0b5fda65b3da7f3c99ee0eda772349606671ff069e4ab27b2399edcc7c3d4582
- SHA256 0b5fda65b3da7f3c99ee0eda772349606671ff069e4ab27b2399edcc7c3d4582
Overview
overview
6Static
static
3Mod Menu V...32.dll
windows10-2004-x64
1Mod Menu V...64.dll
windows10-2004-x64
1Mod Menu V...er.exe
windows10-2004-x64
6Mod Menu V...er.exe
windows11-ltsc_2024-x64
6Mod Menu V...rt.dll
windows10-2004-x64
1Mod Menu V...rt.dll
windows11-ltsc_2024-x64
1Mod Menu V...47.dll
windows10-2004-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Mod Menu V5.87/Bin/x32.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mod Menu V5.87/Bin/x64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Mod Menu V5.87/Loader.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Mod Menu V5.87/Loader.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Mod Menu V5.87/WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Mod Menu V5.87/WinDivert.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Mod Menu V5.87/d3dcompiler_47.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 0b5fda65b3da7f3c99ee0eda772349606671ff069e4ab27b2399edcc7c3d4582
- Size 11.1MB
- Sample261102-e5wtzsey7y
- SHA256 0b5fda65b3da7f3c99ee0eda772349606671ff069e4ab27b2399edcc7c3d4582
- MD5 3d49f5cf86e68b923bbdff964f7d9857
- SHA1 170df0fc17600e8b561889e278a4133783db55af
- SHA512 26b4a49f260af771a0917fe5e94f83b4bcd21eb1a4fda9c3f5a4153f5462b12314f78b3129a935d983b9cf95a234a24c8fe4dee186060719ee0e9496e6069c5f
- SSDEEP 196608:55nQw7qP0HPmPKXxQxfRxFB8QxAeRjxNWFl5nQw7q95nQw7qMKy0PFb4pvMc:Qwzuy+xJDJxAixNlwXwCzFb4NF
- TLSH T1C3C6334DCD69334FECA687F82BCE5E0285C7D71AB00B0A77AD05B04A2E64D7452E6E4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Mod Menu V5.87/WinDivert.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Mod Menu V5.87/Loader.exe
File Explorer
-
0b5fda65b3da7f3c99ee0eda772349606671ff069e4ab27b2399edcc7c3d4582.zip 11.1MB
-
Mod Menu V5.87/Bin/x32.dll.dll 4.3MB
-
Mod Menu V5.87/Bin/x64.dll.dll 4.3MB
-
Mod Menu V5.87/Loader.exe.exe 3.3MB
-
Mod Menu V5.87/Modules/adx_adx10_to_cdd.spimtx77B
-
Mod Menu V5.87/Modules/adx_adx16_to_cdd.spimtx86B
-
Mod Menu V5.87/Modules/adx_cdd_to_cid.spimtx84B
-
Mod Menu V5.87/Modules/adx_cid_to_rle.spi1d94KB
-
Mod Menu V5.87/Modules/adx_exp_to_aces.spimtx83B
-
Mod Menu V5.87/Modules/logc800.spi1d385KB
-
Mod Menu V5.87/Modules/logc_to_aces.spimtx94B
-
Mod Menu V5.87/Modules/rrt_ut33_dcdm.spi3d1.1MB
-
Mod Menu V5.87/Modules/rrt_ut33_p3d60.spi3d842KB
-
Mod Menu V5.87/Modules/rrt_ut33_p3dci.spi3d835KB
-
Mod Menu V5.87/Modules/rrt_ut33_rec709.spi3d748KB
-
Mod Menu V5.87/Modules/rrt_ut33_sRGB.spi3d749KB
-
Mod Menu V5.87/Modules/slog10.spi1d48KB
-
Mod Menu V5.87/Modules/slog2.spi1d384KB
-
Mod Menu V5.87/Modules/slogf35_to_aces.spimtx121B
-
Mod Menu V5.87/Modules/slogf65_to_aces_3200.spimtx134B
-
Mod Menu V5.87/Modules/slogf65_to_aces_5500.spimtx130B
-
Mod Menu V5.87/Modules/ten_bit_scale.spimtx52B
-
Mod Menu V5.87/Scripts/actbusy.txt15KB
-
Mod Menu V5.87/Scripts/actremap.txt4KB
-
Mod Menu V5.87/Scripts/audio_options.txt4KB
-
Mod Menu V5.87/Scripts/bonus_maps_manifest.txt43B
-
Mod Menu V5.87/Scripts/bugreporter_defaults.txt19B
-
Mod Menu V5.87/Scripts/chapterbackgrounds.txt37B
-
Mod Menu V5.87/Scripts/clientmenu.txt6KB
-
Mod Menu V5.87/Scripts/controller_options.txt6KB
-
Mod Menu V5.87/Scripts/credits.txt8KB
-
Mod Menu V5.87/Scripts/damagecutout.txt22KB
-
Mod Menu V5.87/Scripts/damagecutout_ceda.txt12KB
-
Mod Menu V5.87/Scripts/damagecutout_female.txt22KB
-
Mod Menu V5.87/Scripts/damagecutout_laughriot.txt650B
-
Mod Menu V5.87/Scripts/debugoptions.txt3KB
-
Mod Menu V5.87/Scripts/game_options.consoles.txt2KB
-
Mod Menu V5.87/Scripts/game_options.txt15KB
-
Mod Menu V5.87/Scripts/gameinfo.txt192B
-
Mod Menu V5.87/Scripts/gameserverconfig.vdf1KB
-
Mod Menu V5.87/Scripts/gameuianimations.txt8KB
-
Mod Menu V5.87/Scripts/global_actors.txt592B
-
Mod Menu V5.87/Scripts/hl2_scripts.dsp7KB
-
Mod Menu V5.87/Scripts/hud_textures.txt1KB
-
Mod Menu V5.87/Scripts/hudanimations.txt9KB
-
Mod Menu V5.87/Scripts/instructor_lessons.txt4KB
-
Mod Menu V5.87/Scripts/instructor_texturemanifest.txt111B
-
Mod Menu V5.87/Scripts/instructor_textures.txt4KB
-
Mod Menu V5.87/Scripts/inventory_structure.txt2KB
-
Mod Menu V5.87/Scripts/mapautocompile.txt2KB
-
Mod Menu V5.87/Scripts/mod_lessons.txt52KB
-
Mod Menu V5.87/Scripts/mod_textures.txt6KB
-
Mod Menu V5.87/Scripts/motion_controller_move_options.txt1KB
-
Mod Menu V5.87/Scripts/motion_controller_options.txt3KB
-
Mod Menu V5.87/Scripts/motion_controller_sharpshooter_options.txt1KB
-
Mod Menu V5.87/Scripts/mouse_keyboard_options.txt8KB
-
Mod Menu V5.87/Scripts/plugin_animations.txt1KB
-
Mod Menu V5.87/Scripts/propdata.txt17KB
-
Mod Menu V5.87/Scripts/radialmenu.txt2KB
-
Mod Menu V5.87/Scripts/sentences.txt81KB
-
Mod Menu V5.87/Scripts/serverbrowsergametypes.txt2KB
-
Mod Menu V5.87/WinDivert.dll.dll 23KB
-
Mod Menu V5.87/d3dcompiler_47.dll.dll 4.3MB
-
Mod Menu V5.87/updater.ini3.6MB
Mod Menu V5.87/Bin/x32.dll
- IMPHASH 36f6d7806085bd3a70ed8c5dcb51f6c8
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:55:bf:8b:65:d0:a7:9e:47:27:01:03:ac:36:3c:47:95:ee:1b:ca:2e:7b:8d:1f:48:c1:b8:b5:d8:05:0b:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 7, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:fe:01:f0:b5:1e:ff:e9:f9:ad:00:00:00:00:00:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
2548016
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_47.pdb
