Escape from the Abandoned Hospital with an Emotionless Girl[.]rar

resource
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/mono.dll

resource
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game.exe
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/0Harmony.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-CSharp-firstpass.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-CSharp.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-UnityScript-firstpass.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Boo.Lang.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/ExIni.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Mono.Cecil.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Mono.Security.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/MonoMod.RuntimeDetour.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/MonoMod.Utils.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/ReiPatcher.exe
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/System.Core.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/System.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BaiduTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BingLegitimateTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BingTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/CustomTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/DeepLTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Common.ExtProtocol.Executor.exe
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Common.ExtProtocol.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/DeepLTranslate.ExtProtocol.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/GoogleTranslateCompat.ExtProtocol.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Http.ExtProtocol.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Lec.ExtProtocol.exe
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/XUnity.AutoTranslator.Plugin.ExtProtocol.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/ezTransXP.ExtProtocol.exe
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/GoogleTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/GoogleTranslateCompat.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/GoogleTranslateLegitimate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/LecPowerTranslator15.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/LingoCloudTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/PapagoTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/WatsonTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/YandexTranslate.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/ezTransXP.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.Networking.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.UI.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.AutoTranslator.Plugin.Core.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.AutoTranslator.Plugin.ExtProtocol.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.Common.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.ResourceRedirector.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/mscorlib.dll
unpack001/Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/MonoPosixHelper.dll

Escape from the Abandoned Hospital with an Emotionless Girl.rar

SHA256 09afded98d34aa4c5752e5d682fd3d467bc24453cefa0aaaddaa4360d933c444
MD5 a12fa5efa80039bc8671d0fe7b9661f6
SHA1 e0c3178cbf70564e61a4d42cdc36599d15bb525a
SHA512 53e02e5092d5f54dc03b635cf8ed766e49fdf9bb6a40c7e34c19c45b822fbfc836744667fe91b0155ca74ea7bdb0d734b1d87a77fc83af7b9f93ddc28987e774
SSDEEP 3145728:xW/pJi3YpkeQsyFHAtNuznU8fN1nFfUfTRFVf1bJ7Ql0jXDh/GxhGPTNJb:xyPiopbxyFgtwzj115eTR/f1N7Ql0jzd
TLSH
T1B48833237DD8AF63D17FF674A108E3EB78A54516235996F54A815BCEC12128FB803A33
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Config.ini

SHA256 64b37dd0848a4f2960284c6fad4bd79de7cba7034bfcc313a910a283546c5a01
MD5 30b70efbca81a64a93122984659fefe2
SHA1 6f77594a133b08967dd0462947a758d52d166f9c
SHA512 83fe42d2bc3fc78d273307f411eb34f72483e1c36c92864698182593c3535897f95887bffb9b8cbe497ab5e9c959fc9b3d6959e0f95f59e50120ef13f6697954
TLSH
T1E571EE82695F9161687BA3266E83A2E775A40C89447F0D7CB25E060F39C4C58376EC7B
MD5 SHA1 SHA512 TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/GalleryLabels.txt

SHA256 53e40805495a840b80a35eeab3f9258591e91a3cd43147acaa772913c7807120
MD5 2a2cd3edbc6e0588ee8a5e7d8d163786
SHA1 278029e8f62d47add9c93bad87194d56a79769f3
SHA512 dac792839d6e22df596ac6a907d8b6a9720f31cad92f250bfd94efe365fbfb90b54b5d51e422787540a0d08c79c9f64401088c3fc1b535dbcbfb54a5e16b5e1f
TLSH
T1C7D023106C2280F578C307CFC87109B6450C056413366CB7BC5D575C476382952F5621
MD5 SHA1 SHA512 TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/ManualTranslations.txt

SHA256 c2487b2b499791622e6b0cd47f67730dd70a91e96b11dfe9c35b42126037b762
MD5 88d355c2836cff53613be355ee56f421
SHA1 8c3c8702e3c54d794742361a8521a7d0c58abca2
SHA512 5317bf7def6edee3cbe0a9286e7c3a7fa062dc4d8bafbe9e882c6ecabdd7388dffd05b82518b75c62b8c051060a1b1840ae02db201f930634cbbc14f0da11a7f
SSDEEP 192:vpZzeNzq/tIPiegh4Fsoi5LP9s8cWlCiWhD3gcgs:0ezq8oR
TLSH
T120F1973DE3D2443A8D610799A49C7BD2F5219C92EF223631D46DC39625906DEFE84DB0
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_AutoGeneratedTranslations.txt

SHA256 a3790dc26cb95ad198d00ec23e3ab03b707b6b4b6964de61c0ad9f3e8b263751
MD5 1a178b37bd902a7fb84b0a97a3b097f5
SHA1 92cdc3aeaf833b683f5a0b4c218302639baf8ae6
SHA512 1b162a8d0d4b4d78fce7d88823e811fc0d255e2110c728bbc9484cd0ef438bcae897f7a6df8a23715987bf1b8c8d301a72c1ce782759e17e704dcbcabcd78d0d
MD5 SHA1 SHA512

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_Postprocessors.txt

SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
MD5 SHA1 SHA512

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_Preprocessors.txt

SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
MD5 SHA1 SHA512

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_Substitutions.txt

SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
MD5 SHA1 SHA512

Escape from the Abandoned Hospital with an Emotionless Girl/game.exe

IMPHASH d5edf21ea2a499c977b32b10050a86b8
SHA256 34f67fd3b17bebfccbb3bdc9e1990026e3607451e58006bc55a8f6d16107abee
MD5 7c97ee520859859b7b070f66d36b36bf
SHA1 a10d171fe0eb91e431e6a9361ed756175a90b65f
SHA512 063637ae8b42f9a805d19c32fc8dac889d0f76924e15c218cb6bd62100e47f796cc8be99784f695271e00be944da4ffc9209a308e2ecfecb363a74b7e56c2d91
SSDEEP 393216:CtH2+C8MuNRqW5cW7uxrR+XAJWnexwmIknDaWXZQBRnhOYWkr4EM0RJK82DfpPN:SHrJKjbpPN
TLSH
T1B9079F21A858D171E89151B6E6BD3ABF5A3C8D25032C45D367E418C4EE705E33EFB2A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8953111

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win32_nondevelopment_mono\player_win_x86.pdb

hid

HidP_GetCaps HidD_GetPreparsedData HidD_GetProductString HidD_GetManufacturerString HidD_GetSerialNumberString HidD_GetIndexedString HidP_GetButtonCaps HidP_MaxDataListLength HidD_FreePreparsedData HidP_GetData HidP_GetValueCaps HidD_GetHidGuid

kernel32

InterlockedIncrement InterlockedDecrement GetFullPathNameW GetCurrentProcessId GetCurrentProcess GetCurrentThread GetWindowsDirectoryW FormatMessageA SystemTimeToFileTime GetLocalTime GetTimeZoneInformation LocalFree GetSystemInfo GetModuleFileNameW InitializeCriticalSection ResetEvent GetTickCount ReadFile SetFilePointerEx WriteFile SetEndOfFile GetFileAttributesExW CreateFileW SetFileAttributesW GetFileAttributesW MoveFileExW FindClose FindNextFileW FindFirstFileW FindFirstFileExW SetFilePointer ReplaceFileW GetTempFileNameW LoadLibraryExW CreateEventW GlobalUnlock GlobalLock GlobalAlloc RemoveDirectoryW SetFileTime GetSystemTime GetDiskFreeSpaceExA lstrcpynA lstrcpyA lstrcpynW GetCommandLineW ExpandEnvironmentStringsW ResumeThread GetThreadContext SuspendThread OutputDebugStringA GetEnvironmentVariableA GetFileAttributesA GetModuleFileNameA GetVersionExA GetCurrentDirectoryA VerifyVersionInfoW VerSetConditionMask GetVersionExW GetSystemPowerStatus GlobalMemoryStatusEx GetUserDefaultUILanguage GetComputerNameW GetTempPathW LocalAlloc SetUnhandledExceptionFilter OpenEventW DebugBreak GetCurrentDirectoryW GetOverlappedResult CancelIo GetFileSize FileTimeToDosDateTime FileTimeToLocalFileTime lstrlenA GetFileTime VirtualQuery GlobalMemoryStatus RaiseException DecodePointer EncodePointer HeapAlloc HeapFree RtlUnwind HeapReAlloc HeapQueryInformation GetModuleHandleA GetCurrentThreadId ExitProcess SetConsoleCtrlHandler ExitThread GetCommandLineA HeapSetInformation GetStartupInfoW FileTimeToSystemTime GetDriveTypeA FindFirstFileExA IsProcessorFeaturePresent GetStdHandle GetLocaleInfoW UnhandledExceptionFilter TerminateProcess HeapCreate SetHandleCount GetFileType GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage FlushFileBuffers SetStdHandle InterlockedExchange GetStringTypeW LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA WriteConsoleW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CompareStringW SetEnvironmentVariableA GetDriveTypeW GetProcessHeap GetProcessAffinityMask InterlockedExchangeAdd VirtualProtect VirtualAlloc VirtualFree FlushConsoleInputBuffer SwitchToThread SetThreadAffinityMask InitializeSListHead InterlockedPushEntrySList InterlockedPopEntrySList InterlockedFlushSList OpenEventA SetWaitableTimer CreateWaitableTimerA GetSystemDirectoryA SetConsoleMode ReadConsoleInputA GetDateFormatA GetTimeFormatA CreateMutexW FlushInstructionCache CreateSemaphoreW SignalObjectAndWait VerifyVersionInfoA ExpandEnvironmentStringsA GetVersion SleepEx GetQueuedCompletionStatus CreateIoCompletionPort SetHandleInformation FormatMessageW GetSystemTimeAsFileTime HeapSize InitializeCriticalSectionAndSpinCount CreateFileMappingA MapViewOfFile UnmapViewOfFile SetThreadPriority CreateThread TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection DuplicateHandle CreateMutexA ReleaseMutex InterlockedCompareExchange GetModuleHandleW SetDllDirectoryW CreateDirectoryW WaitForSingleObject WideCharToMultiByte LoadLibraryA SetEvent IsDebuggerPresent ReleaseSemaphore WaitForSingleObjectEx CreateSemaphoreA TlsSetValue TlsGetValue TlsFree TlsAlloc DeleteFileW CopyFileW GetStartupInfoA LoadLibraryW GetProcAddress FreeLibrary CreateEventA CloseHandle Sleep SetLastError GetLastError MultiByteToWideChar QueryPerformanceFrequency QueryPerformanceCounter SetErrorMode

user32

SystemParametersInfoW GetAsyncKeyState ClientToScreen RegisterRawInputDevices GetMessageTime MapVirtualKeyExA GetMessagePos GetRawInputData GetKeyNameTextW LoadKeyboardLayoutA GetRawInputDeviceInfoW GetRawInputDeviceList wvsprintfA GetWindowLongW SetWindowLongW PostQuitMessage GetMonitorInfoA SetFocus GetFocus ShowCursor SetWindowTextW GetDlgItem IsDlgButtonChecked CopyImage SetWindowLongA KillTimer GetMessageA PeekMessageA SetWindowPos SetCursorPos RegisterDeviceNotificationW GetMessageExtraInfo PtInRect MessageBoxA DispatchMessageA UnregisterDeviceNotification ReleaseCapture DestroyIcon DestroyCursor ChangeDisplaySettingsA SetCursor GetSystemMetrics GetDC ReleaseDC CreateIconIndirect IsClipboardFormatAvailable GetClipboardData OpenClipboard EmptyClipboard CloseClipboard SetClipboardData GetCursorPos WindowFromPoint IsWindowVisible GetCaretBlinkTime MessageBoxW UpdateWindow GetKeyState LoadImageW DialogBoxParamA EndDialog SetForegroundWindow ScreenToClient CheckDlgButton GetAncestor CreateDialogParamW PeekMessageW IsDialogMessageW DispatchMessageW MsgWaitForMultipleObjects SetCapture RegisterClassExW DialogBoxParamW LoadIconA SendDlgItemMessageW SetDlgItemTextA SetDlgItemTextW CopyRect OffsetRect GetDesktopWindow AdjustWindowRectEx GetWindowPlacement ClipCursor MonitorFromWindow GetWindowRect TranslateMessage GetProcessWindowStation GetUserObjectInformationW SendMessageA UnregisterClassW DestroyWindow DefWindowProcW RegisterClassW CreateWindowExW EnumDisplayMonitors EnumDisplaySettingsA EnumDisplayDevicesA GetClientRect EnableWindow SetTimer ShowWindow GetParent ValidateRect CreateDialogParamA GetWindowLongA GetThreadDesktop GetUserObjectInformationA EnumWindows RegisterWindowMessageA SendMessageTimeoutA IsIconic LoadCursorA wsprintfA

version

GetFileVersionInfoSizeA GetFileVersionInfoA GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueA

ole32

PropVariantClear CoCreateGuid CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoUninitialize CoSetProxyBlanket StringFromGUID2 CoInitialize

