Watch Dogs Crash Fix.rar
- SHA256 d5e7c12f9d0fde5e3642f5afc8f1ea1fc9747d862ca017d6a7f2d4357079ce28
Password
123
Overview
overview
3Static
static
3Watch Dogs...ix.rar
windows10-2004-x64
1Watch Dogs...ix.rar
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...ch.ini
windows10-2004-x64
1Watch Dogs...ch.ini
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...se.dll
windows10-2004-x64
1Watch Dogs...se.dll
windows11-ltsc_2024-x64
1Watch Dogs...ol.dll
windows10-2004-x64
1Watch Dogs...ol.dll
windows11-ltsc_2024-x64
1Watch Dogs...pi.ini
windows10-2004-x64
1Watch Dogs...pi.ini
windows11-ltsc_2024-x64
1Watch Dogs...es.ini
windows10-2004-x64
1Watch Dogs...es.ini
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...64.dll
windows10-2004-x64
1Watch Dogs...64.dll
windows11-ltsc_2024-x64
1Watch Dogs...gs.exe
windows10-2004-x64
1Watch Dogs...gs.exe
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Watch Dogs Crash Fix.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Watch Dogs Crash Fix.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Watch Dogs Crash Fix/bin/Disrupt_b64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Watch Dogs Crash Fix/bin/Disrupt_b64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Watch Dogs Crash Fix/bin/GFSDK_SSAO.win64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Watch Dogs Crash Fix/bin/GFSDK_SSAO.win64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Watch Dogs Crash Fix/bin/GFSDK_TXAA.win64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Watch Dogs Crash Fix/bin/GFSDK_TXAA.win64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Watch Dogs Crash Fix/bin/UplayPatch.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Watch Dogs Crash Fix/bin/UplayPatch.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Watch Dogs Crash Fix/bin/UplayPatch_x64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Watch Dogs Crash Fix/bin/UplayPatch_x64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Watch Dogs Crash Fix/bin/bink2w64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Watch Dogs Crash Fix/bin/bink2w64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Watch Dogs Crash Fix/bin/gpudatabase.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Watch Dogs Crash Fix/bin/gpudatabase.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Watch Dogs Crash Fix/bin/lol.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Watch Dogs Crash Fix/bin/lol.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Watch Dogs Crash Fix/bin/orbit_api.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Watch Dogs Crash Fix/bin/orbit_api.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Watch Dogs Crash Fix/bin/saves.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Watch Dogs Crash Fix/bin/saves.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Watch Dogs Crash Fix/bin/systemdetection64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Watch Dogs Crash Fix/bin/systemdetection64.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Watch Dogs Crash Fix/bin/uplay_r164.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Watch Dogs Crash Fix/bin/uplay_r164.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Watch Dogs Crash Fix/bin/uplay_r1_loader64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Watch Dogs Crash Fix/bin/uplay_r1_loader64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Watch Dogs Crash Fix/bin/watch_dogs.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Watch Dogs Crash Fix/bin/watch_dogs.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Watch Dogs Crash Fix.rar
- Size 43.2MB
- Sample260809-3rw5la1tes
- SHA256 d5e7c12f9d0fde5e3642f5afc8f1ea1fc9747d862ca017d6a7f2d4357079ce28
- MD5 b9cfebbc638ca1c87091058c64e0a893
- SHA1 9b67fed3d975190d7b803f201f29fa876a1446d6
- SHA512 81edfbe7bf4f6eb2d9944e37e79581d13a1e6be0475404c3b97aab9ea954ec007921ac042ad26c41b99865391b44c9eba8026285363e4009421ceb62f4c2ecf5
- SSDEEP 786432:1gwmFUkE9MVqWLZSYMPtgqy65X+9YgRTcaVc9Zo9Z9uVGseeg1GKk0fSuv8Y6c:GwmFUkaMVqWLIJtgqyaEtJHVcZo9ZsGl
- TLSH T1A3A7338F772B91332019CEAE73532C660B88B640D6350F7E1DE6749876ED2E42DE2C65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Watch Dogs Crash Fix/bin/UplayPatch_x64.dll unpack001/Watch Dogs Crash Fix/bin/uplay_r164.dll unpack001/Watch Dogs Crash Fix/bin/uplay_r1_loader64.dll - Untrusted Codesign Signers 8 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Watch Dogs Crash Fix/bin/Disrupt_b64.dll unpack001/Watch Dogs Crash Fix/bin/GFSDK_SSAO.win64.dll unpack001/Watch Dogs Crash Fix/bin/GFSDK_TXAA.win64.dll unpack001/Watch Dogs Crash Fix/bin/bink2w64.dll unpack001/Watch Dogs Crash Fix/bin/gpudatabase.dll unpack001/Watch Dogs Crash Fix/bin/lol.dll unpack001/Watch Dogs Crash Fix/bin/systemdetection64.dll unpack001/Watch Dogs Crash Fix/bin/watch_dogs.exe
File Explorer
-
Watch Dogs Crash Fix.rar.rar 43.2MB
-
Watch Dogs Crash Fix/bin/Disrupt_b64.dll.dll 43.5MB
-
Watch Dogs Crash Fix/bin/GFSDK_SSAO.win64.dll.dll 136KB
-
Watch Dogs Crash Fix/bin/GFSDK_TXAA.win64.dll.dll 98KB
-
Watch Dogs Crash Fix/bin/UplayPatch.ini38B
-
Watch Dogs Crash Fix/bin/UplayPatch_x64.dll.dll 79KB
-
Watch Dogs Crash Fix/bin/bink2w64.dll.dll 427KB
-
Watch Dogs Crash Fix/bin/gpudatabase.dll.dll 59KB
-
Watch Dogs Crash Fix/bin/lol.dll.dll 515KB
-
Watch Dogs Crash Fix/bin/orbit_api.ini907B
-
Watch Dogs Crash Fix/bin/saves.ini29B
-
Watch Dogs Crash Fix/bin/systemdetection64.dll.dll 291KB
-
Watch Dogs Crash Fix/bin/uplay_r164.dll.dll 817KB
-
