wraithUpdated+bugfix.zip
- SHA256 e08ad47a1e07d62569ae14027b5dec316f5116b6a1caf29ad98e88ea9210c1b2
Overview
overview
3Static
static
3wraithUpda...ix.zip
windows10-2004-x64
1wraithUpda...ix.zip
windows11-ltsc_2024-x64
1build/VMPr...64.dll
windows10-2004-x64
1build/VMPr...64.dll
windows11-ltsc_2024-x64
1build/Wraith.exe
windows10-2004-x64
1build/Wraith.exe
windows11-ltsc_2024-x64
1build/Wraith.pdb
windows10-2004-x64
3build/Wraith.pdb
windows11-ltsc_2024-x64
3build/conf...ls.cfg
windows10-2004-x64
3build/conf...ls.cfg
windows11-ltsc_2024-x64
3build/configs/sd.cfg
windows10-2004-x64
3build/configs/sd.cfg
windows11-ltsc_2024-x64
3build/configs/wat.cfg
windows10-2004-x64
3build/configs/wat.cfg
windows11-ltsc_2024-x64
3build/conf...22.cfg
windows10-2004-x64
3build/conf...22.cfg
windows11-ltsc_2024-x64
3build/lua53-64.dll
windows10-2004-x64
1build/lua53-64.dll
windows11-ltsc_2024-x64
1build/offsets.json
windows10-2004-x64
3build/offsets.json
windows11-ltsc_2024-x64
3build/offsets.version
windows10-2004-x64
3build/offsets.version
windows11-ltsc_2024-x64
3build/scri...ab.lua
windows10-2004-x64
3build/scri...ab.lua
windows11-ltsc_2024-x64
3build/scri...le.lua
windows10-2004-x64
3build/scri...le.lua
windows11-ltsc_2024-x64
3build/scri...le.lua
windows10-2004-x64
3build/scri...le.lua
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wraithUpdated+bugfix.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
wraithUpdated+bugfix.zip
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
build/VMProtectSDK64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
build/VMProtectSDK64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
build/Wraith.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
build/Wraith.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
build/Wraith.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
build/Wraith.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
build/configs/hood_rivals.cfg
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
build/configs/hood_rivals.cfg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
build/configs/sd.cfg
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
build/configs/sd.cfg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
build/configs/wat.cfg
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
build/configs/wat.cfg
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
build/configs/wat22.cfg
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
build/configs/wat22.cfg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
build/lua53-64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
build/lua53-64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
build/offsets.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
build/offsets.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
build/offsets.version
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
build/offsets.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
build/scripts/example_lua_tab.lua
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral24
Sample
build/scripts/example_lua_tab.lua
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral25
Sample
build/scripts/lua_example.lua
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral26
Sample
build/scripts/lua_example.lua
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral27
Sample
build/scripts/ui_example.lua
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
build/scripts/ui_example.lua
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target wraithUpdated+bugfix.zip
- Size 9.4MB
- Sample260826-add3msbc33
- SHA256 e08ad47a1e07d62569ae14027b5dec316f5116b6a1caf29ad98e88ea9210c1b2
- MD5 f67357f198a0161eefcf86fb3428ed24
- SHA1 5ea2f4e67afd55a613b29d3fbc535196ff70d8fa
- SHA512 7b81e9a7c768675ae7fcbd668324be0059d41485cfaa83cfd0263a848fc5be5ffd60febb94a43a3b435c29e6a30e118ca00c6ce5e240da3534c0a5448c98e6f7