shlwapi

PathFileExistsW SHDeleteKeyW PathCanonicalizeW

advapi32

RegCloseKey RegisterEventSourceA ReportEventA DeregisterEventSource CryptImportKey CryptVerifySignatureA CryptDestroyKey OpenProcessToken GetTokenInformation GetSidSubAuthority GetUserNameA RegOpenKeyExW RegCreateKeyW RegSetValueExA RegQueryValueExA RegDeleteValueA CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextA RegQueryValueExW RegSetValueExW RegCreateKeyExW

gdi32

ChoosePixelFormat SwapBuffers GetDeviceCaps SetPixelFormat GetObjectA DeleteObject CreateBitmap CreateDIBSection

shell32

SHFileOperationW SHGetFolderPathW ShellExecuteW CommandLineToArgvW

opengl32

wglGetCurrentContext wglCreateContext wglMakeCurrent wglDeleteContext wglGetProcAddress wglGetCurrentDC

winmm

waveInGetNumDevs timeGetTime timeEndPeriod waveOutGetNumDevs waveOutGetDevCapsA waveOutGetDevCapsW waveOutClose waveOutOpen waveOutUnprepareHeader waveOutWrite waveOutReset waveOutGetPosition waveInAddBuffer waveInPrepareHeader waveInUnprepareHeader waveInGetDevCapsA waveInGetDevCapsW waveInStart waveInOpen waveInClose waveInReset waveOutPrepareHeader timeBeginPeriod

ws2_32

WSAEnumNetworkEvents WSAResetEvent WSAWaitForMultipleEvents WSACloseEvent WSAEventSelect WSACreateEvent WSASetEvent WSACancelAsyncRequest WSAAsyncGetHostByName WSACleanup ntohl htonl ntohs htons getpeername getprotobyname recv gethostbyname shutdown listen accept WSARecvFrom WSAIoctl getnameinfo getaddrinfo recvfrom sendto send gethostname socket connect bind inet_addr WSAStartup select __WSAFDIsSet inet_ntoa getsockname freeaddrinfo WSASocketA WSASetLastError WSAGetLastError setsockopt ioctlsocket getsockopt closesocket

oleaut32

VariantClear SysAllocString SysFreeString VariantChangeType VariantInit

imm32

ImmReleaseContext ImmSetOpenStatus ImmGetConversionStatus ImmGetCompositionStringW ImmAssociateContextEx ImmAssociateContext ImmGetContext ImmSetCompositionStringW

dnsapi

DnsQuery_A DnsFree

iphlpapi

GetIpAddrTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Name

.text

Size

14.2MB

Virtual Size

14.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

257KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.trace

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data1

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

554KB

Virtual Size

553KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

582KB

Virtual Size

581KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=34, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=36, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=8, id=171, productName=VS2010 build 30319, version=30319,

count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=534, id=1, productName=Unmarked objects,

count=6, id=152, version=20115,

count=73, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=195, productName=Unmarked objects (old),

count=1043, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=1204, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/0Harmony.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e271d22a7c32bfca105d0e471c04eee14eec6142d37a30cd73cb7d32c7d1dd0f
MD5 09cb0a9d9724f2965a4b73bb590e9a57
SHA1 f25cbf4567657121126777158635a4599c37e168
SHA512 c5e0d14b2ef89421af8841ac4ff42973660b3d750f94a43edfc8ca65f34ad2fd872af12b641f34529385ff8727c7595883131b1717accf076929ecf10b88354f
SSDEEP 1536:eQQo4D7YsGH+Hmj0AwVP+zSC3Wf3mFhNU588LSk3YTkHSccRrD1dfnDZUZtVe116:WDkUHo0AsPlC3Wf3K83XcN6ZtVuRsYE
TLSH
T11EB3495A6BAE4F12DAEE6BBCD47422040371E5369417F78AEECC60F61C123D24E446B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

119130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-CSharp-firstpass.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 729892d69395acd5d550c8a25c03ed4856d4b8cb9eeb826669d41a5efd7198f5
MD5 3520abaf35a4f14c85dd49bd6699d210
SHA1 59a0204c78b7348c22a3d73b3c5a092a5c7fcb8d
SHA512 b931de70db5476faf9694407c5c60a67aaf1632591c4531ef3ce7fb7a8991e760efcbc8274cb07f1e29ec28e540088f1ad1bc9906144054af182f808fe1a3513
SSDEEP 12288:JdSoLB2TXHRIUY49Y4Hz1YkyYkyvHnsgyzRX4MGhgi4KFbC7ZxKoKsGQ58L:rSsyXRIUY49Y4H5YkyYky/nhyXLGKi49
TLSH
T1D7F42A0933E49B33DAAF2BF765E015106B72C186A196F3D722C4F5F46C937146D0A2AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

755038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-CSharp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b7ac2e250598fac516262a9f99f066578b30aa78d3726f4764424e266e179544
MD5 c7a7c5f165113669c93573ec62473f60
SHA1 e79d9b2eb9950847fccc16c69efc7d242573ff04
SHA512 7e5182a4e91f11700476d9d520e9e3a386ab38593b68dd15e606c564b672425d1ca205cd5eaef8609868e7d8d636b2d84be87825c3335b1f321f3bbf97998302
SSDEEP 24576:tAumxLbRSsIkflW428Fu+3ffO+rOwSCsajXqf56xMPUuq4:mumxLbHW428Fu+BObau562
TLSH
T165653B1577E8EE2BD9AE17BE90B1442547B0E146A382D78F1A84F1FC2C4A7506D063BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1487694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-UnityScript-firstpass.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79e8c1d795a9abed179a43a28a40c58e4b2fcb26785323f5d4b285f9c6396f6a
MD5 a25264617c9ad7a9b65f9fcfd94dcd49
SHA1 3cdb53985b88e02917889c36d0e3e21851293466
SHA512 d7e9f010d786ad44bf7e2b95a51d4ef8e1db54204f9c39e341d93381f0793bca04c1c67ad83fec728c431ec73bb9eecb9ffb5ef643d9513d7301166693a1e232
SSDEEP 192:t3oLwNTScrfhdAonfC5YLhcF1ScdWq6IJJsRLQDE87bQQ9Iip75+x0AKo2En:jT3r9Cxx0qljbQMlDPo
TLSH
T12542B46AAA9CC637D95D13FE69D2051393B005B6D682D3C61DE8A4DAFC9338106027FF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Boo.Lang.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 992cf97ab32ba92d003245e24ffe85c27ed189c27f04243ef7639bfe6bfaf7f2
MD5 a411e73ec866c84dde71ebe1301608c3
SHA1 c6a6e0e6c35d194f06984a0aa121e33bf0d83c88
SHA512 85739604f5f8a8d961f11956209c8f130dcbaaf4a5388cd38f3707c493ec5e36f26a5fab8619f4a80a79ca05c4c8e18b7f4caa603366bfe2426eb8eb9cebe9dd
SSDEEP 1536:cqQWYfdvJU9+ENq0n2oPJKxs5BDySAF87QhBHfrsKzKV4zmd2adBOgjVnp:6Vv2bPnzAxYm87QhBHD259djVp
TLSH
T1F4C3C5906BE88BA6E6FF3B35ACF503104A71BC5AF93AE71F5644D1DE1862B404920377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/ExIni.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c073db2220667e6bbbfff64e13ed4f7e744af4b554c408f13ea80bfdffd859d0
MD5 a18e11f7359e4a43993052dec5c712f9
SHA1 b3172f6b1e7c4d0d111ca4bbc5008ace777d1487
SHA512 4dff7545c06f865f4bec32d94b3065cf08a69dff0cd843473b0519e890043d3d24e9fa6a268e38eb144958f4c1a839c26a7dc4be2fe97aa202542df518acac45
SSDEEP 192:eWqCcU4wagNgvvqyNSYyEpNSTtehottpuHeN+XLr9:CCcvzg+Lp4Wott6Lr9
TLSH
T1C6521A04A3C86636CF6B8679F6B7092546F1FB25A912EF4F0CE590E50C23B951B50B3E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

w:\Projects\ExIni\Source\obj\Git\ExIni.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Mono.Cecil.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7ae470288fff4a402899c254d0a76cefef55877f5c54f96e83c797cc5bb6e2f6
MD5 50ae8a86b701c83fce3a814ae8d79321
SHA1 7c8b821367897baa1b78157d5cea0767f424bc40
SHA512 04b57207d4fd9fa9f1a71323ea803f023b4b0f2f7a7070bf431806c7a7f41277969c0f5979ecf134812001b47f5d36ec8e8541982473287323e783b3ffe93121
SSDEEP 6144:BTU5Xn0f1oUh8dK9S5K0UEece8plCTNgoF:9pJS5KEpWgo
TLSH
T128746B3537FC5A3BD68F83B6E066142A86F5D419628BEF4D5888F2FA4C437529D02273
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

343166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\sources\cecil\obj\net_3_5_Release\Mono.Cecil.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Mono.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 950d365dbd3d9718105fb868610990643428d26d17df91f2302f616761d3992c
MD5 38acc7b61e2acfc687f693ab7c39e2ae
SHA1 7077a09dd9da8934e324ff1ec24932525bdd63bd
SHA512 c58c7fce853caf76409fbee0178a171c2d4e0bd2289170bffc90efc710701c1d9a33ce60f187e286a60734e1bf007312bff8c5e221e6ab0bf89ddcd09bad4d0f
SSDEEP 6144:GytgJ7SzJWhaeQTVJRj02ooGzsbFNG5ms7h:6B5ceQ502oVzB
TLSH
T1C65439086BE8DB67F1BE53B8D0F05015CBF8A15AA19FFF5E1C9610E818437909A41B6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/MonoMod.RuntimeDetour.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ca713f89889ca8288c813916e030b9df6bcf126f9631719968cc8e52d7e2db18
MD5 961d0a819fcdead020af8633d01afd48
SHA1 f41e844aaf7b84ba06d96bf1186ce3e406389ab7
SHA512 f676cd04422f49d2bda682aa8c6321620fc8e2ba3a040461edb4d9973b43c88e78d386bebfbbec7c37c3f69761971ab5b996eaca8fda65560579c8be67c3a727
SSDEEP 1536:ECfFg3KNp5JCyVU4InwB6qQfouP+8VU9cuy47ukI/26AF2V/85S6g2w0:ECu3KNp5JXVUdn75uyRkI/HAF2V0pg2p
TLSH
T110835A169BFD8A03CBEE17B665A714830774F1961653E3661CCDACFA18933D18E063A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

88526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\a\1\s\MonoMod.RuntimeDetour\obj\Release\net35\MonoMod.RuntimeDetour.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/MonoMod.Utils.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3a8f105771e28329a1d77053954c7e72c2ff37c8ab59cc1e0f85272e18c09053
MD5 cdc0051a2759f6964bce7bac862088a9
SHA1 7a332b8718b02df72266d40f2d44324ee044c6ee
SHA512 b5aba8567fff9542721e269dc15f7af0d3d8dc9543197eef4816b48bc4fef86600aef5798b4c16febee5030ca15e4ba6f0dcc1f8719fa9f61a357e0539eed547
SSDEEP 3072:XAPVK3i0HJCOoCRh1lLFe1caBveeyimTK8k4Em:QfMoCRh1eGKTQKh
TLSH
T145F33B1E5BA6CA11CBEFC374B0B6256145318403E293DB537CEDB5B71B9338A96032A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

166746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\a\1\s\MonoMod.Utils\obj\Release\net35\MonoMod.Utils.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/ReiPatcher.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b889e565ff507269761b6c588e14bce545fbbef2d771e237139d359fe7458741
MD5 27e23623ae44fc70db4578de2dd11676
SHA1 5c5712fd469fbf49c67a65739afb9f34462daa74
SHA512 85291d566ceeba47e578e303894c4930d3c9eda033862a6eb2c1c46a976346b72ee67676be4c2c2a095b185b8d340db80c23a381810669fa7ae91d1224360a86
SSDEEP 384:kCzuEfEopPNGnru4CtGhoGmgF2PVGiEMrEgmpLkviQ28xQQhQ7cbKOSWGIP:aEfVNNrIo+cPQrM9mdMil8KUDKOSWf
TLSH
T150E24C8027E88729D5FF0E7979B156110E76F66BB833C69F6CC9549B0EB1B801350BB2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

