Among Us Sheriff Mod v1.24 (v2021.6.30s).zip
- SHA256 d41beecc5519ffe9eddd2203effbf94d6e4c2339051b4ef5b239839c2c1973cd
Overview
overview
3Static
static
3BepInEx/co...ny.dll
windows10-2004-x64
1BepInEx/co...ny.dll
windows11-ltsc_2024-x64
1BepInEx/co...er.exe
windows10-2004-x64
1BepInEx/co...er.exe
windows11-ltsc_2024-x64
1BepInEx/co...re.dll
windows10-2004-x64
1BepInEx/co...re.dll
windows11-ltsc_2024-x64
1BepInEx/co...PP.dll
windows10-2004-x64
1BepInEx/co...PP.dll
windows11-ltsc_2024-x64
1BepInEx/co...re.dll
windows10-2004-x64
1BepInEx/co...re.dll
windows11-ltsc_2024-x64
1BepInEx/core/Iced.dll
windows10-2004-x64
1BepInEx/core/Iced.dll
windows11-ltsc_2024-x64
1BepInEx/co...er.dll
windows10-2004-x64
1BepInEx/co...er.dll
windows11-ltsc_2024-x64
1BepInEx/co...er.dll
windows10-2004-x64
1BepInEx/co...er.dll
windows11-ltsc_2024-x64
1BepInEx/co...db.dll
windows10-2004-x64
1BepInEx/co...db.dll
windows11-ltsc_2024-x64
1BepInEx/co...db.dll
windows10-2004-x64
1BepInEx/co...db.dll
windows11-ltsc_2024-x64
1BepInEx/co...ks.dll
windows10-2004-x64
1BepInEx/co...ks.dll
windows11-ltsc_2024-x64
1BepInEx/co...il.dll
windows10-2004-x64
1BepInEx/co...il.dll
windows11-ltsc_2024-x64
1BepInEx/co...ur.dll
windows10-2004-x64
1BepInEx/co...ur.dll
windows11-ltsc_2024-x64
1BepInEx/co...ls.dll
windows10-2004-x64
1BepInEx/co...ls.dll
windows11-ltsc_2024-x64
1BepInEx/co...er.dll
windows10-2004-x64
1BepInEx/co...er.dll
windows11-ltsc_2024-x64
1BepInEx/co...ib.dll
windows10-2004-x64
1BepInEx/co...ib.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BepInEx/core/0Harmony.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BepInEx/core/0Harmony.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
BepInEx/core/AssemblyUnhollower.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
BepInEx/core/AssemblyUnhollower.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
BepInEx/core/BepInEx.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
BepInEx/core/BepInEx.Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
BepInEx/core/BepInEx.IL2CPP.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
BepInEx/core/BepInEx.IL2CPP.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
BepInEx/core/BepInEx.Preloader.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
BepInEx/core/BepInEx.Preloader.Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
BepInEx/core/Iced.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
BepInEx/core/Iced.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
BepInEx/core/Il2Cpp.TlsAdapter.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
BepInEx/core/Il2Cpp.TlsAdapter.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
BepInEx/core/Il2CppDumper.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
BepInEx/core/Il2CppDumper.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
BepInEx/core/Mono.Cecil.Mdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
BepInEx/core/Mono.Cecil.Mdb.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
BepInEx/core/Mono.Cecil.Pdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
BepInEx/core/Mono.Cecil.Pdb.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
BepInEx/core/Mono.Cecil.Rocks.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
BepInEx/core/Mono.Cecil.Rocks.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
BepInEx/core/Mono.Cecil.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
BepInEx/core/Mono.Cecil.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
BepInEx/core/MonoMod.RuntimeDetour.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
BepInEx/core/MonoMod.RuntimeDetour.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
BepInEx/core/MonoMod.Utils.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
BepInEx/core/MonoMod.Utils.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
BepInEx/core/SemVer.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
BepInEx/core/SemVer.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
BepInEx/core/UnhollowerBaseLib.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
BepInEx/core/UnhollowerBaseLib.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Among Us Sheriff Mod v1.24 (v2021.6.30s).zip
- Size 20.2MB
- Sample260815-e1ckjsyfkd
- SHA256 d41beecc5519ffe9eddd2203effbf94d6e4c2339051b4ef5b239839c2c1973cd
- MD5 cebdcd0ec595defae658b674d3358d69
- SHA1 08a7986f5d3066182eb8124e98d11bbc8aa99684
- SHA512 3e6b26af7393ba2dc1929d49e2e95b853e78ea6a4c8a8edf4732df430f47babe4ae7026704e8d45a2f4ce9bde49392a5483af11155fa657f4f4a0a2447a69c1d
- SSDEEP 393216:s3ZkuysGQR7HguXZTgQn6J1DCRRUGx3pFzKQy3A8LggMSW9Zacrx0ANP7y6maOwe:u2uvGUHgAZTgQn6DCRRUGr0Qp8LdcdNI
- TLSH T18827335EADB8C8C5E14F723DCF23916E26942124A5167E3E2B3847D872B0F798F31859
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 97 IoCs
Checks for missing Authenticode signature.
resource unpack001/BepInEx/core/0Harmony.dll unpack001/BepInEx/core/AssemblyUnhollower.dll unpack001/BepInEx/core/BepInEx.Core.dll unpack001/BepInEx/core/BepInEx.IL2CPP.dll unpack001/BepInEx/core/BepInEx.Preloader.Core.dll unpack001/BepInEx/core/Iced.dll unpack001/BepInEx/core/Il2Cpp.TlsAdapter.dll unpack001/BepInEx/core/Il2CppDumper.dll unpack001/BepInEx/core/Mono.Cecil.Mdb.dll unpack001/BepInEx/core/Mono.Cecil.Pdb.dll unpack001/BepInEx/core/Mono.Cecil.Rocks.dll unpack001/BepInEx/core/Mono.Cecil.dll unpack001/BepInEx/core/MonoMod.RuntimeDetour.dll unpack001/BepInEx/core/MonoMod.Utils.dll unpack001/BepInEx/core/SemVer.dll unpack001/BepInEx/core/UnhollowerBaseLib.dll unpack001/BepInEx/core/UnhollowerRuntimeLib.dll unpack001/BepInEx/plugins/SheriffMod.dll unpack001/BepInEx/unhollowed/Assembly-CSharp-firstpass.dll unpack001/BepInEx/unhollowed/Assembly-CSharp.dll unpack001/BepInEx/unhollowed/Hazel.dll unpack001/BepInEx/unhollowed/Il2CppMono.Security.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Configuration.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Core.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Data.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Net.Http.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Numerics.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Runtime.Serialization.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Xml.Linq.dll unpack001/BepInEx/unhollowed/Il2CppSystem.Xml.dll unpack001/BepInEx/unhollowed/Il2CppSystem.dll unpack001/BepInEx/unhollowed/Il2Cppmscorlib.dll unpack001/BepInEx/unhollowed/Newtonsoft.Json.dll unpack001/BepInEx/unhollowed/QRCoder.dll unpack001/BepInEx/unhollowed/Rewired_Core.dll unpack001/BepInEx/unhollowed/Rewired_Windows.dll unpack001/BepInEx/unhollowed/Unity.Addressables.dll unpack001/BepInEx/unhollowed/Unity.Analytics.DataPrivacy.dll unpack001/BepInEx/unhollowed/Unity.ResourceManager.dll unpack001/BepInEx/unhollowed/Unity.TextMeshPro.dll unpack001/BepInEx/unhollowed/UnityEngine.AIModule.dll unpack001/BepInEx/unhollowed/UnityEngine.AndroidJNIModule.dll unpack001/BepInEx/unhollowed/UnityEngine.AnimationModule.dll unpack001/BepInEx/unhollowed/UnityEngine.AssetBundleModule.dll unpack001/BepInEx/unhollowed/UnityEngine.AudioModule.dll unpack001/BepInEx/unhollowed/UnityEngine.CoreModule.dll unpack001/BepInEx/unhollowed/UnityEngine.DirectorModule.dll unpack001/BepInEx/unhollowed/UnityEngine.GridModule.dll unpack001/BepInEx/unhollowed/UnityEngine.IMGUIModule.dll unpack001/BepInEx/unhollowed/UnityEngine.ImageConversionModule.dll unpack001/BepInEx/unhollowed/UnityEngine.InputLegacyModule.dll unpack001/BepInEx/unhollowed/UnityEngine.InputModule.dll unpack001/BepInEx/unhollowed/UnityEngine.JSONSerializeModule.dll unpack001/BepInEx/unhollowed/UnityEngine.ParticleSystemModule.dll unpack001/BepInEx/unhollowed/UnityEngine.Physics2DModule.dll unpack001/BepInEx/unhollowed/UnityEngine.PhysicsModule.dll unpack001/BepInEx/unhollowed/UnityEngine.Purchasing.SecurityCore.dll unpack001/BepInEx/unhollowed/UnityEngine.Purchasing.dll unpack001/BepInEx/unhollowed/UnityEngine.ScreenCaptureModule.dll unpack001/BepInEx/unhollowed/UnityEngine.SharedInternalsModule.dll unpack001/BepInEx/unhollowed/UnityEngine.SpriteMaskModule.dll unpack001/BepInEx/unhollowed/UnityEngine.SpriteShapeModule.dll unpack001/BepInEx/unhollowed/UnityEngine.SubsystemsModule.dll unpack001/BepInEx/unhollowed/UnityEngine.TerrainModule.dll unpack001/BepInEx/unhollowed/UnityEngine.TextCoreModule.dll unpack001/BepInEx/unhollowed/UnityEngine.TextRenderingModule.dll unpack001/BepInEx/unhollowed/UnityEngine.TilemapModule.dll unpack001/BepInEx/unhollowed/UnityEngine.UI.dll unpack001/BepInEx/unhollowed/UnityEngine.UIElementsNativeModule.dll unpack001/BepInEx/unhollowed/UnityEngine.UIModule.dll unpack001/BepInEx/unhollowed/UnityEngine.UnityAnalyticsModule.dll unpack001/BepInEx/unhollowed/UnityEngine.UnityWebRequestAssetBundleModule.dll unpack001/BepInEx/unhollowed/UnityEngine.UnityWebRequestModule.dll unpack001/BepInEx/unhollowed/UnityEngine.VFXModule.dll unpack001/BepInEx/unhollowed/UnityEngine.VRModule.dll unpack001/BepInEx/unhollowed/UnityEngine.VideoModule.dll unpack001/BepInEx/unhollowed/UnityEngine.XRModule.dll unpack001/BepInEx/unhollowed/UnityEngine.dll unpack001/mono/Managed/Microsoft.CSharp.dll unpack001/mono/Managed/Mono.Posix.dll unpack001/mono/Managed/Mono.Security.dll unpack001/mono/Managed/System.Configuration.dll unpack001/mono/Managed/System.Core.dll unpack001/mono/Managed/System.Data.dll unpack001/mono/Managed/System.Net.Http.dll unpack001/mono/Managed/System.Numerics.dll unpack001/mono/Managed/System.Reflection.Emit.ILGeneration.dll unpack001/mono/Managed/System.Reflection.Emit.Lightweight.dll unpack001/mono/Managed/System.Reflection.Emit.dll unpack001/mono/Managed/System.Runtime.Serialization.dll unpack001/mono/Managed/System.Xml.dll unpack001/mono/Managed/System.dll unpack001/mono/Managed/mscorlib.dll unpack001/mono/Managed/netstandard.dll unpack001/mono/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll unpack001/mono/MonoBleedingEdge/EmbedRuntime/mono-2.0-sgen.dll unpack001/winhttp.dll
File Explorer
-
Among Us Sheriff Mod v1.24 (v2021.6.30s).zip.zip 20.2MB
-
BepInEx/cache/chainloader_typeloader.dat8KB
-
BepInEx/config/BepInEx.cfg4KB
-
BepInEx/config/org.bepinex.plugins.SheriffMod.cfg338B
-
BepInEx/core/0Harmony.dll.dll 182KB
-
BepInEx/core/AssemblyUnhollower.dll.exe 124KB
-
BepInEx/core/BepInEx.Core.dll.dll 98KB
-
BepInEx/core/BepInEx.Core.xml.xml 73KB
-
BepInEx/core/BepInEx.IL2CPP.dll.dll 60KB
-
BepInEx/core/BepInEx.IL2CPP.dll.config417B
-
BepInEx/core/BepInEx.Preloader.Core.dll.dll 24KB
-
BepInEx/core/BepInEx.Preloader.Core.xml.xml 7KB
-
BepInEx/core/Iced.dll.dll 1.6MB
-
BepInEx/core/Il2Cpp.TlsAdapter.dll.dll 118KB
-
BepInEx/core/Il2CppDumper.dll.dll 147KB
-
BepInEx/core/Mono.Cecil.Mdb.dll.dll 38KB
-
BepInEx/core/Mono.Cecil.Pdb.dll.dll 87KB
-
BepInEx/core/Mono.Cecil.Rocks.dll.dll 24KB
-
BepInEx/core/Mono.Cecil.dll.dll 347KB
-
BepInEx/core/MonoMod.RuntimeDetour.dll.dll 104KB
-
BepInEx/core/MonoMod.Utils.dll.dll 181KB
-
BepInEx/core/SemVer.dll.dll 31KB
-
BepInEx/core/UnhollowerBaseLib.dll.dll 88KB
-
BepInEx/core/UnhollowerRuntimeLib.dll.dll 4KB
-
BepInEx/plugins/SheriffMod.dll.dll 21KB
-
BepInEx/unhollowed/Assembly-CSharp-firstpass.dll.dll 5.4MB
-
BepInEx/unhollowed/Assembly-CSharp.dll.dll 4.3MB
-
BepInEx/unhollowed/Hazel.dll.dll 182KB
-
BepInEx/unhollowed/Il2CppMono.Security.dll.dll 608KB
-
BepInEx/unhollowed/Il2CppSystem.Configuration.dll.dll 20KB
-
BepInEx/unhollowed/Il2CppSystem.Core.dll.dll 1.5MB
-
BepInEx/unhollowed/Il2CppSystem.Data.dll.dll 1.5MB
-
BepInEx/unhollowed/Il2CppSystem.Net.Http.dll.dll 208KB
-
BepInEx/unhollowed/Il2CppSystem.Numerics.dll.dll 61KB
-
BepInEx/unhollowed/Il2CppSystem.Runtime.Serialization.dll.dll 8KB
-
BepInEx/unhollowed/Il2CppSystem.Xml.Linq.dll.dll 109KB
-
BepInEx/unhollowed/Il2CppSystem.Xml.dll.dll 3.4MB
-
BepInEx/unhollowed/Il2CppSystem.dll.dll 7.3MB
-
BepInEx/unhollowed/Il2Cppmscorlib.dll.dll 6.2MB
-
BepInEx/unhollowed/MethodAddressToToken.db1.3MB
-
BepInEx/unhollowed/MethodXrefScanCache.db28.8MB
-
BepInEx/unhollowed/Newtonsoft.Json.dll.dll 1.0MB
-
BepInEx/unhollowed/QRCoder.dll.dll 85KB
-
BepInEx/unhollowed/Rewired_Core.dll.dll 6.6MB
-
BepInEx/unhollowed/Rewired_Windows.dll.dll 1.3MB
-
BepInEx/unhollowed/Unity.Addressables.dll.dll 277KB
-
BepInEx/unhollowed/Unity.Analytics.DataPrivacy.dll.dll 10KB
-
BepInEx/unhollowed/Unity.ResourceManager.dll.dll 285KB
-
BepInEx/unhollowed/Unity.TextMeshPro.dll.dll 896KB
-
BepInEx/unhollowed/UnityEngine.AIModule.dll.dll 6KB
-
BepInEx/unhollowed/UnityEngine.AndroidJNIModule.dll.dll 83KB
-
BepInEx/unhollowed/UnityEngine.AnimationModule.dll.dll 168KB
-
BepInEx/unhollowed/UnityEngine.AssetBundleModule.dll.dll 11KB
-
BepInEx/unhollowed/UnityEngine.AudioModule.dll.dll 69KB
-
BepInEx/unhollowed/UnityEngine.CoreModule.dll.dll 1.5MB
-
BepInEx/unhollowed/UnityEngine.DirectorModule.dll.dll 5KB
-
BepInEx/unhollowed/UnityEngine.GridModule.dll.dll 16KB
-
BepInEx/unhollowed/UnityEngine.IMGUIModule.dll.dll 221KB
-
BepInEx/unhollowed/UnityEngine.ImageConversionModule.dll.dll 3KB
-
BepInEx/unhollowed/UnityEngine.InputLegacyModule.dll.dll 31KB
-
BepInEx/unhollowed/UnityEngine.InputModule.dll.dll 10KB
-
BepInEx/unhollowed/UnityEngine.JSONSerializeModule.dll.dll 6KB
-
BepInEx/unhollowed/UnityEngine.ParticleSystemModule.dll.dll 142KB
-
BepInEx/unhollowed/UnityEngine.Physics2DModule.dll.dll 144KB
-
BepInEx/unhollowed/UnityEngine.PhysicsModule.dll.dll 43KB
-
BepInEx/unhollowed/UnityEngine.Purchasing.SecurityCore.dll.dll 3KB
-
BepInEx/unhollowed/UnityEngine.Purchasing.dll.dll 73KB
-
BepInEx/unhollowed/UnityEngine.ScreenCaptureModule.dll.dll 4KB
-
BepInEx/unhollowed/UnityEngine.SharedInternalsModule.dll.dll 27KB
-
BepInEx/unhollowed/UnityEngine.SpriteMaskModule.dll.dll 10KB
-
BepInEx/unhollowed/UnityEngine.SpriteShapeModule.dll.dll 3KB
-
BepInEx/unhollowed/UnityEngine.SubsystemsModule.dll.dll 19KB
-
BepInEx/unhollowed/UnityEngine.TerrainModule.dll.dll 30KB
-
BepInEx/unhollowed/UnityEngine.TextCoreModule.dll.dll 56KB
-
BepInEx/unhollowed/UnityEngine.TextRenderingModule.dll.dll 49KB
-
BepInEx/unhollowed/UnityEngine.TilemapModule.dll.dll 69KB
-
BepInEx/unhollowed/UnityEngine.UI.dll.dll 781KB
-
BepInEx/unhollowed/UnityEngine.UIElementsNativeModule.dll.dll 19KB
-
BepInEx/unhollowed/UnityEngine.UIModule.dll.dll 46KB
-
BepInEx/unhollowed/UnityEngine.UnityAnalyticsModule.dll.dll 25KB
-
BepInEx/unhollowed/UnityEngine.UnityWebRequestAssetBundleModule.dll.dll 10KB
-
BepInEx/unhollowed/UnityEngine.UnityWebRequestModule.dll.dll 46KB
-
BepInEx/unhollowed/UnityEngine.VFXModule.dll.dll 17KB
-
BepInEx/unhollowed/UnityEngine.VRModule.dll.dll 4KB
-
BepInEx/unhollowed/UnityEngine.VideoModule.dll.dll 19KB
-
BepInEx/unhollowed/UnityEngine.XRModule.dll.dll 33KB
-
BepInEx/unhollowed/UnityEngine.dll.dll 45KB
-
BepInEx/unhollowed/assembly-hash.txt32B
-
doorstop_config.ini496B
-
mono/Managed/Microsoft.CSharp.dll.dll 294KB
-
mono/Managed/Mono.Posix.dll.dll 209KB
-
mono/Managed/Mono.Security.dll.dll 235KB
-
mono/Managed/System.Configuration.dll.dll 120KB
-
mono/Managed/System.Core.dll.dll 1.0MB
-
mono/Managed/System.Data.dll.dll 2.0MB
-
mono/Managed/System.Net.Http.dll.dll 119KB
-
mono/Managed/System.Numerics.dll.dll 117KB
-
mono/Managed/System.Reflection.Emit.ILGeneration.dll.dll 4KB
-
mono/Managed/System.Reflection.Emit.Lightweight.dll.dll 4KB
-
mono/Managed/System.Reflection.Emit.dll.dll 4KB
-
mono/Managed/System.Runtime.Serialization.dll.dll 917KB
-
mono/Managed/System.Xml.dll.dll 3.0MB
-
mono/Managed/System.dll.dll 2.5MB
-
mono/Managed/mscorlib.dll.dll 4.4MB
-
mono/Managed/netstandard.dll.dll 88KB
-
mono/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll.dll 598KB
-
mono/MonoBleedingEdge/EmbedRuntime/mono-2.0-sgen.dll.dll 4.5MB
-
mono/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser1KB
-
mono/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx.js 61KB
-
mono/MonoBleedingEdge/etc/mono/2.0/machine.config.xml 28KB
-
mono/MonoBleedingEdge/etc/mono/2.0/settings.map.xml 2KB
-
mono/MonoBleedingEdge/etc/mono/2.0/web.config.xml 11KB
-
mono/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser1KB
-
mono/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx.js 61KB
-
mono/MonoBleedingEdge/etc/mono/4.0/machine.config.xml 33KB
-
mono/MonoBleedingEdge/etc/mono/4.0/settings.map.xml 2KB
-
mono/MonoBleedingEdge/etc/mono/4.0/web.config.xml 18KB
-
mono/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser1KB
-
mono/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx.js 61KB
-
mono/MonoBleedingEdge/etc/mono/4.5/machine.config.xml 33KB
-
mono/MonoBleedingEdge/etc/mono/4.5/settings.map.xml 2KB
-
mono/MonoBleedingEdge/etc/mono/4.5/web.config.xml 18KB
-
mono/MonoBleedingEdge/etc/mono/browscap.ini321KB
-
mono/MonoBleedingEdge/etc/mono/config3KB
-
mono/MonoBleedingEdge/etc/mono/mconfig/config.xml.xml 25KB