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
strnlen
__isascii
wcsncmp
memset
api-ms-win-crt-math-l1-1-0
_finite
_isnan
floorf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_controlfp
_initterm
_clearfp
api-ms-win-crt-private-l1-1-0
_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_cosh
_o_exp
_o_fclose
_o_floor
_o_fmod
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_log
_o_malloc
_o_modf
_o_pow
_o_qsort
_o_setlocale
_o_sin
_o_sinh
_o_sqrt
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
__C_specific_handler
_o__cexit
_o__callnewh
_o__atoi64
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
memcmp
wcschr
wcsrchr
__CxxFrameHandler3
_o__chsize_s
kernel32
CreateFileA
MultiByteToWideChar
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
InitializeCriticalSection
FlushViewOfFile
ResetEvent
SetFilePointer
HeapCreate
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
WaitForSingleObjectEx
CreateEventW
DisableThreadLibraryCalls
MapViewOfFileEx
GetEnvironmentVariableA
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
FreeLibrary
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
advapi32
RegCloseKey
RegQueryValueExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
RegOpenKeyExW
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegEnumKeyExA
RegOpenKeyExA
api-ms-win-crt-time-l1-1-0
_time64
rpcrt4
UuidCreate
D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
883KB
Virtual Size
883KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=57, id=261, version=23524,
count=1, id=260, version=23524,
count=2, id=257, version=27412,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1167, id=1, productName=Unmarked objects,
count=4, id=259, version=27412,
count=12, id=260, version=27412,
count=1, id=256, version=27412,
count=136, id=264, version=27412,
count=30, id=261, version=27412,
count=2, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mod Menu V5.87/Bin/x64.dll
- IMPHASH 36f6d7806085bd3a70ed8c5dcb51f6c8
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:55:bf:8b:65:d0:a7:9e:47:27:01:03:ac:36:3c:47:95:ee:1b:ca:2e:7b:8d:1f:48:c1:b8:b5:d8:05:0b:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 7, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:fe:01:f0:b5:1e:ff:e9:f9:ad:00:00:00:00:00:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
2548016
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_47.pdb
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
strnlen
__isascii
wcsncmp
memset
api-ms-win-crt-math-l1-1-0
_finite
_isnan
floorf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_controlfp
_initterm
_clearfp
api-ms-win-crt-private-l1-1-0
_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_cosh
_o_exp
_o_fclose
_o_floor
_o_fmod
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_log
_o_malloc
_o_modf
_o_pow
_o_qsort
_o_setlocale
_o_sin
_o_sinh
_o_sqrt
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
__C_specific_handler
_o__cexit
_o__callnewh
_o__atoi64
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
memcmp
wcschr
wcsrchr
__CxxFrameHandler3
_o__chsize_s
kernel32
CreateFileA
MultiByteToWideChar
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
InitializeCriticalSection
FlushViewOfFile
ResetEvent
SetFilePointer
HeapCreate
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
WaitForSingleObjectEx
CreateEventW
DisableThreadLibraryCalls
MapViewOfFileEx
GetEnvironmentVariableA
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
FreeLibrary
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
advapi32
RegCloseKey
RegQueryValueExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
RegOpenKeyExW
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegEnumKeyExA
RegOpenKeyExA
api-ms-win-crt-time-l1-1-0
_time64
rpcrt4
UuidCreate
D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
883KB
Virtual Size
883KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=57, id=261, version=23524,
count=1, id=260, version=23524,
count=2, id=257, version=27412,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1167, id=1, productName=Unmarked objects,
count=4, id=259, version=27412,
count=12, id=260, version=27412,
count=1, id=256, version=27412,
count=136, id=264, version=27412,
count=30, id=261, version=27412,
count=2, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mod Menu V5.87/Loader.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 66c40452401d757b674da91db8ef2a81ae340888e11a4feeb2664ce2d7ec5520
- MD5 1828cffbd2280b7e076c26456217d0cd
- SHA1 03bc2f55e5577a1c57f799565467919cd5aa1da8
- SHA512 17328d75f2ac0b0cf4fceb29c54be3111844567714e455406677adf793c2825acf3b5d5e2bdd9cf0d265c27d1508a3146a88473113726734a83e45c2bf0ad1f6
- SSDEEP 49152:wIIw0Afe+6D1cAoIui7SrsEvJld7DJ9D3P7HW5moQ:w40g9D
- TLSH T12FF55C07BED584ADD056AB35807742617A70BC0C9B3563DB1F90BBB82E727C19D36BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
16:c8:8c:1b:03:cb:6a:ff:4f:28:c1:65:e0:34:13:0e:df:14:90:2d:fe:9a:84:25:fe:b9:80:28:0d:03:f6:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Golden Pulse Partners,O=Golden Pulse Partners,C=US
Chains
Nov 1, 2026
CN=Golden Pulse Partners,O=Golden Pulse Partners,C=US
Subject
CN=Golden Pulse Partners,O=Golden Pulse Partners,C=US
Serial Number
cd:6c:d6:25:d5:f9:36:d1:97:22:65:96:1c:6f:6e:5a
Issuer
CN=Golden Pulse Partners,O=Golden Pulse Partners,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2026 - Nov 1, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
