CHEADLE+SSC.zip
- SHA256 e137afcadc61f28a47c8fbf06b149edd1fdb869855393ee9406d3ad7ae0ad0b0
Password
ss
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CHORIG/CheadlewareLoader.exe
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
CHORIG/CheadlewareLoader.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
SSORIG/SecretServiceOriginalOffline.exe
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
900 seconds
Behavioral task
behavioral4
Sample
SSORIG/SecretServiceOriginalOffline.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
25 signatures
900 seconds
General
- Target CHEADLE+SSC.zip
- Size 61.1MB
- Sample260928-dr286steqd
- SHA256 e137afcadc61f28a47c8fbf06b149edd1fdb869855393ee9406d3ad7ae0ad0b0
- MD5 5b614fdfe5f62a2847d673ac3bc503bb
- SHA1 bb9888a3b14bece22e6c7e7fdb8a43c664ff6b5f
- SHA512 5f7c031b87363eff294bc663d4e3d4eb67acb9fc839a3ba741a743808a49c849066042275449f5532081bea688309470bab7697014b8e110b538e9087d32d9ca
- SSDEEP 1572864:GnhGGTzD+CTsKeotUX5vbIGv3VAsjCb8g/DogUi:gDzqCpe4UX5vbBPKuU/D/R
- TLSH T158E7330024F8CE7ADD4F62351E6B49C979AB7E1AC58223B762B423BC4C61F7783115E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/CHORIG/CheadlewareLoader.exe unpack001/SSORIG/SecretServiceOriginalOffline.exe unpack001/SSORIG/source/assets/active-image-b1.bin unpack001/SSORIG/source/assets/bootstrap-b1.dll unpack001/SSORIG/source/assets/bootstrap-b2.dll
File Explorer
-
CHEADLE+SSC.zip.zip 61.1MB
-
CHORIG/BUILDING.txt1KB
-
CHORIG/BUILD_CHORIG.ps1.ps1 1KB
-
CHORIG/CheadlewareLoader.exe.exe 15.0MB
-
CHORIG/source/build.ps1.ps1 18KB
-
CHORIG/source/loader/activation_lifecycle_contract.h2KB
-
CHORIG/source/loader/captured_gmod_logo.h2KB
-
CHORIG/source/loader/embedded_payload.h796B
-
CHORIG/source/loader/load_chain.cpp317KB
-
CHORIG/source/loader/load_chain.h775B
-
CHORIG/source/loader/load_chain_timing.h505B
-
CHORIG/source/loader/loader_auth.cpp.js 8KB
-
CHORIG/source/loader/loader_auth.h1KB
-
CHORIG/source/loader/loader_background.cpp8KB
-
CHORIG/source/loader/loader_background.h283B
-
CHORIG/source/loader/local_loader_contract.h10KB
-
CHORIG/source/loader/local_loader_main.cpp.js 69KB
-
CHORIG/source/loader/local_loader_support.cpp.js 47KB
-
CHORIG/source/loader/local_loader_support.h1KB
-
CHORIG/source/loader/offline_signature_database.h15KB
-
CHORIG/source/loader/offline_signature_fingerprints.h48KB
-
CHORIG/source/loader/relay_failure_cleanup_contract.h430B
-
CHORIG/source/loader/signature_thread_adapter_contract.h1KB
-
CHORIG/source/loader/transport_crypto.cpp29KB
-
CHORIG/source/loader/transport_crypto.h2KB
-
CHORIG/source/relay/payload_context.h704B
-
CHORIG/source/relay/relay_attach_state.h1KB
-
CHORIG/source/relay/relay_cleanup_contract.h829B
-
CHORIG/source/relay/relay_context.cpp1KB
-
CHORIG/source/relay/relay_context.h886B
-
CHORIG/source/relay/relay_entry.cpp15KB
-
CHORIG/source/relay/relay_entry.h964B
-
CHORIG/source/relay/relay_lifetime_monitor.h2KB
-
CHORIG/source/relay/relay_mapper.cpp27KB
-
CHORIG/source/relay/relay_mapper.h995B
-
CHORIG/source/relay/relay_support.cpp11KB
-
CHORIG/source/relay/relay_support.h3KB
-
CHORIG/source/relay/relay_transport.cpp5KB
-
CHORIG/source/relay/relay_transport.h2KB
-
CHORIG/source/third_party/imgui-1.91.9b/LICENSE.txt1KB
-
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_dx11.cpp30KB
-
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_dx11.h2KB
-
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_win32.cpp48KB
-
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_win32.h3KB
-
CHORIG/source/third_party/imgui-1.91.9b/imconfig.h11KB
-
CHORIG/source/third_party/imgui-1.91.9b/imgui.cpp861KB
-
CHORIG/source/third_party/imgui-1.91.9b/imgui.h369KB
-
CHORIG/source/third_party/imgui-1.91.9b/imgui_draw.cpp252KB
-
CHORIG/source/third_party/imgui-1.91.9b/imgui_internal.h266KB
-
CHORIG/source/third_party/imgui-1.91.9b/imgui_tables.cpp241KB
-
CHORIG/source/third_party/imgui-1.91.9b/imgui_widgets.cpp505KB
-
CHORIG/source/third_party/imgui-1.91.9b/imstb_rectpack.h19KB
-
CHORIG/source/third_party/imgui-1.91.9b/imstb_textedit.h55KB
-
CHORIG/source/third_party/imgui-1.91.9b/imstb_truetype.h194KB
-
SSORIG/BUILD.ps1.ps1 26KB
-
SSORIG/BUILDING.txt1KB
-
SSORIG/SecretServiceOriginalOffline.exe.exe 62.1MB
-
SSORIG/source/app.manifest.xml 392B
-
SSORIG/source/assets/active-image-b1.bin.exe 17.4MB
-
SSORIG/source/assets/bootstrap-b1.dll.dll 17.4MB
-
SSORIG/source/assets/bootstrap-b2.dll.dll 17.4MB
-
SSORIG/source/assets/garrys-mod.png.png 20KB
-
SSORIG/source/assets/mbcinfo-template.bin1024B
-
SSORIG/source/assets/reconstructed-bss.bin3.6MB
-
SSORIG/source/assets/reconstructed-bss.mask.bin3.6MB
-
SSORIG/source/assets/secretservice-icon-16.bin1KB
-
SSORIG/source/assets/secretservice-icon-24.bin2KB
-
SSORIG/source/assets/secretservice-icon-32.bin4KB
-
SSORIG/source/assets/secretservice-icon-48.bin9KB
-
SSORIG/source/assets/secretservice-icon-group.bin76B
-
SSORIG/source/assets/secretservice-icon.png.png 23KB
-
SSORIG/source/core/build_secretservice_entry_envelope.cpp8KB
-
SSORIG/source/core/build_secretservice_offline_handoff.cpp7KB
-
SSORIG/source/core/call_secretservice_carrier_thread.cpp4KB
-
SSORIG/source/core/gmod_main_menu_gate.cpp23KB
-
SSORIG/source/core/gmod_main_menu_gate.hpp651B
-
SSORIG/source/core/inject_library.cpp20KB
-
SSORIG/source/core/install_secretservice_context.cpp3KB
-
SSORIG/source/core/install_secretservice_game_hooks.cpp532KB
-
SSORIG/source/core/install_secretservice_locale.cpp2KB
-
SSORIG/source/core/install_secretservice_network_worker_idle.cpp5KB
-
SSORIG/source/core/install_secretservice_steam_offline_guard.cpp11KB
-
SSORIG/source/core/invoke_secretservice_veh.cpp78KB
-
SSORIG/source/core/manual_map_secretservice_active.cpp50KB
-
SSORIG/source/core/resolve_secretservice_interfaces.cpp135KB
-
SSORIG/source/core/resolve_secretservice_lua_exports.cpp10KB
-
SSORIG/source/core/secretservice_bone_access_compat.cpp29KB
-
SSORIG/source/core/secretservice_bone_access_compat.hpp1KB
-
SSORIG/source/core/secretservice_clean_traces.cpp.js 10KB
-
SSORIG/source/core/secretservice_clean_traces.hpp70B
-
SSORIG/source/core/secretservice_config_sanitizer.cpp17KB
-
SSORIG/source/core/secretservice_config_sanitizer.hpp557B
-
SSORIG/source/core/secretservice_config_schema.hpp10KB
-
SSORIG/source/core/secretservice_deferred_event_worker.S105B
-
SSORIG/source/core/secretservice_deferred_event_worker.cpp15KB
-
SSORIG/source/core/secretservice_deferred_event_worker.hpp1KB
-
SSORIG/source/core/secretservice_hook_fingerprints.hpp15KB
-
SSORIG/source/core/secretservice_hook_normalized.hpp25KB
-
SSORIG/source/core/secretservice_import_rebuilder.hpp4KB
-
SSORIG/source/core/secretservice_native_chain.hpp1KB
-
SSORIG/source/core/secretservice_native_main.cpp78KB
-
SSORIG/source/core/secretservice_network_guard.hpp12KB
-
SSORIG/source/core/secretservice_scoped_early_auth_hook.hpp8KB
-
SSORIG/source/third_party/freetype-2.13.0/FTL.TXT6KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftconfig.h1KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftheader.h24KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftoption.h41KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftstdlib.h4KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/integer-types.h7KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/mac-support.h1KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/public-macros.h4KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/freetype.h173KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/fterrdef.h12KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/fterrors.h9KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftglyph.h21KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftimage.h41KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftmodapi.h22KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftmoderr.h6KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftsynth.h3KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftsystem.h8KB
-
SSORIG/source/third_party/freetype-2.13.0/include/freetype/fttypes.h14KB
-
SSORIG/source/third_party/freetype-2.13.0/include/ft2build.h1KB
-
SSORIG/source/third_party/freetype-2.13.0/lib/libfreetype.a764KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/LICENSE.txt1KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_dx9.cpp18KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_dx9.h1KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_win32.cpp45KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_win32.h3KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imconfig.h10KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui.cpp762KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui.h315KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_draw.cpp219KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_internal.h250KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_tables.cpp232KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_widgets.cpp439KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imstb_rectpack.h20KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/imstb_textedit.h55KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/misc/freetype/imgui_freetype.cpp45KB
-
SSORIG/source/third_party/imgui-1.90-wip-18995/misc/freetype/imgui_freetype.h3KB
-
SSORIG/source/ui/d3d9_texture.cpp10KB
-
SSORIG/source/ui/d3d9_texture.h767B
-
SSORIG/source/ui/main.cpp18KB
-
SSORIG/source/ui/native_chain_bridge.cpp.js 7KB
-
SSORIG/source/ui/native_chain_bridge.h1KB
-
SSORIG/source/ui/resource_ids.h108B
-
SSORIG/source/ui/secretservice_ui.cpp33KB
-
SSORIG/source/ui/secretservice_ui.h3KB
CHORIG/BUILDING.txt
- SHA256 dea8d256ddb1a2fc542d4a1dc407090ac09b7133ce3c2db9c09b7a7aecfd67af
- MD5 96be87a82798a9458d7589d34c2cf2cd
- SHA1 24097c98cc7ffe53d38c5fa8c0582f6844f87af8
- SHA512 455a32720e4c0c3cb3ad76c56f73142f06b926e8ab530f0927369b19481f8a17cd0c647df2e00c3443c22ccfba0b18f1077c6151d710e87d597bd997602a2bdc
- TLSH T133217537B38763328194C89CD12D87E9C10FD4B583A847A1F894439D5252347C9BBFD1
- MD5 SHA1 SHA512 TLSH
CHORIG/BUILD_CHORIG.ps1
- SHA256 f329644c642c2b838ad81a809369959f220cbe13d073059b6d0156393da1f8e7
- MD5 17e585c6b42f0f418f59332756aee60b
- SHA1 23fa07a223a51698ef56376400831a2c877b6871
- SHA512 2b520e7d54a33fea4e56fcbd3dd56abba128521582631958cebed713576fb44e379c9a899d53f068934112f7fc581447550e56fba1568110f33b48b6437b76b5
- TLSH T1AB31233EA0211D991CEC1288647447A8E717C01FA054C742F51E831DDBB952F86FBAF5
- MD5 SHA1 SHA512 TLSH
CHORIG/CheadlewareLoader.exe
- IMPHASH f62afda149ff7bb0163247e2496f90bb
- SHA256 8ae400be0ea341ca3119edf973d87c63dadd69df6e43f421b99012bd6d85275e
- MD5 6468211258614b0d7f535f0869fc7942
- SHA1 1b65f438b326594d3bbb3e95218ccd007e1d7ee1
- SHA512 2cc86910d9de60e152a34c32f36b2263e04b65a3f4250f4bb1bff63cfd1728230fb3e09c3878df005b15dbcc6eba24ca9f6ceeb0a30210204307b437b0aef55c
- SSDEEP 393216:9GI9sNEV3q7c7tTF9/f7tSV3/WM0VIXTu:FbVaKth9/zeAe
- TLSH T14FF60286A1D492BCC441C134E2455BFAF1A4BC880F79999BBFC25A113F31DD5C9BAB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ss
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
crypt32
CryptProtectData
CryptUnprotectData
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
dwmapi
DwmEnableBlurBehindWindow
DwmExtendFrameIntoClientArea
DwmGetColorizationColor
DwmIsCompositionEnabled
gdi32
CreateRectRgn
DeleteObject
GetDeviceCaps
GetStockObject
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
user32
ClientToScreen
CloseClipboard
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
EmptyClipboard
EnumWindows
GetAncestor
GetCapture
GetClassNameW
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetMessageExtraInfo
GetSystemMetrics
GetWindow
GetWindowLongPtrW
GetWindowThreadProcessId
IsWindowUnicode
IsWindowVisible
LoadCursorW
LoadIconW
MonitorFromWindow
OpenClipboard
PeekMessageW
PostMessageA
PostQuitMessage
RegisterClassExW
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageTimeoutW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetProcessDPIAware
ShowWindow
TrackMouseEvent
TranslateMessage
UnregisterClassW
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memchr
memcmp
memcpy
memmove
strchr
strstr
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_close
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_setmode
_wfopen
_wopen
fclose
fflush
fopen
fputc
fputwc
fread
fseek
ftell
fwrite
getc
setbuf
setvbuf
ungetc
api-ms-win-crt-string-l1-1-0
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_strdup
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsicmp
_wcsxfrm_l
isdigit
isspace
isxdigit
mbrlen
memset
strcmp
strlen
strncmp
strncpy
strnlen
tolower
toupper
wcscmp
wcscpy
wcslen
wcsncmp
wcsnlen
api-ms-win-crt-runtime-l1-1-0
_assert
__p___argc
__p___argv
__p__acmdln
__sys_nerr
_beginthreadex
_cexit
_configure_narrow_argv
_crt_atexit
_errno
_exit
_initialize_narrow_environment
_initterm
_initterm_e
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
strerror
strerror_s
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdopen
acosf
atan2f
ceilf
cosf
expf
fmodf
log
logf
lroundf
pow
powf
sinf
sqrtf
truncf
api-ms-win-crt-convert-l1-1-0
_strtod_l
atof
mbrtowc
mbsrtowcs
strtof
strtol
strtoll
strtoul
strtoull
wcrtomb
wcrtomb_s
wcstod
wcstol
wcstoll
wcstoul
wcstoull
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-utility-l1-1-0
