Granny 1[.]0 PC Port (1[.]4)[.]zip

resource
unpack001/GameAssembly.dll
unpack001/Granny 1.0 PC.exe

resource
unpack001/UnityCrashHandler64.exe
unpack001/UnityPlayer.dll
unpack001/baselib.dll

Granny 1.0 PC Port (1.4).zip

SHA256 3536951524b5ad67bbba6d34ea07aeb56a6cd7bcbb2e483b0338046a30f18e7a
MD5 a7fdcdcacc324bbdbaace6f5bf4c06a3
SHA1 fcf9d42509d02b71806173b3235dff946042dd49
SHA512 683ecf42d1816e0ba8c47d304ee734b1050182614824b039bdae1755bb95c3624384f17b443cc8f6acc756e582b9fcf6d4ea0185acd68748597d0209677a412f
SSDEEP 786432:enxSXkIWZQwK9+GKTcfoeo4dZoxKdXV9NJoxgZnrts+rDUIg7pQzT5EkgjMuGeCK:ensVf9+5TcfltF9NJtZnrtt07qn5EkWn
TLSH
T147B733E8982C1DE9895F31B4CD16F7B9883F5308412E6C3AC58C20E9394EE9535EA7DD
MD5 SHA1 SHA512 SSDEEP TLSH

Extra Options/Flashlight/Flashlight - OFF.reg

SHA256 4614e7a07b96efe28249801e0291cdc17f74dad6ba8994b7806679a05e36b153
MD5 98286466800e037aa0c4d4674347b250
SHA1 184a433f32a8e7669276497796a91b12e3b3f9bf
SHA512 d6503110ff8d78536544e8efd4263ef7e9fa2697e1d5474133b5a834ac466875fcefd611cd94cf6b1ae50b66e5796ddcd923a9558b6da7fc9e57f61fe13fedd9
TLSH
T186D02E621BA0200AF2B31BA04EE8E403AB31ACE00C79C1DD1084030F84B1A2044203FB
MD5 SHA1 SHA512 TLSH

Extra Options/Flashlight/Flashlight - ON.reg

SHA256 b14ed82c94aa369bcb9777ed6cc75b8c0b25b01f1c09b6325bfecc69370c7882
MD5 78518eb06002843c959ecef0fe686f36
SHA1 17f080f6d773a93d85beb53a27a4dc90f963c0eb
SHA512 1261505daee2e00b056f0884db9df3ef5a20c8c77f0641ee545295d3ca7e1d5e3efe1c96cceefb86a40a5da6ed3b86a1ee02c24d98a238becb179c896f3e8c95
TLSH
T146D02E721BA0200AF2B31BA04EE8E403AB31ACE00C79C1DD2084030F88B1A2044203FB
MD5 SHA1 SHA512 TLSH

Extra Options/Grandpa/Grandpa - OFF.reg

SHA256 b8914cd57fcb871e0bf3a6ab4b66f363e0e77f4bbb9382fbf74c45f8e60d5737
MD5 55143751db349b9725c97f0db15ce32e
SHA1 709e4a3cb18cf89bb61a854050f00ebb00ad43e6
SHA512 afe9324bdc5d0f1ef3e5e2bafcf1d6177b9dc52c6da8a1abc7300d74fc974be02cee2043254fd246db6dbdd11e47c2056a866a2e870dedc6bf0ff37311bc2575
TLSH
T17BD05E5227E15546F5B31B908AE9A057E731ACD46D7DD9DE11D5430EC8F290044603FF
MD5 SHA1 SHA512 TLSH

Extra Options/Grandpa/Grandpa - ON.reg

SHA256 14ece156eae6ec783eee561d63e5b825d77771bc7a5014377eb1779cc93aa3f6
MD5 84de578942591768c80478fd62852a3d
SHA1 d8d7b36768002af472c14985edb377b26013fcae
SHA512 a1fe2466c1200c264d6c9c2fed27c3fde901664eac10e76db01a11c6649ec1dfaba86af23e69ca563b98d21550be8c29d30751cef3e0fbf2a7d6b76397e45ac3
TLSH
T191D05E6227E15546F5B31B908AE9A057E731ACD46D7DD9DE1195430E88F290044603FF
MD5 SHA1 SHA512 TLSH

Extra Options/Quality/Quality - HIGH.reg

SHA256 bfb450c2587b8ad2dae1763ff30c03fa9dfb3e0f099cf710e7539b02c32404a2
MD5 68e777dcf88a90b9e64f53d215e28a75
SHA1 1795e6f0ef8439e206c22728606ab77ccdc81225
SHA512 722a9f453640157a3986c4987120eec937af94c26ed1268cdcff187b26250879463c081f01209591e4596b8439777fa028237a57e7f9b09f0655fb5ade7aff41
TLSH
T16ED05E1617A16547F2B70BC08AE9A1679B3268D65D7CE9D91098430E94F2D0054503FB
MD5 SHA1 SHA512 TLSH

Extra Options/Quality/Quality - LOW.reg

SHA256 f805e25eeb7d71a383d67f43e7eaf629888761ee36431a944ef07d9d7e73f8ab
MD5 bfd81a32302081085c064051744ccdc3
SHA1 2b0b23f4e56e08860b5155fff9aba3af3add8676
SHA512 75fc20dd60a62fa4d90885d7c34e2a9bd20f592e1e691661c08b8f59e902dcb8128bfec1cb3b3ad8920f55daa4e734b728240773371ec47c0c746d6e3cbc233e
TLSH
T17CD05E1217A16546F2B70BC48AE9A1679B2268D65D7CD9D910D8430ED4F190044503FB
MD5 SHA1 SHA512 TLSH

Extra Options/Quality/Quality - MEDIUM.reg

SHA256 3d5f80d6ac3a9d59a7c0c83a13cb5838b3feeb33329271221aac57d1550f9391
MD5 6cccd84631b2e387b5e8fe258e49f768
SHA1 d6bbcae4ae1e4c7e4be7469ae13ef1d1ae8944a0
SHA512 020ccb68f640de913cdda4a1f0c3d6bc5c6b9ee702d1273a13593b8c493c379082ae22a0e0e58fc48189324b77ab03f87540f09f365529e028b17fa02d0186e0
TLSH
T148D05E2217A16546F2B70BC08AE9A1679B2268D65D7CD9D92098430E98F190044503FF
MD5 SHA1 SHA512 TLSH

GameAssembly.dll

IMPHASH 66fab99ac5e53eb886df7b43d7215369
SHA256 6744ce8560f99930691c1035c9ccb2522fe091f6c4ea2ce18ac2bbbfebb24ebc
MD5 1db78725c337f6c67b441771589dcbde
SHA1 045cfea9487fb784e4e684a4b871bc4e7993fd75
SHA512 c7d489ba40345fca41724e7a8ad63dd570ea2c4203fbef04aa1a74c45c584285e6aaa775321840f7fa4e13b47df7dee41e82f4c04789c78c215286ff9893a62f
SSDEEP 196608:q99chDTDS7ippgbuUTXYUYYxRC0G6wIhSjIz:qzchD3S7ippcXYYxRCRPjIz
TLSH
T198F63A5AB7B58448C07AD2388A13156BDBB238041FB867CB21944B9D1F737DDE97AB30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1661244

