FrostyModManager.zip
- SHA256 c7cf94239bcfeb9203330debe7c68c8a02c07bb24df44dde8d69ace934c69b19
Password
exasperation1444
Overview
overview
7Static
static
3FrostyModM...ls.dll
windows10-2004-x64
1FrostyModM...ls.dll
windows11-ltsc_2024-x64
1FrostyModM...re.dll
windows10-2004-x64
1FrostyModM...re.dll
windows11-ltsc_2024-x64
1FrostyModM...sh.dll
windows10-2004-x64
1FrostyModM...sh.dll
windows11-ltsc_2024-x64
1FrostyModM...er.exe
windows10-2004-x64
3FrostyModM...er.exe
windows11-ltsc_2024-x64
3FrostyModM...rt.dll
windows10-2004-x64
3FrostyModM...rt.dll
windows11-ltsc_2024-x64
1FrostyModM...dk.dll
windows10-2004-x64
1FrostyModM...dk.dll
windows11-ltsc_2024-x64
1FrostyModM...in.dll
windows10-2004-x64
1FrostyModM...in.dll
windows11-ltsc_2024-x64
1FrostyModM...in.dll
windows10-2004-x64
1FrostyModM...in.dll
windows11-ltsc_2024-x64
1FrostyModM...in.dll
windows10-2004-x64
1FrostyModM...in.dll
windows11-ltsc_2024-x64
1FrostyModM...in.dll
windows10-2004-x64
1FrostyModM...in.dll
windows11-ltsc_2024-x64
1FrostyModM...in.dll
windows10-2004-x64
1FrostyModM...in.dll
windows11-ltsc_2024-x64
1FrostyModM....2.exe
windows10-2004-x64
6FrostyModM....2.exe
windows11-ltsc_2024-x64
6FrostyModM...15.exe
windows10-2004-x64
4FrostyModM...15.exe
windows11-ltsc_2024-x64
4FrostyModM...17.exe
windows10-2004-x64
7FrostyModM...17.exe
windows11-ltsc_2024-x64
7FrostyModM...DK.dll
windows10-2004-x64
1FrostyModM...DK.dll
windows11-ltsc_2024-x64
1FrostyModM...DK.dll
windows10-2004-x64
1FrostyModM...DK.dll
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
FrostyModManager/FrostyControls.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
FrostyModManager/FrostyControls.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
FrostyModManager/FrostyCore.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
FrostyModManager/FrostyCore.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
FrostyModManager/FrostyHash.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
FrostyModManager/FrostyHash.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
FrostyModManager/FrostyModManager.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
FrostyModManager/FrostyModManager.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
FrostyModManager/FrostyModSupport.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral10
Sample
FrostyModManager/FrostyModSupport.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
FrostyModManager/FrostySdk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
FrostyModManager/FrostySdk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
FrostyModManager/Plugins/BiowareLocalizationPlugin.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
FrostyModManager/Plugins/BiowareLocalizationPlugin.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
FrostyModManager/Plugins/DifficultyWeaponTableDataPlugin.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
FrostyModManager/Plugins/DifficultyWeaponTableDataPlugin.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
FrostyModManager/Plugins/FsLocalizationPlugin.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
FrostyModManager/Plugins/FsLocalizationPlugin.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
FrostyModManager/Plugins/MeshSetPlugin.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
FrostyModManager/Plugins/MeshSetPlugin.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
FrostyModManager/Plugins/Swbf2MergerPlugin.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
FrostyModManager/Plugins/Swbf2MergerPlugin.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
FrostyModManager/Prereqs/NET Framework 4.7.2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral24
Sample
FrostyModManager/Prereqs/NET Framework 4.7.2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral25
Sample
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2015.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral26
Sample
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2015.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral27
Sample
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2017.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2017.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
FrostyModManager/Profiles/AnthemSDK.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
FrostyModManager/Profiles/AnthemSDK.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
FrostyModManager/Profiles/BF1SDK.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
FrostyModManager/Profiles/BF1SDK.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target FrostyModManager.zip
- Size 79.5MB
- Sample260930-dynpcsdf79
- SHA256 c7cf94239bcfeb9203330debe7c68c8a02c07bb24df44dde8d69ace934c69b19
- MD5 9f6e81129791a2e1a5d49c7b597b052b
- SHA1 5a260553b2d066514f96f6573cce788e04b629cb
- SHA512 00637fc93d03d945db09e1c9146458af10a96fbaf525614819e4a8adaa5bce6815af1502a45f055a741588f778cf4161ff1ddb17e1a904b4f328046194ab33f4
- SSDEEP 1572864:87+TmZpG0Ftxn8EKR74cChlKkGbdFulfRNyj783IRwfoMYq8:8rW0R8jR74Bh4bdek+IRwFi
- TLSH T134083304BA5D97DC242345B5AA1CBDDCB3ED22BE1608119C982F4BF25F196EF41A80F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 46 IoCs
Checks for missing Authenticode signature.
resource unpack001/FrostyModManager/FrostyControls.dll unpack001/FrostyModManager/FrostyCore.dll unpack001/FrostyModManager/FrostyHash.dll unpack001/FrostyModManager/FrostyModManager.exe unpack001/FrostyModManager/FrostyModSupport.dll unpack001/FrostyModManager/FrostySdk.dll unpack001/FrostyModManager/Plugins/BiowareLocalizationPlugin.dll unpack001/FrostyModManager/Plugins/DifficultyWeaponTableDataPlugin.dll unpack001/FrostyModManager/Plugins/FsLocalizationPlugin.dll unpack001/FrostyModManager/Plugins/MeshSetPlugin.dll unpack001/FrostyModManager/Plugins/Swbf2MergerPlugin.dll unpack001/FrostyModManager/Profiles/AnthemSDK.dll unpack001/FrostyModManager/Profiles/BF1SDK.dll unpack001/FrostyModManager/Profiles/BF4SDK.dll unpack001/FrostyModManager/Profiles/BFHSDK.dll unpack001/FrostyModManager/Profiles/BFVSDK.dll unpack001/FrostyModManager/Profiles/DragonAgeSDK.dll unpack001/FrostyModManager/Profiles/FIFA19SDK.dll unpack001/FrostyModManager/Profiles/FIFA20SDK.dll unpack001/FrostyModManager/Profiles/Fifa17SDK.dll unpack001/FrostyModManager/Profiles/Fifa18SDK.dll unpack001/FrostyModManager/Profiles/MADDEN19SDK.dll unpack001/FrostyModManager/Profiles/MADDEN20SDK.dll unpack001/FrostyModManager/Profiles/MassEffectSDK.dll unpack001/FrostyModManager/Profiles/MirrorsEdgeSDK.dll unpack001/FrostyModManager/Profiles/NFS14SDK.dll unpack001/FrostyModManager/Profiles/NFS16SDK.dll unpack001/FrostyModManager/Profiles/NFS17SDK.dll unpack001/FrostyModManager/Profiles/NFSEDGESDK.dll unpack001/FrostyModManager/Profiles/NFSHEATSDK.dll unpack001/FrostyModManager/Profiles/PVZ1SDK.dll unpack001/FrostyModManager/Profiles/PVZ2SDK.dll unpack001/FrostyModManager/Profiles/PVZ3SDK.dll unpack001/FrostyModManager/Profiles/SWSSDK.dll unpack001/FrostyModManager/Profiles/StarWarsIISDK.dll unpack001/FrostyModManager/Profiles/StarWarsSDK.dll unpack001/FrostyModManager/ThirdParty/CryptBase.dll unpack001/FrostyModManager/ThirdParty/LZMA.dll unpack001/FrostyModManager/ThirdParty/UnRAR.dll unpack001/FrostyModManager/ThirdParty/fifaconfig.exe unpack001/FrostyModManager/ThirdParty/liblz4.so.1.8.0.dll unpack001/FrostyModManager/ThirdParty/libzstd.0.0.6.dll unpack001/FrostyModManager/ThirdParty/libzstd.1.1.5.dll unpack001/FrostyModManager/ThirdParty/libzstd.1.2.0.dll unpack001/FrostyModManager/ThirdParty/libzstd.1.3.4.dll unpack001/FrostyModManager/ThirdParty/zlibwapi.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2017.exe
File Explorer
-
FrostyModManager.zip.zip 79.5MB
-
FrostyModManager/FrostyControls.dll.dll 95KB
-
FrostyModManager/FrostyCore.dll.dll 5.9MB
-
FrostyModManager/FrostyHash.dll.dll 112KB
-
FrostyModManager/FrostyModManager.exe.exe 524KB
-
FrostyModManager/FrostyModSupport.dll.dll 105KB
-
FrostyModManager/FrostySdk.dll.dll 2.7MB
-
FrostyModManager/Plugins/BiowareLocalizationPlugin.dll.dll 142KB
-
FrostyModManager/Plugins/DifficultyWeaponTableDataPlugin.dll.dll 17KB
-
FrostyModManager/Plugins/FsLocalizationPlugin.dll.dll 35KB
-
FrostyModManager/Plugins/MeshSetPlugin.dll.dll 257KB
-
FrostyModManager/Plugins/Swbf2MergerPlugin.dll.dll 82KB
-
FrostyModManager/Prereqs/NET Framework 4.7.2.exe.exe 1.4MB
-
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2015.exe.exe 13.9MB
-
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2017.exe.exe 14.6MB
-
FrostyModManager/Profiles/AnthemSDK.dll.dll 11.6MB
-
FrostyModManager/Profiles/BF1SDK.dll.dll 5.0MB
-
FrostyModManager/Profiles/BF4SDK.dll.dll 3.4MB
-
FrostyModManager/Profiles/BFHSDK.dll.dll 3.5MB
-
FrostyModManager/Profiles/BFVSDK.dll.dll 9.5MB
-
FrostyModManager/Profiles/DragonAgeSDK.dll.dll 4.2MB
-
FrostyModManager/Profiles/FIFA19SDK.dll.dll 5.6MB
-
FrostyModManager/Profiles/FIFA20SDK.dll.dll 8.9MB
-
FrostyModManager/Profiles/Fifa17SDK.dll.dll 3.7MB
-
FrostyModManager/Profiles/Fifa18SDK.dll.dll 5.1MB
-
FrostyModManager/Profiles/MADDEN19SDK.dll.dll 5.3MB
-
