ThomasJepp.SaintsRow-rev128.zip
- SHA256 82522a9f759116c263c5fc7c2d2be906b645eaaef5ba51052a2f64936410026e
Password
dffsf231231
Behavioral task
behavioral1
Sample
ThomasJepp.SaintsRow-rev128.zip
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
900 seconds
General
- Target ThomasJepp.SaintsRow-rev128.zip
- Size 954KB
- Sample261107-nesjbaxyav
- SHA256 82522a9f759116c263c5fc7c2d2be906b645eaaef5ba51052a2f64936410026e
- MD5 2c68e79b5caf6ac18eae3ab12220cdbf
- SHA1 e58f49da40d7e09a6dc72ba4423b5128ddc09bd1
- SHA512 13e094971244e0be877223eba24fac846925dd4d2d4b45515ea8c526d4ee5732bb3cfb47c773e0be6cf3d8a45d299272dca5ba2d502ec69cda82a101186756d2
- SSDEEP 24576:yzBj7bis3Lsu4bE2X1MTQtRtXt5nRSAMQtRtXt50+Ld:yBX3AjRX1UQtRtXr85QtRtXQ8
- TLSH T125252366E3A74E24CC7B7DBD1D180B58683250C50BA6B27DC4D4BE6ED814FE8E70B612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ThomasJepp.SaintsRow-rev128/external/revorb.exe upx - Unsigned PE 24 IoCs
Checks for missing Authenticode signature.
resource unpack001/ThomasJepp.SaintsRow-rev128/CmdLine.dll unpack001/ThomasJepp.SaintsRow-rev128/Newtonsoft.Json.dll unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildPackfile.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildPackfileGUI.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildStreamingSoundbank.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildStrings.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ConvertClothSim.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.CustomizationItemClone.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.EditPackfile.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractPackfile.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractPackfileGUI.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractStreamingSoundbank.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractStrings.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.RecursiveExtractor.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.Stream2.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.Stream2Update.exe unpack001/ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.dll unpack001/ThomasJepp.SaintsRow-rev128/Zlib.Portable.dll unpack001/ThomasJepp.SaintsRow-rev128/external/revorb.exe unpack001/ThomasJepp.SaintsRow-rev128/external/ww2ogg.exe unpack001/ThomasJepp.SaintsRow-rev128/x64/Newtonsoft.Json.dll unpack001/ThomasJepp.SaintsRow-rev128/x64/ThomasJepp.SaintsRow.EditPackfile.exe unpack001/ThomasJepp.SaintsRow-rev128/x64/ThomasJepp.SaintsRow.dll unpack001/ThomasJepp.SaintsRow-rev128/x64/Zlib.Portable.dll
File Explorer
-
ThomasJepp.SaintsRow-rev128.zip.zip 954KB
-
ThomasJepp.SaintsRow-rev128/CmdLine.dll.dll 30KB
-
ThomasJepp.SaintsRow-rev128/Newtonsoft.Json.dll.dll 514KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildPackfile.exe.exe 11KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildPackfileGUI.exe.exe 19KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildStreamingSoundbank.exe.exe 9KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildStrings.exe.exe 8KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ConvertClothSim.exe.exe 7KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.CustomizationItemClone.exe.exe 19KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.EditPackfile.exe.exe 7KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractPackfile.exe.exe 8KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractPackfileGUI.exe.exe 13KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractStreamingSoundbank.exe.exe 13KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractStrings.exe.exe 10KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.RecursiveExtractor.exe.exe 9KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.Stream2.exe.exe 14KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.Stream2Update.exe.exe 10KB
