LastTests.zip
- SHA256 e3be94ffceabf388a2f365d66a1173c2ac73bc8fd19b6526072137b3deb83082
Password
060806
Static task
static1
2 signatures
General
- Target LastTests.zip
- Size 101.3MB
- Sample260930-v2lslsea49
- SHA256 e3be94ffceabf388a2f365d66a1173c2ac73bc8fd19b6526072137b3deb83082
- MD5 f2a0a16d034db4f7ddc3e0ff1998faa1
- SHA1 c01854993876f682e565eac6f45f8ec263a4f88a
- SHA512 fc4bb81300a938788b11657729379125ea9a7f1006de76472087119d9fb37d95816769f1f5431a54f5c622ee20b43436b7d016b32a960af8359f43edcd8115df
- SSDEEP 3145728:awhTJqsi6XX78Q9vyFKJ7vaK5307yWS5Zmk:R5L8tFCjaiG+Z1
- TLSH T1393833F31E26CC0E6F83E73D0286AF9626D500FAEB775C9A55CD3F636610AE95058324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- DLL Hijacking vulnerability 1 IoCs
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
resource unpack001/LastTests/LastTests/libcurl.dll - Unsigned PE 41 IoCs
Checks for missing Authenticode signature.
resource unpack001/LastTests/LastTests/dll/AnimationSystem.dll unpack001/LastTests/LastTests/dll/AudioManager.dll unpack001/LastTests/LastTests/dll/CacheManager.dll unpack001/LastTests/LastTests/dll/CompressionLib.dll unpack001/LastTests/LastTests/dll/ConfigManager.dll unpack001/LastTests/LastTests/dll/CoreRuntime.dll unpack001/LastTests/LastTests/dll/CryptoProvider.dll unpack001/LastTests/LastTests/dll/DataSerializer.dll unpack001/LastTests/LastTests/dll/DatabaseDriver.dll unpack001/LastTests/LastTests/dll/DebugBridge.dll unpack001/LastTests/LastTests/dll/DiagnosticsTool.dll unpack001/LastTests/LastTests/dll/DriverInterface.dll unpack001/LastTests/LastTests/dll/EventDispatcher.dll unpack001/LastTests/LastTests/dll/FontRenderer.dll unpack001/LastTests/LastTests/dll/GraphicsDriver.dll unpack001/LastTests/LastTests/dll/HookEngine.dll unpack001/LastTests/LastTests/dll/ImageCodec.dll unpack001/LastTests/LastTests/dll/InjectorCore.dll unpack001/LastTests/LastTests/dll/InputHandler.dll unpack001/LastTests/LastTests/dll/LocaleProvider.dll unpack001/LastTests/LastTests/dll/LoggingService.dll unpack001/LastTests/LastTests/dll/MemoryPool.dll unpack001/LastTests/LastTests/dll/NetworkLayer.dll unpack001/LastTests/LastTests/dll/OverlayRenderer.dll unpack001/LastTests/LastTests/dll/ParticleEngine.dll unpack001/LastTests/LastTests/dll/PatchManager.dll unpack001/LastTests/LastTests/dll/PhysicsModule.dll unpack001/LastTests/LastTests/dll/PluginHost.dll unpack001/LastTests/LastTests/dll/ProfilerCore.dll unpack001/LastTests/LastTests/dll/RenderEngine.dll unpack001/LastTests/LastTests/dll/ResourceLoader.dll unpack001/LastTests/LastTests/dll/ScriptEngine.dll unpack001/LastTests/LastTests/dll/SecurityModule.dll unpack001/LastTests/LastTests/dll/ShaderCompiler.dll unpack001/LastTests/LastTests/dll/SystemProxy.dll unpack001/LastTests/LastTests/dll/TextureManager.dll unpack001/LastTests/LastTests/dll/ThreadScheduler.dll unpack001/LastTests/LastTests/dll/UIFramework.dll unpack001/LastTests/LastTests/dll/UpdateService.dll unpack001/LastTests/LastTests/dll/VideoDecoder.dll unpack001/LastTests/LastTests/libcurl.dll
File Explorer
-
LastTests.zip.zip 101.3MB
-
LastTests/LastTests/Main.exe.exe 785KB
-
LastTests/LastTests/dll/AnimationSystem.dll.dll 2.8MB
-
LastTests/LastTests/dll/AudioManager.dll.dll 2.3MB
-
LastTests/LastTests/dll/CacheManager.dll.dll 2.4MB
-
LastTests/LastTests/dll/CompressionLib.dll.dll 2.5MB
-
LastTests/LastTests/dll/ConfigManager.dll.dll 2.0MB
-
LastTests/LastTests/dll/CoreRuntime.dll.dll 2.6MB
-
LastTests/LastTests/dll/CryptoProvider.dll.dll 2.6MB
-
LastTests/LastTests/dll/DataSerializer.dll.dll 2.7MB
-
LastTests/LastTests/dll/DatabaseDriver.dll.dll 2.0MB
-
LastTests/LastTests/dll/DebugBridge.dll.dll 2.7MB
-
LastTests/LastTests/dll/DiagnosticsTool.dll.dll 2.0MB
-
LastTests/LastTests/dll/DriverInterface.dll.dll 2.9MB
-
LastTests/LastTests/dll/EventDispatcher.dll.dll 2.6MB
-
LastTests/LastTests/dll/FontRenderer.dll.dll 2.7MB
-
LastTests/LastTests/dll/GraphicsDriver.dll.dll 2.0MB
-
LastTests/LastTests/dll/HookEngine.dll.dll .ps1 3.0MB
-
LastTests/LastTests/dll/ImageCodec.dll.dll 2.0MB
-