qsort
shell32
SHGetFolderPathW
kernel32
AcquireSRWLockExclusive
AreFileApisANSI
CloseHandle
CreateDirectoryW
CreateFileW
CreateHardLinkW
CreateRemoteThread
CreateSymbolicLinkW
CreateToolhelp32Snapshot
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlsAlloc
FlsGetValue
FlsSetValue
FlushInstructionCache
FormatMessageA
FreeLibrary
GetActiveProcessorCount
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFinalPathNameByHandleW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessTimes
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadId
GetTickCount64
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitOnceExecuteOnce
InitializeCriticalSection
IsDBCSLeadByte
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalFree
LockResource
Module32FirstW
Module32NextW
MoveFileExW
MultiByteToWideChar
OpenProcess
OpenThread
Process32FirstW
Process32NextW
QueryFullProcessImageNameW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
ReleaseSRWLockExclusive
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetLastError
SetThreadContext
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableSRW
SuspendThread
SwitchToThread
Thread32First
Thread32Next
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
VerSetConditionMask
VirtualAllocEx
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteFile
WriteProcessMemory
api-ms-win-crt-environment-l1-1-0
__p__environ
getenv
api-ms-win-crt-time-l1-1-0
_strftime_l
api-ms-win-crt-multibyte-l1-1-0
_mbtowc_l
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
309KB
Virtual Size
309KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
13.2MB
Virtual Size
13.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
CHORIG/source/build.ps1
- SHA256 4df0f9a89f83995fc7c46a869520ccf3f49a4adb702cfb3ae6607a8ad7e4a719
- MD5 e2bbb6ff1443d05ac9fd18d382db0932
- SHA1 52f6b89c1528d3f0b250ed82fa43633ad8518764
- SHA512 df30f19d2854581a928e732da034e9d72ad8786dd2a110e0dda2e39744c1c2072483eb72266865c3b23e47e5072e9a995c5efcf68328fc61df9b1049c2349a5d
- SSDEEP 384:el0LEVi3uU4pg4tPtyuaX8heUP/VNp6AoHar2fnGSxwEyn:el0go3uhlou6UP/np6AoHaCfnGSxwEyn
- TLSH T1FB82C617252989A319F359AED5C98604F602402F0838B554FE5C4258BFF623ECEFDE5A
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/activation_lifecycle_contract.h
- SHA256 b52465b6c62e33d57bdc127cd1b3fddae3c4575fe28df07bbfc8cc68d55c374e
- MD5 df7f10f74685d2c5c9a1d010c0206069
- SHA1 fcfa55c7d4361795ed1c2c8dca7be62af85f4d23
- SHA512 2c7036774d72c210aba443520f7c6f915e6c58dea84f8f9b2751ec7957a0138847d28a559628c0d97b367c109463f5e4e098fb5161f270accc92cd0c780ec7eb
- TLSH T1F6419D842DAA7C5E0617033BA6CAC937AFA80483558FC840F5EE51986F8D138D67D99F
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/captured_gmod_logo.h
- SHA256 9cd669f2ff4f5b5b7ef9d178595c2447f4d9a59b8f37ae35c21bc6275f078967
- MD5 d294598a7e1b90ea8693b43656d2abf7
- SHA1 b1a46046bd012318d2bfdf290a09435fb43cd161
- SHA512 662f6c071aa01625c319f3116fa5b6f54983dace1316174b75e1c22e46132d723e84406572401f08c49b63cddd412a35de36fc54857ffec4fb7f32f8a0360f3e
- TLSH T1EA512945C12B4DE83EDD53122088808A5436144B536B9BA3F7737B3EBB4ED2549EEA35
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/embedded_payload.h
- SHA256 f5f56c479852732036a4f98968cc4851046e9c39027733613e598d676fac44a2
- MD5 562db9bf173467f06ec2b30330f67447
- SHA1 90d15c912be6bf064894c43264f978be24f4b0a1
- SHA512 f1f097664d8405f0a02bc5e6e38c683670b22a136e4808e80bbe4fffdd86f70c5b5b7b94c863ccbe379d8a0ca607a731aa920d4475dc33e9f5ff70b1aa73d9ca
- TLSH T112012241242FF42E6F06789E41A0CC02222E3C8BFDB6A0D69E9A7122AEC816C71650D6
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/load_chain.cpp
- SHA256 427ad23a4b9301d582cee1c681b6175ab824debe7d7efc207a773c67706f8d2f
- MD5 f9710ba15b8f4bfb316a3ecf6fa8ca5b
- SHA1 f0853dfd29d173b522031421b55d41098b278ef9
- SHA512 6e9bb1559e595996e42e5a8cec4ce010a6e9e89d73b5e3b3d3a746b361cf15bd9ee6e586e49680fa71992658100bcfabdfd5d20345ea534e222dcf65a4d4ab65
- SSDEEP 6144:JxYWqg3jx1+UpLvuP2oQqHeUqe5WTw/vUIWGqe58izMz9k0UZSQzU7pWw361JuI0:JxYWqg3jx1+UpLvuP2oQqHeUqe5WTw/O
- TLSH T14E64D7895CBB3C692643853EDB8B4512A7624043265EEA90BE9FC2C02F8D17DD2F475F
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/load_chain.h
- SHA256 ec6267ebda511816f2b730dce01d053ee66736f714d058358dd0cff725306b6d
- MD5 1ef6241d65dc71ccaaff4f697502ca3a
- SHA1 08c11bdcdc73b5c9eea88d3258f7257950d9bfc6
- SHA512 561df3b1be23503c12a9f3e5074066aeef2daf7e4bbd22f2e65b82ea2a1e79507df244ecc8bc41285c675284149ee97a9fc51e99879bec0f74c42f4fafe73f9b
- TLSH T111012644987FFC9BA94320A7B9DD9C2616483847DF9962F7F8CE61A0DF4885C70361A1
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/load_chain_timing.h
- SHA256 2e5517d783e33e0e9165447c7c7978d838f6ffa1eb952f92986733dbbbf7461b
- MD5 4dfd6444af650444396546cb733ccbb0
- SHA1 123b08d7410dd9ae7cb47fdadecfd725c3d35659
- SHA512 4bfed2881b9cab8359f3c80250486712fb87457df9a86a7355008edb2bb5de0de759350a2df51c17b301663169d45225c4fbd5a99706ffb3f9829e576a74f1c5
- TLSH T172F030428D35AD0B7C4349B371C9C4A490A83C52DEDDF681C8BFA3694184925E9B248D
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/loader_auth.cpp
- SHA256 8a6e5be182eaea8320a714c2669d39018fea8ab903e425956f4cbf20324cc6c5
- MD5 6af250f5688471bfa70d82fda2afe5dd
- SHA1 4bf414e187241169414f8c09711fc71fcc3cf161
- SHA512 d60f390171ee65ee864d0688006a2db00d163125a14cff54c510bddf44ecc6f1cd682b918c6efce19ad4ad1177b26c1742f5249b0842028a025b836e42a08e94
- SSDEEP 192:jWeW1vLtSQl4XjPIpb5JsUJrWFUckSjssvzZxnNhlBJss5SR6Sf3z1/:jRI9JsYmjssNVPJss5SRr
- TLSH T1750231C22CF3A816169B913FEA87C406B760E8037BCDC684F58D8114BF451ACFBA45D6
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/loader_auth.h
- SHA256 5a0495cd1c4f7f1b1a7a7460395bd4b06fe89e80f298ae3e8d0b73e64a502fbc
- MD5 d5cd62fb91a2ec0450112e2cdd1c449a
- SHA1 1d13d8c2764c6f1456e386b84e6071f7fe3be57b
- SHA512 d9a07fd4b6968d5c0b9424f9dc110f667df9f229b620de3e18f869f1d9ed3e0c5c0b62f7a979d5123ea6e9640f6365105ef8a30274f3d675d2697ac2b99b853a
- TLSH T17041544594F66D02084B15ABF5D78A021BB02483FBEAC2D1F0CF906A8FC23D5BB75097
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/loader_background.cpp
- SHA256 9fc15410f85b66bc543f03d618795a418545d81055ba1999e984d340a1c62697
- MD5 1ec0078c665d24ca986a880fd4b7b721
- SHA1 ee8054a400d4b854387788bac1f84fe5abb9482d
- SHA512 2748a8003a736c336ae4b8342282e837295e800728def4d1761715fc2372fc41c523c62046dbd4178ea8342a4a2a30566924d9ad4e6d56ea5163a7de69352cbe
- SSDEEP 192:b2mszGqWRpK/6LMHN1lFD0Q5p+q4Rnr8B:9oBHbhARW
- TLSH T11702960D06A74A007D6372989FFB4449117D20D37EE8D9C4FA5EE298CF8288DC56E9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/loader_background.h
- SHA256 89d5f31c5a1b32500145d63aa3c47aa22e7040e4182c7cb87247b118b74ca39c
- MD5 aba92729e1c67c5a6233184e5184e084
- SHA1 b1fca85bbca1951ba5a6a43407284c692aa94ef2
- SHA512 5f2ed0a0a9b9e938e40ec936c6445d43a7afee32fc13037f0ed3bfc082839e83c3fa95fd88b708e397865e0fa4171b46123291a7b0681bebd5d938f834ce026c
- TLSH T120D01213049653A46F91994831B32ACC284CADD136E855C1387EB7BACFD5DD4941279D
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/local_loader_contract.h
- SHA256 7e90080ca0e65bb5b8402aceb7194742a79fea108527e0e2e843c0188023219d
- MD5 c295eda197f2409193f637d3af0d1d17
- SHA1 180940bd142f9d8464bd9cd60e8f5625cba6fcbb
- SHA512 31db5bef3d9d0c5d596efe7e99a3f491a763849e84622597e9ef3fbd9af22c438377d749f81b4d43305ab006ff97c9f8909a040fdc4cb4d6463a275b6f8450c2
- SSDEEP 96:+RpHNWeuXPtSO2XU63NtC38vb/RNl5L0dUIU9J58pBIIxf6d+AbdBI6TezXEDY1f:4uXPt29tCURNl5odG9J58UVcrE8bj
- TLSH T1933236144D78AE10F86A1BB76CD3C01C552C49B3315CC990F9AE82A44B229BFF5E7AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/local_loader_main.cpp
- SHA256 47548b4ba845ffde95d70399ced6fdb9dd2fbc049480cf0fb0b4153863dd9ad4
- MD5 7c01bcd855ba2b92ef4cfa40170997de
- SHA1 89efac486bd5e4039f2ad2145ce304c2cd7b54dc
- SHA512 824889c53c8a29264bbd7dbc67259534bad472f9c1f6fcae8a0e4a867a8a4c92d825ee162b9e5121e71149843c07dfa423aa89afa4881f09886b95eee66b5f43
- SSDEEP 1536:ehWzHWFyd7fYHpIih36v+Isj9z9+rSDNnXTcK2bN1d:ehWzHWFydEHFj9z9ONv
- TLSH T18E63D74849EB56045D73503ADBE3D4881238B1CB7F4CD9843A9F62499FC109DE6AB3EE
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/local_loader_support.cpp
- SHA256 d09aa5f59cf4af342efd040ca7cfd5d5d5e1918633b8084132e25eb9118a9cab
- MD5 0dcb67f2bbfb6ce0172501d8090751ff
- SHA1 b1e53f48bfc31102f7b630f99299f7f59a2f8d6f
- SHA512 983fc752c6d30f85c486c353ec00cd7b08a9757851befb623bd52b92817a016bdd26dc3f5e920b86935f906303d1bdf330c3faaa5e0afffc2f7ff70b03ce53fd
- SSDEEP 768:IP5mjrlZPuYWzzyjpVk6KashO5Gu435b/VL0VVvtf:E5mXllWfyjpVk6KashO5v435b/mVVVf
- TLSH T1AB23B4816CB7B40A1A83907EF71BC5069AA040037799C294FE5EC2817FD51B6D2BB6DF
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/local_loader_support.h
- SHA256 4ed3a02756a8b3dbb8dbb066ad03685437ed52f4439e0e660fb16be52cc20438
- MD5 ba58311da3a846fdd50237f1070f7887
- SHA1 80e9a0034f84cf8b6a1272698f971ca4e168357c
- SHA512 4e60078b0c1206c3cb62e8e3712aecf1c5093ed9df82737c250ea8f8348586b3fc7671df62de9433906080b69a9a3e01f55690ae3c5efbf93467e64d6cceeaba
- TLSH T10821AC8CD57F7DAA58472173AECB19330EB02C035BCA8161F4DE9354EF54284A12B19E
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/offline_signature_database.h
- SHA256 5cc9cd89bf08b468339261b5dd71a6dd15ea9583357eb7b53f2f82842df4c348
- MD5 a93acfab0d5330842577b43a34214c50
- SHA1 d1ba98f5e7696bfd6fe33366312a1b08e2493b4b
- SHA512 838f4b658c36659d359880413cc48b396472a0aaa047393ad07939bbcdd8ec411b057bfd03d126dccacaeccaf1fb0b340a35c1908677ef2f02e2c3b55b6bc1c9
- SSDEEP 192:qLp1I/ta5gYuDMURh8jJkvTCE073U+CHMCjwJDBL1e4TBGL6yDVQ59kHhv3fHIfc:LEgYuDMUjw2TC5U+si1qGQQoB/fHwHy
- TLSH T1C0720D6C928A2CE20B360349E7518CECE176132359A6697F7EFD865A1F3F2807E1D440
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/offline_signature_fingerprints.h
- SHA256 9bca60a881071a97597929cfd6a62bd695b5fc926bcc8cb8af6ad97225f1e4cc
- MD5 6d9959eceda058781eb8cf56a6e18d54
- SHA1 d34ed179d8fff178a091ef8326807f15f81a2086
- SHA512 50a253ed1472cd7b71d0466c50cbf9812372965dd9a34e82dc86ce280f2e1aec8ac97d9b0da39fbd02df3d4a759cf328a7c0ea4980942686748eec80fe7e9d7c
- SSDEEP 384:SRwFuXnXlKr0UAU3ONwEJqON/Zpp6gcrCNoOKivwi9ihCoIdQcFfO7imxQ17j78U:lAUwlC8ET/BYserfI8R6Nyya
- TLSH T17D2309DA3B6928E5B61771BCDB924683C5AD11B000E420A3FABD5826F3DE11DC1D1F9E
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/relay_failure_cleanup_contract.h
- SHA256 82fe29cf02fe5988ce1a822188e1d086fe81d9c23f17631aba566c7a56543dfa
- MD5 c00728f28b71ea393695f848ac233659
- SHA1 43c50751ce5ca0721ac2d4e2d6238eb52929b8ce
- SHA512 e67501791f03ff591d6300f1db4970e72bbc37d2dfe27aefd2527a4810a8d7770728ffce56810df01ff618da0dff43292c6ae1d6e9077035136f6bf4fbcae5d2
- TLSH T16AE02B81D8F2CD2A65D7865E23C0EC199B450C52220E85D0F95D937C1B8497ED6A18B2
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/signature_thread_adapter_contract.h
- SHA256 dd409e18830b4edc59d450294a33afc6a19e1ee83792e5eba3ed84e6e3703433
- MD5 7aa71a31b990a05d8ee8125a027557f0
- SHA1 3ece9e5a35154037d57324eceffacb4f55e78e05
- SHA512 b40adcdc197a067505798eaf82f41e5536865b4f4f2df37575913c680acc7d5e07bfb324b6b5fa500eb184d7a44c36813a1932c161ce5cdc10d66a11d4f45b59
- TLSH T1B521D816DC3A6CC9D843072983569CD2D94269C266C8C6DCEE9BC3081E5EDDBD299252
- MD5 SHA1 SHA512 TLSH
CHORIG/source/loader/transport_crypto.cpp
- SHA256 cae203b870b784eb2af3d290645fe14358255b7e95f0ecf8ea452648107de091
- MD5 e0f6203294543e3bfce7d98e6b72b902
- SHA1 32ae1a42540120686fe9a8d0aa90a830b2908b7e
- SHA512 79ff55c98a87eac49a4a31e710abdd07081c05a9df80228d570c04a5611f87ce07921a57e1b9accd95b944bf078444e5615c4d75fd54f48d62599a1d21238a09
- SSDEEP 768:9ggWkJrkVnNN9hSaKa1X6NPSv30REkd3xms:9hWkJrk7vhSaKa1Ni3Es
- TLSH T17CD2EE820D73B81D9933C46A87EA4C02D299D463F7AACB8F779FC4042F515AAD39449F
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/loader/transport_crypto.h
- SHA256 3b5f525376c8e7f5a9f86dcc86dbf23cf74594ab33df64e86e0e43cf528d75b6
- MD5 ab7ba5b83f4d626f7c73592e6b5aba6e
- SHA1 efd03c80d188205e157f88685bb75dccfd5c8e96
- SHA512 4fa519e9497c9780ffbd32032cbeecf6a7de83e9f6855fbd06eab0ad7ffb051cf3ad1cccd159eb5877b83e5ee26a329405148552f27a3e9494ee21593fe1529a
- TLSH T1D65157138C31FC1E8A43A8B2D1ED5D01A7996A42FBD2EBD372DF95542FCA1FAC114016
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/payload_context.h
- SHA256 ee3ab1267a57e058152f2d6cd3c7985d6539948e4e03ea3e4f2140337ae46a4e
- MD5 95b8c74a989ab5894fc1ecd574760ad8
- SHA1 cb8481b78350c9e58d9514f6f1576d074ea7cfff
- SHA512 a140de1b744d13dd53b51b4eb9e1cad09fc7e339282b30f7492bac979a36c31adf1c3990362647676f378f119a33eafbb25e267d0916c203beb858f8ac1b4102
- TLSH T176017D28A945F50049929A71539CBC017BC41663EC7B8C7B709C834E6FCA3700AD8280
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_attach_state.h
- SHA256 7f6aef212406dde95dcd9bf1f593f8b7a4427a4ce36e07fdb37f032c82255c7e
- MD5 b74d34806dbbff06f3b2926f6b26fc3c
- SHA1 d865014e50dca6cc4f12ba372a7d1f1f170651fd
- SHA512 23036486197afb963d705889e8fd4d8f9c1a4fbb3ac22d0b69df2ee7327bd007e49ec59535f38283a76f7d3b7f2cec5b9336492c760ae0612c0c9bf84e231340
- TLSH T122213D6179F1450A68E30B12D22D98741C46F6673FBA62EAF0BE11944F1DC4FA8FC935
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_cleanup_contract.h
- SHA256 502bbc642f496ff0de1b7be188da622cdebaf6d854ebc22c80bd308a883925ee
- MD5 eafd82603abaefff84b847ebc3ad7247
- SHA1 3886fe299887fae3dd94a1e7355c11d85f7e8eb9