FrostyModManager/Profiles/MADDEN20SDK.dll.dll 7.7MB
-
FrostyModManager/Profiles/MassEffectSDK.dll.dll 6.8MB
-
FrostyModManager/Profiles/MirrorsEdgeSDK.dll.dll 3.3MB
-
FrostyModManager/Profiles/NFS14SDK.dll.dll 2.9MB
-
FrostyModManager/Profiles/NFS16SDK.dll.dll 3.7MB
-
FrostyModManager/Profiles/NFS17SDK.dll.dll 6.4MB
-
FrostyModManager/Profiles/NFSEDGESDK.dll.dll 3.8MB
-
FrostyModManager/Profiles/NFSHEATSDK.dll.dll 7.8MB
-
FrostyModManager/Profiles/PVZ1SDK.dll.dll 3.5MB
-
FrostyModManager/Profiles/PVZ2SDK.dll.dll 3.8MB
-
FrostyModManager/Profiles/PVZ3SDK.dll.dll 11.5MB
-
FrostyModManager/Profiles/SWSSDK.dll.dll 9.5MB
-
FrostyModManager/Profiles/StarWarsIISDK.dll.dll 9.0MB
-
FrostyModManager/Profiles/StarWarsSDK.dll.dll 3.8MB
-
FrostyModManager/ThirdParty/CryptBase.dll.dll 93KB
-
FrostyModManager/ThirdParty/LZMA.dll.dll 443KB
-
FrostyModManager/ThirdParty/Newtonsoft.Json.dll.dll 683KB
-
FrostyModManager/ThirdParty/UnRAR.dll.dll 300KB
-
FrostyModManager/ThirdParty/fifaconfig.exe.exe 6KB
-
FrostyModManager/ThirdParty/liblz4.so.1.8.0.dll.dll 438KB
-
FrostyModManager/ThirdParty/libzstd.0.0.6.dll.dll 118KB
-
FrostyModManager/ThirdParty/libzstd.1.1.5.dll.dll 348KB
-
FrostyModManager/ThirdParty/libzstd.1.2.0.dll.dll 577KB
-
FrostyModManager/ThirdParty/libzstd.1.3.4.dll.dll 832KB
-
FrostyModManager/ThirdParty/zlibwapi.dll.dll 110KB
FrostyModManager/FrostyControls.dll
- SHA256 289d7daef10e616d1ab977bddc13440eb7126f90693b2b54c6237697e6e6f34e
- MD5 24f88cd4f78d7d53f6b5c79ba022f508
- SHA1 c93702d249e0a56cc0359f884371258eee54bac0
- SHA512 26691f4f14d67a5c3af053bbea54194d863e133a672901416252422c0eb9d461081539cb2234f7058efc658d73d44fbfa5c5dd1f2db45ff4b215eede9493cd77
- SSDEEP 1536:ToNHZpEoODK2AnR1JApIejVw58/+WZAloMgtBoMrkx0Mdh4WyUj:TOnh5EuWBrm2k+Md2w
- TLSH T1F9A36C47A7704E35C6AA8BF994B246687A32565463C2EF9238CE2C8D78C6383C1D53D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\FrostyControls\obj\x64\Release - Final\FrostyControls.pdb
Name
.text
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/FrostyCore.dll
- SHA256 ffaf354582c6ccc3c8cfd6190f63e9916518e08479bdfdf583df8a2ec1e877f8
- MD5 c4f51635185fc5556e1a3006bf12e03c
- SHA1 3ee4c1079eb424c0076d17a7aaeda8ce068ce7e3
- SHA512 52bb1f17dc8e714c21ac53b217c3671092e0016502c48ff3977e19f05012763065afa6dd0e3b6392d07e7b5c39dd178d42faf94b2e9f4e26bc48e8401b876061
- SSDEEP 49152:WdqSc9vrWcL77N4j6rQ5Tw5IFSH3Yd5Tso2VBZzbrDHg4D9hkV/7NQzBbaQ3Jd55:WyW
- TLSH T165567CE577C285B9FB8F2339A281C941DA3511522CD21036398D9B4E7397A84BF2F74B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\FrostyPlugin\obj\x64\Release - Final\FrostyCore.pdb
Name
.text
Size
5.9MB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/FrostyHash.dll
- IMPHASH e0024bab776a080fbe2677e3e4194691
- SHA256 0366df964fd3c8571e4242a1f10478dd694c31388b24b80a6a8e2190e31c4b88
- MD5 fd6be3a8838e2dc396ba891871f6c6d0
- SHA1 4a0dcf25c4f0e6d56e8eb49b196d77d2213a1810
- SHA512 2f7f26cefb0f7504b66aeb80a3bba4a46916e4a6aed53b273ed97c5ab3434cd3924bab50236e9288c2d15be4df7f7893ebc7c528efcd1cb5472046b4f9951781
- SSDEEP 768:Q2sWkDDm0JnESE0J3EC/JR3w4qsbEpxgS/OuQtultjZlyQCFpVCzPgahaK:Q2sNDDm0JnESb0CHsxdOuQAzoMz
- TLSH T1C5B34F0316EE7DDAE4BA52B53B7383C2C32CEE455B13D24F91D161408A3E28B39967C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
6
Entry point
20945
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\FrostyEditor\x64\Release - Final\FrostyHash.pdb
kernel32
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
Sleep
vcruntime140
__current_exception
__current_exception_context
memset
__FrameUnwindFilter
__std_type_info_destroy_list
__C_specific_handler
memcpy
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_seh_filter_dll
_crt_at_quick_exit
_cexit
terminate
abort
_initterm
_crt_atexit
_initterm_e
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
708B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31935,
count=3, id=257, version=29395,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=37, id=1, productName=Unmarked objects,
count=15, id=261, version=31935,
count=7, id=260, version=31935,
count=2, id=259, version=31935,
count=1, id=260, version=32213,
count=5, id=261, version=32213,
count=1, id=255, version=32213,
count=1, id=151,
count=1, id=258, version=32213,
FrostyModManager/FrostyModManager.exe
- SHA256 87e198ecd0dce9b18fd12b1c496b7ec5ace667ee0d339103b7f476b524dd6dd2
- MD5 043da151f072c8c99fb659f7cebf00aa
- SHA1 0926cbec499b942afb1103126c75d0cd3c62c675
- SHA512 74761a846be66b22b116d08334957fe0acac9b4bae369c88bd49936c83395056e3bc2a829ae2c84bd01c525ba524a031a00b57ac98c29d338f0ff17561b82dab
- SSDEEP 6144:pEWkGA2iQR4C0XYUsaH/zA/Nt5IS/V/2:ZtriQKBaaHU//5R/Y
- TLSH T146B4375ED638984AC4AA15FBB426A14106341F16C66DCA2E8BB5F89878F73C30703F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\FrostyModManager\obj\x64\Release - Final\FrostyModManager.pdb
Name
.text
Size
379KB
Virtual Size
379KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/FrostyModSupport.dll
- SHA256 81c350fd7fc35919457f27818cc73d9c410f214c77ef64e1ddb83149edbdf672
- MD5 21ee390d60b9bd3343c45d1ab29638ef
- SHA1 15c893d345c6834f3ef6e718333d06c400285d2a
- SHA512 d318ec0d3eff0b68481d6f6817d3f1c5ca73eeee53704ae37f05221440fabcdfa1df06591c4bbb4ffe25c2f1be00197d2aeb4e1feb588b7cc7678a8f222e7b9a
- SSDEEP 3072:IDXr925d3SiKcqPYXXHq4LDpvGA9qE0yHRhraHMcOIP2BO0XRFRc+bADp:upuNSiKcqgXXK4LDpvGA
- TLSH T14CB30A1ED6A8DB15C8BF0F7BB0E002954732A217D316E7A84DCF65C50C667247F8A26B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\FrostyModSupport\obj\x64\Release - Final\FrostyModSupport.pdb
Name
.text
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/FrostySdk.dll
- SHA256 66b9c3d3d51e6133bcd69706ab4c2eb89756c3b4c97a175fdfca9b26066c3008
- MD5 8c812f10a8aa49eaba38c16eb733509c
- SHA1 009e47458d982de659c1d007f47b93f05603955e
- SHA512 6690ad57297982a0f0b645d3d97aadafea991f2e19cbc75a913822df9af17a3343adf99e9d780abac0a6330ee9b96a1873eeabdd3f966a58fa64cbb21d17d960
- SSDEEP 49152:+8H2smwkxQ1fqDs/n31tP1Ah4jw8fOAXUR0EoEB8/mZKlytcUiKbOoBZyXmvtZ7:+MZJ1fqDmXoV4IeEBCtlyvpbhZPv
- TLSH T159D5230573FC8332EA2F8B71F09456898BF6E637656FE74E0C88A4F51C477682258687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\FrostySdk\obj\x64\Release - Final\FrostySdk.pdb
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Plugins/BiowareLocalizationPlugin.dll
- SHA256 fd8fd0ff0de28085df086246f84f7b0bdfc1184affede7c210aee25f1fc1618c
- MD5 c75d13aedfb922eab777b94d0ac60c2b
- SHA1 4c9e7fc730598a9bc08529898c606374f7e8196f
- SHA512 50bafc3572fb28fd9f5f468ceb42750457f9cdc734e44079784985ac833f26133fbc7e2513d7bba858b87c852a089d9f17bbdbc3387675a2761336c151eda02c
- SSDEEP 3072:5FAw9zr0lzm1NRl9y8hPBZQ4gvGiDOW0/KHGX2Osvkl:b9zrc+hTdgOiDOFp
- TLSH T137E35A1613FD0666D6BF2A7D24B0615447B6A256D632EF8C8C9C78ED4CA33428B23737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\Plugins\BiowareLocalizationPlugin\obj\x64\Release - Final\BiowareLocalizationPlugin.pdb
Name
.text
Size
141KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
988B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Plugins/DifficultyWeaponTableDataPlugin.dll
- SHA256 10df2e748c873ce24ba3cdec6a79a899c3f31758976e221299a2123abcc4917a
- MD5 174bdb24c73f62b9aad0cc82aff33d9c
- SHA1 aa674eb613b862a376454b8ad3bac5ab06fc2a95
- SHA512 0b1ef10a432ef4a39a3d29065d893e0bd9ce267894ab3aab7a940ceec357389f95f4b58ad3a8a2682e033247deca186072694565986a199fd7d1b24b12a0783c
- SSDEEP 384:2ornvNm6882D0YtwPoWUa2jMCANf69HqS:2oGd+FO7AFS
- TLSH T15E721A05AB5C8631CDEF0FB124A98A9C637FD609DD91CF0F0DDCB19A5897A160712B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
exasperation1444
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\Plugins\DifficultyWeaponTableDataPlugin\obj\x64\Release - Final\DifficultyWeaponTableDataPlugin.pdb
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Plugins/FsLocalizationPlugin.dll
- SHA256 34cf5ceb70fa5cf6ec3fb28cfa3c0025e1934822f9eb9906cde430db513d9e83
- MD5 9bcb884ea4a1e6df8246a693f0b5b86b
- SHA1 9dfa9a6009d51d45f4fdc54963c5bf611a5711e1
- SHA512 b5c44e791a53525eb28aa51f0e9e01412e12faae0520cb8b2e0af91d3aa71570a07a3122b7cd461eb6274f20fd0855613bc3288718d76829e4238f81e2af34ad
- SSDEEP 768:eTRx76SVQZWIAdXKg6p/yzS7lqnI3cz1ecWMm+:eFASK2Kh3iN
- TLSH T1EDF24905713D8723D9BF07B928A6A05087B9967ADA62C7CE6CCE74DDAC673010703797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\Plugins\FsLocalizationPlugin\obj\x64\Release - Final\FsLocalizationPlugin.pdb
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Plugins/MeshSetPlugin.dll
- SHA256 6421a8fd2848797fee28b59fa3c269215db79ab6cc01f548faa8b955af2fa28b
- MD5 a94ccaeb6199bdcde8164b361f98aa09
- SHA1 05fb445f7938879a2a81592ee2f6e94094115550
- SHA512 010639aaa9de973d57db16869cd7c6d627648d6f6434335d6445e29753f7200b05ffbd0d9600ad1db86a6f64d885a0eb51b0fd440f257e9794ffb556248f7a24
- SSDEEP 6144:PGxrN2mqMYS/Sqvvcd0g0VcpbvgQsEr2SPC4nK9O:PK2RrStvctocpbvgQJPC4ne
- TLSH T139445A2A26BD1278DA2F577FA460040886B9C107A5DFC74E7CCDE4DA3F62740DA06B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jonat\source\repos\FrostyToolsuite_krrks\Plugins\MeshSetPlugin\obj\x64\Release - Final\MeshSetPlugin.pdb
Name
.text
Size
255KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Plugins/Swbf2MergerPlugin.dll
- SHA256 a935dc3b99576c0a70c69eefd8888065440982513dd09e439ca53fc14bd0b078
- MD5 0a21868b1f61d4832f007b1a7cfbc20e
- SHA1 7ad569aaee11b6aa1d06cfa83c753204967d050b
- SHA512 bcc7d11ed9f4d704f08574eff797722b2a76846db7c643a65131975c845ae0292e4c1d6ee8ac271ecbd43ead0d25294d57d4effae1a0cc012f97340dd22a9d7a
- SSDEEP 1536:64sqPeIV4fIdjMUDQJ/JMimXPYycfUo1sr/KRcf:64sqm7fIdjMRrDf71sw8
- TLSH T18383625C669E6B32C8BD0BFA58B9764A4734F103E593C24D4DD9D8C06B33A860B217E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Document\Frosty Plugins\My Plugins\Final Plugins\Gameplay Merger\obj\x64\Developer - Debug\Swbf2MergerPlugin.pdb
Name
.text
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Prereqs/NET Framework 4.7.2.exe
- IMPHASH 9b2f6a441f9ff8df98ae6e9e6b5d4271
- SHA256 4e49c56e4cf9df2e837a8a3010f5a8b4deb096429d56e7fd9ff70ab394663678
- MD5 c84209349f18afe5a41ce04e9ae8f487
- SHA1 cedbbf404b166a5e72d035760bcb0fa508e4f4cb
- SHA512 37006954e3afe07fb02d24894cc34794618b78c27a1b514818985b6cc1fa3e896ed99ba2e4aac3f6469d263819bd94ee70e7113946c51ba83c93b74826fc8fa8
- SSDEEP 24576:NGHL3siy9hlzSmtLvUDSRbm4Jah1rVxXmBz5px02ZJX7KnIOXL6LKoAoY4U0GXFy:yL3s7PmeTUDBzrVxofxTZJXOIO76LK/y
- TLSH T17065222676F0C073D4F311718BE0E6F26976B2351334C44BBB58A72D2FA43946ABA356
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:09:a9:d4:3c:aa:d0:ba:64:d3:e8:f3:19:68:6a:f2:f3:f3:04:e3:05:dc:22:54:b7:17:99:2f:ae:ed:e0:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 7, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
af:8b:14:7a:71:2b:42:a9:89:27:bf:94:37:d3:f1:79:9b:8f:22:46
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 7, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b3:39:bb:d4:12:93:15:a9:fe:00:00:00:00:00:b3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
102119
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\NetFXDev1\binaries\x86ret\bin\i386\VSSetup\Utils\boxstub.pdb
advapi32
CreateWellKnownSid
InitializeSecurityDescriptor
SetEntriesInAclW
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DecryptFileW
kernel32
GetTickCount
SetEnvironmentVariableW
GetLastError
ExpandEnvironmentStringsW
CreateProcessW
Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventW
GetEnvironmentVariableW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
lstrlenW
CompareStringW
LocalFree
CreateDirectoryW
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
RemoveDirectoryW
MoveFileExW
GetProcAddress
GetSystemDirectoryW
LoadLibraryW
GetModuleHandleW
CreateThread
LocalAlloc
RaiseException
ExitThread
WaitForMultipleObjects
ResetEvent
CreateEventA
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetModuleHandleA
GetVersionExA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
FreeLibrary
InterlockedExchange
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcessHeap
GlobalAlloc
LoadLibraryA
comctl32
ord17
rpcrt4
UuidToStringW
UuidCreate
RpcStringFreeW
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
shlwapi
PathRemoveExtensionW
user32
MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageW
PostMessageW
DialogBoxParamW
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
LoadStringW
SetWindowLongW
GetWindowLongW
CharUpperW
oleaut32
SysAllocString
VariantClear
?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4
Name
.text
Size
156KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.boxld01
Size
512B
Virtual Size
182B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=206, version=65501,
count=46, id=171, productName=VS2010 build 30319, version=30319,
count=20, id=158, productName=VS2010 build 30319, version=30319,
count=105, id=170, productName=VS2010 build 30319, version=30319,
count=17, id=203, version=65501,
count=199, id=1, productName=Unmarked objects,
count=70, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2015.exe
- IMPHASH 8e2588a9cf43886de3449dfff03137b6
- SHA256 5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3
- MD5 27b141aacc2777a82bb3fa9f6e5e5c1c
- SHA1 3155cb0f146b927fcc30647c1a904cd162548c8c
- SHA512 7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011
- SSDEEP 393216:xTPq5dCsKSR65cX7Eyd/qnejOX3L8T8KYfU3j:VP5iw56oyleejcL8T8fc3
- TLSH T131E63332E6644227C6D30973ED65E2246EBCA22D7F108476C784AE1DBDAC4D393B7217
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6b:c4:15:a1:23:fa:49:fb:dc:05:86:1f:21:48:b0:49:3b:d5:1d:dc:c6:72:35:17:aa:75:ea:bc:63:fa:76:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 26, 2015
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
57:19:7f:e6:ec:8b:ea:59:58:33:9f:f6:88:06:04:41:78:e0:04:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 26, 2015
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:6f:65:2d:58:6d:07:11:46:28:00:00:00:00:00:6f
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 20, 2015 - Jun 20, 2016
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2015 - Sep 4, 2016
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2014 - Jan 1, 2016
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:54:4e:86:ab:83:93:72:d6:e9:00:00:00:00:00:54
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 20, 2015 - Jun 20, 2016
Minor OS version
1
Major OS version
5
Entry point
165012
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
E:\delivery\Dev\wix37\build\ship\x86\burn.pdb
gdiplus
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc
advapi32
QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
user32
GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW
oleaut32
VariantClear
VariantInit
SysAllocString
SysFreeString
gdi32
GetDeviceCaps
CreateDCW
shell32
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
ole32
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap
cabinet
ord22
ord20
ord23
crypt32
CertGetCertificateContextProperty
CryptHashPublicKeyInfo
msi
ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70
rpcrt4
UuidCreate
wininet
InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW
wintrust
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Name
.text
Size
229KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=101, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=347, id=1, productName=Unmarked objects,
count=105, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
FrostyModManager/Prereqs/Visual C++ Redistributable for Visual Studio 2017.exe
- IMPHASH 58e63938ccf607896b1a0dac4dd9b11d
- SHA256 b192e143d55257a0a2f76be42e44ff8ee14014f3b1b196c6e59829b6b3ec453c
- MD5 0af5748a2e790472af28e64105760eb7
- SHA1 7ecf5797bc24eded2454aae6f3ca95c4f6eab807
- SHA512 9c3f6195477f836cdc948cfdb52f8e14b9b7ff9b59d036f6fe281d01d1cfcff53a7bed1c861f8e142a0060c5b8ee14d6df647f3de2181ac309da2863a21b92ce
- SSDEEP 393216:lLlptVYmfr7yBG/4VgXR7hg7omRRjMW8Y6PJUA+bTqfQ89:lxpttD7yBG/zRKoOjvSUA+vqY89
- TLSH T1CDF6333296594036EBE30033AA58F9343F7DA52823158AFBE3DCED2D297809227F7555
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
07:da:a6:63:82:46:0e:dc:d1:da:7a:7a:ef:17:25:8d:73:da:33:3f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 31, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Jul 26, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:fc:a0:e2:4f:d0:dc:19:5a:3a:00:00:00:00:00:fc
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 23, 2018 - Nov 23, 2019
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Minor OS version
1
Major OS version
5
Entry point
174077
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\build\work\eca3d12b\wix3\build\ship\x86\burn.pdb
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
QueryServiceConfigW
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
SystemFunction036
user32
WaitForInputIdle
PostQuitMessage
TranslateMessage
DispatchMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
MessageBoxW
GetCursorPos
GetWindowLongW
IsWindow
LoadBitmapW
LoadCursorW
IsDialogMessageW
MonitorFromPoint
PostThreadMessageW
MsgWaitForMultipleObjects
PeekMessageW
SetWindowLongW
GetMessageW
UnregisterClassW
GetMonitorInfoW
PostMessageW
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantInit
gdi32
StretchBlt
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
GetObjectW
shell32
CommandLineToArgvW
ShellExecuteExW
SHGetFolderPathW
ole32
CoInitializeEx
CoUninitialize
CoInitializeSecurity
CLSIDFromProgID
CoInitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
kernel32
FreeLibrary
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
lstrlenW
GetModuleHandleExW
GetSystemDirectoryW
GetTempPathW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
CompareStringW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ExpandEnvironmentStringsW
GetFileAttributesW
ReadFile
SetFilePointerEx
CreateFileW
CreateProcessW
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
LoadLibraryW
lstrlenA
CreateEventW
GetCurrentProcessId
ProcessIdToSessionId
LocalFree
OpenProcess
GetProcessId
WaitForSingleObject
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
FindClose
SetFileAttributesW
FindFirstFileW
FindNextFileW
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
CompareStringA
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
