Gamble-With-Your-Friends-SteamRIP.com.rar
- SHA256 b24a8364246ceeb03b169b5bfe7030d5219e9e3db17c8f6c7472a01397229359
Overview
overview
3Static
static
3Gamble-Wit...om.rar
windows10-2004-x64
1Gamble-Wit...om.rar
windows11-ltsc_2024-x64
1Gamble Wit...re.dll
windows10-2004-x64
1Gamble Wit...re.dll
windows11-ltsc_2024-x64
1Gamble Wit...ds.exe
windows10-2004-x64
1Gamble Wit...ds.exe
windows11-ltsc_2024-x64
1Gamble Wit...ly.dll
windows10-2004-x64
1Gamble Wit...ly.dll
windows11-ltsc_2024-x64
1Gamble Wit...ss.dll
windows10-2004-x64
1Gamble Wit...ss.dll
windows11-ltsc_2024-x64
1Gamble Wit...rp.dll
windows10-2004-x64
1Gamble Wit...rp.dll
windows11-ltsc_2024-x64
1Gamble Wit...en.dll
windows10-2004-x64
1Gamble Wit...en.dll
windows11-ltsc_2024-x64
1Gamble Wit...dk.dll
windows10-2004-x64
1Gamble Wit...dk.dll
windows11-ltsc_2024-x64
1Gamble Wit...ck.dll
windows10-2004-x64
1Gamble Wit...ck.dll
windows11-ltsc_2024-x64
1Gamble Wit...ng.dll
windows10-2004-x64
1Gamble Wit...ng.dll
windows11-ltsc_2024-x64
1Gamble Wit...ip.dll
windows10-2004-x64
1Gamble Wit...ip.dll
windows11-ltsc_2024-x64
1Gamble Wit...ty.dll
windows10-2004-x64
1Gamble Wit...ty.dll
windows11-ltsc_2024-x64
1Gamble Wit...ce.dll
windows10-2004-x64
1Gamble Wit...ce.dll
windows11-ltsc_2024-x64
1Gamble Wit...me.dll
windows10-2004-x64
1Gamble Wit...me.dll
windows11-ltsc_2024-x64
1Gamble Wit...me.dll
windows10-2004-x64
1Gamble Wit...me.dll
windows11-ltsc_2024-x64
1Gamble Wit...ks.dll
windows10-2004-x64
1Gamble Wit...ks.dll
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Gamble-With-Your-Friends-SteamRIP.com.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gamble-With-Your-Friends-SteamRIP.com.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Gamble With Your Friends/D3D12/D3D12Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Gamble With Your Friends/D3D12/D3D12Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Gamble With Your Friends/Gamble With Your Friends.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Gamble With Your Friends/Gamble With Your Friends.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/AllIn1SpriteShaderAssembly.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/AllIn1SpriteShaderAssembly.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DOTween.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DOTween.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Discord.Sdk.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Discord.Sdk.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Playback.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Playback.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Recording.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Recording.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceVoip.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceVoip.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnity.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnityResonance.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnityResonance.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Demo.Runtime.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Demo.Runtime.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Runtime.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Runtime.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FizzySteamworks.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FizzySteamworks.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Gamble-With-Your-Friends-SteamRIP.com.rar
- Size 605.3MB
- Sample260826-vabtbssfpc
- SHA256 b24a8364246ceeb03b169b5bfe7030d5219e9e3db17c8f6c7472a01397229359
- MD5 143528107580c79fb3c915a4f625e2d1
- SHA1 9201a993675d1b100eb55dd4b96ec5e1aed04313
- SHA512 00326f16ae5e1a112a408d2287f47ab8d2da2fb6052c0238d6d9cbc88f34a6e0d162ffcdc7755e3240c1612cd87fcebf89c55d7fd5bd3aa5b383caf1d06b50a7
- SSDEEP 12582912:zRD09OZqRC3/aMr5TlkzHYu24t5UqmPQX6gxko+vOs86s3oWF9thgbwV:QOIwbVTl4Yu24T0Pg6hvOthP9thowV
- TLSH T1B469336376173628FC13647742EDDD7696E2F9D20A9010CF784428726E417CEBAAFE21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 48 IoCs
Checks for missing Authenticode signature.
resource unpack001/Gamble With Your Friends/Gamble With Your Friends.exe unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/AllIn1SpriteShaderAssembly.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp-firstpass.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DOTween.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Discord.Sdk.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Playback.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Recording.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceVoip.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnity.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnityResonance.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Demo.Runtime.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Runtime.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FizzySteamworks.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Gilzoide.UpdateManager.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Lofelt.NiceVibrations.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Masking.Runtime.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirage.Profiler.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Authenticators.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.BouncyCastle.Cryptography.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Components.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Transports.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mono.Security.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/MoreMountains.Tools.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Newtonsoft.Json.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesRuntime.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesSamples.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SimpleWebTransport.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.OdinInspector.Attributes.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Serialization.Config.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Serialization.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Utilities.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SkyBraveToolkitScripts.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/StompyRobot.SRDebugger.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/StompyRobot.SRF.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.ComponentModel.Composition.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Configuration.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Core.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Data.DataSetExtensions.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Data.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Drawing.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/com.rlabrecque.steamworks.net.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/kcp2k.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/mscorlib.dll unpack001/Gamble With Your Friends/Gamble With Your Friends_Data/Managed/netstandard.dll unpack001/_CommonRedist/VisualCppRedist_AIO_x86_x64.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/_CommonRedist/dotNetFx40_Full_setup.exe unpack001/_CommonRedist/oalinst.exe
File Explorer
-
Gamble-With-Your-Friends-SteamRIP.com.rar.rar 605.3MB
-
Gamble With Your Friends/D3D12/D3D12Core.dll.dll 4.5MB
-
Gamble With Your Friends/Gamble With Your Friends.exe.exe 652KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/AllIn1SpriteShaderAssembly.dll.dll 32KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp-firstpass.dll.dll 115KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp.dll.dll 1.5MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DOTween.dll.dll 173KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Discord.Sdk.dll.dll 164KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Playback.dll.dll 16KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Recording.dll.dll 10KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceVoip.dll.dll 328KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnity.dll.dll 227KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnityResonance.dll.dll 11KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Demo.Runtime.dll.dll 8KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Runtime.dll.dll 81KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FizzySteamworks.dll.dll 36KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Gilzoide.UpdateManager.dll.dll 36KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Lofelt.NiceVibrations.dll.dll 18KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Masking.Runtime.dll.dll 31KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirage.Profiler.dll.dll 13KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Authenticators.dll.dll 31KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.BouncyCastle.Cryptography.dll.dll 6.5MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Components.dll.dll 172KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Transports.dll.dll 93KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.dll.dll 222KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mono.Security.dll.dll 235KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/MoreMountains.Tools.dll.dll 1.4MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Newtonsoft.Json.dll.dll 675KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesRuntime.dll.dll 373KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesSamples.dll.dll 24KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SimpleWebTransport.dll.dll 47KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.OdinInspector.Attributes.dll.dll 103KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Serialization.Config.dll.dll 17KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Serialization.dll.dll 340KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Utilities.dll.dll 147KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SkyBraveToolkitScripts.dll.dll 39KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/StompyRobot.SRDebugger.dll.dll 153KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/StompyRobot.SRF.dll.dll 84KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.ComponentModel.Composition.dll.dll 251KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Configuration.dll.dll 122KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Core.dll.dll 1.1MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Data.DataSetExtensions.dll.dll 29KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Data.dll.dll 2.0MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Drawing.dll.dll 283KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.dll.dll 2.5MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/com.rlabrecque.steamworks.net.dll.dll 415KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/kcp2k.dll.dll 37KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/mscorlib.dll.dll 4.4MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/netstandard.dll.dll 88KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/app.info33B
-
Gamble With Your Friends/Gamble With Your Friends_Data/boot.config183B
-
Gamble With Your Friends/Gamble With Your Friends_Data/globalgamemanagers3.3MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/globalgamemanagers.assets27.3MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/globalgamemanagers.assets.resS5.5MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level039KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level158KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level10526KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level10.resS142KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level1183.2MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level11.resS307.4MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level122.7MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level12.resS6.2MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level1363KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level234KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level34.1MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level3.resS16.7MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level47.1MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level4.resS32.5MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level510.3MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level5.resS30.9MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level683.6MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level6.resS307.4MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level74.1MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level7.resS12.6MB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level87KB
-
Gamble With Your Friends/Gamble With Your Friends_Data/level99.9MB
-
Gamble With Your Friends/dlllist.txt35B
-
Read_Me_Instructions.txt2KB
-
STEAMRIP » Free Pre-installed Steam Games.url219B
-
_CommonRedist/VisualCppRedist_AIO_x86_x64.exe.exe 30.1MB
-
_CommonRedist/_redist_readme.txt1KB
-
_CommonRedist/dotNetFx40_Full_setup.exe.exe 868KB
-
_CommonRedist/dxwebsetup.exe.exe 288KB
-
_CommonRedist/oalinst.exe.exe 790KB
-
_CommonRedist/xnafx40_redist.msi.msi 6.7MB
Gamble With Your Friends/D3D12/D3D12Core.dll
- IMPHASH 71cad8b75cab38b26d12bef65aab8956
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6a:8e:02:c4:ad:51:35:a0:79:be:00:fd:1d:0b:3c:d1:28:5d:ed:cb:cf:09:5d:8d:28:81:ce:2a:e8:d8:e3:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 23, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
1466320
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\build\windows\x64\D3DCore\LinkDLL\MobileCore\RelWithDebInfo\D3D12Core.pdb
api-ms-win-core-libraryloader-l1-2-0
FreeLibraryAndExitThread
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryExA
GetModuleHandleW
api-ms-win-core-synch-l1-1-0
ReleaseSemaphore
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
ReleaseSRWLockShared
EnterCriticalSection
CreateMutexW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventA
SetEvent
TryEnterCriticalSection
CreateSemaphoreExW
InitializeCriticalSection
AcquireSRWLockExclusive
OpenSemaphoreW
ResetEvent
ReleaseSRWLockExclusive
ReleaseMutex
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
InitializeSRWLock
TryAcquireSRWLockExclusive
api-ms-win-core-heap-l1-1-0
HeapCreate
HeapCompact
HeapFree
HeapReAlloc
HeapDestroy
HeapAlloc
HeapSize
HeapValidate
GetProcessHeap
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
RaiseException
SetLastError
SetUnhandledExceptionFilter
GetLastError
api-ms-win-core-threadpool-l1-2-0
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
SetThreadpoolWait
SetThreadpoolTimer
api-ms-win-core-processthreads-l1-1-0
TlsAlloc
OpenProcessToken
TlsGetValue
TerminateProcess
GetCurrentProcess
ExitProcess
GetCurrentThread
SetThreadPriority
TlsSetValue
ExitThread
CreateThread
GetStartupInfoW
TlsFree
GetExitCodeThread
GetCurrentThreadId
GetCurrentProcessId
api-ms-win-core-localization-l1-2-0
IsValidCodePage
LCMapStringEx
GetCPInfo
EnumSystemLocalesW
GetACP
IsValidLocale
GetLocaleInfoEx
GetLocaleInfoW
LCMapStringW
GetOEMCP
FormatMessageW
GetUserDefaultLCID
FormatMessageA
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
OutputDebugStringW
DebugBreak
OutputDebugStringA
api-ms-win-core-handle-l1-1-0
CloseHandle
DuplicateHandle
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-registry-l1-1-0
RegDeleteKeyExW
RegQueryInfoKeyW
RegNotifyChangeKeyValue
RegEnumKeyExA
RegCloseKey
RegEnumKeyExW
RegFlushKey
RegGetValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
RegDeleteTreeW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryA
LoadLibraryW
api-ms-win-core-string-l1-1-0
GetStringTypeW
MultiByteToWideChar
CompareStringW
WideCharToMultiByte
api-ms-win-core-processthreads-l1-1-1
GetProcessMitigationPolicy
IsProcessorFeaturePresent
api-ms-win-core-apiquery-l2-1-0
IsApiSetImplemented
api-ms-win-core-memory-l1-1-0
VirtualFree
VirtualQuery
MapViewOfFile
VirtualAlloc
CreateFileMappingW
VirtualProtect
FlushViewOfFile
UnmapViewOfFile
api-ms-win-core-sysinfo-l1-1-0
GetSystemDirectoryW
GetSystemTime
GetSystemInfo
GetTickCount64
GetTickCount
GetSystemTimeAsFileTime
api-ms-win-eventing-provider-l1-1-0
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
api-ms-win-security-base-l1-1-0
PrivilegeCheck
AllocateLocallyUniqueId
api-ms-win-core-version-l1-1-0
VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
ntdll
RtlUnsubscribeWnfNotificationWaitForCompletion
NtCommitTransaction
RtlIsCriticalSectionLockedByThread
NtCreateTransaction
RtlGetVersion
NtClose
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
api-ms-win-service-management-l2-1-0
QueryServiceConfig2W
ChangeServiceConfig2W
api-ms-win-core-wow64-l1-1-1
IsWow64Process2
api-ms-win-core-registry-l2-1-0
RegCreateKeyTransactedW
api-ms-win-core-com-l1-1-0
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
api-ms-win-core-quirks-l1-1-0
QuirkIsEnabled
api-ms-win-core-memory-l1-1-1
GetWriteWatch
api-ms-win-core-windowserrorreporting-l1-1-1
WerUnregisterCustomMetadata
WerRegisterCustomMetadata
api-ms-win-core-version-l1-1-1
GetFileVersionInfoW
GetFileVersionInfoSizeW
api-ms-win-core-file-l1-1-0
UnlockFile
GetFileAttributesA
GetDiskFreeSpaceA
GetFileAttributesW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
GetFileAttributesExW
LockFileEx
GetFinalPathNameByHandleW
SetFilePointer
FlushFileBuffers
DeleteFileA
GetFileTime
GetDiskFreeSpaceW
GetFullPathNameW
ReadFile
CreateFileW
GetFileType
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
DeleteFileW
SetFilePointerEx
LockFile
GetFileSize
WriteFile
CreateFileA
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
api-ms-win-core-processthreads-l1-1-3
SetThreadDescription
api-ms-win-core-timezone-l1-1-0
SystemTimeToFileTime
GetTimeZoneInformation
api-ms-win-core-file-l1-2-2
AreFileApisANSI
GetTempPathA
api-ms-win-core-synch-l1-2-0
WakeAllConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
Sleep
api-ms-win-core-file-l1-2-0
GetTempPathW
api-ms-win-core-psapi-l1-1-0
K32GetModuleInformation
api-ms-win-core-rtlsupport-l1-1-0
RtlLookupFunctionEntry
RtlUnwindEx
RtlCaptureStackBackTrace
RtlPcToFileHeader
RtlVirtualUnwind
RtlCaptureContext
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineA
SetEnvironmentVariableW
SetStdHandle
GetStdHandle
FreeEnvironmentStringsW
GetCommandLineW
GetEnvironmentStringsW
api-ms-win-core-file-l2-1-0
GetFileInformationByHandleEx
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
InterlockedFlushSList
api-ms-win-core-console-l1-1-0
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
api-ms-win-core-fibers-l1-1-0
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
D3D12GetInterface
D3D12SDKVersion
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.text_hf
Size
241KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
152KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
137KB
Virtual Size
137KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.DDIData
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
83KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=159, id=261, version=34442,
count=8, id=259, version=34442,
count=17, id=260, version=35207,
count=12, id=259, version=35207,
count=96, id=261, version=35207,
count=2, id=257, version=34442,
count=101, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=35211,
count=24, id=260, version=34442,
count=370, id=1, productName=Unmarked objects,
count=122, id=265, version=35211,
count=1, id=256, version=35211,
count=1, id=255, version=35211,
count=1, id=151,
count=1, id=258, version=35211,
Gamble With Your Friends/Gamble With Your Friends.exe
- IMPHASH a136217cdd3247ff6a8766561064ca0b
- SHA256 d587602bef7b8c717034a300b11adb17dca31525c008e97dcadc4c779834e9a3
- MD5 2ffb49ee99222bb3d3e95f945792c102
- SHA1 a3e923b401473fa588266f3e4a2e67b894cc7259
- SHA512 374f7a29ed458de7e33ec584304f0148241be3fee885988e0e11ad987cfffc12aba0a58fe19d19c73adb0351a2216c300a9571b1c624ef7a3d595090af1af618
- SSDEEP 3072:GwazAjvuMeUwZPRyYzK4SHcUIcLX0NKWrYDKC4XBIvn8aZulrGWf7johub9n4tf:VaMjvuUwZpXUhLENKWrYexIfStmtf
- TLSH T1DDE41C526E7BC086E842CD74C927E7F68E692EABE5BDC06B06E2FD1B39370C51D16101
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4708
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
unityplayer
UnityMain2
kernel32
HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
D3D12SDKPath
D3D12SDKVersion
NvOptimusEnablement
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
552KB
Virtual Size
552KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=28900,
count=138, id=261, version=28900,
count=10, id=260, version=28900,
count=2, id=257, version=28900,
count=9, id=259, version=34321,
count=16, id=260, version=34321,
count=40, id=261, version=34321,
count=3, id=257, version=34433,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, version=34433,
count=1, id=256, version=34433,
count=1, id=255, version=34433,
count=1, id=258, version=34433,
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/AllIn1SpriteShaderAssembly.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 26ec9da15b6e175f0b2022d6fc3988b9cd86099601daf2469fbf8108e07a4085
- MD5 8d895ddb2c05a4a3ea054897f5868b23
- SHA1 b41386454d9fd50216b6d1a20eecc42d7ece9e94
- SHA512 b7811a301b9635bb4fc0caa071a7ae701e18fe88cdde81aa6498d1766f5b27b187b7913989595fd1806853be6e04738a05e920d94e3926a6363630f2ff7c00ec
- SSDEEP 768:vGvtlXWpuy5XRyAw4ka3EeWP/hhe0PW/l:uvtZU5XIA/ka35a/hvu/l
- TLSH T16FE23C0275C4872FEADF0BB6A1B0590046B4D595BE23D58A5CC6B0EF19AB3B08E35377
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36362
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/AllIn1SpriteShaderAssembly.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
752B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp-firstpass.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ba53b0e29b13784c3f804110d8385bdf21f0d5441c1040b4d71231863f2c5644
- MD5 3d37e10fdf6f72583e9f376421f13710
- SHA1 c08e074fb7068250b6a3cd89f276a021143412d7
- SHA512 dcbe3bacc0c6de824a63ae5764d98f9576f80d419c358efd4e4dc4150d94a45a9f7eb6aa8957febdb32e71fa69174f6edc5d90e45b3d6ee0d58bf9b354a79249
- SSDEEP 1536:37XGJwHAP5CLqVkzMzkmrCeY/vOAhQqnmf43DSxxzlJxYc/UMNn/WGhJrb9DvE:CJVhCOZzlClnOATU4zozlJP/wR
- TLSH T1A1B34CA547B44733C7EF1BBEB0AD079107B1926A9536F75B5A04F9EC1843BE0182239B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
113202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Assembly-CSharp-firstpass.pdb
mscoree
_CorDllMain
Name
.text
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Assembly-CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4b69c9723273afefdf418209f8204800272e00eaa2e1261be68d64bd4b47b3c
- MD5 e5c8da551d78e96b39d41f904f781b80
- SHA1 acd898fc1627ba383ea2d5d00740ce817d84a28d
- SHA512 3f492d1bf21621f5367dda4fb4e08291a88c03fa1d784177618f72556128a5d2f633d1c13898af0166cc0bfc79be1f17233e4e4796c12996b4afff245ea5f387
- SSDEEP 24576:AdlS+KbUQDDiHSf5A05/r+O+Cgzyhb1R1EVN8V5i/Q1+b:Ak7A05/r+O1gzyh
- TLSH T13165068133E88A27E5FF5B76A47551109B77F8521BB2D34E2A0DA0BE0FA3B504D61723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1547374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DOTween.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d74bfc3f37cd97d90f7f08a9a73e204c5eae66e77be24b12378a4e99f1690843
- MD5 5bf8739c223b2cef701507fba638123e
- SHA1 fd3ec66adcae1000dfd52fc7e91e2e59c1cdf979
- SHA512 b736fa2d0c3d4a70f93a1e50709000793e01e9d3cde5018e54e469a65b6f7f3f2448d020d94bfac9639f5cf97703fc7a387c822ff579f09e3cf4de9629f9d458
- SSDEEP 3072:3PSQfwI0zneuFAIlYMaNP6WeWt1Umi2suKX5Yw07W:3PS60zneuFAIlu6WVomi2sj90
- TLSH T14E043A086BB91932C7EF53FFA02C0A199235E45AD9AFE39A6845E4F42C07B55EC013D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
183258
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\DG\_Develop\__UNITY_ASSETS\_Demigiant\__DOTween\_DOTween.Assembly\DOTween\obj\Release\DOTween.pdb
mscoree
_CorDllMain
Name
.text
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
924B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Discord.Sdk.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93b11ba9fc5d3aa1e770dc9aa4f054590cb11e7f4ad63250a86c7dde1a133ce3
- MD5 e09ddb2d1a72b2aa40f0ae58a75054d0
- SHA1 1b4420ac0cfbd55c551fdee136147b17195ac46c
- SHA512 06e9350e652f7d69735ad43cb1baeb75a3c3cfdde1d17a35d3bc6787918004a5906a90d8aab9c980725fadcb53c8154ee4169be497ba09192f5beacd34205e80
- SSDEEP 1536:uQ/Va4gp92Th/eYtWT47xWCO7SZSn6z49FEO5I0KOv+OB01IOezH42eRWTd/ZWJT:l/s4gpZcW5mA7C0KEjZtN4
- TLSH T1C6F3D70287D619D7C299533EE0934117C3B6F0D6912BF397E28EB5BC2E52B12DA19D83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
170950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
./Library/Bee/artifacts/1900b0aP.dag/Discord.Sdk.pdb
mscoree
_CorDllMain
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Playback.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0967994a4a82a5579a461108cc94d9796a5f6efb9f720aa6d4d292d3c404bd7e
- MD5 2dceb3e7558a4ae9964c1315558dcb40
- SHA1 bf21a2d887377644064913cb6e4c2bced74c2e4a
- SHA512 34d702075aa9c68b706a4e82ec24cb24696e92561f3914a5f1d968db74e1469670743ce95b09df6f94dbd24b9f4ece476b6b9276650e8797938ac23909e301f7
- SSDEEP 384:K572biyRYP8o21V8BgXVpzpxROrQs/mS:c71yCUo21V8A/OrQE
- TLSH T1D6724B5969FC4A2BD4BEAF7859B1030207B2E4736D73C39C48D8908A0B53BC48B51FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22506
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/DissonanceFMOD_Playback.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceFMOD_Recording.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d8278a540fedcf47bf3409475b1ec9bc2afd2ad3a6080760cfbf461556b1bc6
- MD5 1152b78e922610483db7b077a82693bb
- SHA1 1a74536823b6c25e9b9a79e68e3c435453b9317e
- SHA512 dc26f3603a75baa68c8393ec4e90ded3ed17c72e573d314771ce2374c869c4094e50376ba68d7c77743e7fa8c460a84897eba106801072d26054b7fe37d88387
- SSDEEP 192:63GbrR86EViA1ldrXvfHhV09W79MKF5I3J3buc1:OLLHhKY7GKPIZF
- TLSH T182220A54AFDC8637E96E0B371EF347021B31F9075862DF9A45C814EA6D11B888D21BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/DissonanceFMOD_Recording.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/DissonanceVoip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12688e6f1bafab1a476e94feef822159612aa2b73a08f6e0b3c59b4701985348
- MD5 c60afd4c65e8950acd6ba62c4fdf4e34
- SHA1 b49ebaacd812f719d1e3138d181c54f1703a2007
- SHA512 4e28887a65ea2dae73ebc76bef125a0fbbd0a386a2c336f59bdfece84772cd5585751d43a4944d2d87bab4eedd8b29396023be563d26456d1f3c50e2044d45fa
- SSDEEP 6144:5WeA7hgT6wD6axBt/2RwdK2VvLR8R76/zz/zzSz/z2RQXZqIn5V1FbFYlzBO:5zA7hg2wDjhdK21LR8RW/zz/zz2/z2RS
- TLSH T1BE644A5153E88A27E0FE877AFCB44E114BB9F906A5ABEB8F458054EC0E93B51C850737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
320302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/DissonanceVoip.pdb
mscoree
_CorDllMain
Name
.text
Size
326KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b76f1be7db133e88efe48121f1c97444836c60dcfb0b46b9bed1f263b9063184
- MD5 dc21f86dfe0c1f3c79b60848910cacc1
- SHA1 6bd3547ad39774bc77507c302ab3bbea78b2462a
- SHA512 62e6699dac74f8456d6478a9d29eb1d0ebce92eea5ebd8c794d41a23760a099515737ff751b16c36da8399f55110455974380ead564e24c8ca947d4f3781d712
- SSDEEP 3072:rXAXQvVEZQ2NPBk8/BBBBBBBBBBBBBBAqj/bPaLlQn00WsD2QB/JpHHs491uhfGs:rQAwQWTbylQjWsdt3H9Q4
- TLSH T13A344BB05BB44944E8EF2B39B2713E104A71F49B5E77F38C16E5987A2C72B508CA1787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
232078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/FMODUnity.pdb
mscoree
_CorDllMain
Name
.text
Size
225KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
680B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FMODUnityResonance.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18dd3350604ed2cb6b33afc0035316b4ebf842da7f803e5223109db8a6fe1b6c
- MD5 c0e5d71eef8cceae8367623820d1efa4
- SHA1 dee4a44c6b8ecb5433443f6d24ac6d92fc54b98c
- SHA512 a072a666a304769ca31c25a0d4fcf9f48fc9d01585da630e435636d8bd12d2dc43699126216e97700ed98efd1b2a0f29b58968ca1a6620ac65c2c7653d75d412
- SSDEEP 192:rtFno6x5M37e65qMLi2l8UjFECFM2JFeDhNuQz:rs6k371F+1Uk24h1
- TLSH T104321945E7A4053BE8DE5BBF14F20B0733789522D693E68D38C810A877477E04B96BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/FMODUnityResonance.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Demo.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f6543d64b63af0451e91cc6d98e2fedef803c63e6d8c35e0132cd28ce589a734
- MD5 566f9e2bfc3a7f7dafe49d8c902335b3
- SHA1 29783c876190782ff72576eaeb9ee387fedfb446
- SHA512 f7ea7d306540323194f84385600f0f5f3a3110c68f196c36374ee15e897c96d6cfe76bde3b120f67cbc87e0ad41fc5a0fbf7bedf18f570f4a423b70c477f3044
