4b16242256c113bbc3fc891d171183ed_1788889872701-htf_soft.rar
- SHA256 b7e2c8d8df0cc98d485a37a30e655ad4c90e026de9ac3a1b3b88b584ccf6e314
Static task
static1
1 signatures
General
- Target 4b16242256c113bbc3fc891d171183ed_1788889872701-htf_soft.rar
- Size 3.4MB
- Sample261011-xjempafa96
- SHA256 b7e2c8d8df0cc98d485a37a30e655ad4c90e026de9ac3a1b3b88b584ccf6e314
- MD5 b61348010e922b34814ac58c415c9d2e
- SHA1 5530b33f06d11786ca5805faa91a38fb87959128
- SHA512 280baf3c2ac2084e18b76e6fa9cdada2036d85d99bd2d9e864010138b2578ad5a961940eb5ba6f0bd80dc29db091f80164949c3e678a30a09601247ff8a1de16
- SSDEEP 98304:LK/u947CXL6NBLOBYb+C2AeSqMReO3Cf2r+:LyhgeN8BivqSqMRIw+
- TLSH T182F53324779FDABDEE1521C6B28E7A105DBAC41FFF155B3E347AB442F9092C124024AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 29 IoCs
Checks for missing Authenticode signature.
resource unpack001/htf soft/HowToFishCheats.exe unpack001/htf soft/payload/BepInEx/core/0Harmony.dll unpack001/htf soft/payload/BepInEx/core/0Harmony20.dll unpack001/htf soft/payload/BepInEx/core/BepInEx.Harmony.dll unpack001/htf soft/payload/BepInEx/core/BepInEx.Preloader.dll unpack001/htf soft/payload/BepInEx/core/BepInEx.dll unpack001/htf soft/payload/BepInEx/core/HarmonyXInterop.dll unpack001/htf soft/payload/BepInEx/core/Mono.Cecil.Mdb.dll unpack001/htf soft/payload/BepInEx/core/Mono.Cecil.Pdb.dll unpack001/htf soft/payload/BepInEx/core/Mono.Cecil.Rocks.dll unpack001/htf soft/payload/BepInEx/core/Mono.Cecil.dll unpack001/htf soft/payload/BepInEx/core/MonoMod.RuntimeDetour.dll unpack001/htf soft/payload/BepInEx/core/MonoMod.Utils.dll unpack001/htf soft/payload/BepInEx/plugins/HowToFishCheats.dll unpack001/htf soft/payload/payload/BepInEx/core/0Harmony.dll unpack001/htf soft/payload/payload/BepInEx/core/0Harmony20.dll unpack001/htf soft/payload/payload/BepInEx/core/BepInEx.Harmony.dll unpack001/htf soft/payload/payload/BepInEx/core/BepInEx.Preloader.dll unpack001/htf soft/payload/payload/BepInEx/core/BepInEx.dll unpack001/htf soft/payload/payload/BepInEx/core/HarmonyXInterop.dll unpack001/htf soft/payload/payload/BepInEx/core/Mono.Cecil.Mdb.dll unpack001/htf soft/payload/payload/BepInEx/core/Mono.Cecil.Pdb.dll unpack001/htf soft/payload/payload/BepInEx/core/Mono.Cecil.Rocks.dll unpack001/htf soft/payload/payload/BepInEx/core/Mono.Cecil.dll unpack001/htf soft/payload/payload/BepInEx/core/MonoMod.RuntimeDetour.dll unpack001/htf soft/payload/payload/BepInEx/core/MonoMod.Utils.dll unpack001/htf soft/payload/payload/BepInEx/plugins/HowToFishCheats.dll unpack001/htf soft/payload/payload/winhttp.dll unpack001/htf soft/payload/winhttp.dll
File Explorer
-
4b16242256c113bbc3fc891d171183ed_1788889872701-htf_soft.rar.rar 3.4MB
-
htf soft/HowToFishCheats.exe.exe 3.5MB
-
htf soft/payload/.doorstop_version5B
-
htf soft/payload/BepInEx/cache/chainloader_typeloader.dat204B
-
htf soft/payload/BepInEx/cache/harmony_interop_cache.dat101B
-
htf soft/payload/BepInEx/config/BepInEx.cfg5KB
-
htf soft/payload/BepInEx/core/0Harmony.dll.dll 200KB
-
htf soft/payload/BepInEx/core/0Harmony.xml.js .xml 260KB
-
htf soft/payload/BepInEx/core/0Harmony20.dll.dll 110KB
-
htf soft/payload/BepInEx/core/BepInEx.Harmony.dll.dll 6KB
-
htf soft/payload/BepInEx/core/BepInEx.Harmony.xml.xml 3KB
-
htf soft/payload/BepInEx/core/BepInEx.Preloader.dll.dll 42KB
-
htf soft/payload/BepInEx/core/BepInEx.Preloader.xml.xml 7KB
-
htf soft/payload/BepInEx/core/BepInEx.dll.dll 125KB
-
htf soft/payload/BepInEx/core/BepInEx.xml.xml 87KB
-
htf soft/payload/BepInEx/core/HarmonyXInterop.dll.dll 23KB
-
htf soft/payload/BepInEx/core/Mono.Cecil.Mdb.dll.dll 42KB
-
htf soft/payload/BepInEx/core/Mono.Cecil.Pdb.dll.dll 84KB
-
htf soft/payload/BepInEx/core/Mono.Cecil.Rocks.dll.dll 27KB
-
htf soft/payload/BepInEx/core/Mono.Cecil.dll.dll 331KB
-
htf soft/payload/BepInEx/core/MonoMod.RuntimeDetour.dll.dll 103KB
-
htf soft/payload/BepInEx/core/MonoMod.RuntimeDetour.xml.xml 9KB
-
htf soft/payload/BepInEx/core/MonoMod.Utils.dll.dll 183KB
-
htf soft/payload/BepInEx/core/MonoMod.Utils.xml.xml 77KB
-
htf soft/payload/BepInEx/plugins/HowToFishCheats.dll.dll 24KB
-
htf soft/payload/doorstop_config.ini1KB
-
htf soft/payload/payload/.doorstop_version5B
-
htf soft/payload/payload/BepInEx/cache/chainloader_typeloader.dat204B
-
htf soft/payload/payload/BepInEx/cache/harmony_interop_cache.dat101B
-
htf soft/payload/payload/BepInEx/config/BepInEx.cfg5KB
-
htf soft/payload/payload/BepInEx/core/0Harmony.dll.dll 200KB
-
htf soft/payload/payload/BepInEx/core/0Harmony.xml.js .xml 260KB
-
htf soft/payload/payload/BepInEx/core/0Harmony20.dll.dll 110KB
-
htf soft/payload/payload/BepInEx/core/BepInEx.Harmony.dll.dll 6KB
-
htf soft/payload/payload/BepInEx/core/BepInEx.Harmony.xml.xml 3KB
-
htf soft/payload/payload/BepInEx/core/BepInEx.Preloader.dll.dll 42KB
-
htf soft/payload/payload/BepInEx/core/BepInEx.Preloader.xml.xml 7KB
-
htf soft/payload/payload/BepInEx/core/BepInEx.dll.dll 125KB
-
htf soft/payload/payload/BepInEx/core/BepInEx.xml.xml 87KB
-
htf soft/payload/payload/BepInEx/core/HarmonyXInterop.dll.dll 23KB
-
htf soft/payload/payload/BepInEx/core/Mono.Cecil.Mdb.dll.dll 42KB
-
htf soft/payload/payload/BepInEx/core/Mono.Cecil.Pdb.dll.dll 84KB
-
htf soft/payload/payload/BepInEx/core/Mono.Cecil.Rocks.dll.dll 27KB
-
htf soft/payload/payload/BepInEx/core/Mono.Cecil.dll.dll 331KB
-
htf soft/payload/payload/BepInEx/core/MonoMod.RuntimeDetour.dll.dll 103KB
-
htf soft/payload/payload/BepInEx/core/MonoMod.RuntimeDetour.xml.xml 9KB
-
htf soft/payload/payload/BepInEx/core/MonoMod.Utils.dll.dll 183KB
-
htf soft/payload/payload/BepInEx/core/MonoMod.Utils.xml.xml 77KB
-