VerSetConditionMask
GetVersionExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SystemTimeToTzSpecificLocalTime
VirtualFree
VirtualAlloc
RemoveDirectoryW
MoveFileExW
GetFullPathNameW
CreateDirectoryW
CopyFileW
DeleteFileW
GetFileSizeEx
GetTempFileNameW
FormatMessageW
TlsAlloc
CloseHandle
GetLocalTime
SetFilePointer
Sleep
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetCurrentThreadId
GetCurrentProcess
WriteConsoleW
DecodePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
GetProcessHeap
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GlobalFree
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetFileType
HeapAlloc
HeapSetInformation
GetTimeZoneInformation
SystemTimeToFileTime
GlobalAlloc
GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetModuleFileNameW
RaiseException
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
RtlUnwind
SetLastError
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetACP
HeapFree
cabinet
ord20
ord22
ord23
crypt32
CertGetCertificateContextProperty
CryptHashPublicKeyInfo
msi
ord141
ord137
ord169
ord70
ord88
ord190
ord238
ord173
ord45
ord205
ord90
ord171
ord118
ord115
ord125
ord17
ord111
ord116
ord8
rpcrt4
UuidCreate
wininet
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetErrorDlg
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetCrackUrlW
wintrust
CryptCATAdminCalcHashFromFileHandle
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
PathCanonicalizeW
Name
.text
Size
291KB
Virtual Size
290KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=23013,
count=35, id=261, version=23013,
count=19, id=260, version=23013,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=334, id=1, productName=Unmarked objects,
count=74, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=1, id=255, productName=VS2015 [14.0] build 23026, version=23026,
count=2, id=151,
count=1, id=258, productName=VS2015 [14.0] build 23026, version=23026,
FrostyModManager/Profiles/AnthemSDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69655c34d8112b6e5951bf7f108a42b84ec4dd39d3889435fe3ade7a38ebdf9c
- MD5 9c009ff799df68e027ad91e02ed0b3da
- SHA1 c6e1ba7f1c60b5e79671245b50275d941179f21f
- SHA512 4be1af14d9e24b5c086662a0a85813020e607f5ea476aec6572dbc4df6277d438e2f3bd73123cc2c2f88896b355972586b9420b31ef878293ce6350a6d7e3047
- SSDEEP 98304:MW6Awh/bYCKxVKC/NBcw0rSC/Ns2B7PxQpAbtBcrlC:K+KC/NBcw0/s48rl
- TLSH T1DFC6E6816B26C62EC85D5830D4230A7A83B1C74F7F6FF6B64748D4BE394BB20DD62166
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12124782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11.6MB
Virtual Size
11.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/BF1SDK.dll
- SHA256 e14254dd1a8e39aba9c4ae1022fd5a5ec817370daf57249daac5bb818f025f1a
- MD5 865199fd0f2341285d23e09d8add5c8d
- SHA1 538328ab90487922d06be80ae12aa8f9844207b0
- SHA512 5bf67c34e7ef9d4930a65c68835d39ea4713be78a4fe7315069adc1cd9e13fd7fa08269314e2e43535099ec653d2a92d0acbbbe180b2cf6e30fcaac5f2d22273
- SSDEEP 49152:dGk/IOeK5gBr5evQ8hbVJSr4SQzKlfFTB+Im0SLAYrTf1Bzail6kA5Pjh:QcPRvThbVJS0SQzE9TB+a
- TLSH T16736B4019A55CB9FC5969472F022613663F1C3597672E7B12F98E83EBD07B099E032B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/BF4SDK.dll
- SHA256 14614487e8724c3d6cfc1aa97fc904a374eb23c5a8d282b532d1da0ad6916341
- MD5 250fa39af332975d5059fdcc84bce13e
- SHA1 fbc42e8845130a3d7dd4fd93d27cf99a9158fe91
- SHA512 b720d4561b7cc091312230b115395fe8ab0487fce1d8b70d443ef1d1116ba2bd593299c941306a9ec863855a83edd7c354a51e566e09f90f5a0d0c7cf4a9aa5e
- SSDEEP 49152:Y6fkXBAWtNdTOX7wuoCvoplGHxsArlj+2RRv1An4CaW+j:8tKpv
- TLSH T173F5B600DA66D62FD6CA1636D433E13A52B0A6DC72B5FBF16B40E42DBDC2B119D801B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\BF4\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/BFHSDK.dll
- SHA256 14257f381f2d1be23c1eca27746ecef380d23ac8ec200bcd727d1a4d8b518177
- MD5 747eb202095add461db669b0784513c6
- SHA1 5d6ab589b07f24a72701e92b4e93ad87dc6d36a9
- SHA512 84967b087fc9ce89f2ca480b870332a22b0f40e3bfcd72b9f3526bf1e7198bc45c09dd56947e92379025c9a97f9977a6a010de68926137d2a269241221f5f347
- SSDEEP 49152:XXBCVvQUEr406O3R4MQIT8BRvCAk4+ax+j:EEr406O36MQ88fv
- TLSH T1FA06C3019A11EB5ECB4A5272E033543B63B1C39D72E1EBB66B94D03DBD83B135E119B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/BFVSDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ade6f932bdd5c1657dfa91c70dcb271622c6b1d455f6c211ab32c0145fbd50f
- MD5 3f84b3b14796161e103bc0ccfedb2b69
- SHA1 98f529eb957f6fe32b1a920b29740a1cd97c879e
- SHA512 0de7a69bd98ad6372a55b5f43ff4a7cc507591e0f31a6729801f5ce77b76b178491783bc576ee961418e54d9f6c8f32aae2025b580fcf994a1fdd2ecaa30c6ae
- SSDEEP 98304:07kbeHayri6fN/df5ia31hLv4EaiIxG6Tk8xRXfJo3cQ:76fN/B5JvLAEaiIxG6T
- TLSH T18EA6F7059702CA9ECD4A8A71C0A1373A6760C68E7A73E7F52B80D4FC3946FD49D706B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9944974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/DragonAgeSDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 43f91bbafc590526ad038ebf155a449a25b3c8aa99027dc2cbf0d40be944d270
- MD5 0acb8b951a64afc0036ed1c169cf5350
- SHA1 1bda1900bff412e4e35b2688aca24ec0c27fe3d0
- SHA512 880f3b390c006fb515854e053ddaaa780bdae30dbc59c0e5f8e70e2bace1e60ed628b0ac42d2eeb0caba6f1515afa7315e539512a54f4bb05def94789883e239
- SSDEEP 49152:jnDblkMmkYhIu3z/BgVewAAwzCfrKVsXa4MFddbjF:jvm+ujpw
- TLSH T18A269512EA11CA5DC74511B4E127013B53B5C75EB225EBB24F98F82E3E53B069F1E2B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4459918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4.2MB
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/FIFA19SDK.dll
- SHA256 65c6587e843267cc05a0112ba43410975113ba93487e7d4c32b55b4c4454d2c4
- MD5 af34a22e3c14b5b48fa300e28098c918
- SHA1 41a8f3a4f51c9b3cd3ca42ce25662b25d3e2301a
- SHA512 695a52bcc516d71b70640a53fd1023884193313ce466e38f2238b1bea502262f8a686bfdfe3d5d1c9522d785a9dba831abe876192a91324e26b8dec72315df54
- SSDEEP 49152:ze1X8Nr5QY8h6sN65wjHFQJn34LXCHlJWiHqeqCAYK3zorafZdX01SCvLR4WbSAB:zeXI5wh7MlW
- TLSH T19656C4095718CB2DE92D6375D962423A9270C7AD7223E6F12F10E83D3867F129B476B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\FIFA19\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/FIFA20SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71727a67e1ccb4fbcf5ca69e3d319b286212d8dc4965a3730f52192be0ca7923
- MD5 13e774730c8daf5c111bfeb2c8ce5a6e
- SHA1 36795c33dda4db3117f6070e58fb4232bd8952fd
- SHA512 95860f1110e0c562bc2ec0814b060b66758a270626d10f470c97db2fe1028a5624796a442d43696ba2ef1cf3be60de452344575650d1aec9edb88a71329b8dd5
- SSDEEP 49152:Hqfm1TlRZxcBLaQpBnsOf04ib97dw586P0gTrdhsqLvmPJKaZ7WAieBHrhg8gedY:K6UBLXBnsE04ib9s7BMgebW90JI
- TLSH T16796F7506A64CB2DC56E9931D023173E5770C24ABB72E7B64708EA7E3D47F00AD271BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9376142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8.9MB
Virtual Size
8.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/Fifa17SDK.dll
- SHA256 c6a8e064507e9675bd8b1a0e30de4c99cf0da4e5beb4d9b8a7e9646bcd29db2f
- MD5 2d8707166750cc086c639d42d94e4381
- SHA1 242ca8a2ccb65db59bb17be90f39ab61142dcff8
- SHA512 ce31a48e10214b637ad8fa5a8e0cc03c0f8750d1940dac7d7be8f2905b242b29da355c358bdf40cd6f3a28d9847ed285a613cf8fe9080a41389934bcf1ab11fa
- SSDEEP 49152:cxmg8koT8od9uXt5qhHHAlK3zXrmflds9NkCvLJbeAB1NapLCnlVkeYPjg:cObdMXHO
- TLSH T1C506B445AE14D65EC0A5093AE263353B1BB19B85F721E6F0AB60F07DFD83B905D089B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\FIFA17\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/Fifa18SDK.dll
- SHA256 a89d49749d5fe265caa949cf0d460a1471c16be99a015d1574812e1521a6ca17
- MD5 3154b8ee32260ff40e65a4edd546d52e
- SHA1 dcba05f5ef4d36eb24ad466bc1931f9dba94c964
- SHA512 2aa2257bf1b052f9a907eccf40260ce12d5249a4e5df3370cf75f3ea47ee8f25b650c7118465e5cbb114916cb77d76ed71a7a03fd3d3b01f9d726da89be4d43b
- SSDEEP 49152:HaipNuozymcywAqXVJb/F1us7H/CAgK3zprXf+dFO+RCvLloIbDAB1xaxZCflMke:HxcNP1u
- TLSH T15846E5324A24EB1EFD154279E1DB513AE2B0CB597262EAB15B10F03C3E53B61560E6F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\FIFA18\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
5.1MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/MADDEN19SDK.dll
- SHA256 a6d66c3df023b6ae98eafdb2a4c7eb066e0b580692e988e25ee3d9de9872dc0b
- MD5 f23e6494294dcfa953b71bf081a935e5
- SHA1 ba0f83137630ae7cd78887f3802dd2960c50e511
- SHA512 6dd14690c3eead245f253f81a15f1fff25d6ed86c1f4003bbb6a2eb5ca544d60e65bfcd189bf14be44913026e06eb95fc62e407c47e51da9ee6fe99874cd0c13
- SSDEEP 49152:9z5wRWhwgpH+XYdipVzBy/nT2pARaOSWGg54HAAOu/E4bCAMJrtfzM/cUXivx7q7:EMhw6H+XYdipVzBy/nT2GRgo4+lG
- TLSH T1A346D7021610CB1EE81A7135E962053AAB75CF9A7666E7B57B40E23D3D43BD0E7036B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\MADDEN19\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/MADDEN20SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e0078882864615fcbc0d5cd5389c52448ba0c7e74cf1aae08f8f25f0451420f
- MD5 2f374fccfa4a9798c2bd3e0b3f258698
- SHA1 3ee43bf831966b38105f72dea1d33b9a780a5d00
- SHA512 6ee028a11d7f5cf3b1c09de4e098154152fc82a3fba068c7cd48cf8060fe31009c9d35f66434a02182ca79376dda9f0cfc7ece5a46ef41b337b387ba2a03ed10
