S500 CRASHED DESTROYED BY BIG DICK.zip
- SHA256 511a99c70f3a3aaad381b3bf626e411b3b41f7a7cf3e040068a8cdddc6224296
Behavioral task
behavioral1
Sample
S500 CRASHED DESTROYED BY BIG DICK.zip
Resource
win7-20231215-en
windows7-x64
0 signatures
1800 seconds
Behavioral task
behavioral2
Sample
S500 CRASHED DESTROYED BY BIG DICK.zip
Resource
win10-20240214-en
windows10-1703-x64
0 signatures
1800 seconds
Behavioral task
behavioral3
Sample
S500 CRASHED DESTROYED BY BIG DICK.zip
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
1800 seconds
Behavioral task
behavioral4
Sample
S500 CRASHED DESTROYED BY BIG DICK.zip
Resource
win11-20240214-en
windows11-21h2-x64
0 signatures
1800 seconds
General
- Target S500 CRASHED DESTROYED BY BIG DICK.zip
- Size 82.3MB
- Sample240219-wjrftaaa5s
- SHA256 511a99c70f3a3aaad381b3bf626e411b3b41f7a7cf3e040068a8cdddc6224296
- MD5 5aa9ba2618a5e528af208ee5854cf2be
- SHA1 3cf3eb1d8339bd5bc624ac10e797ccf556b538ca
- SHA512 f9d65db7b6ee067092ec08d4abeed3cbf40f2d7ada1a12ebe20d737aac9b1ed71895c9f9b7b1162a75733b25b14a022147cfd81970fcb9e7808eed3f9d79e087
- SSDEEP 1572864:/JcbzDm3OZLuFkmVmzDmum6Whftzjat/Y34F1zBLgrNka51ML:Bcni3Gu/VmzWJ3KxYwANka51ML
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
arrowrat
Botnet
-
identifier
C2
-
IP:PORT
Mutex
-
mutex
Extracted
Family
-
asyncrat
C2
-
127.0.0.1:3232
Attributes
-
delay
3
-
install
false
-
install_folder
.
aes.plain
Signatures
- AgentTesla payload 1 IoCs
resource yara_rule static1/unpack001/S500 CRASHED DESTROYED BY BIG DICK/HVNC/Guna.UI2.dll family_agenttesla - Agenttesla family
- Arrowrat family
- Async RAT payload 2 IoCs
resource yara_rule static1/unpack001/S500 CRASHED DESTROYED BY BIG DICK/Stub/Stub.txt family_asyncrat static1/unpack001/S500 CRASHED DESTROYED BY BIG DICK/sEXYbABY.exe family_asyncrat - Asyncrat family
- Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule static1/unpack001/S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe disable_win_def - Unsigned PE 60 IoCs
Checks for missing Authenticode signature.
resource unpack001/S500 CRASHED DESTROYED BY BIG DICK/HVNC/MessagePack.Annotations.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/HVNC/MessagePack.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.exe unpack001/S500 CRASHED DESTROYED BY BIG DICK/HVNC/dnlib.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/0guo3zbo66fqoG.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/59Zp7paEHDF7luJ.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/9Ood5SWkbwPn.AnarHs unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Audio.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Chat.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Discord.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/EVa7gBMKoaHmLC.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Extra.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/FBSyChwp.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/FileManager.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/FileSearcher.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Fun.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/G3nl0mDcABnDuZ.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Information.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/K8oCBS3ThnW0WP.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/KNTmoSnG.AnarHs.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Keylogger.exe unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Logger.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/MessagePackLib.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Miscellaneous.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Netstat.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Options.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/PK0TcnqTGFagQTS.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/ProcessManager.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Recovery.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/Regedit.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/RemoteCamera.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/RemoteDesktop.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/ReverseProxy.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/RssCnLKcGRxj.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/SendFile.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/SendMemory.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/WkUP83aP9CABpi.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/fzAgyDYa.AnarHs unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/mML6WKMqdxjDGA.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/maSN8TBMgUEC.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/oYsKwDG.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/sJ88z8tsg5XzK.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/sc2.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/yL9x34D8X3oO2P.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/Plugins/zVvPGvK64uLS.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe unpack001/S500 CRASHED DESTROYED BY BIG DICK/Stub/Stub.txt unpack001/S500 CRASHED DESTROYED BY BIG DICK/TempPE/Properties.Resources.Designer.cs.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/cgeoip.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/discordrpc.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/dnlib.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/guna.ui2.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/iconextractor.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/leaf.xnet.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/metroset ui.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/protobuf-net.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/realtaiizor.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/sEXYbABY.exe unpack001/S500 CRASHED DESTROYED BY BIG DICK/scintillanet.dll unpack001/S500 CRASHED DESTROYED BY BIG DICK/vestris.resourcelib.dll
File Explorer
-
S500 CRASHED DESTROYED BY BIG DICK.zip.zip 82.3MB
-
S500 CRASHED DESTROYED BY BIG DICK/.NETFramework,Version=v4.8.AssemblyAttributes.cs210B
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Auth.Login.resources33KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Auth.Main.resources31KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Auth.Register.resources30KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Form1.resources781KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.FormBuilder.resources1.1MB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.AnarchyForm.resources72KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Form1.resources4.2MB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Form3.resources180B
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Form4.resources11KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormAbout.resources66KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormAudio.resources734B
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormBlockClients.resources69KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormBuilder.resources1.1MB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormCertificate.resources31KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormChat.resources25KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormDOS.resources67KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormDownloadFile.resources26KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormFileManager.resources56KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormFileSearcher.resources36KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormFun.resources86KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormHVNC.resources32KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormKeylogger.resources24KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormMiner.resources3KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormNetstat.resources37KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormPorts.resources42KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormProcessManager.resources66KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditBinary.resources67KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditMultiString.resources67KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditString.resources67KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditWord.resources67KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegistryEditor.resources72KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRemoteDesktop.resources32KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormSendFileToMemory.resources66KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormSetting.resources34KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormShell.resources24KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormWebcam.resources39KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FrmTransfer.resources124KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FrmVNC.resources1.2MB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.GForm0.resources25KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.HVNCForm.resources40KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Musik.resources1KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.notify.resources27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.GeneratedMSBuildEditorConfig.editorconfig384B
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Properties.Resources.resources438.5MB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.assets.cache10KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.AssemblyReference.cache51KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.CoreCompileInputs.cache42B
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.FileListAbsolute.txt14KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.Fody.RuntimeCopyLocal.cache3KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.GenerateResource.cache3KB
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.SuggestedBindingRedirects.cache42B
-
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.exe.withSupportedRuntime.config.xml 174B
-
S500 CRASHED DESTROYED BY BIG DICK/BackupCertificate.zip.zip 1KB
-
Usrs.p121KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/0BF43F74E5A957178ADB259AECF34CDEED24B8B1.costura.realtaiizor.dll.compressed.compressed2.5MB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/14995E7F1D12498606D9D209D78D55FE6FD87802.costura.siticone.ui.dll.compressed.compressed484KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/2309DE9EEDCF3A550AB03AD1885A15F6DA7C0083.costura.mintui.dll.compressed.compressed42KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/280A1EC5AB002D1AB15279B3FB0DE8DD3C4AA482.costura.guna.ui2.dll.compressed.compressed945KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/3252D8A70A18D5D4E0CC84791D587DD12A394C2A.costura.iconextractor.dll.compressed.compressed4KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/502B9BE302453FA99C11128461E8EB1951E1C5DD.costura.hzh_controls.dll.compressed.compressed5.6MB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/54A6743781FD4CEB720331FCE92F16186931192D.costura.bouncycastle.crypto.dll.compressed.compressed868KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/6C6000A5EAF8579850AB82A89BD6268776EB51AD.costura.costura.pdb.compressed.compressed1KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/763506F312A186C55A04EF6A16AD7E867C394097.costura.siticone.desktop.ui.dll.compressed.compressed1.1MB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/7D0AD03FBDA1C24F883116B940717E596073AE96.costura.newtonsoft.json.dll.compressed.compressed256KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B.costura.system.diagnostics.diagnosticsource.dll.compressed.compressed18KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/89662FED195D7B9D65AB7BA8605A3CD953F2B06A.costura.leaf.xnet.dll.compressed.compressed51KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/A1936AC79C987A5BA47CA3D023F740401F73529B.costura.vestris.resourcelib.dll.compressed.compressed32KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/AB588B8D36683B52ADCB32C03A9859B884838F29.costura.metroset ui.dll.compressed.compressed209KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/ACED007F4D852D7B84C689A92D9C36E24381D375.costura.dnlib.dll.compressed.compressed408KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/AD3E1CE93782537FFD3CD9E0BB9D30AE22D40DDB.costura.guna.ui.dll.compressed.compressed661KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/B0FD4F64E837F48682874251C93258EE2CBCAD2B.costura.cgeoip.dll.compressed.compressed1.0MB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/E2378A1C22C35E40FD1C3E19066DE4E33B50F24A.costura.protobuf-net.dll.compressed.compressed148KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/E70E10A18A3AE85CD1CA9BE66A7BB46D99CCCCD3.costura.discordrpc.dll.compressed.compressed30KB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/F0CD8253B7E64157D39A8DC5FEB8CF7BDA7E8DAE.costura.scintillanet.dll.compressed.compressed1.2MB
-
S500 CRASHED DESTROYED BY BIG DICK/Costura/F1F25C01F6ACF33BDD62C4F82D3EF078E76F0906.costura.costura.dll.compressed.compressed1KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Guna.UI2.dll.dll 1.9MB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/MessagePack.Annotations.dll.dll 11KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/MessagePack.dll.dll 325KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Microsoft.Bcl.AsyncInterfaces.dll.dll 21KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Microsoft.NET.StringTools.dll.dll 29KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Siticone.Desktop.UI.dll.dll 4.0MB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Buffers.dll.dll 20KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Collections.Immutable.dll.dll 189KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Memory.dll.dll 138KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Numerics.Vectors.dll.dll 113KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Runtime.CompilerServices.Unsafe.dll.dll 17KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Threading.Tasks.Extensions.dll.dll 25KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.exe.exe 1.9MB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.exe.config.xml 1KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.pdb30KB
-
S500 CRASHED DESTROYED BY BIG DICK/HVNC/dnlib.dll.dll 1.1MB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/0guo3zbo66fqoG.dll.dll 78KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/59Zp7paEHDF7luJ.dll.dll 4.0MB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/9Ood5SWkbwPn.AnarHs.exe 138KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/ActiveWindows.dll27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Admin.dll31KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/AntiMalware.dll29KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Audio.dll.dll 25KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/BotsKiller.dll7KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Chat.dll.dll 456KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Clipboard.dll28KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Cmd.dll29KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/DDos.dll29KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Discord.dll.dll 27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/DotNet.dll28KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/EVa7gBMKoaHmLC.dll.dll 170KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Extra.dll.dll .ps1 34KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/FBSyChwp.dll.dll 170KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/File Manager.dll41KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/FileManager.dll.dll 34KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/FileSearcher.dll.dll 280KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Fun.dll.dll 36KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/G3nl0mDcABnDuZ.dll.dll 177KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HBrowser.dll49KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HRDP.dll37KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HVNC.dll61KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Helper.dll4.9MB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HiddenApps.dll62KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HiddenProgram.dll42KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Hosts.dll27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/IconLib.dll56KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Information.dll.dll 27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Installedsoftwares.dll28KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/K8oCBS3ThnW0WP.dll.dll 373KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/KNTmoSnG.AnarHs.dll.dll 373KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Keylogger.dll27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Keylogger.exe.exe 10KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Logger.dll.dll 28KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/MessageBox.dll27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/MessagePackLib.dll.dll 18KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Mic.dll84KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Mining.dll4.9MB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Miscellaneous.dll.dll 85KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Netstat.dll.dll 27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Options.dll.dll 377KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/PK0TcnqTGFagQTS.dll.dll 174KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Password.dll47KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Powershell.dll29KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/ProcessManager.dll.dll 27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Ransomware.dll39KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Recovery.dll.dll 309KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RecoviryPasswords.dll46KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Regedit.dll.dll 282KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RegistryEditor.dll284KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RemoteCamera.dll.dll 109KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RemoteDesktop.dll.dll 37KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/ReverseProxy.dll.dll 14KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RssCnLKcGRxj.dll.dll 181KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/SClient.dll26KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/SendFile.dll.dll 28KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/SendMemory.dll.dll 30KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Services.dll28KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Startup.dll32KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/StreamLib.dll14KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/TCPConnection.dll26KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/TaskManager.dll27KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/USBSpread.dll11KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/User ID.dll39KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/WiFi.dll25KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/WkUP83aP9CABpi.dll.dll 175KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/fzAgyDYa.AnarHs.dll 181KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/lz4.AnyCPU.loader.dll985KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/mML6WKMqdxjDGA.dll.dll 173KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/maSN8TBMgUEC.dll.dll 570KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/oYsKwDG.dll.dll 4.0MB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/protobuf-net.dll278KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/sJ88z8tsg5XzK.dll.dll 172KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/sc2.dll.dll 19KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/yL9x34D8X3oO2P.dll.dll 180KB
