mailify_modded_checker[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

mailify_modded_checker.rar
Size

5.0MB
MD5

63536d9bc0fe65b6c0d3dfe068db2d0f
SHA1

23d90091a5c2a2b76d4b97e831f5bc1fa687f9fc
SHA256

a72f1e5ac03d76cc8fef162df3f24fedc43e20379e66a9c8ccadb4e2232bd35f
SHA512

449a356f8da8aa2191b9a8398d577d35756a2bb6666fcbaf248214c5a851453b406465bd88c19fe3c73b6052a1d3a3e11a75596c5dbac3dbbe8dd6543438e237
SSDEEP

98304:Sgo9j75V/v+p2PUUOZCKU1mV6/dkuF542KzyhoHUGuGTKl/RwCAPdOyd8Yb:Sgo9BpWpkUUOZXVV6/dM2Ugo0Rg4/R2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mailify modded checker/Colorful.Console.dll
unpack001/mailify modded checker/Discord.Net.Commands.dll
unpack001/mailify modded checker/Discord.Net.Core.dll
unpack001/mailify modded checker/Discord.Net.Rest.dll
unpack001/mailify modded checker/Discord.Net.WebSocket.dll
unpack001/mailify modded checker/Discord.Net.Webhook.dll
unpack001/mailify modded checker/Leaf.xNet.dll
unpack001/mailify modded checker/Mailify.exe
unpack001/mailify modded checker/ProtonPlugin.dll
unpack001/mailify modded checker/RuriLib.dll

Files

mailify_modded_checker.rar
.rar
mailify modded checker/BouncyCastle.Crypto.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/03/2020, 00:00

Not After

23/03/2023, 12:00

Subject

SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:6b:76:b4:ee:b0:71:87:dc:39:0b:07:98:54:70:dc:0d:20:6e:72:67:82:94:3b:2b:be:e5:e7:06:f7:d3:e3
Signer

Actual PE Digest

f4:6b:76:b4:ee:b0:71:87:dc:39:0b:07:98:54:70:dc:0d:20:6e:72:67:82:94:3b:2b:be:e5:e7:06:f7:d3:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/BouncyCastle.Crypto.xml
.xml
mailify modded checker/Colorful.Console.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Discord.Net.Commands.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Discord.Net.Commands.xml
.xml
mailify modded checker/Discord.Net.Core.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Discord.Net.Core.xml
.xml
mailify modded checker/Discord.Net.Rest.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Discord.Net.Rest.xml
.xml
mailify modded checker/Discord.Net.WebSocket.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 391KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Discord.Net.WebSocket.xml
.xml .js
mailify modded checker/Discord.Net.Webhook.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Discord.Net.Webhook.xml
.xml
mailify modded checker/Files/Keywords.txt
mailify modded checker/Files/Proton/x64/GoSrp.dll
.dll windows x64

d88af4bf326be9fcdf143f9632c47e4f

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:7a:f2:d6:bf:08:58:a2:51:c9:11:6b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

22/11/2017, 13:28

Not After

22/11/2020, 13:28

Subject

CN=ProtonVPN AG,O=ProtonVPN AG,L=Plan-les-Ouates,ST=Geneva,C=CH,1.2.840.113549.1.9.1=#0c1261646d696e4070726f746f6e76706e2e6368

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:b3:c2:7e:b5:e7:0a:d2:7e:65:e7:cf:94:c9:9e:08:ba:c2:ec:04:51:db:e3:79:fa:7d:b1:3f:fe:b9:c8:e5
Signer

Actual PE Digest

1f:b3:c2:7e:b5:e7:0a:d2:7e:65:e7:cf:94:c9:9e:08:ba:c2:ec:04:51:db:e3:79:fa:7d:b1:3f:fe:b9:c8:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatus
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile

msvcrt

__dllonexit
__iob_func
_amsg_exit
_beginthread
_errno
_initterm
_lock
_onexit
_unlock
abort
calloc
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Exports

