Nitrox_1.7.1.0.zip
- SHA256 92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a
Overview
overview
3Static
static
3NitroxLauncher.exe
windows7-x64
3NitroxLauncher.exe
windows10-2004-x64
1NitroxServ...ca.exe
windows7-x64
1NitroxServ...ca.exe
windows10-2004-x64
1lib/0Harmony.dll
windows7-x64
1lib/0Harmony.dll
windows10-2004-x64
1lib/Assets...ET.dll
windows7-x64
1lib/Assets...ET.dll
windows10-2004-x64
1lib/Autofac.dll
windows7-x64
1lib/Autofac.dll
windows10-2004-x64
1lib/BinaryPack.dll
windows7-x64
1lib/BinaryPack.dll
windows10-2004-x64
1lib/Discor...er.dll
windows7-x64
1lib/Discor...er.dll
windows10-2004-x64
1lib/JetBra...ns.dll
windows7-x64
1lib/JetBra...ns.dll
windows10-2004-x64
1lib/LZ4.dll
windows7-x64
1lib/LZ4.dll
windows10-2004-x64
1lib/LitJSON.dll
windows7-x64
1lib/LitJSON.dll
windows10-2004-x64
1lib/LiteNetLib.dll
windows7-x64
1lib/LiteNetLib.dll
windows10-2004-x64
1lib/Micros...ry.dll
windows7-x64
1lib/Micros...ry.dll
windows10-2004-x64
1lib/Micros...ll.dll
windows7-x64
1lib/Micros...ll.dll
windows10-2004-x64
1lib/Micros...ck.dll
windows7-x64
1lib/Micros...ck.dll
windows10-2004-x64
1lib/Mono.C...db.dll
windows7-x64
1lib/Mono.C...db.dll
windows10-2004-x64
1lib/Mono.C...db.dll
windows7-x64
1lib/Mono.C...db.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NitroxLauncher.exe
Resource
win7-20231215-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
NitroxLauncher.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
NitroxServer-Subnautica.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
NitroxServer-Subnautica.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
lib/0Harmony.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
lib/0Harmony.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
lib/AssetsTools.NET.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
lib/AssetsTools.NET.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
lib/Autofac.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
lib/Autofac.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
lib/BinaryPack.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
lib/BinaryPack.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
lib/DiscordGameSDKWrapper.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
lib/DiscordGameSDKWrapper.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
lib/JetBrains.Annotations.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
lib/JetBrains.Annotations.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
lib/LZ4.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
lib/LZ4.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
lib/LitJSON.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
lib/LitJSON.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
lib/LiteNetLib.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
lib/LiteNetLib.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
lib/Microsoft.Win32.Registry.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
lib/Microsoft.Win32.Registry.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
lib/Microsoft.WindowsAPICodePack.Shell.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
lib/Microsoft.WindowsAPICodePack.Shell.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
lib/Microsoft.WindowsAPICodePack.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
lib/Microsoft.WindowsAPICodePack.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
lib/Mono.Cecil.Mdb.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
lib/Mono.Cecil.Mdb.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
lib/Mono.Cecil.Pdb.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
lib/Mono.Cecil.Pdb.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Nitrox_1.7.1.0.zip
- Size 7.8MB
- Sample240208-1ctd2sbb4s
- SHA256 92f4be23fd098350031cbe2f661f90c7377d691eec91808636d415b9741b029a
- MD5 f7d25be0395feec244bc865acfa07043
- SHA1 b3c74c8b4f3a2ac065ee8953c6ead832b2868e5d
- SHA512 8efd8d687847b760c789cbe03313257543cb6b557b800c1c5e509754ae49a9dc18b05a5d62d1338298ec6cddd8166e7428479f7047feb6b221bfa1853db72a29
- SSDEEP 196608:Wm/qcR6luQIsgHFFz+iT9iU4l6iHWCgczkWBu+ie3JWq92INOF:d/qc0lrSFp+JmEzkWB7iewq9OF
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 34 IoCs
Checks for missing Authenticode signature.
resource unpack001/NitroxLauncher.exe unpack001/NitroxServer-Subnautica.exe unpack001/lib/0Harmony.dll unpack001/lib/AssetsTools.NET.dll unpack001/lib/Autofac.dll unpack001/lib/BinaryPack.dll unpack001/lib/DiscordGameSDKWrapper.dll unpack001/lib/JetBrains.Annotations.dll unpack001/lib/LZ4.dll unpack001/lib/LitJSON.dll unpack001/lib/LiteNetLib.dll unpack001/lib/Microsoft.WindowsAPICodePack.Shell.dll unpack001/lib/Microsoft.WindowsAPICodePack.dll unpack001/lib/Mono.Cecil.Mdb.dll unpack001/lib/Mono.Cecil.Pdb.dll unpack001/lib/Mono.Cecil.Rocks.dll unpack001/lib/Mono.Cecil.dll unpack001/lib/Mono.Nat.dll unpack001/lib/MonoMod.RuntimeDetour.dll unpack001/lib/MonoMod.Utils.dll unpack001/lib/NitroxClient.dll unpack001/lib/NitroxModel-Subnautica.dll unpack001/lib/NitroxModel.dll unpack001/lib/NitroxPatcher.dll unpack001/lib/NitroxServer.dll unpack001/lib/Serilog.Sinks.Async.dll unpack001/lib/Serilog.Sinks.File.dll unpack001/lib/Serilog.Sinks.Map.dll unpack001/lib/Serilog.dll unpack001/lib/ToastNotifications.Messages.dll unpack001/lib/ToastNotifications.dll unpack001/lib/WindowsFirewallHelper.dll unpack001/lib/dnlib.dll unpack001/lib/protobuf-net.dll
File Explorer
-
Nitrox_1.7.1.0.zip.zip 7.8MB
-
AssetBundles/chatkeyhint54KB
-
AssetBundles/chatlog22KB
-
AssetBundles/discordjoinrequest9KB
-
AssetBundles/playerlisttab23KB
-
AssetBundles/sharedassets154KB
-
LICENSE.txt32KB
-
LanguageFiles/af.json2KB
-
LanguageFiles/bg.json4B
-
LanguageFiles/cs.json2KB
-
LanguageFiles/da.json2KB
-
LanguageFiles/de.json4KB
-
LanguageFiles/el.json4KB
-
LanguageFiles/en.json3KB
-
LanguageFiles/es-419.json3KB
-
LanguageFiles/es.json3KB
-
LanguageFiles/et.json2KB
-
LanguageFiles/fi.json2KB
-
LanguageFiles/fr.json3KB
-
LanguageFiles/ga.json4B
-
LanguageFiles/hr.json3KB
-
LanguageFiles/hu.json3KB
-
LanguageFiles/it.json3KB
-
LanguageFiles/ja.json4B
-
LanguageFiles/ko.json2KB
-
LanguageFiles/lt.json1KB
-
LanguageFiles/lv.json51B
-
LanguageFiles/nl.json2KB
-
LanguageFiles/no.json2KB
-
LanguageFiles/pl.json3KB
-
LanguageFiles/pt-BR.json3KB
-
LanguageFiles/pt.json3KB
-
LanguageFiles/ro.json4KB
-
LanguageFiles/ru.json5KB
-
LanguageFiles/sk.json2KB
-
LanguageFiles/sl.json4B
-
LanguageFiles/sr.json230B
-
LanguageFiles/sv.json2KB
-
LanguageFiles/th.json2KB
-
LanguageFiles/tr.json2KB
-
LanguageFiles/uk.json4KB
-
LanguageFiles/vi.json3KB
-
LanguageFiles/zh-Hans.json3KB
-
NitroxLauncher.exe.exe 3.5MB
-
NitroxLauncher.exe.config.xml 2KB
-
NitroxLauncher.pdb28KB
-
NitroxServer-Subnautica.exe.exe 52KB
-
NitroxServer-Subnautica.exe.config.xml 1011B
-
NitroxServer-Subnautica.pdb23KB
-
Patch Notes.txt21KB
-
README.txt355B
-
lib/0Harmony.dll.dll 186KB
-
lib/AssetsTools.NET.dll.dll 163KB
-
lib/Autofac.dll.dll 226KB
-
lib/BinaryPack.dll.dll 61KB
-
lib/DiscordGameSDKWrapper.dll.dll 96KB
-
lib/JetBrains.Annotations.dll.dll .js 96KB
-
lib/LZ4.dll.dll 44KB
-
lib/LitJSON.dll.dll 60KB
-
lib/LiteNetLib.dll.dll 92KB
-
lib/Microsoft.Win32.Registry.dll.dll 25KB
-
lib/Microsoft.WindowsAPICodePack.Shell.dll.dll 529KB
-
lib/Microsoft.WindowsAPICodePack.dll.dll 102KB
-
lib/Mono.Cecil.Mdb.dll.dll 42KB
-
lib/Mono.Cecil.Pdb.dll.dll 87KB
-
lib/Mono.Cecil.Rocks.dll.dll 27KB
-
lib/Mono.Cecil.dll.dll 350KB