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

H:\Pc Stuffs\Granny 1.0 Pc Version\Library\Bee\artifacts\WinPlayerBuildProgram\u1oik\GameAssembly.pdb

kernel32

Sleep GetCurrentProcess GetCurrentProcessId SwitchToThread GetSystemInfo VirtualAlloc VirtualQuery CreateFileMappingW OpenFileMappingW MapViewOfFile UnmapViewOfFile GetModuleHandleW GetProcAddress GetFileInformationByHandleEx TlsAlloc TlsGetValue TlsSetValue TlsFree InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection RtlCaptureStackBackTrace CreateFileW DuplicateHandle RaiseException SetLastError CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority FreeLibrary LoadLibraryW GlobalAlloc GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentVariableW SetEnvironmentVariableW QueryPerformanceCounter QueryPerformanceFrequency WakeAllConditionVariable GetSystemTimes GetSystemTimeAsFileTime GetStdHandle DeleteFileW DeleteVolumeMountPointW FlushFileBuffers GetFileAttributesExW GetFileSizeEx GetFileType GetFullPathNameW GetLogicalDrives ReadFile SetEndOfFile SetFileAttributesW SetFileInformationByHandle SetFilePointerEx WriteFile SetThreadErrorMode GetOverlappedResult GetNativeSystemInfo FormatMessageW CopyFileExW MoveFileExW ReplaceFileW GetTimeZoneInformation GetDynamicTimeZoneInformation MultiByteToWideChar GetConsoleMode GetLongPathNameW GetTempPathW GetModuleFileNameA GetModuleFileNameW WideCharToMultiByte GetACP GetLocaleInfoW GetThreadLocale SetFilePointer SuspendThread ResumeThread GetThreadContext VirtualFree WriteConsoleW GetProcessHeap GetCommandLineW GetCommandLineA SetStdHandle GetOEMCP IsValidCodePage GetLastError CloseHandle IsDebuggerPresent HeapQueryInformation HeapSize EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW RtlUnwind VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapReAlloc HeapAlloc HeapFree ReadConsoleW GetConsoleOutputCP GetModuleHandleExW ExitProcess LoadLibraryExW RemoveDirectoryW FindNextFileW FindFirstFileExW FindClose CreateDirectoryW InitializeCriticalSectionAndSpinCount InterlockedFlushSList RtlUnwindEx TerminateProcess InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx RtlPcToFileHeader GetCurrentDirectoryW

user32

MessageBoxA

advapi32

CryptAcquireContextW CryptReleaseContext CryptGenRandom

ole32

CoUninitialize CoTaskMemFree CoCreateFreeThreadedMarshaler CoGetContextToken CoInitializeEx CoTaskMemAlloc

oleaut32

SysStringLen SafeArrayGetVartype SafeArrayUnaccessData SafeArrayAccessData SysFreeString SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetDim SafeArrayDestroy SafeArrayCreate

shell32

SHGetKnownFolderPath SHGetFolderPathW

ws2_32

WSAGetLastError WSACleanup WSAStartup send

iphlpapi

GetIfEntry GetAdaptersAddresses GetNetworkParams

dbghelp

SymInitialize SymFromAddr

baselib

?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ ?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z ?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z ?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ ?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z ?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z