Watch Dogs Crash Fix/bin/uplay_r1_loader64.dll.dll 72KB
-
Watch Dogs Crash Fix/bin/watch_dogs.exe.exe 134KB
Watch Dogs Crash Fix/bin/Disrupt_b64.dll
- IMPHASH a9e98d2cb9370a1533fe35c18ef001e9
- SHA256 e1505f9f7f130bacd449eb74d96c30619cdf0fc10f1cad97e01e4397e688a541
- MD5 21253702fa2ef0543b45905426d74375
- SHA1 c9093d13e5d63c0b71f46f1e295433f9818fc3ad
- SHA512 03a13d6572f66c0a86a2d9cab71606ba8e2326038dcebfa6ee51ad840b23b1e721de43cf13abb7fd077ba8283393f2ce724796ed8737fb1040ab942b7dad16ec
- SSDEEP 786432:SAe5WEMRwTmxh57MR/ljnzOHHjoHYWQzL3mPnzSJSXlPAMShr40mNj:xitM4mx37MRNjnmjo4zHYzSgmjhmN
- TLSH T1F4A7331DE663E7F1C65AE218E83CAD8D78D12C38E05587DDDB2B0920CF4A36297E8745
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
61:18:08:e1:73:2d:fa:1d:bb:b6:b5:83:0b:68:41:c8
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
1b:bb:64:37:aa:ba:4f:1b:33:a5:10:ef:cf:35:39:b5
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Revocation Status
Not revoked
Timespan
Jul 11, 2014 - Jul 16, 2015
Minor OS version
2
Major OS version
5
Entry point
130583294
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\projects\mrc-dlc-pc-package\bin\Disrupt_b64.pdb
ws2_32
getsockopt
uplay_r1_loader64
UPLAY_SAVE_Read
kernel32
GetVersionExA
GetVersion
LockResource
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MapVirtualKeyExA
gdi32
ExtEscape
advapi32
RegGetValueA
ole32
CoTaskMemAlloc
oleaut32
SysFreeString
gfsdk_ssao.win64
?GFSDK_SSAO_SetInputData@@YA?AW4GFSDK_SSAO_Status@@PEAUGFSDK_SSAO_Renderer@@PEBUGFSDK_SSAO_InputDepthData@@PEBUGFSDK_SSAO_InputNormalData@@@Z
gfsdk_txaa.win64
TxaaResolveDX
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
shlwapi
PathCanonicalizeW
gdiplus
GdiplusShutdown
crypt32
CryptMsgGetParam
wintrust
WinVerifyTrust
msvcr100
__C_specific_handler
comctl32
ord411
dinput8
DirectInput8Create
dbghelp
ImageNtHeader
psapi
GetModuleBaseNameA
xinput1_3
ord4
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory1
d3dcompiler_43
D3DCompile
winmm
timeGetTime
bink2w64
BinkDoFrame
shell32
SHGetFolderPathW
iphlpapi
GetBestInterfaceEx
��HNܢQa�3�2�|y�K{��p���>N\ &�� ՁTd�D]�������p'�//U�T&�j0�ڦ��^�K���P�Q �]�o�;>�5@��kU��h�� r����
NZn�e?^.���t��$���#F$Pc�
G���^;�� ��lz2��� �#H�Kpq4[�}m֠ ��6>B/�l%�Z�c��*ٹA̡��f������j٬ �2����/���5.�I.H�I~� i��
� �� ���uX&2l����s�'��k�^�����E �xO�$B��qس�O� %�n!lJ��1k]yٷX1����_�v�@G��� �:�`. R �ãXuJ/�A���l�5�>oE���٩=H�X�i<�?��\\�aMw�� :!�g�aB���W�T �%�1�%�yw ����l8����S&Y���ڡeʳ����gw�·1IQ��� ԐA�4'�} %^J���?���m�� ��hj3����+���t�o(��i2#2�&��T
� �������u�J��'*h��&�5�s��*fP�`�'B�djj�;[����m
��}�\S����W5�[.��9K�w����_f5Ʉ;�/ܧ��]�&���Ɲ)�;d� �p�2d�L`�|�9����M��{?��Sp0K�F:<��� [�h �4g�C�3w
f��o��{�� 4*�+����ϳ�e ����ZB/�j'��9�� />�3����ן�i/>^~�����'=��U��_bׅ�g� �� �,'X����]r|ez~�>�� �� ��GJm+�[� c��Jj�G O����\�*.��!����5;͘L�I�FH%h6k�3|�1��LԦR ,����};C� ԍknj���]�+��6B������cM Z��-db6�gAG�m����:5JL7�����a�8�R(L ;^��I��2@�
�t�,�蝔C����LSE�J��&1S`�'��-��{� ��W�U ���˯5��L�2-���'x,�]�^� ���/rOf�q �,�:_%L0�DR;���]�1*Y�1~S��C"O���J~����4��ωم�G9R���*KA��P�1���*r,�|�zC�M9���ƸP�(�H��~N�z�t�=ɥ4�y[�f��3���-���W�"������,C��j��
�o��蚛9�/)8�f�/�^��������h�gKN@����η�pE�Sɔ$S��V �#%|�*ʹ���P u�Z5�g�co� p�ܻ��˵�g����qm��cN����� ����zR*h�RJ�J"ṉ��sX�24Y �^Ĝ���w!淅��]
��8`z�)X��zX� �V�����_�� $����V���=m_&N��� ���ٙz���.��e�}z/�����5���Hg}���Sf���tJ���x�Tb��-9��
]i�c�0<�_���j"s������ �/� �9b Nr��_Ǭ4�H�'��H��C�c�3N�R���L ��q@h:�*�tG߷gȕ ��g��S��'�#
�ꀗ
�teM����� ¦�;���pE�g���=����x�
�Hj� ���i.#[�?�r�Bԩ_��⪧E������) u�⡎���w�{X�ī�� \+v��7|����ڪ���`����-߬D�_(p� I'����OH��_Q7of�R�6��;>�4J�#c�����k�d� ⫢�-��2�vZ�v�hk�0��k�V�(�=Zc�/�<� �9/�a�L��0F@�}�;��?+��˼xj�����8���H�K��B5J3Ƭ�:�����/o��#�~��r�h����)�1>�z�O�41 {�$:��J"�I����r_�ͦS+���`=g�\n�³�섈e���>d�:�|Ln}?p}�R��1�3���έ�6��迣��C0/=�Q;�|��� *@?��ğ8j���h��>(崺)���
r���14��vx�d�H�z<9 ֆ�D�@o%�R���4�R��EIlf%%�y��/����!C�T?pL��OJ����7�;�%Կ�ia�a&��Ob��X����
� ��!���O���v�[Lc_�`ê ���@k����Je�P�S{8��eE� їw� 2�F?�S��M6�@:�lJ�`}~b+��3f���Iw��SA�R�~L�ۡs
��_E~&3� �|Oa1�J�`Xo%��pTYpƽ��o��g�h�\��+���)]�<\MV�?t��T8����c��Q�X���w��'Zu��'{�݊�(�q
[2r������S.��]@ߚ��X.b���̞褋���ϑE[���7(��|~xe���I��*�~ �{������ a��t����h�M�$\�4��ȅ}�ͤx��n��-�@6 �D̕z��@�&JC8�q1R.�?��5�ǩ�7��Ӑ���3 {�ދC�� �橁�p�|��\���i`� �|�J!���֗�W�x=.R6��/�o��t
O�3�2�u��S���}���}s�1�UO�2
��U�G��$'
��T,]/=5����c���{EF��m>g�1p��t:�ʵT�n-|}�\����)�B1��ż�e����q��R���Vf�(u�{���/��ץ����)�%S�)tV��&����l��e)�=^���N�:m�^��K��Dm1E��*)� дT�v΅
�!�� 1���)�d ]����gp�R��TgZ��~���yA��ʓ��D���{ ��)���CΆrMv&�7CE)�Xs?�
����~-�Ryt� Y��sK�yN�&��ϲ"t������f
��Ж|y�Y�7J�7��*Ն���� x]�X�K6w�� 5O �'�o�H�`� ��QY�AA%wdVğ�G�6l�:��)5��#A��01 ����=|L �)���e3�"V���M9���(�:���*ϑ�=�cc�@�Te[���O�{�H��e���I��T �̽�i���`r�~�"�u�d�nN�)9�ݽm�\ /X|т��a�~�����������J�p���}i�Q7הvR\�2 Q�Qr�4��t�k�φ����5�N^Qr�fGv�!�-� �|0
??0_Mutex@std@@QEAA@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z
?RunGame@@YA_NPEAUHINSTANCE__@@PEBDI@Z
CloseDuniaEngine
EntryPoint
GetCRCFromString
GetExePath
GetInstructionPointer
InitDuniaEngine
PrintToConsole
RunDuniaEngine
ShutdownDuniaEngine
SwitchContext
TickDuniaEngine
Name
.text
Size
Virtual Size
43.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
8.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
7.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
393B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.UBX0
Size
Virtual Size
19.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.UBX1
Size
43.5MB
Virtual Size
43.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=9, id=152, version=20115,
