b3bf1231aa9dd67faabc966e38f69f21e0502b15d054466476d6be555f02c1b9
- SHA256 b3bf1231aa9dd67faabc966e38f69f21e0502b15d054466476d6be555f02c1b9
Overview
overview
7Static
static
3Drunken Dr...er.sys
windows10-2004-x64
3Drunken Dr...64.sys
windows10-2004-x64
3Drunken Dr...ss.exe
windows10-2004-x64
1Drunken Dr...ss.exe
windows11-ltsc_2024-x64
1Drunken Dr...64.dll
windows10-2004-x64
1Drunken Dr...64.dll
windows11-ltsc_2024-x64
1Drunken Dr...32.dll
windows10-2004-x64
1Drunken Dr...32.dll
windows11-ltsc_2024-x64
1Drunken Dr...sk.vbs
windows10-2004-x64
5Drunken Dr...sk.vbs
windows11-ltsc_2024-x64
5Drunken Dr...��.bat
windows10-2004-x64
7Drunken Dr...��.bat
windows11-ltsc_2024-x64
7Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver64.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Drunken Dream Driver Cheat Engine/csrss.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Drunken Dream Driver Cheat Engine/csrss.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Drunken Dream Driver Cheat Engine/lua53-64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Drunken Dream Driver Cheat Engine/lua53-64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Drunken Dream Driver Cheat Engine/tcc64-32.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
Drunken Dream Driver Cheat Engine/tcc64-32.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Drunken Dream Driver Cheat Engine/vmdisk.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
Drunken Dream Driver Cheat Engine/vmdisk.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
Drunken Dream Driver Cheat Engine/Ա.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
Drunken Dream Driver Cheat Engine/Ա.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target b3bf1231aa9dd67faabc966e38f69f21e0502b15d054466476d6be555f02c1b9
- Size 9.3MB
- Sample260804-pgldfswves
- SHA256 b3bf1231aa9dd67faabc966e38f69f21e0502b15d054466476d6be555f02c1b9
- MD5 56aa7d253b34ed266ac7d2a2e9dae249
- SHA1 315357d80ddbe40d3fbfbcbdb026d69005e9f271
- SHA512 b4307a5340bb259eb1d54af78f1cf84684a58a9d0c4191fbdb8ac8c6c90162e9d5538079dc6456e6aed24dbc9e5b1d72dff67630e598a2045ad3ba40b3459110
- SSDEEP 196608:gVh/jmbxGPv+4UNE5ywcIjD6JWFt5g49vVQL/ezoGgmigT0sXr3TR:eBsxkvpUQyARzN2WzoPEr3TR
- TLSH T152A633D38AD8AED67913A9DC20220B1EA415EDF01FF67987C6F986EF9C831E65341710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Drunken Dream Driver Cheat Engine/csrss.exe unpack001/Drunken Dream Driver Cheat Engine/tcc64-32.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Drunken Dream Driver Cheat Engine/DrunkenDreamDriver.sys unpack001/Drunken Dream Driver Cheat Engine/DrunkenDreamDriver64.sys
File Explorer
-
b3bf1231aa9dd67faabc966e38f69f21e0502b15d054466476d6be555f02c1b9.zip 9.3MB
-
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver.sys.sys 3.5MB
-
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver64.sys.sys 91KB
-
Drunken Dream Driver Cheat Engine/csrss.exe.exe 15.0MB
-
Drunken Dream Driver Cheat Engine/driver64.dat77B
-
Drunken Dream Driver Cheat Engine/languages/desktop.ini54B
-
Drunken Dream Driver Cheat Engine/languages/language.ini287B
-
Drunken Dream Driver Cheat Engine/languages/monoscript.po2KB
-
Drunken Dream Driver Cheat Engine/languages/zh_CN/cheatengine-x86_64.po459KB
-
Drunken Dream Driver Cheat Engine/lua53-64.dll.dll 528KB
-
Drunken Dream Driver Cheat Engine/tcc64-32.dll.dll 346KB
-
Drunken Dream Driver Cheat Engine/vmdisk.img.vbs 466KB
-
Drunken Dream Driver Cheat Engine/Ա.bat30B
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver.sys
- IMPHASH 06a07f6506855e9a155d3f624607c82c
- SHA256 f0b8a732ff3286fb6213db03d98c01ed27296e4fdfdf95c83166957d74f62202
- MD5 9b5eef141fcfb2f56c3050bca1f560ab
- SHA1 53dac9e0d1a7e4f0410176f8bb78ee6cfccbb935
- SHA512 5d4c7b400f5d99e3298a0d1d8c5655d97af2c4c5b960a8fa884c40aa5bc7cab6a893a5c6e765218c78c501a05177eb4112ed127d032b2f423dab762233fe5395