-
steam_appid.txt8B
-
winhttp.dll.dll 20KB
BepInEx/cache/chainloader_typeloader.dat
- SHA256 7642e92767ab0b01521866f147685a30ad9c7dea2dc6fd369fe568314513c3e7
- MD5 7529ec14c7a3fdd5229697e110c35262
- SHA1 b48b5739e47b3ea310367ee06de5e00e172baede
- SHA512 34a42a1e7af272567f0621b0032654714f26d8f8912c4d51636d673f6f65ee7397571cb2899ebd5343a08fe8b664fd314ce9b77d10804a72cb8780cf8d400eee
- SSDEEP 96:oWAozPxUqa9xCnp3WAo4K9wwRRh74b+Tka+e:oWAOxUqaSZWAKXRRh74bHaB
- TLSH T199020BF181C6D332924228E5C45270F79AE53E9737229B215F7F7B530A157EB462B88C
- MD5 SHA1 SHA512 SSDEEP TLSH
BepInEx/config/BepInEx.cfg
- SHA256 e83a74c5eb1a7740149cefc750135e2d83975bf4749f36fac0a73451fc454347
- MD5 95cd3d2ca38addd6aa98859f230a5945
- SHA1 dfb35349c67300efaf01b018771d208401ea27e0
- SHA512 936209cf2e47992046806c6c97066b8713a2a50699b31ab343e534eb7cb853544e835b57d716fd112d524947b92d90c3f0b825af88cdd703fc155971d2100c22
- SSDEEP 48:eXUerCjnnV7xMxel2ieevnrUn3V7apmvYprUn3V7apyu9tOGGM0KG65ozbEmFvYV:eXjWjnIxUdxU36zU36l1
- TLSH T1D88131257B8EF17F0B204096960BF2958718894CC36329B8F95D921D5200BE98373BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
BepInEx/config/org.bepinex.plugins.SheriffMod.cfg
- SHA256 4fcc9465b2d685094705a0c20277dea245615331ba2770ab5f3fa519b11e28de
- MD5 2f921ba87e245f08dd0bbcdf0c53da24
- SHA1 c93588155f9aa134ef5bc3ae069508dbc7a3209a
- SHA512 6cef535948a7866407b5f60f72da08a7f8418b1e1d2d8004c0a985ee175ad23533c585ed2829c1612bcac4097e01bade7fcd50c5b2388c644903139033e94cab
- TLSH T13EE08690BA7BD2BE0E715EA40005B961F743E72AC721EA7CE429A9154830E9B03A475D
- MD5 SHA1 SHA512 TLSH
BepInEx/core/0Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7aca7127a2837bdbaf5397a085a599b70381c48780ebc3144eb99846ee8e6787
- MD5 16df7de591d788f8d61d26a6c0c094c1
- SHA1 3871100827e62a371504c31890dee231f3ef68a0
- SHA512 5dc25840225b44a83e4451659e3529f93027fe91b4b3f2d32035f54bad688cddc6fc9379784834389ac1d6543df42720585f360d0ac04346d1c5a8fc5e86fb91
- SSDEEP 3072:6mLaVjT7J95JwbARdYb6+ErJfGRJl07jihOdWJMuTXQCMuFDRN:FCT7xJwbArZ+UfGROWhJKWQQb
- TLSH T12C04395437FD0712D7BF6BB4E57010560272B817E87AEB8D9C80B4E91C62782EA613B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/AssemblyUnhollower.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 de89f0e118865b791db842942ed431766efd7604c4b9c9ee5c4dcc4214eafacf
- MD5 5df601d00c6958d9d8f69d5ef3f05ba5
- SHA1 551b51e61014f7b1d5e64f51a290dc7f05999451
- SHA512 914cfb1cf967021d3bad608c644229f5d6396719b4b5c7b5d096f6becb9f5de7974dba24f1a843e0d7b0a6fbfb5725b20fc554ff4e06f9c9572dc8a82305e39f
- SSDEEP 3072:AfDYLKLARy+XSuclMay1RhnTdNF9JdQDm/lC0PNfl:AfkLKkA+iucmaYRh5bdQDJUN
- TLSH T13DC3491433E88A06D7FF0AB074B0695803F1B8879A23DB4D6DC578EB1D5A7909B11BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
132754
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\Projects\C#\BepInEx\Il2CppAssemblyUnhollower\AssemblyUnhollower\obj\Release\netstandard2.1\AssemblyUnhollower.pdb
mscoree
_CorExeMain
Name
.text
Size
122KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/BepInEx.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de8e9f62cb4ae75cb781ffbb0aca1a6f4901ed6197846510a419f2ce22a15c27
- MD5 ee8a51c71fc80e8ed2b762ec10ed0a85
- SHA1 68ef602d2c29593337b0983b28c8729cac52810a
- SHA512 f22a950cc99902f34142aac43f6aaf93a54ee1092bda9d88118ca490f9278831ad63a05d0dcfb63ef5825015ed2fce971b96982f5bff0681d02babd0163b8df8
- SSDEEP 1536:AcWJ1Fa/PlZ2SBQHE+0cAnRMSYZEnqwbdV91RxPBJLal7/D8zk1aT/ixXLzILjt:AcmKYZEL5VL7BJLr+aTaxXIt
- TLSH T146A33B1523EC8B56D3FF2E7578B251150BB1FA4BA432FB8DCE4C74AE0922BC2451176A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
106026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/BepInEx.Core.xml
- SHA256 3e7d25b31dc5228a424b9cc3c28f499b85e8626a7effb3282258adc38c59e14e
- MD5 803022f54796119e03ba34f00d975467
- SHA1 1e4cd979ef99ed52f1d3b76de1d24b544733c1f5
- SHA512 06530343d30e67534a0e049c3562c703f8c40c35919e6622d246f9cfb2886e843499f2eeb6a86e116b94842094d3c3ca0fc68a21e3be77eb8dafed3dbba0459f
- SSDEEP 768:fHYdwl3qsoKSfqam+a3t+Lcl41waUGYb7NIL:f4dwl3qsoCaYaHYb7NIL
- TLSH T1F273CF3A77F4FE52084205629D9879C0BF340EA3311A9639B1DD7D1B9F0DC9711BBAA4
- MD5 SHA1 SHA512 SSDEEP TLSH
BepInEx/core/BepInEx.IL2CPP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ab2307881ae1dcb7cbc185749ee36f24f8acdbfacaa4d7b35c8d595c5470f49
- MD5 348f12bcd809626217c1d82667ec3f91
- SHA1 b0587c9f82a5c4a103b9dc58c7895def9ca82e32
- SHA512 aff7dc7ff958c0f32f74afc2d8c59f4c5964ee122bb6ab6330e2e0ab359332ce9509deb426444617033e19d590885058504056faee1fbe9b6b6ef572fa96043c
- SSDEEP 768:EOXUDJ6NadURTCKKOSIralqMyPgaAO88PH/iwOHO0fClQg6rM9CT9Gysn7P74uxS:B0JgsUJgaGkHB0AtgM9Z7pxS
- TLSH T119532A0097D89229DAED397D7CB215000BBABA532413FF5B64484EEDCA96B804F537E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/BepInEx.IL2CPP.dll.config
- SHA256 2b472a3cfe1d0ec773292bac6974b66353c7b911a8f8e2d87fbd54b57ec94a71
- MD5 7a81c90482d14c97cadc826fad586351
- SHA1 c6679c0d9777091f8d8217ec9780c0f5940c6179
- SHA512 30a18af0da47f210acf67c16c0ceaa2ae27b2116ef3ae03fc0acbf7cb14031666193758d2b119f3bfb10dea0d395a3478ccb6a87172a2d438444c7a48d55c14c
- TLSH T12BE02B5195D4DA62979106A33BA620544FAA5373259C018CF46DB8AA8B08545520A176
- MD5 SHA1 SHA512 TLSH
BepInEx/core/BepInEx.Preloader.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93f2af0e71dbf8c2984193507a096cc787efb95c0401f64e0f0d696e6c53d856
- MD5 a1854493c8b31baf11a7b144dc398710
- SHA1 95faf0fddd235e42e94623494244d69bed5113d0
- SHA512 6581851ef03ee06b7ede5bcf33f56a4d8f57f1dac6c34259b3f08527e8c4256377ac8d0430fe8ce016d81a3bd4fc48172f7fac67ef05ea86bc11b37de09bc569
- SSDEEP 384:H5D0rBenON6XnOEMlyIoUrr7h1nf735nrIc6cPdPN0RuuC:H54tnCnbJcr7xrIc6ch
- TLSH T1E1B21A4223ECC768E6FE4F34BC7122A50AF6BA03BA36D75D1E89A19F0D267504520777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/BepInEx.Preloader.Core.xml
- SHA256 22ce6285096d4201a3241038bf5480a9c8724c8f9fcb58369a02d78c719fa4c8
- MD5 b5aea0eab624589d85bddca94946f94a
- SHA1 93d073b0ed5dd74ecd2d8c0b7f642ae490421c84
- SHA512 3f3c8a48ba16dddabf3b44ffa2a7443e98ad0399127e754e07143ec650df7e646876ad5c7b52152aaec2c81c8092345c56255de86382170fca6077dbb96c9741
- SSDEEP 48:fZlAZGzLHATbhVEwoWslu/nh8NvLugz+xrarzIGuu790ouizIGuug6QdFeXMop5i:B6fvslup8NAtDN2MohxA+Zq
- TLSH T126F1FD74B2F0DA100E420646EEEA38C0BF690E7B10A7553631DC2E5FEF6599751BB871
- MD5 SHA1 SHA512 SSDEEP TLSH
BepInEx/core/Iced.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 347877f8987f03dbff0faf069c19834b41be5f52246caf5ff488ac4ca110c4aa
- MD5 211d3bb12e513a0ad87ddcf4029681d3
- SHA1 c08a8a0ece7d243750f3ba8bbb59110669cacc29
- SHA512 360246b2ed8a49e191236da137550e4416ae7b5ca38fb886922fc6c890e4e72ab540c88098ce4e3f6b156f670c90bd03266e0e8131c494197a4c1d8ab4b52f79
- SSDEEP 12288:ckR3aijFyf6l+aD4boFPqMS6KhIXQ3v+s0cHztiNWjf7dPoRZw9k1Hul0bqN:uboQ6KhT0NgTdARZw9k1u0bqN
- TLSH T1548564942AEECB77EB8F2330C4529125F370E2E87707DB5E198561395889BA197031FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1489558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/runner/work/iced/iced/src/csharp/Intel/Iced/obj/Release/netstandard2.1/Iced.pdb
mscoree
_CorDllMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/Il2Cpp.TlsAdapter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8f9bb6a973aa1563f55a52253377d8de8e8191a26c09601711f379292485b52
- MD5 b87b74e05e8b4546425715f5d7b22601
- SHA1 27564f4f7598c8946a256d56cc4dfdd712616a84
- SHA512 4fb2823c855ce94544d2bf77173e124c9ec66add74fcbc5d34b8594710700aa0f17ce5fd35213152dbe9314513ef8a17e3c6fbba4812b02748b97fdba959559c
- SSDEEP 1536:FkIcUO0zeoigupeZK/USqoCQeEoonRLmiVrkIlJ/6RTXvbLHNxPDtt1jr5NJLLxw:FVcZoqGEZ1lxXYXDszERJLY
- TLSH T15DC35A2813F80B6BE2DE9A7DF031919087F5BA05B663DB0F9E4064F96563BC0D921763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
126702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/Il2CppDumper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f6f402485e83949161d003df44f51b6773996ae5b8328dcbb5d18ba23f389f9c
- MD5 a391e37e08888df412eaac572580832a
- SHA1 d533d6183eae201738ec7b80cd727b2dfbc83d7e
- SHA512 a480c2b4ab6fb0c56b3a204b077a20a2c113f74918be6e378489996646d5867493acb468ed82fcdfbb814966e7a7cf5d7fe72a47c937aaa4e43bd850307bf5a5
- SSDEEP 3072:lEDV9K2mAcPFtz3D85SSlqoRdKk3sPO3eobI2m5u4Ufhfs:lRHn8kSlqoOk8PO3Jt
- TLSH T16CE3E71572D90529F9FB5BB8696316224B77B492583DE34D0ECC20ED0EF3F8098517AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
156374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\C#\BepInEx\Il2CppDumper\Il2CppDumper\obj\Release\netstandard2.1\Il2CppDumper.pdb
mscoree
_CorDllMain
Name
.text
Size
145KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5dd65700e11d8a9e3461044b0e6f82abbedddd6fc90afb53c2b53744b9281233
- MD5 54016afec9a4541de4ea7fdc4536bee6
- SHA1 06016e9cc71c257e9e0dc7a6a53844233b977dac
- SHA512 a276fbb162233936b20b4dad82b19f1ad90fe3af298c4e8fd8fdf9328758db378d69f2f4d1080444e7a65cf366a0a0da834a162a7dd6ddff9dbdd1a9a1873b64
- SSDEEP 768:nrF3HuZyOt78PeWSTlNeyJOgfGNOV/DVxPZxaCCrHpTFu6L4oWk:nrFecOt78PeWCLOgfGkVzKpTJL4oWk
- TLSH T1E30307086FAD962BC2AE55FEE4A126191BF1D53C6603FBAB4DC4B0F3BC437444512267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\netstandard2.0\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5234d2a93e1e25a5ca703cadab9cd9f0218975f1a78ee6355c0a9d3978c5de0
- MD5 f100e5cf51ef9837af10b793f3ed8703
- SHA1 713edb8aca42579319ec77eb392f5714c0731b32
- SHA512 a9e5d15d854ba5f874e3160bed489cbf340f9bc847e52d1c03c82c3689c317c940ee3f92317513278a6f7ab5bbc9b2e5bd6259ab4e1e9dad4d74e7fdf08ea42e
- SSDEEP 1536:3U2qJ+tTKzlXr+wHRsh3Sv8q+KdbEAoYKHNvzpS6u6faHC9e:E2y5+weh2+KSAiFzpO6CHC9e
- TLSH T169936D31A7ACA96AD8DC617724B70A0A07F2D2A7D153972A59C87FF41D2F7700932393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8106c90112b3d474ed3a7da8683c010f4cb9be724c0eaf459143464e611f8a8
- MD5 519aff3818e8871e428f403b9f1bf63d
- SHA1 e1d1fc47db18e2474aa348e1d39f2c0f930f4410
- SHA512 6e6efc407fb382cf0bbee191e620de0b494d207357789793548eb2f5b7bc0ee9e1c55110fd084d0da0d1f4904cc8b965c8244b55b4a856e8c3941bccc64d57d2
- SSDEEP 384:EWLOZBsQXmnFlPQnqc9H559krjuhXcVXD9PmROMLUBLMWG1UX8JvbrjEV1O/pl/E:raQHP+qcbkrPuROoUBBLXM/d
- TLSH T1E1B239103B99CF3BC2FF867958D2532802F1C96A9603EB064DCC90E99A5BF945341BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4ac5e4d0d66dffdae43498e95ad502d042b0fc5c9d70264b9d4c88c3cc94955
- MD5 c4b802b9b66dc5b2b3f251c8822da712
- SHA1 141e52ac972b6a9001601140442709e2d554996f
- SHA512 dda56a6a1dd4aacd46072bedde582170ab67a95c16ca4847b9a39ad20ca74f1f37df2d6a64c5dff022380fee1e084f548015ae74bef395e74cf0273de331b09a
- SSDEEP 6144:N6fRR1AtYWP4aW2psE5MLv+pVRomxaSt1Q:C6tYWr/oGpVRQSt
- TLSH T181747C3433EC573BE69F637BD469042A42F5D816738BEF9D48C4A9F64C47B928A01263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
359778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
345KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/MonoMod.RuntimeDetour.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17f7ebb7858ee58024ff0d527a3f31a3018b2e0d6cef5deda389992f0f43833a
- MD5 f7fb274654100928daa719a7e4d2993b
- SHA1 af2e2a67e92ca74ceab1e02c761e85867bd4f87e
- SHA512 0886ba6ec6a7ea6da6b6e48c56b58de3cd68a0bfa7561594c4f406f72481b9531781224eaab09e828b90f4887758c27fe8d0a6126e443e62b0911cfd9ba2e0df
- SSDEEP 3072:H7iPQUIPJsq+0MH1fw3O5KOG8A8ud8zAv0oAUZmK:HigJsq+0MHG3ldd8zAv
- TLSH T10AA35B2A53DC4F5AC69E1B7AB479014103B0F4028653F7DE0D9D69F92EA73824E413BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
112050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.RuntimeDetour\obj\Release\netstandard2.0\MonoMod.RuntimeDetour.pdb
mscoree
_CorDllMain
Name
.text
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da8a57b55ad25eec221315cf09b7faae7b0440593ee099b16d1480415f25b7fc
- MD5 f3896bd53f95470dfa986e926b35e02a
- SHA1 48ca7aa460a89b0b89e6a126f78daa8d6106e22c
- SHA512 3755d9cb47d210fe4aef14e942b9c0d3ec99893654eddf9f099674e36af75d222fc971b9674b3e0fe5583a68f5816304dd0d20c3d3ea69981de70f18caa5b570
- SSDEEP 3072:KZ/sb4x2g47cYBiO04A6FE92Hgbkdgb4pBuZzRXM4a8qB9/H8gpy5Vmemlvci+d4:Cf/4TBiT6Fgbkdgb4pBuZzRXM4a8qB93
- TLSH T122044AAD43A88F1FC76FAA77A0A1116C0232C517E557E70F75A8B0F6594B38886073F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
190918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.Utils\obj\Release\netstandard2.0\MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
178KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/SemVer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9451166596b0bf5725580b85b91fadb23fb2b1971ca8031edbcd7cde5634f367
- MD5 8c20b0febcd4cd8f1cbb61a5ae59b232
- SHA1 722195b5efc618f61c9f79312dab721a7696fdab
- SHA512 73d2e00ad5201a7a6f122bd6dcb3f855e41d2a8fb74025cf0e023ff811df7bd3dde19ee42b046f6704d9e23c99fecfceea9a3472c1ef0f22840fc03b8baf3ede
- SSDEEP 384:yNYNuHLetdUulWYkKVawpti7Rd3IWwOZUaHye5es4lPM07QuKJT0rTU/jEcfoGQU:wretdxZkKVawpU7v4p9e5ev540AXsf
- TLSH T1A3E2E5006BDE9372D6EE4B7DD4A2406402F3AAB5B931FF1F088C11865F277908916B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\semver-net\src\SemVer\obj\Release\netstandard2.0\SemVer.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/UnhollowerBaseLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3df9a1c372474fa4f5bf64f91ee6277768d9a3830ab21e51d3153159cd1d5558
- MD5 6dd76e58797420eafc3f2500255659a9
- SHA1 87d3c3edaa8a79e44589c9f1da264dbd1b877ccd
- SHA512 cb18e3d3f5650856f8aefdf0d5eab70bd5f64135824208b0f59c7dd30d5c67637316eed04f62f3ee5fdbd6542a97bf3d416abfbd5406946f0f122b35ff500b1d
- SSDEEP 1536:6v9GU8TfhhgqUwpz0G7G1P58gkogds4LamQGGWlp/ImNGdE1JNuq3wPm:6vsToqUkzmPCgkXXQGGWeIuqgPm
- TLSH T12793290137D88A35DAFE5B3490F62A0C87B0F547A532DB4F8ED985FA18637411A61BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\C#\BepInEx\Il2CppAssemblyUnhollower\UnhollowerBaseLib\obj\Release\netstandard2.1\UnhollowerBaseLib.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/core/UnhollowerRuntimeLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82e9a7ab7efea56417d0b2c236ef0e8baee57758d34c7d660516601bd1004e15
- MD5 5e20e94918291156b9471d2176d8601e
- SHA1 f1881fd59cd2ffeed14a1d26dcb5dfc480fff6c2
- SHA512 7e8a16476f3b9af52a98f036e3d6c68b3721352a360ede8e6ddd699a2018cd9e490db979cae67446e2c43724fc0bf454be9c2657e1c1d317f0b0da670d63fa3d
- SSDEEP 48:6I+l0gMTdXKaTnPB3vHyH/TCxR9dLrTR3lENE7yUP+cTp3neYM00UsvIv:OEdagxmNcRXeYM0Pmq
- TLSH T13C9134229BAC5777FDA74377ACF3539067B0FA01A5A38B3D9EC051176C164188F22B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\C#\BepInEx\unhollower_bepin\UnhollowerRuntimeLib\obj\Release\netstandard2.1\UnhollowerRuntimeLib.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/plugins/SheriffMod.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b1e8fbab22d373814a3b09fe8a511321c686d07f9fc59a8d62ab95efef58329e
- MD5 b70146669ec62763e4009f5bbd7ac051
- SHA1 4bb7ad7ce15924b4a8357d9732eea8861f70d5f6
- SHA512 db5594aa008d268d202c531fafc8b3eb608215ae98d8a746bf40d508e1e5914b50d3b7639de84da2876cb3c64d9f0f6a0c088be6a29a5a604f67f035b7415c39
- SSDEEP 384:hoXRvGzEN7RUJoQU+KoFGNsycBw4u1RS04Dbea5/7RmjfYLvpgADl8b:uXAzgRAjU0CsyWwPRSj/eMREYLvpgADq
- TLSH T19FA24A2967B4EB71DABC0AB8745121062379E3064621D71A7ECDB0EF4D933A78B017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\micha\Desktop\Among Us Modding\Projects\SheriffMod\SheriffMod\obj\Debug\SheriffMod.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Assembly-CSharp-firstpass.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37023999c42574748667caced833d89d631616077f916bbb834347dfef23f18e
- MD5 fe14d6d4502eabf47310cba6307f5d50
- SHA1 026d357d8fd6c67979c06c76f110c61b63558065
- SHA512 5e32589eb94b1040e8ec9f98f624fb30685495742e66a30999bf9e37cf2d766352c6dcffbfe17d4da14d6edb8ca82fa706433b9d013b90063893d95de7c2b58e
- SSDEEP 49152:bRoNcuJTPd0+p1HXkxFluhaQ4qII/erIpNu5XoXmMhjA7OYkFnaQzkhI:tocMrjkxFluhaQ4qIeerIpNuhsYkC
- TLSH T1FA4664007BC48A5BD22E7A3C43DD0910137369971D4F8A565F8CECE46762BC2AF6DB86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5717166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5.4MB
Virtual Size
5.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Assembly-CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ce37ef83d159f91da7cfba28aecd5e61fe6e1e3dc22b369d73d5b62b8374fc78
- MD5 9dc75b5f07a5f5c532f3222573a92bfb
- SHA1 1a8fbf8881fa4c8a481ae59ba4c9d3c11a65291c
- SHA512 f91514fd8b173c67e7460ff41bd857cd9193acc19b729aaba5f048b12dc0669410b03fe1090763d0cbbcabe7022bfc54c9f1990e3224e446661fd6ba598805cd
- SSDEEP 49152:IkdyGgWqFSXzdDggUuUI/wHnm52WNhmilbjaUicTxDirzXiQS3wHtYbC0PivJX1d:by4UQsrLi3U1P
- TLSH T1602671017BC28A0BC32D763983DC1960537356C3794AC7414FEEB8E5A665783AB4E7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4483230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Hazel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9f7b06b3e69b310489becaead2177f7ef94c7de62fc1e032dc31b5cb2b4c7d74