Exports

GenerateProofs
GenerateVerifier
GetModulusKey
SetTest
_cgo_get_context_function
_cgo_init
_cgo_is_runtime_initialized
_cgo_maybe_run_preinit
_cgo_notify_runtime_init_done
_cgo_panic
_cgo_preinit_init
_cgo_release_context
_cgo_sys_thread_create
_cgo_sys_thread_start
_cgo_thread_start
_cgo_topofstack
_cgo_wait_runtime_init_done
_cgo_yield
_cgoexp_0ef23779577f_GenerateProofs
_cgoexp_0ef23779577f_GenerateVerifier
_cgoexp_0ef23779577f_GetModulusKey
_cgoexp_0ef23779577f_SetTest
_rt0_amd64_windows_lib
_rt0_amd64_windows_lib.ptr
_rt0_amd64_windows_lib_go
bufio.(*Reader).Peek
bufio.(*Reader).Read
bufio.(*Reader).ReadByte
bufio.(*Reader).ReadLine
bufio.(*Reader).ReadSlice
bufio.(*Reader).Size
bufio.(*Reader).UnreadByte
bufio.(*Reader).WriteTo
bufio.(*Reader).fill
bufio.(*Reader).writeBuf
bufio..inittask
bufio..stmp_0
bufio..stmp_1
bufio.ErrAdvanceTooFar
bufio.ErrBufferFull
bufio.ErrFinalToken
bufio.ErrInvalidUnreadByte
bufio.ErrInvalidUnreadRune
bufio.ErrNegativeAdvance
bufio.ErrNegativeCount
bufio.ErrTooLong
bufio.errNegativeRead
bufio.errNegativeWrite
bufio.init
bytes.(*Buffer).Bytes
bytes.(*Buffer).Len
bytes.(*Buffer).Read
bytes.(*Buffer).ReadByte
bytes.(*Buffer).ReadFrom
bytes.(*Buffer).Reset
bytes.(*Buffer).String
bytes.(*Buffer).UnreadByte
bytes.(*Buffer).Write
bytes.(*Buffer).WriteByte
bytes.(*Buffer).WriteString
bytes.(*Buffer).WriteTo
bytes.(*Buffer).grow
bytes.(*Reader).Len
bytes.(*Reader).Read
bytes.(*Reader).ReadByte
bytes.(*Reader).UnreadByte
bytes.(*Reader).WriteTo
bytes..inittask
bytes..stmp_2
bytes..stmp_5
bytes.ErrTooLarge
bytes.Index
bytes.Join
bytes.TrimFunc
bytes.TrimRight
bytes.TrimRightFunc
bytes.TrimSpace
bytes.asciiSpace
bytes.errNegativeRead
bytes.errUnreadByte
bytes.hashStr
bytes.indexFunc
bytes.indexRabinKarp
bytes.init
bytes.lastIndexFunc
bytes.makeASCIISet
bytes.makeCutsetFunc
bytes.makeCutsetFunc.func1
bytes.makeCutsetFunc.func2
bytes.makeCutsetFunc.func3
bytes.makeSlice
bytes.makeSlice.func1
compress/bzip2.(*StructuralError).Error
compress/bzip2.(*bitReader).ReadBits64
compress/bzip2.(*huffmanTree).Decode
compress/bzip2.(*reader).Read
compress/bzip2.(*reader).read
compress/bzip2.(*reader).readBlock
compress/bzip2.(*reader).readBlock.stkobj
compress/bzip2.(*reader).readFromBlock
compress/bzip2.(*reader).setup
compress/bzip2..inittask
compress/bzip2..stmp_0
compress/bzip2..stmp_1
compress/bzip2..stmp_10
compress/bzip2..stmp_11
compress/bzip2..stmp_12
compress/bzip2..stmp_13
compress/bzip2..stmp_14
compress/bzip2..stmp_15
compress/bzip2..stmp_16
compress/bzip2..stmp_17
compress/bzip2..stmp_18
compress/bzip2..stmp_19
compress/bzip2..stmp_2
compress/bzip2..stmp_20
compress/bzip2..stmp_21
compress/bzip2..stmp_22
compress/bzip2..stmp_23
compress/bzip2..stmp_25
compress/bzip2..stmp_3
compress/bzip2..stmp_4
compress/bzip2..stmp_5
compress/bzip2..stmp_6
compress/bzip2..stmp_7
compress/bzip2..stmp_8
compress/bzip2..stmp_9
compress/bzip2.NewReader
compress/bzip2.StructuralError.Error
compress/bzip2.buildHuffmanNode
compress/bzip2.crctab
compress/bzip2.init.0
compress/bzip2.inverseBWT
compress/bzip2.newHuffmanTree
compress/bzip2.newHuffmanTree.func1
compress/bzip2.newHuffmanTree.func2
compress/bzip2.newHuffmanTree.stkobj
compress/bzip2.newMTFDecoderWithRange
compress/bzip2.updateCRC
compress/flate.(*CorruptInputError).Error
compress/flate.(*InternalError).Error
compress/flate.(*byFreq).Len
compress/flate.(*byFreq).Less
compress/flate.(*byFreq).Swap
compress/flate.(*byLiteral).Len
compress/flate.(*byLiteral).Less
compress/flate.(*byLiteral).Swap
compress/flate.(*decompressor).Close
compress/flate.(*decompressor).Read
compress/flate.(*decompressor).Reset
compress/flate.(*decompressor).copyData
compress/flate.(*decompressor).dataBlock
compress/flate.(*decompressor).huffSym
compress/flate.(*decompressor).huffmanBlock
compress/flate.(*decompressor).moreBits
compress/flate.(*decompressor).nextBlock
compress/flate.(*decompressor).readHuffman
compress/flate.(*dictDecoder).writeCopy
compress/flate.(*huffmanDecoder).init
compress/flate.(*huffmanEncoder).assignEncodingAndSize
compress/flate.(*huffmanEncoder).bitCounts
compress/flate.(*huffmanEncoder).generate
compress/flate..inittask
compress/flate..stmp_4
compress/flate..stmp_5
compress/flate..stmp_6
compress/flate..stmp_7
compress/flate.CorruptInputError.Error
compress/flate.InternalError.Error
compress/flate.NewReader
compress/flate.NewReaderDict
compress/flate.byFreq.Len
compress/flate.byFreq.Less
compress/flate.byFreq.Swap
compress/flate.byLiteral.Len
