8xkvq9[.]zip | Triage™

resource
unpack001/Koola Ultimate Tweaking Utility V2.04.exe
unpack001/emu/KeyAuthEmu1.3.dll
unpack001/emu/KeyAuthEmu1.3.exe
unpack001/emu/Sodium.Core.dll
unpack001/emu/runtimes/win-x64/native/libsodium.dll
unpack001/emu/runtimes/win-x86/native/libsodium.dll

resource
unpack001/Guna.UI2.dll

8xkvq9.zip

SHA256 96606116ce12fa633fe4486e33c8960cb7e6a80a2b5684a3a36d8027757aa047
MD5 f0a93107f1939ef16c69348c033ac113
SHA1 f8d87a98d24415d0a2c22c33e952b67bad4a875a
SHA512 2260fc85d8aca75852e75428fe5c8512a689d4b4ff5828342dd31183b8c10b060eb855bbce4078a4b241c55d30a3a952954465a2748930fd19d8c63a99c8e165
SSDEEP 49152:WqCVsts85fG2LdeD+kkHNpHy4FEZmP0sfqtxub4Ay2/ACgQIPFmDt69IU57EOZXR:WqCVQH5fFeCkWPHy4FEZmP0aqDub4AyZ
TLSH
T1D6D5238958AA872E837CC53C544A05F9F41B1BAD722F2FC1D7182B96C9C8FDF64052B9
MD5 SHA1 SHA512 SSDEEP TLSH

1-1e69aada.ico

SHA256 2ae1fefc8d803cbd0e86dee575b054fd88d185963aefdcaf65b63075dc6723e9
MD5 00c130bdfbc818dace39d5a272fcb9ad
SHA1 155a5ca23e97eb6a4d9a37623bd5bc813795047a
SHA512 f77f2e3983d2dea60a20581fa596c99dd1ea3bf8cf3c1ae7561331fcebafd9d7b9d16afb2b62f09a4e13fad2db17f244db89800d307a0bc7ac866d6ba8e01ce8
SSDEEP 1536:2YVYUy9pJpU/lHuMyWEvmbKnZfqBsFkZPWGupLl68VIIsSHALgZKS+ib6/XY5N:mX4HuMyPmbLCeu76e4SHVKe6/XQ
TLSH
T10373128AA8EE5B6D07BDC03C148611E8D0176FAD723F3DC1875855A3899CF9F34465B8
MD5 SHA1 SHA512 SSDEEP TLSH

Guna.UI2.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
MD5 c19e9e6a4bc1b668d19505a0437e7f7e
SHA1 73be712aef4baa6e9dabfc237b5c039f62a847fa
SHA512 b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
SSDEEP 49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
TLSH
T1B4A5F9153DD4EE27C16ACE3395E25021E2F1E4933AB1EB0E72D757681842749788B3BE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

47:b4:cf:f5:c2:a1:e0:36:e9:3f:b8:c2:44:a0:df:33:c2:26:10:62

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Sobatdata Software

Chains

Nov 25, 2023

CN=Sobatdata Software

Minor OS version

0

Major OS version

4

Entry point

2159838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Koola Ultimate Tweaking Utility V2.04.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 be8c0aca59afb619cca092bf23635308dae81ce95768f0c1127a8b1e0d8b7cca
MD5 e47b8700a2b726100b6a71bf0e7eac57
SHA1 03d80b82b1ae030db2cb38fc859f93dac2a9b643
SHA512 b6f623816bdc6f2423cefd00f8b577eb6a584b364eb75225295c3968619928ccf811c17cc16fbdb0372d9028edcd4a199777c6b7db1a94a2e323aa6a47d91b48
SSDEEP 49152:/IqbOq6oqDqPBqnhqKq++q68qBhqt2qCbpm+H:wqbOq6oqDqPBqnhqKq++q68qBhqt2qCc
TLSH
T1E175BEBD346A4D07C67C0AF91005C08CB3FA950B2A9ED6CC9EC5B0EA5BF5FDA11116A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1625262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Koola Ultimate Tweaking Utility V2.04.exe.config

SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
MD5 9dbad5517b46f41dbb0d8780b20ab87e
SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
TLSH
T17CC080454054BD274D334B1357518539EFB073A36424140CF42FA7560F3114D4657377
MD5 SHA1 SHA512 TLSH

Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
TLSH
T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 8, 2023

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

704578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

System.Net.Http.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cb1b1ac1c1a435f7ea7ee75914aa7bb1324bfafb7910d8c814db62a77b09ffa0
MD5 cfaedd3de549e3cb02f8bb77a28bc076
SHA1 859c5f82a2fc22a6bcfbee92b841761a1b5b08b2
SHA512 d0cb88b8a6e6b27c159d609069ac4c586e0236dd0721c8c51e7e64202a17fda3084d0c035da8009162f8a00d20ef70f3b296c00b3096e87ab1819fe0e276956d
SSDEEP 1536:nC3UkaSGZKFcLZBPH5bdlY/zLcKAViCu8:nC3xaSGZKmBPJdlYrYK0u8
TLSH
T1A3833B0857E4832DE9B70BB0F8F5C5A7AA38F7823921C79D2485134D189274F97627EE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

20:51:57:65:26:e1:cd:c6:9e:0f:59:97:3c:2d:1c:2f:cf:eb:02:98:59:fb:90:09:40:61:8e:bd:51:38:a2:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 26, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

8e:58:ef:b6:df:49:7d:a3:d2:3b:78:4c:38:ee:2d:c4:4f:d5:c2:08

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 26, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b6:8b:47:43:b2:cc:ad:1f:04:00:00:00:00:00:b6

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 2, 2017 - Jan 2, 2019

Minor OS version

0

Major OS version

4

Entry point

76158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

emu/KeyAuthEmu1.3.deps.json

SHA256 82321b4d9a99f5927004dbec3190611816c801cd80f9743686360361c9a49c0b
MD5 b17f1b3e08d30439aea4700d08a064f4
SHA1 61b4c4cd279f305f8c20a8d9991d5a96c35191a9
SHA512 2a7088dd5c28849c4d52cafea3a4685d6b0c631088e176917551f418fbaf45adf0e3a3e13e5ccac34605fb4b418e78df46a964e5a9b83b898cad42aba0936699
TLSH
T1EC61A416F9804EA711B41BAA2E794781F230037FD504290FB8FC7A6E8F76E562204FB5
MD5 SHA1 SHA512 TLSH

emu/KeyAuthEmu1.3.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5ef7b10d5f62832fdfc2a5d9608027ad3ae5ab3a48bfd84d38ce2aaf66b5a5ea
MD5 574a26e2757a5ff8875cc532ef877541
SHA1 066f16ce003c0376dbe2269552b943031317f0e2
SHA512 a76a798d78b6cb46c747452704ed9ae47354c3a5c865b17d3880e1658c942eaf9fa6d4b235ed53ef864db5169dbdf8e85947317356eb78cc0d8037d0c186ffe6
SSDEEP 384:a8JawDaZLaXuqnw2ohqSttQDjWJ0VOqBz/maaIrMHT2iEqfxGKyky5baII1yfmax:a8M5LZtrJm6HT2iEgBbf1ShFKG
TLSH
T14FC2080C73CC4516C3FE43B7EC77444987B5B2132C21DABE8BC585652CE2B9A8562BAD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

33758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

emu/KeyAuthEmu1.3.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 93482943e4b184bf53b7b19c460fd273d24c5faf0ec98b7c2e2e1e7eee9282ac
MD5 6a1e370f2ea783fe05fc4e7e8f2bb0fe
SHA1 1b974c9ed7ce6442ba1947c64d6f1ddaff75c775
SHA512 ec6f585f81622bb6dacedbeda7ce37b4f4969c576a2b32402aa5228b8087e94a7dba570870698dadf40dab1db9b87c1a502fbc5a035edb4b037662903b929714
SSDEEP 3072:zhK4Uay3XrQ8habqgp9pC9Z6p5uf3C6k0xuZ04ntfx9RhBur:zhK4XycqgpfCup5sVxuZ041RhA
TLSH
T153D32903B2AC11FDE1BBA37C89A21A05F3767819477297CF0390856A1F67BD09E7A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

