modapi-2026_08_18_04_47_26.zip
- SHA256 f1d27a3636014b93e451e155166af288bbafbaefb315a6e6137d5143159bfec3
Password
1234
Overview
overview
3Static
static
3modapi-202...26.zip
windows11-21h2-x64
1Ionic.Zip.dll
windows11-21h2-x64
1ModAPI.exe
windows11-21h2-x64
1ModAPI_Shared.dll
windows11-21h2-x64
1Mono.Cecil.Mdb.dll
windows11-21h2-x64
1Mono.Cecil.Pdb.dll
windows11-21h2-x64
1Mono.Cecil.Rocks.dll
windows11-21h2-x64
1Mono.Cecil.dll
windows11-21h2-x64
1Portable.S...le.dll
windows11-21h2-x64
1System.ValueTuple.dll
windows11-21h2-x64
1Updater.exe
windows11-21h2-x64
3libs/AsyncBridge.dll
windows11-21h2-x64
1libs/BaseModLib.dll
windows11-21h2-x64
3libs/I18N.CJK.dll
windows11-21h2-x64
1libs/I18N.MidEast.dll
windows11-21h2-x64
1libs/I18N.Other.dll
windows11-21h2-x64
1libs/I18N.Rare.dll
windows11-21h2-x64
1libs/I18N.West.dll
windows11-21h2-x64
1libs/I18N.dll
windows11-21h2-x64
1libs/Ionic.Zip.dll
windows11-21h2-x64
1libs/Syste...ng.dll
windows11-21h2-x64
1libs/UnityEngine.dll
windows11-21h2-x64
1libs/polyf...ge.dll
windows11-21h2-x64
1libs/polyf...ng.dll
windows11-21h2-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
modapi-2026_08_18_04_47_26.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ionic.Zip.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ModAPI.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
ModAPI_Shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Mono.Cecil.Mdb.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Mono.Cecil.Pdb.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Mono.Cecil.Rocks.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Mono.Cecil.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Portable.System.ValueTuple.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
System.ValueTuple.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Updater.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
libs/AsyncBridge.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
libs/BaseModLib.dll
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
libs/I18N.CJK.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
libs/I18N.MidEast.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
libs/I18N.Other.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
libs/I18N.Rare.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
libs/I18N.West.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
libs/I18N.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
libs/Ionic.Zip.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
libs/System.Threading.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
libs/UnityEngine.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
libs/polyfills/AsyncBridge.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
libs/polyfills/System.Threading.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target modapi-2026_08_18_04_47_26.zip
- Size 3.0MB
- Sample260818-daw1tsvbph
- SHA256 f1d27a3636014b93e451e155166af288bbafbaefb315a6e6137d5143159bfec3
- MD5 d8bbdfb0a7e8d0aeb00abd8c277e3d71
- SHA1 be476288c078515e10a9202b7b130100f75789da
- SHA512 9fcca163581c2651be2d3aef3027dbd72bad1a840a0c2bd03b619fda5216e5c7aebea01ecb5da981a2b924a02a332d01e3021a538b43d77262859ee2fb0b09ab
- SSDEEP 49152:cg6vGRg7PYYXt62NMGRg7aL9bKqL9bK3y3zPFrn9KjLaXXHPMVg9OZeP5aEIinUj:cgKMXYXE2yMXlP3zPFz9aLoH0VNZe5ly
- TLSH T1A4E533B9FD6E5D0DE11EEB7D73B14AD3E9D5451930268C07921503231B83BBA239AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 20 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ionic.Zip.dll unpack001/ModAPI.exe unpack001/ModAPI_Shared.dll unpack001/Mono.Cecil.Mdb.dll unpack001/Mono.Cecil.Pdb.dll unpack001/Mono.Cecil.Rocks.dll unpack001/Mono.Cecil.dll unpack001/Portable.System.ValueTuple.dll unpack001/Updater.exe unpack001/libs/AsyncBridge.dll unpack001/libs/BaseModLib.dll unpack001/libs/I18N.CJK.dll unpack001/libs/I18N.MidEast.dll unpack001/libs/I18N.Other.dll unpack001/libs/I18N.Rare.dll unpack001/libs/I18N.West.dll unpack001/libs/I18N.dll unpack001/libs/Ionic.Zip.dll unpack001/libs/UnityEngine.dll unpack001/libs/polyfills/AsyncBridge.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/libs/System.Threading.dll unpack001/libs/polyfills/System.Threading.dll
File Explorer
-
modapi-2026_08_18_04_47_26.zip.zip 3.0MB
-
Ionic.Zip.dll.dll 451KB
-
ModAPI.exe.exe 1.1MB
-
ModAPI.exe.config.xml 169B
-
ModAPI.pdb567KB
-
ModAPI_Shared.dll.dll 124KB
-
ModAPI_Shared.pdb217KB
-
Mono.Cecil.Mdb.dll.dll 42KB
-
Mono.Cecil.Pdb.dll.dll 84KB
-
Mono.Cecil.Rocks.dll.dll 26KB
-
Mono.Cecil.dll.dll 327KB
-
Portable.System.ValueTuple.dll.dll 5KB
-
System.ValueTuple.dll.dll 24KB
-
Updater.exe.exe 107KB
-
Updater.exe.config242B
-
Updater.pdb21KB
-
configs/games/EscapeThePacific.xml.xml 2KB
-
configs/games/EscapeThePacific/Versions.xml.xml 350B
-
configs/games/GH.xml.xml 5KB
-
configs/games/GH/Versions.xml.xml 15KB
-
configs/games/GenericUnityGame.xml.xml 1017B
-
configs/games/Raft.xml.xml 5KB
-
configs/games/Raft/Versions.xml.xml 248B
-
configs/games/SonsOfTheForest.xml.xml 1KB
-
configs/games/Subnautica.xml.xml 6KB
-
configs/games/Subnautica/Versions.xml.xml 350B
-
configs/games/TheForest.xml.xml 3KB
-
configs/games/TheForest/DynamicClasses.xml7KB
-
configs/games/TheForest/GUI.xml57B
-
configs/games/TheForest/Versions.xml.xml 28KB
-
libs/AsyncBridge.dll.dll 23KB
-
libs/BaseModLib.dll.dll 35KB
-
libs/BaseModLib.pdb81KB
-
libs/GUI.assetbundle11KB
-
libs/I18N.CJK.dll.dll 664KB
-
libs/I18N.MidEast.dll.dll 28KB
-
libs/I18N.Other.dll.dll 31KB
-
libs/I18N.Rare.dll.dll 167KB
-
libs/I18N.West.dll.dll 64KB
-
libs/I18N.dll.dll 31KB
-
libs/Ionic.Zip.dll.dll 451KB
-
libs/System.Threading.dll.dll 378KB
-
libs/UnityEngine.dll.dll 1.3MB
-
libs/polyfills/AsyncBridge.dll.dll 23KB
-
libs/polyfills/System.Threading.dll.dll 378KB
-
mods/TheForest/Map-1.8.1-45b569a4a74a7cf8988219464dd999c3.mod.gz 106KB
-
mods/TheForest/UltimateCheatmenu-2.3.6-d240140a239a4159f64c3576a62bda94.mod.gz 55KB
-
resources/Configuration.xml851B
-
resources/langs/Language.DE.png.png 17KB
-
