB
-
R6 Paster Six external/reverse/x64/Release/reverse.log19KB
-
R6 Paster Six external/reverse/x64/Release/vc143.pdb2.3MB
-
R6 Paster Six external/reverse/x64/Release/vcpkg.applocal.log5B
-
R6 Paster Six external/reverse/xor.hpp2KB
-
R6 Paster Six external/reverse/xstring.h233KB
-
R6 Paster Six external/x64/Release/BeDaisy.sys.sys 18KB
-
R6 Paster Six external/x64/Release/PasterSix RainbowSix made by Overhead.exe.exe 1.1MB
-
R6 Paster Six external/x64/pastersixrelease.rar.rar 359KB
-
Release/BeDaisy.sys.sys 18KB
-
Release/PasterSix RainbowSix made by Overhead.exe.exe 1.1MB
R6 Paster Six external/reverse.sln
- SHA256 14410447dfedc3fa31c5b4a4ec4a9104bc8f854157eab9f66e495b2fb276bb92
- MD5 08e145279765e1a50de6df05cc23e540
- SHA1 58aaee659c14996f0d542ff30f093b9c0c4e7f19
- SHA512 2d83538c2aa74d1908413b5ae7351cb67536747f358e6a723bfcfc5c657f8b1225624b81f449bd9b545a1447a5d1bbc1e0b67ed5ef3dc26f21d5ad537043af22
- TLSH T1C2117BAD704E44B6E54A277FD8B10A027E77429C439F1E3D04CB80AC7633A09861F8EB
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/FVector.h
- SHA256 aecb9819eb04bf5ad6cd2535cfac9b1bed5ef7946e551eff2224759862e16294
- MD5 ac61f8469d49ea745f868f758477499e
- SHA1 cadf9574dfb94e29670aa64c3896e11e85dbe714
- SHA512 2a42c66b4d42a480f371717744221e18677c017cfbd9cdc1e872a25ca1984d8b06b25c41ae15423bcb5569bbf1558d99f39c4ab36cf7291e7f7884c2262c2208
- MD5 SHA1 SHA512
R6 Paster Six external/reverse/Imgui/imconfig.h
- SHA256 3ec5bc1d4f57a2a9e66655906e4b89571725ac3dfd98272648ef9a7fc85300b0
- MD5 ee192ebf2b0a05e2b9f2f2c010e707f7
- SHA1 66249be3d1adba977d3db3c8667267af15103e9f
- SHA512 5e765dd7bfc140abb433c6725a3bb35d3b66f516f0de2486fc758c77cecc2c57614ff79c84b15fc489d49a9d112be3f4cd91d850db4f637f79d303c3415ec147
- SSDEEP 96:n9uSCOkmpF+zLToBDLzG3ayIFkJeJCaxqSV7Dal16EQnSuV:99fpoLWDPGKFkssQ816EQnSe
- TLSH T120A1850B3C5615500962E270A3AF8069D724CAB77390E0EC74BEA9981760D6D12BFBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui.cpp
- SHA256 1b57a369a1254c711495ca2a793fab90555c483e6ec6e5b9fdee1d8413c67f4d
- MD5 0d6c2e1d797ca58af8a87f7565c1659b
- SHA1 5493be0038176533c0c72e106395d5568ec02dbf
- SHA512 560b5b54553f3512b83fe6d175c859cac473f6e14afcbcf3cdaa35dc7dba6accc74938bfea9149266a35374ce4e7107c3a13782fcda662f5a3c03f29ee0cc3b3
- SSDEEP 6144:Os+Hq4l9oMBS8PPgoFEe/YfsHsj0+OAlaoRzqvdgmaQD/d:OJJhCaodQgS
- TLSH T17694D7A62C6339169932E4281BC7B346E73A453767A4D5107A4E234CBFD1023C67E7EB
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui.h
- SHA256 0ebd276c65454224e4e5cd92640d763397c9e90dae82d9b916565c7faa3ac383
- MD5 36a47c06c8ad9ab736aa11b108aa4d5a
- SHA1 986b4679bdf29baad075d6121ef5de73b3ceaf76
- SHA512 26347bbf519055ddcd25d011dac236d7edc09a93d08b6b0c50b35067c6201a235b4d4386ba28bfe129111846deea510f2a2bd7642d571cfc324e1b61d9257142
- SSDEEP 1536:gWWAvJ6b13/4AG/lcZyvJB4+K1Q0xmNsy6jDl3lG+rLjkrbLkepgdrwKkb0kwvpp:NEb1vMlh6n1xQmy67zLjMbLxbKkb7I/
- TLSH T18214E8472E012211CD22D2516BD2E646E72C9437BBE0D6A0374F639C6F4A42F427EBE7
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui_demo.cpp
- SHA256 10d791639b31fa5fe90fbda08c837234252c9d9d319ba439df98e134322bf9af
- MD5 33aac1226c2a159f9e347babb180e297
- SHA1 bfeb46ce11ab6aadf39738fa55a1b535232af19a
- SHA512 93a57e49b776d48ff7e9078d44550f74aae7fc62a8ec63f746aaed9e1bd3f4cae3fff6c2e628e05975511f87f5b5ba75b09b8082754f9b3e7a30a1a975a258a3
- SSDEEP 3072:goFSMOJYhDb3dfCUdjUGa1LhaS7rwDH6klXbhe/5mdq1MoUvYGObhg6Lk:UMO2hDb3BldIGQLIiaRJ
- TLSH T1A8143EC95D5239128933E0385BC7D495EF3848736AD0DB10BB1E329CAF9846552BCAFB
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui_draw.cpp
- SHA256 db188409134b34789cda3e0e795143f0893c79388e83a66c3764c690da076cb9
- MD5 f9946a6d1fe7a1d3f104f5c1218b10a9
- SHA1 fe57de30a4bb13a11f1ef868ea545ce4b5c5b142
- SHA512 562055bb777bf6ea9df9ea018949a28e587d2ce03d0f6e4c9a5eb731160c007bb3e1d671947165b428aba6fb323e632fc037fe498a932f13dce470d4cfd75d9d
- SSDEEP 1536:pMbffpfnlCvkQ/JMxrIKbzOn6K7zE+Q09yhlIBguCcvwzWlg6yo213:pM715IKO7zE+lyhlHuDwCmI25
- TLSH T1B1E3F7490D5312534E67D87C57C3855EE69EC8A3B998D508BE4E97CC2F80428CBBCB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui_impl_dx9.cpp
- SHA256 bc1cd2d096786c166f3e1f08bd6530b5b44817cab223f81a25feb777e800bd5b
- MD5 605d2fd1b34e16753d1037f835fcfe54
- SHA1 8f415d6832732c6a77668c83766052f50dab0739
- SHA512 e08ab7cb458d315abf9dc342cf372f0e9c0202b53936a533f16f5000c6b2f9070476c8fa0e8224f20c73ec259a49328a37f22e3e6a65a72800137bee9462e38b
- SSDEEP 192:wNctDVaZpSMSRNEWLj7VjAUbJAX/r3i9iCyRRKFnBNcT78W7Y6DG6KSg0Hgc8Lwh:wGtiSfEWLBOX/rS9iWFn6a6yugFFngKU
- TLSH T1493294CD30A33910AE53746A4FCE5A49A62D785B172CEA847D4C1385AFC06F0A978FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui_impl_dx9.h
- SHA256 b19f18b3cd2386d46126416c1179443778281ceeefacb14b84012ebc9a84f7f3
- MD5 132df31a1d3252b6f28dce8d2025ae04
- SHA1 8fd74d591da264b4a3062dfa92beea5b6dc1cccb
- SHA512 4859a35c008c9951c0b55bf1a94a02ceed2030407652bdfd204300a9afee89c69730bed447cfac9ce58535115a279821fabbd59219059cb09e59114ca2ddc9fe
- TLSH T1AA11AF9512F076904BB216849884CB83725B1C98A7E8F7BDF36DE158279087260B9933
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/Imgui/imgui_impl_win32.cpp
- SHA256 0079f5ed17b732d212cb4dd2953d648a2f20133f9fd47017398f29a82bcd43b1
- MD5 bede98729e8d54da1736c46d40156b58
- SHA1 f7c7883a986305713dd4beb3a26c999422a58f89
- SHA512 a7b33e255196589dc14ab742065ef9b451f558bff8242590f1eac8fee02cb9265ce1d30cca04c7baacbfaf184203d5537911499ba0474af0ab0c619e4ceae48a
- SSDEEP 192:F8I9jtba9PPBMyxQm7YCEALydkhCaW4QqRBavwEFd2FSvmfqB3Qi:F8Ixt8ScQm7YCEAmd8PEFd2FSx
- TLSH T1AA22B5D65A2F30234D324B60AFD680273B20957B8695CB583E6D724CEF941710229BFF
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui_impl_win32.h
- SHA256 bb286ba8245293bfd9bbbbc2e995627387c99f3c7f798e06faa969af95e633ac
- MD5 40f739d069cf943469318cecded62036
- SHA1 f25c36574f9c6d2c0e6111939f1ead488ab5438c
- SHA512 ddacad15d22c9c693a2992ee61a1095d24509831c27fc2f8d9450f4325a029315ae5a9c76a7794f837a540f56381893d93197f51f43483353601b98900a2d8e6
- TLSH T17821951E029978D3463006818BE196631B1A3D706F65CBDCE029E01C2B75FA78036E3F
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/Imgui/imgui_internal.h
- SHA256 3bd4bad084c2f5cbdba91bb8a356ada503365a3e8a6c049ffc047189a9348730
- MD5 7dd31d4f011f6f221e84eb824462d95a
- SHA1 01745de0c03a9bf48a3f8c22270b0c55ac4fb102
- SHA512 0494a73303e99a1b6c91c766b9a675ea5fd4c07fdc1c6cf500a5b825c3d381d1879cce327c514b1f032c88cdf29b6b281863363c99c3bfd103909e4a81055c6d
