Mini-Metro-Steamrip.com.rar
- SHA256 dd2ad783f245136d51fac42914678511524ab02f44701d13c3428e4fd7668bea
Overview
overview
8Static
static
3Mini Metro/Galaxy.dll
windows10-2004-x64
3Mini Metro/Galaxy.dll
windows11-ltsc_2024-x64
8Mini Metro...ro.lnk
windows10-2004-x64
7Mini Metro...ro.lnk
windows11-ltsc_2024-x64
3Mini Metro...ro.exe
windows10-2004-x64
3Mini Metro...ro.exe
windows11-ltsc_2024-x64
8Mini Metro...rp.dll
windows10-2004-x64
1Mini Metro...rp.dll
windows11-ltsc_2024-x64
1Mini Metro...ix.dll
windows10-2004-x64
1Mini Metro...ix.dll
windows11-ltsc_2024-x64
8Mini Metro...ty.dll
windows10-2004-x64
1Mini Metro...ty.dll
windows11-ltsc_2024-x64
1Mini Metro...on.dll
windows10-2004-x64
1Mini Metro...on.dll
windows11-ltsc_2024-x64
8Mini Metro...re.dll
windows10-2004-x64
1Mini Metro...re.dll
windows11-ltsc_2024-x64
8Mini Metro...ty.dll
windows10-2004-x64
1Mini Metro...ty.dll
windows11-ltsc_2024-x64
8Mini Metro...ml.dll
windows10-2004-x64
1Mini Metro...ml.dll
windows11-ltsc_2024-x64
1Mini Metro...em.dll
windows10-2004-x64
1Mini Metro...em.dll
windows11-ltsc_2024-x64
8Mini Metro...le.dll
windows10-2004-x64
1Mini Metro...le.dll
windows11-ltsc_2024-x64
1Mini Metro...le.dll
windows10-2004-x64
1Mini Metro...le.dll
windows11-ltsc_2024-x64
1Mini Metro...le.dll
windows10-2004-x64
1Mini Metro...le.dll
windows11-ltsc_2024-x64
8Mini Metro...le.dll
windows10-2004-x64
1Mini Metro...le.dll
windows11-ltsc_2024-x64
1Mini Metro...le.dll
windows10-2004-x64
1Mini Metro...le.dll
windows11-ltsc_2024-x64
1Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Mini Metro/Galaxy.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
Mini Metro/Galaxy.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
Behavioral task
behavioral3
Sample
Mini Metro/Launch Mini Metro.lnk
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
900 seconds
Behavioral task
behavioral4
Sample
Mini Metro/Launch Mini Metro.lnk
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
900 seconds
Behavioral task
behavioral5
Sample
Mini Metro/Mini Metro.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
900 seconds
Behavioral task
behavioral6
Sample
Mini Metro/Mini Metro.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral7
Sample
Mini Metro/Mini Metro_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
Mini Metro/Mini Metro_Data/Managed/Assembly-CSharp.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
Mini Metro/Mini Metro_Data/Managed/Mono.Posix.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
Mini Metro/Mini Metro_Data/Managed/Mono.Posix.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral11
Sample
Mini Metro/Mini Metro_Data/Managed/Mono.Security.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
Mini Metro/Mini Metro_Data/Managed/Mono.Security.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
Mini Metro/Mini Metro_Data/Managed/System.Configuration.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
Mini Metro/Mini Metro_Data/Managed/System.Configuration.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral15
Sample
Mini Metro/Mini Metro_Data/Managed/System.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
Mini Metro/Mini Metro_Data/Managed/System.Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral17
Sample
Mini Metro/Mini Metro_Data/Managed/System.Security.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
Mini Metro/Mini Metro_Data/Managed/System.Security.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral19
Sample
Mini Metro/Mini Metro_Data/Managed/System.Xml.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
Mini Metro/Mini Metro_Data/Managed/System.Xml.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
Mini Metro/Mini Metro_Data/Managed/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral22
Sample
Mini Metro/Mini Metro_Data/Managed/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral23
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AIModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral24
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AIModule.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ARModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral26
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ARModule.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AccessibilityModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral28
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AccessibilityModule.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral29
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AndroidJNIModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral30
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AndroidJNIModule.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral31
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AnimationModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral32
Sample
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AnimationModule.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target Mini-Metro-Steamrip.com.rar
- Size 238.6MB
- Sample260806-la724asvbx
- SHA256 dd2ad783f245136d51fac42914678511524ab02f44701d13c3428e4fd7668bea
- MD5 e4f6903bc3c494c690bb85feb248b3ab
- SHA1 b605288a45820e478613715bdf6a46593390b590
- SHA512 24979d2c04043c7d48b4e97713e8de6f4b15d45a192237fb30d1f08d0a9a4a1da1a8396ffe5321d46a438eef40890726e0c27cbeb48c5ea9748bba6f80e693e7
- SSDEEP 3145728:L/nnk5iQtK62SHh8ZiQHdHhhMRBg5hcihqXXGfFDf9gpL3jAmc0EVYWqZqq2r0kx:CY6WZiQHdM45hDdDfeHcYYq2qK8iC72p
- TLSH T1D4C833C75AC340DBCED2FC330515039FBEF106A6AEA36567B83E27DA06B55D93209864
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Mini Metro/unins000.exe - Unsigned PE 83 IoCs
Checks for missing Authenticode signature.
resource unpack001/Mini Metro/Galaxy.dll unpack001/Mini Metro/Mini Metro.exe unpack001/Mini Metro/Mini Metro_Data/Managed/Assembly-CSharp.dll unpack001/Mini Metro/Mini Metro_Data/Managed/Mono.Posix.dll unpack001/Mini Metro/Mini Metro_Data/Managed/Mono.Security.dll unpack001/Mini Metro/Mini Metro_Data/Managed/System.Configuration.dll unpack001/Mini Metro/Mini Metro_Data/Managed/System.Core.dll unpack001/Mini Metro/Mini Metro_Data/Managed/System.Security.dll unpack001/Mini Metro/Mini Metro_Data/Managed/System.Xml.dll unpack001/Mini Metro/Mini Metro_Data/Managed/System.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.AIModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ARModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.AccessibilityModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.AndroidJNIModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.AnimationModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.AssetBundleModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.AudioModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClothModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClusterInputModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClusterRendererModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.CoreModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.CrashReportingModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.DSPGraphModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.DirectorModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.GIModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.GameCenterModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.GridModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.HotReloadModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.IMGUIModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ImageConversionModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.InputLegacyModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.InputModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.JSONSerializeModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.LocalizationModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ParticleSystemModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.PerformanceReportingModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.Physics2DModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.PhysicsModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ProfilerModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.ScreenCaptureModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.SharedInternalsModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.SpriteMaskModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.SpriteShapeModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.StreamingModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.SubstanceModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.SubsystemsModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.TLSModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.TerrainModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.TerrainPhysicsModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.TextCoreModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.TextRenderingModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.TilemapModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UI.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIElementsModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIElementsNativeModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UNETModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UmbraModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityAnalyticsModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityConnectModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityCurlModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityTestProtocolModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestAssetBundleModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestAudioModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestWWWModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.VFXModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.VRModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.VehiclesModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.VideoModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.VirtualTexturingModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.WindModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.XRModule.dll unpack001/Mini Metro/Mini Metro_Data/Managed/UnityEngine.dll unpack001/Mini Metro/Mini Metro_Data/Managed/mscorlib.dll unpack001/Mini Metro/Mini Metro_Data/Plugins/x86/cgalaxy.dll unpack001/Mini Metro/Mini Metro_Data/Plugins/x86/minimetrox.dll unpack001/Mini Metro/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll unpack001/Mini Metro/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll unpack001/Mini Metro/UnityCrashHandler32.exe unpack001/Mini Metro/UnityPlayer.dll - Untrusted Codesign Signers 5 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/_CommonRedist/dotNetFx40_Full_setup.exe unpack001/_CommonRedist/dxwebsetup.exe unpack001/_CommonRedist/oalinst.exe unpack001/_CommonRedist/vcredist_x64.exe unpack001/_CommonRedist/vcredist_x86.exe
File Explorer
-
Mini-Metro-Steamrip.com.rar.rar 238.6MB
-
Mini Metro/EULA.txt47KB
-
Mini Metro/Galaxy.dll.dll 4.1MB
-
Mini Metro/Launch Mini Metro.lnk.lnk 822B
-
Mini Metro/Mini Metro.exe.exe 626KB
-
Mini Metro/Mini Metro_Data/Managed/Assembly-CSharp.dll.dll 2.1MB
-
Mini Metro/Mini Metro_Data/Managed/Mono.Posix.dll.dll 207KB
-
Mini Metro/Mini Metro_Data/Managed/Mono.Security.dll.dll 302KB
-
Mini Metro/Mini Metro_Data/Managed/System.Configuration.dll.dll 122KB
-
Mini Metro/Mini Metro_Data/Managed/System.Core.dll.dll 1021KB
-
Mini Metro/Mini Metro_Data/Managed/System.Security.dll.dll 180KB
-
Mini Metro/Mini Metro_Data/Managed/System.Xml.dll.dll 3.0MB
-
Mini Metro/Mini Metro_Data/Managed/System.dll.dll 2.6MB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AIModule.dll.dll 44KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ARModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AccessibilityModule.dll.dll 12KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AndroidJNIModule.dll.dll 59KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AnimationModule.dll.dll 146KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AssetBundleModule.dll.dll 21KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AudioModule.dll.dll 57KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClothModule.dll.dll 15KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClusterInputModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClusterRendererModule.dll.dll 11KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.CoreModule.dll.dll 1.1MB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.CrashReportingModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.DSPGraphModule.dll.dll 18KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.DirectorModule.dll.dll 13KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.GIModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.GameCenterModule.dll.dll 27KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.GridModule.dll.dll 14KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.HotReloadModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.IMGUIModule.dll.dll 156KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ImageConversionModule.dll.dll 13KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.InputLegacyModule.dll.dll 25KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.InputModule.dll.dll 12KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.JSONSerializeModule.dll.dll 11KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.LocalizationModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ParticleSystemModule.dll.dll 139KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.PerformanceReportingModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.Physics2DModule.dll.dll 104KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.PhysicsModule.dll.dll 94KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ProfilerModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ScreenCaptureModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SharedInternalsModule.dll.dll 21KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SpriteMaskModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SpriteShapeModule.dll.dll 14KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.StreamingModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SubstanceModule.dll.dll 13KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SubsystemsModule.dll.dll 23KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TLSModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TerrainModule.dll.dll 80KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TerrainPhysicsModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TextCoreModule.dll.dll 182KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TextRenderingModule.dll.dll 27KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TilemapModule.dll.dll 26KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UI.dll.dll 225KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIElementsModule.dll.dll 779KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIElementsNativeModule.dll.dll 46KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIModule.dll.dll 23KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UNETModule.dll.dll 77KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UmbraModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityAnalyticsModule.dll.dll 33KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityConnectModule.dll.dll 11KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityCurlModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityTestProtocolModule.dll.dll 9KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestAssetBundleModule.dll.dll 12KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestAudioModule.dll.dll 11KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestModule.dll.dll 43KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll.dll 11KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestWWWModule.dll.dll 20KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VFXModule.dll.dll 39KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VRModule.dll.dll 15KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VehiclesModule.dll.dll 13KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VideoModule.dll.dll 29KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VirtualTexturingModule.dll.dll 23KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.WindModule.dll.dll 10KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.XRModule.dll.dll 54KB
-
Mini Metro/Mini Metro_Data/Managed/UnityEngine.dll.dll 89KB
-
Mini Metro/Mini Metro_Data/Managed/mscorlib.dll.dll 3.9MB
-
Mini Metro/Mini Metro_Data/Plugins/x86/cgalaxy.dll.dll 74KB
-
Mini Metro/Mini Metro_Data/Plugins/x86/minimetrox.dll.dll 138KB
-
Mini Metro/Mini Metro_Data/Resources/unity default resources4.6MB
-
Mini Metro/Mini Metro_Data/Resources/unity_builtin_extra207KB
-
Mini Metro/Mini Metro_Data/RuntimeInitializeOnLoads.json12B
-
Mini Metro/Mini Metro_Data/ScriptingAssemblies.json2KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1200/fonts-0_rle.bytes2.2MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1200/fonts-1_rle.bytes1.2MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1440/fonts-0_rle.bytes1.8MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1440/fonts-1_rle.bytes2.5MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1440/fonts-2_rle.bytes117KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-0_rle.bytes992KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-1_rle.bytes1.5MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-2_rle.bytes2.1MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-3_rle.bytes2.0MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-4_rle.bytes710KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-0_rle.bytes850KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-1_rle.bytes1.2MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-2_rle.bytes1.5MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-3_rle.bytes2.1MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-4_rle.bytes2.0MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-5_rle.bytes914KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/800/fonts-0_rle.bytes2.0MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-0_rle.bytes1.0MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-1_rle.bytes1.6MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-2_rle.bytes2.2MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-3_rle.bytes2.0MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-4_rle.bytes322KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/sd/fonts-0_rle.bytes2.5MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/sd/fonts-1_rle.bytes305KB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Sounds/24000/core.flac.bytes36.1MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Sounds/44100/core.flac.bytes55.5MB
-
Mini Metro/Mini Metro_Data/StreamingAssets/Sounds/48000/core.flac.bytes59.4MB
-
Mini Metro/Mini Metro_Data/app.info29B
-
Mini Metro/Mini Metro_Data/boot.config66B
-
Mini Metro/Mini Metro_Data/globalgamemanagers186KB
-
Mini Metro/Mini Metro_Data/globalgamemanagers.assets119KB
-
Mini Metro/Mini Metro_Data/level04KB
-
Mini Metro/Mini Metro_Data/level15KB
-
Mini Metro/Mini Metro_Data/resources.assets39.2MB
-
Mini Metro/Mini Metro_Data/resources.assets.resS16.3MB
-
Mini Metro/Mini Metro_Data/sharedassets0.assets4KB
-
Mini Metro/Mini Metro_Data/sharedassets1.assets4KB
-
Mini Metro/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll.dll 598KB
-
Mini Metro/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll.dll 3.7MB
-
Mini Metro/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser1KB
-
Mini Metro/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx.js 59KB
-
Mini Metro/MonoBleedingEdge/etc/mono/2.0/machine.config.xml 28KB
-
Mini Metro/MonoBleedingEdge/etc/mono/2.0/settings.map.xml 2KB
-
Mini Metro/MonoBleedingEdge/etc/mono/2.0/web.config.xml 11KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser1KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx.js 59KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.0/machine.config.xml 32KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.0/settings.map.xml 2KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.0/web.config.xml 18KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser1KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx.js 59KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.5/machine.config.xml 33KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.5/settings.map.xml 2KB
-
Mini Metro/MonoBleedingEdge/etc/mono/4.5/web.config.xml 18KB
-
Mini Metro/MonoBleedingEdge/etc/mono/browscap.ini304KB
-
Mini Metro/MonoBleedingEdge/etc/mono/config3KB
-
Mini Metro/MonoBleedingEdge/etc/mono/mconfig/config.xml.xml 25KB
-
Mini Metro/UnityCrashHandler32.exe.exe 1.0MB
-
Mini Metro/UnityPlayer.dll.dll 20.8MB
-
Mini Metro/gog.ico67KB
-
Mini Metro/goggame-1434554947.hashdb.zip 4KB
-
goggame-1434554947.hashdb146KB
-
Mini Metro/goggame-1434554947.ico110KB
-
Mini Metro/goggame-1434554947.info767B
-
Mini Metro/support.ico61KB
-
Mini Metro/unins000.dat1.7MB
-
Mini Metro/unins000.exe.exe 1.3MB
-
Mini Metro/unins000.ini41B
-
Mini Metro/unins000.msg22KB
-
Mini Metro/webcache.zip.zip 182KB
-
67af998e886cef4bed4448580021c7f435122674c3366644ef41b574ce8f6b1c_glx_logo.jpg.jpg 3KB
-
67af998e886cef4bed4448580021c7f435122674c3366644ef41b574ce8f6b1c_glx_logo_2x.jpg.jpg 3KB
-
7eed721bd30f9bcbb87856776b8abc5120eb6fc30d2064976709c77c18524290.jpg.jpg 140KB
-
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50.png.png 20KB
-
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_menu_notification_av.png.png 3KB
-
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_menu_notification_av2.png.png 9KB
-
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_sbicon.png.png 2KB
-
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_sbicon_2x.png.png 6KB
-
resources.json857B
-
Read_Me_Instructions.txt1KB
-
STEAMRIP » Free Pre-installed Steam Games.url121B
-
_CommonRedist/dotNetFx40_Full_setup.exe.exe 868KB
-
_CommonRedist/dxwebsetup.exe.exe 281KB
-
_CommonRedist/oalinst.exe.exe 790KB
-
_CommonRedist/vcredist_2015-2019_x64.exe.exe 14.3MB
-
_CommonRedist/vcredist_2015-2019_x86.exe.exe 13.7MB
-
_CommonRedist/vcredist_x64.exe.exe 5.5MB
-
_CommonRedist/vcredist_x86.exe.exe 4.8MB
-
_CommonRedist/xnafx40_redist.msi.msi 6.7MB
Mini Metro/EULA.txt
- SHA256 08386ae4cbabb26549028c44da256582a591b2d314f1d04e5810e60bbf975f96
- MD5 53aa7223811747b68886d4903408bcf7
- SHA1 40c69fa0fdee4c40e98a6cb38e6b69c2cf50b2b2
- SHA512 4a33c098e7826468e05215f184ed3b72c1d827a4d1ca7581fe01c834dc9533443c2221aa97657acfb297f884e04baf45ec89d08ab0aa9565cb4bf54543554f4e
- SSDEEP 768:B9MyjKpFqQ/K2Oj5p27mnsAtoC1NUEQjxAgUxYcekvraOWsRNs5v8nINs5v8nWly:B+q8AtoMUe5ic5vuzWO82O8WlEn
- TLSH T14E23DBAFF30A1371069203923607B5E2F71B817862AB95A134F9817C33E5F69437B7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Galaxy.dll
- IMPHASH 846392d7b28cf37c3f1e34b61febec11
- SHA256 f2a28e0b7856ea81f1901150e0b1f8d406906decbb856071f66df806c57afb85
- MD5 ee879a1a7b87125455ef49e1d9fb7ab0