- MD5 6ff32f0641be61e83b1d995b5210659b
- SHA1 a5fa28894052f08c20ac73271de8bf4327ad33ce
- SHA512 f8937b2fbe481759e66e683c7167e6c8a70da2c14ba9b6d78e2d43d2ad2fdede5b3377fc9833356271d7e4125ed1644bf4697278d4c8dee7fb57e0a426df6d61
- SSDEEP 1536:tnT1Y990d1p3YgXPaCN3L1ZtHWCH0fMCCEhSRDKqYGr9uQrAld47mhSAYd+m6f4O:tnVdxpBDlACEmWe
- TLSH T1220431003BC1C64FD61E717C93D5194403B25487AD4EC6A14FCDACE9661AB82EBDEBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
193086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppMono.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dd4606fb6c61ed4db2cb85a30caf31d92903b2c2ccd9fa18f071d537f55b529f
- MD5 306d43496f2faa2028e4e09dcf634c77
- SHA1 dca234b74f3e540bd42822e415c2ee84a42b0074
- SHA512 75322a00827cb7489e200e2021bf0e8777059cbf3c5873d1833ea953d86c2a3809a46b3a73e0eadb3ada18dc3db00f28843831571d505f4464eb9e9e16ea1fd7
- SSDEEP 6144:mcfino+0Rp8V3P/cDJGdJTluQ+m277B2rUa/2o:heo+0RpToJF+m277B6fp
- TLSH T1D7D451007A91CE4BD21D757893DE1C4122732187A84ECB524FCDEC94BF4AB829B9D7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
629374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
607KB
Virtual Size
606KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c94b71bfb734d3e19d35ec4e34c7315706399e73969b490b0daaf3fd96abfae5
- MD5 3d5a7fb8d3f50f7c276bff901746ac1e
- SHA1 a2c2299ac906689220e47f29d4b997e8ba007722
- SHA512 3c06f13b4e62d9c511587480f2444aaecb81f355152d615f72960cd873d1a1198a04c4bb27aa8fac19300f15bd8fda7fbba3e2e4f5238af04a41e240d2347840
- SSDEEP 384:XB5qC360oVvBRmMP2qdxPaW3eGVl/UgA80TnLq/2J3V4uGz6+/EHHPnfPnd5RlzD:XB5qC3/oVvBfPXCWNk8OnLq/2J3V4uGO
- TLSH T10F9255547BD1CE1BC29D317C87DB19900272189BAC4F8A201FDDAC999935B811FDABCB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b4c25abc5a1dcaf991e88e32e8d6e52b8dc9fa2772e55d4d3bfb8057bb50b1d
- MD5 73307022d56e0705ff0e9349a63317cb
- SHA1 37ffab85e4894254cd3e8cc566c0e60da4e4273a
- SHA512 4e5805b11fe29fc3075d0ff0e6a804d45754c1794e530779e34d26e9c896f23af4de7f8a1ab11cf1270e0cb617a03d01cbdc1eacddf68eb828dbd51e74e90add
- SSDEEP 12288:WW+vruZfpMS0Ujapi72qcIK5bqo6wIfqek0cY/CELMHdHig:WbaZfpMS04BiqcIK52o605AC99Cg
- TLSH T12B7565107B818E5BD25EB63883DC04511373A4D76A4F8A134FDDECB12762782AB5DB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1580910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Data.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 252f57787458dc1a9d1417c844fd38e00b4026cc8089b7dc489b9a9048f12d6f
- MD5 25b871d4110175664a69c84598be3f7a
- SHA1 23606967eb72046dc2a4867f4f7e5636894c5ddb
- SHA512 012fe8a31376475862727c1d8d75d2d4cdc1e36ee93645f3d87dc33438abd9391796e3a783432c920f144e90bbd5822954ca61e9a082307275b9c15c79c85c83
- SSDEEP 12288:Gvu7GbSCRXx7LTSHTr1FajUOIIZgYE8OalnTvdjmxF:Gva+SCRXxD0rLxIsnaHjm
- TLSH T1F46574017BD08D0FD62D757C83DD094112B321C7AA4E8A235FCDECA17766B82AB9D786
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1553342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Net.Http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ebc7358fde072f2917d027861b96032d8f1dbe0b127c2007caf8b25afa393434
- MD5 365b6191c31be8f082edd436619300c4
- SHA1 f819c82f51ced4e7a15cc86c0f77058445a730b8
- SHA512 d0ae4b4d53ca4242541c54d9c666c687738b5420c77b5af28f5ef6bd779f1923f9e07a458e84a0a33a19d01ae1b3b56355573c62e72d79249aeaffc6005bba86
- SSDEEP 3072:uCozlIu+P60kz5gFLnn2nTvPYAY3o7fyM:uCozlaYoDUtY3o7f
- TLSH T16B2474517BD1CA8BC61E73BC83CA594102B260D7AC8EC6258FCC9CF55851782AB9D7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
220030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
207KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Numerics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38a47e037c75a7b3cf91d8c28d6be67618fc1e89839bfde375e31818bee67c67
- MD5 0bda3d766ca4fcebf712bcb4ba3e4733
- SHA1 574d021ce14ef3e89372b19e6c3237e18228be88
- SHA512 e588a86c9c5214070ab22a327ac65fb6b59e7584f462039e07019e5a6636637092493e62dfafaae86b4a57796ed5eb6d6d6f3de986014ac94d227683645775ed
- SSDEEP 1536:xtLn9G0hV2706e/00wIS1ufyBLrQNFFdbDZWLML45W5nbxER6NcqVu6ur6X3ojhv:vI0
- TLSH T1795323403BC18A5FD21DB53C82DA0D0502B260975D8F4A675FDCECA46762F819BE9BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
69646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Runtime.Serialization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b5623a2847316c2f58f612b010c39f6caa679f62a4b572f882bb9a7eee875ce
- MD5 c6e31ae2d252da9090c0c4f1e3487249
- SHA1 139ade9b0d043cd0e6763bcc95954e4946736825
- SHA512 bff755bd7875394a6685da4a9891982f41757cb19b126bdbd14613c11ae6a56f02d8bf4eb3025139ed763346047f274b6297fba4f5802c4f513adcb72bd33413
- SSDEEP 96:tOicJ/ECCl/xR1bo/K6BcCzS6yJEwfEmIamlz4VhXLf6mc0H3JMIJ4HTck0YMpuy:tIQGwfEmIR+HYlzt/MpVHtrqS5
- TLSH T134F18301FBC1D15BE64E0339A6FA0A4C03B3564B6616C79A4FDCA1FEA5663411F093EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Xml.Linq.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c325224e7e74e1476924b5aceffc8b121ca07a54c14a8ce1b9b123d6f90b51e9
- MD5 3c1af3835254d98141cb728db4c896a0
- SHA1 37619c4bbf70b418b13856d0d15776b9cab479a4
- SHA512 a74d7e8fe444bd5a0170bbca87f28da7259897599f5d24e15cf96bd2684e5b30693158c65900ef0507c19f560560104f955d05188255172ba2e000707746c12d
- SSDEEP 1536:9LzqDYwZLxWVdK50R64E0OUKI4Xtg8HbAtheQaPRwuu3KwAiY9ya465H4XkNqy0Q:9HE0OJI4
- TLSH T1E0B336117BC2C50FDA2DB23C83DE554412B354D76C4F86A28FCD9CA1D21AB426B9DBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
118654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.Xml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49d061ec04c86696416ab5aed2f4cdbaeaf77386b68ef0e9f9be6ed2dbc41ed5
- MD5 c5fb073900b2edb4eab4f3a3f790088f
- SHA1 33d1fe031cbece59da9f759f8c3a43dd97646249
- SHA512 a1fa9bf8e429e46153fd79674f1ccaa8ce335ed3dd731c71b8a37d925fb9cc62cf62a26272d2706c3585323fe64e60586860806140202b12609c65a8351d56fb
- SSDEEP 49152:SPLXGGMBk1oYP2HskB6d+IWksmK1oZMReF7CY7m3tyV:kOB6Oim3t
- TLSH T132F542417FC58B1BD22EB63C83EE184012A351CB6E4FC5518F9DE8A533197815F6EB8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3546910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2CppSystem.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 711c703a0339a57f963052bbc2c5544b3a8785f41b0939a2b40be73d3c92930a
- MD5 1e633af258899a425c300b13cd4c4114
- SHA1 608489c214c18a16bbcf47b7149c960ca26934a5
- SHA512 3cac2d042ff13b7a597d34d8ca9d788745e0b2e33979b8b90d490782a6e53b6282029046f7713450f478b22bc36083a24c2ce722f9d07bd4f96d58189c0a889c
- SSDEEP 49152:dW+rNPd+yCKfD7WwKEZYe0PGIUPn85KgMCKnG5QaEXAUKQH:dWqNPXCguwzofn
- TLSH T1527661807BC6CA9BD21D753C83EE084412A351C75D4FC5129FDDACA82762B819FADBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7695182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7.3MB
Virtual Size
7.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Il2Cppmscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b4e4ddbaa293ae1e87407bf2f59516bc31be4d4e12dbae9fe611e89eceb63b5
- MD5 2b2622adc7106f19cf24b1d4a598fc64
- SHA1 5ef7b99001be6e33eb8556b55ae069d7119a6894
- SHA512 c06ed3653a8e622f9a62eda334c38cdf23221118d7312eeefd7e466a3e29626b18b382e83dd55bf47cc9e207692cf1b5dc919023b043d3498db34036f919c033
- SSDEEP 49152:KLKorjgL5B9FZYX7QT3QbMaYAGehqmJNffBs40xtKubMBthNCVONBqoLSLb8WE6L:YvPU1vxoBcQW
- TLSH T193665300BBC58D4BD61DB23883DE084513B392CBA94F86514FDDECE66B513819B9DB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6488142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6.2MB
Virtual Size
6.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/MethodAddressToToken.db
- SHA256 246a8d70705d0029f5b20472227651453cec95794f34c5f622a2ebe92916ba19
- MD5 cbf688c8b285f4992ae750be7c9bd5ea
- SHA1 028e6d99d31d1a8cde85bccd2925b857cddeb6aa
- SHA512 64200fd42e647b17420f332a5a227aa9f236b475cb4ebfdc836d45d777bc3c3e5bd6347de8af73a39646477b5f34b494f2fcf7119f66fd3d2a8f7b15e8ee38be
- SSDEEP 12288:xfyr0ShjtJhXNdJF2yAavuAezVNL6lPeq:1sj5v2U2AIN0Pb
- TLSH T10F55603EE93B5996D52C707E98DF1F802372C969919243311734F12EBCCB1789A6BA4C
- MD5 SHA1 SHA512 SSDEEP TLSH
BepInEx/unhollowed/MethodXrefScanCache.db
- SHA256 3aea0f9bf9b688b9e9744aad529519519e999ed85ef376ea87a843db06368f78
- MD5 ec624f70eb11315bc2c9c9af289e8c2e
- SHA1 24a0b79617f8600ef0429ff28454e417a0d68e90
- SHA512 06b6bb2abdfa715131be57dc54d0275cdcff706a845b74836e5cc3884a91e8336633d746a9f5c570822ff187542f9ef3e4957b0e38925da3ecaa7e2b5a51555f
- SSDEEP 49152:uOdfuBNV86Z+VFBX1JUz24Odq/KXAq63IxIb5ykSjwC:BuBNy6ZilJtFHAq52+
- TLSH T148675B9DA7B1499BC2AA0836458FCB07D7B2CF655A82B75F072022069D794DF8E73DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
BepInEx/unhollowed/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc3194a215af68c808170f9c6acfbaca6de3c383d615afa42da4b20ab6c4d03c
- MD5 7e7d0d8ac776764e6f915739eeca7312
- SHA1 f0e9f18aa9ad37a3bd96bdbefbf840da66568cc5
- SHA512 acafd0a6f253b076e9c057c35921c623a0c2243e0375a5f52f9ba5c36ff780cada7151cba4abf1f9ad8bfc8c7e333ab1fa9709e78a6fba3c9133f150978533f1
- SSDEEP 12288:YaSWEl2de/YGfj8h1KGNhXGy0vIalmha8SL5D0n:fSnl2dcfohvhJ0Ana8w5D0
- TLSH T1C92576017BC5CA4BC18F72B843ED094112B250D76E4E85524FCCACBA6E597825F9FBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1057566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/QRCoder.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 be161e47c77e03be38dcecbbbd11cd59ca83935a45de060c851c4df85f84e743
- MD5 88fa9022b9bd2bf8258004d9f54c122d
- SHA1 c782227762b6865048681e714771e76c72441b10
- SHA512 7e98eb8d76ece77393cdb88683ca2be004e17b96769cd852c4c5047326c8deb64725196f05c2df1bb3a3fcd388b9dc77764ba4b61b05ed37bf53f63db8214c60
- SSDEEP 1536:F4Whdnn/lY1rRosrhCmMXEsEsEsEsEsEsEsEcEEc22235Dpm79zCzeQBuimYLYU+:fD/larbrhCmM0///////vb2223z4zI
- TLSH T10A8376007BD5891BD22F773C43CB164002B364C75D8A8A628FDCBD9699637826B5DBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Rewired_Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 213cd712ebdfa172ce13d2c304e84e2fe43018a991b73223cf1349e55d87b9e4
- MD5 4d414188a505d951bc9428f54ec84ccb
- SHA1 5d2d3abcc3b1354d6f61acd3d1d47c2fed374905
- SHA512 158848d7521f2f667525996de8982dd58a3606b7e8ceb6608c4e3bf7b4b46afedce726757b131c335b45d6d56c139ce006abc5432ce5fee5f68c054b2e0ca5cf
- SSDEEP 49152:y28KFNHzKhdiwhcoaGnjXrKAQG6CIiyfqZuSD0q3vYA2YWC:y28ZdxYAXKA0fq0qQ7Y7
- TLSH T1CF6694417BC1CA5BC27E737C43DD080612A352E76D9E89600F8DACF476257836B9E78A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6938510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6.6MB
Virtual Size
6.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Rewired_Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 110f445488e97709133f8dd1f53599ed7224d9d979d8c6f8cb5e03c458666062
- MD5 9c512cdaecba44adb72231c60c9b442a
- SHA1 479f9f3a262dfd5aa251dfa7ee6e9d761b0b492c
- SHA512 474aad1f6c27bc0759cd716fb3cb3bf4256c8fa6052eac9ce46bb70798c9379e5a2be57bb1601f8c7f761a75e4fa2766bf686f48d6cc1c73553a34a22df8d807
- SSDEEP 12288:S1TUkctUaayhSikTYDiQwFMXaxmjhhrJuYOg+gd+Dx2GVa5UUjQ+IW+K7wP:B5Vn+TYDiQWMXWmjhXuLRnNa+Yw
- TLSH T1F655B5003691CC0BE62E3A3D83DD0991437773876A59CA819FDDBCF57A517828B4DAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1359934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Unity.Addressables.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 113d83a0c93c01c721f5aab91941101ca9d3561d44c157d7b04757457117e923
- MD5 1403fcfd6ecf9b292776bc91eb971ae0
- SHA1 ee981456673a6fcd57a10daf8d1ede2872d10c56
- SHA512 2a70dd437f579be997b80a4e9de9c22a44213db16b231eed057b0ad3d11c180ea502353453cafc9864351e1ce369556be0df1bf07e0dd6204b006ea1bcd7168e
- SSDEEP 3072:PkhWgC/bpEkUrHuHjzDT8kZdmOMh1KND1K9:PGWxpEkUrHuHTTBZE7h1qY
- TLSH T17D5493507BC4891BD72F7A3983E9094143B354CBA84EC6114FCDBCE869627829F5EBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
290958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Unity.Analytics.DataPrivacy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 203b86fe3d67c0dd11fcbaf825075845f9c88fcfdaa12aacb9ac9e0b95dff264
- MD5 88613b55f393fa6f0cf40c5b808118f3
- SHA1 a9e822cb602a590cda39cc0402ed34a8a3a6f883
- SHA512 e702e99dd72b91f49cd4bc1436c37f2e9bbb757eae364f7075e519837fba36cb22d91bbedffd6147ecfc07d3d33beb3c727cdb257dd7ec156f34dff48750573f
- SSDEEP 192:GzKYdg2yLfhWLO4XqN+1z3DddeeyiFBwbTzkDPZU55T0:G3gLLZ46Gz3DdYeyiF+XQ9UbY
- TLSH T1B822A7217A81C48BCE5E137985EB095813B311872906DBB24FDD94F97E6A3520F8F3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Unity.ResourceManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0312001d24016d5766c5b2b7256f9b36baeccc226e02cd9e9d4479ac300d0eb
- MD5 561753d7bbc0cf1a646d20efe178a6d3
- SHA1 c613f250ea078ea9d624178a059f880d59c5d7be
- SHA512 875f48d4bc717cd241b61747827b230343329d32eba713cce6859dd70d3fab5fde62ed1e8e4f0efc81cd7b9d0287e7c37c0831fd05a34c3ec84868feed9d6344
- SSDEEP 3072:LINOai6+g4EBXoYN4qDvdd2VItnHtrIHIZHmol8T/Kd3c78s:04+XoYN4qDvddbHtFmol8LKd3wf
- TLSH T12F54941177838407D66E7A7CD389156006B754836D4FCA030FCDE9A49A16B82AFCEBDE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
299086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
284KB
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/Unity.TextMeshPro.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7d1a4a705b9cdae731d0189f3b3e6ac7ce8cadcdef2632e6509569a9e213017d
- MD5 b8d544e14c67a7cc549f7670c568c0fc
- SHA1 ec3dcaf5f899277aba4676981fcf4de921c8473a
- SHA512 d41963647d3898bc7b7548260e99168982c805f03dd39089279e97e2ce13924ad77f4b91218f96782ca7e119e818e9a956d18d4b5af0bd6e81c4e62e15951f7c
- SSDEEP 12288:feW+4EAQOT1K9e92htiWHpjYo5gpBkqKbwIRz:WWTfRKe92htiWt5gpdaP
- TLSH T1D91561103BC1C90FD21E763D93DC095153B26687AA4EC6425FDDA8ED3B25B829B0E7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
924846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
895KB
Virtual Size
895KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.AIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72c8518c4a885b3becaa1701df2197576e27d9a92042ad34e7e89b61f48b2340
- MD5 5fd100bbde4e964674cf2361123c1f08
- SHA1 4453a465bbeee6230d2a0226f86fdc03a2b79892
- SHA512 23d08a3b6afc0e7abf2c8a6e6f9ddfb8407d2774efbd2baa86ee516a9b4f48c46a86f7d4ead9487b4ff11f754fcfe83367988b2847957b011499a554ae3ded46
- SSDEEP 96:tfkg+iUn16rjRnWKQ/bXjxAwtdLPuXlwrc1SZbHn2vTfjMr5+yU3vDB8p85rkds:aim8qdAw7LnkLjM63vDB8a5rkd
- TLSH T15BC1B751BBC5CE17CC8E723C42E10608227254938A0EEB075EDCA89DED623C21F597DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.AndroidJNIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c5512884e9e0ec39369d10021829e733bb04aa7c34fabe63d926111246ece95
- MD5 f1043eea7d62f45bc052e25b6c06f0cb
- SHA1 d8d2252f74a15c1ede29bcc25117874effa116b9
- SHA512 fbd641a6635e43c02dc89bfd67b8f9fb1d94b04e8fba1d6c9cc1007c0a7c2d99f0106c0518bb5cd487f46b4040e8172e18c01c6c0c76b7f289e6210339178ec5
- SSDEEP 1536:3njuFw/bQhfsssssssssb8sssssssssLasjsiPOtVt9w6PwuA+rRcSAq/nOWFDnq:XjuFw0fsssssssssb8sssssssssesjsP
- TLSH T1BA83F0003BD5994BE21E717C03CE1D1212F254DB584E5A226FCC9CA4A765B829FDEFCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
91710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.AnimationModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36dbc9d2c76a94fe043198f5c773f92480bc7158d35f4c6d26ee7c13499dc6d8
- MD5 18d98e20f24c106ab440247b4e71b282
- SHA1 c2565a3436986454e23bcdf28b8b3cf9e2bf4386
- SHA512 41beaf4d9839765c71d3a42909c85fd8a15fbeb9c17085c5916a74046c0f0da70f1ab5de6102f26a0ae41b77e617f983e1a6e061b5bfd3f1f815dbb61f32bf06
- SSDEEP 1536:PbdFShwrL+vBolIXeEKc2xI/VXRdOXBA2OQmrkroUnIwYoE0AQWXaruyAQkUYIEz:xFSS+vBolIXeFcXKXudV
- TLSH T1DBF31E003FD1890FDA2E723C83CA59510AB364D7AC4EE9715FCCAC9061657826FADBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
179550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
167KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.AssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0a6c612cf68e55b862737404fc96eddaf1f830ddde5a8c120a388b22c437dd5
- MD5 3b2c848b658dca7e779128e52280a502
- SHA1 cc130c770abb1ee2f859e83833f41a9de1cb203e
- SHA512 ba1b8e38c0cdf2ae9adb3a74d3d1296fe537fbe91f98e1cc476248983543d1742972cb4f57733cb14ba67df6af9a637901958caf24a1f2ac189c2fe3dcd5a501
- SSDEEP 192:CPtdPUkFkkzkHCkkCkyIkIXuFHNDU+GcMOim+3e83m7mocZLL6fEOeGv+4u6NvUd:CPtdPlXBKCXOU+GcMOb+OnKo4LUeGWR1
- TLSH T160329401BBC1C95BC22E3BB842D6564022F220C7AD4FC2320FDCBDA4B955B529F597DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.AudioModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ead83e5c9be25bae64646c6b5c341543b0e4b9b4ef5f24eca404559d7951daed
- MD5 c62a4ed9e91c3dd346323ae37f375a2b
- SHA1 1db4aed9ec90eba204c11e2eece5e025c24df7b4
- SHA512 75c5667ac78d839b4a1881ad36a108cedf83de4d304f949f490c43af236d7f8e7ab8d0c1df7541045b38354da8ac97d629854fb11372590f84c92caaafaa1bc3
- SSDEEP 1536:GxRZbNB1LZbo5LgGEyGTscaPzkYw8kgwoCITsaTi/ONWvkqe6nKZ5jwa3xeKOP9f:uLp
