NEVERLOSE.rar
- SHA256 5cfb04b7be792e4d3c9d13ed5ea84560efd9137467215dd11fc51346dc76b19a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEVERLOSE.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEVERLOSE.rar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
NEVERLOSE/NEVERLOSE.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
NEVERLOSE/NEVERLOSE.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target NEVERLOSE.rar
- Size 8.7MB
- Sample261102-lr8d7aef88
- SHA256 5cfb04b7be792e4d3c9d13ed5ea84560efd9137467215dd11fc51346dc76b19a
- MD5 25b163ab877a9f404273801a270dd63d
- SHA1 3df8bff90c2d690b9487c086d1f8edce2c121c26
- SHA512 1a2dee0259ffe61116fe31b873008b1bb64c9de044d467b4b0ef2529c4841a73bd06baa055179a6dbdf28b721ac20cbbfaabf848ac4d86307653344ccb6f5dcb
- SSDEEP 196608:GF2CcK4n7htNWD+fJCaJpu4Efm1rUeyFAn0wd:a29Ku1tNWqfxJs7qo5C0M
- TLSH T13F96331B4268576CFD1E74A6F610A62E1263B304ADBFECCDC86F3ACE8A7F959041141D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/NEVERLOSE/DLLs/Vantix.dll unpack001/NEVERLOSE/HWID-RESET.exe unpack001/NEVERLOSE/NEVERLOSE.exe unpack001/NEVERLOSE/newnl.dll
File Explorer
-
NEVERLOSE.rar.rar 8.7MB
-
NEVERLOSE/CHANGELOG.txt669B
-
NEVERLOSE/DLLs/README.txt207B
-
NEVERLOSE/DLLs/Vantix.dll.dll 5.1MB
-
NEVERLOSE/HWID-RESET.exe.exe 418KB
-
NEVERLOSE/NEVERLOSE.exe.exe 14.6MB
-
NEVERLOSE/README.md7KB
-
NEVERLOSE/app.ico400KB
-
NEVERLOSE/app.manifest.xml 866B
-
NEVERLOSE/build.ps12KB
-
NEVERLOSE/newnl.dll.dll 14.1MB
-
NEVERLOSE/src/ActivityLog.cs2KB
-
NEVERLOSE/src/AppConfig.cs2KB
-
NEVERLOSE/src/AssemblyInfo.cs413B
-
NEVERLOSE/src/ChangelogService.cs6KB
-
NEVERLOSE/src/CommunityService.cs.js 8KB
-
NEVERLOSE/src/HardwareId.cs8KB
-
NEVERLOSE/src/HwidResetDialog.cs.js 17KB
-
NEVERLOSE/src/HwidStore.cs.js 10KB
-
NEVERLOSE/src/InjectionDll.cs7KB
-
NEVERLOSE/src/Injector.cs6KB
-
NEVERLOSE/src/LauncherForm.cs.js 107KB
-
NEVERLOSE/src/LauncherTheme.cs3KB
-
NEVERLOSE/src/ModuleUpdater.cs8KB
-
NEVERLOSE/src/Program.cs852B
-
NEVERLOSE/src/SettingsStore.cs3KB
-
NEVERLOSE/src/UpdateDialog.cs12KB
-
NEVERLOSE/src/Updater.cs.js 15KB
-
NEVERLOSE/tools/HwidResetGenerator.cs.js 23KB
-
NEVERLOSE/tools/hwid-reset.ps1.ps1 1KB
-
NEVERLOSE/tools/make-icon.ps1.ps1 3KB
-
NEVERLOSE/website/README.md2KB
-
NEVERLOSE/website/favicon.svg.svg 200B
-
NEVERLOSE/website/index.html.html 27KB
-
NEVERLOSE/website/og.png.png 75KB
-
NEVERLOSE/website/script.js.js 5KB
-
NEVERLOSE/website/styles.css33KB
NEVERLOSE/CHANGELOG.txt
- SHA256 634f7ea449e8baa999c1c6f2fb8f79a5057bc464ef61d5ff5d4fddb062f9adf3
- MD5 996839dba5d18bda57deedd29b827634
- SHA1 1a8277665343fb22acba55e746246573ca4694e3
- SHA512 8afe51db1e536c0d83b3d5ae30fc946e02039cd7a0bd1e020e7876cd85953ba17066f7a24fd8da07d0fa2c47ccfb5dd4c48e4f783014b25a40d407948e635f86
- TLSH T142017D27F22B63A31AF244518D4931B8AFBCF1E57F11541D90BCAB5D022D5B475AE182
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/DLLs/README.txt
- SHA256 65811ff022abfade423d2ce5a3982aa80e3f186a37cfcc531432d7b96fc1a5e2
- MD5 a070095786eea7b277392d9f1216fc34
- SHA1 2a14790b6aae18baca95aa15d843240924eec7b3
- SHA512 69daca657e1df79cf47f3110b70f8420fe889061e96e54dee8e8e53e48774c177e775957ec073484c8865cf76b8e71445fe68f643ffe3e01a16a8d900e529222
- TLSH T1A8D0226BA51302E0D8A3500F020CCEB82C62A3A42CD33805140CC8CD303349AA0CC064
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/DLLs/Vantix.dll
- IMPHASH a8e25f8b4a633d713c68067c7dd46c6e
- SHA256 f164ce817a1e416eecd10a0ce2723070741ce2612db73678fa8e76be71a8362a
- MD5 44c3f42454cb6e91d55a0fe0785e71a7
- SHA1 fd7f1a1c281eeae8bd0ed435e76c61e441d523c3
- SHA512 a6761cd9bac40bdb008bff7e684e1b1351a2a5ee7d13c17d174eef34ab5ae275e57467a000273ad2002d0579c87a03c63257204ca664ba993e75a5aaefac16cc