- SSDEEP 98304:csY/L3cQoGKpzNUQG70i3iqwl/nLL9zY/NN1:csYT5KpxG7tmdLZCP1
- TLSH T133F502BD228833CCC41EC5745433ED88E6F5562E46F9E4EDB2EB7AC067AB5119602F09
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3f:c2:ca:89:17:71:cc:3f:59:7d:c5:4a:99:59:29:e0:04:15:da:27
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Baoji zhihengtaiye co.\,ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baoji zhihengtaiye co.\,ltd,L=Baoji,ST=Shannxi,C=CN
Chains
Jul 31, 2026
CN=Baoji zhihengtaiye co.\,ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baoji zhihengtaiye co.\,ltd,L=Baoji,ST=Shannxi,C=CN
Subject
CN=Baoji zhihengtaiye co.\,ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baoji zhihengtaiye co.\,ltd,L=Baoji,ST=Shannxi,C=CN
Serial Number
0f:a4:c3:1c:aa:9a:8b:97:4d:75:ed:0a:59:d1:4c:61
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 13, 2013 - Jun 13, 2014
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
10
Entry point
4598506
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ntoskrnl.exe
RtlGetVersion
_stricmp
ExAllocatePool
NtQuerySystemInformation
ExFreePoolWithTag
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
KeQueryActiveProcessors
KeSetSystemAffinityThread
KeRevertToUserAffinityThread
DbgPrint
wdfldr.sys
WdfVersionUnbind
hal
KeQueryPerformanceCounter
KeQueryPerformanceCounter
Name
.text
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
716B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
Virtual Size
622B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.zm0
Size
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.zm1
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.zm2
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Drunken Dream Driver Cheat Engine/DrunkenDreamDriver64.sys
- IMPHASH c07c9b1f23e4e7dafa545d6409726bb5
- SHA256 009de993ed32eccb64f9687f9ab602a5ea953af9e89c6b8e87b96a74c7b9ef7b
- MD5 e57416e8c3fb1948d27c6393fa37fc50
- SHA1 b5015ae03fd188207f98f54377ad6ba20f9cb51c
- SHA512 832a7986091ed1ae7122e839373e7e71481fafb36195c9d95be0b5e8141e0d715b6e57924d1778b1c6c17c3d49f591c06b0bbf2fb3c88b1f82d58ce5abc5fc00
- SSDEEP 1536:cMxTUWdWSp1zVnTG/mYSirUxnyGaFx9sqQypa7M0:9kSLz50mYSiWyGatLpa7R
- TLSH T15B93D806E7A650E4DC7AD17D8BA2362A79B038184B356BEF46508B620F71FE4DB3D344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c3:e8:97:3d:90:0b:8c:04:9e:f4:a0:08:1e:ee:f7:8f:48:f0:68:d6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Baoji zhihengtaiye co.\,ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baoji zhihengtaiye co.\,ltd,L=Baoji,ST=Shannxi,C=CN
Chains
Jul 31, 2026
CN=Baoji zhihengtaiye co.\,ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baoji zhihengtaiye co.\,ltd,L=Baoji,ST=Shannxi,C=CN
Subject
CN=Baoji zhihengtaiye co.\,ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baoji zhihengtaiye co.\,ltd,L=Baoji,ST=Shannxi,C=CN
Serial Number
0f:a4:c3:1c:aa:9a:8b:97:4d:75:ed:0a:59:d1:4c:61
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 13, 2013 - Jun 13, 2014
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
10
Entry point
4512
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\31759\Desktop\DrunkenDreamDriver64.pdb
ntoskrnl.exe
MmGetSystemRoutineAddress
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ObUnRegisterCallbacks
ZwClose
ZwOpenKey
ZwQueryValueKey
SeSinglePrivilegeCheck
PsSetCreateProcessNotifyRoutineEx
KeInitializeDpc
KeInsertQueueDpc
KeSetTargetProcessorDpc
KeFlushQueuedDpcs
KeRevertToUserAffinityThreadEx
KeSetSystemAffinityThreadEx
KeQueryActiveProcessors
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
PsGetCurrentProcessId
PsGetCurrentThreadId
KeDelayExecutionThread
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmAllocatePagesForMdlEx
PsWrapApcWow64Thread
IoAllocateMdl
IoFreeMdl
IoGetCurrentProcess
ObReferenceObjectByHandle
ObfDereferenceObject
ObRegisterCallbacks
