Among.Us.zip
- SHA256 696ad11dec0a1fb2a612ecef32119f3003fd648423ed4137c0d78c72827b8ea8
Static task
static1
5 signatures
General
- Target Among.Us.zip
- Size 675.0MB
- Sample261024-2v8gcsxwas
- SHA256 696ad11dec0a1fb2a612ecef32119f3003fd648423ed4137c0d78c72827b8ea8
- MD5 0ee7e3f6a1c2fb851a51b71d533aa2b0
- SHA1 44a02d05a038c08f19788ead38ed3add3fad67c6
- SHA512 c978f6db70868ed0e329c622e4125e248f70dcd399f1607faef074933c2f38c1af76530a6b8ffb089a04ea03570d9763fb722340ee102149db442b6405292dab
- SSDEEP 12582912:1J1dofkaobfwyYVTRrpcu/xlXCkfyR4wBLqmTstkjigBbkJky5ydiI5w/0BP/YkF:ro8VwyYFlxlXZyRPsmT8WigBgdkQI5wm
- TLSH T15F79334A0ADC4D7EDD0618798871BE4A5E06107647D4897B61A9DC9CACE3FF102FEBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/Among.Us/Among Us/wdapp.exe - DLL Hijacking vulnerability 1 IoCs
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
resource unpack001/Among.Us/Among Us/winmm.dll - Insecure Codesign Algorithm 2 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Among.Us/Among Us/Among Us_Data/Plugins/x86_64/discord_game_sdk.dll unpack001/Among.Us/Among Us/Among Us_Data/Plugins/x86_64/steam_api64.dll - Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/Among.Us/Among Us/Among Us.exe unpack001/Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Rewired_DirectInput.dll unpack001/Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Rewired_WindowsGamingInput.dll unpack001/Among.Us/Among Us/Among Us_Data/Plugins/x86_64/sentry.dll unpack001/Among.Us/Among Us/Among Us_Data/Plugins/x86_64/tess2.dll unpack001/Among.Us/Among Us/GameAssembly.dll unpack001/Among.Us/Among Us/OnlineFix64.dll unpack001/Among.Us/Among Us/crashpad_handler.exe unpack001/Among.Us/Among Us/winmm.dll unpack001/Among.Us/_Redist/vcredist_x64.exe - Untrusted Codesign Signers 5 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Among.Us/Among Us/UnityCrashHandler64.exe unpack001/Among.Us/Among Us/baselib.dll unpack001/Among.Us/_Redist/dotNetFx40_Full_setup.exe unpack001/Among.Us/_Redist/dxwebsetup.exe unpack001/Among.Us/_Redist/oalinst.exe
File Explorer
-
Among.Us.zip.zip 675.0MB
-
Among.Us/Among Us/Among Us.exe.exe 651KB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/EOSSDK-Win64-Shipping.dll.dll 17.5MB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Microsoft_Xbox_Services_141_GDK_C_Thunks.dll.dll 2.0MB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Rewired_DirectInput.dll.dll 104KB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Rewired_WindowsGamingInput.dll.dll 149KB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/XGamingRuntimeThunks.dll.dll 74KB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/discord_game_sdk.dll.dll 3.7MB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/sentry.dll.dll 548KB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/steam_api64.dll.dll 259KB
-
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/tess2.dll.dll 35KB
-
Among.Us/Among Us/Among Us_Data/Resources/unity default resources1.5MB
-
Among.Us/Among Us/Among Us_Data/Resources/unity_builtin_extra231KB
-
Among.Us/Among Us/Among Us_Data/RuntimeInitializeOnLoads.json3KB
-
Among.Us/Among Us/Among Us_Data/ScriptingAssemblies.json4KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/CustomAssetPacksData.json137B
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/UnityServicesProjectConfiguration.json1KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/AddressablesLink/link.xml28KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/0e13d00f4e855a64ab6bfe6989b0ff98_unitybuiltinshaders.bundle53KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2024_birthday_beans_assets_all.bundle234KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2024beanbundle1_assets_all.bundle2.1MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2025beanbuffer2_assets_all.bundle5.0MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/anniversaryslothmask_assets_all.bundle29KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/cosmicubelny24_assets_all.bundle19.6MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/critrolecubea_assets_all.bundle14.1MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/critrolecubeb_assets_all.bundle18.3MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/edgeworth_assets_all.bundle793KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/genshin_assets_all.bundle1.5MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/hanami_assets_all.bundle20.8MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/initialcosmetics_assets_all.bundle197.6MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/initialmaps_assets_all.bundle139.6MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/kamurocho_assets_all.bundle31.2MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/nye2025_assets_all.bundle39KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/nye2026_assets_all.bundle33KB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/pawsnclaws_assets_all.bundle27.2MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/phoenixwright_assets_all.bundle1.1MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/racingcubea_assets_all.bundle7.1MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/racingcubeb_assets_all.bundle17.5MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/referencedatagroup_assets_all_9f02457c7c175b1ee21092cc29dd5801.bundle2.1MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/stardewa_assets_all.bundle5.8MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/stardewb_assets_all.bundle17.9MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/catalog.json1.0MB
-
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/settings.json3KB
-
Among.Us/Among Us/Among Us_Data/app.info19B
-
Among.Us/Among Us/Among Us_Data/boot.config110B
-
Among.Us/Among Us/Among Us_Data/globalgamemanagers228KB
-
Among.Us/Among Us/Among Us_Data/globalgamemanagers.assets495KB
-
Among.Us/Among Us/Among Us_Data/globalgamemanagers.assets.resS608KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Metadata/global-metadata.dat15.6MB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Buffers.dll-resources.dat394B
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Collections.Immutable.dll-resources.dat1KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Memory.dll-resources.dat1KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Numerics.Vectors.dll-resources.dat856B
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Reflection.Metadata.dll-resources.dat11KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Text.Encodings.Web.dll-resources.dat435B
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Text.Json.dll-resources.dat21KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/System.Data.dll-resources.dat91KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/System.Drawing.dll-resources.dat24KB
-
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat329KB
-
Among.Us/Among Us/Among Us_Data/level01KB
-
Among.Us/Among Us/Among Us_Data/level196KB
-
Among.Us/Among Us/Among Us_Data/level21.7MB
-
Among.Us/Among Us/Among Us_Data/level341KB
-
Among.Us/Among Us/Among Us_Data/level4528KB
-
Among.Us/Among Us/Among Us_Data/level5534KB
-
Among.Us/Among Us/Among Us_Data/level658KB
-
Among.Us/Among Us/Among Us_Data/level7239KB
-
Among.Us/Among Us/Among Us_Data/level8269KB
-
Among.Us/Among Us/Among Us_Data/level9208KB
-
Among.Us/Among Us/Among Us_Data/resources.assets25.6MB
-
Among.Us/Among Us/Among Us_Data/resources.assets.resS27.2MB
-
Among.Us/Among Us/Among Us_Data/resources.resource13KB
-
Among.Us/Among Us/Among Us_Data/sharedassets0.assets1.4MB
-
Among.Us/Among Us/Among Us_Data/sharedassets1.assets176KB
-
Among.Us/Among Us/Among Us_Data/sharedassets1.assets.resS17.2MB
-
Among.Us/Among Us/Among Us_Data/sharedassets1.resource200KB
-
Among.Us/Among Us/Among Us_Data/sharedassets2.assets10.5MB
-
Among.Us/Among Us/Among Us_Data/sharedassets2.assets.resS136.8MB
-
Among.Us/Among Us/Among Us_Data/sharedassets2.resource36.8MB
-
Among.Us/Among Us/Among Us_Data/sharedassets3.assets95KB
-
Among.Us/Among Us/Among Us_Data/sharedassets4.assets1.8MB
-
Among.Us/Among Us/Among Us_Data/sharedassets4.assets.resS20.8MB
-
Among.Us/Among Us/Among Us_Data/sharedassets4.resource2.0MB
-
Among.Us/Among Us/Among Us_Data/sharedassets5.assets145KB
-
Among.Us/Among Us/Among Us_Data/sharedassets6.assets13KB
-
Among.Us/Among Us/Among Us_Data/sharedassets6.resource1.7MB
-
Among.Us/Among Us/Among Us_Data/sharedassets7.assets123KB
-
Among.Us/Among Us/Among Us_Data/sharedassets7.assets.resS14.0MB
-
Among.Us/Among Us/Among Us_Data/sharedassets8.assets48KB
-
Among.Us/Among Us/Among Us_Data/sharedassets8.assets.resS2.5MB
-
Among.Us/Among Us/Among Us_Data/sharedassets8.resource487KB
-
Among.Us/Among Us/Among Us_Data/sharedassets9.assets1.8MB
-
Among.Us/Among Us/Among Us_Data/sharedassets9.assets.resS11.1MB
-
Among.Us/Among Us/Among Us_Data/sharedassets9.resource1.8MB
-
Among.Us/Among Us/GDK_Helper.bat.bat .vbs 1KB
-
Among.Us/Among Us/GameAssembly.dll.dll 56.0MB
-
Among.Us/Among Us/MicrosoftGame.Config1KB
-
Among.Us/Among Us/OnlineFix.ini886B
-
Among.Us/Among Us/OnlineFix.url46B
-
Among.Us/Among Us/OnlineFix64.dll.dll 9.0MB
-
Among.Us/Among Us/SplashScreenImage.png.png 1.2MB
-
Among.Us/Among Us/Square150x150Logo.png.png 4KB
-
Among.Us/Among Us/Square44x44Logo.png.png 1KB
-
Among.Us/Among Us/StoreLogo.png.png 3KB
-
Among.Us/Among Us/UnityCrashHandler64.exe.exe 1.1MB
-
Among.Us/Among Us/UnityPlayer.dll.dll 29.3MB
-
Among.Us/Among Us/appxmanifest.xml.xml 2KB
-
Among.Us/Among Us/baselib.dll.dll 408KB
-
Among.Us/Among Us/crashpad_handler.exe.exe 612KB
-
Among.Us/Among Us/dlllist.txt15B
-
Among.Us/Among Us/layout.xml1KB
-
Among.Us/Among Us/layout_76fd15bb-86a8-4a92-9c5e-f62f3f7faea8.xml1KB
-
Among.Us/Among Us/wdapp.exe.exe 377KB
-
Among.Us/Among Us/winmm.dll.dll 512KB
-
Among.Us/Among Us/xsapi.dll.dll 297KB
-
Among.Us/HOW TO RUN GAME!!.txt284B
-
Among.Us/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url52B
-
Among.Us/_Redist/dotNetFx40_Full_setup.exe.exe 868KB
-
Among.Us/_Redist/dxwebsetup.exe.exe 281KB
-
Among.Us/_Redist/oalinst.exe.exe 790KB
-
Among.Us/_Redist/vcredist_2015-2019_x64.exe.exe 14.3MB
-
Among.Us/_Redist/vcredist_2015-2019_x86.exe.exe 13.7MB
-
Among.Us/_Redist/vcredist_x64.exe.exe 2.2MB
Among.Us/Among Us/Among Us.exe
- IMPHASH ce1183cc150987a99aef5749f22af81e
- SHA256 209d0cda85a2f86a46b6f3f97843dfee86d18259c987708376f6e1bf87d208e3
- MD5 b90b3d839872ae022e37a87b9636081c
- SHA1 d3ee59ea8493a4f36a5acffafd42ea85a1928a9c
- SHA512 6af2adb57de70224bbec93d8ea76112edba5f192bfd56af610afe3607a179c6c3d0a468e6959c8a71bf8f27b4a341f6a1ebefe631fb18451c244c5264a1ecb65
- SSDEEP 3072:SQJ/VdFgIW9mYucJ/OD8JlsI9TTItTukyyj0+5snQw:7/7FG9mpcJ/OD8WYkV5sn9
- TLSH T166E412EB3E68098FD251147FCC718A63895B6C696B058D4D75B33BAE4C204357EB2A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
unityplayer
UnityMain
kernel32
HeapAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
552KB
Virtual Size
552KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=28900,
count=138, id=261, version=28900,
count=10, id=260, version=28900,
count=2, id=257, version=28900,
count=39, id=261, version=29118,
count=16, id=260, version=29118,
count=9, id=259, version=29118,
count=3, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=89, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/EOSSDK-Win64-Shipping.dll
- IMPHASH 6f90686978635f4e0ad2100771072d86
- SHA256 b5b023265a160112bdab17bc7e5175d02d8db8eec8d8bc04b749b06a5914e523
- MD5 c3ff158d4230d9600349b64591d4f7b5
- SHA1 60672a9416bf2bbeacbbd259be72024c6ec09e69
- SHA512 645cfccef67eabf56c2242a992194d1969e05a98822ad6fec864185c17e08e38affd2025495cb479fb7e4be2d7c811154f494557cf2922b5b046b0b864684a84
- SSDEEP 196608:allTCTZnnZk4ptZ/J1mk8XmOLqDJRPP+Emk9C5M:Cl2FnRtZ/J1mdmOLqDJRPPfmkEO
- TLSH T12E07284272F40094D4BAC2BD8E27D912DB71398A1B31E6CF0660999A1F77FF599BE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
89:48:70:c1:1e:3d:d7:ce:08:8a:32:13:e6:4e:40:0c:94:5c:19:d0:10:bb:27:0d:4c:68:93:09:16:f8:ab:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 17, 2024
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
46:96:a8:99:67:9f:a2:20:85:57:04:45:25:67:cf:6f:0a:b4:9b:a9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 17, 2024
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:1a:46:54:2e:fc:af:0b:58:3d:fd:3d:c8:87:1e:8f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 1, 2024 - Mar 5, 2025
Minor OS version
0
Major OS version
6
Entry point
14320968
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
EOSSDK-Win64-Shipping.pdb
ws2_32
socket
send
getsockname
getpeername
htons
freeaddrinfo
sendto
getaddrinfo
inet_pton
listen
shutdown
ntohl
select
closesocket
WSAIoctl
bind
accept
WSACleanup
ntohs
WSACreateEvent
WSACloseEvent
ioctlsocket
getnameinfo
setsockopt
connect
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAResetEvent
WSASetEvent
WSASetLastError
gethostbyname
__WSAFDIsSet
inet_addr
getprotobyname
WSAAddressToStringW
WSAStringToAddressW
gethostname
recvfrom
recv
getsockopt
WSAGetLastError
inet_ntop
htonl
WSAStartup
winmm
timeSetEvent
timeKillEvent
timeGetTime
timeEndPeriod
timeBeginPeriod
kernel32
SetCriticalSectionSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetLastError
SetLastError
GetCommandLineW
GetFullPathNameW
GetModuleFileNameW
LocalAlloc
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
LocalFree
GetModuleHandleW
SetThreadErrorMode
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
HeapSetInformation
SetHandleInformation
WaitForSingleObject
GetCurrentProcessId
GetCurrentProcess
CreateFileW
GetFileAttributesW
RaiseException
CreateEventW
ResetEvent
SetFilePointer
GetFileSizeEx
FileTimeToSystemTime
SystemTimeToFileTime
ReOpenFile
FlushFileBuffers
SetEndOfFile
MapViewOfFile
UnmapViewOfFile
GetFileAttributesExW
DeleteFileW
MoveFileW
SetFileAttributesW
SetFileTime
GetFinalPathNameByHandleW
CreateFileMappingW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GlobalMemoryStatusEx
K32GetProcessMemoryInfo
GetSystemInfo
VirtualAlloc
VirtualFree
VerSetConditionMask
VerifyVersionInfoW
GetNativeSystemInfo
GetVersionExW
TerminateProcess
GetEnvironmentVariableW
SetEnvironmentVariableW
OutputDebugStringW
FormatMessageW
GetCurrentThread
GetLogicalProcessorInformationEx
InitializeCriticalSection
GetOverlappedResult
WriteFile
ReadFile
GetModuleHandleExW
FreeLibrary
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetThreadAffinityMask
GetExitCodeProcess
QueryPerformanceFrequency
GetStdHandle
GetCurrentDirectoryW
GetTempPathW
GetLongPathNameW
SwitchToThread
Sleep
SetEvent
SetThreadPriority
SuspendThread
ResumeThread
GetLocalTime
GetSystemTime
GetProcessTimes
GetSystemTimeAsFileTime
TryEnterCriticalSection
WideCharToMultiByte
OpenThread
DebugBreak
FormatMessageA
OutputDebugStringA
IsDebuggerPresent
GetModuleHandleA
QueueUserAPC
GetThreadId
MultiByteToWideChar
FlsAlloc
FlsSetValue
GetLargePageMinimum
VirtualUnlock
LoadLibraryA
GetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
SwitchToFiber
DeleteFiber
CreateFiber
GetFileType
RtlVirtualUnwind
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetTickCount
InitializeCriticalSectionEx
GetSystemDirectoryA
WaitForSingleObjectEx
SleepEx
CompareFileTime
MoveFileExA
GetFileSize
SetFilePointerEx
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
LeaveCriticalSection
EnterCriticalSection
InitializeSListHead
VirtualProtect
user32
DialogBoxParamW
EndDialog
UnregisterHotKey
MessageBoxW
PeekMessageW
GetDesktopWindow
PostThreadMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
KillTimer
SetTimer
GetProcessWindowStation
RegisterHotKey
GetUserObjectInformationW
GetSystemMetrics
GetDlgItem
SetWindowPos
SetDlgItemTextW
GetWindowRect
ScreenToClient
SetWindowTextW
GetTopWindow
SetForegroundWindow
gdi32
CreateCompatibleDC
DeleteDC
GetTextExtentPoint32W
advapi32
CryptSignHashW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
DeregisterEventSource
RegQueryValueExW
GetUserNameW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
CryptAcquireContextW
CryptReleaseContext
CredDeleteW
CredFree
CredReadW
CredWriteW
RegisterEventSourceW
ReportEventW
CryptDestroyKey
CryptSetHashParam
CryptEnumProvidersW
RegCreateKeyExW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
shell32
CommandLineToArgvW
ShellExecuteW
SHGetKnownFolderPath
ole32
CoCreateGuid
CoInitialize
CoTaskMemFree
PropVariantClear
CoCreateInstance
CoUninitialize
iphlpapi
GetAdaptersAddresses
crypt32
CertOpenSystemStoreA
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertOpenSystemStoreW
CertEnumCertificatesInStore
CertOpenStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertCloseStore
wintrust
WinVerifyTrust
secur32
FreeCredentialsHandle
CompleteAuthToken
InitializeSecurityContextA
AcquireCredentialsHandleA
DeleteSecurityContext
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration
msvcp140
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Xbad_function_call@std@@YAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPEBD@Z
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
_Query_perf_frequency
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
_Cnd_destroy_in_situ
??1ios_base@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_timedwait
_Mtx_current_owns
_Xtime_get_ticks
_Cnd_wait
_Thrd_id
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_broadcast
_Cnd_init_in_situ
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
bcrypt
BCryptGenRandom
vcruntime140
strchr
memcmp
memmove
memcpy
memset
wcsrchr
__C_specific_handler
strstr
wcschr
strrchr
wcsstr
_purecall
__std_type_info_destroy_list
memchr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_cexit
__sys_errlist
signal
_initterm
strerror
_crt_atexit
_execute_onexit_table
raise
_exit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
_endthreadex
_invoke_watson
strerror_s
abort
exit
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
__sys_nerr
api-ms-win-crt-string-l1-1-0
wcsncmp
_strdup
strcspn
iswalnum
strpbrk
_strnicmp
strncmp
iswalpha
_stricmp
strncat
iswdigit
isspace
iswxdigit
wcsncpy
strncpy
isprint
iswspace
strnlen
strlen
wcslen
strcmp
tolower
islower
strspn
toupper
isalnum
isalpha
api-ms-win-crt-convert-l1-1-0
strtoll
_wtoi
strtoull
strtoul
_strtoi64
_wcstoi64
_wtoi64
wcstod
_wcstoui64
_wtof
strtof
wcstoul
strtol
atoll
wcstombs
atoi
api-ms-win-crt-math-l1-1-0
modf
trunc
asin
_fdopen
sin
log10
log2f
cos
log
lrint
exp2f
sinf
cosf
expf
sqrtf
pow
sqrt
exp
_dpcomp
tanf
llround
tanhf
powf
floorf
floor
expm1
roundf
log10f
ceil
round
_finite
ceilf
_dclass
logf
_isnan
nan
api-ms-win-crt-utility-l1-1-0
srand
rand
qsort
api-ms-win-crt-stdio-l1-1-0
_fileno
_setmode
_wfopen
__stdio_common_vfprintf
ftell
_close
_isatty
fgets
fflush
__stdio_common_vfwprintf
__acrt_iob_func
fclose
fseek
__stdio_common_vswprintf
_read
setvbuf
fread
_fseeki64
_open
ferror
__stdio_common_vsprintf
fopen
fwrite
fputs
fputc
__stdio_common_vsscanf
_write
feof
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
realloc
_heapchk
_get_heap_handle
api-ms-win-crt-time-l1-1-0
__daylight
_time64
_mktime64
_localtime64
__timezone
_tzset
_gmtime64
strftime
_ftime64
_gmtime64_s
clock
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-conio-l1-1-0
_cputs
api-ms-win-crt-filesystem-l1-1-0
_fstat64
_stat64i32
rename
_stat64
_stat32i64
_unlink
_access
api-ms-win-crt-multibyte-l1-1-0
_mbspbrk
EOS_Achievements_AddNotifyAchievementsUnlocked
EOS_Achievements_AddNotifyAchievementsUnlockedV2
EOS_Achievements_CopyAchievementDefinitionByAchievementId
EOS_Achievements_CopyAchievementDefinitionByIndex
EOS_Achievements_CopyAchievementDefinitionV2ByAchievementId
EOS_Achievements_CopyAchievementDefinitionV2ByIndex
EOS_Achievements_CopyPlayerAchievementByAchievementId
EOS_Achievements_CopyPlayerAchievementByIndex
EOS_Achievements_CopyUnlockedAchievementByAchievementId
EOS_Achievements_CopyUnlockedAchievementByIndex
EOS_Achievements_DefinitionV2_Release
EOS_Achievements_Definition_Release
EOS_Achievements_GetAchievementDefinitionCount
EOS_Achievements_GetPlayerAchievementCount
EOS_Achievements_GetUnlockedAchievementCount
EOS_Achievements_PlayerAchievement_Release
EOS_Achievements_QueryDefinitions
EOS_Achievements_QueryPlayerAchievements
EOS_Achievements_RemoveNotifyAchievementsUnlocked
EOS_Achievements_UnlockAchievements
EOS_Achievements_UnlockedAchievement_Release
EOS_ActiveSession_CopyInfo
EOS_ActiveSession_GetRegisteredPlayerByIndex
EOS_ActiveSession_GetRegisteredPlayerCount
EOS_ActiveSession_Info_Release
EOS_ActiveSession_Release
EOS_AntiCheatClient_AddExternalIntegrityCatalog
EOS_AntiCheatClient_AddNotifyClientIntegrityViolated
EOS_AntiCheatClient_AddNotifyMessageToPeer
EOS_AntiCheatClient_AddNotifyMessageToServer
EOS_AntiCheatClient_AddNotifyPeerActionRequired
EOS_AntiCheatClient_AddNotifyPeerAuthStatusChanged
EOS_AntiCheatClient_BeginSession
EOS_AntiCheatClient_EndSession
EOS_AntiCheatClient_GetProtectMessageOutputLength
EOS_AntiCheatClient_PollStatus
EOS_AntiCheatClient_ProtectMessage
EOS_AntiCheatClient_ReceiveMessageFromPeer
EOS_AntiCheatClient_ReceiveMessageFromServer
EOS_AntiCheatClient_RegisterPeer
EOS_AntiCheatClient_RemoveNotifyClientIntegrityViolated
EOS_AntiCheatClient_RemoveNotifyMessageToPeer
EOS_AntiCheatClient_RemoveNotifyMessageToServer
EOS_AntiCheatClient_RemoveNotifyPeerActionRequired
EOS_AntiCheatClient_RemoveNotifyPeerAuthStatusChanged
EOS_AntiCheatClient_UnprotectMessage
EOS_AntiCheatClient_UnregisterPeer
EOS_AntiCheatServer_AddNotifyClientActionRequired
EOS_AntiCheatServer_AddNotifyClientAuthStatusChanged
EOS_AntiCheatServer_AddNotifyMessageToClient
EOS_AntiCheatServer_BeginSession
EOS_AntiCheatServer_EndSession
EOS_AntiCheatServer_GetProtectMessageOutputLength
EOS_AntiCheatServer_LogEvent
EOS_AntiCheatServer_LogGameRoundEnd
EOS_AntiCheatServer_LogGameRoundStart
EOS_AntiCheatServer_LogPlayerDespawn
EOS_AntiCheatServer_LogPlayerRevive
EOS_AntiCheatServer_LogPlayerSpawn
EOS_AntiCheatServer_LogPlayerTakeDamage
EOS_AntiCheatServer_LogPlayerTick
EOS_AntiCheatServer_LogPlayerUseAbility
EOS_AntiCheatServer_LogPlayerUseWeapon
EOS_AntiCheatServer_ProtectMessage
EOS_AntiCheatServer_ReceiveMessageFromClient
EOS_AntiCheatServer_RegisterClient
EOS_AntiCheatServer_RegisterEvent
EOS_AntiCheatServer_RemoveNotifyClientActionRequired
EOS_AntiCheatServer_RemoveNotifyClientAuthStatusChanged
EOS_AntiCheatServer_RemoveNotifyMessageToClient
EOS_AntiCheatServer_SetClientDetails
EOS_AntiCheatServer_SetClientNetworkState
EOS_AntiCheatServer_SetGameSessionId
EOS_AntiCheatServer_UnprotectMessage
EOS_AntiCheatServer_UnregisterClient
EOS_Audio_CreateNewInputStream
EOS_Audio_CreateNewOutputStream
EOS_Audio_DestroyInputStream
EOS_Audio_DestroyOutputStream
EOS_Audio_EnableCommunicationsModeOutputDevices
EOS_Audio_GetInputDeviceInfo
EOS_Audio_GetInputStreamInfo
EOS_Audio_GetOutputDeviceInfo
EOS_Audio_GetOutputStreamInfo
EOS_Audio_IsInputStreamDeviceDisconnected
EOS_Audio_IsInputStreamSilent
EOS_Audio_QueryInputDevices
EOS_Audio_QueryOutputDevices
EOS_Audio_RegisterUser
EOS_Audio_RemoveNotifyDevicesChanged
EOS_Audio_SetFeatureEnabledForInputStream
EOS_Audio_SetNotifyDevicesChanged
EOS_Audio_StartInputStream
EOS_Audio_StartOutputStream
EOS_Audio_StopInputStream
EOS_Audio_StopOutputStream
EOS_Audio_UnregisterUser
EOS_Auth_AddNotifyLoginStatusChanged
EOS_Auth_CopyIdToken
EOS_Auth_CopyUserAuthToken
EOS_Auth_DeletePersistentAuth
EOS_Auth_GetLoggedInAccountByIndex
EOS_Auth_GetLoggedInAccountsCount
EOS_Auth_GetLoginStatus
EOS_Auth_GetMergedAccountByIndex
EOS_Auth_GetMergedAccountsCount
EOS_Auth_GetSelectedAccountId
EOS_Auth_IdToken_Release
EOS_Auth_LinkAccount
EOS_Auth_Login
EOS_Auth_Logout
EOS_Auth_QueryIdToken
EOS_Auth_RemoveNotifyLoginStatusChanged
EOS_Auth_Token_Release
EOS_Auth_VerifyIdToken
EOS_Auth_VerifyUserAuth
EOS_BeginScopeEvent
EOS_BroadcastAudio_CreateNewInputStream
EOS_BroadcastAudio_CreateNewOutputStream
EOS_BroadcastAudio_DestroyInputStream
EOS_BroadcastAudio_DestroyOutputStream
EOS_BroadcastAudio_GetCurrentGainLevel
EOS_BroadcastAudio_GetCurrentMicAmplitude
EOS_BroadcastAudio_GetInputStreamInfo
EOS_BroadcastAudio_GetOutputStreamInfo
EOS_BroadcastAudio_PushPacketToOutputStream
EOS_BroadcastAudio_SetEncoderSettings
EOS_BroadcastAudio_SetMicProcessingSettings
EOS_BroadcastAudio_StartInputStream
EOS_BroadcastAudio_StartOutputStream
EOS_BroadcastAudio_StopInputStream
EOS_BroadcastAudio_StopOutputStream
EOS_ByteArray_ToString
EOS_Connect_AddNotifyAuthExpiration
EOS_Connect_AddNotifyLoginStatusChanged
EOS_Connect_CopyIdToken
EOS_Connect_CopyProductUserExternalAccountByAccountId
EOS_Connect_CopyProductUserExternalAccountByAccountType
EOS_Connect_CopyProductUserExternalAccountByIndex
EOS_Connect_CopyProductUserInfo
EOS_Connect_CreateDeviceId
EOS_Connect_CreateUser
EOS_Connect_DeleteDeviceId
EOS_Connect_ExternalAccountInfo_Release
EOS_Connect_GetExternalAccountMapping
EOS_Connect_GetLoggedInUserByIndex
EOS_Connect_GetLoggedInUsersCount
EOS_Connect_GetLoginStatus
EOS_Connect_GetProductUserExternalAccountCount
EOS_Connect_GetProductUserIdMapping
EOS_Connect_IdToken_Release
EOS_Connect_LinkAccount
EOS_Connect_Login
EOS_Connect_Logout
EOS_Connect_QueryExternalAccountMappings
EOS_Connect_QueryProductUserIdMappings
EOS_Connect_RemoveNotifyAuthExpiration
EOS_Connect_RemoveNotifyLoginStatusChanged
EOS_Connect_TransferDeviceIdAccount
EOS_Connect_UnlinkAccount
EOS_Connect_VerifyIdToken
EOS_ContinuanceToken_ToString
EOS_CustomInvites_AcceptRequestToJoin
EOS_CustomInvites_AddNotifyCustomInviteAccepted
EOS_CustomInvites_AddNotifyCustomInviteReceived
EOS_CustomInvites_AddNotifyCustomInviteRejected
EOS_CustomInvites_AddNotifyRequestToJoinAccepted
EOS_CustomInvites_AddNotifyRequestToJoinReceived
EOS_CustomInvites_AddNotifyRequestToJoinRejected
EOS_CustomInvites_AddNotifyRequestToJoinResponseReceived
EOS_CustomInvites_AddNotifySendCustomNativeInviteRequested
EOS_CustomInvites_FinalizeInvite
EOS_CustomInvites_RejectRequestToJoin
EOS_CustomInvites_RemoveNotifyCustomInviteAccepted
EOS_CustomInvites_RemoveNotifyCustomInviteReceived
EOS_CustomInvites_RemoveNotifyCustomInviteRejected
EOS_CustomInvites_RemoveNotifyRequestToJoinAccepted
EOS_CustomInvites_RemoveNotifyRequestToJoinReceived
EOS_CustomInvites_RemoveNotifyRequestToJoinRejected
EOS_CustomInvites_RemoveNotifyRequestToJoinResponseReceived
EOS_CustomInvites_RemoveNotifySendCustomNativeInviteRequested
EOS_CustomInvites_SendCustomInvite
EOS_CustomInvites_SendRequestToJoin
EOS_CustomInvites_SetCustomInvite
EOS_EApplicationStatus_ToString
EOS_ENetworkStatus_ToString
EOS_EResult_IsOperationComplete
EOS_EResult_ToString
EOS_Ecom_CatalogItem_Release
EOS_Ecom_CatalogOffer_Release
EOS_Ecom_CatalogRelease_Release
EOS_Ecom_Checkout
EOS_Ecom_CopyEntitlementById
EOS_Ecom_CopyEntitlementByIndex
EOS_Ecom_CopyEntitlementByNameAndIndex
EOS_Ecom_CopyItemById
EOS_Ecom_CopyItemImageInfoByIndex
EOS_Ecom_CopyItemReleaseByIndex
EOS_Ecom_CopyLastRedeemedEntitlementByIndex
EOS_Ecom_CopyOfferById
EOS_Ecom_CopyOfferByIndex
EOS_Ecom_CopyOfferImageInfoByIndex
EOS_Ecom_CopyOfferItemByIndex
EOS_Ecom_CopyTransactionById
EOS_Ecom_CopyTransactionByIndex
EOS_Ecom_Entitlement_Release
EOS_Ecom_GetEntitlementsByNameCount
EOS_Ecom_GetEntitlementsCount
EOS_Ecom_GetItemImageInfoCount
EOS_Ecom_GetItemReleaseCount
EOS_Ecom_GetLastRedeemedEntitlementsCount
EOS_Ecom_GetOfferCount
EOS_Ecom_GetOfferImageInfoCount
EOS_Ecom_GetOfferItemCount
EOS_Ecom_GetTransactionCount
EOS_Ecom_KeyImageInfo_Release
EOS_Ecom_QueryEntitlementToken
EOS_Ecom_QueryEntitlements
EOS_Ecom_QueryOffers
EOS_Ecom_QueryOwnership
EOS_Ecom_QueryOwnershipBySandboxIds
EOS_Ecom_QueryOwnershipToken
EOS_Ecom_RedeemEntitlements
EOS_Ecom_SetSalesChannel
EOS_Ecom_Transaction_CopyEntitlementByIndex
EOS_Ecom_Transaction_GetEntitlementsCount
EOS_Ecom_Transaction_GetTransactionId
EOS_Ecom_Transaction_Release
EOS_EndScopeEvent
EOS_EpicAccountId_FromString
EOS_EpicAccountId_IsValid
EOS_EpicAccountId_ToString
EOS_Friends_AcceptInvite
EOS_Friends_AddNotifyBlockedUsersUpdate
EOS_Friends_AddNotifyFriendsUpdate
EOS_Friends_GetBlockedUserAtIndex
EOS_Friends_GetBlockedUsersCount
EOS_Friends_GetFriendAtIndex
EOS_Friends_GetFriendsCount
EOS_Friends_GetStatus
EOS_Friends_QueryFriends
EOS_Friends_RejectInvite
EOS_Friends_RemoveNotifyBlockedUsersUpdate
EOS_Friends_RemoveNotifyFriendsUpdate
EOS_Friends_SendInvite
EOS_GetVersion
EOS_Initialize
EOS_IntegratedPlatformOptionsContainer_Add
EOS_IntegratedPlatformOptionsContainer_Release
EOS_IntegratedPlatform_AddNotifyUserLoginStatusChanged
EOS_IntegratedPlatform_ClearUserPreLogoutCallback
EOS_IntegratedPlatform_CreateIntegratedPlatformOptionsContainer
EOS_IntegratedPlatform_FinalizeDeferredUserLogout
EOS_IntegratedPlatform_RemoveNotifyUserLoginStatusChanged
EOS_IntegratedPlatform_SetUserLoginStatus
EOS_IntegratedPlatform_SetUserPreLogoutCallback
EOS_InventoryItem_CreateSubItem
EOS_InventoryItem_DeleteSubItem
EOS_InventoryItem_GetDoubleSetValueByIndex
EOS_InventoryItem_GetInt64SetValueByIndex
EOS_InventoryItem_GetKey
EOS_InventoryItem_GetStringSetValueByIndex
EOS_InventoryItem_GetSubItem
EOS_InventoryItem_GetSubItemByIndex
EOS_InventoryItem_GetSubItemsCount
EOS_InventoryItem_GetValueAsBool
EOS_InventoryItem_GetValueAsDouble
EOS_InventoryItem_GetValueAsInt64
EOS_InventoryItem_GetValueAsString
EOS_InventoryItem_GetValueAsTimestamp
EOS_InventoryItem_GetValueCount
EOS_InventoryItem_GetValueType
EOS_InventoryItem_SetKey
EOS_InventoryItem_SetValueAsBool
EOS_InventoryItem_SetValueAsDouble
EOS_InventoryItem_SetValueAsDoubleSet
EOS_InventoryItem_SetValueAsInt64
EOS_InventoryItem_SetValueAsInt64Set
EOS_InventoryItem_SetValueAsString
EOS_InventoryItem_SetValueAsStringSet
EOS_InventoryItem_SetValueAsTimestamp
EOS_Inventory_Checkpoint
EOS_Inventory_Close
EOS_Inventory_Create
EOS_Inventory_Open
EOS_KWS_AddNotifyPermissionsUpdateReceived
EOS_KWS_CopyPermissionByIndex
EOS_KWS_CreateUser
EOS_KWS_GetPermissionByKey
EOS_KWS_GetPermissionsCount
EOS_KWS_PermissionStatus_Release
EOS_KWS_QueryAgeGate
EOS_KWS_QueryPermissions
EOS_KWS_RemoveNotifyPermissionsUpdateReceived
EOS_KWS_RequestPermissions
EOS_KWS_UpdateParentEmail
EOS_Leaderboards_CopyLeaderboardDefinitionByIndex
EOS_Leaderboards_CopyLeaderboardDefinitionByLeaderboardId
EOS_Leaderboards_CopyLeaderboardRecordByIndex
EOS_Leaderboards_CopyLeaderboardRecordByUserId
EOS_Leaderboards_CopyLeaderboardUserScoreByIndex
EOS_Leaderboards_CopyLeaderboardUserScoreByUserId
EOS_Leaderboards_Definition_Release
EOS_Leaderboards_GetLeaderboardDefinitionCount
EOS_Leaderboards_GetLeaderboardRecordCount
EOS_Leaderboards_GetLeaderboardUserScoreCount
EOS_Leaderboards_LeaderboardDefinition_Release
EOS_Leaderboards_LeaderboardRecord_Release
EOS_Leaderboards_LeaderboardUserScore_Release
EOS_Leaderboards_QueryLeaderboardDefinitions
EOS_Leaderboards_QueryLeaderboardRanks
EOS_Leaderboards_QueryLeaderboardUserScores
EOS_LobbyDetails_CopyAttributeByIndex
EOS_LobbyDetails_CopyAttributeByKey
EOS_LobbyDetails_CopyInfo
EOS_LobbyDetails_CopyMemberAttributeByIndex