- SSDEEP 96:w0O1O3MA46T+qhKio/+KPQtT2H9Rz4y42fQpnVFDvbGykqDg6kxkc0+4JP:wgML6bhKNAadRzu2fbykegXutx
- TLSH T19C02B602EBFE8C16EAFF2B351CB703401774F82858B1CBAF0A89512E9E117C559A1735
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Febucci.TextAnimator.Demo.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
776B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Febucci.TextAnimator.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b24233386166035f0984ab017749b99c9160bfae04f2ec71dac23c1cefabd741
- MD5 e7160c12428dd76aa81d700bd2cb54e4
- SHA1 ba306cf3484fe53313a02f244edb38ad47e8213b
- SHA512 5456aa190b996c920132ca41ab251b5f01a10d9ad69df0bcfc61cf17c8ae85ab1181c343bd4baf2da41064a2e26869ad4382a1c1e301b29d7bf0becc6d5c2fc3
- SSDEEP 1536:NfUeoZldBtpWHvYe9lhsqCZR44lm7v76+iimRx/GZZ2D24:lUeWldBtpWPY1qT2xpq4
- TLSH T1CD833C212FD98D37C7AF4A7F60B391851370E12AB557E7EB2ED894DC2A8338065113A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
80534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Febucci.TextAnimator.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/FizzySteamworks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cfa1e00f1e6bbf5e3f12825c36322456fe68edc560f557fde432f7fe75292b48
- MD5 d5f2bb015b7ed7f494cc512d55e66311
- SHA1 7ece34b12360676fc27b276e94a85618185fb63d
- SHA512 59e9412201828fc40797974a9981c459a3751f89da39cfa3fe49c034b31f46f5b8b5bdf91ba80c120f0bfa6c616a1c2d56b7746bd24782b5cb991554e4cf88ef
- SSDEEP 384:IqPMdSHJMqYbWaDzdXxroAoixVMOtZ/HnVCSKxYnToL7E8BSa073YgoCJOZ9KVNO:GDxXNcix9tZ/V7KxYM/E19c1XJXoSMC
- TLSH T1F6F2E74967EC9227F7FE0B79A8B141164B30FD476932D78E1DC850AE19727908EA13B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/FizzySteamworks.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Gilzoide.UpdateManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1809aaeb77ee02d960d6aa1204536c8475f6517e18217662b0b12bd3251aa209
- MD5 2cd2d0bf9984ceb902c1f4acd566e86f
- SHA1 4254549009684927902616bfec9cd7617c0f0a13
- SHA512 0872588d9967da6198599818d0a3baff6b830d4696efa93304dfc247fbd64a3a6745aca20027f43c7e530445ff8b63c1aa74f2e5b54dc03a1d3aff2a232652d7
- SSDEEP 384:8Gut3isrslQNR8k6yuOSxdIa/n1ek/br4aoA1K8288iBwJHL5spgerEDkJEAJ0sz:23VslQYkad/n1h34aoKK8ZJYqW+71L
- TLSH T161F2D74B2BCCD336CD8F0B7FE8F002A512B986465583FAEA2545A2AD4CA334457693F5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Gilzoide.UpdateManager.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Lofelt.NiceVibrations.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1216f5c27b35f109f498cdeebfbe41238b3c5f8fc23de3ffd038649cce1e3a17
- MD5 4a0573efcd8551ca9e3a5cd416eef004
- SHA1 7f9d599c38515d940fe97478664c87af38fea217
- SHA512 f803bd3218063ca218e940916c32a38c95e8df09fc6650693d187971f3823cd659c4886452ffe2eae6eb9007a8a3853e8a681b54aa98906633c5693f56e6de79
- SSDEEP 384:/7z9r1RfPkx9iBauKYBYKoU7YqmMOt4i3urZE/xa1s:/7zJXkxpuKEVo/MOthwSpj
- TLSH T10F8219E6AB58C63AC7EF12FA55E3462DA230D3096E42DB9F24AC515C4E177D807023D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Lofelt.NiceVibrations.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Masking.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab7c41219de387f529c8e95b8297e0da2acac17595168dcf7dbd01586d5d7d8e
- MD5 5fd46cb323086ef7cccef4caab61d549
- SHA1 a16e27156aa52af8ba27a19e75535f78aadabe37
- SHA512 48be9835a49d7641fae4570cbf7d628f4556bf65858d6db082157116100e4c6ba6756723e6ec3ea081be00028ddd91835e8133fadec4b3b28174f3a819aa66b9
- SSDEEP 384:YFoVD0P0L20utHZpsy8BkgrByKKC6MZ1xJAFCCqovK1yUB/6iID+OlGuxVepRqUz:O058Hsy8B7gC31xJA3m6AnFc2bzd
- TLSH T17AE25B6C7B8DDA7BCFAB07BBE829281112B2CAD67513E7D51E8854EE2817F504700367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Masking.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirage.Profiler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f6b951f10faadd72ab200b51cc027037096ef40f40213b1e113746a833fb66e
- MD5 3af952687e8e3ac9397def3d8160dc7d
- SHA1 dfef4e370ddf97be595f38cd300d1939c4bbfd86
- SHA512 1fd8991d661cab3f1c161e3a173d2249c7f86ab74897cbba9e1c3372ca867246b6e630de150d893b276e1b8c7249c10d0eb410e3d43e765f952d4a5f17b60ee6
- SSDEEP 384:0LBA4TMfEJhzsvkOZASA025hMNzfNtLxJ3bC/zk+9GuVEkyyk:KBAcMfEHzssW2sFfNtW/YQB
- TLSH T1A252FA0153CD422FDABE0F79B4F212201230F9515827EBAF16D825DE7967B948DA732B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Mirage.Profiler.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
716B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Authenticators.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3701683fcbae6ca57e1ca47151378c925194a8146db685e6807dde95eb7dfce9
- MD5 3fb64dde79b7d229bee314fac8fbbb41
- SHA1 a8afc22cfc45d258213c5fc8b72cd74e57f7cb5b
- SHA512 6e76b5a4e3fe89b53294c362b55cb06e07e76594bca9018af4acfbbf58f80fa11960ba79366a29f12c02c91c25b8be1a9c503fe0b3dd4a4024390bfe77aa5b6a
- SSDEEP 768:ki7rHimDo6OD/L6ce+fEBlThRhAZ9KuI51g/ral:ki7m8OScnfEBlThRhAZ9Kgal
- TLSH T115E28719D6045F1BD8463AB1E250BC503F33826295F789A52694ECAD5C0B78CCF78BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.BouncyCastle.Cryptography.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 860787fa58288910f9ef0b3147ac1df96623d4d7bd7bc309c9161871b0819fcf
- MD5 ee909f54b1db5b37cf8def6462d5cc95
- SHA1 a4401906cbcffc5c7e49bdd912075db9635ef448
- SHA512 d010cc83e9db34f2a9a0e9bde99cf7dfaa61400da257ee6f0eafb8bafa1be867e240d2e3ac137c1748a026c3c7f4e5c6fe92034c6aee6a4b634a9c07541e8dbc
- SSDEEP 98304:nF55ysqUnLCcPSbYchp+A3NEo2O0xDe1BvuqgoRVIVCQ4PUABp6fV:Hpyrbce1Juq1YCnUAP6fV
- TLSH T18766E02627FD2E33E26F8376D1F14051B7F0EC29B363AB1B1981A6A55D13B419D82363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3383518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/crypto/src/obj/Release/netstandard2.0/Mirror.BouncyCastle.Cryptography.pdb
mscoree
_CorDllMain
Name
.text
Size
6.5MB
Virtual Size
6.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Components.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e307a850398834e07cc096734a5d204bcba7f821b017465e6456741913e1de5b
- MD5 f41f27d1faa47e3656770d9e9da09e4f
- SHA1 39035c2695eab8363bb8abffc7060c52f341be5c
- SHA512 d91ed53c6f03febf0d4145d73881defbac2623a6d6e7c7a6b4a0a8728b0aa2a2f454c2130693df804afca74660107232e075882d6c22f49986f6c95f7c1599eb
- SSDEEP 3072:GVVFtI260oAgcu3d+IoOZGFD1SB4haZTuIQ8OoNytjBpMSs/BZVAaFDvy8lVPj/n:CvIpaL6Gi4Edvj/X
- TLSH T110044B5263EC4E1AE5EF1BFAB274B1410BB4A502E9D3E3EE459460FC04A3740EE5539B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
182494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
712B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.Transports.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8be75fc602a7f554d03a05599b0b9b0add8978c1f3bb4ac04cedc72004a4ef9f
- MD5 4f1212836fc01c703d6f49e94cae9cb9
- SHA1 7640164bc9b99ff92174afaa7e1091b13770e772
- SHA512 efd0508fda34cabcc6c75c2c4802586d53d13ae17a9646977dd2ab7ea682a2910bc8b73fdd76ffc197454d0e320496595ee016db33833defe7e973622dc8124d
- SSDEEP 1536:Q/iV1SkhYWXWP5Cueyc82Xw4oxfVSZoF:aM1SkYWXkCuwI98c
- TLSH T148934B1573ED4A63D7FF1BBEB8B046010736FA557927E7CC1980A5EE08A37418A1236B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
98034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/Mirror.Transports.pdb
mscoree
_CorDllMain
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
712B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mirror.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3411f17cc3093fcbeaaf7beabcfccb0731447a4ef9796fbda6d76e42ea72afab
- MD5 071a71b0b42e221d2d0b730c6252959d
- SHA1 3882958b8b921fa68c5f80a0544b46d50be8ab0e
- SHA512 83326bba141895da1a277b8a67a8ecd8fc927e9aa8e8b21f311d0d5f433213ef9ceae2e5fc2beac4f6cad89cb17138f57b02520fb84147470e829488844bc02b
- SSDEEP 3072:O7qcC79k8ppTgCY8TJM7OpSECyUGpdL1Zc6N7DwTvoZhxi:4q3kLh7OQEzhdeTvo3
- TLSH T1AD24075223EC461AEAFF2B79A4B076104F71BC43E577D78E694494FE08A2784DD213A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
233342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
220KB
Virtual Size
219KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Mono.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 095361bdec0d4cedeb86e32584f51e02ae9f74f0bcf105fe34347c12ee09544e
- MD5 06dfa8331f58a360202a2cba7f4834a4
- SHA1 ce48edfc378023a41f4090b0cdb013893b7884a8
- SHA512 67ae9e470f210eb6b15bdfe18a35c812a860e5c184bdb4406bc336206c98a655b7f90f40600c3dfc478edf2440b771cdea8c85f892e870574636ff506b8fc8f8
- SSDEEP 6144:PUjTQ70cnf8MoVRxS9iJdBF119RJXG2y++Q:OEiH119RJXV3
- TLSH T19D344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
241706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/Users/bokken/build/output/Unity-Technologies/mono/mcs/class/lib/unityjit-win32/Mono.Security.pdb
mscoree
_CorDllMain
Name
.text
Size
233KB
Virtual Size
233KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
972B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/MoreMountains.Tools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6163e1b45349f9f90cbc33fe05f7537040f7c0937038acd3447440f2712b11d0
- MD5 34af12aa918d4c7a23e7365b03e49523
- SHA1 a5dbfc9b2509d5cfc0ad44abed1eda82a0137e3c
- SHA512 ad3ae81b2aedc62c56851d4c18c868eb36722daae4a31dd415b5cd04d1f79a9fac508975f91d5899370c02cd8596f22dab2eba841ed930702e2027ebea805411
- SSDEEP 24576:U66ubQl3ynTXxfkQbfO7I/niwru4xhTEn9MweAkFQg35919+:U+Ql+TBXO7+iwru4xRmMweAkFQg3591Y
- TLSH T127657D9A33A00F7FC94F43BED0156B55A3B5E0992B53E3A72F45E8AD0C96B905F40293
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1337014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/MoreMountains.Tools.pdb
mscoree
_CorDllMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f
- MD5 d751086b7423fd5580b5e909b06217b9
- SHA1 c1707b17df636cd6d4a804361fc6ead4ef9db5cf
