PaneKillers.zip
- SHA256 d2773ef9fcab1536febe458df4d922f1a9b8daf3ecfbffc6a45abea9765c8829
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PaneKillers.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
PaneKillers.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target PaneKillers.zip
- Size 25.4MB
- Sample261018-svsaps1xbz
- SHA256 d2773ef9fcab1536febe458df4d922f1a9b8daf3ecfbffc6a45abea9765c8829
- MD5 38aacd2d268f3e66c4e0e2edbe533bb9
- SHA1 5bd65134b492845cc24246d9ecd7a4ae3acb45bb
- SHA512 c173a9575b3f30214fec97befad633b9eefc2bff7a3c1a1f104ed8b55ae68dd2d6f7e2fbfc2e4b85653ef2f793be34c52fc5eb51816e90e52ea3cf1e2c634cd3
- SSDEEP 786432:6VnLbYpr/kW9Ek4ORRIwoi+5AcLYq/7jF:GO/fSkFblgLYqHF
- TLSH T1CF4733B60231D192FB7650B30FEE5508FF2796E13A3422A8EBB1CD735378A589515CCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PaneKillers.exe
File Explorer
-
PaneKillers.zip.zip 25.4MB
-
DirectML.dll.dll 13.4MB
-
HOW TO PLAY.txt1KB
-
PaneKillers.exe.exe 651KB
-
UnityCrashHandler64.exe.exe 1.7MB
-
UnityPlayer.dll.dll 36.9MB
-
VERSION.txt46B
-
dVJAK6uP/bot.py32KB
-
dVJAK6uP/gitignore55B
-
dVJAK6uP/panel.html.html .js 28KB
-
dVJAK6uP/start.bat426B
-
dVJAK6uP/token.json85B
-
dVJAK6uP/tokens.txt6KB
-
dstorage.dll.dll 202KB
-
dstoragecore.dll.dll 1.4MB
-
steam_appid.txt3B
DirectML.dll
- IMPHASH 0eb962894c1f1cf400b452799094c50a
- SHA256 5ab77cc5db8e1544d386fd28586598317da8dcbef098fb86d8d8a60e739e0e5d
- MD5 7982ce756c6e8c8f6bab62eb1902b714
- SHA1 80f79ef136a8b4866bc7be1669584361b9a0ab23
- SHA512 71f9b4d30d41a28de009ddfbe6c9328a905dba6bb83623e14e252a255b641b88307c51754d509bed608a44882c5bfb9502bd1a533162a13d78d45c10140ed2e1
- SSDEEP 98304:h4wQAqtHLRf+ZUSlVtwXgGN0gBl5NZsggKnHvibc0PMkFA9q068ZrS+O9mblF8G:mwzq5RGJlViXNHJsgXc/P1m9q0HNJuG
- TLSH T1D8E6D02A6B6405A6C07B923C9A470643F3B2B45A53715FE702B81E311F97BE05B3F396
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:d0:23:0b:b2:60:0d:ac:ee:02:55:fb:ef:9b:93:10:c5:6e:04:fc:54:43:18:e8:ec:fa:70:f3:98:27:24:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 12, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d0:77:08:aa:ef:a3:17:c6:dd:00:01:00:00:01:d0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
2504992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\build\x64-win-redist-release\bin\DirectML.pdb
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
DebugBreak
OutputDebugStringW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-errorhandling-l1-1-0
RaiseException
SetLastError
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-heap-l1-1-0
HeapReAlloc
GetProcessHeap
HeapFree
HeapAlloc
HeapSize
api-ms-win-core-synch-l1-1-0
WaitForSingleObjectEx
CreateSemaphoreExW
CreateMutexExW
OpenSemaphoreW
WaitForSingleObject
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseMutex
TryAcquireSRWLockExclusive
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetStartupInfoW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
TlsAlloc
ExitProcess
TlsGetValue
TlsSetValue
TlsFree
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
DisableThreadLibraryCalls
LoadResource
FreeLibrary
GetModuleHandleExW
GetModuleFileNameA
GetProcAddress
LockResource
api-ms-win-core-localization-l1-2-0
GetCPInfo
FormatMessageW
GetLocaleInfoEx
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetLocaleInfoW
GetOEMCP
LCMapStringEx
IsValidLocale
GetACP
LCMapStringW
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
EventUnregister
EventWriteTransfer
EventRegister
api-ms-win-core-libraryloader-l1-2-1
FindResourceW
LoadLibraryW
api-ms-win-core-memory-l1-1-0
VirtualFree
VirtualAlloc
d3d12
D3D12SerializeVersionedRootSignature
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
CompareStringEx
MultiByteToWideChar
GetStringTypeW
CompareStringW
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-file-l1-1-0
FindFirstFileExW
FindClose
CreateFileW
SetFilePointerEx
GetFileType
FlushFileBuffers
FindNextFileW
WriteFile
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-rtlsupport-l1-1-0
RtlPcToFileHeader
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
api-ms-win-core-interlocked-l1-1-0
InterlockedFlushSList
InitializeSListHead
api-ms-win-core-processenvironment-l1-1-0
SetEnvironmentVariableW
GetCommandLineA
SetStdHandle
GetCommandLineW
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
api-ms-win-core-fibers-l1-1-0
FlsSetValue
FlsFree
FlsGetValue
FlsAlloc
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-console-l1-1-0