-
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.dll.dll 96KB
-
ThomasJepp.SaintsRow-rev128/Zlib.Portable.dll.dll 79KB
-
ThomasJepp.SaintsRow-rev128/external/packed_codebooks.bin72KB
-
ThomasJepp.SaintsRow-rev128/external/packed_codebooks_aoTuV_603.bin72KB
-
ThomasJepp.SaintsRow-rev128/external/revorb.exe.exe 71KB
-
ThomasJepp.SaintsRow-rev128/external/ww2ogg.exe.exe 629KB
-
ThomasJepp.SaintsRow-rev128/extract-soundbank-sr3.cmd72B
-
ThomasJepp.SaintsRow-rev128/extract-soundbank-sr4.cmd72B
-
ThomasJepp.SaintsRow-rev128/extract-soundbank-srgooh.cmd74B
-
ThomasJepp.SaintsRow-rev128/license.txt832B
-
ThomasJepp.SaintsRow-rev128/settings.json102B
-
ThomasJepp.SaintsRow-rev128/templates/template_customization_items.xtbl20KB
-
ThomasJepp.SaintsRow-rev128/templates/template_customize_item.asm_pc2KB
-
ThomasJepp.SaintsRow-rev128/templates/template_customize_item.xml6KB
-
ThomasJepp.SaintsRow-rev128/x64/Newtonsoft.Json.dll.dll 514KB
-
ThomasJepp.SaintsRow-rev128/x64/ThomasJepp.SaintsRow.EditPackfile.exe.exe 7KB
-
ThomasJepp.SaintsRow-rev128/x64/ThomasJepp.SaintsRow.dll.dll 96KB
-
ThomasJepp.SaintsRow-rev128/x64/Zlib.Portable.dll.dll 79KB
ThomasJepp.SaintsRow-rev128/CmdLine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2bef13cdd0d936d2adcef5a40b2a11a733b1ade605ff9d368f69359d8ae288a9
- MD5 af7aaf5a3d93f933c426cb37986f07d8
- SHA1 b98639727ee718bb03391cf5fef1cce3bda7ef11
- SHA512 3a34ff689b6846ea4c862d443c5e9f6ecb6c387cb90f47c559d353a6a06d3c7e075a6869b6527a0e9720b5b4131ecdfb5e8d0967aa0dbaabe1351258f701fa75
- SSDEEP 384:VjmCjvvkfbJ6HnNKHPbthtugA0mpu6frs1eenSgffqWIhtC5i9+tB/WE:Vj/3gwHNKjtStDs1eeSOcg49eB/
- TLSH T1D2D21A4563ECC376DAFE2A7474F1522903F2B5873962EB5AAF80609B2D57BC304113B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
35926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\SaintsRowTools\CmdLine\obj\Release\CmdLine.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 575e30f98e4ea42c9e516edc8bbb29ad8b50b173a3e6b36b5ba39e133cce9406
- MD5 c53737821b861d454d5248034c3c097c
- SHA1 6b0da75617a2269493dc1a685d7a0b07f2e48c75
- SHA512 289543f5eea472e9027030e24011bea1e49e91059241fe6eb732e78f51822313e47d1e4769fa1c9c7d6139f6a97dcfef2946836b3383e8643988bf8908162fb9
- SSDEEP 6144:ZeC37wbJmJ5bd4m15M+S50cK7q2UGu7WEYEaWdDBLH5WHxJ16Wi/h4aBTBFFu4JD:p37Ogr2VAHx7JijBZdPfP
- TLSH T118B43A502BF89726F6FE2775F434061953F9F45AE67EEB4F9A4095AA1C837804C00BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
530998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\Net45\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
511KB
Virtual Size
511KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildPackfile.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4f2ed73157140215b8dda1d4c15aa63a93e5993c69e86029f90bc646666f745c
- MD5 2ead415b516ae67be9a03828841b871c
- SHA1 6558a6c6ff24faa0b8444abf38180c7a2f94462e
- SHA512 2718ca4a3e0e41e0e56f6d9ce6bde441b16e23f0671a89495c5a38285ceb6b0dd90932b60f9f63a7b6a52ea99dfb14704c41f6be3365abc5ae3b69179d3e0f28
- SSDEEP 192:2gPrYP/nNLZX0h19lQF81ZsxwMttMInm8Ryw/:2NdLZX079mu82MvMInmJ
- TLSH T17F3208056BEC4236D4BF1BFC7C7142200B7AA64FBA61C7AD8955214FAF31B5048A3BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