ZwOpenSection
ZwMapViewOfSection
ZwUnmapViewOfSection
MmGetPhysicalMemoryRanges
MmGetPhysicalAddress
PsSetCreateThreadNotifyRoutine
PsGetProcessId
PsGetThreadProcessId
KeAttachProcess
KeDetachProcess
KeStackAttachProcess
KeUnstackDetachProcess
ExDeleteResourceLite
ObOpenObjectByPointer
ZwAllocateVirtualMemory
KeInitializeApc
KeInsertQueueApc
ZwOpenThread
ZwQueryInformationProcess
PsProcessType
PsThreadType
DbgBreakPointWithStatus
RtlGetVersion
MmGetVirtualForPhysical
PsLookupThreadByThreadId
__C_specific_handler
KeQueryActiveProcessorCount
KeClearEvent
ExAcquireResourceSharedLite
RtlInitializeGenericTable
RtlInsertElementGenericTable
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlGetElementGenericTable
KeReleaseSemaphore
KeInitializeSemaphore
KeWaitForMultipleObjects
ExAcquireFastMutex
ExReleaseFastMutex
MmBuildMdlForNonPagedPool
ZwCreateFile
ZwWriteFile
HalDispatchTable
KeInitializeMutex
KeReleaseMutex
KeSetSystemAffinityThread
KeQueryMaximumProcessorCount
MmAllocateContiguousMemorySpecifyCache
MmFreeContiguousMemory
PsCreateSystemThread
ZwDeleteFile
ZwWaitForSingleObject
swprintf_s
MmMapIoSpace
MmUnmapIoSpace
KeAcquireSpinLockAtDpcLevel
KeReleaseSpinLockFromDpcLevel
MmAllocateContiguousMemory
ZwQueryInformationFile
ZwReadFile
RtlUnwind
RtlAnsiCharToUnicodeChar
KeBugCheckEx
ExInitializeResourceLite
RtlCopyUnicodeString
ExFreePoolWithTag
ExAllocatePool
PsLookupProcessByProcessId
RtlInitUnicodeString
wdfldr.sys
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=136, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=27412,
count=113, id=1, productName=Unmarked objects,
count=3, id=259, version=27412,
count=17, id=260, version=27412,
count=3, id=261, version=27412,
count=6, id=259, version=30145,
count=15, id=260, version=30145,
count=1, id=258, version=30145,
Drunken Dream Driver Cheat Engine/csrss.exe
- IMPHASH 9221a687dd5fa7efec681d7b3a555063
- SHA256 0b88d2d209b16dfa8b2596c61e5e7c295951ed31ef64b72a7716e28d6c30341c
- MD5 37650702f1607b8b935e5c03508564e1
- SHA1 443b85106b23e61150e9dadde3f5db385afe7d78
- SHA512 0f814e17ed335b49dfe13321b3a55c5fc4321a9a16c068e98aa97b2f213276a1bee69479034efdc6dc385a9063ac8d2381a17cc14d4b4ebbfaa6110b7bac2d99
- SSDEEP 393216:QYApGJuJHoRawzx6YwokV//xPRqmA0KBHO:dzx6Ywok52rXu
- TLSH T1A4F64CBBB261DBD9C0DBC27659869BF15B30BD240971134323D5330E9FB68805EA9D8E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15456
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetStdHandle
GetConsoleMode
TlsGetValue
GetLastError
SetLastError
RaiseException
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
GetFileSize
SetEndOfFile
GetSystemInfo
LoadLibraryW
LoadLibraryA
GetProcAddress
FreeLibrary
FormatMessageW
DeleteFileW
MoveFileW
CreateFileW
GetFileAttributesW
CreateDirectoryW
RemoveDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
SetEnvironmentVariableW
GetConsoleOutputCP
GetOEMCP
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
GetCurrentThread
OpenThread
IsDebuggerPresent
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
GetShortPathNameA
GetEnvironmentStringsA
FreeEnvironmentStringsA
FormatMessageA
CreateSemaphoreA
CreateFileMappingA
OpenFileMappingA
GetLogicalDriveStringsA
LoadLibraryExA
OutputDebugStringA
FindResourceA
FindResourceExA
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GlobalAddAtomA
GetTempPathA
GetWindowsDirectoryA
GetDiskFreeSpaceA
CreateFileA
CreateNamedPipeA
GetComputerNameA
CreateProcessA
GetVersionExA
CompareStringA
GetLocaleInfoA
GetDateFormatA
EnumCalendarInfoA
GetModuleFileNameW
GetCommandLineW
CreateProcessW
FindFirstFileW
FindNextFileW
CompareStringW
GetLocaleInfoW
GetDateFormatW
FindFirstFileExW
FreeResource
LockResource
GlobalAlloc
GlobalReAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalMemoryStatus
FlushInstructionCache
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualQuery
VirtualQueryEx