37598

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

W:\Projects\ReiPatcher\Source\obj\Git\ReiPatcher.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/System.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 94a11a0686c0f981b82ef173165a9d98ea8448e6ae3dcfb2c41bd3ddf76b2888
MD5 ce38326b16ec338ad4fae2062e1e0708
SHA1 ba77dc5047c2b45e92e156886fc9499f5de42f9a
SHA512 4b2f9a4024d8ba574d1581ba6c4174b3c525b4868142f3c9a8e927f9edb17c9e00397593ff816b5b8fdcf9a84ceb6ccdd8bdc7d46b372ef6cd57f7ff510eeed5
SSDEEP 6144:QpmYcnyyZrWiXZQOct0jaUDzLH8AhY3qJKV3I:scnyyZrWiXbct02UjvhWqJ
TLSH
T193442B69A7DD8612E7FF67B2D4B015050BB0B8E274A7D34E1CD860E45C4BB41BE123AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/System.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c12618fdb6aa52f35b092d29fd63de5ca69ec8cac6cb285bc1d6a168373a8b50
MD5 baccbb2131ff54a0581b1a867b28f0f6
SHA1 f450829e9e0082a343ed583844a871aa3a425976
SHA512 6d6adb8a84db6a17d4da88e9bfc989da1b343b2a4058f33b9122b02c7a83f8ea85c4f474de29c158fac1718797b01b17dbe7b287ea056ea9c9f02b234327f833
SSDEEP 24576:Q4zHCT4+QWd7pQLHJ25wlEb7pkaJ4Vg+nxSHQsAn2rJG8wAFPGKSW:QaV5j2rJG8wAFPGK
TLSH
T1CC354A0067E4CB2BE2AE6775B0B110115BB4E045F397EBAF1958A6E81C93F105E463FB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BaiduTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 390376beb1c5cbfaad429611a71aa9e1a86a1694fec5f04e7826b3d0b4692ada
MD5 5c2c4961d318c016e2e43d5a46ce0817
SHA1 1437bb7f0e7689a4dc83371b279949d60fdab7d3
SHA512 a0ca68ea13a88a13885ab5652eb20e1f89aafa1bf69c621f354fc7f8c39c042889f15ac54c1f609bbcc4949a0cfc0846244376c2247d920399cdfd689d090f76
SSDEEP 192:OJNn9RB8sD8zGU/dJeA5OIJOL64pfjmibJHs7l9KtejhfmpSLloKbvCPccmRcfJ+:oNnPB7D8zGgdJe9IJOL64hJM7l0tejhB
TLSH
T11832B81572E4836AE9BB5B35FFF103902236EE555821DE2D1D88004ADCF27049EABF66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\BaiduTranslate\obj\Release\net35\BaiduTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BingLegitimateTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2ac477f17ce9c72963dd09e95d71df4cf1ee17118b6c37fb78de899c0568ed01
MD5 b6c4928b13d8bb272cf0a46ad0655581
SHA1 5a00b71dd203c6510b70db511f6518de133b413c
SHA512 e73fef5ac2bb9c3fb1ef0c72753359f9e2596f5fa01bb54dd392d3b25a701b40e9d59fe08b27d1e404bc8c93517aaebf46b240bc791743644c7d8ea6926c4616
SSDEEP 192:7meeXDb6baN2mpfh8Q5c5m0OKuCQezbPBR:Seezb6baEmVnKfR3
TLSH
T19A126011F3E0D61BF9BAD731EEB2264031357E185822CE2D1C88088F79717868AE2F25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\BingTranslateLegitimate\obj\Release\net35\BingTranslateLegitimate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BingTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9bf6c0f597bca57c942c297950c63ebbe6b570642aa7143268cc304f8e422e6c
MD5 896f6fd80ece517f30b90e4ca276ed07
SHA1 f75b4efd2edd99d89e352c6e4f03ddaafbf6d429
SHA512 3c1e50f6b4abe01102305f34e02504765ac023ac9a6e98a46802100b6504c848b7e4285315328caa86dbec7886c21df216d16afbbb10dd00178646fbf2c8cdd8
SSDEEP 384:1Fn/aOLi6baNH07x+Iejhp293/GXVSs4:1hSOLiR90aops4
TLSH
T13052F91132F58316FDB6EBB6B9A323513035BE129825CE6E9C48248EDCB57424A53F37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\BingTranslate\obj\Release\net35\BingTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/CustomTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fd1434da32a40d403d9460c8a97efc16068eed25cb22c015d9592faf2d5a5d38
MD5 df939daf3333b0e60b61ceeeb5a27ae7
SHA1 1aa05290d2d01a03a22edc33bca39921f3608ea3
SHA512 8d59e03379a8c62d92a3628061b213b9a3b5fc1b1b054bf634ba21634c15c273dc83fe49ebd740d4c8469ff902e64ea1e206e946a020d4b3900dc3c5cd6d89d2
SSDEEP 96:jokBHDs5ACK62h0khY0npm7DW3mamLXvGG5upQvUZuoK6pH+c8GJR:146CKLm0nQ7DWWamLXu2up2p635JR
TLSH
T1E3D16525A7F4462AFEBB4B72BBB51280B631BE508962DB2D1D45504D2CB27148F22F16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\CustomTranslate\obj\Release\net35\CustomTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/DeepLTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d437d9cd1a761f22f93256ffdb0a78d586a7f2060ca4a282d1a3220f4a41adbf
MD5 f329d11a42a4c1e40bb545f10581e0e1
SHA1 f56e378f0be0d7b44b1a0323ca3185a070a2c2b7
SHA512 3496b5e98317a3e4cd540ca6f799feaccb887fe2d4518b3a77599457f94e61c6f0511ed237536e037f2ffd80f11df45f892f503de9869255f2676f0e0f38f34a
SSDEEP 192:SVTIDKMwupYe0Xn/wvBXhVRuzf3DBR77Wu9ajOCh6RU49kOdTBYL6R:SVTIDKvurZjRuzfFRXgwRU49kOZ6L
TLSH
T13F126213BFE89219E97AFB31BB7532112675BD094525CE1D0D9B184D18327D78A63F20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\DeepLTranslate\obj\Release\net35\DeepLTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Common.ExtProtocol.Executor.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 19db84f3cb7fc7e05d65af82cd35d6f9815b56bac977bd8512b0df419b674697
MD5 e366e6877d62dbc6070e0f76585ac83c
SHA1 47b262a0cc024e72e7f6c9f9f8f205954c4ce5dc
SHA512 2374832b36ae72a7179f7c8000e2a239ca7091c6e8e979608df66c4b9def9c025bbf4c7e2e1325bb36af0c87f61ac2f593d156e6be0cbdbce3ab548dc840ba7b
SSDEEP 192:VGVNNKxK19Uj+jJNhepe0JUEcQ25TbZOQoo7P9RRo:STD9SMzC+EuIol
TLSH
T15C121A21C7F8CB2BF9BB17B4EAB2535055B9B700A436CA5E3C4CB05B1D227150A9237B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\Common.ExtProtocol.Executor\obj\Release\net45\Common.ExtProtocol.Executor.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Common.ExtProtocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 498a27b2f245ffd0371cde30de24e7f3367799388e0ca72e89d6ab98c30ed7d3
MD5 063437f95dc651cde7aeb38a9f75d485
SHA1 93d0e4eef2dc24caf1aafa3ef9e872210916c958
SHA512 49f95510ba002e2cf069c7851f3024518ddbefca4f2fbbbeb5d0ec9aff366ca2185d586bc85eaea824edb6a74f9a9ce9b77ad49041c080049a9a41ad838e9061
SSDEEP 384:+rfevdfWV1XM9E0QOd6T07FFqvoXFsD5Wdia+F+EpUrlO5T9qDcrc83n1KEgiBwv:1vCm9HJWAXCDsJk5Tl7FBJFc
TLSH
T1F7D22A184FE9433BDBAC977C70F513A643B6C25A7713EBAA9E4CE5861C533440A813A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

33986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\Common.ExtProtocol\obj\Release\net45\Common.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/DeepLTranslate.ExtProtocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 030da601afde1e4d7f36d257f979ff4509870df5457fcb1725ab0bf20bba5cdc
MD5 284f25d0b6a9bfa6229b4d54b0497680
SHA1 0cec9421a3097630f8db034dd83c106c98f8ae6e
SHA512 d8df0074ec6de58f204c1e96dc832319efe2460b411aa4b25d91b2765091ed435d041fc2ce5551170a55409a70f118ed56383e45fadf7f6d7afc05c579e999b1
SSDEEP 768:KW4PhmEyxKXGXtYbkIXHjh6gPYH8PlfkfVfLfEfAf0btiI:wwiGXtYIIXHV6gPNfkfVfLfEfAfutiI
TLSH
T15FB21919737D877AEB7A4BBEF571224542B5BE047821FF8D2D8C60CE1CA2B15490872B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

30270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DeepLTranslate.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/GoogleTranslateCompat.ExtProtocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbf2d1496e5038b5659dc2d58d22ebefbf106529cae5274d198766a228527193
MD5 3030d5be69de8739719f809a8e143775
SHA1 8f8e29efb2db4f13f4534a597f80c39a8ba54552
SHA512 8115b3db16047a5fe67ef49d5bd1f0e3d9e585eed8c9d3d2844c8f8d23cf6acfad8226e7a818cc9a6a06ee609433c7b3af646ca161af29f1175a4835392fe55f
SSDEEP 192:hg42by3KaVRsp87F5xtb0tl4qMeNV4Opf6e0rSpEeW5F0XEx49tcwZOnkPR:hg4UwTVRzzxtbuGeNGOukEeW0yotqk
TLSH
T168420C1677B88325E5BF597DFB7223905079FB059431CE2D2C8C508E2CE39094B56F26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\GoogleTranslateCompat.ExtProtocol\obj\Release\net45\GoogleTranslateCompat.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Http.ExtProtocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 211078730e7e780bd20facaafabe76eb902f1181da5319e5554bafc2ac1106f2
MD5 ae880ab2dcc302a715d9f56d3fedefb0
SHA1 4b37a9d532f67de43443c581876018e61eef0c0e
SHA512 351e6c2e68870af77d754860c62c951e6a4082ece77d89bc03cf44ab008d317bca64afb88574dac295c74113694ce354e68d32566dd0b6d9748e5a6aa0b306d6
SSDEEP 192:U3pet2Q19FBaEQRCHhRHgiEJtmuTzuLiEy1yoBUhQmggS01OOVN4R:U3pCv19FBKRCHTAiE/iiEnoBUhQCUy
TLSH
T15E5208254778833BEB7B47BDA97243419571E305A731DF6F5E0CA49E2C923058A1076B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\Http.ExtProtocol\obj\Release\net45\Http.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Lec.ExtProtocol.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4b3997f5844c0ffb3f4d42c930229d6c2fe20b4e7d052521b09550a5e076fbc0
MD5 bbb7acf5898b5497868d064fb83c4787
SHA1 09f7399189ef037a23cd6c4d81bfeae3885de9e9
SHA512 b2f91e3bb6abd13006088f0da0e982fa831872905442989b308e6ad80000ba89a63c25bbdbc52637355a8a403739ba794046a55706070eae3d39f6d7989f141c
SSDEEP 192:nUM170fDyZMgDEu62RsjN6cgA0+6CkOn5n1449tdD9RL:kfDyZnsjJaC7Btp
TLSH
T14D32F90097E98729F6FB173969B317402335FA4A8872DB1F28DD81472D63B158EA2737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\Lec.ExtProtocol\obj\x86\Release\net35\Lec.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
MD5 081d9558bbb7adce142da153b2d5577a
SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
TLSH
T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Chains

Mar 17, 2021

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Serial Number

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 25, 2018 - Oct 29, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

698886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/XUnity.AutoTranslator.Plugin.ExtProtocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d30999e96a30d99f597513b47541a21e1f5d836b47a57117112416ccb330bd3e
MD5 a6a6b0571f800eb6123f49c16a7639bd
SHA1 6f70a33d620630bc100913af5455cdd8d26bc7c0
SHA512 dd220e007f6168a02854d02159daba42f001c06844abc19ce96df00d5213f70670fdb83f872eaeee12356a75ad38414c523122e823b6106149f05c2aa873b14a
SSDEEP 192:TYiJWpXJ5G1lEgORb6qJhT+aafu8WteaoMk8y0:T9JSelEgOR3JhKanz7Nk8y0
TLSH
T10722F9312775832EFBBD0BB0F8B1D255227EDA49E131CABB6D94605F6C1378A0520769
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\XUnity.AutoTranslator.Plugin.ExtProtocol\obj\Release\net35\XUnity.AutoTranslator.Plugin.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/FullNET/ezTransXP.ExtProtocol.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c99746b4edb2e84672c525ba09d665c995da935c01c84ad403efb638cbc863fc
MD5 5c52fd58a5706ff50e7ca9f9e22fd57f
SHA1 c97d494af6fa4e785293337eba2628280dafbe59
SHA512 e3374872b1d829e1ed5a67ef59d0fb38181770f0b92975fc9340c57e73a1ec69dc4f84aa3296c6e0a3b4514660e9ca562bd8da7789be789380e37acafa9b1829
SSDEEP 192:bP89KNnpO5eXgrvaCURTQ4OeRLCnlTpYGB9Xy/Rb:bPyKNnpO5eXJCJ4XyptBA
TLSH
T1BE22F81063F8C629EAF66B327EB6138026B5FD46D936CB1F2C4D524E1D2371189E2772
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\ezTransXP.ExtProtocol\obj\x86\Release\net35\ezTransXP.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/GoogleTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0d3c23f98d5f288b799a2f48fc6661cba0898ab996675eb3ee38d3cd45e3d605
MD5 e14c122db350b704a92ca8a56c7f996d
SHA1 ac824599d4af6d140c80211cf373d369b3a1bbee
SHA512 7e8aa0c7cd1db111dabcce232e38a9ea3b372ff63a8105f735a3d1925ec395fb846bb8b91438b3c5452cdfde730120b012b6caeb48028d68a574a3ac13ed81d8
SSDEEP 768:e7sXLNDMBsSTchIblNkWE7jOUOvIN2Jukk8w:Cs5ABs3KNl036ddw
TLSH
T1A5B2940172E88315E6BADB78EA702D952177BD6FD821D91C1E8C28C91D727CF8A53F12
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