- SSDEEP 49152:Qs0oNfTgxBv0SwqLDHslngQ98o9Phr+jKtmv7NRXIOols8UqCxDijdcoDIjgDAv4:/JL0VJX+0uTHzqEg
- TLSH T15B469E16A364406DD47AC178CE83DA07EBB2BC4007218BDF16A4161E6F7BBE41E7EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3009952
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\edge\vantix-src\English-src\x64\Release\Vantix.pdb
kernel32
Sleep
GetModuleFileNameA
SizeofResource
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetStdHandle
FindResourceA
FreeLibraryAndExitThread
DisableThreadLibraryCalls
LockResource
CloseHandle
FreeConsole
CreateThread
LoadResource
GetLocalTime
GetConsoleWindow
GetTickCount64
GetProcAddress
GlobalAlloc
GlobalLock
CreateDirectoryA
GlobalUnlock
GetFileAttributesA
LoadLibraryA
GetWindowsDirectoryA
GetLocaleInfoA
MultiByteToWideChar
QueryPerformanceFrequency
IsDBCSLeadByte
FreeLibrary
QueryPerformanceCounter
OutputDebugStringA
GlobalFree
WideCharToMultiByte
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetLastError
HeapReAlloc
HeapAlloc
VirtualQuery
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
VirtualAlloc
InitializeSListHead
GetSystemTimeAsFileTime
WakeAllConditionVariable
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFile2
DeviceIoControl
AreFileApisANSI
CreateFile2
SetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
GetModuleHandleA
AddVectoredExceptionHandler
GetThreadContext
GetSystemInfo
VirtualFree
VirtualProtect
HeapDestroy
RemoveVectoredExceptionHandler
user32
DefWindowProcA
GetClientRect
IsWindow
GetClipboardData
GetKeyState
GetMessageExtraInfo
LoadCursorA
GetCapture
ClientToScreen
UnregisterClassA
ScreenToClient
SetWindowLongPtrW
SetWindowLongPtrA
RegisterClassExA
ReleaseCapture
SetCursorPos
DestroyWindow
GetCursorPos
GetKeyNameTextA
OpenClipboard
CloseClipboard
EmptyClipboard
MapVirtualKeyA
SetClipboardData
keybd_event
PostMessageA
GetAsyncKeyState
MessageBoxA
GetWindowRect
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
SetCapture
SetCursor
IsWindowUnicode
DefWindowProcW
CallWindowProcW
CreateWindowExA
shell32
ShellExecuteA
ShellExecuteW
msvcp140
_Mtx_trylock
_Thrd_yield
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Mtx_unlock
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Query_perf_frequency
?uncaught_exceptions@std@@YAHXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Query_perf_counter
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Thrd_hardware_concurrency
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
_Cnd_broadcast
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
winmm
mciSendStringA
d3dcompiler_47
D3DCompile
imm32
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
__std_type_info_destroy_list
__current_exception_context
__current_exception
memchr
memcmp
memset
memmove
memcpy
_CxxThrowException
strchr
__std_exception_copy
strstr
__std_terminate
_purecall
strrchr
__C_specific_handler
api-ms-win-crt-stdio-l1-1-0
fclose
fflush
fgetc
__acrt_iob_func
__stdio_common_vfprintf
fputc
feof
fopen_s
ferror
fwrite
fgetpos
__stdio_common_vsscanf
_wfopen
setvbuf
fseek
ftell
__stdio_common_vsprintf_s
ungetc
fsetpos
__stdio_common_vsprintf
_wfopen_s
fread
_fseeki64
_get_stream_buffer_pointers
api-ms-win-crt-heap-l1-1-0
free
realloc
malloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
terminate
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
abort
_beginthreadex
_configure_narrow_argv
_errno
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-string-l1-1-0
isspace
strncpy_s
strncpy
strncmp
strlen
strcpy_s
strcmp
wcslen
tolower
api-ms-win-crt-convert-l1-1-0
strtoul
strtoll
strtoull
_strtoui64
atoi
atof
strtod
strtol
api-ms-win-crt-math-l1-1-0
fmaf
_dclass
cosf
ceilf
fmodf
log
ldexp
expf
acosf
logf
_dsign