70208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

emu/KeyAuthEmu1.3.runtimeconfig.json

SHA256 162d81f468bec570ec15e527433f4de5d5729ffe338ab79b22671f38760d34bd
MD5 9fcdf880f73e74cf6347f8194b9f3509
SHA1 ab571c7ed4920129c89c7e083f3c9f22597198bc
SHA512 23ea2a78914aeec443bded1e6dddb1fce61f0445c53e0428e97353dcc25e9ee80a98603069de336d57c1d12b00eb14ad59847137387df330a3925bd763f4fde1
TLSH
T161D05E29CE405DA715FEB77FDA31C282FB34931B102418A5B4A8400C2FB7AA90201F9A
MD5 SHA1 SHA512 TLSH

emu/Sodium.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2148beb7a50d1e3be306ae4d3abc2276696744e8c926e39be7834e1e6b714084
MD5 b749cd8d4a51e0e16a8e135db8163890
SHA1 dd509b9f26849a6c7152d779438e0c56eb693cd7
SHA512 a3006246db11b291381a3ab46a874b724bee54b1a146aa5e4787077a9f273e82a7d6dc90dddd083dc1f252dfdcf57921bcff2385730e69e7c76edef54530612e
SSDEEP 768:ulLHjiNU09oOk+5RXqvS0hw9bfWS0mIK++ggwjkDENhEg4EgRe5S+U4opU4zU44z:ulLHjiNU09oOk+5RXqvZhw9bfWZmIjDQ
TLSH
T1DA23F994E7E29B11D7FD4338B8BA53319F31F88E6432C78F538500E994527A98168FE6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

54394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\libsodium-core\libsodium-core\src\Sodium.Core\obj\Release\netstandard2.1\Sodium.Core.pdb

emu/runtimes/win-x64/native/libsodium.dll

IMPHASH 7a6117b38d629a5e51517a131e884e3d
SHA256 597e80901f20bd742bb9102e17572278341cc77acd283dc47f172b9ca8fbda4f
MD5 7462950478708e413d32c5421280c056
SHA1 68a5fa3cf4be0ad8417a89b1efade07c4ca18757
SHA512 2d422baab92d65e58a71c1bae5de4ce9e3738ab3b840e1e7f91e7fa39ab72d13865014e5c7b83f18f3c5b311d683159d0ede389fcc2a4e16767a61da1badbbca
SSDEEP 6144:nqvR7IKDFtdOd3eoqe8FvexQcYz6WTCOMCBJluJuWV50DEr41DEl1wRAyO:nqOz0PcYz6WT7MOJluJSDREMAy
TLSH
T1B7746D5EF9EAA5E9CDB3E078C2BEC6A6FA55380C43E057F313C2495429537E14638B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

255820

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\libsodium\libsodium\bin\x64\Release\v143\dynamic\libsodium.pdb