resources/langs/Language.DE.xaml51KB
-
resources/langs/Language.EN.png.png 18KB
-
resources/langs/Language.EN.xaml49KB
-
resources/langs/Language.ES.png.png 216B
-
resources/langs/Language.ES.xaml50KB
-
resources/langs/Language.FR.png.png 15KB
-
resources/langs/Language.FR.xaml51KB
-
resources/langs/Language.IT.png.png 128B
-
resources/langs/Language.IT.xaml50KB
-
resources/langs/Language.JP.png.png 190B
-
resources/langs/Language.JP.xaml53KB
-
resources/langs/Language.KR.png.png 1KB
-
resources/langs/Language.KR.xaml51KB
-
resources/langs/Language.PL.png.png 312B
-
resources/langs/Language.PL.xaml50KB
-
resources/langs/Language.PT.png.png 184B
-
resources/langs/Language.PT.xaml49KB
-
resources/langs/Language.RU.png.png 125B
-
resources/langs/Language.RU.xaml56KB
-
resources/langs/Language.VI.png.png 197B
-
resources/langs/Language.VI.xaml51KB
-
resources/langs/Language.ZH-TW.png.png 179B
-
resources/langs/Language.ZH-TW.xaml47KB
-
resources/langs/Language.ZH.png.png 187B
-
resources/langs/Language.ZH.xaml47KB
Ionic.Zip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
- MD5 6ded8fcbf5f1d9e422b327ca51625e24
- SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
- SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
- SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
- TLSH T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
467790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb
mscoree
_CorDllMain
Name
.text
Size
449KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ModAPI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9af670143db7f6964b2ff0cb873f074bb62143e12ab6c17bb4bfdf7813016455
- MD5 6aa2006cc7ef2b2e77eeb7802c3dd7da
- SHA1 17a6a882398ff54f5845f216a7ec6f50c2f2acd5
- SHA512 8dfaffcd0e9923f8b41b236e1042e9cb13da228ca3d016f93bbe50082852e20b15b15cab66700b64267e8f345ef9d7ff4458554628226e0dc2e1248847bc92e7
- SSDEEP 24576:wGqCmlnKjB62r8LEFdV067SptZn4VDbb6+tYI2u:/tmynhVuptZn4
- TLSH T111356C0123B01428C27FBBF95636C5883935BC6585D5CA0A24FE3C8A59FA787CD466BF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
1011538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\Git\New_MODAPI2\ModAPI\obj\Release\ModAPI.pdb
mscoree
_CorExeMain
Name
.text
Size
980KB
Virtual Size
979KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ModAPI.exe.config
- SHA256 788f20c6dd16c7d1785b2707d431e03f7568a838ebd639593f4dbaada791be9a
- MD5 97aacc5e5e2729df1cef619f02f4fb84
- SHA1 dd053543075834abc35bdf342adfead3e8c70442
- SHA512 6cae3a0ab763e41c403e674e65eca675fc9e45f5e3019aa6b55fea320eff6670b95adc83d2b54367ef5018961e54ce9f5cda36dce55f4707774b37cb412111d6
- TLSH T1D1C08C4950287E279E224F6B9272C921ABB036617034000CE02BBA7B022006D5246316
- MD5 SHA1 SHA512 TLSH
ModAPI.pdb
- SHA256 205a25b41e4a9147ac609e85e86629dd907100737e31067b0bbba7bc76c622ad
- MD5 fc63fa8ba80c91885d1f3c89e6599c00
- SHA1 c26475bd2c613f1025229a461ba471d18ed3c38d
- SHA512 7f5affa3984ce108f0177d7dbff283d4e9d303e1767a74bb99ed4e99b1ba268aa2831852a9890128c55ce743b8f97cf73d44297c49fb39a6241fb35c8e1294bb
- SSDEEP 6144:JmweSxj73lXDYvnsoNfAtI+j3deMtZAUmnHa1M:owemNb3deMtZA
- TLSH T109C4A1637B90DA32D4A586796A9F8F1E4334E1C85B438B4F67A5604CBDE33671E83390
- MD5 SHA1 SHA512 SSDEEP TLSH
ModAPI_Shared.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5064a66aee57012aa26e42acd7aa747c12c704273bebd947ec98831516368d1c
- MD5 b93472a4108f001fd76bf85b964311ae
- SHA1 2a16aab1ada308091a88b2493cab6d926569765b
- SHA512 ce3b756090a77c7c0113cef43f31a3def7e6f90247855ce508b01d9c5884e50ba87a4e293bd6270399cbdfdcae6fd76a9112dc998dcb6c73683063f2f194463f
- SSDEEP 3072:5j6f5vMLwsZP6mjGirlpZEi1i6kq/bMRhKS0KLElOSSh5K4rWSC+K2s:v6mBrlnVa4
- TLSH T1AAC3071577E80A26E6BF2FB8E07120140B71BA23DA76D35C198A74DD1C727D0DA927B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
133354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Git\New_MODAPI2\ModAPI_Shared\obj\Release\ModAPI_Shared.pdb
mscoree
_CorDllMain
Name
.text
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ModAPI_Shared.pdb
- SHA256 58631f0a8c8c0d24affd4fe18e0294ee0e3cddd868e09d53de7179c069e9377d
- MD5 8dbbcc1de3716ce88aa5c0b881697733
- SHA1 dc179a2e1472311b8477c0908c7ec79259b0bc23
- SHA512 aa9f4c84db7c555cf697981346d04df5b155542295fdd735c9f325e740072d4c06d179e0fa829d8a44675ca5e7740611902d3c2bf08c25bb2292b16a70fa3b3b
- SSDEEP 3072:kiI8kwKzSQ9/UAoTNWR395i/Z6nY/SDI0BL3Nmbw95Owc:k7SQ9/UAJkMnV2F
- TLSH T11A249117BBD1C933C465CB3C6AAB4F1E4238E9885F57876F97A4B05C3DA33262D86214
- MD5 SHA1 SHA512 SSDEEP TLSH
Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 690f97880ab2238ec345e6f55925df91cd8177c7a83c55ab71452b69a3700fc0
- MD5 4a7e9844eedde949136d24a580793058
- SHA1 bc2b13c5a1eb802ee8bdb570e6ecbc59512a3f40
- SHA512 2cc0ab0cbac7244eaab8899762b4ee1e28c79b1db4505e03f1a07650c0f0dc966b42068faf62b8f8b343c5d5ce4b55c9a2f0ef64d0b81cdefb51cddb3ee9f3fd
- SSDEEP 768:MKobDqS5qsTEdSHgayuKze5rgtHD/DGzUJNfx4CRIpZwM3TIz8V57vA:MKcqS5qsxHgayhe0HD/DsUJNfVkwM3To
- TLSH T1E21329141FAC872BC29D55FDA5D526161BF2903CA593FB978EC8F0E77C43B8610026A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
48906
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Hellsing\Desktop\cecil-master\symbols\mdb\obj\net_4_0_Release\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 88f07b57d194eeff27b482c3be5a19fb99fb248c4283946397f2c57e9237c86e
- MD5 d49f739f0052d6d99ecbda15ca22e379
- SHA1 588c1f6bb2837edcc34227cca3b0e10721e4d234
- SHA512 de0d54c6818bcac2a912af912477ebb6636d5b432d0f537f5867007cbfee27ee62205764957e6bdbdfd4514d4dec5dc7b0058e3ce64a8f85a228396929d752ef
- SSDEEP 1536:LfwsT4RY5i2ct7zXkHoNZLo8ckndKwMQ1yyK2HfnJT:LfwsTaY5iZz0HcLbckHD1ycH/JT
- TLSH T148834A336BE89DA7C19D67B538A60A0107F2F30DE253974E96C46DF96847B290933393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
91898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Hellsing\Desktop\cecil-master\symbols\pdb\obj\net_4_0_Release\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 29058de697a1d6d6cd0ff1261c6fb2ed98a27eb3bf4cb4de0982a52f7e38ead3
- MD5 a968a0286110becb3cb8bb92d12d9567