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
api-ms-win-core-timezone-l1-1-0
GetTimeZoneInformation
api-ms-win-appmodel-runtime-l1-1-0
GetCurrentPackageFullName
DMLCreateDevice
DMLCreateDevice1
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
82KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
133KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
1024B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6.4MB
Virtual Size
6.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=29395,
count=24, id=260, version=29395,
count=1, productName=Unmarked objects (old),
count=15, id=260, version=33030,
count=18, id=259, version=33030,
count=82, id=261, version=33030,
count=9, id=260, version=33133,
count=174, id=261, version=29395,
count=63, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=141, id=1, productName=Unmarked objects,
count=240, id=261, version=33133,
count=1, id=256, version=33133,
count=1, id=255, version=33133,
count=1, id=151,
count=1, id=258, version=33133,
HOW TO PLAY.txt
- SHA256 7d30be38682dc6caf3ccc80f5d0e15126a31ef9e3174a24a857f347accf797c7
- MD5 f2cdde30037cb566fd55b6caa2f1edfe
- SHA1 33c132dda58a01d903cda54d27947c6508af60ad
- SHA512 d2a08f7f01081b726e0240254a19fc8af0d884bed3cd327a671e363e44b62b2682ca2e2f9e70464532f422f6e5bd6b95dfd74d826a8bf20a7b89c8592d013946
- TLSH T1EB41D96B6246033210B20537A08FF8B3B772D139D78716533C7EA0293B257AD80421E6
- MD5 SHA1 SHA512 TLSH
PaneKillers.exe
- IMPHASH a136217cdd3247ff6a8766561064ca0b
- SHA256 a4c71b1bfc3e42d02f2f129fe04adef3ebf2343a662884e4b99598e9dfc90e7d
- MD5 7f81ed26333211f19476076f568fc49b
- SHA1 0ce557b14d0b296d21d8ac6ec6011da6e0f0a597
- SHA512 2a59a10d66117249303ce165cfd29e99ae168f544a311788980dd725d5e405fc4463c77897b5e36c5e88bc438cd519044fca9931aec5022868413345f3156a9c
- SSDEEP 6144:1aMjvuUwZpwUhL8NtEuevMcz/y50srJ9tC/FVYE16:1tVwZpxhGtqxz/yasN9tC/XE
- TLSH T127E4D72D2D546ECCC422583E8783CB9242B0EE696CB54B135BF27FA27E310D05D6B796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4708
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb
unityplayer
UnityMain2
kernel32
HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
D3D12SDKPath
D3D12SDKVersion
NvOptimusEnablement
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
552KB
Virtual Size
551KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=28900,
count=138, id=261, version=28900,
count=10, id=260, version=28900,
count=2, id=257, version=28900,
count=9, id=259, version=34321,
count=16, id=260, version=34321,
count=40, id=261, version=34321,
count=3, id=257, version=34433,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, version=34433,
count=1, id=256, version=34433,
count=1, id=255, version=34433,
count=1, id=258, version=34433,
UnityCrashHandler64.exe
- IMPHASH 113c463af55ed187318c530c5bdb3ef5
- SHA256 43083969db7c0093b63a7f5bb3bd7b1777cdb727c8456adbd46fe7bad2e45158
- MD5 df1f70ca370d647f38eec329506a48fd
- SHA1 11015362d229c2b36e528538f6bd73f478cd7e6e
- SHA512 206df50ab1d52dfd50e80f434866656979ef270b891d20d1c41f1e14ee384fd40488e1a30b5fa2e6a295f97ea495f235dc266bcfb891ae3a73daf9fe6b5e7be7
- SSDEEP 24576:AasKGA7V7B5FJbvpu1cXt0oV9tnLOK6Koxz/y/N9w/XY:AIGA7lFJbY1cu6T76m
- TLSH T1D28538292D6819DCD426843DCB838A8ED2B1BC1A1F7147D716E17BA73F324E01A7B761
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
24:26:9a:e0:e4:29:87:a1:f4:b4:87:99:96:8e:26:f8:21:df:da:01:c5:fe:8e:c6:d6:8e:32:54:e6:1e:36:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Aug 29, 2026
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0b:12:24:60:a1:f7:9e:85:5e:1d:a9:a8:af:ca:9e:b2
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 15, 2026 - Jul 17, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
481964
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win_x64_VS2022_VB_MT_nondev_m_m\UnityCrashHandler64.pdb
user32
SetWindowPos
SendMessageW
DialogBoxParamA
OffsetRect
GetIconInfo
SetWindowTextW
UnionRect
GetWindowLongA
InflateRect
CreateIconFromResourceEx
LoadImageA
AdjustWindowRect
SendDlgItemMessageA
GetDlgItem
LookupIconIdFromDirectoryEx
EndDialog
SetForegroundWindow
kernel32
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
MultiByteToWideChar
GetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
ReadFile
GetFileSizeEx
GetCommandLineW
GetCurrentProcess
GetStdHandle
WriteFile
TerminateProcess
GetProcessId
SetErrorMode
GetTempPathW
WaitForMultipleObjectsEx
