卍 ALL 771 VIRUS 卍.rar
- SHA256 c1ecffc65a8e9c43c544fce6fe6ef98699766578a7930e2f50c3db8b16a9b053
Password
771
Behavioral task
behavioral1
Sample
卍 ALL VIRUS 卍/virus.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
32 signatures
150 seconds
General
- Target 卍 ALL 771 VIRUS 卍.rar
- Size 115.9MB
- Sample261111-qw96sshg83
- SHA256 c1ecffc65a8e9c43c544fce6fe6ef98699766578a7930e2f50c3db8b16a9b053
- MD5 466fe9d05321ef1b001ce14d998d7334
- SHA1 ce30ae5271145e73fa59613b549724e33fa58503
- SHA512 58b4f33ba25ab7b58132a846874f04750f4e951351b2a62c8bb2ab64add394f37f6639f7d5630f7029f653b398fc114471fb8e6e514ba43277a48012c0b207dd
- SSDEEP 3145728:kC8tSC8FwyvqOf0Rh66uYY0uOVCT8g+4+strh60zcRk:Z8tSX0DRY0uOVCTj+strh60zV
- TLSH T1754833DE8EB09B4E2CE9B5E7F4918CF1965E1367B0B14EEDC52814C0D9AE3319274AD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/卍 ALL VIRUS 卍/Flasher.exe aspack_v212_v242 static1/unpack001/卍 ALL VIRUS 卍/Launcher.exe aspack_v212_v242 static1/unpack001/卍 ALL VIRUS 卍/Popup.exe aspack_v212_v242 static1/unpack001/卍 ALL VIRUS 卍/ScreenScrew.exe aspack_v212_v242 - ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack001/卍 ALL VIRUS 卍/BOYKA.exe ConfuserEx - Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/卍 ALL VIRUS 卍/virus.exe pyinstaller - Unsigned PE 53 IoCs
Checks for missing Authenticode signature.
resource unpack001/卍 ALL VIRUS 卍/AngryVirus.exe unpack001/卍 ALL VIRUS 卍/BLOD.exe unpack001/卍 ALL VIRUS 卍/BOYKA.exe unpack001/卍 ALL VIRUS 卍/BoBo.exe unpack001/卍 ALL VIRUS 卍/Chernobyl.exe unpack001/卍 ALL VIRUS 卍/Commandos.exe unpack001/卍 ALL VIRUS 卍/CookieClickerHack.exe unpack001/卍 ALL VIRUS 卍/CrazyNCS.exe unpack001/卍 ALL VIRUS 卍/Curfun.exe unpack001/卍 ALL VIRUS 卍/Flasher.exe unpack001/卍 ALL VIRUS 卍/Go.exe unpack001/卍 ALL VIRUS 卍/HighHappy.exe unpack001/卍 ALL VIRUS 卍/Hydra.exe unpack001/卍 ALL VIRUS 卍/Jeff-Killer.exe unpack001/卍 ALL VIRUS 卍/Knuckles.exe unpack001/卍 ALL VIRUS 卍/Launcher.exe unpack001/卍 ALL VIRUS 卍/M4R7AWI.exe unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/nasm.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/VirusBuilder.exe unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/nasm.dll unpack001/卍 ALL VIRUS 卍/MOMO.exe unpack001/卍 ALL VIRUS 卍/Madnees.exe unpack001/卍 ALL VIRUS 卍/Magellan.exe unpack001/卍 ALL VIRUS 卍/MasonChess.exe unpack001/卍 ALL VIRUS 卍/MasonExln9.exe unpack001/卍 ALL VIRUS 卍/MatrixVirus.exe unpack001/卍 ALL VIRUS 卍/Melting.exe unpack001/卍 ALL VIRUS 卍/Monoxide x64.exe unpack001/卍 ALL VIRUS 卍/Monoxide x86.exe unpack001/卍 ALL VIRUS 卍/PEEKABOO.COM unpack001/卍 ALL VIRUS 卍/Popup.exe unpack001/卍 ALL VIRUS 卍/ScreenScrew.exe unpack001/卍 ALL VIRUS 卍/Shot.exe unpack001/卍 ALL VIRUS 卍/Smil.exe unpack001/卍 ALL VIRUS 卍/Squidward.exe unpack001/卍 ALL VIRUS 卍/Stalin.exe unpack001/卍 ALL VIRUS 卍/The Masters.exe unpack001/卍 ALL VIRUS 卍/Time.exe unpack001/卍 ALL VIRUS 卍/Trololo.exe unpack001/卍 ALL VIRUS 卍/V.i.r.u.s M4R7H 1.exe unpack001/卍 ALL VIRUS 卍/V.i.r.u.s M4R7H 2.exe unpack001/卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Extractor.dll unpack001/卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/VirusBuilder.exe unpack001/卍 ALL VIRUS 卍/Vista.exe unpack001/卍 ALL VIRUS 卍/WinXP.Horror.Destructive (Created By WobbyChip).exe unpack001/卍 ALL VIRUS 卍/Windows-KB2670838.msu.exe unpack001/卍 ALL VIRUS 卍/rickroll.exe unpack001/卍 ALL VIRUS 卍/salinewin.exe unpack001/卍 ALL VIRUS 卍/salinewin1.5-safety.exe unpack001/卍 ALL VIRUS 卍/salinewin1.5.exe unpack001/卍 ALL VIRUS 卍/virus.exe unpack001/卍 ALL VIRUS 卍/سكآرس آلعنزي.exe unpack001/卍 ALL VIRUS 卍/ᏕᏨᎯᏒᏕ-LJ.exe - Untrusted Codesign Signers 10 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net40/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net45/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net461/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net472/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net48/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net6.0-windows7.0/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net7.0-windows7.0/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/netcoreapp3.1/Guna.UI2.dll unpack001/卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Guna.UI2.dll
File Explorer
-
卍 ALL 771 VIRUS 卍.rar.rar 115.9MB
-
卍 ALL VIRUS 卍/AngryVirus.exe.exe 482KB
-
卍 ALL VIRUS 卍/BLOD.exe.exe 1.2MB
-
卍 ALL VIRUS 卍/BOYKA.exe.exe 6.1MB
-
卍 ALL VIRUS 卍/BoBo.exe.exe 205KB
-
卍 ALL VIRUS 卍/Chernobyl.exe.exe 1.2MB
-
卍 ALL VIRUS 卍/Commandos.exe.exe 79KB
-
卍 ALL VIRUS 卍/CookieClickerHack.exe.exe 68KB
-
卍 ALL VIRUS 卍/CrazyNCS.exe.exe 122KB
-
卍 ALL VIRUS 卍/Curfun.exe.exe 138KB
-
卍 ALL VIRUS 卍/Dangerous.txt386B
-
卍 ALL VIRUS 卍/Flasher.exe.exe 246KB
-
卍 ALL VIRUS 卍/Go.exe.exe 63KB
-
卍 ALL VIRUS 卍/HighHappy.exe.exe 82KB
-
卍 ALL VIRUS 卍/Hydra.exe.exe 43KB
-
卍 ALL VIRUS 卍/Jeff-Killer.exe.exe 2.5MB
-
卍 ALL VIRUS 卍/Knuckles.exe.exe 289KB
-
卍 ALL VIRUS 卍/Launcher.exe.exe 197KB
-
卍 ALL VIRUS 卍/M4R7AWI.exe.exe 4.3MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/.gitignore974B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/LICENSE1KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR.sln1KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/AppMeta.cs.ps1 2KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/AsmBuilder.cs.js 5KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/BuildConfig.cs715B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/Builder.cs.js 14KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/VgaImage.cs.js 9KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Localization.cs.js 4KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonForm.Designer.cs66KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonForm.cs.js 28KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonForm.resx.vbs 7KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonMBR.ico766B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonMG.csproj.xml 4KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Program.cs358B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/AssemblyInfo.cs638B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Resources.Designer.cs.vbs 1KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Resources.resx.vbs 6KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Settings.Designer.cs413B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Settings.settings249B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Resources/Stub.cs.js 40KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Resources/mbr.asm495B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Resources/mbr_image.asm507B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/nasm.dll.exe 1.2MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/packages.config147B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/VirusBuilder.exe.exe 117KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/VirusBuilder.pdb105KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/nasm.dll.exe 1.2MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/Guna.UI2.WinForms.2.0.4.7.nupkg.nupkg 6.6MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/LICENSE.txt2KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/README.md479B
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/icon.png.png 15KB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net40/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net45/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net461/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net472/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net48/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net6.0-windows7.0/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net7.0-windows7.0/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/netcoreapp3.1/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/MOMO.exe.exe 2.3MB
-
卍 ALL VIRUS 卍/Madnees.exe.exe 284KB
-
卍 ALL VIRUS 卍/Magellan.exe.exe 167KB
-
卍 ALL VIRUS 卍/MasonChess.exe.exe 1.3MB
-
卍 ALL VIRUS 卍/MasonExln9.exe.exe 77KB
-
卍 ALL VIRUS 卍/MatrixVirus.exe.exe 14KB
-
卍 ALL VIRUS 卍/Melting.exe.exe 12KB
-
卍 ALL VIRUS 卍/Monoxide x64.exe.exe 330KB
-
卍 ALL VIRUS 卍/Monoxide x86.exe.exe 289KB
-
卍 ALL VIRUS 卍/PEEKABOO.COM.exe 921KB
-
卍 ALL VIRUS 卍/Popup.exe.exe 373KB
-
卍 ALL VIRUS 卍/README.md172B
-
卍 ALL VIRUS 卍/ScreenScrew.exe.exe 111KB
-
卍 ALL VIRUS 卍/Shot.exe.exe 1.5MB
-
卍 ALL VIRUS 卍/Smil.exe.exe 365KB
-
卍 ALL VIRUS 卍/Squidward.exe.exe 535KB
-
卍 ALL VIRUS 卍/Stalin.exe.exe 30KB
-
卍 ALL VIRUS 卍/The Masters.exe.exe 1.1MB
-
卍 ALL VIRUS 卍/Time.exe.exe 111KB
-
卍 ALL VIRUS 卍/Trololo.exe.exe 3.0MB
-
卍 ALL VIRUS 卍/V.i.r.u.s M4R7H 1.exe.exe 72KB
-
卍 ALL VIRUS 卍/V.i.r.u.s M4R7H 2.exe.exe 73KB
-
卍 ALL VIRUS 卍/VIRUS SOUNDS/Virus Sound Very Error B2y General.mp3825KB
-
卍 ALL VIRUS 卍/VIRUS SOUNDS/Virus sound baby is cry B2y General.mp3566KB
-
卍 ALL VIRUS 卍/VIRUS SOUNDS/Virus sound baby is cry B2y General.wav4.8MB
-
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Extractor.dll.exe 5.9MB
-
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Guna.UI2.dll.dll 2.1MB
-
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Tool.png.png 76KB
-
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/VirusBuilder.exe.exe 522KB
-
卍 ALL VIRUS 卍/Vista.exe.exe 1.9MB
-
卍 ALL VIRUS 卍/WinXP.Horror.Destructive (Created By WobbyChip).exe.exe .js 57.9MB
-
卍 ALL VIRUS 卍/Windows-KB2670838.msu.exe.exe 728KB
-
卍 ALL VIRUS 卍/cd_popup.bat.bat .vbs 266B
-
卍 ALL VIRUS 卍/corrupt_files.bat90B
-
卍 ALL VIRUS 卍/crash_folder.bat148B
-
卍 ALL VIRUS 卍/crash_notepad.bat66B
-
卍 ALL VIRUS 卍/endless-notepads.bat66B
-
卍 ALL VIRUS 卍/file_virus.bat646B
-
卍 ALL VIRUS 卍/format_c.bat25B
-
卍 ALL VIRUS 卍/os_remover.bat21B
-
卍 ALL VIRUS 卍/rickroll.exe.exe 129KB
-
卍 ALL VIRUS 卍/salinewin.exe.exe 283KB
-
卍 ALL VIRUS 卍/salinewin1.5-safety.exe.exe 245KB
-
卍 ALL VIRUS 卍/salinewin1.5.exe.exe 279KB
-
卍 ALL VIRUS 卍/shutdown_t-0s.bat30B
-
卍 ALL VIRUS 卍/shutdown_t-30s.bat70B
-
卍 ALL VIRUS 卍/toggle_caps.bat.bat .vbs 138B
-
卍 ALL VIRUS 卍/un_notepad.bat.bat .vbs 1KB
-
卍 ALL VIRUS 卍/virus.exe.exe 26.7MB
-
卍 ALL VIRUS 卍/سكآرس آلعنزي.exe.exe 37KB
-
卍 ALL VIRUS 卍/ᏕᏨᎯᏒᏕ-LJ.exe.exe 41KB
卍 ALL VIRUS 卍/AngryVirus.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b6dac480e4c7f15e8de6633ee9b52b3bda0b6b2f1897a76ddb4ab0ffb76b2588
- MD5 85e11c1d67aec0150757e3255d8231b7
- SHA1 9167c5ea4a23d59f38e82f128f2b1a2dbbd88cea
- SHA512 a25fcf6c359a00e5671b08dbf91fde79fe14e9720d8d8b4980584fbb32f9bba78a8cc8760e5c504fad894e34df1d2693bd1d161539ad4597df3c50c84c1c5e51
- SSDEEP 12288:IJvK+727xaxunsCoFJse5vKNkuCCT3X7t8OP:IJKDAxuPondKNHj7hP
- TLSH T1E9A42382B21AE061E2CAF43727BD7A9273F6B0136352F91F51688A213D35FC0977525D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
358686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
342KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/BLOD.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8cb152385fd2e8161128116a05be52827ac6389700ffacae36610f108a18b707
- MD5 eb4492cc41106add1a2d6317d864d714
- SHA1 dce93c41471cbaa5465a381aeb56baa39a1d8ab6
- SHA512 407cbf1d63d561690f7e761b2708a7afeadb99773aea97a914a9c6472804c44f9c01f3e72665ab6d5ba20abb211e2afa6c7b58364dab0240c7dcde4c3dd5b49c
- SSDEEP 24576:deryxzq+Mq1cToQ4JUSuX6l+t3dZ+NhXSp5PzHeIbv4BGFRPK+X5XudvPbpRysCR:dJq9McToQkUSuql+t3dZ+NhCp5PzHeI
- TLSH T12455D7F99BF54108FD2887F04F99B54B9D2715D422A008DA87E8DEB75893FC1B42A09F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