-
S500 CRASHED DESTROYED BY BIG DICK/Plugins/zVvPGvK64uLS.dll.dll 234KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500.GeneratedMSBuildEditorConfig.editorconfig378B
-
S500 CRASHED DESTROYED BY BIG DICK/S500.assets.cache10KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.AssemblyReference.cache31KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.CoreCompileInputs.cache42B
-
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.FileListAbsolute.txt13KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.Fody.RuntimeCopyLocal.cache3KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.GenerateResource.cache3KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.SuggestedBindingRedirects.cache42B
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.GeneratedMSBuildEditorConfig.editorconfig384B
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.assets.cache10KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.csproj.AssemblyReference.cache24KB
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe.exe 464.6MB
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe.config.xml 530B
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe.withSupportedRuntime.config.xml 174B
-
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.pdb264KB
-
S500 CRASHED DESTROYED BY BIG DICK/Stub/Stub.txt.exe 60KB
-
S500 CRASHED DESTROYED BY BIG DICK/TempPE/Properties.Resources.Designer.cs.dll.dll 6KB
-
S500 CRASHED DESTROYED BY BIG DICK/Usrs.p121KB
-
S500 CRASHED DESTROYED BY BIG DICK/cgeoip.dll.dll 2.3MB
-
S500 CRASHED DESTROYED BY BIG DICK/discordrpc.dll.dll 79KB
-
S500 CRASHED DESTROYED BY BIG DICK/dnlib.dll.dll 1.1MB
-
S500 CRASHED DESTROYED BY BIG DICK/guna.ui2.dll.dll 1.9MB
-
S500 CRASHED DESTROYED BY BIG DICK/iconextractor.dll.dll 10KB
-
S500 CRASHED DESTROYED BY BIG DICK/leaf.xnet.dll.dll 129KB
-
S500 CRASHED DESTROYED BY BIG DICK/metroset ui.dll.dll 444KB
-
S500 CRASHED DESTROYED BY BIG DICK/microsoft.win32.primitives.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/newtonsoft.json.dll.dll 685KB
-
S500 CRASHED DESTROYED BY BIG DICK/protobuf-net.dll.dll 278KB
-
S500 CRASHED DESTROYED BY BIG DICK/realtaiizor.dll.dll 5.9MB
-
S500 CRASHED DESTROYED BY BIG DICK/sEXYbABY.exe.exe 63KB
-
S500 CRASHED DESTROYED BY BIG DICK/scintillanet.dll.dll 1.3MB
-
S500 CRASHED DESTROYED BY BIG DICK/siticone.ui.dll.dll 1.3MB
-
S500 CRASHED DESTROYED BY BIG DICK/system.appcontext.dll.dll 19KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.console.dll.dll 33KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.diagnostics.diagnosticsource.dll.dll 34KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.globalization.calendars.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.io.compression.dll.dll 109KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.io.compression.zipfile.dll.dll 24KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.io.filesystem.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.io.filesystem.primitives.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.net.http.dll.dll 258KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.net.sockets.dll.dll 45KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.runtime.interopservices.runtimeinformation.dll.dll 32KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.algorithms.dll.dll 38KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.encoding.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.primitives.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.x509certificates.dll.dll 37KB
-
S500 CRASHED DESTROYED BY BIG DICK/system.xml.readerwriter.dll.dll 22KB
-
S500 CRASHED DESTROYED BY BIG DICK/vestris.resourcelib.dll.dll 76KB
S500 CRASHED DESTROYED BY BIG DICK/.NETFramework,Version=v4.8.AssemblyAttributes.cs
- SHA256 af4c24efdd16c0cb3946e8e148fb6df4fc9c501c71cc718738b4728808737373
- MD5 e7e4dfcde604f38e91e42fd0e92033c8
- SHA1 100774f6122fa0433a6dd9dda553722981a924db
- SHA512 4f435e0a0d01a78b0ea0c0ed50390279414fec78ea0d75690ff7082ee9103723d7dbd1944cf74741ae80787102672b6f1f446983376904d028510b5b39ce6754
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Auth.Login.resources
- SHA256 8e3874bfa21ce80193e39960aac4fae06dc46c8cfc54e21a9b09ba4d5beea7e5
- MD5 2425e82dd6c0cff69860e5c7f2aa1b9f
- SHA1 e3c391b083d433124b245ba74b04eb7666f8c088
- SHA512 00fde33b53d6aadb8cf180f8e683e608ea804bd6398878067b4bee1d432698de4b69a65e895004b63208bbb1580f8fa828db1a8bb51fa179e9575a519565c09e
- SSDEEP 768:gxET1dnF0qVrfdswC8+cE4jVcqcq9oAfjUGDD:UMniqFFhAYVcX+fjZDD
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Auth.Main.resources
- SHA256 60aa144d544bb14c7e0954d46bebf4ec2eae8cd96615e93bcd052bc8a97b264e
- MD5 117bc21cf0f6ec1ec01433b284d1dab4
- SHA1 3bd8e52626147090d747b993b6147ce7ffd5cd73
- SHA512 694aacf6d00888a52588c1e5284984c982b7a0df6a4acf4190dc29899ca96accece3b9861caaa8c4214b338c8e1e84f923570999442094cce95bd23a735d3cb8
- SSDEEP 384:rkvwKwq6u2nIt7UU4MHb4XGjuyTL9eYxSnqEoUc+sSUk7669XFKEnRBGEHG7IW:/nY7Us+GrTL8nq/MUk7P1KEnRjHG8W
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Auth.Register.resources
- SHA256 860831d90923155f9771b99320e8861d007b13b2fab1f0941177eb3b5853a530
- MD5 fbd1bf29dcfc101dfe7efe70811ac6ab
- SHA1 04697f4de3d5b8ffef4f9fa45367cbfec34513fd
- SHA512 2b34b3ba557e5ba5af1383c50ae051a969c5ccce9aa2196958bdd49e300f49f74df05d7db40d19aed93b509831172683524324e21f71350b332ef46828fe1807
- SSDEEP 384:r0vwtokwXwq6usgAw0tOCJf/rDKEHjMol3IU50w4DYZTZoHvh4gJiHaQgwACvo1:fJw0tbQEYW3IUuwIHWIR
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Form1.resources
- SHA256 64fd884638ec318c89ca751aafe12dd715f548e7d3d8450ff6017e79e47143d8
- MD5 90ea7907f2fd2dadd68f729681b7a13d
- SHA1 bcdb56f7bf87f432a648bb5a799cf41d91b326a7
- SHA512 3b3c545b27bc3d94f6bd311f22b62e9f0f134a12d428fcb0e714cf8bc6ad6b3433d9fcc67b975f0b6a9d9eff46345137684410d2ac4372538d2493bb9a3c46fb
- SSDEEP 12288:W3PFSBlJEWCdfnesdwOX4B1xI2EXYT1XXpEhllbi3PU:0XW+eszXwxI2EITTEh3
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.FormBuilder.resources
- SHA256 03d4771b1a6544784b6809d000f2f9048601c6fddb87d719e16f4d06e59594ca
- MD5 232a52ad21fb9b318e79979edc2b6293
- SHA1 5c2c101a0e76f4c872f5ecfa44fcc9596307d67c
- SHA512 b0fe049be94ff15942c03a7aced50e4d49003a3cc48cb677da2b4be55bb051fc614e09c08b858fb70a750b2ff6c3155b36d1bea55498fcfc960dd5d0d52c7345
- SSDEEP 12288:kVK4onNBQcebch6MXNOQQKzlua/nhEVwOy9iQvy4VkGp6OZTRTk1DakFWhxni2HM:k1gWJbchddB/hPF9iu/VlTkFWhxniqhy
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.AnarchyForm.resources
- SHA256 6c8f86dd19fd357070a3bdca26cd29f949b612f2739ece57b19147acc0bfd8ec
- MD5 a63fc9d39e16febc8e32d253691d6197
- SHA1 e90f78c68bea4783dbb2e18ee3dcc8b72cdbd2d3
- SHA512 a0bafd2add203cbf3e76f33487b0fff5e76b17813c8e7252c83795fae408701a4e1ea65ba7704b20a0bac877ddbdd7d463574743890bfe6c93d024e55af9d55c
- SSDEEP 1536:9yavKlhw7PQ8QxCf1xV5Va0yavKlhw7PQ8QxCfQl:RvO+7WQV5VRvO+7Wjl
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Form1.resources
- SHA256 b77c2757d9ac608b4589af8e40c7a7f1dca5b62f065ff1921bf1c626a97b207f
- MD5 f9ba201f8b3850ee013bbd6f3962f79d
- SHA1 0d35be074a9d091dde991e1274bf52dc0d5c75c9
- SHA512 7c4c640a9a26237600976ed3cb6d4f9696fb53c4447ff20b5180e9c36d0e502b2a621e5af5837ea9b5318e1cd1ee55f4c66992e70dae64cfcfef76f89e339310
- SSDEEP 49152:yTJ2Ium8X2eVUFotfsb9du9/k7Dekf9qtfG4qqoYNW+eIavTECTJ2Ium8X2eVUFq:S5eVU2Muqt4MYg1PTN5eVU2Muqt4MYR
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Form3.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Form4.resources
- SHA256 65c8f5bef84c2472d26adb3cfed61d6b880f2dd0907ae6728c0a319febd79da4
- MD5 cfd7a9726ddff0a290eb82934eaec180
- SHA1 b4d117d4bd675cd718e6b5d28f05155f3491107e
- SHA512 f77952774fec69f3d303096a4bd6ceb54c3235b7d9080253eda664be9f18f7e7d0c4ed2350f594eb762494c545e3fd739e9a49c0e5efd9dbe75224f4c2e588ad
- SSDEEP 192:r0vwtokwvwq6k9NS9u97c9jcmAU0wAc2ga+claVvLqBm0gL74PlpCR:r0vwtokwvwq6uNNlnU0wAo5z4Bm0IsP8
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormAbout.resources
- SHA256 a5b9f5ccfe8ac46a630ac1cc112d343364fa2bc4a2bec0f3911322cff174cff9
- MD5 fa80841e3dc9ffb31dd5d015c1030172
- SHA1 aa0d9e66db2a8528edf9931fe132f18870307216
- SHA512 a38cc863d3c0c8d944340cd4116f03bbdb2f1526fb40b476cd0adbd444fd1dc10790d35eaf50ea34a1083b163baa82251a5048f075651bc14e46ac4cb82897bd
- SSDEEP 768:p+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRp:p4cBlKJj5tvmzaal4p
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormAudio.resources
- SHA256 8b945225bd6405b8f5dfd7e61f112a6c1499257ed9fd8e9aaaa3f13bd31bafc0
- MD5 e5de2034d927d6916c52a8f3cf8f1592
- SHA1 a8b768e10b90bb778bc92bfb8a1e464dc8d27643
- SHA512 03dd84497a2aebbae656f4306dd5932862af729167d42ba6df0685f2e631d892f9e0d1179e04663b5d0795d5567d3189f882d0a56b20e1147c4ebf4b09816d07
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormBlockClients.resources
- SHA256 5c94b0d59834952de6bdb2e5ed1027ae092ecce2a4939b333890dac29cd160ad
- MD5 8dd49bec0e4db61a254fbb2acbea2660
- SHA1 063d30446100cb8b30f41df7c6c98cce70b343b2
- SHA512 578794a0ee14ebdb0baa28b573fe9079cbe6de5c0e54c04e416fa1bd4927726a1a579de62b57903e4446987bc4109f02bee70913c59be7b3851a6e560baf984f
- SSDEEP 768:W+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRl/a:W4cBlKJj5tvmzaal4pa
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormBuilder.resources
- SHA256 0717194f7ea60cff1564cd00453985b3e07945f4dd35e9b4453ef3f12888cf3d
- MD5 bdbe0da4e58c1882a50ced7c8977450d
- SHA1 9f551bec3866b740d1ae72758c618a350764fc71
- SHA512 e49bf696f29447d469bac8aafab8b364c56b3c096979e7a8d3b2b5c609af0fe47d2b21d2473a639b1c2e5cdcc2c37e7f9b533b1b0b49331c9ca7e04f72829b0d
- SSDEEP 12288:BVK+onNBQcebch6MXNOQQKzlua/nhEVwOy9iQvy4VkGp6OZTRTk1DakFWhxni2HM:BrgWJbchddB/hPF9iu/VlTkFWhxniqhy
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormCertificate.resources
- SHA256 f5a82979ba846de728bac2ba41fd5ba77d12d296cdbfed8c7af5887823bcd2cf
- MD5 af2143da20bb93b54b2d0055fc618ae3
- SHA1 fd666f4c318d49a8b4a22a75aee8bcf8321e3cb2
- SHA512 564f95d75c715452e7521443df84e611d6d7a16929e70a2acf4c4b5baabe9ec069e272ce23d626bad149ace0e2e49f4ba861d66d020ca6665b8f1256b1c5bdc9
- SSDEEP 384:r0vwtokwYwq6uwqp+00xWB9kVkD/abRkT/2tC3rLUR7vSCq4dLlSR0TNAP68VLMW:WNu9kzbK+tC7LUtnq4llSR0TNA1AUMe
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormChat.resources
- SHA256 bb83dcf510c62a56c60ea9e6fdd5e53669749d1d174fb90640cffa60d51a2cc0
- MD5 7023e2c7f65c0968e1665ad48ebc4c2c
- SHA1 e71c9c0a46bdeec7b2a2cb3cfc2ff8f99320c18a
- SHA512 4fe6b746abb43e7a3765ef1f826391f9016f748f88bc5bba3c20c8804994d335c6f969b6f7e8db1c2a9e8e3f3e5279c43272ebfc569da8c3c2fd407322c9d0c3
- SSDEEP 768:PdXL7w8wabaQlhNKY+SZbLA05GEdQQDKdxbLe:xwuNKdxbLe
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormDOS.resources
- SHA256 e1915b321844c829029b31acdf7e726c3708d685513a2178f22bdb1717c4eae1
- MD5 60eab133b536fa5c5970856a85547ccd
- SHA1 9c62ec34ea8bf16b3d2c82f55c734e5605ea06e5
- SHA512 2bcd9cb0a0dc18c711c8b5ae88a58e95b5d88dc6195cadea22996c66263de41fd48f728b808ebe06fc31d3bbc1f7849990a48bf6aca4fa6528a3dcd74f6dee1f
- SSDEEP 768:W+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVR5q:W4cBlKJj5tvmzaal45q
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormDownloadFile.resources
- SHA256 e2cad3ef03dad818848dfb34761de9f9ff07c485f76e6b5d6beeefb7ea2262d4
- MD5 b6a6e94bdfd37969f6613e98056d33b7
- SHA1 81e7af8934b976e1d4dce7f3260e540fc0e359ad
- SHA512 9485797f8babadf98c0dd6d53c903e57a856120c37f110a3eba6219b69e007496c7dfc13a1d28b216ab0c591fca4625c5f6ac8cfc903ecb63ef6ffe797e51779
- SSDEEP 384:rkvwKwq6uZ6MXVymI+e77nkmRLBGyvy7jze9DJ8:4XVymI+q7kQB7yfze9DC
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormFileManager.resources
- SHA256 33c36f64b9cdd5d445dcd79085df5fc0e2c1993aca080388f4d2b1b56c19ba28
- MD5 697a0b9728a40ae9d0b70a88174d1bfc
- SHA1 96755a5b3bbdc7c84bf3730ae55f2be074474f64
- SHA512 2f2e7dd6683ab387617386ada1eae2e8837c0122696d715557fb060ceade1c326c8db824423c55c357c1d88130fb14ca40b52f468bb6cb9eb9caf10642cf40c5
- SSDEEP 1536:3r4q/BD27NL+Zw111111dB17331cCVZcXX:3UqYZL+Zw111111dB17331cCVZmX
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormFileSearcher.resources
- SHA256 cc7fdebf39512c83e71cf5b117393448eadf65f4b170ca0934ada3c10b7021b1
- MD5 4db51e61f6352c9564721cd3da1260a2
- SHA1 27279001dc31ea1f445e938df8f240f8b80da750
- SHA512 b6de7a53a3240af993317717ac2e3d5111ad0885b53da9a5d19e09ba99d8d52882a13d2f635aae29c06e307693bed919b2f4a8bc3dce2e3b09da56ba75a026f4
- SSDEEP 768:E4CW7ftN2ccaHI11svQrw15lJXw4tdLVy:EZutN2R1svQaJXFdLVy
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormFun.resources
- SHA256 58a03898a5538fb406db29dc3eb0436cc4df471c51a0e8c41defaf7c40145a7e
- MD5 6d257519ff38e8c5b77baa37d16d07ea
- SHA1 8d9a865c56e068fc17383f2837d69e59a34d6d01
- SHA512 e121aaf32db88aa5397579291a8da2931bfb1055709072ad0f3fd536b4680fb44db551b86b5e022764228f3ced0cab12b3b7c403d0f8291dc5a819016cf966ea
- SSDEEP 768:s+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRHP82SMIaTDL0N55O/mx4Ivy:s4cBlKJj5tvmzaal4H7SM1HL0N55sg4v
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormHVNC.resources
- SHA256 784ee1e0fa77f07d57c06d2d952aaa5577242bc0d0b93174b652f119c8c4acfc
- MD5 fd0f487c2e81ebc69698026d48d27cb7
- SHA1 868d9e484ba20a88466296698eef07343b327606
- SHA512 5c5fdb83b734b9a354957e04540f9a87bdaa9a7aca8606c0f52c68000d918a3a1fee9dcf57ada7cf7d82b51e847eebe3a8396c3e646b8a0d0f0d92a03efeae84
- SSDEEP 384:r0vwtokwdwq6uTN5B3KAziERpGaditXpxddZCD+SdRtDfDi7AmEJqqGWIM2fRYor:UN5VXigpixddsntBV3jI9LwSV
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormKeylogger.resources
- SHA256 af75e5a5abe9e2a8d75bf1401da161d8cd864b700116ce63addd3c321bee1da5
- MD5 371ccc1818af7d6c2d528281a91b6bde
- SHA1 4b2d6739ec1ffef8ed46945aec65fb469e923755
- SHA512 81409faac83a7abf4918440bd2449b25e4196cd3ba538043b0d9796a76288ce084c018e841d2b23367ae75268f3526a64d0f7714cf4c436a450e5ea2939ce227
- SSDEEP 384:r0vwtokwAwq6u5wjWw0cPfOesQo6OG1ibNPwLMGlYPwwCYbe1GwAM:jwSoPR4G1LdX
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormMiner.resources
- SHA256 88a122f7a404126a376bae74e814b7c93ad4f8105e9b2d71d6369d389ccbb595
- MD5 018546adaadea09d896c5e719c78dc9e
- SHA1 03033402f639bc2aea7af0943a7d0b9ace6d79d6
- SHA512 adcdc5cdeb91347cbabd1fe861f0ab7fc33a7e92aaa592c0723783573ecd0dee90cfe0c47129760d20d149c9ee1cf5655b5a127603559daa58999b90707d3e19
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormNetstat.resources
- SHA256 9aa6c57470ef0335e7d83a480ba7c9c0d6fd6a1253d7cbbccc9076663143e8f5
- MD5 fddf22d0424f6574163fc962c6153695
- SHA1 da9765063665f40448f5c5377e348eb114cab33e
- SHA512 62bab1810f9730f6ecb3366550c48b98f135f8402230f7e94a8efb79cee2645cbd7ff719554a7951fdd0ea33440524aa856d5cafeb84176110220e860b089d57
- SSDEEP 768:3icMUNjRUHhChlWPY0Q1psVxCxaNQZ3o9pjpcynaswr+6J1kG:3i2NRUHhCDqYT1ps28znh++6J1n
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormPorts.resources
- SHA256 b2cc2cd84d0c73dd998bc2723b84c9695753dc6dc1442bb8269183e313f586f8
- MD5 c03fe8cbf9a485d9ea53b8444b62b480
- SHA1 ecaece2f8200a808f830a463d1e8d0beaeaea7bc
- SHA512 22d9edcb7d823a1d7dd67e89a9a8b7350c1f95a62cf38d9cf90a645c7f86e58f14f88d1bed3e69c3f27e7b60315eb1a567837afaec4373c2df68b637becf4300
- SSDEEP 768:6UPUs99PCoprohsKANWvOsocTq4MKiQX5EO8jYssxIVaSVasV:6Hs99Koa7vO1mMKifessQaIam
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormProcessManager.resources
- SHA256 a5b9f5ccfe8ac46a630ac1cc112d343364fa2bc4a2bec0f3911322cff174cff9
- MD5 fa80841e3dc9ffb31dd5d015c1030172
- SHA1 aa0d9e66db2a8528edf9931fe132f18870307216
- SHA512 a38cc863d3c0c8d944340cd4116f03bbdb2f1526fb40b476cd0adbd444fd1dc10790d35eaf50ea34a1083b163baa82251a5048f075651bc14e46ac4cb82897bd
- SSDEEP 768:p+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRp:p4cBlKJj5tvmzaal4p
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditBinary.resources
- SHA256 f9f9c2a4855d61b7c7f93e9258d0306be802ef9c8c8929186deb71ee96b06d4c
- MD5 beda8bbd2a72e45431cf5dd68f7c6e61
- SHA1 18e28ada040e4c62e33d946046a9ccf66f839f0d
- SHA512 6287bb138431c33a2dd30b7c06c979ee89f691900eb407e14465d58188d04d7697ecc68eb6d479db664ea86f35b7ce6b611834028ddbd56513003c1ca28f0899
- SSDEEP 768:s+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRj:s4cBlKJj5tvmzaal4j
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditMultiString.resources
- SHA256 f9f9c2a4855d61b7c7f93e9258d0306be802ef9c8c8929186deb71ee96b06d4c
- MD5 beda8bbd2a72e45431cf5dd68f7c6e61
- SHA1 18e28ada040e4c62e33d946046a9ccf66f839f0d
- SHA512 6287bb138431c33a2dd30b7c06c979ee89f691900eb407e14465d58188d04d7697ecc68eb6d479db664ea86f35b7ce6b611834028ddbd56513003c1ca28f0899
- SSDEEP 768:s+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRj:s4cBlKJj5tvmzaal4j
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditString.resources
- SHA256 f9f9c2a4855d61b7c7f93e9258d0306be802ef9c8c8929186deb71ee96b06d4c
- MD5 beda8bbd2a72e45431cf5dd68f7c6e61
- SHA1 18e28ada040e4c62e33d946046a9ccf66f839f0d
- SHA512 6287bb138431c33a2dd30b7c06c979ee89f691900eb407e14465d58188d04d7697ecc68eb6d479db664ea86f35b7ce6b611834028ddbd56513003c1ca28f0899
- SSDEEP 768:s+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRj:s4cBlKJj5tvmzaal4j
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegValueEditWord.resources
- SHA256 f9f9c2a4855d61b7c7f93e9258d0306be802ef9c8c8929186deb71ee96b06d4c
- MD5 beda8bbd2a72e45431cf5dd68f7c6e61
- SHA1 18e28ada040e4c62e33d946046a9ccf66f839f0d
- SHA512 6287bb138431c33a2dd30b7c06c979ee89f691900eb407e14465d58188d04d7697ecc68eb6d479db664ea86f35b7ce6b611834028ddbd56513003c1ca28f0899
- SSDEEP 768:s+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRj:s4cBlKJj5tvmzaal4j
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRegistryEditor.resources
- SHA256 053ba896ae8fe13ef28afd5ffa9caf2b8a064768537eff2d0b3ba02a3ff9823d
- MD5 357624bbc3171160be7be67c07052101
- SHA1 a7a1ec22c9b25f63e936a6692fd38f5e0da0ace8
- SHA512 d6fac1e945f2255f927556e5769022c7d7f2d8580454c65922c79f0b12adb7dc437b5bf89699aaa9c8cbdadbd75642f1714039e827664a6a95fbd38948d3a6d0
- SSDEEP 768:8+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRhIy5xf:84cBlKJj5tvmzaal4hIsxf
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormRemoteDesktop.resources
- SHA256 36a76846120b146ea31d896c909cb65036cf376a294959eb39afb7514323a391
- MD5 1de46abee605d07d6f87945cdebb4891
- SHA1 38ebb00f5a179c0302c9537ec3c0c672ed6f0b2d
- SHA512 0dc7fad832001d7a3a1a6194552dad1ad0a968ca1748325f913aacd8dd5450d3ef8bf65bab7ca3ae2f43551f672acfa40c2f94cbf8b447419fcf8b08b243831a
- SSDEEP 384:rTvwtokwdwq6uTN5B3KAziERpGaditXpxddZCD+SdRtDfDi7AmEJqqGWIM2fRYoX:HN5VXigpixddsntBV3jI9LwSN
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormSendFileToMemory.resources
- SHA256 a5b9f5ccfe8ac46a630ac1cc112d343364fa2bc4a2bec0f3911322cff174cff9
- MD5 fa80841e3dc9ffb31dd5d015c1030172
- SHA1 aa0d9e66db2a8528edf9931fe132f18870307216
- SHA512 a38cc863d3c0c8d944340cd4116f03bbdb2f1526fb40b476cd0adbd444fd1dc10790d35eaf50ea34a1083b163baa82251a5048f075651bc14e46ac4cb82897bd
- SSDEEP 768:p+t+VBh0QLFEJESSSF5M4faQmzQ4QZwuz+3jsnRVRp:p4cBlKJj5tvmzaal4p
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormSetting.resources
- SHA256 5a41cba5da381d353ac66f70e1d0ac9cda5d5b9aad5ec7ae7ed955690e84a0db
- MD5 d30eccb4bff81dcaecb54f5403ad1f50
- SHA1 86048211df0d529688b459965e0df36982943f1e
- SHA512 76b482da9e87cd1ce6294f2e1050a1905baeb87892d30ae7bd5fc06af3cd3f6959ba0c6d0f583cd603f41f4d14f3e4b76384a8837fa6043f4b2b95597054a503
- SSDEEP 768:pbAmp//EZ/vRYT7fdlAzHnsk288uRvNwf194/YgNaQ7tU:pEmp//EZ/v2T7fdOjnskaivNwde/Yg0z
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormShell.resources
- SHA256 b67def8c5d5ce4efeaeedabb7e40c5e3a2522724d23a7f3e4b300800021851e0