- TLSH T15E6323003BD1891FDA1D777C83CA1D4116B694C76D8E9A312FCCECA062567826F6DBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.CoreModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eee23386ba2e9aa8f039409856c366f22d0ef3c8d3cc4b54813a879ecba4ae7a
- MD5 485e10153a2f3d174c66989a20c83ecd
- SHA1 a6743020f9d51dd4d111fa438d59aef3e2d6ebc8
- SHA512 7cfe195579e6f43e3672c8ccf4be3b6829888c6c376f1a8d963bb7dc04ad13dadb49c6259ce50cbf01b54729f912557ae06ee4d2229752eecb516ca2907d959f
- SSDEEP 12288:QEQL0QsDYYXbk9MIY5npjTmTSIs++osRil00n2O+tDiNKSvGy:QZL0QsDYctIYTyvOk00H+tOPvGy
- TLSH T1BB7553013BD0CD5FD26E727C43CD190112B6A4D759DE86621F8CACA43A257836F9EBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1616334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.DirectorModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 86ab2110cd2c8bc53161b9d1843c5b0113a3f6c945b1ea548d70d00d9cd58d72
- MD5 bc49b4114cdfc823a83054f55a325f91
- SHA1 c17008979e9704322b1326bc7e8eb1bd21036a2a
- SHA512 5cbbb1021d90b6a069e0132f98df07dafa72de357feb5c93af2e016f34f20d2d4e743b2fff5db975b6343fd53aaa3ab58d878e0a071eab55861643d0e7e83e05
- SSDEEP 96:trQG1Y+1nqXc5LyjbOpMTrf2cIiE9FM+ykMV1F1l:6Ds9X1iE9FlMV1F1l
- TLSH T1F5B195927BC0D45BCE8E173895E90A8832724083E61AD7760BEC9199FC627931F197DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.GridModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0cc978ba62abc87f3636b2a898c6c16618c6345d1e42123973db2eb41e56d7f5
- MD5 840fd35e1692ecf6b09007e92adb71c8
- SHA1 caf4fbcf45dc870faddacdabd11dde8e66979806
- SHA512 98804b216f8eb933ddc818e6f1c454ba834c7c34fac0ed4cec93add67f2295514d0e222640aa6da722c9fa2ed549a11d7ed42b825dbd72e4b29b7d81788afd31
- SSDEEP 384:uLEbi9vvbw7w00/+gQsqY6fUV9Qk0d4ol4IvvrIwsUY:uei9vvbwB0/+gQsqY6fUV9Qk02ol4Iv8
- TLSH T17972F040BBD1CA4FC21E797C82C7094951B214EB594F4A221FCCAC95B662B83AF997C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.IMGUIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2bcfaffc8818b290183bed2602a14f79832d7fa436ced7fb837f9b1ea4b8ebe
- MD5 97834c5c91452da3f54efdb760360948
- SHA1 7a4b2de903a3ab3c0cdffabd1e44694d2d07d0f9
- SHA512 4869acb266c0181e0fddd84f51f71c43e09634e9e4918a0d63857ee159fd0881bb3cf8569c4236ebf6a3139ab4c9a7c7f700e56d34db9bd94ab1ffd1889dd6cc
- SSDEEP 3072:wOsrqae5OkWCVb4jRDnlv0aL5WOCRf1Mxf:54zlZ0aJCR6f
- TLSH T18E244F103FD0C95FD22E753943C6195052A324C7ED4E8A601FCDACE4657A383AB9EBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
233566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
220KB
Virtual Size
220KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.ImageConversionModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52089053d637445a2bbbee376fe145e9e337f396a15922000ce7d4c4b3f07927
- MD5 ddae365a1080478f397453bcf1518910
- SHA1 e115a808c6d035f54857eb7a0d6f385e401f0d49
- SHA512 93d8a6059cb07a1a2df4bf3b53cf51dbd6ff5bfc78bf3aca7b4e89e6268976ad6ac2763e5123ba6d6ab3332b2defb2ea92cfc2ad992f42d1cb7b3d50fe04c489
- TLSH T1ED7186177FD1C777D89F17B848E24308237194868A17E7960A9CA16DF8A22E20F517FA
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.InputLegacyModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0892b2a44cfc83b54853b322e7eb4f13c28c6b8ef7e524fb9a6ab7adb07fe53b
- MD5 cc533ce3fb5b3f574d6f1425324110f7
- SHA1 d8dab13c41219b222abf65a105e3a9feb1bc2d70
- SHA512 ac730d058f05d248bf265249ddfda5be9c23983c4166096df9eb2217bb8e12a7853dca1500d4b4eb93e8d65d2e91cf6c06b74813175355f6e0eed959301a6acf
- SSDEEP 768:xj+7k/Q7GNNoaHzu/LXiIyQNkGpYnvVZJFpfv7Jp136oqXdlcoGvPO2DZ513UuL/:xbNNoJXiaNkGpYnjpfv7Jp136oqXdlcL
- TLSH T1C3E2744037D1854FE21E757C03DA0B4512F660C36D5F4AA12FECDCE47AA63829F99ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.InputModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 418fd25487ab4835fa01bece9a1ae9d91f43d02996263006e1b50da096688922
- MD5 1cdfff8ed28d6fc0b8e643ed7b3d5d28
- SHA1 cf3efd1e4b7b1b89d73a7a013fee745780505d3f
- SHA512 07f477f6a4b1b97513f049da10234e67b0293c193625652d82eae4b18864c347fa3f20a01f5f5cb784f7cb136896c106e6fe6d46361c00b18f527a1fbd07bb97
- SSDEEP 192:8deNr231UJIKLfosvUVlMJU+8DTA0tdDhDBfrqE3udBXx3eoLCrd4F:8deNCFf8QsJU/EiVZmBL97GRY
- TLSH T1F522D900BBC2CE1BDD2D363C41E9190512B36487590FEA329FCC9CD5AA15B815F5DBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.JSONSerializeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e3bae65f124548b130334197fe936a5443b65032a12caf5441d55f17125cc60
- MD5 b092d3edb57961367d0c5c6a42e97870
- SHA1 423b7cd4796dc1b78faa5dd5b6eed98dd9ddea62
- SHA512 aa1f7357d4005e514f84c5b45e95a7489473d0b631532e928d662240f0e0ee010b52b2cb7d848ff815e419805fa884d09f34557e9b8cc6f4f7302b37f01433be
- SSDEEP 96:tv6cM5CWbU7HbINVeDD4XQcsu+q4yTcpen0TUe+cWfhL+xhuxkJlcHWSs+y1tWQ1:8xkWckgnru+JHUj7fhLohuycHWhkQc6B
- TLSH T16BC19400BFC1C927C45E363C44DA060461B25887964BD7635FDCE8B8E7627811F69B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.ParticleSystemModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 649e577cb7a8dce4f32aaf2452dc2e22d98bc6c47b306d97acca3c335facb7e5
- MD5 8f13109236dcd125501f2eed8eec4dc4
- SHA1 c5675a8b7043b4727e68a4a3ea7a0aec9146431f
- SHA512 ee41f0cee8355d83b695cd9f2c723498d5173e9f77fdd523947f0114fa4d0cdba1391a34a92a32dfffb8431dad09d3fc51e1976eea648f425c63960b1e82c88f
- SSDEEP 1536:JzdzZx9/cVJ0rVic1JGWDVskzMb8+0MuaymWKyOO6CWGUoPyQD8iWmoCs5YlmWK/:JzdiHhE9DVsc1
- TLSH T1B5E362207BD6C94FD21EB63C43D90A5042B364C7294F8A625FCCBCE86159B829B5D7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
152638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.Physics2DModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c61f7ff27a8e151a2db2cc5ae345607419e47bc3dc967648fad3d93023294e6f
- MD5 e5e19b037d796634fae6613b97203502
- SHA1 cafb50906e6000eabb2afedda0b71c703ff2f6f4
- SHA512 baaf743873036ebc2b2334cf12106ca41abdd7ed4843886f3794905946e35dcaf80756fd01fd647220423a7e304a820457fb774cf8efca3daa3869583f1d7190
- SSDEEP 1536:8l3zruOEwN1/yHkb/mJ2IDN217PrdiG8EOqysJSt9EkY+QwvSUUdZV5uM4Vj3vvb:8obwN1yAk2bRK8el
- TLSH T154E300403BD5895FD69EF23C43D5190106F254C7694F8A611FCCACB8A912783AB9EBC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
154526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
143KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.PhysicsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dfaf89970f1799ece038d8806b8c96092c764167e96621279ae97ba812c37d49
- MD5 6831f78612722c4cbdbb3b091b1a1b74
- SHA1 5e9fcd52dc3d9bec673c74ddeea74816db1242e4
- SHA512 e031d69052e247d209083f084d56ad978a0b3a81751db0f2348eda317edb799b47e4dcaf5aac5f1b156e2fdb839463ac9ea8cc95b20b950f9870d8b20c354151
- SSDEEP 768:dQbYJCc8rYCvE5DmziR+DkqFFs2Gef7xpfW/N/G/8/b/w7A+rULamMpiErpXn4e0:dBvDCnnsI+9TqGwuzfnMsapYwL0HBrWY
- TLSH T1281333007FE6CA2FE21DB73C42CA095116B254C7194F87615FCCACA0AA567835FD9BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.Purchasing.SecurityCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91ac4cf7ded099f4e67a26bf13bf00ca0fd617f0c347a104d18918f689edb6e6
- MD5 49ac1bd6b846d0689a4cff8478296057
- SHA1 937352e8b5a1ef04ff0da8868c9eb37215159872
- SHA512 db23f1772e463e74214e342f6616c959957996688158217389827743faee79dd16e0b674635cc23143cee86f2eb3f20362af759d6af289ea2a464050ab45a5be
- TLSH T18C515012B7D48337EADF033449F347882272A856D722D78B249C812EB8A72E40D20BF5
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.Purchasing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 763e5eb12b28d915d90f3e18b4ff09102d12f825f5bc18df8a9da7cfff4b5420
- MD5 0b731e6a7d3872d8a66ee0d80991acc1
- SHA1 7f4c123ccc32128eeb5463553527cf8cbfa1ac1c
- SHA512 d8d55d5c260c8404a6a86ea07a5390750fdf37a19fbb136f5d85e23ca24b579f394ca0fa4ec441961257c18ccfc3d4e516a16827a3bfc53fc7be188bf3c8c22b
- SSDEEP 1536:DT0fKk9gauUy96lethtm2PplDtQqNBvkyuQH2BmECPyKPwxjJ86+Amx6b8c6OZc8:f1Ey96
- TLSH T1DE7382417BC68907D52DBA7C93EE199022B350871D0FCA529FCD98A197067816FCEBCE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.ScreenCaptureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ae6a5589844f873c421e38842cbf10993e69ff2498025e232127880b36c190d0
- MD5 77437e91a1948d48d197c969bc3b9a48
- SHA1 af799b2b0ca7832da9368e0d1199b51bae12cd2e
- SHA512 de8d476b5ea71f3823ea4952ded3715753ce7db7d0f1a5c80fe8eae82135d79557b9e32efb6633b123fea1d98a1d05a3b97a303294775321777d7aaaa2a77932
- SSDEEP 96:tM6awlUbJEWVZMvwQcjS2nWiAl+yIlRceke:qUUNtQ92WiDlSex
- TLSH T1E59182223FC0CE6BDA8E573984E353081A7194068266DB6B1DCC106DF9A73E51F15BDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.SharedInternalsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b15a944243fd0848b33c300f983d76445d612cb66a8a697fa804420b83c0f269
- MD5 01e273207907adc66f6e4ebbbcbd48b9
- SHA1 aaac09467dd9116a2e74cd522ad3605c0613611a
- SHA512 eacd76de11bbb8d5d66f7d34ca986084f649c75df2997cdabaf1bded4d70791be5eca1eb4d5ef14dd2eea101a62808ed0009025c7fef65d79777189b80eb5aff
- SSDEEP 768:ZftvjU+PG1gnZoEhZdAuZ3m7OhsrKQrBabozlhr9sPTLdUCJS7t8JMxykYp:wgnlhZdeGseQMbozlhr9sPTLdUCJS7tY
- TLSH T1D3C201017BD18A1BDAAD757C83AA0984027250DB1D0BCB365FCCA8A953677817F5CBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.SpriteMaskModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d32bc09ddfa33dd06f9c771c4310af13c0a3d4fa6e10b6a674b2d7f4e54bb3a
- MD5 2392b70336ee62faccb5a343570fe428
- SHA1 fe95b215c93c2b74c54d869a2542eb6ef395550f
- SHA512 b109dc6d48ddc46fc08bad1b4eaf2fa330209edb9f9527691213ac1e389fd2e698b1eb30a39df4c602e57fb221b5d9843059e554312dea8b44a5e6689cc9cd70
- SSDEEP 192:KYrgzUv0A2kEpwGhHMofW2y1K1e1W1K1S1+7mTSI+pD6Py9efWiysOqBpN+3:JX0A2kEpwGhsyNQI8UIwaUf+hS+uXTO0
- TLSH T1EC2240017BD0894FC66E353C83D61D5451B264D3A88E8A221FCCFCA8A5667C3AF497DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.SpriteShapeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f3047a4bb4a77dbfe90edef826c83dcac66632599786f83fe0a92a5c6d8f234
- MD5 f0024794cfc18e2e5587176aef4470db
- SHA1 c50ea1fe7e91dc858f9717e1a4f719564f5094b1
- SHA512 a9f4f9812ccd88a70377398592f7c952d1c462148937572acf63dfe1573ca34a5493c2a7f3865d35ba68ffcfa78ce6ab6499f98fe75e05c3f781fa70962b5740
- TLSH T116511C56BBC0C7B7CA4F037498F2934826709046D323C79B658C916EECA67E50E21BA4
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.SubsystemsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca351319a93c13ed1907446032c4e5f96b4737e797801ae6aa076d2eda328f3e
- MD5 e12563b2d14dba8f937fe4a13c983538
- SHA1 f153573bad07d48c75ad434d93f47cf26e95e80d
- SHA512 524194d29445e4de04832ba5252e7d403329fe263eec9366c9d4fbbce7e13ccb66f6ec2ec951c86dd9cc647643242081b007366b22d1d839c8a7cbaaf5a3aa39
- SSDEEP 384:aVr0aKVyAkAWIljqMyuzrMogjtB2lPX0mtIAKKT0h:aVr0aXAkAWIJqMyuzv6B2lPX0mtIAKKG
- TLSH T15B92D7047BC2D51FE26E6A394AFA0440527230972D07D7270FFC98F556B53829B38BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.TerrainModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1dfd810608aafdb910bbf6e855dc9ede120264c4d95e9cd626e941d99ab033c6
- MD5 e3bd68d71bb1a64d7529d432d6ccadf0
- SHA1 f6906085c061b6a9327ec8b933b1f293e25aa2e2
- SHA512 ba01b60ff9c4aa4abab23e94e393cb0fb5e3e9606ffd644c19e654a32f5a94cc9b0a4cf609b99ba6172b94f7f84ce983c592365d80b4ff52c0e6abde9c6aedaf
- SSDEEP 768:k+A2Uj0CSBAasJFJu1L6oxH+fFLWmeG6qBIILq+/SkVE5mayKcaIzGA8JumE6q/F:R98IkBIIJqkVE5maNcaIzGA8JumE6q/F
- TLSH T125E241407BC1CA4FD2AE767D42CB090412B710975A4F9B114FCCBCE0A6667826F9A7CE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.TextCoreModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9144d8e51f79d2cf941b09de36a24997f68feb85fbf3c46032eeb1bcd65e6634
- MD5 5c1151d1efe2d72614c12643a0321f6a
- SHA1 b9211af1b533da1eab43026ba9097ccf0ff93e53
- SHA512 25bbb6b8408067c3bd90260da1506d394c2442107aeaea352eca5a5436ba5759a3b85ac16520f4ad160f7dc97df5bbdf7d17a3727693fdc38969f85fff444df8
- SSDEEP 1536:cqvwwsOCYaFDOjQdkyXJHd05O0KulKtjbv+lfK9mfRPcVElBvNtkMYw7kJl4/pbS:cTOoguy/KG
- TLSH T1784387007FC2D51FD22E7A3C43E6195006B764C75D8ECA425FCCAC686666B825BC9BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.TextRenderingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0d358729000b1bf02c1eb7eef7e6fbe22e5ad17bc04d86f8b5dfe902e889950a
- MD5 54c25952b6ed9ff7c10ec3ecb989d0f7
- SHA1 e6800d8367804703326a6df233c0c8206e222363
- SHA512 3ad590114bfd7698f1e920d402e07d9882796a8464cd7f5af36c97daae38b19b4fc217bc4eff8c775c4e26645c3a4a0c26e55f671eb604f9cea3135ea89f7e24
- SSDEEP 1536:EAjLj8m3cJcTwGcI8wcY3ylv8E6rRpbj822z6DuX1dp5fVPMBzGhiMHm254eIqg7:bqcTkI
- TLSH T1D83384103BD2CA4BD61E733C83DA495112B314C7594FCB928FCD9C98A9277825B9EBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.TilemapModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 88d121da006e0da083aa3a4e2f4d3f00ce5bada8e05dd30720f0f54912720394
- MD5 771f7126fef77c395de4e5aa6de62930
- SHA1 dd5f5ee2cb31cc1dbd4b53cd9da7798de2a041da
- SHA512 46978156287e6d0ebd7262f269eba95a075348f05abd5aec50741e5639e61e90267bd2cb8846e07ad8acdfb041808cb6c05d982ce3d48b8ba54ba0b453cc1a18
- SSDEEP 1536:F4FC1EFX6nOscs+cIzT/bxnlOp9zqXKuGbmLapwA0CzgskKv4EUbu7Ok9HZH7XaU:9BNkKAD
- TLSH T131632E003BD5CA4FD22DB27843CA1D9111B258E7699EEA601FCC9CB0B515743BB9A7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.UI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54c95f918323676a5558b4789b835835ff3710f7c8225906c40097141173a5e8
- MD5 32dc2c5970c167ed1ca986c2e3f3059e
- SHA1 25a949e436688af56f07bedc419be32cc6f84176
- SHA512 553025327a3df53c5802e83e5cdceeac9d37c7910f0b2b119bb96a12077f1011c43d7a8d9d27ad8125d8ce564e5ee4e775ce23ca43d21e9bc773076eb185d2e1
- SSDEEP 6144:R2eciLrh6ljs8RJKpbdEIVGdJCUlfC5V0sujwwkJU2yQ0nDDB6z9OKgDWH9n+C:x1PhYjsMUbVGaU4V0hjg9n+
- TLSH T1E805400077C18D0BD22E7A7D83DD0A50437315876A8EC6524FD8BCE96A62743AF8E7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
806478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
780KB
Virtual Size
779KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.UIElementsNativeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fa8bde502700881920a2b06db7df9de528af944a255931bd3dd73311e6b3a653
- MD5 c3be4253821053ce3e2033f37debc9eb
- SHA1 e6cc140b4003b5a8a7c8127f7f59fd9531dbaa10
- SHA512 9f835620f643aaaed1e8b6c75ab1aa4810a418783c616f7ff4dc01ba893383083dae45b229758747767b5aefa89d03e634a68d8d5392622b6cbea8ec7e798cc2
- SSDEEP 384:bOt0hxhoTyUAPyaC7wo/Uua7WOWzv5kQb5sD6sg1mZDX014G2On5xq4w33H:bOt0hxhoTyLPyaDJua7WOWzv5kQbW6s3
- TLSH T11592EA407BC6C91FE92E3A3C41EB054402B258CF6A0F8A229FDC9CD15A557912B9EFC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.UIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e30456bf0ec6577b268d1b139e85ab37b3ae92ed4c61bf0176f647072f2b3b4
- MD5 2d66902b2d218d3a77395fa20f5746cb
- SHA1 7a2f15fbbc98ed7bc69771282efa510dc66cc5f5
- SHA512 ac9fb205898456a717b2dbe79b304a0dd3b15e6e0dd35495f909d8586c164f817d6a284ab6cdbc3076f20778c1a841d371e24df4b4ee0406e12e460a9a71644f
- SSDEEP 768:YQCOQGCaeeSK2IGCaeeSK2PGCaeeSKdfgGCaeeSKHGCaeeSK2vcIcCCiL/LQLx2O:WBQ8JmUTE4KVu4rCxoYILIIPQs6ULLRh
- TLSH T10923F1413AD1894BD21EB57C43D71E4142B264CB698F4A615FCCFCD86E223816B9EBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.UnityAnalyticsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2da47302575f00a1ef31620003d18dc8f21ef1245230eed2fb5f13e82ce8c6b1
- MD5 d4fcd49cd23e7a797c14f5ae80997bdc
- SHA1 f6d8083715c97876821a4eb28ea7baace8a8d1f4
- SHA512 b4a139176ef479ef9683197afb93bdb6fee79f184c1d1b2ce18889bbf61a8d1ab543e04c3de4e29162afddd231ba82b1a02b9b2ab2828287b97cf57ac3dd5e80
- SSDEEP 768:cK9kV/xRcihwCO+wCOBp2hB47S9MKfr1tBMdhgpBYXicliBOLZ5yHwSs9d69Fl4b:wiKfhtBMdhgpBYXicliBOLZ5yHwSs9YY
- TLSH T198C265017BC18A1BC51DB73C43E6094402B250DBA94F8F265FCCBC956766BC26B9EBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.UnityWebRequestAssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 16d56faea2f6cac1b4ac3100837cc5760900effd574e3a0d6ae5f7ff024ccd65
- MD5 3144520358e9182219c6330517b12045
- SHA1 62d61fbd22ee28dc3f5a97c09c3df161b73574cc
- SHA512 e428ebecac92b8732d60f513957e32a653301ffcf77219cf50711b05259c293f0664c30f3777a9a2c1980151922d215b1f0f15ba2c003cc52636848176475376
- SSDEEP 192:Ktc0PBVJmJtiJ0d5880Jtk89I4sDh9zQCa+LG9NVthMu2VEH8dQrFkiDSZJoympp:KC0HJmJtiJ0d5880Jtlm99a+KNHnSuIT
- TLSH T16F2282047FC5D91BE50EAA7C42EA4A0406932093494F8A769FDCADA0B6713914F797CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.UnityWebRequestModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5ef878ece6e12b3b301e3896e76848fedf92c53ec351a9aaff982b1abed4651f
- MD5 cd72b0fb3f598cab356027a5491ef936
- SHA1 9eb4d314af6a689ef445df36d61290840d97fdec
- SHA512 623fd8d7dddd000c0befb2eb316c5c066f8c76c639dfc6519e3ea6eccadbc9921d2ecd0d197841c22d70faabdb9ae454c1f7971b9e4b3ef81322d5e7feac7379
- SSDEEP 768:1jNWWptYqDSDkH/ltT56581f6pkuVz2F52fDf2y1SdSYpSVpcIvIN6pSpX5jq21u:bGk2z2F19+0Xov62BGDZpdQFAc1HvSON
- TLSH T1CD23F1007BC2890FD61E757C43CA1A9412B314D35C4F5B66AFCCACA466727829B9D7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.VFXModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7a7a82beae9d973cfc05f422d22bcfb10b8b3200d82fd87baad36277d505660