LastTests/LastTests/dll/InjectorCore.dll.dll 2.3MB
-
LastTests/LastTests/dll/InputHandler.dll.dll 2.1MB
-
LastTests/LastTests/dll/LocaleProvider.dll.dll 1.9MB
-
LastTests/LastTests/dll/LoggingService.dll.dll 2.6MB
-
LastTests/LastTests/dll/MemoryPool.dll.dll 2.2MB
-
LastTests/LastTests/dll/NetworkLayer.dll.dll 2.4MB
-
LastTests/LastTests/dll/OverlayRenderer.dll.dll 2.6MB
-
LastTests/LastTests/dll/ParticleEngine.dll.dll 2.9MB
-
LastTests/LastTests/dll/PatchManager.dll.dll 2.0MB
-
LastTests/LastTests/dll/PhysicsModule.dll.dll 2.4MB
-
LastTests/LastTests/dll/PluginHost.dll.dll 2.5MB
-
LastTests/LastTests/dll/ProfilerCore.dll.dll 2.8MB
-
LastTests/LastTests/dll/RenderEngine.dll.dll 2.1MB
-
LastTests/LastTests/dll/ResourceLoader.dll.dll 2.7MB
-
LastTests/LastTests/dll/ScriptEngine.dll.dll 2.6MB
-
LastTests/LastTests/dll/SecurityModule.dll.dll 3.0MB
-
LastTests/LastTests/dll/ShaderCompiler.dll.dll 2.5MB
-
LastTests/LastTests/dll/SystemProxy.dll.dll 3.2MB
-
LastTests/LastTests/dll/TextureManager.dll.dll 3.1MB
-
LastTests/LastTests/dll/ThreadScheduler.dll.dll 2.9MB
-
LastTests/LastTests/dll/UIFramework.dll.dll 2.2MB
-
LastTests/LastTests/dll/UpdateService.dll.dll 2.7MB
-
LastTests/LastTests/dll/VideoDecoder.dll.dll 2.5MB
-
LastTests/LastTests/gup.xml.xml 4KB
-
LastTests/LastTests/libcurl.dll.dll 1.2MB
LastTests/LastTests/Main.exe
- IMPHASH 0b43764663ba024c8202f35227fe0bff
- SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
- MD5 bca6478b230b6920fe79b97a3066e835
- SHA1 f61e771c53c63f35f5a2b416c260c74d29329adf
- SHA512 463f16b737768ac2bb285efc09e69781132e95c234e2eab37eb98be797606e45d1dbb38df3a6ef55144f4f7e1b08a213768e915b7d967b8c90bd03b216a07ff7
- SSDEEP 12288:/AstffLBk3Q45wU0/St0Z4j9lAx5ylTxEIyTXnxYV:4s9uQ45oyj9lE5yFuTXmV
- TLSH T1CB058E6A66AC01F8E0B7D17989964907F7B27845137197CF43A087AB2F276E05F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
060806
Digest
1b:65:e0:ab:b1:b0:2b:aa:fb:5f:cd:96:90:30:b6:76:7d:fa:2d:44:21:c4:2e:57:95:3b:dc:e4:a6:f6:1f:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Chains
Mar 7, 2025
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Serial Number
03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 13, 2022 - May 14, 2025
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
261440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
libcurl
curl_easy_setopt
curl_easy_cleanup
curl_easy_init
curl_easy_perform
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsA
PathFindExtensionW
PathIsDirectoryW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
kernel32
CreateFileW
HeapSize
SetEndOfFile
HeapReAlloc
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateDirectoryW
lstrlenW
GetCurrentThreadId
Sleep
OutputDebugStringW
DeleteFileW
CreateThread
lstrcpyW
lstrcmpW
MulDiv
MoveFileW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
WriteConsoleW
CreateEventW
GetLastError
SetEvent
CloseHandle
ResetEvent
CreateSemaphoreW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
WaitForSingleObject
FlushFileBuffers
GetFileSizeEx
HeapAlloc
HeapFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
WakeConditionVariable
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
GetExitCodeThread
RtlUnwind
InitializeCriticalSectionEx
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
GetProcAddress
GetStringTypeW
CompareStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
user32
CallNextHookEx
EndDialog
SetWindowTextW
SetDlgItemTextW
CreateWindowExW
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItemInt
SystemParametersInfoW
SetDlgItemInt
DialogBoxParamW
LoadImageW
ReleaseDC
MessageBoxW
SendMessageW
SetWindowPos
GetDC
GetWindowRect
FindWindowExW
GetDlgItemTextW
gdi32
GetDeviceCaps
shell32
SHGetFolderPathW
ShellExecuteW
SHFileOperationW
Name
.text
Size
595KB
Virtual Size
595KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
134KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=190, id=261, version=30795,
count=16, id=260, version=30795,
count=1, id=253, version=33731,
count=10, id=259, version=33731,
count=16, id=260, version=33731,
count=90, id=261, version=33731,