- SHA1 a3121b94d2affbc19e711d805418cb202993c103
- SHA512 e6d257bbbff28412124d9095f1eb8b5515fc12ba2001d40c920834f1ce58206264d37247f73d51d2cadd74b3493d7fe3beb38a891cd294d5ce0d99a343999019
- SSDEEP 98304:Vjge6D7Agewe/0h89KGXRrd6sBoMZStoZdMXRgZ05:flRbLEtoZdMXRgZ05
- TLSH T14B168D21BF41C236EACE02BBD9FEAB6F4D2E8651072C46C7925C1E495E702D32E35587
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
2537557
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\JenkinsSlave\workspace\galaxy-core-with-wrappers-windows-msvc16-32bit-production\galaxy-core\Output\Galaxy.pdb
kernel32
GetFileAttributesExW
GetFileInformationByHandle
SetCurrentDirectoryW
GetCurrentDirectoryW
CopyFileW
CreateDirectoryExW
GetFileAttributesW
FindNextFileW
FindFirstFileW
GetEnvironmentVariableW
GetFullPathNameW
DeviceIoControl
DeleteFileW
RemoveDirectoryW
CreateFileW
SetFilePointerEx
SetEndOfFile
CreateWaitableTimerA
WaitForMultipleObjectsEx
SystemTimeToFileTime
GetLogicalProcessorInformation
ResumeThread
ResetEvent
OpenEventA
GetSystemInfo
GetSystemTimeAsFileTime
LocalFree
FlushConsoleInputBuffer
GetVersionExA
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
FindClose
FindFirstFileA
FindNextFileA
GetFileType
GetVersion
InitializeCriticalSection
LoadLibraryA
LCMapStringW
LCMapStringA
GetStringTypeExW
GetStringTypeExA
GetUserDefaultLCID
OpenProcess
QueryFullProcessImageNameA
CreateProcessA
EnterCriticalSection
TerminateProcess
GetFileTime
LeaveCriticalSection
GetStdHandle
Sleep
GetCurrentProcess
DuplicateHandle
ReleaseSemaphore
CreateSemaphoreA
SetLastError
CreateEventW
TlsSetValue
TlsGetValue
SleepEx
InterlockedCompareExchange
SetWaitableTimer
GetQueuedCompletionStatus
WaitForMultipleObjects
TerminateThread
QueueUserAPC
WaitForSingleObject
CreateIoCompletionPort
VerSetConditionMask
VerifyVersionInfoA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryW
FormatMessageA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
MoveFileExW
GetDiskFreeSpaceExW
CreateDirectoryW
GetWindowsDirectoryW
AreFileApisANSI
QueryPerformanceFrequency
VirtualAlloc
VirtualFree
SetThreadPriority
GetCurrentThread
GetExitCodeThread
GetStartupInfoA
GetSystemRegistryQuota
GetComputerNameA
GlobalMemoryStatusEx
GetSystemTimes
GetProcessTimes
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TlsFree
SetConsoleTextAttribute
PostQueuedCompletionStatus
SetFileTime
GetCurrentThreadId
WaitForSingleObjectEx
InterlockedExchangeAdd
TlsAlloc
GetCurrentProcessId
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleA
GetModuleFileNameA
SetEvent
CloseHandle
GetExitCodeProcess
CreateEventA
SetFileAttributesW
bcrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptGenRandom
BCryptSignHash
BCryptVerifySignature
BCryptDestroySecret
BCryptDeriveKey
BCryptSecretAgreement
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDecrypt
BCryptImportKeyPair
BCryptExportKey
BCryptFinalizeKeyPair
BCryptGenerateKeyPair
BCryptGetProperty
BCryptCreateHash
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_BADOFF@std@@3_JB
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
_Getcvt
??1facet@locale@std@@UAE@XZ
??0facet@locale@std@@IAE@I@Z
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?classic@locale@std@@SAABV12@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?toupper@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
_FInf
_FNan
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?exceptions@ios_base@std@@QAEXH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
_Inf
_Nan
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z
??1?$codecvt@_WDH@std@@MAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
msvcr100
??3@YAXPAX@Z
memcpy
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memmove
_purecall
__CxxFrameHandler3
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_localtime64_s
strftime
_endthreadex
_strtoui64
strstr
_getch
fputs
strtol
strrchr
_gmtime64
isupper
atoi
_stat64i32
isxdigit
_stricmp
printf
_wfopen
fgets
fseek
feof
ftell
_fileno
_setmode
fopen
fread
ferror
_localtime64
_strnicmp
isalnum
isdigit
isspace
realloc
strcmp
raise
_exit
vfprintf
_vsnprintf
wcsstr
getenv
strtoul
qsort
strerror
_ftime64
strncpy
abort
strncmp
_time64
_snprintf
strpbrk
__iob_func
fprintf
strchr
??0exception@std@@QAE@ABQBDH@Z
modf
free
towupper
towlower
toupper
tolower
sprintf
sscanf
_mkgmtime64
_gmtime64_s
_beginthreadex
sprintf_s
??0exception@std@@QAE@XZ
_vsnprintf_s
_errno
memchr
signal
localeconv
_fullpath
fclose
fsetpos
_fseeki64
fgetpos
fwrite
memcpy_s
setvbuf
fflush
_unlock_file
_lock_file
ungetc
fputc
fgetc
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
memset
floor
ceil
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
??8type_info@@QBE_NABV0@@Z
__RTDynamicCast
malloc
_invalid_parameter_noinfo_noreturn
ws2_32
gethostname
WSAIoctl
WSAStringToAddressA
WSAAddressToStringA
listen
getsockname
shutdown
recv
send
inet_ntoa
inet_addr
gethostbyname
sendto
socket
recvfrom
getpeername
bind
accept
htons
ntohs
htonl
ntohl
closesocket
getaddrinfo
select
WSASocketW
WSASend
WSARecv
getsockopt
setsockopt
connect
freeaddrinfo
ioctlsocket
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
__WSAFDIsSet
mswsock
AcceptEx
GetAcceptExSockaddrs
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
user32
GetUserObjectInformationW
LoadStringW
LoadStringA
GetProcessWindowStation
GetCursorPos
MessageBoxA
GetDesktopWindow
WaitForInputIdle
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA
advapi32
GetUserNameA
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
QueryServiceStatus
ControlService
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
GetCurrentHwProfileA
CryptGenRandom
CryptAcquireContextA
iphlpapi
IcmpSendEcho
IcmpCreateFile
GetAdaptersInfo
??0IGalaxy@api@galaxy@@QAE@ABV012@@Z
??0IGalaxy@api@galaxy@@QAE@XZ
??1IGalaxy@api@galaxy@@UAE@XZ
??4GalaxyFactory@api@galaxy@@QAEAAV012@ABV012@@Z
??4IGalaxy@api@galaxy@@QAEAAV012@ABV012@@Z
??_7IGalaxy@api@galaxy@@6B@
?CreateInstance@GalaxyFactory@api@galaxy@@SAPAVIGalaxy@23@XZ
?GetErrorManager@GalaxyFactory@api@galaxy@@SAPAVIErrorManager@23@XZ
?GetInstance@GalaxyFactory@api@galaxy@@SAPAVIGalaxy@23@XZ
?ResetInstance@GalaxyFactory@api@galaxy@@SAXXZ
?errorManager@GalaxyFactory@api@galaxy@@0PAVIErrorManager@23@A
?instance@GalaxyFactory@api@galaxy@@0PAVIGalaxy@23@A
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
626KB
Virtual Size
625KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
70KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1024B
Virtual Size
514B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
152KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=14, id=158, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=20, productName=Unmarked objects (old),
count=441, id=170, productName=VS2010 build 30319, version=30319,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=462, id=1, productName=Unmarked objects,
count=168, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=151,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Mini Metro/Launch Mini Metro.lnk
- SHA256 fbf414831920ed97cd6b669a766955a715c82e3c8e039f72a5e8c3d5bb9bcb37
- MD5 ee279eddb3838bf61fcfed36bcfa8e1b
- SHA1 513f80eb1bb50f3d50b87ebfa7542332b229491f
- SHA512 d2a4a5785e9cb1daeea31840a3dbe9e18753a16c59666a95752697861de9f312fafc1a9961601b59096b84264c4422e86ccdabc29dc176a32a07cb6bfe2eb66f
- TLSH T167019E1047E21B0AF1E2D3BA53B26F119BA37B62D232472F24A812044D2520DDE2CF6F
- MD5 SHA1 SHA512 TLSH
Mini Metro/Mini Metro.exe
- IMPHASH e31e227f9c58f4b15ebf5b93d8c3c2a0
- SHA256 b4ca1aa0430a826b1668b45448ff6ad2ca6b5245e50f0e0b82336dd128979d61
- MD5 2ab3c4cf754d152de8328cd0806c8995
- SHA1 5f632c468667c25bdc04f6e81364642cd15fd934
- SHA512 9b619b76279d1e53ce613c64dda14648d9b00f300f71090988e79b416fe01dc0919831804c65945a49274456bfebaf3c5c13d0b5425594140b0ae14f34693c78
- SSDEEP 12288:tqA3u5YZoK2Btttttttt31ttttqttt7DqVcs:tqwF2tODq6
- TLSH T172D48D8AB6A3674CDC558CF504BD8660C2675DF6E909C72D129E3ABEED029B3CE11313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4701
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\buildslave\unity\build\artifacts\WindowsPlayer\Win32_VS2019_nondev_m_r\WindowsPlayer_Master_mono_x86.pdb
unityplayer
UnityMain
kernel32
HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
CloseHandle
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
DecodePointer
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
552KB
Virtual Size
552KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=26715,
count=139, id=261, version=26715,
count=18, id=260, version=26715,
count=2, id=257, version=26715,
count=37, id=261, version=28427,
count=17, id=260, version=28427,
count=17, id=259, version=28427,
count=3, id=257, productName=VS2019 v16.5.5 build 28614, version=28614,
count=81, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=256, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=255, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=258, productName=VS2019 v16.5.5 build 28614, version=28614,
Mini Metro/Mini Metro_Data/Managed/Assembly-CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6cb2da28fa10fb25d856620149381e2cfbfad8a8a85331134e238bd82f7fcc4
- MD5 bec2ff08816569d51ff9deb5bd08d7b7
- SHA1 4a292b6f36b03d9eaae4e1a2f61db08208b81122
- SHA512 6dfb05ad29c2ea0c502dae7c53510277d2e890216fdfd54b6044ae8871fdfe2280994f0f13e35eacd51b93b96e9e12b3a05ba1c19070386051fb2da07ffd79d0
- SSDEEP 24576:JXDhFtNUK8AGOEzafRy1u97gmYFVYermycQf0KLWpCzmC9TQ:JXDhFtNrRyGXmmUswzmC9TQ
- TLSH T171A5498273F88D6AE1BF1B31A0B5952993F0F8C9D761D78E562079FD2E92B015C06363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2167670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/Users/moscow/.buildkite-agent/builds/moscow-2/dinosaur-polo-club/mini-metro/build/project/win32.gog/Temp/Assembly-CSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/Mono.Posix.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a33abceffeaa6b6d5dbd2cf77210daddfe331ed40eeae4cea3c5efb0c0db2cc0
- MD5 72c9ea78101c493635c0f763d1795d7a
- SHA1 c04e331b6415bf566e1aa26550bf794651704c7c
- SHA512 4dcc9495000f0cb0d93381a466f8d0553c2f9ef9521ac71979371b5eded37a25224a861ccc101a24b0b2741d30efb71d81d03fa00ca476bf8339c1786d9c46f2
- SSDEEP 6144:9c9wE0Q11JQ1S+OWMYU7nUXxOwblnsAPe+Eg:9c9wE0Q11JQE+kY1SA1
- TLSH T18C245C5457B44609E29D6738F8732F098379F88E7E13A39D3799EB391877BC488016A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
218098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/Users/bokken/build/output/Unity-Technologies/mono/mcs/class/lib/unityjit/Mono.Posix.pdb
mscoree
_CorDllMain
Name
.text
Size
205KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/Mono.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b7651b398dc63af0dbc0038758981c29238a495681a7ed487357a464ad4de15
- MD5 d1b792d07b0e08ef190eb6ef5361e6f3
- SHA1 36890188d80598132d63561ded707e641282f2a1
- SHA512 1229d49068401a078b81ee398524327ccdebcd2fb6134c980d643b76f075244f2670d0773aa35027aa8b8d40ad6c29f16a223b142f3a6595c3641c32c8c31215
- SSDEEP 6144:+JvWNTGENjTzSQfGFzPTzcyaksosrNn95tq:fmFz9mN
- TLSH T1C664492923E8632AE2EF9779D071441647F4F506BEA7EB4E5C8250FC2C437929811BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
309966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/Users/bokken/build/output/Unity-Technologies/mono/mcs/class/lib/unityjit/Mono.Security.pdb
mscoree
_CorDllMain
Name
.text
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
972B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/System.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cd5793957604e1448443da0d703f29a31100d4a7030c140121c7ddf6b2027d94
- MD5 d0a550f30b09ac8e5f49ad6d7daab4c4
- SHA1 d502b45d880866d8608a5795033390ffde6df6a1
- SHA512 e24f1d15a5017ac034a52bb8e3466912199b45d75f0d3e4b03d3ed604bdf67f1109a75660ed22c1219973c5c6b3f33692777112fbdf14b5597ef967ecea395da
- SSDEEP 3072:JH3xt3GrHyTALVXzA4k8y3Kpn5WJzL0MIeZH4+:JH3DcSTSVDMJM
- TLSH T12EC3F82563EC876BE6EF277AF8B514100FF1FA0A6436D74C5D99B0ED1823B804662763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
130206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/System.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d982f54622edc2ed4637fe547b70907f589a2ae4de4b6d604c54ee35f97dca03
- MD5 ee54cdd0260259a087442949da49f50a
- SHA1 49aafc2caeb908ccc8f8598414a317cc2cebf9c2
- SHA512 09af08ef2c72dea7ccf440e168a684e35bca1eba96d6276e8a3855be270ee8c91b92869b415622679f6dea95c29b096001b756d1ca7c58dff98a3b666a9e56d4
- SSDEEP 12288:GDQR1+Dy+BcB5Qud7DfVsL9KVI36owJKbYvB54wkHXdt:bn+BE5jVsEWIWYvB5
- TLSH T1DF253A5277D95A2BD5BF7BB7A038022057F2FC639FBAD70F124069690C62B40DE543A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1051918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1019KB
Virtual Size
1019KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/System.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c931417eb4690730438d7c93d1cf6e1864695d8d90a5833fe83298802a84ee58
- MD5 915fb88087c6ce36daa02bca9daff3dc
- SHA1 ce5bb0edb6e50c70b0cf188dd875c257da76e627
- SHA512 07c4a7d5a656bbef00deae0b814be51eba0348e678f562a78881a81b9850605838d9061341904e8d0ad13ebb47c09d2d7023de1607f8cd8f1d97b83b6260ce58
- SSDEEP 3072:Xr8JG/QlTReXnVzW72nDLR1RNdxz9nI/K6ZoedXHpnZQeU1GGeEebgUKFzODhSK0:Xr8JpeXnVzW72nDLhZz9J4oQJZQeBGeR
- TLSH T164040824B7E84319FAFE577DE0B411065AB1FD06BA7ADB5D0E9112ED0872F808812B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
189630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
177KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/System.Xml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 340ef89526404ea0a8161efcea85216efaae956f09fe28a01f565d40de38e683
- MD5 5fdd663f389f7f6e5daad28de3adfa7e
- SHA1 8005284d37619470874c99383202d0fb135c9f8d
- SHA512 e5cfd590bd1c95fee61d3c6ee0ab3685ea0812e1046022c163e3e5463af0d2f4187d208e3925ba90717e35fadf030a4d994a3fcfe5fb9ee2b50b576d3898b0ba
- SSDEEP 49152:G6V0g55GkLfaEam1yJ6hT+Lq4BpqgAq7LyPYas38PXNtH7U8Yn:z0g55e6l+Lq4Bpqgv
- TLSH T101E53840B7F88E26E6BF7779A434522547F2FC09FBB6E75E6540E1B928627008C513A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3143390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3890f3a0b81e8f915b8e07ba89f4a9830f480574ac147b23c6d338ca2f1ecb81
- MD5 1517a46d24e4ee3caf8fceb42b515758
- SHA1 7b5fc013f86d0f769ded17b1e3d908236a2db2b5
- SHA512 762682b541b39737c682e0d9a9eaa46fd96624c350e0ba1620124fb662da379373d1eb397e7268154ed2c3eef5dfd076fb86abdcc6aa97e541d897aac99d1ec9
- SSDEEP 49152:Na2TMRPYcHGxrA5k41BIuGRR96B7pUuzsc:gFPYCSs5kOI
- TLSH T174D51801B3F85E29F1FB3BB5AC7411610AB5FD4DBB72E60E5A01912E1C62B418D623B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2756814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 732ce59d5d85df21d338cb3b31c04b2ac7bd698798e1ad787319028fb7807c33
- MD5 0a9344ba9921d0bc1ecc345708cb2c9a
- SHA1 3819d9b821309553f95a07011a24c27cbcb4774f
- SHA512 aa3c4229e1c5cc8d3d1300e61b5f66e8ff80ecdf342e45fd475d6dcda024b55c5b2e9488411c82b9b171d2bab928fcbcc6182c38319e13724b27ebddfdc9f530
- SSDEEP 768:zbc5nUbjYVOMBemKv2pEq3zQWR8Br2WYq/woOJCqIghjkjhU:3c5UbjYVlcWM7rngoOJCqIghjkjhU
- TLSH T13A23F7BA6794C52BCC5E177AF03897302B70C2019253F795135D6178387B3AEA932EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ARModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 42469cd16381d8c9e0dbd6b91b4081668a40a230d56690faf5b8d4cb21adcefe
- MD5 9ba8f6c67235fc3b7940171a865e5eda
- SHA1 7b38caaea80855aaba9e59c692427f966aa99205
- SHA512 5a3512b9bc492b5135e65a19233ec7651227a7d2918155ae4449066ce0fc80b6342fce08318afc672521df26b63cd032179bbe4135b002260d9b954587fa7921
- SSDEEP 192:e+Dvaksmg+LmO97CqQD0ZUz2hjkjcjOpVs:e+qmg+yOJCqQDZz2hjkjcjOL
- TLSH T17A2298F17A84259BEC491F33D07993813990C027CEF2E61D468E22A4B47D1EEBE217A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ARModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AccessibilityModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 79aa29c106ef366f9034a19357ea548ac8a81f35307f88ca9c933107ff5d1990
- MD5 284b55fc84ee30307235fe1102fc59cd
- SHA1 8b9e7d321ef2472c65d291af43d8faf6a5b07619
- SHA512 84acbb1112492a5560fb4f08f2acdcb9b06894174a8f59860e238acab5f2c850ae8e2576b18a2df6b298e9cef3bdac757e4dea646c046258ab82e7e0ccfb6f47
- SSDEEP 384:fx8oDJjLyPdo0VbSzCSOJCqQDZz2hjkjcjOL:fx8eJjWK0hSzBOJCqIghjkjhL
- TLSH T1B6422FF17785365BEC5A2F37943983803DA0C027DE72E2558ACE21A6B13E0DD7D217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AccessibilityModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AndroidJNIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cbf8430799e14daeb954c08a6f865b3309ce3297806c5a8401becac058768cd0
- MD5 3915973f7b8dca687b6256ef23b55ff5
- SHA1 4192ce34be3ae494e6a3131fd7ce5574e3b23cf4
- SHA512 c2b8ab8bbe0865e3cff0147b72e5fbd491501d04ebf047fd17433c4e890f2b230d74e3a7010b3cd6198a9e924ac5afc9d8ca0df950e1e7754dcb99a748fd3e63
- SSDEEP 1536:k/uYH1jrQghgx2QSD8nEsKDOUPjRmES3GQVOJCqIghjkjho:AH1jQvzU7RmES3GQVO8y
- TLSH T19853E7F57BD89E02D06E0ABE64E602119330E9674173D309A689307A7E763DF6D24FE4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AndroidJNIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AnimationModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a95fa16045f13e3498fbbc61fdd8b37ff1859d28b15d95fa7656469c917cd391
- MD5 33ef4b122e5e8d37f633fe09ec413be8
- SHA1 43008867c8a32c3e070d3f2263c7168d57d2d660
- SHA512 fbca4b387054273a534d6ae5059409ccf3d838491d760f5322dada756ad0b74326fc54ca1a93aa058c1e923607f10c7fa19593e1d91c28321fc92ea4ce7c01d5
- SSDEEP 3072:aaZcWVKs1Etk28xo22mEWnL432S9pE1IeaO82:Bqsi1jJWnL432S9pEv8
- TLSH T106E32AB45BA8544ACDDF237EF0A990116F38D0695137D3991628E1B81CAB348EB33B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
155998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AnimationModule.pdb
mscoree
_CorDllMain
Name
.text
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d37f54da8781b1cbd3a9d60238915414ea3a721d32289c00a3c1a88677c0d2c8
- MD5 d8d282a3da13e3bb56eee07b28f72580
- SHA1 789202d3e3c790bca5eff5bba748e86ef2981cf1
- SHA512 54b2e7a3763f32ac4ab6da64a7dccfdcf2919078cfe27a41322ceb1f6d327c96ab7d51956b82497836c1c713a526dc9884660b4f07ecab116a2d23fcc3c9786b
- SSDEEP 384:TPDQyYrcecUWXeErBDioxJNF92lPOJCqQDZz2hjkjcjOL:TcLb5WbBDiAPadOJCqIghjkjhL
- TLSH T1B4A241B437C4519BDD192F77963843402A60E107DF23E719464D63A8B87E2B8AF227F5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AssetBundleModule.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.AudioModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d49f2313399f9ccdf5903f739001f845913e6afee4496cf74000ef4192327efb
- MD5 28b9f5a2d77062b71b315246336ad484
- SHA1 f5c7977770ae38e98024be126f118f4ed222f7dd
- SHA512 1b380cf9100d11c619051a5bd69229176ee5d86eab0aa4bef9b71e6286e1b5d3b07eca9290d7caabc3ec110ab32e8b16ed456856ebcc156c47e7d6521726657a
- SSDEEP 768:KEHdwhm3pq/ELw+DSvk0K4VQtr+vUgKJOJCqIghjkjhg:dlpS1+gz63gKJOJCqIghjkjhg
- TLSH T179431AB927C091AADCAA1FB1F43587510B32E5166973D75E022A027C2D7B394AF31FE1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AudioModule.pdb
mscoree
_CorDllMain
Name
.text
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClothModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c141acdc0577a4123ec2ab8d97f406052719ab8b90730e648de01a6f251eecc
- MD5 de0794f64a521f9de8f8e942635d219e
- SHA1 deaaf13d1687273ad2e781458ec5c187d7599ff8
- SHA512 bbef9b5ff715e266d6ad8c64b48d022d45e78dee474eb3000bf0cc5b4d81d3804c9eba5631fc18af7bd73adef1e7c9efa7afbe3e3c4bc3b3d0f944ed09330955
- SSDEEP 384:RPpaQld/uC3ssQS4E8edJFRaKcxe6xOJCqQDZz2hjkjcjOrv:RRaQT/R8hKx6xOJCqIghjkjhrv
- TLSH T1226242F07685569BDC850F37E03953803EA0C817DE32D794476E62A8B87D1DEBE31AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ClothModule.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClusterInputModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5305a28d9ef80bdeff9ae78647b791fd8d57adbfc75a0492d27d12094b6d6dd7
- MD5 5053719b98eb4f79993401d89b254305
- SHA1 837a68f826d23ba17ce636bf831b8dcbf14e6074
- SHA512 28e9fc1f84f0a6d67c3ff995fb0f49a39962bdf76bb710362f9b19cc29446d1ab8f4255c0a59ba5fe912a5337a44ca23d35c184289240abf27f789aea468c147
- SSDEEP 192:8+94IVEV+bFUUqEqGn5m/O97CqQD0ZUz2hjkjcjOb9C7qC:8c4IVEobFUlG5m/OJCqQDZz2hjkjcjOj
- TLSH T1952286F17688219BEC495F37943953813994C037CF72E355868F22A8B57E1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ClusterInputModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ClusterRendererModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8694dc5f3758b919c08c3995a93e6996a94bb6c9ef08cf740c76cbe6f299511
- MD5 5bb03e8995a4fa38d9985faea9b31f88
- SHA1 ac166b745e5799f9a1172825af745cbc17364435
- SHA512 c96b88990f49d6f8037932b9965688a5fa513b3860d813820152813294db416fa7f22d494135dda21a18640bfa4ce2878a97df392aa0d459fff9403c0b79adba
- SSDEEP 192:KRh0EzSkSkSCafPSC6ZACdpy6O97CqQD0ZUz2hjkjcjOmHaqH:K3TEqJOJCqQDZz2hjkjcjOm6q
- TLSH T1FA32D0F57689169BDC495F33A83993833990C017CE72E355468E62B8B07E0EE7E217E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ClusterRendererModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.CoreModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5eebe0a139758cf439c0161dc2d0539274dbd37840ed4df837dc4b086df440a5
- MD5 fd6e0bd4ff33fe2b361db54623750caa
- SHA1 204995343df180d7793e82c212d9b1ebc2f64d01
- SHA512 98b15bbf2fb6359ce4fb4bb2ef1740036cb2d6eb9283bd31d7e7a01a3f0f2e4318abe2fbafaaf21a05f450bfd87d968ab776ec186dad93345ee361dafb393183
- SSDEEP 12288:F7pOI9yIzgfoMJ6cjwG9x1fvPdJGGffDM0rW5l/+Cspw7BJ9AOjSQQx:LyIfawGP1w0rgt+Cspw7BvLQx
- TLSH T110355A1277D09E5ACA9B1BBAF47185047730E9111723E78B1250D73C2CB7318ED6ABEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1150670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.CoreModule.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.CrashReportingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc8f3705e7b240bc52f3c0a315eb605ed82f882e8ac4915db3005e72d19c9f3f
- MD5 9805bb86cd83ef1ed317f3276257e324
- SHA1 c2df6b8bc6ba8671c7a79814b46ac20a4c98c48b
- SHA512 c42d2993086a9f29cad8e8e409c80209d0556460792ebdf9d04d86cfff0c73523a948da61b9019c0670d0d99d218d636f67216c0a7fab0b32c2a29267574022d
- SSDEEP 96:34yowlcD+cBMRjfGBP1O9ItJMCqQD0ZUz2hjk6VaLcjObgw0l/qAI/:34twmp6qO97CqQD0ZUz2hjkjcjOiZe
- TLSH T1D822ABF17688229BEC491F73907993813990C017CEF3E76D468E22A5B43D1EE7E217A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.CrashReportingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.DSPGraphModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f9075a2d1c524be25bfe4c86b93761b59c035ab478bc5250b049ac0000e5e29d
- MD5 d66f6189ad713aa79c87b55c638d229c
- SHA1 c09a950c67201d3148cee7d5cc7c71f37340d361
- SHA512 7b74f4fa0541681d41d49ce47c9079e04e6d1728229f75c2a4caeba680e44f2ec94a451f15b8c514490f1f9731b44b59e61d375131051956356aaf5b2c154d4b
- SSDEEP 384:OhaIhlvrrRfzWFqW3NIfyIOJCqQDZz2hjkjcjOJ:OxlvZfzdaNI6IOJCqIghjkjhJ
- TLSH T1B48252B672892157EC550F73946D43813AB1C017CA33D349128E9268B8BF2DE7E237E9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.DSPGraphModule.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.DirectorModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e96fedc5bf72d5357738536073a1418bf86c759658dd15d80b55c6e4a31a0ce
- MD5 bae5e8d8b35b13d062c1f6f72fc7d2d4
- SHA1 93da39a2eb7f1f639c1e87d9cbfe23567135ce3a
- SHA512 381a728811f47bc6701490b75633a96c878537af04c2a731c79ca4add39c12a1b122958fc6397f1222129864ecfb3345ee03c22b109cfb0230e165d3e1c8a0cd