count=16, id=171, productName=VS2010 build 30319, version=30319,
count=3, id=135, version=30729,
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=508, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=10, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=28, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=173, version=30319,
count=6, id=156, version=21202,
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=701, id=1, productName=Unmarked objects,
count=1396, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Watch Dogs Crash Fix/bin/GFSDK_SSAO.win64.dll
- IMPHASH c00b16db9291ffcbe441c9a139a7d558
- SHA256 39e7ca915ebf2c6c6ded07a949bca079eb21235b1116677a9ca94346553319ee
- MD5 789891cf1d86d9144328f366176d56a0
- SHA1 32af4a770b2448314c0d63cf94645bb9afa7e517
- SHA512 52616ba2a329411d335b4313cc4f05d32a98f1a9e22263a3a274ea8e93717763d3bbff99b84fd146192de5f740250cbfaa256865f4606f9758ed2a6509503545
- SSDEEP 3072:IVxBnqZ+heOVJFTJ9biLGEynYJnrFv/S3z2/8:0BnqZ+heOVXTXbiLGPibE
- TLSH T1B5D3B30A6351AE76D19ED736C8C35B60B732B0911BF2438B478D01260EB73D99C772B9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
54:73:5d:e5:54:a3:e7:aa:fd:80:e0:a1:6d:60:1d:ba
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
2c:b0:08:60:91:4e:c0:97:13:62:b8:fd:4c:74:fe:0d
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 16, 2013 - Jul 16, 2014
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
2
Major OS version
5
Entry point
20076
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException
HeapSize
?GFSDK_SSAO_GetAllocatedVideoMemoryBytes@@YA?AW4GFSDK_SSAO_Status@@PEAUGFSDK_SSAO_Renderer@@PEAI@Z
?GFSDK_SSAO_GetBuildString@@YAPEBDXZ
?GFSDK_SSAO_Initialize@@YA?AW4GFSDK_SSAO_Status@@PEAUID3D11Device@@PEAPEAUGFSDK_SSAO_Renderer@@I@Z
?GFSDK_SSAO_ReleaseResources@@YA?AW4GFSDK_SSAO_Status@@PEAUGFSDK_SSAO_Renderer@@@Z
?GFSDK_SSAO_RenderAO@@YA?AW4GFSDK_SSAO_Status@@PEAUGFSDK_SSAO_Renderer@@PEAUID3D11DeviceContext@@PEAUID3D11RenderTargetView@@PEBUGFSDK_SSAO_Parameters@@W4GFSDK_SSAO_RenderMask@@@Z
?GFSDK_SSAO_SetInputData@@YA?AW4GFSDK_SSAO_Status@@PEAUGFSDK_SSAO_Renderer@@PEBUGFSDK_SSAO_InputDepthData@@PEBUGFSDK_SSAO_InputNormalData@@@Z
Name
.text
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=79, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=12, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=67, id=1, productName=Unmarked objects,
count=21, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Watch Dogs Crash Fix/bin/GFSDK_TXAA.win64.dll
- IMPHASH 640f87b68fd9c6d4e28131d75044a54a
- SHA256 5597b44d67f0a3010bd044ddf1b0e5c66d10cacc3845904bf68c5cc5662b5b8d
- MD5 04cd98723d6e7e8f3796972dec0c86f5
- SHA1 40f2c84f377b62a6bc464ed6735ce64d2c461086
- SHA512 42497f59816d95f31e6e3a566957ab703ed0e98b805559ff76e725a9c8e9459bde058c43e87498136f8cf6ab4aa6b43678e2b580e8f0c5762e124753b27a6b72
- SSDEEP 1536:4qd3QNycNR+79ElH3TtKpEw7rM9ptg1ZHME+FCo6PAZIqmwJz7UP:RdGy+lXTIKw7rypaZHMEFPaIqmwz7UP
- TLSH T17FA34B4B33A4057AC45EA378C9E31B56E772B48107FA834F569884650FB73C0AE7B329
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
ea:93:76:f5:ff:ac:d7:e4:a2:e2:3a:41:02:ba:f7:f7
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
2c:b0:08:60:91:4e:c0:97:13:62:b8:fd:4c:74:fe:0d
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 16, 2013 - Jul 16, 2014
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
2
Major OS version
5
Entry point
18508
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
opengl32
glGenTextures
glTexImage2D
glTexParameteri
glClearColor
glClear
glClearDepth
glReadBuffer
glReadPixels
glDeleteTextures
glBindTexture
glViewport
glPolygonMode
glDisable
glDrawArrays
wglGetProcAddress
kernel32
SetHandleCount
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
WriteFile
LoadLibraryW
HeapReAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
TxaaCloseDX
TxaaCloseGL
TxaaOpenDX
TxaaOpenGL
TxaaResolveDX
TxaaResolveGL
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
790B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=81, id=1, productName=Unmarked objects,
count=21, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Watch Dogs Crash Fix/bin/UplayPatch.ini
- SHA256 a5c6ddeedfdb889e9aa422896ade30893b75610f1c30ca4ff1cb03e761351a4d
- MD5 5c63d65f9ad6a08eac649c0483ac3330
- SHA1 a713fec819b87c226eba67ac0cfeb03ca6a6927c
- SHA512 4c180f05239913f3d431c8d969bf36162823bc9f1d8e1415b4becbf0dc0431025a113f129fae062bc3cd9dadf0d8e522e28a2b7b0757607159c36eed454c86c7
- MD5 SHA1 SHA512
Watch Dogs Crash Fix/bin/UplayPatch_x64.dll
- IMPHASH 612057a2e6114f57b5620614dad52a72
- SHA256 ef15e07727247349c2314221d3c184f781ba972d377e53da7583b80bb4569daa
- MD5 d2b79f3833bc8483a9dc3d582b0b33c9
- SHA1 5d78d76b60494c6a2080544dd9697818f79b661a
- SHA512 5de841bdae8fb82309a5b5a15cbb330c947471b48e2322c5811781960e31eee1632b61ce646e2a867012cef34a58745db715408dd0cebb41779a9f8e31126c65
- SSDEEP 1536:iTsT7IUqnK9z/hZIwtxfSKDBFgZuHR7iel8M2IFOkp3IursnoNH4jKISHYLbcZTZ:iTi7IUqKV/hZIwj7DBaotpFFOkp3Iurg
- TLSH T14B83288B73A504BBE0769B3989A34D01D77AF94606759B4E0794019E5F733D28E38F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
2
Major OS version
5
Entry point
4544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
SetEnvironmentVariableA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=225, version=20806,
count=96, id=224, version=20806,
count=8, id=223, version=20806,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=79, id=1, productName=Unmarked objects,
count=1, id=229, version=21005,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 build 21005, version=21005,