1304366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/BOYKA.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a84020f7f5c158085d49388b3f77d1b7b958864dc1701ea24724c532973e3ce0
- MD5 55194234b546ceff1ade28ab6837a570
- SHA1 b5fce8966e75fc5fb3ddcfb943323cf6199859d9
- SHA512 d62aeb375498ff8edcf7ba3956240ce47e9a5eefadd5edddf35e9171501e4073cafd4ed01354dd1e7d4f911fa360a2f4a75495efaecbe6e069cd20996c5a549a
- SSDEEP 98304:3BuDNFbhHsaA3wUvCPgHsbj/vjhrBcf1w+Zc/S2rTIZLJq8W3SAyl:3INXHEw+sbfgfnZc/53
- TLSH T1E456E04D9089B75BE100B9300EAA2D5623C55F5478FEA41D8A33BAF22D374FDF9274A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
6211358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5.9MB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/BoBo.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e82c9ba4cec3d7848e20af7d2e9a6f88a0235509ebcc6a1df2e5a03f7aa15ccc
- MD5 e0d1e42f0c86e362b18b820622b18242
- SHA1 406505ea36c6139f3c8a3f75acd28c33e5a04eb3
- SHA512 24712bd0715adffe1c7576462a3c0a82eacb5d3061914e410f13fdb769a6640c31b1d74f57e86723efee3dfe7173fbe5a84cd0f09c07bd011494d1d3ad8b14e0
- SSDEEP 6144:VThIGCHx5KlifGj+7ThIGCHx5KlifGj+:VThIGCHxwlIGj+7ThIGCHxwlIGj+
- TLSH T10B24382439FA501AF173EFB99BE875D6DA6EB6733B03649D1091038B4623A80DDC253D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
215646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
203KB
Virtual Size
202KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Chernobyl.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2342b3d3120400baea76a500a710fc239ea8d1c587459c4c20bc070e44281c27
- MD5 07b111536b5f2e251b3db0cd83b2d1ee
- SHA1 2a1b9c115a5d703a8dbd75796544bc88cf0ae29e
- SHA512 b99b35fb10432fa70c233bf6acda5f06047332e5aa631446221284c6659bd9a1ac697c4123cbd4ddce603a4d8810ee4940574bcdef9d59189edb4433c18741f1
- SSDEEP 24576:EzYx3PgYWwocek/r2+AAYNh3tBULAkS7LeB:EkoA/qhlL3rmzS7
- TLSH T17C55A522A687D9A3C41E1270DDC7D32977B2E0F46B368B87BA4C87AF7D213A11CC5546
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
1289610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\n3r-\Desktop\F1r4e8e3m6a0s5o7n9r2y\F1r4e8e3m6a0s5o7n9r2y\obj\Release\Chernobyl.pdb
mscoree
_CorExeMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Commandos.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e0c0bb0b89ded0bcad1a4fbd9d7d989cacffe9c2dd963a89e86e13582cdf8262
- MD5 fe571936aa4654825c1c5df9cfe49227
- SHA1 c1ffe14039561511724621bf385ddc4c4291b156
- SHA512 646a1b1e5b02973df005c084d3a70f65a1f572563aa971b0247fbd4c1877ed7cd58d77c507e4f44bf7ac85f78b779b355025259cba9e5aec728aaf09a9dbec42
- SSDEEP 768:4Kxnvyx9lZYS8tu7Qi4eyulHCuytnY9QRcgQorIbjWqor2hCaK:1nqx975EQQi4LaHC1Y9QR/rIbjUP
- TLSH T1BD83E40235736D85C7BC25F706974AE443E5EC8106F189876A7BA60EFDEC6A84C47E83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
47870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/CookieClickerHack.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 13adae722719839af8102f98730f3af1c5a56b58069bfce8995acd2123628401
- MD5 bc1e7d033a999c4fd006109c24599f4d
- SHA1 b927f0fc4a4232a023312198b33272e1a6d79cec
- SHA512 f5d9b8c1fd9239894ec9c075542bff0bcef79871f31038e627ae257b8c1db9070f4d124448a78e60ccc8bc12f138102a54825e9d7647cd34832984c7c24a6276
- SSDEEP 768:bhU+D/no2u+6JaAcNRFJ67Pn975JqiG6BwUqdVBF+G2JOnCC6G2JOtCCm:bhjDIrU0h5Jqi7qzb2ICCb26CCm
- TLSH T1C763C55613886B63D43D97798451D13107FAECA7C326EB6ABECD6CCB3952E090780B93
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
4
Entry point
64346
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\boris\documents\visual studio 2017\Projects\CookieClicker_Hack2017\CookieClicker_Hack2017\obj\Debug\CookieClicker_Hack2017.pdb
mscoree
_CorExeMain
Name
.text
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/CrazyNCS.exe
- SHA256 6820c71df417e434c5ad26438c901c780fc5a80b28a466821b47d20b8424ef08
- MD5 d043ba91e42e0d9a68c9866f002e8a21
- SHA1 e9f177e1c57db0a15d1dc6b3e6c866d38d85b17c
- SHA512 3e9783646e652e9482b3e7648fb0a5f7c8b6c386bbc373d5670d750f6f99f6137b5501e21332411609cbcc0c20f829ab8705c2835e2756455f6754c9975ac6bd
- SSDEEP 1536:frNvVsJysJYUjwRBRZ+dtf9naYlN4ZqhOn6w92znPIW+M2TlT8KV2enfBA2yYd1:zNv+JyS0DZ+hJlMn6w92zgnMq85f2v
- TLSH T1E5C31200EB660D9BE46AA73424FE76E26A244412443CF75F8AF2625F1C31568AF7077B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
771
Minor OS version
0
Major OS version
1
Entry point
323585
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
92KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/Curfun.exe
- SHA256 ef878461a149024f3065121ff4e165731ecabef1b94b0b3ed2eda010ad39202b
- MD5 0b3b2dff5503cb032acd11d232a3af55
- SHA1 6efc31c1d67f70cf77c319199ac39f70d5a7fa95
- SHA512 484014d65875e706f7e5e5f54c2045d620e5cce5979bf7f37b45c613e6d948719c0b8e466df5d8908706133ce4c4b71a11b804417831c9dbaf72b6854231ea17
- SSDEEP 3072:PX4g8PTXgraunOr1LipSWpvNH12x24XAfLMY2u:PoWeunO8xHQ24+L6
- TLSH T117D312A6E37C09BFF179923F15552F712BB1E243B230920B5611E178EC2066C8E577AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
397313
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
106KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/Dangerous.txt
- SHA256 c40504bb75afdb55387b28ac1d600a1ea61d1ae2d030e384569666eb7cec104b
- MD5 e3287650d7f9fe4d14a608f29868528f
- SHA1 f0bbf34a7fdc8061994c5a2ef619e0454197ada4
- SHA512 990bc6d0f18a4df274eface41132edf4e0dfd922c3b75e3aa16d5bbaa9a6ccfd8c59000fe89a022532446a16d674d8324d9a28c8c92c106f19c5323afb43197a
- TLSH T1BDE0A7BFC9142838025A44E40B4E6064CEFF489C44C19096B19DF35513B977A3B08235
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/Flasher.exe
- SHA256 30676ad5dc94c3fec3d77d87439b2bf0a1aaa7f01900b68002a06f11caee9ce6
- MD5 9254ca1da9ff8ad492ca5fa06ca181c6
- SHA1 70fa62e6232eae52467d29cf1c1dacb8a7aeab90
- SHA512 a84fbbdea4e743f3e41878b9cf6db219778f1479aa478100718af9fc8d7620fc7a3295507e11df39c7863cb896f946514e50368db480796b6603c8de5580685a
- SSDEEP 6144:/85Z+Y97t0Kc0Nd5bHzvvj/R87Z3BxonZ:/8vd2KxNPjs3gZ
- TLSH T16B3412475FB40175C85B39F248EE6A3052EEB13B40E2C32B2216479FAF4AA41DC0F667
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
659457
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
198KB
Virtual Size
472KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
31KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/Go.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5b7854afa2640d0d58b4001d880f98e4992915d7be6ca6b46ce715cde080cae3
- MD5 47c1b8d495e6042317f1ae63bb0aa8d1
- SHA1 dfb54e088855e4a6cf2d19ffe96569ed9cbc626f
- SHA512 4d9ef02162224d3499c8912a06e46bfe1e6848fe8cfd4942a6b67cf68cbc2590d54dc7397f7a0af98a0c08431ff4cc4a58766bb5863e5f053e8c23b0e5acecf9
- SSDEEP 768:34Bo8HxviTEhzkMBKRQZ34S3aoWP+aWnW790aUhlV/yLlhtYcFwVc6K:IBbH1iYhMQZ340aoQ790aSklRwVcl
- TLSH T1C453AE4C8188775BE100B9300EAA2D5213D5A74464FDA82D9A37F6F22E370FDFA775A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/HighHappy.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0f9617c86fd1a744a7185e1060b928cd05ddd63c70633dbe847d5582e60101fe
- MD5 788b0974f73acea93c7af807cbec1317
- SHA1 8a5482beb542396efef378d2556698ba4aebf363
- SHA512 487bab2035cef1a90f8c1f619af9b57784a4203b6291ef871db2340437f24184825ca931cb64f9fc58ebcc8b51e428f1261e8ff040cac2e919a285d00f8f1051
- SSDEEP 1536:KahfyS/+TAODerDpbuEpPEUwsbuUrVzBq05j9aJggFSoHdduVm0A9SBwwVcl:KahfyS/+TAODer9bFpPEobbxN5M2gFSM
- TLSH T1F283A1557394E65AC4231735D991D3F4A730DD85EA46C34B36E8BE2B3EBD2E28E412C0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\n3r-\Desktop\HighHappy\HighHappy\obj\Debug\HighHappy.pdb
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Hydra.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0b6c0af51cde971b3e5f8aa204f8205418ab8c180b79a5ac1c11a6e0676f0f7c
- MD5 b2eca909a91e1946457a0b36eaf90930
- SHA1 3200c4e4d0d4ece2b2aadb6939be59b91954bcfa
- SHA512 607d20e4a46932c7f4d9609ef9451e2303cd79e7c4778fe03f444e7dc800d6de7537fd2648c7c476b9f098588dc447e8c39d8b21cd528d002dfa513a19c6ebbf
- SSDEEP 768:1uy2FRMytCquuhuVWHzeYDroQXI2zeYDriexi:N6HeQXI1exi
- TLSH T138139301B2A4C82AD83885BAEC95C6B303645C466B34CB5D3ED63F4B3D51ACE1B1A7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Visual Studio Projects\Hydra\Hydra\obj\Release\Hydra.pdb
mscoree
_CorExeMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Jeff-Killer.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a751b0aa00b6ab8ad3f144f33d8241cf8ffabcef2cb7e1f0ca2a1ffc64de3c78
- MD5 306f6335821a0a67c80ea4a808defa51
- SHA1 b892df4b85c210e22cd97acfacb0e54cfb4eb599
- SHA512 2f49c42fef4c9ac502f674d8702ec18d63c13600dca2714cc76d677b0e486b7bf80265ec5670655e13f49d3927e9c8acc40b23528bcf03f2b5cac605cef13368
- SSDEEP 49152:abApInqm9KyD/2czzXxVAxc0EGUja47DVLzGJdZIfpJj34uKuIG:SApWqiKyKmDj8Kr5MdZIfj34uD
- TLSH T14BC5DFD1A6845CADE836E3F90136DD3913422FD9E462C26621FABC23F8E72475D664C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2695178
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
\Z!M
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Knuckles.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1f98a3f8852d28ed3b2f64e529c1ae1eafc5ef942a962ec89163f3db2744c8a4
- MD5 7e9d3109b138c0a67be983159fbbde98
- SHA1 012308407fada7ecb5edfe4e067fa4d18acba424
- SHA512 ac6a5a4ec87fe8770c1903f62d181f94366b2f9b3d3a4e8a04ec7f25b9e9d026762efc96ba5883474b9d1c2d0cca4a99e12f0343f6eac51af12d628a926a5e12
- SSDEEP 3072:Fxv5UYlnaArTD3FzIO4vphViwmtSEGsvXRUeMlyXxUpT1OXfqY:FxvaYlnaArvF8bzVi1SQPuluxWqq
- TLSH T1E5546B3A79788F95C60C0AB1BA61C1B3EB2F5D3D3481931F22DB77B9AEB5D4A1D01106
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
130478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\n3r-\Desktop\Freemasonry\Freemasonry\obj\Debug\Knuckles.pdb
mscoree
_CorExeMain
Name
.text
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
168KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Launcher.exe
- SHA256 d5b962dfe37671b5134f0b741a662610b568c2b5374010ee92b5b7857d87872c
- MD5 7506eb94c661522aff09a5c96d6f182b
- SHA1 329bbdb1f877942d55b53b1d48db56a458eb2310
- SHA512 d815a9391ef3d508b89fc221506b95f4c92d586ec38f26aec0f239750f34cf398eed3d818fa439f6aa6ed3b30f555a1903d93eeeec133b80849a4aa6685ec070
- SSDEEP 6144:p4bORZxkA3Qhj8zMc1dBmGR20WwG4ysssrHywHdch:abOlkA3QhjiTtmGRnWX4XssrBqh
- TLSH T1E9141214975B8938E9D597316CC689FA0637FE3EE087BDCB166056EE48334C1EB8524C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
548865
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
162KB
Virtual Size
400KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
2KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/M4R7AWI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 44e9c621d4ad10bfb56aaaaac9b635bdf3eb515b699bdd50ca140e789ab13d82
- MD5 650f01fc1ac80f628e15499a70d74e2d
- SHA1 8d626355a665e27d50e1b19821f4a95f7a23c90b
- SHA512 25639ca43db36e4fd2cfe1a754e5d6ae9e9ecd528ba06a987241ce8a416146ed1df1a62451c5cf2eb3942a6c67090db63709f1e55dae67992e08bd23eab38a98
- SSDEEP 98304:onbgdtyhgl5q5ckkVTpoIC98kQmZGS4pStKoGHLAPOd:Erhc0cjVIZGS4pStKomoW
- TLSH T1A12622605E9ACC49E3CA02F46AF5D678E02E9FD42D630715ED8234EAFC7DE9C314245A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4120638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/.gitignore
- SHA256 4c796a810b7d9595634d9a2277ecfc442341fcb542f2d7998fc6c901ad77142c
- MD5 1964811f77fb535cc3852b98e421c298
- SHA1 84ed7f8f830e88bf06d9f2a1fe2594bf453b7feb
- SHA512 0555f2ce2cc1b69644f7e5ae82da80f5d7a0a0bf3c2c012a9b97f8eb23e3589a6c03e97963198159e50af235267c4fa45b8e567e0396fb197f4e37f1bb7ac917
- TLSH T17C11E1E69614E2262FD7A18FE4EC7144D57B321C2EAD3368445C4105A102269311E8EA