- SSDEEP 192:7mcZS5wd3eThVg/aENiKMqMci/O97CqQD0ZUz2hjkjcjOo3l:Kcsad5aEcKf8OJCqQDZz2hjkjcjOg
- TLSH T1455223F17AC56157DC850F37E22543413A94C017DE32E759478E22B4B87E2EDBE22AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.DirectorModule.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.GIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 57589c6ddd9e6de32df2de642edef6843e3bc38a145f32889b7da2adc8bf6a96
- MD5 c564ecff98c6417c9b1118b0b37f488c
- SHA1 5a884646f470e3ce3a6366b2c2d2d7c267c803ec
- SHA512 2673bf289c72f57e5e0c6df714f7d05f5f932c6d4c3bd2babd02c31906e29d154695ec6995bbe97fa5eb74905666fcf891d772f4f4383bc661eefe0f5fc4d4e7
- SSDEEP 192:NR0+/uOryCO97CqQD0ZUz2hjkjcjOLVj:NR1uHCOJCqQDZz2hjkjcjO5
- TLSH T16B128BF1768425DBEC4A5F33943993813D90C017CFB2E7254A8E22A4B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.GIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.GameCenterModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f1e2c10c2601153493b38ef4b56b7c383cd385ff27ee9cd4edb6192a60fd3c5
- MD5 f765a30bb65828653bb923b33a5d92b1
- SHA1 3054eae6a1954b83ece2061f631a3ec920fd3ec3
- SHA512 649f2bf089ee208f95111096bf50c80e1ae9c0b940783def6873ed52e9d032de3e814cbf6940cef80ac6031b7d4aadb4c93cb1e927d69e43c88dc9f9e6e74dc1
- SSDEEP 768:9BHQuG/kiJ1vOWpyNdESrvm6gR9i973dtz95K7Esw+ZOJCqIghjkjhP:NGsjjmmt/z95Khw+ZOJCqIghjkjhP
- TLSH T1DFC2B47876D8212BDC9E0B3F54B543403AB4E1178B63E74E4B58E198383B3A9AD32675
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.GameCenterModule.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.GridModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6f7244731bce500e83926004fc68e3c218e14856df2abee4df80421868097782
- MD5 a431e20b1e68b07f54aef2af21af5bb9
- SHA1 328429ad07e3a2fb3656d6e746fe5aa32b10b2d2
- SHA512 b6b4993cba3762591d5da08df41bce30fcc1993f10e0e6f51753c2811b21474ba5fdea03495f9b52eb09e41144b83d293394dab61291a08728ebeadf2fdf158b
- SSDEEP 384:tEq2FJJYHvTC1wGOOJCqQDZz2hjkjcjOb:tEVFJJYHLnhOJCqIghjkjhb
- TLSH T11B521FF1B685565BEC491F73D02983807964C02BCB32D7C8069EA2B5B47D1EEBE612E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.GridModule.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.HotReloadModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb1ad4391cd0c00e1fb0d42d57f5d4d64f121feaaf9ad3a2b1233d1f0141de41
- MD5 a045c4efba3adc6703636f5cc236d94f
- SHA1 1bf8e512e455c0a156611dd3f9dbb722fd74f77f
- SHA512 ce09db3bfd64ccfd66c7656586cc1de844635cb6a2505c16f794b73acc49a668764b0527d9b9e7cc7f5669aae553e0f94f3e1ad9845d5335758ea45a5d87648e
- SSDEEP 96:CVqGsk9S2WuOrxUO9ItJMCqQD0ZUz2hjk6VaLcjObRw6lytn:Cx+/uOrxUO97CqQD0ZUz2hjkjcjONMn
- TLSH T18C126AF1768426DBEC4A1F33943997813D90C027CF72D7154A8E22A4B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.HotReloadModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.IMGUIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b931392b4b0d07d5bad9cd8d2f2430b4e07ace966b283fe084cbec430b91a6c
- MD5 e92ee3e5806c1e281dcd2c6f240b04a0
- SHA1 9fbae1513f4ac3c7bdcab515cafc80279a1307f8
- SHA512 824f7f4b8ec27988aff96f3b2ad1ec058222bd49ae78594aae539da4c413fae55d0cf40f18c2fac9e2490ca304b69a9e0eea7bfcc2b8a88cd3d8affba32046ab
- SSDEEP 3072:Eb26I3/PRlZv0cZWwC32F7pTpE9jo8DERZIO85:7ZMcUwX1pQjobN8
- TLSH T1A6F3293827E85A6BD6FE9B7DE4F6900097B0F15A0247E78A168590B83CA73D1D510BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
165662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.IMGUIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ImageConversionModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a714dab3b1d4654b1d358efd675898b38e48c2c93ca316fd802e4996fcfbd99
- MD5 b8f1f50eca6c792adaa4f97f66b28120
- SHA1 cd08d67b385396cf42a9a9144ea945da84b14ee3
- SHA512 a38316e460febd5b92ff762ed737f913ba934fea22cc562374756c9f0f07c4d127a6d990ecb62daa8fa1a09f8cd00a7e9afa1362e49d49cafd32bc05721bdce2
- SSDEEP 384:F+bE/6DuqohdxpTqfbAOJCqQDZz2hjkjcjOB:cFDxohdxtqfbAOJCqIghjkjhB
- TLSH T16152EFF67A886567EC091F3394F983903A94C01BCE73E315558E22A4B47C1EDBE227E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ImageConversionModule.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.InputLegacyModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe4f4d686ba16eed1370a456eb908ebab0899702abe87a3f689f6318ccb6d4dd
- MD5 aca3a84db5a2c21ec87cbfc41d3e64cd
- SHA1 e40030b2f5cdba8291862c0c63e314f5adcf147a
- SHA512 2070d2fd3e42a8e7913e0bb2c8ddd00f3a4f489798d4f620f08f1a0d45643b4aeb0319ceb0c76743862115ed59aed1af85456d2550d8ec0b8745b7114c946ba9
- SSDEEP 384:8CHgHW7cL9IWb0NO97dg9i+tJFy0osYOY04Y/DSq9yaBx+YVsOJCqQDZz2hjkjc3:1iWW0M97dkt3mkYmDn2OJCqIghjkjhK
- TLSH T114C2B5F5BB84916BDD5A0F3AA86503117970C0578A63F399075D206C353B2FEAE32BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.InputLegacyModule.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.InputModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd0a80dbe11e7d7a4b6c0cf3c8dfaa76fe355cd6f14a8815cf84a230d1d99607
- MD5 3cb4666f42a65ca5dee14da21431e5a2
- SHA1 436b6e2ceff41e09b7bf2b2fe1d1498029f49fcf
- SHA512 8cc9a0299729f92bd19042edd266993bbcdfe6a88704061bf466b072b50f2ac641056e88cf8ec0186f6761579392bcbd777908311119d3528be792a2508984d6
- SSDEEP 384:FPAxUiVdPTVExwocOJCqQDZz2hjkjcjOH8:FP6UcdrSxTcOJCqIghjkjhH8
- TLSH T103421EF1B789299BDC492F37947993803A90D017CE32E315468E22A4B83D1EE7E207A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.InputModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.JSONSerializeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 755a1ba552e7668da352e4b3bcfdede084b3da9d92d0d9d41f0511fe9953c67d
- MD5 252b6d605cedb88de7786ad0c9026d10
- SHA1 ea9f9d2eaab8b08025a49e852b39cec446fa5445
- SHA512 0108f30d7c2c8e21c8ecba087bf5d45f0dc8035941282a4336a0b48fbdff9c9aa4737dbf2bdfe19798bd95eb026741ada5c808dbd2fdc5d04e3fb90636b135ba
- SSDEEP 192:+8N1UWF1nGluIIqLVhAO97CqQD0ZUz2hjkjcjOeo7:bZbnGlhzAOJCqQDZz2hjkjcjO9
- TLSH T13B32CCF176C8255BEC4A1F73843993813DA0CC27CE72D355468E22A5B47E1EE7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.JSONSerializeModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.LocalizationModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 70c7a2545e70fe6fefd74545c1482a81f345a073f39f902a575061deb8b39319
- MD5 86da33c5dd99727b0a08f21bb3f72c97
- SHA1 c2cf9c261c285e85cd6cdf445c5207fe7fe570ed
- SHA512 938f1f61271000fa6bec98e67a5cd3cd6e30e8ed927f880917b4294eac79c5aea5bc265d4da9bfd71f23deb4d10846fdc4ce61f61a51275d2cc6ac6473696cbb
- SSDEEP 192:bKalXOtu8O97CqQD0ZUz2hjkjcjOrNT7QT:fletJOJCqQDZz2hjkjcjOrNfQ
- TLSH T15B22DEF27689115BEC0A1F73D43997813990C027CF32E7D54A8E62A8B43D1EE7E217A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.LocalizationModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ParticleSystemModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc0848d900c81870ee815918fb99682086d062b9ea07ada6b6c600afabfd8f96
- MD5 fe887be938cae518703c3d5cbb116732
- SHA1 481a56b03ba8a8b4592badabb3517058d825d575
- SHA512 0837536de5778c997dfc37c03d9c0f54b06725a984bf2a90cd427dfe0f5aeceb25be9bc1eac4ce495da90a615f11a267409aa9ffb51afe6efb4c3b16b34a2302
- SSDEEP 3072:hS1ilTxJg3SVqft/jbuJDho+r5fa5Lc9tJvqWYjO8L:hRTxwSVqft7buUIfGc9tJiXy8
- TLSH T1B3D376719FA4C96DC9DA43BDF8A99A20DA35D1503473E7C42BD8E03D1A2635BD233983
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
148414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ParticleSystemModule.pdb
mscoree
_CorDllMain
Name
.text
Size
137KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.PerformanceReportingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 380307041362d8452da87976b35cb6bba9c6607d658a40577b59b04ee43465be
- MD5 6a734a7c22769bd0121b58f46e22a69a
- SHA1 b12f1873ce671d3cf50e4797d208ad728e4576c5
- SHA512 93f005ac5326a026eecbb10068a73123dbf63c658680322fa03c169e917305635e4f887224d901a5253f7e72216a371b1b6bb450915f82c437fa489e2c05f6a6
- SSDEEP 192:ot6vWW+AwO97CqQD0ZUz2hjkjcjORLzr:zvWW+AwOJCqQDZz2hjkjcjOJ
- TLSH T1DF12CDF17A8B229BEC491F73907997813990C017CF72E715468E22A5B53D0EEBE217E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.PerformanceReportingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.Physics2DModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 753e45c24e15ed480744b858e9e102b845599a2b14e87dd797272a9d546524e5
- MD5 f6ce0f6e1934d72e288f27752a447f50
- SHA1 04b2613a4224a9737f8aa39793f2e47183e3179d
- SHA512 d5fef1d453ea4103b016647da4405995ba5b91b50ef32ab865dfce7dff79931078bd2358de458ccf59e78b82b08a80c2638a723c8f4d62ce339bf3789439e98b
- SSDEEP 3072:XQpV3a4ckO9GzvthqbvyQEN8k09inoXK10ET1b73CgjJ5nIZqqO//S77jWWuffOj:+3j7GGzu7kRo8
- TLSH T1B3A32A7C1BD0C466CEAE063AE9354C51AF30C6058153F7CE1624517C78BA7EADA73ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
113102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.Physics2DModule.pdb
mscoree
_CorDllMain
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.PhysicsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eb8896f40c01e8cd3191aacc989f72a392147e24347c42ac255ba7b76ac4ecda
- MD5 ef5626e04289b696bb64618d5eda977d
- SHA1 337bbfced8fe91dd60eb92f4181b939773f5c72b
- SHA512 fa70eb77f324db69923e455aea8a398638624bff7dfaa5ee1de16559c49ee8857e253f8a3b90101feaa00a538241747560b50c6f56100f06ecdd16dd4bfe404e
- SSDEEP 1536:Wrlz8pKrDRSfJMY9nSwnxc4B/3TTl1lOkg+VOlzM3w2/VQG+iVS5+aUdOJCqIghe:8WQR0MYRSwnxc4B/3TTl1lH5Sh2aG+iH
- TLSH T1C293C9A927E0C06ECB9E4678F0740620A770D1185563E7C715EA70BC78AB3BDDA37AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.PhysicsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ProfilerModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d4b3d6acc606cb947060b034e3106343a6abb1c45d8b2db505c89f6f069a571
- MD5 f75feafbd0e0d9fd70a25926d64c5477
- SHA1 e582412f0e0e161fb1ae725a6ed8babdfc077305
- SHA512 0212295575b2972e388c3a447f64dc5832212319cde8392d222850f613f1a1e1948d064a26dccaca980ecaf253799398248ff722dd7ba6117ef50c87b0d468f8
- SSDEEP 96:IVPGsk9S2WuOrk2+ZO9ItJMCqQD0ZUz2hjk6VaLcjObRwj0Xqqq:Iw+/uOr1+O97CqQD0ZUz2hjkjcjOd3q
- TLSH T176127BF1768826DBEC4A5F33943997813D90C027CF72E715468E22A4B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ProfilerModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4240bd37ff02b5d21b20058e3e5705904f3381c6e5e4a0045c72a3a040be2ba0
- MD5 9cdb9cd2e22ed011c75dc0c00e157ab0
- SHA1 4e39b2f3c0061ee832e9a5560c96c6b0936e7274
- SHA512 1d38540fe5eda97068e2409490fa32dd1c53f4f92f9e3a25f8a3ed30e4f3e1cb0004760dd5f4fac1f77d0873611753de85e46f2fc6ca7b4aa6e173fb94724fa3
- SSDEEP 96:1cGsk9S2WuOrhz4fO9ItJMCqQD0ZUz2hjk6VaLcjObRwr0znOCyNEC:7+/uOrtMO97CqQD0ZUz2hjkjcjOdsf
- TLSH T179128BF176C825DBEC4A5F33943993813D90D027CFB2D615468E22A4B47D1EEBE21BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.ScreenCaptureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e7d0b980fb80c0f4b26aab14207b57c9438fa43a79dc0edee20ef6667589f3a
- MD5 240b8a1c7dff55aca0741d0cff4e636e
- SHA1 3cc993460720eb0a463f40f9773cf29428c3bfcd
- SHA512 18fc70315155927afe1071acc0c4fc5df5ff2e0ebafc43cd363b403f04da4008ceb8e78e1a564e849a4262b22c593ceb7f3619d56431aa51488ec9136ffe7989
- SSDEEP 192:G23jAZ8xEO97CqQD0ZUz2hjkjcjOaZoN:GKRiOJCqQDZz2hjkjcjOj
- TLSH T16522EEF17785259BEC491F73D43993803990C027CE72E7164A8E22A5B57D1EEBF217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ScreenCaptureModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SharedInternalsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 605b07895528b5e45c099ee89982c4c12b968d5e68100c13be3a70e15979a854
- MD5 961b23935c17adce59b1b0831706fe42
- SHA1 77825fa7ad428347beffc35cf22dd5a6a42d7db1
- SHA512 962c9a7391276e9637ca8aacaf040f952f6938289b2189f7cc74e9fcb43fa14d1c8f196984b6cd1f51f2eb85c3b01bc046d7190a264a0888a776844e14095d81
- SSDEEP 384:iZSpCyX4wnCJdu/t50SVDV7M9OOJCqQDZz2hjkjcjOhs:iZSpCyX4ww0E2DVY9OOJCqIghjkjhhs
- TLSH T160A2B7B1768853B7DC890F76DC3453413A65C81ACA33D663870DA569393F3CDAE21AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SharedInternalsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SpriteMaskModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cbbcd5df08c677892e57735e0d0ef5eb53f05441caae66bea4712f1ecfe71401
- MD5 0945afa7695e393502283324de2e15f4
- SHA1 212a20359c39790f4f63e4ef5a62280433c3fd90
- SHA512 2505a2f9ebd23a0ca28db69410c2709b9a14b678d57acbbfdb0b8f01f94733ea1f9840826a417c6a61f52833fa57946e0635dc4a8527b6d64c88a18dde9b4b55
- SSDEEP 192:ap/5dgl+SSGO97CqQD0ZUz2hjkjcjOPtu:aF1SSGOJCqQDZz2hjkjcjO1
- TLSH T12F22B9F17688259BEC4A1F73D43897803990C037CE72D7554A8F62A8B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SpriteMaskModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SpriteShapeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 924bcbb66d268c5b82a7c24412a5ec1eee342c61d144a20d4654da3a7c427896
- MD5 cfc248784c8efd3d3aee1e346c7d500a
- SHA1 d033d8cedc255b23047b8529364f5d78a23b7c58
- SHA512 3820c396fbf2550843f09ff5aa4554fb5df7236db5182a8adfb31cdee053b98311cca809a0c2c28ea6638aaf636f1c5589c04cec9704e50184f23c338f8edc89
- SSDEEP 384:NZ3Om8Tz3QiIRsEysrKaOJCqQDZz2hjkjcjOW:NZ3Om8P0Rs0KaOJCqIghjkjhW
- TLSH T1EE5244F47684615BDC4A1F3BE439938039A0C817CA33D7154B8E62A4B47E2EE7E713A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SpriteShapeModule.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.StreamingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f303d2ea0e5379a223c7e07d1fdf14d6ac485c0ea9f405d8d7c6bda56a7d0c83
- MD5 16040e782a4a0c9d344e29bf452cb4b5
- SHA1 28c4f502692566b28cfdf79418a6f22d5327f373
- SHA512 84c99f8f8e8cc1ac7fa14d97aebb6821ca1fec37d6d06ffee2fd5231d85e44412ae96fc9c0ba57c500fe354046663aa34ec374c6dec643a94d1a7be385ae439a
- SSDEEP 192:ZGAuAvnGbcO97CqQD0ZUz2hjkjcjODMZ:j7ubcOJCqQDZz2hjkjcjOo
- TLSH T1CA22BDF13A87129BEC591F73943993813990C017CF72E7154A8F22A4B57D1EE7E227A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.StreamingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SubstanceModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 78137a3a4da21b129321b9c8df4d5875611fc2cf258d7675b861415cb4e25057
- MD5 510fbe3bbf495f297cf5a19b80cf7719
- SHA1 b73c1dd0c7b27790d8f84d5b7b635546293c4050
- SHA512 7d763fb62d0b19ba738e2e6b0225f330965a971e1a1b80be136c6bd6417f93f6bd2bdabf9effff9e5fb4b10fe357e3055425776f8cb98fc836620e05de4de2bc
- SSDEEP 384:PfSATEJfD8pHaLEOJCqQDZz2hjkjcjOt:PfRIOHaoOJCqIghjkjht
- TLSH T1F55231F1B689525BEC9A0F33E43A43413A94C417DE72D316878E21B8743E2DD7E227A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SubstanceModule.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.SubsystemsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a5c0a4b2dbe5fb7c6fca0c803bf8108cfc3898bde73de9b1920c0a26ad03e44
- MD5 3fb695b89a0b3a00f438ccd7cb6e90ca
- SHA1 39bfe49a2f05ea19e8fea2f7fed62a21456ab9c4
- SHA512 4a5b1570ad2b11fd06744b1d00a323c671e6546c9d819c958e5938726978bda3266ba5993f5a2869e69b38a67dd3a77d4b9369cd3094a9cf28e77704c755637a
- SSDEEP 384:pJffNxU7I262O2227222L2222K2g24BE3vtizSW5ixZCiqSVySOJCqQDZz2hjkjN:nffUU262O2227222L2222K2g2QE3vtWS
- TLSH T1ADB2B6B17B85129BED860F379834424079B0D117E632D76A07EE61A4F4393EE6F31AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SubsystemsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TLSModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdc7ce6c46ecc51a2549d494b4d531c996c8c18b047926a684cc175f82e2bb61
- MD5 0c59052e88a5412ceea6ea2951111ce7
- SHA1 3f6b13fc075e533d16c9bd3be4cacc88885ed72f
- SHA512 7540aba43c3a782c5409e161afea9d7a7d5165937b6ed047669281e2e17f20b8ede1ed62a20025fc6dfbf0c5e50e77cdf5f33e42a127401ab00adacd6d13e5cb
- SSDEEP 192:wPr+/uOrY8O97CqQD0ZUz2hjkjcjOceU:wSuT8OJCqQDZz2hjkjcjOZ
- TLSH T16D127BF1768426DBEC4A5F33943993813D90C027CFB2D725468E22A4B57D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TLSModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TerrainModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d272f64866f32c4872ecc9daaf4d107c6f88c677a7a724571889d69724c13c4c
- MD5 36f0800fd53f18f23eeba8ef9c2d3673
- SHA1 1e77a64cf11033c4a1d0b13d5dce3acea3114406
- SHA512 4efd81b242bf2d08d9fd01411024b7737eda5bfbab54d83f8936c07228987518c814f331b58ce23d98db07ac15fa9563cff2cc8c748c89611f7d54c2fc5789cd
- SSDEEP 1536:kvULyl4n505fWrPejKOj62nLdtfGcX2hC8zvtmC6bnHT+2bMu4hlxSfAJfrtp95D:kvUml4n505fWijVJtfGKkzvtQgu4hlII
- TLSH T1848319341B989E59DD6E2F3AF431821067B0E0239433D3D91FC9F46C29B7788A925B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
87998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TerrainModule.pdb
mscoree
_CorDllMain
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TerrainPhysicsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e97776d895021de27e8656d123df0aaeb7c16bd8160662d6111eaf4bb0b3cfe7
- MD5 f7dc05e717b5dd042d904c5c2037d2a9
- SHA1 5d74e276699715c7366bce1a930ee1c9ebea12a8
- SHA512 dd3a682ef0c363bd2e12df872dd01376b8a22199fd5a9f2ca7a4fb26efd2f15ac02acf8fdf6c5ce8732d6a75660d5c8d64b9c3a05042fc9eb86e165a4951bcca
- SSDEEP 192:KAslaq3nmWO97CqQD0ZUz2hjkjcjOTKZp:KR+WOJCqQDZz2hjkjcjOU
- TLSH T1F022CBF17689229BEC592F37943993803D90C027CF72E755468E22B5B13D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TerrainPhysicsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TextCoreModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 beb7e61b53be1b62b16c6fd66f7c38b3ab5fa4dae897708df0cbe4f178863921
- MD5 509cb400dfcfbca5a2f2f10a58a16bc0
- SHA1 cd5babfc236c228e2eab7b19d388846076fd9325
- SHA512 c5632a5562824e0a46146870d31adc8bf10b44c27f935383234fa46a19c9434b83751b35712d01e2ea6ee9529f8155867e63c9809aa149b09c32328a8afc2d26
- SSDEEP 3072:zB/Lq7Z/Uq66/OB9m8o1Mc9NF1GXqmnXQFKMHNztVX3Vw6qy9nsq1O8i:zB/W7ZsnwOB1XqegzNzbX3y6qy9nsqw8
- TLSH T1C4044A3C5BD84622F43F8BBEA4778545D7788182E91FFB4D0EC864E92CBA7B18405A53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TextCoreModule.pdb
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TextRenderingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c09e0ed57f2981e044e49d3a18ef7a621e74705ce431a945c075d4a9ff33155
- MD5 c2c099114951433db3f73f0b51d5f62e
- SHA1 a15c29638bfeb0a11fb2abb13abf2fe873c0fd53
- SHA512 bf1da6282a8ae9be2ebabc53a5f25cfdc866dd458acd747158fe8f2610fff8dcfe4647ba4bfd54c4524d8b08cf0db7fe9590e21f6e88f81f42242abb6efd73e2
- SSDEEP 384:Vpghrm+ZkUlK/0ATRbtoD0z27OKwkdII8a80zyOyO2Aw1QOJCqQDZz2hjkjcjO/:VK0J/NtZi7fSFaRSNWOJCqIghjkjh/
- TLSH T10DC2B8F86BC4552FDC5E0F36E434434127B4C007CAB7DBA6425E6064747B2E9A9327EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TextRenderingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.TilemapModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de997c3a75055647560eeacb923058069e1fff8d010fd064d99ad57bf37ac01d
- MD5 68b7dac850607d1022a0286ebd23c2c4
- SHA1 395c8adfac68291ba6c794c586050ee677ef6fd1
- SHA512 931238a4ce3e916d09473b07b4070246f4ab6ac8238ff724ce121e3ddaedd88ebdbdfec23db8d1ed8df92fb1c251576bb729dd39221421819cad821ebc2db62b
- SSDEEP 768:kTX6jM/drr5E8y88MNo8sLWMAdJCuROJCqIghjkjhb:kTX6YA8y88MNo8sL36ROJCqIghjkjhb
- TLSH T108C2B7F52694422FCD891FBBE09A43517970C2168AB3E344570EE078743E3FEAE226D5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TilemapModule.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 585acbcc84790c569abf65372310ee967cd6be1f9bda322008c602eab7bc3f74
- MD5 7000eabda4d0a6b1b2439e87d7701672
- SHA1 ba742b869921faa40fc3b295d5e21870b982cca2
- SHA512 ccf9421ce94f4fc49d5ba23f06f030baf9a486b9a3d3ac1893591fee9f225af6ab40682d407f097ea73e4cad86e574e21a9b0d9f32246df4c95643424e367c16
- SSDEEP 6144:Tvf349kQgeleqNOw9V81EwX02yQYDwIW+q7N1x:T3Z1elelwU1Eop
- TLSH T1EA344B3813AC8E2BD2AF173AF058951983F08117F6EAE7995EC8E5FE1C43B509611367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
236246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/Users/moscow/.buildkite-agent/builds/moscow-2/dinosaur-polo-club/mini-metro/build/project/win32.gog/Temp/UnityEngine.UI.pdb
mscoree
_CorDllMain
Name
.text
Size
223KB
Virtual Size
222KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIElementsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb2151ba769c6312ca9376519bb1a67f25ce64aa861befb7411bc4119c9841da
- MD5 9e6c33e876eb9cb0ced65d687b0346ac
- SHA1 ec0cf493d7d9562ddd6120ffb9ccd54747a86d0d
- SHA512 a8fe79c0fd6680504d53f1687f3ecf5ac946032972f5665cf3b3844545732a7d7d667c4cd5e07c75dbeaf9dbd0a30547a1f94416e8190e6fa92e7ff6698d74ad
- SSDEEP 12288:uPG/QJK7BNJCEuoWJ2Ke64qk/4ZPVwWEO4aQ20ZjlEBWOYpOuuWrvzdokqKMN8jz:uu7oWrv7XMejc7ytbOg
- TLSH T1E9054A1436E45A37D6EE9B3F9075080967F1B016A2A3EB5F0A94E9F42CB3361DC08767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
803838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UIElementsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
777KB
Virtual Size
777KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIElementsNativeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fffb772b01370d5266cb84da9ada7c16800ac0e8cdac139bc0446355309a2189
- MD5 96a99349ba9ff148e53cf8680472b38b
- SHA1 d94e576abadaefa96bc8f535f98a3b9792c3850b
- SHA512 bfe2530115963cbf705c127d0b46aecfcade7075ff3fa2dc1e0170049c8c6bdfd674adaf3be1a34eb5dfda0fbe5bcc052cda93aaffe7ce638c01d59d549240b5
- SSDEEP 768:8apVR+P1mFdn+RCoTvckhjXj+Ncx3jazZGE1yET+qDFWTyj3N5ueeaox4LG/o2eH:NpVR+P1mf+YkhjTkcx3jaUE1yET5FWTy
- TLSH T1BA23D87C1F92A91FD4DA1B3BE0A00610B770C0528913E3569B49B07969773BC9A73ADF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UIElementsNativeModule.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f483dd6a4382fb981f8687504e5892e4d75cde4cee591e5439f34ea88be1c3b
- MD5 7e65c4b8f287fc63c7276c59ba94522d
- SHA1 b1790481dfa7d3358a65e5e62d5deb882dc6356e
- SHA512 b7e73a005a4408ce12b2e4571119e086fc47832c497628e1e50d447a0367e70217111bcfc56f817e102881e25cb452137b2ea0f9f793ec1acb6369bfe9a8ca48
- SSDEEP 384:S2fpFfzpqTKLCECERTyx8mEmHKU8uWYNiamq71AIyX/bOJCqQDZz2hjkjcjOR:S2g8CECERTyxTjHsYNcF/bOJCqIghjk/
- TLSH T182B293B97694556FEC4D0F32E476074176B0C027CA73E3854B8E61A8783A3EE6E326D4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UNETModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a94a143a9a14e38644c19ab1ab78aa5f93c5d500d86e80a9407f0db2f1fc2d0e
- MD5 eb247168cc833bf654c9e2fc2974b7f8
- SHA1 2ae5d14bc4a26c3042b4bf4c2ff5829e2f43c607
- SHA512 9bbe1b252878324f266188c6423b85bd6e44f19f27500c04c6c904c7c8755cc221faa3462a0303dd21916cc6da4d225b5f1f5fe97e351b8e5197c763d6e50011
- SSDEEP 1536:OA/s7yGjJ/W4cNlpLr3FcmYnPxdx1eq+XlWaaxgbKWt+zDOJCqIghjkjhA:OP2GXKPHYPxdx1eq+XlWaaxgbKWt+zD4
- TLSH T1097319B577EC496EE6AF2B7EF47041002735E9966622E35E0680907D3C7B781C821BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
84878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UNETModule.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UmbraModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b54729537d142a3a770d4e2cf1e82157f273d0827acc9aa27385b63cd7b15aac
- MD5 f3a84ddd278989907af80a5dac70a849
- SHA1 59a1d89db4a5e076fc4c31df9f1e1a82848e8f06
- SHA512 5361157f4cacecd0272b092a8c466a44d0a234d4c4c25b823fc340426e4f2eac373489a38ef1a3cca5b88acd63340fac3c3a6241cddb12497c426f4136a6841f
- SSDEEP 96:t6Gsk9S2WuOrqklO9ItJMCqQD0ZUz2hjk6VaLcjObRwEoyBi:h+/uOrqMO97CqQD0ZUz2hjkjcjOqQi
- TLSH T100128CF1768826DBEC4A5F73943993803D90C027CFB2D715468E22A4B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UmbraModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityAnalyticsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 498421604aa05fc1c7768af3a032392ec87704fc5a5e2e4de05697e15ddcc3dd
- MD5 caa5e9d71b013d8ffac36fe52897b354
- SHA1 b9dc605c7dca8a2183b20bcf5221ca8eb45564f5