- SSDEEP 768:wZI/8qnTA/R9Db4TeDem37QP+0BO+SmvxoK7YwLAU+yQxtoDqNActrCILks6jhJm:p/8R8wK7YwLAGQxtoDSA6kpji
- TLSH T15A93B7931D022521DD31D2146BD3D694E7294C737FE0D660368E239CAF8681B867EBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imgui_widgets.cpp
- SHA256 deaca57f37ee6cdb8a50f7f1c5cd96068e61586958e8754ee60dc8c8d83dd214
- MD5 cd5b4064d653e59db2e5b965cd072621
- SHA1 01ef49f00d0d865ba3103fe848d5a97dec44efa8
- SHA512 082665890529b9681b9b82ce3a832ce5aa086ed78c793678d1bb649efbf7c758d1b83589cbc65813e5bf8ad0a40c0dbc22ff595fb7a1d2976ec67e18eec14892
- SSDEEP 6144:A1YSk3XDtBBkgqkGvki6MiZMhS3WbKmhOhXn:A1YSk3ztBBkgqk8qMiZMhS3iKmhOhXn
- TLSH T1FF64C4811D2326268933F0284FC76259EB2959773B94C9A07B1D635C7F84436C2BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imstb_rectpack.h
- SHA256 947b8678b701ea1a2220772b4fa1e40ef25b177f75012650538c2bff2cc6461d
- MD5 556764a32f7c6b1470ab5d6f16f00748
- SHA1 760af7e492f42679ceff6c754609db68835e8718
- SHA512 5a9c365d3a54c3b2c181c7cf9067cd52c01855d6b7f57fbd52f5ed8242f4655a784e26a251397e5a7e89bd65cc44e0d4b73efd74bd06efe5aa35969e4f7cacde
- SSDEEP 384:T16kzHSyJm8Ss6RaQid1zN5HxR4Z0HFre1Fre3kvSUskqDM:TTzyyc8Ss6RaQ2xRNFre1FreU6kIM
- TLSH T14992B72B2CA216256B41E171974F7099E326D467D33AD620BE8E73642FC006753FEBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imstb_textedit.h
- SHA256 b3e47e9fc2e85e3f90b381f23a3bd091df0913bf26f49aeb8735a70c4f46a368
- MD5 e0e60e5ec16dd5c3d9ee3dba0a6ae487
- SHA1 d335e394f09c87758f5b63bf5f86f72fef36d268
- SHA512 9798a6fd01c0831b09794e5d541ca96bd9f94f8e1a195d10d1aa9de5dbd9ca9d3f6f316792f9cd4e47efa5833008967a2a29b69f7a4a1ffa2bab4097641f0eee
- SSDEEP 768:BQ3BmQixw8ZPNP6Bg+jkFmUfXw8ntWMl8az4YsLM0NM6MLLKkIM:G+VqlULKkIM
- TLSH T1BE3324036553073A0C6EA173A6CF21F6BB26487F7269DB61B48E71181F510FA01BD6FA
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Imgui/imstb_truetype.h
- SHA256 7f6258c244535b26477678fb8ef615ed71840fc715b4ea1e7810fa291100c3b7
- MD5 dcc11965e097211d297e92f038af5ab8
- SHA1 bf5b688b4ff231cb9ea1ea03d4788c139e9a63a6
- SHA512 37d8a6f5db4c0cd5cd39487578161ff8af5df79ce9fc7604fde4c3eb32f5c5ae3fe92b7d32cf76cb7cac007cbfb93932fdb427a6e823988821e4e5230587f226
- SSDEEP 1536:XtrL6v9vA0XFI1kkAmzz/Q7rytvmXa2djo2UZDaXT82gcNjjByzKYqkIM:Xp49vACFI1fzzo7FjoR2gcNq
- TLSH T12004E80419D314231923A5A9DB8F54E8B32ED0E762A9EC51B85E3A1C2F60439D3F5FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Keybind.h
- SHA256 6960370f65fa662c107e77e15446ab33c37433de8ec06b05ebfe26f12b10b55e
- MD5 78312cc1105eb985abc130440925c9ea
- SHA1 c27ca546d6377297344b334bf89efcdd21366044
- SHA512 8c96ce6b8ab0ea002178593ba6cc467e7e7a7165d40137e9e0413b94d0f2d843da4b3ef4efc51c7404703d520bada2404911c7e2e76587eadedc850fdd8f2d66
- SSDEEP 192:gw26yeMS7NmPGPMPNP6PzPyFhXvJnBBfBNbB5UBx5:oS7NmPdO
- TLSH T1B8224158BC17140C5BED6A1E069F5CD4AAFC533E424294E2FC1F2A70D2B87B6815EC4B
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/Skicript.hpp
- SHA256 25777fe089b5a4d40a409e1fb5126e58fe84ee8d542c6c4b8b6b55b390885242
- MD5 e1f7b169184cf73df3c9c7623b40c422
- SHA1 b1531503306a694c69061e7f3d2c0207895ad646
- SHA512 b40bfd17fbbf83dc5f813288fddd6af79ca6b5141f20b54504227102a139000f065572599271d99a0a95acc2a8d0e0e0c2bdddbc491994b6e886ba2372e1c15f
- TLSH T1A741F183BD3DD49653B412AFB210E0606A3DF433BE8D48A3AD6B82397447056E339E5D
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/antitamper.h
- SHA256 0022c8adebe8049263473db4b9dcf58a8f1699be8c61d60d3f90c04db0f1c4c3
- MD5 0e992c506570ef30450b24cc21939640
- SHA1 0ed0303f22b11cf95e07b91b912190ea2c90c19b
- SHA512 9806525b091479ef5b9ecae392806641261d12441888ff5b19ebb4cf1562acc14ff529e331d61f3997480d44c3a57d0d880f296ffb08ea1500f26f5e9b0294a1
- SSDEEP 192:RDv33uAnECT0ByLaDGQUpi6RCGRXRbRBgU/4NhYOK+Nl4elfZ:AQzCMB1B1mYO34eFZ
- TLSH T1E9F176903A5564826C673B6DA38BC016F12C507326DA4D00FC6C2F09CF6B5A9D5F9BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/auth.hpp
- SHA256 bdea85bcce024b4c23903f491c53aba1e2a2bbbc0eb6d5fb0b7a9ab0c474db47
- MD5 f52e2da1eacd663254f9ded68de42734
- SHA1 03b67c8bd200e08d0c352952570de98233d1d0b4
- SHA512 9b484a9ada29a73bd846a86d1f1e9495394680f171e09107479b3e697bbb793e54b370f6605b519ab4d49dff0b2d2d5f2094d78d7fb5b8f38dd6c209e965f924
- TLSH T142412713B7FCFE215E71E1629AF069432068754063361FF2FCEB2058B874467A7755A1
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/color.hpp
- SHA256 2da77376a45fd29d170ff250c8dc522310620fe598db1c6b5269818f100537a0
- MD5 71db66685b236a4e62e25f74dd9044cf
- SHA1 0be32c8d306a513c1bf6ebf7fa2fcc6c12a5677b
- SHA512 31d2070efd554e6311cdfebeef2fc2d83f3e6f6a4baf990ce23247bf9e7051a1b7f1e1a5b42554c192db6cced1cee6f98f58a6cd1f9d60c0e90779a3bf39bbc6
- SSDEEP 192:ofc9pzoaY1UjOXV0blA+OcwbvdJIfjO5/uVY3eHvQVglw6alkusapD9u8SU3pWgK:ofc9pzoHDPbb3LzWb
- TLSH T195A2DF243D3602B1466B91AD8243924230D0F8B75B669A31BF1DDDDCAF8951CE6FCF1A
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/d3d9_x.h
- SHA256 ccf6fbd968cf31d23b95b2cfc1e88719f19f33b0ee9bc428ffb9b6bcd049213c
- MD5 3e52d8c7a93c285564eb857c22d3fef6
- SHA1 ec33d93308897ec6c12ca577b33bb4401a5b5900
- SHA512 932bf78519a5935cadfa91b2d4634803a5702071ed32ebc4188c3f10fd0414c08e3f9a61969ab3c3be8cbdf1b1e56e7d9208cf9fd017b36877889b96a7f57ed0
- TLSH T163516F847A79A5FABE73B18F9C301294205FA9153E067D0DA6A405B4009F0DC2DF3F9B
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/defs.h
- SHA256 debbe168e0033a5ace1b88e31714d2de2abd7c2e0ade7a0917fcb7d9b42b9741
- MD5 55b0dfdeb2f85482395af550847bddd1
- SHA1 35faf389523b5ec9dd4783c27bf448f0fab6ad7b
- SHA512 b62852abd18efb7a132a08aced46939f2b8578a41e7994a759e7527db2b67aa90187eec392fc6ca8eee2d52b6d89f9045d94264d27bf6a3dbfe5d6331ed51c6d
- SSDEEP 192:VY8o94d4p8U++Dlw1cJLIG8PL+BI+tJXv+E+q1XEFIn1alQ:a8o94d4p8UPw1cJuTkXmE+q1XoIn1mQ
- TLSH T1C23283629DD19176353B2026034C8200FB5AEA7349D46AEEF81E489D6F978B1C3F19DE
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9.h
- SHA256 557b2de6238d7bda21f1f43fd2780ff86a8d3b9418b84c8aad49c6505aa7e66b
- MD5 d6dff47c3bbe230d2907a9fb75865da9
- SHA1 5949a80d589a872a3d2b90960fbef7bd5f65dc28
- SHA512 c490935e0c0532d51fd461243620170864be1d0b446ae774ec5aca33e70cd0bc74cca5ae8a94fb09b883adc66451e305b1484933a90a5e564149c5ed7895a98b
- TLSH T15441C019A97F382F5362ECB154779900400EB613D36B326834AC3AEC3B9648561EBF7C
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/directx9/d3dx9.lib
- SHA256 a22ca24c92fd61912f7601f00a049f98a439763370726c724ce617020fa6526d
- MD5 f1b0e8c4bd25ab527083877a5074b6a1
