Protogen_sex_mod_x64_v2.zip
- SHA256 f8e19113894abc72eaa840a949e265c41e0b7587464781e649c493b23455c3c8
Static task
static1
1 signatures
General
- Target Protogen_sex_mod_x64_v2.zip
- Size 930KB
- Sample261107-tynblads6x
- SHA256 f8e19113894abc72eaa840a949e265c41e0b7587464781e649c493b23455c3c8
- MD5 5d872a5554c6bb6dd59eb5f785092eb1
- SHA1 597917c0d47e5874a2b560c36f3c134d75acf983
- SHA512 ca25aa3e1bba65c33fd7bc017544898296f7d3cea5211e483ee5de83009eaece028981b5c8d17babf79519ec3ac727ad8e96295b9ee6fb5f9f6962e0d6f1be53
- SSDEEP 12288:HoILfsRx26gkWcQ9OMe/TPE0KEPnIfRNTPR9ZXKGWjRQQIS3wVk9G1OpeD/gZLLT:Ho6fsRx27OMGRK0nIz9xXeQo3wU7wK
- TLSH T102153310A87F70FB433700D75DB05E2B26D7853C0D8B69D938083FE5EA9BBE625985A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/0Harmony.dll unpack001/Mono.Cecil.Mdb.dll unpack001/Mono.Cecil.Pdb.dll unpack001/Mono.Cecil.Rocks.dll unpack001/Mono.Cecil.dll unpack001/MonoMod.Backports.dll unpack001/MonoMod.Core.dll unpack001/MonoMod.ILHelpers.dll unpack001/MonoMod.Iced.dll unpack001/MonoMod.RuntimeDetour.dll unpack001/MonoMod.Utils.dll unpack001/MusyaGruntz.Inject.dll unpack001/MusyaGruntz.Runtime.dll unpack001/Protogen_sex_mod.dll
File Explorer
-
Protogen_sex_mod_x64_v2.zip.zip 930KB
-
0Harmony.dll.dll 288KB
-
Mono.Cecil.Mdb.dll.dll 39KB
-
Mono.Cecil.Pdb.dll.dll 88KB
-
Mono.Cecil.Rocks.dll.dll 26KB
-
Mono.Cecil.dll.dll 353KB
-
MonoMod.Backports.dll.dll 27KB
-
MonoMod.Core.dll.dll 436KB
-
MonoMod.ILHelpers.dll.dll 4KB
-
MonoMod.Iced.dll.dll 630KB
-
MonoMod.RuntimeDetour.dll.dll 71KB
-
MonoMod.Utils.dll.dll 338KB
-
MusyaGruntz.Inject.deps.json448B
-
MusyaGruntz.Inject.dll.dll 7KB
-
MusyaGruntz.Inject.runtimeconfig.json377B
-
MusyaGruntz.Runtime.dll.dll 77KB
-
Protogen_sex_mod.dll.dll 82KB
-
README.txt3KB
0Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 70e7647876b6c3d874ea99b56627a95d1dce2e1dd791981a002578a2febc9bbd
- MD5 1dddd96a0a3ad2c4a800cd6215d88f37
- SHA1 72a94174c94cd414406eacb95caec8497c7793de
- SHA512 7243dae091166fd641646949d12d1b66e6f4b85b72ef50946405577bf8b8c3a1c0f4558916801f5d3ee4dc82c974d64199ddfa2a01b73d9ad8263213198a9b17
- SSDEEP 6144:t4zaS+Nn+hix/IRhHaAA0KpyipLq5jDLg97sl:8aterFLKJWtM9
- TLSH T105545A9453B85E59DABF8B78E43004948770E8A6E9AAFB5D5C85D4E80CD7B40CB123F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
300138
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\HarmonyX\HarmonyX\Harmony\obj\Release\netstandard2.0\0Harmony.pdb
mscoree
_CorDllMain
Name
.text
Size
285KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28cb367972bdc1cd43e4006306af2fd96d37f4ed4b239ee90e1dc7237a93af7f
- MD5 7287a874e5384c339299b7f3a7588141
- SHA1 ff5ca316d3492b5d306e334ea92dedb178f00fed
- SHA512 e0b787056a6e282158b6e27adb9156503fec010b7e524aff145ff1394f5a9bbbb31c51993613e598ff448637e159a6764c03f4ab3d7326db19604e973e079f45
- SSDEEP 768:08b1qk4Ccx+fcVl41qWa1FacyzS33XSQvaCCEHHTQVAWGmx:nSx+fcVKEWaHyzS33CAHTWx
- TLSH T14B033B047BAD8B2BD9AD4AFCB459120557F1916A6623FB8B8ECCB0E3BC07F401543667
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\netstandard2.0\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a332332633fbcb20e8d50e49b4db7bd1557721417122cf0c5f4c42f2332391d0
- MD5 6c28c1e5cb24f0955b8ad1620c7ee794
- SHA1 92d5959bd6006211e7951711fec37b7deebdd69d