count=12, id=257, version=30795,
count=3, id=257, version=33811,
count=182, id=1, productName=Unmarked objects,
count=35, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=151,
count=1, id=258, version=33811,
LastTests/LastTests/dll/AnimationSystem.dll
- SHA256 c7fc378ee78ef1fc973517dd5e432c2bf09f68e0e5cd8b69a06686c2b0ff19d1
- MD5 9c4c5efc235b9a0bb0097ce3592bf1e1
- SHA1 89942b2839cedbc03c552f47743465a5d593e26f
- SHA512 feec29bf1f61126f804db94641cc1e1e51e6086ac2e885b816a299f99fe86391ad4da6db5ac1bf64ca86a76999d6abcc64191a3208d1fc74d4c675f4faf186d1
- SSDEEP 49152:CcY61zvlJEZyw13we5+I/meIOVwESj0kcC0O6y+5JZZz9f1P12WeK:C3azvlJEkyBPmex5SJcq6nvk2
- TLSH T1EAD5332BD643985AA0A7E0716D598B890EF092ED7F813F24C8E854D57B483E35106FBF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/AudioManager.dll
- SHA256 d6ba2e4d5868b5143aff943a7d200ad60f9237c9232e38ba0e0d676cac8c7548
- MD5 11c00e781627ff99b63893f94234408e
- SHA1 26d990b41c67737d396457bc279edc40cc9218c4
- SHA512 855d1df67585509e9b1838e76a822f206b41b6f990235a61371319599fdb6cbca807e01f27daa2b21649b806d958858935b16eaf8ed6466c66b697bb87750208
- SSDEEP 49152:CZl+BTMIoTZcm6BX9Zwnhev62zMIIvG1P11F8isnB0p2wtTb:mEBThuZ36BtyhevhxL8i40pvpb
- TLSH T1DBB533E7D8F5F288FDC07AB70DA2DC2D54E34468622B972876D613BC1238EE4D504A76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.3MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/CacheManager.dll
- SHA256 e681408a4a109ca3aabec869f5ed6b7f133f34dcbb48d9a5f4ded37c8bb23747
- MD5 12721209f50d086e6599f1ba9b938033
- SHA1 7a8f5fc143123bb098d4b5860fedc73b62e1c59c
- SHA512 cd2256560518b16277a9cd18c07c0310fcfea6f64860de28afe1975228e550187f869bad75193d146c0e14794816278d97914fa2cd82946334572aaf2d36cda6
- SSDEEP 49152:VZi0zLltSx8AKuvobMvkQKPRS5Mla+pdUX0VfxFtU4fhHdiFyEU:e2885uv4tQIRvlRAi1vHdigEU
- TLSH T190C533C33436D5836EBFB36A60AC0A8A9373C157E6CFB409BEE655BDF24152094D1C62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/CompressionLib.dll
- SHA256 bb1149f5c80c7449eccd5078e2bab364297d8723b6535e1a4d0153819bc961ce
- MD5 8c5c35fe2ae3c10968ceaabb0c2f1f14
- SHA1 98d31ad39f4bc7f15e414edfa23796fa7102a7db
- SHA512 9d33096d189bc21421ff16daf8fa6c51dd981e3af52d048ec4d2c252d00799852f47733aac14ad30fde8ba9cb3c4d0fba9a76a0f0a746a4257eff977d313a76e
- SSDEEP 49152:GN/Xl8N4irHlbcvSV1VRTMa7DATJRp5dscpM7hEIVW:kVHirFY6VRMa3ATnp5OcNaW
- TLSH T1BFC533BF87D185F0D379C17082D8BA0B4A77B28ABE05CFDE6147285FF3655828A46358
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ConfigManager.dll
- SHA256 8728fbb5d6707086c3a4af0484aa1d5364376b2cf6556255199796941b0c023b
- MD5 56ea8565821326cce92d7826744e47bc
- SHA1 e61b746fc34b3d4d9aa9bebdfa4e51e34f8a8f3e
- SHA512 95403caff57d6741fe58f39b5e642a68df74bf90f24e363fdaae141e06d0de3488bbc28cf13589edf26c54766febb9bd92e2da534cb61ce7627f34c429ec9f84
- SSDEEP 49152:3IfEdkY1xC2ksiaSyx7eNSFajgkGMkzwdY4L8EMS7ei:3l4daS07ebMkGLd0887ei
- TLSH T1A0A533CEB6F3056CCA62CD749309F068FD44660AB2269B8717ED16371A739E01A7533B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/CoreRuntime.dll
- SHA256 944997ab496cd5d4473d635d09fbc9ada2b81faf4fd7d228600a5f465bcad33f
- MD5 70358ce2973af26f0c27eb41c3fadbc2
- SHA1 58b05c76feda4f502705ffdeb1ff990463210f4b
- SHA512 f9cf992aaaff3afbe4ec53da8bac8dad0cbf77d405b9cb00b4fbf8220584e01dc7e7b7530a7aea6c8cbf2a16ec79e5df07a0b004735ab605033b63098189b5c0
- SSDEEP 49152:5WGxc8A0bvuIqbROObCfZ4mWtVqV6cGUgPMxy8n4+l0xOdq7uy/TIzhUo2ZggwJo:5ZvvuIqR0S+MHMo8ukguyryhUohJFG
- TLSH T1ABC533C3FCB768DCFF99B3B11684A85272CB67BD4DF9695B412C91394C8F8CA4049826
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/CryptoProvider.dll
- SHA256 facfe1c97babbf5ec324a3b82fc458f76b11fc34c2804af29f51cf48ada1659b
- MD5 9153e0ecd6e4972166945e8fb3987986
- SHA1 fba795a90ba55d333883e6c414b27320c15f780d
- SHA512 8b30e541248be5dfbba81ab4facec52c6e707a0a06dea20d38235ef73435ebaaddcd6ddbcba14f34307350504d9f05d13e91213454911ffe70ceb995360c3ddf
- SSDEEP 49152:ZQuBdQzIifpxSFLCLHcjh4MC/tsaxzLfzIeAW6XURVFsO4+rGbfGAhryBIDPvAXV:GOdABxcurcOF6ax/AW2kFs5+MGytA1QQ
- TLSH T1E4D533528C1384E5DC067FA02AD3F2BBCAE75D63C8FB591EAD27881DD69C8001E4E5D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