BrotliDecoderCreateInstance BrotliDecoderDecompress BrotliDecoderDecompressStream BrotliDecoderDestroyInstance BrotliDecoderIsFinished BrotliEncoderCompress BrotliEncoderCompressStream BrotliEncoderCreateInstance BrotliEncoderDestroyInstance BrotliEncoderHasMoreOutput BrotliEncoderSetParameter CloseNLSocket CloseZStream CreateNLSocket CreateZStream DllCanUnloadNow DllGetActivationFactory Flush GlobalizationNative_GetTimeZoneDisplayName ReadEvents ReadZStream SystemNative_FStat2 SystemNative_UTime WriteZStream il2cpp_add_internal_call il2cpp_alloc il2cpp_allocation_granularity il2cpp_array_class_get il2cpp_array_element_size il2cpp_array_get_byte_length il2cpp_array_length il2cpp_array_new il2cpp_array_new_full il2cpp_array_new_specific il2cpp_array_object_header_size il2cpp_assembly_get_image il2cpp_bounded_array_class_get il2cpp_capture_memory_snapshot il2cpp_class_array_element_size il2cpp_class_enum_basetype il2cpp_class_for_each il2cpp_class_from_il2cpp_type il2cpp_class_from_name il2cpp_class_from_system_type il2cpp_class_from_type il2cpp_class_get_assemblyname il2cpp_class_get_bitmap il2cpp_class_get_bitmap_size il2cpp_class_get_data_size il2cpp_class_get_declaring_type il2cpp_class_get_element_class il2cpp_class_get_events il2cpp_class_get_field_from_name il2cpp_class_get_fields il2cpp_class_get_flags il2cpp_class_get_image il2cpp_class_get_interfaces il2cpp_class_get_method_from_name il2cpp_class_get_methods il2cpp_class_get_name il2cpp_class_get_namespace il2cpp_class_get_nested_types il2cpp_class_get_parent il2cpp_class_get_properties il2cpp_class_get_property_from_name il2cpp_class_get_rank il2cpp_class_get_static_field_data il2cpp_class_get_type il2cpp_class_get_type_token il2cpp_class_get_userdata_offset il2cpp_class_has_attribute il2cpp_class_has_parent il2cpp_class_has_references il2cpp_class_instance_size il2cpp_class_is_abstract il2cpp_class_is_assignable_from il2cpp_class_is_blittable il2cpp_class_is_enum il2cpp_class_is_generic il2cpp_class_is_inflated il2cpp_class_is_inited il2cpp_class_is_interface il2cpp_class_is_subclass_of il2cpp_class_is_valuetype il2cpp_class_num_fields il2cpp_class_set_userdata il2cpp_class_value_size il2cpp_current_thread_get_frame_at il2cpp_current_thread_get_stack_depth il2cpp_current_thread_get_top_frame il2cpp_current_thread_walk_frame_stack il2cpp_custom_attrs_construct il2cpp_custom_attrs_free il2cpp_custom_attrs_from_class il2cpp_custom_attrs_from_field il2cpp_custom_attrs_from_method il2cpp_custom_attrs_get_attr il2cpp_custom_attrs_has_attr il2cpp_debug_get_method_info il2cpp_debugger_set_agent_options il2cpp_domain_assembly_open il2cpp_domain_get il2cpp_domain_get_assemblies il2cpp_exception_from_name_msg il2cpp_field_get_flags il2cpp_field_get_name il2cpp_field_get_offset il2cpp_field_get_parent il2cpp_field_get_type il2cpp_field_get_value il2cpp_field_get_value_object il2cpp_field_has_attribute il2cpp_field_is_literal il2cpp_field_set_value il2cpp_field_set_value_object il2cpp_field_static_get_value il2cpp_field_static_set_value il2cpp_format_exception il2cpp_format_stack_trace il2cpp_free il2cpp_free_captured_memory_snapshot il2cpp_gc_alloc_fixed il2cpp_gc_collect il2cpp_gc_collect_a_little il2cpp_gc_disable il2cpp_gc_enable il2cpp_gc_foreach_heap il2cpp_gc_free_fixed il2cpp_gc_get_heap_size il2cpp_gc_get_max_time_slice_ns il2cpp_gc_get_used_size il2cpp_gc_has_strict_wbarriers il2cpp_gc_is_disabled il2cpp_gc_is_incremental il2cpp_gc_set_external_allocation_tracker il2cpp_gc_set_external_wbarrier_tracker il2cpp_gc_set_max_time_slice_ns il2cpp_gc_set_mode il2cpp_gc_start_incremental_collection il2cpp_gc_wbarrier_set_field il2cpp_gchandle_foreach_get_target il2cpp_gchandle_free il2cpp_gchandle_get_target il2cpp_gchandle_new il2cpp_gchandle_new_weakref il2cpp_get_corlib il2cpp_get_exception_argument_null il2cpp_image_get_assembly il2cpp_image_get_class il2cpp_image_get_class_count il2cpp_image_get_entry_point il2cpp_image_get_filename il2cpp_image_get_name il2cpp_init il2cpp_init_utf16 il2cpp_is_debugger_attached il2cpp_is_vm_thread il2cpp_memory_pool_get_region_size il2cpp_memory_pool_set_region_size il2cpp_method_get_class il2cpp_method_get_declaring_type il2cpp_method_get_flags il2cpp_method_get_from_reflection il2cpp_method_get_name il2cpp_method_get_object il2cpp_method_get_param il2cpp_method_get_param_count il2cpp_method_get_param_name il2cpp_method_get_return_type il2cpp_method_get_token il2cpp_method_has_attribute il2cpp_method_is_generic il2cpp_method_is_inflated il2cpp_method_is_instance il2cpp_monitor_enter il2cpp_monitor_exit il2cpp_monitor_pulse il2cpp_monitor_pulse_all il2cpp_monitor_try_enter il2cpp_monitor_try_wait il2cpp_monitor_wait il2cpp_native_stack_trace il2cpp_object_get_class il2cpp_object_get_size il2cpp_object_get_virtual_method il2cpp_object_header_size il2cpp_object_new il2cpp_object_unbox il2cpp_offset_of_array_bounds_in_array_object_header il2cpp_offset_of_array_length_in_array_object_header il2cpp_override_stack_backtrace il2cpp_profiler_install il2cpp_profiler_install_allocation il2cpp_profiler_install_enter_leave il2cpp_profiler_install_fileio il2cpp_profiler_install_gc il2cpp_profiler_install_thread il2cpp_profiler_set_events il2cpp_property_get_flags il2cpp_property_get_get_method il2cpp_property_get_name il2cpp_property_get_parent il2cpp_property_get_set_method il2cpp_raise_exception il2cpp_register_debugger_agent_transport il2cpp_register_log_callback il2cpp_resolve_icall il2cpp_runtime_class_init il2cpp_runtime_invoke il2cpp_runtime_invoke_convert_args il2cpp_runtime_object_init il2cpp_runtime_object_init_exception il2cpp_runtime_unhandled_exception_policy_set il2cpp_set_commandline_arguments il2cpp_set_commandline_arguments_utf16 il2cpp_set_config il2cpp_set_config_dir il2cpp_set_config_utf16 il2cpp_set_data_dir il2cpp_set_default_thread_affinity il2cpp_set_find_plugin_callback il2cpp_set_memory_callbacks il2cpp_set_temp_dir il2cpp_shutdown il2cpp_start_gc_world il2cpp_stats_dump_to_file il2cpp_stats_get_value il2cpp_stop_gc_world il2cpp_string_chars il2cpp_string_intern il2cpp_string_is_interned il2cpp_string_length il2cpp_string_new il2cpp_string_new_len il2cpp_string_new_utf16 il2cpp_string_new_wrapper il2cpp_thread_attach il2cpp_thread_current il2cpp_thread_detach il2cpp_thread_get_all_attached_threads il2cpp_thread_get_frame_at il2cpp_thread_get_stack_depth il2cpp_thread_get_top_frame il2cpp_thread_walk_frame_stack il2cpp_type_equals il2cpp_type_get_assembly_qualified_name il2cpp_type_get_attrs il2cpp_type_get_class_or_element_class il2cpp_type_get_name il2cpp_type_get_name_chunked il2cpp_type_get_object il2cpp_type_get_reflection_name il2cpp_type_get_type il2cpp_type_is_byref il2cpp_type_is_pointer_type il2cpp_type_is_static il2cpp_unhandled_exception il2cpp_unity_install_unitytls_interface il2cpp_unity_liveness_allocate_struct il2cpp_unity_liveness_calculation_from_root il2cpp_unity_liveness_calculation_from_statics il2cpp_unity_liveness_finalize il2cpp_unity_liveness_free_struct il2cpp_unity_set_android_network_up_state_func il2cpp_value_box jinfo_get_method mini_get_interp_callbacks mini_jit_info_table_find mono_arch_clear_breakpoint mono_arch_context_get_int_reg mono_arch_context_set_int_reg mono_arch_set_breakpoint mono_arch_setup_resume_sighandler_ctx mono_arch_skip_breakpoint mono_arch_skip_single_step mono_arch_start_single_stepping mono_arch_stop_single_stepping mono_array_element_size mono_array_length mono_class_get_byref_type mono_class_get_checked mono_class_get_context mono_class_get_element_class mono_class_get_flags mono_class_get_image mono_class_get_interfaces mono_class_get_methods mono_class_get_name mono_class_get_namespace mono_class_get_nested_types mono_class_get_parent mono_class_get_properties mono_class_get_rank mono_class_get_type mono_class_get_type_token mono_class_has_parent mono_class_instance_size mono_class_is_enum mono_class_is_valuetype mono_class_num_fields mono_class_num_methods mono_class_num_properties mono_class_value_size mono_debug_find_method mono_debug_free_locals mono_debug_il_offset_from_address mono_debug_lookup_locals mono_domain_foreach mono_domain_get mono_domain_get_assemblies_iter mono_domain_get_corlib mono_domain_is_unloading mono_environment_exitcode_get mono_environment_exitcode_set mono_field_get_name mono_field_get_offset mono_field_get_parent mono_field_get_type mono_field_set_value mono_find_prev_seq_point_for_native_offset mono_free_method_signatures mono_gc_register_root mono_get_byte_class mono_get_lmf_addr mono_get_root_domain mono_get_runtime_build_info mono_get_string_class mono_image_get_assembly mono_image_get_entry_point mono_image_get_filename mono_image_get_guid mono_image_get_name mono_image_is_dynamic mono_jit_find_compiled_method_with_jit_info mono_jit_info_get_method mono_jit_info_table_find mono_marshal_method_from_wrapper mono_metadata_free_mh mono_metadata_generic_class_is_valuetype mono_method_full_name mono_method_get_class mono_method_get_context mono_method_get_declaring_generic_method mono_method_get_flags mono_method_get_generic_container mono_method_get_header_checked mono_method_get_name mono_method_get_param_names mono_method_get_token mono_method_is_generic mono_method_is_inflated mono_object_get_type mono_object_unbox_internal mono_pal_init mono_property_get_get_method mono_property_get_name mono_property_get_parent mono_property_get_set_method mono_restore_context mono_runtime_is_shutting_down mono_runtime_quit mono_set_is_debugger_attached mono_set_lmf mono_string_chars mono_string_free mono_string_length mono_string_new mono_thread_attach mono_thread_current mono_thread_detach mono_thread_get_main mono_thread_set_name mono_thread_state_init_from_current mono_thread_state_init_from_monoctx mono_thread_suspend_all_other_threads mono_type_full_name mono_type_generic_inst_is_valuetype mono_type_get_attrs mono_type_get_class mono_type_get_name_full mono_type_get_type mono_type_is_byref mono_type_is_generic_parameter mono_type_is_reference mono_type_is_struct mono_type_size