Watch Dogs Crash Fix/bin/bink2w64.dll
- IMPHASH 159ae086d76052cfd6ef48578c086182
- SHA256 252f6ee90b5f2e65213286f353655bd0fb7d7a71de1af88d79bbfbd8f67b9b93
- MD5 74428a6808fe2c1ee3d3316a7a65bc2e
- SHA1 9259ac152085b89471729a0b6ed1f002f5c4df08
- SHA512 8e8fd26574259bd5667a292a6896df25e175350ffecf8c9ccbec0a4da879ea5de664739f74611eadf65a7edd15b7680bc9bdbec418cf17548a9d178eed2f3afa
- SSDEEP 6144:t/kJTKrVEzHoWydfXlLoj9tvwSMHLJX/jI3/EQslhfXX67N7RaSIQY3YQmp5GEXR:twK8oWyNly9tYrAM/5mjXGq+R2
- TLSH T16E94AF1AB6B280F0E467553499BAB617E675380D0B6817DB4682E7746F33BC04B3BF42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
73:25:1e:72:46:4d:7f:85:11:d8:d6:91:ca:c6:90:99
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
2c:b0:08:60:91:4e:c0:97:13:62:b8:fd:4c:74:fe:0d
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 16, 2013 - Jul 16, 2014
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
2
Major OS version
5
Entry point
15048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\devel\projects\bink\build\bink2w64.pdb
user32
GetWindow
ChangeDisplaySettingsA
IsWindowVisible
GetSystemMetrics
GetCursorPos
DefWindowProcA
ReleaseDC
PeekMessageA
CreateWindowExA
UnregisterClassA
ShowCursor
GetDC
BeginPaint
GetClassLongPtrA
GetClientRect
IsIconic
GetWindowLongPtrA
GetTopWindow
GetWindowLongA
GetActiveWindow
GetWindowThreadProcessId
RegisterClassA
EndPaint
ClientToScreen
DestroyWindow
SetCursor
ScreenToClient
GetWindowRect
gdi32
CreateDIBSection
GetDeviceCaps
StretchBlt
GetDIBits
SetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetStretchBltMode
GetPixel
DeleteDC
kernel32
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
WriteFile
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
LocalAlloc
DeleteCriticalSection
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sleep
GetSystemInfo
GetCurrentProcessId
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetEnvironmentVariableA
QueryPerformanceFrequency
CreateFileA
SetFilePointer
ReadFile
GetLastError
CloseHandle
HeapAlloc
HeapFree
HeapCreate
TlsGetValue
SetUnhandledExceptionFilter
WaitForSingleObject
GetCurrentThread
InitializeCriticalSection
TlsSetValue
LeaveCriticalSection
CreateSemaphoreA
SetThreadPriority
ReleaseSemaphore
RaiseException
EnterCriticalSection
GetThreadPriority
CreateMutexA
GetCurrentThreadId
SetThreadAffinityMask
ReleaseMutex
TlsAlloc
ResumeThread
CreateThread
RtlUnwindEx
HeapDestroy
HeapSetInformation
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetModuleHandleW
FlsAlloc
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
winmm
waveOutPrepareHeader
waveOutOpen
waveOutUnprepareHeader
waveOutSetVolume
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutClose
timeGetTime
timeEndPeriod
timeBeginPeriod
ole32
CoInitializeEx
CoCreateInstance
BinkBufferBlit
BinkBufferCheckWinPos
BinkBufferClear
BinkBufferClose
BinkBufferGetDescription
BinkBufferGetError
BinkBufferLock
BinkBufferOpen
BinkBufferSetDirectDraw
BinkBufferSetHWND
BinkBufferSetOffset
BinkBufferSetResolution
BinkBufferSetScale
BinkBufferUnlock
BinkCheckCursor
BinkClose
BinkCloseTrack
BinkControlBackgroundIO
BinkControlPlatformFeatures
BinkCopyToBuffer
BinkCopyToBufferRect
BinkDDSurfaceType
BinkDX8SurfaceType
BinkDX9SurfaceType
BinkDoFrame
BinkDoFrameAsync
BinkDoFrameAsyncWait
BinkDoFramePlane
BinkFreeGlobals
BinkGetError
BinkGetFrameBuffersInfo
BinkGetKeyFrame
BinkGetPalette
BinkGetPlatformInfo
BinkGetRealtime
BinkGetRects
BinkGetSummary
BinkGetTrackData
BinkGetTrackID
BinkGetTrackMaxSize
BinkGetTrackType
BinkGoto
BinkIsSoftwareCursor
BinkLogoAddress
BinkNextFrame
BinkOpen
BinkOpenDirectSound
BinkOpenMiles
BinkOpenTrack
BinkOpenWaveOut
BinkOpenWithOptions
BinkOpenXAudio2
BinkPause
BinkRegisterFrameBuffers
BinkRequestStopAsyncThread
BinkRestoreCursor
BinkService
BinkSetError
BinkSetFileOffset
BinkSetFrameRate
BinkSetIO
BinkSetIOSize
BinkSetMemory
BinkSetPan
BinkSetSimulate
BinkSetSoundOnOff
BinkSetSoundSystem
BinkSetSoundTrack
BinkSetSpeakerVolumes
BinkSetVideoOnOff
BinkSetVolume
BinkSetWillLoop
BinkShouldSkip
BinkStartAsyncThread
BinkUseTelemetry
BinkUseTmLite
BinkWait
BinkWaitStopAsyncThread
RADTimerRead
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
BINK16
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
BINK32
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
BINKP8
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
RADCODE
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
BINK
Size
227KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
BINKBSS
Size
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
BINKDATA
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BINKCONS
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
RADDATA
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
RADCONST
Size
512B
Virtual Size
167B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=132, productName=VS2008 build 21022, version=21022,
count=27, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=88, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=179, id=1, productName=Unmarked objects,
count=17, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=137, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Watch Dogs Crash Fix/bin/gpudatabase.dll
- SHA256 0ce0c0e38eab48dceb510340ff7fc494a2cb9ebde26388a2cd2c6d3e95325574
- MD5 44a2254ffbbdca60477297b068e4bc62
- SHA1 a9d8040c2540ad0c4e8ff3d18d104679d74ea1bb
- SHA512 6761bcadd8cbbbfa57d6b41fcaeaff3e2a88b881be17b9229ae6a11aa5ea0710a472942de6d3811563107d6d99d4563867bce52f11f646dd692bf36affbcc0f0