060806
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/DataSerializer.dll
- SHA256 f025b6e73da9d16bc54ad1a5078b91324c2544b595804c9ef018b85ca13abb87
- MD5 84eec418c5aec61e396f9c69d4ad194c
- SHA1 13e6518fa1df165561f95ed36c8599a999561ea4
- SHA512 baaca7ee45e9cae0af48c8f79d67ace8b3564820c83323b47ffa6fd727793d16cd0a609661a8af72756f30cab70a92824a488d2dc5fa530699d3f9609835e6cf
- SSDEEP 49152:vPq8oq/Xo8GUdu2OE3RsKMwOvQ6C1KIfZGOLuTnvnO4WavgH2DDftm9xoX3:vSbq/Xou9FWQVUIId3bv9Y9xa3
- TLSH T1CFD5331239C3EC75F16E73F9083464B2A29117C72659BB0964B33C1BED789EC7B8590A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/DatabaseDriver.dll
- SHA256 0636e405d0a322b2d719dd4bb98d04dffc39b72338a10cc382467ce91ce80470
- MD5 3009a876d56ff232ddff0e33e94173da
- SHA1 e19470dc397cff6ae9d5e8033460e5e07b1c02be
- SHA512 30cf435c5fba2694d2a6c9fcfd270d43baac498718201fc7ed3ea01959aedf1e4763e8d28fd1593ed53bb0de925735207e904069e04863d87cfe6bf4fee4998e
- SSDEEP 49152:FGLK0dSmNUQAqlEQf5NNuXl9lu0ASUW0JI:FXmNUQAqlEQRu19lQTW7
- TLSH T1F6A533F4C428919CDF0287F6DD8810DFE98E633ED9592F875A6A7FDE2B00049D921B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/DebugBridge.dll
- SHA256 7d4f2f11f9e5d264d739af9896d646fcd5072446b332c4438a28607b6ec3a9c1
- MD5 98204702a1c85081923411f892d6b1d1
- SHA1 e6fbb44baaf04c12636918cd8093924b8b315847
- SHA512 261dc3028ca4daa4d0c18acd3a03938dd06da6b07b8129fe7891fe74f3a228c9c6b99a9a8a50444b1ab925d9ab2e2f6287f3df9d4975531df2818e2fc99d5e88
- SSDEEP 49152:Bwk0zVGi92KZmXw313/Ubh/UkX8HhcCzLuOtWBoLwEQEC9HQFa6XMQTWyO:Bwk0znFZmAF3/Ub1RXcC01ioLpxC9cWH
- TLSH T113D5335272807EB9F15CBC66CC8F9BD29F6A97C0786D4608F4C58B922B934398572F31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.7MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/DiagnosticsTool.dll
- SHA256 ab1a4209f07cbfe37f7ff909ff2f34c7f681ee6af11670ff21a5d8b2d78ad6d9
- MD5 5533d2016984166812ccc3ed77adbfb0
- SHA1 99a8c370f394c330df7780fb23d643f03cb1fb3c
- SHA512 422f92f86854540208d88f672ddbcbc15ca7669178edee2f3de8ba1c909b15837339fd2d5480f7f69d522e3b794fff5844cee36c1b1da929970816c3f7a97054
- SSDEEP 49152:bpX0+qMC37C6211qWBSGUKEN6UqEHgV+vBUcrAzu9o3h2SgkpFNRjoUc:bpXRXC3LLWBgKEjsV+RSueUSDHNRsUc
- TLSH T199A533ACFE966A85CF848F75B901A0C1F905DEB220588ACF49CBFFE35758444B68974C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/DriverInterface.dll
- SHA256 d857bb863b052d661a86c970b3d18567b26de4b190dc585bdbceb8f760963f93
- MD5 38efb4a893a4eeca87e1891485ffb0de
- SHA1 e77db9b20cf0c8408093dcd28f8db713898fbe5e
- SHA512 4081998392b6f1315fc1a1699bbbce2e94470849fe230c680b97fccb7dc48fa5f00ab5df17252b4edf41c04dcda01613d35d29f1eecd0bdd1c14dd585073b182
- SSDEEP 49152:mdB39JEyK+zN83YbUIkT6dqHnnuTNsDUhEoYlqWfD3f93qu6bDJ+Ue6+1PWy21x0:qB9FUPO7qSEoNalalbDFe6LyYHy
- TLSH T1E4E5337676C1D167D58BE8BCC1D8EEC8106FBEF9BA0E0849F7921630B41E0A747489E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/EventDispatcher.dll
- SHA256 fcd0a769810da04045bdadb70a70fa94ad146529a650369e89dde1441c36ba8e
- MD5 4bd11d76d80b543c8cf20cfea8b5e9e2
- SHA1 dd553a3cda05a320c96b13083b33442a40755bad
- SHA512 6e68eeb64eae0c025bd3f06762f52188945849706bd0ac65d1892af0d58ee44775e816f9488433f8fc7ec61d444edea805765662841ebde0c4392469b32b8052
- SSDEEP 49152:Bc0cNB5xZD7NT9Py1Zo2Ud9SXnjM/2v/BFUw4Gt/8QoxvqcRCwoKdit4LG1/MCg8:BRcNB5z19Wo2iSXja2v/jR4G98DycRCr
- TLSH T194C5331005AA03FAC39D82F25DD2DDF7178899136617685EB78DE48C8FC3863DCAA365
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/FontRenderer.dll
- SHA256 07ee44692f4a424f93cf588d03e5a1cb5ab991e56cae65d319db57dfd06c6286
- MD5 01bf3fb1cad7f46d7ac3fe04888a119b
- SHA1 c3bd6ac405949bb04947c076571f076f73bd33e9
- SHA512 cbee68e9cb0810f120c6058e36ef4eb07424815c07801b0b710c84cce3713976d7d28515fe5733bd4d2cd9b97c1ab3791868602f46b8c7a87464f9d5031fb5d3
- SSDEEP 49152:ItbJPWPVNaUOpfJCUgtCgk2owAB1wO4X3BFRABpQv5+jYMEcgkgKUW5FEL6:cbJeIfJxgtCKowAB1wOy5ABpG+sDnH7e
- TLSH T126D53385A57422C3EF5E9DB2153D750600E2C99EC6F06B3B2A48A6C1A5534C2E1E4FBF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/GraphicsDriver.dll