- MD5 8f0786832e11b7df86b89116fd0bd612
- SHA1 34f646545e1d0d71881b9e7a43dd5439d33e6cee
- SHA512 8c99d89a26912d197d967a5fec53a9b89e169afe1bee4dbfd36b2b9b87ba5de2b53298070c8f3b1516dfb065389d340e905b3409492a3a5fbb3c9f54bc040d53
- SSDEEP 384:18Y8x8wD4u9fH6Y9GTLhVUq0ob4SXXAbSdjhH7LVlLTY+8:18Y8x8w8ux6+GTLbUq0ob4SXXAbSdjhi
- TLSH T19B8241117BC2851BC61D757C83DB1AA002B204C7AD0F87225FDCACE59A167912FDEBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.VRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ece1c8fc853f0dc0630e22cbfaf694d35d87e71c08095a2bf3066960d52870ac
- MD5 92edca3496d56f54e500c2f435f0348d
- SHA1 50030e9af9973f22f6cfca52d5c446fa262415b7
- SHA512 81e3adbad567a52e774bbb14a23802550e1d65177785f0cc8de1f97605c2f82d8944f5fdfbc13256f4ee8c5855c7677a8c0c10bc64d2c29f105815dc1c99504e
- TLSH T1148184723BC0C65BC88E077598F20644133285429622D79B9AAC803BFCE22D11F25BE9
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.VideoModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d4d58477658442f85c933a8160b23e221df3a06efe919bd4736e204a5502c74
- MD5 4c41f0df8e87b7b5d6d087ffda712b1d
- SHA1 c11961a1abfdc3e8edc57e88721a834f2505e5ef
- SHA512 9c9e71131b7910dd3e673bc9fea628328b1308ece3da4835533d5a41e0b1d2e48b6b77f792b22ec45ce7ee6d713ed0dcb332ce8c912f1573084044a0ce1ad236
- SSDEEP 384:1xnHFEhu4f3nzmFpljIpznSR/q+tcBEq5OLV/HSyaQaxOjWV8HN8Lbm:1xnHFEhu4f3nzmFpljIpB7BEq5OLZHS2
- TLSH T12892D7417BC5DD27D32EA37C85E20A510273208725AF8A139FDDA9E055223835F8EFCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.XRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66520efa22f7354da4bcc9783cfb8516d9267a762de4c6df51c519ab0d2a2b8a
- MD5 2f6bb1f223019f100b38a75342b02364
- SHA1 b9f870e83201ee0ae1015167e9d07eefc5041a50
- SHA512 0941ff1d0de2e34cc44d019a1800eba7d2b6cf8375f81d02d915c3edf727f853934ae564321f030f532af10f137230c95282c704fe934c5a7bf12da95929a485
- SSDEEP 768:UZDxNlBpSANUw6jqh52tpYdCCfDITsY+qjvAIX0vr3EjtavznKCiAleBmvUp1tKY:0VJUw6jDpYECbITsY+qjvAIX0vr3Ejtf
- TLSH T180F2C70177C2850BD65E367C42E6094003B275D70C4FCB258BDCA8F579A63825FAABDB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/UnityEngine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ceee11dff9714e17eb3dc99156536630dc4a9947d032f8194153683a59152363
- MD5 e330442dbe3dfca12f36effda88ea48b
- SHA1 25c3ad6ad6ae3215ee421431ba91fb76c2bfd765
- SHA512 0508cf9b4d5aff55c25ebe0b1371c8d47d40812f8ca650a272ec54b16da728afbb9b79ac8e8c3331ec26297ce2946add8a8888826a9c81d483ee73d63373297b
- SSDEEP 768:ZmMj8vFsiulPt6X2g/m4agSic2yQi3p/spozgXwTieUfrI/2y2x:ZYONn6X2gjagSic2yQQeFAGb/H
- TLSH T195232AB91AC5DF33CC8F5B3BEC5BDD4C1AE0018B2836F5A9355EEE5164EA1842B19348
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BepInEx/unhollowed/assembly-hash.txt
- SHA256 cc5c664f6fb6c1545ce5f39aca08c9c80b00bcd99c4a19479952f8ec0b116c1f
- MD5 33cbf632fffa255ff0c9bb332e452ed2
- SHA1 8de39b6bb74d33511e9e23a0bfe81cdeddd90a97
- SHA512 5f40f0a2abc8db8ac2782150ef0bc9132f1efb2cdebacd56460f125a2d3316ac75d76d3ee361b6bebeccfa1c1d63f17a7dc62e781b54a285627f703548b1ecb9
- MD5 SHA1 SHA512
doorstop_config.ini
- SHA256 4ccb6d4821cbd91ad30503651178c80bea91c9f4a01b0301ec04ed367b97e71d
- MD5 22e60c9139d2e98cae1879759b2e97eb
- SHA1 d30bc221dc7096afea3c698d3e63a016145d262a
- SHA512 25e82785b069698f4d377c32d2add9b185fc86ff531ef7b969c60755a00574f53ee48fd25178862c613d16effe425a3c2aa3014faaec6abdfb76960a361d6d65
- TLSH T144F09E710ED4277C6A0FBC42FC6973CF16578A9D81BE34B4F9CCB6E691135144706661
- MD5 SHA1 SHA512 TLSH
mono/Managed/Microsoft.CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6eb6e16753d621d0f15b1aeb7153b7bdb2b9e35e1220dcf2b660bdb2d48c5d1d
- MD5 fbe175d2daeeab0c73ba17ba5e3414b1
- SHA1 75760f17546f09c1b4e5bcd6d25cfce9939b663d
- SHA512 e66f768154f4ab6d3a0408f0ea01c47cd8eb676452db0cb3ee3ffac5c5b9cdfe8fdca6018c99b966ac4823ad8cab61ce1b5361e32abe9c547b45cd6789ebc2d0
- SSDEEP 6144:t7Fte0nM+wWI9W2JPiSlSGqzSjW85b+caF5+VxGCMAMwUvAQZ82143u9yHDV70Ka:ti0MjbRaFDbAcA2a3u9yHZIL
- TLSH T123546A2567EC4A4AE6FFA730D0780C484BF5F80AB67AEB6D5818E1FA5C02B50D941773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
305698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\Microsoft.CSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
292KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/Mono.Posix.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 07ce8eb9219fa61056dda6fc83eee04e99349f54653a4df7725b16a1ed101350
- MD5 272d9901b29cb6541f44124b9949594b
- SHA1 69080a7d89c21a3204d27554ddc52e7d23efdd49
- SHA512 112be7d366e39f03c029177b000fb48c04cb0bc12c43485287c8b4afc72073381a424c56eedb97281ab6d3a5750425d3c2fc32e6847b70f0bce0f57aba56b88a
- SSDEEP 6144:Tc9wE0Q11J76CNWSKnc42KUU1pcsz/eO:Tc9wE0Q11J7PN+HzUoz
- TLSH T1D4244B5467F8491AE2BE1B38E8731F0A8374F9AD7D13E39E1EA99739147378580113A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
220518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\Mono.Posix.pdb
mscoree
_CorDllMain
Name
.text
Size
207KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/Mono.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d8b23a8ebe9396a7b54585798053cd87a3bcbc2fde1f8fd4f7b84a7489bf5c21
- MD5 ef8a1bb8059c1d2384bde50899c88726
- SHA1 44823440cef0a1033e820f4c297f5a40ceb01785
- SHA512 d6005b8b347aa14aa5f6af3fb5ee66b1e3ba0b97a12ba20a7557f46c5f77eb5bf23d83e81af51fca88d03c559c625026dfccdc80fc3e6c2cd4a8289fb97dda44
- SSDEEP 6144:NUjTQ70cnf8MoVRxS9iJdBF119RJXG2yW+QX:MEiH119RJXN3X
- TLSH T1CC344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
241706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\Mono.Security.pdb
mscoree
_CorDllMain
Name
.text
Size
233KB
Virtual Size
233KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
972B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25acc46834f080d42489ec3c295f8e4a91aab3adc618e3ae61500e3dd4b062d8
- MD5 467cd73abbcea602582693f9daf7bf6e
- SHA1 bbfce72bfe0e27e0dd93ef27939b612b2116dd27
- SHA512 764889ba037d34744ceb6bf0594afadf926b24371338a9dd61665ed305aca5a02707865be62280dcebc84f729fd216920cb61da8c1b28050de3249f909cdee8e
- SSDEEP 3072:+RY42japD258YC4a/vHnzB7IxzbzeTIe5:+RKMD25o3d7
- TLSH T145C3072563E8472AE6FF5B79F8B511110EB1FA0BB437E74D6945B2EC08237804A62773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
128102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Configuration.pdb
mscoree
_CorDllMain
Name
.text
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 926234b2a12a6b00df98941ab7bf23fb261722ce76c17c1e1164ae92d5271dde
- MD5 914291f83eb0dee8a58a8d87601d6b32
- SHA1 ef097db1880878e5f327072b9ace8b27a042c7e3
- SHA512 72fa1ff32b27927d03d77cd92009c1d599c70664ae68276b985b54e584e1f6e73484913900aa5107e3209f82dc3f0f23b5a7dbfc62875ced2d0dc9026277bd9c
- SSDEEP 12288:kejgq9JaoKQIPsr1+zZD0loDUxUcF0m8LxpH/vwm2X15Moc43gTjFj+VS1tfgm:o3Ss1wDMB43gTBj+01tfg
- TLSH T1F535271633EC8726D1FFAB776874061907B0FD6AABB6C74F2504A2AE1C92754CD107B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1082046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Data.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 98bd01251f00507b1f153c5e86b44f37b28e6ee9b2cdc2b9af8ab949ae342c55
- MD5 ac0c1dcb36137dcdbd998cef26232f33
- SHA1 3019d4ebcc834e6addd143295d7244fc185eb2c1
- SHA512 f3533912bec9c4ed36b9d3d97b66d2e34ea2a3cb46489efe5f48b19a4e8d5cc7761bcfc4620303bf87471f284891105733ebd6120507a7157a3d50cef43f1162
- SSDEEP 49152:HaEsYwGbCOkcM+BAG7WMiNdg2RilcBYbNqO:Jbv1LBAG7
- TLSH T17FA5281077FCAE1AE1BF2735A47905151BF5FC22A772D39E6524912E0CB2B508CE27A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2122522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Data.pdb
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Net.Http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d8489a11c6779983fb1eaddd3310d3e1b12d6ca235757c7e4c1c34caf5078680
- MD5 16c659013c625fe8640635c635297a8b
- SHA1 65ea36dad83a641f687d2e4c2940ebe81d6de2d7
- SHA512 6c1746b677910ca5c897f581c22e759c4bec4b98192e0c3f27b19453f551f2eb8fad42483864a0fdad0085d627752638c34d32979afdabbb766d5d1f488e61d0
- SSDEEP 3072:nk5iM1UWc04nce2MMSNPY16VDgy4/oJzt4phtl:nO02MMz
- TLSH T103C33A6463AC8BBECB9F6679F470156887FAC2077112EB8E1C4874FD54837A0AD12277
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
127298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Net.Http.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Numerics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f56e6489d56727241f0916c650a6dc6292735e88bba65c57381846d790478d4b
- MD5 26616c88b816254c91b2da2847125d7f
- SHA1 075cee6e38d6770d280d754596e29cf7edbd38e3
- SHA512 5f553ed486c34a21c298d0d633413b3451e2557c6a1e3605efb1e92ecc7608a991044a414d6b3dc72de1577b1ea0333cffb952ad44c30f63e0514d39413c8c9d
- SSDEEP 3072:zs3Y2J9/VsrgQmsmJfbAGzj76Oxqwf3nBNmxk:eBj76OxqwfT8
- TLSH T112C3086C4FAC4B06D7FE0AFCC4756E0AB624B112A7A3E7FA184C45350D47B5BA856383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
125122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Numerics.pdb
mscoree
_CorDllMain
Name
.text
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Reflection.Emit.ILGeneration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 87fbadaec2fe4bf784898d445cb866846fc6b04162f616325805ccdc08cf02c4
- MD5 c0b613d72603f09378a4a7d0281a7f1b
- SHA1 4439e29bca97ba8ca6bca051033c08af2abbba9e
- SHA512 54d641654530d6fe51d6243547a744913946d22401ae382e98a9396d6eeaf89f6b73782712db46b73d649512247586ccb2ac25317518f6cb273c4a18bba5d938
- SSDEEP 48:6tNDBl211ww/lMVHR3+IvO0wSMxO/nEZ44co9lDherPs5IhefV+:aBl2XipxvDwSyOIj/erI0
- TLSH T143916211A7F88372F9F78B35ACBB46A21179BD44DD129B2E1985428E7C1D7204A72F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Reflection.Emit.Lightweight.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 203b470536e67e45a018c2c0c2d6118bf7582a87ec34747037d270ca5c286ced
- MD5 98ef7bf2627b97b17d8a71f799ec185e
- SHA1 d5617703ec8fa90f6defcccceb555db27f710262
- SHA512 4df2a42ff49fa8fd8bd946eda67520b950c41f17a8794871531f41175f77b650f8f0ec8047c55c849ea0dc4943c3fc2576959fa00f92ad925057ccb3672888b2
- SSDEEP 48:6Z8/LBlLwgzJVZm9MpD5+IvcWQRrxOEnbZ449oml6Ue4Pr5IhefV+:XLBlLwOm65xvcWQfOkn7e4V0
- TLSH T14E9152209BF94376F8BB4B716CBB975212B5FE15CD23C72F0591410E6C296648E32BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Reflection.Emit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df34bbce14e68fd8ec293ea5f9f3ccc238f75d309768142678a4fa487e0cb6e5
- MD5 5299ca3ced868c6d15cc0fee70fdf146
- SHA1 389fd7d74eb1020473069e1b71e5ef9a2d29b851
- SHA512 430439288f07c3d3119616825934c3ad22f7bcb8401fe3f3ab2b44f08b95586041e15706c127d4f930e6bafff1793cee3e7d6f9ed6a7415b29f9ff77bf9e6a70
- SSDEEP 48:6VNjI0l/M5yMD0Ot9r+IvqGVyExOyPVn5tZ44sAo5cluMekPT5IhefV+:yI0l/q0OrrxvqG0KOeLLQcnekt0
- TLSH T1CF91752197F48337F9B74B356DB39BC211B5F8508D62976F0549421F6C162508F31B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Runtime.Serialization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 213e1f08c5d7c07af4598698686ccb0affef525ad27ae92d2adb16488fdb5e6c
- MD5 664fd04e255f71fdef84a9c81909e32b
- SHA1 e2bde164508744a895794af297d1dff6fcd5c272
- SHA512 a83e737a031502e6f838b4145aead8d04c7439a449fe1b6a9c940d1af032d480e78444b6baf80af8fc8086b748932dfd1b8ddaf4623aebe6412866dcfa5cb296
- SSDEEP 12288:dzH1u6Mvi8yHqwY5Y82/8neWnISLHfCtEmAYLV0vKLk:dSK8MIZ2/8nbb6lAYLV0vKLk
- TLSH T1BE1505107BECA61BE1FF7B38A535426047F1FC1AEABAD74E554091AE1C92B808C61773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
942710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Runtime.Serialization.pdb
mscoree
_CorDllMain
Name
.text
Size
914KB
Virtual Size
914KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.Xml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6a4ccdf1771f79e0f0ccc0e2e16abc984c463676a46ea5676ed8205180f8023
- MD5 b70c24a609a1b242ef067b23c9a729a2
- SHA1 0531fe76338e7010014172d683a99e77be806db5
- SHA512 dda33d2a259194391a8561200868509dc7972dd89d697b010f2b1a21eb07baa651f61db2e7759f0be08be1a875c1bd7340fce2dd2e10c1f335d02c8242132e88
- SSDEEP 49152:E/UPWRl/vhfJ2OBep2Z5j6sEqz8IGDx7EHN:E/UPWRl/vhleIZ
- TLSH T1DCE5392173FC8E26E8BF7B36A43015594BF1F855ABB2EB9F2644A26D1C237408C51763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3171482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.Xml.pdb
mscoree
_CorDllMain
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca03f5243f8734bb155e8f2911e774aaf776637ea6ac0ebfac8b1365382bdc0d
- MD5 4464d39661fa8ba3710e7b998bbbb4a8
- SHA1 d5f44b476eb0cae062f2b859d8ca5a1defc2a70c
- SHA512 80f45b190f1e90c213e8d386644dd129ed67d99c0b0430271cdccdfb15fb4d4b7c3e3bcdd17ca0c7a0985db19aebf4627348c8af75b44f9565d08cdef998de81
- SSDEEP 49152:LTkeB1wZEVMdePthz8QV9BtKPyW7FGBPQRXhWOw:LTpoZsxzgQzdsI
- TLSH T116C5280173F85F2BE5AF5776E17211110BB2FC16EBA2E70E5640AA7D1C63B908D613A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2605242
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\System.pdb
mscoree
_CorDllMain
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/mscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b331d94b1eee94d9e449a6ea200fa7c4a4e229c657baa6f60ab7097169f21c24
- MD5 bbf8ca13783432ed7841fc5d6b6de101
- SHA1 ab8aa2b2e8587d1ca260dfaeba4434fc3f4b19b6
- SHA512 e2337b3b40ed8a1143011050ab433377a98d935964d33c79f54b89f63276c23140e50fdb1511d401491ea311e17c0e51525b24553fd1076c2e71b5cadf6d58e5
- SSDEEP 49152:Zhx0RFnnYXTGMbgmrx+PY8JgeXLWnS8z8ost4ecxIA:Z30RFnnKTGM5kY7
- TLSH T161263B40EBFCCB16F1FB7B3598B611221BB2FC55A736D30E2185E52C28A2B448E55763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4644206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\denis\OneDrive\Documents\Projects\C++\mono\mcs\class\lib\net_4_x-win32\mscorlib.pdb
mscoree
_CorDllMain
Name
.text
Size
4.4MB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/Managed/netstandard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 227118e700d57b5a8a2532dbbc9a0685a191a1725eebbdf84db879b28a23b83c
- MD5 a928a075e73ed4d461d4b9e40c6b5fcf
- SHA1 62c75890bac72c2620c8cd098f8f59c71dff081c
- SHA512 4620253652a55f5ec4ee7cd7f60a8642655151edc6cce518c3da8656871ee312af16ede6f90db8f8b284b99f2ecc860497f367593d834bc3904d980c80f6a471
- SSDEEP 1536:fphxtx/td0FpjFlOX3nqvYp5f4bJUHGPdghpuSX5qUE7cLh9zvu:h7txT0FpjFlOX3nAYn4bJUiIBh1vu
- TLSH T11B93C32ABD589B33CD9F87B5D9B3148607F232CE40762DBA4446B66788C7684137339E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mono/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- IMPHASH ff034c52131acd9ef683b884ac87b1f8
- SHA256 c7bb58c8c6a74b7679ed20e85c6782a2bf4444d5e58d5d94a202e377b7db5669
- MD5 400fa58643d66097feee1fd3955f0a5c
- SHA1 06bf83186237c8bb0186f4e298823c3e50e74ff9
- SHA512 3842018ee1cf230d88021bcb2de7d8fd44cde38b6514010276086abc550d328147265e8c3d8c5a5f19b99fa59f5c30ae9e1dc1d710339d3d26d0886ac8483f0a
- SSDEEP 12288:9UUtPcgVN+wdBbuMEiyvA5t3ggKTJmPV:jtEu75tBKTKV
- TLSH T10BD46C107C818262EDF620FD46ECB532156CA4B0472595CB62CC5BFEDA242D17B3B7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5651
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\build\output\Unity-Technologies\mono\msvc\build\bdwgc\Win32\bin\Release\MonoPosixHelper.pdb
kernel32
CreateFileW
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetLastError
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FileTimeToDosDateTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetTempPathW
GetCPInfo
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetStdHandle
GetConsoleCP
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetACP
GetStringTypeW
FlushFileBuffers
SetStdHandle
GetFileAttributesExW
HeapReAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
HeapSize
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
EncodePointer
DecodePointer
RaiseException
CloseZStream
CreateZStream
Flush
Mono_Posix_FromAccessModes
Mono_Posix_FromConfstrName
Mono_Posix_FromDirectoryNotifyFlags
Mono_Posix_FromErrno
Mono_Posix_FromFcntlCommand
Mono_Posix_FromFilePermissions
Mono_Posix_FromLockType
Mono_Posix_FromLockfCommand
Mono_Posix_FromMlockallFlags
Mono_Posix_FromMmapFlags
Mono_Posix_FromMmapProts
Mono_Posix_FromMountFlags
Mono_Posix_FromMremapFlags
Mono_Posix_FromMsyncFlags
Mono_Posix_FromOpenFlags
Mono_Posix_FromPathconfName
Mono_Posix_FromPollEvents
Mono_Posix_FromPosixFadviseAdvice
Mono_Posix_FromPosixMadviseAdvice
Mono_Posix_FromSeekFlags
Mono_Posix_FromSignum
Mono_Posix_FromSysconfName
Mono_Posix_FromSyslogFacility
Mono_Posix_FromSyslogLevel
Mono_Posix_FromSyslogOptions
Mono_Posix_FromWaitOptions
Mono_Posix_FromXattrFlags
Mono_Posix_Stdlib_BUFSIZ
Mono_Posix_Stdlib_CreateFilePosition
Mono_Posix_Stdlib_DumpFilePosition
Mono_Posix_Stdlib_EOF
Mono_Posix_Stdlib_EXIT_FAILURE
Mono_Posix_Stdlib_EXIT_SUCCESS
Mono_Posix_Stdlib_FILENAME_MAX
Mono_Posix_Stdlib_FOPEN_MAX
Mono_Posix_Stdlib_GetLastError
Mono_Posix_Stdlib_InvokeSignalHandler