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:8b:14:20:bc:10:db:d0:29:b9:4e:67:9d:b2:a6:c7:df:c3:b3:87
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2188846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/LICENSE
- SHA256 f5d6c3e7a7c49c673baf54137ddef86849ea133fb5c94bceed311e4c747b323b
- MD5 1c15a1aac97596be8353ffd7651e134a
- SHA1 16fdc8f3abea6552440067edd8dde842d2459698
- SHA512 859718549f7ebcc883410f97c7eae50b0b667f8fec7e123ab8f3c1666efa621d4e803e3d5cd663fb1f1b56b9ac49e04591ccfd9eb266aed211fda41e7c980c13
- TLSH T1E511751EB2510772189B13B05578ACD5F23BB25F7A5F2A84246DF345233A06CC5FF840
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR.sln
- SHA256 2eefbeabbae589dd03cc2aae5a5ac9dfabd2fb8c5af1eedd1e8fcf5334a9f6a8
- MD5 46b19dbf74de6d940a1d12909881760b
- SHA1 0306211b01eba53302f8792384354a79d46563d0
- SHA512 dbfa129183878635eadc825a142d7d4bbf90f2bf5975a9851c5fd72cb98252a4a723d77797a24972f138844dac1aa095cfef35606b43f2131340fcda494863b5
- TLSH T1FB2130DE520D5CF59D45139AA6B21CD36D378280C09A193D81CEB05C2F27985917F9CF
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/AppMeta.cs
- SHA256 a764af683f88efb8304f9f72d7274b007f8aef8b157f4f93926684312114eb47
- MD5 80e1b5ea9a3dbb8066b1a8cd2ccc7e87
- SHA1 fe1d6c9b9d333c218a75da87731b2f0bd4e7e0c7
- SHA512 d3488e3fd5e817612ae7f69275478d981c8b7de5e4f4f4f311c3247d15375d7509008f45cbcb842644e7e2f69f8331c64d9ead7b9c5a9887fbda33af65430b0e
- TLSH T1405112127592DB050AD3A63ACB890191F7391213E7DAEC18BDCDC411BFAA814AA7978C
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/AsmBuilder.cs
- SHA256 ec587a663468cdb816cc70de9a366483721013dfbb6b5a26298320f1711e180e
- MD5 73d57c05e8cfc9aab22e6d54e09c9bab
- SHA1 2df48faf5e6a3ede61a5340ab8b315715874ce00
- SHA512 8ccf9e70cd721e17464093414d10a35296f70d0b82f5b23d47bfa176504f384f69cdaa3d485dd19b90078178702c8c33bf98dc6f46d63211249df119f3455336
- SSDEEP 96:C4jDhwrRhgsCNXAk+7ajaVh9uRF4WSWjXzCfW+L:V/heRhKpjaVhw4WbjXzCfjL
- TLSH T143C1331DC9A1CEB109C7E2E5E8C28D2A3995723B54B2DD2D7B0D43BE4F15028E6725BC
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/BuildConfig.cs
- SHA256 ee68c48e2316877d2d61a72cd36a23700e32c60f99d04f253856fa5af7b90bd2
- MD5 01d236e1f3a4239e636634b077bc4cfb
- SHA1 f6326fe58760a0f08519e32da98c4be879a34545
- SHA512 9c63bd182e9e4048249d8d7294b453583297a007b94651f20adcce2283b6f0bc5424278dc6e666595927568474b7065ee3e6e4a3a1ec9ccdcb41387013b6e12a
- TLSH T16601C27775578E2421828545AF8D80863B0010378DC7D86ABD7F93782F9B519F79D34C
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/Builder.cs
- SHA256 7c2b0fbbda1fdc0e53fc507772de6bc6da92034793f88efb58bbd685ebef0c42
- MD5 0dd8c852b0372ffde1589b4397e4c6b8
- SHA1 7b1df716b08e9ba86ac4e04607550cfe2e705de5
- SHA512 47c7f950803e60b4f3eb7880164d29cdcd4d4744881c13b03a9c96c8a4576f36fdcbc439441caee3101a56e4be8f77a504d809cc00a06302329a47e05e81da9d
- SSDEEP 192:tn3l6/nWuQYC5HsUScK32QCtGL5jBwqt6RDq4v4wGtd5a9+oJhuRWUSOADAKPIHx:tnnK32u12vWJa9jJhuRuAKAH/PS2u83
- TLSH T1A562C719496399A847A312263FDB54463B21C2230768D8F8BDDC469ECF5887CCBB63F5
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Core/VgaImage.cs
- SHA256 89f6a94b0515d548f991054a73b6d04b606cf226c4dd8598e6d2251d947ea31c
- MD5 32d3966d0b862cf80776aff61d14006e
- SHA1 6ef63b8e82175011fb1b86b791ff08cecfbd47c0
- SHA512 e7a70f71e908512e77e5188d1e743a48b31c27c363ab8e0ed8c5e6d46b7eef514aa0809c0a6bdab6cce4b488c1e5ffdecb8a765c4e05b04391bef095355762ce
- SSDEEP 192:t2rFixBECiSX63rAdeBPn342OJztPnvy+hIMmrCDHtKShDC1sJqaiR4wk3gfL:t2rFPbHvIDVtvvhIMr5dW0iM6
- TLSH T15E1294590D7B9AA453436039AFFB84457B34C42326DCED18BE9C5020DF51928ABB8BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Localization.cs
- SHA256 d5fa8c4700858c0294c1c160a17953e80bf962d876a893d0210ac556ad7be8ca
- MD5 99f9b88a74501f4a0f5d7b78a4573269
- SHA1 4dbcb01bc34a8d200eb70774b5ff914e2d1a90f0
- SHA512 52b8e5094cfdda627813b7c479d781677ab3eb124108104a15f76231cd7ae48aa13da89a0e45c17841a88b46cf11d8457f7254592f9c103a8a03fbae2dc4cd3b
- SSDEEP 96:C4YzvgyG6BWXPMMECsMFecXiyXrdJ2yx0J8xHO/yP1Y8Va2WysbOL:V2aEMECtlXrdJ2yx7I/yWTbOL
- TLSH T177A1FFD5ED2348710B5629769387385CDEB0B8A70AF9F4207BDE023C8F6E51E857926C
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonForm.Designer.cs
- SHA256 b1437b721430add57d2f5b10164d71823c36d067ee1c99c0b01ae54193a357f6
- MD5 b9f6618cdf7b2b464a8804b47c7d377e
- SHA1 46f655f5bed076a469312634827c20b6dd8f686c
- SHA512 da689ca3ef8b318f4091d20cf9f60c072c80e958c9634c4d8b4cde126f237ee6851de49df8b16ea46a680ce96d59159eee98ccf54da00a8c07132d7eee899896
- SSDEEP 384:8wYGc6SRopEw6zEIU2vTR/YHRTPx5qKcCY79XFv9ryG7eWRJOi6zNbUUhvfvmgr/:bYGUPKo7CGlU
- TLSH T1ED63C038D36D9A5CCEF6447CAF444580FF22711B54878A3F34AFD28A8F31A6845AD53A
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonForm.cs
- SHA256 3e558b46ff131d7c236a5cedfaf788da4a87315ab80c2906509a4ba3b907080f
- MD5 9d760ca4108677f802a668ad8f3977f4
- SHA1 71a2a391197b4c476baf6d8dfb44aa09c3c4c41f
- SHA512 f0dea8c835ac6381986d39a8c3f290dcca48fea4495b6178720af1c69f71852bcfeeedb6e2c70a2a54fd1de4364fa45d2f3b438c6067be3581856eff087b6df4
- SSDEEP 768:jEC5ToVeFb0vaaaS1NsL2IaOIjlaWqAEdc4:T5To012aaaS0L2IarjlaWqA6X
- TLSH T13AD273AD529B852087536035FFD74880A73116071249FD26BFDF81A8DF8E35C26B8BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonForm.resx
- SHA256 179f6b3316761f1c8824364bb33b3ed443a83901d13e683549c17a26c0307c34
- MD5 aa5a45fc00718f672edca8cc35668cf0
- SHA1 1f7b6dfca88c215c47805e239536382a374abf56
- SHA512 9ed7a64057ee50e627c88d0b09b5e9185ad594f1e56ac4b380601b502852c65a1e2684f5c241c59db54ed2968c718ed1b2cdee4e15b6f35d553dd81c8123f6ca
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF0bawBgwrvWVp1bawMbawn:KjrbLPxsLvASvKgwyahFSawBgwrvCphw
- TLSH T171F13335B0C1ED660BB20C28D6517A84FFA8523B03366C8474DC661F9F73986A7772B6
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonMBR.ico
- SHA256 6d06e795cbdcb3c9bb312fb03f862236604b25920f1c901b0293fd598273d2be
- MD5 adb313cf98ee158bd56d2ff725614c91
- SHA1 ab4461d45de3b39e14c0d109c530befc870b589b
- SHA512 8da0ad07506b16d014cdb65935891f6381ec6a25e25bab1148756b55b7115e8ab4e29daac76dce454a79c68086566f341ea15aef2510a8df7f0083f43b3e7737
- TLSH T10601F621E336D067C080233508C3078E2475CE74A02413E27E00AFEFDEAD2865D1E4F1
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/MasonMG.csproj
- SHA256 638101ba3d0ed539a519531192ab3f34e3c3188af52e37ee40091ba8e266b9dd
- MD5 19e8ad02570d641ff7fe7caa247f76ac
- SHA1 6abed48f11708e77eb4b07ae77aa8f25035f3d13
- SHA512 937b2461b2daaad01b99067fe2296ab7dd289043795075fe461bf9ca156c1593783a00377a0cd86df1344bafce4ac0ac3b410027305ca0adffc138a5e3e04233
- SSDEEP 96:zYPnpqzK58ec8a9jv+Bx5+jA0xHHNws2oh5yn1CoB:zNm5REtO11
- TLSH T1D991F134E3FC9EAD43A421728192FA060D6473E359B4046CF65D96889F92B491353BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Program.cs
- SHA256 4de9f0c407ea2a8890585d2dad7e95e8fbf57d7189fb511abcafa74fd98147ad
- MD5 c7b0bcd9005bc55127939ee813e60d12
- SHA1 6196be92dd792c4f68200f4f69a9872d003d6476
- SHA512 d91a0f028575cc84c45c828ae343176490c3a26e2374294b65d94519dc50b82c99180f1a7243555b91c7766998c416956a5356d411b4cbb726ce9c46b9cfddad
- TLSH T18BE0C2FA32AAE6855BBB92B78B158084E973113F0FB93140BC6C4851CF360098329F11
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/AssemblyInfo.cs
- SHA256 5198a4816d0cc9f3fea0cc7171c7418febdb7c6077e32a49555613392d12d781
- MD5 d52e793cce91696252afd560636cfaf8
- SHA1 50f79cdc0520c0d7ef976b46762057380129c87c
- SHA512 2e8c6e2454efd6be52f8df564a5f7aef4ee74445de63bf8419b9c98e5221e225dbac77b36276fb58183082a7c45d38a9726f452e7bf6c24d718fef8d0aff6e62
- TLSH T1FBF0A4B45716A36E8F128443FDA77688422F337861CD0D0650FD7C13FD59BB81224636
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Resources.Designer.cs
- SHA256 5f49ba9a9932eece5b640032e5d374f014bb25a8d25ee438c6e3a782607718b8
- MD5 c0fe520d8c90a4bfca97d91d3acfd3f7
- SHA1 f73eeba8b05aa314cab939448dc5ab1b0f72ef8d
- SHA512 8dd66de0224b165c9f0474e17f5e24fab42c8e73d35b53b96179082d21b16dab19d0ca26ab03fa70f70aeef1d944a2d4951fd14e783e7553918439595f347b42
- TLSH T18C3147F713FAC4750836A45F990AE8529A64A163C97CEC38FCAE00605FE734047E8E6C
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Resources.resx
- SHA256 5ce017897066baff7355a320a5cfba630db1790d58ccec7abdc84c03a8ae645b
- MD5 292c6ca075707dc0e71b70fa14c67fd5
- SHA1 4739a2d7adc8426d0141e249ae408b059ab7273d
- SHA512 7491379ad2f268bca0b3c81d34cc07b2fe240fd38f59b54ad49c0e2b3d362360a073d5ef72faec62a83578509d0c26889f7cd78316a37bc83cbf396682ed1f21
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF88/jj:KjrbLPD9sLvIzSvKgIqUyahF8wJ5Jl
- TLSH T19FD13145B1C4DD220FB3482DD6523984F7A8823F02356C90B4DC661FAF72886A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Settings.Designer.cs
- SHA256 388a7a456ebbc6736693136fe5094e334052db9e05c0c9c3e50d7fe6d84e2173
- MD5 b14f4e88f047401ac4ad15f27b1be88a
- SHA1 a5774acee74427628955cca2369046b60177c003
- SHA512 f50738b48730d71cba550ed9d9c075f339b80af11bde15c7e5cdc73e8ac11ba281fe5aeef359ff37cbab308c9a8aed0754be35a6a5c142d43a11c94afdb52220
- TLSH T1EEE026F27276DB6D0187762BD08AD2A38F32053F8B6E7C39B5AD0400AF09541A3E5F19
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Resources/Stub.cs
- SHA256 c81c7d1b0909eb1584bfddf7b34e88439e9e67193ffc039dd4fe15761dc33de2
- MD5 8e70a858c3ab4355cf22ccf2cb8b8405
- SHA1 fcc74f1439882082ca39f4c07745ff4954947ab7
- SHA512 6b5550829e8562f2548bf42dd8fe573889e85a2ee21be158457d9f538599ff85447989734c2cd0720299a7282ff548e6fe6ae1d4ee7c6687af354ce0cc17d50c
- SSDEEP 384:zd91rlb4uewJmsqf/kPoy5+MalVHQkakj7DSB94fIY+4r4QBbkUvRV/Ue5D+cbXe:9+zZp7+HskC78SqZ4ctP0S
- TLSH T17C03C726566394715A6350395BEF8049F233D03323EAEC24BE9ED130EF191298BB97DD
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Resources/mbr.asm
- SHA256 a86b72d69b2c586da80d4e1ad3543dd18b6aa1a6362920c6a9868e076ea0907f
- MD5 16f4bb0a8c7a5a973eff3c5f997132dc
- SHA1 7c6ea08c39e549ea46781b8f58c370b88f169348
- SHA512 0e66f82bfcbfdd7789d746727d746b9a00b4c14031243eadf3c76b657d7d6adfa88f47b00a91df305dffdd4faad36b6849a769952fa086b74da07942f6356c8e
- TLSH T10DF0EC5E5C5257C900FA4585FCC17E0BE2D9820F81C17825B30C4337CFF5564467026C
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/Resources/mbr_image.asm
- SHA256 dabfae2999265467fc27760b6b6d21f96548a18c8e407d2ce3fa1c3376ec5c43
- MD5 cc2d108e179c0c33eda42d2bbd65ae2e
- SHA1 139a862fe6318b51cad8b5abf1e94b300d170064
- SHA512 e9ff2783689dd5a5f11ef18739e1e1c89e354b196bcbadcd6621f331b088445c0af91a74e24c498fbe4e772a9fcc0c70729b09f7554c07d77b966976a45efcb7
- TLSH T188F0F81E8A849A95F4DD307A59C09D3F150E690F5083281DF31C83BA8F92468C6B59EB
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/nasm.dll
- IMPHASH 2cec3397f7a24bda80baf9df84308477
- SHA256 a4735165141570d966b577d594c0541c29baed4978078c1c7237b855f8592a87
- MD5 2f17bab79b9e5caa79c4f493a18fb06c
- SHA1 f3eb8a09529b82fc08e919517e098644ddc01004
- SHA512 37c62999e11f3a44c02bad2ad9941213c0264312f228de32466818ec84d745312f941f4adf6e4bf3f49d5d91e8df56dbf39b7966ed8d4b214b484c93635ca154
- SSDEEP 24576:2zYx3PgYWwocek/r2+AAYNh3tBULAkS7Le:2koA/qhlL3rmzS7
- TLSH T1A4459422A687D9A3C40E1270DDC7D32977B2E0F46B368B87BA4C97AF7D213A11CC5546
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__pioinfo
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_chsize
_errno
_filelengthi64
_fileno
_fstati64
_fullpath
_initterm
_iob
_lseeki64
_onexit
_setmode
_stricmp
_strnicmp
_vsnprintf
_waccess
_wfopen
_write
_wstati64
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getenv
isalpha
iscntrl
ispunct
isspace
isxdigit
malloc
memcmp
memcpy
memset
localtime
gmtime
perror
printf
putc
qsort
realloc
remove
setlocale