- MD5 8b7935fac9b5c66ceac6c5934e83d511
- SHA1 adeed2b9dae7f06d9b3825890dba3f2e46168dc3
- SHA512 507bf17a17159f326f7984d5a6e8f6cb13c21ab968a02239c338a3ebcee06547792e7fd232d7bf6b608eef8cd619f983bdae10e37be603ff61b76153972584df
- SSDEEP 768:DxXbq0GAUtwBChkPS5r3FUyXP4D1MXMFb4fihyB:DxXbpGAe/hLr3FU0P4D1ZFb0j
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FormWebcam.resources
- SHA256 0866f7d36438c8e65db36f16b5b5e6d9dde88f4318335fbc486b51a0df576119
- MD5 24c807f8372f1de68416d7f58eb199d6
- SHA1 ed6d355b3fc6d115da8e2304d328617da76ad27e
- SHA512 fbc776cd6b4c83783eca5980551d296676677f34c034041879c8be7ab72fd12e2b0983efd3a2ab4b4fb375d6e4c8dc167330512ff55a8372949b41b92692fa14
- SSDEEP 768:V9Czhq/9VforTtgntL/VcEDVfU0BnZMPE1fVEn:8q/jvV/OiVfU0Xf5c
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FrmTransfer.resources
- SHA256 f7bc9415724d6d767088dbdbc6353ee6cc9e9fb9b23b88e80fca59e533755a8c
- MD5 4047b73da847fda59bcbaa599d7c6b22
- SHA1 bb8a50aa5a2307e8672e0fbe3d07ff9489968789
- SHA512 fff41421c5f52c07f31eee86acc8480406c6003544fe48497863e6091d4dc68184b10995a8a38dcb3a70d85638f1d2bad4bc278462f6af345032fe04f4ca53ba
- SSDEEP 768:g3S24K8gsMT4uVmKo6ykc/Gc4tYqRKCZjI2K41Z9zYv7h8P41aFHsulzVQTmTInH:YwK8UV+/G1jaOZ9c7aAWs7h
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.FrmVNC.resources
- SHA256 38aac2333b60d0a93f86fcee70296588ae0f62d33dd3aef135e0d11452556e01
- MD5 3a55169be2ced35eb1a8412428501e26
- SHA1 7cb56179327f50b126148b823d4d661e25da22eb
- SHA512 0bf41953c4a41be54ba42ac5a02e984c37f7057f8d1fb5abf2c4a8be269adff6241d21452655a547fe1dbbe7ad195c55d27a9e81add6f7fe9f31751942877814
- SSDEEP 24576:QmPWb6+CILRbTcJiWevOIWr9Lrdl5p0WdaMttGjC+F/:QQWb6+CILRncZe65rb5p0ehQC2
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.GForm0.resources
- SHA256 4daeca1ddb39479e3ddc2b811220c82f6c6fc6ace4658bd105d7bd9d396b955b
- MD5 c1eac67cb443393c1e94b74898da6c8b
- SHA1 0f59cd813c3d8ee75014109556e04d857fae9b47
- SHA512 6e7c447ad0cb5f262d8364e271d0b1caf04e5d06bed0b71b4139c4369c6a252d0771f5befe3cb114b5249187394fe4a18957838d5691084202f096db45dca662
- SSDEEP 384:rqvwmwq6u8uuA1PDtCI+2VBCwq4LgMcs2EgZgvTAQ:m3DkIfVB44t2/ZgvTAQ
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.HVNCForm.resources
- SHA256 63fd8a981df588c3ddbc116cdbb1afcc4ae90675e51984ef21995bac5d0b7812
- MD5 9294804ec34e5f3ae0d2cc927863f3be
- SHA1 e480d87a460735f7d7131897305de3f2cf1bc754
- SHA512 70e496d94024b4f8c94bf6f87b846fbfad5b11a38c82dcf0bd88616cb647713837b28989d03ead7fa3a90ec6ec27ed9f4cfbb4c64e74b94d3ae2883747a5b18c
- SSDEEP 768:NbAmp//EZ/vRYT7fdlAzHnsk288uRvNwf194/YgNaQ7tTOlmdZu7n:NEmp//EZ/v2T7fdOjnskaivNwde/Yg0j
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.Musik.resources
- SHA256 e43011c6b69c30fcd4e73aec950cc92bb91ced4e739c1cce728e13946d071e72
- MD5 c3ac6af75d2c6b78fe353452294afbdd
- SHA1 83dd16a4ce193131e24a3efb8b295bdc3d85a44c
- SHA512 560ba87a2887007e5560f41e59735753e3babfd58812241939c7b7fe704cc1d5e0b8b427f8ab698a78b49878e6397b4a7d82e39f4eea2c537461626324fde7c3
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Forms.notify.resources
- SHA256 9d41c54bfad8cb7efc293d24d3a7ecefc38125c8a416763b86bbf94c4eabbdb4
- MD5 372481c06b73f513fc6cc16a5dbb0aa0
- SHA1 252e3b39786687b04a9c5743fb270f1c8667d179
- SHA512 dc886fe79980bf4645312c3a30f6430deeb7b46b2eead55bd50bc91835961d831b0dd693f57f48578e176a3dcd914aa8685292bd1a14f94f454d4f052c703082
- SSDEEP 384:rkvwKwq6ugI9BkekeSROkaoyeO0lzfBkhPexfypcAfUL9EAMjXRKBrOIr:uBk6YOkap4fvqpcAy9jMjBKBj
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.GeneratedMSBuildEditorConfig.editorconfig
- SHA256 9b4a113997494480d4cb00b02759e7380dd18bb0d7cdc909aa49c225f6827745
- MD5 37829d545d8f03e633ea1ffa76f59501
- SHA1 ae6b41c50ef2af25e382c3fcf863cbf63b3d7f3b
- SHA512 218924820a97710f97881d0cf0323e39cd2c29b15012606c1f3eaae825224a17f509e9392ca12569845948a7c646d75629f0e8f5a705c639a13cf3d6a563831e
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.Properties.Resources.resources
- SHA256 9e4761a300bb305bc25b65818bd4711d97d009c49c788007c0bbe554c1903671
- MD5 b4a5360c4e93931eca322ecc2bf8e2da
- SHA1 6fdce9eb46e56878d127d578a2440f8ad53a6953
- SHA512 589b8ac3849716a84e20644dae758db728f28751f7a52198af7ed2bd0819f29cdb4d361a6e57d50cd556b8e390ed6878920802479fe96f86b8818a27c6bc2894
- SSDEEP 98304:u7w0WYwOYA4vWVU4fgcmnH3EPIL6yybPmDVa3VxobFNdY:Fs4vkmXaZ7aIR
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.assets.cache
- SHA256 fbfaba15510d7e9aca79ee2407b830ef1c8d2a2f593efd549f1bc8343ad4dc75
- MD5 b947c6742c3d9f936685375ade30b4ec
- SHA1 790dad23152c90d487a23842acc8c7fba6aa4d19
- SHA512 ef7df4e6d281e93f6cb43463675e2a3aa9ec516382ce94f46db813ae80f2e6b720d767043f2d5486fd01e90c74b72f3c2488b1cbd892c5144ffa6fe7301be629
- SSDEEP 96:RR95eK4I1Mso9o/Y4ezNhYuZ/w5rcP/+JhCRy1z54/wH3sIyuVoQXdIUCsDmQfK1:RRqK4zsocYNcTorJQffhTMLOmMsV70zS
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.AssemblyReference.cache
- SHA256 d90ab4425ec717d1425f6126c67a8d30c5476cfe7bc26fa0cbeecb465d135309
- MD5 7dae09bacfe9bbf7946f48b3d4bec6ff
- SHA1 1b6510b7acb6a0a5ae181e15879ba2798c5f5c2a
- SHA512 3fe1057f5209455385aac249a4e7269de8e6f793d35a1bdc30ffaef01fcf1b392c27f6dff6640a5b2036583b64e41d0cf2792013f2d2a7ea2e12163df76af42d
- SSDEEP 768:n7x5IUscy/4VIIL/eGl1zS2aQ46Az5MDdQ9K9MFXHEfE1suffSSZv/QagAEFiIij:nBmnRHjM0QmzX
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.CoreCompileInputs.cache
- SHA256 ae52bd21480cc361166acbb09de42d5ad564715ed6a6c06c098eb7712e56d7f2
- MD5 ed58cd430a3d01f2bc90498bc0dc0f9a
- SHA1 ed1e3916f2dbe92c95454e9f1d526fce0de6d748
- SHA512 a041099c1c4b5747578443a2daaf8a571d0b11236f20b2e862a63c91fda09471e81d086af774b1e6365edefb60f60e73286d1e4f2ab97912d3cb07544748053d
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.FileListAbsolute.txt
- SHA256 d09e528ff6d750c655be1cd37215a7e3a6003217aafa320efe1f9d7e43472109
- MD5 fd5d746a04cbdc4e32b818709a3002bd
- SHA1 4865753659a6a3d4d1bfad1889689d5abc75a9da
- SHA512 2b8c01c64784316f887ddc5cfffc385eb04f7dd797ba61146fc1d8adf0ed6104525a667386044b2675e9e46fa40ae0a62515b29d7bf3388ecd304ea4902d3102
- SSDEEP 96:oEZyVjVcL/eMLEC9iPlHKLDm6LG9MpnjoLvm8Jjb47:objV8/eiE9lHaDmGGonjAvmu/47
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.Fody.RuntimeCopyLocal.cache
- SHA256 e812f6ef97a485d661527f18bb461fc21b1c31602b235c293f382b13480a1fc9
- MD5 119849a54bcefaab1ce184669c8ca2db
- SHA1 277ca3feefa33d6a658fb5d12a8c91d4c25af5c2
- SHA512 d0d9d0fbe307e034869928579aad6efe48656cef888e571422c86f31399935ab7aa0899cbe0fced6cb21e22acab9f708280143353b58ba07b39a4f5aeb01fbd8
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.GenerateResource.cache
- SHA256 68e5eee40d311cd159ba9bd8d0a3377a7386a5b9ab39fdcd41b787a4e7a8beec
- MD5 4b402d0338dc9ceadce4c828f3df9327
- SHA1 b872fa914f480966546a30e778bb7de7fbb6b868
- SHA512 e4c69f38c61dba963a2cc6751907b3be0b80b89063391241981a8b3934809b9294c5466451c03926f44e1edb33e1fa0799c2f64ffeec8c9705307619ecd58bb6
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.csproj.SuggestedBindingRedirects.cache
- SHA256 618452bec2a06e005b37a168b4bc47810652166e9bdab449a3b750a42c57793f
- MD5 984046ca19ae23c1a6912e1b16654f6b
- SHA1 f1eebaaff59cfb8ffc76e14fee31d329016599d8
- SHA512 54dcbb4726c60bef565b4b13d6c23446c62dbbdc06a7d1b9d8162ef75d14f0f6b3627cbd13775a7377946f009be367bbdfc1d500e0728cc58125cccdfcc58806
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Anarchy.exe.withSupportedRuntime.config
- SHA256 051099983b896673909e01a1f631b6652abb88da95c9f06f3efef4be033091fa
- MD5 2a2df45a07478a1c77d5834c21f3d7fd
- SHA1 f949e331f0d75ba38d33a072f74e2327c870d916
- SHA512 1a6dd48f92ea6b68ee23b86ba297cd1559f795946ecda17ade68aea3dda188869bba380e3ea3472e08993f4ae574c528b34c3e25503ee6119fd4f998835e09d7
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/BackupCertificate.zip
- SHA256 305acf2af49ff3cf2c7d11b1e205a139f617251d315ad2ecd59e4ffca1be006b
- MD5 fca59c7152037d1719b6d22478be89af
- SHA1 db2000a9b59294b77572fa734b236ff261bfdf51
- SHA512 d0136f712fd00d301c5005fc25c4a37aff63cffabbc5725229e491ea6cc920f53ce50e9660fef4984a7d000e385a07ebadae85590068814d67016df13b2568f2
- MD5 SHA1 SHA512
Usrs.p12
- SHA256 dd00f7ce28d7ef1e14f50b046ca1736f15ab08e6458d2c2cc72d078e4354ddb7
- MD5 e14c7402da26e4a1a1c226d546ec3aba
- SHA1 3234c40fa2aec2d483d2b7ede9b901d3899d5336
- SHA512 cba4cd515319b11be1a94ffb22c4b14b933868217a1b7f6ce126568b82723769baf170f9d1f262135b8867162b8e932a9c2143603c4c9d668edc3f4622cfb5b2
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Costura/0BF43F74E5A957178ADB259AECF34CDEED24B8B1.costura.realtaiizor.dll.compressed.compressed
- SHA256 6dce31d19fa209808f8cf49c8ddaf4ec190a54febdf1272e6c15e02e3a618f0d
- MD5 e33d80bea7c92ec2e9b8e0602fd55bdc
- SHA1 d1712d7677e685e23e358a9ad81849a4b4fac483
- SHA512 8a7652ee5c923de248cadbe73c0933e147842b01174c496b0c0108bc2f2f916eb1d6409e9c6054f09230ad101c4d2fba031fb5f694dd351093bc164529574a13
- SSDEEP 49152:3MBJsJ+6LjkXe/dnXVXTH7gu2vgT1WsHuWtmz8gNuNNNN6aLNuNNNNNpKbt7WDlJ:cXsg6EKdnFjH7gLoGLz3o7ylzd
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/14995E7F1D12498606D9D209D78D55FE6FD87802.costura.siticone.ui.dll.compressed.compressed
- SHA256 d5f0dfdace6b7809eeb1587c26d2d9fa31ad1fd3374f499a47943d1bea00b9a2
- MD5 845f5b188c2b2dcd89850dea8033dd30
- SHA1 530a7c8c1bee00f26fcbc3dc303e5cabf0f5b638
- SHA512 a6f922e5d932bab8efe3d317d724c3a0736584844dbeaaa1215ec011f6ca1bf948edeafb4d2ba6674e9a118c0fcc546f3d74db2cf554bb849ca8074b5caf2384
- SSDEEP 6144:wtZoAkWJEZ1mGyFQlQ7ckn/Uo+dW03T7b+iq+FvnSsxAXboBnK5dka2UdnCetvyF:wDXMZ6GQ6ov2m+UtbVkGDvAd1p
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/2309DE9EEDCF3A550AB03AD1885A15F6DA7C0083.costura.mintui.dll.compressed.compressed
- SHA256 24f2effe9542c93317ebe1850695a2a23a94da70a773596949a1842bd353d043
- MD5 bfab50837af1bdc374f1276519d41434
- SHA1 d2b52e882da198f91c87c8d5ea33db674a467aeb
- SHA512 92d6f018ddb51d9a67691499a684b91005830a1c500316f6d758269247855ff0262207eb02d8fd5f460445ad9b3e388c5d01b91deadde6258a654e99964978fe
- SSDEEP 768:H6YhHJNGCWmJCWbYUZH52yFORVWjQUg/uWmMxmKYe418k+0ig/IVTmsmZrtI:auHJNGCWmQUZZbqUg/uWmMDH41RtwVTr
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/280A1EC5AB002D1AB15279B3FB0DE8DD3C4AA482.costura.guna.ui2.dll.compressed.compressed
- SHA256 3923a76d06e0ad253a8a68633588b0a36e6565ac12bfdcd93987a80185e3ecf9
- MD5 a2c2cc44b8548fd60c56ad4d52ee85e7
- SHA1 1f2fd4127387009b8d56d3c3753a23ea9aa53e0e
- SHA512 07cb8d72fafc99aeac7f7a3ce7c9bcea06c4f988d7e2bf7cd927617ea3b72d7bd08a53faf0cc896377d392dcf22ca5ba35e9bb84895488c9a14fba969248d223
- SSDEEP 24576:Q3QMRG8KunsMMVWtzUEW0DHpntVedzOl+6YoX8LBEOAsdbB1:Qg0/kKWapnjkzn6YlLBEOAE1
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/3252D8A70A18D5D4E0CC84791D587DD12A394C2A.costura.iconextractor.dll.compressed.compressed
- SHA256 21257e492923e104b4a76cdd535ba3a2d27a94e6f685d3709b8e7263f46cd1b0
- MD5 ca3e04cefaac0cfbb7abc959fd9aca9e
- SHA1 e07640f4399cf23812ae69dfd50cb0e7fb523271
- SHA512 bd899d41bfe83a74ccc8ef11c17d5d2af7e5813a5368edbb2cc246229d68cb83dd52d1c0d427308b2c88de47746aa221b539eff7e54fb0d898abe8916dd5e49a
- SSDEEP 96:tKgaUmrI12LgQteq2K6u4Ibdxa5Dqmxd/pQaiIPBlzBf872Ca:IgUrL+AQISFqmhQaiIZlzBffCa
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/502B9BE302453FA99C11128461E8EB1951E1C5DD.costura.hzh_controls.dll.compressed.compressed
- SHA256 d6f1b0b5857812de74bd656659227401c8b023b64f1714793516d9510bddc5a7
- MD5 8e1131ffc213bbff94f22a0516c5fc1c
- SHA1 4ab9c9b43b2b51aa696cfdc2f3564888de44af34
- SHA512 a3a801560889751f09157fcaef29df4c8b5f3e43f310e17bb415289964edfb62dacab3a62350b8488a77b43a5f2dc75f57762404831ae3f9159dcf0cc2494d44
- SSDEEP 98304:Z3lDuHJ2QlV5TqS9+GiuRT+APUAA9sRc4fiPkvzEI3QawgTs5aRPVmDbiyGAKi:ZVDuHJ2QJt9+GBwafisQph5acbim
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/54A6743781FD4CEB720331FCE92F16186931192D.costura.bouncycastle.crypto.dll.compressed.compressed
- SHA256 6c4456995c33913076e48074cba447edad5b57e7091c15aea4e7524501b4fddb
- MD5 2a63fbd173fb052cd2409218565c4f18
- SHA1 4963dadbbc7c04d8e209a1cc4c843d2f11bb63e3
- SHA512 5cf16a0b91d67ebbefd179be22fb01177fc5d1839050e670ca3852cc18b76bc76d9fd9c56839dbb2e07cb4ca32b533421b10051e768f9ae7f216416f6f60957e
- SSDEEP 24576:5GlTjiaeAeOTKAzbARntW+hZxCNqbo6RVX8sa6AtWZl2c0:5GNjiSZTKAzkltDhTCcVX8saTtWyc0
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/6C6000A5EAF8579850AB82A89BD6268776EB51AD.costura.costura.pdb.compressed.compressed
- SHA256 fbaa489666a278edc8ba51a9963f48e4dfe4c2d7a02f5454543fb87510b5dc7c
- MD5 b5767ad39b384c21d677cc9e6955512f
- SHA1 b92a52dca7aa6ad26eb143896dff54534153aadb
- SHA512 8695fb5a7bae767fd05617bfbc36cf875b281ca7f006482cdf960b01a857b23eb27cf7dca87033e2dfa76341e5ca12e8929342c09dc52b8c1f9be3d50182b439
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/Costura/763506F312A186C55A04EF6A16AD7E867C394097.costura.siticone.desktop.ui.dll.compressed.compressed
- SHA256 8772c19bd5bcf1b188cec50c1763dde739c3eb32309e05a35d5892a2c198b423
- MD5 951becbbdbe837b40fff12eadbb041db
- SHA1 acbca3fb22f1895a4836f3646ed1acde9a0e16d8
- SHA512 df25547d38fc6d7d5cadb813d9891de58aca6fe9e5e17652a48f5b6b1da5e7d8a78f6da274300efd441c5e643c546c9167da85ffacf61acefddf7b2e742a55c7
- SSDEEP 24576:QrgBrO1BKH8jPcWYVxHCoh0XeV61r9qZWe7d7NWS91GsVz9cebgS9a8:QrgBWBKH8jkDVFCNXODzWS9HfX0H8
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/7D0AD03FBDA1C24F883116B940717E596073AE96.costura.newtonsoft.json.dll.compressed.compressed
- SHA256 cff131d6a27229745b1a1b78fd0bc4b6f5ee029cb16d519d23703ca0398ee41e
- MD5 ae60a6f3504dbeecaa3c237f07f42454
- SHA1 a51a97a6353b1746b56cfc3fbdae58b11e261d89
- SHA512 50abc3407909fcb77e8d1884a74f43a8a8904ea18f49bbfc2b8c38559327f45100f5f1a0a31048846eb10f3017975f7121a25d0ec5ee362cefc15a0008c99888
- SSDEEP 3072:jgkRmUVLqr4fh7rXWs9thcOOIYMrkkclokuOMQE1UEPxS4mGQFR5fAQwy8TGs1L4:DRZVLlfh7rZthO+JjkuHEEAt/wz/60m
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B.costura.system.diagnostics.diagnosticsource.dll.compressed.compressed
- SHA256 484bfd73e9877178bb82a8963305ebd8422beff3157a3ac7ee29229c967b9a09
- MD5 ef497d95f8db18306b5605fd8a633958
- SHA1 b65ed0db54f13ff7f2b0e9fc3fbbfbfe07bb66e7
- SHA512 0fe5cd7198ca27f5efb38954c6bcba77777733b3e7bad255911b6ef495fdd0b6980862ffe4572877856ff89182062eabaaa588b789063afcb531503a5866329e
- SSDEEP 384:GXFTOZC9hI9i9sOVKreONqtH5uq78Vn7tJF2badft8uFgIWFO0P:GQ29sOcqtH5uqanxJF2bCfSuCjQm
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/89662FED195D7B9D65AB7BA8605A3CD953F2B06A.costura.leaf.xnet.dll.compressed.compressed
- SHA256 054ba51f8449070443a3f04723ae65b1c8d8d22ba0a047dcfd25e62d638d1f21
- MD5 0ad33c90f041e1cb9ae4af2af8d6820f
- SHA1 fbe68cb7846276e3f25a3fb5949ed530a7288d7d
- SHA512 5f5282904ee63bc234285f4c5ee42ff8cabc5f24333aa6073aa0ebeb2714ab3811e865df4c4d8ce15ca7534e184883eeac857cd5bb97d9d78e0c06cbe3eeaa11
- SSDEEP 1536:GXcrBtT0378iUxfQfghWNO/iPQ6POzKEPJ0:1KgfsFNWiPQWDWJ0
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/A1936AC79C987A5BA47CA3D023F740401F73529B.costura.vestris.resourcelib.dll.compressed.compressed
- SHA256 7470f98df853be3fc739d38f4dd439788e15dfa940302e0c761f3be66ba760bd
- MD5 31dcceabf0473cfbe99f7ead973a42bf
- SHA1 223132fee0ffc3d5ebcba52cd53b4756f946aacd
- SHA512 92728f2c231520c806a747fccb61dc8f9c7117df0bfc95569860601803c236850509842c3d99affa0db6831d4737354b33741331636f77d7204f01dce3b891f0
- SSDEEP 768:8yJnqm0rkIU3uZOhhyx0UCYaZFdiagkvQDE53+q6qHGCfHm:8xhVzo4mLHZFdiKYDMJmQm
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/AB588B8D36683B52ADCB32C03A9859B884838F29.costura.metroset ui.dll.compressed.compressed
- SHA256 4c54563d0e6e44332d4b063ada9e46aa318bc1350046d07ebf412245b3567120
- MD5 683879da32508e15fb046ec43b49a76c
- SHA1 3ba4dc9af4489aa0771a5f9f49aa40fbe0c2ed03
- SHA512 e5fa77ec7a73ba5f803fd67911c3789e617efee801c512f38b745132f513edcac0de408d17172705c3c1f5ba1cbc559c64d28adf2d22b170752394b793d97eab
- SSDEEP 6144:/sLx3urfj/7g+JgJwa/SvMeDOfqUXO8h4hwc8SNW:/FfjTgegr/HUOHXOhwcbNW
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/ACED007F4D852D7B84C689A92D9C36E24381D375.costura.dnlib.dll.compressed.compressed
- SHA256 5274a4076e8575f36ade5c06efed0983553ae2357e1c0755b2e046285e0f811e
- MD5 389f6eddb9587c70b8e2f9e48bef3cff
- SHA1 45c73bf61d81705c02408b7a9b2070379c0a8285
- SHA512 b633ba058e0d190d5fcbaa7b6a15c1e3a7761e6bf005c7f413c26a19e64fda1c14b8a84f0028a39058811da25941ed3f52ec9d6b6a10502061e490419b84dc81
- SSDEEP 12288:JcC3hnYSsHPebi7JX/On7k/cZ1XY0W5PEU5fQjS:JcCxYrPegV/Owy1XjW5lcS
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/AD3E1CE93782537FFD3CD9E0BB9D30AE22D40DDB.costura.guna.ui.dll.compressed.compressed
- SHA256 b412ef11648553ecf0c5e8a38f81bff5f310f2e3e2f14f6112a44286b6893caf
- MD5 d82204d4ac8c7fdc820117333c8cbab9
- SHA1 daeba9494dfffcc2cd18b5197d86451f9d867a82
- SHA512 6c3a1c527ddd76af1671ae10b369bd2d6d7051ad4271cfa84d57424e948a59c6496499eee09824083c5958302edc2fcd33479cee62c808369cad2dcabc46e244
- SSDEEP 12288:kf+3zdE4gw/bSxq9e+2qJPm97tHqDuTuvfR3x8sfIRa+8U2rmB1gf:SezyzwexGmqJP9uTuv5Bv/
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/B0FD4F64E837F48682874251C93258EE2CBCAD2B.costura.cgeoip.dll.compressed.compressed
- SHA256 6c69efe2fed875e478096a8e753de8c393ac19432a558b1df9e5b945c91d6e9e
- MD5 91e5f61b96ab7b3d9fbf5dd60a453906
- SHA1 ca5426cb3e24dd00b70550056ea039c172aeb608
- SHA512 a36432f2bb2f9dac3225cab3ea1f1078383e244fcd5b69d86bffa500dadf53f9451a9eeb9b5886ae85a5749c60ebd0fd3527d3be3dc0b86632534130806807cf
- SSDEEP 24576:LkvBaOvxJDEo9j7nb3zeMGeAdesVLImY8jCasAJMMd:L6xJfh3BGevsVLUeCavGMd
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/E2378A1C22C35E40FD1C3E19066DE4E33B50F24A.costura.protobuf-net.dll.compressed.compressed
- SHA256 ed10e26b23c8be10c140d76cd27cdb4093cbfd4fa90cf5d7e3f9cb044f8903fa
- MD5 71c62e25201542b265ba9a9bd74cbc63
- SHA1 f3391ff103e44f190013ad9c2f03d9949d00221d
- SHA512 6a25fd61961090e94d1ea92f6ab2ff7c2f11b3daeeb239faed4a99bc1941c52dcfe131898d94b9f0bcebbff465e3104df8d679123cfd722ccddb470da0c6b77a
- SSDEEP 3072:SMx6drCDrg2OcwzVPmTGt0/V6W5RVvwnDzyVMhNwzTbpljwR4:qCDrLwRe6t05X4nDRH4ljwW
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/E70E10A18A3AE85CD1CA9BE66A7BB46D99CCCCD3.costura.discordrpc.dll.compressed.compressed
- SHA256 e4f6e55964383f164efad44011a700eb9ffa431ba175b9c6ac53518754881721
- MD5 286ea734bfa84a1b614b14fdf323c9e2
- SHA1 f9424f6bab54d8d277449878f17efc2b92c1ec91
- SHA512 f6d76419a6c4c5757c4b66b698fbde9f9ed38a75fef0d2aa67a4333fd0afca41718eb402506500590ff796001a70413e04135c312b57ba2eeedc915643f2179a
- SSDEEP 768:K3VRqIRfAh3u5dEEUjS6gUUOSgSevfLUwU1k8E6xeX7k/nD:4zqoApW6begNSxh/D
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/F0CD8253B7E64157D39A8DC5FEB8CF7BDA7E8DAE.costura.scintillanet.dll.compressed.compressed
- SHA256 459b0adb6840f24f6f19de7bf2dba4edbb294caffe56c5826c459ef0b310cb10
- MD5 6b1aab8137c80868192935c733db91ec
- SHA1 801ec164a2b25b295bdb2a7d814cc0e2a4208341
- SHA512 fb2c4ba8b1a497893b3ac5ec96cc694a5cb079b31e6144463218689e6291aa66897df8a2d37e84a1a0baf5f7f4a946266c08fe56b07878f8132931a29630e39b
- SSDEEP 24576:Zx+f6QI05NI7Fz/M+0dF9uFg4EInvj89H5E+PQd8+2MWPWshH/3yZmDp:Zxbb0k71+FIg4/vj8d5E+PpfLUZmd
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Costura/F1F25C01F6ACF33BDD62C4F82D3EF078E76F0906.costura.costura.dll.compressed.compressed
- SHA256 74291771dd1f0338517e85182e062a96279f6e4ab8251502b8f7d1c33c6ce655
- MD5 786a1377c3a7d94f8294f48f1f20abbc
- SHA1 115046c4ec98cdd48f141f4d086dc6b896287714
- SHA512 aac4fb8b94af5eacbbaf65181e036005ab6a4285529ba7d9010261f15588854630f2804a6764c6e09f715d4bff0adaa22d94a1a7ce5d8369afad183b75ea8f6c
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cf423a447e5c1dc8bc0b84ef005e2e942fa149ba4f9caf7e2f12f672cad55385
- MD5 a6c5c5d8f6a0e33f789c1c9c070a38d6
- SHA1 f36efdf71e737c78e83d8d284ba03b5d5aff95f1
- SHA512 fd679781213be3b7ec6a39b2dacb2b96c356d4276e8b23995f243cbda88f56e311f2933244f50e50a27c72d664b67bb337ab0053c5e83fd934bbb67d6576a124
- SSDEEP 24576:sdNsB5K6Piv+Xv45K/+GEg4f7bP1/Ud4hCC18Xow1Ajg/nsad4hTaV+jXlo0HQ/F:mLbe1Ajg/nsad4FaV+j
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
-
Unsigned PE
Checks for missing Authenticode signature.