GetProcessAffinityMask
GetProcessWorkingSetSize
SetProcessWorkingSetSize
OpenProcess
TerminateProcess
SetProcessAffinityMask
GetExitCodeProcess
CreateRemoteThread
SetThreadAffinityMask
GetExitCodeThread
SetErrorMode
WriteProcessMemory
ReleaseSemaphore
WaitForMultipleObjects
LoadResource
SizeofResource
GlobalDeleteAtom
FlushFileBuffers
DeviceIoControl
FindClose
GetFileTime
SetFileTime
DuplicateHandle
MulDiv
GetLocalTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
FileTimeToDosDateTime
DosDateTimeToFileTime
CreatePipe
ConnectNamedPipe
DisconnectNamedPipe
PeekNamedPipe
MapViewOfFile
UnmapViewOfFile
QueryPerformanceCounter
QueryPerformanceFrequency
CancelIo
GetCPInfo
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
GetOverlappedResult
GetFileSizeEx
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SafeArrayCreate
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayPtrOfIndex
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
user32
MessageBoxA
CharUpperBuffW
CharLowerBuffW
RegisterWindowMessageA
PeekMessageA
SendMessageA
SendMessageTimeoutA
PostMessageA
PostThreadMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
UnregisterClassA
GetClassInfoA
RegisterClassExA
CreateWindowExA
SendDlgItemMessageA
RegisterClipboardFormatA
GetClipboardFormatNameA
CharToOemA
CharUpperA
CharUpperBuffA
CharLowerA
CharLowerBuffA
GetMenuItemInfoA
SetPropA
GetPropA
RemovePropA
EnumPropsA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowLongA
GetClassLongA
SetWindowLongPtrA
GetClassLongPtrA
SetClassLongPtrA
FindWindowA
GetClassNameA
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
SystemParametersInfoA
DispatchMessageW
PeekMessageW
SendMessageW
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
UnregisterClassW
GetClassInfoW
CreateWindowExW
InsertMenuItemW
GetMenuItemInfoW
SetMenuItemInfoW
DrawTextW
DrawStateW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MessageBoxW
GetWindowLongPtrW
SetWindowLongPtrW
GetClassNameW
DefFrameProcW
DefMDIChildProcW
TranslateMessage
UnregisterHotKey
AttachThreadInput
PostQuitMessage
GetDoubleClickTime
IsWindow
IsMenu
DestroyWindow
ShowWindow
ShowWindowAsync
ShowOwnedPopups
CloseWindow
MoveWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
BringWindowToTop
IsZoomed
GetDlgItem
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
CountClipboardFormats
EnumClipboardFormats
EmptyClipboard
IsClipboardFormatAvailable
SetFocus
GetActiveWindow
GetFocus
GetKeyState
GetAsyncKeyState
keybd_event
mouse_event
GetCapture
SetCapture
ReleaseCapture
MsgWaitForMultipleObjects
SetTimer
KillTimer
EnableWindow
IsWindowEnabled
GetSystemMetrics
GetMenu
SetMenu
DrawMenuBar
GetSystemMenu
CreateMenu
CreatePopupMenu
DestroyMenu
EnableMenuItem
GetSubMenu
GetMenuItemCount
RemoveMenu
DeleteMenu
GetMenuItemRect
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
WindowFromDC
GetDC
GetDCEx
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
SetWindowRgn
InvalidateRect
InvalidateRgn
RedrawWindow
ScrollWindowEx
ShowScrollBar
EnableScrollBar
GetClientRect
GetWindowRect
AdjustWindowRectEx
MessageBeep
SetCursorPos
SetCursor
GetCursorPos
CreateCaret
GetCaretBlinkTime
DestroyCaret
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
ScreenToClient
MapWindowPoints
WindowFromPoint
GetSysColor
GetSysColorBrush
SetSysColors
DrawFocusRect
FillRect
FrameRect
SetRect
InflateRect
IntersectRect
OffsetRect
IsRectEmpty
PtInRect
GetDesktopWindow
GetParent
SetParent
EnumChildWindows
EnumThreadWindows
GetTopWindow
GetWindowThreadProcessId
GetLastActivePopup
GetWindow
CallNextHookEx
DestroyCursor
DestroyIcon
CopyImage
CreateIconIndirect
GetIconInfo
SetScrollInfo
GetScrollInfo
TranslateMDISysAccel
DrawEdge
DrawFrameControl
TrackPopupMenuEx
ChildWindowFromPointEx
DrawIconEx
FlashWindowEx
SetLayeredWindowAttributes
GetComboBoxInfo
SetMenuInfo
AllowSetForegroundWindow
advapi32
LookupAccountSidA