Mono_Posix_Stdlib_L_tmpnam
Mono_Posix_Stdlib_MB_CUR_MAX
Mono_Posix_Stdlib_RAND_MAX
Mono_Posix_Stdlib_SIG_DFL
Mono_Posix_Stdlib_SIG_ERR
Mono_Posix_Stdlib_SIG_IGN
Mono_Posix_Stdlib_SetLastError
Mono_Posix_Stdlib_TMP_MAX
Mono_Posix_Stdlib__IOFBF
Mono_Posix_Stdlib__IOLBF
Mono_Posix_Stdlib__IONBF
Mono_Posix_Stdlib_calloc
Mono_Posix_Stdlib_clearerr
Mono_Posix_Stdlib_fclose
Mono_Posix_Stdlib_feof
Mono_Posix_Stdlib_ferror
Mono_Posix_Stdlib_fflush
Mono_Posix_Stdlib_fgetc
Mono_Posix_Stdlib_fgetpos
Mono_Posix_Stdlib_fgets
Mono_Posix_Stdlib_fopen
Mono_Posix_Stdlib_fprintf
Mono_Posix_Stdlib_fputc
Mono_Posix_Stdlib_fputs
Mono_Posix_Stdlib_fread
Mono_Posix_Stdlib_free
Mono_Posix_Stdlib_freopen
Mono_Posix_Stdlib_fseek
Mono_Posix_Stdlib_fsetpos
Mono_Posix_Stdlib_ftell
Mono_Posix_Stdlib_fwrite
Mono_Posix_Stdlib_malloc
Mono_Posix_Stdlib_perror
Mono_Posix_Stdlib_realloc
Mono_Posix_Stdlib_rewind
Mono_Posix_Stdlib_setbuf
Mono_Posix_Stdlib_setvbuf
Mono_Posix_Stdlib_stderr
Mono_Posix_Stdlib_stdin
Mono_Posix_Stdlib_stdout
Mono_Posix_Stdlib_strlen
Mono_Posix_Stdlib_tmpfile
Mono_Posix_Stdlib_ungetc
Mono_Posix_Syscall_L_ctermid
Mono_Posix_Syscall_L_cuserid
Mono_Posix_Syscall_get_at_fdcwd
Mono_Posix_Syscall_get_utime_now
Mono_Posix_Syscall_get_utime_omit
Mono_Posix_ToAccessModes
Mono_Posix_ToConfstrName
Mono_Posix_ToDirectoryNotifyFlags
Mono_Posix_ToErrno
Mono_Posix_ToFcntlCommand
Mono_Posix_ToFilePermissions
Mono_Posix_ToLockType
Mono_Posix_ToLockfCommand
Mono_Posix_ToMlockallFlags
Mono_Posix_ToMmapFlags
Mono_Posix_ToMmapProts
Mono_Posix_ToMountFlags
Mono_Posix_ToMremapFlags
Mono_Posix_ToMsyncFlags
Mono_Posix_ToOpenFlags
Mono_Posix_ToPathconfName
Mono_Posix_ToPollEvents
Mono_Posix_ToPosixFadviseAdvice
Mono_Posix_ToPosixMadviseAdvice
Mono_Posix_ToSeekFlags
Mono_Posix_ToSignum
Mono_Posix_ToSysconfName
Mono_Posix_ToSyslogFacility
Mono_Posix_ToSyslogLevel
Mono_Posix_ToSyslogOptions
Mono_Posix_ToWaitOptions
Mono_Posix_ToXattrFlags
Mono_Unix_VersionString
ReadZStream
WriteZStream
unzClose
unzCloseCurrentFile
unzGetCurrentFileInfo
unzGoToFirstFile
unzGoToNextFile
unzLocateFile
unzOpen2
unzOpenCurrentFile2
unzReadCurrentFile
unztell
zipClose
zipCloseFileInZip
zipOpen2
zipOpenNewFileInZip
zipWriteInFileInZip
Name
.text
Size
502KB
Virtual Size
502KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
1024B
Virtual Size
981B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=171, id=243, version=40116,
count=25, id=242, version=40116,
count=2, id=199, version=41118,
count=18, id=259, version=24123,
count=22, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=203, version=65501,
count=102, id=1, productName=Unmarked objects,
count=25, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
mono/MonoBleedingEdge/EmbedRuntime/mono-2.0-sgen.dll
- IMPHASH afb801a03ac564a64696f614e33ae4c5
- SHA256 afb43f4980f97581b30adb29360f72d7ea93f43b22bfddc32a2cf51fe83f5890
- MD5 049cd2e52e55e9b1d640e3941e923912
- SHA1 c2729e045e6f7ca06e2f8857c4b858ce84ea4828
- SHA512 87826cce160ef6d7e653ed11ccd64d37e22336ee98391233a3aaefcdc2e7de63765a9edbf6b12b77968d99c543050a88205c7c5f92909dc368b07d38c95b2707
- SSDEEP 98304:I6UUTiGkIu7PdUIlKqeN2OR/M5vBovGRri5om8FWEWLcuoFFt/RUuz2e0NN2Wknp:9UUTTkI4UuZoeWET9lB
- TLSH T1D326AF25F9038033E8D714F551BFABBB6C690324572598D3A480ADA467708E27B3FB67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3695467
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Sourcecode\GitHub-Bepis\mono\msvc\build\sgen\Win32\bin\Release\mono-2.0-sgen.pdb
bcrypt
BCryptGenRandom
ws2_32
closesocket
ntohl
shutdown
listen
WSASocketW
inet_pton
getpeername
getsockname
ntohs
gethostname
getsockopt
htonl
setsockopt
WSAWaitForMultipleEvents
WSACleanup
WSAStartup
getaddrinfo
getprotobyname
freeaddrinfo
getnameinfo
htons
WSAIoctl
bind
ioctlsocket
recv
connect
socket
send
inet_addr
accept
sendto
WSARecv
recvfrom
WSASetLastError
WSASend
select
WSAGetLastError
__WSAFDIsSet
ole32
CoInitializeEx
CoUninitialize
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayPtrOfIndex
SafeArrayGetDim
SysAllocStringLen
SafeArrayCreate
SysStringLen
SafeArrayPutElement
SysFreeString
SafeArrayGetLBound
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
advapi32
CreateProcessWithLogonW
GetEffectiveRightsFromAclW
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
CopySid
GetNamedSecurityInfoW
OpenProcessToken
FreeSid
DuplicateToken
GetLengthSid
BuildTrusteeWithSidW
OpenThreadToken
LookupAccountSidW
GetTokenInformation
RevertToSelf
ImpersonateLoggedOnUser
winmm
timeGetDevCaps
timeSetEvent
timeKillEvent
timeEndPeriod
timeBeginPeriod
kernel32
OpenProcess
TerminateProcess
SetPriorityClass
GetProcessWorkingSetSize
OpenEventW
OpenSemaphoreW
OpenMutexW
ReleaseMutex
CreateMutexW
GlobalReAlloc
GlobalFree
GlobalAlloc
IsWow64Process
GetEnvironmentStringsW
GetComputerNameW
OutputDebugStringW
FreeEnvironmentStringsW
FlushFileBuffers
GetDriveTypeW
MoveFileW
GetFileType
CopyFileW
K32EnumProcesses
SetCurrentDirectoryW
UnlockFile
CancelIoEx
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
SetFileAttributesW
SetEndOfFile
SetFilePointer
CreatePipe
LockFile
SetFileTime
RemoveDirectoryW
WriteFile
GetStdHandle
GetFileSizeEx
GetVolumeInformationW
ReadFile
CreateDirectoryW
GetConsoleMode
DeleteFileW
FlushViewOfFile
GetFileAttributesExW
GetPriorityClass
CreateProcessW
SetProcessWorkingSetSize
GetProcessTimes
GetExitCodeProcess
FreeConsole
MultiByteToWideChar
SetThreadStackGuarantee
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
CreateFileA
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
ReplaceFileW
FileTimeToSystemTime
OpenFileMappingW
SetHandleInformation
GetFileInformationByHandleEx
SetThreadPriority
K32GetModuleInformation
VerLanguageNameW
Sleep
GetTickCount
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
GetThreadLocale
SetEnvironmentVariableW
GetEnvironmentVariableW
GetLocaleInfoA
GetLastError
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
K32GetModuleFileNameExW
FormatMessageW
K32GetModuleBaseNameW
LoadLibraryW
GetCurrentDirectoryW
GetProcAddress
LocalFree
GetModuleHandleW
FreeLibrary
K32EnumProcessModules
QueryPerformanceFrequency
QueryPerformanceCounter
GetACP
HeapCreate
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TlsAlloc
HeapAlloc
HeapDestroy
InitializeSRWLock
SetLastError
SetErrorMode
LoadLibraryExW
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
CloseHandle
GetSystemInfo
CreateFileMappingW
MapViewOfFile
VirtualQuery
GetSystemTimes
GetCurrentProcessId
GetTickCount64
GetSystemTimeAsFileTime
IsDebuggerPresent
SleepConditionVariableCS
TryEnterCriticalSection
TryAcquireSRWLockExclusive
WakeConditionVariable
InitializeConditionVariable
DeleteCriticalSection
SleepConditionVariableSRW
ReleaseSemaphore
CreateSemaphoreW
TlsSetValue
WakeAllConditionVariable
DuplicateHandle
TlsFree
CancelIo
GetCurrentProcessorNumberEx
FlushProcessWriteBuffers
WaitForSingleObject
GetCurrentThreadId
SuspendThread
ResumeThread
ExitThread
CancelSynchronousIo
GetCurrentThread
CreateThread
QueueUserAPC
SwitchToThread
GetThreadContext
SetThreadContext
OpenThread
GlobalMemoryStatusEx
CreateEventW
SetEvent
ResetEvent
SignalObjectAndWait
WaitForMultipleObjectsEx
WaitForSingleObjectEx
SleepEx
RaiseException
GetCommandLineW
CreateFileW
GetSystemDirectoryW
DisableThreadLibraryCalls
GetFileSize
ExitProcess
GetVersionExW
DebugBreak
GetProcessId
user32
MessageBoxW
WaitForInputIdle
SendMessageTimeoutW
MsgWaitForMultipleObjectsEx
shell32
CommandLineToArgvW
SHGetKnownFolderPath
ShellExecuteExW
SHGetFolderPathW
vcruntime140
memcpy
strchr
__std_type_info_destroy_list
memset
__current_exception_context
__current_exception
_except_handler4_common
strstr
memmove
strrchr
wcschr
api-ms-win-crt-stdio-l1-1-0
_wmktemp
__stdio_common_vsscanf
_mktemp
_open
fwrite
fputs
fclose
ferror
feof
_get_osfhandle
fseek
ftell
__stdio_common_vfprintf
_read
_lseek
_getcwd
_close
_wopen
__acrt_iob_func
fread
fopen
_wfopen
fflush
_write
__stdio_common_vsprintf
fgets
_fileno
api-ms-win-crt-runtime-l1-1-0
abort
terminate
_initterm_e
_initterm
_cexit
_crt_at_quick_exit
system
_execute_onexit_table
_wsystem
_exit
_register_onexit_function
_initialize_onexit_table
_errno
strerror
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
exit
_control87
_crt_atexit
api-ms-win-crt-heap-l1-1-0
realloc
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
strcmp
_strdup
iswctype
isdigit
_stricmp
isalpha
isalnum
tolower
strtok_s
strncpy
isspace
strncmp
isxdigit
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_access
_unlink
remove
_fstat64i32
_wmkdir
rename
api-ms-win-crt-time-l1-1-0
strftime
_utime64
_localtime64
_time64
_ftime64
api-ms-win-crt-math-l1-1-0
_libm_sse2_pow_precise
_CIfmod
_CIsinh
_CItanh
_dclass
_CIcosh
_libm_sse2_exp_precise
fmaf
_libm_sse2_log10_precise
_libm_sse2_sin_precise
_hypot
_libm_sse2_acos_precise
_fdclass
_fdopen
_libm_sse2_log_precise
log2f
_dpcomp
_fdpcomp
_dsign
trunc
_fdsign
scalbnf
ilogb
scalbn
_libm_sse2_sqrt_precise
_except1
_libm_sse2_tan_precise
ceil
log2
ilogbf
floor
_libm_sse2_atan_precise
round
_libm_sse2_cos_precise
_CIatan2
asinh
fma
_libm_sse2_asin_precise
asinhf
modf
atanh
atanhf
cbrtf
acoshf
acosh
copysign
cbrt
api-ms-win-crt-convert-l1-1-0
strtol
strtoul
_ecvt_s
atol
strtod
strtoull
atoi
api-ms-win-crt-locale-l1-1-0
setlocale
api-ms-win-crt-conio-l1-1-0
_getch
_MonoFixupCorEE@4
mini_get_debug_options
mini_parse_debug_option
mono_add_internal_call
mono_add_internal_call_internal
mono_add_internal_call_with_flags
mono_aot_register_module
mono_array_addr_with_size
mono_array_class_get
mono_array_clone
mono_array_element_size
mono_array_length
mono_array_new
mono_array_new_full
mono_array_new_specific
mono_assemblies_cleanup
mono_assemblies_init
mono_assembly_addref
mono_assembly_close
mono_assembly_fill_assembly_name
mono_assembly_foreach
mono_assembly_get_assemblyref
mono_assembly_get_image
mono_assembly_get_image_internal
mono_assembly_get_main
mono_assembly_get_name
mono_assembly_get_name_internal
mono_assembly_get_object
mono_assembly_getrootdir
mono_assembly_invoke_load_hook
mono_assembly_invoke_search_hook
mono_assembly_load
mono_assembly_load_from
mono_assembly_load_from_full
mono_assembly_load_full
mono_assembly_load_full_alc
mono_assembly_load_module
mono_assembly_load_module_checked
mono_assembly_load_reference
mono_assembly_load_references
mono_assembly_load_with_partial_name
mono_assembly_loaded
mono_assembly_loaded_full
mono_assembly_name_free
mono_assembly_name_get_culture
mono_assembly_name_get_name
mono_assembly_name_get_pubkeytoken
mono_assembly_name_get_version
mono_assembly_name_new
mono_assembly_names_equal
mono_assembly_open
mono_assembly_open_full
mono_assembly_set_main
mono_assembly_setrootdir
mono_bitset_alloc_size
mono_bitset_clear
mono_bitset_clear_all
mono_bitset_clone
mono_bitset_copyto
mono_bitset_count
mono_bitset_equal
mono_bitset_find_first
mono_bitset_find_first_unset
mono_bitset_find_last
mono_bitset_find_start
mono_bitset_foreach
mono_bitset_free
mono_bitset_intersection
mono_bitset_intersection_2
mono_bitset_invert
mono_bitset_mem_new
mono_bitset_new
mono_bitset_set
mono_bitset_set_all
mono_bitset_size
mono_bitset_sub
mono_bitset_test
mono_bitset_test_bulk
mono_bitset_union
mono_bounded_array_class_get
mono_breakpoint_clean_code
mono_build_date
mono_callspec_cleanup
mono_callspec_eval
mono_callspec_eval_exception
mono_callspec_parse
mono_check_corlib_version
mono_class_array_element_size
mono_class_data_size
mono_class_describe_statics
mono_class_enum_basetype
mono_class_from_generic_parameter
mono_class_from_mono_type
mono_class_from_mono_type_internal
mono_class_from_name
mono_class_from_name_case
mono_class_from_typeref
mono_class_from_typeref_checked
mono_class_get
mono_class_get_byref_type
mono_class_get_checked
mono_class_get_context
mono_class_get_element_class
mono_class_get_event_token
mono_class_get_events
mono_class_get_field
mono_class_get_field_from_name
mono_class_get_field_token
mono_class_get_fields
mono_class_get_flags
mono_class_get_full
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_method_from_name_flags
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_nesting_type
mono_class_get_nullable_param
mono_class_get_parent
mono_class_get_properties
mono_class_get_property_from_name
mono_class_get_property_token
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_implements_interface
mono_class_inflate_generic_method
mono_class_inflate_generic_type
mono_class_init
mono_class_instance_size
mono_class_interface_offset
mono_class_is_assignable_from
mono_class_is_delegate
mono_class_is_enum
mono_class_is_nullable
mono_class_is_subclass_of
mono_class_is_valid_enum
mono_class_is_valuetype
mono_class_min_align
mono_class_name_from_token
mono_class_num_events
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_value_size
mono_class_vtable
mono_cli_rva_image_map
mono_compile_method
mono_conc_hashtable_destroy
mono_conc_hashtable_foreach
mono_conc_hashtable_foreach_steal
mono_conc_hashtable_insert
mono_conc_hashtable_lookup
mono_conc_hashtable_new
mono_conc_hashtable_new_full
mono_conc_hashtable_remove
mono_config_cleanup
mono_config_for_assembly
mono_config_get_cpu
mono_config_get_os
mono_config_get_wordsize
mono_config_is_server_mode
mono_config_parse
mono_config_parse_memory
mono_config_set_server_mode
mono_config_string_for_assembly_file
mono_context_get
mono_context_get_desc
mono_context_get_domain_id
mono_context_get_id
mono_context_init
mono_context_set
mono_counter_get_name
mono_counter_get_section
mono_counter_get_size
mono_counter_get_type
mono_counter_get_unit
mono_counter_get_variance
mono_counters_cleanup
mono_counters_dump
mono_counters_enable
mono_counters_foreach
mono_counters_init
mono_counters_on_register
mono_counters_register
mono_counters_register_with_size
mono_counters_sample
mono_cpu_count
mono_cpu_features_disabled
mono_cpu_features_enabled
mono_custom_attrs_construct
mono_custom_attrs_free
mono_custom_attrs_from_assembly
mono_custom_attrs_from_class
mono_custom_attrs_from_event
mono_custom_attrs_from_field
mono_custom_attrs_from_index
mono_custom_attrs_from_method
mono_custom_attrs_from_param
mono_custom_attrs_from_property
mono_custom_attrs_get_attr
mono_custom_attrs_has_attr
mono_dangerous_add_raw_internal_call
mono_debug_add_delegate_trampoline
mono_debug_add_method
mono_debug_cleanup
mono_debug_close_image
mono_debug_close_mono_symbol_file
mono_debug_domain_create
mono_debug_domain_unload
mono_debug_enabled
mono_debug_find_method
mono_debug_free_locals
mono_debug_free_method_jit_info
mono_debug_free_source_location
mono_debug_get_handle
mono_debug_il_offset_from_address
mono_debug_init
mono_debug_lookup_locals
mono_debug_lookup_method
mono_debug_lookup_method_addresses
mono_debug_lookup_source_location
mono_debug_method_lookup_location
mono_debug_open_image_from_memory
mono_debug_open_mono_symbols
mono_debug_print_stack_frame
mono_debug_print_vars
mono_debug_remove_method
mono_debug_symfile_free_location
mono_debug_symfile_is_loaded
mono_debug_symfile_lookup_locals
mono_debug_symfile_lookup_location
mono_debug_symfile_lookup_method
mono_debugger_agent_init
mono_debugger_agent_parse_options
mono_debugger_agent_register_transport
mono_debugger_agent_transport_handshake
mono_debugger_insert_breakpoint
mono_debugger_method_has_breakpoint
mono_debugger_run_finally
mono_declsec_flags_from_assembly
mono_declsec_flags_from_class
mono_declsec_flags_from_method
mono_declsec_get_assembly_action
mono_declsec_get_class_action
mono_declsec_get_demands
mono_declsec_get_inheritdemands_class
mono_declsec_get_inheritdemands_method
mono_declsec_get_linkdemands
mono_declsec_get_method_action
mono_digest_get_public_token
mono_disasm_code
mono_disasm_code_one
mono_dl_fallback_register
mono_dl_fallback_unregister
mono_dllmap_insert
mono_domain_assembly_open
mono_domain_create
mono_domain_create_appdomain
mono_domain_ensure_entry_assembly
mono_domain_finalize
mono_domain_foreach
mono_domain_free
mono_domain_from_appdomain
mono_domain_get
mono_domain_get_by_id
mono_domain_get_friendly_name
mono_domain_get_id
mono_domain_has_type_resolve
mono_domain_is_unloading
mono_domain_owns_vtable_slot
mono_domain_set
mono_domain_set_config
mono_domain_set_internal
mono_domain_try_type_resolve
mono_domain_try_unload
mono_domain_unload
mono_ee_api_version
mono_ee_interp_init
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_error_cleanup
mono_error_get_error_code
mono_error_get_message
mono_error_init
mono_error_init_flags
mono_error_ok
mono_escape_uri_string
mono_event_get_add_method
mono_event_get_flags
mono_event_get_name
mono_event_get_object
mono_event_get_parent
mono_event_get_raise_method
mono_event_get_remove_method
mono_exception_from_name
mono_exception_from_name_domain
mono_exception_from_name_msg