PE Signature issue
Digest
eb:28:9f:61:a9:38:f8:0c:d8:7b:4b:ff:03:60:8e:23:c4:31:b5:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 21, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Minor OS version
0
Major OS version
4
Entry point
2032478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/MessagePack.Annotations.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea077c73a7c01a5780fb2086953d88517dc6de15e91dc4da31a7879f77a57431
- MD5 da608c300abc0128d184eda5c0cb8e7a
- SHA1 ec7a0913b11845359561124afc7e97978947e534
- SHA512 f9fbe3882bc224aeda93702979c101e7c5d817790197979eb33f33ac227d2688534567bdd612c50c50113527f16721443dca060ad1df6df999ab2610fbe72a67
- SSDEEP 192:8wAzftQPvIPlZTpM+u7tTCYrJvZOKCAgx2S0wpaYf/aj8oBrFcxM6ndiS+Lcm29W:GW4PlZ1Mdh9TCoS0wPfSb/cZ9W
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\obj\src\MessagePack.Annotations\Release\netstandard2.0\MessagePack.Annotations.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/MessagePack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 477a63c1ddcd882fd416f06ae123eb35d367c747948dc2e2ced7fcdf70b883a6
- MD5 0799cc4b78fd3cbf9fb284e967fa98c1
- SHA1 954c4ca08894b07093b16272acf6be4684b1ab2b
- SHA512 4c2abcdc3975b6b76d53847834ebe53b47f5857705c28138983784ca1875fa26bda007e9b02dee1f2843e9696acf6ded82a93a3202889815ca1f860971a28beb
- SSDEEP 3072:R66VrsqPEwyJbF3pljTWIe8n0DzrV7Vx2+vkNkGoiYUGLS6ukQUr48Yl1bk/jwAL:R66Vww2/5oE0DVnZAGO6hQ7yrwAd4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
337354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\obj\src\MessagePack\Release\netstandard2.0\MessagePack.pdb
mscoree
_CorDllMain
Name
.text
Size
322KB
Virtual Size
322KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 295af2142d9214f3fd84eafe4778dca119be7e0229f14b6ba8d5269c2f1e2e78
- MD5 48efe61d6ca3054309907b532d576d2a
- SHA1 f36403aabb16540c93fb35245ec0b4e435628aae
- SHA512 778e7c4675d8fde9e083230213d2efa19aa6924fe892ed74fa1ea2ec16743bb14b99b51856e75eaef632d57be7f36dd1bc7ce39a7c2b0435b2f3211bb19836a3
- SSDEEP 384:O/9b512C4dABe070VJI0Ftdalemxxf34wqsWeb/WjR/uPHRN7Y5slu6o:O/f1IDjV9UPPpWRMkT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
82:11:ea:7c:5c:6c:f6:d8:98:91:57:78:8d:42:43:17:c8:8e:9d:92:b0:d0:16:ba:2e:c7:fd:02:5e:79:f7:5b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/net461-Release/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Microsoft.NET.StringTools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bba9f38fd1b16a1423fa22af6bc9e2762720b5498597520a56061ce270f4caf3
- MD5 75a1f075c71d5af92e93fee64e9bfdd3
- SHA1 5334df449a1ee5171eb904801858f53c3ae2a14a
- SHA512 bd6a7045a62321f437692f47ac8f41cd7e93fd1303401a6ca31a4fdfc836f63f774ab69f7c0bc7429453fd911fd538b8e5dd42938727a583b52e5a1dce8df7d9
- SSDEEP 768:lKdPDUKaOPCtKeSLwfXs1AiCxNaix9zpp:lQPoKfPCUeSL0c1Kjzpp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
95:f4:14:2d:99:a3:1e:1b:6d:25:f1:86:2d:c2:19:5c:c2:fe:d4:62:a6:de:4d:0e:7e:89:91:d7:e3:05:36:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:06:9c:9c:5d:25:e3:10:aa:47:00:00:00:00:03:06
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
25438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/StringTools/Release/net472/Microsoft.NET.StringTools.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Siticone.Desktop.UI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21eecaf504b7fe787a45f4aa8f8f36dacfc3ab1d75624dfb41827cdef2a9a589
- MD5 1582aa45d981e0e569c6e05698642b30
- SHA1 763506f312a186c55a04ef6a16ad7e867c394097
- SHA512 278a7a4e2b9d82528200b9f92244db3f228187d15c36fd169deb927e343bc4d0bb29c9dba496f86558aea4f4deb44d1e47a41d5598c0b375d99ad9fbe99cec34
- SSDEEP 24576:UCCxPAT4L7h3M7O2MLBSlvTh/aOBteUePU/DU/GHQYazK/DkWoql3zjbndHQ/jzb:WuO2MIThZNwewYDoyG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b1:71:29:25:46:e9:2d:e2:55:d6:f1:cb:f7:85:05:22:d0:ea:41:50
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Siticone Technology
Chains
Oct 25, 2022
Subject
CN=Siticone Technology
Serial Number
3a:93:0b:19:8f:29:72:9a:49:b0:8b:f3:6d:f8:17:ae
Issuer
CN=Siticone Root CA
Timespan
Feb 5, 2020 - Oct 22, 2030
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Minor OS version
0
Major OS version
4
Entry point
4196702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Siticone.Desktop.UI.pdb
mscoree
_CorDllMain
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69e57ac412200e47fe7b5f933a30c594e1fc1517498c88920aabc702f5ea00a7
- MD5 d96470eec1462cdc385bfcd024a5d91b
- SHA1 9adeafc9c76e29c275f2070cde10e6f7597cace0
- SHA512 99737518ea853669e06691bce59fd6bd12668a07949ac8c77a2b062c3dc4077c3ff47c3a621b117e0fa7d0426aef5e5b663f1db7991381f9b1ad178946e39eec
- SSDEEP 3072:1kp/Ua6cZb8uX1SLlcYK/fcWKKzqfjWSbjEQsHdwGuQTyovdk/vR:1kiapb8uX1SiJ/EWpzEzjYmWkh
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8e:ba:e7:d9:17:49:bd:71:4c:2c:14:a4:a1:84:e3:5d:00:98:82:aa:9a:d6:ad:9f:70:dd:5a:cd:c5:f7:72:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
187278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Collections.Immutable/net461-Release/System.Collections.Immutable.pdb
mscoree
_CorDllMain
Name
.text
Size
175KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
136114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
103866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fed661d7bb254b0337d93bca6da23c29b8d55b424b2429117eb1ac8e58b13e31
- MD5 a8fb5b5a8317b8f50b71b833f32f822a
- SHA1 ba68617773babbf93859c79c8de46e6e5f395cf7
- SHA512 e5accb9ce76bf7f3505d1c0e3cda78455c440a907f39bb95f860aac6e251fdb8753529fdeae6c12210638fd591a4b2d3ff3f16f62cf600ef47e67d45dbccd360
- SSDEEP 24576:IabWhaNPi6+CILRbTcJiWevOIWr9Lrdl5p0WdaMttGjC+FH/:n1i6+CILRncZe65rb5p0ehQCQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1663354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Administrator\Downloads\Pandora-hvnc-dump-master\Pandora-hvnc-dump-master\obj\Debug\net472\Z_20.pdb
mscoree
_CorExeMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
262KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.exe.config
- SHA256 541f67850b8b3899f21d8e8c4e5bca45e5c27bb4bc75f20a7d3e3c744885974a
- MD5 1c5748ab4ee56c4a246bebe1ebfa21eb
- SHA1 c82253799a494847064e314a0a9addc71c3ea4a1
- SHA512 8150836772c00cbf76ee76e1971d6964316945e8c44d6376666a00003e5b3cea8dbeb84c2e7fd405920372bb3278c7171f7ef6191000badbb265e720533f9dc1
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/HVNC/Z_20.pdb
- SHA256 5628ebcf97c203819072219cf9b0749e288773d5ae9809bfc5897a1fc60e164d
- MD5 3f41ce5e2b4468770ad70d203edcbeb4
- SHA1 f87e9f3b19fa18dbf84ab8f6e00f372d5090f81d
- SHA512 1ceb57a7f7f9bafa45159175412f0b109b42c02ec13814dc79f1972527251edd3f978f01ae0d4733c8d2de315b669e72f6f2bb62e0dcc44a8f170279881ae8f3
- SSDEEP 768:c2DxNMmgV0Os04MHEneW5lL73LS2JAEyH31zbQ02I:cMops3Mkne2y
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/HVNC/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 648950f725fb0320e09c52dcaf81764916df96dc62e7429ba67daea0acb784ea
- MD5 5cc2bb48b5e8c8ac0b99669401d15456
- SHA1 02e9ae08f3ec364834eb3ffc122f1c90e1b0e95e
- SHA512 2867e94cee9f89f1cf85ad01083d75f4bc0bc0e551b2ffae05581828994f2b01a458ac7a7c94a45e8c40858ecce197f7ec23482ee13ef3f1bf82b33b89b3b420
- SSDEEP 24576:/bN7xZgKVl/N12pljD7DM2l8xs5A/zYv7flNcK:DyJXn3ML7G
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1172690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/obj/Release/net45/dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/0guo3zbo66fqoG.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9661b1abc9a3e95e591c49c3838a64a066a2ff3c6de08d8aa7b541c4a75cd8e5
- MD5 e4ebcf76ff80ef398d3ab77d577f4c08
- SHA1 cb9e6b30a63d50ae87610f6855b64abfb25691d2
- SHA512 8f37cedd987dd14181fdfa861b8a95271868dac21aa9df80bd6daa831ae20f4b4965c8be3e36f32aa220bd37ded11a7568ae237c9c9641bb4fc087f6fe104b01
- SSDEEP 1536:+gqK9OLThWUkwSOykrJROOwj5vCSnVcnwwxu8NMsuS73O4VKid/:1OBX/xFwj5vCSnSwwjNH3O4xd
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
692B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/59Zp7paEHDF7luJ.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5db4c26057a05bb75ff7892fb60fd76620fc2228811d913d152a0aa4ec9db7a5
- MD5 15e3d44d37439f3ac8574ac1c9789ec2
- SHA1 bb3ef30e9f4496198f412738579966210ade36e0
- SHA512 ff358c9896792017ff7e91f1dedffd9d75a099c5b852da19599799aeca20b6b269267ff7c12c918a2530fe1a79a12bc8796c4eb3914c97faba3eba27388abde1
- SSDEEP 24576:L2RBtpr5ljLyeVKbed1BeaPc9oFf/V5V4IeDHRbtg58jVh6zBRkM8eJkhjpSLZFb:L2jXr5ZtVKYzX/LV4k58M8eJkhj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4206502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\Ninja\Desktop\Hack-List\New Folder\Anarchy-main\Binaries\Release\Plugins\oYsKwDG.pdb
mscoree
_CorDllMain
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/9Ood5SWkbwPn.AnarHs
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2475c46eba856424c41cf41db71fd5d6089e8be9031b35279f051da760aa216f
- MD5 2cf2efcc0e1d910d2d9c933ca73055d0
- SHA1 3bb08f4532f80bf0cd5a36f26393ba00beadb8eb
- SHA512 e16ca929bf2c7654251b02946fa7954f89971a27750e05c502acede063a55d88df16fb297c40c7bf54e04ea173cb6c3527e65ca98ad2280543e00e9ef6fa9390
- SSDEEP 3072:ubvh/X2z7Bqh1v59Y08mAjs0Ltel+qOeJHlpV8b+Y/Yi:ubvhPi7BqjjYHdrqkL/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
146894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
135KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/ActiveWindows.dll
- SHA256 3b67b9994db3b22a1ffe4c5ac7be974d1470e9892c0ce2fdc4aa1fdce6529f04
- MD5 11667dcbb0c3f4a2cabbb7e749abb8e4
- SHA1 aa265341eabf7a2b7f87aff44bcd74cd018fb5f9
- SHA512 04c6e179f11866e83d6fc931585e35314496a9df2420f3d10ef007a7f8ede282ae3ba30f704c67dc5f8702a8d7cdf8aca759df6df0d0bac4bfbbc599b5e88ba1
- SSDEEP 768:D2uI+GQ6Ztlf/Ws8NXtu8qzDi/NxnTj07Hg9RBZw/Bo:CrFZn98Ndu8qzDi/PnPcHoRBuZo
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Admin.dll
- SHA256 af2ec6aececa142de44371908980aa041ce3d51e4ccae151fcd86a7db8b2a384
- MD5 fc4a2c1fe09bad3c45b1667dbc5ee1e3
- SHA1 c8b48aeebc2701b604519860c8eb58d7d60b0523
- SHA512 dab8dda902d1e05f63a8ac9cb4afae8d204d2d678aa5a9def15495297787df3d75d21ae035cc24a80a7edd5bbd939727aa7feea217c2f4896073956e13b0792d
- SSDEEP 768:eRgZyI4Ph/U6d0vZxnrXCzt1tqvlbZQHX477fQtPS5j4p:fB4PzNil164cp
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/AntiMalware.dll
- SHA256 cd7ce00deaca14e500ab16c18164f11483a04b9e9b5ab5c6cdf87df42fefe608
- MD5 5597ca467d7b6e8ba3571c4bb052b586
- SHA1 375ae43aa132d705c392253fe08139d996a10a31
- SHA512 c8938c27019ebd1d55502ac66c21a22219f815a11640d3380c00733afa4ae850860d47c3e2a47bbd4651f3267d0d5343f484dcf36653fcde64c12215f615f382
- SSDEEP 768:kWJR0JPaDQbRvCYIVkFIY8B1VV123MhsLiYlsU:VJIbRUVJXV0l2ef
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Audio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1323a7212239513270077e07cb436af721acedb0c21c99b06c163a230baaa50a
- MD5 025864d133e416f144030cf22ea9f2c3
- SHA1 6be2cb2454335f0de00799000f65c5cee796c185
- SHA512 ccda6ef9847f89e53adaa637c7f762be22506b8b6bd2a5538b6622c33f3244f9c491e39e7df7512b5edced3d0395e4541b182f7da6a254b8891b9d64d71538b2
- SSDEEP 384:si+z4JdSCmRO5Gw5ZGuC0CWdseXGKfZ0CDzukNpLQ3s6XXLca78nOtX:7zJds45GwRC63lF27AOtX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Audio.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/BotsKiller.dll
- SHA256 44c3d6fb2e8bbc241955524bdaca1b6a90548e8769b9945cee50ba1fb35041ca
- MD5 30e2fb2bc2a5860fd32fafb285401ee1
- SHA1 57f9f8814bea72c06ca924ec08455b8aac351112
- SHA512 bfce9a9700d298fded24502775c6508cee31a7e2d65e66bb1a1c9016b1e8e7c173c7f2607e295843afda49aa02070b2e75b60e51b4b3753c4105de87edc6924c
- SSDEEP 192:JwOwaWTCJfRyRmvXHMFd2OsOGd/l4oI5/rodYHR6:JwxCJf4ZFwVhb+mW6
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Chat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dfa246c2763bf5df442a81128b3587f7bf530e4327f631cdd4dd79106738cf31
- MD5 8fc1192cf52f55ed5efb5e12210a37bf
- SHA1 dbcf714d0d9b0fe44bdfe2ee150227c2a0e7c387
- SHA512 74603de6069cc6bf02afa5cfc3ba1493240bcb7c74fcbd53219448134b79fb5ebefc1dec61ac4c6a04c56dc6d986887a4a68d87ae1dc07ba6d1d8b8afc9d480c
- SSDEEP 6144:CtBlKJ+p4JX0cZsaB6N83r2y/plBWnxfID/uKNlNQ7fOiLXyCrxO9w+KQqxe/tT:CVKTkcZBB6NKbBWnxfIvNr4siQqx4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
472838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Chat.pdb
mscoree
_CorDllMain
Name
.text
Size
454KB
Virtual Size
453KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Clipboard.dll
- SHA256 4ffd6a2c22293204ff1d9ea606d5398ac0286a2ed4a3f251eb0f248bb90ae6de
- MD5 b0ba61981f5f7b8ec9929e240b81e6be
- SHA1 36cac974e67146631bdeb0d89d5602c1b9120c66
- SHA512 84b228da4074545bd18df46c1dca268069066132d6f7b27a5a62ba9b770402030f4c7fcf73c980565f0b1aa47fb13f0d1fd012e06bb213580fe9bda1a650a8fd
- SSDEEP 768:7q23iUSHtiLxhdEvgtEGcJsU21J5+xa7QPXYt24XhdT9m:CHtijO2HZU2bsISI24xdM
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Cmd.dll
- SHA256 8a87fc821f1c3f6931cb7f908a247fcc2f83ff97b72d95519ad87f924c21b532
- MD5 79da3973167c94db5eb3248d570a059b
- SHA1 86eea216c64e84ad1f1189587320eb7c1e2230d9
- SHA512 97174313d64bae3069bfe9cdd226c9f19221c9c0d408b0ba7431d29e78422aec8cb8adfaf1931a653723b9fce40e447a48d411b1684c566d8253356b1ce6da6a
- SSDEEP 384:J10x7JfgKLW1DfAZJjCVNuUCTL9lYzUp51n9AsjFeKYSEkzrQ/KJWC+efBTQQN:r2JqBqJjBNpX/jUkmLuJTd
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/DDos.dll
- SHA256 4adf534e3a7ab6b52c273e31bb25261bd11b421fc081879f910ec8f534945826
- MD5 530b896b08efbcf8d31a3525c7f3e306
- SHA1 7095c06aa3773e92a58522ee17684bf222589ac1
- SHA512 d0e39def94795c2471c2fd5cfeb3fc86b46c4242df093a4562a2629eadbc1de7a116503878df57ac884565252017a4fa7c475678b7971b68e7f660007e9372a8
- SSDEEP 768:BeCWvMP+oqoI2uKV8ThO7Hn5lC4w8Yi5F6XKOO:BeCpPfqoI2ucEO7Z31Y4gm
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Discord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a43095314d5e32db307eef638d2f5afea7dd40ff6acda24fc28ce0c1632cb6a
- MD5 b591cff18fd7344243cf8a4eca624a65
- SHA1 29f9134bb33d429d27b87e6f2112b6753e1dcae4
- SHA512 ae1aa8db37182a4b8ee06249da6304c1c105adf06b2091cf24b3e79ad1d6d1a6eaab12bf059cd86deb04b7084d563a25d5bbef6ddf7857c1a34fc0e0032664fc
- SSDEEP 384:HfzPwa/ppmIwuCfMeSmfbQFFVBdseXG3cGh+JaL6lkSggL5XxXIUdwmuJpSVmlY2:HhGIwhPgh0Jd+5XxjwmuJpSV/I7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Discord.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/DotNet.dll
- SHA256 86b808d7fc05a7c0f81791e19850ab312ce0a8d0c73ab6e57bd759c56fd4e7fb
- MD5 7bed5f9fd85dbd250423c7f2e7b0f0f4
- SHA1 633b27de3913bb1d6efbe2b32df4663138af2137
- SHA512 c74224c22b6931ffd11cdbe48d8c83765747e6a27a89ec0f511b128e5e3d1753d80a0116cc14654ddeb0237138a92fdc0392987650c936126384331e5e86de59
- SSDEEP 384:J8iguvx9gxoqVzbsJqsUAAYld3wVQd/SplkPLppWNu4oksAzkhojvE0ChR4YooQw:WiBfu0vr6/kPLfWN/oks5SvEfhR4YoM
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/EVa7gBMKoaHmLC.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ea1ae7ab496666c0117fc20e704bfb6104b13cfb0408073a09689f863fa64b1
- MD5 64a3d908b8a5feff2bccfc67f3a67dbd
- SHA1 a17d7e5fa57c99a067cac459cb507b625dac254e
- SHA512 66374d720230799bea6ac6cfe3faadc37fd775a49d40c04facae1caf1ec658956bbda54ba75287d7128b19b97971bd933a64469da8e0884225c5a8d8b9423ccc
- SSDEEP 3072:/bFHKx2Vpgdk6BCNs19kPVoPsb7oR4ZkvEfxMxf4t8BkVb0Uc:/TVpgdkpNs19I6Pe7oR4ZAEfx+LiVb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
180110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
844B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Extra.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dae673b838de497c1aa8a558d4dd5963d90e8b21538cb0d9adce585ef6fbc915
- MD5 17db58471bf45715ba46b5af7920d676
- SHA1 0ab236a6d554597dac8fc40fc3e1a29f905c0275
- SHA512 29432c0d19be6ae8c8ab68ab1a7c4007d502222b329f9a0bfb994427f182028aeeacc199dd27334cdc0adabbdee7a07a3d24826ed67b05711c2370a4b7395265
- SSDEEP 384:0hfLE8JhqmxGhnGOheE6qCtdKudseXG5JN2ahDkz7R3bu6jUwv5YacMvvp8D5K8:wQ8hxGWCkQuMPkv5YdAva9IKqbnMK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40322
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Extra.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/FBSyChwp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0ea38d0d964815e2b84748a78bd5a829ae01586478e5f17b976f1ae763c8dec3
- MD5 0d41ccfaa8e7ef96248b8270d1a44d08
- SHA1 6ee22bdb91d3a18e0b45b6590eb69bc9a0b02326
- SHA512 a0f236f6dbeb1763fb1c198616de65b907a3a5edf7ed9435c2ad0b5826d84e9d2f25e96aba4e8b681ef495612cf0e04e929427a92d332164ace89e797bcb0e0e