- SHA256 10942e921f1ee4c4e113160027ca27bf4bb6368f8b47c023a6e36dd178986c28
- MD5 7c27cd422d35dfa2c7bcc6c3fe0e1c23
- SHA1 bba9a98649d97aa0fc03c322f4ec037a2aab5595
- SHA512 89395408b9e17697f3976c01e79ce85acac09a1fbf98d521fea8950434b06714cc2d078d7e85b9bca38799e3125923446f7f29f6719c3b94a42befdbd60397cc
- SSDEEP 49152:jSfrGd5YgqmOOTUtpmKRV49P0BdV3HrUkYCELry3JjYLqoF+xe:GfS0vndKIA8vXrtYCKry3JjHs
- TLSH T171A533585A94C9F2FE8668B377957A1C0D2E516B72E3C18F0129B4EC6C02FD8F429E53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/HookEngine.dll
- SHA256 a32950adf3512a800bb62bdc3f5f25529a2ec17bb96e585008c3012f3520289c
- MD5 aee18707546534f60231c7f6a2c1d60d
- SHA1 93b9f168a7113aca4d36e3778cfd4715cd6086b9
- SHA512 852bf04136ab98de3ae0a32d608b2241bd9637e32cf8c1430c08c845371339fa23756f77bb3adb85e53f91ec8166fd82bce68fe4d3b63dfa76b4563351d9561d
- SSDEEP 49152:cSMRZg0XoISFe6EYl1ABsz7k11KGbVnNJm8CTFIy1oIdWmIHxIX78c9CiU:WG0XBSFe6EYlzVCz+RIy1oUX7LCiU
- TLSH T122E5333E4D21A4E0FFB46A7B0E3D80F77D613E58671F9A49CD362F523599210E2928E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ImageCodec.dll
- SHA256 4ff3e6a12b196705a7b387cbad7f14cd1570427006c5486da1dc8951f3b3ada9
- MD5 1b84cd7d0621c0a365602b48c13f1b19
- SHA1 743d35cb54f8fac1b259f69495e341505b0d456b
- SHA512 61da89b58176aca410a014099e3a3b6b2e8da5f4d3f6f5675570e0f0446d3a6420efb247ac999b0d3a864100d2c5839c9b580a3990ede8effadbdd4fd9ee431b
- SSDEEP 49152:KKypDdc5ESkarTMPTHwQ6/LqJFjIirQdLw:GpDdqkDwQ6/Gf5Q+
- TLSH T194A533D79506381FE4B35B3353DD00293BDD0923B2A4B98E701F63901AC5E79AA9FE19
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/InjectorCore.dll
- SHA256 63416b78600d0b17143656cce470f6eb805faa29ccf1606a1444af9d6eafb276
- MD5 bce11e3a24eb4889c343cff3b53be5f9
- SHA1 ed51538ef0d2422b2e923ad741e5646f77f2917d
- SHA512 f855104f53d752011ad136b85603394cd5fece82eea8ded341d468bb66440b0b6902a7a8d65e2120b985646d26e36a2cb46896c74feed09a81ce694a58eccc42
- SSDEEP 49152:KKkHhnPvPbs8HQclxuWG0u7JYy0Xv9nw157IoWXlndFsN:KKkHhnPvPA8lL2p0/9nuMoWXLs
- TLSH T150B533CE6A9D590DCBDA5C3DE37E1DF41DFC8C52FAA51B468CFC014AB884478978028A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/InputHandler.dll
- SHA256 eb4a72699692024549cfa66aea985f463266a7e7db0224c62de11d690979ea3a
- MD5 72c1f7d3e52c874b23f594bfd63047a7
- SHA1 eae484e633f050d4fe755e77eaa85a390feb4a2e
- SHA512 e473542482836700493e70de94e181b99e1ab9f10c4bc0a78c3273ce3ce162930f6575955336010a6412ead32ff0f951a2af8bb202c125461a178aa44b8c3866
- SSDEEP 49152:rWjBB+niqW3eeO14NBp+9pCWUuoz23v4HWhADpqgeatBem/WwnwbRE:E+niqW3euNBopJnb3vsWZPmBymT
- TLSH T14FA533114EE5702F8C5945F22020A16BC26769CEEED52CDD0D19D93812B3E373F9BA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/LocaleProvider.dll
- SHA256 6d9a9d8da4545f5d4a65bf05551ef787564f46d9c15e610239cc26febdd97772
- MD5 e66262bb5c9bee061726557d6363cf9e
- SHA1 366515619810b53cfa49b6566f7aa28de3366774
- SHA512 13c975132ab8ee82a1acf9f0ae25b40e4b9ab5ccc8e46aa2c689fa2d324e6eb31cae79964778f820a2cd81a4a0bbfa8733fb74e9a38b27cffdf743f6ff1f66e0
- SSDEEP 49152:XnOxrfhgLlj/d38LKO0hjVA2uK496d9l3Ml+Mp7pnsU:X0rfqLv3KB0ZG2zx91S/sU
- TLSH T1C09533468726D10ABCB93DFD55885B14AE07CC86F5A8A1D9A035E27BB13D6C03E0BCD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/LoggingService.dll
- SHA256 1724d7143ab1ccbf3ac3d96dceed7fe00eeb7a8ed15acac5b2c94e932e61674e
- MD5 e30ade009ea2de45a6b4c9019d0f5116
- SHA1 b2e100b6163e8202d5ee83bd262ca8b5031b6a16
- SHA512 510ef6642a8f5d0eeca79c2b8f8d91ff1f0f987d55b0d2871dbb247548bf155144f94145493505c50b2ce6bebd03ab1ef1e49896bd7e67145f3ace536140c452
- SSDEEP 49152:fp/YP8PR/5UUoTUalxEpe9sN19zBH7hOhUX8pdS2+2:h/YqDDelOpNf9z91TMjSF2
- TLSH T191C5330DE4932E80D66367F0BA1E63364A2D3567BF00D49F1775D8529AE2C361B73A38
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/MemoryPool.dll
- SHA256 641a6458db2fafa50c7de020b7b2dfdb0329f7707e15cc5aa01591dc883fd66f
- MD5 5d3435531a00f580cf4a4d8fbc3a2cf2
- SHA1 04d05e55428db25d5baf9eee05ac888ecd8adcd3
- SHA512 b4a9538ddf17d0ea44edb00adc98249ef80f40b1cbf57c0829761b2aa0760b9a4ae13765cdd73c0ea0c4e4de3693b3cdbc19e4e3274292d6515b7448bfc26617
- SSDEEP 49152:h/9UObR0PIxOEOAk8UeHc90tH2X6K96B67BA:hVUh5eHTtG5rA