mono_exception_from_name_two_strings
mono_exception_from_token
mono_exception_from_token_two_strings
mono_exception_walk_trace
mono_field_from_token
mono_field_full_name
mono_field_get_data
mono_field_get_flags
mono_field_get_name
mono_field_get_object
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_get_value
mono_field_get_value_object
mono_field_set_value
mono_field_static_get_value
mono_field_static_set_value
mono_file_map
mono_file_map_close
mono_file_map_error
mono_file_map_fd
mono_file_map_open
mono_file_map_size
mono_file_unmap
mono_free
mono_free_bstr
mono_free_method
mono_free_verify_list
mono_g_hash_table_destroy
mono_g_hash_table_find
mono_g_hash_table_foreach
mono_g_hash_table_foreach_remove
mono_g_hash_table_insert
mono_g_hash_table_lookup
mono_g_hash_table_lookup_extended
mono_g_hash_table_new_type
mono_g_hash_table_print_stats
mono_g_hash_table_remove
mono_g_hash_table_replace
mono_g_hash_table_size
mono_gc_collect
mono_gc_collection_count
mono_gc_finalize_notify
mono_gc_get_generation
mono_gc_get_heap_size
mono_gc_get_used_size
mono_gc_init_finalizer_thread
mono_gc_invoke_finalizers
mono_gc_max_generation
mono_gc_pending_finalizers
mono_gc_reference_queue_add
mono_gc_reference_queue_free
mono_gc_reference_queue_new
mono_gc_register_bridge_callbacks
mono_gc_register_finalizer_callbacks
mono_gc_register_root
mono_gc_toggleref_add
mono_gc_toggleref_register_callback
mono_gc_wait_for_bridge_processing
mono_gc_walk_heap
mono_gc_wbarrier_arrayref_copy
mono_gc_wbarrier_generic_nostore
mono_gc_wbarrier_generic_store
mono_gc_wbarrier_generic_store_atomic
mono_gc_wbarrier_object_copy
mono_gc_wbarrier_set_arrayref
mono_gc_wbarrier_set_field
mono_gc_wbarrier_value_copy
mono_gchandle_free
mono_gchandle_free_v2
mono_gchandle_get_target
mono_gchandle_get_target_v2
mono_gchandle_new
mono_gchandle_new_v2
mono_gchandle_new_weakref
mono_gchandle_new_weakref_v2
mono_get_array_class
mono_get_boolean_class
mono_get_byte_class
mono_get_char_class
mono_get_config_dir
mono_get_corlib
mono_get_dbnull_object
mono_get_delegate_begin_invoke
mono_get_delegate_end_invoke
mono_get_delegate_invoke
mono_get_double_class
mono_get_enum_class
mono_get_exception_appdomain_unloaded
mono_get_exception_argument
mono_get_exception_argument_null
mono_get_exception_argument_out_of_range
mono_get_exception_arithmetic
mono_get_exception_array_type_mismatch
mono_get_exception_bad_image_format
mono_get_exception_bad_image_format2
mono_get_exception_cannot_unload_appdomain
mono_get_exception_class
mono_get_exception_divide_by_zero
mono_get_exception_execution_engine
mono_get_exception_field_access
mono_get_exception_file_not_found
mono_get_exception_file_not_found2
mono_get_exception_index_out_of_range
mono_get_exception_invalid_cast
mono_get_exception_invalid_operation
mono_get_exception_io
mono_get_exception_method_access
mono_get_exception_missing_field
mono_get_exception_missing_method
mono_get_exception_not_implemented
mono_get_exception_not_supported
mono_get_exception_null_reference
mono_get_exception_out_of_memory
mono_get_exception_overflow
mono_get_exception_reflection_type_load
mono_get_exception_runtime_wrapped
mono_get_exception_security
mono_get_exception_serialization
mono_get_exception_stack_overflow
mono_get_exception_synchronization_lock
mono_get_exception_thread_abort
mono_get_exception_thread_interrupted
mono_get_exception_thread_state
mono_get_exception_type_initialization
mono_get_exception_type_load
mono_get_inflated_method
mono_get_int16_class
mono_get_int32_class
mono_get_int64_class
mono_get_intptr_class
mono_get_machine_config
mono_get_method
mono_get_method_constrained
mono_get_method_full
mono_get_object_class
mono_get_root_domain
mono_get_runtime_build_info
mono_get_sbyte_class
mono_get_single_class
mono_get_string_class
mono_get_thread_class
mono_get_uint16_class
mono_get_uint32_class
mono_get_uint64_class
mono_get_uintptr_class
mono_get_void_class
mono_guid_to_string
mono_guid_to_string_minimal
mono_hazard_pointer_get
mono_icall_table_init
mono_image_add_to_name_cache
mono_image_addref
mono_image_close
mono_image_ensure_section
mono_image_ensure_section_idx
mono_image_fixup_vtable
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_get_public_key
mono_image_get_resource
mono_image_get_strong_name
mono_image_get_table_info
mono_image_get_table_rows
mono_image_has_authenticode_entry
mono_image_init
mono_image_init_name_cache
mono_image_is_dynamic
mono_image_load_file_for_image
mono_image_load_module
mono_image_loaded
mono_image_loaded_by_guid
mono_image_loaded_by_guid_full
mono_image_loaded_full
mono_image_lookup_resource
mono_image_open
mono_image_open_from_data
mono_image_open_from_data_alc
mono_image_open_from_data_full
mono_image_open_from_data_with_name
mono_image_open_full
mono_image_rva_map
mono_image_strerror
mono_image_strong_name_position
mono_images_cleanup
mono_images_init
mono_init
mono_init_from_assembly
mono_init_version
mono_install_assembly_load_hook
mono_install_assembly_postload_refonly_search_hook
mono_install_assembly_postload_search_hook
mono_install_assembly_preload_hook
mono_install_assembly_preload_hook_v3
mono_install_assembly_refonly_preload_hook
mono_install_assembly_refonly_search_hook
mono_install_assembly_search_hook
mono_install_ftnptr_eh_callback
mono_install_load_aot_data_hook
mono_install_runtime_cleanup
mono_install_unhandled_exception_hook
mono_internal_current_level
mono_internal_current_mask
mono_is_debugger_attached
mono_jit_aot_compiling
mono_jit_cleanup
mono_jit_exec
mono_jit_info_get_code_size
mono_jit_info_get_code_start
mono_jit_info_get_method
mono_jit_info_table_find
mono_jit_init
mono_jit_init_version
mono_jit_init_version_for_test_only
mono_jit_parse_options
mono_jit_set_aot_mode
mono_jit_set_aot_only
mono_jit_set_domain
mono_jit_set_trace_options
mono_jit_thread_attach
mono_ldstr
mono_ldtoken
mono_lls_find
mono_lls_get_hazardous_pointer_with_mask
mono_lls_init
mono_lls_insert
mono_lls_remove
mono_load_remote_field
mono_load_remote_field_new
mono_loader_save_bundled_library
mono_lock_free_alloc
mono_lock_free_allocator_check_consistency
mono_lock_free_allocator_init_allocator
mono_lock_free_allocator_init_size_class
mono_lock_free_free
mono_lock_free_queue_dequeue
mono_lock_free_queue_enqueue
mono_lock_free_queue_init
mono_lock_free_queue_node_init
mono_lock_free_queue_node_unpoison
mono_locks_dump
mono_lookup_icall_symbol
mono_lookup_internal_call
mono_lookup_pinvoke_call
mono_main
mono_marshal_ilgen_init
mono_marshal_set_last_error
mono_marshal_string_to_utf16
mono_md5_final
mono_md5_get_digest
mono_md5_get_digest_from_file
mono_md5_init
mono_md5_update
mono_mem_account_register_counters
mono_mem_account_type_name
mono_mempool_alloc
mono_mempool_alloc0
mono_mempool_contains_addr
mono_mempool_destroy
mono_mempool_get_allocated
mono_mempool_invalidate
mono_mempool_new
mono_mempool_new_size
mono_mempool_stats
mono_mempool_strdup
mono_metadata_blob_heap
mono_metadata_cleanup
mono_metadata_compute_size
mono_metadata_custom_attrs_from_index
mono_metadata_declsec_from_index
mono_metadata_decode_blob_size
mono_metadata_decode_row
mono_metadata_decode_row_col
mono_metadata_decode_signed_value
mono_metadata_decode_table_row
mono_metadata_decode_table_row_col
mono_metadata_decode_value
mono_metadata_encode_value
mono_metadata_events_from_typedef
mono_metadata_field_info
mono_metadata_field_info_with_mempool
mono_metadata_free_array
mono_metadata_free_inflated_signature
mono_metadata_free_marshal_spec
mono_metadata_free_method_signature
mono_metadata_free_mh
mono_metadata_free_type
mono_metadata_generic_class_is_valuetype
mono_metadata_get_constant_index
mono_metadata_get_generic_param_row
mono_metadata_get_inflated_signature
mono_metadata_get_marshal_info
mono_metadata_guid_heap
mono_metadata_implmap_from_method
mono_metadata_init
mono_metadata_interfaces_from_typedef
mono_metadata_load_generic_param_constraints_checked
mono_metadata_load_generic_params
mono_metadata_locate
mono_metadata_locate_token
mono_metadata_methods_from_event
mono_metadata_methods_from_property
mono_metadata_nested_in_typedef
mono_metadata_nesting_typedef
mono_metadata_packing_from_typedef
mono_metadata_parse_array
mono_metadata_parse_custom_mod
mono_metadata_parse_field_type
mono_metadata_parse_marshal_spec
mono_metadata_parse_method_signature
mono_metadata_parse_method_signature_full
mono_metadata_parse_mh
mono_metadata_parse_mh_full
mono_metadata_parse_param
mono_metadata_parse_signature
mono_metadata_parse_type
mono_metadata_parse_typedef_or_ref
mono_metadata_properties_from_typedef
mono_metadata_signature_alloc
mono_metadata_signature_dup
mono_metadata_signature_equal
mono_metadata_string_heap
mono_metadata_token_from_dor
mono_metadata_translate_token_index
mono_metadata_type_equal
mono_metadata_type_hash
mono_metadata_typedef_from_field
mono_metadata_typedef_from_method
mono_metadata_user_string
mono_method_body_get_object
mono_method_builder_ilgen_init
mono_method_can_access_field
mono_method_can_access_method
mono_method_desc_free
mono_method_desc_from_method
mono_method_desc_full_match
mono_method_desc_is_full
mono_method_desc_match
mono_method_desc_new
mono_method_desc_search_in_class
mono_method_desc_search_in_image
mono_method_full_name
mono_method_get_class
mono_method_get_context
mono_method_get_flags
mono_method_get_full_name
mono_method_get_generic_container
mono_method_get_header
mono_method_get_header_checked
mono_method_get_index
mono_method_get_last_managed
mono_method_get_marshal_info
mono_method_get_name
mono_method_get_object
mono_method_get_param_names
mono_method_get_param_token
mono_method_get_reflection_name
mono_method_get_signature
mono_method_get_signature_full
mono_method_get_token
mono_method_get_unmanaged_thunk
mono_method_has_marshal_info
mono_method_header_get_clauses
mono_method_header_get_code
mono_method_header_get_locals
mono_method_header_get_num_clauses
mono_method_print_code
mono_method_signature
mono_method_signature_checked_slow
mono_method_signature_internal_slow
mono_method_verify
mono_mlist_alloc
mono_mlist_append
mono_mlist_get_data
mono_mlist_last
mono_mlist_length
mono_mlist_next
mono_mlist_prepend
mono_mlist_remove_item
mono_mlist_set_data
mono_mlist_set_next
mono_module_file_get_object
mono_module_get_object
mono_monitor_enter
mono_monitor_enter_v4
mono_monitor_exit
mono_monitor_try_enter
mono_mprotect
mono_native_getrootdir
mono_native_thread_create
mono_native_thread_id_equals
mono_native_thread_id_get
mono_native_thread_join
mono_native_thread_set_name
mono_object_castclass_mbyref
mono_object_clone
mono_object_describe
mono_object_describe_fields
mono_object_get_class
mono_object_get_domain
mono_object_get_size
mono_object_get_size_internal
mono_object_get_virtual_method
mono_object_get_vtable
mono_object_get_vtable_internal
mono_object_hash
mono_object_isinst
mono_object_isinst_mbyref
mono_object_new
mono_object_new_alloc_specific
mono_object_new_fast
mono_object_new_from_token
mono_object_new_specific
mono_object_to_string
mono_object_unbox
mono_opcode_name
mono_opcode_value
mono_opcodes
mono_os_event_destroy
mono_os_event_init
mono_os_event_reset
mono_os_event_set
mono_os_event_wait_multiple
mono_os_event_wait_one
mono_os_sem_timedwait
mono_pagesize
mono_param_get_objects
mono_parse_default_optimizations
mono_parse_env_options
mono_parse_options_from
mono_path_canonicalize
mono_path_resolve_symlinks
mono_pe_file_open
mono_perfcounter_foreach
mono_perfcounters_init
mono_personality
mono_pmip
mono_poll
mono_print_method_from_ip
mono_print_thread_dump
mono_print_thread_dump_from_ctx
mono_print_unhandled_exception
mono_profiler_call_context_free_buffer
mono_profiler_call_context_get_argument
mono_profiler_call_context_get_local
mono_profiler_call_context_get_result
mono_profiler_call_context_get_this
mono_profiler_create
mono_profiler_enable_allocations
mono_profiler_enable_call_context_introspection
mono_profiler_enable_clauses
mono_profiler_enable_coverage
mono_profiler_enable_sampling
mono_profiler_get_coverage_data
mono_profiler_get_sample_mode
mono_profiler_install
mono_profiler_install_allocation
mono_profiler_install_enter_leave
mono_profiler_install_exception
mono_profiler_install_gc
mono_profiler_install_jit_end
mono_profiler_install_thread
mono_profiler_load
mono_profiler_set_assembly_loaded_callback
mono_profiler_set_assembly_loading_callback
mono_profiler_set_assembly_unloaded_callback
mono_profiler_set_assembly_unloading_callback
mono_profiler_set_call_instrumentation_filter_callback
mono_profiler_set_class_failed_callback
mono_profiler_set_class_loaded_callback
mono_profiler_set_class_loading_callback
mono_profiler_set_cleanup_callback
mono_profiler_set_context_loaded_callback
mono_profiler_set_context_unloaded_callback
mono_profiler_set_coverage_filter_callback
mono_profiler_set_domain_loaded_callback
mono_profiler_set_domain_loading_callback
mono_profiler_set_domain_name_callback
mono_profiler_set_domain_unloaded_callback
mono_profiler_set_domain_unloading_callback
mono_profiler_set_events
mono_profiler_set_exception_clause_callback
mono_profiler_set_exception_throw_callback
mono_profiler_set_gc_allocation_callback
mono_profiler_set_gc_event_callback
mono_profiler_set_gc_finalized_callback
mono_profiler_set_gc_finalized_object_callback
mono_profiler_set_gc_finalizing_callback
mono_profiler_set_gc_finalizing_object_callback
mono_profiler_set_gc_handle_created_callback
mono_profiler_set_gc_handle_deleted_callback
mono_profiler_set_gc_moves_callback
mono_profiler_set_gc_resize_callback
mono_profiler_set_gc_root_register_callback
mono_profiler_set_gc_root_unregister_callback
mono_profiler_set_gc_roots_callback
mono_profiler_set_image_failed_callback
mono_profiler_set_image_loaded_callback
mono_profiler_set_image_loading_callback
mono_profiler_set_image_unloaded_callback
mono_profiler_set_image_unloading_callback
mono_profiler_set_jit_begin_callback
mono_profiler_set_jit_chunk_created_callback
mono_profiler_set_jit_chunk_destroyed_callback
mono_profiler_set_jit_code_buffer_callback
mono_profiler_set_jit_done_callback
mono_profiler_set_jit_failed_callback
mono_profiler_set_method_begin_invoke_callback
mono_profiler_set_method_end_invoke_callback
mono_profiler_set_method_enter_callback
mono_profiler_set_method_exception_leave_callback
mono_profiler_set_method_free_callback
mono_profiler_set_method_leave_callback
mono_profiler_set_method_tail_call_callback
mono_profiler_set_monitor_acquired_callback
mono_profiler_set_monitor_contention_callback
mono_profiler_set_monitor_failed_callback
mono_profiler_set_runtime_initialized_callback
mono_profiler_set_runtime_shutdown_begin_callback
mono_profiler_set_runtime_shutdown_end_callback
mono_profiler_set_sample_hit_callback
mono_profiler_set_sample_mode
mono_profiler_set_thread_exited_callback
mono_profiler_set_thread_name_callback
mono_profiler_set_thread_started_callback
mono_profiler_set_thread_stopped_callback
mono_profiler_set_thread_stopping_callback
mono_profiler_set_vtable_failed_callback
mono_profiler_set_vtable_loaded_callback
mono_profiler_set_vtable_loading_callback
mono_property_get_flags
mono_property_get_get_method
mono_property_get_name
mono_property_get_object
mono_property_get_parent
mono_property_get_set_method
mono_property_get_value
mono_property_hash_destroy
mono_property_hash_insert
mono_property_hash_lookup
mono_property_hash_new
mono_property_hash_remove_object
mono_property_set_value
mono_ptr_class_get
mono_raise_exception
mono_reflection_assembly_get_assembly
mono_reflection_free_type_info
mono_reflection_get_custom_attrs
mono_reflection_get_custom_attrs_blob
mono_reflection_get_custom_attrs_by_type
mono_reflection_get_custom_attrs_data
mono_reflection_get_custom_attrs_info
mono_reflection_get_token
mono_reflection_get_type
mono_reflection_parse_type
mono_reflection_type_from_name
mono_reflection_type_get_type
mono_register_bundled_assemblies
mono_register_config_for_assembly
mono_register_machine_config
mono_register_symfile_for_assembly
mono_regression_test_step
mono_reraise_exception
mono_runtime_class_init
mono_runtime_cleanup
mono_runtime_delegate_invoke
mono_runtime_exec_main
mono_runtime_exec_managed_code
mono_runtime_get_aotid
mono_runtime_get_main_args
mono_runtime_init
mono_runtime_invoke
mono_runtime_invoke_array
mono_runtime_is_shutting_down
mono_runtime_object_init
mono_runtime_quit
mono_runtime_resource_check_limit
mono_runtime_resource_limit
mono_runtime_resource_set_callback
mono_runtime_run_main
mono_runtime_set_main_args
mono_runtime_set_pending_exception
mono_runtime_set_shutting_down
mono_runtime_try_invoke
mono_security_core_clr_get_options
mono_security_core_clr_require_elevated_permissions