EOS_LobbyDetails_CopyMemberAttributeByKey
EOS_LobbyDetails_CopyMemberInfo
EOS_LobbyDetails_GetAttributeCount
EOS_LobbyDetails_GetLobbyOwner
EOS_LobbyDetails_GetMemberAttributeCount
EOS_LobbyDetails_GetMemberByIndex
EOS_LobbyDetails_GetMemberCount
EOS_LobbyDetails_Info_Release
EOS_LobbyDetails_MemberInfo_Release
EOS_LobbyDetails_Release
EOS_LobbyModification_AddAttribute
EOS_LobbyModification_AddMemberAttribute
EOS_LobbyModification_Release
EOS_LobbyModification_RemoveAttribute
EOS_LobbyModification_RemoveMemberAttribute
EOS_LobbyModification_SetAllowedPlatformIds
EOS_LobbyModification_SetBucketId
EOS_LobbyModification_SetInvitesAllowed
EOS_LobbyModification_SetMaxMembers
EOS_LobbyModification_SetPermissionLevel
EOS_LobbySearch_CopySearchResultByIndex
EOS_LobbySearch_Find
EOS_LobbySearch_GetSearchResultCount
EOS_LobbySearch_Release
EOS_LobbySearch_RemoveParameter
EOS_LobbySearch_SetLobbyId
EOS_LobbySearch_SetMaxResults
EOS_LobbySearch_SetParameter
EOS_LobbySearch_SetTargetUserId
EOS_Lobby_AddNotifyJoinLobbyAccepted
EOS_Lobby_AddNotifyLeaveLobbyRequested
EOS_Lobby_AddNotifyLobbyInviteAccepted
EOS_Lobby_AddNotifyLobbyInviteReceived
EOS_Lobby_AddNotifyLobbyInviteRejected
EOS_Lobby_AddNotifyLobbyMemberStatusReceived
EOS_Lobby_AddNotifyLobbyMemberUpdateReceived
EOS_Lobby_AddNotifyLobbyUpdateReceived
EOS_Lobby_AddNotifyRTCRoomConnectionChanged
EOS_Lobby_AddNotifySendLobbyNativeInviteRequested
EOS_Lobby_Attribute_Release
EOS_Lobby_CopyLobbyDetailsHandle
EOS_Lobby_CopyLobbyDetailsHandleByInviteId
EOS_Lobby_CopyLobbyDetailsHandleByUiEventId
EOS_Lobby_CreateLobby
EOS_Lobby_CreateLobbySearch
EOS_Lobby_DestroyLobby
EOS_Lobby_GetConnectString
EOS_Lobby_GetInviteCount
EOS_Lobby_GetInviteIdByIndex
EOS_Lobby_GetRTCRoomName
EOS_Lobby_HardMuteMember
EOS_Lobby_IsRTCRoomConnected
EOS_Lobby_JoinLobby
EOS_Lobby_JoinLobbyById
EOS_Lobby_KickMember
EOS_Lobby_LeaveLobby
EOS_Lobby_ParseConnectString
EOS_Lobby_PromoteMember
EOS_Lobby_QueryInvites
EOS_Lobby_RejectInvite
EOS_Lobby_RemoveNotifyJoinLobbyAccepted
EOS_Lobby_RemoveNotifyLeaveLobbyRequested
EOS_Lobby_RemoveNotifyLobbyInviteAccepted
EOS_Lobby_RemoveNotifyLobbyInviteReceived
EOS_Lobby_RemoveNotifyLobbyInviteRejected
EOS_Lobby_RemoveNotifyLobbyMemberStatusReceived
EOS_Lobby_RemoveNotifyLobbyMemberUpdateReceived
EOS_Lobby_RemoveNotifyLobbyUpdateReceived
EOS_Lobby_RemoveNotifyRTCRoomConnectionChanged
EOS_Lobby_RemoveNotifySendLobbyNativeInviteRequested
EOS_Lobby_SendInvite
EOS_Lobby_UpdateLobby
EOS_Lobby_UpdateLobbyModification
EOS_Logging_SetCallback
EOS_Logging_SetLogLevel
EOS_Mercury_Initialize
EOS_Mercury_Shutdown
EOS_Mercury_Tick
EOS_Metrics_BeginPlayerSession
EOS_Metrics_EndPlayerSession
EOS_Mods_CopyModInfo
EOS_Mods_EnumerateMods
EOS_Mods_InstallMod
EOS_Mods_ModInfo_Release
EOS_Mods_UninstallMod
EOS_Mods_UpdateMod
EOS_P2P_AcceptConnection
EOS_P2P_AddNotifyIncomingPacketQueueFull
EOS_P2P_AddNotifyPeerConnectionClosed
EOS_P2P_AddNotifyPeerConnectionEstablished
EOS_P2P_AddNotifyPeerConnectionInterrupted
EOS_P2P_AddNotifyPeerConnectionRequest
EOS_P2P_ClearPacketQueue
EOS_P2P_CloseConnection
EOS_P2P_CloseConnections
EOS_P2P_GetNATType
EOS_P2P_GetNextReceivedPacketSize
EOS_P2P_GetPacketQueueInfo
EOS_P2P_GetPortRange
EOS_P2P_GetRelayControl
EOS_P2P_QueryNATType
EOS_P2P_ReceivePacket
EOS_P2P_RemoveNotifyIncomingPacketQueueFull
EOS_P2P_RemoveNotifyPeerConnectionClosed
EOS_P2P_RemoveNotifyPeerConnectionEstablished
EOS_P2P_RemoveNotifyPeerConnectionInterrupted
EOS_P2P_RemoveNotifyPeerConnectionRequest
EOS_P2P_SendPacket
EOS_P2P_SetPacketQueueSize
EOS_P2P_SetPortRange
EOS_P2P_SetRelayControl
EOS_Platform_CheckForLauncherAndRestart
EOS_Platform_Create
EOS_Platform_GetAchievementsInterface
EOS_Platform_GetActiveCountryCode
EOS_Platform_GetActiveLocaleCode
EOS_Platform_GetAntiCheatClientInterface
EOS_Platform_GetAntiCheatServerInterface
EOS_Platform_GetApplicationStatus
EOS_Platform_GetAuthInterface
EOS_Platform_GetConnectInterface
EOS_Platform_GetCustomInvitesInterface
EOS_Platform_GetDesktopCrossplayStatus
EOS_Platform_GetEcomInterface
EOS_Platform_GetFriendsInterface
EOS_Platform_GetIntegratedPlatformInterface
EOS_Platform_GetInventoryInterface
EOS_Platform_GetKWSInterface
EOS_Platform_GetLeaderboardsInterface
EOS_Platform_GetLobbyInterface
EOS_Platform_GetMetricsInterface
EOS_Platform_GetModsInterface
EOS_Platform_GetNetworkStatus
EOS_Platform_GetOverrideCountryCode
EOS_Platform_GetOverrideLocaleCode
EOS_Platform_GetP2PInterface
EOS_Platform_GetPlayerDataStorageInterface
EOS_Platform_GetPresenceInterface
EOS_Platform_GetProgressionSnapshotInterface
EOS_Platform_GetRTCAdminInterface
EOS_Platform_GetRTCInterface
EOS_Platform_GetReceiptValidatorInterface
EOS_Platform_GetReportsInterface
EOS_Platform_GetSanctionsInterface
EOS_Platform_GetSessionsInterface
EOS_Platform_GetStatsInterface
EOS_Platform_GetTitleStorageInterface
EOS_Platform_GetUIInterface
EOS_Platform_GetUserInfoInterface
EOS_Platform_Release
EOS_Platform_SetApplicationStatus
EOS_Platform_SetNetworkStatus
EOS_Platform_SetOverrideCountryCode
EOS_Platform_SetOverrideLocaleCode
EOS_Platform_Tick
EOS_PlayerDataStorageFileTransferRequest_CancelRequest
EOS_PlayerDataStorageFileTransferRequest_GetFileRequestState
EOS_PlayerDataStorageFileTransferRequest_GetFilename
EOS_PlayerDataStorageFileTransferRequest_Release
EOS_PlayerDataStorage_CopyFileMetadataAtIndex
EOS_PlayerDataStorage_CopyFileMetadataByFilename
EOS_PlayerDataStorage_DeleteCache
EOS_PlayerDataStorage_DeleteFile
EOS_PlayerDataStorage_DuplicateFile
EOS_PlayerDataStorage_FileMetadata_Release
EOS_PlayerDataStorage_GetFileMetadataCount
EOS_PlayerDataStorage_QueryFile
EOS_PlayerDataStorage_QueryFileList
EOS_PlayerDataStorage_ReadFile
EOS_PlayerDataStorage_WriteFile
EOS_PresenceModification_DeleteData
EOS_PresenceModification_Release
EOS_PresenceModification_SetData
EOS_PresenceModification_SetJoinInfo
EOS_PresenceModification_SetRawRichText
EOS_PresenceModification_SetStatus
EOS_Presence_AddNotifyJoinGameAccepted
EOS_Presence_AddNotifyOnPresenceChanged
EOS_Presence_CopyPresence
EOS_Presence_CreatePresenceModification
EOS_Presence_GetJoinInfo
EOS_Presence_HasPresence
EOS_Presence_Info_Release
EOS_Presence_QueryPresence
EOS_Presence_RemoveNotifyJoinGameAccepted
EOS_Presence_RemoveNotifyOnPresenceChanged
EOS_Presence_SetPresence
EOS_ProductUserId_FromString
EOS_ProductUserId_IsValid
EOS_ProductUserId_ToString
EOS_ProgressionSnapshot_AddProgression
EOS_ProgressionSnapshot_BeginSnapshot
EOS_ProgressionSnapshot_DeleteSnapshot
EOS_ProgressionSnapshot_EndSnapshot
EOS_ProgressionSnapshot_SubmitSnapshot
EOS_RTCAdmin_CopyUserTokenByIndex
EOS_RTCAdmin_CopyUserTokenByUserId
EOS_RTCAdmin_Kick
EOS_RTCAdmin_QueryJoinRoomToken
EOS_RTCAdmin_SetParticipantHardMute
EOS_RTCAdmin_UserToken_Release
EOS_RTCAudio_AddNotifyAudioBeforeRender
EOS_RTCAudio_AddNotifyAudioBeforeSend
EOS_RTCAudio_AddNotifyAudioDevicesChanged
EOS_RTCAudio_AddNotifyAudioInputState
EOS_RTCAudio_AddNotifyAudioOutputState
EOS_RTCAudio_AddNotifyParticipantUpdated
EOS_RTCAudio_CopyInputDeviceInformationByIndex
EOS_RTCAudio_CopyOutputDeviceInformationByIndex
EOS_RTCAudio_GetAudioInputDeviceByIndex
EOS_RTCAudio_GetAudioInputDevicesCount
EOS_RTCAudio_GetAudioOutputDeviceByIndex
EOS_RTCAudio_GetAudioOutputDevicesCount
EOS_RTCAudio_GetInputDevicesCount
EOS_RTCAudio_GetOutputDevicesCount
EOS_RTCAudio_InputDeviceInformation_Release
EOS_RTCAudio_OutputDeviceInformation_Release
EOS_RTCAudio_QueryInputDevicesInformation
EOS_RTCAudio_QueryOutputDevicesInformation
EOS_RTCAudio_RegisterPlatformAudioUser
EOS_RTCAudio_RegisterPlatformUser
EOS_RTCAudio_RemoveNotifyAudioBeforeRender
EOS_RTCAudio_RemoveNotifyAudioBeforeSend
EOS_RTCAudio_RemoveNotifyAudioDevicesChanged
EOS_RTCAudio_RemoveNotifyAudioInputState
EOS_RTCAudio_RemoveNotifyAudioOutputState
EOS_RTCAudio_RemoveNotifyParticipantUpdated
EOS_RTCAudio_SendAudio
EOS_RTCAudio_SetAudioInputSettings
EOS_RTCAudio_SetAudioOutputSettings
EOS_RTCAudio_SetInputDeviceSettings
EOS_RTCAudio_SetOutputDeviceSettings
EOS_RTCAudio_SetPosition
EOS_RTCAudio_UnregisterPlatformAudioUser
EOS_RTCAudio_UnregisterPlatformUser
EOS_RTCAudio_UpdateParticipantVolume
EOS_RTCAudio_UpdateReceiving
EOS_RTCAudio_UpdateReceivingVolume
EOS_RTCAudio_UpdateSending
EOS_RTCAudio_UpdateSendingVolume
EOS_RTCData_AddNotifyDataReceived
EOS_RTCData_AddNotifyParticipantUpdated
EOS_RTCData_RemoveNotifyDataReceived
EOS_RTCData_RemoveNotifyParticipantUpdated
EOS_RTCData_SendData
EOS_RTCData_UpdateReceiving
EOS_RTCData_UpdateSending
EOS_RTCVideo_AddNotifyParticipantUpdated
EOS_RTCVideo_AddNotifyVideoReceived
EOS_RTCVideo_CreateOutgoingVideoFrameFormat
EOS_RTCVideo_RemoveNotifyParticipantUpdated
EOS_RTCVideo_RemoveNotifyVideoReceived
EOS_RTCVideo_SendVideo
EOS_RTCVideo_SetAdaptVideoFrameCallback
EOS_RTCVideo_SetVideoAllocationCallback
EOS_RTCVideo_SetVideoReleaseCallback
EOS_RTCVideo_UpdateReceiving
EOS_RTCVideo_UpdateSending
EOS_RTC_AddNotifyDisconnected
EOS_RTC_AddNotifyParticipantStatusChanged
EOS_RTC_AddNotifyRoomStatisticsUpdated
EOS_RTC_BlockParticipant
EOS_RTC_GetAudioInterface
EOS_RTC_GetDataInterface
EOS_RTC_JoinRoom
EOS_RTC_LeaveRoom
EOS_RTC_RemoveNotifyDisconnected
EOS_RTC_RemoveNotifyParticipantStatusChanged
EOS_RTC_RemoveNotifyRoomStatisticsUpdated
EOS_RTC_SetRoomSetting
EOS_RTC_SetSetting
EOS_ReceiptValidator_VerifyPurchase
EOS_Reports_SendPlayerBehaviorReport
EOS_Sanctions_CopyPlayerSanctionByIndex
EOS_Sanctions_CreatePlayerSanctionAppeal
EOS_Sanctions_GetPlayerSanctionCount
EOS_Sanctions_PlayerSanction_Release
EOS_Sanctions_QueryActivePlayerSanctions
EOS_SessionDetails_Attribute_Release
EOS_SessionDetails_CopyInfo
EOS_SessionDetails_CopySessionAttributeByIndex
EOS_SessionDetails_CopySessionAttributeByKey
EOS_SessionDetails_GetSessionAttributeCount
EOS_SessionDetails_Info_Release
EOS_SessionDetails_Release
EOS_SessionModification_AddAttribute
EOS_SessionModification_Release
EOS_SessionModification_RemoveAttribute
EOS_SessionModification_SetAllowedPlatformIds
EOS_SessionModification_SetBucketId
EOS_SessionModification_SetHostAddress
EOS_SessionModification_SetInvitesAllowed
EOS_SessionModification_SetJoinInProgressAllowed
EOS_SessionModification_SetMaxPlayers
EOS_SessionModification_SetPermissionLevel
EOS_SessionSearch_CopySearchResultByIndex
EOS_SessionSearch_Find
EOS_SessionSearch_GetSearchResultCount
EOS_SessionSearch_Release
EOS_SessionSearch_RemoveParameter
EOS_SessionSearch_SetMaxResults
EOS_SessionSearch_SetParameter
EOS_SessionSearch_SetSessionId
EOS_SessionSearch_SetTargetUserId
EOS_Sessions_AddNotifyJoinSessionAccepted
EOS_Sessions_AddNotifyLeaveSessionRequested
EOS_Sessions_AddNotifySendSessionNativeInviteRequested
EOS_Sessions_AddNotifySessionInviteAccepted
EOS_Sessions_AddNotifySessionInviteReceived
EOS_Sessions_AddNotifySessionInviteRejected
EOS_Sessions_CopyActiveSessionHandle
EOS_Sessions_CopySessionHandleByInviteId
EOS_Sessions_CopySessionHandleByUiEventId
EOS_Sessions_CopySessionHandleForPresence
EOS_Sessions_CreateSessionModification
EOS_Sessions_CreateSessionSearch
EOS_Sessions_DestroySession
EOS_Sessions_DumpSessionState
EOS_Sessions_EndSession
EOS_Sessions_GetInviteCount
EOS_Sessions_GetInviteIdByIndex
EOS_Sessions_IsUserInSession
EOS_Sessions_JoinSession
EOS_Sessions_QueryInvites
EOS_Sessions_RegisterPlayers
EOS_Sessions_RejectInvite
EOS_Sessions_RemoveNotifyJoinSessionAccepted
EOS_Sessions_RemoveNotifyLeaveSessionRequested
EOS_Sessions_RemoveNotifySendSessionNativeInviteRequested
EOS_Sessions_RemoveNotifySessionInviteAccepted
EOS_Sessions_RemoveNotifySessionInviteReceived
EOS_Sessions_RemoveNotifySessionInviteRejected
EOS_Sessions_SendInvite
EOS_Sessions_StartSession
EOS_Sessions_UnregisterPlayers
EOS_Sessions_UpdateSession
EOS_Sessions_UpdateSessionModification
EOS_Shutdown
EOS_Stats_CopyStatByIndex
EOS_Stats_CopyStatByName
EOS_Stats_GetStatsCount
EOS_Stats_IngestStat
EOS_Stats_QueryStats
EOS_Stats_Stat_Release
EOS_TitleStorageFileTransferRequest_CancelRequest
EOS_TitleStorageFileTransferRequest_GetFileRequestState
EOS_TitleStorageFileTransferRequest_GetFilename
EOS_TitleStorageFileTransferRequest_Release
EOS_TitleStorage_CopyFileMetadataAtIndex
EOS_TitleStorage_CopyFileMetadataByFilename
EOS_TitleStorage_DeleteCache
EOS_TitleStorage_FileMetadata_Release
EOS_TitleStorage_GetFileMetadataCount
EOS_TitleStorage_QueryFile
EOS_TitleStorage_QueryFileList
EOS_TitleStorage_ReadFile
EOS_UI_AcknowledgeEventId
EOS_UI_AddNotifyDisplaySettingsUpdated
EOS_UI_AddNotifyMemoryMonitor
EOS_UI_GetFriendsExclusiveInput
EOS_UI_GetFriendsVisible
EOS_UI_GetNotificationLocationPreference
EOS_UI_GetToggleFriendsButton
EOS_UI_GetToggleFriendsKey
EOS_UI_HideFriends
EOS_UI_IsSocialOverlayPaused
EOS_UI_IsValidButtonCombination
EOS_UI_IsValidKeyCombination
EOS_UI_PauseSocialOverlay
EOS_UI_PrePresent
EOS_UI_RemoveNotifyDisplaySettingsUpdated
EOS_UI_RemoveNotifyMemoryMonitor
EOS_UI_ReportInputState
EOS_UI_SetDisplayPreference
EOS_UI_SetToggleFriendsButton
EOS_UI_SetToggleFriendsKey
EOS_UI_ShowBlockPlayer
EOS_UI_ShowFriends
EOS_UI_ShowNativeProfile
EOS_UI_ShowReportPlayer
EOS_UserInfo_BestDisplayName_Release
EOS_UserInfo_CopyBestDisplayName
EOS_UserInfo_CopyBestDisplayNameWithPlatform
EOS_UserInfo_CopyExternalUserInfoByAccountId
EOS_UserInfo_CopyExternalUserInfoByAccountType
EOS_UserInfo_CopyExternalUserInfoByIndex
EOS_UserInfo_CopyUserInfo
EOS_UserInfo_ExternalUserInfo_Release
EOS_UserInfo_GetExternalUserInfoCount
EOS_UserInfo_GetLocalPlatformType
EOS_UserInfo_QueryUserInfo
EOS_UserInfo_QueryUserInfoByDisplayName
EOS_UserInfo_QueryUserInfoByExternalAccount
EOS_UserInfo_Release
Name
.text
Size
13.7MB
Virtual Size
13.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
123KB
Virtual Size
845KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
697KB
Virtual Size
697KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=253, version=28518,
count=8, id=260, version=30034,
count=14, id=259, version=30034,
count=6, id=257, version=30034,
count=2, id=260, version=26715,
count=2, id=262, version=26715,
count=35, id=257, version=26715,
count=21, id=261, version=30034,
count=135, id=260, version=27031,
count=675, id=1, productName=Unmarked objects,
count=30, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=92, id=260, version=30153,
count=560, id=260, version=24234,
count=11, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1086, productName=Unmarked objects (old),
count=70, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Microsoft_Xbox_Services_141_GDK_C_Thunks.dll
- IMPHASH f9deebce80019e079ee2ae5b4416e3db
- SHA256 58133981f9527abb8f5470d275e5d425ae639b6e333132c113cf95b36e220c0b
- MD5 ca1c0f44f72bd0aaf4d390273452b408
- SHA1 e29c7e11b401e6903f29a2c641046e44471ebf11
- SHA512 1f19334b62ca810f628d632e0129492150c8e2ff942dbffffa90731ab71a68268c922849b5a9fd328a574f92645c92b12923cb67993bd50ab2abb8b7a5da0e7f
- SSDEEP 24576:fk8yWPn+LiXXEfy/qKrRoiZiMUhWJvi20kEKSnnFUOUuh39XbQ7Rl5a:s8yW+cXEfCqiyA0kEKCUOUK39rQ7k
- TLSH T12FA55D9B7A6880B4C1EAC2B9CE5B8D4BFBB134454B3097DF40E18A5E1E77BE0957D210
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fa:e4:31:fb:19:32:32:b1:36:50:48:ce:e0:66:a5:6b:1c:86:a6:f8:d3:fe:d4:1d:f5:e5:da:02:9d:be:4c:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 21, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F77F-E356-5BAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2a:e8:17:96:f8:86:a7:ef:a3:00:00:00:00:01:2a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
1162832
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\BA\362\b\Release\Gaming.Desktop.x64\Microsoft.Xbox.Services.141.GDK.C.Thunks\Microsoft_Xbox_Services_141_GDK_C_Thunks.pdb
advapi32
RegCloseKey
RegOpenKeyW
RegQueryValueExW
EventUnregister
EventSetInformation
EventRegister
msvcp140
?bad@ios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?_Xbad_function_call@std@@YAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?_XGetLastError@std@@YAXXZ
?setf@ios_base@std@@QEAAHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
_Mtx_trylock
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?uncaught_exception@std@@YA_NXZ
?_Winerror_message@std@@YAKKPEADK@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?classic@locale@std@@SAAEBV12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Xlength_error@std@@YAXPEBD@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?fail@ios_base@std@@QEBA_NXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
kernel32
OutputDebugStringA
InitializeCriticalSection
GlobalFree
WaitForSingleObject
LoadLibraryW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetUserDefaultLocaleName
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatEx
GetTimeFormatEx
SystemTimeToFileTime
FileTimeToSystemTime
FormatMessageW
GetModuleHandleA
GetSystemTimeAsFileTime
GetSystemTime
GetLastError
LoadLibraryExA
GetProcAddress
FreeLibrary
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
vcruntime140
__std_type_info_destroy_list
__RTDynamicCast
__std_type_info_compare
_purecall
memcmp
memchr
memmove
memcpy
__CxxFrameHandler3
__C_specific_handler
__std_exception_destroy
__std_exception_copy
__std_terminate
memset
_CxxThrowException
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_cexit
_errno
_execute_onexit_table
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo
_seh_filter_dll
terminate
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-heap-l1-1-0
malloc
realloc
_callnewh
free
api-ms-win-crt-string-l1-1-0
isalpha
_isctype_l
wcsnlen
strnlen
wcstok_s
isspace
isdigit
tolower
_stricmp
iswspace
_wcsicmp
strcpy_s
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
fclose
fflush
__stdio_common_vsprintf_s
__stdio_common_vswscanf
fgetc
fgetpos
fputc
fread
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf_s
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
api-ms-win-crt-filesystem-l1-1-0
_lock_file
remove
_unlock_file
api-ms-win-crt-time-l1-1-0
_localtime64_s
_gmtime64_s
strftime
_time64
api-ms-win-crt-locale-l1-1-0
_create_locale
_free_locale
__pctype_func
api-ms-win-crt-convert-l1-1-0
_ui64tow_s
_ui64toa_s
_i64toa_s
strtoul
_wtoi
strtoull
_wcstod_l
_i64tow_s
api-ms-win-crt-math-l1-1-0
pow
api-ms-win-core-psm-appnotify-l1-1-0
UnregisterAppStateChangeNotification
RegisterAppStateChangeNotification
ole32
StringFromGUID2
CoCreateGuid
crypt32
CertFindChainInStore
CertOpenSystemStoreW
CertFreeCertificateChain
CertCloseStore
winhttp
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpSetStatusCallback
WinHttpSetOption
WinHttpQueryOption
WinHttpWebSocketQueryCloseStatus
WinHttpSetTimeouts
WinHttpWebSocketShutdown
WinHttpOpenRequest
WinHttpWebSocketReceive
WinHttpAddRequestHeaders
WinHttpWebSocketSend
WinHttpWebSocketCompleteUpgrade
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
XblAchievementsGetAchievementAsync
XblAchievementsGetAchievementResult
XblAchievementsGetAchievementsForTitleIdAsync
XblAchievementsGetAchievementsForTitleIdResult
XblAchievementsResultCloseHandle
XblAchievementsResultDuplicateHandle
XblAchievementsResultGetAchievements
XblAchievementsResultGetNextAsync
XblAchievementsResultGetNextResult
XblAchievementsResultHasNext
XblAchievementsUpdateAchievementAsync
XblAchievementsUpdateAchievementForTitleIdAsync
XblAddServiceCallRoutedHandler
XblCleanupAsync
XblContextCloseHandle
XblContextCreateHandle
XblContextDuplicateHandle
XblContextGetUser
XblContextGetXboxUserId
XblContextSettingsGetHttpRetryDelay
XblContextSettingsGetHttpTimeoutWindow
XblContextSettingsGetLongHttpTimeout
XblContextSettingsGetUseCrossPlatformQosServers
XblContextSettingsGetWebsocketTimeoutWindow
XblContextSettingsSetHttpRetryDelay
XblContextSettingsSetHttpTimeoutWindow
XblContextSettingsSetLongHttpTimeout
XblContextSettingsSetUseCrossPlatformQosServers
XblContextSettingsSetWebsocketTimeoutWindow
XblDisableAssertsForXboxLiveThrottlingInDevSandboxes
XblEventsWriteInGameEvent
XblFormatSecureDeviceAddress
XblGetAsyncQueue
XblGetErrorCondition
XblGetScid
XblHttpCallCloseHandle
XblHttpCallCreate
XblHttpCallDuplicateHandle
XblHttpCallGetHeader
XblHttpCallGetHeaderAtIndex
XblHttpCallGetNetworkErrorCode
XblHttpCallGetNumHeaders
XblHttpCallGetPlatformNetworkErrorMessage
XblHttpCallGetRequestUrl
XblHttpCallGetResponseBodyBytes
XblHttpCallGetResponseBodyBytesSize
XblHttpCallGetResponseString
XblHttpCallGetStatusCode
XblHttpCallPerformAsync
XblHttpCallRequestSetHeader
XblHttpCallRequestSetLongHttpCall
XblHttpCallRequestSetRequestBodyBytes
XblHttpCallRequestSetRequestBodyString
XblHttpCallRequestSetRetryAllowed
XblHttpCallRequestSetRetryCacheId
XblHttpCallSetTracing
XblInitialize
XblLeaderboardGetLeaderboardAsync
XblLeaderboardGetLeaderboardResult
XblLeaderboardGetLeaderboardResultSize
XblLeaderboardResultGetNextAsync
XblLeaderboardResultGetNextResult
XblLeaderboardResultGetNextResultSize
XblMatchmakingCreateMatchTicketAsync
XblMatchmakingCreateMatchTicketResult
XblMatchmakingDeleteMatchTicketAsync
XblMatchmakingGetHopperStatisticsAsync
XblMatchmakingGetHopperStatisticsResult
XblMatchmakingGetHopperStatisticsResultSize
XblMatchmakingGetMatchTicketDetailsAsync
XblMatchmakingGetMatchTicketDetailsResult
XblMatchmakingGetMatchTicketDetailsResultSize
XblMemGetFunctions
XblMemSetFunctions
XblMultiplayerActivityDeleteActivityAsync
XblMultiplayerActivityFlushRecentPlayersAsync
XblMultiplayerActivityGetActivityAsync
XblMultiplayerActivityGetActivityResult
XblMultiplayerActivityGetActivityResultSize
XblMultiplayerActivitySendInvitesAsync
XblMultiplayerActivitySetActivityAsync
XblMultiplayerActivityUpdateRecentPlayers
XblMultiplayerAddConnectionIdChangedHandler
XblMultiplayerAddSessionChangedHandler
XblMultiplayerAddSubscriptionLostHandler
XblMultiplayerClearActivityAsync
XblMultiplayerCreateSearchHandleAsync
XblMultiplayerCreateSearchHandleResult
XblMultiplayerDeleteSearchHandleAsync
XblMultiplayerEventArgsFindMatchCompleted
XblMultiplayerEventArgsMember
XblMultiplayerEventArgsMembers
XblMultiplayerEventArgsMembersCount
XblMultiplayerEventArgsPerformQoSMeasurements
XblMultiplayerEventArgsPropertiesJson
XblMultiplayerEventArgsTournamentGameSessionReady
XblMultiplayerEventArgsTournamentRegistrationStateChanged
XblMultiplayerEventArgsXuid
XblMultiplayerGetActivitiesForSocialGroupAsync
XblMultiplayerGetActivitiesForSocialGroupResult
XblMultiplayerGetActivitiesForSocialGroupResultCount
XblMultiplayerGetActivitiesForUsersAsync
XblMultiplayerGetActivitiesForUsersResult
XblMultiplayerGetActivitiesForUsersResultCount
XblMultiplayerGetActivitiesWithPropertiesForSocialGroupAsync
XblMultiplayerGetActivitiesWithPropertiesForSocialGroupResult
XblMultiplayerGetActivitiesWithPropertiesForSocialGroupResultSize
XblMultiplayerGetActivitiesWithPropertiesForUsersAsync
XblMultiplayerGetActivitiesWithPropertiesForUsersResult
XblMultiplayerGetActivitiesWithPropertiesForUsersResultSize
XblMultiplayerGetSearchHandlesAsync
XblMultiplayerGetSearchHandlesResult
XblMultiplayerGetSearchHandlesResultCount
XblMultiplayerGetSessionAsync
XblMultiplayerGetSessionByHandleAsync
XblMultiplayerGetSessionByHandleResult
XblMultiplayerGetSessionResult
XblMultiplayerManagerAutoFillMembersDuringMatchmaking
XblMultiplayerManagerCancelMatch
XblMultiplayerManagerDoWork
XblMultiplayerManagerEstimatedMatchWaitTime
XblMultiplayerManagerFindMatch
XblMultiplayerManagerGameSessionActive
XblMultiplayerManagerGameSessionConstants
XblMultiplayerManagerGameSessionCorrelationId
XblMultiplayerManagerGameSessionHost
XblMultiplayerManagerGameSessionIsHost
XblMultiplayerManagerGameSessionMembers
XblMultiplayerManagerGameSessionMembersCount
XblMultiplayerManagerGameSessionPropertiesJson
XblMultiplayerManagerGameSessionSessionReference
XblMultiplayerManagerGameSessionSetProperties
XblMultiplayerManagerGameSessionSetSynchronizedHost
XblMultiplayerManagerGameSessionSetSynchronizedProperties
XblMultiplayerManagerInitialize
XblMultiplayerManagerJoinGame
XblMultiplayerManagerJoinGameFromLobby
XblMultiplayerManagerJoinLobby
XblMultiplayerManagerJoinability
XblMultiplayerManagerLeaveGame
XblMultiplayerManagerLobbySessionAddLocalUser
XblMultiplayerManagerLobbySessionConstants
XblMultiplayerManagerLobbySessionCorrelationId
XblMultiplayerManagerLobbySessionDeleteLocalMemberProperties
XblMultiplayerManagerLobbySessionHost
XblMultiplayerManagerLobbySessionInviteFriends
XblMultiplayerManagerLobbySessionInviteUsers
XblMultiplayerManagerLobbySessionIsHost
XblMultiplayerManagerLobbySessionLastTournamentTeamResult
XblMultiplayerManagerLobbySessionLocalMembers
XblMultiplayerManagerLobbySessionLocalMembersCount
XblMultiplayerManagerLobbySessionMembers
XblMultiplayerManagerLobbySessionMembersCount
XblMultiplayerManagerLobbySessionPropertiesJson
XblMultiplayerManagerLobbySessionRemoveLocalUser
XblMultiplayerManagerLobbySessionSessionReference
XblMultiplayerManagerLobbySessionSetLocalMemberConnectionAddress
XblMultiplayerManagerLobbySessionSetLocalMemberProperties
XblMultiplayerManagerLobbySessionSetProperties
XblMultiplayerManagerLobbySessionSetSynchronizedHost
XblMultiplayerManagerLobbySessionSetSynchronizedProperties
XblMultiplayerManagerMatchStatus
XblMultiplayerManagerMemberAreMembersOnSameDevice
XblMultiplayerManagerSetAutoFillMembersDuringMatchmaking
XblMultiplayerManagerSetJoinability
XblMultiplayerManagerSetQosMeasurements
XblMultiplayerQuerySessionsAsync
XblMultiplayerQuerySessionsResult
XblMultiplayerQuerySessionsResultCount
XblMultiplayerRemoveConnectionIdChangedHandler
XblMultiplayerRemoveSessionChangedHandler
XblMultiplayerRemoveSubscriptionLostHandler
XblMultiplayerSearchHandleCloseHandle
XblMultiplayerSearchHandleDuplicateHandle
XblMultiplayerSearchHandleGetCreationTime
XblMultiplayerSearchHandleGetCustomSessionPropertiesJson
XblMultiplayerSearchHandleGetId
XblMultiplayerSearchHandleGetJoinRestriction
XblMultiplayerSearchHandleGetMemberCounts
XblMultiplayerSearchHandleGetNumberAttributes
XblMultiplayerSearchHandleGetSessionClosed
XblMultiplayerSearchHandleGetSessionOwnerXuids
XblMultiplayerSearchHandleGetSessionReference
XblMultiplayerSearchHandleGetStringAttributes
XblMultiplayerSearchHandleGetTags
XblMultiplayerSearchHandleGetVisibility
XblMultiplayerSendInvitesAsync
XblMultiplayerSendInvitesResult
XblMultiplayerSessionAddMemberReservation
XblMultiplayerSessionArbitrationServer
XblMultiplayerSessionArbitrationStatus
XblMultiplayerSessionCloseHandle
XblMultiplayerSessionCompare
XblMultiplayerSessionConstantsSetArbitrationTimeouts
XblMultiplayerSessionConstantsSetCapabilities
XblMultiplayerSessionConstantsSetCloudComputePackageJson
XblMultiplayerSessionConstantsSetMaxMembersInSession
XblMultiplayerSessionConstantsSetMeasurementServerAddressesJson
XblMultiplayerSessionConstantsSetMemberInitialization
XblMultiplayerSessionConstantsSetPeerToHostRequirements
XblMultiplayerSessionConstantsSetPeerToPeerRequirements
XblMultiplayerSessionConstantsSetQosConnectivityMetrics
XblMultiplayerSessionConstantsSetTimeouts
XblMultiplayerSessionConstantsSetVisibility
XblMultiplayerSessionCreateHandle
XblMultiplayerSessionCurrentUser
XblMultiplayerSessionCurrentUserDeleteCustomPropertyJson
XblMultiplayerSessionCurrentUserSetCustomPropertyJson
XblMultiplayerSessionCurrentUserSetEncounters
XblMultiplayerSessionCurrentUserSetGroups
XblMultiplayerSessionCurrentUserSetMembersInGroup
XblMultiplayerSessionCurrentUserSetQosMeasurements
XblMultiplayerSessionCurrentUserSetRoles
XblMultiplayerSessionCurrentUserSetSecureDeviceAddressBase64
XblMultiplayerSessionCurrentUserSetServerQosMeasurements
XblMultiplayerSessionCurrentUserSetStatus
XblMultiplayerSessionDeleteCustomPropertyJson
XblMultiplayerSessionDuplicateHandle
XblMultiplayerSessionEtag
XblMultiplayerSessionGetInfo
XblMultiplayerSessionGetInitializationInfo
XblMultiplayerSessionGetMember
XblMultiplayerSessionGetRoleByName
XblMultiplayerSessionHostCandidates
XblMultiplayerSessionJoin
XblMultiplayerSessionLeave
XblMultiplayerSessionMatchmakingServer
XblMultiplayerSessionMembers
XblMultiplayerSessionMembersAccepted
XblMultiplayerSessionPropertiesSetJoinRestriction
XblMultiplayerSessionPropertiesSetKeywords
XblMultiplayerSessionPropertiesSetReadRestriction
XblMultiplayerSessionPropertiesSetTurnCollection
XblMultiplayerSessionRawServersJson
XblMultiplayerSessionReferenceCreate
XblMultiplayerSessionReferenceIsValid
XblMultiplayerSessionReferenceParseFromUriPath
XblMultiplayerSessionReferenceToUriPath
XblMultiplayerSessionRoleTypes
XblMultiplayerSessionSessionConstants
XblMultiplayerSessionSessionProperties
XblMultiplayerSessionSessionReference
XblMultiplayerSessionSetAllocateCloudCompute
XblMultiplayerSessionSetClosed
XblMultiplayerSessionSetCustomPropertyJson
XblMultiplayerSessionSetHostDeviceToken
XblMultiplayerSessionSetInitializationSucceeded
XblMultiplayerSessionSetLocked
XblMultiplayerSessionSetMatchmakingResubmit
XblMultiplayerSessionSetMatchmakingServerConnectionPath
XblMultiplayerSessionSetMatchmakingTargetSessionConstantsJson
XblMultiplayerSessionSetMutableRoleSettings
XblMultiplayerSessionSetRawServersJson
XblMultiplayerSessionSetServerConnectionStringCandidates
XblMultiplayerSessionSetSessionChangeSubscription
XblMultiplayerSessionSubscribedChangeTypes
XblMultiplayerSessionTimeOfSession
XblMultiplayerSessionTournamentsServer
XblMultiplayerSessionWriteStatus
XblMultiplayerSetActivityAsync
XblMultiplayerSetSubscriptionsEnabled
XblMultiplayerSetTransferHandleAsync
XblMultiplayerSetTransferHandleResult
XblMultiplayerSubscriptionsEnabled
XblMultiplayerWriteSessionAsync
XblMultiplayerWriteSessionByHandleAsync
XblMultiplayerWriteSessionByHandleResult
XblMultiplayerWriteSessionResult
XblPresenceAddDevicePresenceChangedHandler
XblPresenceAddTitlePresenceChangedHandler
XblPresenceGetPresenceAsync
XblPresenceGetPresenceForMultipleUsersAsync
XblPresenceGetPresenceForMultipleUsersResult
XblPresenceGetPresenceForMultipleUsersResultCount
XblPresenceGetPresenceForSocialGroupAsync
XblPresenceGetPresenceForSocialGroupResult
XblPresenceGetPresenceForSocialGroupResultCount
XblPresenceGetPresenceResult
XblPresenceRecordCloseHandle
XblPresenceRecordDuplicateHandle
XblPresenceRecordGetDeviceRecords
XblPresenceRecordGetUserState
XblPresenceRecordGetXuid
XblPresenceRemoveDevicePresenceChangedHandler
XblPresenceRemoveTitlePresenceChangedHandler
XblPresenceSetPresenceAsync
XblPresenceSubscribeToDevicePresenceChange
XblPresenceSubscribeToTitlePresenceChange
XblPresenceUnsubscribeFromDevicePresenceChange
XblPresenceUnsubscribeFromTitlePresenceChange
XblPrivacyBatchCheckPermissionAsync
XblPrivacyBatchCheckPermissionResult
XblPrivacyBatchCheckPermissionResultSize
XblPrivacyCheckPermissionAsync
XblPrivacyCheckPermissionForAnonymousUserAsync
XblPrivacyCheckPermissionForAnonymousUserResult
XblPrivacyCheckPermissionForAnonymousUserResultSize
XblPrivacyCheckPermissionResult
XblPrivacyCheckPermissionResultSize
XblPrivacyGetAvoidListAsync
XblPrivacyGetAvoidListResult
XblPrivacyGetAvoidListResultCount
XblPrivacyGetMuteListAsync
XblPrivacyGetMuteListResult
XblPrivacyGetMuteListResultCount
XblProfileGetUserProfileAsync
XblProfileGetUserProfileResult