compress/flate.byLiteral.Less
compress/flate.byLiteral.Swap
compress/flate.codeOrder
compress/flate.fixedHuffmanDecoder
compress/flate.fixedHuffmanDecoderInit
compress/flate.fixedHuffmanDecoderInit.func1
compress/flate.fixedLiteralEncoding
compress/flate.fixedOffsetEncoding
compress/flate.fixedOnce
compress/flate.generateFixedLiteralEncoding
compress/flate.generateFixedOffsetEncoding
compress/flate.huffOffset
compress/flate.init
compress/flate.init.0
compress/zlib.(*reader).Close
compress/zlib.(*reader).Read
compress/zlib.(*reader).Reset
compress/zlib..inittask
compress/zlib.ErrChecksum
compress/zlib.ErrDictionary
compress/zlib.ErrHeader
compress/zlib.NewReaderDict
compress/zlib.init
context.(*emptyCtx).String
context..inittask
context.Canceled
context.background
context.closedchan
context.init
context.init.0
context.todo
crosscall2
crosscall_amd64
crypto.(*Hash).Available
crypto.(*Hash).HashFunc
crypto.(*Hash).New
crypto.(*Hash).Size
crypto..inittask
crypto..stmp_0
crypto..stmp_2
crypto..stmp_3
crypto.Hash.Available
crypto.Hash.HashFunc
crypto.Hash.New
crypto.Hash.Size
crypto.digestSizes
crypto.hashes
crypto.init
crypto/aes.(*KeySizeError).Error
crypto/aes.(*aesCipher).BlockSize
crypto/aes.(*aesCipher).Decrypt
crypto/aes.(*aesCipher).Encrypt
crypto/aes.(*aesCipherAsm).BlockSize
crypto/aes.(*aesCipherAsm).Decrypt
crypto/aes.(*aesCipherAsm).Encrypt
crypto/aes.(*aesCipherGCM).BlockSize
crypto/aes.(*aesCipherGCM).Decrypt
crypto/aes.(*aesCipherGCM).Encrypt
crypto/aes..inittask
crypto/aes..stmp_10
crypto/aes..stmp_11
crypto/aes..stmp_12
crypto/aes..stmp_13
crypto/aes..stmp_14
crypto/aes..stmp_15
crypto/aes..stmp_16
crypto/aes..stmp_17
crypto/aes..stmp_6
crypto/aes..stmp_7
crypto/aes..stmp_8
crypto/aes..stmp_9
crypto/aes.KeySizeError.Error
crypto/aes.NewCipher
crypto/aes.decryptBlockAsm
crypto/aes.decryptBlockGo
crypto/aes.encryptBlockAsm
crypto/aes.encryptBlockGo
crypto/aes.errOpen
crypto/aes.expandKeyAsm
crypto/aes.expandKeyGo
crypto/aes.init
crypto/aes.newCipher
crypto/aes.newCipherGeneric
crypto/aes.powx
crypto/aes.sbox0
crypto/aes.sbox1
crypto/aes.supportsAES
crypto/aes.supportsGFMUL
crypto/aes.td0
crypto/aes.td1
crypto/aes.td2
crypto/aes.td3
crypto/aes.te0
crypto/aes.te1
crypto/aes.te2
crypto/aes.te3
crypto/cipher..inittask
crypto/cipher.errOpen
crypto/cipher.init
crypto/des.(*KeySizeError).Error
crypto/des.(*desCipher).BlockSize
crypto/des.(*desCipher).Decrypt
crypto/des.(*desCipher).Encrypt
crypto/des.(*desCipher).generateSubkeys
crypto/des.(*tripleDESCipher).BlockSize
crypto/des.(*tripleDESCipher).Decrypt
crypto/des.(*tripleDESCipher).Encrypt
crypto/des..inittask
crypto/des..stmp_0
crypto/des..stmp_1
crypto/des..stmp_10
crypto/des..stmp_11
crypto/des..stmp_2
crypto/des..stmp_3
crypto/des..stmp_4
crypto/des..stmp_5
crypto/des..stmp_6
crypto/des..stmp_7
crypto/des..stmp_8
crypto/des..stmp_9
crypto/des.KeySizeError.Error
crypto/des.NewTripleDESCipher
crypto/des.cryptBlock
crypto/des.feistel
crypto/des.feistelBox
crypto/des.feistelBoxOnce
crypto/des.initFeistelBox
crypto/des.ksRotate
crypto/des.ksRotations
crypto/des.permutationFunction
crypto/des.permuteBlock
crypto/des.permuteFinalBlock
crypto/des.permuteInitialBlock
crypto/des.permutedChoice1
crypto/des.permutedChoice2
crypto/des.sBoxes
crypto/dsa..inittask
crypto/dsa.ErrInvalidPublicKey
crypto/dsa.Verify
crypto/dsa.Verify.stkobj
crypto/dsa.init
crypto/ecdsa.(*PrivateKey).Add
crypto/ecdsa.(*PrivateKey).Double
crypto/ecdsa.(*PrivateKey).IsOnCurve
crypto/ecdsa.(*PrivateKey).Params
crypto/ecdsa.(*PrivateKey).ScalarBaseMult
crypto/ecdsa.(*PrivateKey).ScalarMult
crypto/ecdsa.(*PublicKey).Add
crypto/ecdsa.(*PublicKey).Double
crypto/ecdsa.(*PublicKey).IsOnCurve
crypto/ecdsa.(*PublicKey).Params
crypto/ecdsa.(*PublicKey).ScalarBaseMult
crypto/ecdsa.(*PublicKey).ScalarMult
crypto/ecdsa..inittask
crypto/ecdsa.PrivateKey.Add
crypto/ecdsa.PrivateKey.Double
crypto/ecdsa.PrivateKey.IsOnCurve
crypto/ecdsa.PrivateKey.Params
crypto/ecdsa.PrivateKey.ScalarBaseMult
crypto/ecdsa.PrivateKey.ScalarMult
crypto/ecdsa.PublicKey.Add
crypto/ecdsa.PublicKey.Double
crypto/ecdsa.PublicKey.IsOnCurve
crypto/ecdsa.PublicKey.Params
crypto/ecdsa.PublicKey.ScalarBaseMult
crypto/ecdsa.PublicKey.ScalarMult
crypto/ecdsa.Verify
crypto/ecdsa.Verify.stkobj
crypto/ecdsa.errZeroParam
crypto/ecdsa.hashToInt
crypto/ecdsa.init
crypto/ecdsa.one
crypto/elliptic.(*CurveParams).Add
crypto/elliptic.(*CurveParams).Double
crypto/elliptic.(*CurveParams).IsOnCurve
crypto/elliptic.(*CurveParams).IsOnCurve.stkobj