crypto_aead_aegis128l_abytes crypto_aead_aegis128l_decrypt crypto_aead_aegis128l_decrypt_detached crypto_aead_aegis128l_encrypt crypto_aead_aegis128l_encrypt_detached crypto_aead_aegis128l_keybytes crypto_aead_aegis128l_keygen crypto_aead_aegis128l_messagebytes_max crypto_aead_aegis128l_npubbytes crypto_aead_aegis128l_nsecbytes crypto_aead_aegis256_abytes crypto_aead_aegis256_decrypt crypto_aead_aegis256_decrypt_detached crypto_aead_aegis256_encrypt crypto_aead_aegis256_encrypt_detached crypto_aead_aegis256_keybytes crypto_aead_aegis256_keygen crypto_aead_aegis256_messagebytes_max crypto_aead_aegis256_npubbytes crypto_aead_aegis256_nsecbytes crypto_aead_aes256gcm_abytes crypto_aead_aes256gcm_beforenm crypto_aead_aes256gcm_decrypt crypto_aead_aes256gcm_decrypt_afternm crypto_aead_aes256gcm_decrypt_detached crypto_aead_aes256gcm_decrypt_detached_afternm crypto_aead_aes256gcm_encrypt crypto_aead_aes256gcm_encrypt_afternm crypto_aead_aes256gcm_encrypt_detached crypto_aead_aes256gcm_encrypt_detached_afternm crypto_aead_aes256gcm_is_available crypto_aead_aes256gcm_keybytes crypto_aead_aes256gcm_keygen crypto_aead_aes256gcm_messagebytes_max crypto_aead_aes256gcm_npubbytes crypto_aead_aes256gcm_nsecbytes crypto_aead_aes256gcm_statebytes crypto_aead_chacha20poly1305_abytes crypto_aead_chacha20poly1305_decrypt crypto_aead_chacha20poly1305_decrypt_detached crypto_aead_chacha20poly1305_encrypt crypto_aead_chacha20poly1305_encrypt_detached crypto_aead_chacha20poly1305_ietf_abytes crypto_aead_chacha20poly1305_ietf_decrypt crypto_aead_chacha20poly1305_ietf_decrypt_detached crypto_aead_chacha20poly1305_ietf_encrypt crypto_aead_chacha20poly1305_ietf_encrypt_detached crypto_aead_chacha20poly1305_ietf_keybytes crypto_aead_chacha20poly1305_ietf_keygen crypto_aead_chacha20poly1305_ietf_messagebytes_max crypto_aead_chacha20poly1305_ietf_npubbytes crypto_aead_chacha20poly1305_ietf_nsecbytes crypto_aead_chacha20poly1305_keybytes crypto_aead_chacha20poly1305_keygen crypto_aead_chacha20poly1305_messagebytes_max crypto_aead_chacha20poly1305_npubbytes crypto_aead_chacha20poly1305_nsecbytes crypto_aead_xchacha20poly1305_ietf_abytes crypto_aead_xchacha20poly1305_ietf_decrypt crypto_aead_xchacha20poly1305_ietf_decrypt_detached crypto_aead_xchacha20poly1305_ietf_encrypt crypto_aead_xchacha20poly1305_ietf_encrypt_detached crypto_aead_xchacha20poly1305_ietf_keybytes crypto_aead_xchacha20poly1305_ietf_keygen crypto_aead_xchacha20poly1305_ietf_messagebytes_max crypto_aead_xchacha20poly1305_ietf_npubbytes crypto_aead_xchacha20poly1305_ietf_nsecbytes crypto_auth crypto_auth_bytes crypto_auth_hmacsha256 crypto_auth_hmacsha256_bytes crypto_auth_hmacsha256_final crypto_auth_hmacsha256_init crypto_auth_hmacsha256_keybytes crypto_auth_hmacsha256_keygen crypto_auth_hmacsha256_statebytes crypto_auth_hmacsha256_update crypto_auth_hmacsha256_verify crypto_auth_hmacsha512 crypto_auth_hmacsha512256 crypto_auth_hmacsha512256_bytes crypto_auth_hmacsha512256_final crypto_auth_hmacsha512256_init crypto_auth_hmacsha512256_keybytes crypto_auth_hmacsha512256_keygen crypto_auth_hmacsha512256_statebytes crypto_auth_hmacsha512256_update crypto_auth_hmacsha512256_verify crypto_auth_hmacsha512_bytes crypto_auth_hmacsha512_final crypto_auth_hmacsha512_init crypto_auth_hmacsha512_keybytes crypto_auth_hmacsha512_keygen crypto_auth_hmacsha512_statebytes crypto_auth_hmacsha512_update crypto_auth_hmacsha512_verify crypto_auth_keybytes crypto_auth_keygen crypto_auth_primitive crypto_auth_verify crypto_box crypto_box_afternm crypto_box_beforenm crypto_box_beforenmbytes crypto_box_boxzerobytes crypto_box_curve25519xchacha20poly1305_beforenm crypto_box_curve25519xchacha20poly1305_beforenmbytes crypto_box_curve25519xchacha20poly1305_detached crypto_box_curve25519xchacha20poly1305_detached_afternm crypto_box_curve25519xchacha20poly1305_easy crypto_box_curve25519xchacha20poly1305_easy_afternm crypto_box_curve25519xchacha20poly1305_keypair crypto_box_curve25519xchacha20poly1305_macbytes crypto_box_curve25519xchacha20poly1305_messagebytes_max crypto_box_curve25519xchacha20poly1305_noncebytes crypto_box_curve25519xchacha20poly1305_open_detached crypto_box_curve25519xchacha20poly1305_open_detached_afternm crypto_box_curve25519xchacha20poly1305_open_easy crypto_box_curve25519xchacha20poly1305_open_easy_afternm crypto_box_curve25519xchacha20poly1305_publickeybytes crypto_box_curve25519xchacha20poly1305_seal crypto_box_curve25519xchacha20poly1305_seal_open crypto_box_curve25519xchacha20poly1305_sealbytes crypto_box_curve25519xchacha20poly1305_secretkeybytes crypto_box_curve25519xchacha20poly1305_seed_keypair crypto_box_curve25519xchacha20poly1305_seedbytes crypto_box_curve25519xsalsa20poly1305 crypto_box_curve25519xsalsa20poly1305_afternm crypto_box_curve25519xsalsa20poly1305_beforenm crypto_box_curve25519xsalsa20poly1305_beforenmbytes crypto_box_curve25519xsalsa20poly1305_boxzerobytes crypto_box_curve25519xsalsa20poly1305_keypair crypto_box_curve25519xsalsa20poly1305_macbytes crypto_box_curve25519xsalsa20poly1305_messagebytes_max crypto_box_curve25519xsalsa20poly1305_noncebytes crypto_box_curve25519xsalsa20poly1305_open crypto_box_curve25519xsalsa20poly1305_open_afternm crypto_box_curve25519xsalsa20poly1305_publickeybytes crypto_box_curve25519xsalsa20poly1305_secretkeybytes crypto_box_curve25519xsalsa20poly1305_seed_keypair crypto_box_curve25519xsalsa20poly1305_seedbytes crypto_box_curve25519xsalsa20poly1305_zerobytes crypto_box_detached crypto_box_detached_afternm crypto_box_easy crypto_box_easy_afternm crypto_box_keypair crypto_box_macbytes crypto_box_messagebytes_max crypto_box_noncebytes crypto_box_open crypto_box_open_afternm crypto_box_open_detached crypto_box_open_detached_afternm crypto_box_open_easy crypto_box_open_easy_afternm crypto_box_primitive crypto_box_publickeybytes crypto_box_seal crypto_box_seal_open crypto_box_sealbytes crypto_box_secretkeybytes crypto_box_seed_keypair crypto_box_seedbytes crypto_box_zerobytes crypto_core_ed25519_add crypto_core_ed25519_bytes crypto_core_ed25519_from_hash crypto_core_ed25519_from_uniform crypto_core_ed25519_hashbytes crypto_core_ed25519_is_valid_point crypto_core_ed25519_nonreducedscalarbytes crypto_core_ed25519_random crypto_core_ed25519_scalar_add crypto_core_ed25519_scalar_complement crypto_core_ed25519_scalar_invert crypto_core_ed25519_scalar_mul crypto_core_ed25519_scalar_negate crypto_core_ed25519_scalar_random crypto_core_ed25519_scalar_reduce crypto_core_ed25519_scalar_sub crypto_core_ed25519_scalarbytes crypto_core_ed25519_sub crypto_core_ed25519_uniformbytes crypto_core_hchacha20 crypto_core_hchacha20_constbytes crypto_core_hchacha20_inputbytes crypto_core_hchacha20_keybytes crypto_core_hchacha20_outputbytes crypto_core_hsalsa20 crypto_core_hsalsa20_constbytes crypto_core_hsalsa20_inputbytes crypto_core_hsalsa20_keybytes crypto_core_hsalsa20_outputbytes crypto_core_ristretto255_add crypto_core_ristretto255_bytes crypto_core_ristretto255_from_hash