XblProfileGetUserProfilesAsync
XblProfileGetUserProfilesForSocialGroupAsync
XblProfileGetUserProfilesForSocialGroupResult
XblProfileGetUserProfilesForSocialGroupResultCount
XblProfileGetUserProfilesResult
XblProfileGetUserProfilesResultCount
XblRealTimeActivityActivate
XblRealTimeActivityAddConnectionStateChangeHandler
XblRealTimeActivityAddResyncHandler
XblRealTimeActivityAddSubscriptionErrorHandler
XblRealTimeActivityDeactivate
XblRealTimeActivityRemoveConnectionStateChangeHandler
XblRealTimeActivityRemoveResyncHandler
XblRealTimeActivityRemoveSubscriptionErrorHandler
XblRealTimeActivitySubscriptionGetId
XblRealTimeActivitySubscriptionGetState
XblRemoveServiceCallRoutedHandler
XblSetOverrideConfiguration
XblSocialAddSocialRelationshipChangedHandler
XblSocialGetSocialRelationshipsAsync
XblSocialGetSocialRelationshipsResult
XblSocialManagerAddLocalUser
XblSocialManagerCreateSocialUserGroupFromFilters
XblSocialManagerCreateSocialUserGroupFromList
XblSocialManagerDestroySocialUserGroup
XblSocialManagerDoWork
XblSocialManagerGetLocalUserCount
XblSocialManagerGetLocalUsers
XblSocialManagerPresenceRecordIsUserPlayingTitle
XblSocialManagerRemoveLocalUser
XblSocialManagerSetRichPresencePollingStatus
XblSocialManagerUpdateSocialUserGroup
XblSocialManagerUserGroupGetFilters
XblSocialManagerUserGroupGetLocalUser
XblSocialManagerUserGroupGetType
XblSocialManagerUserGroupGetUsers
XblSocialManagerUserGroupGetUsersTrackedByGroup
XblSocialRelationshipResultCloseHandle
XblSocialRelationshipResultDuplicateHandle
XblSocialRelationshipResultGetNextAsync
XblSocialRelationshipResultGetNextResult
XblSocialRelationshipResultGetRelationships
XblSocialRelationshipResultGetTotalCount
XblSocialRelationshipResultHasNext
XblSocialRemoveSocialRelationshipChangedHandler
XblSocialSubmitBatchReputationFeedbackAsync
XblSocialSubmitReputationFeedbackAsync
XblSocialSubscribeToSocialRelationshipChange
XblSocialUnsubscribeFromSocialRelationshipChange
XblStringVerifyStringAsync
XblStringVerifyStringResult
XblStringVerifyStringResultSize
XblStringVerifyStringsAsync
XblStringVerifyStringsResult
XblStringVerifyStringsResultSize
XblTitleManagedStatsDeleteStatsAsync
XblTitleManagedStatsUpdateStatsAsync
XblTitleManagedStatsWriteAsync
XblTitleStorageBlobMetadataResultCloseHandle
XblTitleStorageBlobMetadataResultDuplicateHandle
XblTitleStorageBlobMetadataResultGetItems
XblTitleStorageBlobMetadataResultGetNextAsync
XblTitleStorageBlobMetadataResultGetNextResult
XblTitleStorageBlobMetadataResultHasNext
XblTitleStorageDeleteBlobAsync
XblTitleStorageDownloadBlobAsync
XblTitleStorageDownloadBlobResult
XblTitleStorageGetBlobMetadataAsync
XblTitleStorageGetBlobMetadataResult
XblTitleStorageGetQuotaAsync
XblTitleStorageGetQuotaResult
XblTitleStorageUploadBlobAsync
XblTitleStorageUploadBlobResult
XblUserStatisticsAddStatisticChangedHandler
XblUserStatisticsGetMultipleUserStatisticsAsync
XblUserStatisticsGetMultipleUserStatisticsForMultipleServiceConfigurationsAsync
XblUserStatisticsGetMultipleUserStatisticsForMultipleServiceConfigurationsResult
XblUserStatisticsGetMultipleUserStatisticsForMultipleServiceConfigurationsResultSize
XblUserStatisticsGetMultipleUserStatisticsResult
XblUserStatisticsGetMultipleUserStatisticsResultSize
XblUserStatisticsGetSingleUserStatisticAsync
XblUserStatisticsGetSingleUserStatisticResult
XblUserStatisticsGetSingleUserStatisticResultSize
XblUserStatisticsGetSingleUserStatisticsAsync
XblUserStatisticsGetSingleUserStatisticsResult
XblUserStatisticsGetSingleUserStatisticsResultSize
XblUserStatisticsRemoveStatisticChangedHandler
XblUserStatisticsSubscribeToStatisticChange
XblUserStatisticsUnsubscribeFromStatisticChange
XblWrapper_XblInitialize
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
489KB
Virtual Size
489KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
81KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xbld
Size
512B
Virtual Size
222B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=23, id=261, version=26706,
count=4, id=257, version=26706,
count=1, id=261, version=27412,
count=11, id=257, version=27412,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=355, id=1, productName=Unmarked objects,
count=133, id=261, version=27043,
count=1, id=256, version=27043,
count=1, id=258, version=27043,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Rewired_DirectInput.dll
- IMPHASH 202e6c5840e99e1cb3f7f0198342039e
- SHA256 5b97128066e2470d16b0cac708a7a9e8c95376522f16333a4455429cb17c5dca
- MD5 b6c717f623facadec79613ee3cfc6244
- SHA1 92a9613125af3280eb4c926eca22d3f876f9a0be
- SHA512 f096c1f220767976b8c69f38ada97a6806fc1e465ee1ccbdcbb8b91521d92e8af3f29d55ace9171ba065f164b2b353ade524dffa4ef82f12435fa102a4c7eeb6
- SSDEEP 3072:cX69UZY2taiItgg6PJ99L14v7QoKwRC4VwhgDlhb7:J9O8tg1PJarDb
- TLSH T158A33B1773E540BBE1779274C8A30E059772B8520725AFAF03A4465D2F277D09E3AFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Guavaman\Rewired\Unity\RewiredSolutions\Rewired\Native\Rewired_DirectInput\builds\x64\Release\Rewired_DirectInput.pdb
dinput8
DirectInput8Create
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DirectInput8_ConfigureDevices
DirectInput8_Create
DirectInput8_CreateDevice
DirectInput8_EnumDevices
DirectInput8_EnumDevicesBySemantics
DirectInput8_FindDevice
DirectInput8_GetDeviceStatus
DirectInput8_Initialize
DirectInput8_Release
DirectInput8_RunControlPanel
DirectInputDevice8_Acquire
DirectInputDevice8_BuildActionMap
DirectInputDevice8_CreateEffect
DirectInputDevice8_EnumCreatedEffectObjects
DirectInputDevice8_EnumEffects
DirectInputDevice8_EnumEffectsInFile
DirectInputDevice8_EnumObjects
DirectInputDevice8_Escape
DirectInputDevice8_GetCapabilities
DirectInputDevice8_GetDeviceData
DirectInputDevice8_GetDeviceInfo
DirectInputDevice8_GetDeviceState
DirectInputDevice8_GetEffectInfo
DirectInputDevice8_GetForceFeedbackState
DirectInputDevice8_GetImageInfo
DirectInputDevice8_GetObjectInfo
DirectInputDevice8_GetProperty
DirectInputDevice8_Initialize
DirectInputDevice8_Poll
DirectInputDevice8_Release
DirectInputDevice8_RunControlPanel
DirectInputDevice8_SendDeviceData
DirectInputDevice8_SendForceFeedbackCommand
DirectInputDevice8_SetActionMap
DirectInputDevice8_SetCooperativeLevel
DirectInputDevice8_SetDataFormat
DirectInputDevice8_SetEventNotification
DirectInputDevice8_SetProperty
DirectInputDevice8_Unacquire
DirectInputDevice8_WriteEffectToFile
DirectInputEffect_Download
DirectInputEffect_Escape
DirectInputEffect_GetEffectGuid
DirectInputEffect_GetEffectStatus
DirectInputEffect_GetParameters
DirectInputEffect_Initialize
DirectInputEffect_SetParameters
DirectInputEffect_Start
DirectInputEffect_Stop
DirectInputEffect_Unload
__stdcallDirectInputEffect_Release
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=25711,
count=5, id=259, version=25711,
count=137, id=261, version=25711,
count=31, id=261, version=31823,
count=14, id=260, version=31823,
count=9, id=259, version=31823,
count=5, id=257, version=25711,
count=82, id=1, productName=Unmarked objects,
count=6, id=265, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/Rewired_WindowsGamingInput.dll
- IMPHASH a390c38ec8750d7813e8fc6708b8ebce
- SHA256 946478c5e8f61cbe75c6d70e3aabe2766126605cba45ddb579a5ef38fb198e98
- MD5 4098ce29c5ea622b0ca8b420beacc87b
- SHA1 125078bf0ce9e876c9e974f611b864cd6f63737f
- SHA512 5ff37d531a5a2a45061cc43455fc6e6d8e7b87477c047bda8f249063d88cad5327fd83fd277d4b7cf88d9d8ff2a931fe40f3b392dfb624be0b9db12414a6b0a2
- SSDEEP 3072:/wQMc2bFa0gAQfngyVfi+nU7b2iIwOqdtfc2KlMUg6ASIgKsLogtMCkHTdRKY+00:1Mc2bFa0gAqngyVfi+U7b2iIwOqEXWg5
- TLSH T1BBE3394772B501BBD1B6D23888930A58F77278614B618BDF0774432A1F277E19E3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
30348
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Guavaman\Rewired\Unity\RewiredSolutions\Rewired\WindowsGamingInput\Rewired_WindowsGamingInput\x64\Release\Rewired_WindowsGamingInput.pdb
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-synch-l1-1-0
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
SetEvent
CreateEventW
WaitForSingleObjectEx
ResetEvent
DeleteCriticalSection
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
GetProcAddress
GetModuleFileNameW
api-ms-win-core-rtlsupport-l1-1-0
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
RtlUnwind
RtlLookupFunctionEntry
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
RaiseException
SetLastError
api-ms-win-core-processthreads-l1-1-0
TlsAlloc
GetCurrentThreadId
TlsGetValue
GetCurrentProcessId
GetCurrentProcess
TlsSetValue
ExitProcess
TlsFree
TerminateProcess
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-interlocked-l1-1-0
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
api-ms-win-core-util-l1-1-0
EncodePointer
api-ms-win-core-heap-l1-1-0
HeapFree
HeapReAlloc
HeapSize
HeapAlloc
GetProcessHeap
api-ms-win-core-file-l1-1-0
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
api-ms-win-core-localization-l1-2-0
IsValidCodePage
GetACP
GetCPInfo
api-ms-win-core-processenvironment-l1-1-0
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
SetStdHandle
GetCommandLineW
GetCommandLineA
api-ms-win-core-string-l1-1-0
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
api-ms-win-core-console-l1-1-0
GetConsoleCP
WriteConsoleW
GetConsoleMode
kernel32
UnhandledExceptionFilter
LoadLibraryExW
GetModuleHandleExW
RtlCaptureContext
GetOEMCP
CreateFileW
LCMapStringW
GetModuleHandleW
GetStartupInfoW
oleaut32
SysFreeString
api-ms-win-core-winrt-error-l1-1-0
GetRestrictedErrorInfo
SetRestrictedErrorInfo
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
WindowsPreallocateStringBuffer
WindowsDeleteStringBuffer
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsPromoteStringBuffer
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-com-l1-1-0
CoCreateFreeThreadedMarshaler
CoIncrementMTAUsage
Core_GetMinimumRequiredWindowsVersionString
Core_IsAPISupported
Gamepad_FromGameController
Gamepad_GetButtonLabel
Gamepad_GetCurrentReading
Gamepad_GetGamepad
Gamepad_GetGamepadCount
Gamepad_GetGamepads
Gamepad_GetIsWireless
Gamepad_GetUser
Gamepad_GetVibration
Gamepad_IsGamepad
Gamepad_ListenForEvents
Gamepad_SetEventListener_GamepadAdded
Gamepad_SetEventListener_GamepadRemoved
Gamepad_SetVibration
Gamepad_StopListeningForEvents
IUnknown_AddRef
IUnknown_Release
RawGameController_FromGameController
RawGameController_GetAxisCount
RawGameController_GetButtonCount
RawGameController_GetButtonLabel
RawGameController_GetCurrentReading
RawGameController_GetDisplayName
RawGameController_GetForceFeedbackMotorCount
RawGameController_GetForceFeedbackMotors
RawGameController_GetHardwareProductId
RawGameController_GetHardwareVendorId
RawGameController_GetHeadset
RawGameController_GetIsWireless
RawGameController_GetNonRoamableId
RawGameController_GetRawGameController
RawGameController_GetRawGameControllerCount
RawGameController_GetRawGameControllers
RawGameController_GetSimpleHapticsControllerCount
RawGameController_GetSimpleHapticsControllers
RawGameController_GetSwitchCount
RawGameController_GetSwitchKind
RawGameController_GetUser
RawGameController_IsRawGameController
RawGameController_ListenForEvents
RawGameController_SetEventListener_RawGameControllerAdded
RawGameController_SetEventListener_RawGameControllerRemoved
RawGameController_StopListeningForEvents
RawGameController_TryGetBatteryReport
User_GetNonRoamableId
User_GetType
Name
.text
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=26213,
count=5, id=259, version=26213,
count=133, id=261, version=26213,
count=14, id=260, version=31823,
count=9, id=259, version=31823,
count=38, id=261, version=31823,
count=2, id=257, version=26213,
count=49, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=101, id=1, productName=Unmarked objects,
count=8, id=265, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/XGamingRuntimeThunks.dll
- IMPHASH a2e563c54e95c62c4dae0f40deda8759
- SHA256 69c55c82218b1e42cf9a9edd14a0395f74b24d8ce54f88973b099a46cf1e35bb
- MD5 e89bbf2efcd8cfc298d471d7c3cfcda8
- SHA1 d8a276983270fce2c88c284dba61138e5f6a31fd
- SHA512 d33d34dec02a7f18fb26ee06d6b6435ee06e8f23567109026d962844183ca432788cde2324798e7a43df8b6a5740e17ad532e9756c0eb01d858bb1552b7ba427
- SSDEEP 768:bypi+Q66qonSYDbJtNpjOof4UJjbTtKzbtYT47o5UHbetu88UiEtPJx72ntlv5c3:byg+Q+ISOXjAPb7EuHFZkJF
- TLSH T1E17384EF96EC0162D6AD3A398AA24A5FE6A17212070383CF07551BDF4737EC4A63D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:1f:23:b9:9a:eb:a1:ea:ad:a2:e9:43:f9:81:c4:da:25:ee:78:63:83:25:8a:d0:8c:6a:2f:c6:ee:4d:26:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 25, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7880-E390-8014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:28:a0:0e:81:e1:36:d5:4f:c2:00:00:00:00:01:28
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
4992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\BA\380\b\Release\Gaming.Desktop.x64\XGamingRuntimeThunks.pdb
vcruntime140
memset
__C_specific_handler
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
kernel32
LoadLibraryExA
GetProcAddress
FreeLibrary
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryApiImpl
XAppBroadcastGetStatus
XAppBroadcastIsAppBroadcasting
XAppBroadcastRegisterIsAppBroadcastingChanged
XAppBroadcastShowUI
XAppBroadcastUnregisterIsAppBroadcastingChanged
XAppCaptureCloseScreenshotStream
XAppCaptureDisableRecord
XAppCaptureEnableRecord
XAppCaptureMetadataAddDoubleEvent
XAppCaptureMetadataAddInt32Event
XAppCaptureMetadataAddStringEvent
XAppCaptureMetadataRemainingStorageBytesAvailable
XAppCaptureMetadataStartDoubleState
XAppCaptureMetadataStartInt32State
XAppCaptureMetadataStartStringState
XAppCaptureMetadataStopAllStates
XAppCaptureMetadataStopState
XAppCaptureOpenScreenshotStream
XAppCaptureReadScreenshotStream
XAppCaptureRecordDiagnosticClip
XAppCaptureRegisterMetadataPurged
XAppCaptureTakeDiagnosticScreenshot
XAppCaptureTakeScreenshot
XAppCaptureUnRegisterMetadataPurged
XAsyncBegin
XAsyncCancel
XAsyncComplete
XAsyncGetResult
XAsyncGetResultSize
XAsyncGetStatus
XAsyncRun
XAsyncSchedule
XClosedCaptionGetProperties
XClosedCaptionSetEnabled
XDisplayAcquireTimeoutDeferral
XDisplayCloseTimeoutDeferralHandle
XDisplayTryEnableHdrMode
XErrorReport
XErrorSetCallback
XErrorSetOptions
XGameEventWrite
XGameGetXboxTitleId
XGameInviteRegisterForEvent
XGameInviteUnregisterForEvent
XGameRuntimeInitialize
XGameRuntimeIsFeatureAvailable
XGameRuntimeUninitialize
XGameSaveCloseContainer
XGameSaveCloseProvider
XGameSaveCloseUpdate
XGameSaveCreateContainer
XGameSaveCreateUpdate
XGameSaveDeleteContainer
XGameSaveDeleteContainerAsync
XGameSaveDeleteContainerResult
XGameSaveEnumerateBlobInfo
XGameSaveEnumerateBlobInfoByName
XGameSaveEnumerateContainerInfo
XGameSaveEnumerateContainerInfoByName
XGameSaveGetContainerInfo
XGameSaveGetRemainingQuota
XGameSaveGetRemainingQuotaAsync
XGameSaveGetRemainingQuotaResult
XGameSaveInitializeProvider
XGameSaveInitializeProviderAsync
XGameSaveInitializeProviderResult
XGameSaveReadBlobData
XGameSaveReadBlobDataAsync
XGameSaveReadBlobDataResult
XGameSaveSubmitBlobDelete
XGameSaveSubmitBlobWrite
XGameSaveSubmitUpdate
XGameSaveSubmitUpdateAsync
XGameSaveSubmitUpdateResult
XGameUiSetNotificationPositionHint
XGameUiShowAchievementsAsync
XGameUiShowAchievementsResult
XGameUiShowErrorDialogAsync
XGameUiShowErrorDialogResult
XGameUiShowMessageDialogAsync
XGameUiShowMessageDialogResult
XGameUiShowPlayerPickerAsync
XGameUiShowPlayerPickerResult
XGameUiShowPlayerPickerResultCount
XGameUiShowPlayerProfileCardAsync
XGameUiShowPlayerProfileCardResult
XGameUiShowSendGameInviteAsync
XGameUiShowSendGameInviteResult
XGameUiShowTextEntryAsync
XGameUiShowTextEntryResult
XGameUiShowTextEntryResultSize
XGameUiShowWebAuthenticationAsync
XGameUiShowWebAuthenticationResult
XGameUiShowWebAuthenticationResultSize
XGameUiShowWebAuthenticationWithOptionsAsync
XHighContrastGetMode
XLaunchNewGame
XLaunchUri
XNetworkingGetConnectivityHint
XNetworkingQueryPreferredLocalUdpMultiplayerPort
XNetworkingQueryPreferredLocalUdpMultiplayerPortAsync
XNetworkingQueryPreferredLocalUdpMultiplayerPortAsyncResult
XNetworkingQuerySecurityInformationForUrlAsync
XNetworkingQuerySecurityInformationForUrlAsyncResult
XNetworkingQuerySecurityInformationForUrlAsyncResultSize
XNetworkingQuerySecurityInformationForUrlUtf16Async
XNetworkingQuerySecurityInformationForUrlUtf16AsyncResult
XNetworkingQuerySecurityInformationForUrlUtf16AsyncResultSize
XNetworkingRegisterConnectivityHintChanged
XNetworkingRegisterPreferredLocalUdpMultiplayerPortChanged
XNetworkingUnregisterConnectivityHintChanged
XNetworkingUnregisterPreferredLocalUdpMultiplayerPortChanged
XNetworkingVerifyServerCertificate
XPackageChangeChunkInstallOrder
XPackageCloseInstallationMonitorHandle
XPackageCloseMountHandle
XPackageCreateInstallationMonitor
XPackageEnumerateChunkAvailability
XPackageEnumerateFeatures
XPackageEnumeratePackages
XPackageEstimateDownloadSize
XPackageFindChunkAvailability
XPackageGetCurrentProcessPackageIdentifier
XPackageGetInstallationProgress
XPackageGetMountPath
XPackageGetMountPathSize
XPackageGetUserLocale
XPackageGetWriteStats
XPackageInstallChunks
XPackageInstallChunksAsync
XPackageInstallChunksResult
XPackageIsPackagedProcess
XPackageMount
XPackageRegisterInstallationProgressChanged
XPackageRegisterPackageInstalled
XPackageUninstallChunks
XPackageUninstallUWPInstance
XPackageUnregisterInstallationProgressChanged
XPackageUnregisterPackageInstalled
XPackageUpdateInstallationMonitor
XPersistentLocalStorageGetPath
XPersistentLocalStorageGetPathSize
XSpeechSynthesizerCloseHandle
XSpeechSynthesizerCloseStreamHandle
XSpeechSynthesizerCreate
XSpeechSynthesizerCreateStreamFromSsml
XSpeechSynthesizerCreateStreamFromText
XSpeechSynthesizerEnumerateInstalledVoices
XSpeechSynthesizerGetStreamData
XSpeechSynthesizerGetStreamDataSize
XSpeechSynthesizerSetCustomVoice
XSpeechSynthesizerSetDefaultVoice
XSpeechToTextBeginHypothesisString
XSpeechToTextCancelHypothesisString
XSpeechToTextFinalizeHypothesisString
XSpeechToTextSendString
XSpeechToTextSetPositionHint
XSpeechToTextUpdateHypothesisString
XStoreAcquireLicenseForDurablesAsync
XStoreAcquireLicenseForDurablesResult
XStoreAcquireLicenseForPackageAsync
XStoreAcquireLicenseForPackageResult
XStoreCanAcquireLicenseForPackageAsync
XStoreCanAcquireLicenseForPackageResult
XStoreCanAcquireLicenseForStoreIdAsync
XStoreCanAcquireLicenseForStoreIdResult
XStoreCloseContextHandle
XStoreCloseLicenseHandle
XStoreCloseProductsQueryHandle
XStoreCreateContext
XStoreDownloadAndInstallPackageUpdatesAsync
XStoreDownloadAndInstallPackageUpdatesResult
XStoreDownloadAndInstallPackagesAsync
XStoreDownloadAndInstallPackagesResult
XStoreDownloadAndInstallPackagesResultCount
XStoreDownloadPackageUpdatesAsync
XStoreDownloadPackageUpdatesResult
XStoreEnumerateProductsQuery
XStoreGetUserCollectionsIdAsync
XStoreGetUserCollectionsIdResult
XStoreGetUserCollectionsIdResultSize
XStoreGetUserPurchaseIdAsync
XStoreGetUserPurchaseIdResult
XStoreGetUserPurchaseIdResultSize
XStoreIsAvailabilityPurchasable
XStoreIsLicenseValid
XStoreProductsQueryHasMorePages
XStoreProductsQueryNextPageAsync
XStoreProductsQueryNextPageResult
XStoreQueryAddOnLicensesAsync
XStoreQueryAddOnLicensesResult
XStoreQueryAddOnLicensesResultCount
XStoreQueryAssociatedProductsAsync
XStoreQueryAssociatedProductsResult
XStoreQueryConsumableBalanceRemainingAsync
XStoreQueryConsumableBalanceRemainingResult
XStoreQueryEntitledProductsAsync
XStoreQueryEntitledProductsResult
XStoreQueryGameAndDlcPackageUpdatesAsync
XStoreQueryGameAndDlcPackageUpdatesResult
XStoreQueryGameAndDlcPackageUpdatesResultCount
XStoreQueryGameLicenseAsync
XStoreQueryGameLicenseResult
XStoreQueryLicenseTokenAsync
XStoreQueryLicenseTokenResult
XStoreQueryLicenseTokenResultSize
XStoreQueryPackageIdentifier
XStoreQueryProductForCurrentGameAsync
XStoreQueryProductForCurrentGameResult
XStoreQueryProductForPackageAsync
XStoreQueryProductForPackageResult
XStoreQueryProductsAsync
XStoreQueryProductsResult
XStoreRegisterGameLicenseChanged
XStoreRegisterPackageLicenseLost
XStoreReportConsumableFulfillmentAsync
XStoreReportConsumableFulfillmentResult
XStoreShowPurchaseUIAsync
XStoreShowPurchaseUIResult
XStoreShowRateAndReviewUIAsync
XStoreShowRateAndReviewUIResult
XStoreShowRedeemTokenUIAsync
XStoreShowRedeemTokenUIResult
XStoreUnregisterGameLicenseChanged
XStoreUnregisterPackageLicenseLost
XSystemGetAnalyticsInfo
XSystemGetConsoleId
XSystemGetXboxLiveSandboxId
XTaskQueueCloseHandle
XTaskQueueCreate
XTaskQueueCreateComposite
XTaskQueueDispatch
XTaskQueueDuplicateHandle
XTaskQueueGetCurrentProcessTaskQueue
XTaskQueueGetPort
XTaskQueueRegisterMonitor
XTaskQueueRegisterWaiter
XTaskQueueSetCurrentProcessTaskQueue
XTaskQueueSubmitCallback
XTaskQueueSubmitDelayedCallback
XTaskQueueTerminate
XTaskQueueUnregisterMonitor
XTaskQueueUnregisterWaiter
XThreadAssertNotTimeSensitive
XThreadIsTimeSensitive
XThreadSetTimeSensitive
XThreadVerifyNotTimeSensitive
XUserAddAsync
XUserAddResult
XUserCheckPrivilege
XUserCloseHandle
XUserCloseSignOutDeferralHandle
XUserCompare
XUserDuplicateHandle
XUserFindForDevice
XUserFindUserById
XUserFindUserByLocalId
XUserGetAgeGroup
XUserGetDefaultAudioEndpointUtf16
XUserGetGamerPictureAsync
XUserGetGamerPictureResult
XUserGetGamerPictureResultSize
XUserGetGamertag
XUserGetId
XUserGetIsGuest
XUserGetLocalId
XUserGetMaxUsers
XUserGetSignOutDeferral
XUserGetState
XUserGetTokenAndSignatureAsync
XUserGetTokenAndSignatureResult
XUserGetTokenAndSignatureResultSize
XUserGetTokenAndSignatureUtf16Async
XUserGetTokenAndSignatureUtf16Result
XUserGetTokenAndSignatureUtf16ResultSize
XUserRegisterForChangeEvent
XUserRegisterForDefaultAudioEndpointUtf16Changed
XUserRegisterForDeviceAssociationChanged
XUserResolveIssueWithUiAsync
XUserResolveIssueWithUiResult
XUserResolveIssueWithUiUtf16Async
XUserResolveIssueWithUiUtf16Result
XUserResolvePrivilegeWithUiAsync
XUserResolvePrivilegeWithUiResult
XUserUnregisterForChangeEvent
XUserUnregisterForDefaultAudioEndpointUtf16Changed
XUserUnregisterForDeviceAssociationChanged
Name
.text
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xbld
Size
512B
Virtual Size
212B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=26706,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=4, id=257, version=27412,
count=39, id=1, productName=Unmarked objects,
count=1, id=261, version=27412,
count=2, id=265, version=27043,
count=1, id=256, version=27043,
count=1, id=258, version=27043,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/discord_game_sdk.dll
- IMPHASH caf10455065f4ec46d388c03cdc26a0f
- SHA256 bf857c06f322fa55112680ac6e5bf4f8d8821ccf46cad567d6cf90fac359832d
- MD5 2183ab27a27fc29a07c64955df9ed88d
- SHA1 a061d453884ec2f885c88dceb066c248a701ff4f
- SHA512 8df26ca3c937f89602a2aa1afc07ec478bd0d67da57bea3b51c1e452c4a2352f9d6c55374f8a1bd9a1d5366168ca38d711198b1f13dddbf12e83850f8c93cc0d
- SSDEEP 49152:dRy/i1uCyPEDVu4eJQJwK9MMeic7flSug4DHqvpx1F1MeDSbKjowzIU6iGbSnB:nldW02+GbSB
- TLSH T1910627217A5A657CC1ABC47083874A725E3134CB1B36B9FF44C156782F6AAF46F3D228
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
9d:1b:56:41:cb:1e:33:d8:50:fb:a6:02:8e:53:9d:00:92:0c:f1:bd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Oct 8, 2020
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0e:21:a7:5f:74:d4:98:4f:3e:60:fb:42:36:95:29:5f
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 26, 2018 - Mar 31, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Minor OS version
0
Major OS version
6
Entry point
2789636
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\b\jaina-1\discord\discord-game-sdk\target\x86_64-pc-windows-msvc\release\deps\discord_game_sdk.pdb
ws2_32
closesocket
sendto
getaddrinfo
freeaddrinfo
WSAStartup
WSACleanup
WSASocketW
ioctlsocket
recv
bind
WSAGetLastError
kernel32
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetModuleHandleExW
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
GetProcAddress
GetLastError
LoadLibraryW
FreeLibrary
GetModuleFileNameW
SetErrorMode
SetThreadErrorMode
lstrlenW
SetEnvironmentVariableW
GetProcessId
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileInformationByHandle
CancelIoEx
WriteFile
ReadFile
GetOverlappedResult
FlushFileBuffers
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SetHandleInformation
GetSystemInfo
RtlVirtualUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseMutex
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
RtlLookupFunctionEntry
DeleteCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
FindClose
SwitchToThread
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetTempPathW
GetCommandLineW
SetFilePointerEx
InitializeCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcessId
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
HeapReAlloc
GetModuleHandleW
GetStdHandle
FindNextFileW
CreateFileW
DeviceIoControl
CreateDirectoryW
FindFirstFileW
DeleteFileW
FormatMessageW
ExitProcess
CreateThread
GetConsoleMode
WriteConsoleW
InterlockedFlushSList
GetFileType
GetStringTypeW
HeapSize
SetStdHandle
GetConsoleCP
RaiseException
RtlPcToFileHeader
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
advapi32
SystemFunction036
RegCloseKey
RegCreateKeyTransactedW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
ktmw32
CommitTransaction
CreateTransaction
ole32
CoTaskMemFree
shell32
ShellExecuteExW
SHGetKnownFolderPath
DiscordCreate
DiscordVersion
rust_eh_personality
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
857KB
Virtual Size
856KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
134KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=260, version=26213,
count=18, id=259, version=26213,
count=136, id=261, version=26213,
count=31, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=15, id=257, version=26213,
count=188, id=1, productName=Unmarked objects,
count=12, id=260, version=27032,
count=517, productName=Unmarked objects (old),
count=1, id=256, version=27032,
count=1, id=258, version=27032,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/sentry.dll
- IMPHASH 81fc6e8e1cb3cad52dc2ed6b0d0174dd
- SHA256 4af35032e88cdded994202817d3102b7f2eda381e5e544191a28e8a823e6167d
- MD5 080e681efde8e5e4928a2b7b3852e227
- SHA1 da6a778930c07dc9a3a38617219cb60a36774a9c
- SHA512 fcdf7a5c7e25ed4c11da49a6ff96fdd30fb76e2e3632f387f13e13aa2f284a750a00237281c713ca8a1d82bbbff166290ffc055056a853966e744ea5ee288972
- SSDEEP 6144:8xl1+62sfW5EilRDrhe5vbrxSyE6suriefaDvMM8hNU62BSA9Sn:Uls62sfYpheWyE6DiefaDvHw
- TLSH T174C44C9A376803A9D1BBD27CD5C34A07E5B2350543628BCF11D487E61F27ACE9A3BB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4206
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\sentry-unity\sentry-unity\modules\sentry-native\build\RelWithDebInfo\sentry.pdb
dbghelp
SymGetOptions
SymGetModuleBase64
SymFunctionTableAccess64
StackWalk64
SymFromAddr
SymInitialize
SymSetOptions
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winhttp
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpSendRequest
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpConnect
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
RegSetKeyValueW
RegGetValueA
SystemFunction036
kernel32
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
SleepConditionVariableSRW
RtlCaptureContext
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetLocalTime
OutputDebugStringW
LocalFree
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InitOnceBeginInitialize
RtlLookupFunctionEntry
InitOnceComplete
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitOnceExecuteOnce
GetSystemTime
SystemTimeToFileTime
GetProcAddress
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount64
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
RaiseException
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObject
CreateThread
GetCurrentThread
GetThreadId
GetModuleHandleA
GetCurrentProcess
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
RemoveDirectoryW
GetLastError
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcessId
VirtualQuery
FreeLibrary
LoadLibraryExW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
TerminateProcess
RtlCaptureStackBackTrace
CreateFileW
GetFileAttributesW
LockFileEx
SetEndOfFile
UnlockFileEx
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
SetEvent
SleepEx
CreateEventW
Sleep
GetCurrentThreadId
GetExitCodeThread
CreateProcessW
FlushInstructionCache
OpenProcess
GetVersion
VirtualAllocEx
VirtualProtectEx
WriteProcessMemory
WerRegisterRuntimeExceptionModule
GetFileSizeEx
ReadFile
SetFilePointerEx
WriteFile
GetNamedPipeInfo
FindFirstFileExW
GetFileTime
MoveFileExW
LoadLibraryW
GetModuleHandleW
FormatMessageA
DuplicateHandle
GetSystemInfo
VirtualQueryEx
ReadProcessMemory
SetLastError
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetSystemTimeAsFileTime
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Xlength_error@std@@YAXPEBD@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
vcruntime140
_purecall
_CxxThrowException
__std_type_info_destroy_list
__current_exception_context
__std_terminate
__std_exception_destroy
memcmp
memcpy
memmove
memset
__C_specific_handler
strchr
strrchr
memchr
strstr
__std_exception_copy
__current_exception
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
strerror
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_errno
_invalid_parameter_noinfo_noreturn
_invoke_watson
_initialize_onexit_table
abort
signal
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
terminate
api-ms-win-crt-heap-l1-1-0
calloc
_aligned_malloc
_aligned_free
free
malloc
_callnewh
realloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_p
ferror
ftell
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vfprintf
feof
fclose
__stdio_common_vsscanf
_wfopen
_locking
_close
_wopen
fwrite
fflush
fseek
fread
fopen
api-ms-win-crt-string-l1-1-0
isalnum
strcmp
isalpha
_wcsicmp
_wcsdup
tolower
api-ms-win-crt-math-l1-1-0
ldexp
_dclass
api-ms-win-crt-environment-l1-1-0
getenv
_wgetenv
api-ms-win-crt-convert-l1-1-0
strtoll
strtoull
strtol
_strtod_l
strtoul
api-ms-win-crt-locale-l1-1-0
_create_locale
api-ms-win-crt-time-l1-1-0
_gmtime64
strftime
_time64
_mkgmtime64
api-ms-win-crt-filesystem-l1-1-0
_wstat64
_wstat64i32
_wfullpath
sentry_add_breadcrumb
sentry_capture_event
sentry_clear_crashed_last_run
sentry_clear_modulecache
sentry_close
sentry_end_session
sentry_end_session_with_status
sentry_envelope_free
sentry_envelope_get_event
sentry_envelope_get_transaction
sentry_envelope_serialize
sentry_envelope_write_to_file
sentry_envelope_write_to_file_n
sentry_event_add_exception
sentry_event_add_thread
sentry_event_value_add_stacktrace
sentry_flush
sentry_free
sentry_get_crashed_last_run
sentry_get_modules_list
sentry_handle_exception
sentry_init
sentry_malloc
sentry_new_function_transport
sentry_options_add_attachment
sentry_options_add_attachment_n
sentry_options_add_attachmentw
sentry_options_add_attachmentw_n
sentry_options_free
sentry_options_get_auto_session_tracking
sentry_options_get_ca_certs
sentry_options_get_debug
sentry_options_get_dist
sentry_options_get_dsn