- SHA512 aeedde4944c7eb60fa3628b2094ec1dfedf1a31402d5a2116966e48ffa0c7ab0e2cf75db530a29f3f121295798284428942c0fc480286acb011ca764b1094a68
- SSDEEP 768:f/zByz7bGMhSjI5qhCOMF4/oTSOJCqIghjkjhs:0XSjMqhCX9TSOJCqIghjkjhs
- TLSH T11FE2E87937C0A66BCC5E1F3AD83592002B70D1479623E365064EE178787F2ED2A71BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityAnalyticsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityConnectModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95362e45beac56048b9235a47e4babdd47d5a2e33d5996e4e50f30bd24ea3140
- MD5 bbefbdcc4c667331191df13f17292d12
- SHA1 168a0aef0aef538c9a32924e458f4d2884f84dcc
- SHA512 d1caa8d86ae66bc145082d0cda3148b5296580b4dbbb14a3f7b81dfbb45951b58afc438f3098305fe5d97335c541504d6d071218ced5f60ecfa47d04e074471b
- SSDEEP 192:tXToqgc5RUAO97CqQD0ZUz2hjkjcjOy7S:tXTXgcHOJCqQDZz2hjkjcjOu
- TLSH T1963289F13684259BEC095F37953993803A90C427CAF2D75D478E22A8B57E1EE7E217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityConnectModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityCurlModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 97a6ea679f4a2faaee3d8fec726c85361b9fba73cb34962515a4a96195fa3263
- MD5 4cb1985ae65a426c406ffe877e151371
- SHA1 b9c5e8dbe1670f200e64e48d2dde1486938b9a92
- SHA512 a1b472248a0b81f477a1e031b4ccd4e475179d80f77e3937f1e49c4bb751e33c03ea486a0f0a784db9944bf4e9cf394e6751047aca16dc78eb0f188076f2cc99
- SSDEEP 192:wbFYksnIexlglk42HYO97CqQD0ZUz2hjkjcjO7M4:wRjeIlV24OJCqQDZz2hjkjcjOg
- TLSH T10122CCF17A88219BEC091F37942993813990C037CF72D7554B8F62A9B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityCurlModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityTestProtocolModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1e05b0aa120374f5abe27db97e35989b49452a87fd14c6f380726399c4bc6b80
- MD5 ad83075654683c2c02ac0a4ea072503d
- SHA1 051757dfa00326bbd4e80c031dcf88441c999833
- SHA512 5d273686d42d3d516dc8a3444ed29f3eec3e99e8b72a8946b4d61f920a0bafb3736ea4d85003e744b826ee75d8a61973bee26d66510dffd84d16261969f3bc0a
- SSDEEP 96:tByGsk9S2WuOrerO9ItJMCqQD0ZUz2hjk6VaLcjObRwf+yl4:P+/uOrerO97CqQD0ZUz2hjkjcjOj04
- TLSH T1A6127DF1768826DBEC4A5F73943993813D90C027CF72D725468E22A4B47D1EE7E21BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityTestProtocolModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestAssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d9e8384b8c3c32224a52ac92ae981bb06234d14395dbd39616e7a611376805b8
- MD5 8a287be51fa974a4b9a9998b9ee5a10d
- SHA1 23f67f4fc8f56ab9de990e31cbac5535cad62ba5
- SHA512 fd26180c05174103bfa83700b486b4e439b66273f8e371f9d67d43f18f1106a89cf9087a0d601436158539fe607645a53b34e537e8ae020b3a496d184486e8a3
- SSDEEP 192:2xcchwwPcVN0fO97CqQD0ZUz2hjkjcjOld3:2QvD0fOJCqQDZz2hjkjcjO/
- TLSH T1E842DEF57685215BEC590FB3943893417990C127CE72D32746AF22B9B43D2EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestAssetBundleModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestAudioModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5f7f02971be78383bb282b1fcca7b0da38bd43df39feacf95f00cf809d7c9239
- MD5 c521d2baaafd3952275f27bc732f20ed
- SHA1 fc13b53b2a68de1bbf6540578b2b7fe3a3cfb48b
- SHA512 c0aafe6c6f934875541bae042244c1fc73e8f45b2cb825df164584d2ef043d512a7a28a436ace87bd47eb7c978d67f75cc9d3c4e11e3dceb245b11414c726dc3
- SSDEEP 192:Cu4ErZJgHxa4+sZhil65vOlCFO97CqQD0ZUz2hjkjcjOhdz9:CHElJgH+sZhiE5mlCFOJCqQDZz2hjkjN
- TLSH T1AB3210F176C9219BEC490F73A43997803E90D417CE32D365468F22A9B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestAudioModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 234510ec32404df0c62bbf1cd118d1463e0c38ddc4a411cba2d728502a63b32f
- MD5 a5c3feb8f91523d6719f16f90372b7a2
- SHA1 d4b22a970f7870c3d11fbcd9ea239d9e3733fe42
- SHA512 bea2b5f4a049f3897339ae41cd322da7bb9ea9c2824d0822f3d8779bef1b8697ecbea94fba67f9f523b4143624a51b562e14e8fec6b2c208120e83ef6ce236bd
- SSDEEP 768:5mtwifPKsZ74wjvFqfBGrCMzTaTtEBMyv7ZCFN1OJCqIghjkjhi:Q5fBDE5RC4tYxZiOJCqIghjkjhi
- TLSH T1551308793BC89103CD6E0FB6847583402775F0176923E36E9B9E617828763F8ED21BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestModule.pdb
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestTextureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d3531ff2588d5d9b8573ffa383cb586ecf3a51b92e56618ef9ed34c928073c6
- MD5 fd6e6f8dababa06c2b4b188fd56a69a0
- SHA1 fc91f3446b89d54b2e775596e892aedc5a5583ef
- SHA512 4fe6294a2b103c74aea42f318fab0a393369373c0cad066f21f1b19525c6a621c1debe705f40aa0dad8447449a9cef490863be6dca63d9e2948a902b3279af9f
- SSDEEP 192:T6oW+VnPSLNg5DQ+1hPMtO97CqQD0ZUz2hjkjcjOVCBHC:TJALyBQ+1hPMtOJCqQDZz2hjkjcjOVoH
- TLSH T1293235F276C9255BEC064F77903897803A90C01BCE72D725878F22A4B47E1EE7E217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestTextureModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.UnityWebRequestWWWModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 70d150b8a189cc58b53063af12817887630f8556212890c26f1ce77c11a93467
- MD5 a641a48a24039c57456d195ab256d791
- SHA1 2de28f4cb8799e66672fc42e696b3ac6cfb45371
- SHA512 34c1dc2b0090b2e5ee04f7344385673d521737a21cbedbf3d8e966307a22e861fa64c9d536720036a2facb4c97aa3ef1ac3de5c68e53bea6f1bc830eba3ce74b
- SSDEEP 384:4AgSG4H8O6HG+pgv4GvPCZD6H3POxzKfgPVdWG60l3gac1TbOJCqQDZz2hjkjcjm:z5OvoPCZ2Xkzo8i0VPc1TbOJCqIghjkP
- TLSH T1C69295BB36D45247DC5E0FB3A03583803BA1D1069B33E3554A8EE1A4B57E3AE6E31365
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestWWWModule.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VFXModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49457b9f2eb828dab3436d08f1224c0b47a08029177b86db3b91b277529c9695
- MD5 1834328277a8d7e44e3c1c56cb35c8d1
- SHA1 16a159ab13b159a63861190a5bd40ba6d5600580
- SHA512 fdb5bf92c3416b04fe37c6f49f0159955f300e2715f9a51c90ff602f0feb6a31946d62335e3a6819cbfd86e85b283f91c0da3ac809264cf0f3f90de1e7cd5743
- SSDEEP 768:KGBut/g5SH5tdS8+2b3ongOMFmiylL9fCIqWq2OJCqIghjkjhmx:pUZep2b4nNMFVyJ9fCIqWq2OJCqIghjF
- TLSH T1D303D974DBC89A67CC8D0636E42797043A34C126CB73D794419D983C7D7E2886B2A6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VFXModule.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9111bf20cdd07ac42dcfec6c6d2edbca787e3a509104348b51fd98ce5bb4fb28
- MD5 6d48c7cf20ef8a2671cb028c2b3424ae
- SHA1 4e91827acfd430c17e6c3ccf4fea65a013b1b2ba
- SHA512 5855dca3cef9d64c59f33204f3437e38b5e08b7021c0a38c2bac439e421371278ff57dcd2b5278e0ef662cbc5a4f5760f6ba93d4e4d3c42c61f8714586a03d71
- SSDEEP 384:vcEaERJu4EwchVR6GAQ8fg9kZDcOJCqQDZz2hjkjcjOPbP:kvERJu4EphVR6q8fg9OgOJCqIghjkjhD
- TLSH T1A96251F236C5615BEC4A1F33947583C07AA0D417CE32D759468E31A8B97E0EE7E21BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VRModule.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VehiclesModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96a660a8d3f4862240f2bdf2c3a2c010fba60984afcdeb13ceb408e29447108a
- MD5 0a96640533d59ab4ce058be87ec440ce
- SHA1 fdef96d80c89a5ce5adb49b47aff5a8ce30af56c
- SHA512 4fbce9c9c4dcd290a1288ac7ae1091a21054f211904a0c51232e386b890871691a7620d34778ea8892592300a066cd8ea1a2c7f3efa76dd316a4e09e3cff683e
- SSDEEP 192:D65/p8WfMY3w32ooO7O97CqQD0ZUz2hjkjcjOx3s:Dg/p8V4E2HO7OJCqQDZz2hjkjcjOx
- TLSH T129522CF1769B648BDC5A1F37E079535039A0C017CB32D355468F61B8783D2EEBE21AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VehiclesModule.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VideoModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4c7fbd33b68022d317dcaedf13c88a60398053f0fe325dff6832d7c1d0fe566f
- MD5 bd07f7c25f06bcb465c1b51b1e31c50d
- SHA1 6504a4a6dab0bdad4636fe64f51b797bc8c67e40
- SHA512 4e8d89659d338ba38a9609c83e5d42e144fd42e998b1f9769b91b1798e774c155e5f52343670f7d05678b6dabf3af21cfb2c1c26f53363734afe23afea96a18d
- SSDEEP 768:0gL7GdTCCtB6B47Eb087zD7NOJCqIghjkjhB:Gw47ETPNOJCqIghjkjhB
- TLSH T192D2B5B173C41587EC8A5F76F43443403A70D5038763EB8A16AF115C7A3B29BAE32BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VideoModule.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.VirtualTexturingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dda6084ee0fd653b9070dd4df19f39af50be828af92abdf21606bdb1a688865b
- MD5 4d47d9c76f550656fc50b7671bc9f646
- SHA1 ae889559aeccad3eeb4a6721bf545be07b47b6dd
- SHA512 42cd6e4bc4c44ec8a7200edad2da08a359ed9776ce904c544d7bbc594b15cf17b4a9b91b7c77eb8ebb480ccd46f15ecd036d94c53709b2498f0d574df0cb9b5e
- SSDEEP 384:vmJN9/7IHmnsl/lflflQl9l9lNl9l9lrlowS4x0vyt0/bg3i+80cYh43Q9jgP7M:aIGnsl/lflflQl9l9lNl9l9lr6wD0v7K
- TLSH T1FFB293B43BC16557ED691F77A47043003A60E0139AB3E376028E72A8B97B3DDB9607A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VirtualTexturingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.WindModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 107beb65b26584b0895f78a6050a9cec99e70758fd3b6a90132c88f1675c0ce5
- MD5 6cab3a2012f8a54c7008ca1521315697
- SHA1 b5901228b264aaade46a19212452678498f2eba0
- SHA512 4ab8dfaecef0f8f9eed273c7fc0ee9362682114282d37dd06bad1e9e6b56b0c97ab3e07fd65054b4e3212d0930a4eaf8ca102b93d6bdcabc16c513e4a6ef9c7e
- SSDEEP 96:g5P0wcmTw4Kl6oBO9ItJMCqQD0ZUz2hjk6VaLcjObge8qmx:+V1JC6oBO97CqQD0ZUz2hjkjcjOcjx
- TLSH T14822CFF13688169BEC4A1F73D03993813990D027CE72D7564ACF22A4B57D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.WindModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.XRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 acf7230cc44c3aa4821c8c941a57a6b16c94bc1b25eb2f76fccc1599cb798cf1
- MD5 44cee98ccab17d4f687970c50af025c0
- SHA1 bfd13c24c8b2c9cf04dbe8507ca3dba3ae8b2521
- SHA512 90109154908f23589973d9621139089c8c83b0dac2e856491bb882c8b3ed00e805efb110eaecc4fed2664eda203f57d211cad6e0d9a0b9c5e902ce25fb942441
- SSDEEP 1536:Ir5tucv01DtUuEF+JlXOaqSSPa46rOJCqIghjkjhh:eXvH+J9O9SprO87
- TLSH T199433BE5BBC4844ADDEE0FB6F43086001F70E12A5523E74A52DD6078347B7E94E69BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.XRModule.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/UnityEngine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 747c361ef9f2391199f15145b290a1a8c788b55fb9aa150b7d7c3875cb0e755a
- MD5 880c74ff1a6da3b883cc865dd5e9f09d
- SHA1 74eda1addbc711d7b06cfc68f1503f9aec35dbf8
- SHA512 b8411f9d987e69b9f00b79d71e6728967a869e7d4069d61c5665808f2264b180f0a82a71a8e2d437029ce5a4114d9d4728cfbc837b23a513fbd8828c305cbd33
- SSDEEP 1536:pk77nf+ud33SjcSst+1aUhui2ZKxC5bCI6L3exNy0iFg5keY:K7Lf+W3+AiME7
- TLSH T1859308B15E48FF32DCCE0FF2DCA749881BF0408718769B68207D5E4864BB699E72A355
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
97494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win32_nondevelopment_mono\Data\Managed\UnityEngine.pdb
mscoree
_CorDllMain
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Managed/mscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3118a7db8073014a66cda8076882473e21dc7aed711dd3efc8ad193bb6b9a0b
- MD5 b58b88b8189d64139ff3f0ce041435fa
- SHA1 ebeca14fe5b5953d45804555cccead3781d261e2
- SHA512 f42e6a129e88b1668c169fd3385d87e578693510a248c0706aa4aa1d9d42985348edc3bc528471e77ffc80d50214f7d075b82e6639b43055386709d9c1fc5d05
- SSDEEP 49152:JUFVMFZTi/Ppbg2XiUtD5WGFJg6FXh3y/+86ltJIAft:JYVMni/BjiUt5W1
- TLSH T175165B00BBFC9E16E1BB6B39987620221BF1FC51A772C74F5692E36D1C627009D127A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4079230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mini Metro/Mini Metro_Data/Plugins/x86/cgalaxy.dll
- IMPHASH 6a6df603fecba46ba89d79f2e89ea360
- SHA256 41fe4cb77081164685fbacb963e19b9797870c529b9d0343e3006806f3b2428e
- MD5 c760b8359a83426356fe62dcf2628c89
- SHA1 b7c450fe31ed08ecb33dc42c6e70d51d1c8e5e6d
- SHA512 d8548b5fe0f1fc8f9ac564ba2f8cbc0af9164f7580c6e014c8291d8a8f8d8970afec31c409447e9a6193c8183a063a4cd20595aefe6e2683b1186cf56324d684
- SSDEEP 768:IwFXYhCIDwRPd7VpcETgJchlEfA7o55Cz6zkuxVJoF6EDEGSInno1E+Eykzx5A0O:IwFK0BpS+qA7omz4kaf/qN9204sMf
- TLSH T18D7339207B51C031D68A1574D8B4CBA32A7EB9615FF488C77FA807BE5EB16C06E39316
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
12119
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Peter\Documents\Development\minimetro\native\cgalaxy\win32\Release\cgalaxy.pdb
galaxy
?ResetInstance@GalaxyFactory@api@galaxy@@SAXXZ
?GetInstance@GalaxyFactory@api@galaxy@@SAPAVIGalaxy@23@XZ
?CreateInstance@GalaxyFactory@api@galaxy@@SAPAVIGalaxy@23@XZ
kernel32
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetLastError
HeapFree
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
HeapAlloc
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
RtlUnwind
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
CloseHandle
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
CreateFileW
galaxyAreAchievementsReady
galaxyAreLeaderboardsReady
galaxyCreateLeaderboard
galaxyGetAchievement
galaxyGetAuthState
galaxyGetLeaderboardEntryCount
galaxyGetRetrievedLeaderboardEntry
galaxyGetRetrievedLeaderboardEntryCount
galaxyInit
galaxyIsAchievementRequestFinished
galaxyIsLeaderboardRequestFinished
galaxyRequestFriendsLeaderboardEntries
galaxyRequestLocalLeaderboardEntry
galaxyRequestTopLeaderboardEntries
galaxySetAchievement
galaxySetLeaderboardScore
galaxySetRichPresence
galaxyShutdown
galaxyUpdate
Name
.text
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=32, id=171, productName=VS2010 build 30319, version=30319,
count=17, id=158, productName=VS2010 build 30319, version=30319,
count=89, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=77, id=1, productName=Unmarked objects,
count=12, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Mini Metro/Mini Metro_Data/Plugins/x86/minimetrox.dll
- IMPHASH fa0f3070336990b723516ae6a5fa883e
- SHA256 b7c45dbedb28ad26455940a15830676c35e9616466b9d2ee5f535458bc4877b3
- MD5 e8b407bda20ab54c026e31d90092ba5c
- SHA1 3d205f387fb8016b46d5aaf829796058b5b433bb
- SHA512 4b4025038aca59370d5b8cd515c9cfebb3f797377b44b699b001d2bb940a7de2952e7ab0c3dd57471721e9fcbdbc5bb63588091edf798e812e440b1fee69e78c
- SSDEEP 1536:bkqNsysP9UmM7tbmKA7+gysGuosAMBoRPaZgQBfQOkDnnNGmMPq:bHNsysPs7zzs1ogRfmMP
- TLSH T10BD3AF11FBA1C0B1C4EA2539603AC7716A3F671247B684C7FF581E79BE201E29A3534E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
51460
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Peter\Documents\projects\minimetro\native\minimetrox\win32\Release\minimetrox.pdb
kernel32
MultiByteToWideChar
WideCharToMultiByte
WriteConsoleW
CreateFileW
GetStdHandle
GetProcAddress
GetFileType
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
DecodePointer
GetCommandLineA
ReadFile
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlUnwind
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
SetHandleCount
GetStartupInfoW
DeleteCriticalSection
Sleep
CloseHandle
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
SetStdHandle
IsProcessorFeaturePresent
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetEndOfFile
GetProcessHeap
LCMapStringW
user32
EnumDisplayMonitors
GetWindowLongW
MonitorFromWindow
SetWindowLongW
SetWindowPos
GetActiveWindow
MoveWindow
addAlphaFringe
decompressAudioSample
decompressRLEData
decompressRLEImage
filterPositions
getActiveDisplayIndex
getDisplayCount
getDisplayHeight
getDisplayWidth
quantizeImage
releaseRLEDecompressor
resizeWindow
setActiveDisplay
setLogDelegate
transformGeoSprite
transformGeoSpriteColors
Name
.text
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=152, version=20115,
count=40, id=171, productName=VS2010 build 30319, version=30319,
count=29, id=158, productName=VS2010 build 30319, version=30319,
count=163, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=108, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=13, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Mini Metro/Mini Metro_Data/Resources/unity default resources
- SHA256 f6ea6bfc43efc5b9e1c47c3c860cb161fda99c09946378ce91552327ebbc0044
- MD5 4a9b43c780195292138a189d9b9bdc12
- SHA1 8584013a6f93b3a51d78b0fc86cb1037775b0d2b
- SHA512 e7b1fbf9c9752479af2890aac2efa0a2167ebbb26aa1593b0bbc00cdf362d9d4acffe67c78dda65f493d0044fa50a3a89540d593e397dff7bf15b5c092a10317
- SSDEEP 6144:cQ+xUp1zj6Ipj/LdeK7aFAc3OE7pEODIh2g3YWO/OJ9WqWmKySHCkcC1Fdj38mXd:cQ+e4A6T8hcPOjdWZZFdrV1n
- TLSH T1C02629035A61F49AD857203D4E730DE0D16F96F8C6D64F82271B2138EBF35E676229E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/Resources/unity_builtin_extra
- SHA256 d717bd16444c8e65df8aa97e19ec59249aa0450f3f99d601b8bb0e5c0477d825
- MD5 09694af1f9a072b1a115d59de4d5af80
- SHA1 b395866ecdab7d8a92bfc2606a47bcccbb0e99f4
- SHA512 3d47274286b4f7941af8f28d167ca8b71c767df86d871590b6eb0e6fa107d2ba5489a6ed1aa657e66becb7535e2a7616452d992683482c006c64e82e0759a0ac
- SSDEEP 1536:ovynKa11inxSiGXkimGi1/mNY1jrHOiPiNjrH8SCCgifvQpJiW/:eyiusg8XCpI/iW/
- TLSH T143247E7D235B587FCC21593349690B738732A1F81BED4F276E6C1FAC29E9648AB14B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/RuntimeInitializeOnLoads.json
- SHA256 ea8e0dcdeb3106256b1e04c99e575d4fd68658d5019688e001ccad9c83c9f012
- MD5 a176f1cb4b7ad146e8019f72dcf520c0
- SHA1 8fe107761c9586ea0944668832ce170472c8acee
- SHA512 2323169a3f71c629f7118264803232cb4cd0bb9ea00fbeb8bcafb0a1df67b08c4f4484bcc835224da7e2c4a864d161bb48526b85d1990f0a0b32a3d65428666e
- MD5 SHA1 SHA512
Mini Metro/Mini Metro_Data/ScriptingAssemblies.json
- SHA256 8bf1e843c90dfa12bd09f05f57544e759d5cffd43260bcd619217a1e8f370d7f
- MD5 889f9885e061a38bf239ad4226639ba3
- SHA1 7c45e44d3f35053d467819bc759215adff34ca7e
- SHA512 e10b3100ccb9506dfcb44ce9e9dd8178f1e821866ac0d3747e67bf5435774dd1f9da4e47c02d5cc6bb5275747f4c7053e2e402543c80134d0a078b880df25a94
- TLSH T1F95133F6818B55870D8D5EC388389CCD39D210A20E65C0650FBEE3AFA938CD63D086D9
- MD5 SHA1 SHA512 TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1200/fonts-0_rle.bytes
- SHA256 6a236f73335a753f71f975344de9553aaeda4678fef6b790aa9dbb64520bee78
- MD5 e14e307cdcdcd53a60e318871d30b1f8
- SHA1 44c9081d6a1ade426f8f22345768661d370f9ba9
- SHA512 c81edb6e0e331b6ad49692b34c50e605885bee1b23124c32b260c78d8665fcfd1cdf9db643b5bdc7676a1f265b4ede6da8c556fe4da82f40d1d8ad377efd5042
- SSDEEP 24576:QMBraTygsaqMmbkLT8vc9b7T8AeEkAhrwVdK0xp/Wbbwa+fqNStT:QDOqqTb2b7xrFo7T
- TLSH T111B5D5357D26A1584E1A3BC6291CF190425739CCB3AF413C19DDF3A989C79A6CB3D2B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1200/fonts-1_rle.bytes
- SHA256 ab23872fb303bb2e4c8a6dc66858f752fe5ab8436eb6999bcd6a1f211992e008
- MD5 aa650159d6a9ecbc06a7b6f838a4af5a
- SHA1 2d4d4df1b141e204affff82cb36f22cffaf69f1e
- SHA512 347eaf6569fb8316c52c3897a5435f1d8516c03fdf6a457734b305092192f8cd7c2fd04214ead1eb9f651d8a85ecbbaaf9f0338cdff1fa26274381a78878e200
- SSDEEP 12288:p21xT8Et5JGNnOiB7T1cBmhZ5CXCykzQX8qzlg+G3O8WkS7XO+SO5OSIFUf1TdZz:UHQTxCyzanQNRQxP
- TLSH T1515538B5696AB6944E0A3FD5350CF8D0069359CCAB6F513C0CDEE76991CB8A2C37D2B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1440/fonts-0_rle.bytes
- SHA256 e68f9380652526f99b40d427e4298c608e3986171b87656224dfe0f7e610de69
- MD5 3754834230c2d2b66ddcf3389b97b7e8
- SHA1 07cd2cf80c1ddcd43c34902eee68e39bce09b257
- SHA512 f3f3f28a202f357298fad805b383d7bd64bd219c540c6d6b1067b8a7233b158b46b7d4ae4357d8324ea2e4691602f97df4847f5efe45b4815a39d76f5459100b
- SSDEEP 24576:vOIMzpd6n1n+qAfflBd8tXJHK48HEzpNzA:vOJWP6Q8MNs
- TLSH T19985C564BD26B0684E1B37C66A2CF590061739C8B39F527C195CF3694AC38B7CB6D2B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1440/fonts-1_rle.bytes
- SHA256 01e532812f2698ab97e265aed10ce5e13d57f8e8649797657830c82da4a624ad
- MD5 77625f9e4cf7b6b6de925191a9f910aa
- SHA1 6bea7c019cc122793b41611a38a9aed65b8cb166
- SHA512 51060b6674494ffca8876dd23db04d756bf9ec7be7ad01aad3b20625d419e3693f494fb601b6aa60d1ee2038ee395e045ba511286e20cb9e584d8ef6a0e8a230
- SSDEEP 24576:QbYmX34zZLYykbbunkGyp7RMX316UEBZWB3EZ7DkrWiV2Qp3mYRdQ6eeralY3+jT:QxjQX31tEcyG3m7FgaTHA+3
- TLSH T1C3C537397D2ABA904E0A7F99341CF4D00297658C776F407C08CEDB6996DB9A6C33D2B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/1440/fonts-2_rle.bytes
- SHA256 1432807e871b5f07b676022598579be3b8c93297d700f44b4be4beed566e73b2
- MD5 2753b878f4449eb15570e9a40f2174d9
- SHA1 57e9a06d9c1247aaba5f3ab0d9eba988566a9a14
- SHA512 57bab71a5d3c9fb3ef4635e9aa868db9a44dfd8ab75daf8ecf602ac042be3bb7a631415f451731eaeeb426e7627d10a726a5c2a86659e37856ffe0710832ec1b
- SSDEEP 3072:U31+RLif7pby28waqmRfAqAm73bcdUm3uDMKxK/9Ljs:Q1dUdmeMKxT
- TLSH T127C36075B92272644C283B81252CF5B417573EC8F39F09B904CDABA52AC79D4C7BE1B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-0_rle.bytes
- SHA256 fd1f795bf181852ffd3e8eff69e21dc6e6baab21a9e890808d1345c4fb220269
- MD5 0de0654dbad662de06645455a24e56c2
- SHA1 14eba96a5dd5ceae654f52486498547c20a56d14
- SHA512 811907c0b1a3bd19b2257297e6a500c122d053055f9350fbde58b36ae76cc331d18cdf3e8e9a9a07a345ac1622576ce9d2694301679e793efe336028af443a64
- SSDEEP 12288:4mmgHvyWCAtEPIu6/hR1PXEfePewqii4b91BFO0PQZJ5/wk/an:Y+7EPIu6pbP0FGBNPQZJ5/3/6
- TLSH T1F325D8A8F6B271641D3AB7C16F5C79E01B171EEC529F9278092CE37B19D3077868A0B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-1_rle.bytes
- SHA256 7b9e1ccd2acf99410b7bcf11ee6b6795232401237edc41e55731b97fad6ddd51
- MD5 66a419d74c24f048ffd7fab92240544f
- SHA1 262d5515d5a212a5b3cfa110b4fc1750c8823b07
- SHA512 b2c729f972670847886778e9b62d2feb4a34fa4e58fea6fa4cc3ab7958aae5818ff8030979d659c4d712041371d337b997566f53ea55b7c5a9f82fe607407939
- SSDEEP 12288:SrIKQXfB3bC9WDZtRxJthILKn5jZchcwKkTn0BvMrWrAiPR+vZ6mwCBG7ZIPHeYa:lrm8yKRTqZ6kiZENMu3K27oiaWcT
- TLSH T11F75D604BD6370644E2A3BC62A2CF190575739D8B39F817C141DE3691AC3A6ACB7D2F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-2_rle.bytes
- SHA256 e619e381d4e26a4e097ec4a669363842571094147bea2bc5e06a36e39839045d
- MD5 274fcf10530f816030fa0af434b89d97
- SHA1 1edcaa2ddd2cc2f8992aafbecffcfdadb9e34b6a
- SHA512 d9ed3d9bff1415937560b0f69ded7b8c31cb731a1b8effe05ac931d55948fb1ee3addaad74eebc6a876540a6cb16e1a547db51a6655a9706512bd7a69c74864b
- SSDEEP 24576:egchHmHjhJ3uFnecprbNzdt+YDILKRVoNxXcl/a:MkfNclbNziZUA
- TLSH T1B0A5D5367D22B0644E1A3BC6792CF194065739C8B3AF417C149DF3698AC39A5CB7E2B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-3_rle.bytes
- SHA256 dee6a348b1e586a6ed7bb48b627ca326171cb7f5b9011ba81dd80dbe093e3d55
- MD5 2fb7c83ed9a637390256f78dd1234700
- SHA1 18db7e1bcb57531065ea94ed22214bb09f928d8e
- SHA512 129e09526c0d7b8c98c127ca455a95cd4ef6ef19177dcdd32f3e32daa0f398fedc66431196d4090f9853c2f153071969c358881549dc930f1bea50116901919b
- SSDEEP 24576:UDbgynrxmIoq9L0gb7sTk+e92zRMkEVEg3c5sNCZ:qRpz9L0g6R+NkZ
- TLSH T198A5F539BD26B1644D193F8A782CF19402A7358C776F417C18CED3A98AC79A1C7BE1B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2133/fonts-4_rle.bytes
- SHA256 bd982fa6d0a914f1fb81d772fe3f1ef4bbb9c4f384c439f86c18ae059ba32875
- MD5 58e60d55204d7fd1d7aa8c6e3290dddd
- SHA1 2ca737b18f5bc4aa4fa1e38d086ef410d74a1ffa
- SHA512 c7f596d87aa61857ad5608051aa4bcaaafeac5e5524211c4475bcd624a2e8a594a8eeede65db7c67801a71f76a10e97ee3535d8d72dd3a880496075d8689fd38
- SSDEEP 6144:60bgUd6JnvMiIRLgogXOMNm2j/DZFlFci10Yhktm/GlNASIo291Exzq7GsXCg8BG:b76JndIRyhj/DZYppGbJN
- TLSH T118F480147D26B0645E2937C7692CF160865B3A88F3AF417C190CB3A969C39A4CF7E3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-0_rle.bytes
- SHA256 98e4a372a956a9f4aefedb16553ce5512f774d5a0b629ee53075507ecf1ee2e4
- MD5 1fb159a09d9d6a9d0d544059bd2b7c69
- SHA1 5ef0b5ebce21238d3855c71e0060737f0f76b1e9
- SHA512 3e5b2d0369b5dcbc2be4960fb2f702127afc106bb26b5babf13e1bde5670eb1e348de06c64d68dfceec215106d41ae5dc6d04cde9efb955ee11265bad6b769fe
- SSDEEP 12288:rTdwWggRuNyU907u0/ZWSxmkkyJszIGweo1xRnPFQGQZm+U6PM/+7AXyuvsVcU3m:dggRuNpLJU6E/+WnRQGjfoEWil