crypto_core_ristretto255_hashbytes crypto_core_ristretto255_is_valid_point crypto_core_ristretto255_nonreducedscalarbytes crypto_core_ristretto255_random crypto_core_ristretto255_scalar_add crypto_core_ristretto255_scalar_complement crypto_core_ristretto255_scalar_invert crypto_core_ristretto255_scalar_mul crypto_core_ristretto255_scalar_negate crypto_core_ristretto255_scalar_random crypto_core_ristretto255_scalar_reduce crypto_core_ristretto255_scalar_sub crypto_core_ristretto255_scalarbytes crypto_core_ristretto255_sub crypto_core_salsa20 crypto_core_salsa2012 crypto_core_salsa2012_constbytes crypto_core_salsa2012_inputbytes crypto_core_salsa2012_keybytes crypto_core_salsa2012_outputbytes crypto_core_salsa208 crypto_core_salsa208_constbytes crypto_core_salsa208_inputbytes crypto_core_salsa208_keybytes crypto_core_salsa208_outputbytes crypto_core_salsa20_constbytes crypto_core_salsa20_inputbytes crypto_core_salsa20_keybytes crypto_core_salsa20_outputbytes crypto_generichash crypto_generichash_blake2b crypto_generichash_blake2b_bytes crypto_generichash_blake2b_bytes_max crypto_generichash_blake2b_bytes_min crypto_generichash_blake2b_final crypto_generichash_blake2b_init crypto_generichash_blake2b_init_salt_personal crypto_generichash_blake2b_keybytes crypto_generichash_blake2b_keybytes_max crypto_generichash_blake2b_keybytes_min crypto_generichash_blake2b_keygen crypto_generichash_blake2b_personalbytes crypto_generichash_blake2b_salt_personal crypto_generichash_blake2b_saltbytes crypto_generichash_blake2b_statebytes crypto_generichash_blake2b_update crypto_generichash_bytes crypto_generichash_bytes_max crypto_generichash_bytes_min crypto_generichash_final crypto_generichash_init crypto_generichash_keybytes crypto_generichash_keybytes_max crypto_generichash_keybytes_min crypto_generichash_keygen crypto_generichash_primitive crypto_generichash_statebytes crypto_generichash_update crypto_hash crypto_hash_bytes crypto_hash_primitive crypto_hash_sha256 crypto_hash_sha256_bytes crypto_hash_sha256_final crypto_hash_sha256_init crypto_hash_sha256_statebytes crypto_hash_sha256_update crypto_hash_sha512 crypto_hash_sha512_bytes crypto_hash_sha512_final crypto_hash_sha512_init crypto_hash_sha512_statebytes crypto_hash_sha512_update crypto_kdf_blake2b_bytes_max crypto_kdf_blake2b_bytes_min crypto_kdf_blake2b_contextbytes crypto_kdf_blake2b_derive_from_key crypto_kdf_blake2b_keybytes crypto_kdf_bytes_max crypto_kdf_bytes_min crypto_kdf_contextbytes crypto_kdf_derive_from_key crypto_kdf_hkdf_sha256_bytes_max crypto_kdf_hkdf_sha256_bytes_min crypto_kdf_hkdf_sha256_expand crypto_kdf_hkdf_sha256_extract crypto_kdf_hkdf_sha256_extract_final crypto_kdf_hkdf_sha256_extract_init crypto_kdf_hkdf_sha256_extract_update crypto_kdf_hkdf_sha256_keybytes crypto_kdf_hkdf_sha256_keygen crypto_kdf_hkdf_sha256_statebytes crypto_kdf_hkdf_sha512_bytes_max crypto_kdf_hkdf_sha512_bytes_min crypto_kdf_hkdf_sha512_expand crypto_kdf_hkdf_sha512_extract crypto_kdf_hkdf_sha512_extract_final crypto_kdf_hkdf_sha512_extract_init crypto_kdf_hkdf_sha512_extract_update crypto_kdf_hkdf_sha512_keybytes crypto_kdf_hkdf_sha512_keygen crypto_kdf_keybytes crypto_kdf_keygen crypto_kdf_primitive crypto_kx_client_session_keys crypto_kx_keypair crypto_kx_primitive crypto_kx_publickeybytes crypto_kx_secretkeybytes crypto_kx_seed_keypair crypto_kx_seedbytes crypto_kx_server_session_keys crypto_kx_sessionkeybytes crypto_onetimeauth crypto_onetimeauth_bytes crypto_onetimeauth_final crypto_onetimeauth_init crypto_onetimeauth_keybytes crypto_onetimeauth_keygen crypto_onetimeauth_poly1305 crypto_onetimeauth_poly1305_bytes crypto_onetimeauth_poly1305_final crypto_onetimeauth_poly1305_init crypto_onetimeauth_poly1305_keybytes crypto_onetimeauth_poly1305_keygen crypto_onetimeauth_poly1305_statebytes crypto_onetimeauth_poly1305_update crypto_onetimeauth_poly1305_verify crypto_onetimeauth_primitive crypto_onetimeauth_statebytes crypto_onetimeauth_update crypto_onetimeauth_verify crypto_pwhash crypto_pwhash_alg_argon2i13 crypto_pwhash_alg_argon2id13 crypto_pwhash_alg_default crypto_pwhash_argon2i crypto_pwhash_argon2i_alg_argon2i13 crypto_pwhash_argon2i_bytes_max crypto_pwhash_argon2i_bytes_min crypto_pwhash_argon2i_memlimit_interactive crypto_pwhash_argon2i_memlimit_max crypto_pwhash_argon2i_memlimit_min crypto_pwhash_argon2i_memlimit_moderate crypto_pwhash_argon2i_memlimit_sensitive crypto_pwhash_argon2i_opslimit_interactive crypto_pwhash_argon2i_opslimit_max crypto_pwhash_argon2i_opslimit_min crypto_pwhash_argon2i_opslimit_moderate crypto_pwhash_argon2i_opslimit_sensitive crypto_pwhash_argon2i_passwd_max crypto_pwhash_argon2i_passwd_min crypto_pwhash_argon2i_saltbytes crypto_pwhash_argon2i_str crypto_pwhash_argon2i_str_needs_rehash crypto_pwhash_argon2i_str_verify crypto_pwhash_argon2i_strbytes crypto_pwhash_argon2i_strprefix crypto_pwhash_argon2id crypto_pwhash_argon2id_alg_argon2id13 crypto_pwhash_argon2id_bytes_max crypto_pwhash_argon2id_bytes_min crypto_pwhash_argon2id_memlimit_interactive crypto_pwhash_argon2id_memlimit_max crypto_pwhash_argon2id_memlimit_min crypto_pwhash_argon2id_memlimit_moderate crypto_pwhash_argon2id_memlimit_sensitive crypto_pwhash_argon2id_opslimit_interactive crypto_pwhash_argon2id_opslimit_max crypto_pwhash_argon2id_opslimit_min crypto_pwhash_argon2id_opslimit_moderate crypto_pwhash_argon2id_opslimit_sensitive crypto_pwhash_argon2id_passwd_max crypto_pwhash_argon2id_passwd_min crypto_pwhash_argon2id_saltbytes crypto_pwhash_argon2id_str crypto_pwhash_argon2id_str_needs_rehash crypto_pwhash_argon2id_str_verify crypto_pwhash_argon2id_strbytes crypto_pwhash_argon2id_strprefix crypto_pwhash_bytes_max crypto_pwhash_bytes_min crypto_pwhash_memlimit_interactive crypto_pwhash_memlimit_max crypto_pwhash_memlimit_min crypto_pwhash_memlimit_moderate crypto_pwhash_memlimit_sensitive crypto_pwhash_opslimit_interactive crypto_pwhash_opslimit_max crypto_pwhash_opslimit_min crypto_pwhash_opslimit_moderate crypto_pwhash_opslimit_sensitive crypto_pwhash_passwd_max crypto_pwhash_passwd_min crypto_pwhash_primitive crypto_pwhash_saltbytes crypto_pwhash_scryptsalsa208sha256 crypto_pwhash_scryptsalsa208sha256_bytes_max crypto_pwhash_scryptsalsa208sha256_bytes_min crypto_pwhash_scryptsalsa208sha256_ll crypto_pwhash_scryptsalsa208sha256_memlimit_interactive crypto_pwhash_scryptsalsa208sha256_memlimit_max crypto_pwhash_scryptsalsa208sha256_memlimit_min crypto_pwhash_scryptsalsa208sha256_memlimit_sensitive crypto_pwhash_scryptsalsa208sha256_opslimit_interactive crypto_pwhash_scryptsalsa208sha256_opslimit_max crypto_pwhash_scryptsalsa208sha256_opslimit_min crypto_pwhash_scryptsalsa208sha256_opslimit_sensitive crypto_pwhash_scryptsalsa208sha256_passwd_max crypto_pwhash_scryptsalsa208sha256_passwd_min crypto_pwhash_scryptsalsa208sha256_saltbytes crypto_pwhash_scryptsalsa208sha256_str crypto_pwhash_scryptsalsa208sha256_str_needs_rehash crypto_pwhash_scryptsalsa208sha256_str_verify crypto_pwhash_scryptsalsa208sha256_strbytes