-
lib/Mono.Nat.dll.dll 67KB
-
lib/MonoMod.RuntimeDetour.dll.dll 106KB
-
lib/MonoMod.Utils.dll.dll 191KB
-
lib/Newtonsoft.Json.dll.dll 683KB
-
lib/NitroxClient.dll.dll 520KB
-
lib/NitroxClient.pdb185KB
-
lib/NitroxModel-Subnautica.dll.dll 39KB
-
lib/NitroxModel-Subnautica.pdb20KB
-
lib/NitroxModel.dll.dll 224KB
-
lib/NitroxModel.pdb81KB
-
lib/NitroxPatcher.dll.dll 188KB
-
lib/NitroxPatcher.dll.config.xml 541B
-
lib/NitroxPatcher.pdb72KB
-
lib/NitroxServer.dll.dll 183KB
-
lib/NitroxServer.dll.config.xml 1KB
-
lib/NitroxServer.pdb69KB
-
lib/Serilog.Sinks.Async.dll.dll 9KB
-
lib/Serilog.Sinks.File.dll.dll 32KB
-
lib/Serilog.Sinks.Map.dll.dll 12KB
-
lib/Serilog.dll.dll 123KB
-
lib/System.Buffers.dll.dll 20KB
-
lib/System.Drawing.Common.dll.dll 52KB
-
lib/System.IO.FileSystem.AccessControl.dll.dll 27KB
-
lib/System.Memory.dll.dll 137KB
-
lib/System.Numerics.Vectors.dll.dll 113KB
-
lib/System.Runtime.CompilerServices.Unsafe.dll.dll 17KB
-
lib/System.Security.AccessControl.dll.dll 32KB
-
lib/System.Security.Principal.Windows.dll.dll 17KB
-
lib/ToastNotifications.Messages.dll.dll 88KB
-
lib/ToastNotifications.dll.dll 107KB
-
lib/WindowsFirewallHelper.dll.dll 196KB
-
lib/discord_game_sdk.dll.dll 3.3MB
-
lib/dnlib.dll.dll 1.1MB
-
lib/protobuf-net.dll.dll 178KB
AssetBundles/chatkeyhint
- SHA256 e9e83d261387308a26b1e750ffa6a7691507dda4f850774bfaabaa743a87575f
- MD5 11e710473a3a9f3ca581d3556120c975
- SHA1 a40b7acd42a5099d6f70ab1580187c4e6094b77d
- SHA512 f378e74698e53442f4a79c03db6c3948b524c9f8fc0e0b768d6926251e857732ee83dff8ee6748527b9963c68e4f0d3c3d2cfb6217dfda5f8036350a3677592a
- SSDEEP 1536:+l/Rwk1MRCvayVuS5hzFOV7TQndb1VANMyrMlrZWj/Zm:SRZOCiyIS5WV7TQn1UNMqgoVm
- MD5 SHA1 SHA512 SSDEEP
AssetBundles/chatlog
- SHA256 a6ffffa3ea535ffadecbf5ad9055649f63589bb104fc1386694154dd684aace2
- MD5 4b1fd653df50cd1aeab2cdb0cca1ef7d
- SHA1 8dc0a9c9420343f820a7b149c1d9cd986f877720
- SHA512 8394740e02a8d51f85f00bffe8c5d4e2334c27e44874f2280c1419ffa75bc3b86b8ca9efb2e247cf1b49c9721611ba696cf6ffb7f7b775b45fc64d364f086403
- SSDEEP 384:yL0PkeiTkOizhvFckSZRjfeWFnk4yJNstCcE3b9XPUXpXBE6oXjIcgwiMYmiE:ykDPzTcx/jfeWKrstp+ps8RIqt1
- MD5 SHA1 SHA512 SSDEEP
AssetBundles/discordjoinrequest
- SHA256 881b0a43d402023e60e3aee00edbb4839089724424fdac4deafc12f49b33716a
- MD5 755a999b61690e9932bc7abe737adc09
- SHA1 2150945fd1d59b689d83d5ff4525e52b566a5da8
- SHA512 3c311f554834563b75d5a7934470851307ed8277bf93eb6aca860db5aea37d8f9f7f4a26d0d03b257ccfef22dffa32e9d9dbe198b2220d74874a858a47774a07
- SSDEEP 192:Xb9zcaj8ei3q/LdHGPB4Aa6WmzAUyGS9SUdHSv8yneM:r9zcwHdHQa6WmdS9SUdHSv8U
- MD5 SHA1 SHA512 SSDEEP
AssetBundles/playerlisttab
- SHA256 e313f3e037f56d04a3bebc2bc18d2327cb3fd2951a475d8799bc987512e5cd6c
- MD5 135c3d5d0bf3176d994087e1b551c911
- SHA1 9c05cefd2d0058f04f99ace7e771830273378c9a
- SHA512 9fb201815d25d1c75c55eba12113ffdc26b04e0cace06af5b1e1132630d0472afb26d05a93d90ae6bcb2a6c85dd6ed8b1e6789dcb2c69d3c27cc657926d94ad5
- SSDEEP 384:KN1qLFT+PWoiRxStFV1b+01ERbXq2QmjUOOfyD0jGoVn0t660SJJd8w3z:k4FT+TtFV1btmjUSgGHt6ZiVz
- MD5 SHA1 SHA512 SSDEEP
AssetBundles/sharedassets
- SHA256 e60c718869834c2eaf2ccc8fd9bd75a3ef0f86118aeefaa93b115260a65e8280
- MD5 a2a515321e69302d8d91989a354d1b3d
- SHA1 abe8189444045c85ad74e04fbc33c86b04211ccd
- SHA512 bfd869112cc062d2310d16a7505ff9c16388fca1cca069233740a25ce4ec8cd7c3d7012065894a02c84533275f4432673177b070df04e210f9d3156104a2c2d7
- SSDEEP 3072:WfwdiXta1ELkssGlgFl2g4B5PtL5rU1SaCfhp4ieltMqpCwBouHyndwp:Wf3Xt3wrl2hPSSaE4iYMqpCwGu
- MD5 SHA1 SHA512 SSDEEP
LICENSE.txt
- SHA256 ab7dfb53c7d427d8f81f22dbbb34b006fc6a839471b0d2c15c917ed64b48bf30
- MD5 2b20c62f2dddfdf9df41d91392130fb1
- SHA1 bedfb6befbcd6cc61c24385be720a6a105feffe7
- SHA512 98d9abfcf8da003a0cfa105251694bd845b878a24405cb21ec3f7872b976a5c3d9e91fd93e57b165f37185e9da5abe8a13f28dcea130eca2aaf427c0a192433a
- SSDEEP 384:YjJRuZ7vytNQ0Lf8KnYz3ZlqXstCTyVqtGJEuzFrb3CNHroNjOK1gxCLfK:Y7Y+tNdSz3ZlqXOWoInuzx3Y8N3Wii
- MD5 SHA1 SHA512 SSDEEP
LanguageFiles/af.json
- SHA256 8ecfcf79ea97bd877169ecf49155dbe7768d1eaa93ee58c1977f1d0f7545c1b1
- MD5 696f55d58ed2070e6c1778b657285575
- SHA1 c9a61bddda212960f5792115c6cf1237e1b8d52d
- SHA512 8c28a1da6ef5137a005651408eb78d9c7828a485dc8691400b2c445cb7fe58e8398fc3891a3cb9e6a4f496253ee259880d78c63c111f49884db71c24ad5e0558
- MD5 SHA1 SHA512
LanguageFiles/bg.json
- SHA256 e3566b3a06430868d71e9287dfd6c6c520a3da027aabea01951d407ee131dc2f
- MD5 c443b04d0fc26b0a5a4573a78e0082a1
- SHA1 3c957535345645dce7190b85eb10b39da96b2518
- SHA512 7bbf6dac485c9e59d02edabc91ff5b15bc1319cef6905c0077ee16e3b1f572b61bff85f2400bc0f5b4aeab0260bd5d68787d72c7a688d79192952f7957a44de3
- MD5 SHA1 SHA512
LanguageFiles/cs.json
- SHA256 5d4cd34aaeea352938c83053e4e525b3254107229331afd64801baed36710396
- MD5 4e8c98b92ec1a38319fdf3860b677137
- SHA1 721083644e3e17ed76b87b74106ecc3cc946cf72
- SHA512 0a3621cb4e6d78226063aca38b35656780e8bc13ac9c530bc1f8f2e7aae2b98f37874ad257cfb24f861a4019b4cdc5cd4aaa2418abc7a45e7b8ee79ea6a832ad
- MD5 SHA1 SHA512
LanguageFiles/da.json
- SHA256 d50acb0af37c858adf6295d90b468b3b4fcec3aa5f8192a23f66c243a81604b4
- MD5 cadb476c55806365f7b75c74995cf155
- SHA1 70e0810b16935ca8da398dcabd2b2666f5b3e231
- SHA512 50ae301a6e213bfd86ee10bc2c348d9ee5004de6d5409cbc090dcc66726d35929e3e3d53ee2a4f9c47f6d44df29ea9ed5ea4b3ce05e58f59f71597df1c0ad5f4
- MD5 SHA1 SHA512
LanguageFiles/de.json
- SHA256 111dadd0bfcf43be3a1323fdfa6211c73cd1d3cb8c9780135da102969820deb6
- MD5 c2018d208978d7056553d4ce7d020da1
- SHA1 9f2cb159ab73fde17d4da1d8ac7fb92f8660130e
- SHA512 bb52aeab0a22fbb562b14caa4fabf78dd84124e6a6aa6733ae6cacce903c7a3c37ce1376da3ce4a624e89ade31069106d715bb0ee70ea5aa6946a0f3e5301fd2
- SSDEEP 96:w3PS9MzF1mpf1P4y5zL3Km3NUTd/W/1UigYrLlT:w3awb2f1nJL3Km3yW/1jgYrp
- MD5 SHA1 SHA512 SSDEEP
LanguageFiles/el.json
- SHA256 2282678d2d52826f852f6ff830af5f1619529303345f9a71451c94ad51048650
- MD5 2e0b472fb7e11232828bcb830132de6d
- SHA1 f07ea7a07f5b115c46084f70a412dc14de5add63
- SHA512 145ee4e8f8373ed5b29569e28960b4c3443ec7160a1fa7eb8bbeb3ed9a86562b45594ee5b1b6a27ce6297b9711a09c317757ccb5f5f2fbee84862649a16b0e79
- SSDEEP 96:PBa4XBKIrhyirh5l2+vZZ9+2x4UHIPBEXCQE:paYwwhyuh5E+vZZRWqQyXCZ
- MD5 SHA1 SHA512 SSDEEP
LanguageFiles/en.json
- SHA256 9f912006edcc423ac6e5f2d11a942d1c16dac217d347a4996f8626af5b4b82e5
- MD5 26383da1f80059604fef3b9a186c4642
- SHA1 b6d6e01e24c60982f08907d1c1bc8482d4fdfc05
- SHA512 81b394b180f3525822d695199257e898c9256671467689688238ced0e597414156b92da5f89725dfafc412304c397fec103dee2b54c9a5aa7d5c9caa24bd0521
- MD5 SHA1 SHA512
LanguageFiles/es-419.json
- SHA256 29fcc00e2df384d02a79180f848e1134993c440b9bd969c3cd9bceb5cec22682
- MD5 41f40c4d76a0250306185cc40f3d0ea4
- SHA1 874b5e6126c823b05ca286e5d06fb5089755da93
- SHA512 539afde08a38536c3eb36101f8ef1872f7e4cd2a1fcc25b439aac5c8667dd95acf5ae538eed9dc55ec179801c9b4f95fa622d5b4038ddf0f22a4552bd6bb6361
- MD5 SHA1 SHA512
LanguageFiles/es.json
- SHA256 fbf80aa471ea96fa81a55ce7ec3966cfb9966dfbc49a6c8815f94f8d6046f77c
- MD5 c1a1abe85980b69f8923c52e73c746e2
- SHA1 f71e17a978d8e0604769d8acf27c6582b1a84fb8
- SHA512 c0c6291e08811a61ef7637f342c55cf2e9cbe5ad1561eab7609b25f13b7a8519cbe02795873de05a33071af4253ea5bd6c075fc0f0d7190a2af2e4ea2dad1aba
- MD5 SHA1 SHA512
LanguageFiles/et.json
- SHA256 80a74639289ca1e1e2540eb93d5753237eb6b3c986da95159fd6fa8680b2e7a6
- MD5 5d83551abc1f3f1b97ab4f35cad96fff
- SHA1 96eb9392a354f0fd87d7047e301ad1768bcecc4f
- SHA512 65769da236e9a4f5b66dd3112e171321ca343bf1873320d87388c97fb28d8875f23e71b8633b6f00f0fa98233f36525eb54dfaf2047c0fdc66f6ad980d9e86e7