pow
powf
sinf
sqrtf
floorf
atan2f
roundf
_fdclass
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-utility-l1-1-0
qsort
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
127KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
522KB
Virtual Size
521KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=32822,
count=8, id=260, version=35403,
count=36, id=261, version=35403,
count=6, id=259, version=35403,
count=6, id=257, version=35403,
count=17, id=257, version=33145,
count=461, id=1, productName=Unmarked objects,
count=41, id=261, version=33901,
count=80, id=265, version=35728,
count=1, id=255, version=35728,
count=1, id=151,
count=1, id=258, version=35728,
NEVERLOSE/HWID-RESET.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fe98892e93c1b61591d456b0da0776b1559c6df63ada6ae07cd0385ebc112985
- MD5 5a46556b45fa775905818414cf19d016
- SHA1 3d39e539bc6525885b84d12f5d71fcd5bff62593
- SHA512 e2584392ac79eb245ff4b8572b914992a039228e96c8c4ef8267c878e2ae33a844a24db7fdb573be50a7eb5e3ccb028cf56659160246d800634fbd88d48ee542
- SSDEEP 1536:gdgyR79t3WPQe3tB0LXy11wvmJ9NFIMBWH0XxAEM:gdNRJZe3tB0y1um/jjBWH0XxAE
- TLSH T14F9419117F454C06C9334BF11461DB342B76AE446A79E6878AF6FD6BFBFA2D20C0814A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
403KB
Virtual Size
403KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NEVERLOSE/NEVERLOSE.exe
- SHA256 79d86ff387f614c2f124e01c3a87c0c3a6762d6b18ce48aa0e06618a3b541acb
- MD5 0c302b89b202edf95e9708d9c73b37ed
- SHA1 fdf18bd08130247ad9fc1bf8f14d373e0994763a
- SHA512 c1608ae0134e213fae674f10ac2bc3fe6b3ea131d132bf696e6d8e77138808a4b8f905ba5840ff65b6d097a968e641a228b91622588640532975274b45e51277
- SSDEEP 98304:nhFvdLAEdU3j3Lgps187DYws/lPrJcpd2V5P0KOv2PZI:nhFdEEqbLcs187DHETJcpdxvau
- TLSH T1E6F62709625542ADC03AA2724953DF77E321FC44477896EB33EC2E1F3FF27A84A6A511
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
14.2MB
Virtual Size
14.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
403KB
Virtual Size
403KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
NEVERLOSE/README.md
- SHA256 e945fe08dce37d08a4c938351ad185dd9887adbc96b48677a2c06f7c60a3c994
- MD5 fea5019049891405fe8412650225332c
- SHA1 5840b1a0d5b5d5de6f7b66e0cc0cadc8c13ed75d
- SHA512 3505206f43be867cd60bbf1a160914b5f15ee81c8d35b832f18fc1d837fd026f82e3442dd5af38235a90e98b4c2cbf3602645fee69ebd2b5297dd25964d43e52
- SSDEEP 192:ZhtPQtTCOR2Laer0x/WoUo65MeXdVlcV/JuOU27Ye/7:ZfLGC0x/9659WJub2T7
- TLSH T1D9F1EA67632893390FB20131A04E62FAEF17D2D9A32264B554BC515C221D76EE67F3F2
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/app.ico
- SHA256 7b258493b949a6e59615037597a594bc23766124079a33bb9dbe564e312892d7
- MD5 5b7a868dfa152f509ddc11c5d4dbdb58
- SHA1 1aa7a3e14aea95c7133196b5edcddd54591af89f
- SHA512 d7528811aa2fa780b62b423dd877a3ede690bfdae8346bc771fdd3ea3e8cb62b1b582e9ef5c9ef6c7df53211e87e320b642557d6422b41f81804844a10bf1e8b
- SSDEEP 1536:t3WPQe3tB0LXy11wvmJ9NFIMBWH0XxAE:Ze3tB0y1um/jjBWH0XxAE
- TLSH T1E594D6027F455C06C9334BF15461DB342B3A9E486A79E6839AF6FD67FBFA1C21C0904A
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/app.manifest
- SHA256 da0fadadb6ba6709e4738bb03e0a51a0715bde03223a7646128a316f53d3ff00
- MD5 97c7f701ee5c56fbe85af08a2db5b818
- SHA1 e5da239aa6317328a4720063a2da3cfb1cde7352
- SHA512 c799aa79c78f359e78fc898df6a38ed08236d16be0edb522123445c0d00ffc5b0fc022dc5184ecc48309e3519e948237eedda3799667d16ce33694c2e4d0bfe4
- TLSH T1D81188C1E0649096E35141A21B25E25055A95BAF189D80FCB4CC8E7D6B09ECBC3832E4
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/build.ps1
- SHA256 0d8c211bd079e6909e058fe650e634949a5fd3c3506100dd2f8fcbcd9de20403
- MD5 ee0d1b884564a757c49236713d4c7582
- SHA1 d6677558a511d11c6c5269b9602e97293eed6a93