- TLSH T168A5339D91859C0BE590AFEC63F0859726163502BFA6189C2662B7F8CB5E13E7034ADC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/NetworkLayer.dll
- SHA256 bb3e4a704f4be7278fc62704c4f8bfa352d1e35baa876db6674e73cf994263d2
- MD5 4222cfa81f65572a7f903526ebe81868
- SHA1 5fda2e4478c59d5e3f1389668ffc59b15f5ab855
- SHA512 f85a84b86819c1ecd4524e11c86e38ba90358b25418cd4e998d8bd03ddee6b4cb18a2c69078f34e78915fcbc76f8e39a5e467626ce7b0a40285846b27a9cf034
- SSDEEP 49152:aiE9aQRm3WSy9C2wFXcKVhWqha0hddTeUEYsj/GjGHG9bYb1U/uHSJY2g+4O:CcyVShWqxdltDsAGm9iBagLO
- TLSH T121C5333D9E208E6DD804277F8FB567015B9FCA61A89F05B10FB3146F9F202D21B798A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/OverlayRenderer.dll
- SHA256 0b4892f00088e0dd25c59af98aea3fe3045d2cdad031c4833c5bd701dc6bbd51
- MD5 d01c5082411ba8ce1617550e253cc34c
- SHA1 03df0c447d27c2c1340a2b324e3de9c62d7aa5d8
- SHA512 2eb6a04761bbadcff61dbda6e7924d1b7e94e860915771d8d7ae651df6e12ab26d0a3ac42f390a76ddf66190ba28258148924e04641c2e437ed793754a7327d4
- SSDEEP 49152:Eff6m47qw0yaZDBWth3xylsvyAmFVkivp6ftUMMw46GNzz09usKhTdlvPgKQ:Eff6m47taZGnK9B6iMMw4RzzautgKQ
- TLSH T120C533245AD23D4DCE1858B53FCB75D967439BE03B9101B88B72E472BF621188E39A8D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ParticleEngine.dll
- SHA256 a6c6bb9e7cab423ab7e133bb637fa239456d1306104e08dc7b51d51a83e079f5
- MD5 d1233cf6d7881972dc38c267fc07e16f
- SHA1 48920d2ec08d8720318dba5fb4941761ded97ac8
- SHA512 94909e3792f58ed7cb08b7388a8782751bdfe7b09735c8f718dd19014d69f4aa9e00316a9728b8f9302a4a40a99f677374b313366b5f2bbc2903aaaca27da459
- SSDEEP 49152:VRP4BmpYwAq4ea3hzCd2BXCoUjiePWCEnFKdy110cfQhEpzugm5XRGqd8SaV46l6:f3pYw0CdsTUjieO7nay/rfQ6IuBlQ
- TLSH T13AD533DCB89D9829DE45EE73C4C29C5587AE81013C0C973B4BDF4E2E9A45873B2296F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/PatchManager.dll
- SHA256 cfedd9a4f36d1b68d8306fa7c042b1947df09b83a3b95c22f8bd9a54712713fc
- MD5 8d492e3ae0f6e7dd5d9b768ec5745e85
- SHA1 06154d37cd986b72576408597f5c044462a78437
- SHA512 fef14e4e6d2c91a4ba6e553d71cadc41635fb70bcbcf71ba04d5327ef6522a693628315d07222eada9ada9bc377b331b5ead85099c352049112bbf571da357b5
- SSDEEP 49152:xoloeIb951vNcdC+AQrxMgiJN96fJndNFPc9F4lw8k0M57a/9i:xCu9r2CGrygM9MJhPLErFN
- TLSH T1BFA533EBBE942F90EE9B7CB59C98C650F146033762CFCE95EE41B8191A603D446F7908
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/PhysicsModule.dll
- SHA256 7d3d2bbdc38bd4a5d75579577f5b53092ef6708241e82124d9c4fd9890348e66
- MD5 5424d48b38ea3f0d30bbf6550c74cce1
- SHA1 a29cfba57a6a50d5699df1ccc7f29ca7470db2ef
- SHA512 cae374bf6bdc2955c043524db011042d7aaa84d61a57b6b0adccaee65d87411c7f78df6918c2f4ffe5b7d768109d8e6630b38c11fdc8c593fa825fb382d03ae3
- SSDEEP 49152:pPBvlQnyJuqvqBvYp8Px0ZZ7sMFRILwtSOsI6xJ1kaq28:pNlQnyjvqBA8pqFsMFR2oSKgqr
- TLSH T164C5331D7A6DA3A0C107E4FF69EAF3902B155846D1174F6971C73039E372E0852BB8AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/PluginHost.dll
- SHA256 c68b2e1b900acde6d8a2d899c03a1ffb587d39826569f7f92f12a92702930549
- MD5 1bab1882d9095ba1d8832853fd66f899
- SHA1 d4b8e3c4914701aa6a3e3af44e24cc8c5f122839
- SHA512 9c8e4339b6651ae82eac7a0aeb97e13ee9e98cd8318ae9c1886495d37586f3dec387f07818877538ee10221cf96a6229f44c90414d2e7b207feb5ada58db1388
- SSDEEP 49152:HbpOltgJIKSxTJb7/76+t63kEbcmys2oYTDVSSK2xX2cpLM3:HlObrKgbi+SJFATDVSSKy5pY
- TLSH T197C53356FF6AC8C2F732543BC5910E16F6C21497AEE7970772B22428D72CA425EC3B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ProfilerCore.dll
- SHA256 6ac4a50f869e1d94e11382a7885de1f8e3f8f5e84832a3927842fc7ad2a0b198
- MD5 19de1e3dbd326b8b74bd7f1279ea5f90
- SHA1 b783e8dc558b1fd5085134480522242942e5e242
- SHA512 99dc35beb2273c50e81d39459102ba7d42f52b95ec3739695fb4124eb1bc5006496c08cefdbbf07e3930e057b4e2ddb093e484e4500dcf193edfbc9ae385e18e
- SSDEEP 49152:irN19L5KghOeGlYpwrif5jLtCLlnzUCg9oNCcZlHB4yCJuLvNuOOS37+wCfGimW+:I3ykOeGKUixjZCT7EcLHB4yCsVRTL+KB
- TLSH T1D5D53387D4BB5BE5C3AECE3CCBA0A48BDB3C6057E6C323DD6D2C5F9A11099935226141
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/RenderEngine.dll
- SHA256 1ccac898c3216bf716445a3d515fe48ff69658c8f3fa07e2d8b2d6f1256edd91