- SSDEEP 196608:FTsEDZQIjrJiUVKnUStDY4oTVlgPDiMVx7oLUGwwlpS2EJub5tj22:KqQEJiUVPStDYxIPDv7fGlptEJGj22
- TLSH T1C8A63359E45B472AEEA0BDDF807269E7C015FBA7AC3205C43D81F8762211761EA8C53F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/build/VMProtectSDK64.dll unpack001/build/Wraith.exe
File Explorer
-
wraithUpdated+bugfix.zip.zip 9.4MB
-
build/VMProtectSDK64.dll.dll 115KB
-
build/Wraith.exe.exe 11.1MB
-
build/Wraith.pdb25.7MB
-
build/configs/hood_rivals.cfg8KB
-
build/configs/sd.cfg8KB
-
build/configs/wat.cfg8KB
-
build/configs/wat22.cfg8KB
-
build/lua53-64.dll.dll 1.1MB
-
build/offsets.json7KB
-
build/offsets.version24B
-
build/scripts/example_lua_tab.lua383B
-
build/scripts/lua_example.lua545B
-
build/scripts/ui_example.lua787B
build/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
- MD5 c0ce8c981bda19d2be17aca0774d9df1
- SHA1 895052a42efa50043f473f072578bee69be8d2f8
- SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
- SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
- TLSH T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
build/Wraith.exe
- IMPHASH 753d7c409e63e2715118a48aed19fa97
- SHA256 a54c6e56dc1b1af8b782e99919b9181d06f3ddc305fe6eca9d4ee2edd177bda4
- MD5 5d9266bb4e5b796b656d278e26b5e632
- SHA1 36a5199ef768a4276852af400053b870c70c9e05
- SHA512 73f2f0e88338872fd0effe75e386633d2893ca0dfeca49e61d55c227b9e0f4c79ecd73a41fc53511a701c80c9fe28a1d52b61434dda608e5852cb5c05b856721
- SSDEEP 49152:kd4vGl74u52sHQIIFWzQFeIbuvzwXfXZtrUwZoMrm+M3mrCdzvnK3:44vGlsu5tpqxZFrKz
- TLSH T121C663E4F1262BA4E437FD75641D7579839A5900FB39E03788FEEF2222B4DB404253A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2146672
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\jerom\OneDrive\Desktop\fragment\fragment\build\Wraith.pdb
winhttp
WinHttpReceiveResponse
WinHttpOpen
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
WinHttpReadData
kernel32
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleFileNameA
GetFileAttributesW
SetFileAttributesW
GetModuleFileNameW
LoadLibraryW
GetTickCount64
WriteProcessMemory
GetModuleHandleW
SetLastError
GetLastError
GetSystemInfo
VirtualProtectEx
VirtualAllocEx
FlushInstructionCache
VirtualFreeEx
VirtualQueryEx
SetConsoleTitleA
OutputDebugStringA
GetWindowsDirectoryA
GetConsoleWindow
GetProcessVersion
Process32First
Module32Next
GetProcessId
Module32First
OpenProcess
CreateToolhelp32Snapshot
Process32Next
CloseHandle
GetExitCodeProcess
SetConsoleScreenBufferSize
GetStdHandle
SetConsoleMode
GetModuleHandleA
SetConsoleWindowInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
WriteConsoleA
GetLocalTime
CreateFileA
GetFileSizeEx
ReadFile
HeapAlloc
HeapFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
Sleep
LocalFree
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFinalPathNameByHandleW
SetFileInformationByHandle
GetTempPathW
CreateFile2
AreFileApisANSI
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeSListHead
GetFileInformationByHandleEx
GetSystemTimeAsFileTime
GetCurrentThreadId
InitOnceComplete
InitOnceBeginInitialize
GetCurrentProcessId
SetUnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
SetCurrentConsoleFontEx
ReleaseSRWLockExclusive
user32
IsWindowVisible
EnumWindows
PostMessageA
DefWindowProcW
MonitorFromPoint
DispatchMessageA
DestroyWindow
SetWindowPos
GetSystemMetrics
GetClassNameA
SetWindowLongA
SetWindowDisplayAffinity
CreateWindowExA
SetLayeredWindowAttributes
TranslateMessage
IsWindowUnicode
PeekMessageA
UnregisterClassA
PostQuitMessage
FindWindowA
RegisterClassExA
UpdateWindow
SetForegroundWindow
ShowWindow
PostMessageW
GetWindowThreadProcessId
IsWindow
SendInput
GetAsyncKeyState
OpenClipboard
CloseClipboard
GetWindow
LoadIconA
EmptyClipboard
GetClipboardData
SetClipboardData
GetKeyState
GetMessageExtraInfo
LoadCursorA
SetProcessDPIAware
GetClientRect
SetCursor
SetCapture
GetCursorPos
GetForegroundWindow
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
GetDC
SetCursorPos