sentry_options_get_environment
sentry_options_get_http_proxy
sentry_options_get_max_breadcrumbs
sentry_options_get_max_spans
sentry_options_get_release
sentry_options_get_require_user_consent
sentry_options_get_sample_rate
sentry_options_get_sdk_name
sentry_options_get_shutdown_timeout
sentry_options_get_symbolize_stacktraces
sentry_options_get_traces_sample_rate
sentry_options_get_transport_thread_name
sentry_options_get_user_agent
sentry_options_new
sentry_options_set_auto_session_tracking
sentry_options_set_backend
sentry_options_set_before_send
sentry_options_set_ca_certs
sentry_options_set_ca_certs_n
sentry_options_set_database_path
sentry_options_set_database_path_n
sentry_options_set_database_pathw
sentry_options_set_database_pathw_n
sentry_options_set_debug
sentry_options_set_dist
sentry_options_set_dist_n
sentry_options_set_dsn
sentry_options_set_dsn_n
sentry_options_set_environment
sentry_options_set_environment_n
sentry_options_set_handler_path
sentry_options_set_handler_path_n
sentry_options_set_handler_pathw
sentry_options_set_handler_pathw_n
sentry_options_set_http_proxy
sentry_options_set_http_proxy_n
sentry_options_set_logger
sentry_options_set_max_breadcrumbs
sentry_options_set_max_spans
sentry_options_set_on_crash
sentry_options_set_release
sentry_options_set_release_n
sentry_options_set_require_user_consent
sentry_options_set_sample_rate
sentry_options_set_sdk_name
sentry_options_set_sdk_name_n
sentry_options_set_shutdown_timeout
sentry_options_set_symbolize_stacktraces
sentry_options_set_system_crash_reporter_enabled
sentry_options_set_traces_sample_rate
sentry_options_set_transport
sentry_options_set_transport_thread_name
sentry_options_set_transport_thread_name_n
sentry_reinstall_backend
sentry_remove_context
sentry_remove_context_n
sentry_remove_extra
sentry_remove_extra_n
sentry_remove_fingerprint
sentry_remove_tag
sentry_remove_tag_n
sentry_remove_user
sentry_sdk_name
sentry_sdk_user_agent
sentry_sdk_version
sentry_set_context
sentry_set_context_n
sentry_set_extra
sentry_set_extra_n
sentry_set_fingerprint
sentry_set_fingerprint_n
sentry_set_level
sentry_set_span
sentry_set_tag
sentry_set_tag_n
sentry_set_transaction
sentry_set_transaction_n
sentry_set_transaction_object
sentry_set_user
sentry_shutdown
sentry_span_finish
sentry_span_iter_headers
sentry_span_remove_data
sentry_span_remove_data_n
sentry_span_remove_tag
sentry_span_remove_tag_n
sentry_span_set_data
sentry_span_set_data_n
sentry_span_set_status
sentry_span_set_tag
sentry_span_set_tag_n
sentry_span_start_child
sentry_span_start_child_n
sentry_start_session
sentry_transaction_context_new
sentry_transaction_context_new_n
sentry_transaction_context_remove_sampled
sentry_transaction_context_set_name
sentry_transaction_context_set_name_n
sentry_transaction_context_set_operation
sentry_transaction_context_set_operation_n
sentry_transaction_context_set_sampled
sentry_transaction_context_update_from_header
sentry_transaction_context_update_from_header_n
sentry_transaction_finish
sentry_transaction_iter_headers
sentry_transaction_remove_data
sentry_transaction_remove_data_n
sentry_transaction_remove_tag
sentry_transaction_remove_tag_n
sentry_transaction_set_data
sentry_transaction_set_data_n
sentry_transaction_set_name
sentry_transaction_set_name_n
sentry_transaction_set_status
sentry_transaction_set_tag
sentry_transaction_set_tag_n
sentry_transaction_start
sentry_transaction_start_child
sentry_transaction_start_child_n
sentry_transport_free
sentry_transport_new
sentry_transport_set_flush_func
sentry_transport_set_free_func
sentry_transport_set_shutdown_func
sentry_transport_set_startup_func
sentry_transport_set_state
sentry_unwind_stack
sentry_unwind_stack_from_ucontext
sentry_user_consent_get
sentry_user_consent_give
sentry_user_consent_reset
sentry_user_consent_revoke
sentry_uuid_as_bytes
sentry_uuid_as_string
sentry_uuid_from_bytes
sentry_uuid_from_string
sentry_uuid_from_string_n
sentry_uuid_is_nil
sentry_uuid_new_v4
sentry_uuid_nil
sentry_value_append
sentry_value_as_double
sentry_value_as_int32
sentry_value_as_string
sentry_value_decref
sentry_value_freeze
sentry_value_get_by_index
sentry_value_get_by_index_owned
sentry_value_get_by_key
sentry_value_get_by_key_n
sentry_value_get_by_key_owned
sentry_value_get_by_key_owned_n
sentry_value_get_length
sentry_value_get_type
sentry_value_incref
sentry_value_is_frozen
sentry_value_is_null
sentry_value_is_true
sentry_value_new_bool
sentry_value_new_breadcrumb
sentry_value_new_breadcrumb_n
sentry_value_new_double
sentry_value_new_event
sentry_value_new_exception
sentry_value_new_exception_n
sentry_value_new_int32
sentry_value_new_list
sentry_value_new_message_event
sentry_value_new_message_event_n
sentry_value_new_null
sentry_value_new_object
sentry_value_new_stacktrace
sentry_value_new_string
sentry_value_new_string_n
sentry_value_new_thread
sentry_value_new_thread_n
sentry_value_refcount
sentry_value_remove_by_index
sentry_value_remove_by_key
sentry_value_remove_by_key_n
sentry_value_set_by_index
sentry_value_set_by_key
sentry_value_set_by_key_n
sentry_value_set_stacktrace
sentry_value_to_json
sentry_value_to_msgpack
Name
.text
Size
390KB
Virtual Size
389KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
CPADinfo
Size
512B
Virtual Size
323B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1024B
Virtual Size
777B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
373B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=32533,
count=26, id=261, version=32533,
count=8, id=260, version=32533,
count=6, id=259, version=32533,
count=1, id=259, version=32826,
count=11, id=257, version=28900,
count=275, id=1, productName=Unmarked objects,
count=45, id=261, version=32826,
count=33, id=260, version=32826,
count=1, id=256, version=32826,
count=1, id=255, version=32826,
count=1, id=258, version=32826,
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/steam_api64.dll
- IMPHASH 289b2254a2c1e14995dd9995d1686fdb
- SHA256 ca1fa9a7609ab10b7926400559cf073e5888423cc156af72c6027d72a89eea73
- MD5 cbc8b390e065c29572494901b151989e
- SHA1 238243867b2f2daf54ac0dd5f3b68f9d99f8abaf
- SHA512 e8deb190d9b00d9931f480754cd46b0fa16c4080bf12c25d024ee2c14e75e27a7ed9f9b357a456037c9123537910d5186b7361f359d44a25b175f55bfb9affa7
- SSDEEP 3072:WZz7iKHWadsCKUB6/KuBHlvdXGFcKLF65lhTbCNTnJvxfyN+ve2UhMBCcJo5gDst:+7i6ddsCKg6/KuBFFXyDyEBCcUb
- TLSH T1F944283A72750CF5D1B6C139C9961E0BF671304B23219DEF236053368E676E32A3BA95
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
11:bb:a5:eb:15:cd:a4:5a:5c:45:46:ac:72:dc:6d:83:3c:46:36:3e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Chains
Dec 20, 2020
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Serial Number
05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 4, 2018 - Oct 7, 2021
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Minor OS version
2
Major OS version
5
Entry point
36420
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\buildslave\steam_rel_client_win64\build\src\steam_api\win64\Release\steam_api64.pdb
kernel32
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
OpenProcess
GetExitCodeProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetCommandLineW
GetEnvironmentVariableA
SetEnvironmentVariableA
OutputDebugStringA
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
CloseHandle
GetProcAddress
SetEndOfFile
ReadConsoleW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleFileNameA
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
CreateFileW
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
ReadFile
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteW
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsTimedTrial
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchCommandLine
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameSearch
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInput
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamParties
SteamAPI_ISteamClient_GetISteamRemotePlay
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_ActivateActionSetLayer
SteamAPI_ISteamController_DeactivateActionSetLayer
SteamAPI_ISteamController_DeactivateAllActionSetLayers
SteamAPI_ISteamController_GetActionOriginFromXboxOrigin
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetActiveActionSetLayers
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerBindingRevision
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetGlyphForXboxOrigin
SteamAPI_ISteamController_GetInputTypeForHandle
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_GetStringForXboxOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TranslateActionOrigin
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialogConnectString
SteamAPI_ISteamFriends_ActivateGameOverlayRemotePlayTogetherInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetNumChatsWithUnreadPriorityMessages
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsClanOfficialGameGroup
SteamAPI_ISteamFriends_IsClanPublic
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_RegisterProtocolInOverlayBrowser
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameSearch_AcceptGame
SteamAPI_ISteamGameSearch_AddGameSearchParams
SteamAPI_ISteamGameSearch_CancelRequestPlayersForGame
SteamAPI_ISteamGameSearch_DeclineGame
SteamAPI_ISteamGameSearch_EndGame
SteamAPI_ISteamGameSearch_EndGameSearch
SteamAPI_ISteamGameSearch_HostConfirmGameStart
SteamAPI_ISteamGameSearch_RequestPlayersForGame
SteamAPI_ISteamGameSearch_RetrieveConnectionDetails
SteamAPI_ISteamGameSearch_SearchForGameSolo
SteamAPI_ISteamGameSearch_SearchForGameWithLobby
SteamAPI_ISteamGameSearch_SetConnectionDetails
SteamAPI_ISteamGameSearch_SetGameHostParams
SteamAPI_ISteamGameSearch_SubmitPlayerResult
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStatFloat
SteamAPI_ISteamGameServerStats_GetUserStatInt32
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStatFloat
SteamAPI_ISteamGameServerStats_SetUserStatInt32
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EnableHeartbeats
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_ForceHeartbeat
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate
SteamAPI_ISteamGameServer_SendUserDisconnect
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetHeartbeatInterval
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_OpenDeveloperTools
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInput_ActivateActionSet
SteamAPI_ISteamInput_ActivateActionSetLayer
SteamAPI_ISteamInput_DeactivateActionSetLayer
SteamAPI_ISteamInput_DeactivateAllActionSetLayers
SteamAPI_ISteamInput_GetActionOriginFromXboxOrigin
SteamAPI_ISteamInput_GetActionSetHandle
SteamAPI_ISteamInput_GetActiveActionSetLayers
SteamAPI_ISteamInput_GetAnalogActionData
SteamAPI_ISteamInput_GetAnalogActionHandle
SteamAPI_ISteamInput_GetAnalogActionOrigins
SteamAPI_ISteamInput_GetConnectedControllers
SteamAPI_ISteamInput_GetControllerForGamepadIndex
SteamAPI_ISteamInput_GetCurrentActionSet
SteamAPI_ISteamInput_GetDeviceBindingRevision
SteamAPI_ISteamInput_GetDigitalActionData
SteamAPI_ISteamInput_GetDigitalActionHandle
SteamAPI_ISteamInput_GetDigitalActionOrigins
SteamAPI_ISteamInput_GetGamepadIndexForController
SteamAPI_ISteamInput_GetGlyphForActionOrigin
SteamAPI_ISteamInput_GetGlyphForXboxOrigin
SteamAPI_ISteamInput_GetInputTypeForHandle
SteamAPI_ISteamInput_GetMotionData
SteamAPI_ISteamInput_GetRemotePlaySessionID
SteamAPI_ISteamInput_GetStringForActionOrigin
SteamAPI_ISteamInput_GetStringForXboxOrigin
SteamAPI_ISteamInput_Init
SteamAPI_ISteamInput_RunFrame
SteamAPI_ISteamInput_SetLEDColor
SteamAPI_ISteamInput_ShowBindingPanel
SteamAPI_ISteamInput_Shutdown
SteamAPI_ISteamInput_StopAnalogActionMomentum
SteamAPI_ISteamInput_TranslateActionOrigin
SteamAPI_ISteamInput_TriggerHapticPulse
SteamAPI_ISteamInput_TriggerRepeatedHapticPulse
SteamAPI_ISteamInput_TriggerVibration
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemPrice
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetItemsWithPrices
SteamAPI_ISteamInventory_GetNumItemsWithPrices
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_InspectItem
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RemoveProperty
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_RequestPrices
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_SetPropertyBool
SteamAPI_ISteamInventory_SetPropertyFloat
SteamAPI_ISteamInventory_SetPropertyInt64
SteamAPI_ISteamInventory_SetPropertyString
SteamAPI_ISteamInventory_StartPurchase
SteamAPI_ISteamInventory_StartUpdateProperties
SteamAPI_ISteamInventory_SubmitUpdateProperties
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer
SteamAPI_ISteamMatchmakingServers_ReleaseRequest
SteamAPI_ISteamMatchmakingServers_RequestFavoritesServerList
SteamAPI_ISteamMatchmakingServers_RequestFriendsServerList
SteamAPI_ISteamMatchmakingServers_RequestHistoryServerList
SteamAPI_ISteamMatchmakingServers_RequestInternetServerList
SteamAPI_ISteamMatchmakingServers_RequestLANServerList
SteamAPI_ISteamMatchmakingServers_RequestSpectatorServerList
SteamAPI_ISteamMatchmakingServers_ServerRules
SteamAPI_ISteamMatchmaking_AddFavoriteGame
SteamAPI_ISteamMatchmaking_AddRequestLobbyListCompatibleMembersFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListDistanceFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListFilterSlotsAvailable
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNearValueFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNumericalFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListResultCountFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListStringFilter
SteamAPI_ISteamMatchmaking_CreateLobby
SteamAPI_ISteamMatchmaking_DeleteLobbyData
SteamAPI_ISteamMatchmaking_GetFavoriteGame
SteamAPI_ISteamMatchmaking_GetFavoriteGameCount
SteamAPI_ISteamMatchmaking_GetLobbyByIndex
SteamAPI_ISteamMatchmaking_GetLobbyChatEntry
SteamAPI_ISteamMatchmaking_GetLobbyData
SteamAPI_ISteamMatchmaking_GetLobbyDataByIndex
SteamAPI_ISteamMatchmaking_GetLobbyDataCount
SteamAPI_ISteamMatchmaking_GetLobbyGameServer
SteamAPI_ISteamMatchmaking_GetLobbyMemberByIndex
SteamAPI_ISteamMatchmaking_GetLobbyMemberData
SteamAPI_ISteamMatchmaking_GetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_GetLobbyOwner
SteamAPI_ISteamMatchmaking_GetNumLobbyMembers
SteamAPI_ISteamMatchmaking_InviteUserToLobby
SteamAPI_ISteamMatchmaking_JoinLobby
SteamAPI_ISteamMatchmaking_LeaveLobby
SteamAPI_ISteamMatchmaking_RemoveFavoriteGame
SteamAPI_ISteamMatchmaking_RequestLobbyData
SteamAPI_ISteamMatchmaking_RequestLobbyList
SteamAPI_ISteamMatchmaking_SendLobbyChatMsg
SteamAPI_ISteamMatchmaking_SetLinkedLobby
SteamAPI_ISteamMatchmaking_SetLobbyData
SteamAPI_ISteamMatchmaking_SetLobbyGameServer
SteamAPI_ISteamMatchmaking_SetLobbyJoinable
SteamAPI_ISteamMatchmaking_SetLobbyMemberData
SteamAPI_ISteamMatchmaking_SetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_SetLobbyOwner
SteamAPI_ISteamMatchmaking_SetLobbyType
SteamAPI_ISteamMusicRemote_BActivationSuccess
SteamAPI_ISteamMusicRemote_BIsCurrentMusicRemote
SteamAPI_ISteamMusicRemote_CurrentEntryDidChange
SteamAPI_ISteamMusicRemote_CurrentEntryIsAvailable
SteamAPI_ISteamMusicRemote_CurrentEntryWillChange
SteamAPI_ISteamMusicRemote_DeregisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_EnableLooped
SteamAPI_ISteamMusicRemote_EnablePlayNext
SteamAPI_ISteamMusicRemote_EnablePlayPrevious
SteamAPI_ISteamMusicRemote_EnablePlaylists
SteamAPI_ISteamMusicRemote_EnableQueue
SteamAPI_ISteamMusicRemote_EnableShuffled
SteamAPI_ISteamMusicRemote_PlaylistDidChange
SteamAPI_ISteamMusicRemote_PlaylistWillChange
SteamAPI_ISteamMusicRemote_QueueDidChange
SteamAPI_ISteamMusicRemote_QueueWillChange
SteamAPI_ISteamMusicRemote_RegisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_ResetPlaylistEntries
SteamAPI_ISteamMusicRemote_ResetQueueEntries
SteamAPI_ISteamMusicRemote_SetCurrentPlaylistEntry
SteamAPI_ISteamMusicRemote_SetCurrentQueueEntry
SteamAPI_ISteamMusicRemote_SetDisplayName
SteamAPI_ISteamMusicRemote_SetPNGIcon_64x64
SteamAPI_ISteamMusicRemote_SetPlaylistEntry
SteamAPI_ISteamMusicRemote_SetQueueEntry
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryCoverArt
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryElapsedSeconds
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryText
SteamAPI_ISteamMusicRemote_UpdateLooped
SteamAPI_ISteamMusicRemote_UpdatePlaybackStatus
SteamAPI_ISteamMusicRemote_UpdateShuffled
SteamAPI_ISteamMusicRemote_UpdateVolume
SteamAPI_ISteamMusic_BIsEnabled
SteamAPI_ISteamMusic_BIsPlaying
SteamAPI_ISteamMusic_GetPlaybackStatus
SteamAPI_ISteamMusic_GetVolume
SteamAPI_ISteamMusic_Pause
SteamAPI_ISteamMusic_Play
SteamAPI_ISteamMusic_PlayNext
SteamAPI_ISteamMusic_PlayPrevious
SteamAPI_ISteamMusic_SetVolume
SteamAPI_ISteamNetworkingMessages_AcceptSessionWithUser
SteamAPI_ISteamNetworkingMessages_CloseChannelWithUser
SteamAPI_ISteamNetworkingMessages_CloseSessionWithUser
SteamAPI_ISteamNetworkingMessages_GetSessionConnectionInfo
SteamAPI_ISteamNetworkingMessages_ReceiveMessagesOnChannel
SteamAPI_ISteamNetworkingMessages_SendMessageToUser
SteamAPI_ISteamNetworkingSockets_AcceptConnection
SteamAPI_ISteamNetworkingSockets_CloseConnection
SteamAPI_ISteamNetworkingSockets_CloseListenSocket
SteamAPI_ISteamNetworkingSockets_ConnectByIPAddress
SteamAPI_ISteamNetworkingSockets_ConnectP2P
SteamAPI_ISteamNetworkingSockets_ConnectP2PCustomSignaling
SteamAPI_ISteamNetworkingSockets_ConnectToHostedDedicatedServer
SteamAPI_ISteamNetworkingSockets_CreateHostedDedicatedServerListenSocket
SteamAPI_ISteamNetworkingSockets_CreateListenSocketIP
SteamAPI_ISteamNetworkingSockets_CreateListenSocketP2P
SteamAPI_ISteamNetworkingSockets_CreatePollGroup
SteamAPI_ISteamNetworkingSockets_CreateSocketPair
SteamAPI_ISteamNetworkingSockets_DestroyPollGroup
SteamAPI_ISteamNetworkingSockets_FindRelayAuthTicketForServer
SteamAPI_ISteamNetworkingSockets_FlushMessagesOnConnection
SteamAPI_ISteamNetworkingSockets_GetAuthenticationStatus
SteamAPI_ISteamNetworkingSockets_GetCertificateRequest
SteamAPI_ISteamNetworkingSockets_GetConnectionInfo
SteamAPI_ISteamNetworkingSockets_GetConnectionName
SteamAPI_ISteamNetworkingSockets_GetConnectionUserData
SteamAPI_ISteamNetworkingSockets_GetDetailedConnectionStatus
SteamAPI_ISteamNetworkingSockets_GetGameCoordinatorServerLogin
SteamAPI_ISteamNetworkingSockets_GetHostedDedicatedServerAddress
SteamAPI_ISteamNetworkingSockets_GetHostedDedicatedServerPOPID
SteamAPI_ISteamNetworkingSockets_GetHostedDedicatedServerPort
SteamAPI_ISteamNetworkingSockets_GetIdentity
SteamAPI_ISteamNetworkingSockets_GetListenSocketAddress
SteamAPI_ISteamNetworkingSockets_GetQuickConnectionStatus
SteamAPI_ISteamNetworkingSockets_InitAuthentication
SteamAPI_ISteamNetworkingSockets_ReceiveMessagesOnConnection
SteamAPI_ISteamNetworkingSockets_ReceiveMessagesOnPollGroup
SteamAPI_ISteamNetworkingSockets_ReceivedP2PCustomSignal
SteamAPI_ISteamNetworkingSockets_ReceivedRelayAuthTicket
SteamAPI_ISteamNetworkingSockets_RunCallbacks
SteamAPI_ISteamNetworkingSockets_SendMessageToConnection
SteamAPI_ISteamNetworkingSockets_SendMessages
SteamAPI_ISteamNetworkingSockets_SetCertificate
SteamAPI_ISteamNetworkingSockets_SetConnectionName
SteamAPI_ISteamNetworkingSockets_SetConnectionPollGroup
SteamAPI_ISteamNetworkingSockets_SetConnectionUserData
SteamAPI_ISteamNetworkingUtils_AllocateMessage
SteamAPI_ISteamNetworkingUtils_CheckPingDataUpToDate
SteamAPI_ISteamNetworkingUtils_ConvertPingLocationToString
SteamAPI_ISteamNetworkingUtils_EstimatePingTimeBetweenTwoLocations
SteamAPI_ISteamNetworkingUtils_EstimatePingTimeFromLocalHost
SteamAPI_ISteamNetworkingUtils_GetConfigValue
SteamAPI_ISteamNetworkingUtils_GetConfigValueInfo
SteamAPI_ISteamNetworkingUtils_GetDirectPingToPOP
SteamAPI_ISteamNetworkingUtils_GetFirstConfigValue
SteamAPI_ISteamNetworkingUtils_GetLocalPingLocation
SteamAPI_ISteamNetworkingUtils_GetLocalTimestamp
SteamAPI_ISteamNetworkingUtils_GetPOPCount
SteamAPI_ISteamNetworkingUtils_GetPOPList
SteamAPI_ISteamNetworkingUtils_GetPingToDataCenter
SteamAPI_ISteamNetworkingUtils_GetRelayNetworkStatus
SteamAPI_ISteamNetworkingUtils_InitRelayNetworkAccess
SteamAPI_ISteamNetworkingUtils_ParsePingLocationString
SteamAPI_ISteamNetworkingUtils_SetConfigValue
SteamAPI_ISteamNetworkingUtils_SetConfigValueStruct
SteamAPI_ISteamNetworkingUtils_SetConnectionConfigValueFloat
SteamAPI_ISteamNetworkingUtils_SetConnectionConfigValueInt32
SteamAPI_ISteamNetworkingUtils_SetConnectionConfigValueString
SteamAPI_ISteamNetworkingUtils_SetDebugOutputFunction
SteamAPI_ISteamNetworkingUtils_SetGlobalCallback_MessagesSessionFailed
SteamAPI_ISteamNetworkingUtils_SetGlobalCallback_MessagesSessionRequest
SteamAPI_ISteamNetworkingUtils_SetGlobalCallback_SteamNetAuthenticationStatusChanged
SteamAPI_ISteamNetworkingUtils_SetGlobalCallback_SteamNetConnectionStatusChanged
SteamAPI_ISteamNetworkingUtils_SetGlobalCallback_SteamRelayNetworkStatusChanged
SteamAPI_ISteamNetworkingUtils_SetGlobalConfigValueFloat
SteamAPI_ISteamNetworkingUtils_SetGlobalConfigValueInt32
SteamAPI_ISteamNetworkingUtils_SetGlobalConfigValuePtr
SteamAPI_ISteamNetworkingUtils_SetGlobalConfigValueString
SteamAPI_ISteamNetworkingUtils_SteamNetworkingIPAddr_ParseString
SteamAPI_ISteamNetworkingUtils_SteamNetworkingIPAddr_ToString
SteamAPI_ISteamNetworkingUtils_SteamNetworkingIdentity_ParseString
SteamAPI_ISteamNetworkingUtils_SteamNetworkingIdentity_ToString
SteamAPI_ISteamNetworking_AcceptP2PSessionWithUser
SteamAPI_ISteamNetworking_AllowP2PPacketRelay
SteamAPI_ISteamNetworking_CloseP2PChannelWithUser
SteamAPI_ISteamNetworking_CloseP2PSessionWithUser
SteamAPI_ISteamNetworking_CreateConnectionSocket
SteamAPI_ISteamNetworking_CreateListenSocket
SteamAPI_ISteamNetworking_CreateP2PConnectionSocket
SteamAPI_ISteamNetworking_DestroyListenSocket
SteamAPI_ISteamNetworking_DestroySocket
SteamAPI_ISteamNetworking_GetListenSocketInfo
SteamAPI_ISteamNetworking_GetMaxPacketSize
SteamAPI_ISteamNetworking_GetP2PSessionState
SteamAPI_ISteamNetworking_GetSocketConnectionType
SteamAPI_ISteamNetworking_GetSocketInfo
SteamAPI_ISteamNetworking_IsDataAvailable
SteamAPI_ISteamNetworking_IsDataAvailableOnSocket
SteamAPI_ISteamNetworking_IsP2PPacketAvailable
SteamAPI_ISteamNetworking_ReadP2PPacket
SteamAPI_ISteamNetworking_RetrieveData
SteamAPI_ISteamNetworking_RetrieveDataFromSocket
SteamAPI_ISteamNetworking_SendDataOnSocket
SteamAPI_ISteamNetworking_SendP2PPacket
SteamAPI_ISteamParentalSettings_BIsAppBlocked
SteamAPI_ISteamParentalSettings_BIsAppInBlockList
SteamAPI_ISteamParentalSettings_BIsFeatureBlocked
SteamAPI_ISteamParentalSettings_BIsFeatureInBlockList
SteamAPI_ISteamParentalSettings_BIsParentalLockEnabled
SteamAPI_ISteamParentalSettings_BIsParentalLockLocked
SteamAPI_ISteamParties_CancelReservation
SteamAPI_ISteamParties_ChangeNumOpenSlots
SteamAPI_ISteamParties_CreateBeacon
SteamAPI_ISteamParties_DestroyBeacon
SteamAPI_ISteamParties_GetAvailableBeaconLocations
SteamAPI_ISteamParties_GetBeaconByIndex
SteamAPI_ISteamParties_GetBeaconDetails
SteamAPI_ISteamParties_GetBeaconLocationData
SteamAPI_ISteamParties_GetNumActiveBeacons
SteamAPI_ISteamParties_GetNumAvailableBeaconLocations
SteamAPI_ISteamParties_JoinParty
SteamAPI_ISteamParties_OnReservationCompleted
SteamAPI_ISteamRemotePlay_BGetSessionClientResolution
SteamAPI_ISteamRemotePlay_BSendRemotePlayTogetherInvite
SteamAPI_ISteamRemotePlay_GetSessionClientFormFactor
SteamAPI_ISteamRemotePlay_GetSessionClientName
SteamAPI_ISteamRemotePlay_GetSessionCount
SteamAPI_ISteamRemotePlay_GetSessionID
SteamAPI_ISteamRemotePlay_GetSessionSteamID
SteamAPI_ISteamRemoteStorage_CommitPublishedFileUpdate
SteamAPI_ISteamRemoteStorage_CreatePublishedFileUpdateRequest
SteamAPI_ISteamRemoteStorage_DeletePublishedFile
SteamAPI_ISteamRemoteStorage_EnumeratePublishedFilesByUserAction
SteamAPI_ISteamRemoteStorage_EnumeratePublishedWorkshopFiles
SteamAPI_ISteamRemoteStorage_EnumerateUserPublishedFiles
SteamAPI_ISteamRemoteStorage_EnumerateUserSharedWorkshopFiles
SteamAPI_ISteamRemoteStorage_EnumerateUserSubscribedFiles
SteamAPI_ISteamRemoteStorage_FileDelete
SteamAPI_ISteamRemoteStorage_FileExists
SteamAPI_ISteamRemoteStorage_FileForget
SteamAPI_ISteamRemoteStorage_FilePersisted
SteamAPI_ISteamRemoteStorage_FileRead
SteamAPI_ISteamRemoteStorage_FileReadAsync
SteamAPI_ISteamRemoteStorage_FileReadAsyncComplete
SteamAPI_ISteamRemoteStorage_FileShare
SteamAPI_ISteamRemoteStorage_FileWrite
SteamAPI_ISteamRemoteStorage_FileWriteAsync
SteamAPI_ISteamRemoteStorage_FileWriteStreamCancel
SteamAPI_ISteamRemoteStorage_FileWriteStreamClose
SteamAPI_ISteamRemoteStorage_FileWriteStreamOpen
SteamAPI_ISteamRemoteStorage_FileWriteStreamWriteChunk
SteamAPI_ISteamRemoteStorage_GetCachedUGCCount
SteamAPI_ISteamRemoteStorage_GetCachedUGCHandle
SteamAPI_ISteamRemoteStorage_GetFileCount
SteamAPI_ISteamRemoteStorage_GetFileNameAndSize
SteamAPI_ISteamRemoteStorage_GetFileSize
SteamAPI_ISteamRemoteStorage_GetFileTimestamp
SteamAPI_ISteamRemoteStorage_GetPublishedFileDetails
SteamAPI_ISteamRemoteStorage_GetPublishedItemVoteDetails
SteamAPI_ISteamRemoteStorage_GetQuota
SteamAPI_ISteamRemoteStorage_GetSyncPlatforms
SteamAPI_ISteamRemoteStorage_GetUGCDetails
SteamAPI_ISteamRemoteStorage_GetUGCDownloadProgress
SteamAPI_ISteamRemoteStorage_GetUserPublishedItemVoteDetails
SteamAPI_ISteamRemoteStorage_IsCloudEnabledForAccount
SteamAPI_ISteamRemoteStorage_IsCloudEnabledForApp
SteamAPI_ISteamRemoteStorage_PublishVideo
SteamAPI_ISteamRemoteStorage_PublishWorkshopFile
SteamAPI_ISteamRemoteStorage_SetCloudEnabledForApp
SteamAPI_ISteamRemoteStorage_SetSyncPlatforms
SteamAPI_ISteamRemoteStorage_SetUserPublishedFileAction
SteamAPI_ISteamRemoteStorage_SubscribePublishedFile
SteamAPI_ISteamRemoteStorage_UGCDownload
SteamAPI_ISteamRemoteStorage_UGCDownloadToLocation
SteamAPI_ISteamRemoteStorage_UGCRead
SteamAPI_ISteamRemoteStorage_UnsubscribePublishedFile
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileDescription
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileFile
SteamAPI_ISteamRemoteStorage_UpdatePublishedFilePreviewFile
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileSetChangeDescription
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileTags
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileTitle
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileVisibility
SteamAPI_ISteamRemoteStorage_UpdateUserPublishedItemVote
SteamAPI_ISteamScreenshots_AddScreenshotToLibrary
SteamAPI_ISteamScreenshots_AddVRScreenshotToLibrary
SteamAPI_ISteamScreenshots_HookScreenshots
SteamAPI_ISteamScreenshots_IsScreenshotsHooked
SteamAPI_ISteamScreenshots_SetLocation
SteamAPI_ISteamScreenshots_TagPublishedFile
SteamAPI_ISteamScreenshots_TagUser
SteamAPI_ISteamScreenshots_TriggerScreenshot
SteamAPI_ISteamScreenshots_WriteScreenshot
SteamAPI_ISteamUGC_AddAppDependency
SteamAPI_ISteamUGC_AddDependency
SteamAPI_ISteamUGC_AddExcludedTag
SteamAPI_ISteamUGC_AddItemKeyValueTag
SteamAPI_ISteamUGC_AddItemPreviewFile
SteamAPI_ISteamUGC_AddItemPreviewVideo
SteamAPI_ISteamUGC_AddItemToFavorites
SteamAPI_ISteamUGC_AddRequiredKeyValueTag
SteamAPI_ISteamUGC_AddRequiredTag
SteamAPI_ISteamUGC_AddRequiredTagGroup
SteamAPI_ISteamUGC_BInitWorkshopForGameServer
SteamAPI_ISteamUGC_CreateItem
SteamAPI_ISteamUGC_CreateQueryAllUGCRequestCursor
SteamAPI_ISteamUGC_CreateQueryAllUGCRequestPage
SteamAPI_ISteamUGC_CreateQueryUGCDetailsRequest
SteamAPI_ISteamUGC_CreateQueryUserUGCRequest
SteamAPI_ISteamUGC_DeleteItem
SteamAPI_ISteamUGC_DownloadItem
SteamAPI_ISteamUGC_GetAppDependencies
SteamAPI_ISteamUGC_GetItemDownloadInfo
SteamAPI_ISteamUGC_GetItemInstallInfo
SteamAPI_ISteamUGC_GetItemState
SteamAPI_ISteamUGC_GetItemUpdateProgress
SteamAPI_ISteamUGC_GetNumSubscribedItems
SteamAPI_ISteamUGC_GetQueryFirstUGCKeyValueTag
SteamAPI_ISteamUGC_GetQueryUGCAdditionalPreview
SteamAPI_ISteamUGC_GetQueryUGCChildren
SteamAPI_ISteamUGC_GetQueryUGCKeyValueTag
SteamAPI_ISteamUGC_GetQueryUGCMetadata
SteamAPI_ISteamUGC_GetQueryUGCNumAdditionalPreviews
SteamAPI_ISteamUGC_GetQueryUGCNumKeyValueTags
SteamAPI_ISteamUGC_GetQueryUGCNumTags
SteamAPI_ISteamUGC_GetQueryUGCPreviewURL
SteamAPI_ISteamUGC_GetQueryUGCResult
SteamAPI_ISteamUGC_GetQueryUGCStatistic
SteamAPI_ISteamUGC_GetQueryUGCTag
SteamAPI_ISteamUGC_GetQueryUGCTagDisplayName
SteamAPI_ISteamUGC_GetSubscribedItems
SteamAPI_ISteamUGC_GetUserItemVote
SteamAPI_ISteamUGC_ReleaseQueryUGCRequest
SteamAPI_ISteamUGC_RemoveAllItemKeyValueTags
SteamAPI_ISteamUGC_RemoveAppDependency
SteamAPI_ISteamUGC_RemoveDependency
SteamAPI_ISteamUGC_RemoveItemFromFavorites
SteamAPI_ISteamUGC_RemoveItemKeyValueTags
SteamAPI_ISteamUGC_RemoveItemPreview
SteamAPI_ISteamUGC_RequestUGCDetails
SteamAPI_ISteamUGC_SendQueryUGCRequest
SteamAPI_ISteamUGC_SetAllowCachedResponse
SteamAPI_ISteamUGC_SetAllowLegacyUpload
SteamAPI_ISteamUGC_SetCloudFileNameFilter
SteamAPI_ISteamUGC_SetItemContent
SteamAPI_ISteamUGC_SetItemDescription
SteamAPI_ISteamUGC_SetItemMetadata
SteamAPI_ISteamUGC_SetItemPreview
SteamAPI_ISteamUGC_SetItemTags
SteamAPI_ISteamUGC_SetItemTitle
SteamAPI_ISteamUGC_SetItemUpdateLanguage
SteamAPI_ISteamUGC_SetItemVisibility
SteamAPI_ISteamUGC_SetLanguage
SteamAPI_ISteamUGC_SetMatchAnyTag
SteamAPI_ISteamUGC_SetRankedByTrendDays
SteamAPI_ISteamUGC_SetReturnAdditionalPreviews
SteamAPI_ISteamUGC_SetReturnChildren
SteamAPI_ISteamUGC_SetReturnKeyValueTags
SteamAPI_ISteamUGC_SetReturnLongDescription
SteamAPI_ISteamUGC_SetReturnMetadata
SteamAPI_ISteamUGC_SetReturnOnlyIDs
SteamAPI_ISteamUGC_SetReturnPlaytimeStats
SteamAPI_ISteamUGC_SetReturnTotalOnly
SteamAPI_ISteamUGC_SetSearchText
SteamAPI_ISteamUGC_SetUserItemVote
SteamAPI_ISteamUGC_StartItemUpdate
SteamAPI_ISteamUGC_StartPlaytimeTracking
SteamAPI_ISteamUGC_StopPlaytimeTracking
SteamAPI_ISteamUGC_StopPlaytimeTrackingForAllItems
SteamAPI_ISteamUGC_SubmitItemUpdate
SteamAPI_ISteamUGC_SubscribeItem
SteamAPI_ISteamUGC_SuspendDownloads
SteamAPI_ISteamUGC_UnsubscribeItem
SteamAPI_ISteamUGC_UpdateItemPreviewFile
SteamAPI_ISteamUGC_UpdateItemPreviewVideo
SteamAPI_ISteamUserStats_AttachLeaderboardUGC
SteamAPI_ISteamUserStats_ClearAchievement
SteamAPI_ISteamUserStats_DownloadLeaderboardEntries
SteamAPI_ISteamUserStats_DownloadLeaderboardEntriesForUsers
SteamAPI_ISteamUserStats_FindLeaderboard
SteamAPI_ISteamUserStats_FindOrCreateLeaderboard
SteamAPI_ISteamUserStats_GetAchievement
SteamAPI_ISteamUserStats_GetAchievementAchievedPercent
SteamAPI_ISteamUserStats_GetAchievementAndUnlockTime
SteamAPI_ISteamUserStats_GetAchievementDisplayAttribute
SteamAPI_ISteamUserStats_GetAchievementIcon
SteamAPI_ISteamUserStats_GetAchievementName
SteamAPI_ISteamUserStats_GetAchievementProgressLimitsFloat
SteamAPI_ISteamUserStats_GetAchievementProgressLimitsInt32
SteamAPI_ISteamUserStats_GetDownloadedLeaderboardEntry
SteamAPI_ISteamUserStats_GetGlobalStatDouble
SteamAPI_ISteamUserStats_GetGlobalStatHistoryDouble
SteamAPI_ISteamUserStats_GetGlobalStatHistoryInt64
SteamAPI_ISteamUserStats_GetGlobalStatInt64