- SHA512 86655b59ad62664a35a30807cce7dc2c2be8f1ece235f35dc9031873d255dc6f13a22b55d0386becbe927f007a14a6d936ba3861d1103af8f2fe16aa0afebe11
- SSDEEP 12288:aBNYm5IWx4AhnIqjCfP4bYaRLL0eglBmjV+0kRqQCB0jEIF:aBum5I24A5LYa5g1ByNyq5B0jzF
- TLSH T119E4282063A89B26D1BF6735B4304D1547FAF807F2B5EB8FA604D5E92C977A08D107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
696622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Adrien\Workspace\Newtonsoft\Newtonsoft.Json-for-Unity-Pedro\Src\Newtonsoft.Json\obj\UnityAOT\netstandard2.0\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
673KB
Virtual Size
673KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesRuntime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b034b211cb2a669733f5ce37edbaa4410596d6680cc496db9725911161b33c58
- MD5 82ff3af31d2ebd5d6cc61c7fd937b496
- SHA1 5cd932ee443f66ed0e691f0c20c0eb1d88fff551
- SHA512 ce5eeaded0f121b812f4414864779186651e10b83dfa720f94efb38267af4186d5d0f70b1fc97cf60389c9dc9835c3ef8e0ce9898c3af1d2907cda453856d81a
- SSDEEP 3072:qo1pcJArw5zKCACxNmbGpFk4fHG0e0XupN7QGbsQa1imBajU/DUHSksIDcNWdJy2:qoLsArwNKCACmofm0eQSDj9RCkEH
- TLSH T1CF84082947E94626D2CF4339E4B05E169BB0E52867A7AB0236C4857F3E4D75CFB002E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
378618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/ShapesRuntime.pdb
mscoree
_CorDllMain
Name
.text
Size
371KB
Virtual Size
370KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/ShapesSamples.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac203c6022c04de60ed2d9b58c07bfa9253bcf21152bc061aca0cf48eafd838f
- MD5 a20db26c4b14208b59ef9eeed8510f9d
- SHA1 a7ad33c4976e7c2beb62bd5f2974ab28d23ea98b
- SHA512 eb26d5246ba0dbad00a650c0e12f2bbff4597b7cc00fed81f53a05b1017d9061cfb8e17912144eadf7b5e61ff6c03872fe987b5fcbab4480d0b7f13b85b607eb
- SSDEEP 384:4zxLk+bP6QR5WfXXo6ADT79Bndh0cHCPvwYBcG+ejhYKo973:yxLk+bDzaADT7Tejjo9T
- TLSH T1ADB22A3D66889237C49F0BFD60F95A48337293336543D7CC1AE9625D6A6BB901C02BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/ShapesSamples.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SimpleWebTransport.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 473383ad839c46e586b8fe6f809c7682901a93feeb2155d54c4dfa7cf0735ba5
- MD5 b2c6add3464a61deb2e2badb0ba65fda
- SHA1 1496a06c8b85ce613df2b2828ffc1d6eeef57788
- SHA512 b19d9d1318e1ec4aab618d2a268852e54cf2cbe0f23d05b01465a8eb7b62592b21a54954ff0f1ff385cee86efa7f2a68a6ec2dbd5c80d50616cbd856ffc59174
- SSDEEP 768:D/STb2DJ6HMouJpI66lP+V2K8OO7BTkr8PVYJsd0Eim/khS8PTVpFI:b06lOxY2KoTkrjyd0Eim/kJho
- TLSH T12523F88127D8893BD5BF2BB4D5B586910731FD116622FF4E288890AF1C63B989F10B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/SimpleWebTransport.pdb
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.OdinInspector.Attributes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 983a4b65af2b7894390efe1ebdae3fad3de000a5d8af015109fee642d15bf0eb
- MD5 08085c70bc9ee7655e2b5ebaaf258780
- SHA1 8891e19e04564aa3834181903816b6939b68be12
- SHA512 f52d8de9f91be0aecccb0c9e88bccd0517355273617cddf10a09b91d316cded6ab7965db7151caa96c97c1fe79706b9e473febab91b9b2d03fb496e70fc3b90b
- SSDEEP 1536:QV2SywdOHUVDAURvVtkh7VThg9Yah6MAPA608SO5hpz2U9Af/JKHl3jf42uSPCTR:q+VSAURv4hYYw6RA9MjV9gKdf42uWg
- TLSH T118A37C36FD4C8E3ACB1D067AED2937910F23E615591BF93712B4A258D85E32B4901BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
110914
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Sirenix\Sirenix-Development-Framework\Sirenix Solution\ignore\Sirenix.OdinInspector.Attributes.pdb
mscoree
_CorDllMain
Name
.text
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Serialization.Config.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d0b2b81ac67504eceeb344006e4701c8173e23424def1e549da186c89a68960b
- MD5 74bb610ffc5f81a5b32f1b3d4deabf91
- SHA1 a17db97f6146734b9e735e6e2c03fb28e4458e63
- SHA512 ae37f7e6cec4bdd0b777dc6cfd8557770b1d9b53d00bdbc7f371fef935ca3eaed45d390189a7f304e2bc13289f9a83b03de7e3e42eea93c0d83de653aba57801
- SSDEEP 384:LyZBnM5wXkUrH4HraWZ91ZGKVoJaicVc5FyD8qyPRFCJ:LyZ6WXJH4HraWZ910KVoJaiPTyDwRFCJ
- TLSH T17A821C56A7F8566AFDFB3F31AC7122A01E76BC41BC79D25C1541506E0CB2A84CA71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23074
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Sirenix\Sirenix-Development-Framework\Sirenix Solution\ignore\Sirenix.Serialization.Config.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Serialization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b93407504c8b1ea1f6d2822582b67eaa54e1d27dc9b2c34b90a64e4733626aca
- MD5 814628735763efe7facc96f9b96f37b1
- SHA1 6e844db9f008e2f82a0b229848ae7c8e489bf021
- SHA512 fc5160e42ed720fec63d64680ea3a378fb66a306827dd70099044181ba78c09f410484ade650e26b5aa1362c541587299f8ee8ca9da6f22895aafee84f1b674d
- SSDEEP 6144:2qYqP9Ucp8WawuZ/YW54YMfv7mONxAuyhAdeki/CVNxn:2qYqP9DqZ/fWn7dgAgkdx
- TLSH T1317429916BEC4A46F5BF2BF5BC30524547F6B812A87AD38E1855B0FD0C63780CA50BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
354166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Sirenix\Sirenix-Development-Framework\OdinSerializer\ignore\Sirenix.Serialization.pdb
mscoree
_CorDllMain
Name
.text
Size
338KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/Sirenix.Utilities.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66d0ae775819df60dd5b0654812f6e590b54cce5e19de444024c5216e51419ee
- MD5 92c26df0c7063214304c634d5fa8ec55
- SHA1 7f8b8aad1b6f5a8f0f8ad36b462038a5e8ada3ff
- SHA512 fe4ed821c1f4cdbf14fff39a65e2e15ac426b04607bc7fe41b409d7b2623eacd0e5bce29fc7a0381137fd210667fc095fe2c44fac1539cc135460121dfa00bba
- SSDEEP 3072:ikEtxGPAqMMqomngfWWoooooozKOLBigcKwvfMCSEswGD:4txGPADo9WWoooooozBLBNESBw
- TLSH T1B4E33A00B3D8CA31C6BF9B77B87A25059771E403E8E3FB5E6D88A1BD60177852D513A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
156662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Sirenix\Sirenix-Development-Framework\Sirenix Solution\ignore\Sirenix.Utilities.pdb
mscoree
_CorDllMain
Name
.text
Size
145KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
972B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/SkyBraveToolkitScripts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 99e90e58f64e864f25b3d1e3d4d999e576b26bea080d51b7c9f80c1699e59df4
- MD5 790c88947d926aa04a5ac8566b333402
- SHA1 340ae82dabc6051a8b6f6934485acf494f79b3a9
- SHA512 705827162a31a11756c4171efe4c2f45ec92efb08271b06f703d4e8bd57de9ce7564bf7b60c61352bb94e836c8e20ca1ae20679f3a4b2ed985001af221b32a45
- SSDEEP 768:ibE1oosxGxqtSZQdLob4UPY4caA83jsUwxYIi:ibqMGxqtSOirc/8IJi
- TLSH T15603F82417588177CAED47BBCAA2A25316FC905FA823F7C8088571E96B07F940E927D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/SkyBraveToolkitScripts.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/StompyRobot.SRDebugger.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1bd42cabb4c093fc148bb50df7cdd728d1c566eb5e0964e6ac59f2eaac43f038
- MD5 cefc8f1a26f4ed1d63a922d79f5d2a46
- SHA1 cf1005000a47b140d4925013f31392cd16315da2
- SHA512 de5b1c742cf0abe988997ae1254f17c1a3670d5c539c5d999fb33ce9884f1297f2bf0eb2680c1284c47ac6d602376fbe0f477f0f5f0c3c49da01d0470235e6d3
- SSDEEP 3072:kd2etaVpajFxATNeTK6qMEEN3ZaRKFsGm648J/X:fI003AJeqcN3ZaAf
- TLSH T1EDE32B2127F8467AE6DF4779E5B080118775BA03795EFB9E0E80F4DE09D3B948982327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
148122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/StompyRobot.SRDebugger.pdb
mscoree
_CorDllMain
Name
.text
Size
151KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/StompyRobot.SRF.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3a41839b0deffdba607ec3cebf0ea21a50ab1d442ecce55e37de26624c61fd0
- MD5 9e7e75cfb08ff75170bafba304bd9c44
- SHA1 0a7a6d1a89273405f8190abfb1dacc77baf40d74
- SHA512 9a6ee23dcc139beb46e78dd2b87162106195971c85fd5bcc3422b94bd263228fda271990abb2dc39f229b7bab440c41075e3b6a46097916b2fcf052e0445b3f7
- SSDEEP 1536:wtLS1bTOqMHHFDkZZRcaGOHkhc04Sz6EP4ftU/KNL:wte9TOBi/RcajkMSz6E4Fo4L
- TLSH T155836B3027F88E73D3EF077AA9B501265336AD41BA62DB8E5A44E0DD09937C46D83367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/StompyRobot.SRF.pdb
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.ComponentModel.Composition.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 84b56a5e6893447f11823e8d35951aa28c4b6fea9eff73460174b4b063562033
- MD5 72d384ba17505ad4ca6b6bfe7b1db6f3
- SHA1 02c957f1b18b39d070e06746753c2785caae83d0
- SHA512 4e8dd96699ba3db79fde3c210dae9802d257b7318dacb9e582e028d190fab066f7932fc7adce48a01fe495fce916e0b97f713d13c98ec53c230c3989901541ae
- SSDEEP 6144:ZkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:ZkwkYfx8ZNCxL
- TLSH T17C44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
262462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
248KB
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15ccff56f202331aeb5e28e24138ef5496b6072db48582ed5c08ce1d519f5d65
- MD5 12a89f9f10a781027173f7c0952137f3
- SHA1 a5dc96f8618827c127b3bea1c1a169ad52267bcf
- SHA512 b3fb074c7d72fc37ffff48f63ab1e3a814420f60f195fcdb36223eb6242b5ae8b7b4d91d654df60a74f2c531629cb1f8e1f5dc38d7a08c8ab1891c93a14174f0
- SSDEEP 3072:QGHTFkizuGCOE/htnREcacWown5WJGL0MIeZgNe:QGHT5+H/33vJh
- TLSH T166C3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
130254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7acdd810b2be97861665b5ebd8d8fcc9c38b613ae0ebf9a2ca961305be97b49
- MD5 4e48948c4974ddb73b45045465fe2a96
- SHA1 9eeb1d2744c002de7cb9342eb571ca08469a8c34
- SHA512 41e8148a147c539f2b52767503b955cef8d2400809f23320814ab47face06dab444e289caa09aa802505acfd3f806489273b8ed01bc0ba6bc7f3ec12353b7c59
- SSDEEP 12288:+WK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+xxHzR:0l/umv0Z15PyC9vMNV1+xF