ReleaseDC
ReleaseCapture
gdi32
CreateSolidBrush
GetDeviceCaps
comdlg32
GetOpenFileNameW
shell32
ShellExecuteW
ole32
CoInitializeEx
CoCreateInstance
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
msvcp140
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_unregister_at_thread_exit
??0task_continuation_context@Concurrency@@AEAA@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
_Cnd_broadcast
?__ExceptionPtrToBool@@YA_NPEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??7ios_base@std@@QEBA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
__crtLCMapStringA
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Xlength_error@std@@YAXPEBD@Z
_Strxfrm
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
_Xtime_get_ticks
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Query_perf_counter
_Thrd_join
_Mtx_unlock
?_Winerror_map@std@@YAHH@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Thrd_detach
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?uncaught_exceptions@std@@YAHXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Random_device@std@@YAIXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
msvcp140_atomic_wait
__std_atomic_wait_direct
__std_atomic_notify_all_direct
urlmon
URLDownloadToFileA
d3d11
D3D11CreateDeviceAndSwapChain
wininet
InternetGetCookieA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__current_exception_context
__intrinsic_setjmp
_CxxThrowException
memset
memmove
memcpy
longjmp
memcmp
__C_specific_handler
_purecall
__RTtypeid
__std_type_info_compare
__std_exception_copy
strchr
strstr
__std_terminate
__RTDynamicCast
strrchr
memchr
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fputc
fgetc
_get_stream_buffer_pointers
_fseeki64
fgetpos
fsetpos
__p__commode
__stdio_common_vsscanf
fread
_set_fmode
__stdio_common_vsprintf
_wfopen
fwrite
setvbuf
__stdio_common_vsnprintf_s
fseek
fclose
fflush
__acrt_iob_func
ftell
ungetc
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
_set_new_mode
realloc
free
malloc
api-ms-win-crt-convert-l1-1-0
strtod
strtol
strtoll
atoi
strtof
strtoull
atof
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
toupper
strlen
wcslen
isalnum
isblank
isspace
strncpy_s
tolower
isxdigit
isdigit
strncpy
wcscpy_s
_stricmp
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
__p___argv
__p___argc
_exit
exit
_initterm_e
_initterm
abort
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_errno
_c_exit
_crt_atexit
_beginthreadex
_initialize_onexit_table
terminate
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function
api-ms-win-crt-math-l1-1-0
atanf
nearbyint
ceilf
cosf
lroundf
_fdsign
_ldsign
expf
round
atan2f
floorf
fmodf
llround
logf
__setusermatherr
powf
roundf
sinf
sqrtf
_dsign
tanf
acosf
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-locale-l1-1-0
___lc_collate_cp_func
_configthreadlocale
localeconv
___lc_codepage_func
___lc_locale_name_func
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8.8MB
Virtual Size
8.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=257, version=35721,
count=1, id=253, version=35721,
count=6, id=259, version=35721,
count=10, id=260, version=35721,
count=47, id=261, version=35721,
count=1, id=260, version=33145,
count=27, id=257, version=33145,
count=493, id=1, productName=Unmarked objects,
count=26, id=260, version=31107,
count=69, id=265, version=36256,
count=1, id=259, version=36252,
count=1, id=255, version=36256,
count=1, id=258, version=36256,
build/Wraith.pdb
- SHA256 6243a0691e82561dfa08ea84c331bbc0d9131e3dd7fe6c5b9dc5998309142624
- MD5 d94c64ff093c3c842b8c000a8c0a3909
- SHA1 b6e2a41ae5e94e57b0827e15b45fe56bb8a2887d
- SHA512 b9d343c41b1236bef42d1c48c013c78099d4ecb516853f4f2198bdfb0ea2d944965300ae2e15d3f5c9dac12910e9f10f455079beacd8dc92d349ab3315ec6e7c
- SSDEEP 98304:BkKfUjCeBNG87FNMenYPMX5AWsyMISzkLP6VFUQNAzLFD411I+SnOTffco9w1kyP:zbFn6n5r375o0y+TC7xcP
- TLSH T1884708A1B2A14913C8BF2775909B171C33669846FFCE6B87454FA2284CC239CDF5F986
