37a95bb77001e30a94bd24dcf36b2bb09db6d3e86882a744dc3d3297aac45fda

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2094-Nov-11 17:39:10
Debug artifacts Z:\Seralyth\Visual Studio Projects\Seralyth-Menu\obj\Release\netstandard2.1\Seralyth Menu.pdb
Comments Community powered mod menu for Gorilla Tag. [Debug]
CompanyName Seralyth Software
FileDescription Seralyth Menu
FileVersion 5.0.2.0
InternalName Seralyth Menu.dll
LegalCopyright
OriginalFilename Seralyth Menu.dll
ProductName Seralyth Menu
ProductVersion 5.0.2
Assembly Version 5.0.2.0

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Miscellaneous malware strings:
  • Exploit
 Contains domain names:
  • cdn.discordapp.com
  • discordapp.com
  • github.com
  • githubusercontent.com
  • googleapis.com
  • https://discord.gg
  • https://fsf.org
  • https://github.com
  • https://guns.lol
  • https://lazypy.ro
  • https://menu.seralyth.software
  • https://menu.seralyth.software/
  • https://menu.seralyth.software/ai
  • https://menu.seralyth.software/banned_urls
  • https://menu.seralyth.software/getfriends
  • https://menu.seralyth.software/reportban
  • https://menu.seralyth.software/reportdata
  • https://menu.seralyth.software/serverdata
  • https://menu.seralyth.software/syncdata
  • https://menu.seralyth.software/telemetry
  • https://menu.seralyth.software/tts
  • https://menu.seralyth.software/usercount
  • https://menu.seralyth.software/vote
  • https://patreon.com
  • https://raw.githubusercontent.com
  • https://raw.githubusercontent.com/Seralyth/Console/refs/heads/master/ServerData
  • https://raw.githubusercontent.com/Seralyth/Console/refs/heads/master/ServerData/
  • https://raw.githubusercontent.com/Seralyth/Console/refs/heads/master/ServerData/PreloadedAssets.txt
  • https://raw.githubusercontent.com/Seralyth/Console/refs/heads/master/ServerData/crown.png
  • https://raw.githubusercontent.com/Seralyth/Console/refs/heads/master/ServerData/icon.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Friends/alert.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Friends/dooropen.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Friends/doorslam.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Friends/online.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Friends/receive.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Friends/send.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Guns/grip-press.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Guns/grip-release.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Guns/trigger-hold.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Guns/trigger-press.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Guns/trigger-release.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/Notifications/win7-exc.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/achievement.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/admin.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/close.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/confirm.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/console.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/danger.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/explosion.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/patreon.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Menu/select.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/AngryBirds/drawing.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/AngryBirds/launch.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/Soundboard/SoundLibrary.txt
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/Soundboard/Sounds/
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/TagSounds/
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/jumpscare.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/sex.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/shotgun.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Fun/shutdown.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portal_close.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portal_enter1.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portal_exit1.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portal_invalid.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portalgun_blue.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portalgun_fizzle.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Movement/PortalGun/portalgun_powerup.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Overpowered/Timestop/end.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Overpowered/Timestop/start.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/Mods/Safety/steam.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Audio/TTS/yes_sweetheart.ogg
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Fonts/LiberationSans.ttf
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/CustomBackground.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/CustomWatermark.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Fun/jumpscare.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Important/pause.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Movement/pearl.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/footstep.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/grip.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/meta.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/oculus.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/pc.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/speak.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/steam.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/unknown.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Mods/Visuals/warning.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Themes/cannabis.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Themes/mlm.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Themes/pride.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Images/Themes/trans.png
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Plugins/PluginLibrary.txt
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Videos/Themes/badapple.mp4
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Videos/Tutorial/tutorial-
  • https://raw.githubusercontent.com/Seralyth/Seralyth-Menu/master/Resources/Server/Videos/vstump-video.mp4
  • https://seralyth.software
  • https://translate.googleapis.com
  • https://translate.googleapis.com/translate_a/single?client
  • https://www.gnu.org
  • https://www.gnu.org/licenses/
  • https://www.gnu.org/licenses/gpl-3.0.html
  • https://www.gnu.org/licenses/why-not-lgpl.html
  • patreon.com
  • raw.githubusercontent.com
  • translate.googleapis.com
  • www.gnu.org
Suspicious The PE is possibly packed. The PE only has 1 import(s).
Malicious VirusTotal score: 37/71 (Scanned on 2026-09-05 23:21:43) ALYac: Gen:Variant.Application.Zusy.319383
AVG: FileRepMalware [Misc]
AhnLab-V3: Malware/Win.Generic.C5928457
Antiy-AVL: RiskWare/MSIL.Gamehack
Arcabit: Trojan.Application.Zusy.D4DF97
Avast: FileRepMalware [Misc]
BitDefender: Gen:Variant.Application.Zusy.319383
CTX: dll.trojan.zusy
Cylance: Unsafe
DeepInstinct: MALICIOUS
ESET-NOD32: MSIL/GameHack_AGen.ES potentially unsafe application
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Application.Zusy.319383 (B)
GData: Gen:Variant.Application.Zusy.319383
Google: Detected
Gridinsoft: Trojan.Win32.Wacatac.cl
K7AntiVirus: Unwanted-Program ( 005cfaa91 )
K7GW: Unwanted-Program ( 005cfaa91 )
Kingsoft: Win32.Troj.kepavll.v
Lionic: Trojan.Win32.GameHack.4!c
Malwarebytes: RiskWare.GameHack
MaxSecure: Trojan.Malware.345032243.susgen
McAfeeD: Trojan:Win/Generic.GVZB
MicroWorld-eScan: Gen:Variant.Application.Zusy.319383
Microsoft: Trojan:Win32/Kepavll!rfn
Paloalto: generic.ml
Panda: Trj/GdSda.A
SentinelOne: Static AI - Suspicious PE
Sophos: Generic Reputation PUA (PUA)
Symantec: Trojan.Zusy!ATN
TrellixENS: Artemis!BEC07388D45B
TrendMicro: Trojan.Win32.KEPAVLL.USBLHQ26
TrendMicro-HouseCall: Trojan.Win32.KEPAVLL.USBLHQ26
VIPRE: Gen:Variant.Application.Zusy.319383
Varist: W32/ABApplication.HQYI-0925
ViRobot: Trojan.Win.Z.Zusy.4185600
Webroot: Win.Trojan.Gen