- SHA512 2227016fc739408fe6ba3207808a34a16f5bf4449dbee518dadf0cf4e94c3c9cfac43f87aaab128f3e0d96d086a8316879b01845aa7dd12ab2195be06fc7852d
- TLSH T1525122386D1FC8129770891F1B9BD354B06E94DF8809652C7E5C5B0CAFEAA3D462DE32
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/newnl.dll
- IMPHASH 940c023191d22497aa25e621d9ad8b24
- SHA256 03c8ab74b4318cf17c87be8b39f4d868dba4ee1aa45d60fe38ab781a54b3eb57
- MD5 c8c8f09398634be039ee3011e08e5971
- SHA1 91e69f9d2fff984cea06fbb7d3a9e5176720f01d
- SHA512 529f6e537a5054a444dc20c9a67a37386fa3cdb52b3d987581176bd3395f0edfcb084e67d0138cdd96b41dfb82d676eb0fc3353a11119370f37b821ac71d9dcb
- SSDEEP 98304:DFvdLAEdU3j3Lgps187DYws/lPrJcpd2V5P0KOv2PZI:DFdEEqbLcs187DHETJcpdxvau
- TLSH T104E66B09B39542ADC03AA37289539F57E331F844477996FB33BC021E1FE27E94A7A521
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5167232
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\neverlose-v2\bin\x64\Release\neverlose.pd
d3d11
D3D11CreateDeviceAndSwapChain
user32
GetClipboardData
MapVirtualKeyA
EmptyClipboard
GetAsyncKeyState
RegisterClassExA
SetWindowLongPtrA
UnregisterClassA
ClipCursor
CreateWindowExA
PostMessageA
GetClipCursor
GetRawInputData
CallWindowProcA
GetCursorInfo
DestroyWindow
CloseClipboard
OpenClipboard
GetKeyNameTextA
FlashWindowEx
SetClipboardData
GetClassLongPtrW
GetForegroundWindow
DefWindowProcA
SetCapture
ReleaseDC
DefWindowProcW
GetKeyState
GetMessageExtraInfo
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
LoadCursorW
SystemParametersInfoA
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
MessageBoxA
GetDC
MonitorFromWindow
LoadIconW
kernel32
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetDateFormatW
LoadLibraryExW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetStdHandle
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
ExitProcess
ReadFile
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
CreateFileW
FlsFree
FlsSetValue
FlsGetValue
GetCurrentThreadId
Sleep
VirtualProtect
GetModuleHandleA
GetTickCount64
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
QueryPerformanceFrequency
ReleaseSRWLockShared
GetProcAddress
AcquireSRWLockShared
QueryPerformanceCounter
VirtualQuery
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetLastError
CloseHandle
CreateThread
GetLocalTime
MoveFileExA
DeleteFileA
HeapFree
HeapAlloc
GetProcessHeap
GetLocaleInfoW
GetTimeFormatW
GetSystemInfo
LoadLibraryW
GlobalMemoryStatusEx
GetModuleHandleW
GetTickCount
VirtualFree
VirtualAlloc
GetCurrentProcess
K32GetModuleInformation
GetSystemTimeAsFileTime
GetWindowsDirectoryA
SetEnvironmentVariableW
FlushInstructionCache
GetTimeZoneInformation
SetEvent
TerminateThread
LoadLibraryA
GetUserDefaultLocaleName
GetFileAttributesA
SizeofResource
FindResourceA
GetModuleHandleExA
LockResource
LoadResource
GetModuleFileNameW
RtlAddFunctionTable
RtlLookupFunctionEntry
FreeLibraryAndExitThread
ExitThread
DisableThreadLibraryCalls
Beep
FreeLibrary
RtlDeleteFunctionTable
OutputDebugStringA
GetLocaleInfoA
IsDBCSLeadByte
HeapCreate
Thread32Next
Thread32First
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
SetThreadContext
OpenThread
RtlCaptureContext
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
RaiseException
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryExA
FormatMessageA
FlsAlloc
IsValidCodePage
GetACP
GetOEMCP
RtlUnwind
HeapSize
HeapQueryInformation
WriteConsoleW
InterlockedFlushSList
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
WaitForThreadpoolWorkCallbacks
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
WaitForSingleObject
FreeEnvironmentStringsW
SetEndOfFile
GetLocaleInfoEx
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
GetLogicalProcessorInformationEx