htf soft/payload/payload/BepInEx/plugins/HowToFishCheats.dll.dll 17KB
-
htf soft/payload/payload/doorstop_config.ini1KB
-
htf soft/payload/payload/winhttp.dll.dll 25KB
-
htf soft/payload/winhttp.dll.dll 25KB
htf soft/HowToFishCheats.exe
- IMPHASH d94bdad4b154d455e6455131617d488b
- SHA256 93cbf40d8a38031969495c956e65544a80af49942ee002205be6616c5732304b
- MD5 0aecb0ea2f95f139de738d9c2c7a35df
- SHA1 b89b70f1b61d0a9634c8a377e83d21df045c66cf
- SHA512 681a11c310deca89a2129101daca05a3aece6dcde9fd554013c5d8c96bba2f487820fa114ed62e7ae4f6bd87ad17ae0daab53a85c4cbf3ff18e50f04e2c30640
- SSDEEP 49152:XBeVRc0eK9yHd2EjOz6c5c0IVYZlNvRxukjqCtqWPhkvClRtKCcWc+NpCeDALRU0:XBiWZH0EVQxuk+kq+hkKlR4CcFKDmed
- TLSH T17506E007F366429CD527A478C661C35BF73138402B2593CB76E82E64AF976E05EBA3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
908116
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\user\Desktop\imgui arcane 2\thirdparty\imgui\examples\example_win32_directx11\Release\example_win32_directx11.pdb
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
kernel32
FreeLibrary
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleFileNameW
CreateMutexW
ReleaseMutex
Sleep
GetLastError
GetModuleHandleW
QueryPerformanceFrequency
GetFileSizeEx
ReadFile
HeapAlloc
HeapFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
MultiByteToWideChar
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
AreFileApisANSI
DeviceIoControl
CopyFileW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
FormatMessageA
GetLocaleInfoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
GetLocaleInfoA
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileW
WriteFile
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetNamedPipeHandleState
CreateFileA
IsDebuggerPresent
FindNextFileW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
user32
SetClipboardData
GetClipboardData
ClientToScreen
EmptyClipboard
TrackMouseEvent
CloseClipboard
OpenClipboard
UpdateWindow
PostQuitMessage
TranslateMessage
AdjustWindowRect
GetKeyboardLayout
GetForegroundWindow
GetCapture
LoadCursorW
SetCapture
ShowWindow
ReleaseDC
GetDC
GetAsyncKeyState
GetCursorPos
SetCursorPos
GetMessageExtraInfo
SetCursor
ReleaseCapture
IsWindowUnicode
GetClientRect
GetKeyState
DispatchMessageW
PeekMessageW
RegisterClassExW
DefWindowProcW
DestroyWindow
MessageBoxW
CreateWindowExW
UnregisterClassW
ScreenToClient
gdi32
GetPixel
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
msvcp140
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Id_cnt@id@locale@std@@0HA
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
ImmSetCandidateWindow
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
__std_exception_destroy
__std_exception_copy
__std_terminate
_CxxThrowException
__intrinsic_setjmp
__current_exception_context
__current_exception
__C_specific_handler
memcmp
memchr
memmove
memcpy
strstr
longjmp
strrchr
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
_wassert
_invoke_watson
_configure_narrow_argv
_crt_atexit
_register_onexit_function
_initialize_onexit_table
terminate
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_get_initial_narrow_environment
_exit
exit
_initterm_e
_initterm
abort
api-ms-win-crt-math-l1-1-0
log
fmodf
cosf
pow
roundf
acosf
sinf
__setusermatherr
powf
ceilf
logf
sqrtf
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vsscanf
__p__commode
_set_fmode
fgetpos
_get_stream_buffer_pointers
_fseeki64
fsetpos
ungetc
setvbuf
__stdio_common_vsprintf_s
fgetc
fputc
fread
_wfopen
fwrite
ftell
__acrt_iob_func
__stdio_common_vfprintf
fseek
fclose
fflush
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
strcmp
api-ms-win-crt-convert-l1-1-0
atof
strtol
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
_set_new_mode
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
Name
.text
Size
896KB
Virtual Size
896KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
270KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=36, id=261, version=35207,
count=6, id=257, version=35207,
count=26, id=260, version=31107,
count=16, id=257, version=33145,
count=7, id=156, version=21202,
count=321, id=1, productName=Unmarked objects,
count=29, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
htf soft/payload/.doorstop_version
- SHA256 75a2f501000d4fe28f74bc7ee66dae5581959d28b6c44f0c1b0c05cd5ba261e6
- MD5 7c038681746a729e2fff9520a575e78c
- SHA1 24081282f3a9a62c341308c388d8ed137057665d
- SHA512 2beb8491265f6e4b9736eef7cdfeff5e3a31ca320d00c7b95cdf25afeb04c42343800e8c74c787ef4ccf561020ff3a5d2c76949459ecf69ff5f3d7567460975a
- MD5 SHA1 SHA512
htf soft/payload/BepInEx/cache/chainloader_typeloader.dat
- SHA256 b892b6b86ecd6393e817f4b50c45b82af0e376e41040342b4815331527720b4e
- MD5 5fbd7206d1d4dfc31be73c1e758241f5
- SHA1 b39f88eebd37662ec0deb6feb59433b93475058a
- SHA512 2cf3e0adc32984c9fe1563b3c9eb9b3dd9c03a497fcd63e64717f0a61894308f1d60e8f428174fe1c5f2988a6e45cb467a264cb361a1bc0d1bb259a6a717720e
- TLSH T197D0227A30A3440CD0A025B0330509FF92971FEF20030A408F20890E0923778CE21208
- MD5 SHA1 SHA512 TLSH
htf soft/payload/BepInEx/cache/harmony_interop_cache.dat
- SHA256 973f0ad4173ccd2256e97c1987775b35a6bd24988b9bcee645227ed2de9fab70
- MD5 762f54bb0ab6635de6218805c5c9770d
- SHA1 5efa8e8584c815691ef20a16ed596defad7fbfd7
- SHA512 95784c3d7fed896b3fdf42600f29e23df560a8fdd22125dd87d0a82548bca5f2ad50ddc9d897d0af8c1d7d7f7f70682522b0f8f51ea20b6e10f4e70ee9e27908
- TLSH T1E4B012B630B5582D01A03481B30521FF12E32FFF20070B880F25D90F15377B49D1100C
- MD5 SHA1 SHA512 TLSH
htf soft/payload/BepInEx/config/BepInEx.cfg
- SHA256 8443d78f427027c263511cf66eec454ddf96dee397d042b4f8e00673d3653719