466912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
67KB
Virtual Size
367KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
139KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Mod Menu V5.87/Modules/adx_adx10_to_cdd.spimtx
- SHA256 47620d15cc3a7b7191058d2933c9ecdf62f66cc21f848fa9ad1cac91d22f65b3
- MD5 454d6c06ccdfe25af26ff13749f7bba6
- SHA1 4725a6cc5541f9c39eefc9793dc9545949068517
- SHA512 4c82966eb74bddf9a8746f76e96c479efbcb189c010ba7e65eaecc4bb457a0eb2ff1232d3dc13b64f98f5303b0ccb63a208951281117438b02dc6e5fca8519e4
- MD5 SHA1 SHA512
Mod Menu V5.87/Modules/adx_adx16_to_cdd.spimtx
- SHA256 50bde109113ded1e97c79dfdcf6db7d2c14105fb758d6803f0fe3e13ba333367
- MD5 734e5f39fdc3e2abc758f8774cbd2c87
- SHA1 ed4409c78f5fffb6332830107ad7a9e3901d209e
- SHA512 cf0f2dd8034f7f5a5a21d41730a82b6f8d1cb1715cdd321f6c40a2fb92c27bba743b7797aec93d8a49c933b24ed8e1f7d32180173033d5577f9d4b845184f56f
- TLSH T1F8A00120E20100CAE3AF4822080E063C030E0826AC0828809C8FE00E8E82002CBAB045
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/adx_cdd_to_cid.spimtx
- SHA256 139f20c11255b59b4278ec9059f473f4a6d819369c2f951916005ab538890757
- MD5 3744b3ec8a9828eeae1f2b00d0c7f14d
- SHA1 41d30e4b652830825f69985ac5f3215ebbc4bbeb
- SHA512 5075792db44a3291e9198479aa2bfdcf891e7161ce92e18b5a08b79d07928571a78d15c16757f09f8705cc9d70d05ae571d14007ab44ebade9f94636cf203b0f
- TLSH T17AA022AC0B0E38E8220F230C8320CCFC28C8F0033C0022CC2AC8300CA300B0203BA8BC
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/adx_cid_to_rle.spi1d
- SHA256 6c23959b76cd00896bfc9cfa55ec13e5601a8cc6296a9790d3d630dc359cf438
- MD5 4061257aaf5f847dba1b652d1c213204
- SHA1 b1474c9fc95347344e577e88da6b605b9cd7d01b
- SHA512 637b44abb08e6c828224721471a01102364a79f0c8dec156ec8139ee66aece3e3cccf777eeb6084b9f8bd35af233d9e5c010254e7f856f0d245aac74371031e6
- SSDEEP 1536:55qvV281V6l3Gaod06OVrCiDkLYhtsS2e/AN5omT98ke+Fbvk4/zv:n0Tt
- TLSH T1FD9310432F09A294E57DC5F26CEB1A9ADA35256388957848F2CC5EC14FB22563BCFC1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/adx_exp_to_aces.spimtx
- SHA256 00c294df5f173f9b01cfb08bdc72d22fa552cd133aed2ba99b1d57d3787df979
- MD5 da152223559aba8f3ba714f51b736870
- SHA1 b4722410c87913a7ffa5988d245fb12f5b08bb9f
- SHA512 e4698afd3dd33cd0d77c89a776b982cff8690891063349797ef9aff2c50296555446d0b0c3ea466694f07c3cf3d52f60a00c2a8fa3a063b47afa9efe00e44e4f
- TLSH T1C5A011B0008EC0080C8E03008023020B288822E32B2220C0BA8AA0CCEA220AA8E80C0A
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/logc800.spi1d
- SHA256 674231e68bf1036bb466d310a003608cc8497a90a974b99ebe480486d1d0bc79
- MD5 a7d0092354cb82dbe616131e914948c4
- SHA1 e4a5056dd7d100c0c5331d24a9dd70db339afbc5
- SHA512 7b8033bdb44bde5fe2bf89def0aa8107030676d47d9d1000ad5fcca8ed614c6ee69f5e34edd4762bc78a0bb8de46eafa17bb80fd4100dfe5406354548fba6eb4
- SSDEEP 1536:2mVyImPxMTPMJ6erCEBb6LESr9qkjRCpwdOP7Y/j0Lgofnxl36pBUQeySgh5/SdU:55AMxCvH8tZ4YMOg+RQiem
- TLSH T1BC8411972748A6E4643CD7A66CFB0A9AD53124A35DD4688CB2DD4AC08F7325E3F8F44C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/logc_to_aces.spimtx
- SHA256 89be053c9c92bfcd97758b2d347452f9c728531957de08f8247d4f1e11d3cf3e
- MD5 14034c86967d64463db262e1345124f0
- SHA1 a704bf4f1eee57ee143ca86794a7ac858868b8ea
- SHA512 2157f81dd80b20e8d7d5e736de62ae998a1e9f5a1d7e8710c3fba3ac8a84200f7c6f68a25eb24bd609922c091c642bfc6648abcf342246b694effc71c2e22bd2
- TLSH T15DB012D90B4F1151DB4DE308C42F0C2F35D714250C40C508144F2048E167E0889A3804
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/rrt_ut33_dcdm.spi3d
- SHA256 d10eace7a973c870e6e6e586327cea26596e7779bb5fe714fd39f3714c49da85
- MD5 365b1e67096231a55618da7f6c938ad9
- SHA1 4701f5d3b5b1e46ed06ccba54762be290771c5e4
- SHA512 8b1e35551d393486639ce02500cdfe271eed1b9a2065022e3f123923a448c1b46b05d7800e06b3d82033b19a283532aba799abfb12e00905f946bf7c61393ca9
- SSDEEP 6144:vgx2/sNtk/Hxqomu+Og3GbY4cH8vlNP7FoS4cz1NnOJIbids2Y9ijxy21C/Ax1qZ:iS4gGyOXzPkfeyPAkXD8u
- TLSH T1D335FDF9831C20C83D3EB7A8CD372595F66AB4771924E45922ACDCA1CA0EEDED761D04
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/rrt_ut33_p3d60.spi3d
- SHA256 bbf0457c65122860351ca970ecc7492683ec16ae36ae61d444b8c76541b443c6
- MD5 a965ce89067ca3ae0cfe1c56e5fd6ba8
- SHA1 471ae53830e3a9ca48538278f344f038c34f4b77
- SHA512 3f000d9424bcd43196aaecbf31cd0a88ae70c2f5ca0a4d4517cc7814a58236c0453c6462675fa5c7f3bb0186e21828c7842dc772d71bed65b335ed018d1126a1
- SSDEEP 6144:ZmJEHCFwjuI4VY8m61O7ZMlKA8a3//AiNkllE/61wju31gQjAMyge/CMCkU7hkwM:hykR1n9GQbfnGFdf7
- TLSH T13205BEE8875C10CC2C3EEF95CD3B3095E7B6A076393598661FAC9CA0950FE99EB52C14
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/rrt_ut33_p3dci.spi3d
- SHA256 f8e48ecc8ff05b29dd8d176744e81cd4941f8a2546c1e81a7fffe946eae24782
- MD5 7042d61fec623b61936ea7fa2bdc2287
- SHA1 b65ab088b22ce24ab6877dfe5791cafe937e322e
- SHA512 7889ef9bf72a989d304b99ba9255891b4e29aec1330569d5a64b492f2dd3bf8d7ff2b4d629921a8ebb45dfce00b67ac74b4e83f6b84856038f4a114afe144880
- SSDEEP 6144:VpU/KFw7mhMQtTdb735183lUic9yskrbDFB90fmpKBOvcTO4iZ6amGLugxmgjsZk:oCL8vD
- TLSH T1FB05CFE8875C10CC2D3EEF958D3B3095F7B6A076393598661F9C98E0990FE99EB52C04
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/rrt_ut33_rec709.spi3d
- SHA256 6ef01239563d7284ec1351378f14b6a3e0baab3485ffd0b2b15ad799e4e61af3
- MD5 87963f8a974fa6b7ef4db812b8a7c51a
- SHA1 124f1f9ae1ea190aae806923100601239afcaec8