- SHA1 b52425fd9efdaf10765c99e061dfcecc5a5d55d9
- SHA512 301e3536091fd729dec9bd9ac34386f02c652f309f70faea5b8ba9e50a6bb1836798cc48a47f2c8c1b5c88e49eef4bde5dcacc1ff76dee1f6f8a2a1552b385c0
- SSDEEP 768:i+lbJxUixq+a95i8uRssve7m1p23FFbF6Yd4:Drhm1assve7BB6Yq
- TLSH T109C24B0137A4DF33C1EE893A78E2116807F1C6931123DB194DDC95FAA9C7795AB017EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
33162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Hellsing\Desktop\cecil-master\rocks\obj\net_4_0_Release\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71044c17012323bcca272259d139ac09a84ee502c73fd22333d426288d1f949c
- MD5 aeec2f699cd2b64fd80903981da80cb9
- SHA1 86fd49654880c95b092160f91eb5b49b5c43dd52
- SHA512 32ce8d7501ea358e1720fc6bb9281d437017757fb063966b21d9cbc2b8cf0ffd34d59b636fd5fbc5d75eb3ef561a76f22304e0c80ca812c4df29098f7396daaa
- SSDEEP 6144:Dkgp/RBc6VcgbQhN++pN+A+LuYaanUnfvkn74dl8DUS8f9xMludqxShSJG:5pZrUnf+4QDUclbSE
- TLSH T165649D3157EC8B3FEA4F577FE46A241683F1E41A628FEB0D1998A6FE4C43B521901163
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
339074
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Hellsing\Desktop\cecil-master\obj\net_4_0_Release\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
325KB
Virtual Size
325KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
852B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Portable.System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f34c70fe42873ea7bea4e90b31497c3bee573eb7101bfacb3395df9698bc7c12
- MD5 8f04b29129d6ce0b91250f9cddd7fe88
- SHA1 0779e62a766d86a27b21646d5acd8fcb21512ebd
- SHA512 625b66e4e64296cbad3aaceb8ed61993028da51fa9fa1c5350759be645dc5ca819cb23cc57167c9c84f15ad74f6fd97ab5837b819eabdb57b0b9b57924157a9c
- SSDEEP 48:6Z+l8LlwyPlGSnAQ2H+r2r4yQY7hSlJIFT+VrfXuPvwSlBCvIrpLuXkl6uXRqqig:PcZPlbnNDCrjQYkJIhCfNvL0BBqqbBU
- TLSH T178B167196BE8433DE6BB2B716DB1D74112B9FA62EF73CB9E0946010E1C215148D32F71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
10258
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
I:\Portable.System.ValueTuple\obj\Release\net47\Portable.System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a9:54:70:d9:79:c0:84:65:e2:00:00:00:00:00:a9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
12898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c2beb9f7b41c9605dfdbcbbd95dddf2e96ba59c38627b2e07167a0d963bf81a9
- MD5 176bf1eadeffbc0dda7507ec49cfb9da
- SHA1 e7f69d983c060768054d5c8f186d93f984e9be59
- SHA512 44625832831d9427c580a4cc63d01a4771164087349a3d07e9731343d633e84280efaecc27f5ffdfd7584601d442cdae17ad37c97c2c10f45638a27e147ac517
- SSDEEP 768:mGzJ5vPda3fgosiHAm0cjabanaHbhfrmFz3wyyBButCf7woVcB:9fvPE34riHAmTm+aHbhDmxAPukU4c
- TLSH T18DB36D9A673D8421DC18B5F23A5246D50E78AF7A31AD8132F075B8073978353DE0FA6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\Git\New_MODAPI2\Updater\obj\Release\Updater.pdb
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updater.exe.config
- SHA256 67300dc23d3f73ff437494e365513624aecb0018e07bc8edd9890bc562472bd4
- MD5 67e4382c80e8acd4bef0267a7e3cb93d
- SHA1 9976cca71318e281b360125c7ae8eadc9d4a364d
- SHA512 fd8eda0d006bbad3554612796b1f86270e166f8de0007bf2c303ae08857e438b2a803347ddc9859b8a5f37add1cd687200003c098c99e44bd2de3c1871a07e36
- TLSH T106D0A74514987E268F1147B7967385759B7166A66435000DE81FB4BB0A2101C92A6316
- MD5 SHA1 SHA512 TLSH
Updater.pdb
- SHA256 df29d60f898603316e03b281a7fc733fd6d8c1cbfa1114897ca277c5fbb7cd8f
- MD5 f0ae29fb8c0d28591fe2ad84d218b735
- SHA1 f86f9c71978d12686f1f7e3c2ee1e94ae3393445
- SHA512 5606008901da92adee9e2a3a6af7b77e140d14e142ef0cbb1c2175c8409f5ca65182769bf28dfd6061abf708778e07de6d9ca6b86e45c5264673cb234c29f1d9
- SSDEEP 192:yAPvAPxAPzAPxAPVdAPpyT1NMzMx9oYtTyCxG43qpn4FoU:NkyQyspUNMzMxdF
- TLSH T14EA22F41B340C6B3C4A54F7969ABDB8E0324FD898B425B9B37F4732EACB37450E99164
- MD5 SHA1 SHA512 SSDEEP TLSH
configs/games/EscapeThePacific.xml
- SHA256 4246ba15afaba14ea4506051763407ba69234921b91505f6664700da486aeb0b
- MD5 5e9c83d2564660ddd31599e253ca7346
- SHA1 543bc26fbaa25c9737c3775df07689042e8cde21
- SHA512 cf0352b89f506c5ad5c4f27c94f584ba9e6eeca9a126641bd98aa6b28bc6daa142959d4993654798e9a196e93f9119ca006be1d826ac0654daf4607b80775e7c
- TLSH T1784141750DEEC7675E40BDB37822F8D9158F33BB89C67A02128E1ED3E8164A975862C1
- MD5 SHA1 SHA512 TLSH
configs/games/EscapeThePacific/Versions.xml
- SHA256 25de3bfb2ab803ecd92156c0d9a1f86321d106e22a666eddf1919e6b90d1602a
- MD5 b82fc44a72e28c7d7f8a58159f0d662a
- SHA1 cc5b8d5440f5b3fe8c1e9c52fd8dc5889d554082
- SHA512 bf1c2ffb7c382936c37a4265ed5abf360af082de2df537f0cbef30d0af70515fd43bc7da865ef2b6b1bfd835612cb2ab77b414de5476930a37ec973bdb438b04
- TLSH T11AE026A824E8CB26688513E32033F898B769328D25D00E091048AD73274207E6FCE66B
- MD5 SHA1 SHA512 TLSH
configs/games/GH.xml
- SHA256 2f866623e8c15f744f7434a66142b53a48855f9939d2acd811afc86793720666
- MD5 48a4baac542ba2929946d861c703a4e6
- SHA1 b1fd074255df5c68ca8c93db6247b55c19f8f099
- SHA512 777333d6811dff380a09e74681535aba8417c0f23c97cd8a4cee244da321ea5df3db5005733d1e612048af1f9c79e39ef55a21222d1669c94f3c6367a65a6153
- SSDEEP 24:ZGAG0rfKpxFfKpDQI7CmcwF0TXu9DKzDKc7WYdVdTxe9d2I19S0tj5/S1WWLRR9m:ICULUE16PcoopywgYruoLjONPJfAde22
- TLSH T1D1B1EF750DEEC7575E40BDF37822F8D8248B337BC9D67A02128E5ED3E8258A975862C1
- MD5 SHA1 SHA512 SSDEEP TLSH
configs/games/GH/Versions.xml
- SHA256 fbf0b5dccee038aadec48079ebf21c25ca17cc519919f164ac889f30596626f0
- MD5 d21de8e6d259c104d7c3eab53de38b74
- SHA1 12308603fe779530adaa46f046f598f487353070
- SHA512 0c9d84ea66b412e2da13fa3c9650fede693863f0afa35548d4822f7b4d9642981440172f0bd0ee942858d51f7910736c9e4a4196b51eb24abbb2136bf309df47
- SSDEEP 384:UMhEpCDgQOTeX0DT2npMuAYDcFYghdxDtqE8Lzy:UMhEpCDHna4oFY+dxD8+
- TLSH T1A672F3CA90FCE673A53E8245B1968084F779CADE07020D4CB38DA64B2F6A97E4DD7851
- MD5 SHA1 SHA512 SSDEEP TLSH
configs/games/GenericUnityGame.xml
- SHA256 f348621ed5e3114b7ede7a7ca9ffe5e5439ba8f291d23b614481c45ae061a317
- MD5 20bcd1b2bf4ecb6b95d1a221caceb5f3
- SHA1 792fbbcd29e6c26d0ccafbaee93b31bb0c1197b2