- MD5 6fbb79abb157e750f22ca08a527f5e43
- SHA1 55334443c0634bfaedbe4d3b33c825a26245a3ba
- SHA512 0d99c0603e99b90295a0ce521bbc0c08763689df6928d3ec11c1a8801fed33ee3cbac90f70053cffd7d6adb7c9bbf195e7f7a7a7cd8f88747b8a51471caabe21
- SSDEEP 48:5XUersx5gHtjYjnnV7xdT9xD+KFNel2ieevnrUn3V7apmvY7rUn3V7apuenY2z09:5XjESNjYjnxTLDtnUdxU36pU366GCnOU
- TLSH T1BEB122653F8EF23F0F30409A990BF1D59618890CC36379B8FD69511D5650BEA8372BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/BepInEx/core/0Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a21cc03424fc82c3dd1346905d16494536b9595ae4162228d99fb7c285c1031
- MD5 4705aa1c7a9795d2787722bc8c419ae8
- SHA1 aa1552cf0311f27ca02d34df0558a718d16fb660
- SHA512 2f2bb761d21d7288c2b373958a5eab228797d1a348147f8ff0ea603611c6d79e938a4ccf45f23ffc82500731a68bce8feafcd26a5264d79fd5d7435e6ba69b93
- SSDEEP 3072:VQsxAaNWfZKtIZWTr7MDiIVXQ9PsMIuvq14e3Lvvv9L2yZKDVkNCuwMTfyQV:GBa+UWi2XCH7s3RqyZ5NCuTeQ
- TLSH T124145B6267FD0616D7BF6BB4F47050040671FC17E9AAEB9D6C8464FA0C12780EA513BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
210030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
197KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/0Harmony.xml
- SHA256 d1f02fc3ada3a13da307de421225bfe56ebe24064370980979391c4be021672f
- MD5 e6363c10ec87b6ffbe44ac84036ee93d
- SHA1 d7083c94cb5cd4753cffa6e0510f4f70ed29498f
- SHA512 b50eee9602fe0b92a3a36ee33be51ef46d889b106b31d102748be3f9d0de3e457534a1f5407b7045cae937e1739004a33a07ac7b6298f7402994f2ec77fd972b
- SSDEEP 3072:iWFaW5MGApgStNsHGAxvum4ARo5OvdmrqvKUtwr6D:iWFaW3KgSvsHXxvum4ARo5Ovdmrqv84
- TLSH T1954400A87AD5AA124C7603955D5DF8C8FE268C33211E1C5238CD3D635F7BEE282BB506
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/BepInEx/core/0Harmony20.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c755a5ab2712915a32f9a850d580a8c1b70ff1653bc76600f2767aa8ffccc663
- MD5 419d13905829c00d246afed23ef2dc8c
- SHA1 4c42a69a0d91f4bfe13d7c2e3cd15224fd12485c
- SHA512 94e1b7a8ffb476a1c0b60396749727295097e625f5e02729b12ffb79704e854d7bf9d5bea34ecb0d54fd4aca1dabad6b5384acbca50016474b4f17763186171b
- SSDEEP 3072:nm7LZRRGrHnPLiVOvvFeKKtl2kI1S35ll0CF:kRRq2MFmOE3
- TLSH T1C8B34A1573EC4B52C6EF6BB8E474221107B1F853E02AFB899D88B5F91C42F9256113BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
118666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\submodules\BepInEx.Harmony\HarmonyX2Interop\obj\Release\net35\0Harmony20.pdb
mscoree
_CorDllMain
Name
.text
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/BepInEx.Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 00c8f2ac48593e4d45ce4eb26ce4e68b18113c5c489b38b8bf0850f65830d601
- MD5 3c682a76fcdec7e8bbcf2aead019c6df
- SHA1 4e51738a3576888393916eb7e3ff62cd61bb32ff
- SHA512 fd6dc04fe3f0bd24e87d2ae0baa7ea1a3b0888d72f6707db626cf6c6dbb21d02abea9a59325919a0a2099d37aee0328051ece2fcf0217f4b6e4e5521ee076191
- SSDEEP 96:zn31bAyCQCzoHwvxQYbLkmv3oqnSjTkury:FAyi2YbLkozSf5ry
- TLSH T190D1A520B3A54333CD7B5B71BDABA7804934B940585B2A7E5A45F2026E16FE80D32F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\submodules\BepInEx.Harmony\BepInEx.Harmony\obj\Release\net35\BepInEx.Harmony.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/BepInEx.Harmony.xml
- SHA256 a04fedf08f7c81f5d01aba6f2840a7ffce50b79bbd24587d8dbe69ab73971d29
- MD5 a9ed47b1f141a3c4e36fa02a47e99b5a
- SHA1 8c312db6f4730cfd0a94065c49407de6a98d0427
- SHA512 0a2265559cacb02c603d9018cee487a12d1623c29af5b0993333c98c0e47633d980c88d4893e8ece697229e3638309c7557b4a5181258d9fda70ef532adc0ba8
- TLSH T199812820BBC09E121C33035A6E6DFCC8EE250967311D1875368E3E175FBAAD256AF462
- MD5 SHA1 SHA512 TLSH
htf soft/payload/BepInEx/core/BepInEx.Preloader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 55d3895351a9d16b63b6f35f1c01b44ac650979e853d0bd3a442b92a082af64f
- MD5 e7071a7c35b02caa1e1408781e67c063
- SHA1 5ef53c80c1649630ad148e20e6944b9f4efe6ed7
- SHA512 90c6f3198aeef3f56c3f25df1d89dd26a678bb4d8d3ac584826781a879fbea6bc3be0d9e92674bfd7007bf62d82c672f08221f7b634c36b0c8e896851a96819e
- SSDEEP 768:haXyGuv4d0dvWPle+CJl16aYQMMGZIb0PoDb86c70jXE:hqIpfnJLNt4IoZVV
- TLSH T16613295037E94715F5FE2F397CB6A15406B2BA475932D74E0DC924AF0D32B904A20BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\BepInEx.Preloader\obj\Release\net35\BepInEx.Preloader.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/BepInEx.Preloader.xml
- SHA256 33275b2783b7b99495a02c098ee86d6a9a2783e884a5c9369021f20c94cf99e7
- MD5 56612b1d2f20f83a9dade348da1a7479
- SHA1 c203e4d7167676cb8574d21bc6296fe797c30d34
- SHA512 7a44fc5ebe7a859a503d550ea3b523e3f647d2eeb4ee84fbf0800a9a588b605196d5617409ec2200878d410070e15e7aa46bf589e1dbfe835e6478dd282e5402
- SSDEEP 48:7y5fFHr1i73hEZLzLH4SOtLzfd8TrRMug5dNztVOb5gHYYRRwocioGkrdR8+OiR5:udYKUtffo8xt2u99orYVCv
- TLSH T19AF1BAB475C0DD000C325146DEA9B8C8FE9A0EBB1446543A319D2E5F8F76EC2A56F871
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/BepInEx/core/BepInEx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8255b28902886085c578b9e427d3073c97002db85176d2090cdeda90ef14ce70
- MD5 dffb58ce5e000134d3c8e34f075e9508
- SHA1 351f5a98def807df816a359094d29ade067b7cc9
- SHA512 55d2a6fe14d59e22e6fd36f5c70464f60c94aacba260878a4c56c8701cbdcf9fed074e6deb5b312acb226d2701d062a8af42c7afbb9302077b1a2dd50f0a13a9
- SSDEEP 1536:vQ4G2XZrhaE8kV1Gggspns7T6gHuI/Ylmlm3dUtYNwBke5lm/SWtV5kk+e0+S68:vlLy81PpnsigOI/QLtUtbBke4tV52Tf
- TLSH T180C32A1523EC8B1EE6FF5A75BCB011150BB5FE07A423F79E4E4C64EE4922381A6117B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
134250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\BepInEx\obj\Release\net35\BepInEx.pdb
mscoree
_CorDllMain
Name
.text