Hashes

MD5 bec07388d45b593968552446c81c223e 🔍
SHA1 1904079a67091a2b808be6f00dba607bd362beab 🔍
SHA256 37a95bb77001e30a94bd24dcf36b2bb09db6d3e86882a744dc3d3297aac45fda 🔍
SHA3 ad8696c134a40a76b80c0f684b08c20a0c1c3ec37c67244840e853878a9459a7 🔍
SSDeep 98304:4AQaZAJ8dScdFG6kBz/r16B0wSPIRJ0oifDe:+aZjscbGPBzz1A0pIHTi 🔍
Imports Hash dae02f32a21e03ce65412f6e56942daa 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2094-Nov-11 17:39:10
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x3fd600
SizeOfInitializedData 0x600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x003FF136 (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x400000
ImageBase 0x10000000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x404000
SizeOfHeaders 0x200
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 48226cfde3dabc63e1781ef465a7877d 🔍
SHA1 3aecaa9fcfebab720088843125c33634ce86bd37 🔍
SHA256 263b9f99f443cd11968db11e5ab2c265734ee381e9bb476b3034d283b8719f89 🔍
SHA3 ebed4fdc5456f233dad186cac47a8dbedef547ce69a8f2d0d29e4f1e6b70caad 🔍
VirtualSize 0x3fd490
VirtualAddress 0x2000
SizeOfRawData 0x3fd600
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.246

.rsrc

MD5 4a4b34d47fde0d128d8b5db40d6dde9b 🔍
SHA1 70754a691b41730d37c1dc6201003f9c3d779e06 🔍
SHA256 7783b78402bb13d4c9cedde693d09f739717e1f13a642d7570e381b1046fd7aa 🔍
SHA3 62ccd541023cb42f4bbf4267a418af2ab326f543bec248f49da1524e7262c964 🔍
VirtualSize 0x3cc
VirtualAddress 0x400000
SizeOfRawData 0x400
PointerToRawData 0x3fd800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.11369

.reloc

MD5 0c0b317f36179d48dbf4096d71195bc2 🔍
SHA1 bea58eedc222d5ead14abc402497480119952717 🔍
SHA256 1b1d6d00b0b6671c9f8a54b89a729c756e90c08cd576ff5d33086881ce21e2f8 🔍
SHA3 4047c32f1522cd4bc7cf48a31d92324367de3de9be234c47b77fa9d730c54122 🔍
VirtualSize 0xc
VirtualAddress 0x402000
SizeOfRawData 0x200
PointerToRawData 0x3fdc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorDllMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x370
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36953
MD5 2ce24cf0c930b29034185481c2080d59 🔍
SHA1 ab3ec371b3cba26a16c825afbc28fbf78f403f76 🔍
SHA256 95116bcf84583989ad8d09111ddf1a658cdb3a215bc866e304c7f825b1b6bf83 🔍
SHA3 52bf499947d4d2db0e1385c8eead5893bb8ad2f747e65bcd74b56d8f1f9cf7cf 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 5.0.2.0
ProductVersion 5.0.2.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language UNKNOWN
Comments Community powered mod menu for Gorilla Tag. [Debug]
CompanyName Seralyth Software
FileDescription Seralyth Menu
FileVersion (#2) 5.0.2.0
InternalName Seralyth Menu.dll
LegalCopyright
OriginalFilename Seralyth Menu.dll
ProductName Seralyth Menu
ProductVersion (#2) 5.0.2
Assembly Version 5.0.2.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2088-Jan-04 01:05:00
Version 256.20557
SizeofData 118
AddressOfRawData 0x3ff044
PointerToRawData 0x3fd244
Referenced File Z:\Seralyth\Visual Studio Projects\Seralyth-Menu\obj\Release\netstandard2.1\Seralyth Menu.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0x3ff0ba
PointerToRawData 0x3fd2ba

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.