16238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.BuildPackfile\obj\Release\ThomasJepp.SaintsRow.BuildPackfile.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildPackfileGUI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 3fd5dacd2135ce132ed06735e3694799771a161c70859285eeda0b727dca9693
- MD5 ba0fbdc1b3d2b9a1c4ccb10de65a5a5d
- SHA1 4cbebf855448e4c99c402de17011620934e15e6b
- SHA512 0c2ef29b6ecb125c9ab41dbe37a8a63414d42bce28b2cb53f697411775dfed3df26d266124416c2aa28ccc21c875f456845e96866cb4530b76498366cfeef5da
- SSDEEP 384:36W/nZmjFT1Bd6xm3gaIvovkCbW8uAxIG9gF2hWR/h6scfT:KW/ZxOkCbW8By/R/h6sC
- TLSH T15392085A32DC4637C9FF0FFA69F1125007B6B51A5562EBCC4C9B308F59B6B0085A2B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
24102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.BuildPackfileGUI\obj\Release\ThomasJepp.SaintsRow.BuildPackfileGUI.pdb
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildStreamingSoundbank.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7cc14516bfad808d19fa6b09baa5e6547272b0f77875148425e3782a34aa7cc9
- MD5 7b57f1582996af2b87a736e7dfa0d804
- SHA1 85cbe04bbf14a50adc687ae1b9efcfd7dec9cde9
- SHA512 15b11315963fa4bc2bdea816e154b53e3a1b8dcb615a553a0ceaf717ae2adfa194fef7edb4ccae16c593a151dd5e3999dd85cd2fcb5a1ee1946f7023247dd28c
- SSDEEP 96:BZKJja7ckGSt91jZwzd9i44d+GjTIfgeJ1iw8Otn7Msr5BMKSKPNzNt:BEa7ckGKPZwpg49KOd7MsaW
- TLSH T1C8120A3967C8873BE6B78B746CB153500132FB8E694386EE9C89B50B9F317504DA2B71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
13926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.BuildStreamingSoundbank\obj\Release\ThomasJepp.SaintsRow.BuildStreamingSoundbank.pdb
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.BuildStrings.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d7a4c58721b1fa8a9893aea63930385a8617fbd1bfdf174ce167834b6733840b
- MD5 f03cb0f5a6f8d6a47f3396ec1308c863
- SHA1 5bf2d9dd3997578b72a48334683f9b1c75b69385
- SHA512 cf0486448068b6da5a4b43fdaeeee658ed3c3380de53145da35cb721cc24387096cb2c844746659ca5fcd57d8cd2249a69974d11c7643b54d21727967acf8840
- SSDEEP 96:w/ps/aB5fnYOAnHlWOZq0TZZCR7itk9HJxdtBtWbGULoeIT0KwzNtF:wh7ngnsyqmby7pPxNAqG/
- TLSH T11502A624A7E95235E4FB4F3C6CB2020105B6FA5E5973CAAEA985110FDE31B544AA3B70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
13790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.BuildStrings\obj\Release\ThomasJepp.SaintsRow.BuildStrings.pdb
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ConvertClothSim.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b16495386f0c7d576356a33275a739aff6f968d08f329844bb677d18964435af
- MD5 ee3dc2fed0ca2c96d03b8382780b9da1
- SHA1 bd4d96054557ac0395b920c8552661dc54b4a93b
- SHA512 bbf4786a6e503ef134b75d09c08afaf25e07bfb2283aabceeba918af95f444bf2aac76f71273d35213a9251fc3b372a1773285ee9aaf6c8af897371d976e782d
- SSDEEP 96:ik0D3wF/ckiZKanr3WEpWvQKl74RRYtQnC27K2WBzNt:DM8YKk3+l7TkQ
- TLSH T179F1B41483FC8B3BF9F76F34BC62031107749B856DA2DBAF6580600F9E216644D66BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
12454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.ConvertClothSim\obj\Release\ThomasJepp.SaintsRow.ConvertClothSim.pdb
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.CustomizationItemClone.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b18d10181d6f6385fcab00dafd0a531815e66d94afc028dd702e8b89909eb859
- MD5 2d1173cc424ef25f1dd77220069a832c
- SHA1 e45595c9c46e074e8c625a4e8809eb72b9703ce3
- SHA512 92f267caa98f7918908e5af114887d864b88c164cc83c356a71b131ba9ebde1dfef43b419577eade90775a8db38b3808476e5021e6ad4d463e36ea070666e58a
- SSDEEP 384:KGN5DF2uwr6QZa/FpOvRVo4xGU9vjy89j+5UPqPxw9mboTTvvqo2c:KGsuwr6QZa6vfjRvjyMj+5UPqPxw9mbs