GetExitCodeThread
TryAcquireSRWLockExclusive
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileInformationByHandle
SetFileTime
CreateFile2
AreFileApisANSI
CopyFile2
MoveFileExW
GetFileInformationByHandleEx
LocalFree
GetSystemTimePreciseAsFileTime
WaitForSingleObjectEx
gdi32
GetDeviceCaps
advapi32
RegOpenKeyExW
RegCloseKey
RegGetValueW
RegQueryValueExW
shell32
ShellExecuteA
Shell_NotifyIconW
ShellExecuteW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
winhttp
WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpConnect
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpen
WinHttpReceiveResponse
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
d3dcompiler_47
D3DCompile
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s
Name
.text
Size
5.4MB
Virtual Size
5.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3.5MB
Virtual Size
8.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
198KB
Virtual Size
198KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.nlart
Size
374KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pview
Size
1024B
Virtual Size
566B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.model
Size
902KB
Virtual Size
901KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=194, id=261, version=33145,
count=35, id=259, version=33145,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=16, id=260, version=35721,
count=12, id=259, version=35721,
count=99, id=261, version=35721,
count=85, id=260, version=33145,
count=1, productName=Unmarked objects (old),
count=61, id=260, version=36260,
count=23, id=257, version=33145,
count=285, id=1, productName=Unmarked objects,
count=215, id=265, version=36256,
count=1, id=256, version=36256,
count=1, id=255, version=36256,
count=1, id=151,
count=1, id=258, version=36256,
NEVERLOSE/src/ActivityLog.cs
- SHA256 873bae99d50b7922e4883ad70296c91ce934991310a731f5f3c3ed50b9ffcfbd
- MD5 56f4b600064bebf9d7172ca813d9c06c
- SHA1 1361dfd5fc2bc52aafd2e0d39088444eabd1f89a
- SHA512 e2f3901589c55386b430cf9d8cce16457462ef3d157790c38d8b0049ffeda9381b07cd0bd2af7f94e6c1a3cd3175f886a1ce5b6a4b1c3f22c8a544723aba7b84
- TLSH T1AE41BB1A36E6A730056753369B8AC083113541972B2DDCB5BF4D02148F4612ABEF8EAE
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/src/AppConfig.cs
- SHA256 6fb19f943c6249bcb57ec89d8b0309eee6f231bfb78d7fb1b9f983acfc3093fe
- MD5 884ab5a651f217f75890dae08b0ab201
- SHA1 a5e5c590a935999999ed8ad15bc61d1ecea8a27a
- SHA512 27194e02c663beca19a064e42145be333789a26363309305b11392bf3e140c9ad959397d10f7d38dab488c3fb6b4acb30e79c347c9edd5fdcc8aa24f889a9f62
- TLSH T122519F8A6682C4340E924415D38E6151F76B90538A7EBCB5F98D03081F1A45ED7BBEEE
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/src/AssemblyInfo.cs
- SHA256 e45b99b6d6924304f6029df74285124eb1f44c1dbeba1648e12e0a84f3a40c24
- MD5 54018ba89d0f6b31ed98c0688051f8ee
- SHA1 2f31c19bf1f953d209cdc2b0a1c8925002f062d0
- SHA512 6615a4ec27c8117127da964f457bfdd5501dd75936d8a53d3463914a31404d6f6be3aa4f10859eff90467a03b3372414eb0fa6e263edc6cc69dabfcbb2665fac
- TLSH T149E06D60270AE76C4F668097FDA3B15C026D333986C83C05A1FD7E23F8697F51110563
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/src/ChangelogService.cs
- SHA256 632f021585fcc32083c55d7a54c07c08a1d0f2e07dc06408fe56f3a86e41cb8e
- MD5 b7d6af429fd203c6b41d74ab56717822
- SHA1 2ff6cf5dd382dd51f66942ae4837b1f79441a7c1
- SHA512 4759bd3c1af37058156e654f25db55a8dcfaa0880676e520cbefd3dbb67746ab7d5b9496cecd130f2ac46b41462d0f10d85fbd2a92fa94fe7d7da621ed6854ca
- SSDEEP 192:cvtbGuOSCZmj3h63ML6SCU7vSATRDuwUwyL:2t3BB4
- TLSH T163D168457493A5624B43E47AC7CB5561B6BAA28B056CDCB1FECC0445AFC80384EF57EC
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/CommunityService.cs