- TLSH T1D3354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1119182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Data.DataSetExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c47bf3e74d016131d0ae8eefe2b7668e46bb4f672cb6239cc6f2f4368b74a36
- MD5 a3f70229c4d4a62a58d686d68c7fff23
- SHA1 28dfa54cf02cfeac90495645ac4e392de81fa8b6
- SHA512 160a97b196ff35ad07db09c38b43217831c52245f173564d5778a23c65403022f0da593b693a0c8ebb33e70952c931fcc505477b35e3b98f58da7d0999619742
- SSDEEP 384:NEAjm7aELetOdc8l4LodMqokNv2Y2rsFKOlIcMYOxxsnRbli3ESmMadMkrVr5UhH:NcZC8Ll4LiMXkv2Y2Mcd7sj5Q
- TLSH T135D2C915D3EC4311E3B727B1BCF9518A8AB2B913AD35D79D288E23CE18127804D62B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Data.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b3eadb7e34f34648516b3df01aa05c0bc9a4b55f51367ce355e70e13cdf1ccd
- MD5 7911a090ccf76c6d0132ae733097c24e
- SHA1 5a3de851568a3826bc426787b471bbc09a1122bb
- SHA512 818af4d6947a2daf42035c4fb5b35eb16e9320e790f896ac006aa7a99e8a88768b435ddf0649954adcd7973c5d11db4a04e403ca356417fbc87bcf02f3dcedda
- SSDEEP 24576:YTy8NQuznGO4TiWB1V0Nt8OZUuhHwjpj5zuctRoOB4M9Q4cggyT:mykz74VHV0MOZUsgoOB4M9i
- TLSH T1E6A5185077FC5A16E5FF2B31A871101567FAFC16EB72D38E6508A17E1C62B508CA23A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2131006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.Drawing.dll
- SHA256 388817cdfcad387d6b99932deb36dbebf3e88616c3e9c3fde4c6aa1461253f74
- MD5 8afbd70d91e159e7b505109af4e79b6d
- SHA1 7eab0aef109008ea275b78745d597654eb56bdd4
- SHA512 aff3ccec4ff9e77e325ec4b04ea8e926d1118a025cafa0a311aa22ad96d96fe1492e0bbfa66f5eb2e27bcb8152be4a3518440ce828fd6e443ef0e382000d8b2c
- SSDEEP 6144:sHutOmSUsXjt/z5B4CqvhOgEGKPx+Jg/NYI:sOtOmVsXjt/PicgEN/9
- TLSH T1CC541A6567B05C2BC6CE1378E01249B8A670AC0B2347F78B82D3F6752DF2B95AD414E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
495294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
476KB
Virtual Size
475KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 335da294b98bc7a2b7b1bef3ad47c2023c366660e800f1fbd23e52f525a59464
- MD5 877766956f07b96e23bc9e533b1502a4
- SHA1 b96fbd0453bb48f4e40edff651adba46c7d7c36f
- SHA512 658cab4718cd5401cdfba6001a638b93cc7fdfd16a4681b10b49b635d26313753e10923665ef0413a488dd3a55ffc462fb91122bfe05f225a310c2f6a7e139f1
- SSDEEP 49152:Z/KmS3lBmRZ5K54jRZzVm9WE7fGBQjVi/Wgj:Z/Km4SRZ5K54jRx0Q
- TLSH T1CCC56B0137E89F1AE2BF1B76A57001650BF6FC6AB7B2E70E1944A56D3C637009D523A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2647758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/com.rlabrecque.steamworks.net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 977945fe9e3a00735b5c1432be937be7eee55959cbd5b795b8f22d26261ceabf
- MD5 bb75f02a0fd0ff47e7a6c680a6b68a10
- SHA1 9154535ebd277379d337fac1f7b6ed1d9719c420
- SHA512 a7fde6b6d36520b5eeb771e1596d005a5463c1006e9cd2ae205bd05705a0d46f70e12badcb29fd2831cc95bbde576b4af84c7326b9bad231ca60b68d8ff82633
- SSDEEP 6144:ToQ3E/jRKhF44n8QSat1aXgacWyPbRJmnMiUqwrVU/tMJ8vh+OGIhpCkZSlPnB:T47Ry448Q23cEO2MJD7tkZSl
- TLSH T1909429257340657BC16D4335B1525E6FA7A0E08337376BAF66494A3E4CE2BC81E263CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
407650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/com.rlabrecque.steamworks.net.pdb
mscoree
_CorDllMain
Name
.text
Size
413KB
Virtual Size
413KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/kcp2k.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3ebb2fc4936cbb10bfd737d72ae0411784346d2aa1c0fc85e94479e77d40ebd3
- MD5 2cd69640a78d1e50763e63c23773d263
- SHA1 05cb0eb365bb6012fbd662432e4bd305a34c0910
- SHA512 626f2cde04a186e62a0eea0d59b12176391933cc1cc84a5409977799b509dadd65f6a6b61050db95acae4c336e91218d306bc0f4a7cd9d4e8ee52882a87887fe
- SSDEEP 768:SAArKlcIAAWrWiHCw4XQuQC/HJDaeY4NqB/WLPG:2KmIAAWrWiHf4XFffJTds/WLPG
- TLSH T10D03E88157ED9613F6BE3BFE94F216118771FC62A672E39D2D8450AF58127808C613B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/github/workspace/Library/Bee/artifacts/1900b0aP.dag/kcp2k.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
664B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/mscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c18ce37d14ac391ad399bbe0a6c784937895b6b2a5f7187d5d275b6c04c4bf50
- MD5 74cf9776bd75bd26a18c367d0d5adc06
- SHA1 8d1505d90bddf9151149fdf21e906cfbaa36a7d3
- SHA512 dde202e5fbf29797c3aa4b04201f2f3bf657d1ea22b3cb654464d96932ac780bb0ad848826ea3b004c33879f77129a5f0ac0e6d0724c85441b08ce78da289259
- SSDEEP 98304:4TyNG7s2AAfF1NAzzs6IwDsSfk+KWJUndZBlKj4Xl59xWIKWBCFzXjg1WUqSB21C:42as2AAfF1NAzzs6IwDsS3Y
- TLSH T1ED263A40EBECDF16E1FB7B3998B612111AF6FC95AB37D34E6114A17C2862B408D21763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4637758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4.4MB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/Managed/netstandard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ae62e082dc494a2433984177f60ca4db5fae69b1f360a8b33754172b310b8c5
- MD5 c61967ebe7f07f6a5a1b3f91842bbc3c
- SHA1 c2db6e7376977c5c7f17d816406ca70f95d8e1ef
- SHA512 5e63289f67a2b5d436d192a6354444327c4939e854cdae82614950885265fcc76739219138f22c55171362b735169ed77e0699958b4960a909f6ec919ce3aa49
- SSDEEP 1536:zsYKt7WAMU9UYk5f4bJUHGPdghpuSX5qUE7cLh9z+:3K4AMaUYm4bJUiIBh1+
- TLSH T18E93C422FD84DB33DECE9779C973545207FA33CD10761EB6444AB5AB84D6A44223236E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Gamble With Your Friends/Gamble With Your Friends_Data/app.info
- SHA256 48dde80c3586e97a50b53fda83f471c4b7f1235314a818f0e34174b4190a6a56
- MD5 419c06810d54776f47e63b3aa1e5ecec
- SHA1 be063974220dba6e9248ded5e3186469a138fc17
- SHA512 bd034df7698b5b27395f5f7c4a5161a38fd69fad21164abbe179af994b81b6d7d17586adbdf95ce47ed7d683312c533b7c5e1e14fb2d83eb614d99a50e1527a1
- MD5 SHA1 SHA512
Gamble With Your Friends/Gamble With Your Friends_Data/boot.config
- SHA256 f9e37b6ddfe4b68b2e80dd8038f030cc998e21574f2588813ca09671ce47ce02
- MD5 1a046a021f1c25960daf5045c813335f
- SHA1 ade0f53ca24f5d585de5cbaf03e84fe48faba974
- SHA512 efab0eb0288c42ecb64a4f498f714f65969550fd340b9ae07f2ec07e6c53657f7bc14835247031b55f7076dfc484ef32582a262f8a7d59e7879ca67972b01307
- TLSH T1F7C0C083E1FE354553C4C41954BE1FDFE923848F441926FEE650248D332E82D0355820
- MD5 SHA1 SHA512 TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/globalgamemanagers
- SHA256 b225e35655312914ff8b0a08da7f351b4def6cdc6b10619eb73f12e3b577bcff
- MD5 08836175298b427565d6dd32743ef72b
- SHA1 27ee6979c9a1a7d558c4412c4cc1303541a21609
- SHA512 58047191cfad167757a9e25ec7d9d1ec1b5eb08f8b76c207303a5e96c79dbef113d45d4b8aad91a918cec4bded333452fcd8e47c76d195d93087d249addd2df2
- SSDEEP 24576:SPH9CoP5mfzWp8foUpyAqtXL0TcDOnbWk:SPvp8QkyAqtLDOnbWk
- TLSH T1B3F5BF4A9BF9CE2BD80483BE89F707713637D6A9AB13D3434B64B4701C5A3D41E9E099
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/globalgamemanagers.assets
- SHA256 032a88dd77eecbdc2a50100c2c3647fc0b21e0a767f7a5a1205980b2844d1471
- MD5 2b9e28325e6bd06a5501f3c37c0ab729
- SHA1 675fd59e5040945c0d40c7ff362dae73f1f4abcf
- SHA512 985bb453bc988c7c3a96b1d8101fd801076b81fb3a03e63d8455a21d9e75c0e646e63790dca1b2bb9b381a4573aba60a8bbfa8ad5a069df1a396fcf2efde270b
- SSDEEP 393216:kS64dBiQfDOevw6uraumZXubbN5MyrqmMcNPqgVxW36XfEET/fs8nMxRmrG39ZFS:BdBfDdw6wxPvVxNNT/gx4qHFLe/z
- TLSH T19857F136D7438A37E846113680B7461AF370EEA847DC4F175A5CBA397AFA61C9F21384
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/globalgamemanagers.assets.resS
- SHA256 c3bc5dd61ec2f3636ccab550df4045c0a17e9273482c7ce4d8321a012c631a85
- MD5 73b9ae4e50046ebd4077433e3d111404
- SHA1 80b204f2281ae76ccb35cabe547228c505e8fc41
- SHA512 0e10055c18c8829788e908b179a3a5a87b22dd7f56d017d2da93f88a2f0dd2415c2a574bce0ac76361c1f86d81c3492dd58a844825158dc006379c0b6d422bf3
- SSDEEP 98304:YZAvSAIAjR5hZAAJc56NFbqnxpbKpOuoAK:YZAvS0d5hZAASMNF/K
- TLSH T1CE460793C9E1E0CFD48A61FDE93BA8E4E48F55B8C7884FD602179525C2A3173A3499CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level0
- SHA256 b90f0587484c216fba1a4c29f0ce8ff925b2d28f1e53cc4889ab22bca10f66ac
- MD5 f8f2979d8a0b4884ddac8705417a8720
- SHA1 814341a613edc1557d2ec87d9e3c7a4c57f0fccd
- SHA512 5338ba56abc117ad9b0ebb449f4467dd8d66ef9f370a949c89433af2e1b298ebe7df52fab99a81e91cacc1052e065f60c2e4697bfb99637d2a169b035f66bb3b
- SSDEEP 384:yIP9R7q76wkDlkhvBKQ63iUZFOhUX9uoMEuDwuoMEuD:zPT7T0BKfHZFOhUcoMEYoME
- TLSH T1FA032C1BA7002A8FC635333349AB5F99FB31D5A94F3A533307BAA02D1DE638C6E55191
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level1
- SHA256 cef42383af6eaab546171d7102293957a1f308f2f80e1bf872bcdcd54a42d12a
- MD5 a4991acb98c2569bc7ef0e208525607a
- SHA1 9705646bc7ccade90df185fa74eba34360c8c6a2
- SHA512 255751fee68ed2a9fe79989abf03a5bcd8b447648102a6a5205e87740f2e597b220d8f95923937b13a96fb5f354827dd48f1d71cbca2a14898d92efd4f9837f4
- SSDEEP 384:VE3skICa0jeUtES5bulPPSFU7CxKTaMVrf3ajeokU5zk1ZuoMEuDsuoMEuDCx:S3s94QPPSFzxKTaMkZkU50ooMEMoME
- TLSH T142432C1BBB416A8ECA35333349AB5F99F731C1A84E7E933307B5512D2CE638C6E95094
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level10
- SHA256 77576dad70198f38e236c8a905cd58e4fcd2357d0c9d12a537dff26703c292f8
- MD5 03a8d514e967c049f7d86d4610da43de
- SHA1 f31887f29fc8805a07660c233f466c2160b2e291
- SHA512 cd74df73706c83ac04a87658fc456357e45d9c24f0c157962f0d97a72f27c64ae46641d8072cd138daacad30ea8e2198ce811fcf951c6f1e2325b84d6bd19e0a
- SSDEEP 3072:TSFW5lAqpGdYRbxO2wc48m3ZfB4S8ZuaL3L:TSFW59bwuYlB4S8ZF
- TLSH T1D4B43205FF499A1BC87A373349E78F84F331E5945B2FA3332369562E6DD63884E82584
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level10.resS
- SHA256 b4258851d778252ba7a02f1d0dfee68eccc6fc8d85d6aca961bdcf692290caf4
- MD5 f2f66503e30e8b72b00541b97cbdcc8f
- SHA1 a6c07ab36c123a2e5cf824469642751818221ba1