crypto/elliptic.(*CurveParams).Params
crypto/elliptic.(*CurveParams).ScalarBaseMult
crypto/elliptic.(*CurveParams).ScalarMult
crypto/elliptic.(*CurveParams).ScalarMult.stkobj
crypto/elliptic.(*CurveParams).addJacobian
crypto/elliptic.(*CurveParams).addJacobian.stkobj
crypto/elliptic.(*CurveParams).affineFromJacobian
crypto/elliptic.(*CurveParams).affineFromJacobian.stkobj
crypto/elliptic.(*CurveParams).doubleJacobian
crypto/elliptic.(*CurveParams).doubleJacobian.stkobj
crypto/elliptic.(*p224Curve).Add
crypto/elliptic.(*p224Curve).Double
crypto/elliptic.(*p224Curve).IsOnCurve
crypto/elliptic.(*p224Curve).Params
crypto/elliptic.(*p224Curve).ScalarBaseMult
crypto/elliptic.(*p224Curve).ScalarMult
crypto/elliptic.(*p256Curve).Add
crypto/elliptic.(*p256Curve).CombinedMult
crypto/elliptic.(*p256Curve).Double
crypto/elliptic.(*p256Curve).Inverse
crypto/elliptic.(*p256Curve).IsOnCurve
crypto/elliptic.(*p256Curve).Params
crypto/elliptic.(*p256Curve).ScalarBaseMult
crypto/elliptic.(*p256Curve).ScalarMult
crypto/elliptic.(*p256Point).CopyConditional
crypto/elliptic.(*p256Point).p256BaseMult
crypto/elliptic.(*p256Point).p256PointToAffine
crypto/elliptic.(*p256Point).p256ScalarMult
crypto/elliptic..inittask
crypto/elliptic..stmp_0
crypto/elliptic..stmp_1
crypto/elliptic..stmp_2
crypto/elliptic..stmp_3
crypto/elliptic..stmp_5
crypto/elliptic..stmp_6
crypto/elliptic.P256
crypto/elliptic.P384
crypto/elliptic.P521
crypto/elliptic.Unmarshal
crypto/elliptic.fromBig
crypto/elliptic.get28BitsFromEnd
crypto/elliptic.initAll
crypto/elliptic.initP224
crypto/elliptic.initP256
crypto/elliptic.initP384
crypto/elliptic.initP521
crypto/elliptic.initTable
crypto/elliptic.initonce
crypto/elliptic.maybeReduceModP
crypto/elliptic.p224
crypto/elliptic.p224Add
crypto/elliptic.p224AddJacobian
crypto/elliptic.p224Contract
crypto/elliptic.p224CopyConditional
crypto/elliptic.p224Curve.Add
crypto/elliptic.p224Curve.Double
crypto/elliptic.p224Curve.IsOnCurve
crypto/elliptic.p224Curve.IsOnCurve.stkobj
crypto/elliptic.p224Curve.Params
crypto/elliptic.p224Curve.ScalarBaseMult
crypto/elliptic.p224Curve.ScalarBaseMult.stkobj
crypto/elliptic.p224Curve.ScalarMult
crypto/elliptic.p224DoubleJacobian
crypto/elliptic.p224FromBig
crypto/elliptic.p224Invert
crypto/elliptic.p224IsZero
crypto/elliptic.p224Mul
crypto/elliptic.p224P
crypto/elliptic.p224Reduce
crypto/elliptic.p224ReduceLarge
crypto/elliptic.p224ScalarMult
crypto/elliptic.p224Square
crypto/elliptic.p224Sub
crypto/elliptic.p224ToAffine
crypto/elliptic.p224ToBig
crypto/elliptic.p224ZeroModP31
crypto/elliptic.p224ZeroModP63
crypto/elliptic.p256
crypto/elliptic.p256BigToLittle
crypto/elliptic.p256Curve.Add
crypto/elliptic.p256Curve.CombinedMult
crypto/elliptic.p256Curve.Double
crypto/elliptic.p256Curve.Inverse
crypto/elliptic.p256Curve.Inverse.stkobj
crypto/elliptic.p256Curve.IsOnCurve
crypto/elliptic.p256Curve.Params
crypto/elliptic.p256Curve.ScalarBaseMult
crypto/elliptic.p256Curve.ScalarMult
crypto/elliptic.p256FromMont
crypto/elliptic.p256GetScalar
crypto/elliptic.p256GetScalar.stkobj
crypto/elliptic.p256Inverse
crypto/elliptic.p256LittleToBig
crypto/elliptic.p256MovCond
crypto/elliptic.p256Mul
crypto/elliptic.p256NegCond
crypto/elliptic.p256OrdMul
crypto/elliptic.p256OrdSqr
crypto/elliptic.p256PointAddAffineAsm
crypto/elliptic.p256PointAddAsm
crypto/elliptic.p256PointDoubleAsm
crypto/elliptic.p256Precomputed
crypto/elliptic.p256Select
crypto/elliptic.p256SelectBase
crypto/elliptic.p256Sqr
crypto/elliptic.p384
crypto/elliptic.p521
crypto/elliptic.precomputeOnce
crypto/elliptic.rr
crypto/elliptic.zForAffine
crypto/internal/randutil..inittask
crypto/md5.(*digest).BlockSize
crypto/md5.(*digest).Reset
crypto/md5.(*digest).Size
crypto/md5.(*digest).Sum
crypto/md5.(*digest).Write
crypto/md5.(*digest).checkSum
crypto/md5..inittask
crypto/md5..stmp_1
crypto/md5.New
crypto/md5.Sum
crypto/md5.block
crypto/md5.init.0
crypto/rand.(*rngReader).Read
crypto/rand..inittask
crypto/rand.Read
crypto/rand.Reader
crypto/rand.init
crypto/rand.init.0
crypto/rand.smallPrimesProduct
crypto/rand.warnBlocked
crypto/sha1.(*digest).BlockSize
crypto/sha1.(*digest).Reset
crypto/sha1.(*digest).Size
crypto/sha1.(*digest).Sum
crypto/sha1.(*digest).Write
crypto/sha1.(*digest).checkSum
crypto/sha1..inittask
crypto/sha1..stmp_1
crypto/sha1.New
crypto/sha1.block
crypto/sha1.blockAMD64
crypto/sha1.blockAVX2
crypto/sha1.init
crypto/sha1.init.0
crypto/sha1.useAVX2
crypto/sha256.(*digest).BlockSize
crypto/sha256.(*digest).Reset
crypto/sha256.(*digest).Size