SteamAPI_ISteamUserStats_GetLeaderboardDisplayType
SteamAPI_ISteamUserStats_GetLeaderboardEntryCount
SteamAPI_ISteamUserStats_GetLeaderboardName
SteamAPI_ISteamUserStats_GetLeaderboardSortMethod
SteamAPI_ISteamUserStats_GetMostAchievedAchievementInfo
SteamAPI_ISteamUserStats_GetNextMostAchievedAchievementInfo
SteamAPI_ISteamUserStats_GetNumAchievements
SteamAPI_ISteamUserStats_GetNumberOfCurrentPlayers
SteamAPI_ISteamUserStats_GetStatFloat
SteamAPI_ISteamUserStats_GetStatInt32
SteamAPI_ISteamUserStats_GetUserAchievement
SteamAPI_ISteamUserStats_GetUserAchievementAndUnlockTime
SteamAPI_ISteamUserStats_GetUserStatFloat
SteamAPI_ISteamUserStats_GetUserStatInt32
SteamAPI_ISteamUserStats_IndicateAchievementProgress
SteamAPI_ISteamUserStats_RequestCurrentStats
SteamAPI_ISteamUserStats_RequestGlobalAchievementPercentages
SteamAPI_ISteamUserStats_RequestGlobalStats
SteamAPI_ISteamUserStats_RequestUserStats
SteamAPI_ISteamUserStats_ResetAllStats
SteamAPI_ISteamUserStats_SetAchievement
SteamAPI_ISteamUserStats_SetStatFloat
SteamAPI_ISteamUserStats_SetStatInt32
SteamAPI_ISteamUserStats_StoreStats
SteamAPI_ISteamUserStats_UpdateAvgRateStat
SteamAPI_ISteamUserStats_UploadLeaderboardScore
SteamAPI_ISteamUser_AdvertiseGame
SteamAPI_ISteamUser_BIsBehindNAT
SteamAPI_ISteamUser_BIsPhoneIdentifying
SteamAPI_ISteamUser_BIsPhoneRequiringVerification
SteamAPI_ISteamUser_BIsPhoneVerified
SteamAPI_ISteamUser_BIsTwoFactorEnabled
SteamAPI_ISteamUser_BLoggedOn
SteamAPI_ISteamUser_BSetDurationControlOnlineState
SteamAPI_ISteamUser_BeginAuthSession
SteamAPI_ISteamUser_CancelAuthTicket
SteamAPI_ISteamUser_DecompressVoice
SteamAPI_ISteamUser_EndAuthSession
SteamAPI_ISteamUser_GetAuthSessionTicket
SteamAPI_ISteamUser_GetAvailableVoice
SteamAPI_ISteamUser_GetDurationControl
SteamAPI_ISteamUser_GetEncryptedAppTicket
SteamAPI_ISteamUser_GetGameBadgeLevel
SteamAPI_ISteamUser_GetHSteamUser
SteamAPI_ISteamUser_GetMarketEligibility
SteamAPI_ISteamUser_GetPlayerSteamLevel
SteamAPI_ISteamUser_GetSteamID
SteamAPI_ISteamUser_GetUserDataFolder
SteamAPI_ISteamUser_GetVoice
SteamAPI_ISteamUser_GetVoiceOptimalSampleRate
SteamAPI_ISteamUser_InitiateGameConnection
SteamAPI_ISteamUser_RequestEncryptedAppTicket
SteamAPI_ISteamUser_RequestStoreAuthURL
SteamAPI_ISteamUser_StartVoiceRecording
SteamAPI_ISteamUser_StopVoiceRecording
SteamAPI_ISteamUser_TerminateGameConnection
SteamAPI_ISteamUser_TrackAppUsageEvent
SteamAPI_ISteamUser_UserHasLicenseForApp
SteamAPI_ISteamUtils_BOverlayNeedsPresent
SteamAPI_ISteamUtils_CheckFileSignature
SteamAPI_ISteamUtils_FilterText
SteamAPI_ISteamUtils_GetAPICallFailureReason
SteamAPI_ISteamUtils_GetAPICallResult
SteamAPI_ISteamUtils_GetAppID
SteamAPI_ISteamUtils_GetConnectedUniverse
SteamAPI_ISteamUtils_GetCurrentBatteryPower
SteamAPI_ISteamUtils_GetEnteredGamepadTextInput
SteamAPI_ISteamUtils_GetEnteredGamepadTextLength
SteamAPI_ISteamUtils_GetIPCCallCount
SteamAPI_ISteamUtils_GetIPCountry
SteamAPI_ISteamUtils_GetIPv6ConnectivityState
SteamAPI_ISteamUtils_GetImageRGBA
SteamAPI_ISteamUtils_GetImageSize
SteamAPI_ISteamUtils_GetSecondsSinceAppActive
SteamAPI_ISteamUtils_GetSecondsSinceComputerActive
SteamAPI_ISteamUtils_GetServerRealTime
SteamAPI_ISteamUtils_GetSteamUILanguage
SteamAPI_ISteamUtils_InitFilterText
SteamAPI_ISteamUtils_IsAPICallCompleted
SteamAPI_ISteamUtils_IsOverlayEnabled
SteamAPI_ISteamUtils_IsSteamChinaLauncher
SteamAPI_ISteamUtils_IsSteamInBigPictureMode
SteamAPI_ISteamUtils_IsSteamRunningInVR
SteamAPI_ISteamUtils_IsVRHeadsetStreamingEnabled
SteamAPI_ISteamUtils_SetOverlayNotificationInset
SteamAPI_ISteamUtils_SetOverlayNotificationPosition
SteamAPI_ISteamUtils_SetVRHeadsetStreamingEnabled
SteamAPI_ISteamUtils_SetWarningMessageHook
SteamAPI_ISteamUtils_ShowGamepadTextInput
SteamAPI_ISteamUtils_StartVRDashboard
SteamAPI_ISteamVideo_GetOPFSettings
SteamAPI_ISteamVideo_GetOPFStringForApp
SteamAPI_ISteamVideo_GetVideoURL
SteamAPI_ISteamVideo_IsBroadcasting
SteamAPI_Init
SteamAPI_InitAnonymousUser
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_ManualDispatch_FreeLastCallback
SteamAPI_ManualDispatch_GetAPICallResult
SteamAPI_ManualDispatch_GetNextCallback
SteamAPI_ManualDispatch_Init
SteamAPI_ManualDispatch_RunFrame
SteamAPI_MatchMakingKeyValuePair_t_Construct
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_ReleaseCurrentThreadMemory
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_SteamAppList_v001
SteamAPI_SteamApps_v008
SteamAPI_SteamController_v008
SteamAPI_SteamDatagramHostedAddress_Clear
SteamAPI_SteamDatagramHostedAddress_GetPopID
SteamAPI_SteamDatagramHostedAddress_SetDevAddress
SteamAPI_SteamFriends_v017
SteamAPI_SteamGameSearch_v001
SteamAPI_SteamGameServerApps_v008
SteamAPI_SteamGameServerHTTP_v003
SteamAPI_SteamGameServerInventory_v003
SteamAPI_SteamGameServerNetworkingMessages_SteamAPI_v002
SteamAPI_SteamGameServerNetworkingSockets_SteamAPI_v009
SteamAPI_SteamGameServerNetworking_v006
SteamAPI_SteamGameServerStats_v001
SteamAPI_SteamGameServerUGC_v015
SteamAPI_SteamGameServerUtils_v010
SteamAPI_SteamGameServer_v013
SteamAPI_SteamHTMLSurface_v005
SteamAPI_SteamHTTP_v003
SteamAPI_SteamIPAddress_t_IsSet
SteamAPI_SteamInput_v002
SteamAPI_SteamInventory_v003
SteamAPI_SteamMatchmakingServers_v002
SteamAPI_SteamMatchmaking_v009
SteamAPI_SteamMusicRemote_v001
SteamAPI_SteamMusic_v001
SteamAPI_SteamNetworkingConfigValue_t_SetFloat
SteamAPI_SteamNetworkingConfigValue_t_SetInt32
SteamAPI_SteamNetworkingConfigValue_t_SetInt64
SteamAPI_SteamNetworkingConfigValue_t_SetPtr
SteamAPI_SteamNetworkingConfigValue_t_SetString
SteamAPI_SteamNetworkingIPAddrRender_c_str
SteamAPI_SteamNetworkingIPAddr_Clear
SteamAPI_SteamNetworkingIPAddr_GetIPv4
SteamAPI_SteamNetworkingIPAddr_IsEqualTo
SteamAPI_SteamNetworkingIPAddr_IsIPv4
SteamAPI_SteamNetworkingIPAddr_IsIPv6AllZeros
SteamAPI_SteamNetworkingIPAddr_IsLocalHost
SteamAPI_SteamNetworkingIPAddr_ParseString
SteamAPI_SteamNetworkingIPAddr_SetIPv4
SteamAPI_SteamNetworkingIPAddr_SetIPv6
SteamAPI_SteamNetworkingIPAddr_SetIPv6LocalHost
SteamAPI_SteamNetworkingIPAddr_ToString
SteamAPI_SteamNetworkingIdentityRender_c_str
SteamAPI_SteamNetworkingIdentity_Clear
SteamAPI_SteamNetworkingIdentity_GetGenericBytes
SteamAPI_SteamNetworkingIdentity_GetGenericString
SteamAPI_SteamNetworkingIdentity_GetIPAddr
SteamAPI_SteamNetworkingIdentity_GetPSNID
SteamAPI_SteamNetworkingIdentity_GetStadiaID
SteamAPI_SteamNetworkingIdentity_GetSteamID
SteamAPI_SteamNetworkingIdentity_GetSteamID64
SteamAPI_SteamNetworkingIdentity_GetXboxPairwiseID
SteamAPI_SteamNetworkingIdentity_IsEqualTo
SteamAPI_SteamNetworkingIdentity_IsInvalid
SteamAPI_SteamNetworkingIdentity_IsLocalHost
SteamAPI_SteamNetworkingIdentity_ParseString
SteamAPI_SteamNetworkingIdentity_SetGenericBytes
SteamAPI_SteamNetworkingIdentity_SetGenericString
SteamAPI_SteamNetworkingIdentity_SetIPAddr
SteamAPI_SteamNetworkingIdentity_SetLocalHost
SteamAPI_SteamNetworkingIdentity_SetPSNID
SteamAPI_SteamNetworkingIdentity_SetStadiaID
SteamAPI_SteamNetworkingIdentity_SetSteamID
SteamAPI_SteamNetworkingIdentity_SetSteamID64
SteamAPI_SteamNetworkingIdentity_SetXboxPairwiseID
SteamAPI_SteamNetworkingIdentity_ToString
SteamAPI_SteamNetworkingMessage_t_Release
SteamAPI_SteamNetworkingMessages_SteamAPI_v002
SteamAPI_SteamNetworkingPOPIDRender_c_str
SteamAPI_SteamNetworkingSockets_SteamAPI_v009
SteamAPI_SteamNetworkingUtils_SteamAPI_v003
SteamAPI_SteamNetworking_v006
SteamAPI_SteamParentalSettings_v001
SteamAPI_SteamParties_v002
SteamAPI_SteamRemotePlay_v001
SteamAPI_SteamRemoteStorage_v014
SteamAPI_SteamScreenshots_v003
SteamAPI_SteamUGC_v015
SteamAPI_SteamUserStats_v012
SteamAPI_SteamUser_v021
SteamAPI_SteamUtils_v010
SteamAPI_SteamVideo_v002
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAPI_gameserveritem_t_Construct
SteamAPI_gameserveritem_t_GetName
SteamAPI_gameserveritem_t_SetName
SteamAPI_servernetadr_t_Assign
SteamAPI_servernetadr_t_Construct
SteamAPI_servernetadr_t_GetConnectionAddressString
SteamAPI_servernetadr_t_GetConnectionPort
SteamAPI_servernetadr_t_GetIP
SteamAPI_servernetadr_t_GetQueryAddressString
SteamAPI_servernetadr_t_GetQueryPort
SteamAPI_servernetadr_t_Init
SteamAPI_servernetadr_t_IsLessThan
SteamAPI_servernetadr_t_SetConnectionPort
SteamAPI_servernetadr_t_SetIP
SteamAPI_servernetadr_t_SetQueryPort
SteamClient
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamInternal_ContextInit
SteamInternal_CreateInterface
SteamInternal_FindOrCreateGameServerInterface
SteamInternal_FindOrCreateUserInterface
SteamInternal_GameServer_Init
g_pSteamClientGameServer
Name
.text
Size
131KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Among.Us/Among Us/Among Us_Data/Plugins/x86_64/tess2.dll
- IMPHASH 1ef70c7d9dfe26d15f3a7965f3489556
- SHA256 36a12aab5bd62fa285eb7ea7fa9afc8302a4e4c0d6aac2483f4daacfdf10f024
- MD5 c17b096e520464f91c4ae0f6dabac9b4
- SHA1 42bff4540fa82ff39ca63eec1997405dad8633e5
- SHA512 e31640430d471dacb52a0c26f1070aa0d7e30328ee3ad4d1cc46f07261305e84540639bcf082a590ca6228faf5a87770efcf8dc24a10ecc96ce6eee3cbe1d83a
- SSDEEP 768:I8jRO/UNfAO6P71hvC1b7DTXO9ucdqChGc:I8lN4Ol1DTeLl7
- TLSH T144F21896606444BCD92A813DEA8BD44FD2F5F42A43589BEF43E252271F03AE205FB715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
27152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Forest\Source\libtess2\Build\tess2.pdb
vcruntime140
__C_specific_handler
longjmp
__intrinsic_setjmp
__std_type_info_destroy_list
memset
api-ms-win-crt-heap-l1-1-0
malloc
realloc
free
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment
_configure_narrow_argv
kernel32
GetCurrentThreadId
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
RtlCaptureContext
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
tessAddContour
tessDeleteTess
tessGetElementCount
tessGetElements
tessGetVertexCount
tessGetVertexIndices
tessGetVertices
tessNewTess
tessTesselate
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=25305,
count=1, id=199, version=41118,
count=3, id=259, version=25305,
count=11, id=261, version=25305,
count=10, id=260, version=25305,
count=2, id=257, version=25203,
count=37, id=1, productName=Unmarked objects,
count=7, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
Among.Us/Among Us/Among Us_Data/Resources/unity default resources
- SHA256 d6c3c5465ee5f1d3479af42c0833754a6f0b6c2897bc0bf35d37d944b1ea258b
- MD5 c732d1ddf70594ef6d303c0554100d5d
- SHA1 7235baeca643b19a7076abef0ccdc0c4b3199589
- SHA512 7bd90894333ee0722f5621c29df972a740e8babbca2cda11a3d320d87327a9d440953333d3987ea1c68a05bfa0eb03596a87e3f9c7a04868b74981eb3d4e9f25
- SSDEEP 6144:HB9JxVJ0aYR1CCVX8BAiZahi3YW+/OJ9WqCmKISHCkcCzw:18TpQahXvOjdCTnw
- TLSH T104755315A2A1153DEC5E053987A31E61E3BDE99C1BEB8B133B1C321CBF617488A77274
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/Resources/unity_builtin_extra
- SHA256 db056fc9788d4f4e93d7c3bd8655cde5a4a11a7245715a06f79011a72521abe3
- MD5 17808a1d6a606dbd5135c53234e1c249
- SHA1 404b14ed08da77bd34435725df79949ac21276a4
- SHA512 7fbeb76416ca0dd1d89c8b286d8fa43d95c997882db8e8083c0a889cb6e7e69d3267cde167133db11c488ad3370841efd5e1b045d5af83775f51beaadac8e3af
- SSDEEP 1536:USmIiXEniJxigwiQ0RSaF9/nz6lGyxi8i/6lGy0UdlGQ9+za3imDi73LGVWbPBb:UBfsT06b92aFDi73Lnb
- TLSH T15234D779635B583FCC21153748BA0B739732A5F81BEE0F236E6C5F6C28E5288AB11754
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/RuntimeInitializeOnLoads.json
- SHA256 ae0fa193d2208582d2199eeed842535235c878fc8f91abf6aea021d44b1822e8
- MD5 4456220ce2fb326da9d495d838e499cc
- SHA1 53750598db47f8556a97e866ab531e224c31113a
- SHA512 7e5959289d7db49d8c1b2ab0bf94b6feb00bef4465642024051711ad0c421c6fb35d0be6252f7097af95880791e18aed496e155d00b1c52bed689440314bfc02
- TLSH T10A5105AC22C78F7F4F4BD3A7787A194D34940A0F99CA1904EDB90F3FA4B11692D8212C
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/ScriptingAssemblies.json
- SHA256 709e58570f7365bcfd862d72de23d357ede1060bf6ebe4835fc56b25ead135df
- MD5 486657f1851aa584dc5ad8853aea71c8
- SHA1 0dd20f30105fa93fec5423429fd7c0eddceb5d35
- SHA512 92e1aa5dde806bd273c0e85109d899eab4faa5426c12e8349f9e00dc631d220f655ba01df27e6c10f4510ffedc661c11b62b785ca6de7b7c6d377dfc77c4dc52
- SSDEEP 48:YXNAYrKXrjFRlClouNuQGoSfTG/fjiF7Pg0bLxxP1cW4I6hHD1ze:G0jrlMouNtjia26FDFe
- TLSH T1BCA106B6C19B22D32ECC5FC38C758C8C39D301920A65D4145EAEA39FA979CDA3D5D5E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/CustomAssetPacksData.json
- SHA256 e5eda2692ae02be0f1ce3d669227489fb13ef417c13a6be8e268df7f831a2b14
- MD5 601cadf88bf97643cccde5bfb0ccda39
- SHA1 cd97f7930965c49eb10288c20593fdf40f1a0ce9
- SHA512 62f31f914038e598b73032aba22acb663a37480c3047a511a4d88ec52ebd0aa4bef4c224e90f576590baaa050093472e5d4e19981e02f9f96902d0b744b8f639
- TLSH T134C02B00109BBCBEB33E8F10D08DAE8B01F133004CB0C02CCC3703007601C745105435
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/UnityServicesProjectConfiguration.json
- SHA256 11c0781bbeaf965be6681321c30774382a1bb78c44b94cb68568a5917bc3fceb
- MD5 c46706655f231091d8e466dd2050dad4
- SHA1 7c8d066fed294d3d22e1a4e784daf6d048e94119
- SHA512 d543f8898017336a52e50f4ab02003d4761ff73b0d6eb9f398e8d18d2ba4b8a7098b13ae241f05c13999868eb136baf9814fd087618344645ded9bf2bdf874f5
- TLSH T10B315A3080DBAC77A64C97C53C7615CA2BEA03466AED25056B7A5364FDB949B0F02C34
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/AddressablesLink/link.xml
- SHA256 4830b937f1d769f9b90dfd395e6d326424f3a4fb643f766b3c65c7d20ac4d1a2
- MD5 4d3c2a5292877f4934146a74a2649404
- SHA1 2d988896afe9e717e0e9ee43bc2b83874735d0f1
- SHA512 686e863067d2d77e0e17da878c662b836c0aa4272bc929d59e98d71c218fc7bac87d313e48d5a6e404f4117f285663e153a736f89aab4ad34b5009ec5ed12ac8
- SSDEEP 192:/FJs071m9Hvz67+aFpRt347YeqZ31auPtQN5rTfTITrTLdRRUP:NJsPu7fFpRt347eNQiH4
- TLSH T1AAD221B1429D3DEF8772AF155A1B44D6783D84FB036821AA3AF1393B6FE6A410523317
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/0e13d00f4e855a64ab6bfe6989b0ff98_unitybuiltinshaders.bundle
- SHA256 70949541b46e9223ae7dca57133a8db221bc87575ffdac0ef8f73d87c0747e1d
- MD5 d8f6984ab741c5eb9ddf3d9184931329
- SHA1 da9b9177473576a6c71620e05ea993f5d3518037
- SHA512 77ff6315ad58d2f74359e84d0d7cdc3d2da984bac8ebba4542a14569fc0f794ee896a169f2ccedcfec5d6ca0a0b20c6bf38c6dfdcb56dc686f8b37930d0941c2
- SSDEEP 1536:B7cw1tcWm2TTumjB+ftfO7hHwmk9g9+apiozORcufWV:B7n1XumjAZ+hHwDO+jcuM
- TLSH T152339EB7822386E482162E94999CDB29430DEE1D750DF6F842BF50372C5F32A765C87E
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2024_birthday_beans_assets_all.bundle
- SHA256 791417ca66b3fae7e225d81ce1464cf1fcbd6682122045f784bd610e95cd1dd3
- MD5 a416affe1e7d92437e7f6c82fcb4c9dd
- SHA1 e20d13cb6d341e52fbadcbaa3ff53764b70f000e
- SHA512 a1f9d77dbb07944dc81f9ca5c645b275518630c949648a1aa82c597a8c7868b6ee1eb44ade3891fe0465ad5f6e32320a65a7ea68514008149f0ade2d520d2a78
- SSDEEP 3072:HTr69GB7P3fKDhhcWL+tFBrep9XZoxT5dd/wvEYjDQldiFTXrxtdB69:zr6KjwhSWLfyPdd4vEYjDQ6BxtdQ9
- TLSH T1723412A39104CE16D8E222F680AD4A23FE7F9A80B211700D26E57C7F7C57F551A6B3B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2024beanbundle1_assets_all.bundle
- SHA256 145b23e74125b2c8abb70d4abf217c889e396dd98443a925b3020480728a650d
- MD5 694ea9891cf7db00e1a2888af2af1d15
- SHA1 098f982daa7a70daeeb3d499034faea5a258833e
- SHA512 70b7305036a0ce84da30dd80415089a05b0bd7d27426dc2b0c46f60cdb5266d401f5179da3c90da1f2fc91e2b1aecbbbaea041db0df463076573c86196bdcb9e
- SSDEEP 49152:mVzcdNkFb29A8fjvJDdfvBbh5N0x3/JSkrCgvcvocUL8w2G:mVzcdkWAiZfvBnNm/8krCgvcvd59G
- TLSH T1D5A512FBB34C9F75C2F4A23B92997DA394FBC5881472844DCF269ACB0D9B9541933620
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/2025beanbuffer2_assets_all.bundle
- SHA256 60487e6d8da7a2cfa285f7aeee9160ecb365ffcb07355ebdf2e9306c6579288a
- MD5 6d4377e08895d98cecb3a7b24973c4c1
- SHA1 819b27b54c77fa52191ed338f50e55ef7f952e40
- SHA512 5a785f432b2a4a59fa40b64fe40827f04a8b594e8aa57f79957975d5c7e7e79ff92b2c55f2e207d69fbe20b61de3b58f8446bf04f6002bc8bb772bed364ce4c0
- SSDEEP 98304:sea6FyA4yRWOqfDzzbmVy43IM6r7uRHCN5PTU9Zj97JnCy:sea6gAdR/qfLicEIMyu8RI9hD3
- TLSH T10C3612E7B38CAFB9C4F47232825A5D67E5FBC8842072D94CCE154B8F197BA845623721
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/anniversaryslothmask_assets_all.bundle
- SHA256 30364f520b5ec407faab27295eb7fadf6312da95a63d801a716198f778eb84d8
- MD5 1103ffe4274f0909d6860251b1b07fae
- SHA1 b5c61ab5c9c5281ee784c38e6cf2ea26caf90058
- SHA512 6783fe31b57adedcda9f51655b83836d0f1a201c0994214670cd4a3a46523fb77ecf45fb8b223390a60ea63fab876bc3f63de48864636c3a1f282c4d3414711e
- SSDEEP 768:ILP5n0BJ0/JyXiDKPinceLblJeBpcYFkyKdKD0:IFn0YIi26nRblQcqRD0
- TLSH T12DD2E18635CE9D70C4843EBD93DD532D58BFB24EF813E4A62926F7215EBF70A1818112
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/cosmicubelny24_assets_all.bundle
- SHA256 a1cd56a3a939421c55f92eab499e46b6f88f669142487c2cae1016646f6dcf4b
- MD5 650f998a54be4f8b82770e1d0e5b85e2
- SHA1 f51e2123f9fb69eb056dd2ba0e8dfaf5dce1d1d5
- SHA512 46ced2b97fddd3085ec3489f32e8a88d1b84551930dc585e61f38f9c77336d2b1c167f8d8e223890ebd20da78375bdf724c38c03cb31388a9ad7f07edbbb212d
- SSDEEP 393216:W7c5EKsUv94D+NvNLdFJCfWLmaceRKF2NARBzh7U06TKmf6nnOseEGg0JKAcG:YcJsUv94CRNLvJaWL8eRKF2uRBzh7U0S
- TLSH T19A27237B717DAA3849E6A232759B065E37FA45DC988FF148E024DD36BDF53100B1E282
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/critrolecubea_assets_all.bundle
- SHA256 6a36659803d2a74efa2bde4c6f648838c5d9df797e9a1e181efbd1d3c298f197
- MD5 45e436f5bacb50b6d1d0daa0fc5cc076
- SHA1 fec899a09d009a95eab72b3447c1619f36448acb
- SHA512 36c199e96edf3d0b7bf055aa21d436ff41aad45aac65f6bd88f4c643aa86db1ef1f48b581ff37279fb9d78fee2b2c01692c1501e335593f6811697fdd82db9a5
- SSDEEP 196608:w3KaGYilukT/svn4aNtGvWBocAebMBSbHkosdGFKCr+5hd:w6N8kTCn46BEcqGFkd
- TLSH T183E602E7B28CAFB5C5F47233C25A6E2790FB8C942573890CCE267A8F157B6805623751
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/critrolecubeb_assets_all.bundle
- SHA256 2cec47938c849494a62df2bd383289d551e1b5995aa3721b485cb004fa9e2d62
- MD5 7b6435c74cc7f5325529dfe07e60a5f9
- SHA1 16efe899d35d0f21e87a1af0367236a41db4ca03
- SHA512 6fce742e380f0705351be1c9cdf4e7d83d34cbcf55492591fc5816bef041ef714ad4daa9703ed0546ed745071f569364405d4ca59c3e4bf41689ad0961d24058
- SSDEEP 393216:zucbZKXzVbmDoiBpxdQGJtbXLLNoqmsgV8n2/RnSiTjeeDdePmIxsr7VCfd4D9C:Sc4XzVbm8epxiGJBXLOqmsgV+2/RnSic
- TLSH T10617233F71BEA93848E6E122759B065E37BA15DCA88FF248E024DD36BDF43141B1D285
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/edgeworth_assets_all.bundle
- SHA256 af683b51fc9f0c4fedb522c4d08753c55ef76be110b8ce9c31a37feb92ce625d
- MD5 f4dff776726e97410480fc4facd0281f
- SHA1 ea40555c26b8f0c3716d100b69918bb8184f0dd6
- SHA512 a7c83a88a748b07e3db6d9effb464a38300081d5ca220e4435150d9b9f6cf4a7230218afb48a7c70f66b830bac3dd7d6b1a03f62e05ec545cf82d4bbc5f010b4
- SSDEEP 24576:VOr7Y+PytFMaPiKgp7gI8biHxqdMY/70UDm:M4+e6KgpMIkiRqqa7C
- TLSH T1030512EA375CFEF8C1E4753A4B4A29B7E0F6C59958E3840C4F14578B1277B809A335A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/genshin_assets_all.bundle
- SHA256 d578a6fcce302cb513afdf08713617bed4eb94270ff35cf3589d1aaf12ed4d2b
- MD5 cf0f823f24e198bf23cc917f6acb183b
- SHA1 dcacf9a8b9c509f929ca1d8de8a1858d943bb301
- SHA512 271d78a1964d2ac5292ba41796aca4071275c5bb72f663ef266b2dc29bba9d31c0605325c4d174b04fa912cdbf0e1d3cc5ddedb752e54a3cb21ce363f36e18c5
- SSDEEP 24576:s15YeG1loMnz93m08y03JfinfqL51L9u8NGJzC0fBfDcm2+ZXlJfQ8:G5KlhRqy4EfuNHGJzC09zTp
- TLSH T11B7502EBB38C5FF9D5E4A13793495E67E0FAC4552972C00C8E2A4ACF15AB9805733722
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/hanami_assets_all.bundle
- SHA256 4afdfa4de4101b00059a09ea7e4a84d9e0f88d23a4fadb55e372e2eaff7636ed
- MD5 3dcb1bb4a6696f3412135fcebf7da9ae
- SHA1 32be13b5928aa78fc076c3fc5355c2a1d56ae5e7
- SHA512 be2dad6574be3683dcf0a88e6122a0ef4e19553c25891e51006b1f5019d673e6ffdae0588e44b8b3d6ebaa562aa1aeb24b5452cd06a664d2bd98649c8bbb923c
- SSDEEP 393216:yfho+GKuFZ8Llp4Okjd95JIonL/qkud3BxGKCFclG5Wc050NOxt2PxycwxbCoJil:y5osuFGLlObjj5JnnLVud3BxdCFclG5r
- TLSH T1CE27237B71BDAE3888E5A233759B061F72FA45D8589FF548E424DD367DF62000B1A382
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/initialcosmetics_assets_all.bundle
- SHA256 9be203195b655119d0a78e67bc30d9c180c32212bafb137a06d54469abcba4f0
- MD5 76225af6df32cbd649089bcfac90f9ac
- SHA1 133cc9f07578b4bdbd07e4528da90fc5fa6e3806
- SHA512 cda701e43ba6c4ce685602be1492f1c74c7d2eacfa45d5e336448b7abba4815bb19d3075dc597a2acbdd2eef0524ebcd81f46f8d2659fcdaf3fdf1e932ca3076
- SSDEEP 3145728:/xTpAu/i8wdm+x7ILzLpG2gjFh6QFKPWSccXFTgIW:g7dj2OuQwWSZFTgIW
- TLSH T13AA812E7B38C9FB5C1F47233929A1D67A0FB8C941573890CCF267A8B18BB6845723651
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/initialmaps_assets_all.bundle
- SHA256 ddb896c19881e802c0c90138bb5ef6d109c139b07d8843f9c6cf6b81703cac38
- MD5 c802c44ecb2e49b9ea8a60b291255e2e
- SHA1 70bdc57e7af2250a418d8861ba2e956d8999ffd1
- SHA512 9f64f16af0d428da78532dbba67a505bd09b608fc03cc4d1d7bf61337f059a94dfb16cf78062b3bc85c6b0bbda15b9a5b06d0f1d1c578e2266d0f9ad4900c946
- SSDEEP 3145728:JM1tHhOyvuZoBA4vEW5uxHi6mZCvLv4dRftWEmZxbzgJm6J:JM1TOyvuMA4vEzmAv4DfgEmjkm6J
- TLSH T19E682393BD07CEF0E3EBD031D5FA1B66DAF74C41FB9554098A49FB4A24BA290610A353
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/kamurocho_assets_all.bundle
- SHA256 bc191c5c03ca2581558dd880482709de939eedac2d491a5b68310307854a1236
- MD5 b82804eedc0f3a6c9b60452f57eb2a77
- SHA1 7a99a4d2ea673447f248f7531aa3cfd0541a6d3c
- SHA512 7d8922412d399b25a295ac7ff002ca2e26e008640c430613531f5a4996f912f18268539915494b8ec011626692d24e50a3eaa79b68b2da90a95bad8edc8ed484
- SSDEEP 786432:QE+GPf+2ReXN2QQKppEfEUNebF2x5BxunDKohmIB+Skr5tYgXp:OiW264RsmfE2esGnDBpsSaHYgXp
- TLSH T11F7723BB725CAF79C4F47233A29E0A2F76FB85D8146FE50CC9208A6738B63441B16751
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/nye2025_assets_all.bundle
- SHA256 b73598f3e495d2762e30d737e9a08f61bc5b524a01b184682ee5386c0072f4ab
- MD5 ed6047170a87015d8d4b20adc69b5c51
- SHA1 f189aba029adc8b2bcdb14761cd66a479cf01c7d
- SHA512 8e75f46311e30c2c909d435e4bf7596b2c414f3a214035a5139ae5131f30f89b2f3835b7da6a382dc4716e1985df7f07c0fe95e42b87ad710258704f0dda2f13
- SSDEEP 768:TMzCf2M6HsWPFFUlV68ZQacXkvVujgfJdgF0GIYy/8Kz/J:T2u6MWdFUlVTQiVcIJ05yE0x
- TLSH T15C03F1D5730C4466CC2ED6EA45AD2B23EAABE145F5B6E74D0420D7CB0827F840A37327
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/nye2026_assets_all.bundle
- SHA256 7310367bf56b6fb9af2e5bc61ce50848d84b34899f4b34dbc2d1f04f6ca959b0
- MD5 f7ad1f16b00a3f5ff98e1366b42fabe7
- SHA1 4fc452eb4935693885158b865f27acd69a947bc9
- SHA512 66cf629b38572cf854ed7834fd07ea0675907efbae43af49eb1d25687ac428c25789903c407bd6b080329c7ec2ac390fe57f6c7be8be43f0fbf9f5fef93f3aac
- SSDEEP 768:WYxJ3zZNnm9LHDJzCnuzT/8u1CJobyzRRgz9dDP42wxC:WGZ2DJdX3GoCgzvMC
- TLSH T128F2D088F059FE67D05AB4365196232F04EAED9CE1A6ADCC0125B2074CBBD857732731
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/pawsnclaws_assets_all.bundle
- SHA256 07f6342edd9f3b08020e5c647382ea3956225dafe409f7cfcb939036dbe4c552
- MD5 60f9991d78f8abe617cb1ae14f0f7fd2
- SHA1 1d841091c3741c6cb716d3b093800b9266536b64
- SHA512 5f27ddd0faa869aeba7bf790b322ab6156e24eea1219a9a9700351a1595648c83ef3e06126259a6672c1666a9f0023b4290ccf1cce7a6ca6519c02f522674727
- SSDEEP 786432:JckVxUlRIplTONqDpy7rA7aOFqTq3lh9PBThSzAZWpg9iqztMW051:JFAlQpON48nA7p8MBTYyQgUo07
- TLSH T1D35723B772AC9F78C4F5B332A69B1A2FB6FB40D8146FE90CC52489667DF62400B16351
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/phoenixwright_assets_all.bundle
- SHA256 305c352c63584571b29a5a238a238bacab2fea8d99883541c133ff553080d2f2
- MD5 aab043f5718b0f0bc30585467a9e89bb
- SHA1 52399934e41241f7c58f9afa760cd3c8246e1bd9
- SHA512 28b93fd42a242e6eaaf9e6b0132be3615d145bafd603c424e27aed560a497355c8708bcf9177ca10d2c0539b53a9926f45273ea08d43ef437edca3e07abbe3ae
- SSDEEP 24576:a+r98z7PSPbVWQmVTgRJVZo+bBkwHyVJSN9mbD6GUo:z8P0bVWQm2RJ/ptTSVJSNgaGUo
- TLSH T1C44502BBB28C6FBAC5F0B137C34A5D62A1F784942072D58DCB1947CB95BBA845723360
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/racingcubea_assets_all.bundle
- SHA256 a76562e757e0c78a93165686814caac0c9e572833c9a0f9ceab719b260e117dd
- MD5 e0b8994db6382e6b9b56d975de281e2e
- SHA1 8ea1b601539d4ae2aa50e1a6fc863970fa8eccf0
- SHA512 b3e2e2909fb0d6ed3b10b892f05cbabda96275d3fe91e259d66477de76eafea68acbc9c1fbf3faa7db75dd39952739fddfba19eb828613196b876e0de7b391a2
- SSDEEP 98304:TM31V/WeriG7hLZbt2kooIX3XdQy6LIMooafRnJ/vqxRt2fH/1yMOnQ:qsjeEX3ML/UHH/1ybQ
- TLSH T12F7612F7B35CAFB9C1F43633839A0EA7B5FBC0952561E90C8F264A570877B446A13912
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/racingcubeb_assets_all.bundle
- SHA256 4c2d386b2fd5e8ea3e117525b5b525bad6c2683261a959df41b379f485e4240c
- MD5 38d087626bad0935d8e3f8c281187cd4
- SHA1 855c8372d90116cf4a19b238bd3d9f02c9557f27
- SHA512 4e6a1c7a3d7bc50f247f43fde1784741ce3222d6e95170861a39786219f8af74d62984dea88299634ab62468ee74b58bf271d2b6611303783c083cdeeb156fa3
- SSDEEP 393216:iLVjsUyb7mdLXXaGIAG2wlBzcxPe5qQzL0DHl8xUfss1J6WKVc52iNeG3idp:i5jgb7aLn/3GJl9cxW5qQzoDHl8xUftE
- TLSH T1F007233F717EA93848A6E222359B065E37FA55DC988FF148E424DD36BDF43140B1E286
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/referencedatagroup_assets_all_9f02457c7c175b1ee21092cc29dd5801.bundle
- SHA256 e46197fede352bdbf6abb97297e3f84312d21e01426295d0fbdfa3b9b180bf33
- MD5 177cc4c6d8bab6cd49b595bc2ced26af
- SHA1 8fc9618161b89a12d350abba2153fdb029685fa9
- SHA512 23cdddeacaa54ff2dfaba8259d6f485ed04aaaa3ba50b83d1a0c63f9a93a24a2f30e2ddee4093bf016028809019518e0df1383b1fdd3f69150008936b0d5b66c
- SSDEEP 49152:yRkyUewN/zXFKiiJoYBX4rUz2i+yiAShBHd4G4s1oxq6:TpTAicn4w2DyZSP94rs1Gq6
- TLSH T108A5226A26288A76D2F9633B6CD55B53F4D64CA80E72884CCD3637CF407B58C6D136E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/stardewa_assets_all.bundle
- SHA256 3ca8f9526f9f9303e949070db4b2cb41f16624c4d1bbcc277998de82361dac37
- MD5 e4443005e442ffcadf4f7ed8b8ab9a43
- SHA1 ed32b39bc32480bdc2bffff1556f066f46ddd2d3
- SHA512 2def3f07acf89b9238f9af13936841406a35624a3549a8dfbb84d42c4147adf18f12ba56a6b4861b5983ac6aa9a705d6850baa95addac4cec5561303fc624789
- SSDEEP 49152:YFJ4+VdDaoBPozTbQIJvytUjAnE7u9F/TI+t7IIArut7PJCpJPwLCcUTELZBS3aI:j+fD9aTD4z84xurruyJaCc9zewVXAHbJ
- TLSH T1E55612F3B38C9FB9C5F47237939A0D67A1FB84942573DA0CCB260687196BAC09722611
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/Win10/StandaloneWindows64/stardewb_assets_all.bundle
- SHA256 1f4b7ac57be9d39bd72ee6e259cdb00570440a376ec122873afd793435706a48
- MD5 abf09c29f671ec4b8efa360e303c06b1
- SHA1 cefbc06649c511a8a753feceae85044dd37ebc9d
- SHA512 22e11d1eac8946ff1a2037d2cd849a7853b1b153a90c9e5b1ded34ae33fb517f6ce76404e774cd3962b7905d4615730185b53722086c3bf5789967a26190c711
- SSDEEP 393216:hxcGoR+FT+xYobTuGdhGJddALE+CkSa9SagyMI7uhSxW6RBovacrl2cVqRfYoCB:ncp+FT+xLvuGDGJDALikSa9SxyMI7uhv
- TLSH T19F17233B71BDAA3849E6E122359B065E37FA55DC988FB248E024DD36BDF43141F1D282
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/catalog.json
- SHA256 7b5408459d488a6febef0c434e5e47c50fc0d11a8f70bdcce9e362d3f63710bb
- MD5 b3d96e21b9fb8523dd2d39b1b760233e
- SHA1 9fe3b6b2a41bba9bdbddf40f831112497d4d4795
- SHA512 36e4fc70b151f201a301d0ca4642c3c566b64ec7d1b9b3c340d90f9fe072e6d2c43b35c65594888712dac1e84c7cd1bb8fc4831bba3072349c3660762f5899d6
- SSDEEP 24576:vPF8nAZFC8prkHhUlyN7qIF0tirGO0/oRkBRGIKOty7HrCgNq5+HyF6B+iWLGo4t:vinAZFC8prkHhUlyN7qIF0tirGOioRkA
- TLSH T1C335D93113177CEE693E7E20810969854C981F1F25A1E369F8DE11ABE16CC18BDFE876
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/StreamingAssets/aa/settings.json
- SHA256 55495ee2befbe9182aca05c37797c280b038bca30d4ff3008e010d89874d3e75
- MD5 4020d5f4e529a12476838c91be8eec41
- SHA1 628ae231b3a95e0a24c963d54e11f7c63a06a53a
- SHA512 2e76045a5e426e17f81b7ef07550c1881cf8f287453d98e4267d2993732a9d102815f094ce950be033e4dba5f3ae638b49d898a50f24ccd8e5828165c588c164
- TLSH T1E871EC76378C23BE67054EB26458701B05B6C14E396C6490DBE9062FA6B9C973E30AB5
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/app.info
- SHA256 7110f165350438828ab224f0550dc060fb8fb2773b573d75af61ca86ef98f54c
- MD5 acc7a357d31e369afb6d0f832573d0cb
- SHA1 fd22de79f57fd36a1cddf8366c49a5aed9541caa
- SHA512 aebfbb0abb25d487b92ff85be9f62c1154b311f6f96b37723f8dcf8e15983dd91359a5e78d1f33ec51f4b587f7a483fa168319cc12a340a73b1b02be4b98b0c6
- MD5 SHA1 SHA512
Among.Us/Among Us/Among Us_Data/boot.config
- SHA256 46c4d0b7589f3586cf1b605ec6aed958fd7d5a6f2b5b8ff262eba277bf537fce
- MD5 edcf5eed6c628861537a477ec41b9d7b
- SHA1 cc2b11133fcfd2e94bf59b83b4046731c6768623
- SHA512 a87268956a6969de2d70af5b6ead5b71637ed55f9f8081995f499b2bed2544dae2afed27c26f69a844b41e704bb335e4bf9ed16b1ab2b11bddb36e17837fd1c5
- TLSH T149B0125CBBA83EC2A98F843548FC1EC353964019D82659FC5BF82033031B60F66834AF
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/globalgamemanagers
- SHA256 cf4f6edaa9772c627c7f34977a975cae54196e413600d1fa6573c90799894ae9
- MD5 23c8d7b6965bfbd6673a9e76639bb607
- SHA1 c146bd0072ccb7ec31a42998d098b39fc2c6a201
- SHA512 d90f3ea0db6679b2a0bf340861d9a43096afc8a7cb0a7443d58dd455f1708c853fcf53e3cd97582eed8a416dff4b52dfce1867f56fd208b3c38374b76fef1f95
- SSDEEP 6144:utU28cqAf/oORtC2qOqfHThR1duA0MJdq:uvlqKvRO+
- TLSH T1BB34E688CFC29F2BC539467940D70F11B730D9CAD266DB67526868B83CEB3D81F96648
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/globalgamemanagers.assets
- SHA256 6a74c117c556f5b3dbfeb88206a82df0ed06c5f44d578a285c226abd1247bdda
- MD5 3f18c99dbddad2af820e71a8700f70c8
- SHA1 175e85676591d140cc39c5fa1131db4285f79381
- SHA512 b3bdb423a60319cb79cf4bd7214098049a4e7be5fdee7ffeb6e540cb92c58c44dcbfbc7516adc69968ddc854260ddd7c92721c921d5a098058e67e56249b7c9d
- SSDEEP 3072:WLCanaLQ9BDoDeacAVVKRXKlRwxGHCbDz5zFI3a3kEALwg2V1UyHrs:MCkzdacAVOXlxGUz5zi3a388g2V1rrs
- TLSH T1B1B454F440915FB3EDC50A37BC930201AA38378E09D6B91359E4BBB991EA5FE5F02725
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/globalgamemanagers.assets.resS
- SHA256 7c6ebd98430618884f0b000e6dc8415f78f3c8df6221f2c35194bf34535246f6
- MD5 92fd41d28f323701e4728af81b2c050b
- SHA1 3c6c1be416d3fe1e44591eab4a23935f75d0bcbb
- SHA512 896f65875f23c05e6c25b4397ace0a0128e8941175f44d8e464f071c081ef79709e7425655caf1e37ec93d17f844eb6982d751ca1fb5ae5b41e63a5b40cb79ca
- SSDEEP 768:Je5wYOqgqEhVHyZObzRc80Vi7Mg8IbXnMSWsen:45ZTgqEvHyZBxi7u
- TLSH T1B6D47B06276CCC15C50489BCFC0B92F656A72C59E8EB67636A927E8BBC3F6B57447C00
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Metadata/global-metadata.dat
- SHA256 25e7cb6c1a30501bef27c7d930b94ac3317733344816e219720a68dcc19270da
- MD5 7f45dc07522724f7cded2fae0ba89d9e
- SHA1 66b787ba76901e21b425c6ac9b68ee4a058ef84d
- SHA512 2ba885b2c373d6e130b8e913d727ba663492bb12965bd16727ad878fcee8f4ff71c8bea52d1c937677c35b952be5f3641ea98ccaf051d1960212829b3ed94d1d
- SSDEEP 98304:ofCQDr5fQjwHqlyAbY3F7K39vyzTF5tupERWg:ofLbfKvGtKEF
- TLSH T1F8F6D5A0BE69E6AED534A3328C9581F013B0AD895E47E33B3324B73DA5F55644F232C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Buffers.dll-resources.dat
- SHA256 439209737decff0ed26e04cd94c5a7839d9a16438881af6f457b22dabd9b3de9
- MD5 bb09d9583f14f9e456877e5373ba71a8
- SHA1 75c5474b9246f6d9e62e79cb5424c22b15951502
- SHA512 661e57f6c0c2513ca9c612f1ecd6f7696958b7417f36fbb0886b499c98c7c71cae61fa06c72c04b5d584870fadb5ab730c86671103a368eb3365bf7f9f3e6639