CreateFileW
GetFileAttributesW
OpenProcess
Sleep
SetEvent
LoadLibraryA
DeleteFileW
CloseHandle
GetProcAddress
SetFilePointerEx
MoveFileExW
GetThreadId
ReadProcessMemory
CreateProcessW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
CopyFileExW
AllocConsole
GetExitCodeProcess
FindFirstFileW
FindNextFileW
SetFilePointer
GetEnvironmentVariableW
SetEndOfFile
FindClose
SetFileInformationByHandle
LoadLibraryW
GetCurrentProcessId
FlushFileBuffers
SizeofResource
EnterCriticalSection
EnumResourceNamesA
LeaveCriticalSection
InitializeCriticalSection
FindResourceA
WaitForSingleObject
UnmapViewOfFile
GetModuleHandleA
GetExitCodeThread
TerminateThread
LockResource
CreateThread
LoadResource
GetThreadContext
CreateFileMappingA
DeleteCriticalSection
CreateEventA
MapViewOfFile
OpenThread
LoadLibraryExW
CreateEventW
CreateDirectoryW
GetFileInformationByHandleEx
FindFirstFileExW
TlsSetValue
GetFullPathNameW
RemoveDirectoryW
SetFileTime
GetModuleFileNameW
SetFileAttributesW
GetFileAttributesExW
GetDiskFreeSpaceExW
ReplaceFileW
HeapSize
GetTimeZoneInformation
CopyFileW
TlsGetValue
GetTempFileNameW
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapAlloc
GetCurrentDirectoryW
GetProcessHeap
GetConsoleScreenBufferInfo
WriteConsoleA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TlsAlloc
SetLastError
RtlCaptureContext
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
GetEnvironmentVariableA
GetCurrentDirectoryA
K32GetModuleFileNameExA
GetCurrentThread
SetWaitableTimer
SetThreadDescription
SetThreadPriority
WaitForSingleObjectEx
GetThreadPriority
SwitchToThread
SleepEx
CreateWaitableTimerExW
FormatMessageW
GetNativeSystemInfo
LocalFree
VerSetConditionMask
VerifyVersionInfoW
VirtualQuery
VirtualFree
RtlUnwind
TlsFree
IsDebuggerPresent
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
GetFileType
SetStdHandle
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
IsValidCodePage
GetACP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WakeAllConditionVariable
SystemTimeToFileTime
HeapQueryInformation
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetModuleHandleW
VirtualAlloc
GetCPInfo
DecodePointer
EncodePointer
InitializeCriticalSectionEx
CompareStringEx
LCMapStringEx
SleepConditionVariableSRW
GetStringTypeW
TryAcquireSRWLockExclusive
dbghelp
SymRegisterFunctionEntryCallback64
MiniDumpWriteDump
SymLoadModuleEx
ImageDirectoryEntryToDataEx
shell32
SHCreateDirectoryExW
CommandLineToArgvW
SHGetKnownFolderPath
SHFileOperationW
ole32
CoInitializeEx
CoCreateGuid
CoTaskMemFree
shlwapi
PathCanonicalizeW
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
advapi32
GetUserNameA
wininet
HttpSendRequestA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetConnectA
gdi32
GetObjectA
bcrypt
BCryptDeriveKeyPBKDF2
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
version
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoA
Name
.text
Size
643KB
Virtual Size
642KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
153KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
855KB
Virtual Size
855KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=28900,
count=195, id=261, version=28900,
count=24, id=260, version=28900,
count=1, id=253, version=34321,
count=10, id=259, version=34321,
count=19, id=260, version=34321,
count=93, id=261, version=34321,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=107, id=265, version=34433,
count=1, id=262, version=28900,
count=29, id=257, version=28900,
count=326, id=1, productName=Unmarked objects,
count=1, id=255, version=34433,
count=1, id=258, version=34433,
UnityPlayer.dll
- IMPHASH 582a80a8a58894fbf33550aed0e2cce1
- SHA256 8698332fa0d299291b58e71a505db6f20a8f291a2b7349421f93a4f9838ed895
- MD5 c8ccfb842608225435c8688a6c48525c
- SHA1 ea654f11271af84ae426fafa3a541bb8398cd029
- SHA512 4ef84a73dd216e1c1b7016a532838242b8fe550a5b73ab52b8b82b12ad1a700a243d82e17c917400709354d6a97eb248d18074acea7c2f4659149ad2ddc1f5f2
- SSDEEP 393216:qLZfcIeJw9Bmm2uoJgXZN3k8cDH3gaQ6gOsWv/HRSg6:qNEZJwP+gds3H
- TLSH T1BA879D5662F851D9D47BC078965FAA1BFBB1344803309AEB52E049A46F33FE06A7F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:31:20:77:34:41:4e:b5:b3:f8:6e:de:ce:7a:fe:95:01:d1:58:9d:ef:a6:62:70:18:1f:f5:56:b3:47:52:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Aug 29, 2026
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0b:12:24:60:a1:f7:9e:85:5e:1d:a9:a8:af:ca:9e:b2