30922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\GoogleTranslate\obj\Release\net35\GoogleTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/GoogleTranslateCompat.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c61839f9c613495f9b6a5f41b41263e10f7b36a247b2d241ce71ac9f424edad
MD5 ce2a945afe37f7310e10b832b55b1cb2
SHA1 c4001b79356f2b78cd44df539febda162d3f95a8
SHA512 80fcd82694c18655d2b9094626b95f5221bb035f5fafd863b1fe8c9d418bab93e85e7666279edd74f168a59ca0d0e8d165ea28b26f899283e570ce10b1957cf8
SSDEEP 192:R/WQrbxXNzpvlLhHDFrBndD5/1bxXNzpvlLTJPXNzpvlLP6GI4qekcCHs4T9OOOG:pWQrbxXNzpvlLhHDFrBndD5/1bxXNzp0
TLSH
T194F1FB1573A4C31AE972C732EE6D2262723DBA1E9922FE1D0D4C8C0954317D796E3F22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\GoogleTranslateCompat\obj\Release\net35\GoogleTranslateCompat.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/GoogleTranslateLegitimate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ca3b96027f04a475d2896f993a17b9026df943ce66f53053160cb3866fe3701b
MD5 353f720323c4ec0a5b3bf25e7ef21554
SHA1 99a1ec1994876d0fd2b6ee317391565e3f5ae4e8
SHA512 9dbab05da9bea0cf0f199a8ffcf6a80e4ff51ad002d7805cb7c27586bd29b7e1e60979e24114a7edb8ae9a4eb589e2db9bdf2e3e639b5f25f4fd0d5d4dd37682
SSDEEP 192:+Di6gQUH92McVBo796W6unQV8EmClsR9Z1O/x1FhN3q3R:4i6gQUd9cVy796W+3cuNW
TLSH
T1D212FA2172B4C21AE9F6C775EF656A10B235BE1EDD22CD2C4E4C08495871FC6A6E3F21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\GoogleTranslateLegitimate\obj\Release\net35\GoogleTranslateLegitimate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/LecPowerTranslator15.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6b85714d9a8856691e9849e692f982d0377b09a0654d1b5b2b6a49ed6b5eb832
MD5 e064a5917e1ccfe54b8fdb3830203050
SHA1 1eb7c0d4e33e6ea7ac397f7d0bb7dd7af4922aad
SHA512 08bb456ce64e6595d44a43a370a65d0ff683699fbe62bc977c891ddfceb3643c6d06f52c40526888b7d114edc308ee1983b138ebc42395780c42860be8975d88
SSDEEP 96:l0sdx0cXScXHD9j0YFmHziymad9g+xADA0RnvUJKpsYcLvMR:lU+hcHu9ad9g8m/vPqzMR
TLSH
T1B1E1A50163F8472AFBBB6739BEB66741663B7D42DA33CA2D2845100D6C326188764F32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\LecPowerTranslator15\obj\Release\net35\LecPowerTranslator15.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/LingoCloudTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6df505ee781e41e1e2f329d1360864ebb27e8a6cde4b271f6cee98548806be63
MD5 079cb8225e79e4ab1ed2a1174b72fef1
SHA1 250dabb6594b3b3803a21d5f24b473ffe76f960e
SHA512 791b28754b14f88d231cf874bbd07c4f2c30289958ec1d38f291007f578f40eb5b086acf1b4507bb56fe329f607310815c75f51fe2aa8a18e4dcd16c845d56b2
SSDEEP 96:12O3bUcAldvsHYVh6balyz76pfQ8emdtckmhmxEALwgyddfeJ6WuYrpiLAlZ/aV:9AUY/6baHpfQ8pd4hmxEALXuYQsfk
TLSH
T188E1A40563F5861AFFB75770B9B21791633ABE278923DE1E1D48005E4CB27184F66F22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Dev\source\repos\XUnity.AutoTranslator\src\Translators\LingoCloudTranslate\obj\Debug\net35\LingoCloudTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/PapagoTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 01f4488ec58e7f712e39509202964f1f49dc12f4f87cb0edd6a24f7564e890d9
MD5 eef7a700b718b3547c5e01443960d6b7
SHA1 35cf828a1f60329639f77797167c25cd4c0d93e9
SHA512 b5d405482c4bc3e84f92e51da37e05901e8b664b42e03aa537d8824ab234505cbd253c7d61dec45e64197314b8ed43e1159dcef78b2e56390d47e3c4352123c3
SSDEEP 192:u/3wKwH8Mkl7k2TsOHL8ISdDSL6bafhfo4yuprNfoJqejhcm225yQpcNAQD4vrIv:23wiG2Ts3dmL6bafXrNAMejhDsQptBc
TLSH
T1C742FB1577FC8716F6FF6B79A9B102502278EF516531CE1E2D9C208A5CA33144B62B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18122

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\PapagoTranslate\obj\Release\net35\PapagoTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/WatsonTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6701e19016483c57c55a82227951b00fd4b85d47a5d7db00b6a2eabad4cddb47
MD5 03ab38779534dff96d26da8d005f271e
SHA1 675649f76e4b167bf8b9c3ad8cae0a837482f12c
SHA512 7386080c8502abd659f0a9eae0d1e0650d6bdaf3b93ef5c5447cde920eb6b5c6cf9a93766870dc5a1a58513e77e342e5a975c06c0efd435e01410d0babbec15a
SSDEEP 192:3cx0Bjcrsxv6lM+GJfunccxLtv8GtTZnkfysbtN3YgUdR:+42M+Gmh1nkfys8
TLSH
T13D12750E73E1C615E9BBDB31B97227117135BD1B4922DE2F1E54064E8C727828AA3F35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\WatsonTranslate\obj\Release\net35\WatsonTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/YandexTranslate.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f522e353253bbdfd1fa4eee17b2bb3da9301625263331fae7fed25f0872c56b
MD5 5aa4bdb119b1cf1c3e5fac894414201c
SHA1 956935691cdd86f3c3aa90e3aa4161386d560a14
SHA512 11e8ce2a04e875595304a46a97ed2c32649289cdc5692a63fda2cba491c8621477b0cc8d3d56d250a54d7bd56f71432bb71f2e095db9d8bd164c2764b038b0c7
SSDEEP 192:sdvJrecohO6baBDfu8QxhRmUIuli3U1ZSGmWV6QKlyqR:sdxacP6baBWfPlhb17Uy
TLSH
T193121D10F3A2C217E9BAD731EE754650B1297D2C9923C92F1E4D084D187E7C68AE3F21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\YandexTranslate\obj\Release\net35\YandexTranslate.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/ezTransXP.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 982d73dbb22c98c278f06fa7bdb755ffbd720458a759eeeefd9bbc474d62722e
MD5 b995c5115eaf6f278c36fcbfb3125a3d
SHA1 aa290999b0ff331cc482bc53c64571764b6dbf15
SHA512 4834b17e48e13c9d687cbd5df6d706192601ab4e6c2c3eca0caa4b6efac085643c01ad17639b79b69a47139fce8ecbe4094d256e36535a56bba2d8464c6f3add
SSDEEP 96:iZMYViItA2kjSY/mHVymhd9MUF0vUSaKtCcmEHR:iKYIz8HV9hd98TRHR
TLSH
T18AC1952253F8836BFE7B1732BEF6A34065767E52DA73DA2D2486100D6C625254BA1F30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\Translators\ezTransXP\obj\Release\net35\ezTransXP.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.Networking.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9865c1f818bef9c6748f097625b2adf3efc415a881c1f71722ddb008ec87591f
MD5 3709322539062c89b9a031429338e7c9
SHA1 73fa5b84b2fce61b4f50853f3104ffc46a8eb4cd
SHA512 a9e7ef45917dc4f7300ecdf1e2168a3da038b8adf4f812c2a8a971c510b8fb0db01f2eabf53900eab9d7ecdeb25c94d81c2b261587bb98d8d4ab41d570c0b02f
SSDEEP 6144:vGjzR+eXPpPx36Gb5aGtlg+yo4Q8BHrLsTurT4NgJdVT:vwNXdbvodV
TLSH
T1C644F81067F99516F6FE27B8E8F540004B74BC42A46BEB8D06A060FD0E6779489963FF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

259534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.UI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 28a590e2606e51b6d63162a109dbb54dfa566b30dd3cea797d49d718a947fe40
MD5 19653098afaee7d4fd1e826417995614
SHA1 a7a99315fc0b25cf8a009ecdd1254d3846375e31
SHA512 7d593196441eafd8574222f2e7044cadffebc51c9f23a045b82e1a2ec75abef73aacec5d9622640f7e3795bf0a4b1ed16651a9fc70aa9362ea1578c3d62986a6
SSDEEP 6144:jwlXZCXqvksq9kh03kAfNqdB10P8SMQXQMn5tnqbN8lf4sTg11Bf:jAXIXqvksq9kh00YNq2P8rIgf
TLSH
T1553429146AA9D93BD79E27BAE4E05000C3B48347F08BEF491AD458FD1D47360989A7EF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

250254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5abea780b7e48e6e9c5ffd5e14d8199cc7fcdb124b8800712335241753fa130f
MD5 0f4d3320709376cfb822a124cf26ace8
SHA1 843e453a7dae7689608c31733c7116928edbf305
SHA512 2555339c8f1e53c3e813a4238180165d4597d41147714d5e68f13d5c74d959c13a515e55fd27b59b5df4e5cf0792f0c7b91ed4b63e8790c8bf9f5c7e3c218785
SSDEEP 24576:fpB9qv3B4xH3N1adDsi0gf0cEk7cwrCOZ/:f2B4xsvjEz
TLSH
T18F5506056FE9DD6BEA2E1BB6F09100281334D8C53B13E757267411FC2CEB3618D66B9A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1397838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/UnityEngine.dll.mdb

SHA256 01e2467650677bd038737620d51e927057284443f0c4d8f373e09f59e7ff64c3
MD5 3b606c459027cb64e42a41f9a634a53b
SHA1 24ef2dab02a36d81e8c6db6ab7608be3adda193e
SHA512 d282b907fa56af6457b1991eea21a05ce90aa4900df128de9fd075b2e4ce9017a78a480d1a20998638ffa79f507089bd41ee1dcacb45c42954da79faa6b005d9
SSDEEP 6144:tBMi+sox+nQrB+OEl+Ge8+7ey+jlltVJw9Hlfi+Y9Y/m15sw1K40vUOn0AUeYqHt:tW5xDrBMlkdK/Jw9Hlfi+Y9Y7eT2bHPl
TLSH
T1FCA42780B02A4909F4274CB260FF971C7BFCE4091BAFF75B72C59628EC77542AD91692
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.AutoTranslator.Plugin.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2494ecc74d32efbcaca541cc41e5e9a37e37b58d74c213036f1eb9ed3438d13d
MD5 264d7e2120b5820ae2d5a82bf963652a
SHA1 3dce9784fd8122f282a9dbaab901d91580c34dcf
SHA512 b9e185c7d4f6fa2455674d566597471f900c0c1f2f10de8554859c223ded4897fd958df10807b3ed9719bb0c498dc30faec9c8efacfe1537331056cc2f46be28
SSDEEP 6144:7HOfNnBxk8LpjeOAKHpA/00skOAduFjkYqSXS+Szrz0zrD/208YD6Yet564lx+I/:7HAk8lje7YtFIYqonHD2XYuEe2Vdq
TLSH
T111D45B1A33E8960BE5FE5B75E0B0185856B1FC02EB71EB4F8944D5EE2C92B858D20773
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