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/BepInEx.xml
- SHA256 7ba2266061b9f8a9f146218a312bfdd0d7f2b53a99a7e66c957215c6b66ca0d7
- MD5 5e35db551a872508e23cd6b3859d230e
- SHA1 47ca2953115d3743a47ccf5a218d10430ca55649
- SHA512 79367e46a3de13056d9e7df2465ad8a9a84a0d58c66fe83107e0d5717a24c4a0a3ca1a4969b8000fd9a0a7f7ba79564d91521c63bb95e9d4e96cd1637d3bae11
- SSDEEP 768:FtwsqlOuKuIh8prbsY5RtecdC0PsAUwbMOmzgbpOCU:FisqlOuKpqsx/b/upOCU
- TLSH T10F939C25B7C4BE120C3302639D98B5C4FF350EA321199539B19D7E1B5F3A8D662BBA60
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/BepInEx/core/HarmonyXInterop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ce1342d3afa0334b59a3e38c0aed15e162b9abe9d46f95f34be44af47f3b493
- MD5 9b287159019adea74fff818124c49a57
- SHA1 a788c6199d1c7ccb6ce17f09996875911d26af46
- SHA512 1b2b1975e6982fff3438d37efff51c9776795c21fd2cf64991524cea007ccf88f6f44047c2e4d6f635b53ad4e856d237026ab22ec86d815ef51af51000ea51e5
- SSDEEP 384:UJpvQvdOrAh+fjh85KbSBohVj520KysQZ8DqY3DBqZU2CamZM2/DVejhUpGSIZTt:UDdrGwjmKbiohVlnsG8LuU2nEGSIZT8q
- TLSH T15CB22A46B7AC9F13C6FF477929E627020379EB63A406EB091DCC21E68C477A02B65357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\submodules\BepInEx.Harmony\HarmonyXInterop\obj\Release\net35\HarmonyXInterop.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5896d1898f616701fff18f3b2c71e6b844d2390ef9f41e1c5fccce8cb27c698e
- MD5 5a8b48fcf5e445095799e2c9149ff932
- SHA1 d4c514fbac7a30ddee7d0f597c3eae23a32ccedc
- SHA512 b99b02f296e5c817b8f984317e67c885099a3cc1198ee1808a0033b48ef60d27866719f0986d7f9a1ad547939bf6dc1886e858b9db7ba4375013b96db31957b6
- SSDEEP 768:XgjgMVEdS09ayuzjF/RwmanXdIiO1nqP+7y4CRIJZTMRTIzcRuYhpzt:XgUMn09ay6jF/WmcITIlITMRTtuYnt
- TLSH T12213F7112BFD8B1BC29D82FDA4E625061BB1912DA653E7878FC4F1E7BC13B8515021B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\net_3_5_Release\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 174db44a067f58561510af746f3caeb032037762c57a31c8d9ee32db25174984
- MD5 427e0464246b1e364c5a1a898db2ecf4
- SHA1 dc968ab6e3f9202b5550efb04c0e17c1df04d7d7
- SHA512 02ef1f9246e6117e6e958f019333720f07ff13feb5778b343e69d6e27e74e8ef1e6f122b486ce12b1e1eed546b17499ce906e8660babf281676bd8c6405f0dd6
- SSDEEP 1536:qguHKU52yKfwZyrw03xFjeylsP+ndKFi94lNSex6SU:qguHKU52rwZyrw03uZ+Um4lZ0SU
- TLSH T1FF836C39B7FC8972C1AD67B728AB4D0507F2D32ED243A75D49896EF8091776608322D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\net_3_5_Release\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54ac539fb5ddc8b44c0e9acd0fcb7324f89d1a072edf8ebc1b06dd691e3d3927
- MD5 36a8284f264bdb2cb3420f5d2b8b10e0
- SHA1 b842aa70ac6ff9cc3922189e971a62659299ef64
- SHA512 3979601ce74b72e1519d020832e57e21b5269bda955878ad52e2d162d6de47fde4793fee9a163551f52081bc2dff90e197f030f8cb83128d07b8571073451e0d
- SSDEEP 384:ZNXMT7GsmR2jm13u4NcU11qvJCyIXcMeDz8PmR1uhLoXeuLMBG9UphJAprjE+J1H:v0I2jo3uobeCyV8uRsdeeum1pg1w7H
- TLSH T1D2C2291527598F37C9EF85BE78E1720807F1CA561213CB066CCCA4E9E9877D01B12BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\net_3_5_Release\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ae470288fff4a402899c254d0a76cefef55877f5c54f96e83c797cc5bb6e2f6
- MD5 50ae8a86b701c83fce3a814ae8d79321
- SHA1 7c8b821367897baa1b78157d5cea0767f424bc40
- SHA512 04b57207d4fd9fa9f1a71323ea803f023b4b0f2f7a7070bf431806c7a7f41277969c0f5979ecf134812001b47f5d36ec8e8541982473287323e783b3ffe93121
- SSDEEP 6144:BTU5Xn0f1oUh8dK9S5K0UEece8plCTNgoF:9pJS5KEpWgo
- TLSH T128746B3537FC5A3BD68F83B6E066142A86F5D419628BEF4D5888F2FA4C437529D02273
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
343166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\net_3_5_Release\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
329KB
Virtual Size
329KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/MonoMod.RuntimeDetour.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40e49bb314391cd7bddc2644f8553eeba92c194b940836b103df16955c464e0c
- MD5 04e1988b3ea65408d4c4c29e34bcdeb1
- SHA1 9c599b3c60f92bd3663042dc0781be78e2ff0882
- SHA512 93fd6df274132691a47e00c84e69c84620de7967434c2164deeb7b605038233be7d29d0acb2dc6dce5bbb4b13225094a61f12458be094ac9b2ec27edc6a524a0
- SSDEEP 1536:IFSuZYhhgotA6e4GDSGVjkodWWD7Fjsgql8R6AvdbiwbeMvdo:IUuOhhgsAPDlV5agql8cAvd5do
- TLSH T132A36C2AA7EE4E15D6AD9778B477178043B4F8064897E3AA5CCC65FE0817BC11A203F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
111386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.RuntimeDetour\obj\Release\net35\MonoMod.RuntimeDetour.pdb
mscoree
_CorDllMain
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/MonoMod.RuntimeDetour.xml
- SHA256 54887808960d156550b37d602d08847607aa9e908d039f2765fb0b5e79394aa4
- MD5 7cdc7f0ea1d474acc68c86edfb4d9960
- SHA1 74c7991a02780205114bbf93dd84db0b4ce22407
- SHA512 9fb3ec507ece16f2ee03edc1806704eba517605d8e35e7622f868541cbce632aaa44c805c37ca47214d1bfb83571212222e85f9951181728c82318a2f0f644fc
- SSDEEP 96:r5a7UzDQzDuzDjswkGwqZrUB0YzDlzDltHU9BXHTWHsa+T1ViWzd86:rUb0wqMltHU9Bq6iKdL
- TLSH T142128E09BFC19ED0897241177A65F1C4EE60486B117B7825348D1F630FF68BA6BAFB50
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/BepInEx/core/MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d1495f147ac93c4f81f84538c1a326e8f8a6aefc78d6289d798f3ce1162c5e9
- MD5 96c7b1340105a3b86f3e8d19a844903a
- SHA1 bc258633aab1a2a1839dcc44eed944d865fd6038
- SHA512 36706eb655c995d81aa731c067912452a566ef5b752effdf212603aa0099e28de56588191acced82fb97aeae33df06f229d8cbed969c92cf9b8d439d04c223de
- SSDEEP 3072:ojh9XBmF8HjDrQlDSKNcTD3dAC49Uock8dey4DAYxRDA8:oXUF8HjDrohO3KCllAAYD
- TLSH T1F9043C2D5799CE19C5AED6B1F46822604333DC03D2EBD70F7CB8A1F8499A388D6056E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