- TLSH T13405D5A4F6B270749D3926C3612C36E19B0F29DC525FE639155CD3B997A30BC87CA0A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-1_rle.bytes
- SHA256 63ceb7560a1de1c6c32cb4017b0e9dd33dd7c2b5cd94850f75ff88600c82b427
- MD5 9bd5871d9e662a59544b5e840243e1d9
- SHA1 57659f668e842e6c10702d9e196d1670ae6055e1
- SHA512 4e13e6675582a8af80ce82c17ac0959e30150592d7a2d7a68a152be565f623d9b9a03ff7237eea692ff38485ad46eb24a64815caf1d2de3c4cb015282fac968b
- SSDEEP 12288:7pWtudK7cKVWoLpEtz0VP1wB+ntc0iiLPg9NqAqicJqZrLF3c7Sbl6FW4iqJy8sQ:0EdKgip0zei2Pgcg0+Jy
- TLSH T17245E7A9BD7270384D1977C26E1CB9E14B173AC8B2AF52781C1C937A46C355ACF493B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-2_rle.bytes
- SHA256 7a1570c5213b301de6dafb876412be77ce7a47be6098e0ecfc477abc26689720
- MD5 bd9d06c8354d786e70025e8508710ac3
- SHA1 082bee736044ed111f65c89f0caf8ddeaffc3070
- SHA512 2145fa5208581c85d831186ce1253c65b4069e734acc2c00c019cabbcf191d571567da8e473e5f9427e1657884b61607152ee58e49ce221d2f5fca2d83239d1a
- SSDEEP 12288:DzySZaTajb1c0BRQg/FJSrHnh71PEnXXRKwnGr1mY9RLwjc+VWFDPj2Yp4/X:DoIv4rBCnIFr1dRLV+VGj2iM
- TLSH T1607591147D22745C4F2A3BC76A2CF0404A4B3998B29F417C252DB3A959C35ABCF6E3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-3_rle.bytes
- SHA256 b13e0e12668e85c21d8a4bf163bc209c9355ac7e1dc200a3c7e0569ac3845ebd
- MD5 36c2a67834e27538815e4601138874ec
- SHA1 384e8c5fd7a0b186ec02355051129aafdd7dcb4a
- SHA512 2f0a31dde833d7d170917348a2a306140fd4906e9d81b545ea2b59459b63af2e7d5becddf8004994d366e1779591e3bfa1b9f9ad9a0e86825af4971ede75b080
- SSDEEP 24576:u+7kkuqzENj+vggvM02DqVcJdfopcepGbdgWjvgazkDT:u+9ujKvRr2DqTcRlvgR3
- TLSH T10DA5E5227D36B0645D293BC6752CF05447AB3AC8F3AF41B9210DE3A95AC39A4C77E0B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-4_rle.bytes
- SHA256 34f29798333e90a5b094ae652a51866e35c780c8e14fbd515feb049ccb8c49f5
- MD5 df3adf25194b6d3c827a4280ac5fee0a
- SHA1 58c371b739a6a967a9bf308837f50d910fb5e4c1
- SHA512 1e537ce3b249c9c72bc897f6a7dd6089de279c13dc62fb6dda98a161bc4e5d33a72529593713284f0fdbd4fe311a33f56f68ee6ed9603ebc7157f58312645193
- SSDEEP 24576:GaNUwgq9imTFOWuAdryDhYyAph0ZKKgbzp:DdgnfAdryDhu61Gp
- TLSH T1A4A5F73A7D22A5A45D193B89B82CF194039736CCB39F417C14DDE3A98AC7990C7BE0B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/2400/fonts-5_rle.bytes
- SHA256 43189dcd2bf7fbc076ed150be9f1a05c805ba6fcb4e0023c9fc99931a04a77f6
- MD5 b46e8b4b864264cde699ac8cb7f49101
- SHA1 c34f2fb4f52d749996014c40415aa49fd8d6dce6
- SHA512 973b9ca60f700533eae8715e2825de13b0f987d89e2bc8ab4a40b929875a07b6b00e2cc0bb8fef502597f2c220a594c9e080e40564315a2fbaa0807e08936f96
- SSDEEP 12288:nrkpDrs4LqxAYaE84H+p9H1+f29mF6IwfNzgE:QpH1LRiH+jHdcF6vfNzz
- TLSH T1321560147D22A5684F2937C6252CF170062B3D88F2AF417D258CBB6879C39A6CF6D3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/800/fonts-0_rle.bytes
- SHA256 f8d0de9669dbeda32283f85962364cd73806580bc00566aff821bd3b5374fbc7
- MD5 ad99b918a409974bd0dcf4f637131789
- SHA1 a726fad7a1c0c5bb4506f75adea2f5c7d2a53bb6
- SHA512 346dfd2cc6b1f62653c85a7e60a5fb2ce7fa731ded0b48172bedcaa6f4c0e8e4ce6af6a5f2c7f8cc875bdb2e57672ebe8d0314b6513b10dae8d8d33b9fc87026
- SSDEEP 24576:XUOGKX4/l4mxrFV7h8UwxdcofGOQhUJAPHFPWPbvB3kHJ10MalUHi:qp7fwxV8h1PWrB3O+X
- TLSH T1BAA5F5707D2AB6444E193F96750CF0A116976ACCB78F003C18DEEB9966CB895CB7D2B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-0_rle.bytes
- SHA256 003cdd544f6cf7b19ad95a33179168cbb32014b590cad02126d7f66bacc81912
- MD5 7669abcf878761d9d21cb379bb95e5cc
- SHA1 f00131858499b9e75f4c8073a8b7f072762d9a31
- SHA512 e252765c5e3ac152e18cf30a2356f8fc00b1549bcb8507bbc191bacd6d338834642f595975636aa44632fb0ef3487b3e9f2c8a99ed999a7e6ea14f58ad701353
- SSDEEP 12288:k0GE/5twQGVWptwbEVBMsdCJsLHLxd+4I1n9p0okyGyNCc:NjTGXwdCJKLGWok+
- TLSH T18435B5ADB6B270744E2BB3C22F1CB9E147572EDC529FA278182CD37559C34B7474A0A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-1_rle.bytes
- SHA256 aafce1df7aa5455944c30dc850387fde6bb4ac6fff5e06d6d837ffe37afc7c62
- MD5 a6b5b95e485708739a818358147ffc3c
- SHA1 8b8c55fa7529a47880ab9972c7dfb2ae54ca71c5
- SHA512 183293b4b53626cd0f5ec8201652f8c866fac31a2508f8bdce3a9e91d83eec035b3ae3a41e1c17bd391d233569df0d86385892b7e12106041fbfc955ebd3d11c
- SSDEEP 12288:HM4lqqwSACCObE9WVlINDnVdHEFaIP8SQwthKXxNr64Rm2/FnRF3ECYVZG7:9wkiAIB48SxhKXxNeam8FnL3ECYV0
- TLSH T1F275B5157E62B0685E1A37C6752CF580475739C8B39F827C240CF3A85AC39A5CB7E2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-2_rle.bytes
- SHA256 2b00dbc4627b3c35d1dbf81248514e583e72122237be847f1e748b6062c5fedb
- MD5 d2bd1920ebde4f58a2b641b8cc0c9675
- SHA1 aa50c7539cdc91636c7d1e9d101921381f639041
- SHA512 f0252587659e64c68121df0589c3930b5e8e8b10c47841c7a75081cdff746a1ce0580d898b45f8cf83843c7e38b99e355579ba60f5c1c0fa84a0740fd31e229c
- SSDEEP 24576:t9LiKPr1x0nj/XyQqbJQ5XN6cbKDZt09+COCw/HR5TjjKe1dJpaCdhdZVpexHDdF:thLVbJQ5XsTPRBej
- TLSH T135A5C5367D2270A45E1A3BC5792CF09406A735C8B3AF417C14CDE3998AD78A1CB7E2B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-3_rle.bytes
- SHA256 c5b39a6cd87e4948919dba03f4e688d2a40c925c2c83d17e4a514df4f3dfc176
- MD5 18a93973411d7cbbac5be36bf7542088
- SHA1 ca3d704a9043d53ca727b5a2303ef343efb2f933
- SHA512 720712736475b6083fae6ce4053795ec4367d479279243ff0fec8cd64c71ca93686d15729434d0f60a2e045fc47a7c0d50bb5e5b32ed750871d01224d34bc798
- SSDEEP 24576:MbXue86OOv9/HRuZsHY4yJh9K61OjcXbMbBefw580jHJ1bJMZg2e:p6OOVPRu7HR1n1e
- TLSH T1E2A5F739BD26B5905E293B96341CF194029B35CC736F417C18CED3A98AC7994CBBE2B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/hd/fonts-4_rle.bytes
- SHA256 d7ff53ae929e8114ea73db5efe366969927200cfb733c3080e510ca1ea9e3884
- MD5 b9ec985fb8c234d85661f0b78aca1ecb
- SHA1 a71e116d4e4c02439be25ac8a0dcd9062e8d1259
- SHA512 8190e87fbd4ab108ca52c1641fe552fafd73206d7322d501ee049866c58ad21c0e6dc8a5c572029a5314c94884672e6a415786b891245074027839344e902c1e
- SSDEEP 6144:o2jRXs/tHg5p+xBk/hYiVzEPnMIEvK9+nQrwI3loW:r9H/PByYBQPSW
- TLSH T13C6481157D22B1A05E2A37ABA51CF1600A573AC8F29F407C244CB36869D39E5CF7E3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/sd/fonts-0_rle.bytes
- SHA256 edcfafffbb630f06d53b5719858fbf9d7348fbb795480aedf52e4974254de1a2
- MD5 58983699055bb3e686534ec751ddfb11
- SHA1 808d4903d4d98de486a6cf48c5a5ee5f6578379d
- SHA512 b9a168a04c3aaafb7cf4965ec63f8ea6261b8df336740db790a9b03f47a188fe9b423730be6bb4c3eafb47a8688258ebda18c6af748c83ce1e386549bfe548ba
- SSDEEP 24576:RwY4h0+g78fYgPzxQAmtW+ZouKgNpSmAoJPso83T6RhfgKJ7z577:qY+S8YxL6nGJ7x7
- TLSH T109C504747D2AB6584E1A3BC6650CF491169739CCB39F413C08CDE76896CB8A6CB7D2B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Atlases/desktop/sd/fonts-1_rle.bytes
- SHA256 b91e7133bfd39b1bff50cb836c769d2cf205d7e87fdaf7163af365899df80e56
- MD5 1faa6c14e0bdcfff3563cd18a2af7b70
- SHA1 9ac4b84f6385795f5a05a942309d5711658278f1
- SHA512 29853adfcd96489771b72082b4082f3d4ed7915e90bd3a5da653a826e867af8ed2ed55e8fa309de1698e85f52d98a96786b00b72e01612d0f3ac6e77cc3a3632
- SSDEEP 6144:GnWk3BIbR4COV99JXseawXVm6X2QVFiBS5EvG9hA+I5mmckQ9EWg:mWqBIRQV9nVFiBS84BkIi
- TLSH T19C6406766A26B2984D063B95792CF1E103922ACCB76F107C09DEE77895DB8D1C37E1E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Sounds/24000/core.flac.bytes
- SHA256 d85fdd2333c3ef7bd6ee3abd50e3018c8b9febba75cf333163aa8fcf1961220a
- MD5 232e8bd378d409b081c7afd23cac1700
- SHA1 efcb93d07b9d4599282e7730ebc1d93010fefd42
- SHA512 4ee6392c6a2fd6cdefcc4d384339d7a48f453cc415bce815a971f182a9f699947d71c22c9a67078e59034da1b4ad45497ff3ba0f6537b7960c2b8319c4c73471
- SSDEEP 786432:Z8Xa+VKeL9BxGwhE++BjYDPwjvQBdDKhyTkNhTtJE:SK+V3PMwhCdYDSQvDKhukLTE
- TLSH T13D8733CF85828990F5EA2730348F1B92F9999E0D019B94CB83B0765D50B7FB4B72B716
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Sounds/44100/core.flac.bytes
- SHA256 c40ecd45ae7089cd0c0a44fdb6bb67ff426c53ddd295c8f9512c2fc72ccee157
- MD5 d3106c6f2549b067d36a08ab09401d01
- SHA1 1aded9626723ce21bd58248fee310714dd7d2e74
- SHA512 50e730b5b782d7db366a538e128cda340eb25faf0e945b385336b6dc49d64727c264f8b50efc415d0423d83f938f66987a96e6c8da2666d5eb6eb02e6f08a6d3
- SSDEEP 786432:PTKyReTj9bbAq9yGGiIBlyU3PB91E7+AzQ13oebevQ80/UP31a/2hqHls:Pese/ZbACui4n1E7r81AQ5UP3fUHls
- TLSH T134D733C7D754AF91F893073916438981EACAAF0580AB97DD824532CD40FBFBCAB1B525
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/StreamingAssets/Sounds/48000/core.flac.bytes
- SHA256 913dfdcda409352bad065613779e1732ed061ca602b77097e363911ff0bf4ca4
- MD5 351dd21f4bef730d7d961b66d62e0229
- SHA1 80148539a1e91e7dc8c6c2b46e3df01f658d8e1a
- SHA512 c9a981e5bdf0214d5d324141d882b664e38e16feebba1c818637a9738fe093e6e5612f832a4442eedde2a782daa9c2731742f29ffac7afc80f74bcf4f898429f
- SSDEEP 1572864:Qdl94DtuFwzTfhEZZQCE96lJU5+Elp74+zV:6lGtuFwHfC+CU4W
- TLSH T1D7D73387E6708D80F6DE033805C70642F8967D1A10DB59DF16913AAE21F7FE5DB3AA21
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/app.info
- SHA256 6d2fd01969f512e0cb709f27aa320b70d7b0a02095623f392d349aa1d0fe7364
- MD5 2ca28fba766376a8fe25238097f85d22
- SHA1 d438d94ffcc22ea3cd70c49165341d5379b07755
- SHA512 196a676bdfb43514f2db3d41aa83157ac492098c02a38b95e85ebed2d40c0d1f79cf5466619797c042d965df83b78f74225e50a4302b66ab6ff3428d0040b0fd
- MD5 SHA1 SHA512
Mini Metro/Mini Metro_Data/boot.config
- SHA256 f8aafbb28e37ba98f50f98a0e509fa8d43eb55e8a274a427791abbf2fef3dd01
- MD5 e9120dd6342e09183285a967200cd300
- SHA1 ccdfa1fc78a6b765246493a2634e5c42581dbfde
- SHA512 9370e3139d409d0db04cafdde4eb60039b7184dc84b62fc63429bfad9f282d0f945d6d4b138b70c4ae0ca5acf58f7d8d02779e13bdff30862fb3d513baac85d3
- TLSH T194A00204FBFC3B826A4D843599A86ED3639A1506DC1A21FD6AE43075135E80E56878AB
- MD5 SHA1 SHA512 TLSH
Mini Metro/Mini Metro_Data/globalgamemanagers
- SHA256 46f8f35c71cab061ad97da37700312f405f63efaa02b90866cada8ae0ca0d36b
- MD5 eeb84e571062fdbfbc4091899c361b91
- SHA1 2b8a408966107ed6c58dde95157c782bb8d0d52a
- SHA512 39b661f64e00d4069f70d4006b3d40650fdad786e29219a79811c8bfcc5d4f9ab449ffaec8ad164d837b454d6efac6c5eaa751074638e2ba755002bda334a7cf
- SSDEEP 1536:IOlsTQgZAOztdgP1uTjQy/C9v2EkFkELYMIFM3XUe6:uQkYtunOy8MIFM3XUe6
- TLSH T16D14477BCDE45F61D032E0FDE033A7C1CA3A4E25F5AAC24362AC721411567F5AE46E89
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/globalgamemanagers.assets
- SHA256 2002e33f0e1b47dda3b2f53ff15c4209e4da6897d7fb1cf3942f3e023f4b8dd5
- MD5 d67d09f511a18f646b9a1b3ac1f85e01
- SHA1 5c5853a65316ebd235ad1c605c956608aeb65c20
- SHA512 fd914f2a4596c602c61f94cce955e71bfdfc0730d92a7e724373813d230ad743ee581c5551d4265d2f5f8e4103c725c65f296d1f66eb8d6b0c51248025966ac3
- SSDEEP 1536:WuKd7ZOWku1FRSVQKGj+NOo9GEqSxTj63jhafl2c91cQzEfsg9Ny5ebAM5gOGY9w:P4nRSVQKGjJSChadhgOMrGMOh
- TLSH T192C3ACB702604E97EE840D37AC735188B6EA376A46E0B73F11B06A72953D1EE1F54327
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/level0
- SHA256 a22b01c6964878419a86c445b8ee4c62c0caad859f705c0052e4fb6a1241b821
- MD5 85024827e97e68718e789fc7835cdfa5
- SHA1 5e769d6e8a2b0bb9fce7515012503d78a77becd3
- SHA512 d3a87b655cbb0ee6aa9b7deb8e22bf28c666248aca07ea0dcf231d63a5d4775817bcf98891fb45f476a11583930d0e7ac82eaade7e66a2759bc36f91d385771a
- SSDEEP 12:+Nf9R+2qlqTvEiGyOhQR6tQsU9nXk17NNAKikTydT:m9gplqmyOhVY01d
- TLSH T10DA1B18233515A9AC4256B37489B1F94F3B1E908AE6EAB336320BA2C1DF13881F55958
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/level1
- SHA256 7e9641470fff48b2dd0b1dfbdf8398a1f0fb6d46aadd914b0296dce122a9247c
- MD5 0b74a4da97895a4466bc392fda26ade6
- SHA1 a45bae3db95431d056c994fd8c7a4b0ef603be78
- SHA512 0c53dad2168529ec784b6e864b39bac8f00c1183b92d55cece2e4fb8dcff0a431375e41ae2714bb504c25c943c8e5179068ec067b635245ddc4a6e8857b13fae
- SSDEEP 24:BCGvWhb9t9a5UctdVR11ZhV6l/dUu1oM:S9H4UcPRrC
- TLSH T168B1AD82A795450BC420AB7148E70F50F330E8995B6FEF3B06E4A92C2DD77886F15958
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/resources.assets
- SHA256 35b2a9f0a11dd717f9aa01d98cd0c16462c32c9b3fe868589b3bd294b2e64363
- MD5 ddceb7680ed7088b3bd2635c3b126e1b
- SHA1 23bdb941b5bed4d724bc53398919fa0cd31c7230
- SHA512 a4c974ff7081be2363c3d47c1750f66ba211c3f3415deb6306db0188ebb862a5601d8b8368a98a42f79bd3432a1722cde6c5819fcc30c3c8e3fcc5823575afe2
- SSDEEP 98304:WmlCSs+GT2oKbRO9DeULMpexQlBvxaErve6GAKzIJ1RgHlWs5bQsFsHFK5F5HH5e:g9nLMpex2TvwN5EWlJagK8naLwI
- TLSH T193977425E7B0F22BD47081BA7C8B16FE1675B850670BCA475BAE5E018C4468729E3F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/resources.assets.resS
- SHA256 ee94c80375a424504193fa9acf3dfffebfc1626746a2ade68992e16a038291be
- MD5 d6500132ecb9601f4ff71bb27015cd9c
- SHA1 3baefc42f2231b8c97f351e006094172fa1b04d0
- SHA512 71a59c783e62c82d9522162d949944330d0d3575b29bfc939faa54613ba3caa55c7a6a6d31548d15c4fdc0006ab68ab56969bb3f6226252af260553d6d56bab4
- SSDEEP 98304:Jx0oyA4qOLcAt01868cpqp9SZlPBvh3NVtpVOxsj+GwtRDYK3aKDdnZ8kOjgeJ:KAsqK68nMlPBtJpVaKUfMt08FjgeJ
- TLSH T1BF07D5423F26E31B929A60FCC7B94CF0E6460DF5CA6B4DDF4AE53E65F6BB0612044981
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/sharedassets0.assets
- SHA256 5b874f3bc9cbf1de325192bfffd39bfe281488ba28b2b3a9c42b101d10177c5c
- MD5 c288cc2db7b5a8e2409cfa6996311f54
- SHA1 9f5f08ed8a462c21f801c79f10780da98c206d2f
- SHA512 185d6098d081297492f4670f200ce91236d01b82d6d777de93ff0c20db66f5affb064fe4ae30bdde33822b87c85abf8af9eca87dccd033e4f1b9063d93ba98d6
- SSDEEP 3:xlklta1llvV47loAwQb9VtktkXlolXl5lQ/QREgtAfr/ll6oAVOWq919l1Wdlal/:4JhoAwSPktk14kQR7Wr/lMjONnWa
- TLSH T1E7818C82320A5013C06812B508A01B8B323286495FD7BE0560E8DA242C12BC625E5E7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/Mini Metro_Data/sharedassets1.assets
- SHA256 5a191568703347b60301adaa6236b80438c981e7009c645f3d6c4d4573f62480
- MD5 89d5eda4a56db5631968eb40ddc20656
- SHA1 b400d450492f37a11fc35dd335708b9225f8f3b4
- SHA512 eeec5cf9e1f194d2f791798c459d62f98f8b83792aea37ddc77463734035ba11ca7964c17b899b84a30d365f3f7edaf59e613db33d544f83e2fe1ddd6e7f4b4b
- SSDEEP 6:omAwSPO/aaDG7Hs1EOUQR7Wr/lMjONDGWCt5IllPMAY31Ad:OCa0qHs1EOUQR6tMECw/UAYlQ
- TLSH T160915E41621A1047C4A417B648E01F8A7230D609AF8BEE1614A455385E8ABE649A1D6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- IMPHASH ff034c52131acd9ef683b884ac87b1f8
- SHA256 0ce000e310baa09121ec12aa628423b941d73744bc065463db691195adcf8b91
- MD5 5f508cdaa63ee41eeb19999e14f55110
- SHA1 e838722bbb82f306e600b5f8a8d3cbe298f95004
- SHA512 17d3c3f4d64e7d139e607cb1b4b77dd426f12e80b9dc134a78effe14d0cd143e4ce2779da113550320096bc5f407dbea1057b51a00d6c2dab005e8aceeb330dd
- SSDEEP 12288:OUUtPcgVN+wdBbuMEiyvA5t3ggKTJmPJ:ItEu75tBKTKJ
- TLSH T114D46C107C808262EDF620FD46ECB532156CA4B0472595CB62CC5BFEDA642D17B3B7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5651
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\build\output\Unity-Technologies\mono\msvc\build\bdwgc\Win32\bin\Release\MonoPosixHelper.pdb
kernel32
CreateFileW
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetLastError
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FileTimeToDosDateTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetTempPathW
GetCPInfo
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetConsoleCP
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetACP
GetStringTypeW
FlushFileBuffers
SetStdHandle
GetFileAttributesExW
HeapReAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
HeapSize
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
EncodePointer
DecodePointer
RaiseException
CloseZStream
CreateZStream
Flush
Mono_Posix_FromAccessModes
Mono_Posix_FromConfstrName
Mono_Posix_FromDirectoryNotifyFlags
Mono_Posix_FromErrno
Mono_Posix_FromFcntlCommand
Mono_Posix_FromFilePermissions
Mono_Posix_FromLockType
Mono_Posix_FromLockfCommand
Mono_Posix_FromMlockallFlags
Mono_Posix_FromMmapFlags
Mono_Posix_FromMmapProts
Mono_Posix_FromMountFlags
Mono_Posix_FromMremapFlags
Mono_Posix_FromMsyncFlags
Mono_Posix_FromOpenFlags
Mono_Posix_FromPathconfName
Mono_Posix_FromPollEvents
Mono_Posix_FromPosixFadviseAdvice
Mono_Posix_FromPosixMadviseAdvice
Mono_Posix_FromSeekFlags
Mono_Posix_FromSignum
Mono_Posix_FromSysconfName
Mono_Posix_FromSyslogFacility
Mono_Posix_FromSyslogLevel
Mono_Posix_FromSyslogOptions
Mono_Posix_FromWaitOptions
Mono_Posix_FromXattrFlags
Mono_Posix_Stdlib_BUFSIZ
Mono_Posix_Stdlib_CreateFilePosition
Mono_Posix_Stdlib_DumpFilePosition
Mono_Posix_Stdlib_EOF
Mono_Posix_Stdlib_EXIT_FAILURE
Mono_Posix_Stdlib_EXIT_SUCCESS
Mono_Posix_Stdlib_FILENAME_MAX
Mono_Posix_Stdlib_FOPEN_MAX
Mono_Posix_Stdlib_GetLastError
Mono_Posix_Stdlib_InvokeSignalHandler
Mono_Posix_Stdlib_L_tmpnam
Mono_Posix_Stdlib_MB_CUR_MAX
Mono_Posix_Stdlib_RAND_MAX
Mono_Posix_Stdlib_SIG_DFL
Mono_Posix_Stdlib_SIG_ERR
Mono_Posix_Stdlib_SIG_IGN
Mono_Posix_Stdlib_SetLastError
Mono_Posix_Stdlib_TMP_MAX
Mono_Posix_Stdlib__IOFBF
Mono_Posix_Stdlib__IOLBF
Mono_Posix_Stdlib__IONBF
Mono_Posix_Stdlib_calloc
Mono_Posix_Stdlib_clearerr
Mono_Posix_Stdlib_fclose
Mono_Posix_Stdlib_feof
Mono_Posix_Stdlib_ferror
Mono_Posix_Stdlib_fflush
Mono_Posix_Stdlib_fgetc
Mono_Posix_Stdlib_fgetpos
Mono_Posix_Stdlib_fgets
Mono_Posix_Stdlib_fopen
Mono_Posix_Stdlib_fprintf
Mono_Posix_Stdlib_fputc
Mono_Posix_Stdlib_fputs
Mono_Posix_Stdlib_fread
Mono_Posix_Stdlib_free
Mono_Posix_Stdlib_freopen
Mono_Posix_Stdlib_fseek
Mono_Posix_Stdlib_fsetpos
Mono_Posix_Stdlib_ftell
Mono_Posix_Stdlib_fwrite
Mono_Posix_Stdlib_malloc
Mono_Posix_Stdlib_perror
Mono_Posix_Stdlib_realloc
Mono_Posix_Stdlib_rewind
Mono_Posix_Stdlib_setbuf
Mono_Posix_Stdlib_setvbuf
Mono_Posix_Stdlib_stderr
Mono_Posix_Stdlib_stdin
Mono_Posix_Stdlib_stdout
Mono_Posix_Stdlib_strlen
Mono_Posix_Stdlib_tmpfile
Mono_Posix_Stdlib_ungetc
Mono_Posix_Syscall_L_ctermid
Mono_Posix_Syscall_L_cuserid
Mono_Posix_Syscall_get_at_fdcwd
Mono_Posix_Syscall_get_utime_now
Mono_Posix_Syscall_get_utime_omit
Mono_Posix_ToAccessModes
Mono_Posix_ToConfstrName
Mono_Posix_ToDirectoryNotifyFlags
Mono_Posix_ToErrno
Mono_Posix_ToFcntlCommand
Mono_Posix_ToFilePermissions
Mono_Posix_ToLockType
Mono_Posix_ToLockfCommand
Mono_Posix_ToMlockallFlags
Mono_Posix_ToMmapFlags
Mono_Posix_ToMmapProts
Mono_Posix_ToMountFlags
Mono_Posix_ToMremapFlags
Mono_Posix_ToMsyncFlags
Mono_Posix_ToOpenFlags
Mono_Posix_ToPathconfName
Mono_Posix_ToPollEvents
Mono_Posix_ToPosixFadviseAdvice
Mono_Posix_ToPosixMadviseAdvice
Mono_Posix_ToSeekFlags
Mono_Posix_ToSignum
Mono_Posix_ToSysconfName
Mono_Posix_ToSyslogFacility
Mono_Posix_ToSyslogLevel
Mono_Posix_ToSyslogOptions
Mono_Posix_ToWaitOptions
Mono_Posix_ToXattrFlags
Mono_Unix_VersionString
ReadZStream
WriteZStream
unzClose
unzCloseCurrentFile
unzGetCurrentFileInfo
unzGoToFirstFile
unzGoToNextFile
unzLocateFile
unzOpen2
unzOpenCurrentFile2
unzReadCurrentFile
unztell
zipClose
zipCloseFileInZip
zipOpen2
zipOpenNewFileInZip
zipWriteInFileInZip
Name
.text
Size
502KB
Virtual Size
502KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
1024B
Virtual Size
981B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=171, id=243, version=40116,
count=25, id=242, version=40116,
count=2, id=199, version=41118,
count=18, id=259, version=24123,
count=22, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=203, version=65501,
count=102, id=1, productName=Unmarked objects,
count=25, id=260, version=24234,
count=1, id=256, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Mini Metro/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- IMPHASH 123a8f3ffbc291bf9b9d02ad68d4a8cf
- SHA256 2b62729ca340b26acbd80647dea652031e47674c262f2e0684c2bcb16cec3588
- MD5 a9f6ad96a8efb0bdd915660776bebe63
- SHA1 b42e0d2d608128210f027ce39ec800aa9a2fc6be
- SHA512 b91ad046eaac9c638dbca91ea8963df20f4aca2a5c81ff958f6abccd0d0d8f21dfd7926c62f2fd3e42d0bb4705130a9e0122ea4660e8b4e71dcb17ed826a61f2
- SSDEEP 98304:B+WEmMIpWLar7Ku4oNthWScA08bng/lMsLKzmG6PYM3HPLAquGQAebZa67nivN7B:exIpilz5eT3Yzf
- TLSH T179069E15FA41C422F59111B911BDDB76A86D21301B2A84D79AC18CF8DB7C8E1B73AF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2564908
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\build\output\Unity-Technologies\mono\msvc\build\bdwgc\Win32\bin\Release\mono-2.0-bdwgc.pdb
ws2_32
select
WSAGetLastError
htons
getprotobyname
__WSAFDIsSet
getaddrinfo
freeaddrinfo
WSASend
WSARecv
WSASetLastError
sendto
recvfrom
socket
send
recv
inet_addr
ioctlsocket
connect
accept
inet_pton
WSASocketW
WSAIoctl
gethostname
shutdown
setsockopt
ntohs
ntohl
listen
htonl
getsockopt
getsockname
getpeername
closesocket
bind
WSAWaitForMultipleEvents
WSACleanup
WSAStartup
getnameinfo
ole32
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoTaskMemFree
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayPutElement
SafeArrayPtrOfIndex
psapi
EnumProcesses
GetModuleInformation
GetModuleFileNameExW
EnumProcessModules
GetModuleBaseNameW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
advapi32
BuildTrusteeWithSidW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetEffectiveRightsFromAclW
SetEntriesInAclW
LookupAccountSidW
GetTokenInformation
GetLengthSid
FreeSid
DuplicateToken
CopySid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
RevertToSelf
ImpersonateLoggedOnUser
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
CreateProcessWithLogonW
winmm
timeSetEvent
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
kernel32
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetFullPathNameA
GetFullPathNameW
ReadConsoleW
WriteConsoleW
FreeLibraryAndExitThread
SetConsoleMode
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
GetConsoleCP
SetStdHandle
EnumSystemLocalesW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetModuleHandleExW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
GetExitCodeThread
InitializeCriticalSection
GetEnvironmentVariableA
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
CreateFileA
EncodePointer
DecodePointer
HeapReAlloc
MoveFileExW
SetFilePointerEx
SetConsoleCtrlHandler
GetTimeZoneInformation
GetStringTypeW
CreateProcessA
OutputDebugStringA
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
SetEnvironmentVariableA
GetProcessHeap
WideCharToMultiByte
GetThreadContext
MultiByteToWideChar
FreeConsole
SetProcessWorkingSetSize
GetProcessWorkingSetSize
OpenProcess
GetPriorityClass
FreeLibrary
RaiseException
Sleep
GetTickCount
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetLastError
GetLocaleInfoA
GetThreadLocale
GetCurrentProcess
GetModuleHandleW
GetProcAddress
LocalFree
FormatMessageW
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
SetLastError
SetErrorMode
CloseHandle
VirtualProtect
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcessId
GetSystemTimes
GetSystemTimeAsFileTime
GetTickCount64
TryEnterCriticalSection
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ReleaseSemaphore
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreW
DuplicateHandle
CancelIo
CancelSynchronousIo
WaitForSingleObject
QueueUserAPC
SwitchToThread
CreateThread
GetCurrentThread
GetCurrentThreadId
OpenThread
ExitThread
SuspendThread
ResumeThread
HeapSize
SetThreadContext
SetEvent
ResetEvent
CreateEventW
SleepEx
WaitForSingleObjectEx
WaitForMultipleObjectsEx
SignalObjectAndWait
DeleteCriticalSection
GetCommandLineW
CreateFileW
GetFileSize
ExitProcess
GetSystemDirectoryW
DisableThreadLibraryCalls
GetModuleFileNameW
GetVersionExW
GlobalMemoryStatusEx
GetProcessId
VerLanguageNameW
SetThreadPriority
WakeConditionVariable
DeleteFileW
GetFileAttributesExW
SetHandleInformation
OpenFileMappingW
FlushViewOfFile
GetFileInformationByHandleEx
GetConsoleMode
GetStdHandle
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
FlushFileBuffers
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileTime
GetFileType
GetLogicalDriveStringsW
GetVolumeInformationW
LockFile
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