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strtoul
tolower
toupper
ungetc
vfprintf
time
_fileno
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
970KB
Virtual Size
970KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/MasonMBR/packages.config
- SHA256 93b06c17f125e3fc733f3fa337781204c830651b9edde36a5400e236eb2dbadd
- MD5 b4ece840aebbc96222ac4bfdd8a5f6a3
- SHA1 96fb41d333d15f78e457d0017c8122f623cdf8b9
- SHA512 dc443a63ca8421ee4f89182555331d07b092e7bb1bb50eb482c4a7073b9ce7b6a9cc9f2999a51e527ddc1e8fa5d56df7bf38dfd5ec580eee807b4ed39b333a57
- TLSH T12EC08C0801A69A364E701E68B7AA8408576C723BB12208CCACA002C5872100A034B355
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/VirusBuilder.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9ee86ab1d6e4d75901eaf4f2ac91c9032dc0782c36af449185ab12f4ed7a0de6
- MD5 4bd416c01b82aacc4baf4374f280823c
- SHA1 e89fc6bd2751b3b096a4ce76f0f862fe1c6313c9
- SHA512 3d00b2c6a3acf4f224ede3249da5fe9311cc7c074d2f0815b24047ec8a9cbefe31a421c7902ee4abda1371257f51c3e3c587ad51781d4ad8b1b95b7ae460413d
- SSDEEP 3072:EDLd/ftMpWbwVmXmP1uHWl6wbXV1u6ZcHsl:I/f2kbkmXc1u2lf1uYcHs
- TLSH T121C3E61036FB4967E47F49B84AF7510243B3A0236578DAD87ECD51A90FE37044AA1FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
123918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Administrator\Desktop\MG.Builder-SRC\SourceCode\MasonMBR\obj\Release\VirusBuilder.pdb
mscoree
_CorExeMain
Name
.text
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/VirusBuilder.pdb
- SHA256 2a51e7757ba105589a5cf95f2b4c648a725237c841b2a760d610cca7af4bd18d
- MD5 4b18bab0ff07910f3819755972bb0c57
- SHA1 651d65914eff994c64a6b6efa500cd6bc52bd0eb
- SHA512 60914566a72064bced488acadc7808b40501461cf1a3007b9636ca0bb4f24c66d3f2712a55dcba606bb27184e14a0bd4f87c39f2757f66f597b5dfdf2421b076
- SSDEEP 768:yVct5Zct5cBhkA/nM2M8N1UYhFMn/qDSUXRIpmdQNH+59nwb8IySxHgON4GYddQI:HO38flLM7UXRIz+PC8nUHgON4GY/o80
- TLSH T17EB36057BB81CA33C45985F8469B4F3D4638ED805F8297CB6398B26C3EF33691DA1258
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/nasm.dll
- IMPHASH 2cec3397f7a24bda80baf9df84308477
- SHA256 a4735165141570d966b577d594c0541c29baed4978078c1c7237b855f8592a87
- MD5 2f17bab79b9e5caa79c4f493a18fb06c
- SHA1 f3eb8a09529b82fc08e919517e098644ddc01004
- SHA512 37c62999e11f3a44c02bad2ad9941213c0264312f228de32466818ec84d745312f941f4adf6e4bf3f49d5d91e8df56dbf39b7966ed8d4b214b484c93635ca154
- SSDEEP 24576:2zYx3PgYWwocek/r2+AAYNh3tBULAkS7Le:2koA/qhlL3rmzS7
- TLSH T1A4459422A687D9A3C40E1270DDC7D32977B2E0F46B368B87BA4C97AF7D213A11CC5546
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5248
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__pioinfo
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_chsize
_errno
_filelengthi64
_fileno
_fstati64
_fullpath
_initterm
_iob
_lseeki64
_onexit
_setmode
_stricmp
_strnicmp
_vsnprintf
_waccess
_wfopen
_write
_wstati64
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getenv
isalpha
iscntrl
ispunct
isspace
isxdigit
malloc
memcmp
memcpy
memset
localtime
gmtime
perror
printf
putc
qsort
realloc
remove
setlocale
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strtoul
tolower
toupper
ungetc
vfprintf
time
_fileno
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
970KB
Virtual Size
970KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/Guna.UI2.WinForms.2.0.4.7.nupkg
- SHA256 76f5db46e941f02613aa68f99f8458e18050a7b999e9b96df415eb9ac3c54a7d
- MD5 fbac5e315a15cb12a56dd8758450404f
- SHA1 7b2d53f45109768eafa00f19dd38b6e3a583ea99
- SHA512 feb5a9ae0c3e652433d9a773d6ea05764674912207f80690600fd2cbad043e255ef31e168b3c77163b6b2cd635b4b2659e9863dc20292d73cdfb9a9e5638defb
- SSDEEP 196608:Lr9fLcO/7vWUm8OjfNva7fa3v8D2zcdaMOCMSuoQ:L5p/t0fNS7m8D2z8ICS
- TLSH T1FD6633C4385E5469A3EF54C29687C142EBCF25F0FB72F77B482086F66A93607442B98D
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/LICENSE.txt
- SHA256 0023049ed529b24347715ed91144083e5fc29dbd5b884e8966c1c58efc62e697
- MD5 825680b93435ef1dda4c2b7c3646565e
- SHA1 46a19d9ec4215afbcd3312c158c0d85022ffdaf4
- SHA512 78da597f5a1d6ca93f52a0115ab7f5c036cc6cf9420b36ca2322f8c4fcdc101955b136f38997005c35a0afb2c5c22799b3c5c3fcbfa50d5e272ac88b1adc1e3e
- TLSH T15E4133BF864E226807A312F2724516E3FF7ED198732541B0785C851C236A5A9937F98F
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/README.md
- SHA256 73d2d632f59c019455847aeabeb58db0634f2a3b293501c6f37ec459e13a65e5
- MD5 d1ebdf6792480c422e23baee523c018d
- SHA1 2f248e3c51ca95faa1ffec47c6c3a92905743092
- SHA512 5874db6a3dec0d3674581a68dcb123c0a95f203081dcb7bc66ee8bf59f457ca409e6378a53efefff414a06fbfc181ae7142e58e112c7d3c7b6a57edf66b3bd46
- TLSH T1FBF0273B4505E6598B356CA6249F32BCC61F20F94EC389AD987481943A00B65907BD15
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/icon.png
- SHA256 853fe905d0476b8b2acc891d71a59e742257dd003e234700dea893d37af44bc1
- MD5 1804931f288b48c3e03f326578eab93a
- SHA1 ac5607f8f1a2ed2b0d132ad3e64ec284e1c679b0
- SHA512 c9b67eba64f808d104a4e3311e977927a3b404e239851b36a232a86a681c73cdb9e55da6b49c3008ed0194fe1bd30cb0cfb9402b85983b446d4b161267695e20
- SSDEEP 384:BXE05SyFwGWNeh8V2LyhS60s2snaRpur8h9+NUpaviqqr:t35TwnEehS60sLncpuA+KciqU
- TLSH T14B62CF53BE7C5DCA8F94157D40CD11A1FB64EA4880FAE6817A032A9F4858DBEEF1BC10
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net40/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb748b7ef152a8821c17b3ae7a4fdf0e9bb4d20be77ea44ef3ad4927c4623b7d
- MD5 04b0ca666c7401d4a00fc46af98331c7
- SHA1 2dca21e4fd199cd5e950090a8c4726117c301bae
- SHA512 cf57e980ec4f75c4542993f429ab76ea8a34fa3044d276a51f51e0d208126b3286e87d3b4d488907dbb328f77e073287c878454a10cfca2bcaffb1a5fa2c1902
- SSDEEP 24576:IKMQi7uw57Ija5jYwAjMn90Twkdi6xJ27ct1B2IAZmxVeFdHQ/jzOnsvR:PljpdXh2dZ8VeFa
- TLSH T127A50A147ED4EB27C16BCE33D6E24011E2F1E5932AB1EB0E66D7976C1842346788736E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
39:3a:85:cb:a2:66:f0:be:33:95:90:90:25:b8:d8:63:d5:55:dc:ac
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2189342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net45/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb5a27f2b1b2a5e159fa939790bfadbf125b0a811e66b02beffe74a1a4d67608
- MD5 8e13e00e2ae09ebb4fabc953881a8892
- SHA1 6a9bb090b530afb5f7285bd3162feceb1dfaf554
- SHA512 35544e542dbc580147fdbfdbb54f3529cafef29a2ede56edea98f07b6a3fa9bf9548a58c12aa9652dbd9033a9eda45d7befc565e38c40c209ae39b7d5ecaad57
- SSDEEP 24576:G2i5XV9fryL38yDSsFvhqqnqvoWMAeVFltaxCc3/qZmxVXFdHQ/jzV+6I:85sFbRZVQiZ8VXFf
- TLSH T14CA5F9147ED4EB27D16BCE33D5E25011E2F1E5A32AB1EB0EA2D35768184234578873BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
90:f3:3e:f7:21:ca:51:7c:07:db:0a:ec:42:6c:06:1b:cd:ca:6c:53
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2189342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net461/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 063dec2b1892076dbc8903451da8e47cbf231ae7e3d53bbe7885acd97fa5a23e
- MD5 4755f470dd4290368204af1914d0c454
- SHA1 cabe1fc2ab668c7181447e8f18f962bee70df030
- SHA512 10125d73dcd03d535fe0ed2088e17708979f6d754aa6f77b5eab8b40fbf5c207bb957a113f3e011ce3bfbffd9ebeb2cf5285c8666249df5e6f8265e6a7ff2271
- SSDEEP 24576:3sPK9HKYAdprmgWp3Kw8HdgBk1pkXTEzLM1uUr+IS/bmlGYbTCTxZmxVCFdHQ/js:8Pm3QgYkXTEzLM8Ur+XKTaZ8VCFA4
- TLSH T188A50A147ED4EB27C16FCE33D5E25011E2F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
2a:27:27:c4:a9:be:25:a0:40:cc:b2:e2:d2:71:b8:6e:40:d9:ba:d9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2189118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net472/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:8b:14:20:bc:10:db:d0:29:b9:4e:67:9d:b2:a6:c7:df:c3:b3:87
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2188846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net48/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2130c7489f5a5e21812c1eab37dc4903b901861a2d545aa607555be269091afd
- MD5 b464fc896b14bfa34f608da53856e999
- SHA1 55568eecc97895cad49a42bffe757e3588c5313c
- SHA512 1b310b16b0973c9100c9d220338ffc9340b4085d7a095cc601998b5cbcb67b927d8665070bd8b6e2af2a29d13762f404a794b79dbe223b48751894a4bf47c5ca
- SSDEEP 24576:ITL3GQ2wuP82+lTVG+3VvkPMb4yk8z1xcfeGwrSe+a/gZmxVsFdHQ/jzaM5PT:U5+dSRzIZ8VsFWN
- TLSH T124A5FA147ED4EB27D16BCE33D6E25011E2F1E5A32AB1EB0E72D35768184234578863BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ef:ea:da:1b:68:34:55:c7:9d:54:32:02:aa:3a:3b:97:1e:fa:ea:5b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2188926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net6.0-windows7.0/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7fbcfc3b0dd174e3f1fafcb2d4d160f65fe2bfbfd2e198535799ab1a97895601
- MD5 bbb519810c84576f681410edbfd4f854
- SHA1 b914241b61efbe35a1ab1457806bc43113b00fa8
- SHA512 639ebfd08ec7bd545b2e6d8b02447df3dd72ddefe7baf6095034bcfdd6bba323a75b8924a1cc2f6a536ed579302fddc76bd1b3119c4597c6ed31dc11fde73708
- SSDEEP 49152:LMdNe0Q0uKHOhtk8barbbSCV/0gbrZOrHEhIguQudFr:LodVTrqkGf
- TLSH T1C5A5F9197994D727C32F8F3395D60011E2F1E4A22BB2EB0D66D7676819433897C827AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c4:c4:a8:78:87:b1:9e:cc:ed:35:17:9f:99:e5:78:41:cc:ab:19:19
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2241838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/net7.0-windows7.0/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 35540fbf917800c063b2370fcb285cf42ca44d71355343d9126e4100e4e09d23
- MD5 32158fa3b5335fa11f77d8cc63b89850
- SHA1 662df054a22bd139624cdc4d9a9d7decb9165563
- SHA512 8ecccd1629c8137fcdce3ec68a44e7c5f6c74f5056850cf2be669e64ded4dd57fab8ffdb3baec301f48c8a13d593663278472e851641ff70b1648a05f39f6c9b
- SSDEEP 24576:GcFZd+yQmC3dneyIj1oxHasP+SgHuCjrID5I2EtWF9HHIppoOSd0LLKFwHQ/jzKg:RH1QmCNeAasVgHuArID5ggSeO+Fx
- TLSH T1A9A509197D94D727C27FCE3395D61011E2F1A4A26AB2EB0D36D3676C18437867C823AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
6f:66:39:68:b7:9a:64:c2:48:74:ef:38:6d:e5:ac:8e:25:c4:ed:b0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2242926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MG.BuilderV2-SRC/Release/packages/Guna.UI2.WinForms.2.0.4.7/lib/netcoreapp3.1/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f48e5a72560c4cf520281c7c3bbf0dfb28d16d6fc4ba0f36bd6642d1ccb759b
- MD5 d49ee722b6391caad33d26d30b682256
- SHA1 51e2955b98802ad68bd354439b1c69cc8a2e2a59
- SHA512 0f7220974b0ec33562112d8f41bff4b7fc74db9c951acfbc771fd63c219f3a9bad98fb796aade1488383f300e1014910dd35ff39504f72b0470cad4616bc857e
- SSDEEP 49152:cK4EB/xKntwymXFMQKzrZgelPl0m/F6NzksTvl:Wrnxq
- TLSH T198A50A187E94D727C27F8F7395D60011E3F1E5A26BB2EB0D62E36768150378538827AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
df:ba:72:80:b0:b3:8b:8e:49:17:34:b0:ef:18:ae:42:f6:06:03:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2241390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MOMO.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7a7aad7fd73d2494be90ce2d26cfd9f3a47a0266179e98541132d35a4bfcaa81
- MD5 bff1bbdf56fb24e213a6cee140e64a33
- SHA1 d97467fe0eee4008ecffe7867a1e4fbb0a0b8089
- SHA512 355363a11eff2f0cf8f6f54032f132ee99a8091f7502fa29f4aa8e27e70a5522a3093db1dc4dbe27ad1d6760c2e1883b1cb4d40a21c1792e164846e1d7cb96b5
- SSDEEP 49152:f3/A75CyhPMybyNJejU6iTb8dPZ3Mgzjqy8eytbvX6dgz0VSJc2n7ppgGA52k9Y:/4dCRybyNMI6iTA1Z3M2jmEmBFk32k9
- TLSH T1B4B5DE132F485847C12227BD69A5D27857E71F84E56BC28248F1DC63BA8FDC36B1E1E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1977486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Madnees.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7e387bb91d118482cc29a614fde177979862eeec472978ee1edd4c6c00b79fb7