- SHA1 b998f15b563a95b344199fe0d311d06405c65284
- SHA512 9461f274b257b616e28bc5a58b4990c8f5908f96f8fb1c9b8c777eda259fc41878a706a947ac40a440c4627fa0930e25a94f83116a586300d0f02a07723badfa
- SSDEEP 49152:wv97FZHAP6XBJcSKxp+4B/c4dgamC7HDr9xcmoYBWVkhSnRf3oKoz:KK7+GxdgamC7HDr9xcmoY6khI3poz
- TLSH T18D163B62FB6A6802DB9BC3348D5A07316334C37267A2A383736954261BF3355EF56E07
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9anim.h
- SHA256 9068c5a415961912e0ab695b2ec524c9f49b634ce435f1389c4b95bb1236ad2a
- MD5 96297ea1bcda81f507a54f509b9484b1
- SHA1 80166bdbb4346479ae69f00ee78505a469b1b95c
- SHA512 a9c2d3654249ac9087737d8f36bd0bb5dffe05bf943e87f55bb202d6648880d934cd2a50a416cfbbc223c58cbd9da90ddac0fba29e90301f1f655d87621c25a9
- SSDEEP 768:+sJmIFUAVZLbDprpKlDrAtCkQa99nZLKkn9auH1vXI3o9/EEHeIgl2gP3L:+sJmIFUAVZLbDprpKZrAtCkQa99nZLKD
- TLSH T1441396A2AC42B53757F3C225175CA712E6ED419776223F19302EE6142F6188813EFF9B
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9core.h
- SHA256 8c3ba8294bd7d2682e4ab66f837778cff544598308389bd6c0f517cbfe3d832b
- MD5 4e48b3d30549ecb5966b0c16784662a1
- SHA1 bc9698b78c25067308007f3db49cea5caaac5067
- SHA512 0df1b43da352f7c247cd9da4c39f271d773ed9becc3e23bc256b9aae35709bce098851a064c29c1cdedaa4b7959714b3ddca25565de9b48431abcb8260752524
- SSDEEP 192:aGyGOnun2yBbhnYxPu1iPMkNcf6TRjsLea61OuRfjyhsormgL9JjzOsYe2flmixg:HyG2yBtYZnEtLjz0e29miH5kGZL4b
- TLSH T119B2B725B486F877B7339001799C5B12E6CE82E7C72A3829349DF5513FB984025E9E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9effect.h
- SHA256 a63de554ab5bae13b0c8637929b7a5051e62acdf149a8f0f0ae5fc0e0f35f1c1
- MD5 a7a50919d39bdf6d394cfc914cba54e8
- SHA1 9e8cd9026504af11da7802e06893af9148a13d0b
- SHA512 1e33568ebcb6dc3f751a7b59df4bf0e0e778c47e4cb0c8f5af7f2e71547b913621c88f8c1c2c92ce17a5097b86ca71dde99dfeef48a34ada748fc9a08a378f1c
- SSDEEP 384:cQIePZOkFi1ByE5YqKZOkFi1B1xloYisRZOkFi1B11p+3M5rJAA:nIWZfFi2AKZfFiRIwZfFiR1IZA
- TLSH T1AD13BE05EE84BC29F3F6C10026595F63E5AA82E37517794530ACF9221FF9C11A8DFE86
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9math.h
- SHA256 9cdc084055cfc83080d29cd49aa929501a1e57a004bdb3cce34ef02134ea6157
- MD5 48b403d8154072cda54d23a69a3fb109
- SHA1 e764653f4a1ae8ca7fa26d1d9a895fd071f1ca3d
- SHA512 d7ddd6dca996dfb0dd88d0282b4c643d9fcb37eb52308b8dccdbf96aa697e41d92c50453beee67ab0046d3f5bc021f83875d11aba89539730c4a7212599ce03e
- SSDEEP 768:XRNMVrMK0ok8Jrqu+DdqZZ0/Iz6sS6I+d+PQgp:XRNMVrMKxTJrqu+DdqZJS6I+d+PDp
- TLSH T18B432EC13DA1B87A9B32C3D0522529A4D22D6457E76B3E01365D94916F3238C42BEFBF
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9math.inl
- SHA256 f7f42842b8954ae3831d757d02f4597d7c352488cf19d73f4b1b06380b263a72
- MD5 04eb36b4a8b6f5a175fa645feaec82af
- SHA1 2b3653d3ee3d87cee2f669bc5f0ec863c3636b06
- SHA512 a7438d5f2013f641fbbce663e726bca5773c78d1d73e0d14b4c99fae6703e7a8ca07fefc776ddd13f00702ece3b1c4e0711bfc57de5ecfa506177a89838aab0e
- SSDEEP 384:RX5+TGt6eh7rjZacKswv7ckyN+p+TSlYMZsx8pgr8mXos30r25a13qgqakUYeA1x:TGprpKY6gNbkUYeKv
- TLSH T1C913DC983CBBB478DB32CBA44B215055E51D7847EBB73806344C15A4EF3269981BEFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9mesh.h
- SHA256 64b254a87d1a1ae3669bed1b29c7bccfa69014df2ca7771bd8a89e29716e21fb
- MD5 44f159aa23b5e88fd27f8846fdbabfc9
- SHA1 cbfa9145dd58176b3168add330d24bed508e3171
- SHA512 75b8163ff8b57d8ecd09f53621e8511656e606875283299b406a29206b22d86a72a6173054d170dee5d056b3f01460ca897605b0052066bc148ad3c940c4c8da
- SSDEEP 1536:gTkpStY5YwYB7ClbLNn8s2O2z3COKn56csd0HGieiYOEL6rPFnVoet4UUUnXO:nStY5YwYB7oXNraGu
- TLSH T1CBA3E975A642AD3ADF730151674C7E53E29282978623BB0230ADE7013F7B78811B5ED7
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9shader.h
- SHA256 1e2fb328e1fcf89ff3854760c9fac33d21e60476a4ccad347b80a542f824da0c
- MD5 2b4e1222c8acce09ac622b3824776d40
- SHA1 23118d71f42b9af2ed4022a0e49276710a9fc844
- SHA512 1cd56b1f8383e38c9b13b64e044deac26098a2b9189b7608d0e49d06d8dd0bf89e75cca7322ad44275f9ea1c550ef6bd1a84e1ae5fb8e1261d2187b3ca49b24b
- SSDEEP 384:uh0MhqHXGkug2da6IqiDKkv5hivCWAHfWnrRodXvW5ie/ao32I98:uu3K9Iqy/WnrRodXvwySb98
- TLSH T16C038406BE89B0775337C100660D1E53E29AE2A3A717B608307CF6941FF9859C5AFD9B
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9shape.h
- SHA256 84372dd72dd0284519cab0c29283c526bd793389ee755314290f0a82f7b10810
- MD5 9335ae4b00fffc548b5fa82beea08bf4
- SHA1 1b5069a334733aa9c88dcac1a7d35592251f67c5
- SHA512 e1f37ad518f8bb9acc13820c369b0a92cfcff009adee2d617686fc8df5144f9dcb2233a43b03ed84da95b63196516df31d3409b0bbd7dc0b849f27b113a329eb
- SSDEEP 192:mVX+onXxBRaj7iKzjJUsDF/6bsDyHk+osgEyG1gzXz2:m9+oXxSPT+sDIsDqk+osqGB
- TLSH T103F188056C05A43B8633C0547B0AABD2E2C98463DB72A51B74BCF4D40F67CA585BEDBB
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9tex.h
- SHA256 014074e998667383295c11109cc0ba7089560e9c4aef9c8a268e757490a16232
- MD5 af618f21f664f7ead5a8ce76587d0a84
- SHA1 274c2971d02f7488d9b4f878562aeb37da1ad751
- SHA512 666b24b5cf7b935aab8646602caab890d0300f110eba397ceb5020c273f774ff7f06f79026bc9fd0ad2e8dccc6e244d32e0d07c1eda4ddb7513f2dbac23ebd8b
- SSDEEP 1536:+2psnFSNnvFgpUz6XOsp6sURzDi1mpAq6HrRr4ApvJ6XthlQlq3yehmvmTvr+8fv:B6n4zgKz6XOxsURzDM4cp0UA
- TLSH T13B5301163D42E1330A7BC2012A4C6693E2959397CB26EA4A34BCF1900FB9C9595ADD7F
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/directx9/d3dx9xof.h
- SHA256 7a61c13d1149d6d4d1904298c359b975ad85998910705502eb1b0be907512ffc
- MD5 ca57d88a76923adeb045687542272c28
- SHA1 fa7d743a7f62790137254f5007516b127e2f645c
- SHA512 162a5ae419ccd180c9c13450a9c7efee90225845e3f90a9e87b80df3a51e25d98c3c0c55931573be8f2c049d0bc4072c6fd5492e2822840b36dc828187bc1228
- SSDEEP 192:r3SxxELQbGZApf+yrsZ1+lEfRakFmpckGqo8aZwudaH1GmimomudW7dAudH4cusI:r3SxxEVrBzBqMZKVsEu/1OjCJun76WdY
- TLSH T158420F2F9E87F815E3B1D110AADD8A11C1C0816B8673781A307CB9A56B7A14161DFFCF
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/driver.h
- SHA256 4fcc53907faeba71f30202624b6c34df87f10d1aaa0441a886398a2a344c49d5
- MD5 38c6e4f12c0bb787798543dbe681a921
- SHA1 77763db98fdb43707f429f77bfd44cdaad8bc51d
- SHA512 bae049d8f897fd370b31c31713961e64254db1aa83407ea567f94aa06c5ef80a2ae447cfcdf44ca5d58578b176a84597c74e424ece0f78f7c6ca51da25080ae8
- SSDEEP 192:YO8UdrABfnculMePeBaaEvHksFIoTHPnZSY+Xefy/tDSiyeq9wByFCT5L47ykdS2:58UdEpncQ7kQIolkMOoclq6h+
- TLSH T1D62279894E9B141370DB5C617B43A421E9D088A365FFC5B1F5ECE6204F5C5AAECB06CC
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/driverdefs.h
- SHA256 51682bb87a0e68c1969e5689d590e139346bab9f40cfbbed70ca8e44c2a0ca05