LookupPrivilegeValueA
RegQueryInfoKeyA
OpenSCManagerA
StartServiceA
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
ChangeServiceConfigW
CreateServiceW
OpenServiceW
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
AllocateAndInitializeSid
SetKernelObjectSecurity
RegCloseKey
RegFlushKey
CloseServiceHandle
ConvertStringSecurityDescriptorToSecurityDescriptorA
gdi32
CreateFontIndirectA
EnumFontFamiliesA
GetCharABCWidthsA
GetTextExtentPointA
GetTextMetricsA
GetObjectA
ExtTextOutA
CreateFontIndirectW
EnumFontFamiliesExW
GetCharABCWidthsW
GetTextExtentPoint32W
GetTextExtentExPointW
GetObjectW
TextOutW
ExtTextOutW
GetRandomRgn
Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateEllipticRgn
CreatePen
CreatePenIndirect
CreatePatternBrush
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EqualRgn
ExcludeClipRect
ExtCreateRegion
ExtFloodFill
FillRgn
GetROP2
GetBkColor
GetBitmapBits
GetClipBox
GetClipRgn
GetCurrentObject
GetDeviceCaps
GetDIBits
GetMapMode
GetObjectType
GetPixel
GetRegionData
GetRgnBox
GetStockObject
GetTextAlign
GetTextColor
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PtInRegion
RectInRegion
RectVisible
Rectangle
RestoreDC
RealizePalette
RoundRect
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetPixel
SetPolyFillMode
StretchBlt
SetRectRgn
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
CreateDIBSection
SetArcDirection
ExtCreatePen
MoveToEx
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
SetBrushOrgEx
GetDCOrgEx
ChoosePixelFormat
SetPixelFormat
SwapBuffers
AddFontMemResourceEx
RemoveFontMemResourceEx
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
shell32
DragQueryFileA
ExtractIconA
ShellExecuteA
Shell_NotifyIconA
DragQueryFileW
Shell_NotifyIconW
DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
opengl32
wglUseFontBitmapsA
wglCreateContext
wglMakeCurrent
wglGetProcAddress
ole32
CoCreateGuid
CoTaskMemFree
OleInitialize
OleUninitialize
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CLSIDFromProgID
CoInitialize
CoTaskMemAlloc
GetErrorInfo
comctl32
InitCommonControls
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Add
ImageList_Replace
ImageList_AddMasked
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Remove
ImageList_Copy
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
_TrackMouseEvent
imm32
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmNotifyIME
comdlg32
ChooseColorA
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ntdll
ZwCreateSection
ZwMapViewOfSection
NtResumeProcess
NtSuspendProcess
ZwUnmapViewOfSection
RtlCompareMemory
ws2_32
__WSAFDIsSet
accept
bind
closesocket
connect
ioctlsocket
getpeername
htons
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
WSAStartup
WSACleanup
WSAGetLastError
wsock32
closesocket
ioctlsocket
select
gethostbyaddr
gethostbyname
WSAStartup
uxtheme
OpenThemeData
CloseThemeData
GetThemeColor
SetWindowTheme
psapi
GetMappedFileNameA
GetDeviceDriverFileNameA
hhctrl.ocx
HtmlHelpA
lua53-64
lua_close
lua_newthread
lua_atpanic
lua_rotate
lua_rawlen
lua_absindex
lua_gettop
lua_settop
lua_pushvalue
lua_isnumber
lua_isinteger
lua_isstring
lua_iscfunction
lua_isuserdata
lua_type
lua_tonumberx
lua_tointegerx
lua_toboolean
lua_tolstring
lua_tocfunction
lua_touserdata
lua_pushnil
lua_pushnumber
lua_pushinteger
lua_pushlstring
lua_pushstring
lua_pushcclosure
lua_pushboolean
lua_pushlightuserdata
lua_gettable
lua_rawgeti
lua_createtable
lua_newuserdata
lua_getmetatable
lua_settable
lua_rawseti
lua_setmetatable
lua_callk
lua_pcallk
lua_load
lua_dump
lua_gc
lua_error
lua_next
lua_setglobal
lua_getglobal
lua_getinfo
lua_getlocal
lua_sethook
luaL_openlibs
luaL_argerror
luaL_ref
luaL_unref
luaL_loadfilex
luaL_loadstring
luaL_newstate
wininet
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetQueryDataAvailable
HttpOpenRequestA
HttpSendRequestA
Name
.text
Size
7.4MB
Virtual Size