- SSDEEP 3072:OXwOuoHBhyYr+x5IA+1gUtaEKJ8px4e1hkamm9RyxLeN/dIfMU+:awOuYr05T+KUtaEKJ8px4e1RmqRydeNd
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
180174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/File Manager.dll
- SHA256 d92054c707c046d206b0067a789b822bba65a53fe6052ff174f9d3743053f6c1
- MD5 409f91cda95ea16ac662853af480c082
- SHA1 8e896a81bbdbec745adf493ebf3ac6c0407476fb
- SHA512 166ae3ee24ca1c504b6307d68fe7a4440bd2798ab258327b886ba6a7b9d62ce2f5d34ba45cde4be401d5c5888b45da37bd6588a10fc3a6e81a9e2769e24f6f02
- SSDEEP 768:+AlPMf7Ob86SpiS2JRLYggY697aabVlDtukF9f:+KMf7t92/LYG6Nuy
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/FileManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50f93055604c7418fa0e5536afd0b4d535db752b5e7edf588cbc14c1570613a1
- MD5 dab76ee6ff2548a9bd45c0e582f4d90a
- SHA1 70b0e615c1728aa8198dd4be4899fd883bffa1d9
- SHA512 431f38a2b08c5d9f9914a05eca7a32084b3b33d473cedb91904776417c49d8599ec81c905a857a118e8d6b39a200accd14b1c21a35b1faea760084fd75967501
- SSDEEP 384:V/fLIMFZcuWQHBVugXvYhXmovTuC/Jn/KddseXG/htVhD8mouoFFAEFuc0oOJPtp:9pBQ2ovTZ/kdczcFhntYtny1l1E
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\FileManager.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/FileSearcher.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a91d0552200064646768b1fcd393568ca6144279ef0543aee6a74c4d11c34f49
- MD5 a186a27b6e893b60bf236120a6a329a7
- SHA1 9186d71d524f2716c7ad3e934e134aa68366006e
- SHA512 f5acc60bdcf71eea700af6c6372e68d58cac1008a6fc2850dcde1c59310cb84527725740f646be4a146adde6f0878781101670ce922c3566b34262da857aa847
- SSDEEP 3072:OUI94v0G+OSJqB7OOaJOqX8s28ccc9k16uLWcSCSLeNYcEeI/KQ73WmbaC4nRZkp:YKWOaG4X5S9k1zbB6YF6X
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
292330
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\FileSearcher.pdb
mscoree
_CorDllMain
Name
.text
Size
278KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Fun.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b25c33a033bdc85ea4db8c3ea89bbfc7d1a1dd80d21a1835bba5672759efdd9
- MD5 e07004ec43ed994b9a11999145f5a43a
- SHA1 00cba09ae5a38dcfdbac1a8cff9cd1fff2c0b3e7
- SHA512 39948577cf0185ffbda3c2757c7fa746e41a169ca7fa0a3718cc564fbbec439b047bc540fbd5ac59908965424ef11f6564d9795b101bfc58656247e76b0c88f5
- SSDEEP 384:T7fLviWK1Xr4GtVmEc6BktslnlrqKQdseXGtrR52bhimwy0Xprnhc4r/f7rpVqKX:fGXFEGtMqS2lnhQk95Z3nhXrLDUCE+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Fun.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/G3nl0mDcABnDuZ.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 060d467cbeb0a58696287c052f3dd9b3597331b1c812e3e2882d6c232f8511de
- MD5 97b8bec4c47286e333cc2bedacf7338e
- SHA1 764bbd0307924b71ca89538b42996208d10c9b91
- SHA512 a40970622a594533349e75fc2022314ba21f05fc82709d6eaba82f4a2bc343c960029ad2825cfc034ce82622722127d149993bff88982f02d6dd6b5b1fb60fbf
- SSDEEP 3072:EaEk8xLhWuo2alMFVxzPUBvRNHosrO0/1gRR0foQPssGeWSz89:EaEk8PRo2al0DzPUxvHtrN1gROffPfGl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
187198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
175KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HBrowser.dll
- SHA256 41c6c5a8ebb41572e4903908a23080c1ecd7386ae0131f4fe87f2a8e14df336a
- MD5 f8e8db566e4ad2924b8973ea2218f2c6
- SHA1 550e9886e568470634bb188d5168b884de8ad533
- SHA512 8f7d90e5945c7df3b700c88896171b228478d56ee30d92b26e60c52d1bd0fcbdcd8bccfcfeb83d94781b978e8279050107e12bdc75e15b89c31bd31af748c923
- SSDEEP 1536:VfZXWU5S35MH8h4EjhFjyUitZobiXSrk/jg:VfZXL5mMwJjhMUumbq2k/jg
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HRDP.dll
- SHA256 63e05c9a64641ce9ce3620293be5e1cf5d8afe8d91982375f7e466e1450b30a4
- MD5 4f3be09a3f000e5d717d698819311000
- SHA1 5e809e1be7858bff5e01adf20565a4985edca219
- SHA512 5a8fa8e0d0bfdbc81b91081bb8789da97a606d267432b4d09e888ef89356ec954057136e590cc7db6be125195c0f2ad1568116f56f47bcd7f581739effc292a8
- SSDEEP 768:Bb3CzsCncWFVqOs0wXLAxpR+l9z85Z7gYe2xxSgTlNiIae+EgkbE:BTCQCntT3bwXLAxM10Z75QgTlNiIH+E0
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HVNC.dll
- SHA256 6ec1d49bfa973b66338c934bb8fda569a043dcb6e2227b8ab981b78b487f7f35
- MD5 720a634bae36d002f4b09121a82416c4
- SHA1 7c34ada39645c8d063c6bb62af391e29638a6bac
- SHA512 4f926ad7a5d1d242449fcdc6c8fa8e55cb98adca418b30840e9e2c7da2e1102cd5faaf130e5834622cc55fdb3c6a2efcc9913abf1b1ee913dc78b89fb771801b
- SSDEEP 1536:yVqfjO1mo9BnOSqyHUTbZ92DrsZxbCNqDx9HFuLrqQD7fXpLPCsWcx:ysfaA8BjCZ9SqbUqNFELrqipPYi
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Helper.dll
- SHA256 6e64b6d381f2563c2abba6579fd0f25a931064ac2af4504f54b15f7349a36c5f
- MD5 8223e618f64eaca49051c29a29dda4a1
- SHA1 1f580c7a25335d598f4e90f8a959c9e7c945f9da
- SHA512 ee513d55d2030b709c4392947b9e89cf855cbdcee17826e1b36d1a9a927a41345035f5799b21c9643aa2e0f801443a03b5b328239ba4724a01f2e77d4e79146c
- SSDEEP 98304:d469N4aCilxKh8P82fnQuTmI22YBvYImca1B4IU6ZRxvRbz:FX4aCif/uIEAIna1B44RxvRbz
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HiddenApps.dll
- SHA256 77ec9e338acbcced0cd5fae1556ca26ec8d4c493062d27b19f5760938c99e8a9
- MD5 1f85a383f7dfd4b2ad5a231f46bf3533
- SHA1 2cda68c2949471a4e943de65c0b807b0c3288d75
- SHA512 8b17f93a0205f7ea991e147600c647647c3ab3c04bc73701c78abbc483723d8628fd1551818ea0db5a49be875f033be42fe0e763e15fca39cdfe303bf9797232
- SSDEEP 1536:eo3uBLB+Q3rsppzCJWofDmA0wILW/KXRvIHvXBvZ3cjfd:e6uBgzEPkwILW/KBv2FxG
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/HiddenProgram.dll
- SHA256 15cc6b2862bae083dc2d6b1c160689e1390a2365aeaa6e70a933e968fbb05dfa
- MD5 e70990638797ad79f862180b9d06b53c
- SHA1 927db245fd7ae3680256b3de2182a23f92bd4495
- SHA512 ba30a39735878d710fc91888c5878c58899e212d9e7faa97602aa945306c6b95351be799141acbf12fba1e81ab1fd6dcddc372229024003011595398aece68bf
- SSDEEP 768:9KzzyvoqveS5gxa+cmucfIM3hPnfWpGDmIyAPYrRW2d0Pkrrf8eRiGcYX3:9kywq/as3mL1FfgGDmIyAA1WB5eIGcC3
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Hosts.dll
- SHA256 31042de9a4004297a03ac9714e15657376de104fb6099cfecae2306da4717ed0
- MD5 f001d98b90208d1856ff30323e9e7974
- SHA1 720dcdefbe7b2a95f505535e8140acd3e72e8097
- SHA512 34007a073ec6ddfa4d0e334cb923c8aa7eef793ec211565990ce812609de859a390ef18f27706e4a4efa456e0787c08805a04cef22c6620fb06e17558b3f477d
- SSDEEP 768:Y+5DD6OrEz78BDLplFxe4JhScRhF4+BOmSHzLGt4:b5DmdYPHF0I8aD4+BOmSy4
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/IconLib.dll
- SHA256 7804ba869e67a8bd8270461ae75b6d38970c6d855e12f1fea0dfd8713b6f6934
- MD5 af8154cc71e57761a39743861b244870
- SHA1 929150541747ace403732e884d4679831c372a32
- SHA512 0392ef618ea7e92ff8075a30df7097b9aed6ec697cc33ab6db8d67d3d856c5d6531b0f548f1e6ac57788e5e7662729fdbf44f6f5575052f05742dce25654fecf
- SSDEEP 1536:PM4Yb9YM9LQz8h9YOzJdRebvvuln+EaJswp9YZaiybm:Payy0UNtebXuxed9fiyS
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Information.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9fbfd1036e579edc9498625e86c45743e4ad8ecf5960f4a87a9402ba1236448f
- MD5 a7670d3509baa51af6566b93b185b854
- SHA1 2b322b936eea3dd5414efe589acab3cb49dfe9b2
- SHA512 34999ca9b71de6ed4a3cc99177ee472bf90af9282a095d2cf6b05f17e896f518b46382aee021b540f5422c0997680023206b1281013c468a72116cb646a89882
- SSDEEP 384:BRfL6mS8ayvHxy63m+tDZdseXGEXNhDYLuA7InXxtXciyxVM6d0PALKz9G+mZ9:nBS8x72+1ZTaIn3siOvePALKs+m3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33362
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Information.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Installedsoftwares.dll
- SHA256 a44723ca98059a803723e8830eb6424fcb3a2237026138560bd64f8864343c1d
- MD5 6b20c7f7fa597e22e2bb592e82997672
- SHA1 a414507b7cc5fc0bf234a41c9688745f4401af6a
- SHA512 7372394cd38efeb171c73d32c0f03785822c3cfdba2b2720aae6181705bdc6e6c0c80effaa444686588f334294ac9e262015b931c076cea04a94682b4fb73d10
- SSDEEP 768:jEaIhpiKJP2WcFfJ5xnFqK0heZuGRjTpIUdj:jbI3imFaHxnG45lIkj
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/K8oCBS3ThnW0WP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 234724f14dbb999853aeb872d7e6c3ed0b3de5b105009b5c66131a2af8d0dbb4
- MD5 1681e0f3311751361030ff30a957a1ed
- SHA1 8f3b55e130af507549817fda37474a1391e6b8f2
- SHA512 60690b2c1e2816a640f5763f9c20de9a39cb9735ea4a3f0bf4f477d3e184f8791e556313a7523c70ed2fb9182d520842bce70057cedd5cb89b923fd6f9067dd1
- SSDEEP 6144:qPcVUKQh7PTlFOEPDDeXmCIW89SQsgy/mVHeiOA7+Yi4kZd:qEVoVn2Xa9Say+b+Yi4kr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
387882
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
371KB
Virtual Size
370KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/KNTmoSnG.AnarHs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 234724f14dbb999853aeb872d7e6c3ed0b3de5b105009b5c66131a2af8d0dbb4
- MD5 1681e0f3311751361030ff30a957a1ed
- SHA1 8f3b55e130af507549817fda37474a1391e6b8f2
- SHA512 60690b2c1e2816a640f5763f9c20de9a39cb9735ea4a3f0bf4f477d3e184f8791e556313a7523c70ed2fb9182d520842bce70057cedd5cb89b923fd6f9067dd1
- SSDEEP 6144:qPcVUKQh7PTlFOEPDDeXmCIW89SQsgy/mVHeiOA7+Yi4kZd:qEVoVn2Xa9Say+b+Yi4kr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
387882
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
371KB
Virtual Size
370KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Keylogger.dll
- SHA256 e3723e369f8462661d6b6ee497c2a56bcb4ff607ea49d472b2e7addd47ba8cb6
- MD5 1ceb5aefddbd0aa596a9bd691444df2b
- SHA1 571dfadc3ab4bcfafca8eca6cb358ef3b931c43e
- SHA512 3a50eb4425285903698bc559a67bf5e9320601ba6f4b53794de9d919d57cf02ceec63c4d7e7d91ab329486a5506a014b988dad7b60a11138ef39c6972ae4fdaf
- SSDEEP 384:JmsVjKdtr8FP7H8kCsu124UCJi88el1gJb5R7EwCf4dzOXV+OefTtgEYXuj6++7u:tjJpCsDhS+ef2b5uwlk7exHYe+LaUc
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Keylogger.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a17a5bf35d8b784c3111632ba7e0c30a2c1a9c2c95b549235affc16d6d055477
- MD5 4f846f2117c4eab285289b0090521b1e
- SHA1 e25287c39bad32159417c5f0bf798625b6beff45
- SHA512 fd946b5f7c3c7d32f226897283de7ba3b4a4ecc2919c363877f1258cd24ed1a52bce53af2fe4ef34c4ac30d00fc456fd4e1593b79c37f7c22211f2c4f6092e5e
- SSDEEP 192:irtmcuq65SoDxi4maEYbRzmEsLkjgv5JHT1eJYHcwY7fazB+LEi:irtlF60GE9rUhVsLF5p1rYydmE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Keylogger.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Logger.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f744c46e4c678d65d9682a0f42dc2b82277ea2d879eeb3d708fb70af2af40a94
- MD5 3717491f7b1a90aaa5f271ab14147a9b
- SHA1 bced873bf58c79d2787d8ea501e7888b260d36f6
- SHA512 c45dae23e4fe7524aba823a834b6882572d4de10034291b81236fe6a44457e4d8fbc935b1d673b6b83260925f76ba1a0ae156eca4626b795f10b1a1e4f327a31
- SSDEEP 384:KyQLebQc3aImZ5mzk2yKajPdseXGLN0phDbuAyso4bNmLaNDNCsQKbQr1jIC8:/i/bbUyPMeBbI1AQ50C8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Logger.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/MessageBox.dll
- SHA256 a0bdb472748cb019b15d900e4a7a5197250200465876a08bd7ccd8ec8dfcbbfc
- MD5 79fdd86c4531f11fe13a2aec4ac34be7
- SHA1 a791297d899d457eb815e7e8776c85b5cbda4cf9
- SHA512 88b45b751d6bdbf77d7a028e59edf700cdd227010f743ce1a6f787ad8def4a374bf3e8041c461d5d9e16094b43298bca316f76bd3dd172732732d3d3b550b54c
- SSDEEP 768:wOW7AM3cm9/An1iEDK5i3H+smcHeHE6ve/29LQm:wd7D/AnXDK5Iquepvhh
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/MessagePackLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 007a50a1275964e14abecc461549ae495147417d601c5900f3105330bb2e4a4f
- MD5 aff009b639ba8794200e91f7ea8915d9
- SHA1 772ad6e739b1c85e09a3c2e0dc50797a8352ee71
- SHA512 2f68cf7805c8360d343c97ffd734c7f277e5949b7ca74e2a5a39c821eadc32415bf1c737b9d424003b5040260c9fdf6ae4eeba14378a2f9f8ddcdd23aa42bfc6
- SSDEEP 384:itmuRruSxseXG+PgWuULvlxX/Db1NSChgqz:iUudV/llxd8qz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\MessagePack\bin\Release\MessagePackLib.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
844B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Mic.dll
- SHA256 3552b2b551ce7380f3be589575b951c3faf2d875e1f521dff8595027f287dfb5
- MD5 751a28c1688167319c4b5934466636d4
- SHA1 89e09680f89b3c04ef3e93bdf91d68b90e86a060
- SHA512 1d756452e8f11e3f6f030969f2e2ed8f514944a269d40d0c1b2fd8be746ab360ec1b225d0be4ae290e27954da04c4f204996af055e86bf731dce271ef6123be4
- SSDEEP 1536:MkoEH00txd3laphEoro5+SYi4ekCuMGOkwT+zNVRxp1qmY2UWQ8N:MXN0tblEhNoDzRKk8UTG
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Mining.dll
- SHA256 6568872f9eb4bd561806630819b5e46b7056fcf75e22e0fc2f1e92e5149d9282
- MD5 85a03e407c91f79be7672fc3151e324b
- SHA1 48d6f457c645e7de459725bc7bc0e2326d0bd8a5
- SHA512 cb5b71b11a19bf2af2f5bee4cb37da7f4515f45c42c0e8432ceb92ccf47e2e082ab21a4278551d6d6baa0aa71c435cc0da58c289b8b3cdc1665cd1d33e77372c
- SSDEEP 98304:yrI/bzN+izHkWasmhhuReDHABNtG0i+VpOlf47/dcxk3zJfaJwiy4K4K9VGMRRfw:8igixarvLo1ikOsVcxYfa4TRRfw
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Miscellaneous.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 588ed6232c93d2e18a40051b02b6e0b0c2ce252b897667d5c6134166206c7396
- MD5 8ed27058380bfe4ed4b7a761209ad623
- SHA1 4787a6d8d7a55f214d953a37718f942155e800ba
- SHA512 c31450e4f33eaee44e59711129ca4c1207724bcbf2f79c39e077589fee0151f123aed8d95ed2ff9519b0faf2fd1befd4ec1aa9f5698c501351124be7711822e1
- SSDEEP 1536:IsOZ2/gahPUvCOco3CVp8inOm3O4pj+amjzTt+IdjEl:IsOZ2juCOnSVpZ3O4pj+aOzdK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Miscellaneous.pdb
mscoree
_CorDllMain
Name
.text
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
692B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Netstat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 479371c859f9e18a38b0832cc49b817cbec3970d1820badd5e274a7809afdeea
- MD5 f0da85bd2bda4f27567910b80481b920
- SHA1 4363e72fdd4de82b36ba248c899c3bcbb02399be
- SHA512 237020ab90c043b34053eb551c4e2bc8bab1243e545e747e433dbec409caff289c424cc60a3068eeed0a101d3b5181d74bee6f7155b35439193b9ba018396f90
- SSDEEP 384:3VOeeN9i/cmrHm2kRpaeFZFXO4JA2oh93dseXGXh0gReDmYuDeFjSoB4Sk7DEY3:Fci/tGPraU7eWA2oPz3TB4P7R3+V+I
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Netstat.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Options.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0460389a3845a271ba5d65b30b66c57458f2373d75aad94e92416d772d06df5d
- MD5 0fd19be97a94b00e440d14b06449cf92
- SHA1 c0ce1911fe5ddd5d9b9446b16df6c51a555e5415
- SHA512 1049d90236b43a617ee3ede56ed175a39d1bf090ad1469f9edf71d91fdd7267b1aacdd3303a1ead11785aed2bc31dbb9fb1b2f15461cc793c7ab7c8b8f31e9f5
- SSDEEP 6144:50ZHTjm66pzzevOqsdHUIByYF3ykIGL/ec:50x6Jy2TB7UkIS/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
391770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
375KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/PK0TcnqTGFagQTS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 991fc53fa1aa7b5cd0b6e19dab536873d68e4413fd55b533601a3a2582d38a49
- MD5 fa90a2aee0d172000257c4faca31237c
- SHA1 b317281b4acaaf1d7b7255c5e92887322abae892
- SHA512 b05c0b52e011089258ad31dd23a1f8a0cc8145b202e42e2a9d4fdf892c12d4a7b5843cc7721041295ab796e8bc98747b9e321c4e54bfd1a7c9a02dd2796fc405
- SSDEEP 3072:Z60dHpQssTFrcpvZFlOJA3YCVbbME5f8YpIVbltkksqBRbRw:xPsZcpvZFlOJA3VVbbME5f7pIVbTkkZJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
183886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
172KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
820B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Password.dll
- SHA256 b847228618df406225bc42d2675cc31bee9e8af99987681698261e1b6c5b88c9
- MD5 247a3855d1d6814e7e201968bc7751f6
- SHA1 6c327ce2516f6835591789bb8666e82a3ae01852
- SHA512 29d13e3d92da39c8227432925572f2a7880ecb5c9dee65d8d15e85246d0512276ec0d93f3af61a153861a08847fd055bad6797f13e576dbaedcf85fcd7b8fd28
- SSDEEP 768:z31CNPKw0QIf0dYIqB7yE2L4yv0rEbT6Q9uHYoBSUoZRaPmevE43LQCxgKRgmG:zFCNP10JIqB7yXlv0rE/5sBq03ZgKRK
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Powershell.dll
- SHA256 4f9c3025a4e588cb646362d288bb47b3a5d99ebdcd7e9fe3b2e4abdb2b0a6839
- MD5 fc6d64e8bfa7d8c02e0d13f2667add48
- SHA1 f53e7331fe2d90de0c5e4a77d47f1d6c7c918962
- SHA512 b3c51eca839f3dfa840f60e5f6901d6961d9cd16e683d58c82a0fcddd958a9e0068190a207c9edfad2856250d772adb2c269bd7a7aac06d8c456eec238213a7e
- SSDEEP 768:5291m2h+c1kL/dQhjEG0yHoEr4oKlbk3JyGRYs6XsddsWv:p7cgsEG0yH9hAk3JIsCsddsWv
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/ProcessManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7d1a49c2c1ebce3b465f5a97d1771bd7681a263b676b0311a3ad9e58b87e1f9
- MD5 97a477186db32bb9020166069dbc25bc
- SHA1 bb1eea629845e6adfcc8620eb80027c8ad145942
- SHA512 1e17734ff635b555888e686c5fa6bd8e86568bf45885c407bf2afbb96c95864781cd2274f99322df0d3683b5df504148f941dcc689e50d6b829db5a4f01e021e