- SHA512 fa10ff784a5614b628c79edf8c3aa13d61d42cb7802d6deae11433cc9563766e94de5999dd6ee717c7c66aaf65380d93d89fb45fd3191c972d45bfecb28bfaef
- SSDEEP 3072:KYqDUV24zmGiWphGPYzD7mtzFz8Lxcfm4hT2p6U1DkfaLnb7g/uHjchDCUXEaB66:5iWphGPYf7mtzFz8Zhy
- TLSH T106E3FA1E54AF1338F5EF00036571709BAD010A72DDFFE37612A6BE891A81A19B5CB2DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level11
- SHA256 dc897ba7e5c441a2b8e45825122843f51efc3dc98123d98f5b6ca2c69f192175
- MD5 e4fbf0e20c9cdf5c8bef6c8d5e24de13
- SHA1 81f9725b38c4aa78958fe16cdef662e06ac7316e
- SHA512 0de4991d97516d53977629cfc797e3c9f8d0897f7ae928099f8535d4915817c59a41955e1274702cc9722237c588d4204f8901b5fc3ceeb01226747da4ec6561
- SSDEEP 1572864:cIkONnItCH65nyeqmv3dtNxrxZJf7n1nqf/qMn5Hw5I1ITP/WJOkr+71hq8p+AZy:XjIIH65n7qmv3dtbx/f7nVqfJ5Hw5IWc
- TLSH T15D187DA1E9B29F1AF37BC139C2B17F09D26B8069FB06453FB95A87869CC66D015CD103
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level11.resS
- SHA256 9ac7acbc187431cefb033144e1a3f9d5fec3da1427920f1997f26ca464b7699a
- MD5 5da96ee730b919a1b60e1cf78c4db985
- SHA1 3d25c863db3c49e8fdc119c6d9ded6f835cb3108
- SHA512 804d51c4fc9652e30e0d2e0f20ad2097e4237695d7b6d31395e4dd62e3115c8fe004e21c99b7dca69f429b61d532dea12285e66248380a80e437c4f4e780ea2d
- SSDEEP 3145728:mMhPUf71aW/xZMz85MlIneqv++v6Nkp0IZkaODpN0wiK+ozPUAN0gdcyAo5:mM8q851neqmKi+6N0gdcO
- TLSH T174F8C001E9C37769982E8477DAB364D9EA4125A32FC4A9322C3FF431987AFE427D405D
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level12
- SHA256 a4bf7e9485d9932d2edb56c5ca169189719fd979dbcc43046bc9640eb9ea38c1
- MD5 6e74b7d83866ea44b6d92828cb3d4cf7
- SHA1 b0fa44d93794f64d7e6dd60b916d7925de579a5a
- SHA512 d6cd60addf26dd837134eef27b9bb8bca79993341500c8d129dd519c44e4bb07ad9420abb12c82b25897f67ed8a9ee84bb8ccf74424bde4f418e5a2f22a7b6dc
- SSDEEP 24576:OkrgqQlXlMk87rCdMr3FdN6L8K9Dl5EO/SPTYiP:O1TX1i9zvax5/qPDP
- TLSH T1B5D59201FF19CA1BD569673389EB5F88F330D2948B1F23372679AA5D6DE17C81D86088
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level12.resS
- SHA256 b13329ce3b17310e02ac65ce7fe5e92607038d520da8df6cd65a4b3e49e3ffb8
- MD5 6b3dee777daf9ee6cf44ff74c8797a14
- SHA1 1e092a1e1035774ece25d85f79e3b125ef367a6c
- SHA512 1f980ba684bf1074fd5a008e1dbe09f43d7af6c0949fb961580483cec9d44f8c7353837ed43c355d9f616fdf5655ddd8fa787d87988fb0c829a25b4d5c6b1ab5
- SSDEEP 49152:aXaLI/QSsMPBuH3ihpaT3AFoHG3Xw62/2o/bu6yYvf5U5M:aSChsMPBuyhwo3Xw62/2o/MY2M
- TLSH T155668D1B5BC27A03F8476E72A973CD902AD5B14A6084FFB70D30F16225717106BEA97E
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level13
- SHA256 64606f09f13a9b7401f9fb16fbfc970a41430a107186637bcb5404eddc06700e
- MD5 4edd72a0529b4592fc43ec67651ba8a3
- SHA1 b3c2be6d5bca6826a944fa74749a60c43f0f3e6e
- SHA512 56d5f53ab4780cb2eb4ef869a0d0d8899d1cad8bc07f7f4165de491bd9e5b5016eb676e4a5ba1771c13d197a01e4f66c0f5ad6ee0039e7a4cb98a9a1e6c27613
- SSDEEP 384:HtCP3CBvU5R7qn6W7bsBMPlUrEmjfwJqlKsAb9CoX68KmETw4uoMEuDWK:NXvKy4ZEmjfwJqlKsAUoKC71oME
- TLSH T1F853B46AA7816A8FC975333349AB5F58F771C5994F3E93330BB1922D2CE638C2E45190
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level2
- SHA256 26a4608c2e17f0b783c9c7ad7c9d9b62f0bf45c0a0cc2211f39b5fe9a7792455
- MD5 7f3e5b6d37b1f54ff4667b82e3ee8d94
- SHA1 580741f57c004e5fef5820b91892b98c349e2bad
- SHA512 95b104af0c246e35d54dcb4fee8f171b76532e852a1688be2929da4ca600a6df6ec2cedeba9afb5522c3aa269a0185882a82eded442bdc9414297ed5dd094981
- SSDEEP 384:5hSoheymlbl2NGOhJBDlaW7CNTeD9wq1uVrplA4uoMEuD:3SohclUZdll7CNTM9buVrplA1oME
- TLSH T1ACF23C4AFB042A9ECA7873330AAB1F95EB30D9994E7E57331374510D1CE234C2F9A598
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level3
- SHA256 d7205d46ee0a29e5defc0303a64eeee38225956929ec17b0c0e507fddec64dfe
- MD5 6ceff297966a15eba32658f78c2efdc3
- SHA1 e2595e06b0156b0feec3eecfd2d55f7344d93ced
- SHA512 9b9d23ee48348c90f3f290835d169b5544511226fdfef0451f136ecb6ed768c8b44a001f686aa86160c3c43a268739a34466eb2df409d4170455aca43a33f7ba
- SSDEEP 49152:1wMU3DoTIWaXUa0LkhYFfkKULCVt55qU5Ol/6ES9jHddaawF5+SefgaWqn/1jH8j:U3EU10bdkvWzYlyEQHzaawBewi1bI
- TLSH T108166A51FF62DB1AE6BAE33388B36F44F332C1459B2E53372669925E2CD63D80D85046
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level3.resS
- SHA256 c1f1495e3d0d4bf20c8e899a847f0531badd432d100eb69c29b5c0a88aa430e4
- MD5 03d2854e86783929a4d9bdc90ff986f2
- SHA1 8f5f99cd0a5d089f0990fa40ca0892912d6678f8
- SHA512 3e2ea80b8642bf42f69cbcd1d19a25113eb5bae57ef9b7b34edfe638b572fb254b93d971f6736201d439ec13a0b616dd2e9949493721dddb42530e3a529b6290
- SSDEEP 393216:OYj7fTNCuSy6OLfDpAHOkmHpo+ZGCGMElt2tibMibwDo:bCuSy6OLfyHXmHpo+ZGCGxt2tiZss
- TLSH T1DE07BF07EB938A17EDDB0FB60CB726852FD9054949926EA60C79F9180CB571233E70BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level4
- SHA256 01d3b787e78f8811bef33c389dcda9cfe49dbac62cc7ed24418d6d5ecdd5c2fe
- MD5 8c2cf5bfebea4d7762580d278153507a
- SHA1 621b86bafe1b97867dac371ffd1bd07e839872f5
- SHA512 53f6216debc9809e764fc64b84d334eff257ac2dadfdde19035f9c313dd7b2f80581e05cbd67c797f668bbe0455f83b981be5b09da74e7ae3b05b3ea212584c9
- SSDEEP 98304:u49PefbZOYQZC5eIu8V4BgTqSdyuJzNdrxOFnAwn2o5UWy:uQW3nuK4WTqpuZN5EFnznf
- TLSH T1AD765941FB668B1BE67AE73385E3AF48F332D0149B1F623B2669574E6CD67C80D85042
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level4.resS
- SHA256 7f1fcb197c8c270599309d87fa97d0676692e510d6203a28cd91e4793a1f1692
- MD5 bd1910138ff00245ab5bcf90fbbc99ac
- SHA1 956d911ef1a0486674b2dc98e0ecff48b466b2a3
- SHA512 95efa62c284bf6b56528e41bc89c963e9c13e7f088e665770ed748cf381b17f67532565122ad18dbeb0d2017e068a8b3364eb96f442715277a9d446f9e1d56c2
- SSDEEP 786432:7sMPoXasuXra1qMOS2fA4lFttv1MEP2Ld0Ag1yBC:IXasuIqMOZfA4p1FiC
- TLSH T1FA778C07CF63BA53D4C69F728AB355602EE8B0054491AFB62DB4FA290C727107BF946D
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level5
- SHA256 7e9b5ecc171924394e18e81dc6682f4c170f3aa94de7a70f356e1cc511622bf4
- MD5 c69e920730ce71610310059f97ad4f7f
- SHA1 d977eff9d89a2c3e4b491aeffa32a7e6a8a5cfb5
- SHA512 bf4c63956d5dd5bc407dbdb8673db7b8a2fa18e45540c2a21d248ab548071a2775b1c64cb00bb4106649f28d9ca1b76b8691234beddfc5fc3e16256577009cac
- SSDEEP 98304:X4OhJVzSHxcI14tcxtmSzMHLzZNySAYkEVopzdE+meeTnM:XbdSHxxat8tmSzMHjySLLoV2+
- TLSH T1CEB61701FF168A0BE67AB73389E7AF48F731D1549B2F62372269574E6CE53C80D86085
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level5.resS
- SHA256 e8fa49a955d3f75b56856a13ca2d05e98db0129f953e6cf2785a4b9e0ea7fa13
- MD5 2904457bdb04b77afd1fb9aa95ba1090
- SHA1 5fc1e47ec49ed1f1cdedc2e95d5dd0926f4a8e71
- SHA512 c3591bfc6ce58c74858fd0e8a881c31c42931c42bb7c774935bdb434c20a83ea5e411bcc7f39f418d71d9eb65c2ba5986369a235edd3d8d21a59a266d4c589f3
- SSDEEP 786432:GTBLf2U2jRl+ZGCGsGQSmH87q0vOg6i8PMCuSy6Gt2tiPWWm:4fGRxmH8ogart7Wm
- TLSH T16867BE07AB938A13EDDB0FB61CBB16C52ED4154909A5AF760D34FA280CB175273E70AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level6
- SHA256 333c1f4e378979780710236f69c5fd53874d0388cae438203c06b918c45810b2
- MD5 4a66df20a3a606ed5a85387370aa6366
- SHA1 19eb03369d43b35604cadec60298e5604ac052a4
- SHA512 c94ae725d55bffc7dfe95f99e58196a0dfbcc06b584018402534644c67f5787a43ca6cdeaa55c64925cbac8c4f371edb11c18b675a3dc857ab8fc9ad3ab358ad
- SSDEEP 1572864:Pe+bi3uIAqG+2PLjzfQEQIAv15u7komTfP32nS6pyfGpqKYfbiXvzR8EI44VqJMM:Pe+bi3uSLq3tzIv0koOPOS6pyfGafbK5
- TLSH T1C7187DA1E9B29F1AF37BC135C2B17F49D26B8069FB06413FB966878A9CC66D015CD103
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level6.resS
- SHA256 14aa19eed6c2dadd3a0278586b861c8eb2340c4355c81685ff55a3751a5d3e9f
- MD5 91e2fc8cdd7a1865462836eff76fadaa
- SHA1 b86f4fe3cabd7a4b1202d90193ff7b441152a0c6
- SHA512 9940fc49ddf4c5f0b0f0bddca8b24c621d905c380a0b94667a18b5073b8125d98c4acfa4f7e46228713470dc307c9264bef347b9beb9cfceaffd77d9d5c2cbc9
- SSDEEP 3145728:D8RaSiL3K0vLgzojg1z+7xUaK3vzt3cU3dG/DVfpwQfhgq46B+z70LgpuSs:D/33yz+LI5cYdcBgqK6g+
- TLSH T165F8C001E9C37769982E8477DAB364D9EA4125A32FC4A9322C3FF431987AFE427D405D
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level7
- SHA256 5c1cd9ff6a8abdb99ba64a3cf377aa9974b0559823878afd96910ecaf21f0e37
- MD5 10ebf5ae7902233cc29fc60b20c88e69
- SHA1 e5df6f05abe90e7f177a816c20c305aa25ab408e
- SHA512 5782d0b3a145c8c6640e3e62ee3b2ccb8d7cc591815e0fe165b63b2f111e8f58d959e80aabcda2b866a674f8d88d1f2574079bdee4ef90d39749f3b279e8d56d
- SSDEEP 49152:Bha6VxdFLvlJV8ES9tfGifBe2fphp/t6t+SeVnn:ldX8ESRfhQeh
- TLSH T1D416E445FB529B1BE67BB73388E79F48F231D1449B2F223726A8465E7CD53D80E86042
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level7.resS
- SHA256 f87f81509119d85aa29f0926d54e3eeebe1e7af1658db64f9d982f6b6f8098f9
- MD5 863c001fec51c45fdedfe1f74c4c4713
- SHA1 865292b609645ae2eb48888a4a43aae853e1b0a2
- SHA512 ca24606b4500086de170491e9954ea61e4ece98601f1af40957c4b5d7345140228dd5c0ebcf494f8adeebb85c1fa868c60de40107ab745d68aba56a5e02e7cc4
- SSDEEP 196608:tC7cA7MYkEZmvaSUNrPd70Uq6ruZaN9cnyKU5bRZVosV+KS8Wg06B0:QX7MYkEZmvy4W+f8n
- TLSH T11ED69C13EB93CA23EDD70FB65CB711892EE5104949962EA60D79FA184E7471133EB0BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level8
- SHA256 486afab13d05f739e270eda3e27bbe1eab9a7a8d1d9ca638934d7cd751a6ed94
- MD5 4f64ef8338b86ecb44d0f7a07249ea4e
- SHA1 8aba814ede935e159ce8b6f8e288fba326092482
- SHA512 ff2044c233219253e8a39647ca65b205a78287b86e03471b71a0064c2e6db1189334e3a10f6f21c89e4b4064250c835d28a263ff1497c6437edacecced5e8859
- SSDEEP 96:seLvjISpkverfCZfZg3c+F7hVBbsHlt/ZV:seLvjIw9sfz6BCf/z
- TLSH T11FF1B98AAF28095DC174B337469B0F40EB20C5954A7F573B03B8992C7DE3B6C2E5D654
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/Gamble With Your Friends_Data/level9
- SHA256 7881efbe6a508b422f17803b986a050bf24dbc671c205cca782c4cc09c3da6b5
- MD5 1a88af5b44f68ead80d33748b8c854b1
- SHA1 1410d9b486518cd2cbac25c2309016f814d5b348