- TLSH T1CE92184972ECCB65F5FF0B3869B052144BB1B6D34A51DF292CCA60CF5C32A188965BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
dffsf231231
Minor OS version
0
Major OS version
4
Entry point
24878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.CustomizationItemClone\obj\Release\ThomasJepp.SaintsRow.CustomizationItemClone.pdb
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.EditPackfile.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ef252472c7b9b38bb458f4d8f24eda662c9a8dd370b899bf0190c3f522aab80b
- MD5 9ebb86ff9d3bba82bcbb5f99d3db61e6
- SHA1 cc8c44e17b46d4cb15d7861204a2ad655821fd37
- SHA512 3373476cea634f709f13b64107d3a3a3e7ec9df7a9ef16a98ba9b5cf5fd15863847374cd362e72a1c01522373f024d42b758a03eefa94aaa9682c1539b9ed96a
- SSDEEP 96:nA8/C6qGgbv/qXXIIwSFlqSDNu55L2T5LH2K5LH45LLzNt:b/qJbKXXkSFlqSDUA2OE
- TLSH T1F2F1A419A2D8463AEDF70B786DB216100678F206DEE3D79FDC81624F9D31B614853772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.EditPackfile\obj\Release\ThomasJepp.SaintsRow.EditPackfile.pdb
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractPackfile.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9da34ba9cb69ac0ce4200c556769f1d6233c39aa404de6b569191487176cce5b
- MD5 e32da2be79c8e876a65534044cc8ee5b
- SHA1 fadb4ded846d8a56d764b509f0ea78d6028eb048
- SHA512 42948ba4f09b696eace71f76cb3fa45d45943d4a41049734258a2d71a27b7b5c4683c3a904db0883389333b4a661af4f2750a89049cc0cfda6240fcc8fa10dae
- SSDEEP 96:vq64yNnoM34Zm3Rek88ZsBM2tIBM8NuRFd0m3xeHmnC6H8K6HxwzNt:SM2Zm3wVVM2qMMut8Jk
- TLSH T143F1D714BBEA4636E4F74FB9BCA103200A79D74A6A62C79BD984500F9D32F8049637B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.ExtractPackfile\obj\Release\ThomasJepp.SaintsRow.ExtractPackfile.pdb
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractPackfileGUI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d0a40595e862793e96967b2e6a8e8cefe4c1c1b27d3ca992b63ebe4bf61ca08e
- MD5 de6b4c25c554957884a196ceb7f9b6d4
- SHA1 c5e3caf8064562691d4e095f58302e0893719dc9
- SHA512 cb0ef18b4fabc8c949cda814e7966b3a962fd02b290af5f77974c19984904035953e9a3abd4c173a1fb7bbde15f7a219ea7d00c896b604149fe34da830a7c4bc
- SSDEEP 192:viP9FGDxkqwZMbvg1gQzbJlDn4/luOGk0OYOSIBRyFUkbOBe/cfuD/eufvGJ:oFGDxJJkC/lvEIBgOBe/c8/3fvG
- TLSH T167520A1937C8C137C4FB0FBA9DB316100775E2165C26D75F5D99204F9AB3B5089A2BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.ExtractPackfileGUI\obj\Release\ThomasJepp.SaintsRow.ExtractPackfileGUI.pdb
mscoree
_CorExeMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractStreamingSoundbank.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a720cc33436f75138a81d22df71bfa1e6ceb14e57bf5cca479c202d5bda1991d
- MD5 cc4e46f69ba93eb87bf057b3f2d7bf4e
- SHA1 eb495d9d905323b9c2027174d5e3725eb0d8aa56
- SHA512 28b4405f94bfacfe884aacafb7fa9c4a3a509d125b810654e6a9ec5bbdf14cd743aa2898bb1a0fb936a56d25b55aba9f779b1eb62c16d228737876040b5a23de
- SSDEEP 192:U8d3eV0zCbXeycgmKnQOPbcJEUB1GWZNz6/7MmQIRs1U:rd00IeycSnLbMDTX7g7MmQF
- TLSH T1415209556AE88B6DF0FF5B3679B1134102B2A99BA472CB5F4EC5314B5E327408811FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.ExtractStreamingSoundbank\obj\Release\ThomasJepp.SaintsRow.ExtractStreamingSoundbank.pdb
mscoree
_CorExeMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.ExtractStrings.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5a32386a24a3b32180b63e95b19ac806b415e4675f0b071399f418a330548759
- MD5 4fbcb6e203cba56e2e2162f60d991baf
- SHA1 e6749fe669afd0440d7050107ecaeabb8c5c33d6
- SHA512 971d057a8d57999c3b52819567a65f9a1948c463192fbb61e6c1413446931de9267b46d3dd3ac6f3541aef8b1e1f5554cb14f2f1ab7213e32d2711cf246a73a8