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 15, 2026 - Jul 17, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
30884564
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\build\output\unity\unity\artifacts\UnityPlayer\Win_x64_VS2022_VB_MT_nondev_m_m\UnityPlayer_Win64_player_mono_x64.pdb
dwmapi
DwmSetWindowAttribute
DwmGetWindowAttribute
secur32
InitSecurityInterfaceW
crypt32
CertGetCertificateChain
CertCloseStore
CertOpenStore
CertFreeCertificateContext
CertFreeCertificateChain
CertAddEncodedCertificateToStore
CertVerifyCertificateChainPolicy
dstorage
DStorageGetFactory
kernel32
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryW
FormatMessageW
CreateEventA
ResetEvent
GetSystemTimeAsFileTime
GetLocaleInfoEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetFileSize
LoadLibraryA
FreeLibrary
GetEnvironmentVariableW
CreateEventExW
WaitForSingleObjectEx
GetFileAttributesW
GetTempFileNameW
DeleteFileW
GetTempPathW
GetModuleHandleA
LoadLibraryExW
GetTickCount
GetOverlappedResult
ReadFile
CancelIo
GetWindowsDirectoryW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
CreateThread
DebugBreak
SetDllDirectoryW
CreateMutexA
CreateToolhelp32Snapshot
Thread32First
OpenThread
Thread32Next
SuspendThread
ResumeThread
GetUserDefaultLocaleName
LocalAlloc
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
GetSystemPowerStatus
GetSystemDirectoryA
CreateFileA
GetComputerNameW
WaitForMultipleObjectsEx
FindFirstFileExW
FindClose
GetFileSizeEx
IsDebuggerPresent
GetFileInformationByHandleEx
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
CopyFileW
MoveFileExW
FindFirstFileW
FindNextFileW
SetFilePointerEx
SetEndOfFile
ReplaceFileW
GetFullPathNameW
GetSystemTime
SetFileTime
GetDiskFreeSpaceExW
SetLastError
GetStartupInfoA
SetConsoleCtrlHandler
RaiseException
AttachConsole
GetConsoleScreenBufferInfo
GetStdHandle
GetCurrentProcessId
InitializeSRWLock
ReleaseSRWLockExclusive
GetCurrentProcess
TlsAlloc
GetModuleFileNameA
GetFileAttributesA
GetEnvironmentVariableA
GetCurrentDirectoryA
WideCharToMultiByte
GetThreadContext
RtlLookupFunctionEntry
RtlVirtualUnwind
ReadProcessMemory
SetThreadPriority
GetThreadPriority
SwitchToThread
CreateWaitableTimerExW
SetWaitableTimer
SleepEx
SetThreadDescription
RtlCaptureStackBackTrace
GetNativeSystemInfo
VirtualQuery
GetLogicalProcessorInformationEx
GlobalMemoryStatusEx
K32GetProcessMemoryInfo
GetSystemTimePreciseAsFileTime
CreateSemaphoreExW
TlsFree
ExitThread
SetThreadAffinityMask
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
SetFilePointer
CreateWaitableTimerA
InitializeCriticalSectionEx
InitializeConditionVariable
GetTickCount64
WakeConditionVariable
SleepConditionVariableCS
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
GetModuleHandleW
GetModuleFileNameW
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
LocalFree
FormatMessageA
GetTimeZoneInformation
SystemTimeToFileTime
GetLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
GetLastError
CloseHandle
OpenMutexW
GetExitCodeThread
TryAcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
GetStringTypeW
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
TerminateProcess
RtlCaptureContext
VirtualFree
VirtualProtect
VirtualAlloc
WriteFile
SetErrorMode
GetExitCodeProcess
WaitForMultipleObjects
LoadLibraryExA
OutputDebugStringA
GetProcessId
FlushFileBuffers
SetEvent
SetHandleInformation
CreatePipe
GetProcAddress
TlsSetValue
TlsGetValue
CreateEventW
GetErrorMode
SetUnhandledExceptionFilter
GetCurrentThread
GetCurrentThreadId
CreateProcessW
HeapFree
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
GetProcessHeap
HeapAlloc
InitializeProcThreadAttributeList
AcquireSRWLockExclusive
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RtlUnwind
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
HeapSize
HeapReAlloc
HeapQueryInformation
DuplicateHandle
GetConsoleOutputCP
GetConsoleMode
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetCommandLineW
MultiByteToWideChar
SetEnvironmentVariableW
WriteConsoleW
WriteConsoleA
FileTimeToSystemTime
ReadConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
CloseClipboard
EmptyClipboard
SetClipboardData
EnumDisplayDevicesA
MsgWaitForMultipleObjects
PeekMessageA
UpdateWindow
UnregisterClassW
RegisterClassExW
MessageBoxA
DialogBoxParamW
EndDialog
SetDlgItemTextW
SetDlgItemTextA
LoadIconA
SendDlgItemMessageW
OffsetRect
CopyRect
GetPointerTouchInfo
GetPointerTouchInfoHistory