mono_security_core_clr_set_options
mono_security_enable_core_clr
mono_security_set_core_clr_platform_callback
mono_set_allocator_vtable
mono_set_assemblies_path
mono_set_break_policy
mono_set_config_dir
mono_set_crash_chaining
mono_set_defaults
mono_set_dirs
mono_set_is_debugger_attached
mono_set_rootdir
mono_set_signal_chaining
mono_set_use_llvm
mono_setmmapjit
mono_sgen_mono_ilgen_init
mono_sha1_final
mono_sha1_get_digest
mono_sha1_get_digest_from_file
mono_sha1_init
mono_sha1_update
mono_shared_area
mono_shared_area_for_pid
mono_shared_area_instances
mono_shared_area_remove
mono_shared_area_unload
mono_signature_explicit_this
mono_signature_full_name
mono_signature_get_call_conv
mono_signature_get_desc
mono_signature_get_param_count
mono_signature_get_params
mono_signature_get_return_type
mono_signature_hash
mono_signature_is_instance
mono_signature_param_is_out
mono_signature_vararg_start
mono_stack_walk
mono_stack_walk_async_safe
mono_stack_walk_no_il
mono_store_remote_field
mono_store_remote_field_new
mono_string_chars
mono_string_empty
mono_string_empty_wrapper
mono_string_equal
mono_string_from_bstr
mono_string_from_utf16
mono_string_from_utf32
mono_string_hash
mono_string_intern
mono_string_is_interned
mono_string_length
mono_string_new
mono_string_new_checked
mono_string_new_len
mono_string_new_size
mono_string_new_utf16
mono_string_new_utf32
mono_string_new_wrapper
mono_string_to_utf16
mono_string_to_utf32
mono_string_to_utf8
mono_string_to_utf8_checked
mono_stringify_assembly_name
mono_table_info_get_rows
mono_thread_attach
mono_thread_cleanup
mono_thread_create
mono_thread_current
mono_thread_detach
mono_thread_detach_if_exiting
mono_thread_exit
mono_thread_get_coop_aware
mono_thread_get_main
mono_thread_get_managed_id
mono_thread_get_name_utf8
mono_thread_get_undeniable_exception
mono_thread_hazardous_queue_free
mono_thread_hazardous_try_free
mono_thread_hazardous_try_free_all
mono_thread_info_attach
mono_thread_info_current_unchecked
mono_thread_info_detach
mono_thread_info_get_flags
mono_thread_info_get_small_id
mono_thread_info_get_tools_data
mono_thread_info_install_interrupt
mono_thread_info_register_small_id
mono_thread_info_set_flags
mono_thread_info_set_tools_data
mono_thread_info_uninstall_interrupt
mono_thread_info_yield
mono_thread_init
mono_thread_internal_current
mono_thread_is_foreign
mono_thread_manage
mono_thread_new_init
mono_thread_set_coop_aware
mono_thread_set_main
mono_thread_set_manage_callback
mono_thread_set_name
mono_thread_stop
mono_threads_assert_gc_safe_region
mono_threads_assert_gc_unsafe_region
mono_threads_attach_coop
mono_threads_attach_tools_thread
mono_threads_detach_coop
mono_threads_enter_gc_safe_region
mono_threads_enter_gc_safe_region_internal
mono_threads_enter_gc_safe_region_unbalanced
mono_threads_enter_gc_safe_region_with_info
mono_threads_enter_gc_unsafe_region
mono_threads_enter_gc_unsafe_region_unbalanced
mono_threads_enter_gc_unsafe_region_with_info
mono_threads_exit_gc_safe_region
mono_threads_exit_gc_safe_region_internal
mono_threads_exit_gc_safe_region_unbalanced
mono_threads_exit_gc_unsafe_region
mono_threads_exit_gc_unsafe_region_internal
mono_threads_exit_gc_unsafe_region_unbalanced
mono_threads_get_default_stacksize
mono_threads_request_thread_dump
mono_threads_set_default_stacksize
mono_trace_init
mono_trace_set_level_string
mono_trace_set_log_handler
mono_trace_set_mask_string
mono_trace_set_print_handler
mono_trace_set_printerr_handler
mono_tracev_inner
mono_type_create_from_typespec
mono_type_full_name
mono_type_generic_inst_is_valuetype
mono_type_get_array_type
mono_type_get_class
mono_type_get_desc
mono_type_get_modifiers
mono_type_get_name
mono_type_get_name_full
mono_type_get_object
mono_type_get_ptr_type
mono_type_get_signature
mono_type_get_type
mono_type_get_underlying_type
mono_type_is_byref
mono_type_is_generic_parameter
mono_type_is_pointer
mono_type_is_primitive
mono_type_is_reference
mono_type_is_struct
mono_type_is_valid_enum_basetype
mono_type_is_void
mono_type_size
mono_type_stack_size
mono_type_to_unmanaged
mono_unhandled_exception
mono_unicode_from_external
mono_unicode_to_external
mono_upgrade_remote_class_wrapper
mono_use_fast_math
mono_use_interpreter
mono_use_llvm
mono_utf8_from_external
mono_utf8_validate_and_len
mono_utf8_validate_and_len_with_bounds
mono_valloc
mono_valloc_aligned
mono_valloc_granule
mono_value_box
mono_value_copy
mono_value_copy_array
mono_value_describe_fields
mono_verify_corlib
mono_vfree
mono_vtable_class
mono_vtable_class_internal
mono_vtable_domain
mono_vtable_domain_internal
mono_vtable_get_static_field_data
mono_win32_compat_CopyMemory
mono_win32_compat_FillMemory
mono_win32_compat_MoveMemory
mono_win32_compat_ZeroMemory
monovm_execute_assembly
monovm_initialize
monovm_shutdown
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
856KB
Virtual Size
856KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
177KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28920,
count=8, id=199, version=41118,
count=12, id=261, version=28920,
count=10, id=260, version=28920,
count=13, id=259, version=28920,
count=1, id=262, version=26715,
count=21, id=257, version=26715,
count=404, id=1, productName=Unmarked objects,
count=301, id=264, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
mono/MonoBleedingEdge/etc/mono/2.0/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- SHA256 aa24e546fd54337d197b43e9559dc7517187967f794c77b6341ecdcb870460a8
- MD5 2ce379c652312b4fde606944ab0ed675
- SHA1 1f41a4c2a019774044425d26a9b6bb0c8b59804b
- SHA512 7e56704fc2080ea080cbc01733eb30c5bf018e7a56130e927ef50f276888f2201f1e7b5f44a28e67480d4145570e7bb6d7dbab053021c8851c62b43594231efc
- SSDEEP 768:wys/icEoJYCcCMl5+KShbbo/pj9+Gt5wQtf303LrLkI5M3t75emExQX3Hf:wFES2jMS19+GtyQpEYI5M9dDEi
- TLSH T1795383A0B95DCD364A8B62D6F57150DCF9BDC430912A90F2E8CD612AF09CC2C63B57B6
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/2.0/machine.config
- SHA256 69bd6d39d5a2eebdcbe5b254382f5a1e0f1e36faaf887b3662b917e0c4dad451
- MD5 cce8b8545896f7b43d6f129b337486eb
- SHA1 0b666b9db8f14d4878e457015b65bd77f6f9abe3
- SHA512 e7891e074407dbc4a6cb5af9e3b5fa144146d12389383d130112d94b9674752ad79fdbdfcf95f3033afd321b42be99d554982427a25dea154cdf6b660c382425
- SSDEEP 384:+bQtEtFRwR/RjrRnRyyRWkRTRuR/RXRcniayn6+RI8XSBkJ3E:2qnb
- TLSH T125D213303609BDAE494217235C75FA84467F971967A86C0CB5FE623EFE2788B5303297
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/2.0/settings.map
- SHA256 842bc14c6e20294aa98cc6180c2a307e724a7fda66f41240a2d83a094665c8cf
- MD5 4574da87289d555309a47f34757d6cf1
- SHA1 09c6698fbfcb51f559864186501c55b3d4297693
- SHA512 b942bfe0bc60f15a998dbbfacbdd104c021aedc8929cc2e0855a382bdc9af24d7bd6d2b9ea8e3be2fabf5160e7ac27245107512f117bf8fc893b88dbd04d6228
- TLSH T17451F334F705B9F406B2052D686A94D6C376022FA6654D9C32ECC23E7F3644B93A33D9
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/2.0/web.config
- SHA256 d72ff8c60ca58fd3bc106365d753c5bfad9f85d33757aeb2ffdf745d61cec1b1
- MD5 f56fcf1b58ad450f85effd827f4d6acd
- SHA1 bd85d36d737dca1bbe59a8f4795356e820a44b54
- SHA512 da7561788fbba1b0665ad2714be50af10ca0c587b1b488dc45fab8d515319dbf3012c7a9bd8574c8083e0aed2d4eb9806277d3867e463c79aab8142e98fa7882
- SSDEEP 192:WTewecjsEGtank000RzXVbXYXG/+24aA3HuHCitVCH4P6JY446iP:IAntank00hSWWp7
- TLSH T10232C034271DE9E98B5046530431ABE562BFDB5A3744CD4CF1ED233AEB5348BA3621A3
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/4.0/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- SHA256 aa24e546fd54337d197b43e9559dc7517187967f794c77b6341ecdcb870460a8
- MD5 2ce379c652312b4fde606944ab0ed675
- SHA1 1f41a4c2a019774044425d26a9b6bb0c8b59804b
- SHA512 7e56704fc2080ea080cbc01733eb30c5bf018e7a56130e927ef50f276888f2201f1e7b5f44a28e67480d4145570e7bb6d7dbab053021c8851c62b43594231efc
- SSDEEP 768:wys/icEoJYCcCMl5+KShbbo/pj9+Gt5wQtf303LrLkI5M3t75emExQX3Hf:wFES2jMS19+GtyQpEYI5M9dDEi
- TLSH T1795383A0B95DCD364A8B62D6F57150DCF9BDC430912A90F2E8CD612AF09CC2C63B57B6
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/4.0/machine.config
- SHA256 cfec8982d3bb8cf0e3b75b18489aca4d8c64e636ca8d1635e23ef8fe3f468e35
- MD5 db91868e0bed68adec7f349c4e0caef4
- SHA1 f76c6d3395347566a062abef478b638a90c16d9c
- SHA512 4629743b0e18732abe70accdf8573f2f43e076b651d76cf6d268a923db1b231d47240ccdcff0a1bcf07f178e64b1673293217ad511516e275b0484cba03f767f
- SSDEEP 384:+btEttAttRRtURtbRtfrRtDRtWDwkoRtC0RRtfRtIiog0Rt9pxvhZmyfhVV9tTRK:K6Aw
- TLSH T17BE212703609B9EE09431B235C7599C4477F97096AA86C0CB5FE323EEE2788B9713197
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/4.0/settings.map
- SHA256 52957cf8fbeb4d1e5f545673d67a2c9cb3469d26042a447790d66bcfc07a87ce
- MD5 abe932bf2e5f0cbe31062714a1b056b3
- SHA1 0ff3dace17520538b1a4fe2e8741efd4da0e55fa
- SHA512 4b3ae3d270027fe810b4de83d558a85fc0a940d6567d619f50f6d093ead32e555ac6121d0667b6f24449421f433637e9a7292ef3919f3f063b0b97b617f6e415
- TLSH T17651F334F705B5F406B2052E686A84D6C376022FA6654D9C32ECD23E7F3644B93B32D9
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/4.0/web.config
- SHA256 286404ca4044fca41fa8ad7b9c5a143c223af1123469476b2d0dd128c0495ca7
- MD5 571e61e5c1505897171649b25198fbe1
- SHA1 8027064f988ab5f21b2ab851cc376bed59c48eb7
- SHA512 59a6a6b377ae3a6590c9ec0f38c49323f6f95f242f94479bee73ee5a100511c40d0316541c52d472c990d81eed71b1d07f04065f9bdb7cfe9231535811fe0f73
- SSDEEP 384:XlJ8Ir1vSn5e4J1J5Fgbntann1YK9AbqEs0ktY4kTHwbJdcG0dtwSoyHNcYuEbkW:VoMQ4ySkbO5
- TLSH T166820130671EDAEA8F510B5355308A95B2AB9B5B33449C88F1FC237BEB5348753321A7
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/4.5/Browsers/Compat.browser
- SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
- MD5 0d831c1264b5b32a39fa347de368fe48
- SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
- SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
- TLSH T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- SHA256 aa24e546fd54337d197b43e9559dc7517187967f794c77b6341ecdcb870460a8
- MD5 2ce379c652312b4fde606944ab0ed675
- SHA1 1f41a4c2a019774044425d26a9b6bb0c8b59804b
- SHA512 7e56704fc2080ea080cbc01733eb30c5bf018e7a56130e927ef50f276888f2201f1e7b5f44a28e67480d4145570e7bb6d7dbab053021c8851c62b43594231efc
- SSDEEP 768:wys/icEoJYCcCMl5+KShbbo/pj9+Gt5wQtf303LrLkI5M3t75emExQX3Hf:wFES2jMS19+GtyQpEYI5M9dDEi
- TLSH T1795383A0B95DCD364A8B62D6F57150DCF9BDC430912A90F2E8CD612AF09CC2C63B57B6
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/4.5/machine.config
- SHA256 886e0013595a43c089ed1a9bf4c4ab46ba5e926dfd99d57a2fde0a117b57ab96
- MD5 8f659861aed4be83c28b7fc4d3455041
- SHA1 9099292d7c63cd12d534a5f08d387f162a3474c5
- SHA512 bd5af741ef119fb708bc30bcfe5310436cdae69ca7ada4249f8b91dbdb6ad00c37e56e30a538ae088ca25aa8035d3724629d64275085a1ccfc91c551073974d4
- SSDEEP 384:+btEttAttRRtURtbRtfrRtDRtGcoRtC0kDRRtfRtleEiog0Rt9pxvhZmyfhVV9tY:j2Aw
- TLSH T1A7F212703609B9EE09431B235C7599C4477F970926A86C4CB5FE323EEE2788B9713297
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/4.5/settings.map
- SHA256 52957cf8fbeb4d1e5f545673d67a2c9cb3469d26042a447790d66bcfc07a87ce
- MD5 abe932bf2e5f0cbe31062714a1b056b3
- SHA1 0ff3dace17520538b1a4fe2e8741efd4da0e55fa
- SHA512 4b3ae3d270027fe810b4de83d558a85fc0a940d6567d619f50f6d093ead32e555ac6121d0667b6f24449421f433637e9a7292ef3919f3f063b0b97b617f6e415
- TLSH T17651F334F705B5F406B2052E686A84D6C376022FA6654D9C32ECD23E7F3644B93B32D9
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/4.5/web.config
- SHA256 985cd515adfddabd2c88a6e607769f0c177b35ab150d10de1d4f89fc0a3015ac
- MD5 3a0ff4dbe6b498da1596018060c07e57
- SHA1 0756bc6f623ac84926e582d6021bb10ad3ec8e80
- SHA512 bfa936a0bef73c44369e257090d5ce91ee8bba5e23018af2fdec545e3bb527501a965483b5ed857adddb58d0434dcec7e42e5382b658613362263d306bd20064
- SSDEEP 384:XlJ8Ir1vSn5e4J1J5Fgbntann1YK9Abqhs0ktY4kTHwbJdcG0dtwSoyHNcYuEbkW:VoMQTySkbO5
- TLSH T127820230671EDAEA8F510B5355308A95B2AB9B5B33449C88F1FC237BEB5348753321A7
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/browscap.ini
- SHA256 f16656075bb34412335ca0b157f30384e15d79167c4dd2ec0fe0b64a51fffb71
- MD5 d2f3bd5129e6aae5673887e1939ff1aa
- SHA1 2813a0561a18c4b0a817170c364ae5d40603534a
- SHA512 5e44b815019fd2befb360bd6092ab9efb874cb9f04f2d243cf087e179eb3f160135aa5f341a176a754261d53d30b9c81856c9c41667c77b63ae519d7498eb65f
- SSDEEP 3072:CIlPaidp0c7hj0EYXUyXinPTuUVfotyNE3:CIEidp0c7hj0EYknotyNE3
- TLSH T1CB64B14270A7B57681655F2230F193D132B3B756ACBABC5EEA630814DF54C06237EAF8
- MD5 SHA1 SHA512 SSDEEP TLSH
mono/MonoBleedingEdge/etc/mono/config
- SHA256 955f9d6ab2ec6757b913dd33989905bb7a55863ce7a7152c78baa790f2a964d9
- MD5 52866a2dbdd6ecca1ef256d0ac1f5f55
- SHA1 7fca3de72b206ebdf193609b44d57a60051f639c
- SHA512 4e2d67d97b94e03f0a18b111bf1208d67116bcafd88ec45cad0106b89bb5ac1e6c0c21d9a686a3ef77ab8241feb66e061002f9cc414dd85db9595ae68aab32d8
- TLSH T12A518286F26CA9FCB2722A6592FFFBAD55B180A0CC3E61059D45E2131013F5BD807AC6
- MD5 SHA1 SHA512 TLSH
mono/MonoBleedingEdge/etc/mono/mconfig/config.xml
- SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
- MD5 f34b330f20dce1bdcce9058fca287099
- SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
- SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
- SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
- TLSH T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
- MD5 SHA1 SHA512 SSDEEP TLSH
steam_appid.txt
- SHA256 7fb7910b08c35482f96692b533df9d38af9b454db59016e6d3cbad8a3683bbb6
- MD5 e913452bd344bdaa23a9b6cb68a551c7
- SHA1 349f1c30801e5195a35109b5289f8508474ef72e
- SHA512 1affbbdcbf931a88c2971699552c87efb7589975866148f363edf84581b4c48e7c18b1362aa668f442bd1a3e3b29c4821c5357cf5437864e2d8e9a849741e928
- MD5 SHA1 SHA512
winhttp.dll
- IMPHASH 125f64c555a4e74d89ade10d51126f5c
- SHA256 25b26ac60aa14d5ab4617cc58bb725bd6800b715f1be0336cb89ed58d1654469
- MD5 4af941b2c178a20e2976458aea63c70e
- SHA1 f043d101d4c4559516de8ae0bc3095e76a6cb780
- SHA512 867d76c0d7ecd675fbf2855378877c7617b32f67fde086f7eb7df3a55e56f343c4ed527b7b86e960884fdea5282599e46b8df9e6cce5583600208d3074e34fe0
- SSDEEP 384:SULW1qvAXOl+pQNcRFMX/CmJcS1fxQaTmkMumckVPxIiT750ss4:bLxiOtcS1fxQaTzmckVPxIiT7w4
- TLSH T1CB92D541669D1E74EBAEA37DFA30978FC27772182DF9981943312D84CC25782AE3D252
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5489
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCommandLineW
GetEnvironmentVariableW
GetFileAttributesW
GetFullPathNameW
HeapFree
LocalFree
lstrcmpiW
GetPrivateProfileStringW
HeapAlloc
GetStdHandle
GetCommandLineA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetLastError
GetProcessHeap
ExitProcess
GetSystemDirectoryW
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryW
lstrcmpA
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
user32
MessageBoxW
wsprintfW
shell32
CommandLineToArgvW
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Private1
SvchostPushServiceGlobals
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
WinHttpAddRequestHeaders
WinHttpAutoProxySvcMain
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpConnectionDeletePolicyEntries
WinHttpConnectionDeleteProxyInfo
WinHttpConnectionFreeNameList
WinHttpConnectionFreeProxyInfo
WinHttpConnectionFreeProxyList
WinHttpConnectionGetNameList
WinHttpConnectionGetProxyInfo
WinHttpConnectionGetProxyList
WinHttpConnectionSetPolicyEntries
WinHttpConnectionSetProxyInfo
WinHttpConnectionUpdateIfIndexTable
WinHttpCrackUrl
WinHttpCreateProxyResolver
WinHttpCreateUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpFreeProxyResult
WinHttpFreeProxyResultEx
WinHttpFreeProxySettings
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetProxyForUrlEx
WinHttpGetProxyForUrlEx2
WinHttpGetProxyForUrlHvsi
WinHttpGetProxyResult
WinHttpGetProxyResultEx
WinHttpGetProxySettingsVersion
WinHttpGetTunnelSocket
WinHttpOpen
WinHttpOpenRequest
WinHttpPacJsWorkerMain
WinHttpProbeConnectivity
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReadProxySettings
WinHttpReadProxySettingsHvsi
WinHttpReceiveResponse
WinHttpResetAutoProxy
WinHttpSaveProxyCredentials
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetDefaultProxyConfiguration
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
WinHttpWebSocketClose
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketQueryCloseStatus
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketShutdown
WinHttpWriteData
WinHttpWriteProxySettings
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=26715,
count=35, id=1, productName=Unmarked objects,
count=4, id=260, productName=VS2019 v16.9.0 build 29910, version=29910,
count=1, id=259, productName=VS2019 v16.9.0 build 29910, version=29910,
count=1, id=256, productName=VS2019 v16.9.0 build 29910, version=29910,
count=1, id=255, productName=VS2019 v16.9.0 build 29910, version=29910,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.9.0 build 29910, version=29910,