7.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
919KB
Virtual Size
918KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
5.7MB
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
410KB
Virtual Size
410KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
536KB
Virtual Size
535KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Drunken Dream Driver Cheat Engine/driver64.dat
- SHA256 3bc04812adc02de599f0ee86acfd9821d8076f70c19c3082c0542f1c62a05eae
- MD5 f0e876f4e5c85a87ac6d889a1531706e
- SHA1 bf9fbfe19d33b18f88968bfbcf178431ca344e96
- SHA512 c451462bdca17910e407e108c2169dae092c9e9721cd622c6bb3bb57870b9e204362909513eba773994d943f83f714b5b7a2367c7fa54c72d5458c60747c9844
- TLSH T194A0110002C82828CAAFA002C382E0C08A0A80208328CC8A008882A0B28A03ECB28AA0
- MD5 SHA1 SHA512 TLSH
Drunken Dream Driver Cheat Engine/languages/desktop.ini
- SHA256 b8ec9db810bcf0e8b10a12b1beffad28a8342ba94f865d14004a9e0eb0a01dae
- MD5 dd08951963f364f2535ac751daaa3b7d
- SHA1 b1fedcf105399596edd8f205db7354e2d65f83df
- SHA512 ce44f8c64fbb239de4fdc86b50f0d49885bfb63f900518ee98e5ff492866e1eda1816ddb1ff53c90cc5900e4a281bd7fe64aa3ab51f8d9fd6a2dc4fb430c2b84
- TLSH T1439002870C0A8D50D13C01150876C651EB80A05505A1A18074C0E15AF6843CC7D44E40
- MD5 SHA1 SHA512 TLSH
Drunken Dream Driver Cheat Engine/languages/language.ini
- SHA256 dcb3a3e1f98b7e6f287db638d61b3a1a565d911a1c23c72d04371daaccecbec5
- MD5 f3a4a6a32ad79998e229eb881c39eedf
- SHA1 a8ccf160a46942ba8cc9041e71e17ec92ba353f5
- SHA512 0193dddcc38a115526c592eae2abff29b07805cefbd74704b102d7f1e4a3c663bc34541dfa01624812c8adf46a84338e8125b4b4abde8be068f69f160f798871
- TLSH T1BBD027161254033438B41179708C5946B604412915707F4037C91905F6C7DF913D4DF5
- MD5 SHA1 SHA512 TLSH
Drunken Dream Driver Cheat Engine/languages/monoscript.po
- SHA256 3842af13d8462a02e6f3a8b3b5c3079eaf1081b030415287f67f10fb6f622109
- MD5 5194e6aac00716ceb7498a8263abdb03
- SHA1 d249cc96e60a36b0b9da99d69903bd81d3f32c8f
- SHA512 a7f89289e3a8827367e827a29224fec0cc9d8699a082d592f372e13fb413bfd8b837a8313ad6530fa4bb6409e06a85bdba890ce00b00dc7ff3fcf873f7f0ef4f
- TLSH T1EA416D383DBA8D84C97003C03D3791F5EA582175643487893A863A9EA391FD55EBD3AE
- MD5 SHA1 SHA512 TLSH
Drunken Dream Driver Cheat Engine/languages/zh_CN/cheatengine-x86_64.po
- SHA256 d9852ed8a3a6293c388b2be661dcf0e7d61c933294becedc491c5c12d460173c
- MD5 b2cfca34c9bda047c70231beabd34c10
- SHA1 8e10413950c47b87e0bec72b84356fc35ecf0ba5
- SHA512 c5dd955c4db4e0f7abad5c5ba6ab49af430b2b2dcc4f0abde2eb18a439d58d74854282fedd92d031e7d7254d5c42dd23e72061cd9b1221e51118a5d99cc72279
- SSDEEP 6144:iEH2cMoruPTLyYGqtFynb4AJBtZRPiFQHylR0aE:DH2cmL2qtCRPvHgRO
- TLSH T116A4933498E85571C4BA0BD13EA2B1F5A61602B1C138631D9D9E0B267350FEA93B77FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Drunken Dream Driver Cheat Engine/lua53-64.dll
- IMPHASH 779703c2d47ce86829a9221b077786f6
- SHA256 6d0a06b90213f082cb98950890518c0f08b9fc16dbfab34d400267cb6cdadeff
- MD5 b7c9f1e7e640f1a034be84af86970d45
- SHA1 f795dc3d781b9578a96c92658b9f95806fc9bdde
- SHA512 da63992b68f1112c0d6b33e6004f38e85b3c3e251e0d5457cd63804a49c5aa05aa23249e0614dacad4fec28ca6efdb5ddee06da5bfbfa07e21942976201079f3
- SSDEEP 6144:FshVOadaiL9mUHQMpgL8LgpqClZNKX6SumisBEb/NUidzSky3uDMK/LXTMBQqN5T:hOL9J2L8E5VKKSuLGEhXGstCXoYkc7BV
- TLSH T1D0B47CA9A6781AB9FD3BD13AC8834917F7B234110B62DADF02E166750F137E2167B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
81:24:f5:6e:29:14:f8:4e:f1:41:77:d6:d5:6f:d1:de:1e:6f:c9:aa:eb:80:59:e4:25:e8:0a:a4:2e:7e:d4:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
63:38:84:cf:4a:92:39:93:31:3d:d1:94:0f:fe:b6:98:63:14:7b:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
May 30, 2021
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
30:38:81:1f:dd:43:0a:77:db:5b:3c:c2
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 13, 2021 - Jul 4, 2022
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 27, 2021 - Jun 28, 2032