GetRawInputDeviceList
GetPointerDevices
GetPointerInfo
RegisterRawInputDevices
EnableMouseInPointer
IsMouseInPointerEnabled
SetCursorPos
GetKeyNameTextW
MapVirtualKeyW
RegisterClassW
GetWindowLongPtrW
SetWindowLongPtrW
PostQuitMessage
GetMonitorInfoA
SetWindowLongPtrA
ValidateRect
SetWindowTextW
PeekMessageW
GetMessageW
ClipCursor
ShowCursor
GetFocus
ToUnicode
GetKeyboardLayoutNameW
GetRawInputDeviceInfoW
GetKeyboardLayout
MapVirtualKeyExA
GetClipboardData
IsWindowVisible
GetRawInputBuffer
GetRawInputData
GetActiveWindow
SetFocus
MapVirtualKeyA
GetKeyState
GetCursorPos
GetMessageExtraInfo
GetPointerPenInfoHistory
GetPointerPenInfo
ScreenToClient
GetPointerType
PtInRect
DispatchMessageW
TranslateMessage
SystemParametersInfoW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetCapture
ReleaseCapture
DestroyIcon
DestroyCursor
SetCursor
LoadCursorA
LoadImageW
KillTimer
MessageBoxW
SetTimer
DestroyWindow
CreateWindowExW
DefWindowProcW
ReleaseDC
EnumDisplaySettingsW
MonitorFromRect
MonitorFromWindow
GetForegroundWindow
GetClientRect
SetForegroundWindow
SetWindowPos
AdjustWindowRectExForDpi
ShowWindow
GetWindowPlacement
SendMessageW
LoadIconW
SetWindowLongA
GetWindowLongA
GetParent
EnumDisplayMonitors
GetDesktopWindow
GetDC
IsClipboardFormatAvailable
OpenClipboard
SendMessageTimeoutA
IsIconic
EnumWindows
GetUserObjectInformationA
RegisterWindowMessageA
GetAsyncKeyState
GetMonitorInfoW
MonitorFromPoint
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
GetSystemMetrics
GetCaretBlinkTime
GetDoubleClickTime
EnumDisplaySettingsA
AllowSetForegroundWindow
GetWindowRect
IsWindow
ClientToScreen
SystemParametersInfoA
GetThreadDesktop
MoveWindow
TrackMouseEvent
version
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoA
ole32
PropVariantCopy
PropVariantClear
CoTaskMemFree
CoCreateFreeThreadedMarshaler
StringFromGUID2
RoGetAgileReference
CoCreateGuid
CoSetProxyBlanket
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
shlwapi
PathCanonicalizeW
SHDeleteKeyW
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailW
gdi32
ChoosePixelFormat
SetPixelFormat
SwapBuffers
GetDeviceCaps
api-ms-win-shcore-scaling-l1-1-1
GetDpiForMonitor
shell32
CommandLineToArgvW
SHGetFolderPathW
SHFileOperationW
SHGetKnownFolderPath
ShellExecuteW
opengl32
wglMakeCurrent
wglGetProcAddress
wglGetCurrentContext
wglGetCurrentDC
wglDeleteContext
wglCreateContext
winmm
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInReset
waveInPrepareHeader
waveOutGetPosition
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetTime
timeEndPeriod
timeBeginPeriod
waveInClose
waveInOpen
waveInGetDevCapsW
waveInGetNumDevs
waveInGetDevCapsA
oleaut32
VariantChangeType
SysFreeString
SafeArrayCreateVector
VariantClear
VariantInit
SafeArrayDestroy
SafeArrayPutElement
SysAllocString
imm32
ImmSetCompositionStringW
ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmGetConversionStatus
ImmReleaseContext
ImmGetContext
iphlpapi
IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle
if_nametoindex
winhttp
WinHttpCloseHandle
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
bcrypt
BCryptGenRandom
hid
HidP_GetData
HidP_MaxDataListLength
HidD_GetSerialNumberString
HidD_GetManufacturerString
HidD_GetProductString
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetHidGuid
HidP_SetUsages
HidP_SetUsageValue
HidP_GetButtonCaps
HidP_GetValueCaps
HidD_GetAttributes
HidP_GetCaps
api-ms-win-core-winrt-string-l1-1-0
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsDeleteString
api-ms-win-core-winrt-l1-1-0
RoUninitialize
RoActivateInstance
RoInitialize
RoGetActivationFactory
d3d11
D3D11CreateDevice
D3D11On12CreateDevice
dxgi
CreateDXGIFactory
CreateDXGIFactory2
DXGIGetDebugInterface1
uiautomationcore
UiaReturnRawElementProvider
UiaDisconnectAllProviders
UiaRaiseAutomationPropertyChangedEvent
UiaHostProviderFromHwnd
UiaRaiseAutomationEvent
UiaRaiseStructureChangedEvent
UiaRaiseNotificationEvent
UiaClientsAreListening
advapi32
CryptGetHashParam
RegDeleteValueA
RegSetValueExA
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExA
RegCreateKeyW
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
CryptDestroyHash
CryptHashData
CryptCreateHash
GetUserNameA
ws2_32
getsockopt
WSAWaitForMultipleEvents
WSASocketW
WSACreateEvent
WSACloseEvent
GetAddrInfoExW
WSAIoctl
FreeAddrInfoExW
gethostbyaddr
sendto
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
getaddrinfo
freeaddrinfo