- SSDEEP 96:R212gVHED/OLo0BQK4JDlhgu3cErlsVNGRc128/PtSTEIBVbDjjBJHtW0vc6UmWg:81XLdcVxsfGO1lzIP3HM0vcxEF/
- TLSH T15D22090CB6C9C726E5FB0BB47C72914004B3D76A5912DB6B1DCD604B9D327488993BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.ExtractStrings\obj\Release\ThomasJepp.SaintsRow.ExtractStrings.pdb
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.RecursiveExtractor.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7da497ff21e4a9d386ca8f48b14ac4abd3b20dfb5887fc9d9c2330508adc15f2
- MD5 1af73aac11b16e347407b7724ca04bd4
- SHA1 30ef089a67ee5c63a5060109e05876a44f460779
- SHA512 b67a8431ef005e22e65c246fe5c7d54633f370ee4182493c9d553ad75da3fe1d2ce586bbad81559e237826c40f969b45409e41527089f46ec3214893a0171d19
- SSDEEP 96:+gzF6Hom6nH5tkol4QSngZDWNJBZFtAvtVA7OxhnG+CaalGZtvJr0Fxu50Klbe3c:+6/aDgmXFO3hFZDQK
- TLSH T10912C805EBEC8536F4FB5F786CF147000635A74B9962971E1D89210F8E32FA089A77B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14530
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.RecursiveExtractor\obj\Release\ThomasJepp.SaintsRow.RecursiveExtractor.pdb
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.Stream2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 38d1a61b2519e6b915c23b4ba25c0c128693dc49b05787c9db08b70eaa2d3014
- MD5 317074a24c00bcd6d0a97afefd603848
- SHA1 068656990b3ba19766509c3ec7bdf8f130bd1280
- SHA512 0499d475b42841f43d3f075b78f60ccebc72b702772654ec1d6d846a5959a3fd475541de15f30c03da3d698a716b53ea60834d426c9cc15d39763685f0638d5b
- SSDEEP 192:N7y52eZcfJJpCfvfLFQx/ubCLzMtn3P6Ghf3MvYMyk6CFfI:N7ykeZcfJ2fr2x/ziPr/MgMX6CV
- TLSH T12E52B71876F8CA36E5FF2B747472866005F6A61F2F21C51D1CCA90CB5E35F104666BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19242
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.Stream2\obj\Release\ThomasJepp.SaintsRow.Stream2.pdb
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.Stream2Update.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9f53654da99dc149ffa9c001afa603cb77f09e8bffc08a8899f1bb9a966eb97c
- MD5 513f810c98644858fc38377b56a50c5f
- SHA1 f449125efb9115e58f3755759d7836263b0ac17b
- SHA512 a7d227f6b6f1c281dc0f0f594429c41040502cfa930b230d6f1cd42f84fc41a341cc38ed5584b5f0523a94123dd941c0654e8d806b6a2eb9df53a65156c08809
- SSDEEP 96:IgQaUsUc0qfH68WJhf/bvQ6k4979b185sWgaR1xE5xUnAxnAlNY+Wzt+urv0QGKn:IKqMa8Qh37sG9S53gafx5naqY+Wzbog
- TLSH T1B722E61AB7EC8722F5FF0B382CB116050275BB676D71DB1F8886604F9E2176449A2FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.Stream2Update\obj\Release\ThomasJepp.SaintsRow.Stream2Update.pdb
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/ThomasJepp.SaintsRow.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 292f148916f3cde302c0f91875a7bfed49994aa638670162c9a0e7addb3ffa69
- MD5 4b66a232def84fc2c627c035102553cd
- SHA1 8fb5bd4c93e88d7ae5a33c81c2ffc0874d269e76
- SHA512 82e08854b7ca378befabccec7a5854a55cd553731a1d039c570a875ca636967c09057caba643409be57f68971697289f9d5352acfb8431b45dd7afea799a0433
- SSDEEP 1536:3DjxQeterk8XTcs3q30SluTx7aXEgwXpUq9keztC3aBkOrQnSU69k:3DVQWn8XTe0SYV7BVkepC3skHS2
- TLSH T139A35C152B988B73F66E577A70F011448BB8E0665997F38EED4CB4DA29337C40D826B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow\obj\Release\ThomasJepp.SaintsRow.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/Zlib.Portable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe84781ba35ca9cc5ff5f73fd08d2a66c59e5257b4573f5fe59743f30bf78e42
- MD5 82028f43e37211e898f283eff4a20f60
- SHA1 06d3f6567be1e4335fcdcecbf488763c49267923
- SHA512 2e8638103742b31e80a4baecfe0c94f3c596941bd612e2c2489443b194d850d4b3ed01d5fbfe6da8c63f130a9d29cec062e47fd47a81e8f5adb0495a7e8a7cb9