- MD5 b94aa242f632713f90cea13c0581a376
- SHA1 a880db033cb60f5302ebb811568a954524f9306c
- SHA512 2bc453d62e98a82687ac1ebf41121ae73bd7991f953e02260196ce379307d80b27d9ebf785c87c81b20b6dd0f390c138702e3866622b548da958f768dfafcf01
- SSDEEP 6144:S5R/qfNE6/5rNhcsswtbR/9j61iKf7QUl9RSxRY4q:bf+6/9NhcsddTKiAEsfSxRYl
- TLSH T1B05402E5ABE8005EEE2584F48F45EE7BAD632C911242849361DECDB3798AFC392150D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
291102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Magellan.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5f9c6b82e9f287d67b30c6edac1e8e606b6fb719206c88c5421846d48d64d271
- MD5 dcea41cf1d8e08ba9cf571fdb21f1db4
- SHA1 da14f6d77d84da5e4290a28ce04e215d7cbfb937
- SHA512 d094aad5cd856683e551a519039c183ba440052639f82c0fc9e9124714f4bd843f83fa5a400386add08ed30b1dfb51c095e0055c96f601bca0c18acff5bcaf2f
- SSDEEP 3072:ia6Q7bFVzmHQg9Ug644RrO4gGBGhFxwzhk24UoobktbVZ:pz7bFVzvgP4O4bBG/qzhk+abV
- TLSH T138F3F26872FC6272E2BFC27645A6BE44572111B72B26FB6B0CC5E3F938137C54B20419
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
176414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
164KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MasonChess.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9be0c047cea06ab24bdb1711ca7d4608e179826d079206ed36a1aea830cc5149
- MD5 10956f1eceb4c919805661a5bf59bbe9
- SHA1 51bda4e573711789db96a1755563246e39623af3
- SHA512 001b6eb588a6ac9d41abfe1a7fe001734fc9edb9db0502564532e029f1c30bf317261f63634527deb37ea9e1bb064818c57ec0a94194b23e4a6159039b02514d
- SSDEEP 24576:gfCzYx3PgYWwocek/r2+AAYNh3tBULAkS7LeS:gfCkoA/qhlL3rmzS7
- TLSH T1A455C622A687D993C40E1270DDD7D32977B2E0B46B368B87BA4C9BEF7D213A11CC5146
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1345930
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Administrator\Desktop\MasonRouletteV2\MasonRouletteV2\obj\Release\MasonChess.pdb
mscoree
_CorExeMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/MasonExln9.exe
- IMPHASH 9442b6fa045237488f87bce426d95b06
- SHA256 622cce1035f8cdb86e362c430557e5c30f39a27bc53f7ccf201f51ba1bb3a965
- MD5 c30245645d088e11e6b57851f0e3b5c5
- SHA1 95853546db82c20be611714eaec91ab6a1e32bde
- SHA512 9979c6f19c7d48abc8eba634d5c4eb923b4c4c22882c78e6e7d77e633da8bbf1913a78ee02d4fcf64fb4a744c862d14b9c8ff08f23165187516c31b6d241f009
- SSDEEP 1536:14onCorR67Q3SaRO7IPqi/rhxdhsCJjmGasWhQcdQk/hO2o:v/RsQRIMPqizhxUqreRQk/hXo
- TLSH T1A0734B43B5D29CB2E5B21D311871CAA19A2FB9210E248E6B7794137E5F340D0AE35FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
5558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Owner\source\repos\StringMbrBuilder\mbr\overwrite\Release\overwrite.pdb
kernel32
ReadFile
GetModuleFileNameA
WriteFile
SetFilePointer
CreateFileW
GetModuleHandleA
Sleep
CreateFileA
CloseHandle
LoadLibraryW
GetProcAddress
GetFileSize
ExitProcess
FreeLibrary
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
DecodePointer
user32
ExitWindowsEx
MessageBoxW
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=122, id=243, version=40116,
count=24, id=242, version=40116,
count=36, id=261, version=26706,
count=17, id=260, version=26706,
count=18, id=259, version=26706,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=93, id=1, productName=Unmarked objects,
count=1, id=264, version=27049,
count=1, id=255, version=27049,
count=1, id=258, version=27049,
卍 ALL VIRUS 卍/MatrixVirus.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5906dc7c3cd938b874cfb12cd9a14a6e72116c31385f4584f997f1544e3da492
- MD5 13e1f4bc5b116e4ec87f055715563193
- SHA1 9eea7e9fce555b6c35730ec3dba29a13921f53f1
- SHA512 a53f446a2063684e401ad8c7da70ea7be4d23a2043341d9ab280dd36a1e91ef43b11ff510405125b957d88f5d9c7c00edb35977d8fe512e6fd0236f6447a030f
- SSDEEP 384:PX//sbBzFbtTLqr/tS2Ab9FhV0beOrptYcFwVc03K:PXCbgSn1IeAtYcFwVc6K
- TLSH T143620A4AE7944275D5BA027319B3A745CB32E22B8D47DB6A3CCCA05E7FA32064733395
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\n3r-\Desktop\MatrixVirus\MatrixVirus\obj\Debug\MatrixVirus.pdb
mscoree
_CorExeMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Melting.exe
- IMPHASH 5960e4006cf3e48c7ac35cbf00addbb1
- SHA256 92a284981c7ca33f1af45ce61738479fbcbb5a4111f5498e2cb54931c8a36c76
- MD5 833619a4c9e8c808f092bf477af62618
- SHA1 b4a0efa26f790e991cb17542c8e6aeb5030d1ebf
- SHA512 4f231fc16339d568b5cf9353133aeae835eb262dab68bc80d92f37b43df64dce4fae0e913cbaa3bb61351a759aeecf9d280bc5779b0853c980559a654d6cca11
- SSDEEP 192:0TVtyoHzIj5dzyKa7gyh5QzpMm74ysT55tfoUK:utpTIj5dO52/HsTu
- TLSH T128423C07BB5305EDDA27C1F5D0730E06E5BA75204722768F87B162A21E93242B9A76CD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5636
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Domas\Desktop\ScreenMelter\x64\Release\ScreenMelter.pdb
kernel32
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
TerminateProcess
GetTickCount
user32
RegisterClassW
PeekMessageW
SetTimer
ValidateRect
PostQuitMessage
ReleaseDC
DispatchMessageW
ShowWindow
GetSystemMetrics
GetDC
TranslateMessage
LoadCursorW
KillTimer
CreateWindowExA
DefWindowProcW
gdi32
BitBlt
vcruntime140
memset
__C_specific_handler
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_initialize_onexit_table
_c_exit
_initterm
_get_narrow_winmain_command_line
_register_onexit_function
_initialize_narrow_environment
_initterm_e
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_cexit
exit
terminate
_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=17, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=7, id=257, version=24610,
count=62, id=1, productName=Unmarked objects,
count=1, id=265, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
卍 ALL VIRUS 卍/Monoxide x64.exe
- IMPHASH a2f9cc400443004644952ac829162570
- SHA256 ae9405b9556c24389ee359993f45926a895481c8d60d98b91a3065f5c026cffe
- MD5 692361071bbbb3e9243d09dc190fedea
- SHA1 04894c41500859ea3617b0780f1cc2ba82a40daf
- SHA512 cfdd627d228c89a4cc2eac27dcdc45507f1e4265eff108958de0e26e0d1abe7598a5347be77d1a52256de70c77129f1cd0e9b31c023e1263f4cf04dbc689c87e
- SSDEEP 3072:7/yvAAdLz9aha9RMXtdf+IBC2nQ4oUehONFlT7vJ333AlOi9E3AAqgm:z6dLzgiMXzBTJTDqlOi9E3AAqgm
- TLSH T13174C3027151DA99D8214130CC2ECAF67E227CE4C6B149E736F2BF7F7D7524269AA720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
42856
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
winmm
waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutOpen
waveOutPrepareHeader
kernel32
Sleep
GetLastError
lstrcatW
DeleteFileW
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
LocalFree
CreateProcessW
FreeLibrary
CopyFileW
lstrcpyW
lstrcmpW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
CreateMutexW
WaitForSingleObject
TerminateThread
HeapFree
HeapSize
GetStringTypeW
GetLogicalDriveStringsW
ReadFile
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFileAttributesW
CreateFileW
FindClose
GetTempPathW
GetModuleFileNameW
RemoveDirectoryW
WriteFile
GetCurrentProcess
FindNextFileW
GetFileType
FindFirstFileW
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
SetStdHandle
GetACP
GetModuleHandleExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
user32
GetMessageW
DispatchMessageW
SetTimer
TranslateMessage
EnumDisplayMonitors
GetWindowRect
GetDC
EnumChildWindows
CallNextHookEx
GetSystemMetrics
SetWindowTextW
DrawIcon
DestroyCursor
ShowWindow
GetCursorInfo
RedrawWindow
MoveWindow
UnhookWindowsHookEx
EnumWindows
mouse_event
SetWindowsHookExW
SetCursorPos
ReleaseDC
EnableWindow
MessageBoxW
ExitWindowsEx
gdi32
DeleteDC
CreatePen
Ellipse
DeleteObject
CreateSolidBrush
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
FreeSid
OpenProcessToken
shell32
ShellExecuteW
Name
.text
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
143KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=241, version=40116,
count=122, id=243, version=40116,
count=39, id=242, version=40116,
count=37, id=261, version=29922,
count=17, id=260, version=29922,
count=14, id=259, version=29922,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=157, id=1, productName=Unmarked objects,
count=8, id=264, version=30031,
count=1, id=255, version=30031,
count=1, id=151,
count=1, id=258, version=30031,
卍 ALL VIRUS 卍/Monoxide x86.exe
- IMPHASH 9ac10d3eb45e2af35269569591fda84b
- SHA256 bd764fe2f9734d5ac56933ce68df0a175bfa98dc0266ae3cd3a5c963267ea77e
- MD5 5c378b11848ac59704c2000b4e711c30
- SHA1 6a46c53fd89b1f66d3fdab7653181e8a3e56d418
- SHA512 c6fe33ff3825e9018abea99ea49dc5221f2abd96bd1099def898425b82c05f9b9ca1aacaba0b7ffb7d09a7d097eae9937abdc13bbf3e7643e24e37edc7841c48
- SSDEEP 6144:bJuMc7iv8+gsg058LvD47vlOi9E3AAqgml:sKgX0MivlOi9E3AAqzl
- TLSH T1F75491417481DA65CC610570CC6EDAF53E26BDE4CAA149F33AE27F3F3D7418268A6632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
30482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
winmm
waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutOpen
waveOutPrepareHeader
kernel32
Sleep
GetLastError
lstrcatW
DeleteFileW
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
LocalFree
CreateProcessW
FreeLibrary
CopyFileW
lstrcpyW
lstrcmpW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
CreateMutexW
WaitForSingleObject
TerminateThread
HeapFree
HeapSize
GetStringTypeW
GetFileType
GetLogicalDriveStringsW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFileAttributesW
CreateFileW
FindClose
GetTempPathW
GetModuleFileNameW
RemoveDirectoryW
WriteFile
GetCurrentProcess
FindNextFileW
FindFirstFileW
WriteConsoleW
ReadFile
HeapReAlloc
DecodePointer
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
GetACP
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
user32
GetMessageW
DispatchMessageW
SetTimer
TranslateMessage
EnumDisplayMonitors
GetWindowRect
GetDC
EnumChildWindows
CallNextHookEx
GetSystemMetrics
SetWindowTextW
DrawIcon
DestroyCursor
ShowWindow
GetCursorInfo
RedrawWindow
MoveWindow
UnhookWindowsHookEx
EnumWindows
mouse_event
SetWindowsHookExW
SetCursorPos
ReleaseDC
EnableWindow
MessageBoxW
ExitWindowsEx
gdi32
DeleteDC
CreatePen
Ellipse
DeleteObject
CreateSolidBrush
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
OpenProcessToken
FreeSid
shell32
ShellExecuteW
Name
.text
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
143KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=241, version=40116,
count=122, id=243, version=40116,
count=47, id=242, version=40116,
count=37, id=261, version=29922,
count=18, id=260, version=29922,
count=26, id=259, version=29922,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=153, id=1, productName=Unmarked objects,
count=8, id=264, version=30031,
count=1, id=255, version=30031,
count=1, id=151,
count=1, id=258, version=30031,
卍 ALL VIRUS 卍/PEEKABOO.COM
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c1aeab35f61f12db28274d82713bff400b808625854a18e49504022f92805e31
- MD5 d0ae6aea701de9f127f91e7efdb50252
- SHA1 cb9ef64cbcb999372fb4046e99fe89a03df9bc81
- SHA512 505d11808e9923ff0ec1a51acd51509711f8c5c42da81b47a97249954b06f6f45ddda4655446daeb7f231785cd484ebc6e9ada92b857ad3a8d7ce04276536f13
- SSDEEP 24576:lCFZOZHLhrN+f4SULfWyBPzB8JAk4cQATb:oF+LL+fIWybB8
- TLSH T15915339832772A1FC8E73B37E5E739A463AE323D1936215C04A5F37D1E415C05726EA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
948526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
918KB
Virtual Size
918KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Popup.exe
- SHA256 f8f7b5f20ca57c61df6dc8ff49f2f5f90276a378ec17397249fdc099a6e1dcd8
- MD5 9c3e9e30d51489a891513e8a14d931e4