- SHA512 71e932c6a251c213737b1f14437383fb9da3d24caba3fbcab896af4c2732d2c9e67c8f1a8809a212d45209c40bc749f8dd29ec2e5731ef4eec31ae8aecaa3f66
- SSDEEP 6144:22r8h67Wt4PTOneGskIv75TkN4B45JM34jcRA0mH/Qf45fla5Yr4LabM34VmZOZb:8jcRA0mHof45fcJ+8y
- TLSH T1D2F489E8865C20CD283FEF95C9373851E7F6B4B6313598661B9C9CB0590FE99EB63804
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/rrt_ut33_sRGB.spi3d
- SHA256 ebeacba2da78cbe899da46abff2a37becbec9fdc48b398993900a7a5f749cf42
- MD5 9a4bd6f164fe6ccb63b5dfcfe35f89c8
- SHA1 ad0f582792a6db8b7ca014c43c27139dcd7e0a85
- SHA512 718a7a0e8c55af504fcf6fc9ed9a74ad75caeb5a13d4863e03b203ebfb7f5078b2541ba5c8f1c2898ec8baa518a28b4f5d35bd09d5e1c1dfbc7fd1870b22ea37
- SSDEEP 6144:oaLsFevgJWz3Z8RSMrRUtAZ3vb35X1TBUECzI52jDbeTNx0cGkwlo91dzl2g/zhb:B4p
- TLSH T142F49AE4865C20CC283FEF958D372851E7F6B4B635359C7A1B9C9CB0990FE99EB52804
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/slog10.spi1d
- SHA256 f93071488057efde4f04e1838be2361c0b3bea468d460cc8db8770488ee01a32
- MD5 e802dcfc5d336d9ee3c1fa35c55e5458
- SHA1 33d5be5e9ff720ae81b40f3a9823a6ddb781494c
- SHA512 23a35883d1f29f82d659a50cae1bb13815b401211b04971fccd59ba6c4e167c5345c5312899ee048ea73945dd11fcbf657051cb9160da50ff403853cda7e5b38
- SSDEEP 768:5C7TQFzuKUG8DZ/f3s+5sCXJvr/d9xNrQMOFV:I78FzZUZDZ/f3s1C5jHxNcMOFV
- TLSH T1AC2333932748A2E4653DDBB66CFB1A59E13114674DD8688CB1DD4AC08F7325A3F8F44C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/slog2.spi1d
- SHA256 e9c8a8287d175413bb1279a8362e81414b2c63d61d24e8dfef9474755979dd68
- MD5 c7a243f4fe044825c567c592fd26529f
- SHA1 e3234a4b8b06d0f748bf64f0b7422644b5dd7522
- SHA512 5b0c60b1239b95cefe84a19089cfb600b09732f890625cd6bc581b9e19aeef152b4b41e3cb517b3423024f91f46609bc4bf6fa840df51885b7fdff88cd1d4b1b
- SSDEEP 1536:YMHzbzrVArPm1b7uVhrHigQUXfKWTU/NRELf7/7aTf2Z8CDsOKJfC4S8ZI4H0pIg:W9WO1n16O9Z40GmKz/cjsAl+hhsM56
- TLSH T12F8434972748A2E4643DD7A66CFB1A95E53524A35C94788CB2DC8AC08F7325E3F8F44C
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Modules/slogf35_to_aces.spimtx
- SHA256 599efc761e1a505c591a10a1729cad6c0a41cddc045fad1527ebb7840d95699f
- MD5 023867f1f73d404a4cf78f7c4354585d
- SHA1 33d12744922426115793327b8ee504a97784cdd3
- SHA512 38be33c6b4e46bf8fe93ac23895e9929af00fb4c7b966bef473903381bf49ab16e2a401504f2aa3b4fd4b22f4e7893e0d67394f394fb6905132e1bf381cb9b2f
- TLSH T186B09BE9024D4455300DEA1941351E59019075354FD461CE41659D56A57772D570D41C
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/slogf65_to_aces_3200.spimtx
- SHA256 276fe60cb7260f7e25828d3d00d0c7527108a399dbb5364be002e1bbb439ff5c
- MD5 3081ef670005144146185f3d111e6a6d
- SHA1 e92e2536431dc035bda4c00b078e6a546162e6ad
- SHA512 6e27aed668ef9e7807ef4206809f5b5a65f31f54cb4c77b209d03a9c1fcfd43abb9ae4a5efea9e26c9ab4a028fca0fa4d8b94a65e272c066536a73ef501c0736
- TLSH T13DC02B894A536CB2D5CFD3104835011730EB30732089048023D53B88C8F3DC0CD036C5
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/slogf65_to_aces_5500.spimtx
- SHA256 338f0692f7f4f596a23396ea9cdeb828e5436d4014326be484ad2875404d621b
- MD5 f05056bf708ad44f73e7904f1fb93a9f
- SHA1 99822cefed11251c9535ca6914a06e996f1867d5
- SHA512 590dc3d94a2b0e89e8045e1c72ce226913b7ac561308f6f16d6f5a27a4b01c9dcb4ff70fb0d4af73bbfbb21d671dc44cca9c42aedc4715ccde7438ae3f1d0e77
- TLSH T1A0C02B70B11044509E0D1F1080270CB4D0E8441A711101C41890186DCB330001C0B104
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Modules/ten_bit_scale.spimtx
- SHA256 74fde027e0939a957155808bf18ee6a3a0ae0cec9bfb3e4f3d580b0fd87cb8c1
- MD5 5abc6795c1b9dd391847b4624b703df8
- SHA1 f811d14798496a0be19d3c850a8082ca00294765
- SHA512 6fb6356498033ffbbbd4201aec515581822ec4d73543157605942d13f9aa81712db24e96c9f10302bf6583fb50534d57873194c67298ec18845a813160db1609
- MD5 SHA1 SHA512
Mod Menu V5.87/Scripts/actbusy.txt
- SHA256 c7d43bc9c4fe92d5aa40d4b255b951c8a5a9363c04bb97eafdf6233f4874d0ed
- MD5 aa708714ca13dbace5f62786226cdb71
- SHA1 21155e1608d8decac7fcc3982fa2af53d2adf1c9
- SHA512 c0dbd01ec3035f5b1706552a097dea76e3c30a76893d6fcc539464d8fde3858f9d8271ffef666ad7b99eba7d4402362ef207a2f2846b4b345f8fd7a13880807c
- SSDEEP 96:sHk6/2MMr2xb+LN1yxaekk2ySutP3dvZ26UCN/OCOgM40kAvpOi3HUbAU/2CxGE/:6V02b+LWx7tP3dvDN/Z5jxGEqxKroe
- TLSH T140620B5F38655D2386F08D2B58BE9DDA5FA0606160FF1CEAAC50F36C848CD24496BF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/actremap.txt
- SHA256 c2b67cfac752e75a79cfcfc72443bf7056f7e769489f638963788dd2215c549c
- MD5 f83aee55b22442f691bc778dc8098f63
- SHA1 bd6ddb194c4f8085c1cf7a1319bf9d11c041e7da
- SHA512 dad3a988fe85414888061c16c78dcbce275161d8898c13e12a10db907037b9ee67e0f17c3e994b201e7b5cea88f474e418332630a8c521b54c79fb72189178c3
- SSDEEP 96:0Ha6jb1v46FeqqJbKPJuZLJBKLJYq9JfJNOAOpqZJLJ1OkOw:b6X1VWJbKPJSJBKLJVJfJNOAOkJLJ1O8
- TLSH T1A4A14E4B33CC66A892B32253D17A4CC5052FF415497F64F8EE56C4E8E6283A1723F95D
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/audio_options.txt
- SHA256 f379f2f36476831900d165eba21514d0c3fdba1a15c7306bade0c7d4ff44bcd2
- MD5 d9f440fb788a0c9d29f4e4d1e7a0313a
- SHA1 0f4c2b123b62727c2acf64a3bdd18581d078e000
- SHA512 5d86a9743d1a630f84b4c932e62e13665a20d43d16709d00e64f4e6f5d35f273436165d0bf239986e27dafcd32eb926e7b3ddde269df3f929ecd6b8117f88dee
- SSDEEP 96:GQ+lBQ+0y+Gqy+Oyy+9y+iy+Ry+Py+2h6y+ky+U:s9yhe
- TLSH T1DEA1AA933A0771B75A8B281BA275DDC69FCE104340DF0DF8ADC809ADD149C5583BA7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/bonus_maps_manifest.txt
- SHA256 7ceabfaf88ce7a25fb60adff6eef71cd9ab66cb5984c0d2d510318d493b8e61c