UnlockFile
WriteFile
CreatePipe
CancelIoEx
CopyFileW
MoveFileW
ReplaceFileW
FileTimeToSystemTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
IsWow64Process
GetComputerNameW
GlobalAlloc
GlobalReAlloc
GlobalFree
ReleaseMutex
CreateMutexW
OpenMutexW
OpenSemaphoreW
OpenEventW
GetProcessTimes
TerminateProcess
GetExitCodeProcess
CreateProcessW
SetPriorityClass
user32
MessageBoxA
MsgWaitForMultipleObjectsEx
SendMessageTimeoutW
MessageBoxW
WaitForInputIdle
shell32
SHGetKnownFolderPath
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
GC_dirty_inner
GC_free
GC_gcj_malloc
GC_make_descriptor
GC_malloc
GC_malloc_atomic
GC_malloc_kind
GC_malloc_uncollectable
_MonoFixupCorEE@4
mini_get_debug_options
mini_parse_debug_option
mono_add_internal_call
mono_aot_register_module
mono_array_addr_with_size
mono_array_class_get
mono_array_clone
mono_array_element_size
mono_array_length
mono_array_new
mono_array_new_full
mono_array_new_specific
mono_assemblies_cleanup
mono_assemblies_init
mono_assembly_addref
mono_assembly_close
mono_assembly_fill_assembly_name
mono_assembly_foreach
mono_assembly_get_assemblyref
mono_assembly_get_image
mono_assembly_get_main
mono_assembly_get_name
mono_assembly_get_object
mono_assembly_getrootdir
mono_assembly_invoke_load_hook
mono_assembly_invoke_search_hook
mono_assembly_load
mono_assembly_load_from
mono_assembly_load_from_full
mono_assembly_load_full
mono_assembly_load_module
mono_assembly_load_module_checked
mono_assembly_load_reference
mono_assembly_load_references
mono_assembly_load_with_partial_name
mono_assembly_loaded
mono_assembly_loaded_full
mono_assembly_name_free
mono_assembly_name_get_culture
mono_assembly_name_get_name
mono_assembly_name_get_pubkeytoken
mono_assembly_name_get_version
mono_assembly_name_new
mono_assembly_name_parse
mono_assembly_names_equal
mono_assembly_open
mono_assembly_open_full
mono_assembly_set_main
mono_assembly_setrootdir
mono_bitset_alloc_size
mono_bitset_clear
mono_bitset_clear_all
mono_bitset_clone
mono_bitset_copyto
mono_bitset_count
mono_bitset_equal
mono_bitset_find_first
mono_bitset_find_first_unset
mono_bitset_find_last
mono_bitset_find_start
mono_bitset_foreach
mono_bitset_free
mono_bitset_intersection
mono_bitset_intersection_2
mono_bitset_invert
mono_bitset_mem_new
mono_bitset_new
mono_bitset_set
mono_bitset_set_all
mono_bitset_size
mono_bitset_sub
mono_bitset_test
mono_bitset_test_bulk
mono_bitset_union
mono_bounded_array_class_get
mono_breakpoint_clean_code
mono_build_date
mono_callspec_cleanup
mono_callspec_eval
mono_callspec_eval_exception
mono_callspec_parse
mono_check_corlib_version
mono_class_array_element_size
mono_class_data_size
mono_class_describe_statics
mono_class_enum_basetype
mono_class_from_generic_parameter
mono_class_from_mono_type
mono_class_from_name
mono_class_from_name_case
mono_class_from_typeref
mono_class_from_typeref_checked
mono_class_get
mono_class_get_byref_type
mono_class_get_context
mono_class_get_element_class
mono_class_get_event_token
mono_class_get_events
mono_class_get_field
mono_class_get_field_from_name
mono_class_get_field_token
mono_class_get_fields
mono_class_get_flags
mono_class_get_full
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_method_from_name_flags
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_nesting_type
mono_class_get_parent
mono_class_get_properties
mono_class_get_property_from_name
mono_class_get_property_token
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_get_userdata
mono_class_get_userdata_offset
mono_class_implements_interface
mono_class_inflate_generic_method
mono_class_inflate_generic_type
mono_class_init
mono_class_instance_size
mono_class_interface_offset
mono_class_is_assignable_from
mono_class_is_blittable
mono_class_is_delegate
mono_class_is_enum
mono_class_is_generic
mono_class_is_inflated
mono_class_is_subclass_of
mono_class_is_valid_enum
mono_class_is_valuetype
mono_class_min_align
mono_class_name_from_token
mono_class_num_events
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_set_userdata
mono_class_value_size
mono_class_vtable
mono_cli_rva_image_map
mono_code_manager_cleanup
mono_code_manager_commit
mono_code_manager_destroy
mono_code_manager_init
mono_code_manager_install_callbacks
mono_code_manager_invalidate
mono_code_manager_new
mono_code_manager_new_dynamic
mono_code_manager_reserve
mono_code_manager_reserve_align
mono_code_manager_set_read_only
mono_code_manager_size
mono_compile_method
mono_conc_hashtable_destroy
mono_conc_hashtable_foreach
mono_conc_hashtable_foreach_steal
mono_conc_hashtable_insert
mono_conc_hashtable_lookup
mono_conc_hashtable_new
mono_conc_hashtable_new_full
mono_conc_hashtable_remove
mono_config_cleanup
mono_config_for_assembly
mono_config_get_cpu
mono_config_get_os
mono_config_get_wordsize
mono_config_is_server_mode
mono_config_parse
mono_config_parse_memory
mono_config_set_server_mode
mono_config_string_for_assembly_file
mono_context_get
mono_context_get_desc
mono_context_get_domain_id
mono_context_get_id
mono_context_init
mono_context_set
mono_counter_get_name
mono_counter_get_section
mono_counter_get_size
mono_counter_get_type
mono_counter_get_unit
mono_counter_get_variance
mono_counters_cleanup
mono_counters_dump
mono_counters_enable
mono_counters_foreach
mono_counters_init
mono_counters_on_register
mono_counters_register
mono_counters_register_with_size
mono_counters_sample
mono_cpu_count
mono_custom_attrs_construct
mono_custom_attrs_construct_by_type
mono_custom_attrs_free
mono_custom_attrs_from_assembly
mono_custom_attrs_from_class
mono_custom_attrs_from_event
mono_custom_attrs_from_field
mono_custom_attrs_from_index
mono_custom_attrs_from_method
mono_custom_attrs_from_param
mono_custom_attrs_from_property
mono_custom_attrs_get_attr
mono_custom_attrs_get_attrs
mono_custom_attrs_has_attr
mono_debug_add_delegate_trampoline
mono_debug_add_method
mono_debug_cleanup
mono_debug_close_image
mono_debug_close_mono_symbol_file
mono_debug_domain_create
mono_debug_domain_unload
mono_debug_enabled
mono_debug_find_method
mono_debug_free_locals
mono_debug_free_method_jit_info
mono_debug_free_source_location
mono_debug_il_offset_from_address
mono_debug_init
mono_debug_lookup_locals
mono_debug_lookup_method
mono_debug_lookup_method_addresses
mono_debug_lookup_source_location
mono_debug_lookup_source_location_by_il
mono_debug_open_image_from_memory
mono_debug_open_mono_symbols
mono_debug_print_stack_frame
mono_debug_print_vars
mono_debug_remove_method
mono_debug_symfile_free_location
mono_debug_symfile_is_loaded
mono_debug_symfile_lookup_locals
mono_debug_symfile_lookup_location
mono_debug_symfile_lookup_method
mono_debugger_agent_parse_options
mono_debugger_agent_register_transport
mono_debugger_agent_transport_handshake
mono_debugger_disconnect
mono_debugger_get_generate_debug_info
mono_debugger_insert_breakpoint
mono_debugger_install_attach_detach_callback
mono_debugger_method_has_breakpoint
mono_debugger_run_finally
mono_debugger_set_generate_debug_info
mono_declsec_flags_from_assembly
mono_declsec_flags_from_class
mono_declsec_flags_from_method
mono_declsec_get_assembly_action
mono_declsec_get_class_action
mono_declsec_get_demands
mono_declsec_get_inheritdemands_class
mono_declsec_get_inheritdemands_method
mono_declsec_get_linkdemands
mono_declsec_get_method_action
mono_digest_get_public_token
mono_disasm_code
mono_disasm_code_one
mono_dl_fallback_register
mono_dl_fallback_unregister
mono_dl_open
mono_dllmap_insert
mono_domain_assembly_foreach
mono_domain_assembly_open
mono_domain_create
mono_domain_create_appdomain
mono_domain_finalize
mono_domain_foreach
mono_domain_free
mono_domain_from_appdomain
mono_domain_get
mono_domain_get_by_id
mono_domain_get_friendly_name
mono_domain_get_id
mono_domain_has_type_resolve
mono_domain_is_unloading
mono_domain_jit_foreach
mono_domain_owns_vtable_slot
mono_domain_set
mono_domain_set_config
mono_domain_set_internal
mono_domain_try_type_resolve
mono_domain_try_unload
mono_domain_unload
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_error_cleanup
mono_error_get_error_code
mono_error_get_message
mono_error_init
mono_error_init_flags
mono_error_ok
mono_escape_uri_string
mono_event_get_add_method
mono_event_get_flags
mono_event_get_name
mono_event_get_object
mono_event_get_parent
mono_event_get_raise_method
mono_event_get_remove_method
mono_exception_from_name
mono_exception_from_name_domain
mono_exception_from_name_msg
mono_exception_from_name_two_strings
mono_exception_from_token
mono_exception_from_token_two_strings
mono_exception_walk_trace
mono_field_from_token
mono_field_full_name
mono_field_get_data
mono_field_get_flags
mono_field_get_name
mono_field_get_object
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_get_value
mono_field_get_value_object
mono_field_set_value
mono_field_static_get_value
mono_field_static_set_value
mono_file_map
mono_file_map_close
mono_file_map_fd
mono_file_map_open
mono_file_map_size
mono_file_unmap
mono_free
mono_free_bstr
mono_free_method
mono_free_verify_list
mono_g_hash_table_destroy
mono_g_hash_table_find
mono_g_hash_table_foreach
mono_g_hash_table_foreach_remove
mono_g_hash_table_insert
mono_g_hash_table_lookup
mono_g_hash_table_lookup_extended
mono_g_hash_table_new_type
mono_g_hash_table_print_stats
mono_g_hash_table_remove
mono_g_hash_table_replace
mono_g_hash_table_size
mono_gc_collect
mono_gc_collect_a_little
mono_gc_collection_count
mono_gc_finalize_notify
mono_gc_get_generation
mono_gc_get_heap_size
mono_gc_get_max_time_slice_ns
mono_gc_get_used_size
mono_gc_invoke_finalizers
mono_gc_is_incremental
mono_gc_max_generation
mono_gc_pending_finalizers
mono_gc_reference_queue_add
mono_gc_reference_queue_free
mono_gc_reference_queue_new
mono_gc_register_finalizer_callbacks
mono_gc_register_root
mono_gc_set_incremental
mono_gc_set_max_time_slice_ns
mono_gc_start_incremental_collection
mono_gc_toggleref_add
mono_gc_toggleref_register_callback
mono_gc_walk_heap
mono_gc_wbarrier_arrayref_copy
mono_gc_wbarrier_generic_nostore
mono_gc_wbarrier_generic_store
mono_gc_wbarrier_generic_store_atomic
mono_gc_wbarrier_object_copy
mono_gc_wbarrier_set_arrayref
mono_gc_wbarrier_set_field
mono_gc_wbarrier_value_copy
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_is_in_domain
mono_gchandle_new
mono_gchandle_new_weakref
mono_get_array_class
mono_get_boolean_class
mono_get_byte_class
mono_get_char_class
mono_get_config_dir
mono_get_corlib
mono_get_dbnull_object
mono_get_delegate_begin_invoke
mono_get_delegate_end_invoke
mono_get_delegate_invoke
mono_get_double_class
mono_get_enum_class
mono_get_exception_appdomain_unloaded
mono_get_exception_argument
mono_get_exception_argument_null
mono_get_exception_argument_out_of_range
mono_get_exception_arithmetic
mono_get_exception_array_type_mismatch
mono_get_exception_bad_image_format
mono_get_exception_bad_image_format2
mono_get_exception_cannot_unload_appdomain
mono_get_exception_class
mono_get_exception_divide_by_zero
mono_get_exception_execution_engine
mono_get_exception_field_access
mono_get_exception_file_not_found
mono_get_exception_file_not_found2
mono_get_exception_index_out_of_range
mono_get_exception_invalid_cast
mono_get_exception_invalid_operation
mono_get_exception_io
mono_get_exception_method_access
mono_get_exception_missing_field
mono_get_exception_missing_method
mono_get_exception_not_implemented
mono_get_exception_not_supported
mono_get_exception_null_reference
mono_get_exception_out_of_memory
mono_get_exception_overflow
mono_get_exception_reflection_type_load
mono_get_exception_runtime_wrapped
mono_get_exception_security
mono_get_exception_serialization
mono_get_exception_stack_overflow
mono_get_exception_synchronization_lock
mono_get_exception_thread_abort
mono_get_exception_thread_interrupted
mono_get_exception_thread_state
mono_get_exception_type_initialization
mono_get_exception_type_load
mono_get_find_plugin_callback
mono_get_inflated_method
mono_get_int16_class
mono_get_int32_class
mono_get_int64_class
mono_get_intptr_class
mono_get_machine_config
mono_get_method
mono_get_method_constrained
mono_get_method_full
mono_get_object_class
mono_get_root_domain
mono_get_runtime_build_info
mono_get_sbyte_class
mono_get_single_class
mono_get_string_class
mono_get_thread_class
mono_get_uint16_class
mono_get_uint32_class
mono_get_uint64_class
mono_get_uintptr_class
mono_get_void_class
mono_guid_to_string
mono_guid_to_string_minimal
mono_hazard_pointer_get
mono_image_add_to_name_cache
mono_image_addref
mono_image_close
mono_image_ensure_section
mono_image_ensure_section_idx
mono_image_fixup_vtable
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_get_public_key
mono_image_get_resource
mono_image_get_strong_name
mono_image_get_table_info
mono_image_get_table_rows
mono_image_has_authenticode_entry
mono_image_init
mono_image_init_name_cache
mono_image_is_dynamic
mono_image_load_file_for_image
mono_image_load_module
mono_image_loaded
mono_image_loaded_by_guid
mono_image_loaded_by_guid_full
mono_image_loaded_full
mono_image_lookup_resource
mono_image_open
mono_image_open_from_data
mono_image_open_from_data_full
mono_image_open_from_data_with_name
mono_image_open_full
mono_image_rva_map
mono_image_strerror
mono_image_strong_name_position
mono_images_cleanup
mono_images_init
mono_init
mono_init_from_assembly
mono_init_version
mono_install_assembly_load_hook
mono_install_assembly_postload_refonly_search_hook
mono_install_assembly_postload_search_hook
mono_install_assembly_preload_hook
mono_install_assembly_refonly_preload_hook
mono_install_assembly_refonly_search_hook
mono_install_assembly_search_hook
mono_install_ftnptr_eh_callback
mono_install_load_aot_data_hook
mono_install_runtime_cleanup
mono_install_unhandled_exception_hook
mono_internal_current_level
mono_internal_current_mask
mono_is_debugger_attached
mono_jit_aot_compiling
mono_jit_cleanup
mono_jit_exec
mono_jit_info_get_code_size
mono_jit_info_get_code_start
mono_jit_info_get_method
mono_jit_info_table_find
mono_jit_init
mono_jit_init_version
mono_jit_parse_options
mono_jit_set_aot_mode
mono_jit_set_aot_only
mono_jit_set_domain
mono_jit_set_trace_options
mono_jit_thread_attach
mono_ldstr
mono_ldtoken
mono_lls_find
mono_lls_get_hazardous_pointer_with_mask
mono_lls_init
mono_lls_insert
mono_lls_remove
mono_load_remote_field
mono_load_remote_field_new
mono_loader_register_module
mono_lock_free_alloc
mono_lock_free_allocator_check_consistency
mono_lock_free_allocator_init_allocator
mono_lock_free_allocator_init_size_class
mono_lock_free_free
mono_lock_free_queue_dequeue
mono_lock_free_queue_enqueue
mono_lock_free_queue_init
mono_lock_free_queue_node_init
mono_lock_free_queue_node_unpoison
mono_locks_dump
mono_lookup_icall_symbol
mono_lookup_internal_call
mono_lookup_pinvoke_call
mono_main
mono_marshal_string_to_utf16
mono_md5_final
mono_md5_get_digest
mono_md5_get_digest_from_file
mono_md5_init
mono_md5_update
mono_mem_account_register_counters
mono_mem_account_type_name
mono_mempool_alloc
mono_mempool_alloc0
mono_mempool_contains_addr
mono_mempool_destroy
mono_mempool_foreach_block
mono_mempool_get_allocated
mono_mempool_invalidate
mono_mempool_new
mono_mempool_new_size
mono_mempool_stats
mono_mempool_strdup
mono_metadata_blob_heap
mono_metadata_cleanup
mono_metadata_compute_size
mono_metadata_custom_attrs_from_index
mono_metadata_declsec_from_index
mono_metadata_decode_blob_size
mono_metadata_decode_row
mono_metadata_decode_row_col
mono_metadata_decode_signed_value
mono_metadata_decode_table_row
mono_metadata_decode_table_row_col
mono_metadata_decode_value
mono_metadata_encode_value
mono_metadata_events_from_typedef
mono_metadata_field_info
mono_metadata_field_info_with_mempool
mono_metadata_free_array
mono_metadata_free_inflated_signature
mono_metadata_free_marshal_spec
mono_metadata_free_method_signature
mono_metadata_free_mh
mono_metadata_free_type
mono_metadata_generic_class_foreach
mono_metadata_generic_class_is_valuetype
mono_metadata_get_constant_index
mono_metadata_get_generic_param_row
mono_metadata_get_inflated_signature
mono_metadata_get_marshal_info
mono_metadata_guid_heap
mono_metadata_implmap_from_method
mono_metadata_init
mono_metadata_interfaces_from_typedef
mono_metadata_load_generic_param_constraints_checked
mono_metadata_load_generic_params
mono_metadata_locate
mono_metadata_locate_token
mono_metadata_methods_from_event
mono_metadata_methods_from_property
mono_metadata_nested_in_typedef
mono_metadata_nesting_typedef
mono_metadata_packing_from_typedef
mono_metadata_parse_array
mono_metadata_parse_custom_mod
mono_metadata_parse_field_type
mono_metadata_parse_marshal_spec
mono_metadata_parse_method_signature
mono_metadata_parse_method_signature_full
mono_metadata_parse_mh
mono_metadata_parse_mh_full
mono_metadata_parse_param
mono_metadata_parse_signature
mono_metadata_parse_type
mono_metadata_parse_typedef_or_ref
mono_metadata_properties_from_typedef
mono_metadata_signature_alloc
mono_metadata_signature_dup
mono_metadata_signature_equal
mono_metadata_string_heap
mono_metadata_token_from_dor
mono_metadata_translate_token_index
mono_metadata_type_equal
mono_metadata_type_hash
mono_metadata_typedef_from_field
mono_metadata_typedef_from_method
mono_metadata_user_string
mono_method_body_get_object
mono_method_can_access_field
mono_method_can_access_method
mono_method_desc_free
mono_method_desc_from_method
mono_method_desc_full_match
mono_method_desc_is_full
mono_method_desc_match
mono_method_desc_new
mono_method_desc_search_in_class
mono_method_desc_search_in_image
mono_method_full_name
mono_method_get_class
mono_method_get_context
mono_method_get_flags
mono_method_get_generic_container
mono_method_get_header
mono_method_get_header_checked
mono_method_get_index
mono_method_get_last_managed
mono_method_get_marshal_info
mono_method_get_name
mono_method_get_object
mono_method_get_param_names
mono_method_get_param_token
mono_method_get_reflection_name
mono_method_get_signature
mono_method_get_signature_full
mono_method_get_token
mono_method_get_unmanaged_thunk
mono_method_has_marshal_info
mono_method_header_get_clauses
mono_method_header_get_code
mono_method_header_get_locals
mono_method_header_get_num_clauses
mono_method_print_code
mono_method_signature
mono_method_signature_checked
mono_method_verify
mono_mlist_alloc
mono_mlist_append
mono_mlist_get_data
mono_mlist_last
mono_mlist_length
mono_mlist_next
mono_mlist_prepend
mono_mlist_remove_item
mono_mlist_set_data
mono_mlist_set_next
mono_module_file_get_object
mono_module_get_object
mono_monitor_enter
mono_monitor_enter_v4
mono_monitor_exit
mono_monitor_try_enter
mono_mprotect
mono_native_getrootdir
mono_native_thread_create
mono_native_thread_id_equals
mono_native_thread_id_get
mono_native_thread_join
mono_native_thread_set_name
mono_object_castclass_mbyref
mono_object_clone
mono_object_describe
mono_object_describe_fields
mono_object_get_class
mono_object_get_domain
mono_object_get_size
mono_object_get_virtual_method
mono_object_get_vtable
mono_object_hash
mono_object_is_alive
mono_object_isinst
mono_object_isinst_mbyref
mono_object_new
mono_object_new_alloc_specific
mono_object_new_fast
mono_object_new_from_token
mono_object_new_specific
mono_object_to_string
mono_object_unbox
mono_opcode_name
mono_opcode_value
mono_opcodes
mono_pagesize
mono_param_get_objects
mono_parse_default_optimizations
mono_parse_env_options
mono_parse_options_from
mono_path_canonicalize
mono_path_resolve_symlinks
mono_pe_file_open
mono_perfcounter_foreach
mono_perfcounters_init
mono_personality
mono_pmip
mono_poll
mono_ppdb_get_signature
mono_print_method_from_ip
mono_print_thread_dump
mono_print_thread_dump_from_ctx
mono_print_unhandled_exception
mono_profiler_call_context_free_buffer
mono_profiler_call_context_get_argument
mono_profiler_call_context_get_local
mono_profiler_call_context_get_result
mono_profiler_call_context_get_this
mono_profiler_create
mono_profiler_enable_allocations
mono_profiler_enable_call_context_introspection
mono_profiler_enable_coverage
mono_profiler_enable_fileio
mono_profiler_enable_sampling
mono_profiler_get_all_coverage_data
mono_profiler_get_coverage_data
mono_profiler_get_sample_mode
mono_profiler_install
mono_profiler_install_allocation
mono_profiler_install_enter_leave
mono_profiler_install_exception
mono_profiler_install_fileio
mono_profiler_install_gc
mono_profiler_install_jit_end
mono_profiler_install_thread
mono_profiler_load
mono_profiler_reset_all_coverage
mono_profiler_reset_coverage
mono_profiler_set_assembly_loaded_callback
mono_profiler_set_assembly_loading_callback
mono_profiler_set_assembly_unloaded_callback
mono_profiler_set_assembly_unloading_callback
mono_profiler_set_call_instrumentation_filter_callback
mono_profiler_set_class_failed_callback
mono_profiler_set_class_loaded_callback
mono_profiler_set_class_loading_callback
mono_profiler_set_cleanup_callback
mono_profiler_set_context_loaded_callback
mono_profiler_set_context_unloaded_callback
mono_profiler_set_coverage_filter_callback
mono_profiler_set_domain_loaded_callback
mono_profiler_set_domain_loading_callback
mono_profiler_set_domain_name_callback
mono_profiler_set_domain_unloaded_callback
mono_profiler_set_domain_unloading_callback
mono_profiler_set_events
mono_profiler_set_exception_clause_callback
mono_profiler_set_exception_throw_callback
mono_profiler_set_fileio_callback
mono_profiler_set_gc_allocation_callback
mono_profiler_set_gc_event_callback
mono_profiler_set_gc_finalized_callback
mono_profiler_set_gc_finalized_object_callback
mono_profiler_set_gc_finalizing_callback
mono_profiler_set_gc_finalizing_object_callback
mono_profiler_set_gc_handle_created_callback
mono_profiler_set_gc_handle_deleted_callback
mono_profiler_set_gc_moves_callback
mono_profiler_set_gc_resize_callback
mono_profiler_set_gc_root_register_callback
mono_profiler_set_gc_root_unregister_callback
mono_profiler_set_gc_roots_callback
mono_profiler_set_image_failed_callback
mono_profiler_set_image_loaded_callback
mono_profiler_set_image_loading_callback
mono_profiler_set_image_unloaded_callback
mono_profiler_set_image_unloading_callback
mono_profiler_set_iomap_report_callback
mono_profiler_set_jit_begin_callback
mono_profiler_set_jit_chunk_created_callback
mono_profiler_set_jit_chunk_destroyed_callback
mono_profiler_set_jit_code_buffer_callback
mono_profiler_set_jit_done_callback
mono_profiler_set_jit_failed_callback
mono_profiler_set_method_begin_invoke_callback
mono_profiler_set_method_end_invoke_callback
mono_profiler_set_method_enter_callback
mono_profiler_set_method_exception_leave_callback
mono_profiler_set_method_free_callback
mono_profiler_set_method_leave_callback
mono_profiler_set_method_tail_call_callback
mono_profiler_set_monitor_acquired_callback
mono_profiler_set_monitor_contention_callback
mono_profiler_set_monitor_failed_callback
mono_profiler_set_runtime_initialized_callback
mono_profiler_set_runtime_shutdown_begin_callback
mono_profiler_set_runtime_shutdown_end_callback
mono_profiler_set_sample_hit_callback
mono_profiler_set_sample_mode
mono_profiler_set_thread_exited_callback
mono_profiler_set_thread_name_callback
mono_profiler_set_thread_started_callback
mono_profiler_set_thread_stopped_callback
mono_profiler_set_thread_stopping_callback
mono_profiler_set_vtable_failed_callback
mono_profiler_set_vtable_loaded_callback