- SHA1 4e5a5898389eef8f464dee04a74f3b5c217b7176
- SHA512 bf45677b7dd6c67ad350ec6ecad5bc3f04dea179fae0ff0a695c69f7de919476dd7a69c25b04c8530a35119e4933f4a8c327ed6dcef892b1114dfd7e494a19a7
- SSDEEP 6144:yN6MLNACl/+9EhE/jIxlOaNpA7tRzXBWRiB6nlbKsgP5o24a4pF0ghqbjY:Kh29IEUxhiHWRIglbKsgRokTghf
- TLSH T18784130EB56CD3ACD6D531B6D4E2AB9BC3569CC44B22D357A338D91F4AB22067E01B09
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
901121
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
232KB
Virtual Size
584KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
125KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/README.md
- SHA256 71a725125c04332d0f0f85b529f8f26ef37cd06c98668555f2a15279e1c56397
- MD5 73285986004a6a90177243b2cbda5301
- SHA1 21ec2f6a4beaabb5fe66860a462d71b1e2e15f1a
- SHA512 250160c11c910f9a99d2f1292437ea6145a6fb6ba800dfd05a15a58006aaf93afe3275e8a63abaa0d5ae75b4e71dc932092b085a486ee5f6703607cfe94de489
- TLSH T143C080E61D204965577B476474C1D5137112575D1908B218C455111151D00E9113DF0D
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/ScreenScrew.exe
- SHA256 e03520794f00fb39ef3cfff012f72a5d03c60f89de28dbe69016f6ed151b5338
- MD5 e87a04c270f98bb6b5677cc789d1ad1d
- SHA1 8c14cb338e23d4a82f6310d13b36729e543ff0ca
- SHA512 8784f4d42908e54ecedfb06b254992c63920f43a27903ccedd336daaeed346db44e1f40e7db971735da707b5b32206be1b1571bc0d6a2d6eb90bbf9d1f69de13
- SSDEEP 1536:o0J9QXrssV7g4Rq3b24oFDo2mL7oagiBGVHo8J75qUbGuNxTJeqq62hxcmpn6izz:o0J9QbLkewys+C6pNxFE7Z6wAO
- TLSH T1FAB30284EFC49BE5F4E043B2415E44D1CAB370106F16CFA747AD5A9A3E1102D9F2DBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
290817
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
84KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/Shot.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 775538ea3323fcb4f2e313edf6abbdde897bad91ddf7b1f9b37b716847f3daec
- MD5 8d9f5feaf581fe1e043b00782239b6d8
- SHA1 2d15e75dbc49bb3d146d0d590f371e7e127e5a6a
- SHA512 f53597b912751a30217e92f0a04b6eea29a06c004df059115d8496f43318a17eca176e6fc4c4faeb41701b6c521bd9fa2765994fa15a0bc3bc82b5cf133faa52
- SSDEEP 24576:JpBtI3EXxyjEnPgY+YIqMAlaZ269JKrcH4wWgzkLwLUf4vwTYP+XFeUoQdSq9few:U3MFIY+YlMAsZ26PQg0owTr4P
- TLSH T1E9752359BD60BA6FC80FD476855CEC60D384293B1626D643B4671CC3351EFBA4EA82E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1582382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Smil.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f534bb9d7cc4c0f8abf8adcc592a328a64a902211ab66bafd9a0c7a333e86a20
- MD5 ea210a16c2cd0f7d84d3961bccbfe73a
- SHA1 598a97e9c7aef20ccc65ed04aa9449564b53f48f
- SHA512 baad73a63e0e4c56bea3283f0072ff7682e37afa96403c99e714373ab49b20e990044f6a221a89d27fd8c763af06e7418886880d41cc557be9892daeb3877c65
- SSDEEP 6144:iT+DPxVn9PvkYyeryYpaVexc6dJ1QYsjHf6EnJrNlT9Fb+3jqSd6A5n6n9TCX+Ct:iT+rxV93k4HpaVexd/FuHfFLEjdnC9At
- TLSH T18A84135561BDF193EAF9917318FFA004961A972FA3056BAF1C84D937AF0AF84320791C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
235934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
222KB
Virtual Size
222KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Squidward.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2b6455abbf84755be4dcf840ebbfed9c480dced7bd74806bafee05465a5e752d
- MD5 82bf26203c5d76dfa3a591f1cb60d7b5
- SHA1 93bf418f64ec701fd0d3232a00a167d04ba9a6d2
- SHA512 6a896c274958467e18579affe68a2e0acb68ea633715920d244974765dbf577ce7558cb3dc467a69a656cb82c2f588565f71c4413b5dedc1005fba35303ed2f3
- SSDEEP 6144:yrjS60VNKrDqa3pPvX0RQ/FwiSs8k//M4zVRslxX4ci0MAM0bCrvVFs47Xeeeeen:4jST2/l3Z8O7Ss8k//XzVRUX4fnr9
- TLSH T136C4CF61A103D6E2E38D4BB46152D478152E1FE6679A160DEFC13F8B7DF12A128239CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
305038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
290KB
Virtual Size
289KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
244KB
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Stalin.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4f50bb2cd893f1f225e02f66ecf0765830f078265e81096dbf551589cc641d43
- MD5 65f583c1c4322f11c7f947948d9c70fd
- SHA1 b570e11c47d64af6b00a3b6f362e067144a692ab
- SHA512 da14e6ffc9ebb593f0f5fcf199cfe3db48fb16683ad617fddac27b49e2b911e35fbbde271ab7d82d702b80d3558c6ee25c3759d01dafa8c1229a1efee4f44fe5
- SSDEEP 384:aIyoju/Dgxy0hpT8embLGG/tT2f7VXMeQTj0HeRcQyyyWuptYcFwVc03K:aIFj7XoTi76Jvaem0atYcFwVc6K
- TLSH T14BD2191D6266C027C56832B9EC2796F2817DDD89E455AEA335ECBD0D3F7620780A12EC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\n3r-\Desktop\Stalin\Stalin\obj\Debug\Stalin.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/The Masters.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 71d3bbcc19247c3b4f6eb33dd3c98a896583b77cf1297e3f663190a1ad596416
- MD5 127794533f59de446fe5227359e4704a
- SHA1 9ef06dcf49388f52f5421da42d7e88ec2ea96e8a
- SHA512 8c700515ca28e16a05f4c75d765efd66f56f4f5aa2cad8dead0fd65aa63a72f5ba0f69835d6d462f40d5b4ee4cdc7d1fe5e3828cdc8604eac055b1b5f29817fa
- SSDEEP 12288:ntayzOe7gNKgPkDob1oau7tbAGz47ciRjbzJl5gNX/TNxNqWZQcWfMf+XAeUb:knZNKhMxohFAgQciEXZCWacWkfX
- TLSH T14C35BEA67604798FC82783BA8525CCB863232DA96676C30744F7FC67BB3F1839D05496
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1171466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
oDxt^1S
Size
648KB
Virtual Size
648KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Time.exe
- SHA256 dc476ae39effdd80399b6e36f1fde92c216a5bbdb6b8b2a7ecbe753e91e4c993
- MD5 9d0d2fcb45b1ff9555711b47e0cd65e5
- SHA1 958f29a99cbb135c92c5d1cdffb9462be35ee9fd
- SHA512 8fd4ce4674cd52a3c925149945a7a50a139302be17f6ee3f30271ebe1aa6d92bcb15a017dca989cd837a5d23cd56eaacc6344dc7730234a4629186976c857ca9
- SSDEEP 1536:TfrQPF/jIqQb6XFEs0hWbY39RhDqY1C8a2RDkHa8C4pRhYgyF/l3lwad2ktOvyz/:jr4NjIPmcaav1XRDcZhYp9/Ykz/
- TLSH T1D5B312E1938D0E31E0BF2A35ADD4871D2BB4F4D24326EB4F252482F77C24A0B1EAC559
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
290817
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
82KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/Trololo.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 3d0efd55bde5fb7a73817940bac2a901d934b496738b7c5cab7ea0f6228e28fe
- MD5 b6d61b516d41e209b207b41d91e3b90d
- SHA1 e50d4b7bf005075cb63d6bd9ad48c92a00ee9444
- SHA512 3217fc904e4c71b399dd273786634a6a6c19064a9bf96960df9b3357001c12b9547813412173149f6185eb5d300492d290342ec955a8347c6f9dcac338c136da
- SSDEEP 49152:lj3iZ1MHTIo3dLoYNiDSeP7jxPXyouZ3xtNg5EzN3CD70c5iMOIEQLx3+bt+g:lma9NLYGG7FduZhtau3Cv0cIIEQVubt9
- TLSH T12DE5E1A3D0438B19FBC78B77E7D26C081DA4B01CF5B9661F35889D49D2E370076693A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3138558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Alexander\Documents\Visual Studio 2008\Projects\Virus\Virus\obj\Release\Virus.pdb
mscoree
_CorExeMain
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
143B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/V.i.r.u.s M4R7H 1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 bba80f6885d7fcf5a9aea0ebb700b5f95b7b1d72021d4bf3f6bce05bfaf86a87
- MD5 d4cebd2b3316f2d285a1e3a432f17e3e
- SHA1 70709634bb2dcaaf8fe4aff7e7fe1ed4c079653d
- SHA512 7e096273d34bc89d50ef3808c459ab19824b87d82415e4075d868b3c54e62e71b54fa97623824d52d8fdb3266ee37f76e6c3005499965d9acc57daf03fb4a9bf
- SSDEEP 768:PpfLt2DSlZ5mvQyC4TybvebIWSOO6uQ7V+kiljh+Ahu0d9qqLtFQvNHt3L3w3e36:9pcYOFbIWQ63Rb4jlSsat3L3w3e3d3U
- TLSH T13F737A4C9088734BE180B9301DB62E5217D55745A4FDA82DCA33BAF26D271F8FD2B9E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
79198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/V.i.r.u.s M4R7H 2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8706a1fa8dc66b346eb841df25551225528de86bb8d7cfcb0ebd4ea458b9dd58
- MD5 b42bc84e4f735ff0d624e7924d37657e
- SHA1 2d8ada809639dfb0a6a3ba850083549fae4aa34d
- SHA512 67954bfe313d3499427478f2ac45f28c77318c104534866a3c07d20e6071a8725be72caeeb1519018c07f4e28e221dda7fa4b194a51910c57bc766fc0c230cf2
- SSDEEP 768:JQsBkfRUWZmG8EkztZebSqK0+snTvb6TTslt8WlhVaFhmxfKkNgIArGj2SDEdqlz:hBk5U6wztYbSqZnTj8LUSkWpelPdJ
- TLSH T182736E4C9188735FE500B9300DA62D5213DA574465FEA82D8A73AEF72E270FCF92B5B4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
80206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/VIRUS SOUNDS/Virus Sound Very Error B2y General.mp3
- SHA256 c7087848edfd1414cb978d6e57b4a192c945d39dd3b5ea90ed7943eb8b60519b
- MD5 24a3e75d5633a984ee43e9c7e8431c3c
- SHA1 2dfc35cce16593381a3b919db23dd566efb75b5f
- SHA512 f09f970455ffbdc34fd49eb146c7c415889d1836ee5f298dcf85787322e0443ce158f60d33241400a656ffc9909a1c3bbc51889511ebe9cabb69f4d21c7e2a8d
- SSDEEP 24576:lvmFqNFIZTh4aWpyHsAtv3mDHDxjMvBmI5rfz1cK33:lv56EMMUPmZAvkI1KK33
- TLSH T17705232748B1722DF9B49BBDDF4B42C8C0558EBE7261D62E4F01B7A351B381A7B054E4
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/VIRUS SOUNDS/Virus sound baby is cry B2y General.mp3
- SHA256 1c0cab026e3dfda0ad744cc3457c49c552793111c2a3bffedbc023d7dcfacb97
- MD5 af140d4b33070a51b59370efbf576038
- SHA1 dccc0326eb4363b665454e1df616be9bc85a6d9c
- SHA512 cdc490218ca73e4478c9ad0246a48186596233d6f4bca1e1392669f2688a91ca29a88316c2fba9aecea42f9a59412df32b159dad9c8916491d7cca9451c69a28
- SSDEEP 12288:b0svc0eAi/b72XA2SZb3NlrLDJn3HuhyCrxZZCb:O0eIAJZb33rx3O7Cb
- TLSH T16AC401846F01114DA4A65F7C09DFCEB2A922EF0D5E85FD128609BB2AD17FB53377A210
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/VIRUS SOUNDS/Virus sound baby is cry B2y General.wav
- SHA256 880a4755598c5f72c24517f97381d46b0d3cb537cff23c7aeeb0ee59a533ed71
- MD5 4a45bf7d0a85cdf8f51b848057e440ea
- SHA1 3a619503248174748f41a1d04bab2409c0ca906b
- SHA512 b713da9e058eaedcbf2ccbb47e38eec373268d6524a92ebb33990799c0f597540ff93b99fc347300ae62715dbd597c7836a5c31e6ef6e8fbd25ada9dd4e8666e
- SSDEEP 98304:m8Ze6PfNYLYvPhLLlYEihz6/fEfLqH7dPre:DZe6FhLRYHyfSqHo
- TLSH T18636BF5FC4ABC16D2C1158B4AD9BA1E73CCAA99DF48C87302278CC3D31B446976CB99D
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Extractor.dll
- IMPHASH bb677fbadcdf2eca3595d1faeddecfdd
- SHA256 1227e484f32c34f026f311e60f1abae065e00f203153dbf0623152dedf5cafbd
- MD5 263b8a401528b440657bbdffc64c6487
- SHA1 4e6eb74dc21503925645b3a8e4e8cfc63c6fb237
- SHA512 c267ce96d420a2cd3d89023b7745b207851a9c2ad18f474cc8f4eedd40505b4fd7db347b04f5517eca3caee8974971ce478966a395ed412a9f7b4a7383710053
- SSDEEP 98304:UZI4B6EHzZfiqvF+gvuOcOO3GZMs3TLLRpERaMZK:y4O79D5Zr3vt6RaaK
- TLSH T1B8569F13B386543AD01B1B358E67C778563BBE206A268E1757E43C4D3F362813D2E66B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3688172
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
winmm
sndPlaySoundW
mciSendCommandW
timeGetTime
mciGetErrorStringW
oleacc
LresultFromObject
shlwapi
PathIsRelativeW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW
comdlg32
FindTextW
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
comctl32
FlatSB_SetScrollInfo
InitCommonControls
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
shell32
DragFinish
SHGetDesktopFolder
DragQueryFileW
IsUserAnAdmin
DragAcceptFiles
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW
user32
CopyImage
MoveWindow
SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
SetCaretPos
GetCaretPos
ScrollWindowEx
GetDlgCtrlID
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
ClipCursor
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
GetScrollBarInfo
UnhookWindowsHookEx
SetCapture
GetCapture
CreatePopupMenu
ShowCaret
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
SetWindowLongW
IsZoomed
SetParent
DrawMenuBar
GetClientRect
IsChild