- SHA512 eea11503e37cea21595159e2b39c5003707f5852a9f223e5c03b70469be11c437bad3d6f5cdf1e42397b461fee05e7228574c978b40a1270cddd73d7377c2148
- TLSH T10B016D44BEA29836D1078867868F403A7A44EA47356E60E5B4FC42611F0D4FEE3B95A2
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_context.cpp
- SHA256 d87ea49cf1af58dbd15b2a48ed4b1604cfdf8e9c4f6a0cc4a27e5d64d075a31f
- MD5 19bb3d7e917bd40f80b1553ad3f6fbe7
- SHA1 876135a525bb82989f17743f6444e69819302e40
- SHA512 219c497bc91a4d2d1c3b31c14312d7004d2702b03992dcb82e5bbfd789b8e64dea8680f6eee4f0d9ef35564c50a8192ea9ac306ea64b00aaaf4feae4dd6ad210
- TLSH T12F31CFD55462352224E7DD366BEEB1B0B3C61013D9DDEC43BDAC03207FC11B8A994286
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_context.h
- SHA256 6edfa3f2432f768d6e255ee20615a1f0b992024f72e3c30885d9dd658c96a675
- MD5 2b89301cdf132a00b85a330c6e9f7461
- SHA1 1ab3a140fe8842489fa4109f5d5841c12e1211de
- SHA512 5aa2f5dbcf4c583229c324a04bde3e99d10dced33dd3a3199b8aff70c661f9d37f8eb289ebf44bd6026e0b49cfd4c3afd923b89159a5c4a11223bf07b3e31ece
- TLSH T19211ABD6C878F0519C6B9C3222CA34D0A7C81283E57ADEDB338C82887FCA47918812C3
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_entry.cpp
- SHA256 79ca56dd760005c9778ce009a32405602307bcda33ddd8b40b9eb3f209969827
- MD5 00c6c9e6af48f88a4b8cc313cb7702f3
- SHA1 c0e321955b8239080bd2816c20a8d3c704fb485f
- SHA512 71c38822abd71d854a312c78ac6b9466304c2b7b8c05018dd5d479a91331ca9d35e9dc51bfc15166ea6ca116751df6a998c109190de9918d28a9d30a7e7cc3a2
- SSDEEP 192:Dlke8qZCmlD5cqThp79Oztj+bGgxnwUfedQryZTtkVrbBgMheBTtSVdMIIRFEkV2:Zmi6p6VvMBr3PtOvmZfR/ykd1o
- TLSH T1117264C9E9E3940314B3957947DFA870A728A803795DDA99FFED8340EFC2138D2A5316
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/relay/relay_entry.h
- SHA256 9998898a0832ca97bc95339209897ffe1ba12b9b6fa7f77ab6c1da899992247c
- MD5 70d0920068a5d962705acb9e73b551b8
- SHA1 a8dbc9821b6e2d8160a858189677d658be03098c
- SHA512 e67f311bf3fc750cb9c2369a7c9e44f740174a97b54441af7f7a158ad5137ef3360c1ef586a0a4a5464285ca4ad291f34150a1efbb7023f1c98c1e297c1a12f7
- TLSH T123119CD5D8FB7653022B412DC6C47104AE988A2B264FF520BB7C93B16F8906DE2B8D52
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_lifetime_monitor.h
- SHA256 db1dde354d325cb9793cdcf4699959065c58bb23bf4257ca919d8dd579966b51
- MD5 9bf8f6339c2f6451e31706d6b8cf928b
- SHA1 4938a328374e2971208676bd407b8f2cea87965b
- SHA512 1647097b32816bc1b2ab53514274191614a1ad4c170391def4cfe190941605a011bb611b0ac06d239384bbb6cb06748c7132c75080cc2b68066f69fa61a559aa
- TLSH T1BA51ED920DF2A4166C61712696DDE4B0BE9535433E86DB94BFAEC3208F0183CB1BC11D
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_mapper.cpp
- SHA256 bb398367fc987f67a17ccf94a48aa3c46d375af7917aa50f717a88300ace2504
- MD5 9cd70e6f0ec97cdc1b649e4f18db9da9
- SHA1 d4d6060f570839ea7f1575af954c47bacbc0ca0e
- SHA512 31e40c8086fbc5a18393653b8898bcc38abda2d9541096301c5f8fb931276c5d9d0d49ae38ca5a7e6504a5e0ebdf80f79dc36796a1b7ad6d7ca5e5445d7f5a31
- SSDEEP 384:2yJDNBcCsqcuhspU7rwlTs0r1dQ+xOMv+x0JgwRVQev+QH2:MqcuhspC0r1dN/vZJgi+J
- TLSH T116C2338998A33403589211BD2BCF7020D765616368DADA50FEBCA314BFC62BDD570F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/relay/relay_mapper.h
- SHA256 2b20013c1ebf8a6e132bb11ab880be5290b155f89840c6edbfe6f9c1cf869c8a
- MD5 35da884c1d289fa3473311102a2284fa
- SHA1 06b3a98ff982dd0411c87e75291808938f986810
- SHA512 63fd6aa4c7c335fb699fd2a41712d72bc46e77d1f1a47b0c50d410440b41cff36d789c8a5505d599bb94a3abcf982cbdda5277c17db2662bee73131043d9ea2e
- TLSH T166113B44E477A543A85789BD5BE96470939472F3F481E6775BEE120D2DC3A6D8302308
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_support.cpp
- SHA256 ae0132e30986bbe9a6abebc23fd2402df233b31bed8a95af2623211690cd526c
- MD5 eba5e3195c8db9f9d4a97e9374a013fd
- SHA1 544c2b12b0e1997ecf962e7cbd258ba6db34f964
- SHA512 a10cf8afba1cff4a95832977b37bc0694ce99cdcbf8b81523c938188b65c50d34578d0dfdb9fb64784dff9ba93e48522df969b9d9931f2c051893614f687bfc5
- SSDEEP 192:LVOiDskie+f5QzVGQ0QZpDQXR1Q3lnEQQMQwlIO1q1XQlMWQJZ9RniQ6Z9hiQwjq:Z4nfyuAFcZ9RMZ98G
- TLSH T19242FA8418E3781319A652BD8BDFB074E2954427BDD9DD40F9AD63A0AF43078D262A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/relay/relay_support.h
- SHA256 45c1c982b59e7ad39d38a3425c3db37a34013b4fcec5ce71e43022d19a7fca07
- MD5 7190f0e1657b182d94c8e6dcb375f78d
- SHA1 96220f3c0d42213f60e79a4fa34451f94e0058fc
- SHA512 8ca3f7e8642b3216f66f4f7c69e4e746a654d2a8fe659e639148df332dc9bb6ad7d6d85d1350fef9b1f564c4a532eac63e5760d39e265d603c4ebe51ae29b47d
- TLSH T1D661FD030972349328E4C8B1C78E5830C2746172F9F0FD43B9EF77604F8A6A9D561275
- MD5 SHA1 SHA512 TLSH
CHORIG/source/relay/relay_transport.cpp
- SHA256 4e8d7330135eabe91d5951802311d4907ab99cb55b0649858e1d6875b467888e
- MD5 f4f1635d13f5bd5ed25d3d99f64e8578
- SHA1 4539b8f07532b58df989acb415de65a728bb3c0d
- SHA512 221e54aabe3594356c3bff1aed8934b9be367a3d4edb40dd497a0776186d72f1e39dc10b251b04868a586a1195853b02a20084dec5fa432a59ddfa6b07fb8980
- SSDEEP 96:4tZ0o967jIj0sghnrRHlCWQWvfmhQuv8WIFepyFYbaiuQwu:4fM/M0senrXCefAQdW2BFYmiuQN
- TLSH T1D3B1F0A5E8D37C23A133843AD7DE901597288543B04B9E46BB5C0328BFCC31ED7A4667
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/relay/relay_transport.h
- SHA256 06f2ee382d0fd7dfb9030b1a66f4bb47c906eb5ee057ef12aaca713f6390740b
- MD5 243d3a914cadddfb96a958bf5b5cc7de
- SHA1 c7061f245d161368ebefd39ba6c026ab3b8cf82b
- SHA512 4a2395a7be647ab27402a5ddf0a9747ae2de3011b95f81d8b3e120f441bf214675f1b35d2d77e3b6cf9f8b92c7c46e18794f18f86d6468e2539c5f0f32b2a5ec
- TLSH T1DE419B915864A813FCA3507286C9B420D74B1602F897C6E3BAEDC3E4AF8AC3A45D011E
- MD5 SHA1 SHA512 TLSH
CHORIG/source/third_party/imgui-1.91.9b/LICENSE.txt
- SHA256 c80c5789748d955c4a650562baa0d750494e2c7128c2ca66aaebe2e3c4e198bf
- MD5 5ef20940e74d064639c66f32813613b0
- SHA1 0bc9fc60e6e4a03691ca7af4b58a56fd5ffb7865
- SHA512 bbd823dc11d068102d56dc7f3acbe755a06877308d7eaeeda0eaf0f96290e435a7b06dab8018aaa691f9f92a13a5f25e7f6fc601e3a4cf3db075999f26e8f00d
- TLSH T16E11821EB2510B62289A13605578A8D8F23FB25F7A6F2A85246DF241232A0ACC1FB844
- MD5 SHA1 SHA512 TLSH
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_dx11.cpp
- SHA256 7a8f7294b86065d514a9e19f1bed3bc84d4587f0142b2c551a584b4067cb2902
- MD5 227f15e63937dd94651d966ce9daee18
- SHA1 3449c5353d2085b2e785adeb4341b718d32d11e7
- SHA512 430d863f9c3e3e1e08ec47fc661ac2510e709dba7e815e6139a66b60e602f777cd09c6681fe22da4a97e530d2b63078aee6aa9dbad571395518e441cc9c092b4
- SSDEEP 384:UcuTtKFeUYC4FHe4bcWzule+aFEFvTRD6G8yiPjcyFv7g/gwLmRRPymEsesQlsOU:1F9R4uleW5gcmDgoPylsesQKOE1zKM
- TLSH T11AD2B8DA2A5734029D73E06ADF862C4BA321A89B2778D7547D4C02082FD40F0D97DBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_dx11.h
- SHA256 cf55f23132dcd240c31995494e0828abb84e552adee71be20f384d68eca21697
- MD5 ff946ef15df53d9fcdb1a162c7cbce59
- SHA1 7d77b6a16cee5d70ab3624ced79b231a8183fe82
- SHA512 2f362abfe2b7ac9e385ae8bc579a4cadba1be64b3ef2ee501bc612cf9816dacef3f15738e08d680d5903ce0496794eea7b90c38b6923477a95c0d16106678435
- TLSH T1B741349312217AC09EB20981CE949F93F31978DC6FFC96F8B61DA11C2798D36513EA53
- MD5 SHA1 SHA512 TLSH
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_win32.cpp
- SHA256 e572de10045298bbf833aa7a15e28d2777df57603b4e50b9c8aa4c878f1e4cfa
- MD5 bcfabc280712c3102c26466b52144ec5
- SHA1 6d2a3d1d702b0f64fc69c8c81f1b1ce19d182e1b
- SHA512 cadd86f2fb0b5cd1ec6ce015784c0180264b43a7d90771e7713af4aa5b533ae00ec2c09a256ddd56a5485e1976b6e983a28736ae2e9bf3e8361bb00b841a13c2
- SSDEEP 768:z5DXrHufrBQiy2y7/m1ZQrRqN8D/Mhk/pd06NMdfN2EGT6PrWu+L5Hcfnl67JhM:d6NWbP0IK9N25tcsq
- TLSH T1F523B6C15D5770521A32C2916BE76642FA384C7766D5DAA8FA4CE04CAF48132832E7FF
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/backends/imgui_impl_win32.h
- SHA256 606df46db972371ac6b5f5ad94bba75a09657da47b259105c4845c1f8638fa0c
- MD5 8a07f1c99d7ea4f0e0c38ab0d4e67f20
- SHA1 5848bdfbec4b861943e0c86728ffa7f89f40a3d5
- SHA512 66f8f149f2aba566c160d7ce59370b576c01782fde0a0eb615d5246aed64d89011310db5088b6469d64910f00c4fe2356972d85dafe68983e8882eda781f82c9
- TLSH T17371B607031470D086315A44DAECC697762EBAB8ABD28FE8B42DE14C07650AB5123EB7
- MD5 SHA1 SHA512 TLSH
CHORIG/source/third_party/imgui-1.91.9b/imconfig.h
- SHA256 0884061cc43e27e1d346fe18dcd1425792eb2532d3d16610a82eb5ac751f7594
- MD5 d3ed420cc7f36add5fa95113275fb07d
- SHA1 80fa8b75d423b18777f6eb3562c340b97717b34f
- SHA512 ad1dc7951903d41895ea303deae1269cce57bd83c716207052ef3954167d243b46cabf41a000d58a68c675e9a63116e82041a76c2db0296c3a6ed779f0b34607
- SSDEEP 192:cfgoLRD2IuDKRvXwJzdCcQqCbfwGlhYxFlH12BwcD0aUjn5XNZCCIsmYU+xhQft6:cflDc6WdCcQq0o2SxFlH12BwcD0aCn5T
- TLSH T11332D50B3D5A22500D71E571B75E8175CB19CE7B7340E0D8717EAA9C272882A12FEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imgui.cpp
- SHA256 af1cc31255fbf58d57ecc9d727cbd39a84e44fa8f11be7fd419fa0100c5255d8
- MD5 692a0795966201fe33ae58b0a5b7c0bc
- SHA1 bab3cdee1ac0cd1394e8f263fdfa9f5afae5a565
- SHA512 46c10bde00c094682756142e9c215cf353a2610227378cecc558929e813ccc3dc502decaa1fc1f14c86f0d06b7ce3d2a055b979fdc8ccc58f137fd36f1dddcb2
- SSDEEP 12288:PSsCYi916ZDYaisildx/vihjiPqqkixVALLM3sbfMFiGmxs1EWVkuUoQmCnqOG:KsuFiGZkU
- TLSH T11015E8A61C6335169932E5395BC7B346EB3A49336794C5107A4D238CBF8403386BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imgui.h
- SHA256 2d0180859ff85e7fe66ed9999b0f05f2fc45176773046a8f86b3b6bd190b0765
- MD5 035d7b8b1e599fb64b7bd9b6bf0f2e32
- SHA1 41dce2dbbf066007f410918dfab04a7ee14fb768
- SHA512 d2daa7d6fbb96f7263d55e3cce9390c2b1dd9641f2650ff4f6c59a06464378ed4e5a66ea595c53c692c2aa118951b11c8a266c247d607d196c095dc264ceb23d
- SSDEEP 6144:QSaY1zHw+bC1AVF0Wvh6jTLAdGM2Dgxw5RVhDvLe4XMXef3U:DHwoCbWvojTLAgM2hhZ9XM2U
- TLSH T149840A472E013221CD32D2516BD6E552EB384436BBF0D6A0764F639C6F4642A427EFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imgui_draw.cpp
- SHA256 9d2d9ee6745d9b98d7f39a16da8ffcf783f90bb8c9e931038fc8e9a15cbe3d84
- MD5 8e4282387a10ddd7b936414c575b2c1c
- SHA1 43182d83983807f24f0583fd7b3d930135e0f938
- SHA512 ec8370598e4a50175ee34585d127e834471f02b1688eba101fa70c43b6679de1d98e5a84980c264941180b0731a2146179dda6f15cda7d930233c51dc674d10d
- SSDEEP 3072:Qv7ZW5XV0HzJCMTkZSzpewOkKG2DeladXHQDqREGJ2807:Qv7ZWOJCMTSSzy1DZl0qiJ7
- TLSH T19844185A0E0303579E53D9EC1B87514EE2D9C86379A8D508BE5E07CD7F418288FBCB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imgui_internal.h
- SHA256 1363c617a743957f367afe1c6c88345870b7aa25ee339809fb915466e4fb9575
- MD5 f15ce21402378b55555bccd0a2bf50c5
- SHA1 f1d47798db86c6cd2f3199a88824521a22d92016
- SHA512 e4da0114d4583fc9267d8aef1b9eabd20f4bac7eae7e6287b23d9ae16e0888477567fe058f001434728869ef9570abc2d82dafa669381c6b229b2ed2fcdb673a
- SSDEEP 3072:PFtE9VPdC9i8dYKJBkRIgbiR+YXDxY1+31PJIHomEc:PFtM6dYKJBkyX+YzOWJGJ
- TLSH T1684495932E023621CD32D16167D2E541DB395873AFE0D660378E739CAF4641A827EBE7
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imgui_tables.cpp
- SHA256 4ea380fa9d49cac6cbfbc8b969969f9b0705518ec9ca340681d8c70e3eefbc28
- MD5 5837fcba2de29df0a300e6ae62bbe746
- SHA1 fde54da326913dbd4050fa6fa8d9760ca6f6f07f
- SHA512 186109adce97ed51258fcce91d38000fce70f0ed8ddb2294985a6ec79c2e0278f05a1c26bedd17e266ee68e8d498e1643a8422f899da76fee5b03fb1b7bc9b02
- SSDEEP 6144:CGdMNGbA5LjTMYkrQHNSvPywo5GQav96hx4QVRluhpN7AZfVf:CGd8Gbm4YkrWNq6IQc96hx4QVRluhpNo
- TLSH T1F33474976F2232158923E02563CE566FDF2614235B44A1F03D5DD24D2F828A38FBDEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imgui_widgets.cpp
- SHA256 54ac29dbcbe70091f5e5fc2cb4099e6d0b9d1c939e5158f2be983cb508714414
- MD5 b932cfa4f7b1e19e80aaba3fea62f978
- SHA1 00fae61ccb5d5ab403b73c1c20661e8588a2acd8
- SHA512 a2c8352947f1297e876868c0c4e607bb57d0b41abcb5de00d1f29d525284ba866b947c92c33598a8e1905c27491ec77e86f32ffcb0c6c6120beaf84a151897d9
- SSDEEP 12288:pNJ8qa3zN9oKzjsAMU2M7xlP9caEISfYsejfqed3a:c3jHnV9qeQ
- TLSH T1A7B4C5851C2232268933E0395BC7A255EB39593B7BD4C9507A1E635C7F8403682BDFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imstb_rectpack.h
- SHA256 2efa3d5f7d003c19743b15155dad9f46d9f9fc783a18893d703b431d3c990972
- MD5 b1de604efbfb907f986a2751375a400b
- SHA1 25bb050e65a76af30b529aff6f394a024de67033
- SHA512 35d7b7c0d28fb982d9ee7aec6d75487b4a34b4a4f27534146953750cf9066d968622dacf00c2d08ab63150c896fee38d97aa064be60726a1a7c100c0afbbaf6d
- SSDEEP 384:VEko6kzUPyJm8Ss6RaQ6wNOHxR4ZGHFre1Frebs06Y4LG:VNwzUPyc8Ss6RaQ0xRVFre1FrebWYgG
- TLSH T1E292C62B2CB216256B41D171874F7099E326D467D33AD620BE8E73642FC046653FEBE2
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imstb_textedit.h
- SHA256 77010e494caf72c178b573569612aec409d24380409676325a31d02de0ec64b7
- MD5 8865566443d99bbe68c053a0b765b1d5
- SHA1 f8ddaeccb5068df9c94249439b2e4c3b3e9e15d0
- SHA512 3393c240f6f13716d22238ac778135a663f35d405ba7bd4f263a01fd24a9268374eb53575f56e2b875b525bdc619c3f3ddb5d7b267ecdd4aef09bba56bb162ad
- SSDEEP 768:7B3u9VwGsII3Dd6oWeqji13EUBX6s44Yc7dU4l8cB8OsqLn5IMNMSpeYgG:FKPFbW1peYgG
- TLSH T11D4314037553073A0CAEA177B6CE21B6BB26483FB259DB61B48E71181F510FA01BD9F9
- MD5 SHA1 SHA512 SSDEEP TLSH
CHORIG/source/third_party/imgui-1.91.9b/imstb_truetype.h
- SHA256 87f08919ae8e7223451d0e9d06b62829075d3e920c9e6ad436db9d7e7427ffce
- MD5 ebf7f4835b0ed8fdd1dbd94b0d9ba130
- SHA1 f136f8c039b42e11ce16ee9af65138768ec85520
- SHA512 1e656c9f120bada07a5f53ec03b99bd2f7cd64dfaed9c6ef7d8998da07afa14a639a00c22c1e7c0bc1c9edcbcf05cf6e039b81ec1ab0c2f8fc69fefcc44edc2c
- SSDEEP 1536:vBtAza9vAMuerPM1QyAmzxtm7i37qMag+8vo7gZDaXT82ANopyjBGzAN0YgG:vBUa9vAMxrPM1HzxI7gvow2ANopU