- MD5 202c4a9d2d9aca6da3676c9e54b5e2b7
- SHA1 81a2af1ced9353891d9df68b79650c62ce0f03b4
- SHA512 8a71d84c64ed0e17ea2b1f99dc7d338ca24db5429594bc128b0c46543b2aa7246ddbdc53f61fd6af6020c801b754f51cf96054f7e8f6cc6a1d6970f247e41c87
- MD5 SHA1 SHA512
Mod Menu V5.87/Scripts/bugreporter_defaults.txt
- SHA256 2cb6de377ded7f799694df38f83c446d1fd41e61d6eb6f16008072ebd4933448
- MD5 ccb652b81adfaba6974e3887b3df800e
- SHA1 c25c4857ff14fb3b73462a3e04b3daa6286c3564
- SHA512 0939cf2a1d749bf34ea34a1ea23da0c05e6724b40d00cf7451fbfbf101a69f1a9dc39652a85cd6c3b3dfdbcc580cda83896c16ba50e6fdd8156e8f0ba88af27a
- MD5 SHA1 SHA512
Mod Menu V5.87/Scripts/chapterbackgrounds.txt
- SHA256 9bbedd3e085bfe5c469a54f732589813ed6af1d05b64f1bf08fcb0fb90c52dc4
- MD5 1e81f5e15466f87fcf870f75080612ee
- SHA1 71b506dcd9c01947203cef8ccb7095b97f35dce8
- SHA512 c850f84f453c0fa748c929873a1d23f74856b52bcae15cca82577a42f42bb437cd9a59c48a51c0e24544fb29e2968d1f02e534cca76cb3d2a0151fc70ac1b22b
- MD5 SHA1 SHA512
Mod Menu V5.87/Scripts/clientmenu.txt
- SHA256 dd775b8bf839a2be6e8c62be9effde60b6788b980001bf20a5655acfb53e6ac4
- MD5 d80932b6bb50903f23b5a4efdcbf41f3
- SHA1 5a4691830d5eade69feb0c94f0d3adbbd56873c5
- SHA512 4b3dbc0ce19d943ca82dccb06f865caddc81edd223becf13aca503a14e3a7df7982ed2e819414bbf2ae4e60acf599fe9f6c827161bd9773a9da29364131efa55
- SSDEEP 96:h9x0KtKLJoAyxcJx3z0Mb6vlAlilylrcEQw3RQdQCQz3N/3f:LK9oAyxcJx3R6qcE/3Rc3U3Nff
- TLSH T148D1261B7F9D74DBD3D1F94B02BC78C4D82ECA89126D05DBED526C28C4E4A24413E6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/controller_options.txt
- SHA256 828a5fb1b7677e40f6bfbf613e5b6e90cf6a3baf051caa7ffceb64f61ff7754b
- MD5 a300f751268f4b5245852bbffef58ee3
- SHA1 fa4e46b1bb102f1829718a117178fb276af711c5
- SHA512 68ff02e38a447010b1458dd6fd996090fd2e2b68c2406b1da8c99114c5251803c5cc31e6e0d3f93a3e4f20c73acda0ab7e9d14ade066acb6264b5ecc06017c9a
- SSDEEP 48:bngsJsVvsHa0ysjThsjJy5tM3FDsL5+CFDsL45Qs2L3YsuYMUe/lIPIR1ldt1XFB:8IaXy43FDQJFDL0LIDisxNq2cDtHt3q
- TLSH T1E5E11667396B23A613C7248F5772DCC15E5A928340DF0EF67CD9AE6C8054E041A6B3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/credits.txt
- SHA256 0c1a72c59da09f61ff3d3011fa8a798766ac167452c19bd4db092715b9d83ace
- MD5 983d4bdae61208bec7abc5b3ca90cfa0
- SHA1 bb8ee1e7a573f534296f27c1765e86b2485634ac
- SHA512 8350359855d2d793a26f1b1a80cc4f5cd495875d56f6a2882b014e44d9aa2503447c9f481ab898f978bb68186f0e0894d7475fc5ef4331dd7bc768b5ac69d199
- SSDEEP 96:LJCt8psGFw8NUnBNKYznm7z7yXYWware9jjz9U5UcangO83JQqwSpOhlGLOoZ9aR:0tR/Znm7fy7eX7cagHkOcmV4TFWm
- TLSH T194024E9353E4326FCBDA8C91C635CFD0E7641652930E0501B86EBCAAD5A97F40B4BF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/damagecutout.txt
- SHA256 fd31b2f7d9d0fcacf36a14ab0791f3db99d4c6d3474f03301acbefc4543d379c
- MD5 e64857cf92b6565dab38838a2e92ea67
- SHA1 c74ea6e46de465f5f4dc62af831fe83d8d49c6c8
- SHA512 bd2cc635efa539f6307d83cb6e5960ba214f328e3530ca9e24d63fd9b666f38577d7c2a8eb32668099e9859010ffcf1391a04ee541be66c8be134d9678c9dc9b
- SSDEEP 192:Yg5r9O4uGiNKptEDATB0zdEiA4ZVSLBTolbobpn:Yg6G+ATB0z5AgGBThbpn
- TLSH T130A2E03BB389087F1E8A06D7427268E1ED4C4B66409F3FD1FC5D551CE0E5670BE2AA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/damagecutout_ceda.txt
- SHA256 92a628450dc3328ee33e8c7437112587840cf860c526216930df35f0329729a9
- MD5 f06651f3af4548e13ca1c6c469cb5ebc
- SHA1 cfeec9e81fa2a404f3ec48b36c62d864ae3245ab
- SHA512 5875a20ea0cf9e050fd3db5d209558397310db6c7adfe8457dfd09da9c506c2abbefb7ed902e5d1b347fb37add9e34f770b3416c9f6f12379436662502b722e8
- SSDEEP 96:hQxuG58PpXRXGKJGOpXQ+X5oJ1EpXPyX5oulopXe/O2oespXVSI+V44pX8xx424q:C/5peniDATB6dlEkA4ZLQSBdzrpY
- TLSH T1FE42CF3FF34509771A961AA7C47154D4E84C0666014FAEC2FF9ED63C93FD6B0A6AA203
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/damagecutout_female.txt
- SHA256 3db9c42023c211d8d6609256fd618b725d03b01570f61a8e4d295345d2677db8
- MD5 7624c8d64a6a5ae9d8bad827a70c637a
- SHA1 0b2418bc25521bc56675a056185c14919de780e4
- SHA512 27ab317f449a40308de3b0e2a55425052d98942e97e3ea1e94ab8ca91eaee41dfa226f02e4166d64a7a67047490ad2a59a8a2da9d64cf0b28a77bef1b99c478e
- SSDEEP 192:fN15CX/5snzvfATBxzuE44Z7KrBTF7BHMX:fNvJTATBxz2g0BT3HM
- TLSH T174A2DE3BB389087F0E9606D7427368E2F94C4B26409F3FD2FC4D551DD0E56B0AD2AA4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/damagecutout_laughriot.txt
- SHA256 1822c83bda2d41e446afecb3bbae8d7459729289202999a07d061e747ac0a3c5
- MD5 b00c3f42b5a7cffadf464645ab72604b
- SHA1 cc5242ef25b0cca76c23ed2779bca6ce65b0eff7
- SHA512 46c445d4544e94d2f082dd30e19fff1eecb9ab60592594b1de3da8cd207012184e91dfed2777ef9a675ab9512f12a01d51646a12242f1888b6bf9931ad2456d4
- TLSH T1FEF07D3BF3091C785FC65557047258D4BC5C4669425F5ED2FC4D452CE0E9470B96A382
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/debugoptions.txt
- SHA256 11e3db2e9a003b481afa33a52061f312f5f7020eb73bc75fbc93130c11eadd4d
- MD5 b9c5d7ab4b5dc6c7bfabfb4294171d00
- SHA1 a5be350dc18b5414b66aa8f936cd95ce2d121c5a
- SHA512 76a39fd7bbfd12f53a55f8ee76bcbab1b435dc1b709786e9fe3c57678fbff81dc067fdb469df6a92e85b840026acd377dcdba04959dcde1d07fb04dda1f89bf8
- TLSH T1DF718E173BBD244E6BF83057447874C41E9FCEE6411D06EEF926A53CE025A20196EBF9
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/game_options.consoles.txt
- SHA256 de7b58472497a377e40fe71a835108e7af0ac69754582907ef1b624da82a46bb
- MD5 2d1a8273d27d4f581e6ecbea728f8ddb
- SHA1 4d90c143d5a57d195d738739093f917ab59ff4a0