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Files/Proton/x86/GoSrp.dll
.dll windows x86

e71f5b6ddb8352d7393352eeaab3092e

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:7a:f2:d6:bf:08:58:a2:51:c9:11:6b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

22/11/2017, 13:28

Not After

22/11/2020, 13:28

Subject

CN=ProtonVPN AG,O=ProtonVPN AG,L=Plan-les-Ouates,ST=Geneva,C=CH,1.2.840.113549.1.9.1=#0c1261646d696e4070726f746f6e76706e2e6368

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:a7:74:a9:bb:f9:f9:e6:ae:b4:b7:14:4a:65:8c:2a:3e:98:52:b8:a8:f9:e9:46:c2:58:a6:f4:37:71:37:25
Signer

Actual PE Digest

30:a7:74:a9:bb:f9:f9:e6:ae:b4:b7:14:4a:65:8c:2a:3e:98:52:b8:a8:f9:e9:46:c2:58:a6:f4:37:71:37:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatus
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
QueryPerformanceCounter
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile

msvcrt

__dllonexit
_amsg_exit
_beginthread
_errno
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
fprintf
free
fwrite
malloc
strlen
strncmp
vfprintf

Exports

Exports

GenerateProofs
GenerateVerifier
GetModulusKey
SetTest
_cgo_get_context_function
_cgo_is_runtime_initialized
_cgo_maybe_run_preinit
_cgo_panic
_cgo_preinit_init
_cgo_release_context
_cgo_sys_thread_start
_cgo_topofstack
_cgo_wait_runtime_init_done
_cgo_yield
_cgoexp_0ef23779577f_GenerateProofs
_cgoexp_0ef23779577f_GenerateVerifier
_cgoexp_0ef23779577f_GetModulusKey
_cgoexp_0ef23779577f_SetTest
bufio.(*Reader).Peek
bufio.(*Reader).Read
bufio.(*Reader).ReadByte
bufio.(*Reader).ReadLine
bufio.(*Reader).ReadSlice
bufio.(*Reader).Size
bufio.(*Reader).UnreadByte
bufio.(*Reader).WriteTo
bufio.(*Reader).fill
bufio.(*Reader).writeBuf
bufio..inittask
bufio..stmp_0
bufio..stmp_1
bufio.ErrAdvanceTooFar
bufio.ErrBufferFull
bufio.ErrFinalToken
bufio.ErrInvalidUnreadByte
bufio.ErrInvalidUnreadRune
bufio.ErrNegativeAdvance
bufio.ErrNegativeCount
bufio.ErrTooLong
bufio.errNegativeRead
bufio.errNegativeWrite
bufio.init
bytes.(*Buffer).Bytes
bytes.(*Buffer).Len
bytes.(*Buffer).Read
bytes.(*Buffer).ReadByte
bytes.(*Buffer).ReadFrom
bytes.(*Buffer).Reset
bytes.(*Buffer).String
bytes.(*Buffer).UnreadByte
bytes.(*Buffer).Write
bytes.(*Buffer).WriteByte
bytes.(*Buffer).WriteString
bytes.(*Buffer).WriteTo
bytes.(*Buffer).grow
bytes.(*Reader).Len
bytes.(*Reader).Read
bytes.(*Reader).ReadByte
bytes.(*Reader).UnreadByte
bytes.(*Reader).WriteTo
bytes..inittask
bytes..stmp_2
bytes..stmp_6
bytes..stmp_8
bytes.ErrTooLarge
bytes.Index
bytes.Join
bytes.TrimFunc
bytes.TrimRight
bytes.TrimRightFunc
bytes.TrimSpace
bytes.asciiSpace
bytes.errNegativeRead
bytes.errUnreadByte
bytes.hashStr
bytes.indexFunc
bytes.indexRabinKarp
bytes.init
bytes.lastIndexFunc
bytes.makeASCIISet
bytes.makeCutsetFunc
bytes.makeCutsetFunc.func1
bytes.makeCutsetFunc.func2
bytes.makeCutsetFunc.func3
bytes.makeSlice
bytes.makeSlice.func1
cgo_init
cgo_notify_runtime_init_done
cgo_sys_thread_create
cgo_thread_start
compress/bzip2.(*StructuralError).Error
compress/bzip2.(*bitReader).ReadBits64
compress/bzip2.(*huffmanTree).Decode
compress/bzip2.(*reader).Read
compress/bzip2.(*reader).read
compress/bzip2.(*reader).readBlock
compress/bzip2.(*reader).readBlock.stkobj
compress/bzip2.(*reader).readFromBlock
compress/bzip2.(*reader).setup
compress/bzip2..inittask
compress/bzip2..stmp_0
compress/bzip2..stmp_1
compress/bzip2..stmp_10
compress/bzip2..stmp_11
compress/bzip2..stmp_12
compress/bzip2..stmp_13
compress/bzip2..stmp_14
compress/bzip2..stmp_15
compress/bzip2..stmp_16
compress/bzip2..stmp_17
compress/bzip2..stmp_18
compress/bzip2..stmp_19
compress/bzip2..stmp_2
compress/bzip2..stmp_20
compress/bzip2..stmp_21
compress/bzip2..stmp_22
compress/bzip2..stmp_23
compress/bzip2..stmp_25
compress/bzip2..stmp_3
compress/bzip2..stmp_4
compress/bzip2..stmp_5
compress/bzip2..stmp_6
compress/bzip2..stmp_7
compress/bzip2..stmp_8
compress/bzip2..stmp_9
compress/bzip2.NewReader
compress/bzip2.StructuralError.Error
compress/bzip2.buildHuffmanNode
compress/bzip2.crctab
compress/bzip2.init.0
compress/bzip2.inverseBWT
compress/bzip2.newHuffmanTree
compress/bzip2.newHuffmanTree.func1
compress/bzip2.newHuffmanTree.func2
compress/bzip2.newHuffmanTree.stkobj
compress/bzip2.newMTFDecoderWithRange
compress/bzip2.updateCRC
compress/flate.(*CorruptInputError).Error
compress/flate.(*InternalError).Error
compress/flate.(*byFreq).Len
compress/flate.(*byFreq).Less
compress/flate.(*byFreq).Swap
compress/flate.(*byLiteral).Len
compress/flate.(*byLiteral).Less
compress/flate.(*byLiteral).Swap
compress/flate.(*decompressor).Close
compress/flate.(*decompressor).Read
compress/flate.(*decompressor).Reset
compress/flate.(*decompressor).copyData
compress/flate.(*decompressor).dataBlock
compress/flate.(*decompressor).huffSym
compress/flate.(*decompressor).huffmanBlock