- MD5 SHA1 SHA512 SSDEEP TLSH
build/configs/hood_rivals.cfg
- SHA256 0b7c07744e4d8da1c07ab25161fe916f3a94e532fc9bd05a5b8f9ba587651f38
- MD5 e5aee4fd4759eb51923e11f8a1ddc33c
- SHA1 65ba5a49a3bc91a3c23fbada0bff676d1068861b
- SHA512 be46a3c0810faab01fb3eda59b43796f23f23b4506c29bb9869d18d1ee358a7017e35780f2a51339107461f93143ac7c71a18c33f168eaa5683b77c3d68a9661
- SSDEEP 192:YgMShFT4PihyPQk/J8vCDISrejJrOTvVofC9Absv8ytPCgMf5K4qRETRq7kJg/TR:IS4JJAGBCzf5K4qRETRq7kJg/TVy1MMW
- TLSH T18902EE31D790A4DB45BBA9BD81BCFE0C46F407D5292A7B23B69CC02D2E87646748F41C
- MD5 SHA1 SHA512 SSDEEP TLSH
build/configs/sd.cfg
- SHA256 6f643f599bc1087c952f412dffc024f43493af036badbd7afb6bed3572dbfe21
- MD5 2a3fa942383fe88f72414e658ec877c5
- SHA1 228d6a719522819e6ca91bda226b79fec0c5106f
- SHA512 b97e35ce6b0b89a20f6b49398a0d6ab2b335959fc174b5ab25acf8b8b07841b05bb9bba4fbd55785f66d6562b13f8dc8619a2e9854de756d09300613700d2ae8
- SSDEEP 192:sgMSmFT4PihcHPQkMTCDISrejLrOTvVofC9Assv8ytPCgMf5K4qRETRq7kJg/TVj:MSjfJA7BCzf5K4qRETRq7kJg/TVy1MMW
- TLSH T1E102ED21D790A4DF45BBA9BD81BCFE0C46F407D5292A7B23B69CC02D2E87682748F41C
- MD5 SHA1 SHA512 SSDEEP TLSH
build/configs/wat.cfg
- SHA256 247abe6e07a5c3a1ddb06ceae19d07d882e81a817ecd2b837468c04eeeaf21a5
- MD5 6be9e25625936b883256152d1808f268
- SHA1 bc7ba8ebf366afcf91874bd3dbc32db105290a05
- SHA512 8faefccb4fa661556ca5d32de58d849262008d5db0d6204eb72b5d7417e0f99d1b13312f7147c117acee5d83cbe98054f7cc81306d54bc3b37ea6dd2d08c83f8
- SSDEEP 192:TgMSmFTlrihTPQk/JTCDISrejLrOTvVriC9Absv8ytUBCgMf5K4qRETRq7kJg/TR:jSuzTAGeCzf5K4qRETRq7kJg/TVy1MMW
- TLSH T10302EE21D790A4DF45BBA9BD81BCFE0C46F407D5292A7B23B69CC02D2E87642748F41C
- MD5 SHA1 SHA512 SSDEEP TLSH
build/configs/wat22.cfg
- SHA256 e53e5feb26371ce2fed77793c390fb6222f0fa4cdf8230efb0a03e9a2cce5aee
- MD5 af2584efab3d9ff23d2ee3f61caf5d4b
- SHA1 ca8279f5fb45398788a4fad889b6487ab94648b5
- SHA512 6971fdd4e1be7841ad9d9572d289598f374bdd283c80fe0198d0752c2b452d402f0bed64b68f9659f8585e76e8fc7f3e32883d9434acafee51fb74913ed79aea
- SSDEEP 192:sgMSmFT4PihcCPQk/JTCDISrejJrOTvVofC9Absv8ytPCgMf5K4qRETRq7kJg/TR:MSjHJAGBCzf5K4qRETRq7kJg/TVy1MMW
- TLSH T12B02ED21D790A4DF45BBA9BD81BCFE0C46F407D5692A7B23B69CC02D2E87682748F41C
- MD5 SHA1 SHA512 SSDEEP TLSH
build/lua53-64.dll
- IMPHASH 05545aa845d751a39d411a0cc7ef6dec
- SHA256 436f6bf9ac414e7e7259bef4f6e287702a41e1fddbdd9af7d43350d47539a3c9
- MD5 b2d53e47d838cf917f90a9a6977c31e0
- SHA1 7189c2dc9aa6136ca5f210b5ebd242d3491a91fe
- SHA512 1efe3b14d7eac03ad7f2286ca42fbe235481195fa5906b3068dd97d4b4f5b2f9517cdcd78b6907794f6d2979944899ec97dcaae495077282b791260c41aaffe4
- SSDEEP 24576:Px5ACjuRUvIY5cfisR23K16TpoJol/nj30sIcqqD7FE5sF8+:PgCYUG2uCFwsT
- TLSH T1EC45493432A810A6D17AC17DC84B4BA6DDB0300A573C55FB5195C6E4AF237EC2B7EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5b:ec:d1:32:4d:23:34:b2:1a:c9:0c:98:7e:de:a9:72:59:a2:91:b4:14:f5:9b:e9:35:a7:5f:64:b5:a3:4e:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 18, 2025
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Digest
94:5e:b9:59:f4:e4:47:07:ae:5a:0d:1c:48:fd:c2:0d:e8:38:11:99
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 18, 2025
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=50212036,CN=Cheat Engine EZ,O=Cheat Engine EZ,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
49:65:cf:96:a5:44:99:8c:47:68:a7:30
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 18, 2024 - Sep 4, 2026
Subject
CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE
Serial Number
01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 2, 2023 - Dec 4, 2034
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
2
Major OS version
5
Entry point
454627
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\git\cheat-engine\Cheat Engine\bin\lua53-64.pdb
kernel32
FreeLibrary
GetProcAddress
GetLastError
FormatMessageA
LoadLibraryExA
GetModuleFileNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateThread
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RtlPcToFileHeader
QueryPerformanceFrequency
ReadFile
CloseHandle
DuplicateHandle
CreateProcessA
CreateProcessW
GetTempPathW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetACP
HeapReAlloc
SetConsoleCtrlHandler
SetFilePointerEx
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
CreatePipe
CreateFileW
GetStringTypeW
GetTimeZoneInformation
DeleteFileW
MoveFileExW
GetCPInfo
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
WriteConsoleW
HeapSize
SetEndOfFile
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
RtlUnwind
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushmodule
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_compat
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resume
lua_rotate
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove
lua_yieldk
luaopen_base
luaopen_bit32
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8
Name
.textbss
Size
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
899KB
Virtual Size
899KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.msvcjmc
Size
512B
Virtual Size
492B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
283B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=241, version=40116,
count=187, id=243, version=40116,
count=34, id=242, version=40116,
count=1, id=199, version=41118,
count=37, id=261, version=26706,
count=18, id=260, version=26706,
count=11, id=259, version=26706,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=107, id=1, productName=Unmarked objects,
count=36, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=256, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,
count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,
build/offsets.json
- SHA256 f73209e8e0bb7aab8e49651b7586252a42d1c42439f42018196a9eba9c1648f1
- MD5 bc63ffc3bb7807ba7e239d8ce84e64cb
- SHA1 2fc9ee52d33f7d073d3f718c57cb9c8333e0943f
- SHA512 92980aee9776f9a5e2705d89a99198e81f6c7e12972af310d6aa40c43aa6fc614762d7a56e91bee86a877213818a401eacfb5a15cd976045f356cea02d9cb650
- SSDEEP 192:uuNNdpCNgjleP+z6RRQQyGYJ7jwAgtAzKU:uuLdhNuRQQyGYJ70AgkKU
- TLSH T10DF18440AFA57DBA1C2AF7751A6F75839CBB747552074F99B0ECC20C20C856E3649A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
build/offsets.version
- SHA256 144f1ed5e59fc906fe352e9abf49aa0a1a120447b5676d7823f4ed5e2660f898
- MD5 0d1537c920aea30bdac9cadb63dd43d2
- SHA1 116d1b8f0c8367360feb72818f34fce51fa016fe
- SHA512 9c863d230aeefa3175fb6f6529247bea76611750c9137403510b71972be3f7be7289eb6ceab617cf36067ca53ca884dfea9c9ca052e06d923cb8ae004a72cc0a
- MD5 SHA1 SHA512
build/scripts/example_lua_tab.lua
- SHA256 03fc1c6160630b267119de4cfe0fc0f24d5703dcd02c1f71a2bfd58691f4246b
- MD5 75eb2ba06ba288940f270f346c3dd63d
- SHA1 92b6982c54da25d8ca8aa546a8dd05ce394568d9
- SHA512 3c7afa91a3c1031fd5cb14c75d32121a81b52ddd4fceae85dbeb3fb419ec65e5e1cc283593cb5a31a4e680a4528c8e4fd0d0a12d8509baff52aae1bd233924e7
- TLSH T188E0D89FB75148AF44A1C1015E540546483D97630E090739A48E4C74565FEC0FF57E36
- MD5 SHA1 SHA512 TLSH
build/scripts/lua_example.lua
- SHA256 540d90f71ac8cc026797a8107fdaf51a722fac93b1ff9547ee069e78cd00ce7f
- MD5 03b7b275897680a7c0df8e33f63a06a7
- SHA1 6f8d75fbe2e9a6bd0f0cf105cd0a28a3cd7b2b16
- SHA512 37cdb8854a9c0f95b4ddc6fc1fc99078a2586ede41a613dcce9743f9d774727c38424f4c6967d88c121063fb12be257911574ee5a9c053b51854924ecc3317bd
- TLSH T1D0F0240E1B671C1C7E69A5C08D117006326F040FC0A8B350F29C2A0C2AAB72EB6E753F
- MD5 SHA1 SHA512 TLSH
build/scripts/ui_example.lua
- SHA256 2af9de9bbb1137605df69a26a5a302d0f297051ddf5f1aeade03672692ebe64c
- MD5 7f23c411591631a9e347de093bb183c4
- SHA1 75bd4ed36bcdf701b77160b72e2162e3b7eef4d0
- SHA512 068cb8a514b61bed4dd49a798bb16307948dbaaec413481368342bf1e566db819de91bbc500900cd1c59e6bef814332e9365edbb6c51e32d315cdc623ad0a31a
- TLSH T1F8012DDAA25609AF5DF5E1035F810907567E870B0D190335F98A4878265ECD0FEE7F39
- MD5 SHA1 SHA512 TLSH