- SHA512 f2e089604d541a9360608e76ecce0a6d5b4e8c8ebaf739965099d75b86e0fe53ce5eecfa50a62ebec47315ccf75f56efd5c5eba118bd7971145bdec1cc3a18b8
- SSDEEP 1536:rexcDkwB3u9jX9FIYzaTN9Q+hwV+BwIfrhALYKXN7JG3OSkiAvs:rex+kSe9nzztowVIwI1Ar1JGBkdvs
- TLSH T1A6939E35DB94F767C3ECA9B624590D040BF1D26AD163AB098DC95AF8380FB7506323A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
95466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf992f3dce364ebcc3200fa7832ef07e20b4e2dbc3a8a6213ce44e3d239db984
- MD5 c73fca71d0872456a8c909e969bb63fe
- SHA1 fa38c450742f8f63865649117c1224fbaf88db50
- SHA512 ca1a017f58a5148f47b44abbf54f6b5df4e9c47df6900321d0a070ff56be15b9d6f01d46065021e73eea7a7c350700647b5cab28c9f1c3690492ed38ceddf2f9
- SSDEEP 768:flHJ9KA2pPfoyE+lzNvVyhRORU5euXekYTkj:f9xePfHl6jORU52tTkj
- TLSH T1E6C21A0123A5CBB7E2EA413A78E2961402F1C14B6813D74F9DCCE1AD99CFB456731FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 831dca77470d85cb6ffbea3072daa7a3df5b7c9fcfd9c3f43674a9be99d4bfcf
- MD5 1743a1d9a9fe195b24f8afc7a71d86b9
- SHA1 9693faf12cb4c25062bf3197ab01b1c69be019cc
- SHA512 89c7fd4613c0bf426a9f3ed0734683073048c9d5b55e466cf20b724d4d1f99487e582c7b6b5e57762503ea82b283afa70ea50867c14c2a92d1d3e37c98d4b2ac
- SSDEEP 6144:DT2p1QxCThYRykN1creGO/bo5sE/G9mq63iyxZA4JPwVI7TtSi:XI1Qk10mUbo6E/mmqM04GI
- TLSH T12F747A3923FC536BCA8F93B6E06A043D86F5E005638BEB5D59C0E6F55C43BA25902277
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
365338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
351KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MonoMod.Backports.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac3f32bfd44aab83abf71abdff6dde548d57b7c0f8a1fe6d8964e348b4eeafb1
- MD5 f94c2e77fcd91fd3557cdde111d91733
- SHA1 d9290e2b66de1d5fe0796f2b5c9af1347206e589
- SHA512 f239152369049deaeb135fdf17bef1934ea133d0cf081d26f7f346d5a5da6240d484d1ee80c3b0b45a08dc7e0b9b4c2b6141d4272a5a3098d051dbfd3907d298
- SSDEEP 384:2nBenfGWkTGnkySoMYMMAbGfOyZD+gt4imoE+MgAJNCEmQRf9iwLry:2B0G3TvySoMYMMAbs+rkEJp9x
- TLSH T1C2C20A18FFAC8233DFDF1BBD9CB1524146F1E98038726B2F310CD4A95816BD8659636A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32802
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/aaron/Documents/Source/MonoMod/artifacts/obj/MonoMod.Backports/release_net8.0/MonoMod.Backports.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MonoMod.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f9e1e88e408e436027ac14a1d2ff00bfbbc2603a78959c34ce92af8f7875c65
- MD5 75771efbd07da33433d1ae3a7b3a3a5b
- SHA1 0da9bdbea578c43e3e0a7c8e9b070bfb8f254cd4
- SHA512 a0f92c9d54407508f0bb73cf28c3e354560e1b0fb43f120db6ddac798b5ea542700831ec31282c889b3b0b2f062910bd2ca7b46a11d4a13039255c434859ec86
- SSDEEP 6144:Ccy+inQAwZkKH2M3IYPisskHy7rwoz0n28ZObXit6M3mFsz+5Iz:CcfAql2bnSGwoS28ZObXit6McI
- TLSH T11A948D2437DC1A1EE6DEAE38E5181060537EF8502226E3AD355153BDDCDB3E0AA1A773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
451446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/MonoMod.Core/release_net10.0/MonoMod.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
434KB
Virtual Size
433KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MonoMod.ILHelpers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fdd0e3538340fd78b8f521e62b8cac1ebb7683ac1f27f6aaedfc1044b14bf4bb
- MD5 e9c4bc42d2c2f5b8dd4000fded147f79
- SHA1 5561426b3d2bf6c5665a92e11754b002b95c9460