- SSDEEP 1536:nokqMd2Fm6HbqvsvqvdYvRXFCZAc6hMn1vdFIzykd7ZjY8lKqWsI/KQ73WmnzEPg:nokqMd2Fm6evsvqvdYvOZAc6hMn1vdFb
- TLSH T131832904A7DCA7BFD6B4C6FEE4F012B153727471AA26EBC6A44831EE19073505A11BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
76830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\GitHub\Zlib.Portable\src\Zlib.Portable\obj\Release\Zlib.Portable.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/external/packed_codebooks.bin
- SHA256 442e9442aad0bbd263df4d721d6747a74d440c899978b1fab984bcbf455fd592
- MD5 33db04ddedd9c1f66bc6c2f19739ab7f
- SHA1 cf6918764efb9d214f19f0dbd46df3348d97aed4
- SHA512 238c07b0671ceeaca508f678511c3a091644566550933ea731dd94b5cb633656492488ede076b44d896923670e84dd8eee84414b5602ff8a19a7fe74d7ed703b
- SSDEEP 1536:3fx72Ne0aFG98CoXuO56i0xVYA6cTjTgki:V2NxagSCoXuOCpTjTO
- TLSH T1177349B6EB738EBBFC97B4320095540472F1E0646B79C9D74843A975A8392E03E7271E
- MD5 SHA1 SHA512 SSDEEP TLSH
ThomasJepp.SaintsRow-rev128/external/packed_codebooks_aoTuV_603.bin
- SHA256 00a93eab267d281401b1efd54e888a2e183299b9e6c446c48d09f701a89d9d27
- MD5 e273acf70391c12c767f67784c433a0d
- SHA1 a7ff0e3f5d947fc3c95cf07b411ae5f867c3acb8
- SHA512 ca0369b0d7f94f620bd75637af27f2777af7a0cc89c60cf848ca992ba0392faae84e37fd2ca498356cafe8b8cf048d0837d00dce8755146d301ab10d8d4c3d27
- SSDEEP 1536:w6+XAY6NFVBxXwoYF3eM7mF0iCfRvw8EhPd:w6PFwoYFOM7mu9Ro1hF
- TLSH T121733967EB739DBBFC67B4320095980473E1E0642B79C9D74842A965A8362E03F7371E
- MD5 SHA1 SHA512 SSDEEP TLSH
ThomasJepp.SaintsRow-rev128/external/revorb.exe
- SHA256 1e0dbe4056a26ac53924d671f3360b1a328291c059dccf5c67cab73dd7f3b84a
- MD5 31e01e75cf4d9cca16d3acda0032ed99
- SHA1 cf18735bf57482688d69c1bb08242ea5649120d1
- SHA512 707165c2f687c4227001a64300d691ec79700834bfb35ccc37c0d6919af504c41156137fd0fd9cad83464b20687878eddd8682418489451e52902b9316cbdca7
- SSDEEP 1536:Qc3oS+PDAZEcjbxmxl48R9wKYSEzL6C9cYcRvTplP1Pac:QcbTxmTodSEV9c/plt
- TLSH T1EC630238651FAD5ED5054E733EEDC0666D03181E0EA3D30E6F2A04EF8DB196B2A86C53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
140800
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX2
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=6, id=149, productName=VS2008 build 21022, version=21022,
count=7, id=131, productName=VS2008 build 21022, version=21022,
count=3, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=20, id=137, version=21022,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=52, id=1, productName=Unmarked objects,
count=1, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
ThomasJepp.SaintsRow-rev128/external/ww2ogg.exe
- IMPHASH 4caf64479be85ac5943c8d97943a752b
- SHA256 9b1dd51fa6c466cdb86f7a2e58760f5c563e037cdfea97ce07da33b4db3322f2
- MD5 b20597b44d5b9a5e97c512320966e20b
- SHA1 9baff2e72021ff75e152b63f5c922f15b38a5537
- SHA512 71040b2bccf0bc9cf16d2120aba2c0bad78595d88cf22540255d64d2b8e65bc61c4e3f2343595e69a1e0104784af44c51476cd55afc0de15e9d00e95d46d852a
- SSDEEP 12288:/+XYwUozigSEoflR/txE8wnWITbnlz2ozwMJEeVWdtH+3V1e2YaMFHI4k+f4A9c7:GXYwUozigSEoflR/txE8wnWITbnlz2oJ
- TLSH T148D41A66F64386B5CE1749F1094BF7BAE520EE2940318C1FF388CE64ABF5C62256D721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5344
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
ResumeThread
SetCriticalSectionSpinCount
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
__dllonexit
__doserrno
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_filelengthi64
_fileno
_fmode
_fstat64
_ftime
_initterm
_iob
_lock
_lseeki64
_onexit
_setjmp3
_strnicmp
_unlock