- MD5 57624fd261f02382a7a1988046de77ec
- SHA1 43bfc9eaf1cad3a5ead1049230ccb38ab3568185
- SHA512 cc5f904ef99c75f226916964ba43b3d54a432b696283cf26884510e78a123f818d3e4aec2186be30787e597f2de235e6fc17d41d0a2dea1f514b342940cfb012
- SSDEEP 96:RMWYOd3vA0oTWlAVb9zJENRcqjiyw+8/Xh/dsESE:RMid3vA0oTWKVJNELicsXh/dsJE
- TLSH T17CA1B6B18D265065EEF302187BB72884609DB3171A2B9815B50CEF307FAC4E468FA3C9
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/json.hpp
- SHA256 cdfb0c90d8eb1b9a39878580b016e4f95c556c68b6d8dff52619e640c827c6a6
- MD5 975090b5bb930108d5e462e573ce4dfe
- SHA1 94a97ace10a7588e3382dbff3b6415ffdb33b1b0
- SHA512 a8051cc179aeb4579049d449d1cfc58183c107671f9433b511b8d8f7eb0884d86ca112d98df798b16a7e931338ae39116e3226ac8796f13244b8fe7006d455be
- SSDEEP 24576:FXsIhURgu8pVzfvelEvK/KPAapFJMFAe4Valzsvg9zHB2P2VQm/7U6sg:FXsIhURgu8pVzOlEvK/KPAapFKFAe4V+
- TLSH T1D015E7646CD3A0524A3337786B27A406FB045623979406E6B9DDCAA06F32444D37FFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/lazy.h
- SHA256 01e34167d32467e48784f8fb1cf6bdd66f28e5e431ad2f985e0f349afe463f92
- MD5 2f03036b571f6a2c3be22e3de00675a0
- SHA1 0a204ed3c8d3786b52d463065af72ee309f11ff9
- SHA512 d170558ff904371a28f864fb980a321068fec94b3f2b33dd33455b3e980d9ebbb3d25b705fc5fe3c3c448dc2622598ca2795607f8445811593a1bb10db4f2a3d
- SSDEEP 384:1G8+BLrC65laqOa6FNkDRokkur8V9DyXhp1DALF7A:7+BLrC65laqOa6FbRyXhp1sLF7A
- TLSH T1D0B241CE34B3E4B42877913E9363C845A26C25573254DC84B54E62244F839B6BBEB7F8
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/libcurl.lib
- SHA256 171b9e0163f62bc1060c9f0b1b2b255150b79d86a92383b5cded6d4b242bf319
- MD5 734cfc45c4e8f596a008379853051e87
- SHA1 07c1b631ae39caee646c14cb14a18c8b03c8eb60
- SHA512 51ba7ab841779c75c42c8c846ce2bd3320bbf44141108b6d15bc06af8fbefebcde7fd6edf94b395747b49baa23cc51160a9c62f6f938071e05a081d494e40bf8
- SSDEEP 24576:iaRP6BJyOqlDxy4fOXfpiOOcHPuU0XLHtJjAFczG:ZIPy7lD44f0McjCZzG
- TLSH T18095B5A57ED65C4BFF2D81F088F3902793B5F2B76661874B721850343AA7AC0BD93960
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/library_x64.lib
- SHA256 8134e6d6c5dfa52ccfc2954aca1aaee0c9205a3280d7402e7b21e8f00d0af20a
- MD5 8be4c4063219df1b1604130f6974eed5
- SHA1 1453cb24766efaee4ba3ce049796dbfaf4c6a2e9
- SHA512 ee0b344fde16418864567885246b1783bae75f4e608acc3f97d6592e480299560c4f522ae688db4faa9dca743015bb816e9a42cd323cc4ce50005657e0efcca5
- SSDEEP 24576:yiq3k6WUnckJjAG8rXDuU9HFOYi4fOXffHPDMsHyvBYVGAZT:Y037Ky9EKf0XvDMayWT
- TLSH T16AF5B911778A5E9BEE5E63F098F35113A334F593AB11534B71D9A0213FA328C7BA3960
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/main.cpp
- SHA256 b30d358e28dd30f16a035d4e5290d64149dc21f4a9ab02cd9bf2718e9ef1e97f
- MD5 2f1fc94d633ee516691a6700bb0fdbe2
- SHA1 34d97109cea489cbe34709e6d8cef289a1ab5c4e
- SHA512 79ec3ef90b37b21ff91bb948e4b0e4f898f32c4d34538b8946f3bf39ca176a38e606b57512aacb9f40d31e3b08565045af98cd10890996b398dc4e00ebc0cd2c
- SSDEEP 384:07GmeO+eWJF1do3uJw/Ief1DqMJzYwWkTlpVRX8vz4sskyhsFH:0eKQef1DqCQMlpjIz4sskyhsR
- TLSH T11CF2A59955A33E019473242C5FC39216BB3998B31FA8D304B95C72ACBF880A5D774BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/offsets.h
- SHA256 53b954e974e115698b7479cca590d97f7de49d78c75704e6ed6879116e77dbdc
- MD5 b9db7d5a4545c4ef9a997202e66cefad
- SHA1 5cbb7e9c6771af7c1e4ecac672d95cee4012e071
- SHA512 01ab93c3ee57c1f5b347fef449fb26a8f8e41576e0c2fb0f1df2b5fdf6032dcb17bf6a23c09904ae20ff993ecdaed33e6741db8acd98dec80117c41f658caf94
- TLSH T130210D5C0197004A8CDAA3B6AF1DBA61F883113314E5B905BE5EE4F47F5BD1C4E7272A
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/operator_esp.h
- SHA256 dd762c00ab5d959e01f4f4e2e536d4a69a16d80a7b6f46c321ba02883a16a27e
- MD5 670294b4ba9b4d55bd247098f2c79441
- SHA1 a0ec83614250a1febbcd9d13f80871383946dc4d
- SHA512 80ce69b9171e0462c60453eb8870980e189ea72428915394c35202d0ed3806c7396ca931cb9e3bb416823298dd22ae51778acb081b0bd7928d2613d8a83e9e90
- SSDEEP 96:L81ghHhMUW+B7lTedelnR4FT6UQsJcABqtniQTyH3ZzcIxeZW1hiJuFeCixJitE0:NiUdrTedeRMJQSDqliQTqZoWAW1hiJb0
- TLSH T116C1400586EA9522502356264B530C12F1B8C4E306DCAC5BFE6F11C89FFE9BCC970AF6
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/operator_icons.h
- SHA256 8eaa69e3a52de73d6a83027ab67bb9c013999be9cc3b4fb15ede13b11830be6c
- MD5 24bb0dec16945e7f90fd83a7d97a36e7
- SHA1 a85fb23a3506799992432879da3332b4b1d7c62a
- SHA512 b92d59c32a3434f8df89584642fa60b70b8cd705cf45592fcad9368a50e7d314704f2e45aadd4a55734a80bd58dde62f5dd6479d2605b447e2e333a7bc5e57db
- SSDEEP 12288:JqrrLckgSlUDCC3wlsl5P9Y7zExPFYtyoOVJ0SHmifNXwOlYZoSWzTAXk9txxKIm:w
- TLSH T1A416C1D53701A91AE46943705B034590D45EC60685C98FFBB3BDCF8FAA78CE399B8389
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/pasterx.h
- SHA256 ece16683cc86ed9034c91428306db14461aa7dab32ecad6b1a4ccb9b4a932871
- MD5 69ceb6d15c8c075555888c4a4bdde746
- SHA1 b18923f77aa8249304c166852274a6ca05c84121
- SHA512 69aac14071ffac8fe56e10898e38d28aaa83ff0aa76f022a978d789a7f83c78df24d023a1cb6e2e86a92c6cbb8e21d85af566de3e9d647990d72cf2237880623
- SSDEEP 192:2XaPwWE2FlFo8pBxjVzjXJROvB1A4cu0g5QiSrn4yi:WUjSyvjVzjXJROZ1A20g5/yn4yi
- TLSH T1EA0232666AEFD130E02264498E3B08ACF17C696007044C6EF19D19ACBC54F9EC62ED6B
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/r6_entities.h
- SHA256 2213383e68508dd4b72b2366a1d45e9289b5a7dbde8b0147b604638540a5f7f5
- MD5 308a33222e5169cd73a628999fab3066
- SHA1 00b81331ce52e5e83a5587907d53a7767144ac81
- SHA512 99d43f92472e1127eb67df75d0d75fc11e758f189332f32ba234fd7fbe9c5f326e6f48113bf9df7472508c61bde1abf2e61938aa08e2f4f6921da64163990ba7
- SSDEEP 384:75fXYZnll9WMdmDGUj/5YT54kKqRNAwME0UVfGLS61Pi6kssqXwxjQOcWmiSTquC:tQbvUr5q6SghsqXO/DASkZ+xkDi
- TLSH T16F03F78481E7A51258A3753D6FC7581DF258C09358CCD8A0FE4C8251AF961FFC2F9BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/r6_scanner.h
- SHA256 4a2b9119691fba9efae57dfbdea49cf14a6f6fedf93f9259fbea9ef9618a964c
- MD5 55a7a7436b02ac9c5aad1c12f3134b65
- SHA1 239ec65f85a742c6387c45a2f1519ebee2ca370a
- SHA512 96bcaed8dca7fb64e8b3fe96017d7b6b03c045b6638c0761c1cae793e4046ae37d297986a7cbc136ac33bf74f42d0a0d98b259313d381376fa39e97b7f201e87
- SSDEEP 384:x3rk2QPiMSX3VFeChfsEVdFHDzecrPl+F0:x34/PixX3VFeChfzVyElh
- TLSH T14D72B48E54DB18226693593E8F8B3021B6D49453A8DAEE00FD1C83C0EFC7579C6B5B97
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/resource.h
- SHA256 b532e8da61db5d4b1b8216d01c52189ab775b7831b65ade96f6963302795680e
- MD5 c107e2630ff9753a20ec6f8db6c7fce8