- TLSH T12914F90419D314231913A5A9DB8F54E8B32ED4EBA2A9EC51B84D761C2F60439D3F6FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/BUILD.ps1
- SHA256 911612385d43ad1c079a2a1899b43d2ffcc96d82d41631d3b55f0cdc59c43dbc
- MD5 134b1ebfdabdb92aa2bad5226ceb051d
- SHA1 5154a7e7f1cb09779392a2e57e9897960850e4b7
- SHA512 ca6502ddc397197e831d8667995e11cfa73d9a79692d16d53e1d9e3b2bdcc76d8399f58426dda6195d872319202bf58f5c13e3cfe82efc8b3a259c3c454bbcd4
- SSDEEP 768:swldm4Tr5uHaQOOL83UWPFswEc06Hcdtp0M0Sjw6rDj:swlddgL83XJsX
- TLSH T1BDC2C871701019A34EC3526F389A13407A6AC00F0C946A60F69D96AD7F6FC7EC5F7B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/BUILDING.txt
- SHA256 f4bde5a295f4b39ac39e15a420da36c0ea6b992e2911f9656f298bc387c66635
- MD5 6ce22e377033b81f60bd21773945c802
- SHA1 343e54aa76fda2696f1dc1a0d6ab655a9c00f584
- SHA512 76ec1e2e10f11150e232b33497f8724ece766e233f0d185f341901c5e79d346a86b6a873d86386f4bbf7d7450eb2a354d5422f276568d3b7fad13bb7ceee6015
- TLSH T12C219533728F23B24380C889B46E07EAD40F40F9477163C0F465019997A67128D7BFD4
- MD5 SHA1 SHA512 TLSH
SSORIG/SecretServiceOriginalOffline.exe
- IMPHASH 10cb6420e2ad86adca6fde386fa06460
- SHA256 a362afb7859675118b24afd7d0667d9b8b68d3ab17d5a5d50299c996226534f9
- MD5 c443cb5e6adf1bd8fcfb457ecc364013
- SHA1 ebc95ea0315c9dfc8771e3738a8956aa96d99552
- SHA512 fa93959f9cd3eacf1707ac88569c5d2b8f6686c3c0894209ba467b39e75912108c660adac8205fc06efebb7b81976437916ae31bf315a0ac943b246f4ce6502b
- SSDEEP 393216:UmNYgUw6pz9uRq/QahhdIUcq9gqS4SzWUw6pz9uRq/QahhdIUch9gqS4SzrUw6pe:h1q984H1h984sF4Nw4
- TLSH T16FE77BD276E5D098C126D1B9CE02E6EFD66F7C298F2069DB36D0375F5A33990263A700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ss
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
RegCloseKey
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
bcrypt
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptEncrypt
BCryptGenRandom
BCryptGenerateSymmetricKey
BCryptOpenAlgorithmProvider
BCryptSetProperty
d3d9
Direct3DCreate9
dwmapi
DwmEnableBlurBehindWindow
DwmGetColorizationColor
DwmIsCompositionEnabled
gdi32
CreateRectRgn
CreateRoundRectRgn
DeleteObject
GetDeviceCaps
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
user32
ClientToScreen
CloseClipboard
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageW
EmptyClipboard
EnumWindows
GetCapture
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetMessageExtraInfo
GetSystemMetrics
GetWindow
GetWindowLongPtrW
GetWindowRect
GetWindowThreadProcessId
IsWindow
IsWindowUnicode
IsWindowVisible
LoadCursorW
MessageBoxW
MonitorFromWindow
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageTimeoutW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetProcessDPIAware
SetWindowPos
SetWindowRgn
ShowWindow
TrackMouseEvent
TranslateMessage
UnregisterClassA
UpdateWindow
api-ms-win-crt-private-l1-1-0
__C_specific_handler
__intrinsic_setjmp
longjmp
memchr
memcmp
memcpy
memmove
strrchr
strstr
wcsrchr
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_close
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_setmode
_wfopen
_wopen
fclose
fflush
fgetwc
fopen
fputc
fputwc
fread
fseek
ftell
fwrite
getc
setbuf
setvbuf
ungetc
ungetwc
api-ms-win-crt-runtime-l1-1-0
_assert
__p___argc
__p___wargv
__p__wcmdln
__sys_nerr
_beginthreadex
_cexit
_configure_wide_argv
_crt_atexit
_errno
_exit
_initialize_wide_environment
_initterm
_initterm_e
_set_app_type
_set_invalid_parameter_handler
_wassert
abort
exit
signal
strerror
strerror_s
api-ms-win-crt-environment-l1-1-0
__p__wenviron
_putenv_s
getenv
api-ms-win-crt-string-l1-1-0
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_strdup
_stricmp
_strnicmp
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsicmp
_wcsxfrm_l
isdigit
isspace
isxdigit
mbrlen
memset
strcat
strcmp
strcpy
strlen
strncmp
strncpy
strnlen
tolower
toupper
wcscmp
wcscpy
wcslen
wcsncmp
wcsnlen
api-ms-win-crt-convert-l1-1-0
_strtod_l
_strtoui64
atof
mbrtowc
mbsrtowcs
strtof
strtol
strtoll
strtoul
strtoull
wcrtomb
wcrtomb_s
wcstod
wcstol
wcstoll
wcstoul
wcstoull
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale
api-ms-win-crt-time-l1-1-0
_strftime_l
_time64
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdopen
acosf
atan2f
ceilf
cosf
fmodf
log
logf
lroundf
pow
powf
sinf
sqrtf
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-utility-l1-1-0
qsort
rand_s
kernel32
AcquireSRWLockExclusive
AreFileApisANSI
CloseHandle
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateMutexW
CreateProcessW
CreateRemoteThread
CreateSymbolicLinkW
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceW
FlsAlloc
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FreeLibrary
GetActiveProcessorCount
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFinalPathNameByHandleW
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleW
GetProcAddress
GetProcessId
GetProcessTimes
GetStartupInfoW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetThreadId
GetTickCount64
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitOnceExecuteOnce
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalFree
LockResource
MapViewOfFile
Module32First
Module32FirstW
Module32Next
Module32NextW
MoveFileExW
MultiByteToWideChar
OpenProcess
OpenThread
Process32FirstW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
RemoveDirectoryA
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableSRW
SuspendThread
SwitchToThread
TerminateThread
Thread32First
Thread32Next
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
UnmapViewOfFile
VerSetConditionMask
VirtualAllocEx
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteFile
WriteProcessMemory
api-ms-win-crt-multibyte-l1-1-0
_mbtowc_l
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
531KB
Virtual Size
531KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.ssc_evt
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.tls
Size
1024B
Virtual Size
584B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
59.4MB
Virtual Size
59.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
SSORIG/source/app.manifest
- SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8
- MD5 b8e76ddb52d0eb41e972599ff3ca431b
- SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8
- SHA512 739cb69dec197879f4c7af76af86273a170d7834495ca9d35825f64f35290e6625eab67f404b7353edb340c2187f62976cb42ceb9a0c119deaee81a2143ffade
- TLSH T162E0C0C1C1E8E719673001856837C52C9A769357109F64ECB4EC9BBFAB1A642C4C30F2
- MD5 SHA1 SHA512 TLSH
SSORIG/source/assets/active-image-b1.bin
- SHA256 bcb285e212186f6d702e84fff11d166e4efd013670a97854c27154dadca69254
- MD5 efdc6c3882467333f550f426760bbbdf
- SHA1 d1b165f4918877918b4429dfd38e3da38b861101
- SHA512 923ee1dfa4f92d2dd036192c3eac638abf1db249eb34d6e9d339ccc40774f98df699e31858dfee3c407af4964a820d01d82a2813f472149bcb866e90ec8a18f7
- SSDEEP 196608:40Q1t8H6KfZLKz9uRq/QahhdsoKJmaULWTQcq9rcqojAZM6MOBSzbJqn:tUw6pz9uRq/QahhdIUcq9gqS4Sz
- TLSH T1BA078CE236E5D098C126D1B9CE02E6EFD66F74298F206ADB36D4175F5E33AD0253A700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ss
Minor OS version
0
Major OS version
0
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
MAGE_SUBSYSTEM_UNKNOWN
DLL Characteristics
File Characteristics
PDB paths
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
generic
SSORIG/source/assets/bootstrap-b1.dll
- IMPHASH 0b77c4ce103710b4729bad273f35789a
- SHA256 0399e5f02cbc3e7b16b40b83cc6e6b894d0fb74c96f60d8a18979992a14124cc
- MD5 ff4fb353664b4d6ce1c066c5bdeeb605
- SHA1 94339bfffaf3a190d53070570d6cdfad18975940
- SHA512 2ed92034883c3233706fc43c09a415e969077e6560ad36717287c895d5c3814a996c6340d2ad7eb72ea0d3a392b2b21de6ec3fc405b33df7a67223d85d6b47be
- SSDEEP 196608:N0Q1t8H6KfZLKz9uRq/QahhdsoKJmaULWTQch9rcqojAZM6MOBSzbJqn:CUw6pz9uRq/QahhdIUch9gqS4Sz
- TLSH T1D8078CE236E5D098C126D1B9CE02E6EFD66F74298F206ADB36D4175F5E33AD0253A700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ss
Minor OS version
1
Major OS version
6
Entry point
18227200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
SetEvent
TerminateThread
TlsAlloc
CancelIoEx
QueueUserAPC
CreateWaitableTimerA
LocalFree
DeleteCriticalSection
SleepEx
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
GetModuleFileNameA
VirtualProtect
WideCharToMultiByte
VirtualFree
VirtualAlloc
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
GetFileAttributesA
GetSystemInfo
HeapCreate
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
DisableThreadLibraryCalls
lstrcmpiW
InitializeCriticalSection
CreateSemaphoreA
InitializeSRWLock
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
OpenEventA
GetLastError
MultiByteToWideChar
CreateEventW
PostQueuedCompletionStatus
WaitForSingleObject
GetQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
EnterCriticalSection
SetLastError
SetEnvironmentVariableW
TlsSetValue
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
GetACP
IsValidCodePage
DeleteFileW
SetEndOfFile
GetTimeZoneInformation
HeapQueryInformation
HeapSize
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
WriteFile
SetWaitableTimer
VirtualQuery
AllocConsole
SetConsoleCursorPosition
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
SetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
RtlUnwindEx
CreateEventA
ResetEvent
GetStringTypeW
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
InitOnceBeginInitialize
InitOnceComplete
WakeConditionVariable
RtlPcToFileHeader
GetLocaleInfoEx
GetFileInformationByHandleEx
MoveFileExA
AreFileApisANSI
SetFileInformationByHandle
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
CreateDirectoryA
GetConsoleWindow
FillConsoleOutputAttribute
WritePrivateProfileStringA
GetConsoleTitleA
GetCommandLineA
GetPrivateProfileSectionA
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
CreateThread
CloseHandle
K32GetModuleInformation
GetCurrentProcess
GetProcAddress
Sleep
GetModuleHandleA
RaiseException
FreeEnvironmentStringsW
GetTickCount64
GetCurrentDirectoryW
GetExitCodeThread
SwitchToThread
InitializeSListHead
WriteConsoleW
CreateFileA
GetFileSizeEx
ReadFile
GetProcessHeap
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetFullPathNameW
InitializeCriticalSectionEx
GetSystemDirectoryW
LoadLibraryW
GetEnvironmentVariableA
GetTickCount
FormatMessageW
MoveFileExW
VerifyVersionInfoW
GetFileType
PeekNamedPipe
WaitForSingleObjectEx
CreateFileW
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
user32
GetCursorPos
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
GetKeyboardLayout
OpenClipboard
ClientToScreen
GetCapture
ScreenToClient
LoadCursorA
GetMessageExtraInfo
LoadStringA
SetWindowLongPtrA
CallWindowProcA
MessageBoxA
RegisterClassExA
UnregisterClassA
CreateWindowExA
DefWindowProcA
DestroyWindow
GetKeyState
GetForegroundWindow
FindWindowA
GetClipboardData
TrackMouseEvent
CloseClipboard
GetAsyncKeyState
PostMessageA
ShowWindow
EmptyClipboard
SetClipboardData
shell32
SHOpenFolderAndSelectItems
SHParseDisplayName
ShellExecuteA
shlwapi
PathFileExistsA
PathFindExtensionA
bcrypt
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptGenerateSymmetricKey
BCryptGenRandom
BCryptCloseAlgorithmProvider
BCryptDecrypt
BCryptDestroyKey
ws2_32
WSAEnumNetworkEvents
WSAGetLastError
ioctlsocket
htons
htonl
getsockopt
WSARecv
ntohs
getsockname
getpeername
WSAStartup
WSASocketW
WSAStringToAddressW
WSASetLastError
listen
shutdown
ntohl
WSASend
closesocket
bind
WSACleanup
inet_pton
accept
connect
recv
send
socket
WSAIoctl
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
inet_ntop
__WSAFDIsSet
select
recvfrom
sendto
getaddrinfo
freeaddrinfo
gethostname
setsockopt
mswsock
AcceptEx
GetAcceptExSockaddrs
TransmitFile
crypt32
CertFindExtension
CertAddCertificateContextToStore
CertGetNameStringW
PFXImportCertStore
CryptStringToBinaryW
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptDecodeObjectEx
imm32
ImmGetContext
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
winmm
PlaySoundA
advapi32
CryptAcquireContextW
SystemFunction036
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
??0AutoBuffer@Bootil@LZMA@@QEAA@AEBV012@@Z
??0AutoBuffer@Bootil@LZMA@@QEAA@H@Z
??0Buffer@Bootil@LZMA@@IEAA@XZ
??0Buffer@Bootil@LZMA@@QEAA@AEBV012@@Z
??0Buffer@Bootil@LZMA@@QEAA@PEAXH@Z
??1AutoBuffer@Bootil@LZMA@@UEAA@XZ
??1Buffer@Bootil@LZMA@@UEAA@XZ
??4AutoBuffer@Bootil@LZMA@@QEAAAEAV012@AEBV012@@Z
??4Buffer@Bootil@LZMA@@QEAAAEAV012@AEBV012@@Z
??_7AutoBuffer@Bootil@LZMA@@6B@
??_7Buffer@Bootil@LZMA@@6B@
??_FAutoBuffer@Bootil@LZMA@@QEAAXXZ
?Backward@Buffer@Bootil@LZMA@@QEAA_NI@Z
?Clear@AutoBuffer@Bootil@LZMA@@UEAAXXZ
?Clear@Buffer@Bootil@LZMA@@UEAAXXZ
?End@Buffer@Bootil@LZMA@@QEAAXXZ
?EnsureCapacity@AutoBuffer@Bootil@LZMA@@UEAA_NI@Z
?EnsureCapacity@Buffer@Bootil@LZMA@@UEAA_NI@Z
?Forward@Buffer@Bootil@LZMA@@QEAA_NI@Z
?GetBase@Buffer@Bootil@LZMA@@QEBAPEAXI@Z
?GetCurrent@Buffer@Bootil@LZMA@@QEAAPEAXXZ
?GetPos@Buffer@Bootil@LZMA@@QEBAIXZ
?GetRemaining@Buffer@Bootil@LZMA@@QEBAIXZ
?GetSize@Buffer@Bootil@LZMA@@QEBAIXZ
?GetWritten@Buffer@Bootil@LZMA@@QEBAIXZ
?MoveMem@Buffer@Bootil@LZMA@@QEAAXIII@Z
?Read@Buffer@Bootil@LZMA@@QEAAIPEAXH@Z
?ReadString@Buffer@Bootil@LZMA@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SetExternalBuffer@Buffer@Bootil@LZMA@@QEAAXPEAXH@Z
?SetPos@Buffer@Bootil@LZMA@@QEAA_NI@Z
?SetWritten@Buffer@Bootil@LZMA@@QEAAXI@Z
?Start@Buffer@Bootil@LZMA@@QEAAXXZ
?TrimLeft@Buffer@Bootil@LZMA@@QEAAXI@Z
?Write@Buffer@Bootil@LZMA@@QEAAXPEBXI@Z