- MD5 SHA1 SHA512
LanguageFiles/fi.json
- SHA256 faa828cab817bd2800231ebda081a1d9fb9c4c3cfabd02ddef4756f456ad08c0
- MD5 09bc1839cf098404070111c07a9d3dbf
- SHA1 78d5e847b61a7e64cf05772585ca05f5f8fd3d7f
- SHA512 62b6d52cc70bf1a4b18a7dcc5e21764dee4247e1a30ebedb783078d9ef89cade775ad9d4dc55c0c76f485bfbf198a0f2e15bb653bb49fc42e3c704889a2d56b0
- MD5 SHA1 SHA512
LanguageFiles/fr.json
- SHA256 8c16b2ceb44344045d2b0f15c691c6c58e8319542a421690c6a3055f5c7cb2d1
- MD5 ebb208a1afe09384c02964c836b359bf
- SHA1 0c69cd552e1f3e3f26b666645e5306797cab7bb5
- SHA512 b6ee195e036620589832f5a6ce09845baec0abba792e850a19b7cc9faba86580c3d7ca16c5fd33cd000a2266be7f709993433f5cc8e1941e5ae74bf55ad524d9
- MD5 SHA1 SHA512
LanguageFiles/ga.json
- SHA256 e3566b3a06430868d71e9287dfd6c6c520a3da027aabea01951d407ee131dc2f
- MD5 c443b04d0fc26b0a5a4573a78e0082a1
- SHA1 3c957535345645dce7190b85eb10b39da96b2518
- SHA512 7bbf6dac485c9e59d02edabc91ff5b15bc1319cef6905c0077ee16e3b1f572b61bff85f2400bc0f5b4aeab0260bd5d68787d72c7a688d79192952f7957a44de3
- MD5 SHA1 SHA512
LanguageFiles/hr.json
- SHA256 25eb008bf32d560072c033f7c61ef0cb9da8aee018ee0e4d68f6c37652923128
- MD5 539f5452bba478785793bd206adec79a
- SHA1 c1c67f1e23a90e305d6d4719e49983875e56bf31
- SHA512 a5aefdac98ee505d2380e35d30ff7917d532de763ff332df48fd580e229d55714a61c5616defed47e8696ccd032f2045a373b221bf7d8e49b5fbdff9f69aa564
- MD5 SHA1 SHA512
LanguageFiles/hu.json
- SHA256 48d6d3580b05ad92d3103685d08537db80f1645246f128c788cf053243273009
- MD5 f5bd5341056dbfaf8b3b034139d60581
- SHA1 75657b5cd797bfdf6d61a4ec712bf9daa6c3ed4c
- SHA512 f9bbbbf13e5a30d05df525b44196ed8545a9794286e04c17d771fa6d05a65ae1908d5299700a10323d6f0f44eed9470fa57c77795b23886c72436b59c85e2709
- MD5 SHA1 SHA512
LanguageFiles/it.json
- SHA256 d29d4f230cc3d953a2f45918285d5e92d80c9b961574d23076f20f590feb5437
- MD5 7f483ade653105ae13b49eb0faed930f
- SHA1 0b84a05b0cffeec53f2d0919703fd276930d9a87
- SHA512 a8bf439bbdaa1d0311d77eb8de81cc173de5fdc6a56730032c1cd97ca35616b203aee2dcae65703ce0275192929d50fa4b430e88195f395647e12fe2d5cfd0ae
- MD5 SHA1 SHA512
LanguageFiles/ja.json
- SHA256 e3566b3a06430868d71e9287dfd6c6c520a3da027aabea01951d407ee131dc2f
- MD5 c443b04d0fc26b0a5a4573a78e0082a1
- SHA1 3c957535345645dce7190b85eb10b39da96b2518
- SHA512 7bbf6dac485c9e59d02edabc91ff5b15bc1319cef6905c0077ee16e3b1f572b61bff85f2400bc0f5b4aeab0260bd5d68787d72c7a688d79192952f7957a44de3
- MD5 SHA1 SHA512
LanguageFiles/ko.json
- SHA256 8c624ccf4feb01b06ca660880da289d8001049e1d2b3ca5f916a39d9f8d02467
- MD5 31073762657252be745460fc44a14a15
- SHA1 e33fecaee2675d40d5cf3695dd3f05481f741e8a
- SHA512 15dab495cc9a60874d9ee42b847c649a9faf0aba3c664f338e492ca5299ee51a003003b2fffebc03b04bf1e6aff9e40b10369e41d7113a5e5b614b2d139a1bb3
- MD5 SHA1 SHA512
LanguageFiles/lt.json
- SHA256 52f93d329436e88492ef6329bf8bd11cc27d6e83dd9d8fc8da02daae4d51476a
- MD5 56bf18007f698cc528239f0d127d7b33
- SHA1 b9116d3dfaa954e0b003d925f325296f5dc81a79
- SHA512 1b8ac97a9911758a9107cfb6fa05ad945124a27a9bc01db97c165c4cbf37076812804f4423f0e92b984afcef4471d445966be50ebbd5d015cc66227bfb93217b
- MD5 SHA1 SHA512
LanguageFiles/lv.json
- SHA256 37185a09ef3c4dd9ca52b851abf0d8ed38fbaac7d7de920d20ae75adcf0053f4
- MD5 ff57563e16ef8e13569394265489324f
- SHA1 7e8deacfcd9ab197d788098daab190e51724f1d4
- SHA512 15639ed4d46584ecba6726bda476c998407913148dc0681e7f148af282f979584c6809e63016483bc49e90c484de2ab785268660ca897324bba07132fd034875
- MD5 SHA1 SHA512
LanguageFiles/nl.json
- SHA256 5c06526cee69a79f26909034dafaad3832a0042b192cb680c205cdadfd61563b
- MD5 f34f2f4dc61098fc5e38935c9197a887
- SHA1 f9e9f467f86380af9478d2da5dc482ac8f2b0196
- SHA512 1e8573a3acaace6b85916455f33767799bd1caa970dc284851b556dd7141af1e857a5b6ff59cea903895d0608b1788d118b2547f4861ff4511befa6365b09c2d
- MD5 SHA1 SHA512
LanguageFiles/no.json
- SHA256 0ce75cace4bf01e5c02aef8605f77dc75ab828a301235fce47d6f7dcaee799de
- MD5 2f42a06578866b52b440e41171ecbb68
- SHA1 30f8d27efdfd9d409990037ef64afcf5275cb02b
- SHA512 1d2a81913d8f249872afb156cbc64a131d80d267e7051e3434832d4fd111e2a1279fd1f7209299bf2d8570f81da861ab98bf0314ad62540551c7ca1844c9dea2
- MD5 SHA1 SHA512
LanguageFiles/pl.json
- SHA256 b23be12492a91c1fec451dde32d986f970e22a60ab266fd7bf100e7d0eeb1784
- MD5 bbcfb56398bfeaaaf161fe6af4493503
- SHA1 3415034535825598b99457a76c109c8f46a23d4f
- SHA512 2d11372573905a08ef89ce2b4dc1c44ff73b3173290347cf6bd3c07b8c84c51092003e58ac5b92d45c7fe8d59a008063085b4be74fa91e81eaa2c9c7cde9fead
- MD5 SHA1 SHA512
LanguageFiles/pt-BR.json
- SHA256 0d808a9e4a9ab3c2b167455be693a4bd0578fdd9455e7bc1cafdd3c7ff603e85
- MD5 5f797541a6ae1d889e9f5f70ee51b714
- SHA1 520d454c76ae5cf0007e186728b4999f1484e879
- SHA512 d31269c07a8d1133201f078798e67c5a8206e428dd001a1afdfdc14919588f8666bc676d9892feba3a9c1c005fcf1e944bc50211cccd9610dae36fafb3f5242a
- MD5 SHA1 SHA512
LanguageFiles/pt.json
- SHA256 22ac1c203a5d5efd68f22342d07379db38c4943293318f387bce0404b805ad2c
- MD5 7bf6368d35dc2636f69324acdab2c2a2
- SHA1 bb503e0caa17e5aca359d4199a3ba7c052308017
- SHA512 e52f28616b94c384a5a93416901e15e9206b0471fdf82f10353525badb2aa27c8803694bcb3d28a4344301275c68c0242aa5d00c81f80b2c929503770e2123fb
- MD5 SHA1 SHA512
LanguageFiles/ro.json
- SHA256 e8a61c40bbd0520de76db00cb69d37731cf23b013101e6164017be6f03de4aef
- MD5 4f8e402990a28d6806fd22aadffb357f
- SHA1 7babd3f8297f67ac34b2c8522d286b4b2f6ff9b3
- SHA512 d3981d428adaf500da5032f97e846164cebed375a17f24b79b88b5d6b4f2619b94b94ec8781a7439ee0c55cd9fdede56c53cd38975a524e0d04663f242e23fc4
- SSDEEP 96:8pDtopMX4yAiHh5LJnwdZZ8PHF0jvu8x4J5/WpZoZNv45:OtopMx/h5LJnuZZ8PHyrua4J9WpuZNvC
- MD5 SHA1 SHA512 SSDEEP
LanguageFiles/ru.json
- SHA256 73aec548043359b9f2d2229b54d07110ad4c98cbf365de6884ca19dcab0f1c33
- MD5 b2a82ba3d88d6da5f9d4d8e892fcd794
- SHA1 5fc318c35d2c6a5a42b8d24b0807579c2e61b1d5
- SHA512 56e65acd38217b919007cc679204ec24ab9e2fcddf9482581c80d287926dc9d79f55f48a4af55d6048b481f54a44eb0bd71d2436c1e3f0c775ea452219d5a901
- SSDEEP 96:bN7LRJLpD4hyyWn0CScsw2hui+XHE0F+6y7P3m7MA3T:B7dJLpMhyzn0CScswmui+3Ehp7P3m7M8
- MD5 SHA1 SHA512 SSDEEP
LanguageFiles/sk.json
- SHA256 c5e7abea8124f86d2550fe5e0079865d54420e4927f746787b3e725b73458509
- MD5 958163b4e58c10b9566eb7da0a960e57
- SHA1 12a8209442a84afa0793c9b73d25fadef2f5214e
- SHA512 7b928c1177c1f2983e8e726eea93b10e48b9419a54152b5187a06b7a8a6599b5a4c53d2b19c6767efaace6f976147ab997a129ff2c93745db60efdb0cec7aa4c
- MD5 SHA1 SHA512
LanguageFiles/sl.json
- SHA256 e3566b3a06430868d71e9287dfd6c6c520a3da027aabea01951d407ee131dc2f
- MD5 c443b04d0fc26b0a5a4573a78e0082a1
- SHA1 3c957535345645dce7190b85eb10b39da96b2518
- SHA512 7bbf6dac485c9e59d02edabc91ff5b15bc1319cef6905c0077ee16e3b1f572b61bff85f2400bc0f5b4aeab0260bd5d68787d72c7a688d79192952f7957a44de3
- MD5 SHA1 SHA512
LanguageFiles/sr.json
- SHA256 053ffa7d62a70f45eab50c2901c511a1553aee2bb50f87d7a95063f8f24e891c
- MD5 e86a413e6369ba5dcc55f67f63b56dfd
- SHA1 ec7a35e62d86b3189567d70a3be2dd43aa2c6b51
- SHA512 0af49cecda605b5f8112849c6ad5749dc32deca881fed2d26a5fd7e3ec7970322a01f8e08cec79a146a8baa45e3a98988c469b827457bbd525e24510de93b754
- MD5 SHA1 SHA512
LanguageFiles/sv.json
- SHA256 807047c5be7b0e9735dae35818e2bf96d1b22534321f8dde37ae4af6cee19389
- MD5 7785e5c964345e11dfc645304b0dc380
- SHA1 33fe3d63e3ebc35f9ff5752196a22ce27d7c7060
- SHA512 4b5961f00c16231cb8f14d844f4df8660b586de41e549ab9e7a272bb7a05e2f0cc5d63866acab5323001ced6fbd06f6438224f3a8a4eef2f8510a06177c88511
- MD5 SHA1 SHA512
LanguageFiles/th.json