- SHA1 bb88871c0ed36920c4fea7f566d6633e87ee091e
- SHA512 70e961a65e8ca179847e4d17c334f91dbe6bb4534524caa13702191a9548472180f81ebcbc615889314f2d63387d32a190208c3f3175dcb0a7d565e084b15d1a
- TLSH T17CF02B394D98C02B5554F0C100061917495CFD9BA6590B7F32CCBCECEF368A903DE04E
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/reverse.rc
- SHA256 64806b798d2720805aa297c73c89209bf41796e55a07c780bea7586578bdd184
- MD5 f7c3a0d6a341a672c51546191c8e17cd
- SHA1 9bb87d47264da5334ef8b8ea01428de0f2915eea
- SHA512 8fb286036e80ea1c32ca1442e22ba817aa66b0e41921dfd311902883e47e8f7b0dedb5fce11df5046cd6a35db0091d945c8be342db069baef4dd91cbb74c800a
- TLSH T13E31A061484342738B30B0F07C017E15D229672F97925728B54DF9DDDBA3A5D038DC9E
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/reverse.vcxproj
- SHA256 fee5102dc6824521b737703b651665d40f4adfedb6eb1a6d0f90e73e5c5d9f5b
- MD5 a9aca253b7a2888890848b1f8bfd2c39
- SHA1 9b03db3df47fb4a976ea555fd9d37569efa5adf9
- SHA512 a76c2a8f879b25619cbff04fb38ea3316ba4a2acf0bc3475cd35c737f0bb79b54d746c1f578369b55b24b516b2799c0d89703cdebf90822901b7bbec2d3e50eb
- SSDEEP 192:L/zcLks4fbVPE/gPcV/gPce/xPcF8xPcX9yYL:r47/kw/kD/l+8leyYL
- TLSH T184121F64E4E42E5A92B3423BE1D79981EF30E3830D5A4C58F59EE35B9FB75082213732
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/reverse.vcxproj.filters
- SHA256 14c3330e0a6cf4a71b167e2202c78f9cb4b78a25d290c3a9cbfda99118e3f920
- MD5 8c4ef27d1ed8c2b6bcd633e547443e19
- SHA1 0b1eee9c33fad3fbf91cf2481c14ceabb7b6000d
- SHA512 3f73d62a05c7e99e7776cdde6f7855bff1b51e25d3f78e3ca7060f8c33701b9609eb86071bab12ad5689e075935e57b5ea13945fdda653e32c60fa8c21b5b4aa
- TLSH T1D3317071E3FC5E8C423209ABB746ED06DF64B3E3549100847694A5CBFBE7908922732A
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/reverse.vcxproj.user
- SHA256 c06a75b13f855a94d46616796e024c52b499f8f92cf00ccb571ddbc6ff574676
- MD5 244d056f5e959be6d9a2f7e94686f1c8
- SHA1 3ba38385380485d9ff25eb142eca0a01d8ce2fab
- SHA512 8d5c4c9e54c85c90224f7610fef69d9c7e8d0db6be369181ebed13e2be9c86b651a438f1978f99c3ef432a8cb6bc5b8df26c476e7e5b32511d0d31cd49b55f20
- TLSH T149C08C449600E821B7B0AA3493ACD87CF3FAB2E324F088ACF6D4D90D21071A860213A3
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/skeleton_emu.h
- SHA256 5172736a59e53b96d45d3166f26d432ad54d84d392b8cb1c63ef88b20add9cfd
- MD5 19d40e6574a1dad8027947a635c26782
- SHA1 de18eaa922406c8a374d09fc8105a07bac7be915
- SHA512 9d50a137d90a9ac058610d765d524bd834e937cb4d0f77a14f52d59a98e927b3e1530b706a35fcedcc2b27b4be00606977d371b2a1847f69ff0f859515423f98
- TLSH T1B1F04E18A16A4AD281D3DB7B5F57E4ABA8941087140578A7358CD230FF14CDB5057FF3
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/stb_image.h
- SHA256 1afa64c679b52a7fdf9864ce291b7fe52268e822d470eeb563bdd2a66b115466
- MD5 ffd465c2887eda7e256dca65a36c535e
- SHA1 981eccf38ada4fc06c3734d7c74694cf9170237c
- SHA512 57d42c86a9abdd5ad765fbc6cc00a84ea5572135eba182cc4dc9eeab72257442280469f3ec83d7cd7ca84628af5601efd8a09690eb9c34d4b6b35c2de8cbfede
- SSDEEP 1536:l4v3rkiIp4jEK+o07jZSG35WzrUOOgmVCbTiXdQwGrIn9Qb1iaQ+F3F7t8BDfs2j:l4AiITeTiXdQwnKQ7Pr323yoPCVm2a4
- TLSH T18F54C6C4184624710A73B37ADF875079E75AA46343A5A206BC0E53783F71738D2F9FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/ud.h
- SHA256 92c0625911127309a72261f76271ac53ecf6e5e8e4ccbf116eabc357133e7112
- MD5 df447cac9475cb203d5091778b9c2a05
- SHA1 1d772ca9ae3838d5ca00714f49b9f0da2f3f79eb
- SHA512 13326a2f7b62e9a4bf2b7f390064e8efc715a782624e3502b365fe008dbe4b58b2eb2b37e3fbb213944612fae761716b8dcf47912d7e5f94cfad787fd6b04a20
- TLSH T161515BF2EF3CE517CE74342D56CC02156EE8E061F169B9E3E43899E4A065A2E135DA0F
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/utils.hpp
- SHA256 549df1693683212f7c370fcdd3f61ca54903a774f19dc06cd5da379b37b65a10
- MD5 61e7b1399562ea985cc113e2e5cb85fa
- SHA1 d7eab03792f1b672ecb9d0a7d25e960bb4765dea
- SHA512 1af6878649fbac9fde43d7ffc260723cf637e761ee8a70004b5921bbc11fdcac9b5e6b5fd993f06c20e381fab1812da59a32bae4da9b6ff45ecbc5aa5abe2d6c
- TLSH T150119E81ECF97B4787AD11D61975640318B9FCA087B90AF8D2FB60A0750455DC0FD579
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/weather_fx.h
- SHA256 ef34ca10d23c9841eac073482ff251935c24e7f77599a1d5d75ea1f2ac4942ca
- MD5 936b5bd72d9bbf214234749c0a5aa2c2
- SHA1 53be844021a6b993cecae11242612d187340328b
- SHA512 751d05d09d4a846bca705ec89a412e919e9b4626563ed77f56234251f8c7f21d6351164d649217d56f7c53c58a120237ee063dfd71feb7338fab5a24888c60e3
- SSDEEP 192:lE7wh+eyr0oi8SwCAzLh22oOArlp7vQVne/yL:2W60oipGs2xoltUX
- TLSH T1D9021DAE05FB17122837693D6FC71C1B771A114384175AA27C0D69B3AF8702ED1E8EE6
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/CL.command.1.tlog
- SHA256 3a6129d90526416e07760fa103c2a2221f087973b6c6cd5ff5178e136b92e0fa
- MD5 ff70f9e098a61c281639f0d9e48ec78f
- SHA1 76b5fcb3f8328c5002fadf14084b0b8be62f8fee
- SHA512 e0c30a0f90c211d7d9bb25777f49901ec3ff48453093cd1f4e5e541c7bc03d24ba96f0fa8cefebe7783c254b91a92829a2283442a668a652a5abe4ffa9d5e69b
- SSDEEP 48:/MkN3k7TF7kN3k7ToxkN3k7T2lkN3k7TS0kN3k7TtruN3k7T/:UG0JG00G0qG0HG0RM03
- TLSH T1DBB1E53835ECA14AA3623BDE5FEBD4D7CA7877A1C972162F1474550F42E8D04AE20B36
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/CL.read.1.tlog
- SHA256 6e3331f7a4b6154e7a20ab8ca195a9c8aff85d2019b9e2c6bb47bc249fab8f38
- MD5 e9e6a4fd1d7b5c8f3e94ed0757f0f7b6
- SHA1 7e3c28a12e60c94f69e3b0aa00a27f263d10c196
- SHA512 e24d74634f555b06d8e9b29e7c905225e37de73b55e6edd38324aafe1f204945056c730b9877ac3feecd08d6e4912d11c34df4d5d248505b3ce302c692352303
- SSDEEP 384:g0vrDRDgv9SWvrDRDgviGvrDRDgvr6LdPrDRDgvSjFdxN:TuvxuvDuvuOvSjFdxN
- TLSH T1E2E34B1C70EA22495312B2C2DBCBA59BC327F2A8D63B576F61D4530303916136E92FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/CL.write.1.tlog
- SHA256 89e67bd230174b2f1cc2923e152411c1b00801c2a397ef9a4f30a01c99bd13b3
- MD5 d37ad8b18d8c66424c58d6342022f416
- SHA1 662178e7ef252c773e16fc77e82ed01c86f3b519
- SHA512 67b0a7fac8f0dca2d91b2d10215d018ce78ef6cd035af51b268fa34f4c993c1bdcc205da336f9773b8f0a1f6332e881082c537982d49d35a5feb881b82365032
- TLSH T18571417E34E4A14613033AE30FDAE1E0E72577A3EAB2277738C8966F52EC8011601779
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/Cl.items.tlog
- SHA256 1a003ac7c006d9d2ab6c9d9dbc61adceabe9cfd878f6d91b2aa453534944acdb
- MD5 252c660c731e38755ac80274bd98d0cf
- SHA1 6be11853f81a34157d0f80bda850b5cd64b94d4a
- SHA512 ceccb03672ad187e91f09dcf075e3e88ce36d6085d6344dd0b3c90ebf27fa79b48ee187ef16328cae13c750b1f4b434cfa4c639bb595a0846d0974327b4f0d27
