| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date | 2076-Mar-16 00:59:00 |
| Debug artifacts |
/_/buddy/obj/ReleaseShip/bugtopia.pdb
|
| Comments | |
| CompanyName | |
| FileDescription | bugtopia |
| FileVersion | 2.5.6.0 |
| InternalName | bugtopia.dll |
| LegalCopyright | Copyright © 2026 |
| LegalTrademarks | |
| OriginalFilename | bugtopia.dll |
| ProductName | Bugtopia |
| ProductVersion | 2.5.6+c4b5320 |
| Assembly Version | 2.5.6.0 |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE is possibly packed. | The PE only has 0 import(s). |
| Malicious | VirusTotal score: 7/70 (Scanned on 2026-08-12 10:41:13) |
Cynet:
Malicious (score: 100)
DeepInstinct: MALICIOUS ESET-NOD32: MSIL/GameHack.CKK potentially unsafe application Google: Detected Sophos: Generic Reputation PUA (PUA) TrellixENS: Artemis!45C8283A0DF5 Varist: W64/ABApplication.GJUL-3029 |
| MD5 | 45c8283a0df549aad0737cf772ef7db1 🔍 |
|---|---|
| SHA1 | 1a90a8a75fcd6cde0df6d063255d6a93a2e41c8b 🔍 |
| SHA256 | 6dac9cda36d65e76a3125e3f19c5885ab9ec7a6c0b6a5a77c7fe37e0af5edd4f 🔍 |
| SHA3 | 132f1f108569368d57e96676cdc0de367f4bbee1729098d2d9c659f47139c215 🔍 |
| SSDeep | 49152:CJIMJZbKRIxWOKYdAInylgUELJQ6U4Mqr2qLry+H2xDCQkAcnGxffE:CJIMJZbrWO1o 🔍 |
| Imports Hash | d41d8cd98f00b204e9800998ecf8427e 🔍 |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 2 |
| TimeDateStamp | 2076-Mar-16 00:59:00 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 48.0 |
| SizeOfCode | 0x356600 |
| SizeOfInitializedData | 0x400 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000000000 (Section: ?) |
| BaseOfCode | 0x2000 |
| ImageBase | 0x180000000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x35c000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x400000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x2000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| MD5 | feffbdc2c415ad2d7bc7932f03d24320 🔍 |
|---|---|
| SHA1 | 003863c07f057a61867856c7de05552d3ba32374 🔍 |
| SHA256 | 09fef2f80ff39bf9bee387c331e72e446d5118a86585498e7d22328b88010bf2 🔍 |
| SHA3 | 62f72c22d7717d897cc25c111cf4be8b096e40869225ee2371c5d8338850e648 🔍 |
| VirtualSize | 0x3565c8 |
| VirtualAddress | 0x2000 |
| SizeOfRawData | 0x356600 |
| PointerToRawData | 0x200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.77555 |
| MD5 | f3aa3b3e3e01990a79850b8364fdf06e 🔍 |
|---|---|
| SHA1 | 67939dd8c405e1d6783886fbdd02113504c1e1b1 🔍 |
| SHA256 | 103ad3d1d770e2c10ba15c9760a5986db81b1947af80cbed3868bc9a9bd5ba38 🔍 |
| SHA3 | dcd9636f9c1d30a0f00e1761de4f949d764ad9e0ec0af7a2eae885635bc9ee8f 🔍 |
| VirtualSize | 0x384 |
| VirtualAddress | 0x35a000 |
| SizeOfRawData | 0x400 |
| PointerToRawData | 0x356800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 2.91141 |
| Type |
RT_VERSION
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x328 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.35197 |
| MD5 | 9f7e5ff894cac94e4c221c59c0d5d722 🔍 |
| SHA1 | 2e23df6e3d9cdf8322061a9a0d73447c3febf85c 🔍 |
| SHA256 | d28c1abfc7920f9ded311167f7fc3e647748b0b23957a5ebe751041ff2de3b31 🔍 |
| SHA3 | 092d80c31de6aa00e918d489b2f5e9c2abf19b0beb0a18fd405454e3b741f191 🔍 |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.5.6.0 |
| ProductVersion | 2.5.6.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_DLL
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | |
| FileDescription | bugtopia |
| FileVersion (#2) | 2.5.6.0 |
| InternalName | bugtopia.dll |
| LegalCopyright | Copyright © 2026 |
| LegalTrademarks | |
| OriginalFilename | bugtopia.dll |
| ProductName | Bugtopia |
| ProductVersion (#2) | 2.5.6+c4b5320 |
| Assembly Version | 2.5.6.0 |
| Resource LangID | UNKNOWN |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2041-Aug-17 12:01:01 |
| Version | 256.20557 |
| SizeofData | 62 |
| AddressOfRawData | 0x35813c |
| PointerToRawData | 0x35633c |
| Referenced File | /_/buddy/obj/ReleaseShip/bugtopia.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 1.0 |
| SizeofData | 39 |
| AddressOfRawData | 0x35817a |
| PointerToRawData | 0x35637a |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
No comments yet.