- SHA256 8831aaf816b437fce1307117134deceff5db6bf17e9ee8dbf934676bb974408c
- MD5 3e244933a2d95bf85ca47256f4983cfa
- SHA1 0fc5a1784e826cc3e44aa83e97e17ab1df4c54b7
- SHA512 d75bc29110cebe90e80ce48a80d079b720edc967b4dca83aa801446cb4148c7568ce4d71a43ac6b4ee0db3860b1aa96c7157d5c27768db84cf220c2371e2bdf8
- MD5 SHA1 SHA512
LanguageFiles/tr.json
- SHA256 f9f44a0e0f044cddfd730dcbbae96d9807acf4e47c70162135e1e77fc65a5bbb
- MD5 381b71ef8196138e9601fcc56c6ce1e1
- SHA1 9989ea182b37ab253890928760e8ba1059f5dd1a
- SHA512 e492eeef90917cb3d31aaa593664b307fd60aaa3dec6139d6daebcdf7c3ae55e911080c45a6119499ee8986167e60b75fba76cad84b62c9783a5737e80304185
- MD5 SHA1 SHA512
LanguageFiles/uk.json
- SHA256 bd247e9c5916399a1bc03bf70ea3ea84933117e36ac4913c933945554d022498
- MD5 45ae52bd821964d3deb9f46b857e1fdc
- SHA1 1c058f21a46218d9e111ef6ef29389619bff6bbd
- SHA512 8ec79b1bbbbd91b17fbe011101e317f794cb31709e1f6fa2c7bef21be49596c6f18a613645d685adaf2da0d56987269017f774d256703f3e0410aa386d06e3db
- SSDEEP 96:7E239hF0yA6TQj4s2sdzXV6634NhbyOLjoED:Y239hF0LAQj4TyFR8huOYED
- MD5 SHA1 SHA512 SSDEEP
LanguageFiles/vi.json
- SHA256 39524022f4f36da1ec8738fd1fc92c089d50ab92550ad0fe02b5e06b9cee7d49
- MD5 3514c5b1c938dab2a3a707d8bda96fa5
- SHA1 1f548165e9f8ec686f6452f79694d27eafb5c349
- SHA512 83f7821e77a148fa4ac1e3af9c1a5f3f1824bc496f99e9bb06e3ab16459f662388d8019eeb4bf6e413c9cb60e5af94e4f4130b3bb9ab3a34e258da59c60c2fb9
- MD5 SHA1 SHA512
LanguageFiles/zh-Hans.json
- SHA256 c6ee05c7a4ec0dbec8655f678c5e7f521ac480a9ba5a8283a8a9e4b40d67fd40
- MD5 e3baa7baceccc5a5ef3bfb1801510806
- SHA1 ea4bb9c34afa8e2b0a0474ff69dda899f425e576
- SHA512 5bb203e8a1fe40f8eebd9e3c98d873d34a36d7a3cdc0e70ac93c4b11da51d1500c1180043fc604fc512e45225b0ac0623862be0e63d7160a74ecd26d34e6453b
- MD5 SHA1 SHA512
NitroxLauncher.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9c34793ccd4cde1297ed243858b6411305201b95e86d1e99cf493a9a51b88e5c
- MD5 e801cd1a9af46b219768d79f7d2a2b98
- SHA1 a2e939298aec1770b0079284b5bc275ba9cee517
- SHA512 48dee9078223881716bd1360881233b6a99df3c1f6063fe69784e77243ce55e988fea1365184de69b4f1724cd59ac02d6e8deaf7fbf00eae82301122c09e71ee
- SSDEEP 98304:fUqYeHg1UsnKLycqQYcDcwuavRfFujF0NpIl:LU18yArhvRfFujaNOl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3601450
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
NitroxLauncher\obj\Release\NitroxLauncher.pdb
mscoree
_CorExeMain
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NitroxLauncher.exe.config
- SHA256 749b8184de2e12e47bc7b0140840a392423a9e0b07a7f20afa54c237f61ee111
- MD5 07a0a619101800cc15c38b1494ab87ca
- SHA1 4c1dbcc4390d83503e2642afeb81292c214642e9
- SHA512 e22a0ad49e3bf7985c40d76b5b389f75eaab7165ca6811c0a173f64359f06d1276fec9e285f2aa8bfbed0f7cf9aa02ce614138689bec66c1fe09a552343e121e
- MD5 SHA1 SHA512
NitroxLauncher.pdb
- SHA256 c7d3bd0f7c870234e44778bac4d0692b7a96ddd2fbac68d7f3ad6587ed88ec98
- MD5 504d1bd687da54c085423754aef3bb9e
- SHA1 81b33cdc7bdb75815b0a28daf7fa6fa3d5264df6
- SHA512 d691b17e877157d8b23e8e5c2660e3f665c78991a8520a69c608cbacd16350203487e66653fc1f77be8cf44f0728c7cb1379bbc46eaea8416faf6f0dc1fc87b9
- SSDEEP 384:MmbpHw4kwC3e6ok3I2xkrL3UmjmhEC6T1ts5hGxkMsEnHyLzer3ahZcP1GLNe4m:M0tRC353It/3ZZUhGC/tzerkZcP1GgV
- MD5 SHA1 SHA512 SSDEEP
NitroxServer-Subnautica.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6a9c501b3f7442b5639171a3b3f62bfa37a02366b913e5bf2415b974f92ec15b
- MD5 77c090cdd1c3a3f5a8d3f24c6f3efb81
- SHA1 f8225d032a18c9d3a2935e164d8065c9203e70de
- SHA512 82548ef98c365d8e9029b9e67ea99f1745eac9d4697142c73757315068a2bd5a22314b0e76e64b587489b91d6425550a5135a5cc49a4b0a4cd531621dc5c114d
- SSDEEP 768:Cv1TH6xQt9tPSY/CBi8lKh5EPuVGePRM2p3QboZER04s4aCtRnC5b1BK3AK1xh4u:Cv1TH6xw6lZuFPJ6oZm0IrQ0Opri
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
NitroxServer-Subnautica\obj\Release\NitroxServer-Subnautica.pdb
mscoree
_CorExeMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NitroxServer-Subnautica.exe.config
- SHA256 29b6339edcb982893d7d94c3e5fe15e3d1af72e45ac0525e31bab7f85a878564
- MD5 5258b3e435706e2d5bf1374853e84d11
- SHA1 6275d78bfa1995151953593e0c1bff3b1ad05bc4
- SHA512 ba596623d108c0cd7125e8fd0cadd32d017c6ab611bbd8318dff83d09b3f584e04e97f11d3be03fa48a4df424260f646e56e66075791aa9d2cbbf9953c0686ee
- MD5 SHA1 SHA512
NitroxServer-Subnautica.pdb
- SHA256 457a4d72f7c9a892d0f536c391a9ebaff707b3d8444a1658e51fcddd7f042c8b
- MD5 ae86e9d9514d172b7b3c3c80af0070eb
- SHA1 4a29947108b50765661bd36a28ec8bbfb7ecf6d9
- SHA512 ca5571fe234e1e3d3ed156e71ed3a540453371ef94b2ecdb24aa410dce7bb36a997e9b54ff67564099fa8b5ed10cd1b0e8418bdff621f01bd1b8bac2aab48d86
- SSDEEP 384:tNdoBXAbcSSPmp5y9/oHGApbcFm5RxCV+xk51vC6T1ts5hGxkMeXa3WQsUdP1dML:ulSSPmpI3IhGCyDsUdtohpUHNW
- MD5 SHA1 SHA512 SSDEEP
Patch Notes.txt
- SHA256 a3ae83d6a6856ded75f218680311975a33fb46244f758a2a2993003552bbe645
- MD5 4e14b933546f892f24890227186a047f
- SHA1 56d4aaa4fa374a01003c83210e1505916035ce6c
- SHA512 67ce86f8de9bbb69543de4175e174a9d6e377caca63e4a021c11c3795eb7ec2d96790176b7de2f7afc652987cdf39f49dfd44887800bc0d8538ee4705b65536a
- SSDEEP 384:yV/pzko7Cbj+oNNvir4+vQ1nKqCcuSVcPmT34xMHHIlubJ:y9pzko78+oNgr4+vQt1ZuWc0oxMnoubJ
- MD5 SHA1 SHA512 SSDEEP
README.txt
- SHA256 32366989af758fecc70bac667cf654611247b21b3eabeb84e2a37639705ec883
- MD5 2dfc5a75810fb196351c14c13b1d9022
- SHA1 b99a2e5033ed09bc8ccf33eccd9e332d0f1674de
- SHA512 ad46dfa48bb4951434d23c26e8d776a0c1e5977201bf13a8a5fb7ac832cf8f26e2b456425aad8b60191ddc57e1acc533743b90feeda53c76f26bc3c355796da2
- MD5 SHA1 SHA512
lib/0Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fad4daa6385ce3be8d57311499183aa5227fca9d53deb6ea837cabcd7bea31bc
- MD5 d844903eeebc7aeb66f8f496c3f04fc8
- SHA1 2dcd60b56691454f1f25da75addd4cb2c7f08f95
- SHA512 e91e0a22cc330f0d5d6857667d6ae8f603e75d3d710b3fc580873a560220f8e50b188ca2c583cb04e80d67d828134bc768e747c816d9878da7e6d6a2aec36a2b
- SSDEEP 3072:Z4bJlQUaqpZuKOdHe0yjZ9S2j9RhuDVbuJQRZtzNw:XCOd6nS2BRhcuWT
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
195714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/AssetsTools.NET.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 957551dd052ecff87320a202e4e1377e126723ce6065cbf39b246adf6b6b8eba
- MD5 e24e1db1dd753701b3975640f6ace7d8
- SHA1 f5ab566151f2ca173dddf3bcf3bc53ae91b592c5
- SHA512 216fd3faf1b0cfaa8050906771df3b94126f13174e0484d29ccf2fc190c23b6bfaa1e0b2b4ed6761036f318398d9329f058c1fcba2ec762755d6412c2ad11d67
- SSDEEP 3072:qyOzHbaVsP8amGsg+vVVu/ub58Onwv3F42UKCXK4Y3GWH:q3zHwxoub58xfFeKCbMd
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
166050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\nesquack\Documents\GitReposLocal\AssetsTools.NET\AssetTools.NET\obj\Debug\AssetsTools.NET.pdb
mscoree
_CorDllMain
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Autofac.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a0a258acdd8b8544f100255b36956465aab30fbd557c27d7c1479e2176da3a6
- MD5 996f8bb8d5988ec942f1a412120e6178
- SHA1 e14da72f084446519a078e7706c74165bb458dd0
- SHA512 7cf1856afe8f4b5eeed4de48aca12f2e73e7bf38027c6b7e67f507ac6926d53f8200ac754650329e00297c4b893619151c88f1a0d204c49737e5d6d0701a89de
- SSDEEP 3072:o36EQo/nAmrSwxl6g6o9We/Bwdc2lSG+qR/EWJS6A6g73yRhxgByGP/aw4cQSOhC:oBclGKpT6zbcZAhdPSVuoxnBDPTS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
237138
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\autofac\src\Autofac\obj\Release\net45\Autofac.pdb
mscoree
_CorDllMain
Name
.text
Size
224KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/BinaryPack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb86d8edf03f0111c8f58a3ff03196aaf45b789e45e927ecec92fbf7627b3d9f
- MD5 6181dc681fedbb3d24225ee7f796298a
- SHA1 82758a1c0c695040f81098dea9dc2a722809da5e
- SHA512 8773b5e4d8b8de658f11abb2e40c6871b432823b8908d483b4a32e690eb9e6d197d9a6c09d6b73c36d862ffc423579ee75552da0a9701a0c44c358886e8ed2f3
- SSDEEP 768:gYUBEh9eHge0x+oRYsf7y85+iMsAU6eoubl7EUfCq9QsaROha0hnsO2XNodMsME7:gYU2XhxdDy85+iMsAU3Lcqj4G1ASHVH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\GitHub\BinaryPack\src\BinaryPack\obj\Release\net472\BinaryPack.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/DiscordGameSDKWrapper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4e674b22d2264fbc3b1598da44cc142d38aa0c6ae53f97f639ba16e08b1d3f3
- MD5 6fb764a15fb45a61e75bdaf1ec2ccefd
- SHA1 ab0432e02a6bb39c2c5714fdbde5ae4045a851d7
- SHA512 221f8244f4ed7a19ed7f52261202d2c8930c072c96735a3d52f58a8457a00409057bb04a700d664c45aafc9072fa5040703a1520bf72e271e6f54c1b804b56cb
- SSDEEP 1536:Svko7joOfR2n8EvgKWkj9PfcNJYjJ3DykxsCBetaCMI6/5lwj2lKy7FIudp9txxt:S5noOfgn8wMYF3DykxsCBetaCMI6BlwG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
103514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\GameDevZone\VisualStudio - Rider\DiscordGameSDKWrapper\DiscordGameSDKWrapper\obj\Release\net472\DiscordGameSDKWrapper.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/JetBrains.Annotations.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5177e397a60a587ab92934a415a5803c7e005360f40042fcdfe3c55bb78abdb
- MD5 955a2555bec853489dd45dcf7fd10c1c
- SHA1 842aac70dc0079ec26e936aa1ccf5dd4e1ddbbc7
- SHA512 2387d8e341539281f27dde35c5f49b19e8078b17bbf4d1bb638f824524686e0e8237564e94c14a26a060f4ad5c8130c0e968a31418ca517653214c6016fa8b47
- SSDEEP 768:iRMOA2DVADfs32zAAkLuLc85/MNFvqaZKWjoPDP3hfPmQvjcwo+YtxgAUTdyKL0r:i82lVGe7xOvzxr+LlrLBvl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
103826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/obj/Release/net20/JetBrains.Annotations.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/LZ4.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e4bed49f4aef35a4df8bd3090a74ae8ee1b1c299517247cbace062b64bc66c56
- MD5 3ba98ed918a22936c524daf1a8538ce3
- SHA1 758303b0ae09314963d13d2b6d077feb579001df
- SHA512 85ab5b561c9d5ec1a2651f6cf645cf2a5e27558b680c781e76f7cf7abde795a977b878ed5ff606c68bf6a8212eb499bf269155aef9b4de2ae4d1c3aede4de6ea
- SSDEEP 768:6cE0yWSGqN3LInEOkvhWfgwH/1iXt/DAMnxQv//9Yt/to7/ittxtxttxU+u1jCtp:6cE/WSGFnEOHgw9wtcWxQv//9Yt/tG/4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Sunrunner\Desktop\lz4net-master\src\LZ4.net2\obj\Debug\LZ4.pdb
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/LitJSON.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b13efed121cc3a76c859d3241684881a9c5a6fab12a9a91e86fc5d108c8dc40b
- MD5 0618e6e6e60c78b3dfe4933d487102a0
- SHA1 01fb560ceaeb1e1f63f3334eb9562140abb595d8
- SHA512 6796e63c0d83ff2c68ecb2a90b1ffbb1707410831353ad0c31c592cc2bdd569122e16d786e0f048e4ee3efae9a90360742fa152c754e75dd233f848491efde1d
- SSDEEP 1536:/vDkRnsWMAwZ4mnC3PColWXm8+T35o+bmO15:/vDkRnsAwZ4mnuCL+TpQO15
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
LitJSON.pdb
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/LiteNetLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 99faaa90ebcc5f18e4ac7186d2f2cde4aecd0b9b9adb20a167e06d0336684880
- MD5 7a056177ff891b3f411c18d796a41580
- SHA1 5b5c966f3ebba9902a4f209ef8fab10e4885a153
- SHA512 c25374c5fec295f9148f3a0874895134e103e37ad3b5c9825c7ebcb5f7d0a6f41b867e9f69327196a1c80037288a711252a1f34c0d3f35194912e6455958d891
- SSDEEP 1536:n+35NIlMxaeG72O6Zj+1+ivwrkSjqpJ+q:+35NIWft+MiYnm2q
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
100138
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Projects\LiteNetLib08\LiteNetLib\obj\Release\LiteNetLib.pdb
mscoree
_CorDllMain
Name
.text
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Microsoft.Win32.Registry.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e9a9d281c1a708aaae366f82fd6a1742f65da2918cc4fa5eaaaada0be24277d9
- MD5 59c48aacb1c413c108161afe13fdbed9
- SHA1 31ace4b26d8a069c84aad6001e06c2a5483806f3
- SHA512 8252abe64c67863d9e4c70e820f0c69c517b8678a4b4c13a436118bc276e5f21e84522b93566c0bc009effcb251ed67bdbc60e4907abea2f33b6be3764e28d1d
- SSDEEP 384:j4nLpSumfSQrlHViaCZYvLPQmlJLfjnWn6GWfdHRN76+fVlGsa9h:j4QVrxViR9mlxd96lv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f7:b6:99:b4:22:72:5d:60:72:4d:cd:e6:ad:87:41:f4:90:42:b8:ac:9a:00:ba:37:a8:a2:d1:9d:fe:22:40:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
22634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Win32.Registry/net461-Windows_NT-Release/Microsoft.Win32.Registry.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Microsoft.WindowsAPICodePack.Shell.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672
- MD5 54fe9a2748c4a0f282d4ec91e3cadc16
- SHA1 970b783a697d893ecd4916dd86b5ff7574896c9e
- SHA512 c7d567e3c039f98f3a99249b2d9bc2186c34efd73eec421331732d2307a8af940911381e27b015f58d0f65871bb4b038cc0f27d3fa495acd08994226bb033b7f
- SSDEEP 6144:KRAFnp++R1yj124hKX97kANqQHlWBwn9dgPan1W86b8c3v6n9c6KwZErn+LYHtA:iApI2D97kANVFWBwn9iPIL9Mwh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
547486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdb
mscoree
_CorDllMain
Name
.text
Size
527KB
Virtual Size
526KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Microsoft.WindowsAPICodePack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 418b5e7a96f9a6105cc6fe45896a9164e79c8849f40be23a411b5563a8e3a0d0
- MD5 9531b41519156855a45c46f0b379a784
- SHA1 00b857f09dcf0c71dab40c1a8c4c54d411fdb197
- SHA512 10034288101d235cb7af984fd6a0db11c7f56dbed648a71596b8b0c93f68d5ac5cf00be033153a91e71a311374b220507f07aa5b6e1849a80930d37a5c2577f0
- SSDEEP 3072:3BPJ2fTauHhiiWPCeOMt0ImL6HKgqYR1FliQ:3UpWPCeBHxZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
110430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb
mscoree
_CorDllMain
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b
- MD5 1c6aca0f1b1fa1661fc1e43c79334f7c
- SHA1 ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d
- SHA512 1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76
- SSDEEP 768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4
- MD5 6d5eb860c2be5dbeb470e7d3f3e7dda4
- SHA1 80c76660b87c52127b1a7da48e27700f75362041
- SHA512 64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5
- SSDEEP 1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e
- MD5 6e7f0f4fff6c49e3f66127c23b7f1a53
- SHA1 14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a
- SHA512 0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e
- SSDEEP 384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc
- MD5 de69bb29d6a9dfb615a90df3580d63b1
- SHA1 74446b4dcc146ce61e5216bf7efac186adf7849b
- SHA512 6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015
- SSDEEP 6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
362022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\obj\Release\net40\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
348KB
Virtual Size
347KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Mono.Nat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1119d22cb1ecf7c402a6893cfdfb92c66340d80cb7791f33c3502f8932284b81
- MD5 05164f22c0b8a36ef01309e78d07b241
- SHA1 618c2ea99a0994cf61fcd53d03f5d309fcf7dc4e
- SHA512 63991123b116be8bac9ef7ce1c2913dcc8aa966679215506994cf7d6f2d43f22aa6fc0243759a01c8904e3e6a374bef37666df78a1631d3894eafa4a3c638678