- TLSH T16211C63F01304117D50366CE97F345AEEAA8E88558E169E60EEC9B5320CBE4DC655A3E
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/PasterSix RainbowSix made by Overhead.lastbuildstate
- SHA256 a28cc56025a399d7d6294fb500982b48950c0f1139104dab9c2f12046daea470
- MD5 75b3de30488f9ed4855fb08057b9d537
- SHA1 b443a634a0786a1832c56f86e0869ef5f41b37d6
- SHA512 fcaf9df3de22e31813670cf4ff6cec5266736e24a8796a8b0b0ee6470121505c1365152e16faee8c6c44bec5685da833bfdda35a5ac884b9e1392f0df42cb27d
- TLSH T154D022051340D5B6A8122A8EA0E100CE97B8F1480862308C4D84170E3FC720D402333E
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.command.1.tlog
- SHA256 c8b709178c0a49c462ed21dfd91eafdc5d11d7e63ac99a0e344faf3ca1433e6a
- MD5 bfc2ac5940eb1fc196803c2e5dc1fbcb
- SHA1 cf251d34ed3e6e1b5be1a6cd79da5303d2a6c61c
- SHA512 0fc07464cae21a9596e49143454c9490c4bcd67ddfff6052cdd5907162c5ea8cdde2baba26e8bd521c3a347918722dc8b7977d2e9e1fe37cb7ffa8222e63d990
- TLSH T152619F3A70E8724A431676D20FEAD0F5D7297766E677173F2CC0969F83E98066A01B34
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.read.1.tlog
- SHA256 d294a12bf7126e6829cc476bf9db087229d26280e0071450af29b9632c3f8ab1
- MD5 aee5bef6f42fafcfda685ce58e508f1e
- SHA1 ea0bde7edfd148af4f279e545d080e8ef8e9696d
- SHA512 1ce1a665a31b69a821c9d6c36c33c2db5170d22d52d98cca7f330a48d53f17693c5bd65bec25321657a6c6ba43724885034f15f0b2896b71cdd51996c159f743
- SSDEEP 96:yzxtaBE8MwtAZl9tY1dtPppx7RrZOwSYFJxrNGv:yzxtaSotov
- TLSH T107D1803970EA224A4306B6D28FCBF1ABD326B765EA7B137F64C4434B03D54076602B79
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.secondary.1.tlog
- SHA256 ef530a7c0e1c9f483d44b2e12d19c6baf791f45608fec88d2f09642a8a480343
- MD5 eb2dd6f990da2cd99a158f29a1375acb
- SHA1 ec7e1205430adab05ad3c3cb29d8a8ab29b00ecf
- SHA512 3b91dab332f4408f687e1083f4f98fc03e7cd681f75f9d0fe589213f7feb468d3de708c0f5e98257e0918fa2ea2cf12dcdab2e83446272d194cbca1d05537c99
- TLSH T121F0822CA5B848E8172A3F2E8303C4F8CDD6BDA4A0213C7AC5D8CD55D41929D07A32CB
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/PasterSi.F8CD68DB.tlog/link.write.1.tlog
- SHA256 3359fb4b15a2fbf96b716d8d7bfe3df5a11801038839657fd66aa853debd97b1
- MD5 765022a82fb5afa4369946b919182aec
- SHA1 9271a2ba550d6608291ab921ebb4e95ae27a9aa4
- SHA512 e0ca986cd93a3782453da11da20c83898a91642a404f7f973b1ef06ed65ca645278894fa668d90e73337a6e5b4f007f9bcfbecb8199d0a8414b8c4f25696cbbd
- TLSH T161210D3D30F5A18653063AE20FDAE1E5E72537A2E9B3237B28C4966F92DC8011601734
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/PasterSix RainbowSix made by Overhead.exe.recipe
- SHA256 43bd7731de738c1b9dd46352ba02bf78334f9e01a8e2d54789f60325a2725a8f
- MD5 ffe63a8c6c333e64877a461697f2c3c0
- SHA1 f4b69e60ffbd1c93006b6fcdc236fb9e43cc62f9
- SHA512 300959cf15c42819f4e9efb82cb8c0d633bb8a7770a405a47cdec8b60f8ef592df73a7cfe2b7cd91bed92279a850743b86665187a1d1973db2fff0bab79f13bd
- TLSH T1C6E026270880F216ABB1111DE37A5EAEEB4FFD8709700C603888CE7B1EC720808034BB
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/x64/Release/imgui.obj
- SHA256 c4b663572fb0c1948eccd6d6ccb813d25d1d6f3f0eb20d5f26be85b66b663fdf
- MD5 7b0116c39b88902ed54080ebc02a7d3e
- SHA1 3d8e01529b4995cb6b7b3bf48196e183d9fd57fa
- SHA512 f740885e768fbf17f185d24cc537cdc7938001416a5917c39256ca5ce0cb0d796bb22183c5015366f8c014ed3fd4572d2773b68244d4b82ecabe1c65eccc9631
- SSDEEP 12288:Xy2TNWBbuvCIL3alWq68QeHBDerc3k3QbLpKfy9i:Xy2Wuv53aEq8rc3OQvyy9i
- TLSH T12005E79ABAD8C939EA3A4132D4E74E7EB372F1A6124A4707375C511C7D8334C7B4A386
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/imgui_draw.obj
- SHA256 920d3115a32daa58c706173e00b581913a55a8d24ec6dd04ae6704c37ff2f14d
- MD5 e773749a18efaa746fcbfeea42f3641d
- SHA1 90db09a8dddabc91593b54f8529815cb957dd7f7
- SHA512 9352b4f683fcb853e1399e248a2d5d57c288d20a9b083c00b550cad2d4bb5bd4e6251366ba0b5cbc9b57f54b1aae2e830ace3d96935085fdead9478b2d2f5fe6
- SSDEEP 6144:Q9tXZpnXkvCBRKlsocklmSidwZchIZHAn2QFeB:sXZpU6Hgw4J
- TLSH T15CA4F856BAC89D52ED3A5235A0E70F6EB336FE96465FC7032B8C425EAE533C0BD19101
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/imgui_impl_dx9.obj
- SHA256 c209b315f4fa9653067a3643eda1f482f4caee94791746b3ae84c032d26f8800
- MD5 c9d99e273599023e9b4916f59fdc5cf4
- SHA1 e23668c05575569df3d9c50864525bd8b6b1453a
- SHA512 81dfb56a9b2ebf4225e7fa1d656750eff7413aaf88af7375e781b16075e63fddec68713cef0980c5b365a275681cfd9ddce6bb5031119baa582e720e9bed90c3
- SSDEEP 768:PS1ccG4NsLSSVLgSslgShcAVVJ9M/rl1RXJoQB3NgkyCHOZGbpy:Kn30SuglgShcAVVzMlPGQ1NgkYKY
- TLSH T15C439646A52DDAB0F922867AA2624A4F73C0FA177B2713524289B347FDC061D377F4B1
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/imgui_impl_win32.obj
- SHA256 ebbccb04be75489012914e58ae4575e190c8f4b3c35f4428cda4b4ab6d583bf6
- MD5 92232a741f974fe1d6bcc2cbb0f2c0b7
- SHA1 9d3d83b48d49f9ded7e9273e52403f9df970af32
- SHA512 2e3fcf81542426388a4212a2aa279430c111de144204817647ac0084463e41f9bcebc85921d81e85c151ef936dcbd6dd27dd79fafa4c211eafde779d0726a42d
- SSDEEP 384:Ud/PRHoCJArL4TsAbKRPcVdWxvrWr5UcJZHMUt4Aq10XK:m/PRhA25ScQMbtC1F
- TLSH T12DD28646D15DC6B0FE328B3AE2525A0E63D0FD17B72643124386625FFCC5A123B6E5A3
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/imgui_widgets.obj
- SHA256 bb8bd4cb7c1696e02410357dc30bf1f30dbfa8c7cf24cff9e62b67af2d13643f
- MD5 e59b00eb3efed08de0b61194301f8d8f
- SHA1 4cc989254dd24484868b893c7f03a6cce7b6cc03
- SHA512 390ebe4c871c08f327058158398c22c9f195a64ee6aaffc221e0af8fdb1639b2431db70e27391174705aba32870dd08ff0b42a2c57b8c5177da8551fc3882586
- SSDEEP 6144:U/sC70phADD+/q5QkgFhz3H+fapXXyi6laJgNFHvvGi2M0V7oKpDtJUa:IsC70pKPEL99itJvCMy75pDT
- TLSH T1B9E40895FED8C911E83A1230E4DB0E6DB332E5AE0A5B434B6B5D816C7D17700BDCA25E
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/main.obj
- SHA256 63d7238aad8cab7b3b372d4dd47f2e289c115ffccf42afcbd8ff11381f615cde
- MD5 23bd8cbc13259ed6fa0343a6a541a4de
- SHA1 070f50bef82dfe53535deb4b289f6fb378dfd8fc
- SHA512 0634713704c3d4790c1903e5b4714d6f628a096216ae7e1515114eb745025b6b389ed33105e81e610c923161bf7aa302f378ac949a31f59d805d2788548fbd4b
- SSDEEP 49152:ttUYZJ0JKNA38K0dGqkBTX+HArS78xgLR3ZvfYWg1Y63hw7Km6wA4yaLLhyLLhHz:pHXprlYOiI0i715lo140NVFCEH
- TLSH T16566615193594A57D96F33B5E8E3253AB275BC83BB52A70340D770121FF3388ABA3990
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/reverse.log
- SHA256 60ae995d3c2b8c27cead2767800c697d0b961e6c4e03d7870d5cf98e17879c7e
- MD5 d87881242b7da684115d18052100f4dd
- SHA1 7e25cba05ce526bb14f21b57b6582733885728e7