?WriteBuffer@Buffer@Bootil@LZMA@@QEAAXAEBV123@@Z
?WriteString@Buffer@Bootil@LZMA@@QEAAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
llhttp_errno_name
llhttp_execute
llhttp_finish
llhttp_get_errno
llhttp_get_error_pos
llhttp_get_error_reason
llhttp_get_http_major
llhttp_get_http_minor
llhttp_get_method
llhttp_get_status_code
llhttp_get_type
llhttp_get_upgrade
llhttp_init
llhttp_message_needs_eof
llhttp_method_name
llhttp_pause
llhttp_reset
llhttp_resume
llhttp_resume_after_upgrade
llhttp_set_error_reason
llhttp_set_lenient_chunked_length
llhttp_set_lenient_data_after_close
llhttp_set_lenient_headers
llhttp_set_lenient_keep_alive
llhttp_set_lenient_optional_cr_before_lf
llhttp_set_lenient_optional_crlf_after_chunk
llhttp_set_lenient_optional_lf_after_cr
llhttp_set_lenient_spaces_after_chunk_size
llhttp_set_lenient_transfer_encoding
llhttp_set_lenient_version
llhttp_settings_init
llhttp_should_keep_alive
llhttp_status_name
Name
.text
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
951KB
Virtual Size
4.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
214KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.vmp
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
512B
Virtual Size
6B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
SSORIG/source/assets/bootstrap-b2.dll
- IMPHASH 0b77c4ce103710b4729bad273f35789a
- SHA256 bc227ed44f09e8b325f721cffd355756acbb8adb448f5cd72e56bb9e61c26b76
- MD5 3007dd7fd9c2620135b74c040a6fc0c1
- SHA1 e6220c8025db602a2e66dd71c4c7a989201fbf25
- SHA512 45f6b3130f3f19d2c9237e03b52d5a8f1559af73a6c9f8ac34e63eb40538e2224685e8e6cf6a9f87ab146e7591d3a9d2989bced3017200ff9e31c5ceaa3555d5
- SSDEEP 196608:w0Q1t8H6KfZLKz9uRq/QahhdsozLWTQc4NrcOojAZM6MOBSzbJqn:1Uw6pz9uRq/QahhdIUc4NgOS4Sz
- TLSH T1D1078DE236E5D098C126D1B9CE02EAEFD66F74298F206ADB36D4175F5E339D0253A700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
ss
Minor OS version
1
Major OS version
6
Entry point
18227200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
SetEvent
TerminateThread
TlsAlloc
CancelIoEx
QueueUserAPC
CreateWaitableTimerA
LocalFree
DeleteCriticalSection
SleepEx
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
GetModuleFileNameA
VirtualProtect
WideCharToMultiByte
VirtualFree
VirtualAlloc
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
GetFileAttributesA
GetSystemInfo
HeapCreate
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
DisableThreadLibraryCalls
lstrcmpiW
InitializeCriticalSection
CreateSemaphoreA
InitializeSRWLock
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
OpenEventA
GetLastError
MultiByteToWideChar
CreateEventW
PostQueuedCompletionStatus
WaitForSingleObject
GetQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
EnterCriticalSection
SetLastError
SetEnvironmentVariableW
TlsSetValue
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
GetACP
IsValidCodePage
DeleteFileW
SetEndOfFile
GetTimeZoneInformation
HeapQueryInformation
HeapSize
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
WriteFile
SetWaitableTimer
VirtualQuery
AllocConsole
SetConsoleCursorPosition
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
SetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
RtlUnwindEx
CreateEventA
ResetEvent
GetStringTypeW
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
InitOnceBeginInitialize
InitOnceComplete
WakeConditionVariable
RtlPcToFileHeader
GetLocaleInfoEx
GetFileInformationByHandleEx
MoveFileExA
AreFileApisANSI
SetFileInformationByHandle
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
CreateDirectoryA
GetConsoleWindow
FillConsoleOutputAttribute
WritePrivateProfileStringA
GetConsoleTitleA
GetCommandLineA
GetPrivateProfileSectionA
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
CreateThread
CloseHandle
K32GetModuleInformation
GetCurrentProcess
GetProcAddress
Sleep
GetModuleHandleA
RaiseException
FreeEnvironmentStringsW
GetTickCount64
GetCurrentDirectoryW
GetExitCodeThread
SwitchToThread
InitializeSListHead
WriteConsoleW
CreateFileA
GetFileSizeEx
ReadFile
GetProcessHeap
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetFullPathNameW
InitializeCriticalSectionEx
GetSystemDirectoryW
LoadLibraryW
GetEnvironmentVariableA
GetTickCount
FormatMessageW
MoveFileExW
VerifyVersionInfoW
GetFileType
PeekNamedPipe
WaitForSingleObjectEx
CreateFileW
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
user32
GetCursorPos
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
GetKeyboardLayout
OpenClipboard
ClientToScreen
GetCapture
ScreenToClient
LoadCursorA
GetMessageExtraInfo
LoadStringA
SetWindowLongPtrA
CallWindowProcA
MessageBoxA
RegisterClassExA
UnregisterClassA
CreateWindowExA
DefWindowProcA
DestroyWindow
GetKeyState
GetForegroundWindow
FindWindowA
GetClipboardData
TrackMouseEvent
CloseClipboard
GetAsyncKeyState
PostMessageA
ShowWindow
EmptyClipboard
SetClipboardData
shell32
SHOpenFolderAndSelectItems
SHParseDisplayName
ShellExecuteA
shlwapi
PathFileExistsA
PathFindExtensionA
bcrypt
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptGenerateSymmetricKey
BCryptGenRandom
BCryptCloseAlgorithmProvider
BCryptDecrypt
BCryptDestroyKey
ws2_32
WSAEnumNetworkEvents
WSAGetLastError
ioctlsocket
htons
htonl
getsockopt
WSARecv
ntohs
getsockname
getpeername
WSAStartup
WSASocketW
WSAStringToAddressW
WSASetLastError
listen
shutdown
ntohl
WSASend
closesocket
bind
WSACleanup
inet_pton
accept
connect
recv
send
socket
WSAIoctl
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
inet_ntop
__WSAFDIsSet
select
recvfrom
sendto
getaddrinfo
freeaddrinfo
gethostname
setsockopt
mswsock
AcceptEx
GetAcceptExSockaddrs
TransmitFile
crypt32
CertFindExtension
CertAddCertificateContextToStore
CertGetNameStringW
PFXImportCertStore
CryptStringToBinaryW
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptDecodeObjectEx
imm32
ImmGetContext
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
winmm
PlaySoundA
advapi32
CryptAcquireContextW
SystemFunction036
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
??0AutoBuffer@Bootil@LZMA@@QEAA@AEBV012@@Z
??0AutoBuffer@Bootil@LZMA@@QEAA@H@Z
??0Buffer@Bootil@LZMA@@IEAA@XZ
??0Buffer@Bootil@LZMA@@QEAA@AEBV012@@Z
??0Buffer@Bootil@LZMA@@QEAA@PEAXH@Z
??1AutoBuffer@Bootil@LZMA@@UEAA@XZ
??1Buffer@Bootil@LZMA@@UEAA@XZ
??4AutoBuffer@Bootil@LZMA@@QEAAAEAV012@AEBV012@@Z
??4Buffer@Bootil@LZMA@@QEAAAEAV012@AEBV012@@Z
??_7AutoBuffer@Bootil@LZMA@@6B@
??_7Buffer@Bootil@LZMA@@6B@
??_FAutoBuffer@Bootil@LZMA@@QEAAXXZ
?Backward@Buffer@Bootil@LZMA@@QEAA_NI@Z
?Clear@AutoBuffer@Bootil@LZMA@@UEAAXXZ
?Clear@Buffer@Bootil@LZMA@@UEAAXXZ
?End@Buffer@Bootil@LZMA@@QEAAXXZ
?EnsureCapacity@AutoBuffer@Bootil@LZMA@@UEAA_NI@Z
?EnsureCapacity@Buffer@Bootil@LZMA@@UEAA_NI@Z
?Forward@Buffer@Bootil@LZMA@@QEAA_NI@Z
?GetBase@Buffer@Bootil@LZMA@@QEBAPEAXI@Z
?GetCurrent@Buffer@Bootil@LZMA@@QEAAPEAXXZ
?GetPos@Buffer@Bootil@LZMA@@QEBAIXZ
?GetRemaining@Buffer@Bootil@LZMA@@QEBAIXZ
?GetSize@Buffer@Bootil@LZMA@@QEBAIXZ
?GetWritten@Buffer@Bootil@LZMA@@QEBAIXZ
?MoveMem@Buffer@Bootil@LZMA@@QEAAXIII@Z
?Read@Buffer@Bootil@LZMA@@QEAAIPEAXH@Z
?ReadString@Buffer@Bootil@LZMA@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SetExternalBuffer@Buffer@Bootil@LZMA@@QEAAXPEAXH@Z
?SetPos@Buffer@Bootil@LZMA@@QEAA_NI@Z
?SetWritten@Buffer@Bootil@LZMA@@QEAAXI@Z
?Start@Buffer@Bootil@LZMA@@QEAAXXZ
?TrimLeft@Buffer@Bootil@LZMA@@QEAAXI@Z
?Write@Buffer@Bootil@LZMA@@QEAAXPEBXI@Z
?WriteBuffer@Buffer@Bootil@LZMA@@QEAAXAEBV123@@Z
?WriteString@Buffer@Bootil@LZMA@@QEAAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
llhttp_errno_name
llhttp_execute
llhttp_finish
llhttp_get_errno
llhttp_get_error_pos
llhttp_get_error_reason
llhttp_get_http_major
llhttp_get_http_minor
llhttp_get_method
llhttp_get_status_code
llhttp_get_type
llhttp_get_upgrade
llhttp_init
llhttp_message_needs_eof
llhttp_method_name
llhttp_pause
llhttp_reset
llhttp_resume
llhttp_resume_after_upgrade
llhttp_set_error_reason
llhttp_set_lenient_chunked_length
llhttp_set_lenient_data_after_close
llhttp_set_lenient_headers
llhttp_set_lenient_keep_alive
llhttp_set_lenient_optional_cr_before_lf
llhttp_set_lenient_optional_crlf_after_chunk
llhttp_set_lenient_optional_lf_after_cr
llhttp_set_lenient_spaces_after_chunk_size
llhttp_set_lenient_transfer_encoding
llhttp_set_lenient_version
llhttp_settings_init
llhttp_should_keep_alive
llhttp_status_name
Name
.text
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
951KB
Virtual Size
4.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
214KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.vmp
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
512B
Virtual Size
6B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
SSORIG/source/assets/garrys-mod.png
- SHA256 fe08f972935a461f5a1d8b103b185b0d685deda71572aaf084fad94ccd7610b1
- MD5 0896b735a742fe9c17db25932e68d005
- SHA1 59f9902c848ab5d788097d4c60829b7648b43801
- SHA512 9b375e7a7486474ad234a896af821297ba32a6939178e853ea078466ae1e68baac87a71f21dfdd08ef42c92bd608184a866e73a8c9fad4ee7e0652783cf905ec
- SSDEEP 384:4ccHF8aDAVdX0IeN7XF2o/Ika6ZhjscZoRB/0c33HUejY4QTXk7MJ7lrF1P6MKBL:Y8amt0IeNFB8eh9ZiBV30eU4QTU7MJQt
- TLSH T11492D1C46F3F0A606EF997925BBF5C910C16E19EEDA75C8042990A6ED81DFF00A6148E
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
ss
SSORIG/source/assets/mbcinfo-template.bin
- SHA256 5961c808737fb64beb30cbe80838deb4c2806f4ab9cde4dd98ceafee921134b7
- MD5 92f5038ef79e6fa8f321a2c858820a31
- SHA1 9bbcefc519fbfafd34fdb17fcde5ce6bd359b076
- SHA512 aa07b67a844a875a042226b7242c11599694a0ccac16259c3ea4610c210981b75c645031f83a24ca0b24a64b16de0556c87b8d0dc72b063aed0477fe37672014
- TLSH T1C9119E2366519924E5CD437419CBB0D8B8EC05DE957146757B7C0BDD8BD73900435EA8
- MD5 SHA1 SHA512 TLSH
SSORIG/source/assets/reconstructed-bss.bin
- SHA256 91a018e36198ab386d087e491f22699d630a77e02665e3262e7349080f542e0f
- MD5 79bbb7a7f70ad43e9362dd4eecd2c50f
- SHA1 77924362dfa962b64d9c9317aa600d09ab683b26
- SHA512 b3ceb92bb97ab3663e8fe8cd1ef6de3ceb45e2ef9b09832ce52e8c3cb06e5c8b9b5fec8565bd8740c0f44dd012893f58b7f10d7d701393aee96fd94d8363d637
- SSDEEP 24:+9JrChS+NWY2z0kZR0gyw47XX/Un/UvAw4TmZZrr9kVUFFavTyLc/3PHfXvnLBCC:Aq400RDMc/Ur796aQvTygv
- TLSH T184060FC13210E948C8902174CD2BEEFC52297ED9EC210D537BF1BB5F3DB1B55568A8AA
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/assets/reconstructed-bss.mask.bin
- SHA256 be398e8d90596aa32a6e816ca17d79cc5b1eec891b8cf98bb14cfdd8bbd37666
- MD5 f68d96a8ce0753dfcc8d5ca5a5477d2b
- SHA1 7a64b7074d0070a28ce573d9d00d1ca190f7c9fb
- SHA512 079b176f605aadeba79028f3056d7d28a11c3142ecb3f16ace1e0e65595095dca613e5a913ed8087dde5b74e948280ee7e44b5fb87d7732afcf930802df7746d
- SSDEEP 12:1PfHHX/X3333333/ff3vPPfP3vHvPPXHnffffffff3fXHn3/XvvPfPHfXP/Xn/Xl:/
- MD5 SHA1 SHA512 SSDEEP
SSORIG/source/assets/secretservice-icon-16.bin
- SHA256 80d1aee59c81843634e6e9c93ad345323057e038c0d9f790718e60b79c03d921
- MD5 e11a645cdd4817856709cc0b687037a5
- SHA1 3c37ea08bd1176bbeb31ee8e61016fc5a6dcaef7
- SHA512 670226d25a4bb90aad85e001f199dbb699f97a598bcc7224cc33049dd612091e85650327b477151b9f9ae1a3418b6467d259cd5a331c8d559c93de8761f8913c
- TLSH T1FC2125580F5A7898F345463CE1F7D885FFAC730C23AD04621C630ADA24B99261CDBE1D
- MD5 SHA1 SHA512 TLSH
SSORIG/source/assets/secretservice-icon-24.bin
- SHA256 39fc79f91d46710536f88946286a3d04b762098762e2793cd174b05660bee096
- MD5 eb7e11c926535e792b09df898c1406bf
- SHA1 44a25cb835b1206fcf56f528e8271bd916ec2134
- SHA512 a5a590df18c26eb64818755daad243b908c331807ce78779a1ca2ce44b65d4e5f29f32b2dc3995591b71365df22b4e01b703a30b1e0a5be88195a163d19f39e9
- TLSH T18851C1D58FD96906F74583FFA4DBC449FF1C23EC93A80B1D1836288D94AC1AA9AE1305
- MD5 SHA1 SHA512 TLSH
SSORIG/source/assets/secretservice-icon-32.bin
- SHA256 3ed3a668aebd2e1fb49bc007e61055c9afda6eef506161e18e45b61bae482d57
- MD5 3585a014f26e62e67e79a4c5343e85db
- SHA1 6f1fdca93f6302d8c11e8b4d568216978ff7ea4d
- SHA512 498b2ebd3d84853b5e9e6c7a4f07d4af5da2cdf5528797cb793424c26fab58438aefdc11ac5e179f154e12339ff2b06cc8e00ac2fcc0f489cea90d9f788ec461
- SSDEEP 24:U8NJqhOVLw0h+AQAaZVSubQYxbpjOaIwIPAV5wfC9q7+mKNCQQiNaYaHaow:tT5wy+A7mVS6hpj1ItJK2aCQQ8ka
- TLSH T194916A92DFB8B618F905C83DC0E5C81BFF74B618FB7D29D1AF9660E709051151AB221B
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/assets/secretservice-icon-48.bin
- SHA256 0f7724d81fd031f0881885c905e48b2907a5c935583aef5eb4331ca7f3df83db
- MD5 b72f9ddce24c5195d86808d5ef150805
- SHA1 5f85cbfff936a59623e5324a73bc4a51f7635948
- SHA512 9e038bf1a4d6fd60bb1b15b2ffa820718fed211e774fb937bb9671a628aac400ba2b65000c8295eb618fa39785a00f4fb9e3b5593a227edca42b40017734d9f1
- SSDEEP 48:nVZZZckZOeJalxDWai4dtazmFi/F9rl6FhalQimiZEr2OmHmtPILlLXaus4qNlHY:nIHWaZaSFi/PRWMyR6OYAfWv1n/02
- TLSH T134124C9B4FD5831BFA89093E90E6ACB9FB353A0D162DDC11FD9154EF060422AE8F210D
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/assets/secretservice-icon-group.bin
- SHA256 5bbf69fd7b0f5f0713187ac86ef57e8da3f2b2b2eb72e138941989978e26d1c6
- MD5 4633b416899776457036fdad3725aca4
- SHA1 9edb3e191f2c46b8d7bbdc0d4157d9fda43ba9dd
- SHA512 502ec7edbb896fa8163e707eb0215f19619c75150a1f9d6d6c5d0cdea287492b4cbf91ab3bc4dfb9065971905b90b8c1e6ba13fc07f4a91c2fc03b5487a73fd5
- TLSH T1A1A00101A7806E9CE6E452B8486E2727919CC59A0A660252491F2194BE031656078359
- MD5 SHA1 SHA512 TLSH
SSORIG/source/assets/secretservice-icon.png
- SHA256 2c16bad3460c370641bb9bbc936b3c01ee32461946682753751c2c6f51b1a0a7
- MD5 cf4cce024c3d1b28a8a6b30da71dba5a