compress/flate.(*decompressor).moreBits
compress/flate.(*decompressor).nextBlock
compress/flate.(*decompressor).readHuffman
compress/flate.(*dictDecoder).writeCopy
compress/flate.(*huffmanDecoder).init
compress/flate.(*huffmanEncoder).assignEncodingAndSize
compress/flate.(*huffmanEncoder).bitCounts
compress/flate.(*huffmanEncoder).generate
compress/flate..inittask
compress/flate..stmp_4
compress/flate..stmp_5
compress/flate..stmp_6
compress/flate..stmp_7
compress/flate.CorruptInputError.Error
compress/flate.InternalError.Error
compress/flate.NewReader
compress/flate.NewReaderDict
compress/flate.byFreq.Len
compress/flate.byFreq.Less
compress/flate.byFreq.Swap
compress/flate.byLiteral.Len
compress/flate.byLiteral.Less
compress/flate.byLiteral.Swap
compress/flate.codeOrder
compress/flate.fixedHuffmanDecoder
compress/flate.fixedHuffmanDecoderInit
compress/flate.fixedHuffmanDecoderInit.func1
compress/flate.fixedLiteralEncoding
compress/flate.fixedOffsetEncoding
compress/flate.fixedOnce
compress/flate.generateFixedLiteralEncoding
compress/flate.generateFixedOffsetEncoding
compress/flate.huffOffset
compress/flate.init
compress/flate.init.0
compress/zlib.(*reader).Close
compress/zlib.(*reader).Read
compress/zlib.(*reader).Reset
compress/zlib..inittask
compress/zlib.ErrChecksum
compress/zlib.ErrDictionary
compress/zlib.ErrHeader
compress/zlib.NewReaderDict
compress/zlib.init
context.(*emptyCtx).String
context..inittask
context.Canceled
context.background
context.closedchan
context.init
context.init.0
context.todo
crosscall2
crosscall_386
crypto.(*Hash).Available
crypto.(*Hash).HashFunc
crypto.(*Hash).New
crypto.(*Hash).Size
crypto..inittask
crypto..stmp_0
crypto..stmp_2
crypto..stmp_3
crypto.Hash.Available
crypto.Hash.HashFunc
crypto.Hash.New
crypto.Hash.Size
crypto.digestSizes
crypto.hashes
crypto.init
crypto/aes.(*KeySizeError).Error
crypto/aes.(*aesCipher).BlockSize
crypto/aes.(*aesCipher).Decrypt
crypto/aes.(*aesCipher).Encrypt
crypto/aes..inittask
crypto/aes..stmp_0
crypto/aes..stmp_1
crypto/aes..stmp_2
crypto/aes..stmp_3
crypto/aes..stmp_4
crypto/aes..stmp_5
crypto/aes.KeySizeError.Error
crypto/aes.NewCipher
crypto/aes.decryptBlockGo
crypto/aes.encryptBlockGo
crypto/aes.expandKeyGo
crypto/aes.newCipherGeneric
crypto/aes.powx
crypto/aes.sbox0
crypto/aes.sbox1
crypto/aes.td0
crypto/aes.td1
crypto/aes.td2
crypto/aes.td3
crypto/aes.te0
crypto/aes.te1
crypto/aes.te2
crypto/aes.te3
crypto/cipher..inittask
crypto/cipher.errOpen
crypto/cipher.init
crypto/des.(*KeySizeError).Error
crypto/des.(*desCipher).BlockSize
crypto/des.(*desCipher).Decrypt
crypto/des.(*desCipher).Encrypt
crypto/des.(*desCipher).generateSubkeys
crypto/des.(*tripleDESCipher).BlockSize
crypto/des.(*tripleDESCipher).Decrypt
crypto/des.(*tripleDESCipher).Encrypt
crypto/des..inittask
crypto/des..stmp_0
crypto/des..stmp_1
crypto/des..stmp_10
crypto/des..stmp_11
crypto/des..stmp_2
crypto/des..stmp_3
crypto/des..stmp_4
crypto/des..stmp_5
crypto/des..stmp_6
crypto/des..stmp_7
crypto/des..stmp_8
crypto/des..stmp_9
crypto/des.KeySizeError.Error
crypto/des.NewTripleDESCipher
crypto/des.cryptBlock
crypto/des.feistel
crypto/des.feistelBox
crypto/des.feistelBoxOnce
crypto/des.initFeistelBox
crypto/des.ksRotate
crypto/des.ksRotations
crypto/des.permutationFunction
crypto/des.permuteBlock
crypto/des.permuteFinalBlock
crypto/des.permuteInitialBlock
crypto/des.permutedChoice1
crypto/des.permutedChoice2
crypto/des.sBoxes
crypto/dsa..inittask
crypto/dsa.ErrInvalidPublicKey
crypto/dsa.Verify
crypto/dsa.Verify.stkobj
crypto/dsa.init
crypto/ecdsa.(*PrivateKey).Add
crypto/ecdsa.(*PrivateKey).Double
crypto/ecdsa.(*PrivateKey).IsOnCurve
crypto/ecdsa.(*PrivateKey).Params
crypto/ecdsa.(*PrivateKey).ScalarBaseMult
crypto/ecdsa.(*PrivateKey).ScalarMult
crypto/ecdsa.(*PublicKey).Add
crypto/ecdsa.(*PublicKey).Double
crypto/ecdsa.(*PublicKey).IsOnCurve
crypto/ecdsa.(*PublicKey).Params
crypto/ecdsa.(*PublicKey).ScalarBaseMult
crypto/ecdsa.(*PublicKey).ScalarMult
crypto/ecdsa..inittask
crypto/ecdsa.PrivateKey.Add
crypto/ecdsa.PrivateKey.Double
crypto/ecdsa.PrivateKey.IsOnCurve
crypto/ecdsa.PrivateKey.Params
crypto/ecdsa.PrivateKey.ScalarBaseMult
crypto/ecdsa.PrivateKey.ScalarMult
crypto/ecdsa.PublicKey.Add
crypto/ecdsa.PublicKey.Double
crypto/ecdsa.PublicKey.IsOnCurve
crypto/ecdsa.PublicKey.Params
crypto/ecdsa.PublicKey.ScalarBaseMult
crypto/ecdsa.PublicKey.ScalarMult
crypto/ecdsa.Verify
crypto/ecdsa.Verify.stkobj
crypto/ecdsa.errZeroParam
crypto/ecdsa.hashToInt
crypto/ecdsa.init
crypto/ecdsa.one
crypto/elliptic.(*CurveParams).Add
crypto/elliptic.(*CurveParams).Double
crypto/elliptic.(*CurveParams).IsOnCurve
crypto/elliptic.(*CurveParams).IsOnCurve.stkobj
crypto/elliptic.(*CurveParams).Params
crypto/elliptic.(*CurveParams).ScalarBaseMult
crypto/elliptic.(*CurveParams).ScalarMult
crypto/elliptic.(*CurveParams).ScalarMult.stkobj