SendDlgItemMessageW
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
GetAsyncKeyState
IsDialogMessageW
DestroyWindow
RegisterClassW
EndMenu
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
GetClassLongW
SetScrollRange
DrawTextW
PeekMessageA
MessageBeep
SetClassLongW
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
GetMenuBarInfo
PtInRect
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetMessageTime
NotifyWinEvent
GetComboBoxInfo
CreateMenu
LoadStringW
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
GetSysColorBrush
GetWindowDC
DrawTextExW
EnumClipboardFormats
ScrollDC
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
keybd_event
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
IsRectEmpty
CreateIconFromResourceEx
ValidateRect
IsCharAlphaW
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
GetMenuItemRect
CreateWindowExW
ChildWindowFromPoint
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
DrawStateW
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetCursorInfo
SetMenuInfo
GetSystemMetrics
CharUpperBuffW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
MapDialogRect
GetForegroundWindow
ToAscii
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
GetDoubleClickTime
EmptyClipboard
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
SetKeyboardState
GetKeyboardState
ScreenToClient
DrawFrameControl
IsCharAlphaNumericW
BringWindowToTop
SetCursor
CreateIcon
RemoveMenu
SubtractRect
CreateDialogIndirectParamW
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
LoadMenuIndirectW
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowLongW
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
DeleteMenu
GetKeyboardLayout
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleaut32
GetErrorInfo
SysFreeString
VariantClear
VariantInit
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType
VariantCopyInd
advapi32
RegSetValueExW
RegEnumKeyExW
RegFlushKey
RegQueryValueExW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
msvcrt
memcpy
memset
kernel32
GetFileTime
SetFileTime
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
QueryPerformanceFrequency
IsValidCodePage
IsDebuggerPresent
GetFullPathNameW
VirtualFree
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
CreateMutexW
LoadLibraryA
ResetEvent
MulDiv
FreeResource
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
WriteConsoleW
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
GlobalFindAtomW
VirtualQueryEx
GlobalFree
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
GetFileSize
GetTempFileNameW
GetStartupInfoW
GlobalDeleteAtom
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
UnmapViewOfFile
GlobalHandle
lstrlenW
CompareStringA
QueryPerformanceCounter
SetEndOfFile
lstrcmpW
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
EnumResourceNamesW
DeleteFileW
FreeConsole
GetLocalTime
WaitForSingleObject
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
GetPrivateProfileStringW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale
ole32
RevokeDragDrop
CreateDataAdviseHolder
CoCreateInstance
CoUninitialize
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoInitialize
CoDisconnectObject
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
DoDragDrop
gdi32
Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
TranslateCharsetInfo
ResizePalette
SetAbortProc
SetTextColor
GetTextColor
StretchBlt
RoundRect
SelectClipRgn
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreateDCW
CreateICW
CreatePen
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
SetBitmapBits
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
GetMapMode
CreateFontIndirectW
PolyBezier
ExtCreatePen
LPtoDP
EndDoc
GetObjectW
GetCurrentObject
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
CreatePatternBrush
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
Polyline
IntersectClipRect
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
SetWindowExtEx
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
GetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
SetDCPenColor
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetViewportExtEx
SetPixel
PolyPolyline
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
227KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
119B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
84B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
298KB
Virtual Size
297KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:8b:14:20:bc:10:db:d0:29:b9:4e:67:9d:b2:a6:c7:df:c3:b3:87
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2188846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/Tool.png
- SHA256 8ad686909951c39d1168c28017a2d21e2353e2bacc3647f0c62bd98b5e4ce0c6
- MD5 cc0d7503fe57f672d7cc81aa01e29a7a
- SHA1 9a90dcbbc3caf333f9cf510e31db136a34768dd3
- SHA512 dc08627ce7b6627d8cb3e731f0bc81fe5ada9cdba2800f35dcb1d52111cab44033f94e48a239d697f1ab26435ee4bf6ae328fca0e19970f126732beca1798317
- SSDEEP 1536:UZ5Q8vgU1hCrpu24/ymQv16gRmIK5BZy9j+TzzI5FNlqLt:Un1RyLv1D4TZyYze3lqLt
- TLSH T13A73BFC9A827DCDD4E0E3D683626909C5ACF9A9E1875B433E4F8811FCC5B419B05C9FA
- MD5 SHA1 SHA512 SSDEEP TLSH
卍 ALL VIRUS 卍/VirusBuilderV4.6/VirusBuilderV4.6/VirusBuilder.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cf4b1f40d6d51aff94cdab689e598a3d419e4dc1cbf194d92a545ad20c4d1900
- MD5 52ae0560ee576e4e39848e003449de32
- SHA1 a01860b863aea6711a6fc223c6a78380165c9ee7
- SHA512 2c2fb3502701a2508c1e5db8cfe030db1b79acc4ad5f6c8c9de7d980b318574c6e92d4b519dddfe14cc767c4f39c22528ea21b8b8e6293ea364d5d9bb76a6922
- SSDEEP 6144:kX3xbsFIJCnJQoJugnP6lDP/AWbQ7Voj3XiavoBrhxMBjKTxgU4VIN8J:kX6rnJQoJF6Fw7VE3ZABrwBjTUmI
- TLSH T144B4EFBAB0447AF5EAAE0FFB96473CBC5B7691730F47EAC9209455CB0C723629D12844
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
98314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
9et K
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
NMVaf
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.text
Size
421KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Invalid
Size
512B
Virtual Size
10B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Wrong
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Xerin
Size
512B
Virtual Size
141B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/Vista.exe
- SHA256 6680317e6eaa04315b47aaadd986262cd485c8a4bd843902f4c779c858a3e31b
- MD5 faa6cb3e816adaeaabf2930457c79c33
- SHA1 6539de41b48d271bf4237e6eb09b0ee40f9a2140
- SHA512 58859556771203d736ee991b651a6a409de7e3059c2afe81d4545864295c383f75cfbabf3cffaa0c412a6ec27bf939f0893c28152f53512c7885e597db8d2c66
- SSDEEP 49152:BJYNTm38/S+CqxM29DSF2WNjvOtEnqxVJMSNF8ZfK7bn:fKmMa+C0xsWgfUsfo
- TLSH T1939533410FFFCF0DE4D1A6369A71A5B9AB4F14763A6A6E7B36E2DF1C2464250C902F04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7045121
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
258KB
Virtual Size
668KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.6MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
卍 ALL VIRUS 卍/WinXP.Horror.Destructive (Created By WobbyChip).exe
- SHA256 3b64ce283febf3207dd20c99fc53de65b07044231eb544c4c41de374a2571c5c
- MD5 063ea883f8c67d3bb22e0a465136ca4c
- SHA1 3a168a9153ee32b86d9a5411b0af13846c55ee1d
- SHA512 2dd6be23a5af8c458b94eeb5a4e83fc8cacb3fd2c2566b5682eee286c01726dca90db3d9b4e218eeded9b0c9bce8ba3c9ca9cc497e3a57aab580633a038e4b74
- SSDEEP 1572864:aj6L5PLk/mBCSyKOYl39GFoFEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvI:i6cSzV9GCFEujFMm+B997DaNHN1oS72X
- TLSH T11DD72253D002CA29E9990B7289D17A1B1A74BC1CBA2B971EF90CFF55F57330D3889369
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
514640
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
499KB
Virtual Size
498KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
57.4MB
Virtual Size
57.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
卍 ALL VIRUS 卍/Windows-KB2670838.msu.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f91f02fd27ada64f36f6df59a611fef106ff7734833dea825d0612e73bdfb621
- MD5 6e49c75f701aa059fa6ed5859650b910
- SHA1 ccb7898c509c3a1de96d2010d638f6a719f6f400
- SHA512 ccd1b581a29de52d2313a97eb3c3b32b223dba1e7a49c83f7774b374bc2d16b13fba9566de6762883f3b64ed8e80327b454e5d32392af2a032c22653fed0fff8
- SSDEEP 12288:5P/dTi0RF8dlFepPB0RF8dlFodTqPtoUBJMlANI/:5P/QBCpZB0iv8ld/
- TLSH T153F41292BB4896B6C9B291F11D15C0A522237C3EDE11429A38DCB71E6FF8143D63A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
537326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Visual Studio Projects\WindowsUpdate\WindowsUpdate\obj\Release\Windows-KB2670838.msu.pdb
mscoree
_CorExeMain
Name
.text
Size
517KB
Virtual Size
516KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
210KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/cd_popup.bat
- SHA256 76b562da4b3e6b20c8b23b261fce2632053e31cb41e3d92a85908825ce4049fc
- MD5 77452ad41c677bf6dd6997b680cbcb0a
- SHA1 35c45f17c47cb7552e5e5d30c65e48b90aa9c6b6
- SHA512 68f8a0552f468672d91ca189f4b5ae5ca3baa249221993cffa96d132aeb70ba6ea2c44b66b93dd7be90000ee70e7877c43958253af91d04dedac1ca7b9afc85a
- TLSH T10AD05B01487BD35DF5A23A6076819058D744D4F5A5132004FDBD827F27841759F3645F
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/corrupt_files.bat
- SHA256 f3857661d6be52864c31378aa3c998a225ed7d715ca0ed4873693056170b630b
- MD5 47f30d2751c128edbc0886f310691bee
- SHA1 2bc9cf4393dc4abc7ad6ef60f9936df992cea669
- SHA512 14663b9b10aed801c87cd9675e954c9df0fade27354750a49091a84510b12919b590fdd373d64d7490ed7d4b859e0526d7e79a8fa85a4f252219d558b183c114
- TLSH T1E0B00113D14932986E6DA730E86680C83CDF3383C180D8C409F9E1E75C40F831287426
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/crash_folder.bat
- SHA256 43464b61831f709ffa636d13eefd872fae2cadb7d2b78910f1a5233f07778b3b
- MD5 726854d1221357c956ddd70e3cfe00c6
- SHA1 340e7b064a2ffab442f20f1aa9a20c517ea4cb75
- SHA512 c2953eb5ca75b303fc023185fcc614fe98d8965529b246ca9a9ecec9e8fe58303c14f7c4e7daa436bcf04a559236083ba69c75035b247dd3478ecc479727c1f2
- TLSH T19BC008D7FCC804567D50DE1155517E70A5DCF57A50CA5C094E418119855B9E204E944D
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/crash_notepad.bat
- SHA256 cd0ee7300a99a2824fea628597e58f5b8f9b1043c02c34f99a128dae6054c901
- MD5 d3d6d35f2dd76b8ae11d3e4f1fde3e62
- SHA1 f26e92e34611e7e6f162fe1770a02cfe9eaa0e30
- SHA512 ed5f12173fdd2ef00fb3c1990b71ede4d6341ebea71e0ab6dfc68a154a2dabee617e68cc55b0ff1e8a6df2fb8bd16de827999d30ec1586f6f5688937503a04a4
- TLSH T194A0021D7E0000539EDC0D81C3533384F21C10BD207648030141FC500A4F0D30076D31
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/endless-notepads.bat
- SHA256 1a2cf04c6dabc9b0bb3acdd88d6c1ba060c473d7eb49435494cb221d0637cb05
- MD5 92302d44e85eba2a6bb2e956815d2dcb
- SHA1 dc30ee2236f3ab596c925dd1f5973dc15502d05e
- SHA512 2a1b9079c62636986c64e1ab3c1daa00aed5703529805d3ab4d211def6be37760613439cd452c4ee684f47bfc8db1471e03b2dba3c75915e899b12062cf54655
- TLSH T1D0A002FDD301E01558492765642088ABAC3D75662029D5510EFC399BDD4209A82B0C35
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/file_virus.bat
- SHA256 0f3cff8a7441b909171b51bd82e015dbcc39b7c361f5dd1194b43e860b4ba1e9
- MD5 a5f250b28c1c3c277bbe68a7759f4fca
- SHA1 cbb31f1db2d9563d4a2694ca11a970d632b31a21
- SHA512 f71127cf86f3a3ef8e9614af6e46e74acbd6dc51d9d2eff356e22caa6080ab008f1e516c0db6dec350fe9587eaa66dfbc9d23795bd2ab88da44336f5d766f277
- TLSH T180F023258C7EF801737F40514A1ACE4F270700231F8ECEA09519A29EC644281EF7FC41
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/format_c.bat
- SHA256 1aedef4185097aa0aed83a67610be9e4a65c1e74d8b80c5040c36c571004f795