- TLSH T16DE0612627FC50B4E272057B191495C5053BD948D13466BCA814211D6BB270287D1F76
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Collections.Immutable.dll-resources.dat
- SHA256 cdeda19448b3c583d912ff379e24c5e390e088a91d6e92a2fbef9042c1a1c85a
- MD5 262003ff2013cf79d79518448d59f2b0
- SHA1 69d071b70b2d0f166e11d545345d5f601f06ba26
- SHA512 bee9167f7cc6a3e2d0d9297c33b04487d41088816258995cfc3c57be8fef29e4bc839ee52679ec27e1d06c522c8476ace819cfe46593be053749c021335b944a
- TLSH T15A31FF2573EC6374F5F70B776A2990810637FE291931D2AE244AC41F287162147AB7BB
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Memory.dll-resources.dat
- SHA256 7b1e50a9a2f05306435e6994a381a4adffbe78a4fdaf6bf62e8904d0748ed5f1
- MD5 92b972a383af17038dadd2d76326529c
- SHA1 9e5607a56a4be406497157938c7091629c9c11ea
- SHA512 cc7468512aeb205cf2df2453b100326ca5707fd3eb5017ea9e1b9b49cc36191a8f1d8013788180b7e443e1a0336cf1e975f557c02929065d4e0ad30c45f4f627
- TLSH T14A31CC1677FE0125F2B70BAA743452510A7BFCB61620DE4F646C521F0662F50CAB2B37
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Numerics.Vectors.dll-resources.dat
- SHA256 612c2191dd0e28faf0c0da0fc0f68258a911037d12b97afe44bf40d62066e381
- MD5 c44d7c7cbcae33eee04742e5b8282b80
- SHA1 cc62b3259c37d681640c8115e99c0d0a91dff355
- SHA512 2bfe33e8b69cb964b35c6b1576e3577b48526b3d64d6888de7c3d54be067fcb70035c71203664a7e8aee3965a62ce9816b5aa4f8dd5dd8fda32ec67388217667
- TLSH T15B11841233DC0038F2631BB72871A2855967BDAF8032D90E5418060F1F76F266BE0A32
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Reflection.Metadata.dll-resources.dat
- SHA256 849cee364e824415bbf9667d078cba28b49c1f9e293b7bd73a37c60633135624
- MD5 307d04f9e7264aa910e65a4903bd22a1
- SHA1 cf7cae3798047cdfef6dda9695d6cc327b632c8a
- SHA512 44430955924c18eae60c4fb300d4a137f2c3823d48118e84de5f6f30b6d6e5e15f9a2725133879295f73081b57083abba2771ca484f929656d0df3e4d004a73e
- SSDEEP 192:tQh4oc9+SjMrudmJKr/Xivwj7+RBypQMYWv9D4FOToJANpPFSp:tkx2jYvJqqypLBFsFOT5NpPFK
- TLSH T151424156BBFA2128B9F35B9CABFAC9158DF7BD923921C05D0008050E1975F908E62B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Text.Encodings.Web.dll-resources.dat
- SHA256 92b408fe6fb1381f4d001dc78cc94d35d3cbb36314fa61b70083fdc01bbafb1d
- MD5 3864ea059662c4cb5e2ceb312c19b74d
- SHA1 7a54fefeff43c1019b0cfe92e1ee0b5ca4463020
- SHA512 10d4163749f40ea49a99b6dec308feb9d20baa9ff189c5d4c460931fd5e7aa10e579b89080696fc841fbc700d0f0990ed912807bafca20e0603fc75ad0efa09c
- TLSH T160E0232937DD9164F7322F7314206582552FFD15503876AD5551161C1DF17818792E71
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/Sentry.System.Text.Json.dll-resources.dat
- SHA256 3e5838654142e4287659f516fdc357029dc17c83e43b9bf105b23ba77c72768d
- MD5 e05873ff4a3018cc5836d53019857216
- SHA1 d6e178bd929192f2c3ae5eff60148ae39b411e88
- SHA512 e81da57bc2906607078b4264420ba1a92af82b6d7288f09b56bf93b3d9d5b0c9328ff74339b14db79530a9aafba26636bda193831c88f146c2b65be70fc8e1b0
- SSDEEP 384:6dEk7LEOiwmpfkKGGPeEJ9UDv8KEiT+l0BdvE1kWykKEiEWfrsB:bwLkfkKlJ9UDv8KEiT80BDWxCrsB
- TLSH T1FEA23416F7F82264B5F31684B67ED859CEBABD703721CA8C104401AE1A71E6086B3B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/System.Data.dll-resources.dat
- SHA256 98a7950ec6de3242c2e190dfa630188dfa32511a125542b94baa952d1c757d49
- MD5 4860ddd4350579f8fcacb1881582335a
- SHA1 493c03e9cfef6f72a00f92023cdb88527dfdf72c
- SHA512 51421a1e79914cb6d828305103c5f7cdb020d98107586abd7e04614f65bae8004101e5567a873f52fe2daa3a7984bf4f7a4930e628cc5f86e709e3a37f812a95
- SSDEEP 1536:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FBFdFzF+FUF8FvFOFvFNciFEFvFxF5FHFj:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FI
- TLSH T1C693567CA75073DEDD4A3052064B2807766CC276E15A80F6BE9C4004EBBBD7626BBD6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/System.Drawing.dll-resources.dat
- SHA256 7c33aa707bc3fdc83991b81a97d6fc622b140762a767300f08f616c2c0a91255
- MD5 be7be6458aead12c07a04f26e260c3d1
- SHA1 34d46d957520cb1a525ea9eab36cc40d57a3715a
- SHA512 554a6b2983fdd055bab56b7f210340521b7e7b480f38aa6368691ea9e38fbaa5eb93aab0137e6c9d7f3b58feb0780753d48eac951a83ea8db67a91df1db0ced6
- SSDEEP 384:P7zRaGwlR7QlkaaVaaazEZnbkPHLuecbAEYURxMX:DzRaGwlR74kaaVaaaYnbGsAEjSX
- TLSH T1A8B28345A900F0AECC590279DC6AC6FC35412ED8D591AB2B20F6FE8B7EF51920D0F667
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level0
- SHA256 454d2005fa4d552d2c0719e5cd11a66b23fa72810b19accd277e6a5eda181cc0
- MD5 5c182fa0367f4e981d81fe9f03f85f7b
- SHA1 7a4ea0701b1e4cd6768a26051e1b0b14cfd2c7f8
- SHA512 45af5221cabcadd8c3de4ca32da0bacb162093299eaf0c41cf72b9394a5756cd8f94abbfb32221741e9ff8f5c496373abcc5b3356d055aacf88f20cf0eb35fd4
- TLSH T12E31628237E54D8BC864AB3705C35F80FB71D0891B6BDB2703746A2D2CF23D81E08964
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/Among Us_Data/level1
- SHA256 7e3e0bbd9988c90c6dda4483a6cfa72d6a0f2f90e116b2b15c49d74e3a381993
- MD5 cc0f72515e7e88d3978bd80c25cc7b38
- SHA1 efc2a08c55b962317e56a1873a068a5634cb061d
- SHA512 394f47d6974cc240032d59c19d9ae924397a53fbc2ada78cc5c2738b1de0daafd957a7352967a81db0064334bb50c7102d552f7b0ed951fe9f36bd61d4cb32f3
- SSDEEP 1536:wHC/XJV21ftyjB8wSjuFjSV9ZCPj5v7+Qri2oS/gqcdSpOIJ8:XXWL
- TLSH T1B5A37356BB95A94EE434333719A38F84F730E9954F7E8733637162AE2DF63882E11184
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level2
- SHA256 7ff02b287bbbd89f92c768d8866b472124cb00cad06502985e45e40ea7a44e96
- MD5 96472e41abd8d535468bfd4072fb90bf
- SHA1 ed4546a1645cd21b2a1b7dd7e7e1701e9cb81b98
- SHA512 04117fc453428681cbc4a74ab885d7f565316093a7f3e4f7a538042f21c76980c983739b22cd811e40e3e3df8b21b5e755824c05076d221e023b63f500428aa5
- SSDEEP 6144:iYOX6fui7I8so9ipMD0TlYKp9+Q8Zq/Ov2MuBURXeh7QV1w:FFt9/SuG9+Qb/XeuaV1w
- TLSH T1DE853056BB51EA5ED938333348A38F88FB30D9898F6E83372375626D2DF63891D45184
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level3
- SHA256 63729a624d64382bed5ba55fc3dd87243e2cec22ac532b967b7d08980018ff9a
- MD5 97ef33a2834e9b8cb1e6bfe1dbd93b94
- SHA1 913c9f024e7b375cc8a7850edb686ad263cb91d8
- SHA512 aecca7922c67dbe535d2185f58bd74494cd9017751aa651decdb26ebb9a943e6904337435a95591d733f441f40efe29fd165d757cb96ab71e72ac79d172999f2
- SSDEEP 384:wTiqNmY44OfsGUBu4t+wY4fo7lX3YIIkHla5:wTfY9Ubu4MwY4fo7lX3YItY5
- TLSH T1C2138556BB45E98ED434333748A38F88E730E9859E3E873727B1726E2DF63881E51185
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level4
- SHA256 32fde212a53e0b4cb4569738bee4a80cd3acff000952f037f9208c8c8aac6af6
- MD5 73d1ef954aa89835e0aa0268b3c83e00
- SHA1 a89224ab418bb7aa8106d4fd65ef20d5639d3c0e
- SHA512 eb59eca2301b81fbac17bd310d097eff4b89336440a229feebd5a59dbbc703d6a77c374f16e213fbfd477737c8e1fbcaa7a7cf9dce11b14a375e74aa76c971f6
- SSDEEP 3072:uOp0l6YxEriOdSOiRQQCnCFT3dRvhFLyQ8DpLlrg77:O3xeijOFQZbergP
- TLSH T161B40E19BB85AA5ED934373748A34F94FB30D8995E2D83372379627D3DF23981E82184
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level5
- SHA256 13fb12882e667f29f295d2add90f9b103a032b176797a0a1a43ab1b3bd06448b
- MD5 bd08141b4aa115fc168a866075502e12
- SHA1 eeef06694cad9c292950a9f348ac57e47793affe
- SHA512 c55c329eb893a5f6debcdae379c7fad7c97882f40089da67a825f80066e29a74f126e89e8614ef435c80c5bc31979a0af083fd55a331d386445269dd91b6cb52
- SSDEEP 3072:StqIadFmoGnDdRoogGoZ0o0t/A/LmlelBILJav8L9:hdF/koxZ38L9
- TLSH T186C40F59BB95AA5ED834333749A34F94FB30D8994E2D83372379627D3DF23981E82184
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level6
- SHA256 e6a66e862c55f8295f025ec0736083161262f143c725eeeafd6a6c6ff5617745
- MD5 12226b6f12f185f1c293bf32eb2328f8
- SHA1 45d91fcf32a36ed8a909373624fc569f6679e88d
- SHA512 098e28c78dfc00ebfb94b433b59190166312854ff625970d224a54e27bd6050a7863c1f7ee68e7ae6ec409908b9df82c6b1756fab90bd91734ee2a9f996ff1ad
- SSDEEP 1536:vRtIBrA6oBOl5iVXDq/SF/Dt3xFFB+qq:vRo
- TLSH T1CE434152BB55E94ED43437378CA38F88EB31D8948E2E47376772676E2DF63881E52084
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level7
- SHA256 220812242e1fe906f52df06b8bc2c5f0640a3bf4731c766fb0db25b39af1bf9e
- MD5 4645dc5d83f4a2c398c079d18f3faffd
- SHA1 99cc64d7f91cd45c3810696fe92ca858cba01f90
- SHA512 60cdb15bb5d0e4f1da90f1bc9a4dd3c3fd7f1eee665cb657285b301c7951d739f3545bad481102186d17cb4da3617890fec0a3aed2776738406f94c5a66ee052
- SSDEEP 1536:zAKfc36kQRFVFWW9Xp1UtiEwkfOQweWIAuyoX+4fguTZrwDo47hJEig7vsw6//YK:U4agWW9ZytJwg8ggk6
- TLSH T16A34EC06BB85E94BD930373359A38F98FB31D4988F2E83332375526D2DF23885E96194
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level8
- SHA256 9c464e69f0df69c153362ad8b0247bd8f30c30dd42b205ee7127415dcd48ccc5
- MD5 910c166cfef9348ec21bc5271e88ee36
- SHA1 e952571ad3c9821395ecd42f3c3bf55f6c4822af
- SHA512 dd7909a79a1082de07aeeef2c09297de4de7df641fb8417b6c7b702e063593ee6db73cabb2d3fb5308f3b2cddf238cbf546784cde1fb7f96f0235f0343a33ec2
- SSDEEP 1536:P+mc+EVN/2xF9yftJQrdFnO2oucuxREobcIXWOyNfNdlRb63kEtTA0rmZlix0j8Q:2mpKCr7OkGobcIXWORA3bZ+c
- TLSH T17C44BA51FB95AA5AE934333348A34F84FB30D9994F2E83372379227E2DF63881D95584
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/level9
- SHA256 d57bd66acbd102e9a4c4d0936520105ff4a9078a823f2f187e1a9da9530d9566
- MD5 f265121a0126e7e4d8fee7cab03325a3
- SHA1 e327947345ad275ed5fa3d84c2e230559ca01dbf
- SHA512 6dfa228660f0524696a7e859ee37dcb462aebda7ebe2fc13353a2da91444a5b9faf62be326d9bc881b0784d861433922c0ff8e42dd3707c984011503b55c08de
- SSDEEP 1536:yPViltUa3AlGGkD/xD5jvBFDiWq4Kws+QGXXl2FgY+IBJYwmzcARxF94XZutdXIk:LLx5DT
- TLSH T17724C845FB919A4AD834773799A31F98E731D8CA4B3D977353B8122C3DE33582E902A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/resources.assets
- SHA256 e47a0d1e694158f1b8b77912e61823e276bf202862f3e3eb484143a8c4c87632
- MD5 11a1250f344a6d8f6180bca47d0472c2
- SHA1 d34c4770b248a4ecf0a3035e17528a2b57954ac0
- SHA512 6290d69671b9a7508657ff468f1cfaaadc5de4844dbe7207b0bce6c713374d8ea2af2f9e75abddce69019cc794c7b7daf44cec013dadf7ef4bad6f0d46947f20
- SSDEEP 786432:xZraPCqrgf2GPXausQ85mz/DsHRNrm/Yz5nmZHuAtHBG+q:xZuKegf2GPus/4xBRm9NtE+q
- TLSH T1894702686DD8BA3ECD17C13660A75F6CE3B40488AA6EE1F7A467EF793CD22140F19141
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/resources.assets.resS
- SHA256 a2702360125098f9585b2f72c15f132020b68f2b4fa2b080c3b9f5f380214c09
- MD5 9e0b0e2de324ae124282bc741a8188e2
- SHA1 b7553362e6d36685ced43f7fec3c62f6321b0b01
- SHA512 65b7c70d9b87a5574520386f1bf6a1a97ea32590d31f8d9f359af6e0a11636d9c674caacc54de471288ed231933ced13de86f7071071b4174ceb7020be9f8411
- SSDEEP 786432:lG+0pz8XaM2IuQdfoSXaM2IuQdfoIs//Uhgafnpso2fY956+o/6somsokAvAFtzt:lG+0pz8XaM2I9dfoSXaM2I9dfokBso26
- TLSH T18457072A8D14EA6ED91AA03E08334DE8C66F00F9F7D45FF22617A472C7B70B626155DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/resources.resource
- SHA256 b832a487cd77392bebcfdff19833b3b3bc97bd255d0e232dd58f0b994f0c5fcb
- MD5 f728eb0d02c9c808883077e850f1b3df
- SHA1 657b0ef7fe4c9c5ebe44ca89c724d810a5707d17
- SHA512 9c4fe62d8b0d3e52398ad6c901de7f960a377d56d895c31361d67f2e8cdaeb0a6ccd6d20f9cc155022673a73017e570ef8354a3adc2548dfb3cbcf9fe85a3782
- SSDEEP 192:FB625f3tETr7WBvEPuXv/H2wYPKiCeicLnxWDCHR9f7355et7DhzYpIvqdc/bfiL:FB6JWFhv/RwaGtYCxB35gxFzYi92++h
- TLSH T15F52E1E2F7903FD1D6660F71BC12D2D1DE28F5394536A320FF498898F9D8B65B914420
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets0.assets
- SHA256 c67c8dae5b905a72903a59ddac6fc383afa459a966accf386e1c919195608ee6
- MD5 bb90f6b706a545fd6bf98a337e21d7fc
- SHA1 0548400eaa6a281b0caca3039b609be9613de7b4
- SHA512 d85310cbf4d1ebfffd4f4f1adbe85961005e62abf00bbc2a5235a2ff3ee57a2b8f97a91de38983789e188ba8881a3e4b66055f4accd64e852bdaa680edc933a0
- SSDEEP 24576:80KNwbaqZTRWOvQW5WWEWW+WWtCgRBzE6AJs3iTRWYoWWWvH:RKNwbjZHxu6AJs3U
- TLSH T154654B1E2DB4E84DDAA3153EED636149B470B2CE917E6E43EB2CDA1089A305354D31FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets1.assets
- SHA256 fddefb77d86d884370560492c8c34fc7e71ee37c76ff4b89124f67606227692e
- MD5 eb0c2fbc3852d565dfd28f5792e41af5
- SHA1 e17689d9ad80a8e2c6e409f094692cd2f64e3015
- SHA512 ae1e044ee8d958577726788543cd87fe21eb0206e7ec405966174d269e6d8beb59a3d6cfe5980e752d26d3366442c3f4c85df05ad803e8f82618b63bbd7f5c8e
- SSDEEP 1536:WA4eL0twiEmbPcSf7ecfeNtS6n+YU5o/i6PFbALmvWQiDHJT0dILJdJAMv2l9BKr:mGYLf7Hgg6n+YCo/i6dULmvWj
- TLSH T1D2042A26A756596AC474333748AB6FA5E331CDE84B7D5B335278763C3CF23982E016A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets1.assets.resS
- SHA256 d143f5765948e5be49f779ac2b43c67601d7eb3fe880e6dc44d9fd40162f961d
- MD5 380929999ffba42143eeebb784f1fdd7
- SHA1 f6f2e092732b2ed39060ba567d71594e979a59b1
- SHA512 616550aa398b029d779cf370f13045e359b90581622af2273f20d279789940e4ead3b90532a1b8c73260bf021157e54b99576beca3ad0a2a3f0242628ebf280c
- SSDEEP 49152:MRapSampICEd+Rn+RSZFRnu97M6Y8E3+YeHv4IB:MRapSampICFn+cZHui6BE3+Yg3
- TLSH T17E079123BA65CC46E0CD9678C6EA9BF5C5CADD7CCB208DD32D12390C753F971292A684
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets1.resource
- SHA256 d517537751b257c5898859f6e9a332b58c90dd0f44a33af09fd62750646869a2
- MD5 d66658385039d3825e459a5fe3b73c2d
- SHA1 8df84714121560cde4c7274cc851639851ca1cd5
- SHA512 8378d52488c07a4ecae584670f5cc05c2648bd42ab0467da90353ec0a3c8f94807451555289059fc9e5b543eea7011d309953f24913bb6514ac1b0c790f859cf
- SSDEEP 3072:HeOaEsO+nJOZ5sqUgNKglXNYaAq/Uze78oZIh1YwaacbQMYnx7+eCCwaahkw2sSW:I/nEZ5sqUgvYaA1gIDxHdnxieohF2s
- TLSH T1BC14237CC9BA3E41C5C82631969F34B931EE58963F7938AD2C99293D6F8B1BC10C9605
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets2.assets
- SHA256 6a392d764ddb589c99ba8bc3f33b042ab631262b04cf3707fdf94efc95776f5e
- MD5 8d7742a3558ab4cb9abb469f40833132
- SHA1 1d2fac200179166846b33f3cab6a3d514a4d9f32
- SHA512 c32f1c4d3518c13b4ae1a75f2c9824217310e731eb1a6d58cfbe39dc0c0e6e7b9332e53dd674d2c90a62f504e731f1532af601ec59443dae9b4229fcbef1b15d
- SSDEEP 98304:2a1nobEc6HhMz/DpNeY1iTDTn1OQFYnxnz8+J55Y7qR88UIYHE6De:tnolr311QBY35Y7qRxJc
- TLSH T1A7B62946ABC58E59D834B33748FB2F20E331CDD88B7A4B375265762C2CF23A45E46265
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets2.assets.resS
- SHA256 54261353d4584456dbf668c2ea434f5f3d26cae82901987e1e716f4466b5d202
- MD5 1431d4974cae96a5265141356db23d13
- SHA1 9f3c22684a848b89cbb49d2a1a9c8fb2b4df3222
- SHA512 2bb7af222b87b676bce090d8fd90d5b0c6b86b782c9323a251d44e06a296dd35a14a72fa7cc0d52e0bd30c4bec84447cb43a52715713b2568a6d5bd26ad64d81
- SSDEEP 393216:Fk4Ub/oB39A6yPXTIHFuGWWWW0Iw2WOsnLXeYXQOx2eaeKCyrR1m1CJEWyQjXqgS:lUb/oB39A6yPXT2eOR1PEWljyVspE
- TLSH T14E688F03EA98D1CFD08DA6BC88FF69E0D4CF5AF9CB600FD219632509A17757243266D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets2.resource
- SHA256 ee3a2b6fe03b5fd768c761156f6cc8beb490345b6c4c87fae7d70b12affacb09
- MD5 271cc0bf8534cd441b6356d40e49986a
- SHA1 990df3abc146d6b5d36d061f64b709372365c468
- SHA512 16b7dc668fe0f2b3c4db09a0bd58cdbf0b75c76d4ac3f6db80bdd30f4183dc838ad6434e88be23d930e942f07fa2b21e5609fb21574432da9e24d7ee3e80f620
- SSDEEP 786432:ae9WJi/5sNl3tUyD0cDV9mwroVRgucq9tFtA6+cKcnO7ecUXPahO:ms5CeqPVc/Dgucqm6zKcnD4h
- TLSH T1AF8733A5AE8B5EDBE1A4413287764E12B3F2D0E74A124F53CD365B7C3EFB2014A87941
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets3.assets
- SHA256 d75d68f92faa3eadf4314fb5564dfb1d5484e0fc32c13bd84cc4a52c5fb75474
- MD5 7b5cea077a719f004c0bec21915a217f
- SHA1 d18123ed2f13c4dd42f1fc068c60d479db68eaa5
- SHA512 ebe74212cea65b02d0b0002e0156f8543c5ea5d9d9b96c4783d2a26f63cd9dfe56cbb76e92af0925fa11c36c8821810f70ed18d0c98d3f3c38ee2cb49a21e1a7
- SSDEEP 768:95G+b++15mph7dVfDE+QCKuoduUkS8RiSPJb47JJLOGraABTj7fcqAI6DFoD1:W+b1gpNdVD2fXkUtrZ7JJLVj+IQeD1
- TLSH T1AEA3CF5DD874EB3ACE9C42FE5C6F0B99733082CDA9465227671DF0B03D9336A1A8918C
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets4.assets
- SHA256 a361f30b24979af119deb148f14189072199c6cb28f341e1414284417c77ed79
- MD5 437af41bad8d6c54686fad7eb7ff025e
- SHA1 166062f6bbbd58946747a0b0ef5ecd865445d37a
- SHA512 d700d2a6635d4774f433f373c7fdbd58d903cfaf972378360a5dcbeb3af37bce935292fa4dee25bc6cc316bfc197aba171b6003a3f4ed45b97a42afb11c245f4
- SSDEEP 24576:jOc3AvNwZwTf2IU5rG1yQD9dGS5GrhGqEx9t:j3wvNGwTfdU561RD9USgMqExH
- TLSH T1E595A5425A648F09C430737B49FB7F90F335CEE8566AA7371360B53E2DF62981E42266
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets4.assets.resS
- SHA256 6c5b49ba4c486289169a9b2b3c0ab8b832612559895a40bb2e82624730eb77c1
- MD5 4fe81f2452bcb98b1147b38abe163b08
- SHA1 0a97820fe5d246f88485ca67101f49c926190fd4
- SHA512 b7c5a484978b2ed7d2787d8c486921f432ea279c29657889a9405920419f42f0b84ca8479b10b4150bc8d39da39239a919823ec4702b5b4edb4c31b30e7a6f59
- SSDEEP 98304:FCtTrQ1/dSpMkAL4sHVjhhWqnW0pTHyWDOm99sdMlrzLwxF:FCmLvHtzWSplHFOm99sdMBzLwD
- TLSH T10627C003EA58C19FC04DA27C94FB6EE4D5CF4DB9CBA10FD29923354AA23313A67552C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets4.resource
- SHA256 c31d7904a71dc00eb4579495affc7e1665fa7231f334aa5af5599a966d813531
- MD5 b227e32213b9ad22e574b65832451238
- SHA1 089d59c8a64c12d0beaf89d071415aae2ff9de76
- SHA512 9afc750e3af1e2ea54c9d8591dce6b19b54bae39f04bc0cb974ee0b06317b69a7d863493657bb536ab9ea0c1ef52e3e1a29e767f90c114ecc1833f950397e864
- SSDEEP 49152:54lqCY9kx5Oe0Y8Jc6BxhP+ZNmXZ4Fc2LljWgtEHnQQlWs:54yu5Oe0KSIZNs4FZLEgtkQ
- TLSH T193A53398DC9297F7D0C9E3B88215F248BF31171C864AEB8E582615ADDD8F3C681D349E
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets5.assets
- SHA256 e2ebe9c0e76470e1de5b1485a82a21a295855406bcabb77a5c43f5469dcb2153
- MD5 3b3f1ac4802439f52a3f058a6ed552b7
- SHA1 4114adc2801122ed5d283432b81e70f74388d8da
- SHA512 c9c09f476782c36ebd927f3cb6899a972d7f5b17b1b4dbaa0c4089596c8b3543ac451a7a3b4a2c21747582f495cec5e2409c6da171b06b146c52288ac43fc7d3
- SSDEEP 1536:jkyGrkQfDI+/CBOEOvBHgLWhG1ijsEYGSD/Sku1lGD0/vJ+qgbdUsW:AjFgomeFE/IKbE
- TLSH T19FE3469ECCB5AB3ACD5C41BE99BB0599323041CEFE46A717272DF0703947269268727C
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets6.assets
- SHA256 d0b3ca083dac860524a66444f3ee3d8c5122133edda72fa91703bffec68a7eb0
- MD5 a3952555ad16f456a1444361c455c017
- SHA1 6fcc3f46cb16d61700255008f674116ecb112857
- SHA512 7399d0d3e05356a0ebef65fa0f38e3d061624767c3d2ca0cce45833416c2efdf921374f8b21ca4dd7446401ddaecdf03d10fcc56c0450ed8045f51f2724b2d13
- SSDEEP 192:bVpe9sEM9W/32uXzFsm1mILPlnsNQBkePFjj1:hp6fMEDFsm1mILPdsNQBkAj
- TLSH T15752745A5AA58B5AC430333754A71F94F230CD85EEAEA7274360713E3CF26885E8787D
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets6.resource
- SHA256 ea187653c30e115e830d725790da12a98e9d4f9567106d0e232cc463e5498cac
- MD5 19807cba98e08fb9032c583ef080587b
- SHA1 ab54235da41ba2e9f1f229b9ec32569f39867f23
- SHA512 685099e551e464bb5d379d11eb8feab68d87467046b53c9086acc0862a54c4b67fc53ee873e897d7ce034209324ac4b532a705192475f3ed93f04fe1ed043579
- SSDEEP 49152:MpTKGrlgKd+oucETcC8xeUUanfutNHuR1QKQ2lZImczcx:Mxr6PZcC8xeUnI4sr2lZ
- TLSH T1C085336A953978A5C372127E896F0CB7F33184BF088C6834DE5BE3665BCB61762074C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets7.assets
- SHA256 09ed5c2df175847420c449232019bbfbc27a21cc247e49989a4dcea7a1ae8250
- MD5 1aecd54d310e93af6d13458ad0fa71b6
- SHA1 3756ecaf5a5cfa42baf8c269ce40e8a7d05d9fe9
- SHA512 25ef2162699cca857bd81553e0a213b2b684d061c7c9d35d9f598662b4f5ffeb39b3c7f680f5fe681d632036380f7469ba1071d8a5bea15f912c4f9db0926936
- SSDEEP 3072:TMeHpzicai57JlNmlXT1sRB45hN6gBtNq2I82:ZViA57Jl4SS5VwR8
- TLSH T1B7C34B421A8A190CC070A37B06FB6F64E231C9DCCBB36F7B9642773D6CE45A42E46576
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets7.assets.resS
- SHA256 1423fc3050dac94852d37fca752cd2a622cdd087d3b4091e5f5c7db5021611ac
- MD5 8288a64b85ed42302ab161d302b8fc03
- SHA1 650ec922aead3f2b3037b8529dccc17bd65d947c
- SHA512 7512d4e0b7701b54ed297189cbda9ff1296c80499b800a973878ba2ba751002deed18da88b5f835033c350454b7ee7389873c20e31d78296fa3f7edfac0443b6
- SSDEEP 98304:WiJl9dSUipa59m59SZ59t59X5MxRlllRlll7lUlUg:PrR59m59SZ59t59X6xk
- TLSH T1EAE63143DBA5E0DF848A20BC893B6DE1D48F1EF9C7A44FE21633612692B357366109DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets8.assets
- SHA256 73ac8e9bb086b2736e117061d847cb28386f5ea45c2d0be781e2b99fcc42eee5
- MD5 9a535f885be22cdeaf99d89b03196e2a
- SHA1 b420669364b5a9e77a5103510d34b17d746546f2
- SHA512 816a15f000ead1bff27fbb60158bf44b6e6bf40c2484a0e17580279b93aa8ac8adc67f5f748686dcf3c1991b2548b25647382155a2fe2ca53641d15b57061485
- SSDEEP 768:23DNybhvk29yAlK4PC6zkNh8hrB+nMfKE9c5:E+ZwAlK4PaM+nMfKE9c5
- TLSH T1A923D512BBB5A94AC530333B48A76F94E734D6D94E2E5B3BA321763E2CF13D81E85501
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets8.assets.resS
- SHA256 5f3fcf7ad0329776cc45475c9c1c0e7cec22ebdbaab9731bff4d8b3bdb1604c3
- MD5 3fc4572f1909fbd736c5a06abe6c5066
- SHA1 109e7d8ffef033f4cdecd3dbb3d1fd33b0b6ebe3
- SHA512 46bffc0c95b8b0390cae9c07e227236f1f95e490336003b91a15c9d68a7dde45acd53372c7aabb07ea7fc1a41a4fd293aa4378fd6bbf508b247305eb5af908f4
- SSDEEP 49152:umb9uNflz3l9j0XsWCHYfNtPLNtPUqPpygA9x/dv9S9blvFvlhssvJfY:GGXsWc
- TLSH T1DBC54062DAA1E88FC4C919FD853E29E8D3EF1AFECB500FE361B35695816313647105CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets8.resource
- SHA256 3ace4644f9a58f4bd26d6dc811593b7726615ff2dd4cc4cfdbce5dc01b2134dd
- MD5 e43e0a3f9e7650dc56dcdf8c86006bd4
- SHA1 e9ba51bb2435ad151d3c74efb790a026fe6e667b
- SHA512 aaa84d88a686c1a66c3740343d2cab48833cc8421c688ad2dbb881c551fdca652d1961bdcf29bb882761f4af85305611dd320d7c285b12e2cdf54878af209fd5
- SSDEEP 12288:OCqrKwKOvNngGJiBhpuYAD/QI0cNxUQPilEN8bDTnb+fWN:zIKkN/JiBCNQI9vPildb/nbuK
- TLSH T104B423AE1244F0DEE36075B4B568F893E913D9C26B7611BDC3EB12E01B588A95A1CDC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets9.assets
- SHA256 05943df31030397eb03fd1ebb36b183a52d57e1d467dec58a9ac279ba8f83a77
- MD5 93353705a2de401133a8fdcd1a32ca50
- SHA1 b74cf62e8c7e49b6c75838fa2f8a56577785ecd5
- SHA512 e9ccfbd4353e2c1b62503005932a26a49b11880fedfc8ff78077491cab8d26e46720981fdf0265ff3d48fcdedc2911607c6a9fe74516290403fb11d23d38858d
- SSDEEP 24576:xeMaRh6jmaL2267ELQ0kvToB4ll45hL4ulV9JoZ/:4MaRhL2xkvTo6L4zL4eVbC/
- TLSH T1349529CB3DE01669F6601177D897CE60932AAE897E4CD6276630B3283DB2F50D94327D
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets9.assets.resS
- SHA256 d8d654f23ae57f986e6e6b3c2a15fbca9d06836abd9cc62df8cc82b74f14f5f8
- MD5 d7f3a7614f11d538d778cfee19c397fa
- SHA1 d3aa3f021117854ccaf01ac6a6de6059577157a6
- SHA512 67c90324cbebe8592d7810790c867db3474901799d68b8c6ff790b6edd846fc7980adc153af3bb7b6095fcfe84b4b20d43893807bd29a217142870a51322b14e
- SSDEEP 196608:yGCOoooooOoIoo1ooooSooZooRooiokoomoeoToXooooAUoOooyoJoo6oooWMXQF:F6e
- TLSH T175C65A03D6A8E0DFC18D22BDC8BA7AE5C89F1AB8C7514FE31663A910E57757353018E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Among Us_Data/sharedassets9.resource
- SHA256 06a345abb35404a43dd27ff7522cf032993ade6f922f1af2f0458eaa15acd6cb
- MD5 57100fab3cfb2535bdb5ca6387718d76
- SHA1 972fcd3cee73b754359e4ed932d94d1417ebe458
- SHA512 853de0f4a1a10bfb12d3cd460febc5187b5690ff9d9d7ba4a4bb74a18c5eea4a1cedeb3d1d0886957f5fd5c2121cd5f5f35b0b37fabbfae0f7781e05a04e4b13
- SSDEEP 24576:VvUa8RGLNzRop+PQDajO4wiovGDspZpqmvRRcpZZXnH3Sh1jP7fai/Cdm0fR92KK:JUlR4q3a8iUGQZlps33ShpP7C88mmsK
- TLSH T10595F13C7185C232DC2883777156957E833AB829A74E5B9F3289AE4B4F0B57D1D22B70
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/GDK_Helper.bat
- SHA256 79582bc24d7d70ddb678153b5e0eea2a4cf568e9dcf2e9f8a3e05e0423211180
- MD5 b87ac10e5738ce6e35d94b96182e54c5
- SHA1 c9b78fd6a875372048ef13cf017cb3307d593d9a
- SHA512 18505bad01c8ec4ff42e79e3cacce4410e3692357cbeff729514c465d7a8e5e9e49c4cea111971d90b44d32fe04fbf1f242605b965c7b27620d3f5bc106a3ac6
- TLSH T1AC31C2347C11717B24A39F1A4A1331C16331518F752C9BA8736E03EC1B3A6D5918F6BB
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/GameAssembly.dll
- IMPHASH b4f2eebfbeeaf357ff36c36dbb6abafa
- SHA256 3704b2a71a644db33cb4f93ab59557255bbb0a142fd115d944d2d4b71f84feb0
- MD5 64181bad60802550f8c5542bb7b046c1
- SHA1 c1f261cc1e6d03995a71f5769a901d88b0d9f9d3
- SHA512 b40ea7c91041790e2d5939d776e6738c357aaadc9706b2400a6c9d7017ed2299f7c87a87bb47a35833cc57ae10d01ab86515263420b2c47f4108ec20857fee0c
- SSDEEP 393216:EF+OFuzqI62dmu8h8xtUWydW9QGz9x7hGEvZ9mQOCwVDrcC63rxFFnr8wAZqXFiQ:E5IliWL7Fky0We7/
- TLSH T181D7084ABA755448C1AEE2789913149FDBE23C441F206BCB21944B8E1F737D8E87BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3847180
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\agent\_work\13\s\Library\Bee\artifacts\WinPlayerBuildProgram\u1oik\GameAssembly.pdb
kernel32
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
RemoveDirectoryW
IsDebuggerPresent
OutputDebugStringW
CloseHandle
SetHandleInformation
Sleep
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
SwitchToThread
OpenProcess
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
K32GetModuleBaseNameW
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
RtlCaptureStackBackTrace
CreateFileW
DuplicateHandle
RaiseException
SetLastError
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
FreeLibrary
LoadLibraryW
GlobalAlloc
GlobalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
GetSystemTimes
GetSystemTimeAsFileTime
GetVersionExW
GetComputerNameW
GetStdHandle
DeleteFileW
DeleteVolumeMountPointW
FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLogicalDrives
ReadFile
GetThreadLocale
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
WriteFile
SetThreadErrorMode
CreatePipe
GetOverlappedResult
CancelIoEx
GetNativeSystemInfo
FormatMessageW
CopyFileExW
MoveFileExW
ReplaceFileW
GetTimeZoneInformation
GetDynamicTimeZoneInformation
GetConsoleMode
SetFilePointer
SuspendThread
ResumeThread
GetThreadContext
VirtualFree
WriteConsoleW
GetProcessHeap
GetCommandLineW
GetCommandLineA
SetStdHandle
HeapQueryInformation
HeapSize
GetLocaleInfoW
GetACP
WideCharToMultiByte
GetModuleFileNameW
GetModuleFileNameA
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
RtlUnwind
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapReAlloc
HeapAlloc
HeapFree
ReadConsoleW
GetConsoleOutputCP
GetModuleHandleExW
ExitProcess
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
GetTempPathW
GetLongPathNameW
GetLastError
TlsFree
TlsSetValue
RtlUnwindEx
TerminateProcess
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
GetCPInfo
GetStringTypeW
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
InitializeCriticalSectionEx
RtlPcToFileHeader
TlsGetValue
SetEndOfFile
TlsAlloc
user32
MessageBoxA
GetWindow
GetWindowThreadProcessId
EnumWindows
IsWindowVisible
advapi32
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
GetUserNameW
ole32
CoUninitialize
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoGetContextToken
CoInitializeEx
CoTaskMemAlloc
oleaut32
SysStringLen
SysFreeString
SafeArrayGetVartype
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayDestroy
SafeArrayCreate
shell32
SHGetKnownFolderPath
SHGetFolderPathW
ws2_32
inet_ntop
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
WSAPoll
WSASend
gethostbyaddr
socket
shutdown
setsockopt
sendto
WSACleanup
select
recvfrom
ntohs
ntohl
listen
inet_ntoa
inet_addr
htons
htonl
getsockopt
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
gethostname
WSAGetLastError
send
WSARecv
WSAIoctl
iphlpapi
GetIfEntry
GetAdaptersAddresses
GetNetworkParams
dbghelp
SymInitialize
SymFromAddr
baselib
?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z
?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z
?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ
?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z
?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z
?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ
?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z
?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderIsFinished
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderHasMoreOutput
BrotliEncoderSetParameter
CloseNLSocket
CloseZStream
CreateNLSocket
CreateZStream
DllCanUnloadNow
DllGetActivationFactory
Flush
GlobalizationNative_GetTimeZoneDisplayName
ReadEvents
ReadZStream
SystemNative_FStat2
SystemNative_UTime
WriteZStream
il2cpp_add_internal_call
il2cpp_alloc
il2cpp_allocation_granularity
il2cpp_array_class_get
il2cpp_array_element_size
il2cpp_array_get_byte_length
il2cpp_array_length
il2cpp_array_new
il2cpp_array_new_full
il2cpp_array_new_specific
il2cpp_array_object_header_size
il2cpp_assembly_get_image
il2cpp_bounded_array_class_get
il2cpp_capture_memory_snapshot
il2cpp_class_array_element_size
il2cpp_class_enum_basetype
il2cpp_class_for_each
il2cpp_class_from_il2cpp_type
il2cpp_class_from_name
il2cpp_class_from_system_type
il2cpp_class_from_type
il2cpp_class_get_assemblyname
il2cpp_class_get_bitmap
il2cpp_class_get_bitmap_size
il2cpp_class_get_data_size
il2cpp_class_get_declaring_type
il2cpp_class_get_element_class
il2cpp_class_get_events
il2cpp_class_get_field_from_name
il2cpp_class_get_fields
il2cpp_class_get_flags
il2cpp_class_get_image
il2cpp_class_get_interfaces
il2cpp_class_get_method_from_name
il2cpp_class_get_methods
il2cpp_class_get_name
il2cpp_class_get_namespace
il2cpp_class_get_nested_types
il2cpp_class_get_parent
il2cpp_class_get_properties
il2cpp_class_get_property_from_name
il2cpp_class_get_rank
il2cpp_class_get_static_field_data
il2cpp_class_get_type
il2cpp_class_get_type_token
il2cpp_class_get_userdata_offset
il2cpp_class_has_attribute
il2cpp_class_has_parent
il2cpp_class_has_references
il2cpp_class_instance_size
il2cpp_class_is_abstract
il2cpp_class_is_assignable_from
il2cpp_class_is_blittable
il2cpp_class_is_enum
il2cpp_class_is_generic
il2cpp_class_is_inflated
il2cpp_class_is_inited
il2cpp_class_is_interface
il2cpp_class_is_subclass_of
il2cpp_class_is_valuetype
il2cpp_class_num_fields
il2cpp_class_set_userdata
il2cpp_class_value_size
il2cpp_current_thread_get_frame_at
il2cpp_current_thread_get_stack_depth
il2cpp_current_thread_get_top_frame
il2cpp_current_thread_walk_frame_stack
il2cpp_custom_attrs_construct
il2cpp_custom_attrs_free
il2cpp_custom_attrs_from_class
il2cpp_custom_attrs_from_field
il2cpp_custom_attrs_from_method
il2cpp_custom_attrs_get_attr
il2cpp_custom_attrs_has_attr
il2cpp_debug_get_method_info
il2cpp_debugger_set_agent_options
il2cpp_domain_assembly_open
il2cpp_domain_get
il2cpp_domain_get_assemblies
il2cpp_exception_from_name_msg
il2cpp_field_get_flags
il2cpp_field_get_name
il2cpp_field_get_offset
il2cpp_field_get_parent
il2cpp_field_get_type
il2cpp_field_get_value
il2cpp_field_get_value_object
il2cpp_field_has_attribute
il2cpp_field_is_literal
il2cpp_field_set_value
il2cpp_field_set_value_object
il2cpp_field_static_get_value
il2cpp_field_static_set_value
il2cpp_format_exception
il2cpp_format_stack_trace
il2cpp_free
il2cpp_free_captured_memory_snapshot
il2cpp_gc_alloc_fixed
il2cpp_gc_collect
il2cpp_gc_collect_a_little
il2cpp_gc_disable
il2cpp_gc_enable
il2cpp_gc_foreach_heap
il2cpp_gc_free_fixed
il2cpp_gc_get_heap_size
il2cpp_gc_get_max_time_slice_ns
il2cpp_gc_get_used_size
il2cpp_gc_has_strict_wbarriers
il2cpp_gc_is_disabled
il2cpp_gc_is_incremental
il2cpp_gc_set_external_allocation_tracker
il2cpp_gc_set_external_wbarrier_tracker
il2cpp_gc_set_max_time_slice_ns
il2cpp_gc_set_mode
il2cpp_gc_start_incremental_collection
il2cpp_gc_wbarrier_set_field
il2cpp_gchandle_foreach_get_target
il2cpp_gchandle_free
il2cpp_gchandle_get_target
il2cpp_gchandle_new
il2cpp_gchandle_new_weakref