- SSDEEP 768:Z7OnhWdr1/escV/K+1SCrI2hXzAZAR0cU/LRKGi8O/nnafhXbk:Z7Ohk5vBk
- TLSH T10D53017486FC8199F2F3E37857FA609BEA667482F535500E82DA03461962F411EA373F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
e7:de:6c:5a:2d:36:05:e8:03:52:db:36:39:90:b8:d6
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
2c:b0:08:60:91:4e:c0:97:13:62:b8:fd:4c:74:fe:0d
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 16, 2013 - Jul 16, 2014
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
1
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Perforce\tg\framework\team\framework\gear\private\tools\systemdetection\Release\gpudatabase.pdb
Name
.rdata
Size
512B
Virtual Size
151B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Watch Dogs Crash Fix/bin/lol.dll
- IMPHASH 1b44e2a922ee0cb708dee89af9312f9d
- SHA256 4325ffde93c453f68e5b13cfd225d90359fcf73331c65f23894128cea6dcd116
- MD5 01734cba8fb0849fb285cb18ae90994c
- SHA1 75708c6215304376d497498a18ac467b58dfe168
- SHA512 d37e2407407ad976bcc8c96f1dd223dc396febdc5790fb30bfefee7191aff6bef5f50f8d4848e3c02797c88586a4a1bca85e6883f35b0922c65704d7f2e4ca6b
- SSDEEP 6144:4YfSzERVtJB6KXm0TWtpU8A0QNxcUPKhNa9OuiMp39aPXc2IF2wz65v8mJdVv9:vIE7jAKXmH8NxcXU/p3PF2uil9
- TLSH T1D7B45C5A77A847B5D037D17CC9D34B46E6B1344A4B2197CF02D483AE2F23BE5863A362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
b2:fd:66:1d:26:96:f6:3f:ef:a1:ea:ac:09:69:12:2b:16:76:df:11
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Ubisoft Entertainment Sweden AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Ubisoft Entertainment Sweden AB,L=Malmo,ST=.,C=SE
Chains
Apr 17, 2014
CN=Ubisoft Entertainment Sweden AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Ubisoft Entertainment Sweden AB,L=Malmo,ST=.,C=SE
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Ubisoft Entertainment Sweden AB,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Ubisoft Entertainment Sweden AB,L=Malmo,ST=.,C=SE
Serial Number
77:17:2f:38:82:85:42:6f:99:60:0d:5d:d2:84:07
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2013 - Feb 22, 2016
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
85200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Jenkins_BUILDS\builds\uplay-pc-client-release_baldur-installer-live\working_directory\RelWithDebInfo\uplay_r1_loader64.pdb
kernel32
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RtlLookupFunctionEntry
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetLastError
HeapFree
RaiseException
RtlPcToFileHeader
LCMapStringW
GetCPInfo
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
WideCharToMultiByte
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
FatalAppExitA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteFile
GetModuleFileNameW
SetConsoleCtrlHandler
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
FlushFileBuffers
LoadLibraryW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetFileAttributesW
CreateDirectoryW
SetFileAttributesW
GetFileSizeEx
CopyFileW
DeleteFileW
GetFileTime
SetFileTime
MoveFileExW
SetEndOfFile
SetFilePointerEx
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
CreateMutexW
TryEnterCriticalSection
GetFullPathNameW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDateFormatW
GetTimeFormatW
GetDriveTypeW
GetFullPathNameA
ReadFile
GetTimeZoneInformation
CreateFileA
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
UPLAY_ACH_EarnAchievement
UPLAY_ACH_GetAchievementImage
UPLAY_ACH_GetAchievements
UPLAY_ACH_Write
UPLAY_AVATAR_Get
UPLAY_FRIENDS_AddToBlackList
UPLAY_FRIENDS_DisableFriendMenuItem
UPLAY_FRIENDS_EnableFriendMenuItem
UPLAY_FRIENDS_GetFriendList
UPLAY_FRIENDS_Init
UPLAY_FRIENDS_InviteToGame
UPLAY_FRIENDS_IsBlackListed
UPLAY_FRIENDS_IsFriend
UPLAY_FRIENDS_RequestFriendship
UPLAY_FRIENDS_ShowFriendSelectionUI
UPLAY_GetLastError
UPLAY_GetNextEvent
UPLAY_GetOverlappedOperationResult
UPLAY_HasOverlappedOperationCompleted
UPLAY_INSTALLER_AreChunksInstalled
UPLAY_INSTALLER_GetChunkIdsFromTag
UPLAY_INSTALLER_GetLanguageUtf8
UPLAY_INSTALLER_Init
UPLAY_INSTALLER_ReleaseChunkIdList
UPLAY_INSTALLER_UpdateInstallOrder
UPLAY_METADATA_ClearContinuousTag
UPLAY_METADATA_SetContinuousTag
UPLAY_METADATA_SetSingleEventTag
UPLAY_OVERLAY_SetShopUrl
UPLAY_OVERLAY_Show
UPLAY_PARTY_DisablePartyMemberMenuItem
UPLAY_PARTY_EnablePartyMemberMenuItem
UPLAY_PARTY_GetFullMemberList
UPLAY_PARTY_GetId
UPLAY_PARTY_GetInGameMemberList
UPLAY_PARTY_Init
UPLAY_PARTY_InvitePartyToGame
UPLAY_PARTY_InviteToParty
UPLAY_PARTY_IsInParty
UPLAY_PARTY_IsPartyLeader
UPLAY_PARTY_PromoteToLeader
UPLAY_PARTY_RespondToGameInvite
UPLAY_PARTY_SetGuest
UPLAY_PARTY_SetUserData
UPLAY_PARTY_ShowGameInviteOverlayUI
UPLAY_PeekNextEvent
UPLAY_Quit
UPLAY_Release
UPLAY_SAVE_Close
UPLAY_SAVE_GetSavegames
UPLAY_SAVE_Open
UPLAY_SAVE_Read
UPLAY_SAVE_Remove
UPLAY_SAVE_SetName
UPLAY_SAVE_Write
UPLAY_Startup
UPLAY_USER_ClearGameSession
UPLAY_USER_GetAccountIdUtf8
UPLAY_USER_GetCdKeyUtf8
UPLAY_USER_GetCdKeys
UPLAY_USER_GetEmailUtf8
UPLAY_USER_GetTicketUtf8
UPLAY_USER_GetUsernameUtf8
UPLAY_USER_IsConnected
UPLAY_USER_IsInOfflineMode
UPLAY_USER_IsOwned
UPLAY_USER_SetGameSession
UPLAY_Update
UPLAY_WIN_GetRewards
UPLAY_WIN_RefreshActions
Name
.text
Size
374KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=10, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=156, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=115, id=1, productName=Unmarked objects,