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strxfrm
_write
abort
atoi
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
longjmp
_write
_read
_fileno
_fdopen
Name
.text
Size
559KB
Virtual Size
558KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
ThomasJepp.SaintsRow-rev128/extract-soundbank-sr3.cmd
- SHA256 2ccedfb9cc36a66e3a89c2260c744d7ea386fbddff5b823415d3a1f0382e0a35
- MD5 d2bf627e43b34a57a9eb5c3aa9764f93
- SHA1 6ca7562338f5ffb5dd6edd24c99d904c15e1d2cf
- SHA512 343703f443ac5249008acad501b449e16561e59b97d6a5375e983ce8d1b98dc060669f06a56b20f05bce60b9d39885c2643e1a0c23b73350e000ff02d8532871
- TLSH T1EDA0220800CEAA0C3080CCBE0F3833888A0A802E02C020ABBFE0300BEC8002882E0020
- MD5 SHA1 SHA512 TLSH
ThomasJepp.SaintsRow-rev128/extract-soundbank-sr4.cmd
- SHA256 7bcc7f0202918190adbef676541939528557eaff7e36e01d6e10452335070ccb
- MD5 3bc4df17647581c05c18b453784148ff
- SHA1 63522483ce00e355acc9a65be448c4432793e06c
- SHA512 4254d220d9490a4d9de41725481b4741de92af2a8a94851c4c017ab17c0f175a5a530c05f6ae75ebf5aac6d0070aa58ee347ebee6821169b45eea14f9dbec2e4
- TLSH T162A0222800CE8A0EB080CCBE0F3833C8880A800A02C830AABFE2300BECC002882E0020
- MD5 SHA1 SHA512 TLSH
ThomasJepp.SaintsRow-rev128/extract-soundbank-srgooh.cmd
- SHA256 2f34a166accdf01d99c0ef6f0e4fa73cf4302e9ff7b7750078b6615f8bffc6fb
- MD5 92fab76126a5e84b62d49ad8d1a37949
- SHA1 ec9f0bbc31857e934bf41c09de49bb344e169a8d
- SHA512 316ddce72283169fa708944d5fa09b745ae8ec0a0bba3ba75b5b2f6ab52ce3a6dddd300c06339dfe7d249439ab69bc2937879dc9c7206448dc7d74f765cfd557
- TLSH T1B8A0241401CD450C30D0CC7D0F3433444C15400101C430757F513417FC4001C41D0110
- MD5 SHA1 SHA512 TLSH
ThomasJepp.SaintsRow-rev128/license.txt
- SHA256 8aaa784342b3191613a18e118e903620e7153702ddda1a3c5729fcb3bf8b2f1d
- MD5 1387a9f9acbc1340b18b4a40add7a12f
- SHA1 885da725b59a067425fb31d20e9654f7811ca778
- SHA512 6da241306d8a7e557ed20f735ac716070ca08cd0186d619b1acd2984b94c9214bc034f41a91df78addee8f36050d919a90547e916378f14ceb9833fc24c8ce1f
- TLSH T1FB012F2F341F53B11030139A5E0FD90BE91B906D9E4E0B06F524904DA37A23E82359CD
- MD5 SHA1 SHA512 TLSH
ThomasJepp.SaintsRow-rev128/settings.json
- SHA256 6a3bbf91c77e21d8157c43b3bec6405e9a07fbf90a459999de33ece9e67184bb
- MD5 871cc9343ccc12911076b31c9fd570d7
- SHA1 0ebd9fb9ecba9a2967e2ab7f5482a8cddf903c03
- SHA512 0e17e2833e54d742033df5ad83b60ca7ed92e4c547ff0cebece9f5ffbd2c6dca0888c61265fd0ff3ffdbbfc39688df9da73c4f9ad9db3305bc7543e042f756a1
- TLSH T117B099288A000CC002B0220B8B2A03C2E82ACA2303202822B0BA0C8C0B280B08002BB2
- MD5 SHA1 SHA512 TLSH
ThomasJepp.SaintsRow-rev128/templates/template_customization_items.xtbl
- SHA256 2f9421be7abb15c5558cdabb860611bbe06238b6938e3cb00424b823d63377a6
- MD5 f05c22fdbb6098cba1719f22b7997fef
- SHA1 6c6c894aeef8215a8ad08f8535ef11e297725274
- SHA512 46e16bd97ea08c74e5643faba606b903622b8e8275c1281b0040c3c7b3970bdae3b05aa0571d1ef5a00132076927b8fad77142caf74eab3bbc26a964c7cb13b9
- SSDEEP 192:RM12XVFPTSXJNTUeLv7dmG0pY/IpZ+uGJBCz2ltKKcQ:mwPTSZNTUeLv7dZ0pY/2NGfCzeP
- TLSH T1FD92BE0EB4BFB1BE8285B5DE95CA454E6230C15CC79C5B84FBE084664452ECF872AF36
- MD5 SHA1 SHA512 SSDEEP TLSH
ThomasJepp.SaintsRow-rev128/templates/template_customize_item.asm_pc
- SHA256 852e9331d8453ed751679c98ca380987e807ccf60118e36d9f265e62dc7841c4
- MD5 932c376db0f47515f6b9b3629a575eb4
- SHA1 994f8732ca3f6dd6211b49a7aa875d763d4060ad
- SHA512 b09783fce21326273b5dce217cf96ccc90540c4d3e950965b450b90c7df7ad1dd79e2bd6fec4a01269f253ced47a8fab8e3aca0987de677f1fbcc01d060dbcd9
- TLSH T11C4132BD496E58517407DC16A62EC54135B6D942DE0517B8BADCC08CB3CB2FC063624F
- MD5 SHA1 SHA512 TLSH
ThomasJepp.SaintsRow-rev128/templates/template_customize_item.xml