- SHA512 746c703b238585277ded5df0bff414530e11542dbb2d4375691b1692a228a8a07468581797aa502d9642bde213ecf7ceac0584c089072bda80fd0f02ab6780cd
- SSDEEP 384:r9wB/PcdbYxmtDSHkQ5yLD8FuQ5yLbL7/muLfqPoy3yzyryGy8yx5lKzx4Bsjj2V:e9iOWRzRBL
- TLSH T128926F2E111804A396271BCCA3E3549FD7FDEC8617F22512819C825254CFE9EFA7A978
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/vc143.pdb
- SHA256 bd9ca983f624ccd4604ae99f66f456742060cce3824e941a1fa015e046142be6
- MD5 e8a47df6122416bc89d152ce981ec1f3
- SHA1 38800d203c74f869cf98dfea6eb89829d494c03f
- SHA512 4de8f44ba27b4a3db01c1593742a9d7ee0c27c41be55fc9a7e0aa70c6d61bf06e5c1e694506640d3dda570c7f80467a49f0e90ff19400c697943b3f22508030e
- SSDEEP 49152:dhrEb3vYYcDwz+Kt4lRJ49d4NPK9EcHVHL0OdHSOHkHeHsHsHVHpK1oqE3UJKFmf:QNU5CGd
- TLSH T1A1B5E7A2D1958D23D4AF273AD493126433255E4BE7CD7BCF0087A1245EEB388DF6B981
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/reverse/x64/Release/vcpkg.applocal.log
- SHA256 f01a374e9c81e3db89b3a42940c4d6a5447684986a1296e42bf13f196eed6295
- MD5 3bab25a3e651a9e4a00473d2257b99f9
- SHA1 1419458f2696be8daeade77ddad380cd0c871fdb
- SHA512 ae8dc1129b7a81ba70c9512a94a3e9ccd8c159f1817e309198c2babaf5bcb3f7e97f43b54ea4937cbea468bb5a62328fc0c01982aa1b883d8fd6d2e2c58090ff
- MD5 SHA1 SHA512
R6 Paster Six external/reverse/xor.hpp
- SHA256 3afb5d807f3f05478c03ed166cbc937b004e1008351ea9e17fcbc919aa43ba42
- MD5 5355013964b0f3df342578dc78129611
- SHA1 ab064a63a95fb7f9f8590dac676c7bc86e0d5569
- SHA512 c9206421a796c5f6b84d7329afdb45d805165599d30a8b7e7bc5264233a922449b0a0bda60b628bb5099269e1c593abb7dbb8ff36ae65a4797d085b072cc484e
- TLSH T1BA5146B27A54E213BBD425A158E1940142FD2433B934EEF2D6BD8230A152E2FA2F3775
- MD5 SHA1 SHA512 TLSH
R6 Paster Six external/reverse/xstring.h
- SHA256 839b422f590bbaa9bce54a6855056e9cca5428a7d7b7f6cf4292dd8a7a8c08c6
- MD5 f0b67571aed2c7ca40234c7a8d87a329
- SHA1 9573279da8c80e2b2328ba7eeaf8899e11d3c1fc
- SHA512 fa2e8c2005f41f285739ddfc6050707bec3f71fab8c7921a9b09b2241a49191bd7d79869a463a292bc496c6462a188c9653ec8be4d06d83f0d71b7e869cdac2f
- SSDEEP 6144:UYUKOcznDID7wmJUe4TNO8PK/l4TNP8fS6duqZcXL6d4TIJFTNj9PjlWOpC7RqOc:pnDIDxJUe4TNO8PK/l4TNP8fS6duqZcK
- TLSH T1293483A321D6B44129767396F7831036E7095113B6B1C5E8F9EC86387FB2091D272FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
R6 Paster Six external/x64/Release/BeDaisy.sys
- IMPHASH 3803ac984b44d93e5b67a787365cd79f
- SHA256 35b0d79631b6c0e13569b35fea3371e540e1e24a1ad240aa4095bc003312463b
- MD5 4c0c465499d6ee54352570d2807d12d8
- SHA1 332a6b3bf722e97780d09328d420fc8815f8e514
- SHA512 53124eadac016c0ad5c2937d09a8a37a4fabda32b56bb3fb90defdab9fa2ba149841056f992e0fb7154308aa71b4f5352a5dcbb5d7ddecf0b5aa036f1899c5ce
- SSDEEP 384:e2regI48Iq1qhvYoP6MUMv5g5M/b0475a:eaUi/UMvTJa
- TLSH T15C822CC3A39C58E5E31DC1BB46661A27D1B2BC25272377DF0251C13A2757AE8753AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5216
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\User\Desktop\driver and inj\bin\Release\KernelDriver.pdb
ntoskrnl.exe
RtlInitUnicodeString
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
MmIsAddressValid
KeGetCurrentIrql
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
RtlEqualUnicodeString
ExFreePoolWithTag
ProbeForRead
ProbeForWrite
MmMapIoSpace
MmUnmapIoSpace
IoGetCurrentProcess
ObfDereferenceObject
ZwClose
KeStackAttachProcess
KeUnstackDetachProcess
PsLookupProcessByProcessId
ObOpenObjectByPointer
ZwAllocateVirtualMemory
ZwFreeVirtualMemory
PsGetProcessPeb
PsGetProcessWow64Process
ZwProtectVirtualMemory
__C_specific_handler
PsProcessType
MmBuildMdlForNonPagedPool
MmProtectMdlSystemAddress
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
IoDeleteSymbolicLink
IoFreeMdl
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
MmProbeAndLockPages
MmUnlockPages
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
PsGetThreadId
PsGetThreadProcessId
PsIsThreadTerminating
PsLookupThreadByThreadId
PsGetContextThread
PsSetContextThread
PsThreadType
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=259, version=33145,
count=1, id=260, version=33145,
count=3, id=257, version=33145,
count=51, id=1, productName=Unmarked objects,
count=6, id=260, version=34810,
count=1, id=258, version=34810,
R6 Paster Six external/x64/Release/PasterSix RainbowSix made by Overhead.exe
- IMPHASH 13fc67a215597b2f476443012d81e321
- SHA256 e28ca9a07aa706f04f0fbee73a8e6cfc6df3b28c46d4e47d3676e73dfb8ed783
- MD5 cb514364aa967a88c4b423bdef76a0fb
- SHA1 d0aeca382ba0300a7b0ae0767b7ec090db415ef9
- SHA512 42f20da1ed8bf89a7c6befcf19db322d097af0c39b2c75a2c9a24d4676f5118118e065fe98c7964fb8d72b96eea847e942d2490a89786ea0df6be3bcc1ba69d6
- SSDEEP 6144:Qv3bzZvcYHpkqFTuik4npuU0XJuFO3ACQpn9QLggggggg8nMY+FvSlDzLUvPaJ+V:QxvcMvFbpuUaYOspn9ZFvPvPh0YuuIe
- TLSH T1B3352756A55149A6C47A523454E2E23AFB7A3CB4063283071AEE7D333FF2EE1BC55342
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
319772
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dwmapi
DwmExtendFrameIntoClientArea
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
GetStdHandle
CreateFileW
CloseHandle
GetLastError
Sleep
CreateThread
OpenProcess
GetTickCount
VirtualAlloc
VirtualFree
VirtualQueryEx
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetConsoleWindow
CreateToolhelp32Snapshot
Process32First
Process32Next
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalFree
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalLock
GlobalUnlock
GlobalAlloc
GetCurrentProcess
ReleaseSRWLockExclusive
user32
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetKeyState
GetCapture
SetCapture
ReleaseCapture
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
GetWindow
FindWindowA
SetWindowLongA
GetWindowLongA
GetWindowRect
GetWindowTextA
GetForegroundWindow
UpdateWindow
GetSystemMetrics
GetAsyncKeyState
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadCursorA
ScreenToClient
ClientToScreen
gdi32
GetStockObject
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
msvcp140
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
d3d9
Direct3DCreate9Ex
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
memchr
__std_terminate
strstr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
strcmp
strncpy
isprint
strncmp
_stricmp
wcsncpy_s
api-ms-win-crt-stdio-l1-1-0
fclose
fflush
fread
fseek
_wfopen
ftell
__p__commode
_set_fmode
fwrite
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-math-l1-1-0
pow
atan2f
fminf
fmodf
fmaxf
fabs
_fdtest