count=81, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Watch Dogs Crash Fix/bin/orbit_api.ini
- SHA256 02a20298bdc0ebe19879666fc275c1c478e6fe1fd34376cabbb9de33648c9aa4
- MD5 e79d94c4cb80b3c78d50349ae13c6916
- SHA1 a06fe8302109185e8a05d817a9495a68de2fdbf4
- SHA512 8d9c69f6ad87770d76b4e8ab948c8bfdf2dd0127a59082d6603094eb6c2b9ef20e432dff5d9e5d3c457d0f6ea154edaf5727724f514c9fd91a4455c1a66c07f7
- TLSH T1B0116D7207C13D40331370F682067A4113B6E16D3E3BCC1A405F8595F463616E9DE542
- MD5 SHA1 SHA512 TLSH
Watch Dogs Crash Fix/bin/saves.ini
- SHA256 6d251583b95012011fecefc0e30fea791460dafd2fd7f42223bcd0d9d2b54db5
- MD5 07f05582ee552b9c97dc1360ae93af7d
- SHA1 68c3bc5fbe9d567f99a6268900d9a15f7ec952ee
- SHA512 1336a9466b0aee75faa8d5c2c0d194c8cefa2c5abea7a3ed0b91cb90d2baea8f589b7556d6c42b6980c41f39e7ece064c62ee768f2310039b0a1300cd8b1609a
- MD5 SHA1 SHA512
Watch Dogs Crash Fix/bin/systemdetection64.dll
- IMPHASH 1381b6a572e521e380b4e6bd8b480ac3
- SHA256 5150494216d16626cda98a84240ff1b2d29ec8d093c3516bc9e4c76119ea4138
- MD5 a3eb1bb106aa2675f85f6b0dcb290ec6
- SHA1 6ac7428b5ab32c24bf03c1198b69b5fdefc2e3a7
- SHA512 c1147f131b3edb91869f04b0b30e8f327a424a79789b950c7cb6be8dfb25f158507a88eb7434fb6a9af03de7f9015b13359fede31c93f56bec4345eb277c7f9b
- SSDEEP 6144:rF8kAYT7wqmRIaXJVZgGd68TcwTd05uEgf71wmxVR4rL:B867QIaXfWNwf1wmx4rL
- TLSH T13D546B9A73644CB6E46B817D89978642E3F278561B61D3CF13B0466A2F33BE05D3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
123
PE Signature issue
Digest
40:62:13:cb:9d:f5:bb:1f:6b:9d:e1:97:ed:b7:b8:bc
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
2c:b0:08:60:91:4e:c0:97:13:62:b8:fd:4c:74:fe:0d
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 16, 2013 - Jul 16, 2014
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
2
Major OS version
5
Entry point
120132
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
w:\main\external\technology-group\framework\gear\private\tools\systemdetection\x64\Release\systemdetection64.pdb
kernel32
SetEvent
GetTickCount
GetCurrentThread
VirtualFree
TlsSetValue
WideCharToMultiByte
LoadLibraryW
InitializeCriticalSectionAndSpinCount
Sleep
CreateEventA
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadPriority
RaiseException
GetLogicalDriveStringsA
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
EnterCriticalSection
ResetEvent
SetThreadPriorityBoost
LoadLibraryA
OpenThread
GlobalMemoryStatusEx
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
WaitForSingleObject
GetProcessAffinityMask
VirtualProtect
QueryPerformanceFrequency
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
SetThreadAffinityMask
GetVersionExA
TlsAlloc
CloseHandle
GetVersion
DebugBreak
TlsFree
SuspendThread
ResumeThread
GetCurrentProcessorNumber
SwitchToThread
GetProcessHeap
SetEndOfFile
ReadFile
SetStdHandle
WriteConsoleW
HeapReAlloc
CreateFileW
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetUserDefaultLCID
GetCurrentProcess
QueryPerformanceCounter
FreeLibrary
VirtualQuery
GetLocaleInfoA
TlsGetValue
lstrlenA
GetEnvironmentVariableW
SetProcessAffinityMask
IsDebuggerPresent
SetFilePointer
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoW
GetFileType
SetHandleCount
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
HeapSetInformation
GetStringTypeW
IsValidLocale
LocalFree
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ExitThread
CreateThread
GetSystemTimeAsFileTime
FlsSetValue
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
FlsGetValue
FlsFree
FlsAlloc
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoW
EnumSystemLocalesA
user32
CreateWindowExA
RegisterClassA
GetSystemMetrics
GetDesktopWindow
DestroyWindow
GetWindowRect
LoadStringA
GetDC
UnregisterClassA
DefWindowProcA
ReleaseDC
gdi32
SetPixelFormat
ChoosePixelFormat
advapi32
CryptGenKey
RegCloseKey
CryptDecrypt
CryptDestroyKey
CryptEncrypt
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext
RegQueryValueExA
ole32
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
VariantClear
VariantInit
SysFreeString
d3d9
Direct3DCreate9
opengl32
wglMakeCurrent
wglDeleteContext
glGetString
wglCreateContext
GetHardwareInstance
GetScoreInstance
__resetECX
Name
.text
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=127, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=135, version=30729,
count=1, id=173, version=30319,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=161, id=1, productName=Unmarked objects,
count=12, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Watch Dogs Crash Fix/bin/uplay_r164.dll
- IMPHASH 3c05817d7d2a7284fb26c12c7f24b3c7
- SHA256 491b68fb110e9055860f2dfee47ba2f1e22aef6d20eb0c6712f4b816e71d8d22
- MD5 2356aeb2da386ad64cca2537ca907371
- SHA1 9e43a70e438c30fc30d5cd0075e662ad648c9b04
- SHA512 92874c1cfbc781a441c73c9cda35dab478085480081f743cb3e97005bc9c9cc98fb2ef3ef8bb198e1aa8ec847ffcff8ca7f7e9d6379015330454838660f11059
- SSDEEP 12288:/+mhnx/EEEvccsAAc+ZcUMjrg9XwqYN++lig07nZCUaeSa:GKnGUcsAAc+ZTGE90++mZCvA
- TLSH T1760528B7E1870D56DE420EB689B36D30466F2C36BE7D578922403A153FB33D31B26992
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
42332
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapAlloc
HeapFree
GetProcessHeap
HeapDestroy
HeapCreate
RaiseException
QueryPerformanceCounter
ReadFile
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
VirtualFree
GetFileAttributesA
CreateDirectoryA
GetLocalTime
FindResourceA
LoadResource
SetEvent
SizeofResource
CreateEventA
LockResource
WaitForMultipleObjects
CloseHandle
CreateThread
VirtualAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