crypto_pwhash_scryptsalsa208sha256_strprefix crypto_pwhash_str crypto_pwhash_str_alg crypto_pwhash_str_needs_rehash crypto_pwhash_str_verify crypto_pwhash_strbytes crypto_pwhash_strprefix crypto_scalarmult crypto_scalarmult_base crypto_scalarmult_bytes crypto_scalarmult_curve25519 crypto_scalarmult_curve25519_base crypto_scalarmult_curve25519_bytes crypto_scalarmult_curve25519_scalarbytes crypto_scalarmult_ed25519 crypto_scalarmult_ed25519_base crypto_scalarmult_ed25519_base_noclamp crypto_scalarmult_ed25519_bytes crypto_scalarmult_ed25519_noclamp crypto_scalarmult_ed25519_scalarbytes crypto_scalarmult_primitive crypto_scalarmult_ristretto255 crypto_scalarmult_ristretto255_base crypto_scalarmult_ristretto255_bytes crypto_scalarmult_ristretto255_scalarbytes crypto_scalarmult_scalarbytes crypto_secretbox crypto_secretbox_boxzerobytes crypto_secretbox_detached crypto_secretbox_easy crypto_secretbox_keybytes crypto_secretbox_keygen crypto_secretbox_macbytes crypto_secretbox_messagebytes_max crypto_secretbox_noncebytes crypto_secretbox_open crypto_secretbox_open_detached crypto_secretbox_open_easy crypto_secretbox_primitive crypto_secretbox_xchacha20poly1305_detached crypto_secretbox_xchacha20poly1305_easy crypto_secretbox_xchacha20poly1305_keybytes crypto_secretbox_xchacha20poly1305_macbytes crypto_secretbox_xchacha20poly1305_messagebytes_max crypto_secretbox_xchacha20poly1305_noncebytes crypto_secretbox_xchacha20poly1305_open_detached crypto_secretbox_xchacha20poly1305_open_easy crypto_secretbox_xsalsa20poly1305 crypto_secretbox_xsalsa20poly1305_boxzerobytes crypto_secretbox_xsalsa20poly1305_keybytes crypto_secretbox_xsalsa20poly1305_keygen crypto_secretbox_xsalsa20poly1305_macbytes crypto_secretbox_xsalsa20poly1305_messagebytes_max crypto_secretbox_xsalsa20poly1305_noncebytes crypto_secretbox_xsalsa20poly1305_open crypto_secretbox_xsalsa20poly1305_zerobytes crypto_secretbox_zerobytes crypto_secretstream_xchacha20poly1305_abytes crypto_secretstream_xchacha20poly1305_headerbytes crypto_secretstream_xchacha20poly1305_init_pull crypto_secretstream_xchacha20poly1305_init_push crypto_secretstream_xchacha20poly1305_keybytes crypto_secretstream_xchacha20poly1305_keygen crypto_secretstream_xchacha20poly1305_messagebytes_max crypto_secretstream_xchacha20poly1305_pull crypto_secretstream_xchacha20poly1305_push crypto_secretstream_xchacha20poly1305_rekey crypto_secretstream_xchacha20poly1305_statebytes crypto_secretstream_xchacha20poly1305_tag_final crypto_secretstream_xchacha20poly1305_tag_message crypto_secretstream_xchacha20poly1305_tag_push crypto_secretstream_xchacha20poly1305_tag_rekey crypto_shorthash crypto_shorthash_bytes crypto_shorthash_keybytes crypto_shorthash_keygen crypto_shorthash_primitive crypto_shorthash_siphash24 crypto_shorthash_siphash24_bytes crypto_shorthash_siphash24_keybytes crypto_shorthash_siphashx24 crypto_shorthash_siphashx24_bytes crypto_shorthash_siphashx24_keybytes crypto_sign crypto_sign_bytes crypto_sign_detached crypto_sign_ed25519 crypto_sign_ed25519_bytes crypto_sign_ed25519_detached crypto_sign_ed25519_keypair crypto_sign_ed25519_messagebytes_max crypto_sign_ed25519_open crypto_sign_ed25519_pk_to_curve25519 crypto_sign_ed25519_publickeybytes crypto_sign_ed25519_secretkeybytes crypto_sign_ed25519_seed_keypair crypto_sign_ed25519_seedbytes crypto_sign_ed25519_sk_to_curve25519 crypto_sign_ed25519_sk_to_pk crypto_sign_ed25519_sk_to_seed crypto_sign_ed25519_verify_detached crypto_sign_ed25519ph_final_create crypto_sign_ed25519ph_final_verify crypto_sign_ed25519ph_init crypto_sign_ed25519ph_statebytes crypto_sign_ed25519ph_update crypto_sign_edwards25519sha512batch crypto_sign_edwards25519sha512batch_keypair crypto_sign_edwards25519sha512batch_open crypto_sign_final_create crypto_sign_final_verify crypto_sign_init crypto_sign_keypair crypto_sign_messagebytes_max crypto_sign_open crypto_sign_primitive crypto_sign_publickeybytes crypto_sign_secretkeybytes crypto_sign_seed_keypair crypto_sign_seedbytes crypto_sign_statebytes crypto_sign_update crypto_sign_verify_detached crypto_stream crypto_stream_chacha20 crypto_stream_chacha20_ietf crypto_stream_chacha20_ietf_keybytes crypto_stream_chacha20_ietf_keygen crypto_stream_chacha20_ietf_messagebytes_max crypto_stream_chacha20_ietf_noncebytes crypto_stream_chacha20_ietf_xor crypto_stream_chacha20_ietf_xor_ic crypto_stream_chacha20_keybytes crypto_stream_chacha20_keygen crypto_stream_chacha20_messagebytes_max crypto_stream_chacha20_noncebytes crypto_stream_chacha20_xor crypto_stream_chacha20_xor_ic crypto_stream_keybytes crypto_stream_keygen crypto_stream_messagebytes_max crypto_stream_noncebytes crypto_stream_primitive crypto_stream_salsa20 crypto_stream_salsa2012 crypto_stream_salsa2012_keybytes crypto_stream_salsa2012_keygen crypto_stream_salsa2012_messagebytes_max crypto_stream_salsa2012_noncebytes crypto_stream_salsa2012_xor crypto_stream_salsa208 crypto_stream_salsa208_keybytes crypto_stream_salsa208_keygen crypto_stream_salsa208_messagebytes_max crypto_stream_salsa208_noncebytes crypto_stream_salsa208_xor crypto_stream_salsa20_keybytes crypto_stream_salsa20_keygen crypto_stream_salsa20_messagebytes_max crypto_stream_salsa20_noncebytes crypto_stream_salsa20_xor crypto_stream_salsa20_xor_ic crypto_stream_xchacha20 crypto_stream_xchacha20_keybytes crypto_stream_xchacha20_keygen crypto_stream_xchacha20_messagebytes_max crypto_stream_xchacha20_noncebytes crypto_stream_xchacha20_xor crypto_stream_xchacha20_xor_ic crypto_stream_xor crypto_stream_xsalsa20 crypto_stream_xsalsa20_keybytes crypto_stream_xsalsa20_keygen crypto_stream_xsalsa20_messagebytes_max crypto_stream_xsalsa20_noncebytes crypto_stream_xsalsa20_xor crypto_stream_xsalsa20_xor_ic crypto_verify_16 crypto_verify_16_bytes crypto_verify_32 crypto_verify_32_bytes crypto_verify_64 crypto_verify_64_bytes randombytes randombytes_buf randombytes_buf_deterministic randombytes_close randombytes_implementation_name randombytes_internal_implementation randombytes_random randombytes_seedbytes randombytes_set_implementation randombytes_stir randombytes_sysrandom_implementation randombytes_uniform sodium_add sodium_allocarray sodium_base642bin sodium_base64_encoded_len sodium_bin2base64 sodium_bin2hex sodium_compare sodium_free sodium_hex2bin sodium_increment sodium_init sodium_is_zero sodium_library_minimal sodium_library_version_major sodium_library_version_minor sodium_malloc sodium_memcmp sodium_memzero sodium_misuse sodium_mlock sodium_mprotect_noaccess sodium_mprotect_readonly sodium_mprotect_readwrite sodium_munlock sodium_pad sodium_runtime_has_aesni sodium_runtime_has_armcrypto sodium_runtime_has_avx sodium_runtime_has_avx2 sodium_runtime_has_avx512f sodium_runtime_has_neon sodium_runtime_has_pclmul sodium_runtime_has_rdrand sodium_runtime_has_sse2 sodium_runtime_has_sse3 sodium_runtime_has_sse41 sodium_runtime_has_ssse3 sodium_set_misuse_handler sodium_stackzero sodium_sub sodium_unpad sodium_version_string