il2cpp_get_corlib
il2cpp_get_exception_argument_null
il2cpp_image_get_assembly
il2cpp_image_get_class
il2cpp_image_get_class_count
il2cpp_image_get_entry_point
il2cpp_image_get_filename
il2cpp_image_get_name
il2cpp_init
il2cpp_init_utf16
il2cpp_is_debugger_attached
il2cpp_is_vm_thread
il2cpp_method_get_class
il2cpp_method_get_declaring_type
il2cpp_method_get_flags
il2cpp_method_get_from_reflection
il2cpp_method_get_name
il2cpp_method_get_object
il2cpp_method_get_param
il2cpp_method_get_param_count
il2cpp_method_get_param_name
il2cpp_method_get_return_type
il2cpp_method_get_token
il2cpp_method_has_attribute
il2cpp_method_is_generic
il2cpp_method_is_inflated
il2cpp_method_is_instance
il2cpp_monitor_enter
il2cpp_monitor_exit
il2cpp_monitor_pulse
il2cpp_monitor_pulse_all
il2cpp_monitor_try_enter
il2cpp_monitor_try_wait
il2cpp_monitor_wait
il2cpp_native_stack_trace
il2cpp_object_get_class
il2cpp_object_get_size
il2cpp_object_get_virtual_method
il2cpp_object_header_size
il2cpp_object_new
il2cpp_object_unbox
il2cpp_offset_of_array_bounds_in_array_object_header
il2cpp_offset_of_array_length_in_array_object_header
il2cpp_override_stack_backtrace
il2cpp_profiler_install
il2cpp_profiler_install_allocation
il2cpp_profiler_install_enter_leave
il2cpp_profiler_install_fileio
il2cpp_profiler_install_gc
il2cpp_profiler_install_thread
il2cpp_profiler_set_events
il2cpp_property_get_flags
il2cpp_property_get_get_method
il2cpp_property_get_name
il2cpp_property_get_parent
il2cpp_property_get_set_method
il2cpp_raise_exception
il2cpp_register_debugger_agent_transport
il2cpp_register_log_callback
il2cpp_resolve_icall
il2cpp_runtime_class_init
il2cpp_runtime_invoke
il2cpp_runtime_invoke_convert_args
il2cpp_runtime_object_init
il2cpp_runtime_object_init_exception
il2cpp_runtime_unhandled_exception_policy_set
il2cpp_set_commandline_arguments
il2cpp_set_commandline_arguments_utf16
il2cpp_set_config
il2cpp_set_config_dir
il2cpp_set_config_utf16
il2cpp_set_data_dir
il2cpp_set_default_thread_affinity
il2cpp_set_find_plugin_callback
il2cpp_set_memory_callbacks
il2cpp_set_temp_dir
il2cpp_shutdown
il2cpp_start_gc_world
il2cpp_stats_dump_to_file
il2cpp_stats_get_value
il2cpp_stop_gc_world
il2cpp_string_chars
il2cpp_string_intern
il2cpp_string_is_interned
il2cpp_string_length
il2cpp_string_new
il2cpp_string_new_len
il2cpp_string_new_utf16
il2cpp_string_new_wrapper
il2cpp_thread_attach
il2cpp_thread_current
il2cpp_thread_detach
il2cpp_thread_get_all_attached_threads
il2cpp_thread_get_frame_at
il2cpp_thread_get_stack_depth
il2cpp_thread_get_top_frame
il2cpp_thread_walk_frame_stack
il2cpp_type_equals
il2cpp_type_get_assembly_qualified_name
il2cpp_type_get_attrs
il2cpp_type_get_class_or_element_class
il2cpp_type_get_name
il2cpp_type_get_name_chunked
il2cpp_type_get_object
il2cpp_type_get_reflection_name
il2cpp_type_get_type
il2cpp_type_is_byref
il2cpp_type_is_pointer_type
il2cpp_type_is_static
il2cpp_unhandled_exception
il2cpp_unity_install_unitytls_interface
il2cpp_unity_liveness_allocate_struct
il2cpp_unity_liveness_calculation_from_root
il2cpp_unity_liveness_calculation_from_statics
il2cpp_unity_liveness_finalize
il2cpp_unity_liveness_free_struct
il2cpp_unity_set_android_network_up_state_func
il2cpp_value_box
jinfo_get_method
mini_get_interp_callbacks
mini_jit_info_table_find
mono_arch_clear_breakpoint
mono_arch_context_get_int_reg
mono_arch_context_set_int_reg
mono_arch_set_breakpoint
mono_arch_setup_resume_sighandler_ctx
mono_arch_skip_breakpoint
mono_arch_skip_single_step
mono_arch_start_single_stepping
mono_arch_stop_single_stepping
mono_array_element_size
mono_array_length
mono_class_get_byref_type
mono_class_get_checked
mono_class_get_context
mono_class_get_element_class
mono_class_get_flags
mono_class_get_image
mono_class_get_interfaces
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_parent
mono_class_get_properties
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_has_parent
mono_class_instance_size
mono_class_is_enum
mono_class_is_valuetype
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_value_size
mono_debug_find_method
mono_debug_free_locals
mono_debug_il_offset_from_address
mono_debug_lookup_locals
mono_domain_foreach
mono_domain_get
mono_domain_get_assemblies_iter
mono_domain_get_corlib
mono_domain_is_unloading
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_field_get_name
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_set_value
mono_find_prev_seq_point_for_native_offset
mono_free_method_signatures
mono_gc_register_root
mono_get_byte_class
mono_get_lmf_addr
mono_get_root_domain
mono_get_runtime_build_info
mono_get_string_class
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_is_dynamic
mono_jit_find_compiled_method_with_jit_info
mono_jit_info_get_method
mono_jit_info_table_find
mono_marshal_method_from_wrapper
mono_metadata_free_mh
mono_metadata_generic_class_is_valuetype
mono_method_full_name
mono_method_get_class
mono_method_get_context
mono_method_get_declaring_generic_method
mono_method_get_flags
mono_method_get_generic_container
mono_method_get_header_checked
mono_method_get_name
mono_method_get_param_names
mono_method_get_token
mono_method_is_generic
mono_method_is_inflated
mono_object_get_type
mono_object_unbox_internal
mono_pal_init
mono_property_get_get_method
mono_property_get_name
mono_property_get_parent
mono_property_get_set_method
mono_restore_context
mono_runtime_is_shutting_down
mono_runtime_quit
mono_set_is_debugger_attached
mono_set_lmf
mono_string_chars
mono_string_free
mono_string_length
mono_string_new
mono_thread_attach
mono_thread_current
mono_thread_detach
mono_thread_get_main
mono_thread_set_name
mono_thread_state_init_from_current
mono_thread_state_init_from_monoctx
mono_thread_suspend_all_other_threads
mono_type_full_name
mono_type_generic_inst_is_valuetype
mono_type_get_attrs
mono_type_get_class
mono_type_get_name_full
mono_type_get_type
mono_type_is_byref
mono_type_is_generic_parameter
mono_type_is_reference
mono_type_is_struct
mono_type_size
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
il2cpp
Size
36.2MB
Virtual Size
36.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3.2MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
971KB
Virtual Size
971KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=259, version=30795,
count=180, id=261, version=30795,
count=50, id=260, version=30795,
count=1, id=253, version=34321,
count=11, id=259, version=34321,
count=14, id=260, version=34321,
count=81, id=261, version=34321,
count=2, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=262, version=30795,
count=21, id=257, version=30795,
count=267, id=1, productName=Unmarked objects,
count=571, id=261, version=34810,
count=152, id=260, version=34810,
count=1, id=256, version=34810,
count=1, id=258, version=34810,
Among.Us/Among Us/MicrosoftGame.Config
- SHA256 ceebb8b03a1a1ac7444bc0accac2c8fe92bb6bb99bbacee9140808d2c330ef5b
- MD5 11227dd547d24d0597892fa140c19cb1
- SHA1 f4e9358e3620e11b0d8d6f72f4fce69838221272
- SHA512 7bf1ebce7681b1de867383ac67c1f4707556498ad1efb9fb662ba7e40a57a3a21971f2ed5773f2359cee2353f73374137718849ee46c1d09f3d833df3aea6351
- TLSH T1BF31125034C1BF71D2330555BA76724B6A2DB79343DE1945F8D8B2772F190AD023F615
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/OnlineFix.ini
- SHA256 086d81f8d0754926d83558d297e2d2a211b70c30742704cce8d27d08dc16b5b2
- MD5 b4f35a00c5023421a36cbc6981fe003b
- SHA1 9c4b2af2fb6af034d11c73104c03afb0a161757d
- SHA512 583473fa7e0c24d85c6322c6b850197af863ab0d104df085b76bc666ed6e85173b063202412a535feeebd00430a7c106ec3442f32af95122b20503854440d6cd
- TLSH T17E1196E05302B7901EB5B43C5AF05C78B0BA01161332812961DDE7C8A43B30DB7D9028
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/OnlineFix.url
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
- MD5 59bf167dc52a52f6e45f418f8c73ffa1
- SHA1 fa006950a6a971e89d4a1c23070d458a30463999
- SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
- MD5 SHA1 SHA512
Among.Us/Among Us/OnlineFix64.dll
- IMPHASH 47e13dd1af1cbc45ea9f5e2d08ab6533
- SHA256 b62151144eb4fea88e744d34073dc49b5dcd1b73d0267f96a7be08cb1f15b80b
- MD5 6b5495a04f191706e9ba83df5ed885f6
- SHA1 1aba8b6477603e7ed80955c5a6cd9ae46f53a352
- SHA512 e7549000d7c6a88a92f5edbd86952007d0b5f242e5ccc32f387a8c0334f2ffee24f1655eac2807c9429868ed940d00814f08d2db3408f2240cff7232f76e6324
- SSDEEP 196608:HTLd/HHnwhX2bSKFvzW0O6KG6n1y4U/ewaMKMu7ZLBx:H1PHK2tFvzrOPJ1y4ZwJKM
- TLSH T1D3A6124526C4E7BCD4C24538354612D970D0AD9D84FDCA49BBCB6823B6A0EEF116ABF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
10774460
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
SizeofResource
user32
MessageBoxW
shell32
ShellExecuteA
OnlineFix
Name
.text
Size
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.of0
Size
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.of1
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.of2
Size
9.0MB
Virtual Size
9.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
284B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Among.Us/Among Us/SplashScreenImage.png
- SHA256 59535f2c8686a50c98470c8ffaba7eb0377dcdac531a68acede48ec7324f2d20
- MD5 eac26e717b4accf7ec3e155627254c0a
- SHA1 619e6750548768ca01d2b5151ad1aa56f50aeaa2
- SHA512 9c072c06066cbdf6646aa41f557bf1ab32d4fb802e6262e7b2f405d2bcb98eca2350529e731e0866d090e9c7146edaa4bd8fb813b2cc3fc4df05de700d4db426
- SSDEEP 24576:eM934fqKa4wt3bX7Bn8XUqAsC61mLk4fxpytgPugX0syELnsrO+mrFFesO:eMhhf4wVHBnMUqAsHmQAL3PhvyTrO+m4
- TLSH T1F9453369448FAC61B757DBEF8EAFF86DE6ECF960A883D04CED45046F80A90695035D80
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Square150x150Logo.png
- SHA256 ec577e23991d1a498d95e2dc09fbe7cbcfd74eb546d030ebe3e5ff2240aa12d0
- MD5 cb55c965e3cfdaaf8bcd90a755af9763
- SHA1 0dc23bebdb00fb8cde8e6504246b3a6bf787c1e2
- SHA512 892049eff51b9679b861d33825a92cdc4ea85a095e5d549425b5ff14bdcbe4744026103d44846bbe6768bac4a143205e42806eee6007b6f25538dcef4fd12322
- SSDEEP 96:4Uou8ZYOqCi0r4pD1H0Fd1msBQ9QzLreHqmz6iXoOuXhAzhi:9a68jy50FK96LrqjXpu4hi
- TLSH T14FA19E95CBC6BA044BC3EADB1BF64B6E9E8829534348E57F0C49F7320D00621677760A
- MD5 SHA1 SHA512 SSDEEP TLSH
Among.Us/Among Us/Square44x44Logo.png
- SHA256 38d2649ac62c80ece7742439a5c479e293bc51567e94c000b9780bdb4c9b1f9f
- MD5 2dece50a545eb69341e2bf959412b534
- SHA1 a5f4fd20ec6f53ba1a5df7274fe8e6d9ee8e6b37
- SHA512 b3875d5fbf17ddaaff9440e749cb4a0eff7f8a8b4f5bc2477ecd4efc3e4565d342f8f80ffd49c0d1b9dc3b172741e449891608b8e73e603d7a5f0dd59de4d473
- TLSH T13D31C9861B30DC6B84FFC0A0758AE271E2753E998365009F69117C2C40867879459EE5
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/StoreLogo.png
- SHA256 ce86fc7c5634d61232910befec163211b822d69c3428c0f31c4a1805c970becb
- MD5 5b84bad0faf05ab47e04b109eebd4de3
- SHA1 cbfff369ac7d6e9986858a5182fa02cf446253c2
- SHA512 33d6f008298b87fc4a6a9e359202fefb80d5ed242f7a19472b8c21201a8e4e18a1dc23770d391bffab85708f041e15ae7d3823e75868e38e2f09bd402a42c54c
- TLSH T175614BAFCB99CA99F94096BA7C888761C9B3279345460D6263049FCA28C9E42899161B
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/UnityCrashHandler64.exe
- IMPHASH 63e87c3f50937c9a43af84776b0e6475
- SHA256 1f6a218f18a646e0dd2da9f1c93b90f141d8143d34b8c30618b6d199196a48b6
- MD5 4e135c7e47f87283ddfbac3e768f8481
- SHA1 fad74110ca161b13cbb3a4346323e48d30d5d1b0
- SHA512 d47f59815480608c3474d1d285cb495ea3e61b36e80ec031fdbb816e79cfe8aaff044f2f95b6c5b7f13a2096004b8527cbd23a9e776fa1aa252813b422514730
- SSDEEP 12288:UZ/jkEjk1MOJntzRqGccIl6PwsRHojVBQ4wBJCe8xUoXo4hm/vQfz2fzAA:URjkEfOHRqEpHopBiJpPghm/Iz+zAA
- TLSH T119457D6A665800E8D5779135CA52490FE7F27C1907609BDF23A0B7AB2F376D81E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3c:87:81:99:1f:3e:ad:fa:44:74:96:36:93:e5:90:38:c3:7f:0f:94:3b:57:40:a0:30:99:76:b0:67:28:1a:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Aug 21, 2024
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 11, 2023 - Jun 8, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
306760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\output\unity\unity\artifacts\UnityCrashHandler\Win64_VS2019_nondev_i_m\UnityCrashHandler64.pdb
user32
SetWindowPos
SetForegroundWindow
LookupIconIdFromDirectoryEx
OffsetRect
GetDlgItem
SendDlgItemMessageA
AdjustWindowRect
GetWindowLongA
DialogBoxParamA
SetWindowTextW
EndDialog
SendMessageW
LoadImageA
CreateIconFromResourceEx
InflateRect
GetIconInfo
UnionRect
kernel32
DuplicateHandle
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeLibraryAndExitThread
GetConsoleOutputCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
SetWaitableTimer
GetModuleHandleA
GetLastError
GetCurrentThread
WaitForSingleObjectEx
CloseHandle
RaiseException
GetProcAddress
SleepEx
GetThreadTimes
CreateWaitableTimerExW
OpenThread
TryEnterCriticalSection
EnterCriticalSection
SetThreadPriority
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetCurrentThreadId
ResumeThread
GetThreadPriority
CreateThread
SwitchToThread
DeleteCriticalSection
CreateDirectoryW
ReadFile
GetModuleFileNameA
FindFirstFileW
FindFirstFileExW
TlsSetValue
SetLastError
RtlCaptureContext
GetFullPathNameW
FindNextFileW
GetCurrentProcess
WriteFile
OutputDebugStringA
RemoveDirectoryW
RtlVirtualUnwind
SetFileTime
GetModuleFileNameW
RtlLookupFunctionEntry
SetFilePointer
QueryDepthSList
GetEnvironmentVariableA
FindClose
CreateFileW
GetFileAttributesW
SuspendThread
GetCurrentDirectoryA
SetFileAttributesW
CreateEventW
MultiByteToWideChar
GetFileAttributesA
GetFileAttributesExW
GetDiskFreeSpaceExW
LoadLibraryA
DeleteFileW
LoadLibraryW
GetThreadContext
SetFilePointerEx
MoveFileExW
ReplaceFileW
ReadProcessMemory
SystemTimeToFileTime
FreeLibrary
CopyFileW
WideCharToMultiByte
TlsGetValue
GetTempFileNameW
GetSystemTime
FlushFileBuffers
HeapFree
Thread32Next
Thread32First
WaitForSingleObject
CreateToolhelp32Snapshot
FormatMessageW
HeapAlloc
LocalFree
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
VerifyVersionInfoW
GetSystemTimeAsFileTime
GetStdHandle
TerminateProcess
GetProcessId
GetTempPathW
WaitForMultipleObjectsEx
OpenProcess
Sleep
SetEvent
GetThreadId
GetFileSize
CreateProcessW
CopyFileExW
AllocConsole
GetExitCodeProcess
SizeofResource
GetCommandLineW
EnumResourceNamesA
InitializeCriticalSection
SetErrorMode
FindResourceA
GetExitCodeThread
TerminateThread
LockResource
LoadResource
CreateEventA
LoadLibraryExW
GetFileSizeEx
CreateSemaphoreExW
VirtualFree
ReleaseSemaphore
VirtualAlloc
TlsAlloc
QueryPerformanceFrequency
TlsFree
QueryPerformanceCounter
IsDebuggerPresent
RtlUnwindEx
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
InterlockedPopEntrySList
UnregisterWaitEx
SetEndOfFile
dbghelp
SymRegisterFunctionEntryCallback64
SymLoadModuleEx
shell32
SHCreateDirectoryExW
CommandLineToArgvW
SHGetKnownFolderPath
SHFileOperationW
ole32
CoInitializeEx
CoCreateGuid
CoTaskMemFree
shlwapi
PathCanonicalizeW
psapi
GetModuleFileNameExW
advapi32
GetUserNameA
wininet
HttpSendRequestA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetConnectA
gdi32
GetObjectA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Name
.text
Size
583KB
Virtual Size
583KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
164KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
349KB
Virtual Size
349KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=28900,
count=187, id=261, version=28900,
count=28, id=260, version=28900,
count=1, id=199, version=41118,
count=145, id=261, version=29118,
count=19, id=260, version=29118,
count=10, id=259, version=29118,
count=1, id=262, version=28900,
count=29, id=257, version=28900,
count=279, id=1, productName=Unmarked objects,
count=60, id=265, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Among.Us/Among Us/UnityPlayer.dll
- IMPHASH b22953f17c01c9b02b6e3dddcf2e97d1
- SHA256 889d912da7a6897c469253a810eaa7682d12d0e3f2432f61f879f4152714af95
- MD5 e6556b475f949c2e94d35425ed5bc00b
- SHA1 7f543918458a795842c7a38a457a44c1cd0fc7ae
- SHA512 5694d5c98f2bb326c54081e8e082073f7b9777c8c8c0f3d0e9de2810580e5f18f2f507c965d1f7a54dabc477ad29179954a9a85c91b543f35781b7a729e23037
- SSDEEP 393216:Evy2ILJHr6HkCI7l3YxHJNzLxTc/tZ2TUtu7We02YF9:E6J7lyta1x/F9
- TLSH T164679DA6B2B800D4D47BD078D65BA90BFBB1344A033086EB52E149956F73BF11ABF750
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:da:cf:32:d8:a2:3c:b9:e5:d2:8e:03:0d:30:9b:e5:d9:1f:9c:bc:98:19:9f:01:d4:12:5e:5b:c2:07:a5:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 11, 2025
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 11, 2023 - Jun 8, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
24877400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\build\output\unity\unity\artifacts\UnityPlayer\Win64_VS2019_nondev_i_m\UnityPlayer_Win64_player_il2cpp_x64.pdb
crypt32
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateChain
CertFreeCertificateContext
CertCloseStore
bcrypt
BCryptGenRandom
kernel32
LoadLibraryExW
GetLogicalProcessorInformationEx
OutputDebugStringW
GetCommandLineW
InitializeProcThreadAttributeList
HeapAlloc
GetProcessHeap
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
HeapFree
CreateProcessW
CreatePipe
FlushFileBuffers
GetProcessId
OutputDebugStringA
WaitForMultipleObjects
GetExitCodeProcess
SetErrorMode
WriteFile
CreateEventW
GetSystemPowerStatus
GlobalMemoryStatusEx
CreateToolhelp32Snapshot
GetTempPathW
GetUserDefaultLocaleName
GetSystemDirectoryA
CreateFileA
GetComputerNameW
GlobalLock
GlobalUnlock
GlobalAlloc
GetTempFileNameW
DeleteFileW
K32GetProcessMemoryInfo
GetNativeSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
LocalFree
GetFileAttributesExW
CreateFileW
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
CopyFileW
MoveFileExW
FindFirstFileExW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
SetFilePointerEx
ReadFile
SetEndOfFile
ReplaceFileW
GetFullPathNameW
GetSystemTime
SystemTimeToFileTime
SetFileTime
GetDiskFreeSpaceExW
Thread32First
Thread32Next
SuspendThread
ExpandEnvironmentStringsW
CreateMutexA
RtlCaptureContext
SetUnhandledExceptionFilter
GetErrorMode
GetModuleFileNameA
GetFileAttributesA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetThreadContext
RtlLookupFunctionEntry
CreateEventA
ReadProcessMemory
LocalAlloc
QueryPerformanceCounter
DebugBreak
GetTickCount
GetOverlappedResult
ResetEvent
CancelIo
WaitForMultipleObjectsEx
GetWindowsDirectoryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetLocalTime
GetTimeZoneInformation
ReleaseSemaphore
GetFileSizeEx
CreateSemaphoreExW
TlsAlloc
TlsFree
GetStdHandle
SetThreadAffinityMask
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
GetFileSize
OpenEventA
CreateWaitableTimerA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
GetSystemDirectoryW
GetStringTypeW
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
GetVersionExW
DuplicateHandle
QueryDepthSList
UnregisterWaitEx
RtlUnwindEx
RtlPcToFileHeader
RtlUnwind
HeapSize
HeapReAlloc
IsDebuggerPresent
VerifyVersionInfoW
VerSetConditionMask
GetCurrentProcess
TerminateProcess
SetConsoleCtrlHandler
WaitForSingleObject
GetStartupInfoA
SetLastError
ExitThread
GetFileAttributesW
GetModuleFileNameW
GetModuleHandleW
SwitchToThread
GetCurrentThreadId
GetThreadPriority
HeapQueryInformation
ExitProcess
GetModuleHandleExW
GetConsoleOutputCP
GetConsoleMode
CreateEventExW
FormatMessageA
SetWaitableTimer
CreateWaitableTimerExW
SetHandleInformation
QueryPerformanceFrequency
SetThreadPriority
ResumeThread
CreateThread
GetThreadTimes
OpenThread
GetModuleHandleA
GetCurrentThread
SleepEx
GetFileType
ReadConsoleW
GetDriveTypeW
RaiseException
SetEvent
Sleep
WaitForSingleObjectEx
GetCurrentDirectoryW
FormatMessageW
LoadLibraryW
SetDllDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
VirtualProtect
VirtualFree
VirtualAlloc
GetSystemInfo
GetLastError
TlsGetValue
TlsSetValue
SetEnvironmentVariableW
WriteConsoleW
CloseHandle
RtlVirtualUnwind
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
user32
GetAsyncKeyState
GetRawInputBuffer
PtInRect
GetWindowLongA
DispatchMessageA
TranslateMessage
SystemParametersInfoW
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetCapture
MapVirtualKeyExA
GetKeyboardLayout
GetRawInputDeviceInfoW
GetMessageExtraInfo
GetKeyState
MapVirtualKeyA
GetKeyboardLayoutNameW
ToUnicode
MapVirtualKeyW
GetKeyNameTextW
RegisterRawInputDevices
GetRawInputDeviceList
GetRawInputData
ScreenToClient
GetCursorPos
ReleaseCapture
GetSystemMetrics
EnumDisplaySettingsA
GetDC
SetWindowLongA
LoadIconW
GetWindowPlacement
AdjustWindowRectEx
GetForegroundWindow
EnumDisplaySettingsW
RegisterClassExW
DialogBoxParamW
EndDialog
SetDlgItemTextW
SetDlgItemTextA
LoadIconA
SendDlgItemMessageW
OffsetRect
CopyRect
SendMessageTimeoutA
SetForegroundWindow
EnumWindows
GetUserObjectInformationA
GetThreadDesktop
RegisterWindowMessageA
DestroyIcon
DestroyCursor
TrackMouseEvent
SetCursor
LoadCursorA
LoadImageW
SetClipboardData
EmptyClipboard
CloseClipboard
IsClipboardFormatAvailable
OpenClipboard
AllowSetForegroundWindow
ReleaseDC
GetDesktopWindow
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
UpdateWindow
SendMessageW
GetMessageA
SetWindowTextW
DragDetect
ShowWindow
GetActiveWindow
GetParent
ValidateRect
IsIconic
MonitorFromRect
SetWindowLongPtrA
IsWindowVisible
SetCursorPos
ClientToScreen
ClipCursor
MonitorFromWindow
ShowCursor
GetClientRect
MoveWindow
GetWindowRect
GetMonitorInfoW
SetFocus
GetFocus
SetWindowPos
EnumDisplayMonitors
EnumDisplayDevicesA
GetMonitorInfoA
PostQuitMessage
DefWindowProcW
SetWindowLongPtrW
GetWindowLongPtrW
DestroyWindow
UnregisterClassW
RegisterClassW
CreateWindowExW
KillTimer
MessageBoxA
SetTimer
PeekMessageA
MsgWaitForMultipleObjects
GetCaretBlinkTime
GetDoubleClickTime
GetClipboardData
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
ole32
CoUninitialize
CoCreateGuid
CoCreateFreeThreadedMarshaler
PropVariantClear
PropVariantCopy
CoSetProxyBlanket
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
shlwapi
PathCanonicalizeW
SHDeleteKeyW
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
advapi32
RegCreateKeyW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
GetUserNameA
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
gdi32
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat
SwapBuffers
shell32
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
SHGetKnownFolderPath
SHFileOperationW
opengl32
wglGetCurrentContext
wglCreateContext
wglGetProcAddress
wglGetCurrentDC
wglMakeCurrent
wglDeleteContext
winmm
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutWrite
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetTime
waveOutReset
waveOutGetPosition
waveInGetNumDevs
waveInGetDevCapsA
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
timeBeginPeriod
timeEndPeriod
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveOutGetDevCapsW
waveInReset
oleaut32
VariantChangeType
VariantInit
SysFreeString
VariantClear
SysAllocString
imm32
ImmSetCompositionStringW
ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmGetConversionStatus
ImmReleaseContext
ImmGetContext
winhttp
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
hid
HidP_GetData
HidP_MaxDataListLength
HidD_GetSerialNumberString
HidD_GetManufacturerString
HidD_GetProductString
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetHidGuid
HidP_SetUsages
HidP_SetUsageValue
HidP_GetButtonCaps
HidP_GetValueCaps
HidD_GetAttributes
HidP_GetCaps
ws2_32
gethostname
getsockname
connect
WSAGetLastError
socket
closesocket
WSACleanup
WSAStartup
bind
htonl
inet_addr
htons
WSAIoctl
WSASetLastError
ntohs
accept
shutdown
select
__WSAFDIsSet
listen
ioctlsocket
setsockopt
WSAEventSelect
WSAResetEvent
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSASendDisconnect
gethostbyaddr
WSACloseEvent
WSACreateEvent
WSASocketW
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
getsockopt
getpeername
sendto
send
recvfrom
recv
WSASocketA
getaddrinfo
freeaddrinfo
getprotobyname
gethostbyname
ntohl
dwmapi
DwmSetWindowAttribute
DwmGetWindowAttribute
UnityMain
Name
.text
Size
24.2MB
Virtual Size
24.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
300KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rodata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=259, version=28900,
count=18, id=260, version=29118,
count=31, id=259, version=29118,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=104, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,
count=34, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=233, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=67, id=260, version=28900,
count=9, id=199, version=41118,
count=144, id=261, version=29118,
count=222, id=261, version=28900,
count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=43, id=257, version=28900,
count=546, id=1, productName=Unmarked objects,
count=32, productName=Unmarked objects (old),
count=1090, id=265, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Among.Us/Among Us/appxmanifest.xml
- SHA256 22a954203b45611d49283bbc15c4fa5076cc067ff443c709a95aef56fb24bd42
- MD5 10b6b92fb0be467464e9444a4c826005
- SHA1 45562a11cad897cf4312048c1f501a66fe31e712
- SHA512 68f3032f6c8a3eb2200bdb9e618fd4878eb307bcd697b99a15c9616f61231fedb031cad622cf04b47f9abb40871d8f221e641696b98b641ad41ddbff712d0b9e
- TLSH T1F451F18AA48809A04671886AAB77F287F72D46D355CD9580FCDCA11B2B6639F4333761
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/baselib.dll
- IMPHASH db9c6dbbb87b8c007ce6d9eae665e766
- SHA256 3c4e0b62ecd46cc79e1d1afdad115770c7f32c9f60f77ea6ab80ea781508e63d
- MD5 776e44b9d303c3518cceaf78fbe800f4
- SHA1 2d1d237e279873ef5dfbca1222281c6a445931b7
- SHA512 cb9e99012f54433cd1abe04acd829af8bb17ddfee42ab0ebc73f8235376466511c2f69c80a76d03e48903a5fd26f05618dc2fa4d78eb0b2e76abd3a60d362f7c
- SSDEEP 6144:RuInkY6mJtoLpzxkzt0R60Htptb+REDqDY92q31YM9Ci4DTFG9GCXTnDB:cInZ6mXWM0NptoDY92qFn937DB
- TLSH T1A8945B59F76408B5F5A790788973850BE7B23C8A176487CF23A4439A2F33B91593E372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
78:9d:c0:51:ec:b6:a6:04:df:b6:3f:80:f1:36:40:77:cd:43:6f:28:cf:33:c6:67:27:07:c3:59:57:47:e5:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Aug 21, 2024
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Subject
SERIALNUMBER=3183233,CN=Unity Technologies SF,O=Unity Technologies SF,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:e6:cb:30:35:09:9e:63:9e:f3:35:ea:cd:37:c0:1f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 11, 2023 - Jun 8, 2026
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
64624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\build\output\unity\unity\artifacts\baselib\Win64_VS2019_nondev_i_m\baselib_Win64_player_Master_il2cpp_x64.pdb
ws2_32
setsockopt
__WSAFDIsSet
accept
bind
WSAIoctl
closesocket
select
shutdown
listen
WSACloseEvent
WSACreateEvent
WSASocketW
getsockname
send
connect
WSAWaitForMultipleEvents
recvfrom
recv
getsockopt
sendto
ioctlsocket
WSAGetLastError
kernel32
InitializeSListHead
WriteConsoleW
GetStringTypeW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapQueryInformation
ReadFile
GetFileSizeEx
CreateSemaphoreExW
VirtualFree
ReleaseSemaphore
WriteFile
VirtualAlloc
SetEndOfFile
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
ResumeThread
FormatMessageW
GetLastError
WaitForSingleObjectEx
TlsAlloc
QueryPerformanceFrequency
CloseHandle
GetNativeSystemInfo
RaiseException
LoadLibraryW
CreateThread
SwitchToThread
GetProcAddress
SetFilePointerEx
GetThreadId
GetModuleHandleW
FreeLibrary
TlsFree
QueryPerformanceCounter
VirtualQuery
IsDebuggerPresent
FlushFileBuffers
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
Sleep
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GetTickCount
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualProtect
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
HeapSize
RtlUnwindEx
RtlPcToFileHeader
GetModuleHandleExW
ExitProcess
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetStdHandle
GetFileType
GetConsoleOutputCP
GetConsoleMode
HeapReAlloc
??0AbortShim@il2cpp_baselib@@QEAA@P6A_NW4Baselib_ErrorCode@1@PEAX@Z1@Z
??0Thread@il2cpp_baselib@baselib@@QEAA@$$QEAV012@@Z
??0Thread@il2cpp_baselib@baselib@@QEAA@XZ
??1Thread@il2cpp_baselib@baselib@@QEAA@XZ
??4AbortShim@il2cpp_baselib@@QEAAAEAV01@$$QEAV01@@Z
??4AbortShim@il2cpp_baselib@@QEAAAEAV01@AEBV01@@Z
??4Thread@il2cpp_baselib@baselib@@QEAAAEAV012@$$QEAV012@@Z
??6il2cpp_baselib@@YAAEAVomemstream@0@AEAV10@AEBW4Baselib_ErrorCode@0@@Z
?Baselib_Debug_IsDebuggerAttached@il2cpp_baselib@@YA_NXZ
?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z
?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenProgramHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf8@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z
?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z
?Baselib_ErrorState_FormatAndStoreExtraInformation@il2cpp_baselib@@YA_KPEBDPEAD@Z
?Baselib_FileIO_AsyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@@Z
?Baselib_FileIO_AsyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_AsyncFile@1@UBaselib_FileIO_EventQueue@1@PEBD_KW4Baselib_FileIO_Priority@1@@Z
?Baselib_FileIO_AsyncRead@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@QEAUBaselib_FileIO_ReadRequest@1@_K2W4Baselib_FileIO_Priority@1@@Z
?Baselib_FileIO_EventQueue_Create@il2cpp_baselib@@YA?AUBaselib_FileIO_EventQueue@1@XZ
?Baselib_FileIO_EventQueue_Dequeue@il2cpp_baselib@@YA_KUBaselib_FileIO_EventQueue@1@QEAUBaselib_FileIO_EventQueue_Result@1@_KI@Z
?Baselib_FileIO_EventQueue_Free@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@@Z
?Baselib_FileIO_EventQueue_Shutdown@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@I@Z
?Baselib_FileIO_SyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncFileFromNativeHandle@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@_KI@Z
?Baselib_FileIO_SyncFlush@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncGetFileSize@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@PEBDIPEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncRead@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEAX1PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncSetFileSize@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@_KPEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncWrite@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEBX1PEAUBaselib_ErrorState@1@@Z
?Baselib_Memory_AlignedAllocate@il2cpp_baselib@@YAPEAX_K0@Z
?Baselib_Memory_AlignedFree@il2cpp_baselib@@YAXPEAX@Z
?Baselib_Memory_AlignedReallocate@il2cpp_baselib@@YAPEAXPEAX_K1@Z
?Baselib_Memory_Allocate@il2cpp_baselib@@YAPEAX_K@Z
?Baselib_Memory_AllocatePages@il2cpp_baselib@@YA?AUBaselib_Memory_PageAllocation@1@_K00W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Memory_Free@il2cpp_baselib@@YAXPEAX@Z
?Baselib_Memory_GetPageSizeInfo@il2cpp_baselib@@YAXPEAUBaselib_Memory_PageSizeInfo@1@@Z
?Baselib_Memory_Reallocate@il2cpp_baselib@@YAPEAXPEAX_K@Z
?Baselib_Memory_ReleasePages@il2cpp_baselib@@YAXUBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Memory_SetPageState@il2cpp_baselib@@YAXPEAX_K1W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_NetworkAddress_Decode@il2cpp_baselib@@YAXPEBUBaselib_NetworkAddress@1@PEAW4Baselib_NetworkAddress_Family@1@QEADIPEAGPEAUBaselib_ErrorState@1@@Z