659278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

XUnity.AutoTranslator.Plugin.Core.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.AutoTranslator.Plugin.ExtProtocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d30999e96a30d99f597513b47541a21e1f5d836b47a57117112416ccb330bd3e
MD5 a6a6b0571f800eb6123f49c16a7639bd
SHA1 6f70a33d620630bc100913af5455cdd8d26bc7c0
SHA512 dd220e007f6168a02854d02159daba42f001c06844abc19ce96df00d5213f70670fdb83f872eaeee12356a75ad38414c523122e823b6106149f05c2aa873b14a
SSDEEP 192:TYiJWpXJ5G1lEgORb6qJhT+aafu8WteaoMk8y0:T9JSelEgOR3JhKanz7Nk8y0
TLSH
T10722F9312775832EFBBD0BB0F8B1D255227EDA49E131CABB6D94605F6C1378A0520769
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\XUnity.AutoTranslator.Plugin.ExtProtocol\obj\Release\net35\XUnity.AutoTranslator.Plugin.ExtProtocol.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 492199814295fc0af782efcff3295255b396b898b8f25070e56dc86b815575a3
MD5 ae47578742ef164788277b8608c1e507
SHA1 c09bd367014cab9f53f10103512f34cc28374d6e
SHA512 3a3618074a8ffe5b811ec6998d975eaaeb1ee225ff4d0cc8a3fb0a2ac2b266559a8ed7933d25f5a2ee20b7490856c6587a9ed426567d4569c0f7f625f30f4b99
SSDEEP 1536:/Goh6UBoPCLNoQx/4Jz5UMm5EE7ExdmGK1II9wATEvNTH:/CUBoPCLNoQx/4M5EOExQGK1II9BEp
TLSH
T15473F81033FD8B6AE2FE6BB464B2E201467DF93B9851D34F5C84215C19227A1DA53BB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

83202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\XUnity.Common\obj\Release\net35\XUnity.Common.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/XUnity.ResourceRedirector.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79b0a1193c09e59089d36dc0969f970f68029a06cbba0c2cddc82c62d4461df3
MD5 c93bd13783a0a671aa17733158b631f3
SHA1 b51e6f46ba217baad6f853d29ff71f613971d27a
SHA512 eb17957f1f11d26dda0c4559058cb0446bcc6b4205a0f38dacdcd40d37282389b2b50a9e943ad997d2d98e838fbda3f811537b998a2e6f65dd4f5f9f90fb1c6b
SSDEEP 1536:zYJF8ae1ljVbuO3XYrCjjotpYXB8Uhg3QcFsG4:z57VbhCVUC3QcFsG4
TLSH
T15063195053EDC72AEAFD1F782D3101198BB6FB4B7822E35E4C18A9F42D6335045A2B76
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

78186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\bbepis\XUnity.AutoTranslator\src\XUnity.ResourceRedirector\obj\Release\net35\XUnity.ResourceRedirector.pdb

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/mscorlib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 37e0d42a56eff62cb3227f3bf1c9ce526d7c33f96fd2027854916468803c1154
MD5 e2f76b24e6658152d9d3ab777891c3b1
SHA1 517b1a6a22124dcc8a0d746d311ff38eb60071f1
SHA512 94bb41af1bd47ec60a8fd2475373c60f52ca8427350bea8e230ceafe6cf4c90889288b53b393c32a50ce4f6f2fa7da2f052b9addcecd3d581032b5d5ec7571bf
SSDEEP 24576:d6JiUw4JT+aNzlNUX+NavalbghOd80GpOWz2XpURpZM/Y+6QAMJ:dxk7JNaobg2TXpURpZMg+6v
TLSH
T1A7C54A506BF5DA2BE57A6775E8B101241BF4F842F363E34F365812B80CA3704AC56B6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/MonoPosixHelper.dll

IMPHASH d144d27e19528e4de6c17bb2b1590bbe
SHA256 64c9c71f071e45accfdd2f23592535ae966252da6087ae0dd36f10c87d250c63
MD5 9dcafe743078980586b13ffcc9ac15ed
SHA1 a8e70837888a58aab1a3a051d7271a462d0074bf
SHA512 1af846ddd29409256d363edfa35c868e66f488031eebbcbe584aac3ac2d940824df4acbc45c065096fed81675083c07c25a7be905d3db3ef0267282b697b8955
SSDEEP 1536:SqOdWf+L5JjQ03xhhNmOXImx7RoZYDinz99wcUP4LpIOlIOjnToIf46:YdWKhmMIkte99wiLDvzTBfN
TLSH
T1AAA38E507290C672C0F6263C48E7C73D5A7E79269EB4888B3B4C6BAD1E613516B713CE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

37103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\buildslave\mono\build\msvc\Win32_Release_eglib\bin\monoposixhelper.pdb

CloseZStream CreateZStream Flush Mono_Posix_FromAccessModes Mono_Posix_FromConfstrName Mono_Posix_FromDirectoryNotifyFlags Mono_Posix_FromErrno Mono_Posix_FromFcntlCommand Mono_Posix_FromFilePermissions Mono_Posix_FromLockType Mono_Posix_FromLockfCommand Mono_Posix_FromMlockallFlags Mono_Posix_FromMmapFlags Mono_Posix_FromMmapProts Mono_Posix_FromMountFlags Mono_Posix_FromMremapFlags Mono_Posix_FromMsyncFlags Mono_Posix_FromOpenFlags Mono_Posix_FromPathconfName Mono_Posix_FromPollEvents Mono_Posix_FromPosixFadviseAdvice Mono_Posix_FromPosixMadviseAdvice Mono_Posix_FromSeekFlags Mono_Posix_FromSignum Mono_Posix_FromSysconfName Mono_Posix_FromSyslogFacility Mono_Posix_FromSyslogLevel Mono_Posix_FromSyslogOptions Mono_Posix_FromWaitOptions Mono_Posix_FromXattrFlags Mono_Posix_Stdlib_BUFSIZ Mono_Posix_Stdlib_CreateFilePosition Mono_Posix_Stdlib_DumpFilePosition Mono_Posix_Stdlib_EOF Mono_Posix_Stdlib_EXIT_FAILURE Mono_Posix_Stdlib_EXIT_SUCCESS Mono_Posix_Stdlib_FILENAME_MAX Mono_Posix_Stdlib_FOPEN_MAX Mono_Posix_Stdlib_InvokeSignalHandler Mono_Posix_Stdlib_L_tmpnam Mono_Posix_Stdlib_MB_CUR_MAX Mono_Posix_Stdlib_RAND_MAX Mono_Posix_Stdlib_SIG_DFL Mono_Posix_Stdlib_SIG_ERR Mono_Posix_Stdlib_SIG_IGN Mono_Posix_Stdlib_SetLastError Mono_Posix_Stdlib_TMP_MAX Mono_Posix_Stdlib__IOFBF Mono_Posix_Stdlib__IOLBF Mono_Posix_Stdlib__IONBF Mono_Posix_Stdlib_calloc Mono_Posix_Stdlib_clearerr Mono_Posix_Stdlib_fgetpos Mono_Posix_Stdlib_fread Mono_Posix_Stdlib_fseek Mono_Posix_Stdlib_fsetpos Mono_Posix_Stdlib_ftell Mono_Posix_Stdlib_fwrite Mono_Posix_Stdlib_malloc Mono_Posix_Stdlib_perror Mono_Posix_Stdlib_realloc Mono_Posix_Stdlib_rewind Mono_Posix_Stdlib_setbuf Mono_Posix_Stdlib_setvbuf Mono_Posix_Stdlib_stderr Mono_Posix_Stdlib_stdin Mono_Posix_Stdlib_stdout Mono_Posix_Stdlib_strlen Mono_Posix_ToAccessModes Mono_Posix_ToConfstrName Mono_Posix_ToDirectoryNotifyFlags Mono_Posix_ToErrno Mono_Posix_ToFcntlCommand Mono_Posix_ToFilePermissions Mono_Posix_ToLockType Mono_Posix_ToLockfCommand Mono_Posix_ToMlockallFlags Mono_Posix_ToMmapFlags Mono_Posix_ToMmapProts Mono_Posix_ToMountFlags Mono_Posix_ToMremapFlags Mono_Posix_ToMsyncFlags Mono_Posix_ToOpenFlags Mono_Posix_ToPathconfName Mono_Posix_ToPollEvents Mono_Posix_ToPosixFadviseAdvice Mono_Posix_ToPosixMadviseAdvice Mono_Posix_ToSeekFlags Mono_Posix_ToSignum Mono_Posix_ToSysconfName Mono_Posix_ToSyslogFacility Mono_Posix_ToSyslogLevel Mono_Posix_ToSyslogOptions Mono_Posix_ToWaitOptions Mono_Posix_ToXattrFlags ReadZStream WriteZStream

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/1.0/DefaultWsdlHelpGenerator.aspx

SHA256 d87d5196b2ae2abf4e673315e1fd22c3a44df80192f23e89b78108579c287524
MD5 66fed2411c14a0fc8ce4c593ef601bfb
SHA1 4680a34aae1193f1e4a6aac1a5dd3c307de257fb
SHA512 331874a9956c87db0646e4d21937a88009804a59fdf5f5882ea5b1dfb7dd7ef17724e09877d98f52e7327bbf38a46dde0c54d5c85f1e860b88322bdfad64679d
SSDEEP 768:M28utHkOFpMgMwP9h5Ij7khsp/6JtEZwMxVtkUI353cXyEyk3VbNb1gNuoT1y:ZDF6CdsCOZwMx3k5JYyklhxgRw
TLSH
T17743C4A0EF5C8D36499A52D9F88140CCB9BDC43291199CF3FCCDA12AF09CD6DA274766
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/1.0/machine.config

SHA256 eded908c507a7a230ee7ad3146d8893cf140638e6eaeab58bff05c95c2f3a7e3
MD5 4bad452a2ffc4c6f982e2f43fb44f6b9
SHA1 4445d53dc755ca2f977b01bf9d77357b3dfb0cc7
SHA512 1611968d2c19f3c9472a43d692a4451fd140dec1d6d5da6b819d33e62936f1d69d69e65c13b893158aacf985093bd7167f50d9c80c0789a79303fe66a9ad956c
SSDEEP 192:lhUisXjWXWPeEe90sEG9+RbwlP/waMGyR29yaDVPpAayW2x02GFGyC2xI2nb2kZX:lhU/Uvmbw5t/
TLSH
T1C4721230670DBD1ECA4126629870A9D1067F7B4E96ACED4CA5FF232EE917087D3521E3
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/2.0/Browsers/Compat.browser

SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx

SHA256 ae044cd9cc2c7c42f8864195125ab440472d657e5f0d55e131f7890bd45c518a
MD5 3b3452c399f27a24ea5a589c7bfe750b
SHA1 b06cb1d09ad3bbdf1d8214c910e3da2a228d113c
SHA512 41c099350159e942be8bc04c8f59c7fb0fd4bd99db46f1c0158f0fa053c08ae0c73e9d169f6816b77376283cce5beafdcfe5d3d5e3b98e8b358d67c34b954a04
SSDEEP 768:6CEPutHjWpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/q6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T19F43D4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/2.0/machine.config

SHA256 531d0d5bc30466a8a7ea6c032639721d7f16aab57c9701ef0afab5fdb432792f
MD5 433d143955ab359dff61c0bff982a176
SHA1 7eab623c58d853d733c0a5e586a47e09c4e3efdb
SHA512 914e7043806fcc2788dbe388f94a2c9cbc6b0d5eae59609ee411a4815926d879b05ba8f338ee07b88e95a44304ebc9cbefa19a948fa52ffc0f786957c9729c39
SSDEEP 384:PbBtBtWR5RwRqrR2RN3RPfRaRvRyRaRIKbX/yeRpQXWBEj3g:DuH
TLSH
T19FC2F0703609BDAE494227235C54FA8046BF57196BA86C0CB5FF626CFD2688BD3132D7
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/2.0/settings.map

SHA256 ca89036b7d7f1ae9311a6a2fbcf05fc5b997bd43fd21dd54e11c18018ef65f08
MD5 55dac562878b7dd98ee8a7ad203a26e6
SHA1 d16baa15e7d3042bcf9d7318209c696f4daf2cb0
SHA512 987c5cd86a9825953de670e5c15404694feb15cd5fa9afa8af4c2d5bda9d805839c9695d44122b32e0ffafe08d720c3df58000e89c8822fd9a5eb28eaf2ad478
TLSH
T1BB511138F344B5F50782052EA45B95D243B6053FA77A499C31ACD13D6F2984B83B32DD
MD5 SHA1 SHA512 TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/2.0/web.config

SHA256 3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
MD5 2b6303c4f12762b71051db6e947f90a4
SHA1 a4d7e05516f63d6ab67327b299d4fb2852cb840b
SHA512 80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
SSDEEP 192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya
TLSH
T1FE32BD34171DEDDD8B9066530420ABE162BF9B5A2744CD4CF1EF2329EB5548BE3611E3
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/browscap.ini

SHA256 4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
MD5 378be809df7d15aac75a175693e25fbb
SHA1 2d5454e161de8a5b65910f27bd70d9d0ad8fa476
SHA512 d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
SSDEEP 1536:D+dN5JLXlU4XteKJeYPMxBUm9huPj3bkeoO3cTKr0AzhjRzi0v5XfDlVlvr778BN:DYPEBOPjLkeOTA0AzhJMutEbbt0oK7M
TLSH
T18364FCC27495A47A9135DF3234F2D34957B39B9A8CBF9C4CD8628810DE61C0653BBAF2
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/config