193486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.Utils\obj\Release\net35\MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/BepInEx/core/MonoMod.Utils.xml
- SHA256 0577b362023a3432d6e8d7934c5eddc3e08fdbb19e191af083e341562c5ede38
- MD5 b41ea71f1b1bd676092243d75450a2c2
- SHA1 6b6e986262e4dc5d00f5d99534bf99f4416fc101
- SHA512 c626e74c7f7e7b97d7961e10ea93e457fca2fdec34bcad52a8d7ff55dee783b6e6c0f8ebd72777d0d4394dbff24a900a22ce39ff569fbd6c5c376392e66e7516
- SSDEEP 1536:SC/tsybXADqyMl5oKGTGqh9dYc2x2V8TaaJM05FUO67sOMF:SC/tsybXADqyMl5oKlqh9dYc2x2V8Ta2
- TLSH T1BC73BC287AD58E520C7202159DDAF5C8FE158C37610E7826388D3DA35FBADE291FB960
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/BepInEx/plugins/HowToFishCheats.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d59c2fef71419cef646b2323f4b1b6c8d5467c2668c517e157c3a1f82758121
- MD5 9f6c3005d4e02827f4c8a869e00a78b1
- SHA1 5916be7a0975cbb31b5d85f938182b8457016c9c
- SHA512 fa5435845d3c7f5be5ff88a5f7965a9bb94130242e5bdaf9d48b319a2d3b7b6db0f2a8abc61a482945b5352426c5abe9319848724fa3658af43afa46c6d77af3
- SSDEEP 384:2V/sz3Pq626w0BDSwR9YqSugzMD3j2hNn5KJhT8VwT6p7rW5mXrHLcC3vbp4ymL:WUz34UJQzMDz2hXmR8a2p7rW5MfWyq
- TLSH T134B24D2D3BF8D251D2FE2A7719B2104405B9F3075611EB8D2CC964EE192AB519311FF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\AppData\Local\Temp\claude\C--Users-user-Desktop-17877916\9ad7eccf-1295-4e1a-b0a8-e8b39b38df46\scratchpad\HowToFishCheats\obj\Release\HowToFishCheats.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/doorstop_config.ini
- SHA256 4d5c6dfa0f771c6a5b1b0c559aca0bd0ece7d08b08fff894708dc3b73ce73cfc
- MD5 387896b4ba25b5a00568e92165c1bd01
- SHA1 7a21f8110f36dd3beed80393e584772be7a98918
- SHA512 81461e8ad50b2fac073179d51181a26ce102cff227933abdc73808c10f66419a5f7d5be64366bd687c59da8eb5059781c6f7d7e2aa817e2d74f6e13ca92dc928
- TLSH T1A23154732A4EB3B07A768546D862B7FF130D85CD826A362075CBC13E33118654897EB9
- MD5 SHA1 SHA512 TLSH
htf soft/payload/payload/.doorstop_version
- SHA256 75a2f501000d4fe28f74bc7ee66dae5581959d28b6c44f0c1b0c05cd5ba261e6
- MD5 7c038681746a729e2fff9520a575e78c
- SHA1 24081282f3a9a62c341308c388d8ed137057665d
- SHA512 2beb8491265f6e4b9736eef7cdfeff5e3a31ca320d00c7b95cdf25afeb04c42343800e8c74c787ef4ccf561020ff3a5d2c76949459ecf69ff5f3d7567460975a
- MD5 SHA1 SHA512
htf soft/payload/payload/BepInEx/cache/chainloader_typeloader.dat
- SHA256 b892b6b86ecd6393e817f4b50c45b82af0e376e41040342b4815331527720b4e
- MD5 5fbd7206d1d4dfc31be73c1e758241f5
- SHA1 b39f88eebd37662ec0deb6feb59433b93475058a
- SHA512 2cf3e0adc32984c9fe1563b3c9eb9b3dd9c03a497fcd63e64717f0a61894308f1d60e8f428174fe1c5f2988a6e45cb467a264cb361a1bc0d1bb259a6a717720e
- TLSH T197D0227A30A3440CD0A025B0330509FF92971FEF20030A408F20890E0923778CE21208
- MD5 SHA1 SHA512 TLSH
htf soft/payload/payload/BepInEx/cache/harmony_interop_cache.dat
- SHA256 973f0ad4173ccd2256e97c1987775b35a6bd24988b9bcee645227ed2de9fab70
- MD5 762f54bb0ab6635de6218805c5c9770d
- SHA1 5efa8e8584c815691ef20a16ed596defad7fbfd7
- SHA512 95784c3d7fed896b3fdf42600f29e23df560a8fdd22125dd87d0a82548bca5f2ad50ddc9d897d0af8c1d7d7f7f70682522b0f8f51ea20b6e10f4e70ee9e27908
- TLSH T1E4B012B630B5582D01A03481B30521FF12E32FFF20070B880F25D90F15377B49D1100C
- MD5 SHA1 SHA512 TLSH
htf soft/payload/payload/BepInEx/config/BepInEx.cfg
- SHA256 8443d78f427027c263511cf66eec454ddf96dee397d042b4f8e00673d3653719
- MD5 6fbb79abb157e750f22ca08a527f5e43
- SHA1 55334443c0634bfaedbe4d3b33c825a26245a3ba
- SHA512 0d99c0603e99b90295a0ce521bbc0c08763689df6928d3ec11c1a8801fed33ee3cbac90f70053cffd7d6adb7c9bbf195e7f7a7a7cd8f88747b8a51471caabe21
- SSDEEP 48:5XUersx5gHtjYjnnV7xdT9xD+KFNel2ieevnrUn3V7apmvY7rUn3V7apuenY2z09:5XjESNjYjnxTLDtnUdxU36pU366GCnOU
- TLSH T1BEB122653F8EF23F0F30409A990BF1D59618890CC36379B8FD69511D5650BEA8372BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/payload/BepInEx/core/0Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a21cc03424fc82c3dd1346905d16494536b9595ae4162228d99fb7c285c1031
- MD5 4705aa1c7a9795d2787722bc8c419ae8
- SHA1 aa1552cf0311f27ca02d34df0558a718d16fb660
- SHA512 2f2bb761d21d7288c2b373958a5eab228797d1a348147f8ff0ea603611c6d79e938a4ccf45f23ffc82500731a68bce8feafcd26a5264d79fd5d7435e6ba69b93
- SSDEEP 3072:VQsxAaNWfZKtIZWTr7MDiIVXQ9PsMIuvq14e3Lvvv9L2yZKDVkNCuwMTfyQV:GBa+UWi2XCH7s3RqyZ5NCuTeQ
- TLSH T124145B6267FD0616D7BF6BB4F47050040671FC17E9AAEB9D6C8464FA0C12780EA513BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
210030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
197KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/0Harmony.xml
- SHA256 d1f02fc3ada3a13da307de421225bfe56ebe24064370980979391c4be021672f
- MD5 e6363c10ec87b6ffbe44ac84036ee93d
- SHA1 d7083c94cb5cd4753cffa6e0510f4f70ed29498f
- SHA512 b50eee9602fe0b92a3a36ee33be51ef46d889b106b31d102748be3f9d0de3e457534a1f5407b7045cae937e1739004a33a07ac7b6298f7402994f2ec77fd972b
- SSDEEP 3072:iWFaW5MGApgStNsHGAxvum4ARo5OvdmrqvKUtwr6D:iWFaW3KgSvsHXxvum4ARo5Ovdmrqv84
- TLSH T1954400A87AD5AA124C7603955D5DF8C8FE268C33211E1C5238CD3D635F7BEE282BB506
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/payload/BepInEx/core/0Harmony20.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c755a5ab2712915a32f9a850d580a8c1b70ff1653bc76600f2767aa8ffccc663
- MD5 419d13905829c00d246afed23ef2dc8c
- SHA1 4c42a69a0d91f4bfe13d7c2e3cd15224fd12485c
- SHA512 94e1b7a8ffb476a1c0b60396749727295097e625f5e02729b12ffb79704e854d7bf9d5bea34ecb0d54fd4aca1dabad6b5384acbca50016474b4f17763186171b
- SSDEEP 3072:nm7LZRRGrHnPLiVOvvFeKKtl2kI1S35ll0CF:kRRq2MFmOE3