emu/runtimes/win-x86/native/libsodium.dll

IMPHASH e8a7dc5d00319ef9b2c4c7dd34440e1b
SHA256 37dac83fc735dca24ddaf9e5f454808d029a335c1055bf6a8d03cab7d0a245b0
MD5 0ba2909787356c6172bfcc1fe75417db
SHA1 9f99646fec3f8029891b906a93288a1f3205616e
SHA512 1e7111f73de23f526d480daa779e6607bb3469d8e185208918cb19bcf3912fae6c814b5a51915c5f658a06dbd43db28cd6a79af2fd3bcd02355d8d00da725442
SSDEEP 6144:8ltkw95OlpOAzqqrb40Wzs3WsX8PPDrAA5h1hRqc/SgUyJztOWDxV50DErGuN:8b95OlpOAzqqrb40WhsqMcxweJ9YWqD
TLSH
T18F644A21F960B157F5D21479D2AF86F769781A3063FC15F3EB92285920734E3A230B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

261221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\libsodium\libsodium\bin\Win32\Release\v143\dynamic\libsodium.pdb

crypto_aead_aegis128l_abytes crypto_aead_aegis128l_decrypt crypto_aead_aegis128l_decrypt_detached crypto_aead_aegis128l_encrypt crypto_aead_aegis128l_encrypt_detached crypto_aead_aegis128l_keybytes crypto_aead_aegis128l_keygen crypto_aead_aegis128l_messagebytes_max crypto_aead_aegis128l_npubbytes crypto_aead_aegis128l_nsecbytes crypto_aead_aegis256_abytes crypto_aead_aegis256_decrypt crypto_aead_aegis256_decrypt_detached crypto_aead_aegis256_encrypt crypto_aead_aegis256_encrypt_detached crypto_aead_aegis256_keybytes crypto_aead_aegis256_keygen crypto_aead_aegis256_messagebytes_max crypto_aead_aegis256_npubbytes crypto_aead_aegis256_nsecbytes crypto_aead_aes256gcm_abytes crypto_aead_aes256gcm_beforenm crypto_aead_aes256gcm_decrypt crypto_aead_aes256gcm_decrypt_afternm crypto_aead_aes256gcm_decrypt_detached crypto_aead_aes256gcm_decrypt_detached_afternm crypto_aead_aes256gcm_encrypt crypto_aead_aes256gcm_encrypt_afternm crypto_aead_aes256gcm_encrypt_detached crypto_aead_aes256gcm_encrypt_detached_afternm crypto_aead_aes256gcm_is_available crypto_aead_aes256gcm_keybytes crypto_aead_aes256gcm_keygen crypto_aead_aes256gcm_messagebytes_max crypto_aead_aes256gcm_npubbytes crypto_aead_aes256gcm_nsecbytes crypto_aead_aes256gcm_statebytes crypto_aead_chacha20poly1305_abytes crypto_aead_chacha20poly1305_decrypt crypto_aead_chacha20poly1305_decrypt_detached crypto_aead_chacha20poly1305_encrypt crypto_aead_chacha20poly1305_encrypt_detached crypto_aead_chacha20poly1305_ietf_abytes crypto_aead_chacha20poly1305_ietf_decrypt crypto_aead_chacha20poly1305_ietf_decrypt_detached crypto_aead_chacha20poly1305_ietf_encrypt crypto_aead_chacha20poly1305_ietf_encrypt_detached crypto_aead_chacha20poly1305_ietf_keybytes crypto_aead_chacha20poly1305_ietf_keygen crypto_aead_chacha20poly1305_ietf_messagebytes_max crypto_aead_chacha20poly1305_ietf_npubbytes crypto_aead_chacha20poly1305_ietf_nsecbytes crypto_aead_chacha20poly1305_keybytes crypto_aead_chacha20poly1305_keygen crypto_aead_chacha20poly1305_messagebytes_max crypto_aead_chacha20poly1305_npubbytes crypto_aead_chacha20poly1305_nsecbytes crypto_aead_xchacha20poly1305_ietf_abytes crypto_aead_xchacha20poly1305_ietf_decrypt crypto_aead_xchacha20poly1305_ietf_decrypt_detached crypto_aead_xchacha20poly1305_ietf_encrypt crypto_aead_xchacha20poly1305_ietf_encrypt_detached crypto_aead_xchacha20poly1305_ietf_keybytes crypto_aead_xchacha20poly1305_ietf_keygen crypto_aead_xchacha20poly1305_ietf_messagebytes_max crypto_aead_xchacha20poly1305_ietf_npubbytes crypto_aead_xchacha20poly1305_ietf_nsecbytes crypto_auth crypto_auth_bytes crypto_auth_hmacsha256 crypto_auth_hmacsha256_bytes crypto_auth_hmacsha256_final crypto_auth_hmacsha256_init crypto_auth_hmacsha256_keybytes crypto_auth_hmacsha256_keygen crypto_auth_hmacsha256_statebytes crypto_auth_hmacsha256_update crypto_auth_hmacsha256_verify crypto_auth_hmacsha512 crypto_auth_hmacsha512256 crypto_auth_hmacsha512256_bytes crypto_auth_hmacsha512256_final crypto_auth_hmacsha512256_init crypto_auth_hmacsha512256_keybytes crypto_auth_hmacsha512256_keygen crypto_auth_hmacsha512256_statebytes crypto_auth_hmacsha512256_update crypto_auth_hmacsha512256_verify crypto_auth_hmacsha512_bytes crypto_auth_hmacsha512_final crypto_auth_hmacsha512_init crypto_auth_hmacsha512_keybytes crypto_auth_hmacsha512_keygen crypto_auth_hmacsha512_statebytes crypto_auth_hmacsha512_update crypto_auth_hmacsha512_verify crypto_auth_keybytes crypto_auth_keygen crypto_auth_primitive crypto_auth_verify crypto_box crypto_box_afternm crypto_box_beforenm crypto_box_beforenmbytes crypto_box_boxzerobytes crypto_box_curve25519xchacha20poly1305_beforenm crypto_box_curve25519xchacha20poly1305_beforenmbytes crypto_box_curve25519xchacha20poly1305_detached crypto_box_curve25519xchacha20poly1305_detached_afternm crypto_box_curve25519xchacha20poly1305_easy crypto_box_curve25519xchacha20poly1305_easy_afternm crypto_box_curve25519xchacha20poly1305_keypair crypto_box_curve25519xchacha20poly1305_macbytes crypto_box_curve25519xchacha20poly1305_messagebytes_max crypto_box_curve25519xchacha20poly1305_noncebytes crypto_box_curve25519xchacha20poly1305_open_detached crypto_box_curve25519xchacha20poly1305_open_detached_afternm crypto_box_curve25519xchacha20poly1305_open_easy crypto_box_curve25519xchacha20poly1305_open_easy_afternm crypto_box_curve25519xchacha20poly1305_publickeybytes crypto_box_curve25519xchacha20poly1305_seal crypto_box_curve25519xchacha20poly1305_seal_open crypto_box_curve25519xchacha20poly1305_sealbytes crypto_box_curve25519xchacha20poly1305_secretkeybytes crypto_box_curve25519xchacha20poly1305_seed_keypair crypto_box_curve25519xchacha20poly1305_seedbytes crypto_box_curve25519xsalsa20poly1305 crypto_box_curve25519xsalsa20poly1305_afternm crypto_box_curve25519xsalsa20poly1305_beforenm crypto_box_curve25519xsalsa20poly1305_beforenmbytes crypto_box_curve25519xsalsa20poly1305_boxzerobytes crypto_box_curve25519xsalsa20poly1305_keypair crypto_box_curve25519xsalsa20poly1305_macbytes crypto_box_curve25519xsalsa20poly1305_messagebytes_max crypto_box_curve25519xsalsa20poly1305_noncebytes crypto_box_curve25519xsalsa20poly1305_open crypto_box_curve25519xsalsa20poly1305_open_afternm crypto_box_curve25519xsalsa20poly1305_publickeybytes crypto_box_curve25519xsalsa20poly1305_secretkeybytes crypto_box_curve25519xsalsa20poly1305_seed_keypair crypto_box_curve25519xsalsa20poly1305_seedbytes crypto_box_curve25519xsalsa20poly1305_zerobytes crypto_box_detached crypto_box_detached_afternm crypto_box_easy crypto_box_easy_afternm crypto_box_keypair crypto_box_macbytes crypto_box_messagebytes_max crypto_box_noncebytes crypto_box_open crypto_box_open_afternm crypto_box_open_detached crypto_box_open_detached_afternm crypto_box_open_easy crypto_box_open_easy_afternm crypto_box_primitive crypto_box_publickeybytes crypto_box_seal crypto_box_seal_open crypto_box_sealbytes crypto_box_secretkeybytes crypto_box_seed_keypair crypto_box_seedbytes crypto_box_zerobytes crypto_core_ed25519_add crypto_core_ed25519_bytes crypto_core_ed25519_from_hash crypto_core_ed25519_from_uniform crypto_core_ed25519_hashbytes crypto_core_ed25519_is_valid_point crypto_core_ed25519_nonreducedscalarbytes crypto_core_ed25519_random crypto_core_ed25519_scalar_add crypto_core_ed25519_scalar_complement crypto_core_ed25519_scalar_invert crypto_core_ed25519_scalar_mul crypto_core_ed25519_scalar_negate crypto_core_ed25519_scalar_random crypto_core_ed25519_scalar_reduce crypto_core_ed25519_scalar_sub crypto_core_ed25519_scalarbytes crypto_core_ed25519_sub crypto_core_ed25519_uniformbytes crypto_core_hchacha20 crypto_core_hchacha20_constbytes crypto_core_hchacha20_inputbytes crypto_core_hchacha20_keybytes crypto_core_hchacha20_outputbytes crypto_core_hsalsa20 