- SHA512 74d1e9498a999c4ca55bea006b3ad2029e7a72d84b46451f54d26284af56b770ef721f7dfd8e9d6ce2fde45d49c16dc701ccdaffa3e91962fec06d6c063d9c61
- TLSH T11E11FB689DFDC762AE6065733E53F848164D77FA45C20B4672901ED3E0114E8978B752
- MD5 SHA1 SHA512 TLSH
configs/games/Raft.xml
- SHA256 395ca3b8438dc434ff50196037b503339e3121e4ad96adde859115caa1b5df43
- MD5 7d49d35145d3afe957811d0a29875b5f
- SHA1 891d6e84debf39e22b307df46914ad6a41dbfad7
- SHA512 e9ef1f5f85a264811b9de4c14bfab614008d1537f283e873e665d7555fdef9fd12e783304c49a9252e06db660cf449399bacd0c7a0443a95677df1278eab6e5e
- SSDEEP 24:PKLG+L7rfKpUfFfKpDQISfi+ZcwF0TXULy89DKzDKc7T6IVdnZTxebI19S5/SRSn:PYvUUtUEznTwkcVb+gLqxNPJfAxT3aN
- TLSH T16DC1EF750DEEC7575E40BDF37822F8D8258B337BC9C67A02128E5ED3E8158A976862C1
- MD5 SHA1 SHA512 SSDEEP TLSH
configs/games/Raft/Versions.xml
- SHA256 e63983859c85e5d984eacdee798dd19c4c86d6006ec9ddaab066904b4884f7b3
- MD5 942eacbb6e94c3416a96b70b32af2995
- SHA1 08d84f54be95e0847c255bcf1b5e57ee732ab9a2
- SHA512 fe8f9a518d9538ddc5de8393ec73068ea554518e7d6bfaa7a149f16d886bd5b0c47b70d5a50fbeb0d2a3a8dee89c4c58d6d2ebb3f986bb48412c9d71f2c2196f
- TLSH T1B4D0979568E48322210C23E7913BE448B3B632CC10A10C0804494C3317220BC2BC712A
- MD5 SHA1 SHA512 TLSH
configs/games/SonsOfTheForest.xml
- SHA256 ed3cb6801d63add26643e5bc983a0e4f9600375008658856eddc2607bd79407b
- MD5 f6922cded6de2f3417259038c7e15285
- SHA1 e9fecb3fcddda730f8e6f3c84a85d6ddc8e23cdf
- SHA512 70bb1f2015d13d53857a972f644cebc058f794a9a30be38f152d2bb5d963218406db5baabeb2be9cad2be6c96b2aaf23194fb33d3f8d6ae2068a4aa992e305b4
- TLSH T1D521BB34D5B8C726AA91BEB33823FC5D114A73F7C4C56A4A124F2ED3D0124A975D7385
- MD5 SHA1 SHA512 TLSH
configs/games/Subnautica.xml
- SHA256 db6941b23425507dc49e39f9f010eb25bfc27862a1a9196cb7c70ba70875d4e3
- MD5 b2c420463b5ce8b6da4671732142729f
- SHA1 68cb23bfc61552d0e0d8e1b5d374ff0319655e5e
- SHA512 ad7eeadd166977afb16347daf718103a50fa5fdaf7c40c36ad2c7c487c8dfc6b2259bc858d9d24c5590011feca97c35e1ea7a90ce2916e8e8267858d6d2913db
- SSDEEP 48:CUEUE46dkcoQ/xcgYruoLjSNPJfAt35BNqO7Qgg:enucozgY3LiOMZ
- TLSH T1D2D102750DEEC7575E40BDF37822E8D8248B337BC9D67A02128E5ED3E8158A976862C1
- MD5 SHA1 SHA512 SSDEEP TLSH
configs/games/Subnautica/Versions.xml
- SHA256 4b36a7cea36298ad7951fadb330ba9c4727617115cf737b440d31f2bd03872ce
- MD5 7496f7bac614f057d6628403487ec780
- SHA1 f4e68a103769d265b5cbda2a454e2e540167a509
- SHA512 6f4033145b2c5eb9fa8ae2a13c6863642491ab97f6b6830f87e30298f417c71ac557d944ed8c1ee654f42269016d76b1cfa936d133da52f0a957db87f27c8911
- TLSH T1ABE026A828E99363959467C73633F889B3BA3A8804D10E4400055A732B5303DBBCB2EB
- MD5 SHA1 SHA512 TLSH
configs/games/TheForest.xml
- SHA256 0ee71dbb970929b48d790b77f321e0b5c30ec363b15a1a418f949f96ac7029b5
- MD5 f6a4b83549e4ba50c15a720e072bb035
- SHA1 d9eafe521c48581e2bf50e07203235c1e57f5be9
- SHA512 c95c4451c2f04d731376d4b9fbaf6ee15b5b59fdf6434ca19b05fbb2d169a345e0616a62bb29f6c7aab833ebab854d68f45913e0e25e5f7f2253d7432fdebbd4
- TLSH T1DF816434DABDC726FA94FD733C23F85D118AB3F688C52A06424B6ED3E0168A97187751
- MD5 SHA1 SHA512 TLSH
configs/games/TheForest/DynamicClasses.xml
- SHA256 de71d73313b71f5893ad184c7824b614e368d5d7ff6eae2379cd0b49aff081de
- MD5 69d870026b9f4c36f1d5acefdaede5d6
- SHA1 b17c7e8d108a236a9884a042fa43ce63c851bf96
- SHA512 497338ec113605899e46fbfedf1644f7e58ebb245f2c8d49060bc5900cf4076a1ee3d157954efbe8398265ebc6a8be94fe0b4ef53ee305928f70530a745a60b0
- SSDEEP 96:sHKqnz5UDmB1FBdcbIgTc1UcT6O/GUcOeURIdwE6IZjYke:sHZ5UCB1FBgUx6O/GoRawEZZjG
- TLSH T1F3E1293262C6EEBC06F562245D77A8549EB093B7530E89E1F3AB3D0BDD6B0842367117
- MD5 SHA1 SHA512 SSDEEP TLSH
configs/games/TheForest/GUI.xml
- SHA256 918fda452c8f1a2e9615e5013500d8b0d102934e01c82f2b72898933a508e3c4
- MD5 88dc02a54b9897a39cc1e60adf042fa8
- SHA1 c4b21e2e09e00c8834a073b9fcd9375d42ef5a63
- SHA512 5fbd2a3afb9999122312144d6e2033922abca3517c33ef65696824ca057e68d75a5b22dd29d5658cc0b00fd498dacf56998a231045fee8aa44267768ee6f0104
- TLSH T18990020043549F224F6019B10B66C42C776872739861488978925CF64A6535816D4166
- MD5 SHA1 SHA512 TLSH
configs/games/TheForest/Versions.xml
- SHA256 4bce1558c23a1101b0b5f3bd2fe1ade570670e1f3f5a3336a21c18df4b8c8cd4
- MD5 e7d77d2875b85601945c697f3c04cb2a
- SHA1 8912f29e06b7549d326a7f09490989974ae335a8
- SHA512 9e4bacefc6306136eb7ef3c4928943fae1ae8c40598b6034b1f9da22e924d543c87722307da348b4ed99d979b9724fc705a9f7ee30297990be245ec815d417d7
- SSDEEP 384:bLgL9KNlQoBW0kB0YG7SNKKgudhi4ibhdqqenXsYy7ft4RgA:PgL9KNl/BW79KKObKqao146A
- TLSH T15AD2DCCA90FC91B7A43E5345B54A90C9F768CADD03460E48B3CDE60B1FAA97E4ED7841
- MD5 SHA1 SHA512 SSDEEP TLSH
libs/AsyncBridge.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 588b5c20b690b6756f0f2a65146d02fec66058db698a96694c061c10a33a7c9d
- MD5 46a3b9624ee066c56d2173019dbf48ac
- SHA1 5f270fcb98cf07a291ba06ff50bdda8f8b961820
- SHA512 20f6d76605094ba16e460697194c21a7f0cbb49b4074330d7a8698c0fd2a03d0255839870723ba79cb5055ac07ce8c713f3ccf02a7a8b8beb11cb246a7ccb338
- SSDEEP 384:X4YnCHPMVYbxpe0YOjFM1nL01kkxfYNbU2Yh0J594O058SKPKvi41QnRcvGENYIa:IT6Ybxpe0YOjkAkkxQNoZh094dtsMfLa
- TLSH T113B24C19A3AD0226DBFF07F9E173169547B0ED479423DB2B2F8CA0E41C1B34456727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29394
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Joseph\Source\Repos\AsyncBridge\src\AsyncBridge\obj\Release\net35-client\AsyncBridge.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/BaseModLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c03d2aabc060a60fa02e78979693b616e6fe0c97f00c09475bcee957ea77e22
- MD5 342789230ac2d75ec7163dda7ed7d58f
- SHA1 d07af69ec17da5c884eb757a2a7a60cd80f7bde0
- SHA512 8aa57d10834cd44e76fa2dbcd2ccdca04d04f5f3d345e73abf04bc2717a5011faae8fcf491e8608e0a650e06a9eb3a789cc8bbee0c2a933f87ae0ade05231f4c
- SSDEEP 768:TpcyYsYeUA7gj0zTsc8YKUDbAUXfpjF26571xyy/vs8QUBW0efkpcrs1Addb:TpcyYsYeUT03sc8YKUIUXfpjFD1cqvsn
- TLSH T118F2191533EC8A66E9EE0EBD28B116050BF1F9675835E36C5DC274CC1CA7B908A187E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\Git\New_MODAPI2\BaseModLib\obj\x86\Release\BaseModLib.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/BaseModLib.pdb