- TLSH T1C8B34A1573EC4B52C6EF6BB8E474221107B1F853E02AFB899D88B5F91C42F9256113BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
118666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\submodules\BepInEx.Harmony\HarmonyX2Interop\obj\Release\net35\0Harmony20.pdb
mscoree
_CorDllMain
Name
.text
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/BepInEx.Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 00c8f2ac48593e4d45ce4eb26ce4e68b18113c5c489b38b8bf0850f65830d601
- MD5 3c682a76fcdec7e8bbcf2aead019c6df
- SHA1 4e51738a3576888393916eb7e3ff62cd61bb32ff
- SHA512 fd6dc04fe3f0bd24e87d2ae0baa7ea1a3b0888d72f6707db626cf6c6dbb21d02abea9a59325919a0a2099d37aee0328051ece2fcf0217f4b6e4e5521ee076191
- SSDEEP 96:zn31bAyCQCzoHwvxQYbLkmv3oqnSjTkury:FAyi2YbLkozSf5ry
- TLSH T190D1A520B3A54333CD7B5B71BDABA7804934B940585B2A7E5A45F2026E16FE80D32F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\submodules\BepInEx.Harmony\BepInEx.Harmony\obj\Release\net35\BepInEx.Harmony.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/BepInEx.Harmony.xml
- SHA256 a04fedf08f7c81f5d01aba6f2840a7ffce50b79bbd24587d8dbe69ab73971d29
- MD5 a9ed47b1f141a3c4e36fa02a47e99b5a
- SHA1 8c312db6f4730cfd0a94065c49407de6a98d0427
- SHA512 0a2265559cacb02c603d9018cee487a12d1623c29af5b0993333c98c0e47633d980c88d4893e8ece697229e3638309c7557b4a5181258d9fda70ef532adc0ba8
- TLSH T199812820BBC09E121C33035A6E6DFCC8EE250967311D1875368E3E175FBAAD256AF462
- MD5 SHA1 SHA512 TLSH
htf soft/payload/payload/BepInEx/core/BepInEx.Preloader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 55d3895351a9d16b63b6f35f1c01b44ac650979e853d0bd3a442b92a082af64f
- MD5 e7071a7c35b02caa1e1408781e67c063
- SHA1 5ef53c80c1649630ad148e20e6944b9f4efe6ed7
- SHA512 90c6f3198aeef3f56c3f25df1d89dd26a678bb4d8d3ac584826781a879fbea6bc3be0d9e92674bfd7007bf62d82c672f08221f7b634c36b0c8e896851a96819e
- SSDEEP 768:haXyGuv4d0dvWPle+CJl16aYQMMGZIb0PoDb86c70jXE:hqIpfnJLNt4IoZVV
- TLSH T16613295037E94715F5FE2F397CB6A15406B2BA475932D74E0DC924AF0D32B904A20BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\BepInEx.Preloader\obj\Release\net35\BepInEx.Preloader.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/BepInEx.Preloader.xml
- SHA256 33275b2783b7b99495a02c098ee86d6a9a2783e884a5c9369021f20c94cf99e7
- MD5 56612b1d2f20f83a9dade348da1a7479
- SHA1 c203e4d7167676cb8574d21bc6296fe797c30d34
- SHA512 7a44fc5ebe7a859a503d550ea3b523e3f647d2eeb4ee84fbf0800a9a588b605196d5617409ec2200878d410070e15e7aa46bf589e1dbfe835e6478dd282e5402
- SSDEEP 48:7y5fFHr1i73hEZLzLH4SOtLzfd8TrRMug5dNztVOb5gHYYRRwocioGkrdR8+OiR5:udYKUtffo8xt2u99orYVCv
- TLSH T19AF1BAB475C0DD000C325146DEA9B8C8FE9A0EBB1446543A319D2E5F8F76EC2A56F871
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/payload/BepInEx/core/BepInEx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8255b28902886085c578b9e427d3073c97002db85176d2090cdeda90ef14ce70
- MD5 dffb58ce5e000134d3c8e34f075e9508
- SHA1 351f5a98def807df816a359094d29ade067b7cc9
- SHA512 55d2a6fe14d59e22e6fd36f5c70464f60c94aacba260878a4c56c8701cbdcf9fed074e6deb5b312acb226d2701d062a8af42c7afbb9302077b1a2dd50f0a13a9
- SSDEEP 1536:vQ4G2XZrhaE8kV1Gggspns7T6gHuI/Ylmlm3dUtYNwBke5lm/SWtV5kk+e0+S68:vlLy81PpnsigOI/QLtUtbBke4tV52Tf
- TLSH T180C32A1523EC8B1EE6FF5A75BCB011150BB5FE07A423F79E4E4C64EE4922381A6117B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
134250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\BepInEx\obj\Release\net35\BepInEx.pdb
mscoree
_CorDllMain
Name
.text
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/BepInEx.xml
- SHA256 7ba2266061b9f8a9f146218a312bfdd0d7f2b53a99a7e66c957215c6b66ca0d7
- MD5 5e35db551a872508e23cd6b3859d230e
- SHA1 47ca2953115d3743a47ccf5a218d10430ca55649
- SHA512 79367e46a3de13056d9e7df2465ad8a9a84a0d58c66fe83107e0d5717a24c4a0a3ca1a4969b8000fd9a0a7f7ba79564d91521c63bb95e9d4e96cd1637d3bae11
- SSDEEP 768:FtwsqlOuKuIh8prbsY5RtecdC0PsAUwbMOmzgbpOCU:FisqlOuKpqsx/b/upOCU
- TLSH T10F939C25B7C4BE120C3302639D98B5C4FF350EA321199539B19D7E1B5F3A8D662BBA60
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/payload/BepInEx/core/HarmonyXInterop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ce1342d3afa0334b59a3e38c0aed15e162b9abe9d46f95f34be44af47f3b493
- MD5 9b287159019adea74fff818124c49a57
- SHA1 a788c6199d1c7ccb6ce17f09996875911d26af46
- SHA512 1b2b1975e6982fff3438d37efff51c9776795c21fd2cf64991524cea007ccf88f6f44047c2e4d6f635b53ad4e856d237026ab22ec86d815ef51af51000ea51e5
- SSDEEP 384:UJpvQvdOrAh+fjh85KbSBohVj520KysQZ8DqY3DBqZU2CamZM2/DVejhUpGSIZTt:UDdrGwjmKbiohVlnsG8LuU2nEGSIZT8q
- TLSH T15CB22A46B7AC9F13C6FF477929E627020379EB63A406EB091DCC21E68C477A02B65357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\BepInEx\BepInEx\submodules\BepInEx.Harmony\HarmonyXInterop\obj\Release\net35\HarmonyXInterop.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5896d1898f616701fff18f3b2c71e6b844d2390ef9f41e1c5fccce8cb27c698e
- MD5 5a8b48fcf5e445095799e2c9149ff932
- SHA1 d4c514fbac7a30ddee7d0f597c3eae23a32ccedc
- SHA512 b99b02f296e5c817b8f984317e67c885099a3cc1198ee1808a0033b48ef60d27866719f0986d7f9a1ad547939bf6dc1886e858b9db7ba4375013b96db31957b6
- SSDEEP 768:XgjgMVEdS09ayuzjF/RwmanXdIiO1nqP+7y4CRIJZTMRTIzcRuYhpzt:XgUMn09ay6jF/WmcITIlITMRTtuYnt
- TLSH T12213F7112BFD8B1BC29D82FDA4E625061BB1912DA653E7878FC4F1E7BC13B8515021B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\net_3_5_Release\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 174db44a067f58561510af746f3caeb032037762c57a31c8d9ee32db25174984
- MD5 427e0464246b1e364c5a1a898db2ecf4
- SHA1 dc968ab6e3f9202b5550efb04c0e17c1df04d7d7
- SHA512 02ef1f9246e6117e6e958f019333720f07ff13feb5778b343e69d6e27e74e8ef1e6f122b486ce12b1e1eed546b17499ce906e8660babf281676bd8c6405f0dd6