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 20, 2019 - Mar 18, 2029
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
04:00:00:00:00:01:21:58:53:08:a2
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2009 - Mar 18, 2029
Minor OS version
2
Major OS version
5
Entry point
211692
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\git\cheat-engine\Cheat Engine\bin\lua53-64.pdb
kernel32
GetModuleFileNameA
LoadLibraryExA
GetLastError
GetProcAddress
FreeLibrary
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlPcToFileHeader
CloseHandle
DuplicateHandle
CreateProcessA
GetTempPathW
ReadFile
ExitProcess
GetModuleHandleExW
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetACP
ReadConsoleW
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
CreatePipe
CreateFileW
SetFilePointerEx
GetStringTypeW
DeleteFileW
GetTimeZoneInformation
MoveFileExW
GetCPInfo
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
WriteConsoleW
HeapSize
SetEndOfFile
RtlUnwind
?luaL_buffinit@@YAXPEAUlua_State@@PEAUluaL_Buffer@@@Z
?luaL_openlib@@YAXPEAUlua_State@@PEBDPEBUluaL_Reg@@H@Z
?luaL_pushmodule@@YAXPEAUlua_State@@PEBDH@Z
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resume
lua_rotate
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove
lua_yieldk
luaopen_base
luaopen_bit32
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8
Name
.text
Size
374KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=241, version=40116,
count=186, id=243, version=40116,
count=33, id=242, version=40116,
count=30, id=261, version=26706,
count=16, id=260, version=26706,
count=9, id=259, version=26706,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=36, id=265, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
Drunken Dream Driver Cheat Engine/tcc64-32.dll
- IMPHASH 62f09538e36ad7868f3d77fb1ec12b8a
- SHA256 4e21ddf6ff20a6c581eb06a19e94fa8927bf1633830f86085e1d4be2afd45579
- MD5 15db13055828032d18349a65f194a9fb
- SHA1 e8a133f9df9777e1f69988c30ec6c9e3594cd18c
- SHA512 54aff6286ebf6a3b89d10863c22d4c6c8c0e60be0cb5d2d1bb2751e71dec3cf9d362664607f58c8c2412528935ddb4dc2aa00383d245ed710ec62b52e032b69d
- SSDEEP 6144:rU6SQ50gsvEDmgv8HLnpDlaVZdohy108JQNlJpFgDncRrJKB:DSQ5z7i48HzXweh3ZDZFM
- TLSH T1AA745B9AB77004E8E567C038C552860BD3B27459039197EF67748BBA6F33BEA353A350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
260688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\31759\Desktop\Drunken Dream Driver Cheat Engine\tcc64-32.pdb
kernel32
LoadResource
FindResourceW
HeapAlloc
HeapDestroy
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
RaiseException
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
GetThreadContext
GetProcAddress
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
CloseHandle
HeapReAlloc
LockResource
DisableThreadLibraryCalls
GetLastError
MultiByteToWideChar
HeapSize
CreateFileW
FindResourceExW
InitializeCriticalSectionEx
DeviceIoControl
HeapFree
VirtualProtect
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoW
GetModuleHandleA
VerSetConditionMask
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetStdHandle
WaitForSingleObjectEx
MoveFileExW
FormatMessageW
SetLastError
GetTickCount
QueryPerformanceCounter
SleepEx
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
SizeofResource
user32
MessageBoxA
advapi32
CryptEncrypt
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CreateServiceA
OpenSCManagerA
StartServiceW
OpenServiceA
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptAcquireContextW
ws2_32
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
closesocket
WSAGetLastError
recv
ioctlsocket
sendto
recvfrom
bind
connect
getpeername
getsockname
getsockopt
htons
freeaddrinfo
getaddrinfo
listen
ntohs
htonl
setsockopt
accept
select
socket
WSASetLastError
__WSAFDIsSet
WSAIoctl
gethostname
wldap32
ord133
ord79
ord147
ord301
ord127
ord26