- SHA1 ced40eaed3301579fc43e6aa78d5a1ed2d410bda
- SHA512 fc23e592a6fcce0b7f19e3723e4958b0e457f19afe90a4185c0c630ae28cc56f9994996a82ac9b140067d0d10cf3b8f14990490a16620275f058603f6ac87349
- SSDEEP 384:L5uwBqxwYTJb06kdVdq2416jctqTeVJXSKb5vk5TvCcib4+8PrnDJu0/z/8Lneyy:gPqYTJbNTuc0TOXSKb9k5TvWsPH3y10T
- TLSH T191B2D06489AAF8A7136965A0C32D9A8BE7D151C05D0E8341F7C27A2A4F1AB5B05FE10F
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
ss
SSORIG/source/core/build_secretservice_entry_envelope.cpp
- SHA256 bf739b5c429a9effad623d07a0c13a7808214946b434ec691caed1cdfc1e6cd0
- MD5 e8d1ead93d68b8eb1ebe2f7cffe47ddc
- SHA1 350b5799e1d6d9916ec4bfcae16416e123e8af17
- SHA512 d068c9071f5d86ceef1ae807dfbac4ae044b79a13dcc3e15a33d1bc5c876c9ef47405c888ff0e2b112eb3ef548de3423f52344c85a19869da80b1b4d310b427a
- SSDEEP 192:ZGFqFtLPvoPKGolnY6dCd6CPY6C0YWYr0rfrOY6CcYs0vzY5B9sY4CY6/Y6Oq4:UCtrotkG9
- TLSH T1BF022350E847AA9069A36933B75BC8C03B5191177235A782BB0F45D07FFA8B6F178389
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/build_secretservice_offline_handoff.cpp
- SHA256 33957ada9d3569f97e731ce00fd181ce4c081d3533645102985eb4e74c39e5ac
- MD5 cb64c9ea708ceaa76f917b63206d0746
- SHA1 5b936e7489b1b439b224aa13b8bec328a9217139
- SHA512 e088112c0432202faa09caebfbc1d3e1266cfd65f026a19abc554e2a1714a4b7c9f7e3392712637f93d4ead4f2bf49a9d16390aac48be11cbc19be36139b8f0b
- SSDEEP 192:D2FN5/wZvjVarvfQziQsGPdN9RXTg+LVQ4:MdMXkS
- TLSH T111E1403059E7FCF228272269EA5782455E8850171331E7E1F79F864CAF62416E239FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/call_secretservice_carrier_thread.cpp
- SHA256 145f6d0df12b9e47517490ba97dd2841e05bce9e9f83bf08c58855b0d09ceef9
- MD5 284af51ea1bf841e7400b822c9143d33
- SHA1 6a3ceef3545d0f7df5b7c1279ad9896d6a951587
- SHA512 87ca87f0c3b32397090f6297cf0f9edfdad5f78db7b27128cc7db57b21bf103f36015294821624ded9239a02ca5b93829c8d404ee075417086e907bc7ff48718
- SSDEEP 96:6N90zIo3ZCij6cA6qzP26NGpNdWAtNxQtDx1VUUrzr/kqAMHo/nGjdu:7e6YOd+A3qtF1VFrzr/kqAqA
- TLSH T16BA10191547A5C84336771299B430E43F687D0036724E962F42F82C9BFEE1AED0E67A7
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/gmod_main_menu_gate.cpp
- SHA256 baaeda35c75b5eb5d796aeb560831b84c7301e8eea493747a492315c92c02ea4
- MD5 eb362b2cc5ba0b7dffa9b50a29862d58
- SHA1 c3bd695f6345561f0709febf9e729919fcb92283
- SHA512 0dc3dce1169a1ad18078b1b0acd078494c72ff145a824a3b768e39127157b58e3db929285bf35dfc76a97d94b08cf88186632faee5230025ed0998d511f41923
- SSDEEP 384:5v35ApBKE1KbZO7UcFCb+u10g8ovood4HWv3Kg2Lf9nuB6/b:5+bKpOPCH0hSoO4Hs3KgCfnb
- TLSH T1CAB27582AC77741A1E8380BEFB1785025B614803335AC660BD6EC2907FA51B6D6F67DB
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/gmod_main_menu_gate.hpp
- SHA256 0726562e182436a2ff586d3d7db3001d6b6bc38b19fad6e7e8372bb8699b0667
- MD5 de312caf2db0bda803701958a15b9935
- SHA1 9c0299d2d66f404e5964fe2ee1df704208a990eb
- SHA512 772876eaeb0f1d5f11887ad358febea89838ad3c9a03e28a8e7adcfa5fdd5b37a693000998bef9f847b83a95dc74348d9fc7d01a3603f7634fe545546a7fa5b3
- TLSH T129F0789A98395086CCBB815A230E68201D4008A32E4B5D213C1E0A45EF0E3CEE2F6EA7
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/inject_library.cpp
- SHA256 e200998ca41e1411a4616c1024ac8b45708cc9bf6ef270ad910a8220db2a367c
- MD5 137811e215b04ee5353bcda268e9e892
- SHA1 cb244c4885e4cc3681986782890b77934138aa79
- SHA512 45d3d1e5b216171c167db970357ea497d5a09d149f25e20b35f172de2f688675798c697d35305fdf56e31842ef5e0fdc5242f75d7ccfbfb0000fbafb5253f664
- SSDEEP 192:5KakxJAA4XOjyijyoQYkmCkmwkiZ++aRVtiTjMljQeSoGIdztLE6oA0AOLfK/AeI:59+MbShzuk
- TLSH T1E2A263828E7B584666B3A47EAB078513E55188436218DF507B1F82D02F9C2FEE5F27C6
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/install_secretservice_context.cpp
- SHA256 c48412dbc787c47c8fe01274fd8ab4ef3de06f517a4fa2b6192f33fe68113340
- MD5 0c49a01426d32a172d24c10637c6f0dd
- SHA1 d1b83652f2535dd1be18301381996a3ece0afdd2
- SHA512 07d06f74dc23d351424e9217bbd8d021cc77c7550f3f31b3b2fbe169984ca8f2ebd9dfad6e07b019aa1ffc868394d35c49b8721984de61697299fb17d9c7f9c3
- TLSH T10C711E8494BF6D06A5F3203EB7075D12B652640353AD9F22B85FC2D02F840BAE7B539A
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/install_secretservice_game_hooks.cpp
- SHA256 0f362877b218603ef452d55ade7d80c52c6855ceada1ac5fb52706d477796e2c
- MD5 3bad482009f62eeb4b9e27750df8d60a
- SHA1 f201bd902ddedbfb954bdf165fdf2e8af504b393
- SHA512 c5e84ec6b940279f52c15813f550545f831d61def33aca849dabfdc27a47a1d26a314d351bf054972bca27af19ec5a95eb4a937254704ac2e59ee65f915f5071
- SSDEEP 12288:fGhNIdwNKJhtxwfFo0nq2cFUbJGm7ZttUGFm+Um6nxme48Wb6K4Jm:fANIdwNKJhtxwfFo0nq2cFUbJGm7ZttL
- TLSH T168C496C568377C4F2D83417EEF0B4D21AA5500875659EA50BBAE82802F9C07EE1FDB5B
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/install_secretservice_locale.cpp
- SHA256 8832482d5f2a78b8e34b6e139d9947b75a16d2e23f8da0b14261ab8ffcfe85bd
- MD5 50d0acea267ae355c78c4e47546f670e
- SHA1 77f025f753944441b824f0a1b58710b17062f45f
- SHA512 e03025173b1de23e94ef748840286cb6b39eb1991e973d1d621f03e7c8f4e53ff6c9ebc546acb8a3af547c8b9384de2ec975c47cdf8b8949c2fcc76f92e9202b
- TLSH T1D151DE45586FAC5A6EB3213AF24B42032881884377ACDB25749FC2909F692FDD5B50EE
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/install_secretservice_network_worker_idle.cpp
- SHA256 08860f9f95e8d15bb97964880bd4e701b50eb7c7f5a430095c385bfa841d1a94
- MD5 597ce7af0c164db114dced7586be7ff0
- SHA1 d2145e1cb2d9d203eaabb389c4ab3aef699c6f92
- SHA512 2a58d375ccf17e45a303bd985edbed0ac57b34df93b834ddf252bc70028463b72ebb69e0f84ecf87c819e0d07dd99a55e2dfca2be237973451d1f20fb77dfa42
- SSDEEP 96:gJcCUIt3ISntlzgzQO84Kuh3y4y8kP6BRjgovqbvW/PnoX6VlrjW8cOnz3Y6V4EA:mVOYlz2QOjhQ6BZgovyvW/vO6vrjWs3C
- TLSH T15DB12241447E9E0D64E3A039F3036D12B6429407A7AC7F22B5AFC2906FAD1F9D5F4287
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/install_secretservice_steam_offline_guard.cpp
- SHA256 06ca6b91529c3a672f0ebf3aee4e1d553c1cc80745c8eaef31e1ccfd676c7e0e
- MD5 b13b2634d2333c8d812bafe586e4abd1
- SHA1 01ab171815852d4a341c757ad931dbb0b0979f37
- SHA512 c8b2673c9d7a8033f2d4d0f2d6dccaad3a439dc4505078234714ad8c6ebd773371eb681965bde7282437a7596c89fe99fd5e46205c6079f5c4d0536c9e9ddb5f
- SSDEEP 192:NBsOkvzOQFbaISpYUNwLIIIVfFN7rYMOpijQ7lz2pSCiLi/iv/aDj4:NBVkv4TNws5prrc8iL
- TLSH T1BC32458058BF7C2D71D3903EAB478C12AA1A48033A9C97A575AFC1806FDD1BEC1F595B
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/invoke_secretservice_veh.cpp
- SHA256 b39ca8a4dde5f204ecf9ad87fba687c84ac857ad04911105af2b7ebe2e604076
- MD5 e04ae69d57c3f6fbfd26eb3ccfb73541
- SHA1 63866135263a82820dde8eda454a78d1668c1e0b
- SHA512 7a093ca41ce587d2ee89da9420e49ffa49f19047d74e88b27731f6264ded115c90c39d281bf1fae8410224c5fb9faee2703d7317c822e24ef85a327f3c30c7f8
- SSDEEP 1536:KpvzcfPfA3RA/tiaOqZDAE6oEuhTKTRwi8CNB/FC63w6NHdq62VZfK:KpvzcfPfA3K/tiaJZDAGE//9
- TLSH T10773A390687B99452AF3A07DDB074812E24398137A6EDBA1F59FC3806F9D0BDC1F4297
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/manual_map_secretservice_active.cpp
- SHA256 bfca19fb7411bdf1c8d317cfab93155f93531cb573779bc54a6c0898fd4286c1
- MD5 2f2fada62889e1c1929fd1fec102831b
- SHA1 f209018e6e37e9fe4439e6d92dd9a4ffa639f05d
- SHA512 0259451320f44a2a5b8afc4675a76efd3e584af589eaf328b5d6dd968116bbdbc596b97a1eedb8a0b8c0481391c16fadd9fddbb08225f1c5ed9175d6872c88a4
- SSDEEP 768:wBjuiIHMAjbeYdd4F9aEX/Rcnk772iNcEVXFvc:wBjuiIHfjbeVF9ayR//Vlc
- TLSH T1D53365815CBB6C19A493603FFB075C1266565403631DD761BAAFC3902FA80FEE1F86E6
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/resolve_secretservice_interfaces.cpp
- SHA256 1ed3582f9ebb3e56808a53a60e585f1449a23bfdbf4895c1c9ad0affc7e27606
- MD5 bb95e28ce6cd31aeea13965cf33274da
- SHA1 ff46b273d26b14b435d7e1c500c56e09789c827d
- SHA512 a2fe02b14f472f35b14e217343646ec2142be48b96eade57cd76e19562e5d29410c2566e89c5f7afa5bf858247dd38453965916d5ba547c65049eea3b63984be
- SSDEEP 768:OGbOodluGPf/VxStAl9zeigcM6UN2+ANA6ljb7gFPIsk5NipnUGzYPVgM0rAJ7J:uodlu6vQcPNb0Bk5NTdPVgM00J7J
- TLSH T1E3D3EA941C776C062953917AF70794139A519003261DEDA0FA2FC3852FA81EEF3F9BDA
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/resolve_secretservice_lua_exports.cpp
- SHA256 9624c5941beb16616ca47d497215facd7cf48eb59acbf1295ab2b2f4e51087f4
- MD5 5369c89a7fbc13b1617dba219197e19e
- SHA1 f6777e10da89188c41a17ea2c05c7f0aca2ba908
- SHA512 723b05acff0297bad23e38f2c158a92aa33a1a2744f13d82c441d867f31273de133a9fbfd9bc6e878f6bc38cf8d48df2e674b986936e00e08e0567a861e809c6
- SSDEEP 192:Wgmohmr4oNUY7MyEZ/nQU7iu2Z9BPM+eQlO6jIJ6u6/6TGyj/F6B6n62T6W6iAsh:9oNwxNTfqsh
- TLSH T1A12243898C7B2D0964E3283DB7068D13EA5694436668DF90F95FC1C02FCD0EEE0E9796
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_bone_access_compat.cpp
- SHA256 a3fabe1f430682edfddbc4f10d768db8123e057ceb787977938b6854cc992bcb
- MD5 dd8644e69bccab2a48820174f9e95fc4
- SHA1 536c73bc62d50047e5e332d80317c0368e6c5de0
- SHA512 567b72414bde0847a890189550e7c0297a04651075c4d4cb6bc0986f8b9f053144252549f3da4ba2f4b2f92f813c7739e8b6357bbf5d7d967f07a41a30f78cc2
- SSDEEP 768:qXC9ClfxssEsf4apKVPj179RjMxz31uwy0vi:qXC9ClfxssEsf4apKVPj179RjMxz3Qwu
- TLSH T123D284869C7B681C1A03922EDB0B8C01EE255403BE4ECB80FA5FC754BF5D9ACE1B5957
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_bone_access_compat.hpp
- SHA256 75d6cadcc5e1aa2673b7dcee1ea8afeda1877379efa2a2b9016116669ef66657
- MD5 462fe4d99a68101cfb2d2f30df002c75
- SHA1 12b3e6fa754ac53571e8df5295fbba0da3923b40
- SHA512 bd3d75b64a8d50b9dc6e61db99ef447c11e4749e3e6bdd056c15525195a458b8c0aeea7875bf987a06fea32620cbebf6258ec4f19ada4b055a0f7534fcdd4c6b
- TLSH T1B2214B469C366C9E9857C053D70BBC205E952A43FF87AB90B9DB6E449F0C89DF022961
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/secretservice_clean_traces.cpp
- SHA256 34e37d459ae56d19c97ea2276620e71a5d0a6738943091298190a075c7a13988
- MD5 37ef74c1ad37f56b812d87e5f4a15592
- SHA1 b7e8b2582bef0d4fce14080d8a5f3e544ddaa9af
- SHA512 6df6529e3325f5790a9822b1ef45f7cdb32424d9d4ddda1ea65ac35fac01a759d111c0d73ba901c3b85181efe2753be77336373b692790e65202ac34d58a42ac
- SSDEEP 192:ha8W1a1Id1hQBikP6QU2M0Q4aFlpQnK+pqSRzgCahfVQDqpCqD5eo+KWkekNVQKG:TieklzawhvD5eo+KWkekrQkc
- TLSH T1AD3252502CF72C1227E3965F874784156146A003F308DBA0BADF02D9AFC65789AFA6F9
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_clean_traces.hpp
- SHA256 856beca8f8607583d47eb6821299d8954a03257582b1da0c14985dd6aced1bb9
- MD5 9a5fdd9e3577be435237850d2c9d7cf4
- SHA1 9aed5bcb9c6af86c09676e0fa2c3bbfe13c72b5c
- SHA512 b22b8f9b2fb43ea59acaa8010ceee09275f77361da864fc05ec4046ce3f4173d77360d7ebe41d18239c45b3cda302ff4905a8276488bef88220244b4ae618c73
- TLSH T194A0222238F30B0CC0A3C08F380233220C08208000C0200382F2803320EB000E000C00
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/secretservice_config_sanitizer.cpp
- SHA256 97101d59d8cc928359e16c1448b00e8a3d711d1f0177e661fe42c978bc530cfc
- MD5 9320e6b13ff18d159b6b0b09e464e909
- SHA1 1d77daae2199660647c61aa6c4ec53e4bd101646
- SHA512 aa99af73bbd6f6a46ca820d4cc26bba055195a846782a496fc6177a6e65b491fc680007640d1ae095f10ac0a01b4fb9c7c9e4a60ff2933f48cf6d6c5a072112d
- SSDEEP 384:sxr0Fs6AuJD+ShWPpoPpCosoZ6kjbO09FV:CrCs6AbShWxoPpCosoZ6mO09FV
- TLSH T1C87276823CFB79662603917F8E97900275386503A70CCB64FD6E83D07F94178A6F5ADA
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_config_sanitizer.hpp
- SHA256 da447782fe266ac3a6f9eeda04119a135de76902d2c861b69d32785af8b6a15e
- MD5 59190d214cf0a381db53dcaa8af3a98b
- SHA1 22b57e96a6b401283bd961d8eb1ddf231d75f67e
- SHA512 1d0fb3aa059774af649ced0d28db018df18e2226981ceffbc35cab6853fc5201df39526b6ff28b746b5caa2b68d7a6269935d2c57006338a4e6fe429bd9288dd
- TLSH T180F08B340C3EBC6ED8CF6663D2427919E4093897EB0A4F6078CF00C46F468ACB925563
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/secretservice_config_schema.hpp
- SHA256 4df370e8b1d626465d8dc5eef4007c02abc73c3a5fa203464d08fabdd6ab08b5
- MD5 c03298f0f6f86013a74249322da1d1c9
- SHA1 494fa2f795f6fc59f51a6130eb94cc6c2777ae93
- SHA512 98d8e665518c828298e076580db2af6bc81e0eb3ebf12539f5b00590f76ec2a53579bb6d87e566aaac8b893bec3d5d877f0aad6d5c634ce671b8e56a2de1eaec
- SSDEEP 192:/EpjqnrQI4qaEL8tWGtN0Vf8pSVD+qv6fkYPGoHWAu40S/SQKX:XqkYPuX
- TLSH T1843221D3ECB4E15BC1D2B699514E0253B13898BAB6392662F7E4B13C330B178934F997
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_deferred_event_worker.S
- SHA256 dde123281c822f4c081ac0fb69bfd9d4f159b9c82b623ad40d4f12f604431228
- MD5 423adbed5a10e5020f022a380c8644bd
- SHA1 2f565422d68b6b4773e1cfc9fe1bb4d238ff04f4
- SHA512 7aaee1ebb9cedd61d8ec7f76b1ebe3bcbc880a7cae569bc8daf4e0e63e93200c0e35ce322aa427662b68866a4402669b9b10c79f6ffdd1d40cdac1b859a99ec0
- TLSH T1B5B092E0B89610605412802B3A27574928C5887F25B4918209B84B0A1293864A000285
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/secretservice_deferred_event_worker.cpp
- SHA256 18c20c441d4e3cfb825dd925bb98d4cf2206ba3094e7ba4fad69289762ff621a
- MD5 a1be159f2dee2517f7a3a3a855e94c91
- SHA1 ce8d76618de9324b0a3053824843f3af339c4907
- SHA512 2d8c88ad3f29c974c91bd1a3c9795518dada9123bae33fed8457b3636e8abb57f801c77fb48cab0b344e409cc08352b8988bb13e35c943e868627137d688da47
- SSDEEP 192:FBCx9g2Z9GL4/UQTlHSl5jbF0+B6cVS4kFak3P33u5kqemlMQj49DF7A94pDvVt9:F8bEYLv9FUakA
- TLSH T11C62BCB55C7A7C052B0742FA630B9433A305D593C14ADEE4B2AE82CC9FC45ADD1E6B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_deferred_event_worker.hpp
- SHA256 8b47beb30e88a659a7dc118a88d2d118d9a117f179f6badbfc698eb5610e8085
- MD5 7a59ded370a5b3d3f3990023bc8a0ba3