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

il2cpp

Size

8.4MB

Virtual Size

8.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

632KB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

521KB

Virtual Size

521KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

217KB

Virtual Size

217KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Granny 1.0 PC.exe

IMPHASH ce1183cc150987a99aef5749f22af81e
SHA256 fd4d5da53b6a539bba181426118335490731b913068aa5270dc43a0250ca1be6
MD5 92ad985af86d2e61d267da5d8542d6ef
SHA1 46c68abd76e126f3fdb92c97cd2ea635e081cdec
SHA512 76191373ec472ed84af85658d430880b687d3a67b134e9c6d7bb8864e805838292c3fb7129a52f682fbdc381db5344e3ddff5f053431cb4471755556072447e3
SSDEEP 6144:v/7FG9mpcJ/OD8T26RU3bYcdtpFW8XTrrK9S1FUCoLNf9vYzSTF56Mw51KjjkIXQ:v/744aOD8VvK5W8X/uKS5A8fBLNNfu
TLSH
T1F8E48CB5E92752CED2B3233C16A0E1E0DBB49AA0DD17039E66E1DC7BBC3A5C50D0659C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

unityplayer

UnityMain

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

552KB

Virtual Size

552KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Granny 1.0 PC_Data/Resources/unity default resources

SHA256 a11e3e24520676183b3750564b4d9f5a90e8f41fd3523cbfb0c49f3989453da2
MD5 c9730fe286df07729a2811fbe1dfbede
SHA1 6f5ea5605cb6771e20ab6d75e448b75307e21ec7
SHA512 387ef73b2ad58786aac05cbf418a211664f0f0dc24aefff3af8acd83cdbbd072c7dfa6154464eb49218f7b03af62536b1a38c42e5df9f50b96d705c0e8f500bf
SSDEEP 6144:h8g9JxVJ0aYR1CCVX8BAiZahi3YW+/OJ9WqCmKISHCkcCVw:hD8TpQahXvOjdCTBw
TLSH
T197755315A2A1153DEC5E053987A31E61E3BDE99C1BEB8B133B1C321CBF617488A77274
MD5 SHA1 SHA512 SSDEEP TLSH

Granny 1.0 PC_Data/RuntimeInitializeOnLoads.json

SHA256 6a33c1efd5944feb0cb1e012e26b30c3f43fec918e5643e72ab945a9c504ff13
MD5 6787a74350ff8c4498c93c89998afae3
SHA1 d2e2d92b3e4ea757ab451bfe092f50f0c142daaa
SHA512 887a6309a6eea0a8af051aa5005a2167c4a520bc16187568854bea2dff7cbc3070596537821fbde86d3006393b37dfd0f750426140207be0e19ffc11aa47f2d1
MD5 SHA1 SHA512

Granny 1.0 PC_Data/ScriptingAssemblies.json

SHA256 48d71782ac2bc3c1ed9d2fad93c142c1afa0444bd8df9e6cec9d1eaf49a676f4
MD5 ec58fccd03bc023f74e6028b0b6ff4a7
SHA1 1e6d9f787ccc51e67b9227009fff4d0ec7d54f62
SHA512 01025775ddb4087b34f6e2838f02b5e0c0aefb102ef159a776c403fde8c9b644865fcfd39e96ad7065fe912217a53e5a25b8bf36a927f3d22bbe0f0fd7934845
TLSH
T11E5142F6C18B15871D8D5EC388389C8D79D210A20E64C0641FBEA3AFA978CD63D08AE5
MD5 SHA1 SHA512 TLSH

Granny 1.0 PC_Data/app.info

SHA256 7e8d766d6f53059dad09301db92b58a690c4ee824e690ec88952ac2d427aa122
MD5 6cbb7c7317fe175b02753e4996c9a267
SHA1 744111a4ed1877d8d5f13a2f728250e8554d0871
SHA512 67c852ced9e4c40a702d7ea49cfb0e9a13861c00a08049c3fba4c6b09141c6d586b1016d3cee9dc43997468d39c3625c047c8afaf8b27092158d6d1cafbbf7e8
MD5 SHA1 SHA512

Granny 1.0 PC_Data/boot.config

SHA256 4f98c48cd0e30a656151a15306faa7025bd711ba47c2cb192d965c58124d21a0
MD5 4c796368f600713bd393011f24276c67
SHA1 61683aff8c19ca87cfaa1f9009387bf7048ad268
SHA512 6878733a3727953747ac270757a5d50c2067d262a9c25840fba74888127a4222d7a380550a48dc52ed2acf915250f66fb5d7a9b43e936feaab5e7efa8f075ca3
TLSH
T132C02B44F3A82741118C842157F52DC3AB270002683020F3D2D02066311700F25C3065
MD5 SHA1 SHA512 TLSH

Granny 1.0 PC_Data/data.unity3d

SHA256 d34aac03b014f9343801f39043a6d25e3c5955b471634ce4349d9b931da1e281
MD5 1568bf3b4aa67e224f2082b47ad2e4ee
SHA1 2f18c56924f374a61afd3fd26e145da946457e96
SHA512 73132286ac8277898178dce2a823b3cd10ca4711c369ec66446ba25d91ca89302f917f8c11dae02b951847421b85e886885c63abb2d2ec8ae0f066052a73e92b
SSDEEP 393216:OLTTaPcrHeldvK64s7wd4gpgP6OV1B7cij8Rk1NCLP0SH/8yiueRU2n:OjrH964sjgm1l/8Cu70Y/3eRU2n
TLSH
T1A7572391F60FEE11C3ED2179D8B70B6A6A5E8C00F922859CC57673AD9C773D86121F22
MD5 SHA1 SHA512 SSDEEP TLSH

Granny 1.0 PC_Data/il2cpp_data/Metadata/global-metadata.dat

SHA256 91ef3a8193236b31b7906a9dfbb80b3402c38d2d57f325d0701e3712d02cca75
MD5 3c88c1739510ca52f1794400778143ae
SHA1 87c59f0577c3f7b380ea94f7c962f65a03227c36
SHA512 953c78cc03d2cf271383e67b70e53878698413462f51d36dec7041dee7d7aa392abece961ebded0cea6a3ee01ae5a8a025445bf2b6b2b3e99eaadbc7c49a4eaa
SSDEEP 49152:0gJ5XWR8eZraprdkVLFfjcTs+F3O1n6a0+:L0ZrVVh+onn
TLSH
T147E5D6A3BD99CE3ECA25993298AC85F822259DC90F00D75B332D7B3D74B29355E432D4
MD5 SHA1 SHA512 SSDEEP TLSH

Granny 1.0 PC_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat

SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
MD5 21d06dbc8af6432b2b49536ed30609af
SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
TLSH
T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Granny 1.0 PC_Data/sharedassets0.resource

SHA256 92d7f5cc4ccc71b163239bcb21285c418b3299b6abcaf086ec410110dc901906
MD5 2dd5a63e153a18db8b4ea5e39a4de49d
SHA1 437d4a85c90dbe478f3cab7ecabecb2b3c104082
SHA512 dde979e3e96176d2a18e541b334803a350a1e0134e702b307e89bf57436b8ce1f92798aee9e2fb23c92d6f096d6ebe6026bcae057ded09c2dadce51a8ac99ba7
SSDEEP 12288:i3IpLJEf5J2b1SA9Fhp9KMSjxnlUqLxe6b7AL3ALbX6xmfedt7zyXuU4ZKCq1g+:REf/WSA9Fh+MS1/Lo6bKOSmfot7zy+UR
TLSH
T160E423087AC3AACAD1353335479D3E6A72FBCE309C1758907A01B658D4FA26246E2F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Granny 1.0 PC_Data/sharedassets1.resource