- SSDEEP 49152:4fMM6xvO7oeglh8lnhsf5pj08sVn8nFzzdBU9rhtIUagDMyzNoMW5q8G/KZlbaIV:4fMWIxRFFGKnHuK4+
- TLSH T1978618025EC4EA9ED94A2130F191063A5370C668B32EFBF45B54D57E7AC7BB09D022F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8075198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7.7MB
Virtual Size
7.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/MassEffectSDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ddd671f7a41328b98778a48edba816726cc69d3c9f6a79ec95f252bb64c7994c
- MD5 c085c43b9f814b0eba2be987e22cd2c8
- SHA1 c9a5f39a668c339592dec0f796a83f55fd8823ed
- SHA512 5058c3daa0e7c6c9a80e663eaa61d19dfa6db7609228582568722791cca719c6556ba54a96612683995c94f2196ba6496a5ed29a4dff748cc63ee54301bae193
- SSDEEP 49152:adWPjud5/JCXBqD4ZyoWbjLb+iraMUEgLS02SPa+pBnYrh6uaS0P07Oydjr251RI:adsjAB6JSaEgoE1M
- TLSH T1C676F5115A08EA3EEE8E1172D466093B1372C79D7361E7F46B58E47E3E4BB001D192FA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7174846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6.8MB
Virtual Size
6.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/MirrorsEdgeSDK.dll
- SHA256 66a4e652119ecb078d4f333e8fa61a2997f1763248317efd369110325220994c
- MD5 b8e2c55b919b5436626a55cd742387f7
- SHA1 f68d4ea62845388f033909ff39bc5ce529577a7a
- SHA512 85132162fbb28bf6fb17ae0da7586a868ca2d28cb7c82deff260dce3410c032bb4dbf71236491a8945eeb2ecff0e235c3caf5f19532af8c480269173b335654e
- SSDEEP 49152:in9XBVzfa0OUgD5bLiRAhTPaAZrMfV/7aKlbkzaPjO:SxzimU5ZhTP
- TLSH T1E2F5E864AE10C72EC245D137D273513B12B5E6D93221EEBABB42E42E7D49B215CC18FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\MEC\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/NFS14SDK.dll
- SHA256 e9a2d2b1c4c503f5aedaa2d54da4a5c91d0f8c9b976a9ef67cddac489658fd64
- MD5 786f81a60f75fee394e1270285d8d00f
- SHA1 d010234a18edf9caac2d22f3e602a58328de86d5
- SHA512 42336d865022ed5332fa29b7dd6f632c98a4dc8d3cc0f949fe573e2a67a24496be67958b120d914ac121ab00224845ac9b6905bb3d3c8efbe982a6e0079873be
- SSDEEP 24576:aUxZIY9vuKkO8OUSnSOYGnpPHsTlv38m2l0Mft8usdYD+m91usdzP4UMqApYBBb:NZJ7khPzuLDB9BFPtMqApYBBbMaLhjR
- TLSH T16CE5C6016A24EA7DD54D5176D4A2923A83B0E71C7328E5B43F40E07E7DC2F53BB829A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\NFS14\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/NFS16SDK.dll
- SHA256 fe4a373635478049a368ff97d9fe9c4c5151275df57d350574243dac7a8a4b5d
- MD5 66d60c50d2083ff1c680787176516eba
- SHA1 ab954e9c26100208afbe495778ebf0bcf2a95c34
- SHA512 82d9eb4ce473bda24970852636d6ea4f332390ca33af614da324f9f39d293fa12e466f111d5a40f1a62d10a869d3465efb249b8b4fa051030ab309669a5c7665
- SSDEEP 49152:yxdERHn8sEWF64gUcDDus1TqJFqA3Oak4ldB8TVrLfl2z8INhYIaHlmk8ijS:yxytEWF69Df1GF
- TLSH T1EE06C510DE16DB2EC087593BD1B7503A62B0869B7225FBB3AB60F47DFA42B015D88177
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\NFS16\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/NFS17SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac4e94c0079f6dfc104128dddaa9784d609908306ff69183f36b93fd87dd3f60
- MD5 586ec05996bc3fddbc6852401c8af8e5
- SHA1 9beccc492576cc976c76ac78fb84b70fcd203964
- SHA512 26ab42f4e895aa0e0b3dee21452ac9b416c683f98b84f3327e1c1d324f72f8c98e7ea37e292d5437cf184f66e066313e932aacb14382477a6d05b183a1771ddc
- SSDEEP 49152:RcU9SxsTnFKSuGFrwkl7zwmf2U8hMrvRG0XMEvXpBYDBhnNto4rhzj4i49wBTRAi:RN1wGF8klYmf2U8hMDRG0XMOjWKjOgu
- TLSH T17266F7815B04D69EC89D9631D1A1063B87B2C6CD7362EBF31B82D06D3E4BBD25F512B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6668110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6.4MB
Virtual Size
6.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/NFSEDGESDK.dll
- SHA256 d4df0f2fc8d54943531e0982a15abc6f01211a24ef116907e6026af890baa0b7
- MD5 91df533fb423b01799d444e511591f17
- SHA1 0bac83e79a39c33de1ac58acb57c82c3a5008e98
- SHA512 911d4b90452d591088822c77baa236420f31e15940661a66eecfc7dc64c14d2f9efa5406f0576306496fbeeb32a2b52cf24dd00d819d1c3cc624e04ce39106bc
- SSDEEP 49152:MgtXdVLybOGfh6clZmAZUmuUF1TqkFqA3Oak4ldB8TVrLfm2z8INhYqaclmk8ijE:Mg8a5UtF1fF
- TLSH T1DB06E6409A10DB3DC55B1171E0B3143A63B8CADD73A0F5B52BA5D93FBE53B029E211BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/NFSHEATSDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0168aa2969a6540cf0461cd9a7596acb29d53761a0b61ee6a0440bfa5bb14c2
- MD5 8571ca6a1a751acb428cc8abcb1d941d
- SHA1 4e6d5ebe980e93a62c91c1559dcf4b589ae14202
- SHA512 8ddb17e19557d6e8b0a0d734baedcddc641e4a7152672b9252eb3ced426c2ea8dde88b7463a189a533afb9e2cba86b9f499976a508b4059580458d69bef567cf
- SSDEEP 49152:IQRNqx380a/sqsUnRk+ZeA4Zy0LX83kdYmjc7AKFqhhzC54ga3rhRLfazb7BTzGC:G3e0HUHrrUD0AhDNq
- TLSH T1728607055704C7BED88B9133C192063F67B0CA29B76EE7B65B4BF0BE7956B805D402B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8188734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7.8MB
Virtual Size
7.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/PVZ1SDK.dll
- SHA256 97f57de44a6bbfa5ef1d97ddb7d7e7ec3fb59f79aa5d8e5077773253b023f3e5
- MD5 57753e4e87e86094072f47de64300353
- SHA1 b49c615d2cdfa22ab8b7fd7aa799ec1f657954eb
- SHA512 7ea1f3f98b6646f5fba02296f10f475a6e2ced3910b35f97144027cba02293dc209dc39fb347c8d19b53389e8a588de80d6d0dd3345b50d70e23c6903a0a0563
- SSDEEP 49152:O2i8KXIXTDwtjAIxEj57ux8fZFkqfANeaa2Dj:e8JstnVOfZFt
- TLSH T1E0F5B6029E56DB2EC08E5036D573653A717586E97232F7B2AF5AE43C7D82FA05E001B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/PVZ2SDK.dll
- SHA256 77ddcd00d621524740eb7bb799c166d142f76478ba12ede671fb4394b6a6ab98
- MD5 6191251bf1c2124c337172973143aa39
- SHA1 2db4436ee58c6879f49592009d6cf972d532aabe
- SHA512 ec95b4d37aef78732444f396f7b24c931cdf5797b8f3cb0a32631c8b19c7b0ba7e0135e8f7d9e6c38690295fd9c856f2107f4df694f8e2c0410c2def2e0079e6
- SSDEEP 49152:jDQWyRVLDYMAOuZbPjAsP7SB/T/+7eIQAqrVf8ilSaolmkgIjm:HQWSLDYMAOuZbPjAsPGB/QeIH
- TLSH T1B306B5419E14CBAED3451176F363253B1260BB9D7270EAB23F44E22E7C5AB069E421F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/Profiles/PVZ3SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bee3dad275a077a5a6ff8c084582423a812097586bef06f61acc0cd6a8eeaf2b
- MD5 f6494991325bf0bb2c36f4555339bba5
- SHA1 f3d31fefec47119a2b80c3ceb385690ad7ab50d0
- SHA512 a53434015414c105affcd622055a8e2ff24627eb05758fff24a35269add2311e1743193ffb6a903dafcc0b54d3264c02b98bd994a172d085804f62da3147a41b
- SSDEEP 49152:f16oXNbeAj8bUibqul3xijcq5u8ycsNfoRVK0RzJje4CwOkIR6f/rCUg96iFalNT:ANUiDEuJE1OXR6f/X3M4q/Pk
- TLSH T184C6FA407F54DF1EC44A6F31C2D1467A86B0C34A7F53EBB42B44ED6D7A8AB846E211B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12060254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11.5MB
Virtual Size
11.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/SWSSDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dbcf72fd24b56e7f4f30e1583299078a289c7e7b699624b47c67350e3871d24d
- MD5 2ca5c518da2da208c4b9de6f0eb510d6
- SHA1 8ce94195d1508cca8e9d9a89c3c9492d9561eb47
- SHA512 64b0f20ae15d01c888f092c7dc9398e113930719d55024f70ffc5953fcb8827d239e9a34ab14c34c109f30b07dc71ad77753babf532fd5bb52e9ff1096e2e254
- SSDEEP 49152:ZH6VHJB5u5wlNRt9/WD7XoZU1feo03RK3/AnvY/3lRPaIwoVo9gCsXArhv8R8aaF:wF59lNFWH9DYvY/3lNRvHeSYfYk1
- TLSH T1F5A6E6125B25CE2EC58A5830D5E20A3E42B4C64A7F63EBBD5B48F47D3D47B909D202F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9941790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/StarWarsIISDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8485cb6c73fccbc294fb934985650f4aa82e0aae958fe2a64fe3eab98bcb4293
- MD5 26502f6f2a9de8a6881aa532aa8ba90e
- SHA1 b2d8908fde37339d42e16711e406cb632963896a
- SHA512 8edeee525f0dbea8d4c453bf2c384f365d2fe4e404b496742411f03e387449812da0f583f1bc7a307fb1a14326b899270e7688c110fa42bb542a043f386aa67a
- SSDEEP 98304:+t6LAiev3yHkmckCZce2Jruha7LoReFAYKzk:+lp/Qgce2Jru
- TLSH T1F096090A5B44CB1EDA8A5BB1C191073B87B0C74A7A23E7F65B04E5FD7907B8299601F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9452206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9.0MB
Virtual Size
9.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/Profiles/StarWarsSDK.dll
- SHA256 b14e1834bb7e904e30320a8d72718b9e3bd0fff3fb767a674642637295a41522
- MD5 2f29a5a719d911d97ddf8b33843462f4
- SHA1 a9c9db5bffe225189e1e7ea7aec8ce46e094d1fe
- SHA512 6113aa0faf1dc6e6516c59dcb8babda8c718bdf9aac997c2da43af2458bc4ae436faad712a82072e57700a8e29f3a0c36d88ca2cfe0a0d4ce868ad8068d42df1
- SSDEEP 49152:KAXT4m2Fc56WP9+TZdDaco5AvjlrwfWTfaPlKklTjz:Ki4mv8pDa
- TLSH T16216D820AA10CB2EC24AD572D473677E12B08699F1F0F5F3AB24E4BC7AABB505D05177
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\SDKs\EbxClasses\obj\x64\Release\EbxClasses.pdb
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FrostyModManager/ThirdParty/CryptBase.dll
- IMPHASH b402a08aa547a6b2bcf6d8761a84da62
- SHA256 3e87682118e593f334ba665826e2a6ab85ba460f2e1fe95b173a7199863ad454
- MD5 95293bfed5bd6aaa84a31a59ef5011c1
- SHA1 13b0f08d11c98cf9ff1ee0736fae35a9497b5615
- SHA512 7908479b8533de75e5e527409c700038ab183d65cccf1cbfd19da83e72548659bfb5823b66399e1c7d6383105829cdca9ec229f9b4095fb10e1281f146538b5b
- SSDEEP 1536:EV9Ly7PYccZWfYdrf2C1ZC9QGh+282q4BnwdXYsWimMO9dlKY2BUR4D/4eHyv:vPTuCwr+C14Qx282hFaXFmMmkY2BA4DY