crypto/elliptic.(*CurveParams).addJacobian
crypto/elliptic.(*CurveParams).addJacobian.stkobj
crypto/elliptic.(*CurveParams).affineFromJacobian
crypto/elliptic.(*CurveParams).affineFromJacobian.stkobj
crypto/elliptic.(*CurveParams).doubleJacobian
crypto/elliptic.(*CurveParams).doubleJacobian.stkobj
crypto/elliptic.(*p224Curve).Add
crypto/elliptic.(*p224Curve).Double
crypto/elliptic.(*p224Curve).IsOnCurve
crypto/elliptic.(*p224Curve).Params
crypto/elliptic.(*p224Curve).ScalarBaseMult
crypto/elliptic.(*p224Curve).ScalarMult
crypto/elliptic.(*p256Curve).Add
crypto/elliptic.(*p256Curve).Double
crypto/elliptic.(*p256Curve).IsOnCurve
crypto/elliptic.(*p256Curve).Params
crypto/elliptic.(*p256Curve).ScalarBaseMult
crypto/elliptic.(*p256Curve).ScalarMult
crypto/elliptic..inittask
crypto/elliptic..stmp_1
crypto/elliptic.P256
crypto/elliptic.P384
crypto/elliptic.P521
crypto/elliptic.Unmarshal
crypto/elliptic.get28BitsFromEnd
crypto/elliptic.initAll
crypto/elliptic.initP224
crypto/elliptic.initP256
crypto/elliptic.initP384
crypto/elliptic.initP521
crypto/elliptic.initonce
crypto/elliptic.p224
crypto/elliptic.p224Add
crypto/elliptic.p224AddJacobian
crypto/elliptic.p224Contract
crypto/elliptic.p224CopyConditional
crypto/elliptic.p224Curve.Add
crypto/elliptic.p224Curve.Double
crypto/elliptic.p224Curve.IsOnCurve
crypto/elliptic.p224Curve.IsOnCurve.stkobj
crypto/elliptic.p224Curve.Params
crypto/elliptic.p224Curve.ScalarBaseMult
crypto/elliptic.p224Curve.ScalarBaseMult.stkobj
crypto/elliptic.p224Curve.ScalarMult
crypto/elliptic.p224DoubleJacobian
crypto/elliptic.p224FromBig
crypto/elliptic.p224Invert
crypto/elliptic.p224IsZero
crypto/elliptic.p224Mul
crypto/elliptic.p224P
crypto/elliptic.p224Reduce
crypto/elliptic.p224ReduceLarge
crypto/elliptic.p224ScalarMult
crypto/elliptic.p224Square
crypto/elliptic.p224Sub
crypto/elliptic.p224ToAffine
crypto/elliptic.p224ToBig
crypto/elliptic.p224ZeroModP31
crypto/elliptic.p224ZeroModP63
crypto/elliptic.p256
crypto/elliptic.p256CopyConditional
crypto/elliptic.p256Curve.Add
crypto/elliptic.p256Curve.Double
crypto/elliptic.p256Curve.IsOnCurve
crypto/elliptic.p256Curve.Params
crypto/elliptic.p256Curve.ScalarBaseMult
crypto/elliptic.p256Curve.ScalarMult
crypto/elliptic.p256Diff
crypto/elliptic.p256FromBig
crypto/elliptic.p256FromBig.stkobj
crypto/elliptic.p256GetScalar
crypto/elliptic.p256GetScalar.stkobj
crypto/elliptic.p256Invert
crypto/elliptic.p256Mul
crypto/elliptic.p256One
crypto/elliptic.p256Params
crypto/elliptic.p256PointAdd
crypto/elliptic.p256PointAddMixed
crypto/elliptic.p256PointDouble
crypto/elliptic.p256PointToAffine
crypto/elliptic.p256Precomputed
crypto/elliptic.p256RInverse
crypto/elliptic.p256ReduceCarry
crypto/elliptic.p256ReduceDegree
crypto/elliptic.p256Scalar3
crypto/elliptic.p256Scalar4
crypto/elliptic.p256Scalar8
crypto/elliptic.p256ScalarBaseMult
crypto/elliptic.p256ScalarMult
crypto/elliptic.p256SelectAffinePoint
crypto/elliptic.p256SelectJacobianPoint
crypto/elliptic.p256Square
crypto/elliptic.p256Sum
crypto/elliptic.p256ToAffine
crypto/elliptic.p256ToBig
crypto/elliptic.p256ToBig.stkobj
crypto/elliptic.p256Zero31
crypto/elliptic.p384
crypto/elliptic.p521
crypto/elliptic.zForAffine
crypto/internal/randutil..inittask
crypto/md5.(*digest).BlockSize
crypto/md5.(*digest).Reset
crypto/md5.(*digest).Size
crypto/md5.(*digest).Sum
crypto/md5.(*digest).Write
crypto/md5.(*digest).checkSum
crypto/md5..inittask
crypto/md5..stmp_1
crypto/md5.New
crypto/md5.Sum
crypto/md5.block
crypto/md5.init.0
crypto/rand.(*rngReader).Read
crypto/rand..inittask
crypto/rand.Read
crypto/rand.Reader
crypto/rand.init
crypto/rand.init.0
crypto/rand.smallPrimesProduct
crypto/rand.warnBlocked
crypto/sha1.(*digest).BlockSize
crypto/sha1.(*digest).Reset
crypto/sha1.(*digest).Size
crypto/sha1.(*digest).Sum
crypto/sha1.(*digest).Write
crypto/sha1.(*digest).checkSum
crypto/sha1..inittask
crypto/sha1..stmp_1
crypto/sha1.New
crypto/sha1.block
crypto/sha1.init.0
crypto/sha256.(*digest).BlockSize
crypto/sha256.(*digest).Reset
crypto/sha256.(*digest).Size
crypto/sha256.(*digest).Sum
crypto/sha256.(*digest).Write
crypto/sha256.(*digest).checkSum
crypto/sha256..inittask
crypto/sha256..stmp_2
crypto/sha256.New
crypto/sha256.New224
crypto/sha256.block
crypto/sha256.init.0
crypto/sha512.(*digest).BlockSize
crypto/sha512.(*digest).Reset
crypto/sha512.(*digest).Size
crypto/sha512.(*digest).Sum
crypto/sha512.(*digest).Write
crypto/sha512.(*digest).checkSum
crypto/sha512..inittask
crypto/sha512..stmp_4
crypto/sha512..stmp_5
crypto/sha512..stmp_9
crypto/sha512.New
crypto/sha512.New384
crypto/sha512.New512_224
crypto/sha512.New512_256
crypto/sha512.Sum512
crypto/sha512._K
crypto/sha512.block
crypto/sha512.blockGeneric
crypto/sha512.init.0
crypto/subtle.ConstantTimeCompare
encoding/asn1.(*ObjectIdentifier).String
encoding/asn1..inittask
encoding/asn1..stmp_8