getsockname
ntohs
htons
inet_addr
shutdown
ioctlsocket
WSASocketA
WSASetLastError
inet_pton
WSACleanup
getpeername
recvfrom
WSAStartup
WSAGetLastError
setsockopt
getprotobyname
closesocket
socket
__WSAFDIsSet
select
gethostbyname
gethostname
ntohl
htonl
send
recv
GetAddrInfoExCancel
connect
accept
listen
bind
WSASendDisconnect
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressSingle
WakeByAddressAll
UnityMain
UnityMain2
Name
.text
Size
29.9MB
Virtual Size
29.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.1MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
394KB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rodata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
152KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=259, version=28900,
count=18, id=260, version=34321,
count=31, id=259, version=34321,
count=32, productName=Unmarked objects (old),
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=253, version=34321,
count=225, id=261, version=28900,
count=2, id=257, version=34437,
count=1, id=260, version=34433,
count=158, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,
count=34, id=260, version=31935,
count=153, id=261, version=31935,
count=74, id=260, version=28900,
count=1533, id=265, version=34433,
count=111, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=92, id=261, version=34321,
count=49, id=257, version=28900,
count=633, id=1, productName=Unmarked objects,
count=1, id=256, version=34433,
count=1, id=255, version=34433,
count=1, id=258, version=34433,
VERSION.txt
- SHA256 1d58500b963ae7daa2045f13a604952525d3ae601820c612450725bdf3f942b9
- MD5 8a8945e4d5473839be9ed8706fb49909
- SHA1 630b67b20c0c0c89bbaa43b5900dc711349113b6
- SHA512 d284cada39c07e12b9ecf57e6a16d24676a11dfe50d85b353f6214f7770270975b83ce20da8c8772456ade50c6c55d0490353346f1d80499de9bfd370c9fe35e
- MD5 SHA1 SHA512
dVJAK6uP/bot.py
- SHA256 1856dcfabcbfa2535f802a23fc4f6f4568ea9005d11eedddb5f41ea0844a0a7e
- MD5 e0ad947247de799393240255cb75a478
- SHA1 33060d5af241073f2e5b474b6922f613a264398d
- SHA512 de5964c09101bfb2bf41e3fdce38308d1ef7d6c471b3811b344925e6d86b4d3ec3758b7b723c25ab45eb18a42974b8e36f9d5fbe5401853330901f53c98a82f0
- SSDEEP 384:HidT+UzSwipX7f2PdvYSffyyrrQYDM1jx+HaGrOwp3Zg7pVepriZPLgz7B:HidTpmwipX7f2J5fTrvtRJg6riZDgJ
- TLSH T106E294299C6A2831C343C85D9C76E102B3297C5B550D7179BADC85A82F48633D2FAFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
dVJAK6uP/gitignore
- SHA256 b3bde44730f83daa0c0a0f01ce28077d1844477bd6cc5dd59d04931626dadb35
- MD5 5d51b5274a2aa3254f9d9b04f6d6779b
- SHA1 7ebe0a3b4f7c19704094ad8f03c9bfa8d2ec0df6
- SHA512 26f8f4a75b2099123b50b580093d09d711a1610bef870933ae34c1358fc4cb63356bd4488602f7d9dfd0a1b368ad20d997a08a3369f9fcf3952486a56ca62841
- TLSH T103900269C6461409918447858DA60310A12DAA5546A244595514A5E47C09F8115575A6
- MD5 SHA1 SHA512 TLSH
dVJAK6uP/panel.html
- SHA256 42f5688af96eb5d47da58390a0e2079b05d1d0b18ccf0f1bcbf69beeb8e88d57
- MD5 079bf9a2eca78aab8cedaca0c72f0072
- SHA1 de0378c52e0ab9cb10dc82445165e97af68d80fe
- SHA512 3960f9a64a18f1ff8368dd9557680385643468cf5f8b05e22b832cb7e3f51ca77dfca52c26d21322a4d2eec96f95213860f69a8221d36929b97919d77f5ba36a
- SSDEEP 768:TH7FgVuvjntRp9i1tNv1nJalJvLZAFaKO9qUlyLetp:jOwbtv9i1tNvvavLZAFjO9blmetp
- TLSH T1C0D2F9219679213A6473F1A07AAB736AB2695307E201C87439DC5494CF8CAF981FFF94
- MD5 SHA1 SHA512 SSDEEP TLSH
dVJAK6uP/start.bat
- SHA256 5e1e378688c701a520bc588626c484c4cf31dcdd2453ad01537bfd99ce7de419
- MD5 08ab0e6b19b85bf6d5d6bf148a57a237
- SHA1 14dcb02ebd2d4cd2dc9027c8b6872eed01522aab
- SHA512 003a4a2940a20c034d965a574253b29e1ca1d50f696816df849c002406f5529ed138b6e356c7caf7c5da414eb30c02ff546d9a989405f944792f9981426c3b7e
- TLSH T121E0232350558074533C8959425D056AF32B04E3645FA8EE707750BC5F5AB60C5D756B
- MD5 SHA1 SHA512 TLSH
dVJAK6uP/token.json
- SHA256 1a1d784c169f0a5846c221ae399a73eb408d7f4d51df4cb1ffbbd6314dfd3f15
- MD5 227e91fd3abc2bfa4afcea363247a49a
- SHA1 bcfd71240e66527b3068f0acb4546122d0fc7602
- SHA512 42af8fbebfc74b01796b1706731a812d09c52ba4c22ad5efa965601bacb8e8f8a984bc8bdaf78d931acc604385a43619a63f1b0ed3128458cca524adb772be60
- TLSH T16CA0121CDE4215731440D8B10033A501C058604D14B3BD29540223C140028015D5074B
- MD5 SHA1 SHA512 TLSH
dVJAK6uP/tokens.txt
- SHA256 335c05ebc82d110fd99de900d84890d2beecbf38ba9501f2d2adc2f110b66bcb
- MD5 5687a0630e824a4e967b37655020fc73
- SHA1 3d0bfbc5a08d10148f793a38c4e8e4698a52586e