- MD5 b00e2f2b04ef87936edf6fb6fa5b43e4
- SHA1 409ab4247d131f31bfc94df9e0bb772f724a24a3
- SHA512 9487f9e65c73a8a999ec08f84b890914f23335fa695532f70789387994de9f0c27016ed7a2eb7471f378c6865f66ba199c88d281f194f8c3f0cccc2b347eec5b
- MD5 SHA1 SHA512
卍 ALL VIRUS 卍/os_remover.bat
- SHA256 405fc066f7bf760e9e6f742be24c91142d8cecb423872a156811f43d7b11bebf
- MD5 5ba5b4470ddc4eb1197b58f529d213b1
- SHA1 83f9853ff24a8704c64f4377b7967b3862401b5c
- SHA512 1a11717677948666a493126b384ecb7d8835e258ca2f199d82aa8cf2a37e9a0ba315dab514ef17ec2e3962c36ac3d5462e7afdacaa02d35480d7923c38ec34fc
- MD5 SHA1 SHA512
卍 ALL VIRUS 卍/rickroll.exe
- IMPHASH bbc688f6bd59bb892f8a70a2538f3765
- SHA256 48b08ea78124ca010784d9f0faae751fc4a0c72c0e7149ded81fc03819f5d723
- MD5 0ec108e32c12ca7648254cf9718ad8d5
- SHA1 78e07f54eeb6af5191c744ebb8da83dad895eca1
- SHA512 1129e685f5dd0cb2fa22ef4fe5da3f1e2632e890333ce17d3d06d04a4097b4d9f4ca7d242611ffc9e26079900945cf04ab6565a1c322e88e161f1929d18a2072
- SSDEEP 1536:nnvNj+3NsAyLmap1XRQ5jeWxoN19ftAAUvMFMQiNTRMxIj3FR/82ASwn:nvo3YlDQJoN19ftAoiRWIj303n
- TLSH T1D7D31ACBBB94DD97DD15433845E68319173EF3904B864B132D20AA351E23BE0BFD668A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeConsole
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__C_specific_handler
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
shell32
ShellExecuteA
user32
GetAsyncKeyState
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
564B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
卍 ALL VIRUS 卍/salinewin.exe
- IMPHASH c9b441367974f8bcdb3c75cfd640f1a7
- SHA256 7163fefbf2f865ef78a2d3d4480532fffb979300d6f0a77b6f3fc5c4b0d2cada
- MD5 2b1e9226d7e1015552a21faca891ec41
- SHA1 f87fcbe10fa9312048214d4473498ad4f9f331ce
- SHA512 1852f6d05c9fca962178bc190bc8c90f0ca54ea99714480690f44417e49eee6c392579091ae8a6cd053ec47ad1980dbbbc0db3e0e00520ee1bdbadbf8dc9d69e
- SSDEEP 3072:HZVUJ58IAelkapH3shY6iEwgaBZP5pHQpYR95WPNpNMl3:nUJ5PzB5ZPPHQpY35WPNpGl3
- TLSH T10F547C10B5C0C4F1F87545366836CA910E6DFD399E601EAF3298736F0E751E2463BE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
13314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\ACER\source\repos\salinewin\Release\salinewin.pdb
kernel32
DecodePointer
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
GetProcessHeap
GetStringTypeW
GetFileType
ExitProcess
GetProcAddress
CreateThread
LoadLibraryW
CloseHandle
TerminateThread
Sleep
CreateFileW
WriteFile
FlushFileBuffers
SetStdHandle
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
RaiseException
user32
GetCursorPos
ReleaseDC
SetCursorPos
InvalidateRect
GetDesktopWindow
SendMessageTimeoutW
GetDC
MessageBoxW
EnumChildWindows
GetSystemMetrics
DrawIcon
LoadIconW
gdi32
SelectObject
CreateDIBSection
CreateCompatibleDC
PolyBezier
DeleteDC
CreatePen
Ellipse
DeleteObject
CreateSolidBrush
BitBlt
winmm
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=131, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24237,
count=29, id=261, version=24237,
count=18, id=260, version=24237,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=120, id=1, productName=Unmarked objects,
count=1, id=265, version=24245,
count=1, id=255, version=24245,
count=1, id=151,
count=1, id=258, version=24245,
卍 ALL VIRUS 卍/salinewin1.5-safety.exe
- IMPHASH 106168d1bd6a4669e663eb5e822d6613
- SHA256 bafd3d712a32b884001dccd7f6f77fd9aa515b254352310e20f67026364c7884
- MD5 e69d64dfc3d809dc8dbdda9c367b0afc
- SHA1 dc61951ccd463291bb2e2758fc8afebaa8ffadcc
- SHA512 d5e644ab734168d5f42028a6196aba091a60b8536e0101e15254ecc154f564b495f4d66d948399cd4de42f19423cb500a8f8b90d59652fb31e68f1375e28def5
- SSDEEP 3072:3WiJUpGuEy1AXy4e5II5CoTbLYiBZP5pHQpYR95WPNp/H:GBpduiPRZPPHQpY35WPNpf
- TLSH T127347D21B5C1C4F1F97945356836C9910E6AFC36AF501EAF3298332F0E751E2453AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
12842
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\PC\source\repos\salinewin-safety\Release\salinewin-safety.pdb
kernel32
GetConsoleCP
HeapReAlloc
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
CreateThread
CloseHandle
TerminateThread
FlushFileBuffers
Sleep
HeapSize
GetProcessHeap
GetStringTypeW
GetFileType
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
LCMapStringW
RaiseException
user32
GetSystemMetrics
GetCursorPos
ReleaseDC
SetCursorPos
InvalidateRect
LoadIconW
GetDC
DrawIcon
gdi32
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
PolyBezier
DeleteDC
CreatePen
Ellipse
DeleteObject
CreateSolidBrush
BitBlt
winmm
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite
msimg32
AlphaBlend
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
159KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=120, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24237,
count=29, id=261, version=24237,
count=17, id=260, version=24237,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=111, id=1, productName=Unmarked objects,
count=1, id=265, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
卍 ALL VIRUS 卍/salinewin1.5.exe
- IMPHASH 3fc652bbb2869637a8ab45305e4dc626
- SHA256 fbdaec9e16cb120887975def752432ff798834d521cfc87b24923bf6d3acfe4a
- MD5 7c4230a18208485741aa283707ce3a96
- SHA1 30d637688d60697379405272d6665bd8965d175f
- SHA512 81eebfa2f3ccffd8fe4714b6685760727c6c397ba27ea50b298777b8321a899dd94b49b0456e32072392249924fa1949daf5296be49d2c7827db1d36d6d56808
- SSDEEP 3072:qJ+qjy1h6nzfIIv2mGYndBO5CRNArWcMZuxo9AF3CrBZP5pHQpYR95WPNpHjcH:cDrIwBIrnCZPPHQpY35WPNpw
- TLSH T1F4547C11B5C1C4F1F97506366825CA910F6AFC359F905EAF3298332F0E751E2853AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
13527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\PC\source\repos\salinewin\Release\salinewin.pdb
kernel32
HeapReAlloc
HeapSize
FlushFileBuffers
GetStringTypeW
GetFileType
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
ExitProcess
GetProcAddress
CreateThread
CloseHandle
LoadLibraryW
TerminateThread
Sleep
CreateFileW
WriteFile
GetProcessHeap
GetCurrentProcess
LCMapStringW
CompareStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
RaiseException
user32
GetSystemMetrics
GetCursorPos
ReleaseDC
SetCursorPos
InvalidateRect
SendMessageTimeoutW
GetDC
GetDesktopWindow
EnumChildWindows
MessageBoxW
DrawIcon
ExitWindowsEx
LoadIconW
gdi32
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
PolyBezier
DeleteDC
CreatePen
Ellipse
DeleteObject
CreateSolidBrush
BitBlt
advapi32
AdjustTokenPrivileges
RegCloseKey
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
winmm
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite
msimg32
AlphaBlend
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=120, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24237,
count=29, id=261, version=24237,
count=17, id=260, version=24237,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=124, id=1, productName=Unmarked objects,
count=1, id=265, version=24247,
count=1, id=255, version=24247,
count=1, id=151,
count=1, id=258, version=24247,
卍 ALL VIRUS 卍/shutdown_t-0s.bat
- SHA256 e41b3863e2d8c4b4412aaafb5828244cb8812502e8d9a5badbdcfbcb76748f6a
- MD5 249f7b1be9b147daf09eae0aa6d76d6c
- SHA1 15f50f6f15dac674cc3fdd8931a33e424c766620
- SHA512 b912b50fc67c3e9dde61efd600ae7ed9a44ac8c85555383aa93711928a533bce014705f942afa6a11ed802a176fd67a2b5906e72bd6b8579863d6e8cb02b4310
- MD5 SHA1 SHA512
卍 ALL VIRUS 卍/shutdown_t-30s.bat
- SHA256 4c101e27919ee54466beabb5664eb8e99dde5c26ffa21b75bb8969dfaec11e19
- MD5 dc5881d2b4c546f78ba3df3b4a651eb1
- SHA1 36b522cf3cfe9bb193dce0e4ba9f70eddd5b7620
- SHA512 68870ab2478588028e3dc3a5fffee9a72f0c5870e182dbb938417a846dd6e9011541871180653c8a7371470e637e65f41892fbd9b7ba65cc3454b3715e9ca832
- TLSH T10FA024FD1030343004370410C3D71317100500311550C4371D7F501C3CC00017415051
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/toggle_caps.bat
- SHA256 ddf4aa4e48f6f4ba8f46bb42270a98a6ce437ac1c66056427740bad8297fd4e7
- MD5 5aa743bc2dc254a49c24a0a3eae8b125
- SHA1 177289c06a4bfb740761080edce943ba752e784f
- SHA512 4edbc156ce3af946607736cf0b2649a15e2b6cae660deea0c6db17cfd09a760d75265dc787f16791ac4317e91429f9d3817d3d95161f2a1932d8bee2aeec5b7c
- TLSH T1F1C09B040CCAC24F02EEF54447A54504D3468271671D883C5BD2DC4572566500E26276
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/un_notepad.bat
- SHA256 138ff14346e69b1a4d129befbe0ec9f515e8f62fdf8f063e1e3769fdd7703766
- MD5 8802c6e0d75347b53f8ca83a76af1e61
- SHA1 8090e41d6e61f63a4cb7cf746643059cc5283153
- SHA512 ad74f611afcd193a86b6233d719fd7c60e87df7dae261898b7681f37db65f770b6077062b19adde7106869b599653c4437be08d98e241e8469fdcc5e142bb84d
- TLSH T1C1313B0CDCCADC7D75ABE1F14ABBC8ACD7062D35B6168C2C8359DA0C326A5890E25526
- MD5 SHA1 SHA512 TLSH
卍 ALL VIRUS 卍/virus.exe
- IMPHASH e3e80a143805ea18936c8f612e25d363
- SHA256 68a3adb1c4f8d1b9849f56e05403f51d2fc1ec813e83b82099cc35c8104d5c0a
- MD5 c1e188e3bd87d5625d5e1639bff76f22
- SHA1 b4c327889b57562e1c609f3c5fc1c1451e8cb8ab
- SHA512 b31c51e8df25a1b38b1f60e787b5ce12535972663c941651f5f3eceeed1a5eb6cfa722453a6c2d2d0f29717bcada8911d0906a4f4608037c1e3426d23aa11ea9
- SSDEEP 786432:WbS4ce2s7XARphqrhsqP6bxW2m310MrbjSvsr3Shw:t4f/sPhqrfP6mF0i3Shw
- TLSH T1EC573315BA9510FFE4FBD23DAC9EC45263F375465396C2AF17180BA41EA72D02E38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
59248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetSystemMetrics
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
GetCurrentDirectoryW
HeapAlloc
GetFileSizeEx
GetConsoleOutputCP
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
CloseHandle
GetCurrentProcess
GetModuleFileNameW
SetDllDirectoryW
GetEnvironmentStringsW
SetErrorMode
GetCurrentProcessId
OpenProcess
QueryFullProcessImageNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
SetFilePointerEx
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
CreateSymbolicLinkW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
RtlUnwindEx
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetConsoleMode
ReadConsoleW
advapi32
GetTokenInformation
OpenProcessToken
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
200KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=189, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35721,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=33145,
count=163, id=1, productName=Unmarked objects,
count=30, id=260, version=36246,
count=1, id=258, version=36246,
卍 ALL VIRUS 卍/سكآرس آلعنزي.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cd3b9b8ba146a4c9a0e5abae810dc517ae3f69043aa237c0b4488beebdab8152
- MD5 fb15e435535413ef087d411957bf23ef
- SHA1 1037ea8b4a83a247f3461e4ad5a5283f954fb55e
- SHA512 e2f03fe8c10c75440920385fb6d3935015c23b5d7639f8ae9ae4be9a39411f08299492f00c221699c8a348325867c3026a1b15e7d55efb6abdab55b31bcafbe1
- SSDEEP 768:0OXvykFnCQSGr6MTkM6MuHMchbKh2Mv0MWMsMgJNyMq8MZsMUM3QlMwMEMuMwM7Z:vXKf+tQnhbK2aVe15Ap+4
- TLSH T17A03E806A364A604E50DBA7F49423E7473B4C2776D33EBDB08E691F32C71A6C8905B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
卍 ALL VIRUS 卍/ᏕᏨᎯᏒᏕ-LJ.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 73458c1fe9376742e119fc716b89cbb22f5a2935f32534433415ab7b676fb38d
- MD5 2a1b14ed6998c20a305fcab50d062553
- SHA1 c9e98d155ec4b95954aad604b4ecd4b335fe4e36
- SHA512 b35113b4b83f40fee2f38145480b1fc5a305ed6ecd986a67d002953b5e0c6441e36b5f6d14bcbb8f1780752ff3651df558ca5b377e04a2c6e913f54155d7f77b
- SSDEEP 768:f7Vng1VsKgd7wokgQJH9q2qpHm/xjmjbqCBcXJtYcFwVc6K:f7IVs3dwokgI02s+MbzB0JwVcl
- TLSH T14E131999B7F4504DE929C6F08F8A3D0ACE332196125182D727DECDB60F5BFC29626097
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