- SHA256 194bfcac644f052f6b75c9964511e315c9e3245709a4c6b54883c6e978329494
- MD5 8c21f2f9c9452b196171cea579456bda
- SHA1 446bc07e56d4e7b3c776bb1506f78d2b8e2b87c8
- SHA512 28db39dd7c3138c256647156f2a42e8028587f5f36937ee050d94192f595f3b48257c7a01c9e85080e9e91b01bdd924c9d531faebdf0b5fc2f6b302e50d6df65
- SSDEEP 192:tt2ftklFu8+uc7dkHoYYkVM8Tz7DORLfC6HkgueBKZLP8kQetjw5RXHU9Gc+E47Z:ttcwDNm
- TLSH T1CA021E4B28D358050E176836EFDB81A47F765603866F9C60FEDD4014AF90099CEB6B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/HardwareId.cs
- SHA256 e51edb978209198cb4500fba0f42500a0c8d55c711e3135d4d39b353a8234bea
- MD5 a53c34409d798423602523dfe6468b65
- SHA1 6ffd4f883a556de531bf8bbafbf75ee8dc02c0dc
- SHA512 8d47ef1224c99896e26d51a2b92aa76fda57ad98534005852f47aae3e544398f6709170d0d3de17d9408999bd92c95bd5bf7223d4f83fc8f1ebe792d37a77767
- SSDEEP 192:qD6nLr1j7l6P0jyiSCQV5iSCMC/AaQKT1jTL:86n/13EqvQO1r
- TLSH T17802F008BDD398001B1360398BDF4294F63AD11B07ADACF1FECD4550AF8996C9A75FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/HwidResetDialog.cs
- SHA256 35802a9c49b9767e058a0391d04e30b70c8f4f27700c2777cd6f22d7047a75bd
- MD5 97abaad06bc09df1357603610f58c9c3
- SHA1 0d088819047c6ff3171aa6f9dea19e32f1023cff
- SHA512 7bd0361e0e11e117396a5727de8f26a3235f79fbb0452b778faed470eeb91f135a69b7e30874557346d0d82663a1e9ca71e579ceb6cbdd6a1d2bd53bd8acc85e
- SSDEEP 384:IrFWpRwv9Y4JdF1N/Ts5YE1d/hqLvqxWqqjqq6y:vRwv7JdFL/g5Zd9y
- TLSH T105826354458B1F14AE93D13F9FCF802AAF19600B451EAD39BFDF42209FD841846BDB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/HwidStore.cs
- SHA256 66cc105e9d22ba69dec35a0659665440da627e2186049bea16f3553baa5035e3
- MD5 3e02b14ef63e7a130594b5dd261701ac
- SHA1 930e14dcf7a66e01d71ffc387afe250c09c3df26
- SHA512 66a23dd354c0ae39b44862cd269b0ae96e2086ec5b534656edfe7d2d4be4c858f5f5a34e06ecaa2309e854808ac0f0553a2ed642b2b9f327afe88f92ac4f0938
- SSDEEP 192:bzHzi+h3WCy81s+YGB5PBpqbtWJZqxfQVrsQzgWQTtOtSC/XCxG1j6L:b7BFgN0z16
- TLSH T1E422014EBC9358044F03B07C8BCF41459E6395471AAD8D70FD9DC6807F894D8AABAB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/InjectionDll.cs
- SHA256 e00f21e06a5db643a7e20e02e94d8ba880412adebe3b8778e114c73e972a9ef2
- MD5 cacf855bd845084f04a879a61953c68c
- SHA1 e5d3b69c46670793594a4345921573f32add30a6
- SHA512 ba29b2d9bd7691a94b1506bdb07ecdadc17e8f9c318812fb181606d8d97df4c0f3572ab6fff4f869c4c67f8b4db769712244cdb31e5ca58f1b6c8d69e5daba83
- SSDEEP 192:tbILfQP/9+1jbjCizcEZr5baYSbEyTflVnvincSC9W3SsnP7L:tbIEPFIX/Zr5baYdEflpsAI
- TLSH T1AEF1218528A359200393A03957CF558AB727D00745BEACA4FEDC4D10BFA513C6EB5F9D
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/Injector.cs
- SHA256 d0a058783482b7be4d8cb69da4d4aca0d50c4876ee8e5c50b54f91d1ba15c41e
- MD5 40e03e85010ad661540d3a519daf51eb
- SHA1 a3904772da4275e55cef5740bfabb8949cbeb723
- SHA512 0ff8fc1908ad4b2d276a511a23405d37c44261302191fea65b63f0c883ceabed2593842c718eef19c484971dc42f6f016154a8c05c97a6f695470dba9bc79e49
- SSDEEP 96:Cj4GPMjCvkOPQg63zHsGYOrY6aXPBXny3wCDSCK80HL:tEpPQg63zcWAyvDSCyHL
- TLSH T1DCD11E418A6A064258F3253D9ACF904FFDE3403B27BE9C307EBDC1216F850A9D5BA745
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/LauncherForm.cs
- SHA256 d1894f91d07022f3d9119cdaf50c76eff47bb9bafc1bb9e1c81444bc53f8712e
- MD5 0afe8aec345e9b5be847f64a8457699c
- SHA1 1afd7b15917cfd9df3e39a40ff1ca13cdacbd9e6
- SHA512 92dc08e3765b336d426d7a6be6fb50ce1e05ee1a81479a1655d52fe0e36b8d124bd8a758d9a40d1234b4b3d74429c09e05b24bc6ca6a63896e6172555d8a1d57
- SSDEEP 1536:ZbQcacznkrQcC4zibO9dblX1FVll7cURMehtWu92u6AVm+Rf44T4Rt:Z0Hczn7bODlanuep+JI
- TLSH T1FFB3830918972A14DB93A03F8FCF9025AF58940B464EAD21BF9E01519FCC5585BFCFAB
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/LauncherTheme.cs