EncodePointer
DecodePointer
RtlPcToFileHeader
SetLastError
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FileTimeToSystemTime
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
LoadLibraryW
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
WideCharToMultiByte
SystemTimeToFileTime
MultiByteToWideChar
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
InitializeCriticalSection
GetFileSizeEx
CreateFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
advapi32
CryptDestroyHash
CryptVerifySignatureA
CryptDestroyKey
CryptCreateHash
CryptImportKey
CryptAcquireContextA
CryptReleaseContext
CryptHashData
shell32
SHGetSpecialFolderPathA
winmm
waveOutWrite
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutClose
??0OrbitClient@orbitclient@mg@@QEAA@XZ
??0SavegameInfo@orbitclient@mg@@AEAA@XZ
??0SavegameReader@orbitclient@mg@@AEAA@XZ
??0SavegameWriter@orbitclient@mg@@AEAA@XZ
??1OrbitClient@orbitclient@mg@@QEAA@XZ
??1SavegameInfo@orbitclient@mg@@AEAA@XZ
??1SavegameReader@orbitclient@mg@@AEAA@XZ
??1SavegameWriter@orbitclient@mg@@AEAA@XZ
?CheckUpdate@OrbitClient@orbitclient@mg@@QEAAHXZ
?Close@SavegameReader@orbitclient@mg@@QEAAXXZ
?Close@SavegameWriter@orbitclient@mg@@QEAAX_N@Z
?GetInstallationErrorNum@OrbitClient@orbitclient@mg@@QEAAIXZ
?GetInstallationErrorString@OrbitClient@orbitclient@mg@@QEAAPEAGPEBD@Z
?GetLocText@OrbitClient@orbitclient@mg@@QEAAPEBGPEBGPEBD@Z
?GetLoginDetails@OrbitClient@orbitclient@mg@@QEAAXIPEAVIGetLoginDetailsListener@23@@Z
?GetName@SavegameInfo@orbitclient@mg@@QEAAPEBGXZ
?GetNetworkTraffic@OrbitClient@orbitclient@mg@@QEAAXIPEAVIGetNetworkTrafficListener@23@@Z
?GetOrbitServer@OrbitClient@orbitclient@mg@@QEAAXIPEAVIGetOrbitServerListener@23@II@Z
?GetProductId@SavegameInfo@orbitclient@mg@@QEAAIXZ
?GetRequestUniqueId@OrbitClient@orbitclient@mg@@QEAAIXZ
?GetSavegameId@SavegameInfo@orbitclient@mg@@QEAAIXZ
?GetSavegameList@OrbitClient@orbitclient@mg@@QEAAXIPEAVIGetSavegameListListener@23@I@Z
?GetSavegameReader@OrbitClient@orbitclient@mg@@QEAAXIPEAVIGetSavegameReaderListener@23@II@Z
?GetSavegameWriter@OrbitClient@orbitclient@mg@@QEAAXIPEAVIGetSavegameWriterListener@23@II_N@Z
?GetSize@SavegameInfo@orbitclient@mg@@QEAAIXZ
?Read@SavegameReader@orbitclient@mg@@QEAAXIPEAVISavegameReadListener@23@IPEAXI@Z
?RemoveSavegame@OrbitClient@orbitclient@mg@@QEAAXIPEAVIRemoveSavegameListener@23@II@Z
?SetName@SavegameWriter@orbitclient@mg@@QEAA_NPEAG@Z
?StartLauncher@OrbitClient@orbitclient@mg@@QEAA_NIIPEBD0@Z
?StartProcess@OrbitClient@orbitclient@mg@@QEAAXPEAG00@Z
?UPLAY_WIN_ActionTaken@@YAHPEAUUPLAY_WIN_Action_t@@PEAUUPLAY_Overlapped_t@@@Z
?Update@OrbitClient@orbitclient@mg@@QEAAXXZ
?Write@SavegameWriter@orbitclient@mg@@QEAAXIPEAVISavegameWriteListener@23@PEAXI@Z
SuperSecretAPIWithTagDontCopyThisOne
UPLAY_ACH_EarnAchievement
UPLAY_ACH_GetAchievementImage
UPLAY_ACH_GetAchievements
UPLAY_ACH_Write
UPLAY_AVATAR_Get
UPLAY_AVATAR_GetAvatarIdForCurrentUser
UPLAY_AVATAR_GetBitmap
UPLAY_ClearGameSession
UPLAY_FRIENDS_AddToBlackList
UPLAY_FRIENDS_DisableFriendMenuItem
UPLAY_FRIENDS_EnableFriendMenuItem
UPLAY_FRIENDS_GetFriendList
UPLAY_FRIENDS_Init
UPLAY_FRIENDS_InviteToGame
UPLAY_FRIENDS_IsBlackListed
UPLAY_FRIENDS_IsFriend
UPLAY_FRIENDS_RequestFriendship
UPLAY_FRIENDS_ShowFriendSelectionUI
UPLAY_GetInstallationError
UPLAY_GetLastError
UPLAY_GetNextEvent
UPLAY_GetOverlappedOperationResult
UPLAY_HasOverlappedOperationCompleted
UPLAY_INSTALLER_AreChunksInstalled
UPLAY_INSTALLER_GetChunkIdsFromTag
UPLAY_INSTALLER_GetLanguageUtf8
UPLAY_INSTALLER_Init
UPLAY_INSTALLER_ReleaseChunkIdList
UPLAY_INSTALLER_UpdateInstallOrder
UPLAY_Init
UPLAY_METADATA_ClearContinuousTag
UPLAY_METADATA_SetContinuousTag
UPLAY_METADATA_SetSingleEventTag
UPLAY_OVERLAY_SetShopUrl
UPLAY_OVERLAY_Show
UPLAY_OVERLAY_ShowFacebookAuthentication
UPLAY_PARTY_DisablePartyMemberMenuItem
UPLAY_PARTY_EnablePartyMemberMenuItem
UPLAY_PARTY_GetFullMemberList
UPLAY_PARTY_GetId
UPLAY_PARTY_GetInGameMemberList
UPLAY_PARTY_Init
UPLAY_PARTY_InvitePartyToGame
UPLAY_PARTY_InviteToParty
UPLAY_PARTY_IsInParty
UPLAY_PARTY_IsPartyLeader
UPLAY_PARTY_PromoteToLeader
UPLAY_PARTY_RespondToGameInvite
UPLAY_PARTY_SetGuest
UPLAY_PARTY_SetUserData
UPLAY_PARTY_ShowGameInviteOverlayUI
UPLAY_PRESENCE_SetRichPresenceLine
UPLAY_PRESENCE_SetRichPresencePropertyInt32
UPLAY_PRESENCE_SetRichPresencePropertyString
UPLAY_PeekNextEvent
UPLAY_Quit
UPLAY_Release
UPLAY_SAVE_Close
UPLAY_SAVE_GetSavegames
UPLAY_SAVE_Open
UPLAY_SAVE_Read
UPLAY_SAVE_Remove
UPLAY_SAVE_SetName
UPLAY_SAVE_Write
UPLAY_SetGameSession
UPLAY_SetLocale
UPLAY_StartPlatform
UPLAY_Startup
UPLAY_USER_ClearGameSession
UPLAY_USER_GetAccountId
UPLAY_USER_GetAccountIdUtf8
UPLAY_USER_GetCdKeyUtf8
UPLAY_USER_GetCdKeys
UPLAY_USER_GetCredentials
UPLAY_USER_GetEmail
UPLAY_USER_GetEmailUtf8
UPLAY_USER_GetPassword
UPLAY_USER_GetPasswordUtf8
UPLAY_USER_GetTicketUtf8
UPLAY_USER_GetUsername
UPLAY_USER_GetUsernameUtf8
UPLAY_USER_IsConnected
UPLAY_USER_IsInOfflineMode
UPLAY_USER_IsOwned
UPLAY_USER_SetGameSession
UPLAY_Update
UPLAY_WIN_GetActions
UPLAY_WIN_GetRewards
UPLAY_WIN_RefreshActions
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
311KB
Virtual Size
311KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.RLD0
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.RLD1
Size
373KB
Virtual Size
373KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=207, version=50929,
count=86, id=206, version=50929,
count=9, id=205, version=50929,
count=20, id=210, version=60610,
count=129, id=1, productName=Unmarked objects,