- MD5 203a61d8c9fc033d741afec79a1b6cca
- SHA1 913925c999d4ada7afe1ed51315e49bada7bdff7
- SHA512 bb672b459905622121c3a3224b5fa7da943857216cacd1875119cd4a7ed9b4516aeacbc5587fd8df057bc52dffb81b245bda4f6262df283a5e0881a39c646f71
- SSDEEP 49152:4892wV3QrW9ZKa6tfb9U6lim8Iwp0cPm+uIF2LAkyj/va:l1WrI+9U6lD3w5ubKa
- TLSH T1F4A533B9381BA4A0DB045AF2E065B9298BBE715DEF82520376771F440B7DB7016DBBC0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ResourceLoader.dll
- SHA256 62113a48782b468ead46246b3bc2a73f34759dc7158c25e3787088d80673b71c
- MD5 fba19b1193c924d0c50d474df98bd1f8
- SHA1 7b892aa72becf8aa6c38b7b0b4fd4f1bc67ca990
- SHA512 ec24f31a8e6dc1da359d208835f659fe6227a3381783a24086513801a76522acff10eaefe9e4f11eb8e431d851c270eabcdc359b39d13f411c4bba64c1bc39e9
- SSDEEP 49152:Q9rK0DZ5JeWx+8GN3qKMA1DGmmd2mJTTlx+a41BSV7E5aOZLCOGWCNSzfdLv0gVS:iXDbJN+13RGrdLGTBUUZ2OGW/Nv34
- TLSH T183D533823DBA4EACFA3899FC2464BD009FF566A8C5DE3C1175F18CB5A84D237B1C1964
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ScriptEngine.dll
- SHA256 5d4d8dd7ba34addacdfc74ae3e50877f6b6a6dc65bf4d4eaa3961d73d1ec493f
- MD5 64b4c3dfb5bfc643841982fe3b2cd1ec
- SHA1 1dc1abd40c5a50007dec0c8b01b3f13028a2f818
- SHA512 f782176f36e883eb618c7e2e9ad32021059f97001febd72cd93f2bbd978b850efb9d71773e61715fb9ec99ba2527c9793961b2b829d8dd492c56588b1a66a525
- SSDEEP 49152:GKuVR/gKXzVGjoOqQ8gwpj8ZZ75ARBZjx5Pl648mbHDTRChzV9YVCUPcv:Bu0e4cOqQ0pj8srNVlv7QVOnm
- TLSH T1BED53355ECB01E26D70BA771D3656B3CCDF1BC18FAC058B99AC2A71B028605B10E75AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/SecurityModule.dll
- SHA256 3030e8096111e3887b6334c6eb22d162d2832b494bd68a537853821a02dd096e
- MD5 8987da418a6f889c1bc96dcaa6bfb60d
- SHA1 3da3078106ce700efca193735e0d9c359f73b507
- SHA512 9d56d84505df7284d561b1e92a2197fffe7a88618caeae44b7e08c0ffc039d661a18fb80e1818b74a8682b42f4915e4b4849149bc89c1617bc0eb92f0f78d421
- SSDEEP 49152:mhn7W39pGLzIaPInt3HTt0oVhR52CHQTvssiB79DZGi1A6IBCaDI5xSGCES6TEKo:mhnCyLzIlTt0oVhjJH3siBhDZZIcwCSf
- TLSH T133E533F768453C17C947C63537BC7909675B2CEA3742B023478EAD8EF7281914A28D9E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
3.0MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ShaderCompiler.dll
- SHA256 e8942ec04548aa4c7de5f10a626855e44fe9317654d50d011c5c0d8155d612e0
- MD5 22ebd266fba941a4b335113ea04653d7
- SHA1 9bb0ba2a5b71760f616a332bec62e1d9345cef4e
- SHA512 446b0c46a9f3461f9ef739fa3fa8e467170d98f0482116d8884df588abb50b493970667fe30e4deb1e75c26ebedf0797ea0a418dd08799ea86f2a375cfa39cc9
- SSDEEP 49152:Whj/W5FF//tTRLQyCfCel389ozS28TO0zO1w52JppiCrRUiFQw9:Whq5nnLT+CksozS28TO0zqptRvF9
- TLSH T12FC533C9445E2C7BF1241E3D0E45D17F8F5819394BEB2A6BA954203CAFE80E7EBB1056
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/SystemProxy.dll
- SHA256 7b6add34d865fb6df0495b76134e601463bc783f34ad4710375475a9306638bf
- MD5 1af41ac1ed40a7eaf9942d27e4b9af6e
- SHA1 eedfd52bc8b340e8424f3d44fcf3cd2201524f8f
- SHA512 57a196e5bbc6caf3cc0c4170762f2c18cb9d5971542b47b114e691e50cdd6465befe57962b00fe36757b0ee5b72725ba8c89be341cb0016220bb65ee7f9d5a93
- SSDEEP 49152:6l5yj7dh9pEQiCvINmnKvdU5VJMdnn8mVjaz/ZN6fOgRTOfuDN6BCPCGlF8Zo7xv:6yhhfa9E2KzMdnnlEhQbRT16OClu1v
- TLSH T125F533B6A32B5B10D8307D3AC645B81DE61CA41A23EB9F2A5F41138D7D34974E047ABF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/TextureManager.dll
- SHA256 53d3a68a7797c1fddaebcc21cb8d08ef9e76c754ec64e4eabb10639ce0536d99
- MD5 284e26c2fa57e8ce078a833a261ef314
- SHA1 4dccb35811ebb4d280bea03256f74c1e2b6ef213
- SHA512 eac0e2b79876b886a44cdbe2349f0650078fbcab223f99b037eb07349354726829649f1c57f8c17f303bf1f395235f5762593a99b04e6ca289c7694cc00e6cf0
- SSDEEP 98304:fDmtXJO0jDVFhKLSFDuAVWL4McaKubQjUQxnBns9:oA0jDhGOLqZ9qxnBn+
- TLSH T114E5332108E641C6D9AF9BF73CEB42E1E5282047A0E4D95AE43E359F8CC5B16C1ADCD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
3.1MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/ThreadScheduler.dll
- SHA256 9ae7170625afd474f7460c42e8ba78e3d6fc52578ea102053518af5516af14fd
- MD5 f715cb36289e819b8b4d220373247a04
- SHA1 f3e251bf573f0ec19804390d958d569ab015e01a