- SSDEEP 384:qH5CDlBVSGumXg3eg9cZNvPR11+RIdseXGdR26ZDWl9fEZ5QDGSqunLIJuIeJgnY:qH5Cx2aXQeOkFyiEY7M/Griz2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\ProcessManager.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
844B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Ransomware.dll
- SHA256 60f7196f410261d0deab7233c0c524fd1e5d4621d561097ba945c10a63843f04
- MD5 2df5afade779e392d23991978322423a
- SHA1 4beff3a50cc06d27f4311e96790cc63da1e9320f
- SHA512 d2e5406b41819a11415ac73f217c71e88e4c6b42e9c2bb798e41870afd4e88402eaba7ee87e28017c8468ece8079ab471bcf76e342854598955bebf63eb570b7
- SSDEEP 768:pHo+xL6ggpwYf7s4eBNiFxSMngvAFG7qHlHpq8dHu0HT6+weVXsK:pI+co4x3yAQ7qHfqULH2ZYsK
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Recovery.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bc3a9390c043f8002e356ad34b2b11d3486682d0c275ab6729bb4a312e324f51
- MD5 08131d6801c109f0764a4fe690aba8ef
- SHA1 e732af02326483700eda52ff40dc70cff6b7afcb
- SHA512 228ab0aa0ddfdb0c099f1db5112304d776cb97ab2dab376d38023e446cb2aec30d9585eba444818f3241ffbc28565a1aef11f97b5b42bf57037de8e4a8536e2a
- SSDEEP 6144:sb8xPy7+NKMDMAlcn38OxKl9x7qs9Pxcm0AUNy9rsxLaxHUX:sbBMDMVqfBdcmDBuX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
322958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
307KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RecoviryPasswords.dll
- SHA256 b4d1bc9bf68489845d167a5135a7d159c0009c5a68a4a4b31b2bbeb43eb3abbb
- MD5 844beb02119cbeda33eae152f4e408ff
- SHA1 fdc8322667e918c03d9d2f73d1f54de24c0a6841
- SHA512 dae1ce67f735859ddadff37e583b3de57618769d7d03cbcd2be7ff8e801ac411448e1fa36cb4eae7edbba3a0309acee5ac5109ad1ed4c81b0a9571c6722143af
- SSDEEP 768:/Uky8zFS62+C046brJs1DQw5/xqvpMqJ1osk1o99msa1sWp+IFlSW1I3nZ:ckySF++Ct1DBqvpMKosk1ob0sW8ISW1w
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Regedit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e9445775af2f2377469ccf463ffae76290f74ad6bfa324cbb0b156d971bc32b
- MD5 f5f2798e0ea216d11aedb8257b7cdfe8
- SHA1 d8974a91f8c37a6096aba1c58f891533590a0718
- SHA512 d8148ada3a46e37f78ff40d23565cd020eaf65b9e62ddaf0be0ee1397966601f3452cdd8a6b655c52998919aaefce78fed804a3561322befcbb127e1bcc44e4b
- SSDEEP 3072:3Zv9We0TJcowFLHKlXX3WqGdHvIPI0oipjM+o6jI1innUOx9ttpXCC6CpVpn/qI1:JseF/MoYjt00nnzXCxorty
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
294282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\Regedit.pdb
mscoree
_CorDllMain
Name
.text
Size
280KB
Virtual Size
279KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RegistryEditor.dll
- SHA256 cf7e65f195c87ec3a3693229576daf1f0678a2f32ae764f1ed1944b8004a30e5
- MD5 f24d9fd573f2bfbf20b816558fa3a6ec
- SHA1 69a7e2bbe161cc80880efcdde81b1eced0fad108
- SHA512 f03afaf96d39b6fced109b86d1b12da275a4cc5c87bc32023fdc4cae914ff397793806288a952e3c3b45c0d4da4e12dfec83ebca39019d58d2b8c3647dc2542a
- SSDEEP 6144:1MsJVtXxufBu8QDIjFdgHYZTv0nCk7Ldh+fWabKQKD8qmTrYjnz+5b:jVXxkBu3DIjzVZpkdTabe8hYK
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RemoteCamera.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4cbce783aff5305afd5e15e60f077ac5dd2b9d40effacf1089d766c02e7fa112
- MD5 59361cf454809302313c7a4c2403ba0d
- SHA1 37b02bb2c79452e105ef27dba2bde7bbce82cf94
- SHA512 4101a25ce5b6951d035f48560560e552f7b252911bd62503867e0ca4f9cd870b48f2400e1cc3a7126eb9d4cf85fe7d6d765cb2afb695de8ccca610f0dfac9320
- SSDEEP 3072:K03z44qqYY2fCjjFFjjpHNUU22UUKfEqzWfmGcb2ZqIpQzpPhz4g1kzV:h44qqYY26jjFFjjpHNUU22UUKfEyIpQ8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
117778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\RemoteCamera.pdb
mscoree
_CorDllMain
Name
.text
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RemoteDesktop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5bb6b6c1c4a1bcd5b53739f455fa06dc79b05a58c24dda17aebdb19700abf89d
- MD5 f75278e1fbfa2def4723a73daec54547
- SHA1 5dbffd558e99dbbe66d06efd3fa40f98d66db6cb
- SHA512 1d779ad89fcb5dfc07da5e19f3583740907a2286454413535b9d87943252d89dfda56b675cec302e29986f316eac48f93f7e6edf612d7632931cc55567505e57
- SSDEEP 384:visLVw2bJSO7b/5rDK8mvrYLBllgBuaH8Qu1pwi2dseXoAakghD4B0AIug4IzPTr:6Ylg3voTB52cjyOT1UuvuzhC4yb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\RemoteDesktop.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/ReverseProxy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d360a46eca2f0721cb7b7080fabc41595d9acf25aa787ce76f8dd091a6d8049
- MD5 f83d9cf1d492d2c87e25c4584b0e2691
- SHA1 531d83bf531368142fdaf370c30f146ec6bd951e
- SHA512 110c500c23d53abf76eda9addc232479aa6a6d37251a06572144a53ad871ed9a87b9e02d9df9b75654487a72fa0e51be94a2540639a7e176dda572fdfec23b3d
- SSDEEP 192:jbBTOv+EgIRtac3iIs8YviqeOLUVw1z4ra2ZHouB/By0t/WJIGWl9Puyi:/IvpAcJOLUqFkP/By0RX9Pa
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20346
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Plugin\ReverseProxy\ReverseProxy\obj\Release\ReverseProxy.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/RssCnLKcGRxj.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e204d15f0e7269d364157aaab265a5dfbe7e76c9f6202bf90998f0edd77ca248
- MD5 f6808c4fbbe0275db03b2cc5b4c2bc0d
- SHA1 e40b61c64c68f72fc5144f5057d54229babdecf8
- SHA512 f077c49f6943d0e40799b3b42d1e11f50dabca48305c36ef2acd3258c990e0e0f982fbb0c27b1243aa15d2ed7b398b70f07dddc9ba76ff032ba74a24c8e08fb4
- SSDEEP 3072:P1F3B6k7/u/cVnvqtXEIGyv5LBPcwk4V9KIgBH/cNw5/UzUYNv:P1F0kDu/+WX8yhLBPcwk4SIgBH/Yw58P
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
191774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/SClient.dll
- SHA256 a4a90a2bee9d9f882dfdb6d249c64b9875ba311163cadc19a0d6a05beb9dd81a
- MD5 abce8d20ca714bc04cad8a4a070931fd
- SHA1 cf109433c23645468f55ac434c554f369d87c954
- SHA512 ce2a34aa753fddc92dbb2894031b4f0765dade02530f41b5c2e8ba7cab4b5267524dbdb5ce174ce6418590533e49242b8c3c63aacedff05df65943142246d90f
- SSDEEP 768:JbHYbqQWujUnAR+wZjWgBwzAWjqL2SoAfgcgy3k:JbOqyjUAR+0WgBwsWjU2SoAfgcZ3k
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/SendFile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 072d48161b09b35ea7f698a4dd7708005e2c39ce96fde8dd140da5d3ff900c54
- MD5 38b26e87939cb40613f0aa2fce3372af
- SHA1 e455e64391ca14d08f1b85b9747c38c661be3b54
- SHA512 7d357ff9a1a3024a79ae1408249eb9941af1a50f21cc81f500404d811bce9f82adf0eabb953896d132dda97a3b3afea409fff39135f8a60c034204b28121e6c1
- SSDEEP 384:2MVWIGMyhPDe3Mm0xoQ1z8MRnuSugdseXGV/nNhiU7eukZRXYhNczlFILQBCujLH:Yxen06Qd8MRRugMCz6azGetz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\SendFile.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
820B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/SendMemory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14be9c3ff0aaccd55a2fc7b17fe63009ae3a746c28623efd8a7e66150f715a32
- MD5 dd61babbbe5c58e8c7c87a1795ff63a6
- SHA1 f6d2931d2c11a57cc12c2f8bd059e6b4cbba44b9
- SHA512 724be458c812a8b3f0911418f273622f8a1a2aee7fc8ea52e072fd5be673293b867b551a3b79008729bcd83098619d69cb57468d61af415054f1e97bf43737fd
- SSDEEP 768:lwh1vfIOJKapaELei6rMkmYL5tHBDS+Jm/:lDEUrBmGnU+m
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\user\Desktop\PandorahVNC Final\Venom RAT = HVNC\Venom_Development Gay\Binaries\Release\Plugins\SendMemory.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Services.dll
- SHA256 37f53853483d4aa397388e123263505d5c6a08155e7b4fd07af3d9f3304449f2
- MD5 6dbd16a3a98626e7b0859981c2679753
- SHA1 869a07ef27bd6e8dfaf10e93e3d492b4d4a6c804
- SHA512 04384291cfbabbb14d66616ea415d959b53dd8fb6c9e4ab405d12c7a71348ddff0fcca8b116e1f3ac604253221d54098a26ca28c9eb404132d95072365c2a669
- SSDEEP 384:JyrEeWekViigns6t8VAInDMktJ0dnUH809+KGxUty1g07VPzBBqMK9MSc2ks6XMc:orNfkKnHIIB0Q2eVP1pK9i2gDGYiFi
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/Startup.dll
- SHA256 b83fd2bcefbbcd1e3240e27b4c138678b1f88e9ec6267acd533fba925eee8bc8
- MD5 12cdf380df0305129c98ff50a5a2c508
- SHA1 2c40b5ea0cd8c38a2b0b8635d655354e0be6e142
- SHA512 65e3a71344879e86a2e2d5a0f2440b24de264883e8d3b4b9967a86cb5fc221dc4a27d5e8e5d7b4a86a1126102ffdf4c9b885236befe3718c9dfe6bcafe10b561
- SSDEEP 768:CTDL1PYXZoKUJKVw/DxFNQ2EfHom9otgzXOKmCB39:CH50UUm/DurAm9otgLOdCBN
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/StreamLib.dll
- SHA256 d67e7c5cb612120862642af153d7ae17cd77b1f4f043f8c26f62b6c1b0d6caa8
- MD5 a7c24c07c9a9b624eadf69ea51c2f063
- SHA1 19c74b4bd0ea43a695d2e14c6b5babaf979fe6a4
- SHA512 677ca0855353149a4c9a8c0bcab85dd59ba10846c82fad6ed210d7880ec6e2fa834f93c746685c8d6c32d0bda10c15e67186e49fdbe16e741e80e68909ea61e7
- SSDEEP 192:JiszHFgegSEJ3uE1i7VshFzB9eMYyG5tqPcVui+VeBL68QOiaGe8OK+4Flt0XYtj:Jlz97nVsfF9zY5wkLwbNezQDsC
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/TCPConnection.dll
- SHA256 9aeabf416db99b69c8e9173ec4818fb5858b252604e216f038f71c37e066abad
- MD5 4498c02a6fc89dd9ef5ce78a5cfc19ef
- SHA1 a86d63069c6364ce80d2b5139c84ecd00a54f7eb
- SHA512 e8bb8b147f3c4128e7682223dada284cd87d1f83a2191188213e12937ae27fb5ef0717eaf226bc425cd7805c4c87012a31750fa5ff73e57051bd6da7587a2d14
- SSDEEP 768:XFcwSUGrtjQVienSaC+XMpmT/qbQ6L/KRJN1aiZIRVCUE:XrAGkaYpmWpL/OVZmK
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/TaskManager.dll
- SHA256 5958e69420de42bf6c1b3d42d43f26a4186c3a376c3ea3eb8e1deee4a380bc95
- MD5 3f29390d8cec06922b7e4a62b09b4a80
- SHA1 a6683bbc0a759336fa750878abda852c07dcb89d
- SHA512 2245ec91beeed54013bbac51bd657264463e406343a643886dd976afca0bbea8180c55c53f19ee391d92fb0310ac2ee938ed55c75d11ed1ef870cd2b426a6f6a
- SSDEEP 768:DnnslheXXyryYvxdyb9utxAMYwaqa83F3iqZZPgJQ:bslSX0bvybotiMYZEiGb
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/USBSpread.dll
- SHA256 dc325b03f2375abd8ae4d40aa146431fca371baf291c01b79d732160384f5fbd
- MD5 e0cf144616d27108b6a529f20a3a51d9
- SHA1 78fe4ed6869999c5eb29fe42f88ec82fce7c5d45
- SHA512 e5f46d541f25076bcf297dc3b24be3fba329a23bfb313aa56b0b9045f1a87df98c4471b4c27f82560eed41315658bd6bc960b1289212c175d0be39dba23e5ced
- SSDEEP 192:JN/shRLtDyaIsduOe5aiTFPHLRVO22i/Zt7sgKs7yx8xtOOfyK51VRsrdRzAKz4f:JN/KDNOakP9P2i/Zt7soyIfnVREdRzri
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/User ID.dll
- SHA256 7cf520cecdf08ffe81df9544e03eebf376fc39ec9608b9d8b9e0b9e0e124aea9
- MD5 0268797e0c36da78c66240a016495453
- SHA1 11da329cca8e43367d009d737387faa01a61776e
- SHA512 54d8d5377a40fde43cb0e2d0f4cc06d51cc68735be166a0b745eea67170c297496b36f60d5e3b3269ac810f7db4bb08d7f7491feac84826620730c8a4b78669f
- SSDEEP 768:i3Yu/xD1ZRWrOYBQikanTv1vd2Lzt8ylxajaqG8XSP7mKtsRs:iPHqCYGi5TvU8mxsaqWP7J
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/WiFi.dll
- SHA256 7fb3f3b38b7022a426b61a3a2b49a19571a88f634064f62a74a39ccff2d6acca
- MD5 5468a8e412c5a9dd3f493cbb56549dbc
- SHA1 86cd2e8de054c19e53bad2f4520c90914859452a
- SHA512 ca82d2a92ac495aea7768f5fba13f3d22ae57ab15b1a99cd7582c78d37710d49eebe51601716a5a21e4ac62da6857b9318dd9ed93c336251af39064a94681eb5
- SSDEEP 384:JN8ZVZe4YEwWda/b6ZfqpTasRZWRYqrrdRvLo9OfQaEMIQP0/dVuvB2RptIe2GZ0:zWVwPEDs/x2NL6kQnV/FRptI+a
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/WkUP83aP9CABpi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f6c930b39e5a4c7fcba75876c443307d4927015d2a48511818ccbfaa95ca2f4
- MD5 3100ead33f5672e8ecae7b0b32d5fa28
- SHA1 048b5e3956c19290e0d3212138fe8f8be04a05d9
- SHA512 fe1167a211cb745a0a98f58da2a517f8b1769e887b9869680fe78cdf22bec20bfee22b8c9453a9a4eef7c9b474ed88300be854b39a78ff9d3828e76d98021ae8
- SSDEEP 3072:AD+L0wKJm4DFpA8WNyhOiYJi09NuUXJvyn/s9NtyGhho+/FuYfxH4YmAORn:UQIJ1DFpA8WNycifMJvyn/s9NtyGhho7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
185262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/fzAgyDYa.AnarHs
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0a82d67f8b53de0915c2c8853e47b191aa24be180c398f61c5332e558094e4a
- MD5 21aaf842f7518fdc7038c09a78292c7e
- SHA1 ff68658d3c1d6aecf1bb0e41c0e62c7dec24885f
- SHA512 1cfe3bcc66ad0aeb9fca5d74253dba2efcf777ee15266828edb0d4a196f9a6e41871c51fc4eb0d7022b8183e768a62b38dfe974f7a65a2e259141eeb93a88458
- SSDEEP 3072:A3NNnhy2Yt+HCQKrPCrCihOZNPd14hlaWWfiooIbuTyXb3tk:Ge2Yt+XKrOCsed14hlh5tIbueXb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
191966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/lz4.AnyCPU.loader.dll
- SHA256 b60e10911329f935ff50797a642258f83f31306a07f2cab292764d78cbed08da
- MD5 dced286e1f02fa08c6f15926c60e25e7
- SHA1 192c4d3165c56cdf5107beb7e6572a11cabf884a
- SHA512 e79d3d4116ac3c7296063ffd4dd3133280a9069dc9b0a2ba1ed0063d5785e0653a2346f30399cc517c804b44196e64d1d759a5a243463a581918ea94157aa8d6
- SSDEEP 24576:Jufmxpul9TZUlTNTEB/O8ogrQPs737zeSG:J6pdUBN32X3eSG
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Plugins/mML6WKMqdxjDGA.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 778877431354a9584325dadb663be077f757227eaae8bcad33e4bf26efd6b965
- MD5 e03b206eec8a7efbd1a47909071226e5
- SHA1 21163989ea524920e874bc7932adfcd5e94f854e
- SHA512 831ed74419f1b4c3250fbff20be16ed7058a851d7168a17e8a4dcf284a19412feee42a8c198af34b37571de33a80c48ac855f5d018ea9e2cfdcd846b832155ff
- SSDEEP 3072:5nkYlKsdY6RwiYNF7Bs2GEEg+9D8RZW7iKcnQy/dh1CWMEPrhBSepT/9HxW2Je:5nkrsdYUwiYNF722GEb+uRZWhcQy/71H
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
183390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/maSN8TBMgUEC.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d93d72c6e929bd9cea468458e6c0558908a92f0ecd11f4f4db0f49acfe9d4fc5
- MD5 d5a278acdafa0c8b4380efb7d83e053e
- SHA1 376218e3aa607a3b82be55cfa718826991953654
- SHA512 138def485e02fdcf1809f0d8162fdd2a50575f3cab56968fbc6d09d0c1e9fe6803860315e45c1a7e0eff75958988ed6b08735fa680fa66527630c6789a23a00b
- SSDEEP 12288:P8T7wSelZVUsVV1CHxQxhZ8a4MBTCUhcyYwTjUV:0sSemsVX8yBADyYSjUV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
569398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
568KB
Virtual Size
568KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/oYsKwDG.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9157a6021901939611c80c4246dbec6007200b2f2457d348ce8834bef9872535
- MD5 19f8d8099cc9b7b6a68e7efebc44ac18
- SHA1 5a5cca2ad1168252d79ef7c0ffda58726de7f79c
- SHA512 6bb58b3157feb010555382c5b5b5d0ee982af324f1d88512ea5d5b984b949995d7387a9496388cb7b9589007ae9ec651e5f8219085517d82eef093e4ebb7ecbc
- SSDEEP 24576:MRRBtpr5ljLyeVKbed1BeaPc9oFf/V5V4IeDHRbtg58jVh6zBRkM8eJkhjpSLZFb:MRjXr5ZtVKYzX/LV4k58M8eJkhj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4206502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\Ninja\Desktop\Hack-List\New Folder\Anarchy-main\Binaries\Release\Plugins\oYsKwDG.pdb
mscoree
_CorDllMain
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/protobuf-net.dll
- SHA256 8578a7befdec6ba672ac711c72903a68efcfc3713dc82ca40de7532ea031ca3a
- MD5 1f8539f5bdbd9dbb21de26696ca03b3b
- SHA1 b880cb20f4dd9317a107ab65381ba6a313bdce2f
- SHA512 7f967fe5bce9ebb15c78f76365b9c615b3d838a5c9387d2f923278ace1441e3c9a538f51c6b7c3f0d6aa4c5b00c566c5f34beeebfb314a2625d749c49cb3c79d
- SSDEEP 6144:YsuxK7S8f3wV7sEa2At7mlATT6tHN1POXMHMfL9R:YsuxK7Bf9NBT6tt1PO8HMfL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
S500 CRASHED DESTROYED BY BIG DICK/Plugins/sJ88z8tsg5XzK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6eaf5744b8ec91312e1c6be83d852627e5204b3b64a1932e60e47438d73fb6bf
- MD5 b3fa2c3d50057ddd2c9579dc0aef1590
- SHA1 88a1f57b9177c95a2e095866574639b09d5f310a
- SHA512 0d1b8288cbc1c206029fe2f9b7366b2f8b49158e4c9643e453111ceb90fd77af903533c64f6ede351755414c9e7daa926704cda6f1953be79e1adc7aff515508
- SSDEEP 3072:8SHb8GZKzU95JXku/dIvjVWE6jZJjnnpnSY1DFb109H:88ZKzU95JXkodIbVWE6jDjnnpnSY1DFZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
181966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
844B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/sc2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e72ffd501ef33e454e369aacfb39d1a1325ed132135f7f8a007c44fc4b554b64
- MD5 f8ce280fc2b16762802e7d8b1799e9c4
- SHA1 e73800699dd7ce099f6e71db602be062acd5cf8a
- SHA512 ca5135f64a60dbab2a4e711685466947a697925e0a0cda52a8021b0cd3844b3293a946bbcbc16d34b9bb2c693a0bcf061821ce158d7c1f3f01bfd965ab351717
- SSDEEP 384:DhJ5QORem+gHzdgvxm3Ar8g1/OKpu1Wcq/kLTiIn30icum:n5QHLmB4bl8n30ic9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\DZ\Desktop\SRC S400 RAT v 1.0 by FC\sc2\obj\Debug\sc2.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/yL9x34D8X3oO2P.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e9733277eac197c4eaf40fb0eada0907388222ef21843488a8e591149768301
- MD5 38502e61cc1d39095a12c1883551ad9f
- SHA1 135c9cad9e6d54bf66a1cee5c99ba510102623b0