ord145
ord142
ord219
ord46
ord167
ord14
ord216
ord208
ord41
ord117
ord27
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
_CxxThrowException
__std_type_info_destroy_list
memchr
__std_exception_destroy
__std_exception_copy
memmove
memset
memcpy
strchr
strrchr
memcmp
strstr
api-ms-win-crt-runtime-l1-1-0
_initterm_e
__sys_nerr
__sys_errlist
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_beginthreadex
_errno
_invalid_parameter_noinfo
exit
_getpid
api-ms-win-crt-stdio-l1-1-0
fputs
__stdio_common_vsscanf
_getcwd
fputc
_close
_write
_read
fwrite
fread
feof
_lseeki64
fseek
__acrt_iob_func
fgets
_wopen
_wfopen
fflush
__stdio_common_vsprintf
fclose
api-ms-win-crt-heap-l1-1-0
calloc
free
realloc
malloc
_callnewh
api-ms-win-crt-string-l1-1-0
strcmp
tolower
strncpy
strspn
strncmp
_strdup
strpbrk
strnlen
strcspn
api-ms-win-crt-time-l1-1-0
_gmtime64
strftime
_time64
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
wcstombs
atoi
strtoul
strtol
strtoll
api-ms-win-crt-filesystem-l1-1-0
_waccess
_fstat64
_wstat64
_unlink
api-ms-win-crt-math-l1-1-0
_fdopen
DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetSymLoadError
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MiniDumpReadDumpStream
MiniDumpWriteDump
RangeMapAddPeImageSections
RangeMapCreate
RangeMapFree
RangeMapRead
RangeMapRemove
RangeMapWrite
RemoveInvalidModuleList
ReportSymbolLoadSummary
SearchTreeForFile
SearchTreeForFileW
SetCheckUserInterruptShared
SetSymLoadError
StackWalk
StackWalk64
StackWalkEx
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymAddrIncludeInlineTrace
SymCleanup
SymCompareInlineTrace
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsEx
SymEnumSymbolsExW
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromInlineContext
SymFromInlineContextW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymFunctionTableAccess64AccessRoutines
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrW64
SymGetLineFromInlineContext
SymGetLineFromInlineContextW
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileFromToken
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymQueryInlineTrace
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSearch
SymSearchW
SymSetContext
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetScopeFromInlineContext
SymSetSearchPath
SymSetSearchPathW
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
WinDbgExtensionDllInit
block
chksym
dbghelp
dh
fptr
homedir
inlinedbg
itoldyouso
lmi
lminfo
omap
optdbgdump
optdbgdumpaddr
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo
Name
.text
Size
254KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=253, version=28518,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30034,
count=105, id=260, version=30145,
count=22, id=261, version=30034,
count=11, id=257, version=27412,
count=239, id=1, productName=Unmarked objects,
count=6, id=265, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=258, version=30145,
Drunken Dream Driver Cheat Engine/vmdisk.img
- SHA256 c98759df4ced3dc19de1265f96c2384a2637984c09c170c1be7858a5740bf614
- MD5 c50b9376df81869850f0ea23dd994a16
- SHA1 2aedb88803e3f9f895e8174e16f31d9df022778c
- SHA512 980fd6e89b37738d4674311fe9983370255e3432b32127a7db794f0b58fc3cc0000d75adf334ff618c5323014e2cff7d0853a5da0a5b7c032a92ae356125c226
- SSDEEP 12288:UaxEQZz4HduTmK78J/eT9kwx/faKcE25jQ/ayPImEoL:XO03TF78JS9kwx/faKcE25jQ/ayPImEo
- TLSH T1B9A4F937E7A39168D117E2781B8BC6D1E5B078B80734A8CF73E609766B226904F2D3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Drunken Dream Driver Cheat Engine/Ա.bat
- SHA256 2e8274a993b411f3e58e841d85abbaefa921e06ab596d05331fdd640fc701887
- MD5 87065777dd386748c6a67bf23f6287fe
- SHA1 ed8869e91ee818c1c7544613e8ba3849eca17c33
- SHA512 bdc06a54b1fc080c8de299d4b479d36d44f345d28336f6821e4278df59b8d60b0408b63e768279ba734673e8feeb68fd00fe460b29698b1cfff9e0e401aaa7d3
- MD5 SHA1 SHA512