- SHA512 99bb94a4940d8a0980319308b60ea8a4cfdd9e65c7e4bc4458ce1a075fed2e0a52516541d2f944d2c33cd95b9640ab2e46cae633162f5e604136dbf798bb986f
- SSDEEP 192:pTuSr57oMqCmMLk1hdp5JAG/v/Py4RIr7sFPgPkqFd:pJrq1MLMTpbvzRImqkqFd
- TLSH T1DBE18E30AF1D9E42270A70EBF52CA00ABE0E73C73DC7D1A947DD707525E56E49494D02
- MD5 SHA1 SHA512 SSDEEP TLSH
dstorage.dll
- IMPHASH e00bdb68160edb92fd6d3c6b68049374
- SHA256 cae65787f61514bec6f012f44546e68b19e39d8854a9ab52af813370d44b272a
- MD5 08c190f8d8a2c4e20024b987c979de9d
- SHA1 a882f13df94f7e2dc3c0f2c4fbaa11bd988e1937
- SHA512 99002ae98cbd9cc9f377dd7b94c8d7883a0ff9ab02432585ffe2cf79600883d4d743790836fac425cb7f98126c255ac315130b861c464983c46be7a6f3064601
- SSDEEP 3072:Tzp2M7bV6ITJngWPqo5KVK8xHdoSe1OvnC/8FSz1RO2bR5cuL3TBJHi+eA+:TzsM7bLJn7PqouhHd9rVSZrtLTBJHiP
- TLSH T1B8148E55B6E400BAEDB7817CC9934606E6B2781107609BDF03A0837DAF2FBE8953D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:d9:77:f8:32:5d:19:a2:94:09:45:16:6a:1d:cf:23:c3:8b:ce:10:b5:bd:9b:6f:e1:57:93:95:39:fa:78:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:04:6c:74:06:ff:57:2b:27:72:00:00:00:00:04:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
91440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\bin\dstorage.pdb
api-ms-win-core-localization-l1-2-0
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoEx
LCMapStringW
FormatMessageA
FormatMessageW
api-ms-win-core-processthreads-l1-1-0
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
api-ms-win-core-heap-l1-1-0
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
GetProcessHeap
api-ms-win-core-libraryloader-l1-2-0
GetModuleFileNameA
GetProcAddress
GetModuleFileNameW
LoadLibraryExW
GetModuleHandleExA
FreeLibrary
GetModuleHandleExW
GetModuleHandleW
api-ms-win-core-debug-l1-1-0
DebugBreak
OutputDebugStringW
IsDebuggerPresent
api-ms-win-core-errorhandling-l1-1-0
RaiseException
UnhandledExceptionFilter
SetLastError
GetLastError
SetUnhandledExceptionFilter
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-synch-l1-1-0
CreateMutexExW
CreateSemaphoreExW
WaitForSingleObject
WaitForSingleObjectEx
ReleaseMutex
InitializeCriticalSectionEx
LeaveCriticalSection
ReleaseSemaphore
DeleteCriticalSection
OpenSemaphoreW
EnterCriticalSection
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-file-l1-1-0
GetFileType
WriteFile
FlushFileBuffers
SetFilePointerEx
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetStdHandle
api-ms-win-core-rtlsupport-l1-1-0
RtlUnwindEx
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlPcToFileHeader
RtlCaptureContext
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-console-l1-1-0
GetConsoleOutputCP
WriteConsoleW
GetConsoleMode
api-ms-win-core-fibers-l1-1-0
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-memory-l1-1-0
VirtualProtect
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-interlocked-l1-1-0
InterlockedFlushSList
InitializeSListHead
api-ms-win-core-util-l1-1-0
EncodePointer
DStorageCreateCompressionCodec
DStorageGetFactory
DStorageSetConfiguration
DStorageSetConfiguration1
Name
.text
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=260, version=34437,
count=15, id=259, version=34437,
count=172, id=261, version=34437,
count=57, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=122, id=1, productName=Unmarked objects,
count=6, id=265, version=34437,
count=1, id=256, version=34437,
count=1, id=255, version=34437,
count=1, id=151,
count=1, id=258, version=34437,
dstoragecore.dll
- IMPHASH 983a784f78b6175d57475d7b9afd6211
- SHA256 cf85b19a92a8276f8baca0db9bbcd60735bad50768deb303d310e84d5f4fdd11
- MD5 0b4f419dce596a34a7f8bdeaa06287fe
- SHA1 544ae4e733fe1f26d234b4921424e8564ca488ac
- SHA512 dd7dc0b08e4b7772fb41915e449dc2967e3ca046bce218d215f157a1201f2003fde8f469e74aed45a0d296c09b31593e4d0e415f576fc5b71916b083392d524a
- SSDEEP 24576:d4wQzMbV43xPciwvObM3vn0+poj5Z2ah:dZQ6+PcFYUa
- TLSH T1FD65AD83912194E1F1AAF23FD999D081EAFB7C210712CEDF95E1523A5B337D468392E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
70:b9:a7:7a:98:9a:67:66:8f:88:58:4e:00:7f:61:c9:4f:41:05:6b:08:60:04:55:06:d2:58:52:c0:1d:69:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:04:6c:74:06:ff:57:2b:27:72:00:00:00:00:04:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:08:78:9d:58:5d:92:c7:d9:52:00:01:00:00:02:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
215680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\bin\dstoragecore.pdb
api-ms-win-core-localization-l1-2-0