sqrtf
sinf
floorf
__setusermatherr
powf
ceilf
cosf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_crt_atexit
exit
_invalid_parameter_noinfo_noreturn
_exit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
system
_cexit
api-ms-win-crt-convert-l1-1-0
strtoul
atof
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
312KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
781KB
Virtual Size
781KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rcal
Size
512B
Virtual Size
75B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=34321,
count=4, id=259, version=34321,
count=10, id=260, version=34321,
count=35, id=261, version=34321,
count=13, id=257, version=33145,
count=287, id=1, productName=Unmarked objects,
count=6, id=261, version=34810,
count=1, id=255, version=34810,
count=1, id=258, version=34810,
R6 Paster Six external/x64/pastersixrelease.rar
- SHA256 e2d89c062db9a3f2202294c8a76ecf88f633ada5b06b001d1d25b925f0e9fb9a
- MD5 4a3b17dc7f6b71d7d7444872510f91fe
- SHA1 7cf5e453b8ab7a4f68ae51bded01bb831d49edb5
- SHA512 38abf5c7b887fb10f82778816372174bae0adf75b81529e1a6b8bbc13f74f13b536fc7493a90170e785469846c17fb1d622ae3a1d09592d8eb7cbb77b3066ced
- SSDEEP 6144:qypKLt9SGlujF6ONk7jwdzDkRs1L0pAw5nzBpjepUaqXi9JhmEFV/Qrf2B1L1Vjk:1ciIuJN7hDywLKzVpnoJwEv15VJocns
- TLSH T1A1742362B9FF0A103E32DF508C8C8A517D7934A1FA96DD09D7C90C064BE389F96E065B
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/BeDaisy.sys
- IMPHASH 3803ac984b44d93e5b67a787365cd79f
- SHA256 35b0d79631b6c0e13569b35fea3371e540e1e24a1ad240aa4095bc003312463b
- MD5 4c0c465499d6ee54352570d2807d12d8
- SHA1 332a6b3bf722e97780d09328d420fc8815f8e514
- SHA512 53124eadac016c0ad5c2937d09a8a37a4fabda32b56bb3fb90defdab9fa2ba149841056f992e0fb7154308aa71b4f5352a5dcbb5d7ddecf0b5aa036f1899c5ce
- SSDEEP 384:e2regI48Iq1qhvYoP6MUMv5g5M/b0475a:eaUi/UMvTJa
- TLSH T15C822CC3A39C58E5E31DC1BB46661A27D1B2BC25272377DF0251C13A2757AE8753AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5216
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\User\Desktop\driver and inj\bin\Release\KernelDriver.pdb
ntoskrnl.exe
RtlInitUnicodeString
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
MmIsAddressValid
KeGetCurrentIrql
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
RtlEqualUnicodeString
ExFreePoolWithTag
ProbeForRead
ProbeForWrite
MmMapIoSpace
MmUnmapIoSpace
IoGetCurrentProcess
ObfDereferenceObject
ZwClose
KeStackAttachProcess
KeUnstackDetachProcess
PsLookupProcessByProcessId
ObOpenObjectByPointer
ZwAllocateVirtualMemory
ZwFreeVirtualMemory
PsGetProcessPeb
PsGetProcessWow64Process
ZwProtectVirtualMemory
__C_specific_handler
PsProcessType
MmBuildMdlForNonPagedPool
MmProtectMdlSystemAddress
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
IoDeleteSymbolicLink
IoFreeMdl
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
MmProbeAndLockPages
MmUnlockPages
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
PsGetThreadId
PsGetThreadProcessId
PsIsThreadTerminating
PsLookupThreadByThreadId
PsGetContextThread
PsSetContextThread
PsThreadType
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=259, version=33145,
count=1, id=260, version=33145,
count=3, id=257, version=33145,
count=51, id=1, productName=Unmarked objects,
count=6, id=260, version=34810,
count=1, id=258, version=34810,
Release/PasterSix RainbowSix made by Overhead.exe
- IMPHASH 13fc67a215597b2f476443012d81e321
- SHA256 e28ca9a07aa706f04f0fbee73a8e6cfc6df3b28c46d4e47d3676e73dfb8ed783
- MD5 cb514364aa967a88c4b423bdef76a0fb
- SHA1 d0aeca382ba0300a7b0ae0767b7ec090db415ef9
- SHA512 42f20da1ed8bf89a7c6befcf19db322d097af0c39b2c75a2c9a24d4676f5118118e065fe98c7964fb8d72b96eea847e942d2490a89786ea0df6be3bcc1ba69d6
- SSDEEP 6144:Qv3bzZvcYHpkqFTuik4npuU0XJuFO3ACQpn9QLggggggg8nMY+FvSlDzLUvPaJ+V:QxvcMvFbpuUaYOspn9ZFvPvPh0YuuIe
- TLSH T1B3352756A55149A6C47A523454E2E23AFB7A3CB4063283071AEE7D333FF2EE1BC55342
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
319772
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dwmapi
DwmExtendFrameIntoClientArea
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
GetStdHandle
CreateFileW
CloseHandle
GetLastError
Sleep
CreateThread
OpenProcess
GetTickCount
VirtualAlloc
VirtualFree
VirtualQueryEx
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetConsoleWindow
CreateToolhelp32Snapshot
Process32First
Process32Next
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalFree
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalLock
GlobalUnlock
GlobalAlloc
GetCurrentProcess
ReleaseSRWLockExclusive
user32
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
GetKeyState
GetCapture
SetCapture
ReleaseCapture
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
GetWindow
FindWindowA
SetWindowLongA
GetWindowLongA
GetWindowRect
GetWindowTextA
GetForegroundWindow
UpdateWindow
GetSystemMetrics
GetAsyncKeyState
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadCursorA
ScreenToClient
ClientToScreen
gdi32
GetStockObject
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
msvcp140
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
d3d9
Direct3DCreate9Ex
vcruntime140
__current_exception_context
__current_exception
__C_specific_handler
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
memchr
__std_terminate
strstr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
strcmp
strncpy
isprint
strncmp
_stricmp
wcsncpy_s
api-ms-win-crt-stdio-l1-1-0
fclose
fflush
fread
fseek
_wfopen
ftell
__p__commode
_set_fmode
fwrite
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-math-l1-1-0
pow
atan2f
fminf
fmodf
fmaxf
fabs
_fdtest
sqrtf
sinf
floorf
__setusermatherr
powf
ceilf
cosf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_crt_atexit
exit
_invalid_parameter_noinfo_noreturn
_exit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
system
_cexit
api-ms-win-crt-convert-l1-1-0
strtoul
atof
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
312KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
781KB
Virtual Size
781KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rcal
Size
512B
Virtual Size
75B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=34321,
count=4, id=259, version=34321,
count=10, id=260, version=34321,
count=35, id=261, version=34321,
count=13, id=257, version=33145,
count=287, id=1, productName=Unmarked objects,
count=6, id=261, version=34810,
count=1, id=255, version=34810,
count=1, id=258, version=34810,