- TLSH T12493391B72AA00BBE1339578C8635E19D7B2F8551620DFAF02A4424E1F677D18D3AF32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
11496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\FrostbiteModding\FrostyModSupport\ThirdParty\CryptBase.pdb
user32
MessageBoxA
kernel32
InitializeCriticalSectionAndSpinCount
WriteConsoleW
ExpandEnvironmentStringsA
GetLastError
VirtualProtect
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SystemFunction001
SystemFunction002
SystemFunction003
SystemFunction004
SystemFunction005
SystemFunction028
SystemFunction029
SystemFunction034
SystemFunction036
SystemFunction040
SystemFunction041
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=241, version=40116,
count=118, id=243, version=40116,
count=13, id=242, version=40116,
count=8, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=29, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=4, id=264, version=26433,
count=5, id=239, version=40116,
count=108, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=256, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=255, productName=VS2017 v15.7.5 build 26433, version=26433,
count=1, id=258, productName=VS2017 v15.7.5 build 26433, version=26433,
FrostyModManager/ThirdParty/LZMA.dll
- IMPHASH acd67703cae3fc8ba3be16ae38a61dc2
- SHA256 608f994f45786d95e26c0d4bf483472a13c05fdcb7c871bd748a7ca62af52634
- MD5 cc28af73c74550fc33c61b2f4b7f8f3c
- SHA1 1a45cde766e0ea53358e5eb6f18a8d3c0ce1d85b
- SHA512 64e7a7af696f48742018949358b6bd4aa6a00b6fb42f6208bab14895088a0cf0af56d246373c71c21783782a7c001417419ce07f239cd3d4fd5282bbc2f28b46
- SSDEEP 6144:kFUfhwu6ikJLs5vieEwqVbn7pN/iMsSNMyIGTxDwWAHavYz8s8e1JgQrOaSik:+YT2Y5KeEw0/iMsSNMyIGTfX8A
- TLSH T1B0A48D46B76045F9E177D23CCA570B16EAB278164721E78F03E883A61F233A05A7F725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
77940
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\LZMA\C\Util\LzmaLib\x64\Release\LzmaLib.pdb
kernel32
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateSemaphoreA
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateFileW
Lzma2Uncompress
LzmaUncompress
Name
.text
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=241, version=40116,
count=118, id=243, version=40116,
count=13, id=242, version=40116,
count=9, id=259, version=25930,
count=26, id=261, version=25930,
count=16, id=260, version=25930,
count=3, id=203, version=65501,
count=99, id=1, productName=Unmarked objects,
count=13, id=260, productName=VS2017 v15.6.0 build 26128, version=26128,
count=1, id=256, productName=VS2017 v15.6.0 build 26128, version=26128,
count=1, id=255, productName=VS2017 v15.6.0 build 26128, version=26128,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.6.0 build 26128, version=26128,
FrostyModManager/ThirdParty/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- TLSH T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
696798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
673KB
Virtual Size
673KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/ThirdParty/UnRAR.dll
- IMPHASH 21cc0575dccc73f63dbb5896b6b52a1b
- SHA256 66817c2847d06c21db6be1b52305c8a087d2ce0c13a321182eabf3ad3f4cb0b4
- MD5 03de1ecb42a55e5f21ca52cf2ab5c6aa
- SHA1 fa2bea1b7c47912489c6a7683e8bd6ddd8b246a6
- SHA512 d9916fd81fbb2f99e1662dce890713e1313a830ab8dd550c2f2cc26f0bc3139c0f44282419034f26b4045510bdcd0ef7a9f2ecb6fe9e7540ad2bdfd9d1c728b2
- SSDEEP 6144:xwW2VJEiXp6uyEonMgd2fNodN2xzdh/xnn+w:xj2VJ7FpoM7fNo+RLxn
- TLSH T126647B59B6B614B8D1B3C53CC997964AE7F238504730DAEF07A0876A3F23BD0463A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
155992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\FrostbiteModding\unrar\build\unrardll64\Release\UnRAR.pdb
kernel32
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
FreeLibrary
GetProcAddress
GetCurrentProcessId
SetThreadPriority
SetThreadExecutionState
LoadLibraryW
GetSystemDirectoryW
RemoveDirectoryW
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
WriteConsoleW
SetFilePointerEx
HeapSize
GetConsoleCP
GetProcessHeap
FreeEnvironmentStringsW
CreateDirectoryW
CloseHandle
SetFileTime
DeviceIoControl
GetCurrentProcess
Sleep
SetLastError
GetLastError
AreFileApisANSI
GetConsoleMode
GetStdHandle
GetFileType
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RaiseException
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InterlockedFlushSList
QueryPerformanceFrequency
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
HeapReAlloc
GetACP
GetStringTypeW
LCMapStringW
SetStdHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
user32
CharUpperW
CharToOemBuffW
CharToOemA
OemToCharBuffA
OemToCharA
CharLowerW
advapi32
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken
CheckTokenMembership
RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
Name
.text
Size
216KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
204B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=241, version=40116,
count=128, id=243, version=40116,
count=13, id=242, version=40116,
count=8, id=259, version=24123,
count=35, id=261, version=24123,
count=19, id=260, version=24123,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=160, id=1, productName=Unmarked objects,
count=48, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
FrostyModManager/ThirdParty/fifaconfig.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0ba5c04325f7af25a2f6bf4c588dff798d481b0a799b10faac9d4daed7c09c5e
- MD5 73b31d89a353e9c4f0ca6979d2e7f043
- SHA1 57d1ad53e3d283f3d15ca17e786a447f59104ad8
- SHA512 03b7422d684c35296540319934a06d8d7c18301a6e1dea01cdaa69df63ae8dd229164302e767232560af3d4c0a3767a74a8c47fe6260b8a4c78c5c7ecf5fc0c7
- SSDEEP 48:64maksudFlAWXXenldPpB1jkQ92INM+y+WZrE6BWtSMbJv55bXfci0q/7+54tM4M:SFaeXenP1gQszHBEtdXXktmlzrr3zNt
- TLSH T10EC1B691A3E8573AEAA74B369CBA67001635EB418C57CB6D1888630B7D37B100873E62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
H:\C#\fifaconfig\fifaconfig\obj\Release\fifaconfig.pdb
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FrostyModManager/ThirdParty/liblz4.so.1.8.0.dll
- IMPHASH 50cdd5477420455c168372227cba52d9
- SHA256 22602628f070e9ab791cb555454c058d7798e89944f107e155e5972c441654a3
- MD5 4e95ebaf0aa7fb64a23ff10f4b5b4c15
- SHA1 fd65631c7ba106002b5ba548a6b9e69821ba436f
- SHA512 651755d9520c9334d180deb2f9419e19c2ea8065ec11ab0bd409d185f5714981e163ceb1bbb88539725c5f105d9a23e43c34ac439e37acadc13f1d8d1ee6e52f
- SSDEEP 12288:kTcQ6WpQPRNWvAQ/SqF50Rs+FwLdw6M1DXdh:9EpQPuz/SqF50Rs+FwLdwJDXdh
- TLSH T180A46D90F542FDBDE49ACB3955D6231593ABB040DB1DFA372B40FE38055EB284933A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
memmove
memset
signal
strlen
strncmp
vfprintf
LZ4F_compressBegin
LZ4F_compressBound
LZ4F_compressEnd
LZ4F_compressFrame
LZ4F_compressFrameBound
LZ4F_compressUpdate
LZ4F_compressionLevel_max
LZ4F_createCompressionContext
LZ4F_createDecompressionContext
LZ4F_decompress
LZ4F_flush
LZ4F_freeCompressionContext
LZ4F_freeDecompressionContext
LZ4F_getErrorName
LZ4F_getFrameInfo
LZ4F_getVersion
LZ4F_isError
LZ4F_resetDecompressionContext
LZ4_compress
LZ4_compressBound
LZ4_compressHC
LZ4_compressHC2
LZ4_compressHC2_continue
LZ4_compressHC2_limitedOutput
LZ4_compressHC2_limitedOutput_continue
LZ4_compressHC2_limitedOutput_withStateHC
LZ4_compressHC2_withStateHC
LZ4_compressHC_continue
LZ4_compressHC_limitedOutput
LZ4_compressHC_limitedOutput_continue
LZ4_compressHC_limitedOutput_withStateHC
LZ4_compressHC_withStateHC
LZ4_compress_HC
LZ4_compress_HC_continue
LZ4_compress_HC_extStateHC
LZ4_compress_continue
LZ4_compress_default
LZ4_compress_destSize
LZ4_compress_fast
LZ4_compress_fast_continue
LZ4_compress_fast_extState
LZ4_compress_limitedOutput
LZ4_compress_limitedOutput_continue
LZ4_compress_limitedOutput_withState
LZ4_compress_withState
LZ4_create
LZ4_createHC
LZ4_createStream
LZ4_createStreamDecode
LZ4_createStreamHC
LZ4_decompress_fast
LZ4_decompress_fast_continue
LZ4_decompress_fast_usingDict
LZ4_decompress_fast_withPrefix64k
LZ4_decompress_safe
LZ4_decompress_safe_continue
LZ4_decompress_safe_partial
LZ4_decompress_safe_usingDict
LZ4_decompress_safe_withPrefix64k
LZ4_freeHC
LZ4_freeStream
LZ4_freeStreamDecode
LZ4_freeStreamHC
LZ4_loadDict
LZ4_loadDictHC
LZ4_resetStream
LZ4_resetStreamHC
LZ4_resetStreamState
LZ4_resetStreamStateHC
LZ4_saveDict
LZ4_saveDictHC
LZ4_setStreamDecode
LZ4_sizeofState
LZ4_sizeofStateHC
LZ4_sizeofStreamState
LZ4_sizeofStreamStateHC
LZ4_slideInputBuffer
LZ4_slideInputBufferHC
LZ4_uncompress
LZ4_uncompress_unknownOutputSize
LZ4_versionNumber
LZ4_versionString
Name
.text
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1024B
Virtual Size
752B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
243KB
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
FrostyModManager/ThirdParty/libzstd.0.0.6.dll
- IMPHASH 093d494eed4e2ae5b6d621211d3c6501
- SHA256 c9af5a51772bed1d72e79ef4edd51507f4a6ff8cf7bd10a19544e1f34b23b063
- MD5 3778d4f189038862f2be3177c7dcd47e
- SHA1 ff0be51ceb64f6701a53ed975dea8a0e007e2ec4
- SHA512 30d7c14795a0ffedc3a45a78dbed1871c4a9e4cc0326b04b397a400add36a9beeb2ce246d9c4873bb1cd6baa6d13653c961f250c80d0f7506e4beb5cd7c41b68