SHA256 be133978e167747484d1ebc36d5cea1ef3c3d6a68635a8f8ee64097339168001
MD5 01a9d24e513a40f72bcb4df84a54c726
SHA1 c96831e00bd504e63eea5b1984253e47c4a3244a
SHA512 b636a7783e0996bafae9d72918dd6e612e6815e85becea2487d0392ae82a2898ff0b5fb32d21bc88c20684d34d2a15fbe89342fae56ed3b167a27dcaa5b408ea
SSDEEP 49152:loVvDjQxgcUD7jnT1rLBlprp5O9aMBjzuZfTXO5UIkGtch82:lohDjQxgcOPTVBlprpg9xyZ7+zkGtN2
TLSH
T15EB53313FA477EC2CB69967746B86B3CCFB5E0851612EB4505D3610ECCAA210DC5EAEC
MD5 SHA1 SHA512 SSDEEP TLSH

UnityCrashHandler64.exe

IMPHASH cd45cf38010d80ce6a814ca76497282b
SHA256 d765a40edd9995213be5ce503192d4768c89ffe966c9fda9f766dbfce89ae026
MD5 b2e5184016bf6dae01f31ca30e510221
SHA1 0aadcee7872f0852a1daeb7eabb93291d69609cd
SHA512 d53f18d891761fa4985962f9cd1a6ef2d049e04154af3b390c9811a455f2670fc7b56936f725b62815919eca297327093bfb9d5f824ee2c046519457d4262d1c
SSDEEP 12288:jn7voJ3497bVdeSckG5p8Cl6PwswWkoP7t1Q2vS1PoBo40XpljHZFQfz2fzAS:jn7voJ34DdLqWG7oP7Bqp20XPH8z+zAS
TLSH
T17D457C6AA25800E9D5779035CA56850FE7F27C1A03619BDF23A0B7672F336E41E7E720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

89:6e:24:c9:e8:a7:29:10:75:77:47:62:09:7b:00:10:6b:a4:19:ca:a8:e2:cc:c8:59:82:98:e3:3d:6b:37:b9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Feb 19, 2025

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Subject

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 11, 2023 - Jun 8, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

307936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win64_VS2019_nondev_i_m\UnityCrashHandler64.pdb

user32

SetWindowPos SetForegroundWindow LookupIconIdFromDirectoryEx GetDlgItem SendDlgItemMessageA AdjustWindowRect GetWindowLongA DialogBoxParamA SetWindowTextW OffsetRect EndDialog SendMessageW UnionRect GetIconInfo LoadImageA CreateIconFromResourceEx InflateRect

kernel32

GetVersionExW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale FlsFree FlsSetValue FlsGetValue FlsAlloc FreeLibraryAndExitThread GetConsoleOutputCP GetConsoleMode SetConsoleCtrlHandler GetFileType SetStdHandle GetModuleHandleExW ExitProcess RtlPcToFileHeader SetWaitableTimer GetModuleHandleA GetLastError GetCurrentThread WaitForSingleObjectEx CloseHandle RaiseException GetProcAddress SleepEx GetThreadTimes CreateWaitableTimerExW OpenThread TryEnterCriticalSection EnterCriticalSection SetThreadPriority InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetCurrentThreadId ResumeThread GetThreadPriority CreateThread SwitchToThread DeleteCriticalSection CreateDirectoryW ReadFile GetModuleFileNameA FindFirstFileW FindFirstFileExW TlsSetValue SetLastError RtlCaptureContext GetFullPathNameW FindNextFileW GetCurrentProcess WriteFile OutputDebugStringA RemoveDirectoryW RtlVirtualUnwind SetFileTime GetModuleFileNameW RtlLookupFunctionEntry SetFilePointer SetEndOfFile GetEnvironmentVariableA FindClose CreateFileW SuspendThread GetCurrentDirectoryA SetFileAttributesW CreateEventW MultiByteToWideChar GetFileAttributesA GetFileAttributesExW GetDiskFreeSpaceExW LoadLibraryA DeleteFileW LoadLibraryW GetThreadContext SetFilePointerEx MoveFileExW ReplaceFileW ReadProcessMemory SystemTimeToFileTime FreeLibrary CopyFileW WideCharToMultiByte TlsGetValue GetTempFileNameW GetSystemTime FlushFileBuffers HeapFree Thread32Next Thread32First WaitForSingleObject CreateToolhelp32Snapshot FormatMessageW HeapAlloc LocalFree VerSetConditionMask GetCurrentProcessId GetProcessHeap GetModuleHandleW VerifyVersionInfoW GetSystemTimeAsFileTime GetStdHandle TerminateProcess GetProcessId GetTempPathW WaitForMultipleObjectsEx OpenProcess Sleep SetEvent GetThreadId GetFileSize CreateProcessW CopyFileExW AllocConsole GetExitCodeProcess SizeofResource GetCommandLineW EnumResourceNamesA InitializeCriticalSection SetErrorMode FindResourceA GetExitCodeThread TerminateThread LockResource LoadResource CreateEventA LoadLibraryExW GetFileSizeEx CreateSemaphoreExW VirtualFree ReleaseSemaphore VirtualAlloc TlsAlloc QueryPerformanceFrequency TlsFree QueryPerformanceCounter IsDebuggerPresent InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx GetLocaleInfoW LCMapStringW CompareStringW GetTickCount GetCPInfo DecodePointer EncodePointer GetStringTypeW InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter DuplicateHandle InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx ResetEvent VirtualProtect GetFileAttributesW

dbghelp

SymRegisterFunctionEntryCallback64 SymLoadModuleEx

shell32

SHGetKnownFolderPath SHCreateDirectoryExW CommandLineToArgvW SHFileOperationW

ole32

CoInitializeEx CoTaskMemFree CoCreateGuid

shlwapi

PathCanonicalizeW

psapi

GetModuleFileNameExW

advapi32

GetUserNameA

wininet

HttpQueryInfoA InternetCrackUrlA InternetConnectA HttpSendRequestA InternetCloseHandle InternetOpenA HttpOpenRequestA

gdi32

GetObjectA

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

Name

.text

Size

584KB

Virtual Size

584KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

349KB

Virtual Size

349KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

UnityPlayer.dll

IMPHASH fcf9c337da737a3f04d83cffe893fc3a
SHA256 174afd473dbcc3927a88f0304e7fa1803af70419aead7e3145a777e3474141b9
MD5 92820fc8b507a9308968a14d37bc3db8
SHA1 8c6d2347d5dcf55e3681c218fb6b7c824330111b
SHA512 86525e0e72a0346fd3c2469239147a062e8c969f0d54525c6c3f7552dfb3ce57450a431395ed5f3679b595753b9afe4d10d57611260ceee7c5dc7dc49023852b
SSDEEP 393216:DsgYcC15Nkzvp7aDj15jhZuHXNYdKajFnSbBv8JQGuygT:DjESGh5LKgQLygT
TLSH
T1A2679CA6B2B800D4D47BC074D65BA90BFBB1344A033086EB52E149996F73BF11ABF751
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bc:2e:af:df:fb:16:c8:dd:45:39:ab:4a:50:6e:0b:d4:d9:da:f1:ad:0e:2f:73:36:0f:9e:5f:d4:bb:c3:e9:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Feb 19, 2025

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Subject

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 11, 2023 - Jun 8, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