- SHA1 8bf2e17fbf11b052197659cc099dff55435f0c14
- SHA512 b447d8c7921116ba3c8bd04b7e42c2750b915dc3005fe3bbe4d997a9f518632b6ad96c2a67561099df12c39691d7f4616a6cd4299cf3ba97ee6a91b9d74c3b7d
- TLSH T12141CC68DC3B3D0A050B063BD3167E16C6625ED282D6EAD0BF9F0AC41FE48EBC054563
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/secretservice_hook_fingerprints.hpp
- SHA256 7546df5621456b929a8d84eddcc286917c5c97fe522d7f8161e5a16e045d0773
- MD5 1e4def65e6692ba579454740c852dca0
- SHA1 ea433c78703ce1c9de9695aabc09fd7eecafb290
- SHA512 f2ae57c008008eab5210d9df1c85bca3c405183fb583ee0e936608cd9f90ce61dc5082e338d9058a2f73388e9ad081f32c8f80302643a93717ee722ba4c04429
- SSDEEP 384:Yac87CgNDACRhTJwBvgBACR5CukfB3Ggn8+tNtKCRBwCHfQJjat4CRRCBCRp0vBk:TVF7kP1msbjEixIYim
- TLSH T1C772E4C96B5C9DD43A4B3298CB024993EB85E13800A48185FB7EC61FB96F559C3F0F96
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_hook_normalized.hpp
- SHA256 178b3c0187a44ec17261222ce3f1f1af67f0f9c7881cc17ad536ce7bd102a359
- MD5 577d67792d179bbb558104c7755667be
- SHA1 7683f248042c5039ccc983d2abd931083669f364
- SHA512 93c8a11e447238cf01b473eec459c72e595e7621ef8b386060ca560f14b3f24277e8c5814df95e27a45c18e020980b9041d49faa434509fff87af87582f6d36d
- SSDEEP 768:0t7vh3s+EKSqNpQuP5rf5mLPDnk2YphRUtG0PlFmaJ279YFzg:mds+WnlF/g
- TLSH T1CDC2E5E47A1D1A983007219CDB4489819A1DD13E29E86945F73FC85FFAEE61CC0F8B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_import_rebuilder.hpp
- SHA256 845b51a86db6fc89016ce3a991b8c03d5dc7153f180b2ef32861bfaf4b6ec7d0
- MD5 d41a9b303d42cf349d0c23654f563feb
- SHA1 0a294b64247396ae6a4a248c724c9af4ccafaa2a
- SHA512 89a15440259af44c478e022c9bfe1128e3205973c04c73c929c568702ea008352da85f7cf3ffda8ce5f49f6ec753019c1301f02942a912e2452c3421c5ae45c1
- SSDEEP 96:lilX1ELBbejj0jyqnjPjTjwj1BjAVSB1UCk84+6byuRBJB2Sba2pwjIGjTjhjujx:GqBUYbTfklUCk84+6byurn2Sba2pwUGM
- TLSH T1DE9157590A266F9B044394CBF343484DC1D502E716C3AEAE5FE897F65BAE8C5F23A244
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_native_chain.hpp
- SHA256 de1d34d9eaeee2175c997d221bbeb3db10786dd889d96ff1d8d681a9e6bc6da8
- MD5 d4d2091e85516e9e6d4dbb1006354e30
- SHA1 0fac4895f1cccf6b2d56b9e721ea41da8ddaa058
- SHA512 b49f13c126b2b7d327fafd073c748d45d588daa05e3b856a8633d63f6cdbcfaa5af4fe91e8b42efa1ab7dff4d67989535bc1d171b78818150742b0cf58d4e119
- TLSH T121318214A16443E9D81240937D6375C21F66A6475B7CB4802DC282DB6FC6ACDF6329DB
- MD5 SHA1 SHA512 TLSH
SSORIG/source/core/secretservice_native_main.cpp
- SHA256 c6c1df919589732006cf3fb16bb2fa1203066873b38822f1fb3ec17758f12097
- MD5 3ec3ce24cc5285d7c53f53826bd15a3b
- SHA1 ac98f4c853167f806cd0945990acbbca697561f0
- SHA512 315d331ff8d22d1b1841f608cb4a86a30c712461d18ed128e5e5fa3f7e652548c8465400d08eac265c21463e41c958753e290ce3c57024d47540107bc422af2f
- SSDEEP 1536:Jh1cyfRv7a1IXRl0PdbkscnZKClfeEKpxrRfRpU4:JfLkFblcbfeE2x1B
- TLSH T1B673B5C16CF36C1D6693C1BFEB4B5002A6158803275CAA94FE5EC3503F980B9E1F9AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_network_guard.hpp
- SHA256 61aa7c4742979652acf6094eb490b35cd5bed6d7458dc5bd1fa3cb272a02f87d
- MD5 4dc2cfb3395f837034b827e054a5180b
- SHA1 a5820470dcf17312191e95f59678568e735f8ba5
- SHA512 3d07cff145aa7d7bda2f2c2a693f1fb3e5bfa7c7536e4b05e8554dddbac467886bf6dbdb1174eb304bc7dc31cd55035a49fec0cecd22ca5b9812cd317ac443c5
- SSDEEP 192:o7vV5MQkHQv3U/hy20nOJwusiQGiidLMGsLMFCSwjolopHoJF9pcdFIo5Yq3WC40:oLI3dJsOCSzRVBUSg
- TLSH T1EF4233864C7BE81D2553513DE756B611A9086443630E9EEDBE6F83902FC80BDE0FC792
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/core/secretservice_scoped_early_auth_hook.hpp
- SHA256 e9d42afdd338a9e6ea3fe338b2b08e92dbf0368f4cf0de1a5967345b3734c942
- MD5 e6d08a51e7e27ec5ff07c4da65ca1078
- SHA1 b7e00b61423d9706debeaf96d3930aedd31d81de
- SHA512 86377e933773115a0ce4f95b515c3d02f14574afdde2d5692e66a7790553fd65d56796755814d1f13a7aeb5b2b15f0c03a3cc353dadb43dcf53212568065db6d
- SSDEEP 192:RHvB8KUu3MPRjfd3DZUfnwAPzcUw9CrGy6BpehI4etmThjc1b4dLifyD+JAucI+J:pvB8KJMPRjfd3DZUfnRPorgrGy6Bpehj
- TLSH T1BB02C1C67D35592D7443156FC24A8450C80E1B329ACAFB88FB4FA294EF69C2AD17921F
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/FTL.TXT
- SHA256 650737ec7589c35600de73b0db88dafb314f7e32e7e3cf38d0c87ceb1a7ed31b
- MD5 02891d3fb5adadff2546b4279649112b
- SHA1 1b299099e16ad96ebf53e67391685d9d0a51b368
- SHA512 630d9247498b84bb53e2c2ea4165994c141791675c192860127cdcd1ccbabc80a331604c6ae185531abb0eb3fdefe6637643e0d3f11b751e79b076b5da4f30ec
- SSDEEP 96:xDqmTIf7UaKlpjKTpfeaEr1dPB1BSb35v+GUCELqrc6DOh7ZiaHGgwHAWCq:9q3fNoOejnPs35vExAc6DCiag
- TLSH T160E1561A2F0943716AF1C615FB549EEDF30641BB3A166898759C421C373BB11A3FE398
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftconfig.h
- SHA256 b40442f2faedfd21a815725b97fe73e36f0e2ad1974e5f45038302a774cacd22
- MD5 46bd622cfabd2a2e874a519f7ff115b9
- SHA1 f48b9924e1b7a97928819ca3969e93da9e5617d8
- SHA512 6cf63193ae778e1b72cea36758fa12465049ff59f930002adb66eca35ac68e4b22833104f4ecd3416e13f2db7686268a67cde0a3b5c686b1c325ca6ba30e4f19
- TLSH T1D13153211ADC1EE397B30AB1A31989DAD316736D52412460709CF1843E2EEF2937BB86
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftheader.h
- SHA256 e5cda12b7c1bb21c6864ae1c8077b76fea4bfb83dcec7a1fc4fef81a7a8a62fd
- MD5 f3ccefcda0e41517816151440cd19509
- SHA1 57b2bf3d7a4ecac8e5b536e1092d5c50626c43bd
- SHA512 f70537f432f28f5e8c41092166dbeef3ee7a17895b1a7ea358cce82f0f1daa85e362676112f77387fa24f169ba00e225a9fffebd950700266049647005ea23d4
- SSDEEP 192:piitteYLkOZ+AWH7+s7FdO7XW1K1HHnqjIinl1J4Sq1/m:g6MYL4is7FkTwK1HHnqcinl1ym
- TLSH T151B2AA062DD93CC2A53606768615A9D5E328339E830215D570BC365D7FBCFF392BB289
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftoption.h
- SHA256 8946583f4aaf7800fd938d0f4d7619a28a448aab6f5672e0501d1541ccea1630
- MD5 feff81771060b6f6ddb359ca99afc065
- SHA1 f23bc61f92a2fd3a88ed8aba848f356a23457e29
- SHA512 34e508ab1366b6dab936d791f86d19b997e2dfaea008b697efda3a68fba1984fc9ed56f1359d375edc86b3ff8abc488bb3ad8b40a2757e9f2259cc390051f55d
- SSDEEP 384:4wNkqDsH6zsvQwzaYAShBQ8yShnWR8+I0vgoKZFYiG86uewzSL5UipToMXiF7Ceh:48kqDlsY3YzXNyShn48CYtZWiG+SL51+
- TLSH T1D2135D157FD96ED321B10271A22C25C5D319833E16616098B0BDB6286F3DF7242FBAED
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/ftstdlib.h
- SHA256 be7ccd0d4b902ea9e22acafa22835faf712e78131c92893153cecbf08b6a3ce3
- MD5 d7977ad1dac048c12cecd324cfeb29a6
- SHA1 fb6615755200d5542adf57447f92a599e262e2cb
- SHA512 e20adad291ed21dc55e5dfda0203c14da9583d7d286905031288cd712829cd05d261a4bbef8a734c9e691f5d34c8a341f529eb8c66712b0531cfe2f79c723eb3
- SSDEEP 48:KUIbD25WHk1U7HbcMVTMJnbUXto/IiesjrUOxc41R0nXLaGEK1mX4/VAOKFp:Kw/47cMVTInbUC/res3UMzR07aFlXTFp
- TLSH T13DA1DC590DE61DD312B06A63A60E96D4F1059B3B324224FE302DBA5C2F3DA7511F76CE
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/integer-types.h
- SHA256 857e06068ceeb7d0f81a6467dac57855437b4b4a9e60a25c70586666a43c0258
- MD5 4006258b996db71304f4f7b08db1dbf6
- SHA1 436aefd2096f4b4aca2dc746f8cb3abe2083b69b
- SHA512 4c08706af41ae99770c603558b7e6bfccda2fa3494d89c9fbf26df2e41c5b291e9f9b8ed1674318d36cb5477c51be5ad9bf7eaba7debcefb4bada8d7fef6bfb9
- SSDEEP 96:xOSlNH/AxU7yzYTgRf6YBtEA2CPT6Yw6Y/R6ynNybWP4X4XY:xZp+MYiYBtEAkR6yNyyQoXY
- TLSH T1FAE19B590ECD9CD674321572850AC5EAC20D835B62D079F1302F7A786B2EA7281EA7DF
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/mac-support.h
- SHA256 79073f24ed702297fac66be3c15cadd946d09a834d783033530c95a156dd2d7c
- MD5 9eda50c3849348883322e1fc440db74e
- SHA1 199341a8e2f1638059d16c75b6e7c06a2bd84cb0
- SHA512 bcca5843eeba8fa096b9baa89e72d1a5aee686a92159f5043c8eb5ec205314ff28738795f4e69971e7077a87506081473e7dfd5b305b15eae434196880b83d10
- TLSH T11931E1B21BC82DE352361AB5561978C3D20DE5AB13E020E4746CB99C3F0EDC5626EFD6
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/config/public-macros.h
- SHA256 3b8451c1c13268fe907bdf8dbf95a87fe6b2ecccdd1f2500b3d3fcfd65066af6
- MD5 d08cb5f3d9e267cd86e86ebea38c0307
- SHA1 bdb0b5e4efb9159c1cf3c08fd539d093dfe9037f
- SHA512 2b68c3f808110d6916bb45c40ff163d0c427138ce3d783f83ccc1e47ace9c85cfbd4a2a4a1df80392dd03f60e886f88fa704efcc7f0a8a33d2ebc63999d579ee
- SSDEEP 96:Q/PuuXbzCRNWQGJklN0n635JrfNFx7V4/mK:Qrbx8lWqXrfNFx7V4/mK
- TLSH T1589121691ACE7DE659320560A60955E2C20AC53F133054F4702CB6982F2D7B053EBBFF
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/freetype.h
- SHA256 be920728720fec0cb1bbc07f42bf051a7eb70e6833cbbf5b5afcb09d33cf8fa7
- MD5 db858ac726f778be0dc7f27b40857892
- SHA1 a3306ad9710650b14557080f83614775947f9367
- SHA512 241c727ddaea7427b6e7159f114e3424625bd31f2fdd396fd537be8e63a554d2470d75e99271657bcfd97c67b8cbb66a135d947d3a29bcce7f9ad94bf122751d
- SSDEEP 3072:ZHRMQ0DmhnA/c9nn2bdRglMlBLB+DSMezIWGtd1F3:tRr0DsA/in2dRglMlBLoDcytd1F3
- TLSH T16404C81A2FD62EE251724375572A90C4E31953ADA66110CE34BCB3142F3DF7342BAB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/fterrdef.h
- SHA256 9e3602d9140d1aa31422638cb2ffcb3d0754b3878a1176c9b556fe65b427f5ea
- MD5 d355a695c4563e4e65f2286337de1706
- SHA1 f0b097181e2bdf65af4829288bf491414a411bad
- SHA512 59aabfb2a7f7033c210dac53c80c65fce103f86ce372bcbc5a17337305a8b7aab5c2876ba976e763f3663e3cf8ccbb9c665498fbcf6d7016d8b1ff9279d9d491
- SSDEEP 96:Aej7mA9VraKVtaH+BOq61k626UOh6Yt6OM6E67x6uS6K6l6WMxH6opb6g6lh62Pa:AOnJaKVgeky4ef9+GO3r+umghm
- TLSH T19A425D1696C91DE1097B02F43E9668E6C7E0421610382CCE7E7D72887FFDD6AC958F46
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/fterrors.h
- SHA256 3fb379492d9d06db1a48673df6b17c55339d7f2da10d223f36e886f87b929081
- MD5 f8ac3dcfa04904e98d5455e811d2c048
- SHA1 60f8de11075be19d2ae76c74b73abf4d8f04cef6
- SHA512 eafcd86ca1559eabacb29bd177e58500ea6e5ea8854a7f143299be1afe2cf0da63bcb210a28c377e70524234981d4e06d33973a181f62ab1e6f74900e49e2381
- SSDEEP 96:LMY9I9ewoK7hziOb5WlziMITDiCa+FoFcd7YU8SOtm5MeLa6kQ:LMBFBoO9WlziMITDiCaItUSz+Q
- TLSH T16D12EB2219C22DE3247615B5651864E0E238536E47B434EC70AD36B52F3DF7309AAFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftglyph.h
- SHA256 bd006f856116093e18cd528adf59df63d37bdbc8964a77b3d660cbfdef4b4596
- MD5 208fc679a5805ed41d8d2f725054e61d
- SHA1 b07d6002ba0132215458455213ee3003a87a7f2f
- SHA512 4459636a0912b9c4553af5f2f6164b2d11e82cd71afd9c2be17c1c8a6f73c63f31836b894d1f94a6ae06d8a8b93b39b0532889edd7a4c9933b55605bc35bb4c2
- SSDEEP 192:QJfrpOMMeVeBLhkhrhuUNLNywK7+YrS+pqvD/fpqtTY9fUe+UyBRlpvj:yfrj10U2w5YrS227fghYBUe+Uiz
- TLSH T147A240091DEB7DC160774679A729C4C9E21A03DCE66550C9B47CB2242F3CF3386BA78A
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftimage.h
- SHA256 ef7a95aa42d32a39a715150665397bd4b383e0ee6674edb707efaef91a226633
- MD5 b8f782fc1bbe7ba98a7aecbab3bd0e0d
- SHA1 429f53bcce55dd11433ae3992272c3201a0c7c78
- SHA512 07db3a4d33cb08169a3dc4b6c85f9069e78c4bfa2d4588e018aa48e33b765e9499d346515049f50e4ca26cd0f841ab4f512c2eb7433b210601a124a60f4649af
- SSDEEP 384:0jCI/8PvloUR4T9ymtDo1S47tMcyIfhQJ9IP7MZQXlfMINNC1G7c0hK40mmi9Dnb:0OU889uP7HhkIP7JZGKc0CUQbzW44zb
- TLSH T157134F051EE66ED115722279661E94D0E322835E634420D9317C33242F3EFBB96FB7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftmodapi.h
- SHA256 819ecb1be724ff8dac7ede7ad6244b8377a5b3c3b8f75800a59f8735a4c4b911
- MD5 b14f446845b5817cf79ffaea8f2dd2bb
- SHA1 031feb2fb93c5828c70850d445c4f56ce24e7cd1
- SHA512 e32a5ca635c6f6cf0d969ba245ed460f0d2b1036e12c45e5eb11a965c73fc25423f2c707c3a3c104cbf3a963d1b9d66dbf4643d6f9ed6f20dbded02562d67552
- SSDEEP 384:es5rBOrC0Wnz2LzC+l7/1TOZ9rfUAHcUXbM:vBEJWz2HCS7/hW7cUrM
- TLSH T120A231052EF27DD360F60634E519A0C9E69913AE812254C831FC73A52F3EF7385A979E
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftmoderr.h
- SHA256 2f626dcb2715808e468ca883e751ca72c0163d25366bbb89c5f4abb8223b4668
- MD5 4092b01aab7680b461d8e5b7811f35ec
- SHA1 69ec4592381ac957042c1fd750ac362e4ff28ca6
- SHA512 c74b854d841355d67cba84ce69f1a6bf96ad403dc5a11c0376d2b693f708dc57f76fa65a1b899e7f4a6a0e0d067352a4613a767b7e8cc0cdc5265bbc82c913c7
- SSDEEP 96:vRILYKgmwSaEkv99vBKkPYOPR6PV6P36PY6P96P6f6PP6P+6Pf6P00AJ6Py6Pv6S:vqkKidvPpKT0ABb8
- TLSH T1F2E1CA2517E22FC7253B02B5A3093CC8CD9932A84564298D719C7DE26F3CF7209D5B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftsynth.h
- SHA256 9f08fcc9a2bd289348923951d788e2dd2f25a13c7950a56c0772f68256046a41
- MD5 802a3343aab52ac63d4440c6eea723d7
- SHA1 a3f811706067392e19c7643287bdbcccbecb7b8e
- SHA512 b8e33070b07f1428ac791bf370694e7275a34d48e2e59888c94aaaa5d038aaf37beb9f9c23d5e85d07c17f46b6f0aa2435e9792688a6b37a36ae2bcfc792c8b6
- TLSH T17381FF1637C53DE7B6724AE2670A79D8C229429D13A031E8742D7238671CFB502B1FCA
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/ftsystem.h
- SHA256 a8fef2dc80816007e6d8a66b41391bec1b0f4a0ef32f48e5da5f371917ae4e69
- MD5 9cfdce093317191284bbc9a7d2178998
- SHA1 6902910decd4f8dab6b389d7716147c98427edbc
- SHA512 8338ea50d8ac87e5c52699371ac12efeafda89d5608a956106b0725607c9378b5960fd254e4aa4162387c434f5ce671eef9d1dac95eb610028a552c0ce8dd11d
- SSDEEP 96:lTBPgxngUTdopzIq7xGRjk3rpFo4SehSg7ePGNYasDq:lqmzIq1GRjk7D7SeQ2p
- TLSH T13E12FF061EF96CD2A47143B59A19C5C9D322531E6601548A307DF2202F3EFFB977BB98
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/freetype/fttypes.h
- SHA256 f048f58bf600a348589a4c3969eb27c36469d01a8786a34d210c824771a7134e
- MD5 5f9b6e1a03eeb76fc8325a21e9fe3ef7
- SHA1 62021d97a62e363a4ec0fc5fe2bd2d9f200fba2d
- SHA512 811ff33d431db70c8876b2bfa02ca5ef86b19f806766dd20644164759e9e39577e502d93ab243411141a7f9f227257401fed37517d938629c4eb5bba1e34c450
- SSDEEP 192:lXWzLZ4Zk4ruoWaahHfGf/5JZ8iQoTv+3Rnm0yDR:RWzSZk4ioMh/Gf/5z8ev+BZyDR