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Files/config.json
mailify modded checker/Files/theme.mailify
mailify modded checker/Files/userinfo.mailify
mailify modded checker/Leaf.xNet.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Leaf.xNet.xml
.xml .js
mailify modded checker/Mailify.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mailify modded checker/Mailify.exe.config
.xml
mailify modded checker/Mailify.pdb
mailify modded checker/Microsoft.Bcl.AsyncInterfaces.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:12:67:a0:36:ef:1f:74:3c:d9:58:6d:b2:72:51:fa:a9:83:d0:5d:51:4f:e6:9d:c9:7b:20:22:11:48:c5:7f
Signer

Actual PE Digest

63:12:67:a0:36:ef:1f:74:3c:d9:58:6d:b2:72:51:fa:a9:83:d0:5d:51:4f:e6:9d:c9:7b:20:22:11:48:c5:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Microsoft.Bcl.AsyncInterfaces.xml
.xml
mailify modded checker/Newtonsoft.Json.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Signer

Actual PE Digest

8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/Newtonsoft.Json.xml
.xml
mailify modded checker/ProtonPlugin.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/RuriLib.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Buffers.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

Actual PE Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Buffers.xml
mailify modded checker/System.Collections.Immutable.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

00:cf:2c:ae:fc:fe:fe:84:33:2d:46:7f:fc:49:4a:06:37:45:82:46:4b:71:6a:82:48:24:8b:4e:1a:33:ff:61
Signer

Actual PE Digest

00:cf:2c:ae:fc:fe:fe:84:33:2d:46:7f:fc:49:4a:06:37:45:82:46:4b:71:6a:82:48:24:8b:4e:1a:33:ff:61

Digest Algorithm

sha256

PE Digest Matches

true

27:65:e1:9e:a2:10:7f:36:c6:f5:ef:04:26:4e:78:39:02:72:da:e2
Signer

Actual PE Digest

27:65:e1:9e:a2:10:7f:36:c6:f5:ef:04:26:4e:78:39:02:72:da:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Collections.Immutable.xml
.xml
mailify modded checker/System.Interactive.Async.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

04/06/2018, 00:00

Not After

08/06/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:a2:2d:27:89:f2:fc:89:2a:ef:7f:d5:42:dd:3a:c0:4f:3b:ea:3f:13:af:d1:d3:05:88:74:8e:40:0c:b2:c3
Signer

Actual PE Digest

0f:a2:2d:27:89:f2:fc:89:2a:ef:7f:d5:42:dd:3a:c0:4f:3b:ea:3f:13:af:d1:d3:05:88:74:8e:40:0c:b2:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Interactive.Async.xml
.xml
mailify modded checker/System.Linq.Async.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

04/06/2018, 00:00

Not After

08/06/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:d9:df:da:84:7a:77:a9:72:03:cc:69:65:86:6b:f4:da:2e:32:0d:6f:a0:bd:ce:f2:bd:71:80:2e:2f:02:ff
Signer

Actual PE Digest

b4:d9:df:da:84:7a:77:a9:72:03:cc:69:65:86:6b:f4:da:2e:32:0d:6f:a0:bd:ce:f2:bd:71:80:2e:2f:02:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1009KB - Virtual size: 1009KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Linq.Async.xml
.xml
mailify modded checker/System.Runtime.CompilerServices.Unsafe.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:0a:83:34:a8:fb:fd:d0:38:76:00:00:00:00:01:0a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8E9E-4BD0-2ED0,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:86:a4:ae:f3:dd:ce:5d:c3:73:98:b8:87:69:e4:b4:0e:c9:57:60:e0:e7:c3:1a:bc:f8:ed:3e:f9:4b:58:be
Signer

Actual PE Digest

a1:86:a4:ae:f3:dd:ce:5d:c3:73:98:b8:87:69:e4:b4:0e:c9:57:60:e0:e7:c3:1a:bc:f8:ed:3e:f9:4b:58:be

Digest Algorithm

sha256

PE Digest Matches

true

fb:04:b1:54:63:fe:e1:f1:d9:2e:93:23:b7:8a:35:0d:bf:24:35:54
Signer

Actual PE Digest

fb:04:b1:54:63:fe:e1:f1:d9:2e:93:23:b7:8a:35:0d:bf:24:35:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Runtime.CompilerServices.Unsafe.xml
mailify modded checker/System.Threading.Tasks.Extensions.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:01:78:42:c9:0c:b3:a8:d8:b3:00:00:00:00:01:01
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:0a:24:46:f6:ec:32:50:e5:fa:53:3a:e7:d4:cd:b6:b9:88:19:ae:e5:f8:31:a3:05:96:43:10:1a:78:c8:cf
Signer

Actual PE Digest

0d:0a:24:46:f6:ec:32:50:e5:fa:53:3a:e7:d4:cd:b6:b9:88:19:ae:e5:f8:31:a3:05:96:43:10:1a:78:c8:cf

Digest Algorithm

sha256

PE Digest Matches

true

32:06:d0:1b:1c:be:80:f6:a9:98:d2:8f:85:1d:4b:8f:22:54:e4:6a
Signer

Actual PE Digest

32:06:d0:1b:1c:be:80:f6:a9:98:d2:8f:85:1d:4b:8f:22:54:e4:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mailify modded checker/System.Threading.Tasks.Extensions.xml

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

f4:6b:76:b4:ee:b0:71:87:dc:39:0b:07:98:54:70:dc:0d:20:6e:72:67:82:94:3b:2b:be:e5:e7:06:f7:d3:e3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 86KB - Virtual size: 86KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 123KB - Virtual size: 122KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 155KB - Virtual size: 154KB

.rsrc Size: 1024B - Virtual size: 996B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 565KB - Virtual size: 564KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 391KB - Virtual size: 391KB

.rsrc Size: 1KB - Virtual size: 1KB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

f4:6b:76:b4:ee:b0:71:87:dc:39:0b:07:98:54:70:dc:0d:20:6e:72:67:82:94:3b:2b:be:e5:e7:06:f7:d3:e3
Signer

.text
Size: 2.8MB - Virtual size: 2.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 86KB - Virtual size: 86KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 123KB - Virtual size: 122KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 155KB - Virtual size: 154KB

.rsrc
Size: 1024B - Virtual size: 996B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 565KB - Virtual size: 564KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 391KB - Virtual size: 391KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

2c:7a:f2:d6:bf:08:58:a2:51:c9:11:6b
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1f:b3:c2:7e:b5:e7:0a:d2:7e:65:e7:cf:94:c9:9e:08:ba:c2:ec:04:51:db:e3:79:fa:7d:b1:3f:fe:b9:c8:e5
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 127KB - Virtual size: 126KB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.pdata
Size: 1024B - Virtual size: 720B

.xdata
Size: 1024B - Virtual size: 624B

.bss
Size: - Virtual size: 144KB

.edata
Size: 211KB - Virtual size: 210KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 69KB - Virtual size: 68KB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

2c:7a:f2:d6:bf:08:58:a2:51:c9:11:6b
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

30:a7:74:a9:bb:f9:f9:e6:ae:b4:b7:14:4a:65:8c:2a:3e:98:52:b8:a8:f9:e9:46:c2:58:a6:f4:37:71:37:25
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 106KB - Virtual size: 106KB