mono_profiler_set_vtable_loading_callback
mono_property_get_flags
mono_property_get_get_method
mono_property_get_name
mono_property_get_object
mono_property_get_parent
mono_property_get_set_method
mono_property_get_value
mono_property_hash_destroy
mono_property_hash_insert
mono_property_hash_lookup
mono_property_hash_new
mono_property_hash_remove_object
mono_property_set_value
mono_ptr_class_get
mono_raise_exception
mono_reflection_assembly_get_assembly
mono_reflection_free_type_info
mono_reflection_get_custom_attrs
mono_reflection_get_custom_attrs_blob
mono_reflection_get_custom_attrs_by_type
mono_reflection_get_custom_attrs_data
mono_reflection_get_custom_attrs_info
mono_reflection_get_token
mono_reflection_get_type
mono_reflection_parse_type
mono_reflection_type_from_name
mono_reflection_type_get_type
mono_register_bundled_assemblies
mono_register_config_for_assembly
mono_register_machine_config
mono_register_symfile_for_assembly
mono_reraise_exception
mono_runtime_class_init
mono_runtime_cleanup
mono_runtime_delegate_invoke
mono_runtime_exec_main
mono_runtime_exec_managed_code
mono_runtime_get_main_args
mono_runtime_init
mono_runtime_invoke
mono_runtime_invoke_array
mono_runtime_is_shutting_down
mono_runtime_object_init
mono_runtime_quit
mono_runtime_resource_check_limit
mono_runtime_resource_limit
mono_runtime_resource_set_callback
mono_runtime_run_main
mono_runtime_set_main_args
mono_runtime_set_shutting_down
mono_runtime_unhandled_exception_policy_set
mono_security_core_clr_get_options
mono_security_core_clr_require_elevated_permissions
mono_security_core_clr_set_options
mono_security_enable_core_clr
mono_security_set_core_clr_platform_callback
mono_security_set_mode
mono_set_allocator_vtable
mono_set_assemblies_path
mono_set_assemblies_path_null_separated
mono_set_break_policy
mono_set_config_dir
mono_set_crash_chaining
mono_set_defaults
mono_set_dirs
mono_set_find_plugin_callback
mono_set_ignore_version_and_key_when_finding_assemblies_already_loaded
mono_set_is_debugger_attached
mono_set_rootdir
mono_set_signal_chaining
mono_sha1_final
mono_sha1_get_digest
mono_sha1_get_digest_from_file
mono_sha1_init
mono_sha1_update
mono_shared_area
mono_shared_area_for_pid
mono_shared_area_instances
mono_shared_area_remove
mono_shared_area_unload
mono_signature_explicit_this
mono_signature_full_name
mono_signature_get_call_conv
mono_signature_get_desc
mono_signature_get_param_count
mono_signature_get_params
mono_signature_get_return_type
mono_signature_hash
mono_signature_is_instance
mono_signature_param_is_out
mono_signature_vararg_start
mono_signbit_double
mono_signbit_float
mono_stack_walk
mono_stack_walk_async_safe
mono_stack_walk_no_il
mono_store_remote_field
mono_store_remote_field_new
mono_string_chars
mono_string_empty
mono_string_empty_wrapper
mono_string_equal
mono_string_from_bstr
mono_string_from_utf16
mono_string_from_utf32
mono_string_hash
mono_string_intern
mono_string_is_interned
mono_string_length
mono_string_new
mono_string_new_len
mono_string_new_size
mono_string_new_utf16
mono_string_new_utf32
mono_string_new_wrapper
mono_string_to_utf16
mono_string_to_utf32
mono_string_to_utf8
mono_string_to_utf8_checked
mono_stringify_assembly_name
mono_table_info_get_rows
mono_thread_attach
mono_thread_cleanup
mono_thread_create
mono_thread_current
mono_thread_detach
mono_thread_detach_if_exiting
mono_thread_exit
mono_thread_get_main
mono_thread_get_managed_id
mono_thread_get_name_utf8
mono_thread_get_undeniable_exception
mono_thread_hazardous_queue_free
mono_thread_hazardous_try_free
mono_thread_hazardous_try_free_all
mono_thread_info_detach
mono_thread_info_get_small_id
mono_thread_info_register_small_id
mono_thread_info_yield
mono_thread_init
mono_thread_is_foreign
mono_thread_manage
mono_thread_new_init
mono_thread_pool_cleanup
mono_thread_pop_appdomain_ref
mono_thread_push_appdomain_ref
mono_thread_set_main
mono_thread_set_manage_callback
mono_thread_stop
mono_thread_suspend_all_other_threads
mono_threads_assert_gc_safe_region
mono_threads_assert_gc_unsafe_region
mono_threads_attach_coop
mono_threads_attach_tools_thread
mono_threads_detach_coop
mono_threads_enter_gc_safe_region
mono_threads_enter_gc_safe_region_unbalanced
mono_threads_enter_gc_unsafe_region
mono_threads_enter_gc_unsafe_region_unbalanced
mono_threads_exit_gc_safe_region
mono_threads_exit_gc_safe_region_unbalanced
mono_threads_exit_gc_unsafe_region
mono_threads_exit_gc_unsafe_region_unbalanced
mono_threads_get_default_stacksize
mono_threads_request_thread_dump
mono_threads_set_default_stacksize
mono_threads_set_shutting_down
mono_trace_init
mono_trace_set_level_string
mono_trace_set_log_handler
mono_trace_set_mask_string
mono_trace_set_print_handler
mono_trace_set_printerr_handler
mono_tracev_inner
mono_type_create_from_typespec
mono_type_full_name
mono_type_generic_inst_is_valuetype
mono_type_get_array_type
mono_type_get_attrs
mono_type_get_class
mono_type_get_desc
mono_type_get_modifiers
mono_type_get_name
mono_type_get_name_full
mono_type_get_object
mono_type_get_ptr_type
mono_type_get_signature
mono_type_get_type
mono_type_get_underlying_type
mono_type_is_byref
mono_type_is_pointer
mono_type_is_primitive
mono_type_is_reference
mono_type_is_struct
mono_type_is_valid_enum_basetype
mono_type_is_void
mono_type_size
mono_type_stack_size
mono_type_to_unmanaged
mono_unhandled_exception
mono_unicode_from_external
mono_unicode_to_external
mono_unity_alloc
mono_unity_allocation_granularity
mono_unity_array_new_2d
mono_unity_array_new_3d
mono_unity_array_object_header_size
mono_unity_assembly_mempool_chunk_foreach
mono_unity_backtrace_from_context
mono_unity_capture_memory_snapshot
mono_unity_class_field_is_literal
mono_unity_class_for_each
mono_unity_class_get
mono_unity_class_get_data_size
mono_unity_class_get_generic_argument_at
mono_unity_class_get_generic_argument_count
mono_unity_class_get_generic_parameter_at
mono_unity_class_get_generic_parameter_count
mono_unity_class_get_generic_type_definition
mono_unity_class_is_abstract
mono_unity_class_is_interface
mono_unity_class_is_open_constructed_type
mono_unity_class_try_get_vtable
mono_unity_domain_mempool_chunk_foreach
mono_unity_domain_set_config
mono_unity_domain_unload
mono_unity_error_convert_to_exception
mono_unity_free_captured_memory_snapshot
mono_unity_g_free
mono_unity_gc_disable
mono_unity_gc_enable
mono_unity_gc_handles_foreach_get_target
mono_unity_gc_heap_foreach
mono_unity_gc_is_disabled
mono_unity_gc_set_mode
mono_unity_get_data_dir
mono_unity_get_unitytls_interface
mono_unity_image_set_mempool_chunk_foreach
mono_unity_install_memory_callbacks
mono_unity_install_unitytls_interface
mono_unity_jit_cleanup
mono_unity_liveness_allocate_struct
mono_unity_liveness_calculation_begin
mono_unity_liveness_calculation_end
mono_unity_liveness_calculation_from_root
mono_unity_liveness_calculation_from_statics
mono_unity_liveness_finalize
mono_unity_liveness_free_struct
mono_unity_liveness_start_gc_world
mono_unity_liveness_stop_gc_world
mono_unity_loader_get_last_error_and_error_prepare_exception
mono_unity_lock_dynamic_function_access_tables64
mono_unity_managed_callstack
mono_unity_method_get_token
mono_unity_object_header_size
mono_unity_offset_of_array_bounds_in_array_object_header
mono_unity_offset_of_array_length_in_array_object_header
mono_unity_oop_get_dynamic_function_access_table64
mono_unity_oop_get_stack_frame_details
mono_unity_oop_init
mono_unity_oop_iterate_dynamic_function_access_tables64
mono_unity_oop_shutdown
mono_unity_register_path_remapper
mono_unity_root_domain_mempool_chunk_foreach
mono_unity_runtime_set_main_args
mono_unity_set_data_dir
mono_unity_set_editor_logging_callback
mono_unity_set_embeddinghostname
mono_unity_set_enable_handler_block_guards
mono_unity_set_vprintf_func
mono_unity_socket_security_enabled_set
mono_unity_start_gc_world
mono_unity_stop_gc_world
mono_unity_string_empty_wrapper
mono_unity_thread_fast_attach
mono_unity_thread_fast_detach
mono_unity_type_get_name_full_chunked
mono_unity_type_is_pointer_type
mono_unity_type_is_static
mono_unity_unlock_dynamic_function_access_tables64
mono_unity_vtable_get_static_field_data
mono_upgrade_remote_class_wrapper
mono_use_interpreter
mono_use_llvm
mono_utf8_from_external
mono_utf8_validate_and_len
mono_utf8_validate_and_len_with_bounds
mono_valloc
mono_valloc_aligned
mono_valloc_granule
mono_value_box
mono_value_copy
mono_value_copy_array
mono_value_describe_fields
mono_verifier_set_mode
mono_verify_corlib
mono_vfree
mono_vtable_class
mono_vtable_domain
mono_vtable_get_static_field_data
mono_win32_compat_CopyMemory
mono_win32_compat_FillMemory
mono_win32_compat_MoveMemory
mono_win32_compat_ZeroMemory
unity_mono_method_is_generic
unity_mono_method_is_inflated
unity_mono_reflection_method_get_method
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
830KB
Virtual Size
830KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
512KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
372B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=51, id=241, version=40116,
count=192, id=243, version=40116,
count=44, id=242, version=40116,
count=8, id=199, version=41118,
count=26, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=1, id=208, version=65501,
count=21, id=203, version=65501,
count=305, id=1, productName=Unmarked objects,
count=245, id=260, version=24234,
count=1, id=256, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Mini Metro/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/2.0/machine.config
- SHA256 edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce
- MD5 cad24142abba464dd90777c3d347ef88
- SHA1 d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12
- SHA512 5d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454
- SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/y4RpQXWBE43g:DuY
- TLSH T11ED203703609BDAE494227235C54FA8046BF57196BA86D0CB5FF625CFE2688BD3032D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/2.0/settings.map
- SHA256 49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2
- MD5 22c818a23169e12bd3c8587b6394c731
- SHA1 dd2be2dbccd34736719301aee92429d4258ea5a0
- SHA512 c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7
- TLSH T1D3511138F708B5F50682052EA45A94D243B6023FA779495C71ECC13D6F2684B83B32DD
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/2.0/web.config
- SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
- MD5 2b6303c4f12762b71051db6e947f90a4
- SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
- SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
- SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
- TLSH T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.0/machine.config
- SHA256 6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664
- MD5 24c866ce8037fcdca2287234eddff637
- SHA1 9245befcd116458e9619694f1a785c50fa61b58e
- SHA512 f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtBDRp5Rt70gRt2RtTf1RDRty6ugyunHMSeuWuGR0:7Kn
- TLSH T1FAE2F0703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.0/settings.map
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.0/web.config
- SHA256 f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31
- MD5 b127480ee9f0b8dab6a3f73ad79dd332
- SHA1 7d776d730cbd253564713f36573dd8366782788c
- SHA512 00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwahst/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJX91Xbi
- TLSH T1E1820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.5/machine.config
- SHA256 ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
- MD5 0869544722561f5aff0eefc83fc7b001
- SHA1 1e118f4b5c1c6a7b1858e3fccb1b1d1095561976
- SHA512 ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
- SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn
- TLSH T13CE2F1703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.5/settings.map
- SHA256 ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- MD5 ba17ade8a8e3ee221377534c8136f617
- SHA1 8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA512 c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
- TLSH T1DF511238F748B5F50682092EA45A84D243B6063FB679499C71ECD13D6F2684B93B32DD
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/4.5/web.config
- SHA256 15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb
- MD5 08101241b15b53ef0ab908f6d388881f
- SHA1 ea3e2ad6d71d483c54b12852dcbdcd0baa569988
- SHA512 a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed
- SSDEEP 384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwa6st/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJi91Xbi
- TLSH T14D820030472EDEDE8E522B9355208A9272AB575B23449C8CF1FF2365EB46487D3321E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/browscap.ini
- SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
- MD5 378be809df7d15aac75a175693e25fbb
- SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
- SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
- SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
- TLSH T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/MonoBleedingEdge/etc/mono/config
- SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
- MD5 d9bc824737177af5792846f26507231c
- SHA1 c44835e4881d95a97b597bebff5deba0233a5887
- SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
- TLSH T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
- MD5 SHA1 SHA512 TLSH
Mini Metro/MonoBleedingEdge/etc/mono/mconfig/config.xml
- SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
- MD5 f34b330f20dce1bdcce9058fca287099
- SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
- SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
- SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
- TLSH T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/UnityCrashHandler32.exe
- IMPHASH f7c42550f65d2ea2165fc33ff9076a33
- SHA256 c601d9fe2d4eff81e10f05ef84500fd1019c8ea8232adbd8783e297f0bac058b
- MD5 1e66998e583362194a894291916c54a6
- SHA1 28f39119e3dc2e302d6a83325c88fe770175340e
- SHA512 4c7e3246cf445bc039fc3924b42d481c0d8af3162f5c184944d287675bdd7fe437aac327f133ff72a00d8084776e9aeef62cda556139b5f9a22eefe0966be613
- SSDEEP 12288:gi504Af28feSXbUAum7VSB2s15Vp21/IoyRkApAgMa9TOzEq8EXozTuC6HLWcht/:ge04Af2rSdQD1zR3MGOzEqqzTuNrbht
- TLSH T1E5358D213542C076E2A101F1C468FBFC856EBE24DB2791E363E43E6B79346D26E35672
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
217978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\buildslave\unity\build\artifacts\UnityCrashHandler\release_Win32_VS2019\UnityCrashHandler32.pdb
user32
GetDlgItem
SendDlgItemMessageA
SetForegroundWindow
AdjustWindowRect
EndDialog
UnionRect
DialogBoxParamA
SendMessageW
SetWindowPos
OffsetRect
SetWindowTextW
InflateRect
GetWindowLongA
GetIconInfo
LoadImageA
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
kernel32
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
FreeLibraryAndExitThread
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
CloseHandle
RaiseException
GetCurrentThread
OpenThread
GetThreadTimes
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
SwitchToThread
CreateThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
SuspendThread
ResumeThread
TlsGetValue
TlsSetValue
GetThreadContext
GetLastError
SetLastError
CreateEventW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExW
GetFileAttributesA
GetFileAttributesW
InterlockedPopEntrySList
ReadFile
SetFilePointerEx
WriteFile
GetEnvironmentVariableA
GetCurrentDirectoryA
OutputDebugStringA
GetSystemTime
ReadProcessMemory
VerSetConditionMask
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleW
WaitForSingleObject
LocalFree
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
SetEvent
WaitForMultipleObjectsEx
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetProcessId
GetThreadId
OpenProcess
GetStdHandle
GetTempPathW
CopyFileExW
AllocConsole
SetErrorMode
GetCommandLineW
FileTimeToLocalFileTime
GetFileTime
InitializeCriticalSection
CreateEventA
TerminateThread
GetExitCodeThread
GlobalMemoryStatusEx
GetSystemInfo
VirtualQueryEx
GetModuleHandleA
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FileTimeToDosDateTime
lstrlenA
FindResourceA
EnumResourceNamesA
GetFileSizeEx
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
TlsAlloc
TlsFree
VirtualAlloc
VirtualFree
VirtualQuery
RtlUnwind
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
DecodePointer
EncodePointer
GetTickCount
GetStringTypeW
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
DuplicateHandle
QueryDepthSList
UnregisterWaitEx
GetFileSize
shell32
CommandLineToArgvW
SHCreateDirectoryExW
ole32
CoInitializeEx
CoTaskMemFree
CoCreateGuid
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
GetPerformanceInfo
advapi32
GetUserNameW
GetUserNameA
wininet
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetCrackUrlA
InternetOpenA
gdi32
GetObjectA
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
GetFileVersionInfoSizeW
Name
.text
Size
430KB
Virtual Size
429KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
111KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
472KB
Virtual Size
471KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=259, version=26715,
count=182, id=261, version=26715,
count=23, id=260, version=26715,
count=1, id=199, version=41118,
count=141, id=261, version=28427,
count=21, id=260, version=28427,
count=27, id=259, version=28427,
count=1, id=262, version=26715,
count=25, id=257, version=26715,
count=268, id=1, productName=Unmarked objects,
count=9, id=260, productName=VS2019 v16.5.5 build 28614, version=28614,
count=32, id=261, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=255, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=258, productName=VS2019 v16.5.5 build 28614, version=28614,
Mini Metro/UnityPlayer.dll
- IMPHASH c9e6bd1b2e36e1b286e4f31ca4c5ab26
- SHA256 913466726a052299729b61a6346dd549f87a07e552812523ae7ae8c8e63ef4fa
- MD5 68520a8e25e4ed7e7cc1b44c0e1b4d87
- SHA1 92024842d18ea43f69498349fa66bd20e7a62e58
- SHA512 4509bd82159396cd4699b148d1016c9718aea9758105aa12fe9a34e271b652cfa5a30b188cf9df419786b87caf647c9d4bc8625041e37fdc769dc96a88430119
- SSDEEP 393216:/e6ni7WNIjGXNpEUiv1OBU3OauiWPVMy9mP4:/e6m+ISmrsBUd29JMw
- TLSH T142279C316815D176E8A601F6F7AE3BFB69784D28033844D363D428A5ED704E33EF56A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
18243040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\buildslave\unity\build\artifacts\UnityPlayer\Win32_VS2019_nondev_m_r\UnityPlayer_Win32_mono_x86.pdb
kernel32
GetDiskFreeSpaceExW
GetFileAttributesExW
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
LocalFree
FormatMessageW
CopyFileW
MoveFileExW
ReplaceFileW
SystemTimeToFileTime
Thread32First
Thread32Next
CreateMutexA
RtlCaptureContext
GetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesA
DebugBreak
SetUnhandledExceptionFilter
SetLastError
GetErrorMode
TerminateProcess
CreateThread
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
LocalAlloc
GetOverlappedResult
CancelIo
ResetEvent
GetTickCount
GetStartupInfoA
SetConsoleCtrlHandler
SetDllDirectoryW
SleepEx
RaiseException
GetThreadTimes
SwitchToThread
SetThreadPriority
GetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FormatMessageA
GetWindowsDirectoryW
CreateIoCompletionPort
GetQueuedCompletionStatus
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
ReleaseSemaphore
GetSystemInfo
GetLocalTime
GetTimeZoneInformation
GetFileSizeEx
IsDebuggerPresent
CreateSemaphoreExW
TlsAlloc
TlsFree
GetNativeSystemInfo
VirtualQuery
GetFileSize
SetErrorMode
HeapReAlloc
GetModuleHandleExW
ExitProcess
VirtualProtect
UnregisterWaitEx
QueryDepthSList
DuplicateHandle
GetVersionExW
FreeLibraryAndExitThread
CreateFileW
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
FindFirstFileExW
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetSystemDirectoryW
InitializeCriticalSectionEx
GlobalMemoryStatus
GetFileType
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ExitThread
CreateWaitableTimerA
SetWaitableTimer
OpenEventA
ReadConsoleInputW
FlushConsoleInputBuffer
SetThreadAffinityMask
GetStdHandle
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
SetStdHandle
SetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
LoadLibraryExW
GetCurrentThread
GetCurrentProcess
GetModuleHandleA
CreateEventExW
WaitForMultipleObjectsEx
QueryPerformanceFrequency
VirtualAlloc
HeapQueryInformation
GetProcessId
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
CreateEventW
CreatePipe
SetHandleInformation
OutputDebugStringA
GetTempPathW
WriteFile
CreateDirectoryW
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
GetSystemTime
GlobalLock
GlobalUnlock
GlobalAlloc
GetTempFileNameW
GetFileAttributesW
DeleteFileW
CreateToolhelp32Snapshot
K32GetProcessMemoryInfo
MultiByteToWideChar
FindNextFileW
FindFirstFileW
CreateTimerQueueTimer
FlushFileBuffers
CreateFileA
FindClose
GetUserDefaultLocaleName
GetSystemPowerStatus
GetComputerNameW
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
UnregisterWait
VirtualFree
GetCommandLineW
GetLogicalProcessorInformationEx
GetSystemDirectoryA
RtlUnwind
GlobalMemoryStatusEx
QueryPerformanceCounter
GetLastError
WaitForSingleObject
Sleep
CreateEventA
WaitForSingleObjectEx
SetEvent
CloseHandle
VerifyVersionInfoW
VerSetConditionMask
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
TlsSetValue
HeapSize
TlsGetValue
user32
GetDoubleClickTime
EnumDisplaySettingsA
GetCaretBlinkTime
DestroyWindow
CreateWindowExW
ShowWindow
UpdateWindow
GetClientRect
GetWindowRect
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
ReleaseDC
AllowSetForegroundWindow
TrackMouseEvent
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
SetCursor
LoadCursorA
DestroyCursor
EnumDisplaySettingsW
AdjustWindowRectEx
GetWindowPlacement
GetDC
MsgWaitForMultipleObjects
EnumDisplayMonitors
GetMonitorInfoW
GetMonitorInfoA
MonitorFromRect
SetWindowLongW
SetWindowLongA
GetWindowLongW
ClipCursor
ShowCursor
DestroyIcon
LoadImageW
GetThreadDesktop
GetUserObjectInformationA
RegisterWindowMessageA
SetWindowTextW
ValidateRect
DragDetect
SetTimer
GetFocus
GetActiveWindow
SetFocus
RegisterClassW
PostQuitMessage
DefWindowProcW
SendMessageW
PeekMessageA
GetUserObjectInformationW
GetProcessWindowStation
GetMessageA
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputData
SystemParametersInfoW
GetWindowLongA
PtInRect
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
GetSystemMetrics
ReleaseCapture
SetCapture
MapVirtualKeyA
GetKeyNameTextW
GetAsyncKeyState
GetKeyState
IsWindowVisible
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetMessageExtraInfo
GetMessageTime
GetMessagePos
DispatchMessageA
TranslateMessage
GetKeyboardLayoutNameW
LoadIconA
GetParent
OffsetRect
CopyRect
MessageBoxA
SendDlgItemMessageW
SetDlgItemTextW
SetDlgItemTextA
EndDialog
DialogBoxParamW
SetWindowPos
RegisterClassExW
UnregisterClassW
EnumWindows
SetForegroundWindow
IsIconic
SendMessageTimeoutA
KillTimer
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
CoTaskMemAlloc
PropVariantClear
PropVariantCopy
CoCreateGuid
StringFromGUID2
CoInitialize
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoCreateFreeThreadedMarshaler
shlwapi
SHDeleteKeyW
PathCanonicalizeW
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
advapi32
CryptGenRandom
CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyW
GetUserNameA
GetTokenInformation
GetSidSubAuthority