- SSDEEP 1536:qguHKU52yKfwZyrw03xFjeylsP+ndKFi94lNSex6SU:qguHKU52rwZyrw03uZ+Um4lZ0SU
- TLSH T1FF836C39B7FC8972C1AD67B728AB4D0507F2D32ED243A75D49896EF8091776608322D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\net_3_5_Release\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54ac539fb5ddc8b44c0e9acd0fcb7324f89d1a072edf8ebc1b06dd691e3d3927
- MD5 36a8284f264bdb2cb3420f5d2b8b10e0
- SHA1 b842aa70ac6ff9cc3922189e971a62659299ef64
- SHA512 3979601ce74b72e1519d020832e57e21b5269bda955878ad52e2d162d6de47fde4793fee9a163551f52081bc2dff90e197f030f8cb83128d07b8571073451e0d
- SSDEEP 384:ZNXMT7GsmR2jm13u4NcU11qvJCyIXcMeDz8PmR1uhLoXeuLMBG9UphJAprjE+J1H:v0I2jo3uobeCyV8uRsdeeum1pg1w7H
- TLSH T1D2C2291527598F37C9EF85BE78E1720807F1CA561213CB066CCCA4E9E9877D01B12BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\net_3_5_Release\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ae470288fff4a402899c254d0a76cefef55877f5c54f96e83c797cc5bb6e2f6
- MD5 50ae8a86b701c83fce3a814ae8d79321
- SHA1 7c8b821367897baa1b78157d5cea0767f424bc40
- SHA512 04b57207d4fd9fa9f1a71323ea803f023b4b0f2f7a7070bf431806c7a7f41277969c0f5979ecf134812001b47f5d36ec8e8541982473287323e783b3ffe93121
- SSDEEP 6144:BTU5Xn0f1oUh8dK9S5K0UEece8plCTNgoF:9pJS5KEpWgo
- TLSH T128746B3537FC5A3BD68F83B6E066142A86F5D419628BEF4D5888F2FA4C437529D02273
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
343166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\net_3_5_Release\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
329KB
Virtual Size
329KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/MonoMod.RuntimeDetour.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40e49bb314391cd7bddc2644f8553eeba92c194b940836b103df16955c464e0c
- MD5 04e1988b3ea65408d4c4c29e34bcdeb1
- SHA1 9c599b3c60f92bd3663042dc0781be78e2ff0882
- SHA512 93fd6df274132691a47e00c84e69c84620de7967434c2164deeb7b605038233be7d29d0acb2dc6dce5bbb4b13225094a61f12458be094ac9b2ec27edc6a524a0
- SSDEEP 1536:IFSuZYhhgotA6e4GDSGVjkodWWD7Fjsgql8R6AvdbiwbeMvdo:IUuOhhgsAPDlV5agql8cAvd5do
- TLSH T132A36C2AA7EE4E15D6AD9778B477178043B4F8064897E3AA5CCC65FE0817BC11A203F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
111386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.RuntimeDetour\obj\Release\net35\MonoMod.RuntimeDetour.pdb
mscoree
_CorDllMain
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/MonoMod.RuntimeDetour.xml
- SHA256 54887808960d156550b37d602d08847607aa9e908d039f2765fb0b5e79394aa4
- MD5 7cdc7f0ea1d474acc68c86edfb4d9960
- SHA1 74c7991a02780205114bbf93dd84db0b4ce22407
- SHA512 9fb3ec507ece16f2ee03edc1806704eba517605d8e35e7622f868541cbce632aaa44c805c37ca47214d1bfb83571212222e85f9951181728c82318a2f0f644fc
- SSDEEP 96:r5a7UzDQzDuzDjswkGwqZrUB0YzDlzDltHU9BXHTWHsa+T1ViWzd86:rUb0wqMltHU9Bq6iKdL
- TLSH T142128E09BFC19ED0897241177A65F1C4EE60486B117B7825348D1F630FF68BA6BAFB50
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/payload/BepInEx/core/MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d1495f147ac93c4f81f84538c1a326e8f8a6aefc78d6289d798f3ce1162c5e9
- MD5 96c7b1340105a3b86f3e8d19a844903a
- SHA1 bc258633aab1a2a1839dcc44eed944d865fd6038
- SHA512 36706eb655c995d81aa731c067912452a566ef5b752effdf212603aa0099e28de56588191acced82fb97aeae33df06f229d8cbed969c92cf9b8d439d04c223de
- SSDEEP 3072:ojh9XBmF8HjDrQlDSKNcTD3dAC49Uock8dey4DAYxRDA8:oXUF8HjDrohO3KCllAAYD
- TLSH T1F9043C2D5799CE19C5AED6B1F46822604333DC03D2EBD70F7CB8A1F8499A388D6056E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
193486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.Utils\obj\Release\net35\MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/BepInEx/core/MonoMod.Utils.xml
- SHA256 0577b362023a3432d6e8d7934c5eddc3e08fdbb19e191af083e341562c5ede38
- MD5 b41ea71f1b1bd676092243d75450a2c2
- SHA1 6b6e986262e4dc5d00f5d99534bf99f4416fc101
- SHA512 c626e74c7f7e7b97d7961e10ea93e457fca2fdec34bcad52a8d7ff55dee783b6e6c0f8ebd72777d0d4394dbff24a900a22ce39ff569fbd6c5c376392e66e7516
- SSDEEP 1536:SC/tsybXADqyMl5oKGTGqh9dYc2x2V8TaaJM05FUO67sOMF:SC/tsybXADqyMl5oKlqh9dYc2x2V8Ta2
- TLSH T1BC73BC287AD58E520C7202159DDAF5C8FE158C37610E7826388D3DA35FBADE291FB960
- MD5 SHA1 SHA512 SSDEEP TLSH
htf soft/payload/payload/BepInEx/plugins/HowToFishCheats.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c6dc648957c1515fa4bcaa77e93a02f53bc7b1e58890f8d97348c95002ff44c1
- MD5 11ccfd3fd862ea081629e69aa8e68327
- SHA1 5c3b8c1af1860a03337048778cf886cfc4074232
- SHA512 1770771aa9d850b8f8050a6d785c3ee3f800e86d3f1e3f7893505c60b3f656e9bd30579ba12e24adda681133066883b9d92587e4d16c10b69434a0525082f551
- SSDEEP 384:jL47gtsAmxe09+axOoeNgXoCtFimXrHLcC2FKM4y9L:si3YeinwriX3Li42Fyy9
- TLSH T1FA822B2977E88246C8BE5E3519B202A20375FA031822DB4D1DC968DE5553B628721FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\AppData\Local\Temp\claude\C--Users-user-Desktop-17877916\9ad7eccf-1295-4e1a-b0a8-e8b39b38df46\scratchpad\HowToFishCheats\obj\Release\HowToFishCheats.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htf soft/payload/payload/doorstop_config.ini
- SHA256 4d5c6dfa0f771c6a5b1b0c559aca0bd0ece7d08b08fff894708dc3b73ce73cfc
- MD5 387896b4ba25b5a00568e92165c1bd01
- SHA1 7a21f8110f36dd3beed80393e584772be7a98918
- SHA512 81461e8ad50b2fac073179d51181a26ce102cff227933abdc73808c10f66419a5f7d5be64366bd687c59da8eb5059781c6f7d7e2aa817e2d74f6e13ca92dc928
- TLSH T1A23154732A4EB3B07A768546D862B7FF130D85CD826A362075CBC13E33118654897EB9
- MD5 SHA1 SHA512 TLSH
htf soft/payload/payload/winhttp.dll
- IMPHASH d104183de321e6535be598a241bbfce0
- SHA256 8c6cdbc38836dee87e3368f5de1994d7c0ccebf29e4ce7aba3c0981f9375412c