- SSDEEP 1536:s2CjOAhap6ntQDOx5622PAZVyJu7TZs6/JugDsb61Xy:s2DS769zwXZs6/K8C
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
74402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\mono.nat\Mono.Nat\obj\Release\netstandard2.0\Mono.Nat.pdb
mscoree
_CorDllMain
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/MonoMod.RuntimeDetour.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad262f74b7c71350b95f2b222f281d5f013a15811b8b6f1eda4404f209c5ed15
- MD5 eb49f0b61a7c53d369d9ed0cdb37b03b
- SHA1 7500629e55c5285954423d0701f5e3d6c4d7e98c
- SHA512 a40de9c13a3ccf45d743572c44379e1fbfb670a2cd674b1b2d88a0875117ee4f6a79ffcf9d61ed0971e0df7d608eea399f2fd87a987e20e5d2a773f6ad745824
- SSDEEP 3072:7HxL1bMURv+pM5HHWsaYlG58zAveC2pZ:7tOUw25H2RYlI8zAvu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
113554
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.RuntimeDetour\obj\Release\net40\MonoMod.RuntimeDetour.pdb
mscoree
_CorDllMain
Name
.text
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0ae1ffbd5e761f88c723d34581ddc1ab93c622ba2f5c938c42fb639da405e113
- MD5 4eb70dea0151b4fa6205fe90e3cd0d08
- SHA1 a39c9692ae2a58cf985d23369fd7f292b168ff12
- SHA512 537846b97ef7df829acbe93aa7dc08910a45a2d50022dfda239e6ce7326323735371b82013cb72c59801b69727975f211f8b97ba8a1d979c13a3c6a85275172f
- SSDEEP 3072:vdL+ydm5dPMsWWVm24ij8QCkMrCvv9vLhBhZk9TuT1eylmseFJuh:B6mshbj8Q/vlPkeRKJu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
200862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.Utils\obj\Release\net40\MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- MD5 SHA1 SHA512 SSDEEP
Digest
8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
696798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
673KB
Virtual Size
673KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/NitroxClient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2709adf96cc05dfe6224dc4be96212f13e5692468da8c9772c3aa9b05a1d34ca
- MD5 ddfae289d082d6f45199ae1fec630d83
- SHA1 31b1d96c005835dc6200d1bd7b5a8b6daa75e07c
- SHA512 28269614b5ac22ecd97d34882ab1898ecf16915cb035815983c1bba63cc3853203a23c61b5f5c9e1bfafb87ac347bf3e535029753925edf9e2a21db481f73944
- SSDEEP 12288:+8qDxEGo5+2m2G22v3H56TN1SCgITCw1Ium4d9Tq5zXIhQ1oOP256BjgXcLhvKs1:kxvoTNlOP1gXcLhlZv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
538182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
NitroxClient\obj\Release\NitroxClient.pdb
mscoree
_CorDllMain
Name
.text
Size
518KB
Virtual Size
517KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/NitroxClient.pdb
- SHA256 776a28a54ba63846db437f4547d6abb4204596f2e48ea1c0596e8103a00fced5
- MD5 390ca659761717bd5c0fa0d9f873034c
- SHA1 ac249d6d9eaddad37912e3f00ff303f3d0004942
- SHA512 a88538af40b056caac61267bb8c85dceb2de893ad1cf5ed9ea12217596b797f41c044ef6c6b608dc2ffbf831053bdc50200b7c74c129dcf223a730aa6f44ade4
- SSDEEP 3072:6Gecaj0f3WSraJl5djQFJfkfxywa9RmhxhGwiRuh6FVwjLHGz6:6GVaj0PWbJl5dMDkZyrmxhnh6T8d
- MD5 SHA1 SHA512 SSDEEP
lib/NitroxModel-Subnautica.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f98a438b86231ee25d72eac8bc32ab0a828d8c032fbe127dc3392d1fc4785f05
- MD5 8a87dedbe34fd9619df25b052712d6fc
- SHA1 1a3f7b435ccd5e670a2fd07aaec9bb43cf5d8603
- SHA512 8b52cf44aa6508c03e56b222597fd85451a2a40407ff2cbbeac7dae32230259f216fde874a90c5caf6cc954798aa925488560ccbf9054ee4c2da7c7e3a528424
- SSDEEP 768:rtfzC7NxQzMiLyrbA76h0mo4jCzOnE9EKJzgGT6lii1T8:rAuMiLyrbel4jC79P84W
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
NitroxModel-Subnautica\obj\Release\NitroxModel-Subnautica.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/NitroxModel-Subnautica.pdb
- SHA256 5102766a00514132006377e9d1727f13a73a1d3cde2422575db990d26287105b
- MD5 d8844fe5bba3798e5634df60948b7f6f
- SHA1 0fe879f8261f1a1ab1542e7f4670852d67fef7a1
- SHA512 990e295d64fd123fb8f3babb8717b089fea8312f87dd2ec124623d3b60a369bac740239c5288be8237bffd0b5a7661813d542273694a47b602a7793e3e8882fa
- SSDEEP 384:7eQJ5J0Osl1HiFTarnNI9e1RC6T1ts5hGxkMFONDtuTlkrm:BJ5J0OnFTap+eHIhGC6Olt8lsm
- MD5 SHA1 SHA512 SSDEEP
lib/NitroxModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6bf03b400e80d210108f51884adc8bfa038cf4d2f17dee64e4746642684f771c
- MD5 a9f052f7b1f8ca4e5ed949c881b38ec8
- SHA1 2c751c2214409fe911db9330d646b8e1965e2ff7
- SHA512 9e1371358ef8232441876bda815deb8c35276d92c9962308448a366dbf860576f4f6c84328007217448261c597593cc9185141a927fdad4b4f4e705207b9daa7
- SSDEEP 6144:07cBigawt7cDYF/zCAkj8G6mfOP7ibYYSXLrSm9:07c5awt7ptzCAyvOP7fn9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
234898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
NitroxModel\obj\Release\NitroxModel.pdb
mscoree
_CorDllMain
Name
.text
Size
221KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/NitroxModel.pdb
- SHA256 7151b492fba729076cd03dd54f23051fa8278919d2b03f9b9b08f342f1049aa3
- MD5 dbecd2a8c3d5bb05de3107764e0e0166
- SHA1 9c0ee718abd53f188c9ccb37c5938e4e2169160f
- SHA512 59f2a1e5a059bc4535e73c5404ed57d0012fe77e08386545fe9c01712698a2a073f73daea20a0789ba1c42012dfc1a170b317cecf602647f798642c740e737fa
- SSDEEP 1536:kRXlpLXkFCkeHg5umHlDgCtramFTxMsxcZFLpy3L9o7pvc2zmq1yC6f:kRXlpLECkd5uelDgCZae1cZlpko7usm3
- MD5 SHA1 SHA512 SSDEEP
lib/NitroxPatcher.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17077629958eec175053e0e596a6b3f633dc2a55db75ecd9cf18167a2fe8700c
- MD5 9b43f0a00935c270799990321f762402
- SHA1 262c8dcf66ec0865391161d85b4b55f3e288029c
- SHA512 a9c3247d90bd098d736d306cae5b29af245b70a71d6a6cfac2c292b24dc33999ee21bcd1cc73e1279f385b8a1b89339e2f6d79260a5aa6a7fbbe2d4ff340480c
- SSDEEP 3072:YIvkQ4HNbf7x48tolHDOMe5/F7snlkKsgfzwmCeiCffZzxfl9JF:YIiOjde5/F7IlkKfzwl2BJl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
197754
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
NitroxPatcher\obj\Release\NitroxPatcher.pdb
mscoree
_CorDllMain
Name
.text
Size
185KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/NitroxPatcher.dll.config
- SHA256 775b821a4b95d9bf45b6f924ad8177808e8c015430f7ec1dd68cf72fec77b528
- MD5 eedc5cf14768398678b0e33ae76d698f
- SHA1 4c4bbe481ebbf2b91aad494ea44e9501ea7b3f38
- SHA512 86c768c4710a27b381ac98f1d7a7da574b85a5aeeb949b8e6d01cfd05adff9c179cf0af0bd76e7ad13489156a1e8e400c5bb18152e949af541fef1d48d4d68ae
- MD5 SHA1 SHA512
lib/NitroxPatcher.pdb
- SHA256 a40616d820c3f20437a3c72c9db8d5ae72ca60a83794b560c2f235d661b501da
- MD5 96564058189c75c3e901eb3762bd781e
- SHA1 64c497d44f0b6dd8b0d0c7fa87683bd67453338b
- SHA512 fda3b66b6c3678e523cfa35619f4769a5bf95a69f0fa2c698d4efd3b88d18fd2acf172702152f8235f7d12b08ff6b4790122247bca2c6e7aabf5b9b4b52f43a0
- SSDEEP 768:I0NazEAtQhnhEplDlo2aVlIsl/qldaOIk0bFL4Vh87uGIhGCh3cb244m0FEcgnGQ:RNazEA2nEL5oj1mdiSP8uhGChHIn+O7
- MD5 SHA1 SHA512 SSDEEP
lib/NitroxServer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7ddea8c39e0393827329331c05629a3f0b33bbb25a2160afdfbb3e7f828be7e
- MD5 086816218c8e75782892150d1101b2d1
- SHA1 93da0554715b310264e60f166cade17fa32746d0
- SHA512 64489d90f5e5b2cc4ea0b9a7e8277ae09a287c60f60c7b44cb22856cf87dc26eb0477d14a37804803195aff21a7f60a7c74a80a0332fc469016110c285a06f94
- SSDEEP 3072:JFWU8V/74sOdr4HHVmabmewRsJtMc/eYfgQYEfBbHKM4:JFWh7mKBvxt3/Z44h
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
193582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
NitroxServer\obj\Release\NitroxServer.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/NitroxServer.dll.config
- SHA256 cb614c1cfc8669b87de23146f99c4b21df5acf77efb72b9f973009f17e47efe8