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
gdi32
ChoosePixelFormat
SetPixelFormat
GetDeviceCaps
SwapBuffers
shell32
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
SHFileOperationW
opengl32
wglCreateContext
wglGetCurrentContext
wglGetProcAddress
wglDeleteContext
wglGetCurrentDC
wglMakeCurrent
winmm
waveOutGetDevCapsA
waveInStart
waveOutClose
waveOutPrepareHeader
waveOutGetDevCapsW
waveOutOpen
waveOutGetNumDevs
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
waveInGetDevCapsW
waveInGetDevCapsA
waveInReset
waveInGetNumDevs
waveOutGetPosition
waveOutReset
waveOutWrite
waveOutUnprepareHeader
timeEndPeriod
timeBeginPeriod
timeGetTime
oleaut32
VariantClear
SysAllocString
VariantInit
SysFreeString
VariantChangeType
imm32
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetConversionStatus
ImmNotifyIME
ImmGetContext
winhttp
WinHttpGetIEProxyConfigForCurrentUser
bcrypt
BCryptGenRandom
hid
HidP_SetUsageValue
HidP_SetUsages
HidP_GetData
HidP_MaxDataListLength
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetAttributes
crypt32
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertAddEncodedCertificateToStore
CertFreeCertificateContext
CertCloseStore
CertOpenStore
ws2_32
WSASendDisconnect
gethostbyaddr
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSASetEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketW
WSACreateEvent
WSACloseEvent
getsockopt
WSARecvFrom
getprotobyname
gethostbyname
getpeername
ntohl
getnameinfo
freeaddrinfo
getaddrinfo
WSAIoctl
WSACleanup
WSAStartup
gethostname
socket
shutdown
setsockopt
sendto
recvfrom
htonl
__WSAFDIsSet
WSASocketA
WSAGetLastError
WSASetLastError
send
select
recv
ntohs
listen
inet_addr
htons
getsockname
ioctlsocket
connect
closesocket
bind
accept
UnityMain
Name
.text
Size
17.8MB
Virtual Size
17.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
257KB
Virtual Size
932KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rodata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
633KB
Virtual Size
632KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=58, id=259, version=26715,
count=21, id=260, version=28427,
count=52, id=259, version=28427,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=90, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=430, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=111, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=34, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=124, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=218, id=261, version=26715,
count=2, id=262, version=26715,
count=67, id=260, version=26715,
count=41, id=257, version=26715,
count=539, id=1, productName=Unmarked objects,
count=7, id=199, version=41118,
count=139, id=261, version=28427,
count=56, productName=Unmarked objects (old),
count=264, id=260, productName=VS2019 v16.5.5 build 28614, version=28614,
count=820, id=261, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=256, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=255, productName=VS2019 v16.5.5 build 28614, version=28614,
count=1, id=258, productName=VS2019 v16.5.5 build 28614, version=28614,
Mini Metro/gog.ico
- SHA256 f6a71321521ba89713f0bd38b21f809e87e8a789cb172e8e4693f9479e30b1e4
- MD5 88cbd6c016021b7b4a4b15879476ec6b
- SHA1 b6d0919b43934b29a550369370de069ed569b36e
- SHA512 47569c2a3e5bd791c59423e31abfb3777acf5a0a53a8b3170084324010349c2a60e6e14f945390e9f256feb30fabe8c50497123d393f7b6408dc8f4bf362dcb5
- SSDEEP 1536:sz0rvN9JsX6D54Qcn6V1dpEJL8G+9N213fF+x8IsH9uBz2p72mP:2IvN9JDLc6HoJc78fFwCH8Bz2p72e
- TLSH T1E563AEA4F310A5C6F61A9B3AC113DE10721A6BEF4D4BDB93145EBD253633E803B35986
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/goggame-1434554947.hashdb
- SHA256 f8a18ccdae5a242f607e2232c14772a54dc7668f72945393e40f2b7d0b51ab0f
- MD5 369aab8c4d2800b5859a27e3ae8efc5f
- SHA1 2efd265180a851fd4aa7f46c7e6e66d01f83957f
- SHA512 a2a6ce5d7bcfa13b42b811275515f431b4704b1394cf7de30afc4698c879b03d911ed871a43db9bb58488a49458ffe0d0044ab22185a4da667d6d54a960d29a0
- SSDEEP 96:O19+A91q+MOLCitrPahZvUnDNN/TDTPwvUSCGzxMIlJGoZ7kVW8:O19xqGwsnL7wsGtQx
- TLSH T10CA16DF11823A56EFBEE94F6FDF9090228E0D5C4A76937E2401CC56E291A9B0812B91D
- MD5 SHA1 SHA512 SSDEEP TLSH
goggame-1434554947.hashdb
- SHA256 27b63e1ad25aed1b719541b93512d1377123f975d2ac39d563c206e2916f95c7
- MD5 e5492149a49c6f961062cb624041387a
- SHA1 43aa06ebde027e298e708b471fbc60b03e1c20f2
- SHA512 55e87f27b44c8c0b09767ad31ac43933e91e67c5d1f143932a0a5af3d4a44e7f985670b78b2357f0998bfabf8eab76aeba965270279bed6de5f146372e46753d
- SSDEEP 192:KivCfT1AT0Y7S/rI+bkgYdieM5pC+Zv/vu5gq7lux+PITC:7tT0qS/JbQdieM5pC2XSgq7sx+PI+
- TLSH T159E3BDB3074B5E03E422BAF3A135DA8835E05D535FE3E81C91C95BB17039D6A6D39788
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/goggame-1434554947.ico
- SHA256 7c81a9a8dce81b2edb474a3ef43287c66a5a383d286449e0ad8bb7d683d4edc0
- MD5 4992c2911367f0c018d7424b9fbe6c4f
- SHA1 e076ee4cb969d09bcfece125fea35f71e5c32cfc
- SHA512 ec3ab3f42d19bbf15b4e190ed6d1a05a818e5e2f3c22b0bc87a4e9a7cac1d2459fefa7788f46dd1f41b113c744ebf2953379d12455fd60ade1ff874e822e556c
- SSDEEP 3072:SAjYobWzDrpCn9qHjaOyxbdN5ZIpAtUYDHxcTGKqe+:SDI0AOaOSfApBYNep+
- TLSH T156B31276E720A0B5E4119B398223AD3C9B07B6CD709F206B556066361A17C74F3FB78E
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/goggame-1434554947.info
- SHA256 4a8f9495da3d10ca99dbecc27ff4eb48a4ed5e8f47566a58e85a039a50839bd7
- MD5 8b0442783127dbe00d2499e40e3f1775
- SHA1 a5b9c862fa0a6b0ff5b418550febd91e65137854
- SHA512 124f8118d215245bb30dcc4a1584e428f6d65944e38decbb5e3bbbfa3a79e3410b4ed74a610f289abc2d200487a965a268f061034a4b6304813f8aeab568ed92
- TLSH T1AB01F03CC8281CA72458A66060B9AA43E62104D35F867D0C33CC922CCF8E40F29BD19E
- MD5 SHA1 SHA512 TLSH
Mini Metro/support.ico
- SHA256 05fe749ef47d1ec862d6c55be78e66d1011226bf1f78409acf57cb79cec5eb20
- MD5 650bee8a9ef04c41760502a1c3b89c76
- SHA1 c18a2d771d2487e6c6dc51a2ba1127f4ebb0213a
- SHA512 a2120e8df9434b31406a4160cba4f006a25990cb0c1257c10c1a06ba314df28b193abf7183b978d6f516577bfa4c5d689c77599d51a7833601a553a7750867bf
- SSDEEP 1536:hc88ykE70WDbmoXH9EQdEoymDBOWWrhZp8qALWXWsC:hxkKDLH9lEpFWb2WsC
- TLSH T1E653D07473389874C55006B894578BB99978EC41863E6E231AB77F933F38ADB1F85283
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/unins000.dat
- SHA256 2ab01bf48f7ba89bf0b3c3a95d43329d5561994619dc30cb884dae0887fb77e2
- MD5 7e5b18eb9511e0af5d8d4bd523ace342
- SHA1 db39c0461709b935aa2b37deae6b6fb89fe34f64
- SHA512 23fb943c0a538bd30adc5670c6f74beee062857635ea4e57aa2aa5815ef2d0e9d5e72e66e7da0cb9ac98a378c3ce5256247a203b7592cd8646e01758752b1582
- SSDEEP 6144:wWpel2Qdxac7cF+i7H3a1aoI9uQk2achlb9AfhU0JGRgZ+zzVQ1oelTyUlNfMU2r:oNaV9hGtegwzzTiuUOQWYLY+fGmG62z
- TLSH T16285B40CBBAC9A23D3BEA634D9F73734332ABD407D4EF31A17A59A1A44479598D43231
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/unins000.exe
- IMPHASH f62b90e31eca404f228fcf7068b00f31
- SHA256 0963b01b447c641bea6f5e9de250c1e8a0127a34440c8165594b67890026e6af
- MD5 5fbb8d112408800bf9cc257f8be6f580
- SHA1 c6319048b9af0736212bebb25979a84a74db0a06
- SHA512 390f4a1703c867d6f9edae3b02334126565b9995989f2edc16d5749dce7b059874373a5f6e870ce742012fa8b06e1c2c0c3ed56fffb864980496d328db8cbe02
- SSDEEP 24576:egNfn7OOXeL7dJ/oOP9pjA0fY2Mqz9JT7ytfsxjHElkLD229Oqkipt1NCnqxjVC:ntTX6THjACMq/xCaaMksgiM
- TLSH T19E554A22A3D18437D4732F795D2BD6946C3A7E202EA4A44E7EF89E4C0E35B417D39392
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d0:0a:41:81:03:43:ff:c8:bd:08:5b:84:f2:95:77:75:8b:31:fc:4c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=GOG Sp. z o.o.,O=GOG Sp. z o.o.,L=Warszawa,C=PL
Chains
Jul 8, 2021
CN=GOG Sp. z o.o.,O=GOG Sp. z o.o.,L=Warszawa,C=PL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=GOG Sp. z o.o.,O=GOG Sp. z o.o.,L=Warszawa,C=PL
Serial Number
09:6d:cf:2e:35:c6:6f:13:ef:95:fc:c8:bf:ac:3e:11
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 22, 2021 - Mar 8, 2022
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
5
Entry point
1074712
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
RegisterTypeLib
LoadTypeLib
SysFreeString
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetUserNameW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageTimeoutW
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
ReplyMessage
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
OemToCharBuffA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
CharToOemBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
lstrcmpW
WriteProfileStringW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TransactNamedPipe
TerminateProcess
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetNamedPipeHandleState
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenProcess
OpenMutexW
MultiByteToWideChar
MulDiv
MoveFileExW
MoveFileW
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
IsDBCSLeadByte
IsBadWritePtr
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetShortPathNameW
GetProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLogicalDrives
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumCalendarInfoW
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
RemoveFontResourceW
Rectangle
RectVisible
RealizePalette
Polyline
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AddFontResourceW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mpr
WNetOpenEnumW
WNetGetUniversalNameW
WNetGetConnectionW
WNetEnumResourceW
WNetCloseEnum
comctl32
InitCommonControls
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
IsEqualGUID
CoDisconnectObject
shell32
ShellExecuteExW
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHBrowseForFolderW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
164KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Mini Metro/unins000.ini
- SHA256 b06ec07de6906248a2d1e78600a2bf872dd5af51714c92892b32833cdea11de5
- MD5 756eb19826bae86af1658cdb1d2dd40c
- SHA1 6087e16f7aca6fc64c84aa8474450922d88f9e0b
- SHA512 382d7bed44a06404323c2cc72e1dd883430b0e218d231c1f09fbfbd0c228d5e9e3131081f5d7dc00caf3b6e101dbbe90d35354bdaf663c178f5cd06d073c9f4c
- MD5 SHA1 SHA512
Mini Metro/unins000.msg
- SHA256 e43d06ec2b3dbe3d81bcd6b7880d28d074dac54b38646a605cfc5c809939da16
- MD5 668a2187f89c993485bd46382ac682aa
- SHA1 abeefe05d6d6f64c0ef1f5e023f1861000aadb55
- SHA512 4f056b8c69c0674ba725450bb6242625389f23043a46ad95c6452893da02e1349f6067a1e19e86c8182867b08b8e78da98bedf02d2c94c3aa647b45ec6da56e0
- SSDEEP 192:N1Ejmgkg3Sqf8sfr69FT0AKanzLYfMgGzPL7Vzo+Fc51U84QDztMqbfbKJUfvo:N1Eavqf9r6fKVfM/Ro+y1URQDztMu3o
- TLSH T10BA2444267F94258F6F7BFA0BE7952644E7ABCA6EC38D65C1200445E09B2E54CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Mini Metro/webcache.zip
- SHA256 b0e4600ef816e2af5879642c07d14200ec1e6a5fada59395b2a1dc043a0ed7c5
- MD5 c611923e8da27367c8a108e94a6d3ac7
- SHA1 8e06f913bd7406527210be27a72ebc36bda82dbb
- SHA512 0b98db77670937ed58cab2b2397c05f3c91c0fe7671621879d4762da9ff2f79899f646f3c2b4f2194eca879eed72d57b60a313a834027f9b4cf8f1d4a7191262
- SSDEEP 3072:KuoyMC2iMuyPX2GZqqWxgpsfUgY3i9QqspTZqCTF6syb59W5IOlRBI:KzPC2iMuy/BOxgUmlQkU59W5IOlDI
- TLSH T13704136FB4CECDD7B955CEBA8B8414EDFC0A5CA14DC8A15B403A71D8C0A636D0A7C399
- MD5 SHA1 SHA512 SSDEEP TLSH
67af998e886cef4bed4448580021c7f435122674c3366644ef41b574ce8f6b1c_glx_logo.jpg
- SHA256 c55de187af1882a70ad3b260ecca946cf096161ea7f73a7efb38142f3420a767
- MD5 e444a8696ef393df6657e9d6a3d8809e
- SHA1 bd2f481fc8bc464ca1aff88db48fca74781e7aa7
- SHA512 dc69439a8e5bbcc40fba4b0753a02cf5059c84f88327018f8e34bf6b430ff47be2fbe09b6faa0053205ab27a8f5a129c330b231d5b7542036753f9d0ed972a45
- TLSH T149611970C5632896D27A1031E2F8468AC77937402F831764BBA99694DDCFAA049F8E48
- MD5 SHA1 SHA512 TLSH
67af998e886cef4bed4448580021c7f435122674c3366644ef41b574ce8f6b1c_glx_logo_2x.jpg
- SHA256 ed747101e61aa64474475668397eb8f37decbfe6571204d70cb8f91985cb2f45
- MD5 021be1673746315e1f45679ef6666721
- SHA1 9330d3ce8eb4e8bce06fc2010df6427f17288f2f
- SHA512 32812af2d3879a79cabb53170fe7f1f10469064a163a32a1fab256bb59f8f9e9bf04d2955377ae52fe417ad9eb786445a0e1e107909257d9e3c142b44e03bd96
- TLSH T165513CEDEF96944BE8778D3C09AF4B2FA3A88F9391D8CB5D2B80B651D57E14434D8018
- MD5 SHA1 SHA512 TLSH
7eed721bd30f9bcbb87856776b8abc5120eb6fc30d2064976709c77c18524290.jpg
- SHA256 fe393ab40475f13489a1853bab90c349bdbb821baadc15b73b118533164eb749
- MD5 5a0d0e253a8e36f712fc3a87c6a1febe
- SHA1 0078460298fb0b900e93b9efe4d672a9cc247a78
- SHA512 03107490f5b7007d2a4bb08d23d2600077ca4a3044914810ee3a471a08c9a38cddf19e5cfb1681c6c89b61a7ecf54cb92978f9e7c8f19f37a6a7700f3a39d9e2
- SSDEEP 3072:NbKgPkTcGqpRSPkaDNeIogbvRojdyJQJNHjGQh6RXLo:ND5pEPkW+gV+yJQ/jGq61U
- TLSH T14BE301A2F9161469C942BB5E9C9EC35600CDA2F17A39C69273FCDDECF7C0AAF0012156
- MD5 SHA1 SHA512 SSDEEP TLSH
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50.png
- SHA256 0ab4d2e4b310815eaa91e4735265a14e6fa38d274acde0e0acff48ad08e9e0ac
- MD5 a5b4b34923c0a1103da6977536d2d20c
- SHA1 ecbf087fe34dace464070179104aeecabed4b16f
- SHA512 7792a3e17c93f65840679ffd2354e42695cf749c45b2784be35d21dd36c5aaecb09e89f50f7f3b80dd8bfd2391baae08040054a04b7eb92b7ca8edbec4d4e67f
- SSDEEP 384:qxv/RfrBW++NIPt7wNLhyd/RuhWNRGHKeWS1kkkG0//ThljIm8VGie:qSCp2LYdpuCRGqeWlkkGG3Zie
- TLSH T1CC92D1639DEB4E57CF07C59174200CE63122CF012162BE9A944D648BF7E2F3E74A9A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_menu_notification_av.png
- SHA256 7f77f462d3793405c6b977182639730a1a06a6f8ec352531b6ed5a188e30fb4c
- MD5 a2b940042c8c0e1a8cc91e8732943762
- SHA1 4ca17cbde73b787000591a1e19d436517515eb93
- SHA512 987e906de0abea5aaab1f7902646248b3c5d538594d1adfd5b40942f7df566b2f5fae2b072877bb404f53c3ffb13e72e05bab0cad9e7bade4c41cee81d6f5128
- TLSH T164715DD7E4D54CA53840D85CCFC583D290A168CB92D5D12BF7906B2F690AF38698E331
- MD5 SHA1 SHA512 TLSH
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_menu_notification_av2.png
- SHA256 1ce4cc23ea2944ad25a57ccee0541f6c947615e24ed6a8067e81e8c8fe2fad09
- MD5 8889ae79e42d3fa8c5c56b1c98dea97f
- SHA1 a0e7221be91d6f8478a6ca8cae9dff75be3c74f9
- SHA512 9845480c7e6b3efefb102cba033479d491f7ce55798341f932bf0247040f4b50f4aef6fc82ca723bb46905620b215505ceda771798387d7042186aefc72a2bea
- SSDEEP 192:ZAaOkqLuwdiIYxVF24EmtWSE+0HKvJYyCz6o2lHB77FqXYO:Wa70urvhEmtaH+YyCzl8HB/FqoO
- TLSH T1EC22BF12F71D3396CD093162199DC0FFBD5DB04173E27BF0977528282C19275E898992
- MD5 SHA1 SHA512 SSDEEP TLSH
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_sbicon.png
- SHA256 622fa2329dbd54e453aab31753d1c64518f33c7e12ae2befdb994dd3842d986f
- MD5 8896dbb2dea0cdcb9448c714b81d2777
- SHA1 a9b452136f135ed8815164d9024e3d0a342b1b14
- SHA512 903cc27a3ed92350ff98b310ed7827c0bdfb9e171f65b0da21cef914bc1148ec331107d0928067b9106736b39c27be11022b7ecc7dc45a0c96eadd6509709aa6
- TLSH T1DD513C9695CCE6718DB6A01555709379AF24811EDC9FF17C487899CC0CF710D1D78A39
- MD5 SHA1 SHA512 TLSH
95c0e5838e1098a74944cf21dfef46f8e4e175ef98015fadbf42d20b54ebce50_sbicon_2x.png
- SHA256 87f82731c714e40d2168eb482192d1c2d73fd91f39f0ffec0b08bd3c0274c72c
- MD5 f98d53d1687319fb9a9f7c8c3a839dba
- SHA1 364dcb056c3c7b687878daaabf04ffd324efc2aa
- SHA512 a3ef015d92945ac3f3bb23c8c51aa4f81abcbef4d8c733a0fb7ec461054347500ae4b5407b95fc34b47b48d62071bdf10379107f84ca2f3d8b710b423bf92adf
- SSDEEP 192:hk4j/ohlVaUP2EvllFVgy0MyldLCwhq+9g4eR:hk4zoXjtlF10XLLA4K
- TLSH T193E19EDC74E28DC6E9F5FA995CE4E0EC21051D119169B5430AECB26CE0E890A0FEE599
- MD5 SHA1 SHA512 SSDEEP TLSH
resources.json
- SHA256 c53f6b80aba31a9402235cc184b96a401f0b33722c78279f811bd646e689154c
- MD5 40fc62e69b43b78c8c67794aee33a334
- SHA1 a0a880e7bf277bd9b632a465cd2c1fa9c53f1068
- SHA512 56512dfcabad75672cb11b5ac38262512d17a8d24ddc4885b040fa2bb9571044a962f450f40554ff5050ab986088714ddf2272285c76356e7d7d0d699f5cd600
- TLSH T1E6110D7B5C54384B1D25816AA2EF28ECF19F0E9ECE248B6662D7D2E1041231F89F3620
- MD5 SHA1 SHA512 TLSH
Read_Me_Instructions.txt
- SHA256 3772c26ca52f08d197868ccc9f9e3c56307b018b648983948b40ddf74aaf949a
- MD5 27b923d4ff2ea0a7616231b34e60beef
- SHA1 8141053a1472795ad199f397363bb1c71a326af6
- SHA512 5cc09fad674c99c2b10ae4dce96021e6c511ccc708f48325a5f59b15aae5e9329d39b77a96174a1a4ba0844055276cc250444ba38a8c10ef3d17f783f5ed376f
- TLSH T1E42108E76B773B9E0270E225614DF0A1FA4AC03D0A6DB470B7CC0049234923B0B204DF
- MD5 SHA1 SHA512 TLSH
STEAMRIP » Free Pre-installed Steam Games.url
- SHA256 83b3dea5feeb0e8b98b33b647634264abeb7a069801833bf3d80836405921786
- MD5 2c50d64e61fd60b0071ca34e7f2c21a0
- SHA1 f7eb323fa0a8634535678b072dc1247a679cd0f2
- SHA512 ceee0f559b04b85951e2e52b4db05b8e6ffabf7fc0692be19787b0dadb247ffb667550ba0dd052facdc4f4b9b0ff97bfdd2497fbf2ece37dffe09eb67abe9186
- TLSH T126B012AD5345C18ED361981A70B0FC08A84F7AA50CD6D0BC6694DE9B1C890D1C4A9F3A
- MD5 SHA1 SHA512 TLSH
_CommonRedist/dotNetFx40_Full_setup.exe
- IMPHASH 02483cd76378259a50b7b66146b45f06
- SHA256 fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425
- MD5 53406e9988306cbd4537677c5336aba4
- SHA1 06becadb92a5fcca2529c0b93687c2a0c6d0d610
- SHA512 4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99
- SSDEEP 24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD
- TLSH T1F2151232ABA0C133D4DB28B48ADDB6B2657DE6610374C4C7B7440BEEAC307D1697964B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
102854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
boxstub.pdb
advapi32
CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA
kernel32
Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException
comctl32
ord17
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
shlwapi
PathRemoveExtensionW
user32
MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW
cabinet
ord22
ord23
ord20
oleaut32
SysAllocString
VariantClear
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boxld01
Size
512B
Virtual Size
194B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=158, version=20928,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=171, version=21009,
count=18, id=158, version=21009,
count=105, id=170, version=21009,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=194, id=1, productName=Unmarked objects,
count=69, id=175, version=20928,
count=1, id=171, version=20928,
count=1, id=155, version=20928,
count=1, id=154, version=20928,
count=1, id=157, version=20928,
_CommonRedist/dxwebsetup.exe
- IMPHASH 1494de9b53e05fc1f40cb92afbdd6ce4
- SHA256 111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
- MD5 fd6057b33e15a553ddc5d9873723ce8f
- SHA1 f90efb623b5abea70af63c470daa8674444fb1df
- SHA512 d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
- SSDEEP 6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
- TLSH T1F154F11267D9853BE0F56B705DF341236B75BCA15E7AF32E5246A88C0C32784B83A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
23134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
239KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
_CommonRedist/oalinst.exe
- IMPHASH 1ff011c2e13ea492fe69b2fbfc802083
- SHA256 b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- MD5 694f54bd227916b89fc3eb1db53f0685
- SHA1 21fdc367291bbef14dac27925cae698d3928eead
- SHA512 55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP 12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
- TLSH T1E005F10020D5CC73E4EB32B3843586746EBA7E912F0A285B7FC476AEE673176DA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Chains
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Serial Number
36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 30, 2006 - Jul 14, 2009
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
61:0c:12:06:00:00:00:00:00:1b
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 23, 2006 - May 23, 2016
Minor OS version
0
Major OS version
4
Entry point
27713
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary
user32
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
636KB
Virtual Size
633KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
_CommonRedist/vcredist_2015-2019_x64.exe
- IMPHASH 1a5cdbf711fee14b077e599d13fddab2
- SHA256 b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
- MD5 f0248d477e74687c5619ae16498b13d4
- SHA1 9ed4b091148c9b53f66b3f2c69be7e60e74c486a
- SHA512 0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
- SSDEEP 393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
- TLSH T1AFE63332A598402BDBF20473EA94F9242E3DD119735589BBE2DCDD0E1F7818217FBA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 8, 2019 - Jan 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:13:b3:70:87:3d:fa:f0:c8:24:00:00:00:00:01:13
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
188525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
294KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
_CommonRedist/vcredist_2015-2019_x86.exe
- IMPHASH 1a5cdbf711fee14b077e599d13fddab2
- SHA256 ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6
- MD5 de34b1c517e0463602624bbc8294c08d
- SHA1 5ce7923ffea712468c05e7ac376dd9c29ea9f6be
- SHA512 114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac
- SSDEEP 393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9
- TLSH T134E633326554402AEBF20573AAA4F5342E7DE62D230449AEE3DCEC0D2FB919357F7612
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:0b:e4:f9:be:8f:6f:4c:1d:d0:00:00:00:00:01:0b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
188525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
294KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
_CommonRedist/vcredist_x64.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 b06546ddc8ca1e3d532f3f2593e88a6f49e81b66a9c2051d58508cc97b6a2023
- MD5 630d75210b325a280c3352f879297ed5
- SHA1 b330b760a8f16d5a31c2dc815627f5eb40861008
- SHA512 b6e107fa34764d336c9b59802c858845df9f8661a1beb41436fd638a044580557921e69883ed32737f853e203f0083358f642f3efe0a80fae7932c5e6137331f
- SSDEEP 98304:EuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:V7wqheSVYK/bua/BlWWnuVhsus8nm+qi
- TLSH T19A4633229343E243EC97FEB8E16E484FDD65C2B31736D6677326848D9D3DB1848A0399
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5.4MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
_CommonRedist/vcredist_x86.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8
- MD5 b88228d5fef4b6dc019d69d4471f23ec
- SHA1 372d9c1670343d3fb252209ba210d4dc4d67d358
- SHA512 cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8
- SSDEEP 98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0
- TLSH T1D3363341B7A660F9D20778B256377FDB1C28C2CC7B28130AA365E5E87ADB7C08355798
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4.8MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
_CommonRedist/xnafx40_redist.msi
- SHA256 e6c41d692ebcba854dad4b1c52bb7ddd05926bad3105595d6596b8bab01c25e7
- MD5 97c2eebb30c5a88c68c8f24f37183f1d
- SHA1 49efdc29f65fc8263c196338552c7009fc96c5de
- SHA512 c9d1017b274ceb1b4ee624cf7e628787c32a727c64f715fbce1f1ae929d9114f8fe1291e34583cec615619b0128c01206b07efc878e7a5c57b792453f73fd0da
- SSDEEP 98304:wynfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:wYD3C1XXfzH+4cLHU5PM/Mnt+YGlq
- TLSH T1906622A2751AFF41DDF406BCE970CA490925CF3782270C686929356A7BF7E1202E9D4F
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
e047394a41c0b78705eac1f84562a953cc3f8361
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:08:77:5f:00:00:00:00:00:4a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 19, 2010 - Oct 19, 2011
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:04:b3:f5:00:00:00:00:00:0d
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2011
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017