- SHA512 0ebeedfa16f18de26d017d44b6f28598706ae4288d28af69f120c9cfa2f60187ec5395ed4854685ee7105bd28375f185d2053ddf3ba9420172d81f0c5aa4eefc
- SSDEEP 6144:wlQrjFIM1LX/wgs2nT56mfuRRDiPafrU/aAJzJY3FSp3Y8KOI9+:wgTZuUa4/aAzY38p3YhOx
- TLSH T1D9A67946F6429B5FE4B7373315D39F88F231E0554B3F723326A81A2E7CD5388AA92191
- MD5 SHA1 SHA512 SSDEEP TLSH
Gamble With Your Friends/dlllist.txt
- SHA256 662dd415e2796635702c49586fb99ae62a3c6f595976d6923ec8a4e7c23fa8fe
- MD5 ff98c62757cb7c9f5dbedcd67d3781f6
- SHA1 82076991ee9a824bcf9969b416fcc163d02a6160
- SHA512 42973bbb4feb375354684c0356c45bfa7f0bf63056906244c2c0ac89720326cfa41c9aa51e2522d1d9da66c019ccf3dba570a732007e8b3306e66920faaae791
- MD5 SHA1 SHA512
Read_Me_Instructions.txt
- SHA256 4334c752a531140bb4c2f44278016e233a6412b78c5f1070ce71ee58672b33f7
- MD5 2a323f6236e4f2220dbcb42283ffd6a7
- SHA1 ad349675ef396ae2eeb631eebb74a7f0d6025337
- SHA512 764efa0f1b31111347eda91c375c14f7d55fb566d45867f7b6894017a1f8720c53108796a008dca8e1121116505f0cbf9be0ef62d9ace935263e13da12c12122
- TLSH T15C51757697C64BAD042C4D2309B5FD9C635694C9DE361460F7EC81E46F269708F248FB
- MD5 SHA1 SHA512 TLSH
STEAMRIP » Free Pre-installed Steam Games.url
- SHA256 4572f3812daf7bcd347d1a36834c5a9fec1f530093adf688a6ecd9e6092cbf76
- MD5 bb3af69a2e7704bc210886920ff7681f
- SHA1 42fa4a09d62cce1c0d70a63e0816135fd6b410e3
- SHA512 4f86d06f06859ed87d5f5353de9971c118477c956a8e0e0019b275f6eb035b2841c7cb959c9f4823a599ca7e73f6a0ed320207d917e8f4ab2a9b20e732551839
- TLSH T119D0A9BA0B58900AD321C81AE030BC08E44E75568CDED0B932C4CA8A4D96481C8A6BA8
- MD5 SHA1 SHA512 TLSH
_CommonRedist/VisualCppRedist_AIO_x86_x64.exe
- IMPHASH 524711ec9c5a149fe3bf3479d0b505b6
- SHA256 3c188e4651bcc07df2bdb06d69585158797b1bafb91557b09217621628cd5b23
- MD5 1a7523d92b573859df4cbe8e75509b9e
- SHA1 65b0ccf1fe1f23c4a0557b8a30251cc7e70a1f73
- SHA512 f7c684c00265402876a4159869774096090c7482358fa1882a50468c89483c9a30066667418d510dcc5b9780fbdfd1bcc6672f92ec53cb933c0b36292c6ec40b
- SSDEEP 786432:4JVdGL3z5NXeyQIwJtNYUJwif0nOJa9WEWRIOG5B7DVGLhYNBFv3cnZCa:gjOLXelIMjJwi0wMVW6n7ShYWCa
- TLSH T10E6733B51858C4B8E7E0B1F00807F5E1769AF9BCE9C5CC46B1F4BC99A19E4618FE612C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
97583
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
ord17
shell32
ShellExecuteExW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetSpecialFolderPathW
gdi32
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW
advapi32
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
user32
GetWindowRect
SetWindowPos
GetWindowLongW
GetMessageW
DispatchMessageW
KillTimer
GetDesktopWindow
SendMessageW
EndDialog
ShowWindow
BringWindowToTop
wsprintfW
MessageBoxW
CreateWindowExW
ScreenToClient
GetParent
CopyImage
ReleaseDC
GetWindowDC
CharUpperW
GetClassNameA
wsprintfA
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetSysColor
DestroyWindow
MessageBoxA
GetKeyState
GetDlgItem
GetClientRect
SetWindowLongW
UnhookWindowsHookEx
SetFocus
GetSystemMetrics
SystemParametersInfoW
DrawTextW
GetDC
ClientToScreen
GetWindow
DialogBoxIndirectParamW
DrawIconEx
CallWindowProcW
DefWindowProcW
CallNextHookEx
PtInRect
SetWindowsHookExW
LoadImageW
LoadIconW
MessageBeep
EnableWindow
IsWindow
EnableMenuItem
GetSystemMenu
CreateWindowExA
wvsprintfW
GetMenu
SetTimer
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
SysFreeString
OleLoadPicture
SysAllocString
kernel32
SetFileTime
SetEndOfFile
GetFileInformationByHandle
VirtualFree
GetModuleHandleA
WaitForMultipleObjects
VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
SuspendThread
TerminateThread
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
SetEnvironmentVariableW
GetDriveTypeW
CreateFileW
LoadLibraryA
SetThreadLocale
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CompareFileTime
WideCharToMultiByte
GetTempPathW
GetCurrentDirectoryW
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
lstrcmpiW
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
GetProcAddress
GetModuleHandleW
GetStdHandle
WriteFile
lstrlenA
CreateDirectoryW
GetFileAttributesW
lstrlenW
GetLocalTime
SystemTimeToFileTime
CreateThread
GetExitCodeThread
Sleep
SetFileAttributesW
ExitProcess
lstrcatW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetQueuedCompletionStatus
SetInformationJobObject
CreateIoCompletionPort
AssignProcessToJobObject
ResumeThread
CreateJobObjectW
GetLastError
CreateProcessW
GetStartupInfoW
GetCommandLineW
SetLastError
GetDiskFreeSpaceExW
GetStartupInfoA
msvcrt
memset
_wtol
_purecall
memcmp
??2@YAPAXI@Z
_wcsnicmp
memmove
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
malloc
free
wcsstr
_CxxThrowException
wcscmp
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
strncmp
wcsncmp
wcsncpy
strncpy
memcpy
??3@YAXPAX@Z
Name
.text
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
360KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
_CommonRedist/_redist_readme.txt
- SHA256 b9ff3c3422e06fb509f4d9ea3ae4493ee804a7efdd1297fbff8eceed40b6c403
- MD5 c4f016cdab6a3015ed1eb6e48636f97d
- SHA1 d37f4aab46e9a71c5637f826e2ef140c0b8d10a9
- SHA512 34cf5a003d6da2637cb6b56713a817399fa0f774b6d99fdb1bbc104d949030d2f110bbd7a4ba8d5fc887d2a94be1ab65f9f34556d2a11e9f9575bf0ee05b549f
- TLSH T14341CA3AA3C947AE482C0E6319F0FD9C636555C2CE320450F2ED90E86F768758E199F7
- MD5 SHA1 SHA512 TLSH
_CommonRedist/dotNetFx40_Full_setup.exe
- IMPHASH 02483cd76378259a50b7b66146b45f06
- SHA256 fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425
- MD5 53406e9988306cbd4537677c5336aba4
- SHA1 06becadb92a5fcca2529c0b93687c2a0c6d0d610
- SHA512 4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99
- SSDEEP 24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD
- TLSH T1F2151232ABA0C133D4DB28B48ADDB6B2657DE6610374C4C7B7440BEEAC307D1697964B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
102854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
boxstub.pdb
advapi32
CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA
kernel32
Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException
comctl32
ord17
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
shlwapi
PathRemoveExtensionW
user32
MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW
cabinet
ord22
ord23
ord20
oleaut32
SysAllocString
VariantClear
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boxld01
Size
512B
Virtual Size
194B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=158, version=20928,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=171, version=21009,
count=18, id=158, version=21009,
count=105, id=170, version=21009,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=194, id=1, productName=Unmarked objects,
count=69, id=175, version=20928,
count=1, id=171, version=20928,
count=1, id=155, version=20928,
count=1, id=154, version=20928,
count=1, id=157, version=20928,
_CommonRedist/dxwebsetup.exe
- IMPHASH 1494de9b53e05fc1f40cb92afbdd6ce4
- SHA256 2cf71d098c608c56e07f4655855a886c3102553f648df88458df616b26fd612f
- MD5 2cbd6ad183914a0c554f0739069e77d7
- SHA1 7bf35f2afca666078db35ca95130beb2e3782212
- SHA512 ff1af2d2a883865f2412dddcd68006d1907a719fe833319c833f897c93ee750bac494c0991170dc1cf726b3f0406707daa361d06568cd610eeb4ed1d9c0fbb10
- SSDEEP 6144:kWK8fc2liXmrLxcdRDLiH1vVRGVOhMp421/7YQV:VcvgLARDI1KIOzO0
- TLSH T19654F15197E4817BE4FA1B311DF2025327797DE86CB9E32E838658881D71780BE35B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
27:76:a5:a9:c5:b9:5a:43:1b:2c:30:b6:5e:2d:45:20:bf:45:97:ec:05:e8:52:14:50:01:2c:09:4d:ce:b4:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 17, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4a:a4:f7:31:c4:ff:22:a2:49:00:00:00:00:01:4a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
23134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
243KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
_CommonRedist/oalinst.exe
- IMPHASH 1ff011c2e13ea492fe69b2fbfc802083
- SHA256 b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- MD5 694f54bd227916b89fc3eb1db53f0685
- SHA1 21fdc367291bbef14dac27925cae698d3928eead
- SHA512 55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP 12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
- TLSH T1E005F10020D5CC73E4EB32B3843586746EBA7E912F0A285B7FC476AEE673176DA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Chains
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Serial Number
36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 30, 2006 - Jul 14, 2009
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
61:0c:12:06:00:00:00:00:00:1b
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 23, 2006 - May 23, 2016
Minor OS version
0
Major OS version
4
Entry point
27713
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary
user32
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
636KB
Virtual Size
633KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
_CommonRedist/xnafx40_redist.msi
- SHA256 47260420773a20443fb1e38a89b7f39c5237a80a842de598e6c8f7f90a3bbd6d
- MD5 ff1c0202ab7147c9dfd34b582f1da13f
- SHA1 5fc95a9ad87a38e71a953af116fd1f1cbe46a3e7
- SHA512 9a233fd33fa535d0783ac4a97108166b860d7647998ce184e6e5103200a6c8522a5e4d035b85e02280f5176c092e0d3e61a60f228d7ca17f09fcf2fc5cdf5253
- SSDEEP 98304:synfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:sYD3C1XXfzH+4cLHU5PM/Mnt+YGlq
- TLSH T1D06622A2751AFF41DDB406FCD970CA490925CF3B82274C686929356A7BF7E0202E9D4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4de5a274bfc2530daf28ae9c5c714c8810cabd6cea9cf96f447489d406a1b9b0
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 12, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:37:41:8f:43:e7:5a:5b:6f:a7:00:00:00:00:01:37
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025