?Baselib_NetworkAddress_Encode@il2cpp_baselib@@YAXPEAUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_Family@1@QEBDGPEAUBaselib_ErrorState@1@@Z
?Baselib_Process_Abort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z
?Baselib_RegisteredNetwork_BufferSlice_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@UBaselib_RegisteredNetwork_Buffer@1@II@Z
?Baselib_RegisteredNetwork_BufferSlice_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@XZ
?Baselib_RegisteredNetwork_Buffer_Deregister@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Buffer@1@@Z
?Baselib_RegisteredNetwork_Buffer_Register@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Buffer@1@UBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Endpoint_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@PEBUBaselib_NetworkAddress@1@UBaselib_RegisteredNetwork_BufferSlice@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Endpoint_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@XZ
?Baselib_RegisteredNetwork_Endpoint_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Endpoint@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_Close@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@IIPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_DequeueRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_DequeueSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ProcessRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ProcessSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ScheduleRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ScheduleSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Bind@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Close@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@@Z
?Baselib_Socket_Create@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@W4Baselib_NetworkAddress_Family@1@W4Baselib_Socket_Protocol@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_GetAddress@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Poll@il2cpp_baselib@@YAXPEAUBaselib_Socket_PollFd@1@IIPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Accept@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@U21@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Connect@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Listen@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_UDP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_UDP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_SystemFutex_Notify@il2cpp_baselib@@YAXPEAHIW4Baselib_WakeupFallbackStrategy@1@@Z
?Baselib_SystemFutex_Wait@il2cpp_baselib@@YAXPEAHHI@Z
?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ
?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z
?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_TLS_Alloc@il2cpp_baselib@@YA_KXZ
?Baselib_TLS_Free@il2cpp_baselib@@YAX_K@Z
?Baselib_Thread_Create@il2cpp_baselib@@YAPEAUBaselib_Thread@1@UBaselib_Thread_Config@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ
?Baselib_Thread_GetId@il2cpp_baselib@@YA_JPEAUBaselib_Thread@1@@Z
?Baselib_Thread_Join@il2cpp_baselib@@YAXPEAUBaselib_Thread@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_Thread_SupportsThreads@il2cpp_baselib@@YA_NXZ
?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ
?Baselib_Timer_GetHighPrecisionTimerTicks@il2cpp_baselib@@YA_KXZ
?Baselib_Timer_GetTicksToNanosecondsConversionRatio@il2cpp_baselib@@YA?AUBaselib_Timer_TickToNanosecondConversionRatio@1@XZ
?Baselib_Timer_GetTimeSinceStartupInSeconds@il2cpp_baselib@@YANXZ
?Baselib_Timer_TickToNanosecondsConversionFactor@il2cpp_baselib@@3NB
?Baselib_Timer_WaitForAtLeast@il2cpp_baselib@@YAXI@Z
?Call@AbortShim@il2cpp_baselib@@QEAA_NW4Baselib_ErrorCode@2@@Z
?CreateThread@Thread@il2cpp_baselib@baselib@@CAPEAUBaselib_Thread@2@P6AXPEAX@Z0@Z
?Detail_Baselib_EventSemaphore_SemaphoreBased_AcquireNonSet@il2cpp_baselib@@YAXHPEAUBaselib_EventSemaphore@@@Z
?Detail_Baselib_EventSemaphore_SemaphoreBased_TryTimedAcquireNonSet@il2cpp_baselib@@YA_NHPEAUBaselib_EventSemaphore@@I@Z
?Empty@AbortShim@il2cpp_baselib@@SA?AV12@XZ
?GetCurrentId@Thread@il2cpp_baselib@baselib@@SA_JXZ
?GetId@Thread@il2cpp_baselib@baselib@@QEAA_JXZ
?SetAbortShim@il2cpp_baselib@@YA?AVAbortShim@1@V21@@Z
?ShimmableAbort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z
?SupportsThreads@Thread@il2cpp_baselib@baselib@@SA_NXZ
?TryJoin@Thread@il2cpp_baselib@baselib@@QEAA_NV?$duration@IU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z
?YieldExecution@Thread@il2cpp_baselib@baselib@@SAXXZ
?detail_AssertLog@il2cpp_baselib@@YAXPEBDZZ
?detail_AssertLogMute@il2cpp_baselib@@YAX_N@Z
Name
.text
Size
272KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=28900,
count=140, id=261, version=28900,
count=13, id=260, version=28900,
count=14, id=260, version=29118,
count=9, id=259, version=29118,
count=113, id=261, version=29118,
count=163, id=1, productName=Unmarked objects,
count=5, id=257, version=28900,
count=3, id=265, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Among.Us/Among Us/crashpad_handler.exe
- IMPHASH 72e35e4154f6ed7021c0a720733866c1
- SHA256 7a1b3be3fb73ff05b46fb072d7cb8d930189708c6ea584e8c44ea54efaa46d4d
- MD5 74593c667fc5e6f76b0b5c71fc408b17
- SHA1 3d8c7c4bf98a3a35d1a0bb31c6ad9eb42c19484b
- SHA512 646082a63bab591eb7beb30cce764af3609f16f55373e259e931692c2f0c19aaa95c2dbfff5790aedabc1415cd8b99015896eb54967effdc5641e17dd8d75e5f
- SSDEEP 12288:SlQmO5sZQGVPxvjuEbdQvOOmxxUlFHuidh6dTcaB1rR/w:SlksZQo5TdQvOOmxxUlFHuidh6dTcaBr
- TLSH T1AED44C66767800F9D1BBC17D96438A17F6B6340A03718EDB139583B21F27AD98F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
339052
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
powrprof
CallNtPowerInformation
user32
SetWindowLongPtrW
GetWindowLongPtrW
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
winhttp
WinHttpCrackUrl
WinHttpQueryHeaders
WinHttpOpen
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpConnect
WinHttpReadData
WinHttpReceiveResponse
WinHttpWriteData
advapi32
SystemFunction036
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
RevertToSelf
ImpersonateNamedPipeClient
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
kernel32
CreateProcessW
Sleep
SleepEx
AddVectoredExceptionHandler
GetFileAttributesW
CreateDirectoryW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
FindFirstFileExW
FindNextFileW
GetFileTime
RemoveDirectoryW
InitializeCriticalSection
InitOnceBeginInitialize
DeleteFileW
InitOnceComplete
SetUnhandledExceptionFilter
SetProcessShutdownParameters
SetConsoleCtrlHandler
GetLastError
GetProcessTimes
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
Wow64GetThreadContext
GetModuleHandleW
GetProcAddress
VerSetConditionMask
IsProcessorFeaturePresent
GetSystemInfo
VerifyVersionInfoW
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleFileNameW
DuplicateHandle
ConnectNamedPipe
DisconnectNamedPipe
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
TerminateProcess
CreateThread
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
GetFileInformationByHandleEx
SetLastError
IsWow64Process
FormatMessageA
VirtualQueryEx
ReadProcessMemory
GetSystemTimeAsFileTime
LoadLibraryW
FindClose
CloseHandle
LocalFree
CreateFileW
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetVersion
ReleaseSemaphore
CreateSemaphoreW
GetStdHandle
GetFileType
LockFileEx
ReadFile
SetEndOfFile
SetFilePointerEx
UnlockFileEx
WriteFile
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
AcquireSRWLockExclusive
WakeAllConditionVariable
ReleaseSRWLockExclusive
msvcp140
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?flags@ios_base@std@@QEBAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?setf@ios_base@std@@QEAAHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Xbad_alloc@std@@YAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xlength_error@std@@YAXPEBD@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?good@ios_base@std@@QEBA_NXZ
vcruntime140
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__current_exception_context
__current_exception
__C_specific_handler
strchr
memchr
_purecall
memset
memcpy
memmove
__std_terminate
memcmp
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_errno
_crt_atexit
_register_onexit_function
_initialize_onexit_table
terminate
signal
__p___argc
abort
__p___wargv
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_invoke_watson
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__p__commode
__stdio_common_vsscanf
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf_p
fflush
api-ms-win-crt-string-l1-1-0
isspace
_wcsicmp
strnlen
isalnum
wcsncmp
wcsnlen
strncmp
tolower
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
malloc
free
_aligned_malloc
_callnewh
_aligned_free
_set_new_mode
api-ms-win-crt-convert-l1-1-0
strtoul
strtoull
api-ms-win-crt-math-l1-1-0
__setusermatherr
_dclass
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-filesystem-l1-1-0
_wstat64
Name
.text
Size
419KB
Virtual Size
418KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
155KB
Virtual Size
155KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
CPADinfo
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=32533,
count=6, id=259, version=32533,
count=34, id=261, version=32533,
count=6, id=257, version=32533,
count=8, id=260, version=32826,
count=13, id=257, version=28900,
count=289, id=1, productName=Unmarked objects,
count=1, id=259, version=32826,
count=134, id=261, version=32826,
count=1, id=255, version=32826,
count=1, id=258, version=32826,
Among.Us/Among Us/dlllist.txt
- SHA256 fc0befb4aae4b7f0eeb1c398fccea03cc795590e09db6628974520091fcfc516
- MD5 d7fd711e5e5f73da110115ce98beca0b
- SHA1 a04719d38bec9a97b8f098cf29bc863006c43a33
- SHA512 e96b14c280a83d4a0d5eca3ce6af8ea5ef679feaa6b70c2775ace90c4ab54682c74d620a681ae3bc09baa534ae643dc7551b8b650f7d84658f38a8934448af87
- MD5 SHA1 SHA512
Among.Us/Among Us/layout.xml
- SHA256 b469b4aac8ac7a028fb5688814b3750d263fba8b1dfb91b824ca901edb9c1b13
- MD5 8e4d8040ab13c0836569ae904ec729d8
- SHA1 978f6adbb2122608ecf44ec423533c8e623b0e77
- SHA512 60b7626b566ed629fbd16a568539a31809cd971b4add6c0a4e972ec3612c07c459e5d42ed45a54ab9148415cf8fbd986d3e7f626c7bbae762a9c0116a0215aa2
- TLSH T10221A9D2C3871674A3221A3341D9D315516EE1DE0384E80C696FF9E27B62B1E39B31B6
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/layout_76fd15bb-86a8-4a92-9c5e-f62f3f7faea8.xml
- SHA256 b469b4aac8ac7a028fb5688814b3750d263fba8b1dfb91b824ca901edb9c1b13
- MD5 8e4d8040ab13c0836569ae904ec729d8
- SHA1 978f6adbb2122608ecf44ec423533c8e623b0e77
- SHA512 60b7626b566ed629fbd16a568539a31809cd971b4add6c0a4e972ec3612c07c459e5d42ed45a54ab9148415cf8fbd986d3e7f626c7bbae762a9c0116a0215aa2
- TLSH T10221A9D2C3871674A3221A3341D9D315516EE1DE0384E80C696FF9E27B62B1E39B31B6
- MD5 SHA1 SHA512 TLSH
Among.Us/Among Us/wdapp.exe
- IMPHASH 7914600f8faab3cfe2d9f3281ed3a994
- SHA256 3056b7a16c400d5954ab799b4cf340093aee72eb85b7ccd782d0b3772f757c29
- MD5 25d945041c947d490f2edaa74a837a51
- SHA1 c39cee713bd1997936b4a45f58e8350060cb651e
- SHA512 5c7c71be8ce66c76492131a2383d147574f901da5f3105902a7f99a50a35304235e4adb424d01fb6874e11ad15df36fbbdc425747cdd612d50815f76dd9c0524
- SSDEEP 6144:PErajvZy+Z2P7nfzqrLOpbAdzsABQY+iYPp0J6cthc77Gti8xgk0UXo1dXE8oHwf:PE+brwO+iYPp0ccthcvM02o1oE
- TLSH T1B9843A47A7E94864D1BBF6348AB78526EA7178021631CB5FB2CD511F2F37650AC3A332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
84:0d:0c:e1:a2:86:97:bf:d8:b6:17:54:41:c3:24:d0:7a:0e:c1:d4:e6:2d:ea:6c:4f:c4:31:b1:ba:58:6d:d0
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 13, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 19, 2023 - Oct 16, 2024
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e6:d9:42:9e:ea:00:f8:7d:e1:00:01:00:00:01:e6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
20400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wdapp.pdb
msvcp_win
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
_errno
_initterm_e
_configure_wide_argv
_initialize_wide_environment
_invalid_parameter_noinfo
_get_initial_wide_environment
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initterm
exit
_exit
__p___argc
__p___wargv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
terminate
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
_set_new_mode
free
api-ms-win-crt-string-l1-1-0
memset
wcsnlen
iswdigit
iswalpha
_wcsicmp
toupper
_wcsnicmp
wcscpy_s
iswalnum
api-ms-win-crt-stdio-l1-1-0
fflush
__p__commode
__stdio_common_vswprintf_s
__stdio_common_vswprintf
_set_fmode
__stdio_common_vfwprintf
__acrt_iob_func
__stdio_common_vsnprintf_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-private-l1-1-0
memmove
__current_exception_context
_CxxThrowException
_purecall
__CxxFrameHandler3
__std_exception_destroy
__std_terminate
memcpy
memcmp
wcschr
__C_specific_handler
__current_exception
__std_exception_copy
ntdll
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
api-ms-win-core-libraryloader-l1-2-0
SizeofResource
GetProcAddress
LoadResource
GetModuleHandleExW
LockResource
FreeLibrary
GetModuleFileNameA
LoadLibraryExW
GetModuleHandleW
api-ms-win-core-synch-l1-1-0
OpenSemaphoreW
ReleaseMutex
DeleteCriticalSection
WaitForSingleObjectEx
ReleaseSemaphore
LeaveCriticalSection
CreateEventExW
EnterCriticalSection
CreateMutexExW
CreateEventW
SetEvent
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
WaitForSingleObject
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
CreateSemaphoreExW
api-ms-win-core-heap-l1-1-0
HeapFree
GetProcessHeap
HeapAlloc
api-ms-win-core-errorhandling-l1-1-0
GetLastError
SetUnhandledExceptionFilter
RaiseException
SetLastError
UnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
CreateProcessW
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
api-ms-win-core-localization-l1-2-0
FormatMessageW
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
DebugBreak
OutputDebugStringW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
RoInitialize
RoUninitialize
RoActivateInstance
api-ms-win-core-file-l1-1-0
CreateFileW
GetFileAttributesW
GetFullPathNameW
DeleteFileW
api-ms-win-core-io-l1-1-0
DeviceIoControl
api-ms-win-core-winrt-string-l1-1-0
WindowsIsStringEmpty
WindowsConcatString
WindowsCreateStringReference
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsDuplicateString
api-ms-win-core-com-l1-1-0
IIDFromString
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
StringFromGUID2
CoTaskMemFree
api-ms-win-core-heap-l2-1-0
LocalAlloc
LocalFree
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
OpenProcess
api-ms-win-core-file-l1-2-0
GetTempPathW
GetVolumeNameForVolumeMountPointW
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount64
api-ms-win-core-console-l1-1-0
SetConsoleCtrlHandler
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-interlocked-l1-1-0
InitializeSListHead
shlwapi
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
PathCreateFromUrlW
PathIsURLW
kernel32
GetPackageApplicationIds
ClosePackageInfo
GetApplicationUserModelId
OpenPackageInfoByFullName
api-ms-win-appmodel-unlock-l1-1-0
IsDeveloperModeEnabled
xsapi
XsReadXvcInfoXVD
api-ms-win-core-registry-l1-1-0
RegGetValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegGetValueA
api-ms-win-core-libraryloader-l1-2-1
FindResourceW
oleaut32
VariantClear
VariantInit
SysStringLen
SysFreeString
SysAllocStringLen
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
api-ms-win-core-winrt-error-l1-1-1
RoGetMatchingRestrictedErrorInfo
api-ms-win-core-file-l2-1-2
CopyFileW
api-ms-win-core-threadpool-l1-2-0
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
DisassociateCurrentThreadFromCallback
CloseThreadpoolWait
api-ms-win-eventing-provider-l1-1-0
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
api-ms-win-core-processenvironment-l1-1-0
GetEnvironmentVariableW
api-ms-win-crt-convert-l1-1-0
_itow_s
xmllite
CreateXmlWriter
Name
.text
Size
220KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
96KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
228B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=82, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=260, version=32595,
count=4, id=259, version=32595,
count=244, id=1, productName=Unmarked objects,
count=11, id=257, version=32595,
count=38, id=261, version=32595,
count=25, id=265, version=32595,
count=1, id=255, version=32595,
count=1, id=258, version=32595,
Among.Us/Among Us/winmm.dll
- IMPHASH d87c96e86984e394d8b76e8b7350cb52
- SHA256 ba37009eef6c041bc6d0a271c13679fb9e14a005bd7e038cee596cd4064cf8b3
- MD5 e59aac558d9f9c5d1312ac24d09c51d5
- SHA1 2f11c4b00f5f92d4466348f9501aa657c9bf6fa7
- SHA512 1c3b357074d62d5ca11c92d71ffdacb4a7e3d6fb17cbd4b489e5bea0032cea43650a6809388e98e4b98256b477c6b5dbd8fd2c7f4e3e08af00ef68e0ed4406d0
- SSDEEP 12288:XQxOD9ZC0WKOy8zMtJKpBmpMgBNwQuQmMzWq0hNwnoAZwl:XQxOD9ZFKpB+N7JmMzWq0hNwnBZ
- TLSH T1DBB47C19A2A843B8E577E178C897460AE7B17486233196DF43F046AE1F277F11A3F361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
212880
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameW
GetSystemDirectoryW
GetLastError
LoadLibraryW
GetProcAddress
ExitProcess
SetEndOfFile
WriteConsoleW
HeapSize
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
CompareStringEx
GetCPInfo
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
ReadConsoleW
CreateFileW
RtlUnwind
user32
MessageBoxA
MessageBoxW
CloseDriver
DefDriverProc
DriverCallback
DrvGetModuleHandle
GetDriverModuleHandle
NotifyCallbackData
OnlineFix
OpenDriver
PlaySound
PlaySoundA
PlaySoundW
SendDriverMessage
WOW32DriverCallback
WOW32ResolveMultiMediaHandle
WOWAppExit
aux32Message
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
joy32Message
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
mci32Message
mciDriverNotify
mciDriverYield
mciExecute
mciFreeCommandResource
mciGetCreatorTask
mciGetDeviceIDA
mciGetDeviceIDFromElementIDA
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
mciGetDriverData
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
mciLoadCommandResource
mciSendCommandA
mciSendCommandW
mciSendStringA
mciSendStringW
mciSetDriverData
mciSetYieldProc
mid32Message
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
mmsystemGetVersion
mod32Message
mxd32Message
sndPlaySoundA
sndPlaySoundW
tid32Message
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetPitch
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
wid32Message
wod32Message
Name
.text
Size
372KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=19, id=260, version=27412,
count=172, id=261, version=27412,
count=15, id=260, version=31616,
count=10, id=259, version=31616,
count=71, id=261, version=31616,
count=5, id=257, version=27412,
count=114, id=1, productName=Unmarked objects,
count=5, id=265, version=31629,
count=1, id=256, version=31629,
count=1, id=255, version=31629,
count=1, id=258, version=31629,
Among.Us/Among Us/xsapi.dll
- IMPHASH 2a7332b53d7b7819528a40888f5ca886
- SHA256 6c50897bd5a4be2feb7133a654aa014b0a99e6f3da07f3e5c135a12594fc2df1
- MD5 578edfe36855c0b20060b750c9f47ffe
- SHA1 6c3969f9a89c93ca0e3583d40bb78dac45dae98c
- SHA512 369a63dff6715d1053058faf7e5e23477a828fc69fa6c517b703fbda1b2182f5a4dd7a836590452e729965b837f919a22bb4cdce598cb5e515b73c56ba51b729
- SSDEEP 6144:H2c50Q+6/V+fy23YNIqP+6e+gPolqqDtK00aX8:oQ+429qPjioIqRKP
- TLSH T161547D6963E814F4D0B7D279CA638606E7F274562375D6DF02A0C27D2F23BD0AA39B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:9e:8a:96:aa:a3:62:48:20:08:19:6e:e3:2e:3e:63:ab:ca:51:ad:69:06:38:f8:41:e3:39:f6:25:3d:a5:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 13, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 19, 2023 - Oct 16, 2024
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 12, 2023 - Jan 10, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
5232
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
xsapi.pdb
api-ms-win-crt-runtime-l1-1-0
_cexit
abort
_errno
terminate
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo
_initterm
_initialize_onexit_table
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
_putws
__stdio_common_vsnprintf_s
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf
__stdio_common_vsprintf
api-ms-win-crt-string-l1-1-0
wcsncmp
strcpy_s
wcscpy_s
_wcsicmp
ntdll
NtWriteFile
NtQueryInformationFile
NtCreateSection
NtReadFile
RtlInitUnicodeString
RtlNtStatusToDosErrorNoTeb
RtlEqualUnicodeString
NtClose
NtOpenFile
RtlInitUnicodeStringEx
NtDeviceIoControlFile
RtlFreeHeap
RtlAllocateHeap
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
NtQuerySystemTime
NtSetInformationFile
RtlUpcaseUnicodeString
NtCreateFile
bcrypt
BCryptSignHash
BCryptVerifySignature
BCryptDestroyKey
BCryptImportKeyPair
BCryptGenRandom
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
rpcrt4
UuidCreate
kernel32
FlsSetValue
DeleteCriticalSection
InitializeCriticalSectionEx
RaiseException
EncodePointer
FlsFree
FlsGetValue
FlsAlloc
InterlockedFlushSList
GetTickCount64
CloseThreadpoolCleanupGroupMembers
GetVolumeInformationByHandleW
SetFilePointerEx
GetOverlappedResult
SetEndOfFile
WriteFile
GetFileSizeEx
CreateThreadpoolWork
SubmitThreadpoolWork
ResetEvent
CreateThreadpoolCleanupGroup
GetCurrentThread
SetEvent
SetThreadpoolThreadMaximum
CreateEventExW
CreateThreadpool
AcquireSRWLockShared
ReleaseSRWLockShared
CloseThreadpoolCleanupGroup
GetEnvironmentVariableW
CloseThreadpool
InitializeSListHead
QueryPerformanceCounter
ReadFile
GetFullPathNameW
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
CreateFileW
DeviceIoControl
SearchPathW
Sleep
DeleteFileW
InitializeSRWLock
AcquireSRWLockExclusive
LoadLibraryW
FreeLibrary
ReleaseSRWLockExclusive
api-ms-win-crt-heap-l1-1-0
_free_base
malloc
_callnewh
free
_calloc_base
api-ms-win-crt-convert-l1-1-0
_wcstoui64
wininet
HttpSendRequestW
InternetOpenW
InternetCloseHandle
InternetSetOptionW
InternetOpenUrlW
InternetConnectW
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
InternetCrackUrlW
api-ms-win-crt-math-l1-1-0
ceilf
XsCloseXVDContext
XsCreateConvertVhd2XVD
XsCreateConvertXVD2Vhd
XsCreateXVD
XsMarkReadOnlyXVD
XsOpenXVDContext
XsReadDataXVD
XsReadEmbeddedXVD
XsReadHeaderXVD
XsReadIdentifierXVD
XsReadMutableXvcInfoXVD
XsReadUserDataXVD
XsReadXvcInfoXVD
XsSetTraceFlags
XsStripKeyMaterialXVD
XsUpdateMutableXvcInfoXVD
XsUpdateXvcInfoXVD
XsWriteDataXVD
XsWriteXVDContext
XvdChkdskRequest
XvdCloseAdapter
XvdCreateXvdPointer
XvdDeleteMountName
XvdDisableCrashDump
XvdFindCloseXvd
XvdFindFirstXvd
XvdFindNextXvd
XvdFirmwareRequest
XvdFreeBuffer
XvdMount
XvdMountContentType
XvdOpenAdapter
XvdQueryHmbInfo
XvdQueryPerformanceCounters
XvdQueryPerformanceCountersBackend
XvdQueryPerformanceCountersEx
XvdReadBatInfo
XvdSetDispatcherConfig
XvdTraceRequest
XvdUnmount
XvdUnmountDiskNumber
XvdUnmountFile
XvdVmMount
XvdVmMountContentType
XvdVmUnmountFile
XvdXIoBalQuerySetState
XvdXIoBalQuerySetThrottle
Name
.text
Size
192KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
254KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
460B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=257, version=32595,
count=13, id=260, version=32595,
count=12, id=259, version=32595,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=158, id=1, productName=Unmarked objects,
count=36, id=261, version=32595,
count=1, id=256, version=32595,
count=85, id=265, version=32595,
count=1, id=255, version=32595,
count=1, id=258, version=32595,
Among.Us/HOW TO RUN GAME!!.txt
- SHA256 fc3bfe29a5e9a39be3a62a4f7dcd5403ddc304237ca92e4aa5e0caede9a5bafd
- MD5 3cd1f4b2dce4404b939efc7cefd1f635
- SHA1 3dccaed53f89b79727916890a23c33f6abf04358
- SHA512 d6d20decd4357cf7f11ac0150ac88392d6192915734441ae712228c4224ef42684b942fe5cd9698ce7f5bf31257f8d767470cea3f23532c368906580419bcebe
- TLSH T1E9D02B9EEC8317A22A9046D2525D2E92730CD55977710544BC7B92A54305B75C0359EC
- MD5 SHA1 SHA512 TLSH
Among.Us/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
- SHA256 72f4d3e137db5ae8cde66c1b8d000488f16e2ab27a761fe287647010034887cd
- MD5 e2e460fae8682d83a0f080dc3fc6ea99
- SHA1 1f3347c00b7a83709406e7f67659741fffecc48e
- SHA512 a741b7f3c34b46206a6146c34bd01fb71b06de856dc1271ddf13a19e9e1adc85e23aaf3cf690fa17dace117b7db25167916d38383fb50bab1b0ea5bebe81fc03
- TLSH T1EA900256451AD0599316084C851195579842219949AAC464D241DB1C588B15485A4708
- MD5 SHA1 SHA512 TLSH
Among.Us/_Redist/dotNetFx40_Full_setup.exe
- IMPHASH 02483cd76378259a50b7b66146b45f06
- SHA256 fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425
- MD5 53406e9988306cbd4537677c5336aba4
- SHA1 06becadb92a5fcca2529c0b93687c2a0c6d0d610
- SHA512 4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99
- SSDEEP 24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD
- TLSH T1F2151232ABA0C133D4DB28B48ADDB6B2657DE6610374C4C7B7440BEEAC307D1697964B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
102854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
boxstub.pdb
advapi32
CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA
kernel32
Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException
comctl32
ord17
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
shlwapi
PathRemoveExtensionW
user32
MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW
cabinet
ord22
ord23
ord20
oleaut32
SysAllocString
VariantClear
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boxld01
Size
512B
Virtual Size
194B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=158, version=20928,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=171, version=21009,
count=18, id=158, version=21009,
count=105, id=170, version=21009,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=194, id=1, productName=Unmarked objects,
count=69, id=175, version=20928,
count=1, id=171, version=20928,
count=1, id=155, version=20928,
count=1, id=154, version=20928,
count=1, id=157, version=20928,
Among.Us/_Redist/dxwebsetup.exe
- IMPHASH 1494de9b53e05fc1f40cb92afbdd6ce4
- SHA256 111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
- MD5 fd6057b33e15a553ddc5d9873723ce8f
- SHA1 f90efb623b5abea70af63c470daa8674444fb1df
- SHA512 d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
- SSDEEP 6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
- TLSH T1F154F11267D9853BE0F56B705DF341236B75BCA15E7AF32E5246A88C0C32784B83A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
23134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
kernel32
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree
gdi32
GetDeviceCaps
user32
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics
comctl32
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
239KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Among.Us/_Redist/oalinst.exe
- IMPHASH 1ff011c2e13ea492fe69b2fbfc802083
- SHA256 b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- MD5 694f54bd227916b89fc3eb1db53f0685
- SHA1 21fdc367291bbef14dac27925cae698d3928eead
- SHA512 55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP 12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
- TLSH T1E005F10020D5CC73E4EB32B3843586746EBA7E912F0A285B7FC476AEE673176DA71215
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Chains
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
Serial Number
36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 30, 2006 - Jul 14, 2009
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
61:0c:12:06:00:00:00:00:00:1b
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 23, 2006 - May 23, 2016
Minor OS version
0
Major OS version
4
Entry point
27713
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeResource
SizeofResource
LoadResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
DeleteFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
InterlockedExchange
RemoveDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetTempFileNameA
LockResource
MoveFileExA
GetTimeZoneInformation
CompareStringA
CompareStringW
EnumSystemLocalesA
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
MoveFileA
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
SetConsoleCtrlHandler
FreeLibrary
user32
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
LoadIconA
SetClassLongA
LoadImageA
CreateWindowExA
SendMessageA
BeginPaint
GetClientRect
MoveWindow
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
636KB
Virtual Size
633KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Among.Us/_Redist/vcredist_2015-2019_x64.exe
- IMPHASH 1a5cdbf711fee14b077e599d13fddab2
- SHA256 b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
- MD5 f0248d477e74687c5619ae16498b13d4
- SHA1 9ed4b091148c9b53f66b3f2c69be7e60e74c486a
- SHA512 0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
- SSDEEP 393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
- TLSH T1AFE63332A598402BDBF20473EA94F9242E3DD119735589BBE2DCDD0E1F7818217FBA16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 8, 2019 - Jan 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:13:b3:70:87:3d:fa:f0:c8:24:00:00:00:00:01:13
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
188525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
294KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Among.Us/_Redist/vcredist_2015-2019_x86.exe
- IMPHASH 1a5cdbf711fee14b077e599d13fddab2
- SHA256 ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6
- MD5 de34b1c517e0463602624bbc8294c08d
- SHA1 5ce7923ffea712468c05e7ac376dd9c29ea9f6be
- SHA512 114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac
- SSDEEP 393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9
- TLSH T134E633326554402AEBF20573AAA4F5342E7DE62D230449AEE3DCEC0D2FB919357F7612
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:0b:e4:f9:be:8f:6f:4c:1d:d0:00:00:00:00:01:0b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
5
Entry point
188525
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\8\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
shell32
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
294KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Among.Us/_Redist/vcredist_x64.exe
- IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
- SHA256 e0aeaa602f9eb3bd766ec17eb41c0f469b88db71154c2850cb6aa8a26609cd77
- MD5 b886cbe40649b6afaa70e9f4583c3544
- SHA1 1e5e1f5c4da7efcd2e90b6db74da3dc327b470bf
- SHA512 76ef45b168bd51ab826d32708df699db7ccb16b87e21201b6e0297c17acd2d641a59ba4682cb338bf738686ee04a60bea7d0afea569c66b269eb49a9ad59551a
- SSDEEP 49152:09CX0uLTsywOb40UVU/XEETyzRotLxYK7GfarrWAxR6YJ/YPJkgg3dvEx:EuLgywiNHBeSLxYK/bxEP
- TLSH T1FEB53352E3039343EC4F69F690594D1F5A08D9E3633BE68773294C8E9E7C70899A43A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
25599
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
sfxcab.pdb
msvcrt
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf
advapi32
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor
kernel32
CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime
user32
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow
ntdll
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5.4MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,