SHA256 b585c70c70c88b3e03489361558f5d711c2ef71df9baaf37d92dbf95fbf6cd92
MD5 f95c345c1c53b820487f6b72e62d5485
SHA1 957e4e50e74c50347af92abf240c2c7aab3f3f79
SHA512 6b06434d07ee51be064a3efdca65b73e6c8e7560b43fb61633b08c7d2a0d792fe0670e57088c1dabd23929e0b7f7a27f65f503f2b640587042c8bbe98946368b
TLSH
T1FC318CDBE16C9DF9B071276592FEFBDC04B380A4CD1E31099E12DA411D25F9788439CA
MD5 SHA1 SHA512 TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/etc/mono/mconfig/config.xml

SHA256 0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
MD5 f34b330f20dce1bdcce9058fca287099
SHA1 936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA512 d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
SSDEEP 192:Bt074zTxASaKp3T7pJsPpPT8B13eeaVonGdEBMmhVbeyeTfWDBzmAwdavahmhNIa:LAMDp35JyPCCu96yJwgag
TLSH
T1E9C25025B9FC9DE7050240236E61A1969F7383B7527C3808B0FD63989FAA54743932FB
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Mono/mono.dll

IMPHASH 7c5bdfe0ad1d0025e63e5a860ea02671
SHA256 41879103f2c6b2305b623a71987c77dca66bd43fe1de3387231cc0158da5f932
MD5 2bdcd90dc86e4c0273170f7a56ab61e3
SHA1 9cdd525355f0f978b36f930f59472e32a6de876c
SHA512 07f2a4a3ff2e15c865449d2793da5609bb0da01d440df74c42716295c286cddfedaa9353ea965dbd2a635c524fab40ab4ee91be484172becf09638b34099a6ae
SSDEEP 49152:AuUV+3SBzOyhBeAD9RO28789BX280eqkYFr42XoreLKay:A8pCzXO24NVLM
TLSH
T19BA56B91E542D232C082007D4565572A0ABB6C62FF3698D7668CB4CFE5B42F0A79B37F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

1f:05:99:ae:3f:18:5e:72:ea:40:62:df:ea:5b:c7:c8:1b:29:9d:59

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US

Chains

Jun 18, 2017

CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US

Serial Number

07:57:79:00:b9:b5:a8:e4:48:a6:65:28:c7:76:0d:31

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 12, 2015 - Jul 11, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 10, 2013 - Dec 9, 2023

Minor OS version

1

Major OS version

5

Entry point

1149365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\buildslave\mono\build\builds\embedruntimes\win32\mono.pdb

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ws2_32

__WSAFDIsSet WSAGetLastError select socket WSACleanup WSAStartup inet_addr shutdown setsockopt getsockopt sendto WSASend send recvfrom WSARecv recv WSAIoctl connect bind getpeername getsockname ntohl listen WSACreateEvent WSAEventSelect WSACloseEvent accept ioctlsocket closesocket WSASocketW getprotobyname WSASetLastError getservbyport ntohs gethostbyaddr htons getservbyname htonl inet_ntoa gethostbyname gethostname

psapi

EnumProcessModules GetModuleInformation GetModuleFileNameExW GetModuleBaseNameW EnumProcesses

winmm

timeEndPeriod timeGetDevCaps timeBeginPeriod timeSetEvent

mswsock

TransmitFile

kernel32

WideCharToMultiByte RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetStartupInfoW SetHandleCount IsProcessorFeaturePresent HeapDestroy HeapCreate EncodePointer IsDebuggerPresent UnhandledExceptionFilter FindFirstFileExW HeapReAlloc GetCommandLineA DecodePointer ExitProcess CreateDirectoryA MoveFileA LocalFileTimeToFileTime FindFirstFileExA GetDriveTypeA InitializeCriticalSectionAndSpinCount SetStdHandle PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime FileTimeToSystemTime HeapFree HeapAlloc GetFullPathNameA CreateFileA LCMapStringW GetFileAttributesA GetConsoleCP VirtualAlloc VirtualFree VirtualQuery Sleep InterlockedCompareExchange InterlockedExchange GetSystemInfo LocalFree FormatMessageW GetLastError GetCurrentProcess GetProcAddress GetModuleHandleW SetLastError LoadLibraryW SetErrorMode FreeLibrary CloseHandle MapViewOfFile CreateFileMappingW UnmapViewOfFile VirtualProtect WaitForSingleObjectEx ReleaseSemaphore GetTickCount GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency LeaveCriticalSection EnterCriticalSection SetFileAttributesW CopyFileW DeleteFileW WriteFile CreateFileW ResumeThread InitializeCriticalSection InterlockedIncrement InterlockedDecrement DeleteCriticalSection GetFileType GetModuleFileNameW TlsGetValue GetConsoleMode TlsAlloc TlsFree GetVersionExW FindClose FindFirstFileW GetFileAttributesW GetFileAttributesExW CreateDirectoryW RemoveDirectoryW FindNextFileW GetCurrentDirectoryW SetCurrentDirectoryW MoveFileW ReplaceFileW ReadFile SetFilePointer FlushFileBuffers GetFileSize SetEndOfFile SetFileTime GetStdHandle CreatePipe DuplicateHandle GetTempPathW LockFile UnlockFile ResetEvent SetEvent CreateSemaphoreW CreateEventW SystemTimeToFileTime GetTimeZoneInformation GetComputerNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetDriveTypeW OutputDebugStringW GlobalAlloc DeleteFileA GlobalFree GetCurrentThreadId OpenProcess GetCurrentProcessId VerLanguageNameW CreateProcessW GetProcessTimes GetExitCodeProcess GetProcessWorkingSetSize SetProcessWorkingSetSize TerminateProcess GetPriorityClass SetPriorityClass GetCurrentThread GetVolumeInformationW LoadLibraryA GetSystemDirectoryA WaitForSingleObject SleepEx CreateMutexW ReleaseMutex OpenMutexW OpenSemaphoreW OpenEventW OpenThread GetExitCodeThread ExitThread WaitForMultipleObjectsEx SignalObjectAndWait QueueUserAPC FreeConsole GetThreadContext RemoveVectoredExceptionHandler SetUnhandledExceptionFilter AddVectoredExceptionHandler MultiByteToWideChar DebugBreak SuspendThread CreateThread GetVersion RaiseException GetEnvironmentVariableW GetACP GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW GetModuleFileNameA GetProcessHeap GetFullPathNameW CompareStringW SetEnvironmentVariableA CreateProcessA WriteConsoleW HeapSize TlsSetValue GlobalReAlloc

user32

WaitForInputIdle MessageBoxA SendMessageTimeoutW

advapi32

AllocateAndInitializeSid ImpersonateLoggedOnUser DuplicateToken GetTokenInformation OpenThreadToken OpenProcessToken LookupAccountSidW CryptReleaseContext CryptAcquireContextW CryptGenRandom CreateProcessWithLogonW CopySid GetLengthSid GetEffectiveRightsFromAclW BuildTrusteeWithSidW RevertToSelf FreeSid GetNamedSecurityInfoW SetNamedSecurityInfoW SetEntriesInAclW

shell32

ShellExecuteExW SHGetFolderPathW

ole32

CoTaskMemFree CoTaskMemRealloc CoInitializeEx CoUninitialize CoTaskMemAlloc CoCreateFreeThreadedMarshaler

oleaut32

SafeArrayDestroy SafeArrayCreate SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SysFreeString SysStringLen SysAllocStringLen