crypto_core_hsalsa20_constbytes crypto_core_hsalsa20_inputbytes crypto_core_hsalsa20_keybytes crypto_core_hsalsa20_outputbytes crypto_core_ristretto255_add crypto_core_ristretto255_bytes crypto_core_ristretto255_from_hash crypto_core_ristretto255_hashbytes crypto_core_ristretto255_is_valid_point crypto_core_ristretto255_nonreducedscalarbytes crypto_core_ristretto255_random crypto_core_ristretto255_scalar_add crypto_core_ristretto255_scalar_complement crypto_core_ristretto255_scalar_invert crypto_core_ristretto255_scalar_mul crypto_core_ristretto255_scalar_negate crypto_core_ristretto255_scalar_random crypto_core_ristretto255_scalar_reduce crypto_core_ristretto255_scalar_sub crypto_core_ristretto255_scalarbytes crypto_core_ristretto255_sub crypto_core_salsa20 crypto_core_salsa2012 crypto_core_salsa2012_constbytes crypto_core_salsa2012_inputbytes crypto_core_salsa2012_keybytes crypto_core_salsa2012_outputbytes crypto_core_salsa208 crypto_core_salsa208_constbytes crypto_core_salsa208_inputbytes crypto_core_salsa208_keybytes crypto_core_salsa208_outputbytes crypto_core_salsa20_constbytes crypto_core_salsa20_inputbytes crypto_core_salsa20_keybytes crypto_core_salsa20_outputbytes crypto_generichash crypto_generichash_blake2b crypto_generichash_blake2b_bytes crypto_generichash_blake2b_bytes_max crypto_generichash_blake2b_bytes_min crypto_generichash_blake2b_final crypto_generichash_blake2b_init crypto_generichash_blake2b_init_salt_personal crypto_generichash_blake2b_keybytes crypto_generichash_blake2b_keybytes_max crypto_generichash_blake2b_keybytes_min crypto_generichash_blake2b_keygen crypto_generichash_blake2b_personalbytes crypto_generichash_blake2b_salt_personal crypto_generichash_blake2b_saltbytes crypto_generichash_blake2b_statebytes crypto_generichash_blake2b_update crypto_generichash_bytes crypto_generichash_bytes_max crypto_generichash_bytes_min crypto_generichash_final crypto_generichash_init crypto_generichash_keybytes crypto_generichash_keybytes_max crypto_generichash_keybytes_min crypto_generichash_keygen crypto_generichash_primitive crypto_generichash_statebytes crypto_generichash_update crypto_hash crypto_hash_bytes crypto_hash_primitive crypto_hash_sha256 crypto_hash_sha256_bytes crypto_hash_sha256_final crypto_hash_sha256_init crypto_hash_sha256_statebytes crypto_hash_sha256_update crypto_hash_sha512 crypto_hash_sha512_bytes crypto_hash_sha512_final crypto_hash_sha512_init crypto_hash_sha512_statebytes crypto_hash_sha512_update crypto_kdf_blake2b_bytes_max crypto_kdf_blake2b_bytes_min crypto_kdf_blake2b_contextbytes crypto_kdf_blake2b_derive_from_key crypto_kdf_blake2b_keybytes crypto_kdf_bytes_max crypto_kdf_bytes_min crypto_kdf_contextbytes crypto_kdf_derive_from_key crypto_kdf_hkdf_sha256_bytes_max crypto_kdf_hkdf_sha256_bytes_min crypto_kdf_hkdf_sha256_expand crypto_kdf_hkdf_sha256_extract crypto_kdf_hkdf_sha256_extract_final crypto_kdf_hkdf_sha256_extract_init crypto_kdf_hkdf_sha256_extract_update crypto_kdf_hkdf_sha256_keybytes crypto_kdf_hkdf_sha256_keygen crypto_kdf_hkdf_sha256_statebytes crypto_kdf_hkdf_sha512_bytes_max crypto_kdf_hkdf_sha512_bytes_min crypto_kdf_hkdf_sha512_expand crypto_kdf_hkdf_sha512_extract crypto_kdf_hkdf_sha512_extract_final crypto_kdf_hkdf_sha512_extract_init crypto_kdf_hkdf_sha512_extract_update crypto_kdf_hkdf_sha512_keybytes crypto_kdf_hkdf_sha512_keygen crypto_kdf_keybytes crypto_kdf_keygen crypto_kdf_primitive crypto_kx_client_session_keys crypto_kx_keypair crypto_kx_primitive crypto_kx_publickeybytes crypto_kx_secretkeybytes crypto_kx_seed_keypair crypto_kx_seedbytes crypto_kx_server_session_keys crypto_kx_sessionkeybytes crypto_onetimeauth crypto_onetimeauth_bytes crypto_onetimeauth_final crypto_onetimeauth_init crypto_onetimeauth_keybytes crypto_onetimeauth_keygen crypto_onetimeauth_poly1305 crypto_onetimeauth_poly1305_bytes crypto_onetimeauth_poly1305_final crypto_onetimeauth_poly1305_init crypto_onetimeauth_poly1305_keybytes crypto_onetimeauth_poly1305_keygen crypto_onetimeauth_poly1305_statebytes crypto_onetimeauth_poly1305_update crypto_onetimeauth_poly1305_verify crypto_onetimeauth_primitive crypto_onetimeauth_statebytes crypto_onetimeauth_update crypto_onetimeauth_verify crypto_pwhash crypto_pwhash_alg_argon2i13 crypto_pwhash_alg_argon2id13 crypto_pwhash_alg_default crypto_pwhash_argon2i crypto_pwhash_argon2i_alg_argon2i13 crypto_pwhash_argon2i_bytes_max crypto_pwhash_argon2i_bytes_min crypto_pwhash_argon2i_memlimit_interactive crypto_pwhash_argon2i_memlimit_max crypto_pwhash_argon2i_memlimit_min crypto_pwhash_argon2i_memlimit_moderate crypto_pwhash_argon2i_memlimit_sensitive crypto_pwhash_argon2i_opslimit_interactive crypto_pwhash_argon2i_opslimit_max crypto_pwhash_argon2i_opslimit_min crypto_pwhash_argon2i_opslimit_moderate crypto_pwhash_argon2i_opslimit_sensitive crypto_pwhash_argon2i_passwd_max crypto_pwhash_argon2i_passwd_min crypto_pwhash_argon2i_saltbytes crypto_pwhash_argon2i_str crypto_pwhash_argon2i_str_needs_rehash crypto_pwhash_argon2i_str_verify crypto_pwhash_argon2i_strbytes crypto_pwhash_argon2i_strprefix crypto_pwhash_argon2id crypto_pwhash_argon2id_alg_argon2id13 crypto_pwhash_argon2id_bytes_max crypto_pwhash_argon2id_bytes_min crypto_pwhash_argon2id_memlimit_interactive crypto_pwhash_argon2id_memlimit_max crypto_pwhash_argon2id_memlimit_min crypto_pwhash_argon2id_memlimit_moderate crypto_pwhash_argon2id_memlimit_sensitive crypto_pwhash_argon2id_opslimit_interactive crypto_pwhash_argon2id_opslimit_max crypto_pwhash_argon2id_opslimit_min crypto_pwhash_argon2id_opslimit_moderate crypto_pwhash_argon2id_opslimit_sensitive crypto_pwhash_argon2id_passwd_max crypto_pwhash_argon2id_passwd_min crypto_pwhash_argon2id_saltbytes crypto_pwhash_argon2id_str crypto_pwhash_argon2id_str_needs_rehash crypto_pwhash_argon2id_str_verify crypto_pwhash_argon2id_strbytes crypto_pwhash_argon2id_strprefix crypto_pwhash_bytes_max crypto_pwhash_bytes_min crypto_pwhash_memlimit_interactive crypto_pwhash_memlimit_max crypto_pwhash_memlimit_min crypto_pwhash_memlimit_moderate crypto_pwhash_memlimit_sensitive crypto_pwhash_opslimit_interactive crypto_pwhash_opslimit_max crypto_pwhash_opslimit_min crypto_pwhash_opslimit_moderate crypto_pwhash_opslimit_sensitive crypto_pwhash_passwd_max crypto_pwhash_passwd_min crypto_pwhash_primitive crypto_pwhash_saltbytes crypto_pwhash_scryptsalsa208sha256 crypto_pwhash_scryptsalsa208sha256_bytes_max crypto_pwhash_scryptsalsa208sha256_bytes_min crypto_pwhash_scryptsalsa208sha256_ll crypto_pwhash_scryptsalsa208sha256_memlimit_interactive crypto_pwhash_scryptsalsa208sha256_memlimit_max crypto_pwhash_scryptsalsa208sha256_memlimit_min crypto_pwhash_scryptsalsa208sha256_memlimit_sensitive crypto_pwhash_scryptsalsa208sha256_opslimit_interactive crypto_pwhash_scryptsalsa208sha256_opslimit_max crypto_pwhash_scryptsalsa208sha256_opslimit_min crypto_pwhash_scryptsalsa208sha256_opslimit_sensitive crypto_pwhash_scryptsalsa208sha256_passwd_max crypto_pwhash_scryptsalsa208sha256_passwd_min crypto_pwhash_scryptsalsa208sha256_saltbytes crypto_pwhash_scryptsalsa208sha256_str crypto_pwhash_scryptsalsa208sha256_str_needs_rehash crypto_pwhash_scryptsalsa208sha256_str_verify crypto_pwhash_scryptsalsa208sha256_strbytes crypto_pwhash_scryptsalsa208sha256_strprefix crypto_pwhash_str crypto_pwhash_str_alg crypto_pwhash_str_needs_rehash crypto_pwhash_str_verify crypto_pwhash_strbytes crypto_pwhash_strprefix crypto_scalarmult crypto_scalarmult_base crypto_scalarmult_bytes crypto_scalarmult_curve25519 