- SHA256 713d0dd11e75434d507ee83879781cb0097ea1b4131d9ae49f284d4ac33b1456
- MD5 ca21f568311438b4dc8e62a27848e80a
- SHA1 6b40c331ef73f30db46323bff1ed4ae164253555
- SHA512 0bb14a0c5a08f5b6a01358f4616e22cc688f3a8fa29e5ddea7ebb93ef200778dbb89d53661a75da8a4c699745bef9bc0b43153a9f3863d72dd6cc3f32e35e9b8
- SSDEEP 768:WaWUv0yH1xu83JCzxkLOI+syR6EeBaJpNARGXgeSEVOpEsMpl/Sid4vh17jVAwCd:zEeBafyRkgpEsML/v4vh1tfCh
- TLSH T16B835257BB90C633D49986786A9B8F1D0338EDC85B838B1F57A5B16C7CB33662D83214
- MD5 SHA1 SHA512 SSDEEP TLSH
libs/GUI.assetbundle
- SHA256 ca83b75cb3e790955dbb001de778074792a68fd2a786099a1a10eeffa18f8483
- MD5 76473231d6489c0cc5edd1834653d3ee
- SHA1 be9fff49e5acc6c8722129909d974303b8cf4e53
- SHA512 88981d5899d2d5813983d9561ee43e6e16a8157b8914ce1b28b3e72f5f4dfe4f55e46d4d1fe8a9f0714c4945ccb1e8121796304698fe153ab47b3f391a079b50
- SSDEEP 192:jxuvw3Z7arvS+c2awyRQmcUagQ6RMLPXvfl86RbHHAsA06bS7Z4bb1iRNK:JZb2aXwLgQ6Ro/vfOkAsKk2hiO
- TLSH T17B42C0D96C350E9BEB391E97093B71CCD8E76584825CB539330C2B8316302BA71957AE
- MD5 SHA1 SHA512 SSDEEP TLSH
libs/I18N.CJK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f606067bc73c2f740d0d8891cf6f18155c9bf697aff3c917b6128197a54dbf8
- MD5 ee7520204f28884ae653edd96010239e
- SHA1 6f437607c1e306e621ac40032dffaa91be50a1c6
- SHA512 93a09f02b04968a0ec5a23132f2d9737e60a379d1da867bb19765aacad1a7974c2a3372ce16edb81fe6e21e91de2992a889ff0b4e1ecccfbd49a7857457bc985
- SSDEEP 6144:mGIhI6mdCPDhPrp9xdcKGFz/uOpVkkRl5ickHSoB8oPzypiN3GtmUzC:uiyPDhT7GF7RfXAxHSoBDPzSU2b
- TLSH T164E4C099D1A0AB16F3BBC634A0B4751BD76360196A17896FFE6B83C3D8C7BF00486117
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
662KB
Virtual Size
662KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
764B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/I18N.MidEast.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cf904202a68974d1c375cf31317d80d7a86dc8618e2565d1039673f3e1c10241
- MD5 f90bbe62c89bb30f8fa946de122266f2
- SHA1 ffc7a0a94658dcbd6f058fa4573eb8838d18cf46
- SHA512 477ab45ea43f9f740a34ffef8b1a116af4a950925c152575053ef19eea50085de4274ed110ecf0a5536218a36010c3b8b3fb1d6a14bf1454c385492a594b2316
- SSDEEP 384:BQXUVkHyyQ5qtzxq92fkVBemf285Tw2SoIYicyMqE3BVfaOfs:zVrT5a1y2c/1HTwr1
- TLSH T115D27001AED55746E2BB03B596F78D1A87F2B4055B365B4E21CA0A0D2BD23B04EC7B39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
780B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/I18N.Other.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 06df2d913e85f18d62644bf3f298d99c40d15ead3416b0e2ea295cc6b33a8a0c
- MD5 1a9fc4b7e0af45be265f704009d3a49a
- SHA1 26caa2d843e371fdfbb5f8fc6f841e55c4cd0c9b
- SHA512 130edebed147c6e74a22c68f733dfa0e6a2611c65c501cd4e0ee5f5014630d30ca29492d10dd02ef8ba0984ce883b7d03036feeaf99b8eb4acb81bc45d618c9b
- SSDEEP 384:3LvgN0MML4PPPMJjdtWiikMCz5TB6fl5USKBNQf3hBdyMqE3BVfaOf1:3LNMhPPPmptWiik1YTmBNQX
- TLSH T187E27319B7E48B56F5B7433094F3010A92F5F8765B389B2F11DA16092BE17704ACAF2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
772B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/I18N.Rare.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6cc7ed0cd582bb2bb66347c994cb120057a226a9d16dcf77f50b5ce69f94c32
- MD5 0707bb3bd5dcc9c90362149309c7290c
- SHA1 b16b1a1b9a5d91f9ef81edb6e1432e72bab102cc
- SHA512 5461800991fd421a2b2a7d705abe3ca8f757012c0bf716fa8f06cd4f00fad7e4a4ca5b588a9faea9ead29f11eeab9cc0361c17443a7c06421016cc3ac56debf2
- SSDEEP 1536:p6xz3e9gG8OhhUrg6hzLF4Kcfh3a0r1vZszMvTAAtOVWVHzvibklPa9B9a9zV9vH:Gs6XCLa0rZ+zMvTBKsibklPhI1Bu
- TLSH T193F37E82EEC16F47D61B42BA42E3DCA182ED94E877B8C21703AA551C7BC53308BD765D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
165KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
764B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/I18N.West.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4894952d9195d5506d55b1e41ef6e43eeff1baeede99d6ff68208cca0ff57dd9
- MD5 bcb1c46520bf6efb61c5520a4db9485f
- SHA1 51b078a6387cd0291975855f4e5903627a60f1a5
- SHA512 46dd64a8082c62d5ed3f73de51914a7f1ffe0900d945aa659b7ff6a9f7980d6a50cedcd603f73e72b53e75a2746888f16ecb395d37185d4149dec2c49f85b59f
- SSDEEP 1536:KJ8AQKyrB4Z9aLBxiNxBxwgxF4A1kAbmL:CyT9
- TLSH T171539013EDC44722EA7B47B886E38C89C2EC607157356B4B01EF461E3BC63B4D6CA656
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
764B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/I18N.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f83f1f70726521cf3b99adb191afd8b3453473d518353cdc4094f6ea257eb647
- MD5 d3f66610bbc18c28734f9eb3d2556f3d
- SHA1 d8a24ecfb92357b363da8e9d3bec8a26c9068e14
- SHA512 2011aa7ed6207abd725cf81ecac263356dfda2968364439fb3db2db573df5f82f44ee858cb18cc504ccdd43b9351ad89580f10fd86cb82eae987ff51e4759e46
- SSDEEP 384:F7xdyXVX14qDa8Kh50RAbqYfbCyMqE3BVfaOfI1:F7GlvHYXbqYfb/
- TLSH T144E22F243BE0034DF1F2EA71C8F54009557AB4F3FE11D79E29E2125A4477362AAD6E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
748B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/Ionic.Zip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
- MD5 6ded8fcbf5f1d9e422b327ca51625e24
- SHA1 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
- SHA512 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
- SSDEEP 6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9
- TLSH T155A4BE0023DC4A6AE2FE5775D4B782A5C3F2B815793ECB8F9D8464EF191A780D6107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
467790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb
mscoree
_CorDllMain
Name
.text
Size
449KB
Virtual Size
448KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/System.Threading.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a791af9e3861e231662b657098a823b21a084cbb6a4901d6ccf363405849a78
- MD5 f5ee17938d7c545bf62ad955803661c7
- SHA1 dd0647d250539f1ec580737de102e2515558f422
- SHA512 669a89ad811cda4f3ff4aa318aa03e26e4cb41ea22bc321bad02a671273d867cbd223a64bb30da592a5484a9f1cec77c96f5bf63b1fe586b6d3688b8c9da530c
- SSDEEP 6144:mH4bNycoylcQQAzB0ebN+pM4CHavptCyO3mEQGS/eoO4:mYbNWQQAzB0e176veD3mPh/O4