- TLSH T1FA62ED041EE9BDD264B216358920D4D4F326930D9A51A8D534BD32381F3CFF7DA7678A
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/freetype-2.13.0/include/ft2build.h
- SHA256 4bbf3ed30bc8a7e2fd721902f142541f4249bee5ead02e326bea42f6b038d5d6
- MD5 6e5e1290b3ba31ae05490d8c06ea7eac
- SHA1 121237f6fbd99e9a0508a7ecd1b7a04081ec5d7f
- SHA512 b834af909e4cfed948677ad86ca9e72e794f6e087680252b37ecce0504217062b738418998bfddf4dc0b2dbf8ad9613034219969181dc38df56dfd545382ebd5
- TLSH T1C1119C261ADA2DD3C2B00A75B7085ED1D12A2368A7901890702C76943F6DAA226B6FC4
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/freetype-2.13.0/lib/libfreetype.a
- SHA256 95a9383f269cead09aacc83d84bd41a57dbbc69a0ec84cff6c1adda8b03a3a5d
- MD5 29c10312e858b9ff5b3a91be59ce528c
- SHA1 75fa91c1a6c9d024c692ec389a6b980d77457888
- SHA512 879a021f1bfc24eaa5fc581fee00a569327ecf1b56861bd2507efb6c5bced6a69cbc0fd77aa015507357f6eae217243dff158b3ff725529666650521c5563907
- SSDEEP 12288:G9Bt2mMa9TDhl/LZtpeVsl9wMwrAmP9en3gQ0zGZ4q0ZCWfEWmGcSkQiu0CKCxCu:G9Bt2mMa9TDhFLZtpEsl9w1xGZZZuk+f
- TLSH T164F46B42D6E2ACEEC957C334536B6332F639F4441232AF1753648A357E73EC0AA99718
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/LICENSE.txt
- SHA256 29f44af2b6551afda01b8b9ad568fcf650439b2d8cd3b67142b99f4255e1235d
- MD5 f0d3200c5cb354059f50c55facf5d337
- SHA1 535aadacaa791a28b025919ee546e06b6554dde4
- SHA512 a1bf61c08d21d03e5d3a8ce0fd1546a05e5f1d64b4db872b4b4fa1467a35320e983316986fef319d8e1b31ede34b4c1ea6d62d977ff98b40f4fb5ba9110b2fc6
- TLSH T15F11B61EB2564363188257600569ECC5F23BB04E7F6F2984346DF2051326458C5FFC68
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_dx9.cpp
- SHA256 df575af38fa307c4844a06b7ea6a30c45c429367bfebf78e481cae7247608088
- MD5 d58801068bbaccd1c8b487106d2f1bbd
- SHA1 3139ffd0594180bc460fdcc6cbdc6091fed15ab3
- SHA512 4f0466142c848647e91461608fc24903a052a0925e87d5a09d48ed83d6d391701be570bd87ad671ab576cc2ceac9093c5018f8dbe80301238f6fd74318fba215
- SSDEEP 384:oS8BCBKkyyb1Y6vKwUtlgN//0R7lzu/FzjFzoKxO5kol5zDAlgl7F4OvEDALb:9zL1Y63UtE98J8lgl7nvE8Lb
- TLSH T1EB82B5C974523E529C7361158F898A4AD70878EB1BBC97C8B98C12852FF41A0D93DF8F
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_dx9.h
- SHA256 fbf6401c92d755405ac75937fab6c1a1e83fed2b752195148f9a43df418f81fa
- MD5 4ac60cceaa00d4944d9dc6c7f648663a
- SHA1 53b1890dd1c21b0a674fd57ebd7f4221e6a3860f
- SHA512 4c5eb6e0a26626277e868fe765879a6d1c91a1d5f5606403e3a5d8259fc52d1f23877c03e7b507e39e799cf4086576bd4a3d726d9fc97a9d04c84122bc1be15f
- TLSH T14C3112921266B1A04F72098099C0DB87F30E6EDCABCCE7FDB6ADE14C37944361065D27
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_win32.cpp
- SHA256 a72d265eed1aed910aa4cf9d1071c4905f3fea107851e4d35ba3f4da795d567e
- MD5 c3e583a3732643a5b81a579f062fe861
- SHA1 a09d1828d09663b30199982f044421f354bfcc1e
- SHA512 cc0d7970030b08c7f32a68635aee2412ebcdd4907066dd1f32d7bd3162dc1c9e4da163e15716d95e0ce9b3294990592afa07cd1633dd2dd484a76206396dee8a
- SSDEEP 768:5Am5TphdjAQFqhI9f/RrNTsGD0SPKtNU+LwM1ojm6W+YIFMhKW6S+rEW2JTXC+i1:bkCR43n1ourJC
- TLSH T1B02395D15D4970520A31C3946BE35546FE3848776AE556A8BA8CE04CBF78122832EFFF
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/backends/imgui_impl_win32.h
- SHA256 19a655109d84a01e8f1a15e7d1b8c9c265a9cac2fabab741050a79e40029ccfb
- MD5 9fb466987aeab3d071c00b77575abc16
- SHA1 786f4c82b11399bd666890df28d9a5f99e46aa5e
- SHA512 2a3745d296954fe76955e056d4a9a9ccc391b4065b20c1f98b941fc8fa24684fa30145f8806e83cedf71013c10f04a185e2c30b48216d81ee9f8e66894c4b696
- TLSH T1DC71C44B030570F086321241D2DCCA97F62E7AB8ABD68FEC702DE18C176906B4127E7B
- MD5 SHA1 SHA512 TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imconfig.h
- SHA256 260dace38975aa8acc2d16fb60aa1c1f785046f2a4fe06c4ef35ef8ee65c9c8a
- MD5 393e6c310c2f014866343780f1341f9f
- SHA1 adc2f5a012f2d97d62b54ca660bf8c84e612234c
- SHA512 ecb1279d2f0526139b5cb08ef747be5656f7ff65a3952be0c702c835032f6e90ec62b3d868691cab0a9485aa5eeb4ce43ddc7df23d042f79955ec6d18ef4a384
- SSDEEP 192:w4g/cWPTHNNwLmzI7iQtlbKFf1nmMcg0vUJnOXgnxmrnqpjQfSfVKZ7CG:wpcWTThI7iQt9KFf1nmMcg0vYnOQxEnt
- TLSH T19B22A40B3D4A22B00A71D571B35E8126D709CE7B7B50E0D871BDA25C172882A42FEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui.cpp
- SHA256 ad49a950b3f3bef9706043cf83f40a4c2eba9913ba45b6c40606d9bf2affa972
- MD5 d9ff8bcef20d1a0c582a66aeda934e3e
- SHA1 e70fe5800b580adef4259f476b846ec3a9ffe10a
- SHA512 8dd327c85f37837d515edaa3e0ce398dcd49a3cff43c5996237eb51b64e7995511ea97469081f7bf462e0ea24bfa845e4ec9a7af37781ebc9dffbd1b0fe7bc12
- SSDEEP 6144:nY+ggJkBzjIx8IXIAllU9jU6X6r6+nNBUhuuok1Ld9RkexSCV0BLEzmtcIERMaEW:nbuBzcXllgUEeCKIdvvw3lRVCHcEH
- TLSH T17EF4E8E61C5135278972E5295BC36306EB3A45336BA086107A9D634CBFB0423C67DEEF
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui.h
- SHA256 fba42db3409cbb847e046f76929a60d65adc5128834f1f95315002e6e10f544b
- MD5 2cf4fd7bd37da8ba56ed89102e0c5741
- SHA1 e3ce189dcaf1bdf80e81a0fdc77ea88078b502dc
- SHA512 e4201a5784ea468a705a1045a8aab707484b251cdf766d6503e15bfbaf6284c2024579385972905ac724854609f08a5ccf7e0441a249d8fe5ee2fab53a3b92d0
- SSDEEP 6144:EdpiZJWYkAn3VYtgPBNWr0IP4SWCA6a55bPPPvw:EdpiZoUWtgPDWr0IAH3nbPI
- TLSH T13A64FA431E013221CD32D25177D6E546E7285436BFE0D6A0365FA39C2F6682A463EFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_draw.cpp
- SHA256 539fa2903b0f8cfd4b4b9ddf812dd904c6121e6671473b446fc3b73c770a93c9
- MD5 34bf62729fe45c9a5c26a2c7a7e83506
- SHA1 1adbb71be99e94f937b67ad8a7ef9561a15d7fb3
- SHA512 402849c46ccfc8558c61ce38d46c2a762a9b0cf41a5f889bf1715755bdf6227b4e145bdebc2d8fcceca2efbeab98273a61192caae7a0f60042d67b528f72b554
- SSDEEP 3072:vFpHYQCxyCHebQaaiOEoJbggcHXPa8RXP7FRP8m:vFpHcHebQPiO5YHbPr
- TLSH T167241A4D0D0112134E73E96C6B93415DEB4EC9A3AAF41608BD9E578C6FB1814CBBCF9A
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_internal.h
- SHA256 fa5c5b91e8ea69bc738031953b83f92638dd2fc69c3016f4bc53f5ce99ad6e70
- MD5 6de0ff921089fa31cba31b92cdd588b3
- SHA1 d8ff84f487830b03350252acd9df75ff8c780ea5
- SHA512 40822ee52439d7f8a4ff0a77a8c8ef31c53a5b93625296ec09415a4dc88b6199afe65aadfb6aed0e6292a0bd30cb1678c6f151a4fc12435f82787bb9603ded5b
- SSDEEP 3072:frLuEOdY2lIaP99WfQnOWN0qEi3BJsXEBdmHc:frKIg/wQn7mas0vJ
- TLSH T1E044A6932E017621CD31D251A7D2D545DB3948726FE09260328EB38C6F7681A867EFFB
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_tables.cpp
- SHA256 01e8391d3d4b0deb2fcd8fada70aead8c312d7a16367575fd940763dee4f56c0
- MD5 d5ce0f32ecf75e86ae3a303b1f233c73
- SHA1 89b247a3b665ec1cfe618dd79b6d84e1e7ae30b1
- SHA512 c240f6513045b4bb8c5a27df5e067f762c45e803b50a094f2fe80b6689e49fffcba30850383a0399c7b4985a24bf363050166805b79e1263e65eb34a3666217f
- SSDEEP 6144:p+xGYA4rctcWUpk7bTyomNugm0sz7OGmjCCGQhorO+:pWGVltcW7/yNxm0sz7OGmjCCGQhiO+
- TLSH T17B3462976F1032168832E02567CA566FDF2614235F5462F03E5DD24D2FB18A3CABCDAB
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imgui_widgets.cpp
- SHA256 dfee7a846c754617ee09721c429fe476e208682a402d113881301ea01f7e92fe
- MD5 e6c1f89ae8f4d79bef8b8459ebc1badb
- SHA1 b8b5b72c0d628da93649d582ec6c2c9709f6ead6
- SHA512 f1cdd5751e453b887026831c94e246a54cf0771f9948fdba4e479525d1b1d6bf9f754d6630d067719bd1801410d0081308f231ef1c6a3054baa251f29c098ed2
- SSDEEP 12288:g3tDE3govVL9qpBsaNxtNZeBJ+RbA1UK8:537Zxpn8A1U
- TLSH T1B1A4D5961D1132268D32E1299FC35219EF2919773BE08690BA5D635C3FB0426C27DFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imstb_rectpack.h
- SHA256 bb53504995e983d54b1ae06ea727f0b39647e5e205b4bf7da01343953974951c
- MD5 4b5f5a3b59feb953c84f674635d58167
- SHA1 53a013bec39b325b3f3acddf208f96db3e0ca752
- SHA512 8837bb6e504d60220cf250ff86a4daaa7398d263f72bd17c3857e248e3bb6fe8b6c85e47b9498c472ed6a87aefb17f68273bc046e65f582dd75a6dbe1ab3bcf8
- SSDEEP 384:dEpDhzFzV/ONDAPFTwooIUoSgKFkex1Fke5teYYxEv:d6TzV/OhAPFTRaFkenFke5pYKv
- TLSH T11392A42B2C9111355B72D261DB0F615AE317D067D3379220BE8EB2642FB045643FEEE6
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/imstb_textedit.h
- SHA256 f1f89d896d4921d6193a0def9b9445732483d116ee103b273816657246d0e2aa
- MD5 c3c7cb7086bed15171c5e15957e2e0b5
- SHA1 ff17bcf333ed1a6f9b809be5c3a8ba037cbd2d32
- SHA512 b543cd62f25b5fde2d2ca84ba2f07e928f24944262f4dbe013b4bbe00c5ceb978b4031fd8ee1c79e0ef79317be65c718a618e106b49563a5c327de36c355b073
- SSDEEP 768:Xq3xJss0nKDNWFoovd60cvUuy6uYeN+OIUy96F0Q9Elyf7l7bBUYKv:a8x/v7BzdBUYKv
- TLSH T1E74334076552033A0CBDA277FA8E22B6FB26483FB2654751B48EB1181F710E6417DDFA
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/misc/freetype/imgui_freetype.cpp
- SHA256 02bd2ca07373d8e48ae239b98e3d93007b6e9c760f5b99b69e505fb64eb31446
- MD5 aea537acea42df58ccb3c99a44745902
- SHA1 2e388579e67527ddefeb1d5f3b6539b20c6309b9
- SHA512 dd5f2035b9e3135df728c418b7516b37ab97a791c5fb445ff48212d9afaf4083ccc40c0058836856a0158b60f0a3852bd0e11221fe3ae78230a72fce0f20a13a
- SSDEEP 768:RHhJPeyBILSXLj542njVReekJBFfvAT9FFQNb:vzHUPfvMtI
- TLSH T1F923D8A52D1B31074C32C4E9FF565664E70F81A7A7E49A80B98D07582F700385ABDBBF
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/third_party/imgui-1.90-wip-18995/misc/freetype/imgui_freetype.h
- SHA256 22198493e64a6013cdde783658651a04de4b34e475d1633f93190994acc5dc69
- MD5 206296e3f9b6fbad92f841f516d7ecc7
- SHA1 b3e7aa3959cf1bfdba9dbe1cb3f2d14fbe21e257
- SHA512 2f5d0a97ff386374c32d126fd091b792f8312936c9fab99c7c7bc0355c430090e847e781946e774d1322127b878fe2517f0e7e44e8133307bffd5e606d27a7e6
- TLSH T1D671833A218D713745628C14B7289BEDDB1A49B287F8D690B11E236C3F728544634BFF
- MD5 SHA1 SHA512 TLSH
SSORIG/source/ui/d3d9_texture.cpp
- SHA256 4fc14f83348627e727bdc71ceca75525cb0b6793a0ca16ecfec70f9d25439e96
- MD5 c83b98a2926219160aef0720124b9561
- SHA1 09921459b6d6e67684da98da1c1056f6174422eb
- SHA512 3f99f1b2d994c7b29e0608e65ca2de3dd4d7462737689fd066eb928ec6da4e6a63a8532fef6629f69ee801219de8c318f0a09aed5aad2cea6e7edbf5e1094a13
- SSDEEP 192:uiHvLm+V2+5ciYiKCaG6yiQg4XUYvZktvypUmqmdU9JUZbiQaeo7l6eWrjzbIw:u2vz5ciYiuhlYvZkF9PH6F
- TLSH T1D82242D24DBBE029AA23416E5B0B50429268D0175309DB94FFCD95303FA207AFEB5BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/ui/d3d9_texture.h
- SHA256 3a93dd6a8683723205910240a1151da98de64910196d11f910feb4fd3bb19953
- MD5 5dec1e5639a50a1d738a8b63f294134e
- SHA1 bbe6bdedda089148fa8b1d26da437b807df60c67
- SHA512 0a8ae428d11bc4716af47caa1fb8fc684e0e7d8ded093e606bd942f798d881a1ed299320b46eb3626196f5dfdfcd682b84136300b2b688855e1cf6cf6e6c084a
- TLSH T1A1019CBA7096D263EE2B01134F425203211E570F7225F8F2B58F22541FC65557BB51F1
- MD5 SHA1 SHA512 TLSH
SSORIG/source/ui/main.cpp
- SHA256 fde981e112f4c3d6cddd8b05b368d76b6c0be430a9c18a3ba22e47a57f33558a
- MD5 70f7e18300032e1088846691cc8704e1
- SHA1 6d103dbc5904ee12c70d5b11ce0f9fc3d335a895
- SHA512 72eb3539b381f3c050c45dbd3ef3431e6a3becc284c1d5330ae31c30d54f1e37d3a30b67b5f9ce8e017c3408aac603d7d1ebc7cf62354df7cbc18802f4c4afe6
- SSDEEP 192:X/s7LiwdWgjjHljjslz8oCQJY5VQflfMfhNOuT+IuFyvMQ1IfOsrMeNndsYph1Li:X/snFWwKlzETUi8UI7r/pYZqss2
- TLSH T16B82A76E109B6411E833403B7B8B7109612A35A737D8EE157F6D8160FF8986EC1F0BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/ui/native_chain_bridge.cpp
- SHA256 3b13ecff72d2e5d46b76f3f8db8f19f5a0273405695055863f81d1da61eca1f5
- MD5 3a10e1cbd59b18f3b8b271ddbd93f68f
- SHA1 aa0a1a5df72844c1b47211158f293b75436b09c3
- SHA512 cb4698e4517637de46eea818bbb803d33395b31ef16b97637b99c7b080d201b234a81bfba483bf929b205edaab71c733e5cb606f513725517bae9a32af85f833
- SSDEEP 192:vkHKxgpBc8V+Fgfg6oJrasO6X0xBrqiKvpcpCvyxsW6esOWDcj1KQQvSus4MHO4b:vkughYzI0wCm
- TLSH T1ECF143F544B5FC5C98539077FF2B65A25492F443D30CAE20FD9F82088F2015A69AE7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/ui/native_chain_bridge.h
- SHA256 7417f1022c23c8c14cd2940c68f2675fa9217f54d200ef94e0e7e3f6e58d5e9e
- MD5 86d7764b565cf2c774290aeb690b58e5
- SHA1 c27f8867d26cba16ca89ad9467649455edb293a9
- SHA512 606bcf465668c1991ae78d95bcaae1260bc145f95a0434d1e42249f8cb8627f021ce4cf89020e82486f8971a714f0496b1c232b691d33856af05a8c615b77b8d
- TLSH T1C221ADAE82AED848E8460037FF3E78516D85740BE648A570B8CE4351CF452067FFB557
- MD5 SHA1 SHA512 TLSH
SSORIG/source/ui/resource_ids.h
- SHA256 8c7c36e8ce16c882b964e2f2f376e1586f2491510497c461ad5d5d9ac749437d
- MD5 31bda22ddc1984dce75a742a481f07e9
- SHA1 c61c81919c1de320e51cec34a229625677a1d161
- SHA512 5c1ebfd12e447fc85c9009fb9be9e7571085851e2a1f16fdb5def38f59bf8f578b2a240d83414f90c12385d9c7335d44a94eb2a924d01a22f4d48a70037f3c01
- TLSH T1C4B012301855F5F0C11104B37E63A4A1842E6E6069F4F84052AFC0FA46E3C9B68A0990
- MD5 SHA1 SHA512 TLSH
SSORIG/source/ui/secretservice_ui.cpp
- SHA256 e709f7c52263870e00d86f8171ddb30c12d16af95f3d913e039c2a8ac0be672f
- MD5 3ad5decc71c5e549d82beb9682351268
- SHA1 251ffdd46988c03611ab60f0231da947640e4577
- SHA512 7fdca46756ec94f724b19be32f7f26dfbb98faf4e4f3b241caa7b205282b4c318e9245878b07569859eccacefe5e6b97bb69f444df13eaa901b7dbdff85597b7
- SSDEEP 384:ZT8iW0NATEz27DjRlOybGeZVeh8ZeIXEbUKj7eKJr:ZT/527xZAsUbBj7eKJr
- TLSH T197E295C506732C16E83380281FE776596E2DA8637E84D6983B8CA35D5F8950AC0779FF
- MD5 SHA1 SHA512 SSDEEP TLSH
SSORIG/source/ui/secretservice_ui.h
- SHA256 262190ff2c20f7333bb8f2b02b2a73783ef5eba26d6a08f529dbc33838f8e61f
- MD5 c704a3cc23077eec8d481ffa47fc6bbc
- SHA1 183a62ffb2940f0019798396421fde4386229d7d
- SHA512 4642c8e23194ac4e8a3c705f9025e5ea906f9942af793bf2292b9902c13d7471559dbbbd3ea65aee1979a09d6bf37bdb1992fab67956a04155f199f388fc6ffe
- TLSH T1A16132EBC3672965EC00801A5F53205E7A1C69833E05EA35368D630E9F8C24F51769CF
- MD5 SHA1 SHA512 TLSH