crypto_scalarmult_curve25519_base crypto_scalarmult_curve25519_bytes crypto_scalarmult_curve25519_scalarbytes crypto_scalarmult_ed25519 crypto_scalarmult_ed25519_base crypto_scalarmult_ed25519_base_noclamp crypto_scalarmult_ed25519_bytes crypto_scalarmult_ed25519_noclamp crypto_scalarmult_ed25519_scalarbytes crypto_scalarmult_primitive crypto_scalarmult_ristretto255 crypto_scalarmult_ristretto255_base crypto_scalarmult_ristretto255_bytes crypto_scalarmult_ristretto255_scalarbytes crypto_scalarmult_scalarbytes crypto_secretbox crypto_secretbox_boxzerobytes crypto_secretbox_detached crypto_secretbox_easy crypto_secretbox_keybytes crypto_secretbox_keygen crypto_secretbox_macbytes crypto_secretbox_messagebytes_max crypto_secretbox_noncebytes crypto_secretbox_open crypto_secretbox_open_detached crypto_secretbox_open_easy crypto_secretbox_primitive crypto_secretbox_xchacha20poly1305_detached crypto_secretbox_xchacha20poly1305_easy crypto_secretbox_xchacha20poly1305_keybytes crypto_secretbox_xchacha20poly1305_macbytes crypto_secretbox_xchacha20poly1305_messagebytes_max crypto_secretbox_xchacha20poly1305_noncebytes crypto_secretbox_xchacha20poly1305_open_detached crypto_secretbox_xchacha20poly1305_open_easy crypto_secretbox_xsalsa20poly1305 crypto_secretbox_xsalsa20poly1305_boxzerobytes crypto_secretbox_xsalsa20poly1305_keybytes crypto_secretbox_xsalsa20poly1305_keygen crypto_secretbox_xsalsa20poly1305_macbytes crypto_secretbox_xsalsa20poly1305_messagebytes_max crypto_secretbox_xsalsa20poly1305_noncebytes crypto_secretbox_xsalsa20poly1305_open crypto_secretbox_xsalsa20poly1305_zerobytes crypto_secretbox_zerobytes crypto_secretstream_xchacha20poly1305_abytes crypto_secretstream_xchacha20poly1305_headerbytes crypto_secretstream_xchacha20poly1305_init_pull crypto_secretstream_xchacha20poly1305_init_push crypto_secretstream_xchacha20poly1305_keybytes crypto_secretstream_xchacha20poly1305_keygen crypto_secretstream_xchacha20poly1305_messagebytes_max crypto_secretstream_xchacha20poly1305_pull crypto_secretstream_xchacha20poly1305_push crypto_secretstream_xchacha20poly1305_rekey crypto_secretstream_xchacha20poly1305_statebytes crypto_secretstream_xchacha20poly1305_tag_final crypto_secretstream_xchacha20poly1305_tag_message crypto_secretstream_xchacha20poly1305_tag_push crypto_secretstream_xchacha20poly1305_tag_rekey crypto_shorthash crypto_shorthash_bytes crypto_shorthash_keybytes crypto_shorthash_keygen crypto_shorthash_primitive crypto_shorthash_siphash24 crypto_shorthash_siphash24_bytes crypto_shorthash_siphash24_keybytes crypto_shorthash_siphashx24 crypto_shorthash_siphashx24_bytes crypto_shorthash_siphashx24_keybytes crypto_sign crypto_sign_bytes crypto_sign_detached crypto_sign_ed25519 crypto_sign_ed25519_bytes crypto_sign_ed25519_detached crypto_sign_ed25519_keypair crypto_sign_ed25519_messagebytes_max crypto_sign_ed25519_open crypto_sign_ed25519_pk_to_curve25519 crypto_sign_ed25519_publickeybytes crypto_sign_ed25519_secretkeybytes crypto_sign_ed25519_seed_keypair crypto_sign_ed25519_seedbytes crypto_sign_ed25519_sk_to_curve25519 crypto_sign_ed25519_sk_to_pk crypto_sign_ed25519_sk_to_seed crypto_sign_ed25519_verify_detached crypto_sign_ed25519ph_final_create crypto_sign_ed25519ph_final_verify crypto_sign_ed25519ph_init crypto_sign_ed25519ph_statebytes crypto_sign_ed25519ph_update crypto_sign_edwards25519sha512batch crypto_sign_edwards25519sha512batch_keypair crypto_sign_edwards25519sha512batch_open crypto_sign_final_create crypto_sign_final_verify crypto_sign_init crypto_sign_keypair crypto_sign_messagebytes_max crypto_sign_open crypto_sign_primitive crypto_sign_publickeybytes crypto_sign_secretkeybytes crypto_sign_seed_keypair crypto_sign_seedbytes crypto_sign_statebytes crypto_sign_update crypto_sign_verify_detached crypto_stream crypto_stream_chacha20 crypto_stream_chacha20_ietf crypto_stream_chacha20_ietf_keybytes crypto_stream_chacha20_ietf_keygen crypto_stream_chacha20_ietf_messagebytes_max crypto_stream_chacha20_ietf_noncebytes crypto_stream_chacha20_ietf_xor crypto_stream_chacha20_ietf_xor_ic crypto_stream_chacha20_keybytes crypto_stream_chacha20_keygen crypto_stream_chacha20_messagebytes_max crypto_stream_chacha20_noncebytes crypto_stream_chacha20_xor crypto_stream_chacha20_xor_ic crypto_stream_keybytes crypto_stream_keygen crypto_stream_messagebytes_max crypto_stream_noncebytes crypto_stream_primitive crypto_stream_salsa20 crypto_stream_salsa2012 crypto_stream_salsa2012_keybytes crypto_stream_salsa2012_keygen crypto_stream_salsa2012_messagebytes_max crypto_stream_salsa2012_noncebytes crypto_stream_salsa2012_xor crypto_stream_salsa208 crypto_stream_salsa208_keybytes crypto_stream_salsa208_keygen crypto_stream_salsa208_messagebytes_max crypto_stream_salsa208_noncebytes crypto_stream_salsa208_xor crypto_stream_salsa20_keybytes crypto_stream_salsa20_keygen crypto_stream_salsa20_messagebytes_max crypto_stream_salsa20_noncebytes crypto_stream_salsa20_xor crypto_stream_salsa20_xor_ic crypto_stream_xchacha20 crypto_stream_xchacha20_keybytes crypto_stream_xchacha20_keygen crypto_stream_xchacha20_messagebytes_max crypto_stream_xchacha20_noncebytes crypto_stream_xchacha20_xor crypto_stream_xchacha20_xor_ic crypto_stream_xor crypto_stream_xsalsa20 crypto_stream_xsalsa20_keybytes crypto_stream_xsalsa20_keygen crypto_stream_xsalsa20_messagebytes_max crypto_stream_xsalsa20_noncebytes crypto_stream_xsalsa20_xor crypto_stream_xsalsa20_xor_ic crypto_verify_16 crypto_verify_16_bytes crypto_verify_32 crypto_verify_32_bytes crypto_verify_64 crypto_verify_64_bytes randombytes randombytes_buf randombytes_buf_deterministic randombytes_close randombytes_implementation_name randombytes_internal_implementation randombytes_random randombytes_seedbytes randombytes_set_implementation randombytes_stir randombytes_sysrandom_implementation randombytes_uniform sodium_add sodium_allocarray sodium_base642bin sodium_base64_encoded_len sodium_bin2base64 sodium_bin2hex sodium_compare sodium_free sodium_hex2bin sodium_increment sodium_init sodium_is_zero sodium_library_minimal sodium_library_version_major sodium_library_version_minor sodium_malloc sodium_memcmp sodium_memzero sodium_misuse sodium_mlock sodium_mprotect_noaccess sodium_mprotect_readonly sodium_mprotect_readwrite sodium_munlock sodium_pad sodium_runtime_has_aesni sodium_runtime_has_armcrypto sodium_runtime_has_avx sodium_runtime_has_avx2 sodium_runtime_has_avx512f sodium_runtime_has_neon sodium_runtime_has_pclmul sodium_runtime_has_rdrand sodium_runtime_has_sse2 sodium_runtime_has_sse3 sodium_runtime_has_sse41 sodium_runtime_has_ssse3 sodium_set_misuse_handler sodium_stackzero sodium_sub sodium_unpad sodium_version_string

Sharing

General

Malware Config

Signatures

File Explorer

8xkvq9.zip

1-1e69aada.ico

Guna.UI2.dll

PE Signature issue

mscoree

dotnet

Koola Ultimate Tweaking Utility V2.04.exe

mscoree

dotnet

Koola Ultimate Tweaking Utility V2.04.exe.config

Newtonsoft.Json.dll

mscoree

dotnet

System.Net.Http.dll

PE Signature issue

mscoree

dotnet

emu/KeyAuthEmu1.3.deps.json

emu/KeyAuthEmu1.3.dll

mscoree

dotnet

emu/KeyAuthEmu1.3.exe

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic

emu/KeyAuthEmu1.3.runtimeconfig.json

emu/Sodium.Core.dll

mscoree

dotnet

emu/runtimes/win-x64/native/libsodium.dll

advapi32

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

generic

emu/runtimes/win-x86/native/libsodium.dll

advapi32

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

generic