- TLSH T116844901B3DCC323E7AF9A77F174586A4771D482964BE30A245DF6B42CD3B640E096BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a6:e9:10:6c:8a:b6:b5:78:02:56:c2:cf:c8:c4:e9:27:bb:ec:f4:fc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 9, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:08:77:5f:00:00:00:00:00:4a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 19, 2010 - Oct 19, 2011
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:04:b3:f5:00:00:00:00:00:0d
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2011
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Minor OS version
0
Major OS version
4
Entry point
386126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\cp\main\built\Release\Temp\86167f787584e42c25873494b6be9c\System.Threading.pdb
mscoree
_CorDllMain
Name
.text
Size
369KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/UnityEngine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4757b1a310751975aa60ef8c7fae9a51509b5f047f832a3d20a30ab5ceefc2d2
- MD5 0ad05585430753b3ff9cf704065e6a28
- SHA1 f957e8ce2124154a1ff5fc98a587ae4c5538926c
- SHA512 d7d8db146146fa34a85843bf6b2ea0a5bfa70a79f3b5357efc57abdc2cc0a26e9b23b4bd6b3b24a334661060c58f2721fe4db049559dc4e8d7193ff1b90fb495
- SSDEEP 24576:boxfzy/2RAJjvSmSvauF6ux+CQbpcuFOzkGZie:OzW2gbpcuFOzk
- TLSH T14655F6157BDDD91BCD5E13B4A4A100186338D8857303EB8B2270A2FC2DE73D56DEA6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1338718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/polyfills/AsyncBridge.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 588b5c20b690b6756f0f2a65146d02fec66058db698a96694c061c10a33a7c9d
- MD5 46a3b9624ee066c56d2173019dbf48ac
- SHA1 5f270fcb98cf07a291ba06ff50bdda8f8b961820
- SHA512 20f6d76605094ba16e460697194c21a7f0cbb49b4074330d7a8698c0fd2a03d0255839870723ba79cb5055ac07ce8c713f3ccf02a7a8b8beb11cb246a7ccb338
- SSDEEP 384:X4YnCHPMVYbxpe0YOjFM1nL01kkxfYNbU2Yh0J594O058SKPKvi41QnRcvGENYIa:IT6Ybxpe0YOjkAkkxQNoZh094dtsMfLa
- TLSH T113B24C19A3AD0226DBFF07F9E173169547B0ED479423DB2B2F8CA0E41C1B34456727A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29394
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Joseph\Source\Repos\AsyncBridge\src\AsyncBridge\obj\Release\net35-client\AsyncBridge.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
libs/polyfills/System.Threading.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a791af9e3861e231662b657098a823b21a084cbb6a4901d6ccf363405849a78
- MD5 f5ee17938d7c545bf62ad955803661c7
- SHA1 dd0647d250539f1ec580737de102e2515558f422
- SHA512 669a89ad811cda4f3ff4aa318aa03e26e4cb41ea22bc321bad02a671273d867cbd223a64bb30da592a5484a9f1cec77c96f5bf63b1fe586b6d3688b8c9da530c
- SSDEEP 6144:mH4bNycoylcQQAzB0ebN+pM4CHavptCyO3mEQGS/eoO4:mYbNWQQAzB0e176veD3mPh/O4
- TLSH T116844901B3DCC323E7AF9A77F174586A4771D482964BE30A245DF6B42CD3B640E096BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a6:e9:10:6c:8a:b6:b5:78:02:56:c2:cf:c8:c4:e9:27:bb:ec:f4:fc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 9, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:08:77:5f:00:00:00:00:00:4a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 19, 2010 - Oct 19, 2011
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:04:b3:f5:00:00:00:00:00:0d
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2011
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Minor OS version
0
Major OS version
4
Entry point
386126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\cp\main\built\Release\Temp\86167f787584e42c25873494b6be9c\System.Threading.pdb
mscoree
_CorDllMain
Name
.text
Size
369KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
mods/TheForest/Map-1.8.1-45b569a4a74a7cf8988219464dd999c3.mod
- SHA256 352f10f8c1f7bcb5834808d4eff0844b956f68befafc1b3dc34f06205a424f7b
- MD5 88df0a4d0c9c254ac29bb1e2487638fd
- SHA1 87b93a0a18a1732def19837cfb2db478bbd18ae3
- SHA512 9a5307f9b4b9937fa3d9c54b5080224a4d40e79a0daf90589fecb47b0ee8780b89203d15036038008c1ffaaaff73943644e125a8a745c27402b3180f39d2b7c1
- SSDEEP 3072:muuL1gZRHLei3bPxHKhcufoFLPpsyZ6ZOis3rzcA:jLRHLjtH9ucp9Z6ZOD3rzH
- TLSH T15AB3127DB55A3CCA93C05C39172CEED0A1E8B102335E0ADDE436A975DE40C67F6AB168
- MD5 SHA1 SHA512 SSDEEP TLSH
mods/TheForest/UltimateCheatmenu-2.3.6-d240140a239a4159f64c3576a62bda94.mod
- SHA256 bd7017da364811f796b073c96bbec92850ca6e04c120146142e1477623d5dd0b
- MD5 c8bd83a3dbb1b68a438e1974a7a177c8
- SHA1 596d3cff60f5f108dbf43cc322a1e1e53ff50f70
- SHA512 07bacd8cbbfefedf180903471de01274c2a7434d288eb4a4f90360e670abc14d4063b0a50b65eb66e58bc5519d97ac14849432ef89512f8e11aac0c28533eb9b
- SSDEEP 1536:zVCvoO7hPsGoMt2k2v1X1f5XrPQzH17dLkp9Caudih:zVTgCGqR1f5XreH8km
- TLSH T11C43F170A1B03BE0586CC635A36BA1E1F5D3BB5459F18B3ED64F29CCF820868663DC52
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/Configuration.xml
- SHA256 b2bb335a339b7352a5d39069b492ed46a798588f41296cc32b948f7fb6f0fd60
- MD5 6094d47d8d96d6470e64b7ef0c26a867
- SHA1 b26c5ae94b6e9db5a27057728aeee021bea11dbe
- SHA512 a8523d82281195436266af0632ab9146bd19d0e67eee8b790cb246e4101c86adfd8439aa31510a2eca6da7335312a1c933d1640ff3393870d5170549ca1acfde
- TLSH T1970166CB54E54843B4F05A23E262BA16EF62F0E351074D197D9EBA1F0F7112841939B8
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.DE.png
- SHA256 c1ee063fdb296563c4ccd42b3e784ca23c487e05a209946aba8737633dd22cb8
- MD5 74dfab17bc420e398d0cbab31d54976f
- SHA1 763f370ee4b48197d9382d373471575a00dfa9a8
- SHA512 e35ec04180ca9d7b04ef57ebe1f2ce6084cdf203f9ef82ac9f6c7095089291d68f5898ad98a313a72a97f1352ee8e6a83843b16da46f875853bbe8087a535a43
- SSDEEP 96:gSDZ/I09Da01l+gmkyTt6Hk8nT2ckEWmkTvdp7dxNXrNXNsc5dmGe:gSDS0tKg9E05T1k6kPH5MX
- TLSH T119821869FDF07559A489B6322DC920069E730787D9816C04BACE8CEB9F10F8F8D5F192
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.DE.xaml
- SHA256 1a77a484589a09b6c0a81429f216575932d1827dd062674394c2bc3c871ef6d8
- MD5 c34a55065889d9005375ad22fd80f36a
- SHA1 1c55f07e257cd19827a7f500e9a4e84aec2bbb07