- SHA512 bef55778dfd6b5e141a28692f0899fe9efeac4e4e15248a426bd3536875e3378ae7603d2fc0ce9069c50f35100e1b81473922b468c6fa7d261c11668a665379d
- TLSH T1DC519B9377456CBA16C7241B9234ECD1AF59B212509F0EE8ED86B93EC46CD01962A3CE
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/game_options.txt
- SHA256 9b42e854cf0b560e54e01d3e3d80fef742bfb356771d6b13cb27596eaf2aa3e5
- MD5 d43dca476fa1fe879914ce2a55fc22c6
- SHA1 925e7562432499fee500707a4f59a8db69111c6a
- SHA512 30dbe97b5a967906b212b0358ca27d5b31294ee8e17254f1dd0209f99728ec6149667b5a9710056146c7ef594f692b594881988d2675752cc5e0aa6608b715ca
- SSDEEP 192:wcdaGTdSsb6voWAyAUuYi49KrJXNwEebIh7fcZz85SMRaNtxqMOdOsOA76AC7Gd6:wMaIQVmh1gNOdOsOA76ACCdUH
- TLSH T10C722253BB09A56E918F205BC631ECD55E1EA04200DF4EF8FC84453DE268A519ABE3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/gameinfo.txt
- SHA256 095e213be631a498ea4423f9e9d22ff18b3e59175883e075a1275da2a0f5b7f3
- MD5 9bdcb8e557e3b582593ccb2c37744512
- SHA1 5b75559477719736d251930c22b5cd4e5de457dc
- SHA512 ef38a967b8c11c5c3cd1602a4324625fbd4118682bd421c36d4b2ee0b30e95251795b8caf08d4f7227768badf1d4005e458d54337bebad72fdb1a287d2c3a058
- TLSH T197C0226F2B0A8A3707E980740B227180FCB13346000B560BB0E014A1B05958B60680A2
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/gameserverconfig.vdf
- SHA256 2987882301cbdba587bba54be6b7dc8edbcd865ed5df87c599478ef34c1295f0
- MD5 d884c4921502f2d1f4564d2d48af52f0
- SHA1 9aa0b4c38093ffe4e92c1bb2478805c424e29c35
- SHA512 43986d86633f403d672d3eb618a449b2b2a73877e2dcecaec0216f5a566d64e5c0cb2951c6be9210016ec676a6edff50cf22e54d8508cda7c92225f23a2bf88d
- TLSH T197413BAB36821D8ABBD35417D1345CC8AFADC5B680EE8EF5DCC96435C02C220641D7FA
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/gameuianimations.txt
- SHA256 02c44cdd01232badfd1e37ed44aa3fb343c330abb4c1a6128d2c8e85d0c02a5a
- MD5 4316699e066ce9b6022186d89f61fbfd
- SHA1 4919e3db70048948251675788406e0dd7c184a33
- SHA512 110a8ff761818d9458ba66d67dc540d35224bbeb44e127d8056023ba19cda3a10d2ea3fdd84b8db1ea3fe3a8c3974bf99599f32595ee9d8b09b30c8a65b00f31
- SSDEEP 96:4fDt9oAo1y0d0TG8twCGr2BTtyiZI+MFzMp4nsqzAlncB0aoH1Y9H4ib6SYvP:sDt9NoeSq
- TLSH T131029C5B0C4285F4079EEA3D43BF1600EE6624E72A1B3D9939E60F8E7C49484D1BE76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/global_actors.txt
- SHA256 3d90c47f23b561e206a5d0b8db39186e9586abec2f96103793bc7a0b32d78dff
- MD5 3351fb3b794cc1e7251ef96519580d5f
- SHA1 b0288f611aa2e07fa2379637dcbcdd443600dc71
- SHA512 658026524007b23d03a7a53d33b4cafd447dcd903d001832f5e8b3c18fddbaa7d2e84d6f115e68f571c5e3d0651bfec06098d5013723d31f49976ef58a493710
- TLSH T17CF0C82BCDC6A5214E7A9F8C82F4CCF4881706006D5F84B32819DC7CE606BA0B0CEE0B
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/hl2_scripts.dsp
- SHA256 5b8ce8bff444c3bb101fcb5e8df657caf9fb13f560a1c1242f29e3e9db9b8c65
- MD5 9c86fd567fd7b54194393bb308c8445f
- SHA1 eec1f965c0e28bb19d72cb7eef201e98f51bb688
- SHA512 1beb9a03ad522efad2354d772bb5c5083210fd82e187670e253a45c1ddb4bbdb6b4bc96d335ea9e8c295e4aa17f5ae0faca66d019534f915fed6695a3d2677fc
- SSDEEP 192:RIa7uUXZVNLf+X6b6X1+zW/MJ+ia0nCar94UpDDOf3G8FCAqN73i+in/kLJU3qdh:RIa7uUJVNLf+q+X1+zW/MJ+ia0nCar9t
- TLSH T114F15BBBA401A31C62F62F18AB4BD434B853257E5B815B0EEC74EC958F7156E86803CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/hud_textures.txt
- SHA256 c61a9babfe891fac7315ebf6c34ad33e25eeb1b0c7c314b8dc2fa6ce80dccd9a
- MD5 a4284732c877cca69858183c19bde4d8
- SHA1 43ba0aead29c39c1d910f1d0eeeed44d0ebeda4b
- SHA512 62c0b1036bb85e5c34f4c4b4f4bafbf1f972cafecc9170dbdec28270a09d268997500d370acb5b21bddf09b828994c2ff2edb8c2e570e61dda3522162c48d296
- TLSH T15E41A527338EE0ED82EE665B453958D0EE1CC75A624F0BCAE41A880EC47588167BD7E0
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/hudanimations.txt
- SHA256 e8b52bf80ed56f34b1fdc8c3eb8eba4ebb8254d7fc3fc872cb225d7f1fbf3cbb
- MD5 742c4efa73515e1fe8a1b7c455c49f0f
- SHA1 0fc9443eab79ebd2f9e678269ee794004692b554
- SHA512 56a29262800756dfaa04e44712ac98d13cdd76b890403df9d2c0ebc8836f4aa551cb3d4bec0dd5b959d145ff0012df594e4c4dc265f8c9e7b3c256dae007263a
- SSDEEP 192:s1a5t9NoirNytpjjAkAcQvOeQXCoQzCbzLD9iLcfOCh:s1aPrIXjjAkAzfQXCoQzCF
- TLSH T1EB12035B1502C5A44FAFD83E1BBF06352FED159B888F2D8674ED26CC7A1C0A8C168799
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/instructor_lessons.txt
- SHA256 f42a3297ebf5230eb4fe9a45b9982c7736d4b5d737874bea8bce7feb7f599ef2
- MD5 c0e5ebf624378601a3872fa5156bd389
- SHA1 2bb682004e4237dea6adbf60b3a39a1cc3429a18
- SHA512 813a125d8d8faa9b695c0e965c51f2bc8387445c217825b2fa96483152a3bb38cf6ae91a11a65754cce5262122a26707bffcab28b3bd8c4b2b1bbaf80ba15c4c
- SSDEEP 96:zYOTvd+oG8BPzV/tidHEsonj6nvHEsonj6nf:zqSJ/tidHEso2nvHEso2nf
- TLSH T19B819A1FBE4E60EB45F9C56B157CF2C0E128E2B112DF59E1B8DD806C962C21542BD3C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/instructor_texturemanifest.txt
- SHA256 e66f88061fa1375b0b4de7b1623b222a5c019d6230f6896b03aa05ced411fca8
- MD5 c4439d06886b34b560c66719bbd3329b
- SHA1 be9fd8b9d0697fe428d07049bfbfc637a6be1ad4
- SHA512 e246d0c0d32e6b4d29ab97003bcabba14183f469dda513d88600a133543f59b306b64d53d150767dc9d397808e176e44772517268ead14c1c6848215b0172e9a
- TLSH T142B0924D20B5F9EB0F714E801014189BA40461CA881EF1E57AC81626D4EBD92972D69D
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/instructor_textures.txt
- SHA256 4a7f2dbcd17080ba0fb820e957078ec18d3303f38322287a1839745045bf54c4
- MD5 dae1deca62a3efddf77042cab4471c41
- SHA1 8fa3a26738d65a1e899af55a7fc648cb4fa04d75