- SHA512 4273392bcb2be03853682535f5bd8b89d75dc9982c16a0037621754c2763048acccf0b72938315ade5696ce7b0188dda349ddd3ce4826c6534ace14aaf9e2c16
- SSDEEP 49152:ZauQN275dQ+Uu3UzjVObp3Nkugl0OOemmED3PQBTARTSx:ZauQNbOUMd3R+vEDIBc1w
- TLSH T1AED53312743DE475CD32EABE60722704C79996C933EC9F39668D84B24FF9709AA631C4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/UIFramework.dll
- SHA256 4544ed1089dcd1779d5bd708146fcfb9b1d1d1a5f28c3dd1c059b27cfba4e963
- MD5 37e891401dd8c1d466ba0ad21c2df03f
- SHA1 0da941ab56402a4446e5afed28b154a14921ad3d
- SHA512 61e4df7c523700d77e89d3527db5b6a978878f217b5c3085cbe6a608c543ff0b972d57cc85caa81ebbedf493affdc7383873b37c754f93a4a2aa20c25cb16107
- SSDEEP 49152:iFpKvK7I4K8/G3i/f5c0NDg7BWCs4YkE/+BvL3ftCaeSxXlXWrWKBRQ2qa:iFUK7Ivy2K5f9g7BrYkeGjftJlRWrBSa
- TLSH T146B533651CFEACE9DF0404B8F1BD80FF33CF662EF1A18A41552B9D9396D80E0676494A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/UpdateService.dll
- SHA256 ab1957a11d32c0599fd37f8842b43914be7f1d8c730ddefb131cf5b911ad0772
- MD5 c18609528c0349f33216cd7f7e480c9c
- SHA1 ace184ee3fdb4f8bce7341de07194434e60c9986
- SHA512 f403dc540ec1086932e6180173251db8b50d92abff017e2e0930f4573c7b71365a8a22cdd2cb3a891e07752b16cd1bdc764f233c28371af8ac8704b543958c19
- SSDEEP 49152:JDcTgKefu6vzptsWciiUbwXkFvNdnppvchXuRz72v1urzXgm0CvMcYB8t1j:R3K61NtsduwsfvkqO1urzXLzMb8tl
- TLSH T18BD533667D40E877F04A2316B78F1549E0AA5633ADF8D6471EDEB18FF02103ABD588D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/dll/VideoDecoder.dll
- SHA256 fa4e465ba3da3dbffbc40df1db74e3ba0ea208f3000f383f64004a68c243f552
- MD5 c948afd2cbdc9cb5fae519170834dc95
- SHA1 4d6ce839c07e36928dc8c6e99582922517c8345f
- SHA512 f00b55495319ec258115ad615d6301416f1095733c5158999d38d9d7649ebd9ecd3f73948306690e3a715b685c7cda03319a6f937f84688a0f392a1d064d3438
- SSDEEP 49152:zIGUQYCOZQPw84AAOYJd8i9KAEy6K/ICNQrhZhDa3BAFQUuhSEMnHXXom1:zIGUJCOZQPw84A5YJd39KTy6KAWQVfDp
- TLSH T174C5338CC991DF3BEE077774D4A3C6426DC2E2459BD4242FAE85F84E68D18A4B01E27D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
LastTests/LastTests/gup.xml
- SHA256 92717951aae89e960b142cef3d273f104051896a3d527a78ca4a88c22b5216a5
- MD5 abde55a0b1cb4a904e622c02f559dcd1
- SHA1 1662f8445a000bbf7c61c40e39266658f169bf13
- SHA512 8fe75fb468f87be1153a6a0d70c0583a355f355bfe988027c88d154b500e97f2c5241d9557ebb981067205e2f23ad07b6a49c669cd3e94eaa728201173b235a0
- SSDEEP 96:rrxgFDl+72Y+WbPRkrm1+U4YeJS2kG6QrABYUCJ8PYPwJrkFI:rVgFhunzbpka1+UNQo2sBCPwJrkFI
- TLSH T19491944B57DCC3770C3112A178AE9191D33409F932B5500138A8809BA36ADA6BBBF7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
LastTests/LastTests/libcurl.dll
- IMPHASH 3aab90d9dd9b56e4ac2469bc25e5fa57
- SHA256 9e5c742dc37091b66f65ae6df893ce163fc1e138caf79c5aa47ad644a5f6fdcf
- MD5 a85b06987abfb058064786ed65625a8f
- SHA1 c57e0b1edf4396ac7148aab3bd0654930787e21e
- SHA512 65383c0de9e226cdae3740aa966621f112b1f768381272d4aa0d524246e19cea51e29fdd54b6c1ac5387d104de8244cc8e711aa6cbac961023f661682babad63
- SSDEEP 24576:6Xo4iUtkiWN2jOQeDb+QF056DUWZxt4/WQt/3JtM:wWNoze5wuIv/D
- TLSH T1AC45F1DD58966FE5F092477BDC19415397A83440A43CD492AABEFFE07C308CA49B22DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
92800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileW
CreateProcessA
CreateProcessW
ExitProcess
GetProcAddress
GetTempPathW
GetTickCount
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile
lstrcatA
lstrcatW
lstrcpyW
lstrlenW
curl_easy_cleanup
curl_easy_duphandle
curl_easy_getinfo
curl_easy_init
curl_easy_option_by_id
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_formfree
curl_free
curl_global_cleanup
curl_global_init
curl_mime_free
curl_mime_init
curl_multi_add_handle
curl_multi_cleanup
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_slist_append
curl_slist_free_all
curl_url_dup
curl_version
curl_version_info
Name
.49292f
Size
380KB
Virtual Size
380KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.3f2938
Size
807KB
Virtual Size
807KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.aa3dc6
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.42de56
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