IsValidLocale
LCMapStringEx
GetOEMCP
IsValidCodePage
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoW
GetACP
EnumSystemLocalesW
LCMapStringW
FormatMessageW
api-ms-win-core-processthreads-l1-1-0
GetStartupInfoW
ExitProcess
ExitThread
CreateThread
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetThreadPriority
api-ms-win-core-heap-l1-1-0
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
HeapAlloc
HeapQueryInformation
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameA
GetModuleHandleExW
LoadLibraryExW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
GetModuleFileNameW
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
OutputDebugStringW
DebugBreak
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
SetLastError
UnhandledExceptionFilter
RaiseException
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
api-ms-win-core-synch-l1-1-0
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
ReleaseSemaphore
SetEvent
CreateSemaphoreExW
ReleaseMutex
CreateEventA
CreateMutexExW
WaitForSingleObjectEx
WaitForSingleObject
ResetEvent
OpenSemaphoreW
CreateEventExW
InitializeCriticalSectionAndSpinCount
CreateEventW
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
api-ms-win-core-registry-l1-1-0
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
api-ms-win-core-synch-l1-2-1
WaitForMultipleObjects
winmm
timeBeginPeriod
timeEndPeriod
dxgi
CreateDXGIFactory1
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
api-ms-win-core-synch-l1-2-0
SleepConditionVariableSRW
WakeConditionVariable
InitOnceComplete
WakeAllConditionVariable
InitOnceBeginInitialize
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
api-ms-win-core-rtlsupport-l1-1-0
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
RtlVirtualUnwind
RtlPcToFileHeader
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineW
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetStdHandle
api-ms-win-core-file-l1-1-0
WriteFile
SetFilePointerEx
FlushFileBuffers
ReadFile
GetFileInformationByHandle
FindClose
FindFirstFileExW
GetFileType
FindNextFileW
CreateFileW
api-ms-win-core-console-l1-1-0
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
api-ms-win-core-fibers-l1-1-0
FlsGetValue
FlsFree
FlsAlloc
FlsSetValue
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetSystemInfo
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
InterlockedFlushSList
api-ms-win-core-threadpool-l1-2-0
SetThreadpoolWait
CreateThreadpool
SubmitThreadpoolWork
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
SetThreadpoolThreadMaximum
CloseThreadpoolWait
CloseThreadpoolWork
CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpool
SetThreadpoolThreadMinimum
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryW
LoadLibraryA
api-ms-win-eventing-provider-l1-1-0
EventWriteEx
EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister
EventEnabled
api-ms-win-core-version-l1-1-1
GetFileVersionInfoW
GetFileVersionInfoSizeW
api-ms-win-core-version-l1-1-0
VerQueryValueW
api-ms-win-core-io-l1-1-0
DeviceIoControl
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
api-ms-win-core-com-l1-1-0
CoCreateFreeThreadedMarshaler
CoCreateGuid
ntdll
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
kernel32
GetVersion
GetModuleHandleA
d3d12
D3D12SerializeVersionedRootSignature
oleaut32
GetErrorInfo
SysStringLen
SysFreeString
SetErrorInfo
SysAllocString
DStorageCreateCompressionCodecCore
DStorageGetFactoryCore
DStorageSDKVersion
DStorageSetConfigurationCore
Name
.text
Size
371KB
Virtual Size
371KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1014KB
Virtual Size
1014KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=261, version=34321,
count=32, id=260, version=34437,
count=209, id=261, version=34437,
count=18, id=259, version=34437,
count=1, id=263, version=29395,
count=1, id=261, version=29395,
count=85, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=192, id=1, productName=Unmarked objects,
count=80, id=265, version=34437,
count=1, id=256, version=34437,
count=1, id=255, version=34437,
count=1, id=151,
count=1, id=258, version=34437,
steam_appid.txt
- SHA256 ddfe0e8d462af661f81db36589c39882dc0f2330785b5d80cd34f2f520ad618f
- MD5 6ea2ef7311b482724a9b7b0bc0dd85c6
- SHA1 6153f0b97fb44420cd413a37979f8e6219fc3f36
- SHA512 625d4f1baae7226b0222022b72cbae4c4e628781e984854f5624b3c0381bf5e609b98661489159f0ff5d9dc275bf8ea68418f74aceb144c055bc403b3f553297
- MD5 SHA1 SHA512