g_free mono_add_internal_call mono_alloc_special_static_data mono_array_addr_with_size mono_array_class_get mono_array_clone mono_array_element_size mono_array_new mono_array_new_full mono_array_new_specific mono_assemblies_cleanup mono_assemblies_init mono_assembly_close mono_assembly_fill_assembly_name mono_assembly_foreach mono_assembly_get_assemblyref mono_assembly_get_image mono_assembly_get_main mono_assembly_get_object mono_assembly_getrootdir mono_assembly_invoke_load_hook mono_assembly_invoke_search_hook mono_assembly_load mono_assembly_load_from mono_assembly_load_from_full mono_assembly_load_full mono_assembly_load_module mono_assembly_load_reference mono_assembly_load_references mono_assembly_load_with_partial_name mono_assembly_loaded mono_assembly_loaded_full mono_assembly_name_parse mono_assembly_names_equal mono_assembly_open mono_assembly_open_full mono_assembly_set_main mono_assembly_setrootdir mono_backtrace_from_context mono_bitset_alloc_size mono_bitset_clear mono_bitset_clear_all mono_bitset_clone mono_bitset_copyto mono_bitset_count mono_bitset_equal mono_bitset_find_first mono_bitset_find_first_unset mono_bitset_find_last mono_bitset_find_start mono_bitset_foreach mono_bitset_free mono_bitset_intersection mono_bitset_intersection_2 mono_bitset_invert mono_bitset_mem_new mono_bitset_new mono_bitset_set mono_bitset_set_all mono_bitset_size mono_bitset_sub mono_bitset_test mono_bitset_test_bulk mono_bitset_union mono_bounded_array_class_get mono_check_corlib_version mono_class_array_element_size mono_class_data_size mono_class_describe_statics mono_class_enum_basetype mono_class_from_generic_parameter mono_class_from_mono_type mono_class_from_name mono_class_from_name_case mono_class_from_typeref mono_class_get mono_class_get_byref_type mono_class_get_element_class mono_class_get_event_token mono_class_get_events mono_class_get_field mono_class_get_field_from_name mono_class_get_field_token mono_class_get_fields mono_class_get_flags mono_class_get_full mono_class_get_image mono_class_get_interfaces mono_class_get_method_from_name mono_class_get_method_from_name_flags mono_class_get_methods mono_class_get_name mono_class_get_namespace mono_class_get_nested_types mono_class_get_nesting_type mono_class_get_parent mono_class_get_properties mono_class_get_property_from_name mono_class_get_property_token mono_class_get_rank mono_class_get_type mono_class_get_type_token mono_class_get_userdata mono_class_get_userdata_offset mono_class_inflate_generic_method mono_class_inflate_generic_method_full mono_class_inflate_generic_type mono_class_init mono_class_instance_size mono_class_is_assignable_from mono_class_is_blittable mono_class_is_enum mono_class_is_generic mono_class_is_inflated mono_class_is_subclass_of mono_class_is_valuetype mono_class_min_align mono_class_name_from_token mono_class_num_events mono_class_num_fields mono_class_num_methods mono_class_num_properties mono_class_set_userdata mono_class_value_size mono_class_vtable mono_cli_rva_image_map mono_code_manager_commit mono_code_manager_destroy mono_code_manager_foreach mono_code_manager_invalidate mono_code_manager_new mono_code_manager_new_dynamic mono_code_manager_reserve mono_compile_method mono_config_for_assembly mono_config_parse mono_config_parse_memory mono_config_string_for_assembly_file mono_context_get mono_context_init mono_context_set mono_counters_dump mono_counters_enable mono_counters_register mono_custom_attrs_construct mono_custom_attrs_free mono_custom_attrs_from_assembly mono_custom_attrs_from_class mono_custom_attrs_from_event mono_custom_attrs_from_field mono_custom_attrs_from_index mono_custom_attrs_from_method mono_custom_attrs_from_param mono_custom_attrs_from_property mono_custom_attrs_get_attr mono_custom_attrs_has_attr mono_debug_add_method mono_debug_cleanup mono_debug_close_mono_symbol_file mono_debug_domain_create mono_debug_domain_unload mono_debug_find_method mono_debug_free_source_location mono_debug_init mono_debug_lookup_method mono_debug_lookup_source_location mono_debug_open_image_from_memory mono_debug_open_mono_symbols mono_debug_print_stack_frame mono_debug_print_vars mono_debug_symfile_lookup_location mono_debug_symfile_lookup_method mono_debug_using_mono_debugger mono_debugger_breakpoint_callback mono_debugger_check_runtime_version mono_debugger_cleanup mono_debugger_event mono_debugger_handle_exception mono_debugger_initialize mono_debugger_insert_breakpoint mono_debugger_insert_breakpoint_full mono_debugger_lock mono_debugger_method_has_breakpoint mono_debugger_remove_breakpoint mono_debugger_run_finally mono_debugger_unlock mono_declsec_flags_from_assembly mono_declsec_flags_from_class mono_declsec_flags_from_method mono_declsec_get_assembly_action mono_declsec_get_class_action mono_declsec_get_demands mono_declsec_get_inheritdemands_class mono_declsec_get_inheritdemands_method mono_declsec_get_linkdemands mono_declsec_get_method_action mono_digest_get_public_token mono_disasm_code mono_disasm_code_one mono_dl_fallback_register mono_dl_fallback_unregister mono_dllmap_insert mono_domain_add_class_static_data mono_domain_assembly_open mono_domain_create mono_domain_create_appdomain mono_domain_finalize mono_domain_foreach mono_domain_free mono_domain_get mono_domain_get_by_id mono_domain_get_id mono_domain_has_type_resolve mono_domain_is_unloading mono_domain_owns_vtable_slot mono_domain_set mono_domain_set_internal mono_domain_try_type_resolve mono_domain_unload mono_environment_exitcode_get mono_environment_exitcode_set mono_escape_uri_string mono_event_get_add_method mono_event_get_flags mono_event_get_name mono_event_get_object mono_event_get_parent mono_event_get_raise_method mono_event_get_remove_method mono_exception_from_name mono_exception_from_name_domain mono_exception_from_name_msg mono_exception_from_name_two_strings mono_exception_from_token mono_field_from_token mono_field_get_data mono_field_get_flags mono_field_get_name mono_field_get_object mono_field_get_offset mono_field_get_parent mono_field_get_type mono_field_get_value mono_field_get_value_object mono_field_set_value mono_field_static_get_value mono_field_static_set_value mono_file_map mono_file_unmap mono_free_method mono_free_verify_list mono_g_hash_table_destroy mono_g_hash_table_foreach mono_g_hash_table_foreach_remove mono_g_hash_table_insert mono_g_hash_table_lookup mono_g_hash_table_lookup_extended mono_g_hash_table_new mono_g_hash_table_new_full mono_g_hash_table_new_type mono_g_hash_table_remove mono_g_hash_table_replace mono_g_hash_table_size mono_gc_collect mono_gc_collection_count mono_gc_enable_events mono_gc_get_generation mono_gc_get_heap_size mono_gc_get_used_size mono_gc_is_finalizer_thread mono_gc_max_generation mono_gc_out_of_memory mono_gc_wbarrier_arrayref_copy mono_gc_wbarrier_generic_store mono_gc_wbarrier_set_arrayref mono_gc_wbarrier_set_field mono_gc_wbarrier_value_copy mono_gchandle_free mono_gchandle_get_target mono_gchandle_is_in_domain mono_gchandle_new mono_gchandle_new_weakref mono_get_array_class mono_get_boolean_class mono_get_byte_class mono_get_char_class mono_get_config_dir mono_get_corlib mono_get_dbnull_object mono_get_delegate_invoke mono_get_double_class mono_get_enum_class mono_get_exception_appdomain_unloaded mono_get_exception_argument mono_get_exception_argument_null mono_get_exception_argument_out_of_range mono_get_exception_arithmetic mono_get_exception_array_type_mismatch mono_get_exception_bad_image_format mono_get_exception_bad_image_format2 mono_get_exception_cannot_unload_appdomain mono_get_exception_class mono_get_exception_divide_by_zero mono_get_exception_execution_engine mono_get_exception_file_not_found mono_get_exception_file_not_found2 mono_get_exception_index_out_of_range mono_get_exception_invalid_cast mono_get_exception_invalid_operation mono_get_exception_io mono_get_exception_missing_field mono_get_exception_missing_method mono_get_exception_not_implemented mono_get_exception_not_supported mono_get_exception_null_reference mono_get_exception_overflow mono_get_exception_reflection_type_load mono_get_exception_security mono_get_exception_serialization mono_get_exception_stack_overflow mono_get_exception_synchronization_lock mono_get_exception_thread_abort mono_get_exception_thread_interrupted mono_get_exception_thread_state mono_get_exception_type_initialization mono_get_exception_type_load mono_get_inflated_method mono_get_int16_class mono_get_int32_class mono_get_int64_class mono_get_intptr_class mono_get_machine_config mono_get_method mono_get_method_constrained mono_get_method_full mono_get_object_class mono_get_root_domain mono_get_sbyte_class mono_get_single_class mono_get_special_static_data mono_get_string_class mono_get_thread_class mono_get_uint16_class mono_get_uint32_class mono_get_uint64_class mono_get_uintptr_class mono_get_void_class mono_guid_to_string mono_image_add_to_name_cache mono_image_addref mono_image_close mono_image_ensure_section mono_image_ensure_section_idx mono_image_get_assembly mono_image_get_entry_point mono_image_get_filename mono_image_get_guid mono_image_get_name mono_image_get_public_key mono_image_get_resource mono_image_get_strong_name mono_image_get_table_info mono_image_get_table_rows mono_image_has_authenticode_entry mono_image_init mono_image_init_name_cache mono_image_is_dynamic mono_image_load_file_for_image mono_image_loaded mono_image_loaded_by_guid mono_image_loaded_by_guid_full mono_image_loaded_full mono_image_lookup_resource mono_image_open mono_image_open_from_data mono_image_open_from_data_full mono_image_open_from_data_with_name mono_image_open_full mono_image_rva_map mono_image_strerror mono_image_strong_name_position mono_image_verify_tables mono_images_cleanup mono_images_init mono_init mono_init_from_assembly mono_init_version mono_inst_name mono_install_assembly_load_hook mono_install_assembly_postload_refonly_search_hook mono_install_assembly_postload_search_hook mono_install_assembly_preload_hook mono_install_assembly_refonly_preload_hook mono_install_assembly_refonly_search_hook mono_install_assembly_search_hook mono_install_runtime_cleanup mono_is_debugger_attached mono_jit_cleanup mono_jit_exec mono_jit_info_get_code_size mono_jit_info_get_code_start mono_jit_info_get_method mono_jit_info_table_find mono_jit_init mono_jit_init_version mono_jit_parse_options mono_jit_set_trace_options mono_jit_thread_attach mono_ldstr mono_ldtoken mono_load_remote_field mono_load_remote_field_new mono_loader_error_prepare_exception mono_loader_get_last_error mono_locks_dump mono_lookup_internal_call mono_lookup_pinvoke_call mono_main mono_marshal_string_to_utf16 mono_mb_free mono_md5_final mono_md5_get_digest mono_md5_get_digest_from_file mono_md5_init mono_md5_update mono_mempool_alloc mono_mempool_alloc0 mono_mempool_contains_addr mono_mempool_destroy mono_mempool_empty mono_mempool_get_allocated mono_mempool_invalidate mono_mempool_new mono_mempool_stats mono_mempool_strdup mono_metadata_blob_heap mono_metadata_cleanup mono_metadata_compute_size mono_metadata_custom_attrs_from_index mono_metadata_declsec_from_index mono_metadata_decode_blob_size mono_metadata_decode_row mono_metadata_decode_row_col mono_metadata_decode_signed_value mono_metadata_decode_table_row mono_metadata_decode_table_row_col mono_metadata_decode_value mono_metadata_encode_value mono_metadata_events_from_typedef mono_metadata_field_info mono_metadata_free_array mono_metadata_free_marshal_spec mono_metadata_free_method_signature mono_metadata_free_mh mono_metadata_free_type mono_metadata_generic_class_is_valuetype mono_metadata_get_constant_index mono_metadata_get_generic_param_row mono_metadata_get_marshal_info mono_metadata_get_param_attrs mono_metadata_guid_heap mono_metadata_implmap_from_method mono_metadata_init mono_metadata_interfaces_from_typedef mono_metadata_load_generic_param_constraints mono_metadata_load_generic_params mono_metadata_locate mono_metadata_locate_token mono_metadata_methods_from_event mono_metadata_methods_from_property mono_metadata_nested_in_typedef mono_metadata_nesting_typedef mono_metadata_packing_from_typedef mono_metadata_parse_array mono_metadata_parse_custom_mod mono_metadata_parse_field_type mono_metadata_parse_marshal_spec mono_metadata_parse_method_signature mono_metadata_parse_method_signature_full mono_metadata_parse_mh mono_metadata_parse_mh_full mono_metadata_parse_param mono_metadata_parse_signature mono_metadata_parse_type mono_metadata_parse_type_full mono_metadata_parse_typedef_or_ref mono_metadata_properties_from_typedef mono_metadata_signature_alloc mono_metadata_signature_dup mono_metadata_signature_equal mono_metadata_string_heap mono_metadata_token_from_dor mono_metadata_translate_token_index mono_metadata_type_equal mono_metadata_type_hash mono_metadata_typedef_from_field mono_metadata_typedef_from_method mono_metadata_user_string mono_method_body_get_object mono_method_desc_free mono_method_desc_from_method mono_method_desc_full_match mono_method_desc_match mono_method_desc_new mono_method_desc_search_in_class mono_method_desc_search_in_image mono_method_full_name mono_method_get_class mono_method_get_flags mono_method_get_header mono_method_get_index mono_method_get_last_managed mono_method_get_marshal_info mono_method_get_name mono_method_get_object mono_method_get_param_names mono_method_get_param_token mono_method_get_signature mono_method_get_signature_full mono_method_get_token mono_method_has_marshal_info mono_method_header_get_clauses mono_method_header_get_code mono_method_header_get_locals mono_method_header_get_num_clauses mono_method_signature mono_method_verify mono_mlist_alloc mono_mlist_append mono_mlist_get_data mono_mlist_last mono_mlist_length mono_mlist_next mono_mlist_prepend mono_mlist_remove_item mono_mlist_set_data mono_module_file_get_object mono_module_get_object mono_monitor_enter mono_monitor_exit mono_monitor_try_enter mono_mprotect mono_object_castclass_mbyref mono_object_clone mono_object_describe mono_object_describe_fields mono_object_get_class mono_object_get_domain mono_object_get_size mono_object_get_virtual_method mono_object_hash mono_object_is_alive mono_object_isinst mono_object_isinst_mbyref mono_object_new mono_object_new_alloc_specific mono_object_new_fast mono_object_new_from_token mono_object_new_specific mono_object_unbox mono_opcode_name mono_opcode_value mono_pagesize mono_param_get_objects mono_parse_default_optimizations mono_path_canonicalize mono_path_resolve_symlinks mono_pe_file_open mono_pmip mono_poll mono_print_method_from_ip mono_print_thread_dump mono_print_unhandled_exception mono_profiler_coverage_get mono_profiler_get_events mono_profiler_install mono_profiler_install_allocation mono_profiler_install_appdomain mono_profiler_install_assembly mono_profiler_install_class mono_profiler_install_coverage_filter mono_profiler_install_enter_leave mono_profiler_install_exception mono_profiler_install_gc mono_profiler_install_jit_compile mono_profiler_install_jit_end mono_profiler_install_module mono_profiler_install_statistical mono_profiler_install_thread mono_profiler_install_transition mono_profiler_load mono_profiler_set_events mono_property_get_flags mono_property_get_get_method mono_property_get_name mono_property_get_object mono_property_get_parent mono_property_get_set_method mono_property_get_value mono_property_set_value mono_ptr_class_get mono_raise_exception mono_reflection_get_custom_attrs mono_reflection_get_custom_attrs_blob mono_reflection_get_custom_attrs_by_type mono_reflection_get_custom_attrs_data mono_reflection_get_custom_attrs_info mono_reflection_get_token mono_reflection_get_type mono_reflection_parse_type mono_reflection_type_from_name mono_reflection_type_get_handle mono_register_bundled_assemblies mono_register_config_for_assembly mono_register_machine_config mono_remote_class mono_runtime_class_init mono_runtime_cleanup mono_runtime_delegate_invoke mono_runtime_exec_main mono_runtime_exec_managed_code mono_runtime_get_main_args mono_runtime_init mono_runtime_invoke mono_runtime_invoke_array mono_runtime_is_shutting_down mono_runtime_object_init mono_runtime_quit mono_runtime_run_main mono_runtime_set_shutting_down mono_runtime_unhandled_exception_policy_get mono_runtime_unhandled_exception_policy_set mono_security_enable_core_clr mono_security_set_core_clr_platform_callback mono_security_set_mode mono_set_assemblies_path mono_set_break_policy mono_set_commandline_arguments mono_set_config_dir mono_set_defaults mono_set_dirs mono_set_find_plugin_callback mono_set_ignore_version_and_key_when_finding_assemblies_already_loaded mono_set_rootdir mono_set_signal_chaining mono_sha1_final mono_sha1_get_digest mono_sha1_get_digest_from_file mono_sha1_init mono_sha1_update mono_signature_explicit_this mono_signature_get_call_conv mono_signature_get_desc mono_signature_get_param_count mono_signature_get_params mono_signature_get_return_type mono_signature_hash mono_signature_is_instance mono_signature_vararg_start mono_signbit_double mono_signbit_float mono_stack_walk mono_stack_walk_no_il mono_store_remote_field mono_store_remote_field_new mono_string_equal mono_string_from_utf16 mono_string_hash mono_string_intern mono_string_is_interned mono_string_new mono_string_new_len mono_string_new_size mono_string_new_utf16 mono_string_new_wrapper mono_string_to_utf16 mono_string_to_utf8 mono_stringify_assembly_name mono_table_info_get_rows mono_thread_abort_all_other_threads mono_thread_attach mono_thread_cleanup mono_thread_create mono_thread_current mono_thread_detach mono_thread_exit mono_thread_force_interruption_checkpoint mono_thread_get_abort_signal mono_thread_get_main mono_thread_has_appdomain_ref mono_thread_init mono_thread_interruption_checkpoint mono_thread_interruption_request_flag mono_thread_interruption_requested mono_thread_manage mono_thread_new_init mono_thread_pool_cleanup mono_thread_pop_appdomain_ref mono_thread_push_appdomain_ref mono_thread_request_interruption mono_thread_set_main mono_thread_stop mono_thread_suspend_all_other_threads mono_threads_abort_appdomain_threads mono_threads_clear_cached_culture mono_threads_get_default_stacksize mono_threads_install_cleanup mono_threads_request_thread_dump mono_threads_set_default_stacksize mono_threads_set_shutting_down mono_trace mono_trace_cleanup mono_trace_is_traced mono_trace_pop mono_trace_push mono_trace_set_level mono_trace_set_level_string mono_trace_set_mask mono_trace_set_mask_string mono_tracev mono_type_create_from_typespec mono_type_full_name mono_type_generic_inst_is_valuetype mono_type_get_array_type mono_type_get_class mono_type_get_desc mono_type_get_modifiers mono_type_get_name mono_type_get_name_full mono_type_get_object mono_type_get_ptr_type mono_type_get_signature mono_type_get_type mono_type_get_underlying_type mono_type_is_byref mono_type_is_reference mono_type_size mono_type_stack_size mono_type_to_unmanaged mono_unhandled_exception mono_unicode_from_external mono_unicode_to_external mono_unity_class_is_abstract mono_unity_class_is_interface mono_unity_get_all_classes_with_name_case mono_unity_liveness_allocate_struct mono_unity_liveness_calculation_begin mono_unity_liveness_calculation_end mono_unity_liveness_calculation_from_root mono_unity_liveness_calculation_from_root_managed mono_unity_liveness_calculation_from_statics mono_unity_liveness_calculation_from_statics_managed mono_unity_liveness_finalize mono_unity_liveness_free_struct mono_unity_liveness_start_gc_world mono_unity_liveness_stop_gc_world mono_unity_seh_handler mono_unity_set_embeddinghostname mono_unity_set_unhandled_exception_handler mono_unity_set_vprintf_func mono_unity_socket_security_enabled_set mono_upgrade_remote_class_wrapper mono_utf8_from_external mono_valloc mono_value_box mono_value_copy mono_value_copy_array mono_value_describe_fields mono_verifier_set_mode mono_verify_corlib mono_vfree mono_vtable_get_static_field_data mono_walk_stack set_vprintf_func unity_mono_close_output unity_mono_install_memory_callbacks unity_mono_method_is_generic unity_mono_method_is_inflated unity_mono_redirect_output unity_mono_reflection_method_get_method