- MD5 6c78c2e8b9fbfb36f7a32c5ff3438dfe
- SHA1 edb1bc3b68ad55bdaf33aab4ecb2dae212aaf88d
- SHA512 c7ab31011b884d8a68b596f8ef8c5bce513c9012d985ec84483082c88ebb56445ed0a8bd74a8ea3dd408109313aff3038470f5a6e86c784b2e53b21cb84ca8e7
- MD5 SHA1 SHA512
lib/NitroxServer.pdb
- SHA256 bf4b98d5e50739cc6a9f4b4409d21bfff63c460fc8a0c3af16bf50b2369a10dd
- MD5 798585e4b3427de8f625ae15bb09f52e
- SHA1 2908ce19898707923e4446f0480c0aa2d4990c77
- SHA512 cb6583ded82a6d1c5040c7545298d1c37444f70c79997dfae611027932c6bcf7ac41f3ed7fa00cd2443e75127df8614cc58703472b60c75c6b7c22368885b4c7
- SSDEEP 768:9izGHkMGVHJOTSu7cY+5T77mJRMCuoYPLvYkErxepQObgKgwFe/q3qiPagE:4UkvcTB7jYv0RHEvMYQOSwFeuqi9E
- MD5 SHA1 SHA512 SSDEEP
lib/Serilog.Sinks.Async.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b81bbdaedc06cf231f810b6eb494401c86a30eee8679db3bea2f86485b20ced
- MD5 44feed047bde92dbd84b3c63d8296b0a
- SHA1 98492e2eac15898b49b37e0bc35aca6e1706298d
- SHA512 932a62c2ed84ade0de8b443f8d247d79dd2aa7c8a3652d95c680a06f789e95e019a300e5a261b143f673985c2ebed59a9815798725ff92d11107ceec0e9e426d
- SSDEEP 192:E8Eu3/+RsgQPwrcVvr7zk7GIKmiE47xtTxcdAC:cRsgQorcVvr7zk7Gzmo7xpxcdAC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\serilog-sinks-async\src\Serilog.Sinks.Async\obj\Release\net461\Serilog.Sinks.Async.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Serilog.Sinks.File.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9
- MD5 c25357a7950dcfc7f85ee9d593cb1a24
- SHA1 6a533712852465ab3c11b5c76004312d6482f07f
- SHA512 30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6
- SSDEEP 768:0E4c3g4vuh+t/j7zAJ0eBHdDaXRrbNoihV0gZ:2ktt/Hk2eCXR9/p
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\serilog-sinks-file\src\Serilog.Sinks.File\obj\Release\net45\Serilog.Sinks.File.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Serilog.Sinks.Map.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56b64736395218124060118218ccd6f5c903a4150fb99772f376c0087ba6ac0e
- MD5 c0c7a206fa219625bcbdb499ee19b82a
- SHA1 16f964fb56c93a972c64067b68291f731b0c1a90
- SHA512 703d21f9b07c9e1b7a384e849866a9cbab29c25aa13b30320619029e1eca631246177391e52833edaf1f7cf37b232d441a4acc5237f9deef22c9a06ce0b66f08
- SSDEEP 192:rVyUgMkb6HgLa8/RSHdClmzUXChIZuu+t08vMt+Al4k3f4SjIoJsZswP7T1a6oXH:JkbYya8/QH6mAwFW9+Al4khjIOsZsM7U
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Jannify\Desktop\serilog-sinks-map-dev\src\Serilog.Sinks.Map\obj\Debug\net46\Serilog.Sinks.Map.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/Serilog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a26a473af5eb7a00196e275c86d773f36e1d4caef566f97f1df7e07e20b1670
- MD5 0aa45a8a1cd24cd2b589e4aad925f35d
- SHA1 0dc29954c4c2ffea4c33af0e56ce84158849b81e
- SHA512 7a865b16633c09bdecda34fdf15c62db4f04f2fb8db0abf57563aea51de67daf9eca0c08f053f551937a0c3c7987a53de2454ecb13139a193291633df7262981
- SSDEEP 3072:XfwtSQoXux2ogH8I/eXXXXXPXXXXXHXXXXXTaXXXXX14N0QXVsABFkNfM+HFukRb:PwtSQoXux2M3XXXXXPXXXXXHXXXXX2Xh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
131618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Serilog/obj/Release/net46/Serilog.pdb
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Drawing.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca18383a2070518ae8c3e96cbd1705da283c8ada4ddf396217d2bcb7dcd03103
- MD5 3c2445d3095f82ec8a526e7843a98ba9
- SHA1 2f2c9d016ffc2bd7078104234e27ab2b010bd765
- SHA512 9cb5564ee52c1b71c732026d0bdb8414c09ba0037e12440f1d122644a977fb95fa4f9c13666053e4fcce811e265f9b8afe60fe1b007d9d2e278cf0d0a8c243fa
- SSDEEP 1536:4JbgUxvrIn01EkO/69KzwmOiGeCcSP8UIrdMe:41xvrInsEkO/AKzwm3C0UOdl
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
09:6a:f6:5e:9f:d8:67:31:01:58:a5:1b:49:9f:49:7a:9e:86:3a:1d:3d:5f:0d:f8:55:97:84:d1:14:6d:c5:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
48750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Drawing.Common/net461-Release/System.Drawing.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.IO.FileSystem.AccessControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6026501ad4056ff2f1655b0afdfe8923bc6e8fbad67e1e9ef56e3002f49fbb9
- MD5 3409c581f0c5083f0c2a93a7a5ac9790
- SHA1 18ea7bd41d31247148abf184527c9368a26f39e7
- SHA512 ae877c6fddad0e4133274e6372d783eaa4dd6bdcbbf40ab66302fb89bd2f76b215130001186b5c9a135abd16336c5bfd4d414177704d7d359539da91918e82ed
- SSDEEP 384:nmjoB5y+MLi9VYp/OiRc715ZkSAcE1l2Yd5zqNz8TWgVbWqdHRN7NfVlGsa9x:yCN9VYp/OiRcnZIfk8PpET
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1e:d2:50:3d:e9:f4:01:35:eb:3e:ad:cf:5b:85:64:87:da:54:69:6e:64:75:82:87:e4:01:81:b5:bd:9d:6c:39
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
24774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.IO.FileSystem.AccessControl/net461-Windows_NT-Release/System.IO.FileSystem.AccessControl.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e76318e8b06692abf7dab1169d27d15557f7f0a34d36af6463eff0fe21213c7
- MD5 6fb95a357a3f7e88ade5c1629e2801f8
- SHA1 19bf79600b716523b5317b9a7b68760ae5d55741
- SHA512 293d8c709bc68d2c980a0df423741ce06d05ff757077e63986d34cb6459f9623a024d12ef35a280f50d3d516d98abe193213b9ca71bfde2a9fe8753b1a6de2f0
- SSDEEP 3072:IUGrszKKLBFa9DvrJGeesIf3afNs2AldfI:jBFd3/aFs2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
db:b0:3b:7a:83:84:ef:83:06:3f:da:91:51:13:f8:7d:32:fc:46:43:1c:0f:b6:cd:f7:db:87:4b:17:93:f7:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
136106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
PE Signature issue
Digest
12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
103866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Security.AccessControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1fda491eebdb19ea0a83cf6c16ab5dd004a1bfdfc845ede017ebe0945beb927f
- MD5 996aab294e1d369b148d732e5ec0dfdc
- SHA1 28465fd34680a082506f160107f350b46140a1aa
- SHA512 5e6b172d2de5928915b38ec80c7b76f42430aac959f04aa3521c63495b6f3c4f82df139c275e9fc5024b1a0a4f307daade6130b6028779f98f456282ae8b61cd
- SSDEEP 384:jFGa3siuaS/bRSqtesyvaMAdB+w3G5h9MCZYsMfpcrqmf9wEJqIxVRvFNgfBkyNp:jAa3FuQwetxWBkyNE0MXwVP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c9:59:91:9a:ad:1d:21:b1:8b:d6:39:9e:9d:f8:26:6b:7d:ca:d6:00:90:a6:45:96:75:11:71:e2:68:64:59:2f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
30170
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.AccessControl/net461-Windows_NT-Release/System.Security.AccessControl.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/System.Security.Principal.Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b4d8e15adc235d0e858e39b5133e5d00a4baa8c94f4f39e3b5e791b0f9c0c806
- MD5 be2962225b441cc23575456f32a9cf6a
- SHA1 9a5be1fcf410fe5934d720329d36a2377e83747e
- SHA512 3f7692e94419bffe3465d54c0e25c207330cd1368fcdfad71dbeed1ee842474b5abcb03dba5bc124bd10033263f22dc9f462f12c20f866aebc5c91eb151af2e6
- SSDEEP 384:cEwo6eTs14YY4cWpOW6dHRN7FYpJAlGspU:VwDdT463
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
15:1f:de:b6:f3:56:f1:80:ad:c0:ff:4f:a8:55:41:ad:fa:07:51:b3:2c:1f:9e:57:30:1f:5d:fa:af:6c:1b:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 7, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.Principal.Windows/net461-Windows_NT-Release/System.Security.Principal.Windows.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/ToastNotifications.Messages.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 556dc81ceda593f828ec08ecf408b92686cf0cf14df4f04da3c9c83f80cce474
- MD5 e64aa8aa12f16c7397d95683206cb70a
- SHA1 8172b8bc3b027f36ba1182abf26609d7e401e4f8