- SHA256 f3868d5bc0b5decf07eacc4c4c26550e881f8bc9770a0d7c860d3222c0ef9c03
- MD5 32c8df23fcc4b9c8a38c66904ab4e0c5
- SHA1 2ffa3d001605434e00122dd4d1a36cb2f14c5283
- SHA512 cfdcb55cd8e25b3f8d69cee61eff87e3ae4f87b418b357402c1877cd76597fd4b08bba7e8c14caa99fb4f221542f4ed90f4a4a3ca35024b4739641da2a512bba
- SSDEEP 96:wiLEY4hBUlrkR/td9vyAJSOBV+EAwAwO0ZcfVpSwf+j7bbMxmY11cYhRU8npE23W:wiL/4ParSyAVjdAxu2gDUJho
- TLSH T101E19A013D4D6E229744636BDB3BF2EA26634D2736381665B05EE837D2C7B990E18353
- MD5 SHA1 SHA512 SSDEEP TLSH
ThomasJepp.SaintsRow-rev128/x64/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 575e30f98e4ea42c9e516edc8bbb29ad8b50b173a3e6b36b5ba39e133cce9406
- MD5 c53737821b861d454d5248034c3c097c
- SHA1 6b0da75617a2269493dc1a685d7a0b07f2e48c75
- SHA512 289543f5eea472e9027030e24011bea1e49e91059241fe6eb732e78f51822313e47d1e4769fa1c9c7d6139f6a97dcfef2946836b3383e8643988bf8908162fb9
- SSDEEP 6144:ZeC37wbJmJ5bd4m15M+S50cK7q2UGu7WEYEaWdDBLH5WHxJ16Wi/h4aBTBFFu4JD:p37Ogr2VAHx7JijBZdPfP
- TLSH T118B43A502BF89726F6FE2775F434061953F9F45AE67EEB4F9A4095AA1C837804C00BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
530998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\Net45\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
511KB
Virtual Size
511KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/x64/ThomasJepp.SaintsRow.EditPackfile.exe
- SHA256 d576a2f5f1d1554fe2e92f0e15ec79375a0052620033d148eb1b9290586acd47
- MD5 37d9309f6c6ccbad22e1aa11cee4e099
- SHA1 e3d3da8fb2bb7127e803a4e1717f95fa670aceb9
- SHA512 beb1a9f4421ac1107fd67eaab001e2c50190bd4e0276516478101bca61a46057126754e2402dceb699113a3e86923425b0773f7095b66e55a36b846c3148a36a
- SSDEEP 96:FA8/a6qGgbv/qXXIniwSFlqSwpu55L2T5LH2K5LH45LLzNt:NXqJbKXXetSFlqSRA2OE
- TLSH T182E1C508A2E8863AECF74B786D7216000678F2069DD3D7AFDC81628F8D31B114893772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow.EditPackfile\obj\x64\Release\ThomasJepp.SaintsRow.EditPackfile.pdb
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
ThomasJepp.SaintsRow-rev128/x64/ThomasJepp.SaintsRow.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 292f148916f3cde302c0f91875a7bfed49994aa638670162c9a0e7addb3ffa69
- MD5 4b66a232def84fc2c627c035102553cd
- SHA1 8fb5bd4c93e88d7ae5a33c81c2ffc0874d269e76
- SHA512 82e08854b7ca378befabccec7a5854a55cd553731a1d039c570a875ca636967c09057caba643409be57f68971697289f9d5352acfb8431b45dd7afea799a0433
- SSDEEP 1536:3DjxQeterk8XTcs3q30SluTx7aXEgwXpUq9keztC3aBkOrQnSU69k:3DVQWn8XTe0SYV7BVkepC3skHS2
- TLSH T139A35C152B988B73F66E577A70F011448BB8E0665997F38EED4CB4DA29337C40D826B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\SaintsRowTools\ThomasJepp.SaintsRow\obj\Release\ThomasJepp.SaintsRow.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ThomasJepp.SaintsRow-rev128/x64/Zlib.Portable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe84781ba35ca9cc5ff5f73fd08d2a66c59e5257b4573f5fe59743f30bf78e42
- MD5 82028f43e37211e898f283eff4a20f60
- SHA1 06d3f6567be1e4335fcdcecbf488763c49267923
- SHA512 2e8638103742b31e80a4baecfe0c94f3c596941bd612e2c2489443b194d850d4b3ed01d5fbfe6da8c63f130a9d29cec062e47fd47a81e8f5adb0495a7e8a7cb9
- SSDEEP 1536:nokqMd2Fm6HbqvsvqvdYvRXFCZAc6hMn1vdFIzykd7ZjY8lKqWsI/KQ73WmnzEPg:nokqMd2Fm6evsvqvdYvOZAc6hMn1vdFb
- TLSH T131832904A7DCA7BFD6B4C6FEE4F012B153727471AA26EBC6A44831EE19073505A11BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
76830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\GitHub\Zlib.Portable\src\Zlib.Portable\obj\Release\Zlib.Portable.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