- SHA512 3120b09ceb097ac563757304684c99e8615ffbaf39c2db9997916bf91ca6d98f2d7d082a0ef63a2c4df250b5d5f1b896e84c552a60ab5ec95765e6a2dc4355da
- SSDEEP 96:VEiOyhrhbFQD28Y8KAMfVYRYsYcLlY4Y5EpAY3WM4IMZ77MnM0MvAaMp1l:yYtpE9bpkaansODOpAY3W0+H0DEALp1l
- TLSH T151A17323331EF0DA4BF9954B843828F6DE0CDA5C451F59D7B599632DC4B8C4A2AB8BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/inventory_structure.txt
- SHA256 c1bb6d3a436956e60098442152ceae93baf572dd871d22b12a3b79bd81ca24d6
- MD5 f3159171132e5d091bf76741a7bfaa69
- SHA1 718e47a05f643349235bbbe004afb3c5a8dc17da
- SHA512 c2cef9c2ec1ef4026208650f6574a03d078bbd27c1a0ca2d3b55656d1762be28990f10ed9c4a246bf7a499f851a76f2f27698637ccf980c997f629ad2cc9c965
- TLSH T15C41FFEF775ED15F5AF2494F11B0A6C8280DD46B501D44E8B9CBA8E0C96D3502A7AF38
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/mapautocompile.txt
- SHA256 b968d9e415ddcb4301629fe51316dca067824004b6773b362a1098b56d71e63e
- MD5 c582a0be516db4a9016c20b72591142e
- SHA1 d7ac4fbc6b36823b06380d91da4d95f5ec7fd830
- SHA512 f5824efe8c404391b79805339b73a08b929d061602817ae6476052eef92076679a83324dc448006358d34253aec415aefb27a830069fed23da1eabff345cd6c6
- TLSH T1DF41279C60E0F409DDABC6BA80B84767DD7154DE73769D25E90BD91125F0340236FB6C
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/mod_lessons.txt
- SHA256 0ec843e06fba77bf6d84beee623c3ae44b8090f781ce0290651d230039a7b3ec
- MD5 4e03ce4e6a5d7e30c5fe348dce7abb1c
- SHA1 f09d8a45a68c2d85fc2001cf7e41a93791c68972
- SHA512 1221722fbcebb2219e0aa25a189b76ae1d5dc47c47acaea26b18d239d3f081f2e7999e78a403e3050874f4f9de9a86acbc91d8be4c718ecadc44b25de20ffc46
- SSDEEP 384:zVNilxi2sjyYrL8ZKUGDERZof3rGZy3a6Awzkp6ICgoMqUweZItOle3+8clQzgr9:zUoB3gGgGv26nMAnefz
- TLSH T192339A9FBF4FA4AD42D4949F4A3891C8592CC2E1406E2ED3FCA6716CC06D719067E3E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/mod_textures.txt
- SHA256 9e23ae29717a0ae0f0ab98065118efb56d3bf23d358b35dc9665c20cd0d0c566
- MD5 6bb18a4a445d115893090195a090708c
- SHA1 3079b332bb45ab5d2ce84ac1ada888e0776ec1eb
- SHA512 925f8e61908fe8976659b2b4bc109808596ce3a98ab2cb524772cd41c71c9c0ce8f03ec0d06cb005a061c4c6649e718373c74713b1bfa1a646f4dcea16dc4d00
- SSDEEP 96:VEczuM1QJZUCiZaLCgNT5lT5AT5oP8NbknAN3FVEPCW5t:rzu9KCiZaLC8fyKP8Nbkna3F6PxP
- TLSH T167E14C2B378FA2CC42EEA34B5939D4E0ED4CC889120F0FDAA989421DE4B5D54277DBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/motion_controller_move_options.txt
- SHA256 8cd0ab62489f55ad822e8542f4da79a6623728f89664cd4b9a8c6e21c27bdb48
- MD5 98ee581e160ebfac7faa16aabb91afe7
- SHA1 9cca36c0e482e84917020f5b8dbb7ae6e83e48e4
- SHA512 6057f3dcbd80061a1c14dcad46e19381b6f2a2ceb830bf6b471d2739d65381848da1f36f368c283d08c85c7faca0abf8c8558b81260ba7a30cb389e9d195458d
- TLSH T1FF41F377391B93F203C7285B9636DCC65E59408640AF0FFDAD895E6C81A8E14156B3CE
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/motion_controller_options.txt
- SHA256 4d330220552d4f36c364304c0848d19129dc72ea4212de65e7a69d3837f9c2c1
- MD5 d49ab9fce85500054833fd30f5cba43a
- SHA1 72aac5f8b0061d7c98687834e9752947f9ecfbc7
- SHA512 2777455032531da71593fcd30deee05c885e3ea2bd5b1bfae4dd2d14879e64b4c7fb853b35fe419eb57373e2431dc8adfe5ba6d52edfa98e9fd8a48094495d4f
- TLSH T1E781C36739AB625617C6248F5372ECD06D5A528740DF0FE37CA9BE6C8050A081A7B7CE
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/motion_controller_sharpshooter_options.txt
- SHA256 1796ac70678928299a71a94dd54fb7bb3280c90d02b160a68c4387daf7e73fed
- MD5 df252797581bddd4a6ade482558043dc
- SHA1 c3e9dfd93816cb301094f365a68f5123d10f6c65
- SHA512 f0498c60ef0de4a8db32f17a7861e783342d7e4865a3b69ece239b04e77bac758c16a25c76f19592f649f4034dc6d33d8c8918ab666d16c01d089db867b44082
- TLSH T1DF314877391B92F203C7285BA636CCC65E59408740AF0EFDAD881D6D80A8E14156B3CE
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/mouse_keyboard_options.txt
- SHA256 391fd5748d1ce64a1fe071e46c3847e7b9180173518df8914e7dfc17e03ad004
- MD5 6f09e7acc76b4779de9ff84bbfe6691e
- SHA1 e4bdd1b3b0e26b5bc598451201f7040252de81b1
- SHA512 0735930d858a796acaa53e4d1530320b17a6db8eec5b79a9028cd0ff1e836ac5a0180f87a687b8ccfd91c1c5b8f602263c01f2b4facfebf71a63c99e6a826230
- SSDEEP 96:/jnwSzmxpLe4UlBUzRCO9qwRzAKCAPie5Ken+rAJMg:/sxle5cVC0RzA0Pi4KeUAJMg
- TLSH T11B021667396B62A623C7244F5376DCD05E5A828340EF0FE77CA9AE7C8150E04196B3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/plugin_animations.txt
- SHA256 9186c7ebc7307df131907a63cde2000f97837d796d95b7623e904ed8e3e90d8b
- MD5 620da2ac16f8032fb99b161fa4ae02c9
- SHA1 52f83f5e6337974264fcb52904670deb60c32c19
- SHA512 1fc9a7242af7686f6ca0d824b5e64d976a4d0ed4e25db113de710661a6777356b4850093d4f334d43826a15b0d2e07c94c1f82f47d04bd856e150c53e152e97d
- TLSH T11421BB8114C0C4FB17674A2A697D7B846B3200D78A06B920F5DE1F8D9A09136137EBB9
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/propdata.txt
- SHA256 f5f2c844590f79ec567fecfde6c2e58669bf599cacd5f7bd0359969d6b033a1f
- MD5 0c88de105e9839bc556f924bc6373158
- SHA1 60eaaa4dca09a6aab0e7b14af7111f951bbc722d
- SHA512 1ce67381fb7684e1cdac1be14567a0e8e8dede800da5521704fad5458e3b9c1957cf2d14377fd87cd390e7a057803dc5db68080346dcf4ca6dd9b1067cfc69cd
- SSDEEP 192:NNxQ12fVhcYLEcRbhj//IwFQX7LoWLE46kTFTjawOuHzY0PQXsRQBo:XdXLhR9j/A+kTFT+puHzYGQXsRQBo
- TLSH T186725447B2AF15BA51E32507A7345CE31F69805480EEDBE0AC8DC69CC2777284E1F9A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/radialmenu.txt
- SHA256 319932516c94c4c098a785fd4661c974fd49cef7199c0d10e69fbf17cc328e9e
- MD5 484a3432ab7c3d7ca35d7727d235cec7