25086440

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\build\output\unity\unity\artifacts\UnityPlayer\Win64_VS2019_nondev_i_m\UnityPlayer_Win64_player_il2cpp_x64.pdb

kernel32

FlushFileBuffers GetProcessId OutputDebugStringA WaitForMultipleObjects GetExitCodeProcess SetErrorMode WriteFile CreateEventW GetSystemPowerStatus GlobalMemoryStatusEx CreateToolhelp32Snapshot GetTempPathW GetUserDefaultLocaleName GetSystemDirectoryA CreateFileA GetComputerNameW GlobalLock GlobalUnlock GlobalAlloc GetTempFileNameW DeleteFileW K32GetProcessMemoryInfo GetNativeSystemInfo VirtualQuery GetSystemTimeAsFileTime LocalFree GetFileAttributesExW CreateFileW CreateDirectoryW RemoveDirectoryW SetFileAttributesW CopyFileW MoveFileExW FindFirstFileExW FindFirstFileW FindNextFileW FindClose SetFilePointer SetFilePointerEx ReadFile SetEndOfFile ReplaceFileW GetFullPathNameW GetSystemTime SystemTimeToFileTime SetFileTime GetDiskFreeSpaceExW Thread32First Thread32Next SuspendThread ExpandEnvironmentStringsW CreateMutexA RtlCaptureContext SetUnhandledExceptionFilter GetErrorMode GetModuleFileNameA GetFileAttributesA GetEnvironmentVariableA GetCurrentDirectoryA GetThreadContext RtlLookupFunctionEntry RtlVirtualUnwind ReadProcessMemory LocalAlloc GetCurrentDirectoryW DebugBreak GetTickCount GetOverlappedResult ResetEvent CancelIo FormatMessageA GetModuleHandleW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UpdateProcThreadAttribute AttachConsole InitializeCriticalSectionAndSpinCount TryEnterCriticalSection GetLocalTime GetTimeZoneInformation CreateProcessW ReleaseSemaphore GetFileSizeEx CreateSemaphoreExW TlsAlloc TlsFree GetStdHandle SetThreadAffinityMask InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList GetFileSize OpenEventA CreateWaitableTimerA ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx GetSystemDirectoryW GetStringTypeW EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW CreateTimerQueue SignalObjectAndWait GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask RegisterWaitForSingleObject UnregisterWait FreeLibraryAndExitThread GetVersionExW DuplicateHandle QueryDepthSList UnregisterWaitEx RtlUnwindEx RtlPcToFileHeader RtlUnwind HeapSize HeapReAlloc SwitchToThread GetCurrentThreadId GetThreadPriority SetThreadPriority ResumeThread CreateThread GetThreadTimes OpenThread GetProcessHeap HeapAlloc InitializeProcThreadAttributeList GetCommandLineW OutputDebugStringW GetLogicalProcessorInformationEx LoadLibraryExW WaitForMultipleObjectsEx CreateEventExW QueryPerformanceFrequency QueryPerformanceCounter ExitThread IsDebuggerPresent VerifyVersionInfoW VerSetConditionMask HeapQueryInformation ExitProcess GetModuleHandleExW GetConsoleOutputCP GetConsoleMode GetFileType ReadConsoleW CreatePipe HeapFree GetModuleHandleA GetCurrentThread RaiseException DeleteProcThreadAttributeList GetCurrentProcess TerminateProcess SetConsoleCtrlHandler WaitForSingleObject GetStartupInfoA SetLastError GetFileAttributesW LeaveCriticalSection GetDriveTypeW GetFileInformationByHandle PeekNamedPipe GetModuleFileNameW SleepEx SetWaitableTimer CreateWaitableTimerExW SetEvent SetHandleInformation Sleep WaitForSingleObjectEx CloseHandle CreateEventA FormatMessageW LoadLibraryW SetDllDirectoryW FreeLibrary GetProcAddress LoadLibraryA WideCharToMultiByte GetCurrentProcessId MultiByteToWideChar VirtualProtect VirtualFree VirtualAlloc GetSystemInfo GetLastError TlsGetValue GetWindowsDirectoryW TlsSetValue WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc FileTimeToSystemTime SystemTimeToTzSpecificLocalTime

user32

GetAsyncKeyState MapVirtualKeyExA GetKeyboardLayout GetRawInputDeviceInfoW GetMessageExtraInfo GetKeyState MapVirtualKeyA GetKeyboardLayoutNameW ToUnicode MapVirtualKeyW GetKeyNameTextW RegisterRawInputDevices GetRawInputDeviceList GetRawInputData GetRawInputBuffer GetCursorPos PtInRect EnumDisplaySettingsA GetDC SetWindowLongA LoadIconW GetWindowPlacement AdjustWindowRectEx GetForegroundWindow EnumDisplaySettingsW GetWindowLongA DispatchMessageA TranslateMessage SystemParametersInfoW UnregisterDeviceNotification RegisterDeviceNotificationW SetCapture ReleaseCapture GetSystemMetrics RegisterClassExW ScreenToClient DialogBoxParamW EndDialog SetDlgItemTextW SetDlgItemTextA LoadIconA SendDlgItemMessageW OffsetRect CopyRect SendMessageTimeoutA SetForegroundWindow EnumWindows GetUserObjectInformationA RegisterWindowMessageA DestroyIcon DestroyCursor TrackMouseEvent SetCursor LoadCursorA LoadImageW SetClipboardData EmptyClipboard CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard AllowSetForegroundWindow ReleaseDC GetDesktopWindow DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes UpdateWindow SendMessageW GetMessageA SetWindowTextW DragDetect ShowWindow GetActiveWindow GetParent ValidateRect IsIconic MonitorFromRect SetWindowLongPtrA IsWindowVisible SetCursorPos ClientToScreen ClipCursor MonitorFromWindow ShowCursor GetClientRect MoveWindow GetWindowRect GetMonitorInfoW SetFocus GetFocus SetWindowPos EnumDisplayMonitors EnumDisplayDevicesA GetMonitorInfoA PostQuitMessage DefWindowProcW SetWindowLongPtrW GetWindowLongPtrW DestroyWindow UnregisterClassW RegisterClassW CreateWindowExW KillTimer MessageBoxA SetTimer PeekMessageA MsgWaitForMultipleObjects GetCaretBlinkTime GetDoubleClickTime GetThreadDesktop

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

ole32

CoUninitialize StringFromGUID2 CoCreateFreeThreadedMarshaler CoInitialize PropVariantCopy CoCreateInstance CoCreateGuid CoSetProxyBlanket CoTaskMemAlloc PropVariantClear CoTaskMemFree

shlwapi

SHDeleteKeyW PathCanonicalizeW

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsA SetupDiEnumDeviceInterfaces SetupDiEnumDeviceInfo

advapi32

RegCreateKeyW RegCloseKey RegQueryValueExA RegSetValueExA RegDeleteValueA RegQueryValueExW RegCreateKeyExW RegSetValueExW GetUserNameA OpenProcessToken GetTokenInformation GetSidSubAuthority CryptReleaseContext CryptGenRandom CryptAcquireContextA CryptAcquireContextW CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash RegOpenKeyExW

gdi32

ChoosePixelFormat SetPixelFormat GetDeviceCaps SwapBuffers

shell32

ShellExecuteW SHGetFolderPathW SHFileOperationW CommandLineToArgvW SHGetKnownFolderPath

opengl32

wglGetCurrentContext wglGetProcAddress wglDeleteContext wglMakeCurrent wglGetCurrentDC wglCreateContext

winmm

waveOutGetNumDevs waveOutGetDevCapsA waveOutGetDevCapsW waveInPrepareHeader waveOutClose waveOutPrepareHeader waveOutUnprepareHeader waveOutWrite waveOutReset waveOutGetPosition waveInGetNumDevs waveInGetDevCapsA waveInGetDevCapsW waveInOpen timeBeginPeriod timeEndPeriod waveInUnprepareHeader waveInAddBuffer waveInStart waveOutOpen waveInReset waveInClose timeGetTime