- SHA512 1f3bc239f9cef7ea4baf6fb6524ca6aa71a6dcc3127b7da8b2dcfa46181e2e2a9a1f58ec026b3a49fb1d50157748795ba6b8dd83f81353f481fb50bb3693f743
- SSDEEP 384:WYwR/mt9tTSMLbdo1Fm2WYlV8a5Rp8a5Rp8a5RLxrwTTDUE7ogcGg68a5ROwNT8C:WHmt9tmMLbLR6330XUb9GYQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63274
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Mannelig\Dev\Projects\NET\WpfToastNotifications\Src\ToastNotifications.Messages\obj\Release\ToastNotifications.Messages.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/ToastNotifications.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ed1297117c8dba2b3880246721af5b74c6ae16d745bea176adbeefc1ee75f2fb
- MD5 ce4c69d4ba73105bf8eff333ff8d265b
- SHA1 28549362058bce91dcad5a13993f4f4b26f17530
- SHA512 adc3c6f4d6a70814eb665039f2ee8387522475ed90017d72a37a0a381bdd3d5dbfd2a5cf26afa01f53d0bc312ca568ebdb7d245cdb21f0808d021a92b450b624
- SSDEEP 768:ar7hqeNzclb+af/wFGfdpOOJWOQE9/TBLW/Uwm:ar7hqeNzclR/CWpKsRBLW/E
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82930
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Mannelig\Dev\Projects\NET\WpfToastNotifications\Src\ToastNotifications\obj\Release\ToastNotifications.pdb
mscoree
_CorDllMain
Name
.text
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/WindowsFirewallHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3ee09412d7e11f51efbc9a32298110bfb5901d89b39f53980aec1816c3aa7cdd
- MD5 5c3068377c99721ee6f0b6f2f76cc20c
- SHA1 7782dcf1228c95b70f9c3d5dc8d1709e10d72a2b
- SHA512 a0405c3fe6d9a589bfbc81051bb406fb31972118febd76d6f5efaabcd406e5fb0368e19a8130266d83fc38f53b98131ced7fc1fa9e841b25a95a43a03a1d4a82
- SSDEEP 3072:XKXEvgsJI4ewDrk8T5MlqCtLT66TYJ797jpv5OtLRX+0qfVLHdmu:XKkgnZmFMlq6LKzOtRq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
205822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WindowsFirewallHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
193KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/discord_game_sdk.dll
- IMPHASH 7630e2b3db583384d5348c364b4c56c3
- SHA256 a6b6d7df00a58dc50248d91048578d0fe52182286b487ef89a961fd10467dbd1
- MD5 4402cd4891c256ee40046c6092afdcbf
- SHA1 914e01743c7591beb79a61417b262caeb23e2c20
- SHA512 78da4181132a02d7d17ba4b2839018dc43d7d691c8bb01d34e5f7439df9c92951ce687e9487df158c44e764275b45d6800f6629ec2a175cc4ecdf868292291e5
- SSDEEP 24576:Q/NGmO/w02OFM7zWIyjQYS2tBMPfL+8T14rbXojA4F8eEcu2sqhA+cGRlZVIH06R:3oOiaQAtBMPfCn/WDcGRxIU6iIdAk
- MD5 SHA1 SHA512 SSDEEP
Digest
41:e2:71:d4:d2:0d:bf:87:fe:76:cd:b7:88:98:f0:d1:fc:15:5f:10:dc:99:b3:47:28:4a:d9:ee:49:b8:66:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Apr 29, 2022
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
de:d4:45:e0:a1:ac:c5:cb:e8:3b:b4:b6:c0:b7:1c:87:ac:c9:f0:0c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Apr 29, 2022
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
02:d6:aa:ea:b3:92:48:59:80:5e:bb:52:9e:31:4d:e0
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - May 2, 2024
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
02:d6:aa:ea:b3:92:48:59:80:5e:bb:52:9e:31:4d:e0
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - May 2, 2024
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Minor OS version
0
Major OS version
6
Entry point
2349652
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\b\discord\discord\target\x86_64-pc-windows-msvc\release\deps\discord_game_sdk.pdb
ws2_32
WSAGetLastError
bind
sendto
getaddrinfo
freeaddrinfo
WSACleanup
WSAStartup
WSASocketW
ioctlsocket
recv
closesocket
kernel32
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetModuleHandleExW
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
AcquireSRWLockExclusive
LoadLibraryW
GetLastError
ReleaseSRWLockExclusive
CloseHandle
GetProcAddress
FreeLibrary
GetModuleFileNameW
SetErrorMode
SetThreadErrorMode
lstrlenW
SetEnvironmentVariableW
GetProcessId
WaitForSingleObject
GetExitCodeProcess
GetFileInformationByHandle
CancelIoEx
WriteFile
ReadFile
GetOverlappedResult
FlushFileBuffers
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SleepConditionVariableSRW
SetHandleInformation
GetSystemInfo
RtlVirtualUnwind
ReleaseMutex
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
RtlLookupFunctionEntry
LoadLibraryA
CreateMutexA
InitializeCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
FindClose
ReleaseSRWLockShared
SwitchToThread
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetTempPathW
GetCommandLineW
SetFilePointerEx
EnterCriticalSection
GetStdHandle
TerminateProcess
GetCurrentProcessId
WakeAllConditionVariable
WakeConditionVariable
TryEnterCriticalSection
GetSystemTimeAsFileTime
SetThreadStackGuarantee
HeapAlloc
GetProcessHeap
HeapFree
TlsAlloc
HeapReAlloc
AcquireSRWLockShared
FindNextFileW
CreateFileW
DeviceIoControl
CreateDirectoryW
FindFirstFileW
DeleteFileW
DeleteCriticalSection
GetModuleHandleW
FormatMessageW
ExitProcess
GetFullPathNameW
CreateThread
TlsGetValue
TlsSetValue
QueryPerformanceFrequency
GetModuleHandleA
GetConsoleMode
WriteConsoleW
InterlockedFlushSList
GetFileType
GetStringTypeW
HeapSize
SetStdHandle
GetConsoleOutputCP
WaitForSingleObjectEx
QueryPerformanceCounter
RaiseException
RtlPcToFileHeader
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
advapi32
SystemFunction036
RegCloseKey
RegCreateKeyTransactedW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
ktmw32
CreateTransaction
CommitTransaction
ole32
CoTaskMemFree
shell32
SHGetKnownFolderPath
ShellExecuteExW
bcrypt
BCryptGenRandom
DiscordCreate
DiscordVersion
rust_eh_personality
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
821KB
Virtual Size
820KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gehcont
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=260, version=27412,
count=21, id=259, version=27412,
count=136, id=261, version=27412,
count=31, id=261, version=26706,
count=14, id=260, version=26706,
count=8, id=259, version=26706,
count=17, id=257, version=27412,
count=204, id=1, productName=Unmarked objects,
count=13, id=260, version=27045,
count=489, productName=Unmarked objects (old),
count=1, id=256, version=27045,
count=1, id=258, version=27045,
lib/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d04369e2fafabb36fdc31fc63b9a4bfd2bba577a203ee8180f9b084d9b344676
- MD5 e517eaeabd955f1e0f83ed04a0e6dd86
- SHA1 4a376b09ca00c7b934f6b444302773d0420ebd85
- SHA512 3c416235e0bb395b000b75f1358bde869c0ba2ff554b64821f5729f0580349fd8d1ba99ebc80e4b6dffa7b4741b4bb45570781d568fa9f5e3272de5d9108fe6c
- SSDEEP 24576:qM8euVMm3NxPkVCHKJi9n/PfuMs31MkZxxYyULZ4GBXcO1QmPyu9IFCh2v1DZS31:vhbivwS2IPx+vn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1165446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnlib\dnlib\src\obj\Release\net45\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
lib/protobuf-net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 741bef5c3c2fb0d81f68362dfd3d97affb7ca42a1ecd6e5ab31d700054e0fad2
- MD5 9bc371cc54cac02a4f017236085b4190
- SHA1 cd0f8c516575ad9a585e6b6f345bb1922312e9e6
- SHA512 b25b633fdb0c36ba5efd9530486ad948603127cff4b95100d58114df9ee4ca542336c14c7c29da430c442b419b159180a8f0209d7a615a3d36d6b0820c6e06b9
- SSDEEP 3072:JVvKkOhm4OX9AaEgULsm9r9whCO2+CIO40SSsd9cYX94I4:n3OM4yXEgULsm9e2mO4P7qI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
188638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
176KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
692B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