- SHA256 204e45c9b410291cf955163d7c6ef6b0b6ae321d451abb1c43d8c5204e5fdc34
- MD5 b4ac4340f4d19b629a87b20a9fefbfb1
- SHA1 27221c612c0de08b6ef91a97370538c1644c47b4
- SHA512 f6c7f55976991c3d1d1a766477a4962e2cb211f17e54b5d3640f60ecf9709665f9c1a6743a2ff08c431f0b45fb1bf032e67c3cac211606d1ee16b8b077cf80e1
- TLSH T1F171068A47848A500BA3A07849CED8A66B236F13891CBC3AFF6F73634F4D15D48B5559
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/src/ModuleUpdater.cs
- SHA256 adb0539563701afbb67a8f0c01f0a886d3ae0c1f3ca1ade09869045a15d98ec0
- MD5 a28aff886891dc6f0e6b93c36354c1f4
- SHA1 10608b75ceed17bb1d28a0b9f61632d8f7e54f56
- SHA512 36ead852b8f8dfd07f90ec8bfd88292a6c97f6dc457346badc8920e106274777ad600e7f5777d37ec21d55f951ad3600c87b3417c726527a2adede765b9e457c
- SSDEEP 192:8gACVXF8SUFl0OJsPIea0SP7Pz/SQCoYSCF+Sy04q+gILuXDxCgCUwyL:8GGJzb7Ll7MICXDT1
- TLSH T13102200A18E390760B53A1B9DF8F4B92B3B39217169DCC64BE5C00449F8982C9FB576F
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/Program.cs
- SHA256 ddb353d6ceefb8eec31869b51ec22507ec4c18b2943d54806eb890c07a4140fb
- MD5 8c4aebd07a976f76ecf5bebd8d43a919
- SHA1 e4624477b841cf9be1d584266377250112768239
- SHA512 152d4ff2b649df5b3d4b288419c60e5edbe2601a5ef85fd8a49f7e9e0cf64c702ab1efed74beeea249c98d025d72ac6f595374ac83d894aca1b50c72548d3183
- TLSH T175017059729B88D215F340F59B2DA5A40173522B0E9DB510F59C4052DF9D00CDF3ABA2
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/src/SettingsStore.cs
- SHA256 d4aeb25d7291251d123fac62743bb83612b7c08160038340a7469f0976a279c7
- MD5 7b88a9c9f4e64e91d1170121e663059d
- SHA1 6ac53fca5baf96660e8911d201ec59aa01e88239
- SHA512 9973a552e6a16ea9672679311fdf2807bc0d8ea9c7743e7ca23a951eaa80d6fa2f9970e454244ece66d00df181ef51f8bcfe52d685ece2c2a8f880ec17a0cf87
- TLSH T17B71A9663CA359544E6361358BCB8591E277802B06BEACF8FDCE46006F4146C5FB8B6D
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/src/UpdateDialog.cs
- SHA256 99e77cf454941ed1cd619dd6a0fbc3d81f8fc019af9013bc8de922aadf380c4e
- MD5 334f15786119bf852fb9e8957ec9dc6f
- SHA1 a0f23921755e25b4d6721787b79f6315537a8a04
- SHA512 47c9f055620bb0eb7b794d8480816dc25b61313c067811e36a832e4bb0e5c5195f4010f4cf67b21f005b34452b068422972a00a695903a80420dc65b1c27c869
- SSDEEP 384:IrFWuj9sLYF5rBFmzL2rWEGziYfhqLvqxWqqjqq67:Aj9sY5rBFk6Yz1d7
- TLSH T10C428518094B1F149B93A23F9FCB4416AF2A6007055EAD393F9F16205FCD91807B9B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/src/Updater.cs
- SHA256 e6caf6546ac5e5979479d17ebb85a4369ba8219aace4fa0360fd36caeb9b5b55
- MD5 6510efb8b1c500dff0a934dad2d3dbba
- SHA1 58ee83acae3b1b1fc1037aaf1c1b01c59558ee68
- SHA512 9383c23ee158f8eb6e0aae5d112cde1c039c440be18bf2466d75f27f9f3259ec2d09af661e77e441be3c83054f9c29bedecaba2701e67ec1bef9d13a9fc7114e
- SSDEEP 192:tiwAC1iXvCDSP7EpRkYN5kUFLK/+N7zSVbUDsi14EfsiTCK7FvCwPc15PaF7C0Yw:tiTSbzN5M/K7XDhf7JF7Aktn
- TLSH T1DC623F0A2CA384150B1764359BDB8292B7779203067EDC70BDEC8455EF6066C8FB5BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/tools/HwidResetGenerator.cs
- SHA256 dffd59e67feb2300eb2df3e711b681af0ac5b253c809f9fe5fbcca7d09c92fb9
- MD5 a27acf6784b377dba2c3182da7f39591
- SHA1 18f42be970126408c970ad591379c2b882022103
- SHA512 a97bda8170ff8d260a47f451deb9fd9d00b4e0f296a90eb5a0d13f28ec8e122790ad99818bcff25481b394b2bd7def3bd798adfcc1ee8d4fc45fd7db20eab068
- SSDEEP 384:IrFZw/YBmYdHILgm3HL1L76QKKdhqLvqxWqqjqq+:FQmYdHRS1H61Kh
- TLSH T117B2740828CB1E149E53A03F9FCF8069AF5D600B425DAD357F9F0611EFD845846BDBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/tools/hwid-reset.ps1
- SHA256 3ce01d961828631a23215c45c6675022dc42c09e3f498342e04c97152d085f28
- MD5 19d25902c92676dabb0e2ab888750c69
- SHA1 a5b04d348a818d8944aaf7f076d4cb7b1646ee97
- SHA512 3a70b7a729f47bde29a1d3d2f3202c43e8321b52ac4dbe115a837d48b4a21a4742a45eab69a8b0a3a6834b021cc762959ce5d8d2f1c2695bf231ff8421bef898