oleaut32

SysAllocString VariantClear SysFreeString VariantInit VariantChangeType

imm32

ImmSetCompositionStringW ImmNotifyIME ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmGetConversionStatus ImmReleaseContext ImmGetContext

winhttp

WinHttpGetProxyForUrl WinHttpOpen WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle

bcrypt

BCryptGenRandom

hid

HidP_GetData HidP_MaxDataListLength HidD_GetSerialNumberString HidD_GetManufacturerString HidD_GetProductString HidD_FreePreparsedData HidD_GetPreparsedData HidD_GetHidGuid HidP_SetUsages HidP_SetUsageValue HidP_GetButtonCaps HidP_GetValueCaps HidD_GetAttributes HidP_GetCaps

crypt32

CertFreeCertificateContext CertFreeCertificateChain CertVerifyCertificateChainPolicy CertGetCertificateChain CertAddEncodedCertificateToStore CertOpenStore CertCloseStore

ws2_32

gethostname getsockname connect WSAGetLastError ntohs closesocket WSACleanup WSAStartup bind htonl inet_addr htons WSAIoctl WSASetLastError WSAEnumNetworkEvents accept shutdown select __WSAFDIsSet ioctlsocket setsockopt listen sendto send recvfrom recv WSASocketA getaddrinfo freeaddrinfo ntohl gethostbyname getprotobyname getpeername getsockopt WSAWaitForMultipleEvents WSASocketW WSACreateEvent WSACloseEvent gethostbyaddr WSASendDisconnect WSAAsyncGetHostByName WSACancelAsyncRequest WSAResetEvent WSAEventSelect socket

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute

Name

.text

Size

24.4MB

Virtual Size

24.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

300KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

118KB

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=36, id=259, version=28900,

count=18, id=260, version=29118,

count=31, id=259, version=29118,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=107, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,

count=34, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=234, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=67, id=260, version=28900,

count=43, id=257, version=28900,

count=548, id=1, productName=Unmarked objects,

count=9, id=199, version=41118,

count=144, id=261, version=29118,

count=223, id=261, version=28900,

count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=32, productName=Unmarked objects (old),

count=1174, id=265, version=29333,

count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,

count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,

count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,

baselib.dll

IMPHASH db9c6dbbb87b8c007ce6d9eae665e766
SHA256 ac639b0fcaa22fad8eb92143d6a5c207e058eae01f86e533de4f5719908f17db
MD5 09f6a2a8e41913dcfa76cbf66177c3ea
SHA1 49808c63afb78729303162c609a136b17e210050
SHA512 0177846364b1b1a66b9667e82a4ef96579f0ac786217d38156adebba85041a6eb5669d2b4182db88fbd21102b5b74068b1731d42407ee6390123c21b799f993b
SSDEEP 6144:LuInkY6mJtoLpzxkzt0R60Htptb+REDqDY92q31YM9Ci4DTFU9GCXTnD5bT:SInZ6mXWM0NptoDY92qFn9l7DN
TLSH
T147946B59F76408B5F5A790788973850BE7B23C8A176487CF23A4439A2F33B91593E372
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

07:d4:a7:43:bb:77:5a:48:3e:e5:7d:d0:a4:5b:e7:6f:90:0f:14:8c:01:aa:07:2e:15:3d:d0:4c:1d:55:1c:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Feb 19, 2025

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Subject

SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 11, 2023 - Jun 8, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

64624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\build\output\unity\unity\artifacts\baselib\Win64_VS2019_nondev_i_m\baselib_Win64_player_Master_il2cpp_x64.pdb

ws2_32

setsockopt __WSAFDIsSet accept bind WSAIoctl closesocket select shutdown listen WSACloseEvent WSACreateEvent WSASocketW getsockname send connect WSAWaitForMultipleEvents recvfrom recv getsockopt sendto ioctlsocket WSAGetLastError

kernel32

InitializeSListHead WriteConsoleW GetStringTypeW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapQueryInformation ReadFile GetFileSizeEx CreateSemaphoreExW VirtualFree ReleaseSemaphore WriteFile VirtualAlloc SetEndOfFile WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId ResumeThread FormatMessageW GetLastError WaitForSingleObjectEx TlsAlloc QueryPerformanceFrequency CloseHandle GetNativeSystemInfo RaiseException LoadLibraryW CreateThread SwitchToThread GetProcAddress SetFilePointerEx GetThreadId GetModuleHandleW FreeLibrary TlsFree QueryPerformanceCounter VirtualQuery IsDebuggerPresent FlushFileBuffers EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection Sleep SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsGetValue TlsSetValue GetSystemTimeAsFileTime GetTickCount SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcessId GetCurrentProcess TerminateProcess CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait EncodePointer GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualProtect DuplicateHandle InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx HeapSize RtlUnwindEx RtlPcToFileHeader GetModuleHandleExW ExitProcess HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode HeapReAlloc