- SSDEEP 1536:Xh2WuG8bndAzoiFCUTcgO8D73XZj5A3N/rh/yKyyOIH7qQzM:XrKEPXt9OR5ygOIHuQzM
- TLSH T18EC36C83FB6650ADC4B7C2B4C9634B5FE76538150314AFEB92A4C6612F07BD18E36362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
98812
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\C++\zstd-0.6.0\visual\2013\bin\x64\Release\zstdlib_x64.pdb
vcruntime140
memset
memcpy
__std_type_info_destroy_list
__C_specific_handler
memmove
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment
kernel32
GetCurrentThreadId
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
ZBUFF_compressContinue
ZBUFF_compressEnd
ZBUFF_compressFlush
ZBUFF_compressInit
ZBUFF_compressInitDictionary
ZBUFF_compressInit_advanced
ZBUFF_createCCtx
ZBUFF_createDCtx
ZBUFF_decompressContinue
ZBUFF_decompressInit
ZBUFF_decompressInitDictionary
ZBUFF_freeCCtx
ZBUFF_freeDCtx
ZBUFF_getErrorName
ZBUFF_isError
ZBUFF_recommendedCInSize
ZBUFF_recommendedCOutSize
ZBUFF_recommendedDInSize
ZBUFF_recommendedDOutSize
ZSTD_adjustCParams
ZSTD_checkCParams
ZSTD_compress
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingDict
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compress_advanced
ZSTD_compress_usingDict
ZSTD_compress_usingPreparedCCtx
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createDCtx
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDict
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompress_usingDict
ZSTD_decompress_usingPreparedDCtx
ZSTD_freeCCtx
ZSTD_freeDCtx
ZSTD_getErrorName
ZSTD_getFrameParams
ZSTD_isError
ZSTD_maxCLevel
ZSTD_nextSrcSizeToDecompress
ZSTD_versionNumber
Name
.text
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=24123,
count=3, id=259, version=24123,
count=10, id=261, version=24123,
count=10, id=260, version=24123,
count=2, id=203, version=65501,
count=37, id=1, productName=Unmarked objects,
count=5, id=264, version=24210,
count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
FrostyModManager/ThirdParty/libzstd.1.1.5.dll
- IMPHASH 2ead89be6f22c37cc711c6945b6b3f93
- SHA256 0867f59daed96843482970643d4a5c2be80b8c5d7c7e723986512fb7d94ef2ed
- MD5 6a15aa4b4a6459e8562ae93fc5745ccf
- SHA1 1b93213ffbf5b0b2df7dd517d227b8f2b4a7d521
- SHA512 b60d55adf216f90e1fc4449aa06da157dd2e9910f6888ec444a51b87664544bb950e75726234e1f221237d159696a0a4e689d76338edd99e69eff89ee9ac634e
- SSDEEP 6144:jzKyRL8rm0buDM5EFFGdig/GuZ9SHyjiMV6:/d8rmu95IFki8GAoD
- TLSH T14E747C43F76514BCD0BB85748573461BE7B43C061314AAEF53A486262F37FE09A3A7A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
210812
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\DAIModding\zstd-dev\build\VS2010\bin\x64_Release\libzstd.pdb
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
QueryPerformanceFrequency
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
SetFilePointerEx
WriteConsoleW
HeapSize
HeapReAlloc
CloseHandle
CreateFileW
RaiseException
COVER_optimizeTrainFromBuffer
COVER_trainFromBuffer
ZBUFF_compressContinue
ZBUFF_compressEnd
ZBUFF_compressFlush
ZBUFF_compressInit
ZBUFF_compressInitDictionary
ZBUFF_compressInit_advanced
ZBUFF_createCCtx
ZBUFF_createCCtx_advanced
ZBUFF_createDCtx
ZBUFF_createDCtx_advanced
ZBUFF_decompressContinue
ZBUFF_decompressInit
ZBUFF_decompressInitDictionary
ZBUFF_freeCCtx
ZBUFF_freeDCtx
ZBUFF_getErrorName
ZBUFF_isError
ZBUFF_recommendedCInSize
ZBUFF_recommendedCOutSize
ZBUFF_recommendedDInSize
ZBUFF_recommendedDOutSize
ZDICT_addEntropyTablesFromBuffer
ZDICT_finalizeDictionary
ZDICT_getDictID
ZDICT_getErrorName
ZDICT_isError
ZDICT_trainFromBuffer
ZDICT_trainFromBuffer_advanced
ZSTDMT_compressCCtx
ZSTDMT_compressStream
ZSTDMT_createCCtx
ZSTDMT_endStream
ZSTDMT_flushStream
ZSTDMT_freeCCtx
ZSTDMT_initCStream
ZSTDMT_initCStream_advanced
ZSTDMT_resetCStream
ZSTDMT_setMTCtxParameter
ZSTD_CStreamInSize
ZSTD_CStreamOutSize
ZSTD_DStreamInSize
ZSTD_DStreamOutSize
ZSTD_adjustCParams
ZSTD_checkCParams
ZSTD_compress
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingCDict
ZSTD_compressBegin_usingDict
ZSTD_compressBlock
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compressStream
ZSTD_compress_advanced
ZSTD_compress_usingCDict
ZSTD_compress_usingDict
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createCCtx_advanced
ZSTD_createCDict
ZSTD_createCDict_advanced
ZSTD_createCDict_byReference
ZSTD_createCStream
ZSTD_createCStream_advanced
ZSTD_createDCtx
ZSTD_createDCtx_advanced
ZSTD_createDDict
ZSTD_createDDict_advanced
ZSTD_createDDict_byReference
ZSTD_createDStream
ZSTD_createDStream_advanced
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDict
ZSTD_decompressBlock
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompressStream
ZSTD_decompress_usingDDict
ZSTD_decompress_usingDict
ZSTD_endStream
ZSTD_estimateCCtxSize
ZSTD_estimateDCtxSize
ZSTD_findDecompressedSize
ZSTD_findFrameCompressedSize
ZSTD_flushStream
ZSTD_freeCCtx
ZSTD_freeCDict
ZSTD_freeCStream
ZSTD_freeDCtx
ZSTD_freeDDict
ZSTD_freeDStream
ZSTD_getBlockSizeMax
ZSTD_getCParams
ZSTD_getDecompressedSize
ZSTD_getDictID_fromDDict
ZSTD_getDictID_fromDict
ZSTD_getDictID_fromFrame
ZSTD_getErrorCode
ZSTD_getErrorName
ZSTD_getErrorString
ZSTD_getFrameContentSize
ZSTD_getFrameParams
ZSTD_getParams
ZSTD_initCStream
ZSTD_initCStream_advanced
ZSTD_initCStream_srcSize
ZSTD_initCStream_usingCDict
ZSTD_initCStream_usingDict
ZSTD_initDStream
ZSTD_initDStream_usingDDict
ZSTD_initDStream_usingDict
ZSTD_insertBlock
ZSTD_isError
ZSTD_isFrame
ZSTD_maxCLevel
ZSTD_nextInputType
ZSTD_nextSrcSizeToDecompress
ZSTD_resetCStream
ZSTD_resetDStream
ZSTD_setCCtxParameter
ZSTD_setDStreamParameter
ZSTD_sizeof_CCtx
ZSTD_sizeof_CDict
ZSTD_sizeof_CStream
ZSTD_sizeof_DCtx
ZSTD_sizeof_DDict
ZSTD_sizeof_DStream
ZSTD_versionNumber
Name
.text
Size
260KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=120, id=243, version=40116,
count=13, id=242, version=40116,
count=7, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=203, version=65501,
count=86, id=1, productName=Unmarked objects,
count=26, id=264, version=24210,
count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
FrostyModManager/ThirdParty/libzstd.1.2.0.dll
- IMPHASH 7f37a3de67eb5eac134c273eeaa98fb1
- SHA256 1bb3d00cff9436011cfec303385fbe180b434cd0d854feb25cd10c7832f40405
- MD5 28482e4a72ef8ea89df87887a2463dd3
- SHA1 d0ec28a0456b83efc15636a953c5cedc947950e6
- SHA512 7bc507dd3586884f955a3b11604feeee3d4e734ef059c0f36905e327feaa924186bef688bfd7dc16ed680c050b78d5b7b2aef26c80a7b23ae6d206cab08876aa
- SSDEEP 12288:QGBHISrsgg01flulKMx8DQSoHi/6COvHOkAXduW:TdsE19uJyEHi/6COvTAXduW
- TLSH T13FC47B43EAD255ECC2ABC67447ABE333B53578085230BF6B9790DA311D21FD0E668B94
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_snwprintf
_unlock
abort
calloc
clock
fflush
fprintf
fputc
free
fwprintf
fwrite
malloc
memcmp
memcpy
memmove
memset
qsort
raise
signal
strlen
strncmp
vfprintf
wcscpy
user32
MessageBoxW
COVER_optimizeTrainFromBuffer
COVER_trainFromBuffer
ZBUFF_compressContinue
ZBUFF_compressEnd
ZBUFF_compressFlush
ZBUFF_compressInit
ZBUFF_compressInitDictionary
ZBUFF_compressInit_advanced
ZBUFF_createCCtx
ZBUFF_createCCtx_advanced
ZBUFF_createDCtx
ZBUFF_createDCtx_advanced
ZBUFF_decompressContinue
ZBUFF_decompressInit
ZBUFF_decompressInitDictionary
ZBUFF_freeCCtx
ZBUFF_freeDCtx
ZBUFF_getErrorName
ZBUFF_isError
ZBUFF_recommendedCInSize
ZBUFF_recommendedCOutSize
ZBUFF_recommendedDInSize
ZBUFF_recommendedDOutSize
ZDICT_addEntropyTablesFromBuffer
ZDICT_finalizeDictionary
ZDICT_getDictID
ZDICT_getErrorName
ZDICT_isError
ZDICT_trainFromBuffer
ZDICT_trainFromBuffer_advanced
ZSTDMT_compressCCtx
ZSTDMT_compressStream
ZSTDMT_createCCtx
ZSTDMT_endStream
ZSTDMT_flushStream
ZSTDMT_freeCCtx
ZSTDMT_initCStream
ZSTDMT_initCStream_advanced
ZSTDMT_resetCStream
ZSTDMT_setMTCtxParameter
ZSTD_CStreamInSize
ZSTD_CStreamOutSize
ZSTD_DStreamInSize
ZSTD_DStreamOutSize
ZSTD_adjustCParams
ZSTD_checkCParams
ZSTD_compress
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingCDict
ZSTD_compressBegin_usingCDict_advanced
ZSTD_compressBegin_usingDict
ZSTD_compressBlock
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compressStream
ZSTD_compress_advanced
ZSTD_compress_usingCDict
ZSTD_compress_usingCDict_advanced
ZSTD_compress_usingDict
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createCCtx_advanced
ZSTD_createCDict
ZSTD_createCDict_advanced
ZSTD_createCDict_byReference
ZSTD_createCStream
ZSTD_createCStream_advanced
ZSTD_createDCtx
ZSTD_createDCtx_advanced
ZSTD_createDDict
ZSTD_createDDict_advanced
ZSTD_createDDict_byReference
ZSTD_createDStream
ZSTD_createDStream_advanced
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDict
ZSTD_decompressBlock
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompressStream
ZSTD_decompress_usingDDict
ZSTD_decompress_usingDict
ZSTD_endStream
ZSTD_estimateCCtxSize
ZSTD_estimateDCtxSize
ZSTD_findDecompressedSize
ZSTD_findFrameCompressedSize
ZSTD_flushStream
ZSTD_freeCCtx
ZSTD_freeCDict
ZSTD_freeCStream
ZSTD_freeDCtx
ZSTD_freeDDict
ZSTD_freeDStream
ZSTD_getBlockSizeMax
ZSTD_getCParams
ZSTD_getDecompressedSize
ZSTD_getDictID_fromDDict
ZSTD_getDictID_fromDict
ZSTD_getDictID_fromFrame