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Resources/unity default resources

SHA256 0e611340905acf28f0ac1a0b54596d545033e71c903a42432380dc66d8e42812
MD5 42879b28fda0f431f16838954dab8265
SHA1 3ac96a51f77d5d37890484ac986eab6bef8ba4d0
SHA512 3be7e8ffb8212c7ad7896d18bd0a2b66763151137287cb569fe923a0a11a300c4995401c10c7780f6b5c0df730704d1523b97ddb268bc155396f1aa78e438a5f
SSDEEP 6144:hhJt9GPohSfZ2AOJeNosdzobLend5UOC:hhwPohSBHDZove9C
TLSH
T111F4FB257206C13AD41109328C76DFFE5232BCE8DEB94A177AE67F9F7CB52842660235
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Resources/unity_builtin_extra

SHA256 1bad475b1619d687d8326862e63f3b1f833c7df03d80ed035a680b500425b484
MD5 36bbe9382516b3f46669417056d94b33
SHA1 5c92151de06ca2e0715987c2d46fd44e228e893e
SHA512 a93041f8429a086fe7cab6585710c769ea95d9c5757f52bfd20010c3324cb04d2ebd454c45db96b831865ce41b32932f01aeb8a03bb985ab1a68c911b69b8c2f
SSDEEP 3072:pn9vuis7X3shK4sgG9XPmgMkAKk8Os/RyX6ckBHBSAgwkcX+Y:/s7WFG9XOgMG3/Rbc8HBPuY
TLSH
T128841B7DA387493FCC24063748B60B336376A5F81BDE4F136E2C6B6C68E62986B51744
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/app.info

SHA256 6418dc6fa33d087138e6c34022f68ebbf030d16f8e1d9282f6d5278388fb9333
MD5 c46927773d5d7f046c69519fa7106371
SHA1 04d8a744c74629c3d74ed60f70a7a1c696bfdab5
SHA512 87110bd84bef2d038f16ea77a1fb50b43e829a80255f38962f239aa3efcf79f21ee68cf699d633605d04d028dc8630b5d949833ff6769230e0cf5ff40783c8b1
MD5 SHA1 SHA512

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/globalgamemanagers

SHA256 6b02290ca0b000353d8c3dd8a83fe90a94f838b574f0f63b3f57ecf2424c6f7f
MD5 66de207fa4ff5d27b620720e142d6840
SHA1 fd238b79af6baec92c1a97bd26ed571974df4685
SHA512 0fcf3620a4d323b347f4ae9d06e4f1062a5c3f23c7a47c93d081a08c55ed840d68da49e028859275f261240010c2123f915530887c9cc887b86841762eecb333
SSDEEP 12288:aoz+PKV3EQ/VUU/9+x2858pjjzOPQMHnVsQmuZJ0v8RELPNDubo/Ng/q1QPu:9v3EQ/VUUnzKnXZ
TLSH
T13AC5F44CCBE78E6BCE4503B98AF72FD43A7AC9D25353F3A7602194611C583EE2D8145A
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/globalgamemanagers.assets

SHA256 8d6a5b71c815a28989667afd5f2aeca022b1a0a6bf9b6aaa2b65498371e2de39
MD5 7c71950897b6e8ec705aad860c49e169
SHA1 071dd2860095f617a1c587062ba6417ab837028d
SHA512 96197762a3225ce72c5e77d10f8bb034cc9d0cc0a192d100a927774cb36913d2764317639e43130fde8470053e143885ab006c4113209b750a1f1a5c615e2e18
SSDEEP 3072:KF9ucTgVhV3gYgQh4V9KMYncFrGuAHopQlec6+JS3Q0tn92MVx5iv66q6j6n0Q0/:DVhV3gYgQhq9mnKIHopQl8kyXt92MVfq
TLSH
T169F3E2B252648EA3EEC90933BC572548B2DD334902C1736E25753B366A7D8AB5F70327
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/level0

SHA256 898f50630b8f8ce59762351787db13ca442d1512deeaf7d0ed3b972b9e03aff1
MD5 0f480d60e738908a9f0964da752718d5
SHA1 bdf6d5ed515b1a3a938ffdaba1df1ad135d3c837
SHA512 7433ce78b1e110645712e11bba6e1297a743eae8c8976ee65155d0877b3bd9659f2e31beac0a46b1e563a8de7303eac732cb1beb0ae9cc7cf7732ed171cd60c2
SSDEEP 24576:bw5DxFcrVXytT4/H/IqDCea4sGOiTV8FinV8v:bSd4By6/fIqDna4o
TLSH
T1F3266162AB629A9FC838733309D70F98E332C6558B7EA3771335615C5EE63DE0E42194
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/resources.assets

SHA256 5a97b4d8b46bee345ad3ad0a4cd679c09c2be60b7b82961f1aea56e89bff4da5
MD5 bc21166069cada82992007fad3de9836
SHA1 2ab16470feb5fb3e9a2d3d529fdb7a95cf4ebba2
SHA512 6816869e39dabcf304ed9ecec0c376c09ba76c31d7f91516df911f54dc88461aa206c3b3f2be372b297ea76cfb9c166523f723ad164616327d74f60605f9a2b5
SSDEEP 786432:BGFD7WT4rJlGJoLvTgF/IYMoHTm3K2HTqT04E23jz57f:BGFDTlGJoLboAYMozclqTZEwj97f
TLSH
T112C78D24E213465AC835733751AB8F28FB34CE959ABD2B375234B62C3CF63582AC61D5
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/resources.assets.resS

SHA256 3e4236dd28028edfdfe484e83ae6857b491aa97e73ec6f42de1863cce581486f
MD5 eda5e166f6a355058c0f103b56072c28
SHA1 5b906fa9f009efa1c7d855ee7bfe657b440c7c7f
SHA512 a1b5f994a3be10e6dddfe1d30eb497c466b86f9a5d185a7a82e511a33f5fe878eb35713de21ce63c48091f313969a4137e8b3a2d56fc067308bbf962586e4d11
SSDEEP 393216:3sqqcnT2olQqpaS0bmg16J51V95GWsYvUZIvqXw1ld7LGoqZy14kpPBBEImT+GCZ:cWn1umg1kbHNsYlqVT+D
TLSH
T187F74D8F68B6D129C5D4D53AECBEC0A8C9DA3F209910179331C6FF9B6436923C5B9E44
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/resources.resource

SHA256 8e6f7567f4740e1c8f960866764925f234d42541e3c974eed5b449db71770d07
MD5 2395b0ff8fb2eb10354126175c72f526
SHA1 08da1ebc6bb485a3fb35ceec75075e6926caceb2
SHA512 564ef7add9ba66274934d8ace4db210e4a32c7d32dc142041abfbc8ade089e9051123bf00f257fa7316c7973202c3c8ca854de6f4c74d3e97f4806faad1e49ee
SSDEEP 786432:wj9xUsl3fADkPbIzTm6juu0TZoUBxzBxy4H9zUgZ4S:yRYIPGmFNlNNH9j2
TLSH
T1A9973357DE8E5EE2C084193155BB3B423378D5A553B01B1B1BBA627CECBE3049D2E98C
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/sharedassets0.assets

SHA256 a8cc5c58de47c19955cc6b75e7e54b121237a93e553ca73b26f736a8d9d83b9d
MD5 32ed5d590b1be7438578a97b15dbd676
SHA1 021956681ce76c42732f27e642a623fcfb506b49
SHA512 bff4ad306f7d98a95637340c6ce7e61da11510241108ee612c414c322cfe46db5be5a42acea807895c9a6bffef57ce0343e42ce037f3d8531da88d1724c405a2
SSDEEP 1572864:JrzaobBpKcRkm+dVee4eoetuKVmW6mYPXEsoYBAZstzr1:JnaobBpKcRkm+dVee4eoetuKVmW6meX9
TLSH
T17408BE20D257592AC932B73B40334E29F769CE908AED1F7355397A3C3CEB3581AC2695
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/sharedassets0.assets.resS

SHA256 1a0bbdbbb9d20b55692d53555cb047b97cd0b5835077b6c50556486c98e54fa9
MD5 69eae1d96b7ad99fa04c7c260f156c25
SHA1 7f883d28e192160db96e28e9753d7b28f7560401
SHA512 d9cc877879ef5d2897b19332fbe57d2f0c4cacb6fdf53caab1fbddfd8893fdff3d1375bbcc6381719a1b6aafadd4157f75535047693ac245b3631e0e987b8019
SSDEEP 1572864:Syc+3dSBfs/q3HyjiipgoNPbUYHadNKFNDJYkcT:Sy1dOs/UlipXzlNDrU
TLSH
T145487C17241DC048C4191C34895EF1F5E2F67C71C865636B74ECBFCBB6779208AAEAA8
MD5 SHA1 SHA512 SSDEEP TLSH

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/sharedassets0.resource

SHA256 77f2eccde98799af99d89e9a178d5fb763ea7c0722addae0eb5db00696fe935e
MD5 8ad547d2bd7269c4dac9480fffc05e51
SHA1 f4ff6fc3d609d15622aa49fd015b86167199a21f
SHA512 8b2011abf3fa04aaf666273b34e21eb90927d828edba0198c9278db700232c74d51bf9d703dcf4a61c55167fdc372f3a0791dca2377578bc893bdb9d217352d4
SSDEEP 24576:s3vV+o9MbDhA6yr+FTXYocPXHvy0/WjLcUEyqS9g5ebfYfMp3qN:eN+o9MbNAd+FTXOPXvh/KBEyqSGebQ/
TLSH
T1DD5523A0DD834ECBC1211A399B691F63B636E1C0BA03667F62A0F63DFCC7712D666454
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Escape from the Abandoned Hospital with an Emotionless Girl.rar

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Config.ini

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/GalleryLabels.txt

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/ManualTranslations.txt

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_AutoGeneratedTranslations.txt

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_Postprocessors.txt

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_Preprocessors.txt

Escape from the Abandoned Hospital with an Emotionless Girl/AutoTranslator/Translation/en/Text/_Substitutions.txt

Escape from the Abandoned Hospital with an Emotionless Girl/game.exe

hid

kernel32

user32

version

ole32

shlwapi

advapi32

gdi32

shell32

opengl32

winmm

ws2_32

oleaut32

imm32

dnsapi

iphlpapi

winhttp

generic

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/0Harmony.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-CSharp-firstpass.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-CSharp.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Assembly-UnityScript-firstpass.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Boo.Lang.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/ExIni.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Mono.Cecil.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Mono.Security.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/MonoMod.RuntimeDetour.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/MonoMod.Utils.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/ReiPatcher.exe

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/System.Core.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/System.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BaiduTranslate.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BingLegitimateTranslate.dll

mscoree

dotnet

Escape from the Abandoned Hospital with an Emotionless Girl/game_Data/Managed/Translators/BingTranslate.dll

mscoree

dotnet