- SHA512 cd67a63ea954a4db8c8dfadceb2822b447d98c2c43a8f9c6901d0fce3230605a0416395b92caea6ac08348d5f6b0e1cb052b24cf90829602b0a5b0652b8a2600
- SSDEEP 3072:lq4bIABl7xQ6himcU8wzHQzvDk7r1OzArhb6lDWyITJeO9pKb3tO:4LABl7xQ6himx8w7QzvDk7r16whByITO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
190206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Plugins/zVvPGvK64uLS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 98eb518c9785f988ab1dc0752e0ef6d23f171134e60187c621795d6877940f99
- MD5 4f2fb621cbea3cafb7a041c9b3c115a7
- SHA1 137502326e0126f372586d157e51a1416146c3be
- SHA512 22171b9ecf1fc99b7aaf4e73c4d164cedcb503e83021f36a9cec673ff327f83a6c7568e22a7329cc6fc7ef3d6ff79d5dc6c88a8784e58401b884920c5ba2ac9b
- SSDEEP 6144:yMc8IVeK18Kv42lIq94yFwT6J9Kfgn4670g/Pgtb:yFeK18Kgohey2T6J9KfgnX0Ag
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
245294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
232KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/S500.GeneratedMSBuildEditorConfig.editorconfig
- SHA256 4b8da4b33ce7d5a17d74da042e83c2d40fcb2bbc1ca313bf8e373c841368ad24
- MD5 4e9830cbfcf91b242c7f9fd032bcd8ee
- SHA1 a55674ffc5a69ddfbecd3f8e0035ab7ce14f2250
- SHA512 a39032a7f7c235409fd993474f44ec4e90a56fe4682007effbb6585259068cda69b4df94f4c6ba5482e3c9a37fd81c4d742f53105faf6f5a9595c7c911393771
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500.assets.cache
- SHA256 d75b06b8a57bccd02a8a580381f9026f4daef7ea05c16ab36b2033d7688432f5
- MD5 0fdfcd035683987a5f78198b03cba25c
- SHA1 7b8d7f3a8602fea82b03219a3255d1c00b77ce93
- SHA512 61afd4c9677aa398b1b9d24c5beab5d78177dc8c28ea8a42d38b1a6ad348c559f73061cb0f837619c9cb63c4d64a1aa47bdbc1e6aaf1ceaf8f13d4799e39f2a2
- SSDEEP 192:Phj+K4zsocBNJg26UQf2hTMLOmMsV70zS:pj+K4zso+K2PM2hTMLOmdlsS
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.AssemblyReference.cache
- SHA256 bb5bb626f8c1e8632aa26a769ad858139e574d8239550142b3fd03244cc11f2e
- MD5 c9e893f08c5110d2ea7f08acd6f353e4
- SHA1 1cdf6a164c1611505445dc857e2aea9b7a639b3b
- SHA512 bfee067cb8072f00b0bd389539ce2cb78faf0f5478c492394754190e13f11a25cd271028c19a19f2942530993f8673f7f74600414b5a861e243404a06cc49c51
- SSDEEP 768:49HNIKskfwNwznCi1/eGl1zS2aC4IAz5MDdQ9K3oFuJ6EHI3s3:ubmhlEHB
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.CoreCompileInputs.cache
- SHA256 f8811e2ea1f3c1b89f9936956655e68e90f5f26fee12e1bd8f854db1eca4a6fc
- MD5 c301c499d24fb0e9f89b7a89898c3f34
- SHA1 3dbcb9215ecc4c52124e3da051504642f9337c4c
- SHA512 45b0cd94e60dea4abbe3bcbca3adc0490bb4ac6f39ffd75b03ca2881461749ec1caac037b088e027f3b160cb7a4c4668c98fadef7ba902cb5cd5242ded13adf8
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.FileListAbsolute.txt
- SHA256 904e11f13393b001585a04173372f2e15a5b27e0254c7299b43bf8c983d4a422
- MD5 9e111be6fa8d12d6d514ffa886dfc5d5
- SHA1 3ab7c08eaee035fb934079a3295648552e01bb51
- SHA512 99ed10d3b5fb3ca2c37c5d01a5c655a4e4ad7c1d032b045e89c64eb1fa8cfeb709f0034da42fa842aaf9acef796a8166d0a9faadadbc1806b1ba7286e5161bdf
- SSDEEP 96:o/DnjoLvmXsLsHFsZYGwbHLXOQ3cVuL7o6LDWXCRQ3I:oLnjAvmXOs6wbrXOQsVgoKDWXuyI
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.Fody.RuntimeCopyLocal.cache
- SHA256 45aaebfd327eff6ba11a1d8765717386fe0660dbd66fb510d84556d266a6701f
- MD5 8a1fd3d8f79568fae3896124c45c26ad
- SHA1 a88f75df1e339bcb4029e76b431e231d34977372
- SHA512 bc1bee322a9ee4815671b3b39206bed4684bdac4c8b443481a4bbb7e4dff002ac148b10ba378c3d4ebdfce02dd120c64126b963f2f7a484fb4a1acf8f2cb0491
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.GenerateResource.cache
- SHA256 0b6420dda23f0e35836c02eb5f76e617494b5dfb093f58c4b23d3fca546cbb3e
- MD5 a2bc82d3cc584fa59d2ec8afa227bb23
- SHA1 34e528513e8001a5dd41b0bc7862bd9d879d47fd
- SHA512 23da5f039e9c2ac01fad10ebb23affbd45eb4943981b2cb2449d61dffc845199736ed2d6cdce49ce0f05e6709fdad5cb21b69a6769f35d8c36c7d0df604ccd25
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500.csproj.SuggestedBindingRedirects.cache
- SHA256 618452bec2a06e005b37a168b4bc47810652166e9bdab449a3b750a42c57793f
- MD5 984046ca19ae23c1a6912e1b16654f6b
- SHA1 f1eebaaff59cfb8ffc76e14fee31d329016599d8
- SHA512 54dcbb4726c60bef565b4b13d6c23446c62dbbdc06a7d1b9d8162ef75d14f0f6b3627cbd13775a7377946f009be367bbdfc1d500e0728cc58125cccdfcc58806
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.GeneratedMSBuildEditorConfig.editorconfig
- SHA256 9b4a113997494480d4cb00b02759e7380dd18bb0d7cdc909aa49c225f6827745
- MD5 37829d545d8f03e633ea1ffa76f59501
- SHA1 ae6b41c50ef2af25e382c3fcf863cbf63b3d7f3b
- SHA512 218924820a97710f97881d0cf0323e39cd2c29b15012606c1f3eaae825224a17f509e9392ca12569845948a7c646d75629f0e8f5a705c639a13cf3d6a563831e
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.assets.cache
- SHA256 1c397d3395f10ea8962ceca7d4e17759218ff93b1308dd965b7322b3512ccead
- MD5 3c266d627f959d77ca1d7bc045eb0970
- SHA1 72fc0e9e9be3c08a9db0599291e2aff51d12f4c1
- SHA512 d61c3530a0eaeef2011118a46dd3921b94b13ebbf1872433abef276ba22b6756ca998819d947f9e56ddcd04556f20e73fa27f052b79dd3d1358255607b82d0fd
- SSDEEP 96:ZR95eK4I1Mso9o/Y4ezNhYuZ/w5rcP/+JhCRy1z54/wH3sIyuVoQXdIUCsDmQfK1:ZRqK4zsocYNcTorJQffhTMLOmMsV70zS
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.csproj.AssemblyReference.cache
- SHA256 13b2c10163e5a417fb0c2a0170ef36e06eff8b65a7231fd24d9d669e2d6d0452
- MD5 ec522a5224fc9540cfe9998db9fd978d
- SHA1 1055e9e794c3ddad40938ec58324061e40d6a6dc
- SHA512 0654c8e3a7b24cbd184332aeec01308c33aa8d0225f9f5906614cedeb21f1b8236b995d3b9f1dc4645d19c7b8e4e9176f9924ff3ccd98c8d1070270372feb18e
- SSDEEP 768:gYBjI8sV+MkTFC6/kGl1zS2a+4Eoz5MDdQ9K30FL:hVstV
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 119611e2f9cc0da2b6beb13d347ff6a3207a4917dd09eda6954f74f82e8fb59f
- MD5 65526a06c5f511a6b427523b8eaecd28
- SHA1 f9de08393f80b15d1ba920153b58c71985336c59
- SHA512 64477d2cc6b1ad070589a9d14f724dc232cfdfd9b2411b745c8a0c3124c733d1271b5eff14d3aa9f2509f594ee7094aaa8c3207be437e8ce8d583e72f4d17910
- SSDEEP 786432:MQOQ/U+CItd6YLTwUCv41iMuM2JQfb5HaL:MQOQc+CItd6uTFXOI1s
- MD5 SHA1 SHA512 SSDEEP
-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
487164526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\user\Pictures\Hidden CPLApplet Builder V3 Cracked with source code\S500RAT.pdb
mscoree
_CorExeMain
Name
.text
Size
464.6MB
Virtual Size
464.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe.config
- SHA256 32d656a69b19be98ae050512a4d0f49ebe21b6f7bb9c50130b7e952ea4f5239b
- MD5 c7a4606f8f222fc96e1e6b08c093794b
- SHA1 2700b3727ab01d93e75e1e12f308dcaeb1d37dba
- SHA512 7516375b47536a51ede8079d25760e0142ac93077326b6cc033fd6cb1676b65aec7edb3f702922506f2b6b18992cd219be01e7adbf70c6d13404adceb410472b
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.exe.withSupportedRuntime.config
- SHA256 051099983b896673909e01a1f631b6652abb88da95c9f06f3efef4be033091fa
- MD5 2a2df45a07478a1c77d5834c21f3d7fd
- SHA1 f949e331f0d75ba38d33a072f74e2327c870d916
- SHA512 1a6dd48f92ea6b68ee23b86ba297cd1559f795946ecda17ade68aea3dda188869bba380e3ea3472e08993f4ae574c528b34c3e25503ee6119fd4f998835e09d7
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/S500RAT.pdb
- SHA256 7908ad8f9e05645b6e7568df656c2aa4f67e8350a08aa8a1993ab67c325bb0db
- MD5 5a98d0d238e07f8e1ea530329fb08898
- SHA1 b7b16861671027ecd27aa4282e0356058453aa59
- SHA512 c2c3761709acf86272e2f46ac604f274c2a6feb2f9e680b1783c521347441c9ba6e50c5086bea4aad9e2550edee962dd57b6907bc29c0ec427869d28d83a60f0
- SSDEEP 3072:ab5hv7E6p/fjSnhm19sJBeVc7Beo+4/9k743+:O5F7ifqcVU
- MD5 SHA1 SHA512 SSDEEP
S500 CRASHED DESTROYED BY BIG DICK/Stub/Stub.txt
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 972c912943000017fe92e563d4b7a5147f15825718edcb17307af79f85ac5f10
- MD5 fd7b1162b84b0add4146e3bc0d13b7dd
- SHA1 1fb46807f499267832aa444e12c403df880855bb
- SHA512 6f5ff1aff1c899f9ae48cd177fd1bb277b2b9a7395858de1077392c293a4c68307d55d84a7c9968342da5a1296e720b00d8cd6f42b5faa11b7c643260eac300d
- SSDEEP 768:NRgZXw8fNxs48AZYfEq586BHPcxLwM5QXWaRcW1Uo4blGNjj6MpqKYhY7:NR7586vcx35QXWaRB1UqiMpqKmY7
- MD5 SHA1 SHA512 SSDEEP
-
Async RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
C:\Users\Ninja\Downloads\dcrat\DcRat-main\Binaries\Release\Stub\Client.pdb
mscoree
_CorExeMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/TempPE/Properties.Resources.Designer.cs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fa15b6b0e119c89feec1a3200d951ec1dd4205f345ebfe24db62b4d6a68e9341
- MD5 87c42aa16aadbfeffd631c35a2eb15dd
- SHA1 efa3ebaa05814859d56accf268c2c59948dd1fec
- SHA512 4a6dd87d0292300291f0095b7b73c76cd3cdf99f3cc7ce192502cd7bfcfb9f755cd9ffb003ed1148496bbb5bdd685b096f2951d72547bc879ca7f6708b780625
- SSDEEP 96:/b7zr8RrneOGw0a/7aAw6jz+4a6u1Iy/vkpy:Etcw0a/7aQ/pa6vyk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/Usrs.p12
- SHA256 dd00f7ce28d7ef1e14f50b046ca1736f15ab08e6458d2c2cc72d078e4354ddb7
- MD5 e14c7402da26e4a1a1c226d546ec3aba
- SHA1 3234c40fa2aec2d483d2b7ede9b901d3899d5336
- SHA512 cba4cd515319b11be1a94ffb22c4b14b933868217a1b7f6ce126568b82723769baf170f9d1f262135b8867162b8e932a9c2143603c4c9d668edc3f4622cfb5b2
- MD5 SHA1 SHA512
S500 CRASHED DESTROYED BY BIG DICK/cgeoip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d1ddd15e9c727a5ecf78d3918c17aee0512f5b181ad44952686beb89146e6bd0
- MD5 6d6e172e7965d1250a4a6f8a0513aa9f
- SHA1 b0fd4f64e837f48682874251c93258ee2cbcad2b
- SHA512 35daa38ad009599145aa241102bcd1f69b4caa55ebc5bb11df0a06567056c0ec5fcd02a33576c54c670755a6384e0229fd2f96622f12304dec58f79e1e834155
- SSDEEP 24576:TRgJE8pkCLLe/K43EnnnclQwIqJY0OjklWXQMFBRpmkL/59ah0USm3uwl00odi9p:TRgfX/59a6USdi9Ues6bV6boLO6r
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2411650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/discordrpc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a18dfc8bdc6030787b5814c76b8663dbe5b8ca469beb65a2ca9f5731fa1906f
- MD5 ad463f573775c43a561ade842c41b0e8
- SHA1 e70e10a18a3ae85cd1ca9be66a7bb46d99ccccd3
- SHA512 0c790e70150148f4cc516cc9abcdf42a5b28a0785a61cd02ab7d59776df25eaeea287c98522d4b3271cae8bf35f98d91049c6474e81cc2745dc32a808832efe0
- SSDEEP 768:Jp+8VvNVQPCNRRUzpEqrK0V2Yct83YVhEbqoL/wDIijcJRM2S0B+mhx9HS4i6E4m:nVvNGP6U1bwueoRPMVo+mhxVS4i60
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
87458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\discord-rpc-csharp\DiscordRPC\obj\Release\net35\DiscordRPC.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 83445595d38a8e33513b33dfc201983af4746e5327c9bed470a6282d91d539b6
- MD5 de0069c4097c987bd30ebe8155a8af35
- SHA1 aced007f4d852d7b84c689a92d9c36e24381d375
- SHA512 66c45818e5c555e5250f8250ea704bc4ca32ddb4d5824c852ae5dc0f264b009af73c7c1e0db1b74c14ee6b612608d939386da23b56520cac415cd5a8f60a5502
- SSDEEP 24576:m+pL+hwfQvqx+yLjynb1YNzh/CNX7fegPeH3hid3Hc9ZEu5DkU6FPepU1VWv7fo0:sxvCLUJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1152126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnlib\dnlib\src\obj\Release\net45\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/guna.ui2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf4aec4b6a094c21008b4788be9ca7072fcff0800cf1c098828222769b311e7b
- MD5 4544872c197f9ad471bb18c648b004b0
- SHA1 280a1ec5ab002d1ab15279b3fb0de8dd3c4aa482
- SHA512 aaf6a5a357976f6a83672009d3648f4dd7303bdd91eeca6b2d1ce35f59cb65563daa70505162f862bb7ce322d9645dbabd49e9a8f8a9e22d4d169f3d59ac8aca
- SSDEEP 24576:zTSnbQYVQLzpng4oXBOKilFS3EMlZehjfX3ScPF+wHQ/jz:cVip6BGe7UWc
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2027198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/iconextractor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16170
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\HMJ\Desktop\IconExtractor-master\IconExtractor\obj\Release\IconExtractor.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/leaf.xnet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de9aea105f31f3541cbc5c460b0160d0689a2872d80748ca1456e6e223f0a4aa
- MD5 ea87f37e78fb9af4bf805f6e958f68f4
- SHA1 89662fed195d7b9d65ab7ba8605a3cd953f2b06a
- SHA512 c56bd03142258c6dcb712d1352d2548a055fbb726ee200949d847cb2d23d9c52442b1435be0df0bf355701a2c1a3c47cd05b96972501f457d2d401501d33d83a
- SSDEEP 3072:gE3OJDHIfFLlL3pPiqhcLS/oZhttaMBM2cid:gHWZxJiqO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
138110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/metroset ui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba
- MD5 d99a97de55b2561e57135433b44bb786
- SHA1 ab588b8d36683b52adcb32c03a9859b884838f29
- SHA512 7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c
- SSDEEP 6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
451814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\MetroSet-UI-master\MetroSet-UI-master\MetroSet UI\obj\Release\net45\MetroSet UI.pdb
mscoree
_CorDllMain
Name
.text
Size
433KB
Virtual Size
433KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/microsoft.win32.primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e281d04d35118b7f3a2406014333e0581b74ea4b62f4f2388ad3ad8b32223c83
- MD5 9e12d3a3500f09d1ded5fe6830e4f8db
- SHA1 afa308c0166d8cbdd1d5e6fdaa8c9b87eb9184e7
- SHA512 459c90a4942b6014ec90a311c7ae45370e0d49ca4be3961570a2f50d340637ade1b6def90aa4722a91e3cedb0d14e5f8802c02745e72c5bcf705ac6499ae396e
- SSDEEP 384:ybha4YH9Whs3W2W/Z3WUQ7q0GftpBjcERHRN7DlJrv:ybwJ+EieEBHb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
79:e6:b9:41:3c:a3:55:9b:02:73:88:0d:10:32:5d:ee:7b:3e:bc:9f:49:d1:a6:4b:83:2c:e1:aa:3d:06:1a:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
78:ae:20:47:88:89:68:17:c0:8f:d0:e2:8f:c4:01:0d:ad:78:c7:9b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/Microsoft.Win32.Primitives/net46\Microsoft.Win32.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/newtonsoft.json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- MD5 SHA1 SHA512 SSDEEP
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
675KB
Virtual Size
675KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/protobuf-net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9f01d9f2ed07e630ec078efa5d760762c3c8ad3b06e9e8a9062a37d63d57b026
- MD5 9fbb8cec55b2115c00c0ba386c37ce62
- SHA1 e2378a1c22c35e40fd1c3e19066de4e33b50f24a
- SHA512 da0211d1c9ba0a59616bc15de80a1fed62b0405cad3b11ae4220ef1488c7837634aad67cbc8b484621a2a6288ef5e424cd816a2523bdb6167abcab76f3ac1a04
- SSDEEP 6144:1kWu4n53u8Q5w+8yxIxM2NUpwMTRHslVz:G4n5e8kXOMkUp9GlV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
290498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
protobuf-net.pdb
mscoree
_CorDllMain
Name
.text
Size
276KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/realtaiizor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7a5a7ff25de9ce7709282b0ca714f942b29ea1b9ca222e9b2599f97676de9cd
- MD5 dc1bd8b5f4f2b49fc7da72aca1ae33da
- SHA1 0bf43f74e5a957178adb259aecf34cdeed24b8b1
- SHA512 d19a828bbd048f52a17f804d55faf8365fda0b2b4afdfb55cbe3e85093245325fd0affa31decd848d23fce9cfd7b92b2e0c9e2849aef2dda2b74fdaef4635b46
- SSDEEP 98304:Edm0Umts8T8rek3nBzjYz067yqu/mnFQOi33nFbO4KSgPTPgS8NAvKBUuYW2b/i6:JL2PRW2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6072374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\MyProject\ReaLTaiizor\Lib\ReaLTaiizor\src\ReaLTaiizor\obj\Release\net461\ReaLTaiizor.pdb
mscoree
_CorDllMain
Name
.text
Size
5.8MB
Virtual Size
5.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/sEXYbABY.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6ee41c8e942eadb4053b0b0e4535366e7a3921c740aa7d607bf3f3c9f8b20df9
- MD5 9cabbaa5f95805449b6b39dfb5363ef7
- SHA1 bfc9f92dcb82de22f2cfafbc2004375a3de0e112
- SHA512 9fcc2be5099620108668dd06e42c43565c7bc1e8b22e092b1dbd20fbb5145e70a24513010c089a13c1e4ed6575778c4a7ca18669b8a977109f63545a7b430471
- SSDEEP 768:7eApz0bfgJ78t7C8A+XkW9gKc+t+cV48Jv1+T4qSoGHmDbD+ph0oXUEqsUXSu8dP:DufRx9gkwchRnUbIh9Es7u8dpqKmY7
- MD5 SHA1 SHA512 SSDEEP
-
Async RAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/scintillanet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad0cc5a4d4a6aae06ee360339c851892b74b8a275ce89c1b48185672179f3163
- MD5 9166536c31f4e725e6befe85e2889a4b
- SHA1 f0cd8253b7e64157d39a8dc5feb8cf7bda7e8dae
- SHA512 113a7b77d2d557d135470787deead744d42f8292d853e2b55074e9cb3591fd045ffd10e5c81b5c15dde55861b806363568611e591ae25dcb31cf011da7e72562
- SSDEEP 24576:IJSShz305vgNF7/cOCPHPSVs4Eq+QTNX+cfQdS+2MMPishd/Ws5:ti0aNvoHqs4L95X+cfx/HGC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1373218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\jacob\Documents\Projects\ScintillaNET\src\ScintillaNET\obj\Release\ScintillaNET.pdb