- SHA512 c8d6733fa2b6d1e3b89c38711a24ff15deacd1e910b32d0e21cc6ef2b152f953c06c9a1c8ee36816b17b3773b3cc63408346c9f5c4c915ccce6055c3e9c21c0b
- TLSH T18F816276979363F3CD1E0B369957F3919B78C21546076B3BAC48A707EC4A36C0923AA1
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/home/aaron/Documents/Source/MonoMod/artifacts/obj/MonoMod.ILHelpers/release_net8.0/verpatched/MonoMod.ILHelpers.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MonoMod.Iced.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e9016ceb961ea07d40f6c9ebdcfd08c88de70b9a0d561fc08689af430b16dfc7
- MD5 6f5b98bf55e4ccd4a061a099ed806347
- SHA1 5db1ee39a9f746fa285f3d299dea35710a39ddcb
- SHA512 8aa7fada56c2f334fad6c7ff676edd496772d14bf74852ef4ce6e479b0e0bdf2b9b9a415176def892a1b670e65029ef0a17f260b3cbaedb19875406cbc04a157
- SSDEEP 6144:AObPoNQOXxt4GKBjxWFjenLG8/DhxgzexhpKe1NpjZOQ32m111/R7u7G:AOjoQax2GiEexhEANpj0Q32m1B7ui
- TLSH T116D4E828F992AE53E16DC7B184F102E26E73E9C8620D9FFA1508542CD8D73F795621F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
539610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/iced/release_net10.0/MonoMod.Iced.pdb
mscoree
_CorDllMain
Name
.text
Size
628KB
Virtual Size
627KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MonoMod.RuntimeDetour.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d386067b00a87db31d1fffc7486ff9b3773c8a56a5678d41b2ac65c3a2dc806b
- MD5 94d26f169752861353f39238a02b8ffe
- SHA1 8c151a6405b9173efa41055e86fdc940bc9241fb
- SHA512 39d582edeedfac079321d583d4ffc06c33cd38297c97441c6e29e95c8ba8042840713d37766faffd1e9ae8c3f63b1bf07b4785962400bac6772aca37497e719a
- SSDEEP 768:RyJpbLNfMRZsXqGStdTcBUnnPf+jbi4SyJxvB45d5t6Uji/gwX0Y24ph5kdPZzWa:UbRpXiPTfnPGjbiy4prjjwfhkDWX4RP
- TLSH T10663271827ED4A67DAEE1B7AF03921424775FE47A433F34A9C8C91F859937840A813B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
78218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/MonoMod.RuntimeDetour/release_net10.0/MonoMod.RuntimeDetour.pdb
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 61d352e5fd3391bb059e64fe4b90aaaa6267f9b0dcfc875f4fc8aaf78f890888
- MD5 b555e8cc234515ae7029da1c47e0ee05
- SHA1 0c220d8363fd29b67fec435cadaf0902bfc26cec
- SHA512 66fa71c94193680d0f68f17c9635a9488eef306b0fcd6e12c3ffd6d802e423b7debe381516bbca13733f27370080755e4b56069781db902963e9d7ae74afee14
- SSDEEP 6144:a8kXrx/1kgUhxsZNZID9fKgFVbaCbAQkK:a/RsOgf9bT
- TLSH T11D743C681BD84B56C7BFCB34E4B018344779F603E26BE38F6916E2E41D47B449A123A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
351454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/MonoMod.Utils/release_net10.0/MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
335KB
Virtual Size
335KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MusyaGruntz.Inject.deps.json
- SHA256 ceec8459bd7040a6cf1da707773b389825b84bf766a447b5bf69ff8f52e8c069
- MD5 5c340f2a660753d62da4a263dfc301d4
- SHA1 52c6926e44b617b4a894cacd46d807988a3998e5
- SHA512 d55b86f6ad22dda98104f468e52c944a966529ef6019586b9fdd8854b19366b0e3fc997a22c6ca4ddf4a49e03efb1a4a4ec84a2d5f69fd31544ac2ab74314c80
- TLSH T1C6F09259E1D45C9302F2A3B194764787FA7356232011298AB5FEE06C4F7395B9810FFB
- MD5 SHA1 SHA512 TLSH
MusyaGruntz.Inject.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4700bd5bfb7d5682cb7d481eb53dc6ed077d4ee965633a9586e05ad27b601723