ZSTD_getErrorCode
ZSTD_getErrorName
ZSTD_getErrorString
ZSTD_getFrameContentSize
ZSTD_getFrameParams
ZSTD_getParams
ZSTD_initCStream
ZSTD_initCStream_advanced
ZSTD_initCStream_srcSize
ZSTD_initCStream_usingCDict
ZSTD_initCStream_usingCDict_advanced
ZSTD_initCStream_usingDict
ZSTD_initDStream
ZSTD_initDStream_usingDDict
ZSTD_initDStream_usingDict
ZSTD_insertBlock
ZSTD_isError
ZSTD_isFrame
ZSTD_maxCLevel
ZSTD_nextInputType
ZSTD_nextSrcSizeToDecompress
ZSTD_resetCStream
ZSTD_resetDStream
ZSTD_setCCtxParameter
ZSTD_setDStreamParameter
ZSTD_sizeof_CCtx
ZSTD_sizeof_CDict
ZSTD_sizeof_CStream
ZSTD_sizeof_DCtx
ZSTD_sizeof_DDict
ZSTD_sizeof_DStream
ZSTD_versionNumber
Name
.text
Size
464KB
Virtual Size
464KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
512B
Virtual Size
303B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
1024B
Virtual Size
546B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
FrostyModManager/ThirdParty/libzstd.1.3.4.dll
- IMPHASH 7f37a3de67eb5eac134c273eeaa98fb1
- SHA256 9bef1e2c8eee89d9f54713f01808aacb195bbded5991e11f80b88d132b60f5e4
- MD5 30f751e7651f68762a926b0d210a8808
- SHA1 508cb50a86451099c65106c166a469c8de7b8bf1
- SHA512 3405526891a8c24a5be35dc0f5077b1ca1f39d04933e804928b02e8a0ffc623c7b5dc9f2aa0aeb62eb7192186a2cdb97fa037dfa34d343c639ed885afb64ef91
- SSDEEP 12288:p4vcbztkElOa9p4gDnm+j3pOhIeDALCQRUbpLd6YCB1VKvOMXdcW:+vceEZ4anm+9GBAWi2td6YCB1VkXdcW
- TLSH T148054A43EAA291DCC5ABC67447ABE233FA357C1982307B67DB90D7312E11F90E529724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_snwprintf
_unlock
abort
calloc
clock
fflush
fprintf
fputc
free
fwprintf
fwrite
malloc
memcmp
memcpy
memmove
memset
qsort
raise
signal
strlen
strncmp
vfprintf
wcscpy
user32
MessageBoxW
ZBUFF_compressContinue
ZBUFF_compressEnd
ZBUFF_compressFlush
ZBUFF_compressInit
ZBUFF_compressInitDictionary
ZBUFF_compressInit_advanced
ZBUFF_createCCtx
ZBUFF_createCCtx_advanced
ZBUFF_createDCtx
ZBUFF_createDCtx_advanced
ZBUFF_decompressContinue
ZBUFF_decompressInit
ZBUFF_decompressInitDictionary
ZBUFF_freeCCtx
ZBUFF_freeDCtx
ZBUFF_getErrorName
ZBUFF_isError
ZBUFF_recommendedCInSize
ZBUFF_recommendedCOutSize
ZBUFF_recommendedDInSize
ZBUFF_recommendedDOutSize
ZDICT_addEntropyTablesFromBuffer
ZDICT_finalizeDictionary
ZDICT_getDictID
ZDICT_getErrorName
ZDICT_isError
ZDICT_optimizeTrainFromBuffer_cover
ZDICT_trainFromBuffer
ZDICT_trainFromBuffer_cover
ZDICT_trainFromBuffer_legacy
ZSTDMT_compressCCtx
ZSTDMT_compressStream
ZSTDMT_compressStream_generic
ZSTDMT_compress_advanced
ZSTDMT_createCCtx
ZSTDMT_createCCtx_advanced
ZSTDMT_endStream
ZSTDMT_flushStream
ZSTDMT_freeCCtx
ZSTDMT_initCStream
ZSTDMT_initCStream_advanced
ZSTDMT_initCStream_usingCDict
ZSTDMT_resetCStream
ZSTDMT_setMTCtxParameter
ZSTDMT_sizeof_CCtx
ZSTD_CCtxParam_setParameter
ZSTD_CCtxParams_init
ZSTD_CCtxParams_init_advanced
ZSTD_CCtxParams_reset
ZSTD_CCtx_loadDictionary
ZSTD_CCtx_loadDictionary_advanced
ZSTD_CCtx_loadDictionary_byReference
ZSTD_CCtx_refCDict
ZSTD_CCtx_refPrefix
ZSTD_CCtx_refPrefix_advanced
ZSTD_CCtx_reset
ZSTD_CCtx_setParameter
ZSTD_CCtx_setParametersUsingCCtxParams
ZSTD_CCtx_setPledgedSrcSize
ZSTD_CStreamInSize
ZSTD_CStreamOutSize
ZSTD_DCtx_loadDictionary
ZSTD_DCtx_loadDictionary_advanced
ZSTD_DCtx_loadDictionary_byReference
ZSTD_DCtx_refDDict
ZSTD_DCtx_refPrefix
ZSTD_DCtx_refPrefix_advanced
ZSTD_DCtx_reset
ZSTD_DCtx_setFormat
ZSTD_DCtx_setMaxWindowSize
ZSTD_DStreamInSize
ZSTD_DStreamOutSize
ZSTD_adjustCParams
ZSTD_checkCParams
ZSTD_compress
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingCDict
ZSTD_compressBegin_usingCDict_advanced
ZSTD_compressBegin_usingDict
ZSTD_compressBlock
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compressStream
ZSTD_compress_advanced
ZSTD_compress_generic
ZSTD_compress_generic_simpleArgs
ZSTD_compress_usingCDict
ZSTD_compress_usingCDict_advanced
ZSTD_compress_usingDict
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createCCtxParams
ZSTD_createCCtx_advanced
ZSTD_createCDict
ZSTD_createCDict_advanced
ZSTD_createCDict_byReference
ZSTD_createCStream
ZSTD_createCStream_advanced
ZSTD_createDCtx
ZSTD_createDCtx_advanced
ZSTD_createDDict
ZSTD_createDDict_advanced
ZSTD_createDDict_byReference
ZSTD_createDStream
ZSTD_createDStream_advanced
ZSTD_decodingBufferSize_min
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDDict
ZSTD_decompressBegin_usingDict
ZSTD_decompressBlock
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompressStream
ZSTD_decompress_generic
ZSTD_decompress_generic_simpleArgs
ZSTD_decompress_usingDDict
ZSTD_decompress_usingDict
ZSTD_endStream
ZSTD_estimateCCtxSize
ZSTD_estimateCCtxSize_usingCCtxParams
ZSTD_estimateCCtxSize_usingCParams
ZSTD_estimateCDictSize
ZSTD_estimateCDictSize_advanced
ZSTD_estimateCStreamSize
ZSTD_estimateCStreamSize_usingCCtxParams
ZSTD_estimateCStreamSize_usingCParams
ZSTD_estimateDCtxSize
ZSTD_estimateDDictSize
ZSTD_estimateDStreamSize
ZSTD_estimateDStreamSize_fromFrame
ZSTD_findDecompressedSize
ZSTD_findFrameCompressedSize
ZSTD_flushStream
ZSTD_frameHeaderSize
ZSTD_freeCCtx
ZSTD_freeCCtxParams
ZSTD_freeCDict
ZSTD_freeCStream
ZSTD_freeDCtx
ZSTD_freeDDict
ZSTD_freeDStream
ZSTD_getBlockSize
ZSTD_getCParams
ZSTD_getDecompressedSize
ZSTD_getDictID_fromDDict
ZSTD_getDictID_fromDict
ZSTD_getDictID_fromFrame
ZSTD_getErrorCode
ZSTD_getErrorName
ZSTD_getErrorString
ZSTD_getFrameContentSize
ZSTD_getFrameHeader
ZSTD_getParams
ZSTD_initCStream
ZSTD_initCStream_advanced
ZSTD_initCStream_srcSize
ZSTD_initCStream_usingCDict
ZSTD_initCStream_usingCDict_advanced
ZSTD_initCStream_usingDict
ZSTD_initDStream
ZSTD_initDStream_usingDDict
ZSTD_initDStream_usingDict
ZSTD_initStaticCCtx
ZSTD_initStaticCDict
ZSTD_initStaticCStream
ZSTD_initStaticDCtx
ZSTD_initStaticDDict
ZSTD_initStaticDStream
ZSTD_insertBlock
ZSTD_isError
ZSTD_isFrame
ZSTD_maxCLevel
ZSTD_nextInputType
ZSTD_nextSrcSizeToDecompress
ZSTD_resetCStream
ZSTD_resetDStream
ZSTD_setDStreamParameter
ZSTD_sizeof_CCtx
ZSTD_sizeof_CDict
ZSTD_sizeof_CStream
ZSTD_sizeof_DCtx
ZSTD_sizeof_DDict
ZSTD_sizeof_DStream
ZSTD_versionNumber
ZSTD_versionString
Name
.text
Size
705KB
Virtual Size
704KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
512B
Virtual Size
303B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
1024B
Virtual Size
546B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
FrostyModManager/ThirdParty/zlibwapi.dll
- IMPHASH a020653e2200de4edae4d0929ebfdefb
- SHA256 8fe8a32bf055ed27a4615324c0058428d6e32565255f569dba771d2525db5448
- MD5 ddb66d529f43ac3912ea2b1c438abe1f
- SHA1 a8077ed64b8f9ad2d5d4c2699b50037014a429fc
- SHA512 cffa3da5323fd38d7f446a976f54e271d5f75cf7eebba6f210fd66699bced0066731695c6a38df55c7b44a045496c78790b6e695b00291a88d833b088d085091
- SSDEEP 1536:YfCIDVfYnHE9r/J0BMWevDHSMTt13YxDSv4arnToIfwIOFIOmUCMHn8LhQ6Rc:eCIRfYWyMpjoxCLTBfmPmUN8Ksc
- TLSH T188B37D5A3AA452B4D6B792B8C9D30B1FC7A0701503A187CF569897D61F03AD46E3A3FC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
74520
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\FrostbiteModding\ThirdParty\zlib-1.2.11\contrib\vstudio\vc14\x64\ZlibDllRelease\zlibwapi.pdb
kernel32
ReadFile
WriteFile
SetFilePointer
CreateFileW
GetLastError
CreateFileA
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memchr
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
fseek
fread
_wopen
_open
_ftelli64
fopen
ferror
ftell
_write
fclose
_fseeki64
_close
_read
fwrite
_lseeki64
__stdio_common_vsprintf
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
strerror
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_errno
terminate
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-time-l1-1-0
_time64
adler32
adler32_combine
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
fill_win32_filefunc
fill_win32_filefunc64
fill_win32_filefunc64A
fill_win32_filefunc64W
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzopen
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
unzClose
unzCloseCurrentFile
unzGetCurrentFileInfo
unzGetCurrentFileInfo64
unzGetCurrentFileZStreamPos64
unzGetFilePos
unzGetFilePos64
unzGetGlobalComment
unzGetGlobalInfo
unzGetGlobalInfo64
unzGetLocalExtrafield
unzGoToFilePos
unzGoToFilePos64
unzGoToFirstFile
unzGoToNextFile
unzLocateFile
unzOpen
unzOpen2
unzOpen2_64
unzOpen64
unzOpenCurrentFile
unzOpenCurrentFile2
unzOpenCurrentFile3
unzOpenCurrentFilePassword
unzReadCurrentFile
unzStringFileNameCompare
unzeof
unztell
unztell64
zError
zipClose
zipCloseFileInZip
zipCloseFileInZipRaw
zipCloseFileInZipRaw64
zipOpen
zipOpen2
zipOpen2_64
zipOpen64
zipOpenNewFileInZip
zipOpenNewFileInZip2
zipOpenNewFileInZip2_64
zipOpenNewFileInZip3
zipOpenNewFileInZip3_64
zipOpenNewFileInZip4_64
zipOpenNewFileInZip64
zipWriteInFileInZip
zlibCompileFlags
zlibVersion
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=2, id=259, version=24123,
count=10, id=261, version=24123,
count=8, id=260, version=24123,
count=3, id=203, version=65501,
count=63, id=1, productName=Unmarked objects,
count=2, id=259, productName=VS2015 UPD3 build 24210, version=24210,
count=20, id=264, version=24210,
count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,