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/siticone.ui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27c56a28cbde094157206da1bfcd7a395111ab97b8a5ff600b11c2175dcefb26
- MD5 750c58af2e56b6addecffcf152520ab8
- SHA1 14995e7f1d12498606d9d209d78d55fe6fd87802
- SHA512 2179790e23f61b3dfea828457f8609279c70b1e071cddc73b1dbda02caa664e0aae2553fc24a4956f9e89c477d66b1a704bde26fa23bc6db26c19e18db00abb5
- SSDEEP 24576:QVMCtIZJntOFmMlMqPilaiS4Yr6ugPngPfjv9tLF2cH8gb:u8NlaVeuHFb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
34:8f:92:bf:68:07:1b:a4:18:d3:f6:b4:4e:02:5a:2c:51:c0:51:c0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Siticone Technology
Chains
Mar 24, 2020
Subject
CN=Siticone Technology
Serial Number
3a:93:0b:19:8f:29:72:9a:49:b0:8b:f3:6d:f8:17:ae
Issuer
CN=Siticone Root CA
Timespan
Feb 5, 2020 - Oct 22, 2030
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Timespan
Nov 10, 2006 - Nov 10, 2021
Minor OS version
0
Major OS version
4
Entry point
1344742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Siticone.UI\Build\Release\Siticone.UI.WinForms\Siticone.UI.pdb
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.appcontext.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea3a3003e10f44280074810934261b61a209c1ec1e9029b932742c853bde743e
- MD5 b906366572177d428a8c3218b203b417
- SHA1 c9a0c7200ad55960a1e1824b04718cbf6ca84581
- SHA512 adb0d6f982e9f586d49eec0b8d775b98c87515e5c540968fd919864285ae6f970d00af7f8f5d0bdcce29b4c77f7fcf3247f461821781b020aa1413d2fa8b1282
- SSDEEP 384:99JjWvfWJSUA0GftpBjY+ILKHRN71UlBRAhHvH:9Dgiiem1qRAhvH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
df:9f:e7:eb:4b:17:df:d5:23:35:a6:bd:a6:cb:4c:b1:8d:6e:68:c6:83:3e:b6:be:64:c7:3c:86:37:bb:61:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
35:92:d4:14:ac:68:a0:c7:e8:ed:93:9f:cb:66:07:cb:dd:db:76:bd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 23, 2015
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 20, 2015 - Jun 20, 2016
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2015 - Sep 4, 2016
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 1, 2014 - Jan 1, 2016
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
9602
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 083f8649db8063f231eb38af39a450cc4cb9c8d381804bd189bcf589eb9f0951
- MD5 f6b8a8fe0174e9657c3544b0a4aca494
- SHA1 b5102629939ebdd4bcd0f407a92828dee5f2b565
- SHA512 f8fdbfec7882239689d2a6efd9b6e59ec68b3075eae153f11bdcc203a7d207a3762765b89d3001efac7d10934e9d6c923900720b85376d6b0a95a584761cb6b7
- SSDEEP 384:q88mvx0rdouZ7RX7yvDgipjwjd5zhiNiN/W6EWFWFEW93rq0GftpBjp6tERHRN7y:L3OhouVWbIf7a5ij6tEBEb1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
63:98:53:fd:58:3b:c0:d8:22:57:59:c3:f0:bd:6f:c2:05:39:85:16:67:3f:f6:47:d7:87:09:b8:af:1d:41:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
23:99:73:c7:84:36:fb:8c:cd:39:38:e0:71:c6:1c:23:4e:67:bd:01
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
23006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Console/net46\System.Console.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.diagnostics.diagnosticsource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d6:fb:4d:67:72:14:08:d2:75:46:a0:06:cb:be:f9:d3:5f:db:20:bd:97:db:cd:de:3c:cd:a0:78:2f:b1:93:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
bc:c6:7a:ba:4c:c6:19:72:95:75:c0:52:c5:b2:9c:4b:5f:0f:69:2e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c9:64:4d:16:db:1a:7d:b3:15:00:00:00:00:00:c9
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
24690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Diagnostics.DiagnosticSource\System.Diagnostics.DiagnosticSource.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.globalization.calendars.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e5a549c6c0339a5f88217e6b5b75b745a3c20fe97081b48062b684c4fa5d441
- MD5 11702033de781f5fb80aff3570db0a7b
- SHA1 30ae8c8e57bcabe27ba675fa84d4da6af3c10ead
- SHA512 20882a6634c4cbb93502379c43aafabc999c6280f59a63d4776ba2914d879cf182f00325f62cf4a720f0459ea9b0b23f4b64d4359c5f15af10a63ea1ee8a742c
- SSDEEP 384:Id3ovRqXWDRqSRqj0RqFW5RqXWtRq6Rqq0RqFWB3rq0GftpBjZRqkPERHRN7cRqw:M3AqKqAqjuqOqAqoqquqGiBqkPEBWq8b
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e6:9e:d1:10:b9:35:2b:63:4c:87:32:19:7d:68:b6:37:10:cc:39:cc:96:c0:71:c7:f3:bc:14:e8:06:87:80:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
d2:e7:09:8a:bc:02:e1:17:9a:c7:65:7c:e7:f6:4c:19:f0:fe:aa:3d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10802
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Globalization.Calendars/net46\System.Globalization.Calendars.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.io.compression.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b963eb95627b5f223e813fce8a53e6c9d72891714923de7263111473faebf3ef
- MD5 9661714578a06ecb815369db1d364fe9
- SHA1 629ce95c12b21678d877359ec4552d431c1cfbab
- SHA512 3dcfdd4916ba5af0ecc585405dd7a9ff58c79c583d8f5f62f12e75a9f12b6530e39637f4f795e39a23b2a0a9f476818f28ea9e9d1557aa5e6e14b5f5f56ac1cc
- SSDEEP 1536:vUDglrO+lIFVkQT31aWzXCJ/tBvjZs1wJSGvNbZO0Wehg5aQKnfXmNo6/KwEBPD:Ugh3dBbi1wgGvIC1fWNo6/KwEtD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a5:a7:b0:36:3d:52:e4:36:b0:25:a6:d9:b0:09:06:f8:84:76:f1:ba:ee:ad:df:87:dc:8b:19:38:0b:aa:6b:65
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
8f:5d:f3:b7:ed:4e:6c:e4:c3:5d:36:90:b3:bf:25:91:27:fc:d3:1a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
89214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/Windows_NT.AnyCPU.Release/System.IO.Compression/net46\System.IO.Compression.pdb
mscoree
_CorDllMain
Name
.text
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.io.compression.zipfile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
- MD5 dcda916372128f13ada8b07026c1b3e7
- SHA1 99d6c187de8510206a93d2eed9c65e65e0c86e72
- SHA512 d66de5d61cf7090ce2e11ca8064723a44c2fdbd7ed937f1cf4198ebe13083037941b816ad9022d332bbb853666785600fa8b1faca94c498d2f82de73fe1e42f9
- SSDEEP 384:dK8Y54xRiW3mWeW+mWE3rq0GftpBj52ERHRN7dldBopPI:dKfemqiuEBHoa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
12806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.Compression.ZipFile/net46\System.IO.Compression.ZipFile.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.io.filesystem.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d917d520488b56673e74ac9dc610a2488ae70a7ebbbbff097c2e855ba1ef590
- MD5 84abec24a10c4d4f4b10887cb85fde6a
- SHA1 b46ad93384323ed4aa88e8af3cdee208a88f1f6d
- SHA512 54973fd33c986714556c97fe25a6a345b3df42f8b1f3a89d52b639a98d1d58aeb535ab7e75a8df0f0fe1cf4a558ee30e62c5fa4520ce62a837aab227e5a3d443
- SSDEEP 384:34Ye1WQYWgWTYWz3rq0GftpBjUVLP4ERHRN7+lXhW/aFbz:3cz3iyEEBIsaRz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a9:af:4d:7c:c1:ee:92:03:43:8d:f0:f3:6c:bd:de:aa:ca:a9:cf:b6:9f:6d:00:0f:49:e8:de:e9:7f:7b:5c:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
d2:9d:19:50:3d:20:8f:ec:9d:80:8b:ad:c1:a7:84:55:c1:af:90:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.FileSystem/net46\System.IO.FileSystem.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.io.filesystem.primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 02a6f9601aa48557fc5c3bfed80e31762a0785b9f78ec568c9f2f0722eeb9c0b
- MD5 17a701768a6f07f5f96a07a8a37bc8bc
- SHA1 8374975ca07a300021ef0acaa4f908d5bfb102fb
- SHA512 f8ee9515d4f3b15495c19e967c8eebf31cb5fc61a0e034d02ef03360515f970656ae38404f27f5dfb0fb61f423626d89ccd2dd4e08bb5f5cd7a67813f40b78c8
- SSDEEP 384:7zwWdkWuW4kWrQ7q0GftpBjNJSERHRN7xl78oWCmtT:7PSEi7JSEB3eZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a6:e3:30:2f:14:9c:22:6c:30:3c:54:d8:5d:f2:bf:2f:c4:d5:cc:81:22:31:0c:e4:81:05:82:1b:03:87:16:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
08:45:03:f1:6e:a5:b9:c5:49:da:3a:fb:59:9a:39:00:cd:a5:b4:d4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.FileSystem.Primitives/net46\System.IO.FileSystem.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.net.http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b741118740bad14229b30f27ce3883c2c8c0a720dee09a1c7e336fc0fc2073b1
- MD5 0a57fb3524cbb09fff3f81068802d1af
- SHA1 6d344a09471d8b4b849f16b0eebbaff8688a17ce
- SHA512 c9c0f6de3f78a14d8f640dfef371c6c16073694555f9b8553c6212114c8ad43ce58b55f976279165ef0af813f1381efe3cb7ee44ef2ecfa8249701269a5417ea
- SSDEEP 6144:JEYcGn/euhYp+YlHN7nD14NbaaQXSkNaahU89/IgBrpr8bMkapan4kgLMp3kVyf9:JEYcGn/e58bj74HjVA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4c:d3:a1:8c:7e:3e:bd:22:64:47:93:94:5a:cb:5c:73:d3:d2:31:44:db:ea:b2:50:80:49:19:03:76:ff:bf:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
78:c6:9a:a6:a2:b5:73:34:08:7f:d1:b2:63:64:28:ba:7b:1b:53:11
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c5:96:40:60:4b:f4:de:ae:2e:00:00:00:00:00:c5
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
254342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\Windows_NT.AnyCPU.Release\System.Net.Http\net46\System.Net.Http.pdb
mscoree
_CorDllMain
Name
.text
Size
240KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.net.sockets.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eefa668da7a0d5880f794ad9a9205637997e88ea1fc084e402702eb62d1da120
- MD5 dc223bcdc08c6628f6fbb4339770f112
- SHA1 00278d53e59026cd8c22889773466fef27d52bbf
- SHA512 8510a2c45ccfb97abd7c98a8ae152b3e17c2a0430328aa71f16eaaafdea5f69b67598855d0cda1f1ccf0fc1ab585322f00b369e9704a10c177764dbe7f2974c2
- SSDEEP 768:Tt7G7wMzUmd1Dtc0ZoSikFw5GBpBEiKEBS6If:TVG5Imd1Jc0ZoSikFL3BEBEB3If
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fb:64:e2:7d:ba:7e:ce:68:8f:d9:23:3c:7c:47:35:f5:8c:3f:17:a1:64:41:ab:4e:17:0a:0f:32:8c:f4:2e:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
59:b9:9d:aa:98:3f:9d:54:5f:4b:ed:03:4e:03:12:a6:67:3f:ef:70
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
34454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Net.Sockets/net46\System.Net.Sockets.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.runtime.interopservices.runtimeinformation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f141b72a2af0458993e27559395d8a8cdb0b752d79b1703541a61e728b55237
- MD5 82deb78891f430007e871a35ce28fac4
- SHA1 4e490d7ec139a6cde53e3932d3122a48aa379904
- SHA512 e47f741aa9153cfafc5f6be39987d7c7d8fb745566c4d9a4525b9f30cbe6df450d27bcdf8998dec7af824a7be0f5e9eecad2a39072b956a6320d23d94a0da71a
- SSDEEP 768:vn1VM0JrpNWDcIh6leOiDFIFBYp1+ziBEBMf:vnvXYcIh6yFIFBYpczyEBMf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
05:db:74:2f:88:32:73:ab:f9:54:bf:23:c7:95:38:b8:ec:aa:28:fd:f2:85:57:f2:b9:b4:98:f1:5d:1d:a3:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
56:92:ab:b2:b2:ea:e2:5f:1d:7d:b4:40:b3:91:8f:25:ff:d3:35:1d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
22454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\Windows_NT.AnyCPU.Release\System.Runtime.InteropServices.RuntimeInformation\net45\System.Runtime.InteropServices.RuntimeInformation.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.algorithms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f14df3a548a8c43cfe7f60d325ac5e95d92c605f482bbee17a39f98bcfcc7216
- MD5 82bbb4ab9a6a775d34bbbc93c2bd4ebb
- SHA1 413c96c3ae407532db4c1ce3085a8f99675a8ad4
- SHA512 22a56e6202ca6cea3eb5695bb186593355a243bec92a022d65b02e5222b0dcb9f1fdc6bd17e4963cf76d7fcd8a177d7a49d27aff13c16bcd48de9cb88ba18ed1
- SSDEEP 768:301KgnylIXQpIgB81KKb0hD4NzhiwdmKEBARNrqd:3xpIx1KKb0iNzhAKEBW1qd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4a:14:b5:a7:61:41:00:2c:58:a7:f3:b9:0e:29:ef:da:7f:e6:85:05:a9:ba:96:71:dd:e2:6a:54:d1:ed:2d:e5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
09:d9:f9:ba:40:e0:89:5a:d0:e4:12:bb:07:3f:7c:47:25:5d:f3:67
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
27382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/Windows_NT.AnyCPU.Release/System.Security.Cryptography.Algorithms/net461\System.Security.Cryptography.Algorithms.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.encoding.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91c7c02d46f754193b3988c28050135c804e47dc3456d0c3dde028ac0341fbe2
- MD5 5f859d35ca74d84cce62533e086dc27f
- SHA1 a0f2c03cb813317460133de80231d7b1fb62dcc5
- SHA512 eab5017628e4c576a1076eab0e906523987cd82e6accc5b01b19b048faed81b6a4ee7c4d09454a7a9516f72a87a34d0c4cc83c74494f8854cc7d83583459dbfa
- SSDEEP 384:czoy4YE5WP4WnWW4Wo+10vq0GftpBjFLqpERHRN7F9lXhWjW:czoyTDoiXL6EBF3x
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5d:c7:27:fe:ae:11:ee:f9:e8:13:89:07:05:58:50:5b:cd:bc:10:ea:02:3a:60:4b:3b:45:46:28:a7:8a:4e:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
bc:e7:dc:08:18:1c:3a:87:bf:7e:3d:66:64:60:7e:24:33:ac:f3:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11018
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/Windows_NT.AnyCPU.Release/System.Security.Cryptography.Encoding/net46\System.Security.Cryptography.Encoding.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a6c8f69a8dea8a775331273aaae707eee2a2743fb1498c3cc4dbab679125d11
- MD5 ecac83e551b639409899919d47cd7588
- SHA1 62a622557cc0d6fced9c1a14be28dbc39e9bd6fc
- SHA512 fb618860626b72d6fcf959e35bf9b3785a8b0d01b29fc8931d0151ebf001dc4470ca55ac62d5cecfec97fcd5973858185050e3ef414d1282b674cd880ea0e1b0
- SSDEEP 384:dMqKW1pWEWwpWA80aq0GftpBj4PaERHRN76XOldBopPP3:dMgzEiOPaEB6Ko53
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6e:9f:00:6b:8a:d0:7f:c5:6f:21:8b:48:80:5c:6b:f8:4a:ee:89:89:32:bd:35:75:74:3b:20:61:aa:38:47:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
1d:74:b2:f1:29:c8:08:eb:99:2d:d5:f5:61:0d:48:4b:7e:c1:57:a3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Security.Cryptography.Primitives/net46\System.Security.Cryptography.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.security.cryptography.x509certificates.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 132ae80c89f38750d1ade43bd1e588f4d0971ea813b4df5dca5af3c113e9e713
- MD5 480ca4042ff3cbb3cdbb14ef0643c14d
- SHA1 4beb5c11208affad40bdac6672a7b0b7b4558e7b
- SHA512 7630bd40398fa55eedad8807cadcb7d0142717ae60073dc5187b9463824eebab993e8867ab3e43fcd34de73f2990d58397008cb1880882569e83b22f5d6b3175
- SSDEEP 384:2Zz8reFd12yMZ4cDuwZc1tfhNxwoMg3hg5JF7Eu1h0Al1HW8OQnKd4fd9YW3hW/7:zqNQVDuwZ2tiJRSOzoti9FuEBFNXy
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
87:58:ee:84:2b:dd:78:60:b7:49:0c:b2:65:54:da:b3:51:6c:8b:ce:c3:bf:26:16:65:86:15:62:7f:1a:51:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
00:1d:98:dd:e8:bb:d4:1e:87:15:76:37:32:bb:32:c5:92:eb:99:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
26266
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/Windows_NT.AnyCPU.Release/System.Security.Cryptography.X509Certificates/net461\System.Security.Cryptography.X509Certificates.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/system.xml.readerwriter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdd78df6e1544f04bb71cd21317fac274c5b05802a061913777cfafbf80e93c1
- MD5 d08a9c2e710f47617a0f4f1413d182f1
- SHA1 765c9e4d36b4f2986514c1ab24b5e5e56afff448
- SHA512 6a067867a1153dee575ae860b803a73b724dc42cad430a91b090acfd0a5ef28665b018970e09034b7c3e3195f0289886d89d65d81ceb184610f3213831d79a4b
- SSDEEP 384:V4ZZ7Y4YIUWVuWuIWQuWr3rq0GftpBjRudxERHRN7OktvlBPVpt:eZZMCtpi7QEBOk1J
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:09:c1:79:fd:ff:03:2e:64:cf:8f:64:64:74:eb:cc:c8:e7:22:94:94:dd:fa:db:bd:9f:1c:ea:02:be:03:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 15, 2024
PE Signature issue
Digest
88:e6:25:68:88:21:e9:67:3f:16:23:83:73:b0:8a:28:dc:d6:fc:aa
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Xml.ReaderWriter/net46\System.Xml.ReaderWriter.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
S500 CRASHED DESTROYED BY BIG DICK/vestris.resourcelib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7da3f0e77c4dddc82df7c16c8c781fade599b7c91e3d32eefbce215b8f06b12a
- MD5 944ce5123c94c66a50376e7b37e3a6a6
- SHA1 a1936ac79c987a5ba47ca3d023f740401f73529b
- SHA512 4c034ff51cc01567f3cb0796575528ca44623b864eb606266bcf955a9259ed26b20bec0086d79038158d3a5af2ada0a90f59d7c6aae9e545294fe77825dbe08b
- SSDEEP 1536:CSSYikTF0Z+sFGu11tIcyI1MtI9eDG3fL7:CJYD0Z9FGu11teI1r9ea3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
83158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\resourcelib\Source\ResourceLib\obj\Release\net45\Vestris.ResourceLib.pdb
mscoree
_CorDllMain
Name
.text
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