- MD5 f7dd75ac584ae2f54bd8b85e197af333
- SHA1 82404f3e929aa02c0fdd09706e733ddb3fd298e2
- SHA512 5fa06659a8c99a7f018543fb4f69b690d474b96b8030fffccad31bf4cef724a8e422ffff028eaff45be18f1691aa6c68668d467eb5113d6e5037b4860da46b3a
- SSDEEP 96:QENDeGS6yphncYfaqCP15ZzVDl953xxViTV9:RqhcQfCP1nFl953X0TV9
- TLSH T129F1C71137EC4326DEAB4739ECB222444677FE179822D76E48C4923E5C41B5A8FA0BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\User\Desktop\llll\MusyaGruntz\MusyaGruntz.Inject\obj\Release\net10.0\MusyaGruntz.Inject.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MusyaGruntz.Inject.runtimeconfig.json
- SHA256 2e1693f8326910b07be4292d78dceba9cb49952c500afab1860d09b4d5e54047
- MD5 5aa0a5654d3b22e7ae5a4bb59fec4996
- SHA1 4d4ce9ea1b20e76bac10ba0e4b63ea9a4f518a4d
- SHA512 3ab97eaeb1dfd5721d60912731dd435e527ba9a62bb259078e079eb486669e70a83d5bdcea8c6c012c37dc25761225f778390fe0943a201b224c4842b722bb5f
- TLSH T15DE0DF66DE106DA705FA727AD571C182EA30A32B10202895B4FD1C0C6F776B50212F9A
- MD5 SHA1 SHA512 TLSH
MusyaGruntz.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 283b84be16bef518f3c2d6ec7b825ec3ea05ab289cf7dc233acbeb0cbc49c9bc
- MD5 51c53c624fd1d684ed03551441a3f632
- SHA1 a6d15aea7b4a8e8fa01a94b24d43a67c71b05d93
- SHA512 fec862ae41e48e625c9d3ee8fb3f310cdd982e27b09d7c310795bcc0f51fdb6ad6ef655d933db0de160e531f832fbae671fbb4365b8cbbeb8c097ffe1a47e485
- SSDEEP 1536:5bfz4f8+IKrWywsOscPhrEtY6rKLL/0Rj:c5tTpGhr4Y6raL/Mj
- TLSH T1F973F71AB3EC8250E2BE57751972449A4677BB036332DB8A418F28590B2F7F05E25FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\User\Desktop\llll\MusyaGruntz\MusyaGruntz.Runtime\obj\Release\net10.0\MusyaGruntz.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Protogen_sex_mod.dll
- IMPHASH 9bf7ec0118448c0398da5a9014630e71
- SHA256 c78bf11f19b8b4a875149b8a213e252d5a24002920731498c4707b8828886169
- MD5 50da92883222a3435fc16b7dc66d4e0a
- SHA1 df862b73148b3a75054b1f3d5f299ac2dd2e5f88
- SHA512 1fba8eaa8b4a22b6ac66a1242e47bcfc2da915cf1d5fc5c596658d46e71746961b667cfe90523261a5319c63e3bef883cdc94b66d6074f686dddd67be0b83d50
- SSDEEP 768:IwAmd+HvbKjiJ/Vab1vr8L25otdsdD9kf4xn+IsJDD3jcnI+hrVKIe:7tdoveeSG25otZ4pxs2KV
- TLSH T1CB83E7C17AD51CDAEA65923C95EAD2323A39FCE046138F5B9120D9320E23FD06DD9786
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
FindNextFileW
GetCPInfo
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
fwprintf
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_snwprintf
_unlock
_wfopen
abort
calloc
fflush
fprintf
fputwc
free
fwrite
localeconv
malloc
memcpy
realloc
strerror
strlen
strncmp
vfprintf
wcscmp
wcscpy
wcslen
wcsrchr
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
62B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
512B
Virtual Size
202B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
79B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
512B
Virtual Size
242B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
README.txt
- SHA256 fd654a7df2fe5b2dfb7ee98474c484deb414115d9456c40d4d5a2cbc73dfbafd
- MD5 2f4b3ddbc94016c87af65e139ac8947b
- SHA1 dbb71fbe716a788be7fb27bf0bf22b119a05e946
- SHA512 b76f2eca971fd20c73042da161fca0e3a408daf2e07d30b5a704fb45c0f53575d498d5f5983bcc9a1ee977b18c4014b65f712aac3a71ded20a7eb3263b227fd6
- TLSH T15D51FE608D99A4DE1610F45BE4083A0DFD9A45FF2E6B4341355C2EBE73F1229826D28E
- MD5 SHA1 SHA512 TLSH