- SHA512 07cc340e1010f9af3c78f3858ba9188ae1363f8e95f7780a06e8b46f6b7a072fa9206e647fb7a13208aee33ddc18a3ca96b2a2594731eb3a9bc11162f6ba992b
- SSDEEP 768:X/uXWlS/3mHrjWDtDQuyW0P758yhfbZJr1jeveVB7Rz:XgqS/3mdW0P76yh31jUqh
- TLSH T105335A8D337F7D343A95135F345C91C31D9A8E5E0234D0FAF786A246BABCA8125A73A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.EN.png
- SHA256 e621cedb8956c4d134542c7395967adb80e020971a272c1272e7958697818617
- MD5 f01ccf15e532a52109101e907af3c2d8
- SHA1 7d75888b023b359d6beffc717424b01421fa5471
- SHA512 2ffce00273cecc69b3a5e51637c917985f269ab891704d1b4aa5590084d05415be72471c491f92eb158bf6fac432ecda2584f506cb4428205ffdcd84c993593f
- SSDEEP 96:gSDZ/I09Da01l+gmkyTt6Hk8nT2ckEWmGxNXrNXNsc5dVfL+1UD9ZZrBkQbz:gSDS0tKg9E05T1k6c5XfL4UD9ZZrv
- TLSH T1BB923B28FDF075A5A589F7321DD924069EB30387C5826D44BACC8CDB9F10B9E8E5F291
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.EN.xaml
- SHA256 83801ccbf1a664cf5278e2445881a6c4cd24e169d7d09563be9613e17e212f6c
- MD5 c185e6a48700f7df3e976d75a54ecf35
- SHA1 721b8878d3d0d0b5ced60d93b9198c4dd29d314d
- SHA512 a6d8734110dee457bbdc808141ddfc17730c96ac7f038546784155fddebda03e73dfbfdae1d0b2637ff4aa3c2177a3aaa39ed5a4d6029fb66938eecd2076d7b0
- SSDEEP 768:XYq63y+P4XIv688758yhebWW5yYrpbhh62STr:XM68876yhMy2pbhWf
- TLSH T1B533078D337FBC343A95136F346CA5C31D868D5E0234C4FAF7866245BABC98161A77A2
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.ES.png
- SHA256 6c92d292bf085997a83f28b0adb1febc6f0621864ef239e20d7829e2cd1bfa01
- MD5 2db9692501a20177126afd781d984857
- SHA1 dba02c4f00332d6c3af8af182a747a2352a2015d
- SHA512 be0444b55d73e8db443236908771e0ba5d9a24575a0d68c7f879259cad5afaa7b65da0c6a59f4b981e5e7b6a79fb155a1f00c006ce5d669f85e1f2d3c2da7da7
- TLSH T151D0235195D04D5DE8FD1DF17126D05064F15258011364594387B7B52F622169CEA515
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.ES.xaml
- SHA256 26a33a62cac4d8154e050f43e8524efbb34ae4866fff169b73e6f057f9b0e8cb
- MD5 a0041a53ab0f4010b49646f5f00a6a96
- SHA1 f6e78222940e9473aa8442eac87f476f41db6ea7
- SHA512 c0e4dd5b03094e496b1a75ff7235db22d81d68c602ab2611767813085ef2e199202d1f91c6eb25acf5133d3b19416d6228ea86aa3639b18fab25cdf8f92ae91c
- SSDEEP 768:gsEOuv0dNrCjuO58yhAbpMK9fG9bCVh62STo:gfsejuO6yhC9G+Ws
- TLSH T18D33159C33BFBC343995135F3869D5C31D898D5E0238C0FAF3866285BABC98165A77A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.FR.png
- SHA256 5e0e9a28ca6e0c5ff94f81b0327e711ff6ea84524668007554fddadfc2baeb92
- MD5 34a10eba644dfe276a03bc653386aed1
- SHA1 522b090e6488cb4872892717d743c4eba2735375
- SHA512 90a10fa984b78c613799096b5826ba9b757a82e8f396e160284df250e591ae66a3c30709c8193f723b0f9bc2a040875773b381816eaa24976c35d60d1dbe11e8
- SSDEEP 48:p/6ySNDk29WJsEvkkSTx/N3ZTBCvaXLc9LWTSjsxN+Y97sc5OR7B7PnIp9:pSnJkEWmBVHdxNX7sc5YBUp9
- TLSH T181625478FDF17264958AD6362DD528454C730B83D580AC45BBCE8C2A7F10BAD8C5F286
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.FR.xaml
- SHA256 6e98f10d3d793330ed8e47ba18181ce006a8e70147df86d4eeb3c6d697ae4e77
- MD5 defa1413a60dfd28debf8d7548e0100a
- SHA1 910cc50b6166bb247a224e1fbc6aae18fbcc473d
- SHA512 1317065ccea6cf473f2bab633c28519b40d63cd5f6c869f2ff8acecc193e40362e089f7e829acbe69ab8152d14401f85211867950fba93ad219d3a284f7f0a2a
- SSDEEP 768:Xf9PLqWpYItYpAg58yh05xznyyeAzXh62STr:Xf9PGWqpAg6yhEERIWf
- TLSH T1E433498D33BFBC343A95135F346895C31C9A8D1E0234D0FAF7866285BABC98571A77A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.IT.png
- SHA256 ccbca805a49b3b276802fa49c6a5728f2d11b4a884dcd5d8541cba64ebe36973
- MD5 740309c5cbd24ea7dfffe057aec20eba
- SHA1 25cb28afdf48cb9c99e05c8993f11ef4d136b630
- SHA512 0dfbf60e06f51f68eb8d65452ae2d81f090f58b75b155f2ac1dff22f00d6ad634d58221e27bc506814cd53358de9c0241bcc4cef21ccb3afe1b995ec10a50127
- TLSH T181B02BF2B34F043DF52E0112025B80F07C20170B08118E3E01F18C3D15A8C0CC0C0142
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.IT.xaml
- SHA256 f7dd91111d162fea562becfb81d805d4a3beebbd0707d7bf947bcafd878378d5
- MD5 c168f4691ed4b86bc3873f641e5d1de5
- SHA1 f20a16511ed331fae801cd680381cef6db9dfce7
- SHA512 73a0766c7f23b3d99c4dcba23e71e3b96173b0f26a6f872bd3e9011f4ee6c959e4d57f0951b0eb3f29f47eed50c6e10ad6645b08bc78994564d7685d64a506c4
- SSDEEP 1536:XN81tkEup3s9FUfPxWZt6yhk5o4TsN9Q+IoWv:d81S13s9F0PxWz6rEu+IoWv
- TLSH T19133169C337FBC343995539F3468A1C31D9A8D5E1234D0FAF3866245BABC98175A33A2
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.JP.png
- SHA256 fbebc92dd5bb69d8a8b1c4db7d4a19497174d91ea609dd37ef078010003a19d6
- MD5 bf3f475889cab728cf099046a9e11aa2
- SHA1 8ea9483ad42dda13360004fd8c47f0cdd5b2b5ec
- SHA512 7c1cb92f10cd737c23063232b9c2ec5bb7d6993c85a0df4bcb48a70ea1bae7b4b3360f464380f873cdbea42f3425f11f6fe26595a42a69f623e39aaa13fc5bff
- TLSH T121C022EF9708A13AC26E8A2223850CE12D24212F9A885A280209E9301A6320CA38F087
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.JP.xaml
- SHA256 18b37dd792e318723324b8ba3bbc1699f1fec562be2f3ac4d9003bf3d89ae3db
- MD5 9cc2b9976decbe8057609872a940abfa
- SHA1 419863fe57d945616bfe6926bf5a0fc3ec870733
- SHA512 9499eb43f543d287321df1eaab0a32d7c87dca477db100176447ab5fe0b4291eb65f5169ccb7c993366c3e17fb41876cc76befaea9f70c5affa2c85fb9cb4ed1
- SSDEEP 384:XWq+9C7351QFuRqIrH58yhl49z6jIxsg796TyST0k:XXtGFukIrH58yhl491h62ST7
- TLSH T18833069C33BE7C342995139F385CA1C31D898D1E8234D4FAF34EA145BABC989A5637B1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.KR.png
- SHA256 c49968dc7eeebd0b51ca751f9ad444f7c49b8d18c446d94dd97e7d9b06bd14b4
- MD5 104bea41caf9ee464906ca4b8b7c0154
- SHA1 07da96875f576ffae08bd93f9757e6c473cc118d
- SHA512 4d019237639c755bc2f768a4eeb094d92c226e630305b3d097732f6cf888518cdbf5e5e363242bb7ee67e133e72db7fb352e830ea864a320b0527a16617d1240
- TLSH T1A921E7DED07BDBA9474B4C721729C81E93B31263C2820752FE4F84AA003D7CC8139E02
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.KR.xaml
- SHA256 ac518b4124d03988b4a309c98a6d5b7a1099048fb4d9c7f8e68c677055c28591
- MD5 dae5c33db8dcfb88bb4a2532af469b32
- SHA1 2a95ed755b177e1a1f906100b9f825c0025ed2d9
- SHA512 2e1d769a8d1cb38fb9866ecaa228f36a2829bccc12ce2ea9f32f082d16c25b696bedf173111fa52a719cbb63a06b87e0e20ed795f40eb3c1d76056027d4e9dde