- SHA1 ce3d01e534e059a46379cec96f4fb4d5fe0cb6d8
- SHA512 be31cdf1e7e5dc3a952dd0fcad8cda49540096fae333f09d5d7733be49258cdde54fa3020053cff67947831174b122942ad40281a3b1a121761597bbc44f2ddd
- TLSH T12A51C5633F7EA88986D5E173123478D1D4DEC3C3051CA5F5BC26762DD4A1AB8086FB82
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/Scripts/sentences.txt
- SHA256 8d09ecaccafecc57232f7fec5aa7594e7f41f17008c362b4a17b77197b951b8b
- MD5 15530dd206b4759f1bb5757dea21c846
- SHA1 60ccf3155887fb762f8a58560ff30ed8d906218a
- SHA512 5e79d10abfedf403cc351c06f132ca6d1afa1687da8618aeea35512cea4e89631a8e83cb376f11ba9ecf0376be4a766eb5ef8c717f7204242ba298f18576d6d8
- SSDEEP 768:a5IKcCZc2KmhUc59PxqDSNQSkfYsYyebqnZ2WuWJ:qx/uSN6gsYyebqZ2WuWJ
- TLSH T109831126908C0131F4B2FB5743262952FADAAACE05D315B0A07BDD1453F7258EA4ADFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Mod Menu V5.87/Scripts/serverbrowsergametypes.txt
- SHA256 bad511d788d41bef2f5f6e741f13caf64077cd765e4037fe5c97c5327897a4f9
- MD5 7b7ab958918e92f926809f6bfdd5be1a
- SHA1 fe997a8e73f57972e86e52f045d4f951e89b5102
- SHA512 7b2e649cda0115d3a506e1c2d732d857e7dbcc253a59cc2d0a6bb9e8f08725be4b17d9d375ecdf74bee86b94d1ce911b4f22b36ee2622f5d08a4b7bea800db38
- TLSH T14041E85F39B7319A13950A7EC17A1CD81E3B400A1EBD6DDCAE8A142B81F5A1D2C4DFC9
- MD5 SHA1 SHA512 TLSH
Mod Menu V5.87/WinDivert.dll
- IMPHASH 80270498a1041f39f009d05f85532359
- SHA256 a97859785a2df1d4462e7d48d33ccbd89fedd40dac4970f4afd89e63f59ee1ec
- MD5 66028ed384c62b3b4ab851809d38881e
- SHA1 81924fc6409a9ee00623332cc77827633bb3cc1a
- SHA512 7a86faf0057db3e9ed78cfa1569154990d0a7eec3da1ca30ff79229745355a1ada4304b8d2b5228cb98afb21786c92eee959067ae9f0bf518af9c5aead3c9159
- SSDEEP 384:yFeZ7IibcWUhRRD0qbk91c8bKKvBRseZPFMejOcD3PmH9vRQxVzE:ygEeSRR158b/dIYPWvRq
- TLSH T1FCB22A46F18760BEC5AFC23343ABA371B9713C9132A07A9E7484F7352D11FE0A56CA25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
StartServiceW
kernel32
CloseHandle
CreateEventW
CreateFileW
DeviceIoControl
GetLastError
GetModuleFileNameW
GetOverlappedResult
GetProcessHeap
HeapAlloc
HeapFree
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WinDivertClose
WinDivertDllEntry
WinDivertGetParam
WinDivertHelperCalcChecksums
WinDivertHelperCheckFilter
WinDivertHelperEvalFilter
WinDivertHelperParseIPv4Address
WinDivertHelperParseIPv6Address
WinDivertHelperParsePacket
WinDivertOpen
WinDivertRecv
WinDivertRecvEx
WinDivertSend
WinDivertSendEx
WinDivertSetParam
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Mod Menu V5.87/d3dcompiler_47.dll
- IMPHASH 36f6d7806085bd3a70ed8c5dcb51f6c8
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:55:bf:8b:65:d0:a7:9e:47:27:01:03:ac:36:3c:47:95:ee:1b:ca:2e:7b:8d:1f:48:c1:b8:b5:d8:05:0b:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 7, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:fe:01:f0:b5:1e:ff:e9:f9:ad:00:00:00:00:00:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
2548016
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_47.pdb
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
strnlen
__isascii
wcsncmp
memset
api-ms-win-crt-math-l1-1-0
_finite
_isnan
floorf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_controlfp
_initterm
_clearfp
api-ms-win-crt-private-l1-1-0
_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_cosh
_o_exp
_o_fclose
_o_floor
_o_fmod
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_log
_o_malloc
_o_modf
_o_pow
_o_qsort
_o_setlocale
_o_sin
_o_sinh
_o_sqrt
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
__C_specific_handler
_o__cexit
_o__callnewh
_o__atoi64
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
memcmp
wcschr
wcsrchr
__CxxFrameHandler3
_o__chsize_s
kernel32
CreateFileA
MultiByteToWideChar
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
InitializeCriticalSection
FlushViewOfFile
ResetEvent
SetFilePointer
HeapCreate
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
WaitForSingleObjectEx
CreateEventW
DisableThreadLibraryCalls
MapViewOfFileEx
GetEnvironmentVariableA
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
FreeLibrary
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
advapi32
RegCloseKey
RegQueryValueExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
RegOpenKeyExW
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegEnumKeyExA
RegOpenKeyExA
api-ms-win-crt-time-l1-1-0
_time64
rpcrt4
UuidCreate
D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
883KB
Virtual Size
883KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=57, id=261, version=23524,
count=1, id=260, version=23524,
count=2, id=257, version=27412,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1167, id=1, productName=Unmarked objects,
count=4, id=259, version=27412,
count=12, id=260, version=27412,
count=1, id=256, version=27412,
count=136, id=264, version=27412,
count=30, id=261, version=27412,
count=2, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mod Menu V5.87/updater.ini
- SHA256 2096cacb59cb1bcf9605e4d6897e02007e06f2cf1ace4cda961c0ae2b57fc8aa
- MD5 971543b2412541a890ec173524db2ccf
- SHA1 0e49b25e0dc320a85d3c11908a444779695501f5
- SHA512 bf1c9677f32c24a64d058f6d42f4d65c5d52c94777513b3f7793e62fb974209891881d0d437aeba20a75d4aac1096e1205baa631d98e038ade5f42500e752bed
- SSDEEP 49152:dD6v+il2pVC/GDm70+mdGJ4B6YtYAgbMKl4wRd0:9S6Vaem7EdGSfhgbMKl4F
- TLSH T15006CF0056AA34CF88EACB4BA97C50747BA7877D51E71382C639F479DE704816A9FC83
- MD5 SHA1 SHA512 SSDEEP TLSH