??0AbortShim@il2cpp_baselib@@QEAA@P6A_NW4Baselib_ErrorCode@1@PEAX@Z1@Z ??0Thread@il2cpp_baselib@baselib@@QEAA@$$QEAV012@@Z ??0Thread@il2cpp_baselib@baselib@@QEAA@XZ ??1Thread@il2cpp_baselib@baselib@@QEAA@XZ ??4AbortShim@il2cpp_baselib@@QEAAAEAV01@$$QEAV01@@Z ??4AbortShim@il2cpp_baselib@@QEAAAEAV01@AEBV01@@Z ??4Thread@il2cpp_baselib@baselib@@QEAAAEAV012@$$QEAV012@@Z ??6il2cpp_baselib@@YAAEAVomemstream@0@AEAV10@AEBW4Baselib_ErrorCode@0@@Z ?Baselib_Debug_IsDebuggerAttached@il2cpp_baselib@@YA_NXZ ?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z ?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenProgramHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z ?Baselib_DynamicLibrary_OpenUtf8@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z ?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z ?Baselib_ErrorState_FormatAndStoreExtraInformation@il2cpp_baselib@@YA_KPEBDPEAD@Z ?Baselib_FileIO_AsyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@@Z ?Baselib_FileIO_AsyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_AsyncFile@1@UBaselib_FileIO_EventQueue@1@PEBD_KW4Baselib_FileIO_Priority@1@@Z ?Baselib_FileIO_AsyncRead@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@QEAUBaselib_FileIO_ReadRequest@1@_K2W4Baselib_FileIO_Priority@1@@Z ?Baselib_FileIO_EventQueue_Create@il2cpp_baselib@@YA?AUBaselib_FileIO_EventQueue@1@XZ ?Baselib_FileIO_EventQueue_Dequeue@il2cpp_baselib@@YA_KUBaselib_FileIO_EventQueue@1@QEAUBaselib_FileIO_EventQueue_Result@1@_KI@Z ?Baselib_FileIO_EventQueue_Free@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@@Z ?Baselib_FileIO_EventQueue_Shutdown@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@I@Z ?Baselib_FileIO_SyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncFileFromNativeHandle@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@_KI@Z ?Baselib_FileIO_SyncFlush@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncGetFileSize@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@PEBDIPEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncRead@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEAX1PEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncSetFileSize@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@_KPEAUBaselib_ErrorState@1@@Z ?Baselib_FileIO_SyncWrite@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEBX1PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_AlignedAllocate@il2cpp_baselib@@YAPEAX_K0@Z ?Baselib_Memory_AlignedFree@il2cpp_baselib@@YAXPEAX@Z ?Baselib_Memory_AlignedReallocate@il2cpp_baselib@@YAPEAXPEAX_K1@Z ?Baselib_Memory_Allocate@il2cpp_baselib@@YAPEAX_K@Z ?Baselib_Memory_AllocatePages@il2cpp_baselib@@YA?AUBaselib_Memory_PageAllocation@1@_K00W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_Free@il2cpp_baselib@@YAXPEAX@Z ?Baselib_Memory_GetPageSizeInfo@il2cpp_baselib@@YAXPEAUBaselib_Memory_PageSizeInfo@1@@Z ?Baselib_Memory_Reallocate@il2cpp_baselib@@YAPEAXPEAX_K@Z ?Baselib_Memory_ReleasePages@il2cpp_baselib@@YAXUBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Memory_SetPageState@il2cpp_baselib@@YAXPEAX_K1W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_NetworkAddress_Decode@il2cpp_baselib@@YAXPEBUBaselib_NetworkAddress@1@PEAW4Baselib_NetworkAddress_Family@1@QEADIPEAGPEAUBaselib_ErrorState@1@@Z ?Baselib_NetworkAddress_Encode@il2cpp_baselib@@YAXPEAUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_Family@1@QEBDGPEAUBaselib_ErrorState@1@@Z ?Baselib_Process_Abort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z ?Baselib_RegisteredNetwork_BufferSlice_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@UBaselib_RegisteredNetwork_Buffer@1@II@Z ?Baselib_RegisteredNetwork_BufferSlice_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@XZ ?Baselib_RegisteredNetwork_Buffer_Deregister@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Buffer@1@@Z ?Baselib_RegisteredNetwork_Buffer_Register@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Buffer@1@UBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Endpoint_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@PEBUBaselib_NetworkAddress@1@UBaselib_RegisteredNetwork_BufferSlice@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Endpoint_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@XZ ?Baselib_RegisteredNetwork_Endpoint_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Endpoint@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_Close@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@IIPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_DequeueRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_DequeueSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ProcessRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ProcessSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ScheduleRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_ScheduleSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Bind@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Close@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@@Z ?Baselib_Socket_Create@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@W4Baselib_NetworkAddress_Family@1@W4Baselib_Socket_Protocol@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_GetAddress@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_Poll@il2cpp_baselib@@YAXPEAUBaselib_Socket_PollFd@1@IIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Accept@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@U21@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Connect@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Listen@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_TCP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_UDP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Socket_UDP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_SystemFutex_Notify@il2cpp_baselib@@YAXPEAHIW4Baselib_WakeupFallbackStrategy@1@@Z ?Baselib_SystemFutex_Wait@il2cpp_baselib@@YAXPEAHHI@Z ?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ ?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z ?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z ?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z ?Baselib_TLS_Alloc@il2cpp_baselib@@YA_KXZ ?Baselib_TLS_Free@il2cpp_baselib@@YAX_K@Z ?Baselib_Thread_Create@il2cpp_baselib@@YAPEAUBaselib_Thread@1@UBaselib_Thread_Config@1@PEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ ?Baselib_Thread_GetId@il2cpp_baselib@@YA_JPEAUBaselib_Thread@1@@Z ?Baselib_Thread_Join@il2cpp_baselib@@YAXPEAUBaselib_Thread@1@IPEAUBaselib_ErrorState@1@@Z ?Baselib_Thread_SupportsThreads@il2cpp_baselib@@YA_NXZ ?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ ?Baselib_Timer_GetHighPrecisionTimerTicks@il2cpp_baselib@@YA_KXZ ?Baselib_Timer_GetTicksToNanosecondsConversionRatio@il2cpp_baselib@@YA?AUBaselib_Timer_TickToNanosecondConversionRatio@1@XZ ?Baselib_Timer_GetTimeSinceStartupInSeconds@il2cpp_baselib@@YANXZ ?Baselib_Timer_TickToNanosecondsConversionFactor@il2cpp_baselib@@3NB ?Baselib_Timer_WaitForAtLeast@il2cpp_baselib@@YAXI@Z ?Call@AbortShim@il2cpp_baselib@@QEAA_NW4Baselib_ErrorCode@2@@Z ?CreateThread@Thread@il2cpp_baselib@baselib@@CAPEAUBaselib_Thread@2@P6AXPEAX@Z0@Z ?Detail_Baselib_EventSemaphore_SemaphoreBased_AcquireNonSet@il2cpp_baselib@@YAXHPEAUBaselib_EventSemaphore@@@Z ?Detail_Baselib_EventSemaphore_SemaphoreBased_TryTimedAcquireNonSet@il2cpp_baselib@@YA_NHPEAUBaselib_EventSemaphore@@I@Z ?Empty@AbortShim@il2cpp_baselib@@SA?AV12@XZ ?GetCurrentId@Thread@il2cpp_baselib@baselib@@SA_JXZ ?GetId@Thread@il2cpp_baselib@baselib@@QEAA_JXZ ?SetAbortShim@il2cpp_baselib@@YA?AVAbortShim@1@V21@@Z ?ShimmableAbort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z ?SupportsThreads@Thread@il2cpp_baselib@baselib@@SA_NXZ ?TryJoin@Thread@il2cpp_baselib@baselib@@QEAA_NV?$duration@IU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z ?YieldExecution@Thread@il2cpp_baselib@baselib@@SAXXZ ?detail_AssertLog@il2cpp_baselib@@YAXPEBDZZ ?detail_AssertLogMute@il2cpp_baselib@@YAX_N@Z

Sharing

General

Malware Config

Signatures

File Explorer

Granny 1.0 PC Port (1.4).zip

Extra Options/Flashlight/Flashlight - OFF.reg

Extra Options/Flashlight/Flashlight - ON.reg

Extra Options/Grandpa/Grandpa - OFF.reg

Extra Options/Grandpa/Grandpa - ON.reg

Extra Options/Quality/Quality - HIGH.reg

Extra Options/Quality/Quality - LOW.reg

Extra Options/Quality/Quality - MEDIUM.reg

GameAssembly.dll

kernel32

user32

advapi32

ole32

oleaut32

shell32

ws2_32

iphlpapi

dbghelp

baselib

generic

Granny 1.0 PC.exe

unityplayer

kernel32

generic

Granny 1.0 PC_Data/Resources/unity default resources

Granny 1.0 PC_Data/RuntimeInitializeOnLoads.json

Granny 1.0 PC_Data/ScriptingAssemblies.json

Granny 1.0 PC_Data/app.info

Granny 1.0 PC_Data/boot.config

Granny 1.0 PC_Data/data.unity3d

Granny 1.0 PC_Data/il2cpp_data/Metadata/global-metadata.dat

Granny 1.0 PC_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat

Granny 1.0 PC_Data/sharedassets0.resource

Granny 1.0 PC_Data/sharedassets1.resource

UnityCrashHandler64.exe

PE Signature issue

user32

kernel32

dbghelp

shell32

ole32

shlwapi

psapi

advapi32

wininet

gdi32

version

generic

UnityPlayer.dll

PE Signature issue

kernel32

user32

version

ole32

shlwapi

setupapi

advapi32

gdi32

shell32

opengl32

winmm

oleaut32

imm32

winhttp

bcrypt

hid

crypt32

ws2_32

dwmapi

generic

baselib.dll

PE Signature issue

ws2_32

kernel32

generic