- SSDEEP 768:Xb4Kb/aTxe+44w7fcj/Lx58yhnDBTnUVq9V4wmV59S7U/L52h62STr:Xa//Lx6yhNnU09+wu76w52Wf
- TLSH T12233159D33BF7C343996175F3868A5C30DC6891E0234C0FAF7866685BABC98165A37A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.PL.png
- SHA256 3c8ca97bd6964c7b545359c462e7b8f7fa9155c29724664e9e3207e09f928eda
- MD5 6bd1769d2779e1b556c01a89487a6075
- SHA1 fc3ef0acbbc8059c3bd1d359a26fe850dd7b577a
- SHA512 bab4c8b64aa804922f033b178ce8b3c3167fff16add2db12087e48704aca0b93c742475f6255272be99500ec7def12afe7181629616a0fb9cc3cd1b1c8bf412b
- TLSH T1B9E07DBF43D0397EC888157291E700A3BCB387590331624C5897F83815716B554A930E
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.PL.xaml
- SHA256 0e85d4026143c252c0d43ea8711c4ff4849bad802dba05a22b23863264137348
- MD5 42957a9f68d4e88a53e6c2679911aa61
- SHA1 c286a20442d7cf5a3f9d6a85577cb1ecab12a2f4
- SHA512 dfddd48e10d93a7b77d3976443d3db51cc78a6674a81dc9d95ac0712a4abff81ea0c32a4036ca384ba6305a2f7f03fcd07f186785519fecbef76efbeb6ddadbe
- SSDEEP 768:XM6N7o9Gw18xZa3Py5uHawNvcoE058yhuk1ALYa+JuJiplYh62STr:XDuHvXE06yhcT3Wf
- TLSH T17933F68C33BFBC347995139F346995C31CCA8D1E0234D4FAF38A6245BABC98565A73A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.PT.png
- SHA256 9c25465609074518ecaf3d8a0f894d5a656e6d2bd7dc170ed348d1be532265d3
- MD5 22c320bf1c1ec26d81d5b71eb0481397
- SHA1 d0db17de5ef54c369f47e6ab22962850412af1b6
- SHA512 c7d576a275090302fcc24b0148663c0c7325aeb61c52fe803df24b0b2bd6026ee8f2a4ab5f72894aa6ef40e244eac0df3b01b6576c972085343b477eb474ed74
- TLSH T1DCC022BACB141931C3AD89230A0D809080320A4C2A924410E109E0371A2938E024231E
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.PT.xaml
- SHA256 73cc4e63bbcece8403553e4fba8780825e9f9beae5eb9e6d2d5ac9794857be05
- MD5 fe8047ac87a8e525df06ab17a3ceafd9
- SHA1 257c0c1aa8ee9fb73c416a809640da1fd1c406cf
- SHA512 99be68d74ff0609d9676c9497c9c0fc32193f6ca79cc8d0d13fa040176f5f5c73fd2a7936b008bbb095a2153e50a8c11b88ecfe88025576263ddd07790a97a49
- SSDEEP 768:X49xkI8Xr8f+uO58yhAkkipXwen9h62ST7:X49x8Qf+uO6yhtXTn9Wv
- TLSH T10233079D33BFBC343995135F386D95C71C894D1E0234C4FAF38A6285BABC98165A37A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.RU.png
- SHA256 62659f1ce8640099726f2f90a054e998dcccac8d098309122633088c5644ec0b
- MD5 1baf7652bfccd7b0610965c67dbe73cd
- SHA1 e974206a59bf5917d42ee741886e20a36e79d67f
- SHA512 34ed6f1e6067419d97132ca17dccb5d659550b92e5b9f62c0de77fce7dc96704e84c9311f039dd1730580ad40b6cd666882075cf02a8333396074ea5703023a5
- TLSH T14FB02BD5DF388C2AC00C41E300690DD45912030606111004C041C0340E6461C4383411
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.RU.xaml
- SHA256 15d869ec7f54b97b5be64902f1710aeafa25d6c6f6ee59a06fc077758321db1b
- MD5 e818d318e90bc20915e17a88cb5f9e95
- SHA1 ae30192653e0e6b5e8efecd313825bdfcf649f76
- SHA512 937673e9947065db8283f3e3b742d1fb443b9b1ad64faacaecd5529a3278d920d537d34b3636be0477bd551438465cdf69806cc2d8aa83f772fb198a952183c9
- SSDEEP 768:XtNQOKZjdr+Od58yh+8EcMyE/V2ZlAY/60h62ST7:Xwjdr+Od6yhu/0ZlAu60Wv
- TLSH T1DF438B9C33BF78343955535FB818A8831CD6497E1338C5FAF3852A4ABAFD94062673A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.VI.png
- SHA256 e188016e9ca1da69229dbfbabfd6876a3b8683f2ccda6fad8a66bca252835b3b
- MD5 99fc64402da07ac0c4f5f274a962c8f1
- SHA1 8ef7127d554e2c838244471c9f5f7f2a200394e8
- SHA512 9872a5801f0ec22cc386d3b3e7ef85f8aa0efe4db7868a31059b532772ea3ba60788a23bd121c5930031a8e1fc0a32eec8a7bc9665f14937df7021c163f7eaf2
- TLSH T191D023D5F5184E11C78E486344F401508DD144AC2C95571D510568351514B0645AE2D5
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.VI.xaml
- SHA256 0cc7d5347893a670930402536c438c3720d3c9da6a191524441110ccc72ba814
- MD5 2ad8dca36da5509c8275f0d020302a69
- SHA1 5b04c2a54d38f9047497fd7456e1d3bf474c4ec9
- SHA512 a50e84e5dc9fda92385ba6efd83c2e9f2cdef1459bba486ab95dedf14bb9281349303b0028d00d89dcdda5adf01bf89373d569a2f400d44b5812f32d503adeac
- SSDEEP 768:Xmk20/VX2KSd/kzSc2sS58yhkqh0JF2eh62ST7:Xh20/VX2KSdw2sS6yhMJF2eWv
- TLSH T1CD334B8C33BE7C347999136F345C91C31DCA8D1E1234C4FAF7866685BABC98125A37A2
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.ZH-TW.png
- SHA256 cc37fd69951ea9cf4863047e73add2807abe5449391b4b1842ae3b8c71bbde25
- MD5 e023f5ce0115fab010327b5b1fdb8fb3
- SHA1 c9959caae6367c3995733b3b4c61a5e9e0fecdde
- SHA512 a994aec61b96c2def94970abf72fe40933ee2b796312b48516715c884804696f30c5524a71200bd41ea0d17429ae4c5878aac1470cde0d00a896c240749da481
- TLSH T10DC022E1DF2C2818834C8872419A18C28221001E01A48664820D90B80F69108A267E82
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.ZH-TW.xaml
- SHA256 7f7b79d4745629cbcc8bacf4bcb44102c6e9dbe078d3cd5e2696d305b9afb207
- MD5 e792200719c153a1bf56e8ac7236bb17
- SHA1 15d4f21b297855a03baa758f350412a23b189122
- SHA512 ae85795b0c4e1ff6589894c0fbd4dd313158152b33f29bbe210039cb188da1733a61f00078ae22ce60c6865ff318c2e8530d6439c939792b455a6a548231adc9
- SSDEEP 768:XRLBXZkGP0qHoDo58yhnEvoVOlyh62ST7:XRLBXZ9oDo6yhuyWv
- TLSH T14323F59C337FBC343995579F346CA5C31C9A8D1E0234D4FAF7866285BABC98125A33A1
- MD5 SHA1 SHA512 SSDEEP TLSH
resources/langs/Language.ZH.png
- SHA256 23866d6920ee12c2b94ba15b0d02249b77eceb60943b05e9f4bc8d2c72d6c0b7
- MD5 f51960edbe5b5848e37dcf1d0af44098
- SHA1 4b4bc762f66d3a98da8521d77ca06ae46a42173f
- SHA512 a5ece35f7907205059b65c9331e3609aa1510f13db217e41b02b3b935c2801117ac70fcf75dbf78e31fb490d844f72a82f634ace44d35a92cd7036189ffed592
- TLSH T1F1C022FBB2571CD1D28CC622D08800948C120828162401181425CE392B2C32990A9181
- MD5 SHA1 SHA512 TLSH
resources/langs/Language.ZH.xaml
- SHA256 f530ae33e4198ab007dc62f4e5399f0d2fb0a1bd566b161ea7971140fd166e0b
- MD5 de7fb108167df46c1f5ce03d22f0fd3d
- SHA1 c87c901f52ccc1f3ca9aeeef9fc5fcedc2750827
- SHA512 af3004f03f02d1fdd3254547cbe1a56c5912d644cb543d1de3ff49ea96484bd51c484182a182cb18272ed8380a47028ed28322aaa4022bb29dae378bb4e18475
- SSDEEP 384:XY8Rw39jBDYGMRGi7e9dYvFyDU58yhnl4knIm8FY7pXq796TyST0k:XYl7yb7eogDU58yhnKkITFY7pah62ST7
- TLSH T15923F79C337FBC343995139F346C95C31C8A8D1E1238D4FAF7866245BABCA8125A77A1
- MD5 SHA1 SHA512 SSDEEP TLSH