- TLSH T1DE1112047799CF1A16D3248B2ADD5014A118015F311E2C7176CD87952B8DAB8C4757C8
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/tools/make-icon.ps1
- SHA256 7754717616616e3e344e8607b22fe12704e8cc4eeea71ca98efc6a887ff5763b
- MD5 c53e1896f4236ada9a794bdf3fa19950
- SHA1 5e06a7a7c557640ed0a0436c68ba5674e4bb7da4
- SHA512 f7b1bdbadc7f14910b2a9e2b386c1dc4e9c529def704d84537294841b8b600670dff3d0aea19e08c90b9e050f006682f70bf6b609f0260c6410300fdf27b9d79
- TLSH T1D68121163E17E9081B97649BAE1DC5857F769213F156DE0835CFC3D2AF0A878C27C2A8
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/website/README.md
- SHA256 d37f2ef88652b33b966596baca40a09edbc6dd3653c68c6739489e70eec7420d
- MD5 4a29a1da72cbf727ad9e240486d604e6
- SHA1 58429db0c93226cec4bf5cf9f1eda935ec61046e
- SHA512 ea079468737b5681d0f1f11454ee3cd6d401a6644302798cac6936a75f79031e9525fa4d28d06c1959316c267d1ed9935e777b863854a491473d8c77f9829a78
- TLSH T1B8514283731883360F2714A7E28D57F4D363C14C92A6E16D20ED409CA22AB6A47EA3E1
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/website/favicon.svg
- SHA256 73a024ab742d9b62bf4f83a143b4d42ea5626cbc1547ee9e4bbcba320224a82f
- MD5 6307652b3d6a5383d2afaaed12732f93
- SHA1 3d7ca3f52ca6ff7111ca7e13da4db7b842d9352a
- SHA512 31c379eac699ec3ea2e2b630fecf85a74c32fdf0e935b9e238c36a625f864920399ab6f32000fc3c1f07ff1a61334ea3421a97cfc322df1732d288c6add4ac1b
- TLSH T1DED0C054E08C8508D70086031BBCF8EC107EF1D6B7400185B4C4B920304C9D6EC156ED
- MD5 SHA1 SHA512 TLSH
NEVERLOSE/website/index.html
- SHA256 ad8e5203712dcb2ac5a858e6f07c9658f2022ab4618554720a4d3a1f4c41fca5
- MD5 b28790ead0bc7b5d9b223ddbb9348389
- SHA1 de66efcd0030e8c21e9bd1ba3c762d721f5037ad
- SHA512 767ae9b8c3e243cd4e680b71872201d023e1b82bb9ae5ae4bc3eb9a9159a0df42117a54138aaa13c5b6aef772a9122e1c18f3abad6c783552cbb61638ffb1d94
- SSDEEP 384:vRbtXk/HAkc92TCv++kTJPbbAAo5O5nZjycIOuTZjD:N9cCv++SJIAoYh9ycIO0ZjD
- TLSH T123D23022A1F6517B00A381D26A69A73B2FD5E247D84F0200B2BD07A81FEFDC6FC57559
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/website/og.png
- SHA256 a7ed2dbe2b2b8185a77d90b0ed61a94a1516f0f44699b94223c023b543049bcb
- MD5 48996a2277eb25a0258bc455a77536cc
- SHA1 2e3cc3a5bb00ed3f7fdbe06e0ad30594cbb99090
- SHA512 93fbad2a488dc01c391685959ae95b3ae0b1bea3055d36033fab80cf086e297bf1b9fc5008b06f2e7c66b64e37673ae2ae8a5d569f090b0bbcbb843b4ca747f1
- SSDEEP 1536:8sqGFWyFfBVVvvf098tz4IMLlXeKuh5DfyW/YjLv8+/aozcL:8NXyFfPZttz4dXefvDfyW/yL++Q
- TLSH T1F9736CA70A4FA4EC4A7F154AC0F38D80FC25A80C63443927C5617D6FA0EAE5EB578DB4
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/website/script.js
- SHA256 b996a71834378132c08c62c89930016de76d327a5b945f3f20fe94f27678a6f4
- MD5 6226e176532160eef515227ba5032035
- SHA1 78a931f83bbb60fe3616d6d7a325a15548444966
- SHA512 90c35253fe61df83c0396f2879d8a8e169502c8874756ee6b53b68f90fd129ad25796bf9ef6e4ff59a11bd2db7e5077a8d1c362cf4bc222ecf6cf5c747139996
- SSDEEP 96:LMPEKZ9+MYCZo3H7BAbPYlmvsqxIPgXoM79lqM793cTh9qPMo1oBflq3UdP5L2zg:gMs+MYAo3H96YIsqxIPgoM79lqM79s9R
- TLSH T1FEC12F6E70F62077467B31BE9A4F61883634214B7405CD083E9CC7D45FA187666B2EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
NEVERLOSE/website/styles.css
- SHA256 53c15c5c899148bbe6c5ab0a5140e1a40bbc9a69b7042cc58ebc13eccd410437
- MD5 02919d9138bbc2b02cc710c3fac00c42
- SHA1 f68214e002fda81b09510486182d0d945d204e44
- SHA512 992c2f8ef08602ee48b17b2b44edcad34d6a7de96358d6cdab17d2ccda403f82bdfe2f80b7c8a47ee5a645ae93a4b28ab592202d5c67def2edfae6a69094a4a2
- SSDEEP 768:B+soLFoFBmoLRIzaUaBbFKlFcGt1AzTFJFuFQFbvhyFoNqI:B+VL2Woyz9wbgXt1AzTjQFQxg2NqI
- TLSH T1E7E244D677B14604B82F98997E87DB56732D9043400ECE7C6BE1201C9ECD1EA6972F4E
- MD5 SHA1 SHA512 SSDEEP TLSH