count=9, id=185, version=30716,
count=20, id=207, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=202, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=201, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD3 build 60610, version=60610,
Watch Dogs Crash Fix/bin/uplay_r1_loader64.dll
- IMPHASH 9c0057044059368de27895c57e9ef776
- SHA256 599f4df0a96b93eb655ca85a824030377407518d9fb9c7278e59097425f7b61c
- MD5 ce82860fbaa0f60b0f10a0198a989bfe
- SHA1 135152e802c44134a87561899e39556c16b8b142
- SHA512 acb3ffcde44db74931f8dc63f226727e4f1286d0ed535556be0cc24d021a56ca3bfbc4e791de033824a818f456e85ff70a0edb27e4b5439ad32568958197f51c
- SSDEEP 1536:+TYfbsHP88CZgwOz9k5KV8tisWAUdZtyj:+TWsHP85ZgwOzQFOZt6
- TLSH T15A73184473E40079E1738639D8F74D52D637F80A1A729F0D1BA8025E5E637C29AB8F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
LoadLibraryA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
LoadLibraryW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
UPLAY_ACH_EarnAchievement
UPLAY_ACH_GetAchievementImage
UPLAY_ACH_GetAchievements
UPLAY_ACH_Write
UPLAY_AVATAR_Get
UPLAY_AVATAR_GetAvatarIdForCurrentUser
UPLAY_AVATAR_GetBitmap
UPLAY_ClearGameSession
UPLAY_FRIENDS_AddToBlackList
UPLAY_FRIENDS_DisableFriendMenuItem
UPLAY_FRIENDS_EnableFriendMenuItem
UPLAY_FRIENDS_GetFriendList
UPLAY_FRIENDS_Init
UPLAY_FRIENDS_InviteToGame
UPLAY_FRIENDS_IsBlackListed
UPLAY_FRIENDS_IsFriend
UPLAY_FRIENDS_RequestFriendship
UPLAY_FRIENDS_ShowFriendSelectionUI
UPLAY_GetInstallationError
UPLAY_GetLastError
UPLAY_GetNextEvent
UPLAY_GetOverlappedOperationResult
UPLAY_HasOverlappedOperationCompleted
UPLAY_INSTALLER_AreChunksInstalled
UPLAY_INSTALLER_GetChunkIdsFromTag
UPLAY_INSTALLER_GetLanguageUtf8
UPLAY_INSTALLER_Init
UPLAY_INSTALLER_ReleaseChunkIdList
UPLAY_INSTALLER_UpdateInstallOrder
UPLAY_Init
UPLAY_METADATA_ClearContinuousTag
UPLAY_METADATA_SetContinuousTag
UPLAY_METADATA_SetSingleEventTag
UPLAY_OVERLAY_SetShopUrl
UPLAY_OVERLAY_Show
UPLAY_OVERLAY_ShowFacebookAuthentication
UPLAY_PARTY_DisablePartyMemberMenuItem
UPLAY_PARTY_EnablePartyMemberMenuItem
UPLAY_PARTY_GetFullMemberList
UPLAY_PARTY_GetId
UPLAY_PARTY_GetInGameMemberList
UPLAY_PARTY_Init
UPLAY_PARTY_InvitePartyToGame
UPLAY_PARTY_InviteToParty
UPLAY_PARTY_IsInParty
UPLAY_PARTY_IsPartyLeader
UPLAY_PARTY_PromoteToLeader
UPLAY_PARTY_RespondToGameInvite
UPLAY_PARTY_SetGuest
UPLAY_PARTY_SetUserData
UPLAY_PARTY_ShowGameInviteOverlayUI
UPLAY_PRESENCE_SetRichPresenceLine
UPLAY_PRESENCE_SetRichPresencePropertyInt32
UPLAY_PRESENCE_SetRichPresencePropertyString
UPLAY_PeekNextEvent
UPLAY_Quit
UPLAY_Release
UPLAY_SAVE_Close
UPLAY_SAVE_GetSavegames
UPLAY_SAVE_Open
UPLAY_SAVE_Read
UPLAY_SAVE_Remove
UPLAY_SAVE_SetName
UPLAY_SAVE_Write
UPLAY_SetGameSession
UPLAY_SetLocale
UPLAY_StartPlatform
UPLAY_Startup
UPLAY_USER_ClearGameSession
UPLAY_USER_GetAccountId
UPLAY_USER_GetAccountIdUtf8
UPLAY_USER_GetCdKeyUtf8
UPLAY_USER_GetCdKeys
UPLAY_USER_GetCredentials
UPLAY_USER_GetEmail
UPLAY_USER_GetEmailUtf8
UPLAY_USER_GetPassword
UPLAY_USER_GetPasswordUtf8
UPLAY_USER_GetTicketUtf8
UPLAY_USER_GetUsername
UPLAY_USER_GetUsernameUtf8
UPLAY_USER_IsConnected
UPLAY_USER_IsInOfflineMode
UPLAY_USER_IsOwned
UPLAY_USER_SetGameSession
UPLAY_Update
UPLAY_WIN_GetActions
UPLAY_WIN_GetRewards
UPLAY_WIN_RefreshActions
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=207, version=50929,
count=84, id=206, version=50929,
count=7, id=205, version=50929,
count=78, id=1, productName=Unmarked objects,
count=3, id=185, version=30716,
count=1, id=211, version=60610,
count=1, id=202, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=201, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=204, productName=VS2012 UPD3 build 60610, version=60610,
Watch Dogs Crash Fix/bin/watch_dogs.exe
- IMPHASH b684923fa0ac54bb35e128d006f98177
- SHA256 310411adfaf417dcc70dd16382924a3bc17b575938b8f85e370dc6164ec77fcb
- MD5 b0e8d785ea386cce804a2e9e878f4829
- SHA1 6733567a6e64169d95b617a35b474206f6492b5e
- SHA512 4c666764c747b943b623b2647a306c04516664c91b0e36ae750da98a7fb1e65612635bc30615f86b1ca99122011dd4ea08863397cd6ddcca88e0e6feb4b02c3a
- SSDEEP 768:aLAynskz+09lQk4GzjV0XEc2JP1iK2SwX7R81yqsJ+FhX6P:aLh/SclQBY50XvUP1R1fs42P
- TLSH T1A3D3B4517A02E426DC5D4234DFBAD23559307CDA2A69A2C2BAD37FEF38B07015E49F12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
2b:ba:dd:9b:ed:01:9c:52:fd:75:61:a2:c9:fe:23:dd
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Chains
Jan 1, 0001
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=UBISOFT ENTERTAINMENT INC.,O=UBISOFT ENTERTAINMENT INC.,L=Montreal,ST=Quebec,C=CA
Serial Number
2c:b0:08:60:91:4e:c0:97:13:62:b8:fd:4c:74:fe:0d
Issuer
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 16, 2013 - Jul 16, 2014
Subject
CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US
Serial Number
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Issuer
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
2
Major OS version
5
Entry point
4948
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\projects\pc-package\bin\DuniaDemoLaunch_PC_b64.pdb
disrupt_b64
?RunGame@@YA_NPEAUHINSTANCE__@@PEBDI@Z
msvcr100
_configthreadlocale
__setusermatherr
_commode
_fmode
_initterm_e
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_amsg_exit
__set_app_type
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
Sleep
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=32, id=1, productName=Unmarked objects,
count=4, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,