- MD5 e9cefd81b20f8ab4bd859b561e606214
- SHA1 f4ec55af52c60765f7d98a343f52ead74c6a1927
- SHA512 b93a54184458d154490fc0e6747129819b860090b183d53ac884d24aa61b751dce0f0701551aa073e5bbd77a621c705560e831bead56a371eeb5e2e24c030270
- SSDEEP 768:SXPUkwMBdC0q+GwROOBz6sC1fxgKTb0fcmckVPxIiT7j:SXthnROOd6sC1fxgKTQfcmckVPxIiT
- TLSH T15DC28F9137A5516CED7AA63CC6B1A787D27370680DF1920F03749A84CF237426A2DE8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
shell32
CommandLineToArgvW
kernel32
lstrcmpA
LoadLibraryW
GetProcAddress
GetCommandLineW
LocalFree
lstrcmpiW
GetPrivateProfileStringW
GetStdHandle
GetCommandLineA
SetEnvironmentVariableW
SetCurrentDirectoryW
CreateFileA
CreateFileW
CloseHandle
GetSystemDirectoryW
VirtualProtect
GetModuleHandleW
HeapFree
lstrcmpiA
GetCurrentDirectoryW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableW
ReadFile
HeapAlloc
GetProcessHeap
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Private1
SvchostPushServiceGlobals
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
WinHttpAddRequestHeaders
WinHttpAutoProxySvcMain
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpConnectionDeletePolicyEntries
WinHttpConnectionDeleteProxyInfo
WinHttpConnectionFreeNameList
WinHttpConnectionFreeProxyInfo
WinHttpConnectionFreeProxyList
WinHttpConnectionGetNameList
WinHttpConnectionGetProxyInfo
WinHttpConnectionGetProxyList
WinHttpConnectionSetPolicyEntries
WinHttpConnectionSetProxyInfo
WinHttpConnectionUpdateIfIndexTable
WinHttpCrackUrl
WinHttpCreateProxyResolver
WinHttpCreateUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpFreeProxyResult
WinHttpFreeProxyResultEx
WinHttpFreeProxySettings
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetProxyForUrlEx
WinHttpGetProxyForUrlEx2
WinHttpGetProxyForUrlHvsi
WinHttpGetProxyResult
WinHttpGetProxyResultEx
WinHttpGetProxySettingsVersion
WinHttpGetTunnelSocket
WinHttpOpen
WinHttpOpenRequest
WinHttpPacJsWorkerMain
WinHttpProbeConnectivity
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReadProxySettings
WinHttpReadProxySettingsHvsi
WinHttpReceiveResponse
WinHttpResetAutoProxy
WinHttpSaveProxyCredentials
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetDefaultProxyConfiguration
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
WinHttpWebSocketClose
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketQueryCloseStatus
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketShutdown
WinHttpWriteData
WinHttpWriteProxySettings
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
612B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=257, version=33145,
count=32, id=1, productName=Unmarked objects,
count=10, id=260, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=258, version=35222,
htf soft/payload/winhttp.dll
- IMPHASH d104183de321e6535be598a241bbfce0
- SHA256 8c6cdbc38836dee87e3368f5de1994d7c0ccebf29e4ce7aba3c0981f9375412c
- MD5 e9cefd81b20f8ab4bd859b561e606214
- SHA1 f4ec55af52c60765f7d98a343f52ead74c6a1927
- SHA512 b93a54184458d154490fc0e6747129819b860090b183d53ac884d24aa61b751dce0f0701551aa073e5bbd77a621c705560e831bead56a371eeb5e2e24c030270
- SSDEEP 768:SXPUkwMBdC0q+GwROOBz6sC1fxgKTb0fcmckVPxIiT7j:SXthnROOd6sC1fxgKTQfcmckVPxIiT
- TLSH T15DC28F9137A5516CED7AA63CC6B1A787D27370680DF1920F03749A84CF237426A2DE8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
shell32
CommandLineToArgvW
kernel32
lstrcmpA
LoadLibraryW
GetProcAddress
GetCommandLineW
LocalFree
lstrcmpiW
GetPrivateProfileStringW
GetStdHandle
GetCommandLineA
SetEnvironmentVariableW
SetCurrentDirectoryW
CreateFileA
CreateFileW
CloseHandle
GetSystemDirectoryW
VirtualProtect
GetModuleHandleW
HeapFree
lstrcmpiA
GetCurrentDirectoryW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableW
ReadFile
HeapAlloc
GetProcessHeap
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Private1
SvchostPushServiceGlobals
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
WinHttpAddRequestHeaders
WinHttpAutoProxySvcMain
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpConnectionDeletePolicyEntries
WinHttpConnectionDeleteProxyInfo
WinHttpConnectionFreeNameList
WinHttpConnectionFreeProxyInfo
WinHttpConnectionFreeProxyList
WinHttpConnectionGetNameList
WinHttpConnectionGetProxyInfo
WinHttpConnectionGetProxyList
WinHttpConnectionSetPolicyEntries
WinHttpConnectionSetProxyInfo
WinHttpConnectionUpdateIfIndexTable
WinHttpCrackUrl
WinHttpCreateProxyResolver
WinHttpCreateUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpFreeProxyResult
WinHttpFreeProxyResultEx
WinHttpFreeProxySettings
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetProxyForUrlEx
WinHttpGetProxyForUrlEx2
WinHttpGetProxyForUrlHvsi
WinHttpGetProxyResult
WinHttpGetProxyResultEx
WinHttpGetProxySettingsVersion
WinHttpGetTunnelSocket
WinHttpOpen
WinHttpOpenRequest
WinHttpPacJsWorkerMain
WinHttpProbeConnectivity
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReadProxySettings
WinHttpReadProxySettingsHvsi
WinHttpReceiveResponse
WinHttpResetAutoProxy
WinHttpSaveProxyCredentials
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetDefaultProxyConfiguration
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
WinHttpWebSocketClose
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketQueryCloseStatus
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketShutdown
WinHttpWriteData
WinHttpWriteProxySettings
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
612B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=257, version=33145,
count=32, id=1, productName=Unmarked objects,
count=10, id=260, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=258, version=35222,