Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Overview
overview
7Static
static
7Silver Rat...ng.dll
windows10-1703-x64
1Silver Rat...on.dll
windows10-1703-x64
1Silver Rat...ra.dll
windows10-1703-x64
1Silver Rat...at.dll
windows10-1703-x64
1Silver Rat...ps.dll
windows10-1703-x64
1Silver Rat...er.dll
windows10-1703-x64
1Silver Rat...DP.dll
windows10-1703-x64
1Silver Rat...NC.dll
windows10-1703-x64
1Silver Rat...er.dll
windows10-1703-x64
1Silver Rat...er.dll
windows10-1703-x64
1Silver Rat...ns.dll
windows10-1703-x64
1Silver Rat...rm.dll
windows10-1703-x64
1Silver Rat...ds.dll
windows10-1703-x64
1Silver Rat...PP.dll
windows10-1703-x64
1Silver Rat...DP.dll
windows10-1703-x64
1Silver Rat...om.dll
windows10-1703-x64
1Silver Rat...xy.dll
windows10-1703-x64
1Silver Rat...ET.dll
windows10-1703-x64
1Silver Rat...rp.dll
windows10-1703-x64
1Silver Rat...at.exe
windows10-1703-x64
7Silver Rat...rs.dll
windows10-1703-x64
1Silver Rat...le.dll
windows10-1703-x64
1Silver Rat...ry.dll
windows10-1703-x64
1Silver Rat...rs.dll
windows10-1703-x64
1Silver Rat...to.dll
windows10-1703-x64
1Silver Rat....3.dll
windows10-1703-x64
1Silver Rat...ms.dll
windows10-1703-x64
1Silver Rat...ip.dll
windows10-1703-x64
1Silver Rat...i2.dll
windows10-1703-x64
1Silver Rat...re.dll
windows10-1703-x64
1Silver Rat...et.dll
windows10-1703-x64
1Silver Rat...tub.js
windows10-1703-x64
1Behavioral task
behavioral1
Sample
Silver Rat [Re Lab]/Bunifu.Licensing.dll
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Silver Rat [Re Lab]/Newtonsoft.Json.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Silver Rat [Re Lab]/Plugins/Camera.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Silver Rat [Re Lab]/Plugins/Chat.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Silver Rat [Re Lab]/Plugins/HApps.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Silver Rat [Re Lab]/Plugins/HBrowser.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
Silver Rat [Re Lab]/Plugins/HRDP.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Silver Rat [Re Lab]/Plugins/HVNC.dll
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Silver Rat [Re Lab]/Plugins/Keylogger.dll
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Silver Rat [Re Lab]/Plugins/Manager.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
Silver Rat [Re Lab]/Plugins/Options.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Silver Rat [Re Lab]/Plugins/OptionsForm.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
Silver Rat [Re Lab]/Plugins/Passwords.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
Silver Rat [Re Lab]/Plugins/RAPP.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
Silver Rat [Re Lab]/Plugins/RDP.dll
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
Silver Rat [Re Lab]/Plugins/Ransom.dll
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
Silver Rat [Re Lab]/Plugins/ReverseProxy.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
Silver Rat [Re Lab]/Plugins/ScanNET.dll
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
Silver Rat [Re Lab]/RestSharp.dll
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
Silver Rat [Re Lab]/SilverRat.exe
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
Silver Rat [Re Lab]/System.Buffers.dll
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
Silver Rat [Re Lab]/System.Collections.Immutable.dll
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
Silver Rat [Re Lab]/System.Memory.dll
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
Silver Rat [Re Lab]/System.Numerics.Vectors.dll
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
Silver Rat [Re Lab]/bouncycastle.crypto.dll
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
Silver Rat [Re Lab]/bunifu.ui.winforms.1.5.3.dll
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
Silver Rat [Re Lab]/bunifu.ui.winforms.dll
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
Silver Rat [Re Lab]/cgeoip.dll
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
Silver Rat [Re Lab]/guna.ui2.dll
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
Silver Rat [Re Lab]/protobuf-net.core.dll
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
Silver Rat [Re Lab]/protobuf-net.dll
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
Silver Rat [Re Lab]/stub.js
Resource
win10-20240404-en
Target
Silver_Rat_Re_Lab.rar
Size
11.6MB
MD5
c9667bcfb1ba3ee03a61cd39dfb18405
SHA1
c8211365a5b62ba83664c90d9610c577d6d83867
SHA256
8a7603c1c890418d8a3345cc1546089143b2e49f338785db22d2ca8e62a467c9
SHA512
866ff995baecd5991702f97c0aed4e5dd193611e438ec9b3f7da09312d8a07b1e3a7d475a3d90405a8df612748c277df3361820f255ed2066d86e3ecad73966a
SSDEEP
196608:GXUvZadVZtzDrJBC32BB8ElAGXda0mVDaWaw5mIUm9lJXPjBlz0QChUrpyH0:/RePNBmuAGCDaWRpUm3vlzVSUrpyH0
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Processes:
resource | yara_rule |
---|---|
static1/unpack001/Silver Rat [Re Lab]/Bunifu.Licensing.dll | agile_net |
static1/unpack001/Silver Rat [Re Lab]/bunifu.ui.winforms.1.5.3.dll | agile_net |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/Silver Rat [Re Lab]/RestSharp.dll |
unpack001/Silver Rat [Re Lab]/SilverRat.exe |
unpack001/Silver Rat [Re Lab]/bouncycastle.crypto.dll |
unpack001/Silver Rat [Re Lab]/bunifu.ui.winforms.dll |
unpack001/Silver Rat [Re Lab]/cgeoip.dll |
unpack001/Silver Rat [Re Lab]/protobuf-net.core.dll |
unpack001/Silver Rat [Re Lab]/protobuf-net.dll |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\Users\wilsk\source\repos\apps\desktop\bunifu\work\bunifu-framework\Licensing\Bunifu.Licensing.Redistributable\bin\Debug\net40\Secured\net40\Bunifu.Licensing.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\personal_source\RestSharp\RestSharp.Net46\obj\ReleaseSigned\RestSharp.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
/_/artifacts/obj/System.Collections.Immutable/net461-Release/System.Collections.Immutable.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\Users\wilsk\source\repos\apps\desktop\bunifu\work\bunifu-framework\__build__\__raw__\Bunifu UI WinForms\1.5.3\net40\Secured\net40\Bunifu.UI.WinForms.1.5.3.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Guna.UI2\Build\Guna.UI2.WinForms\build\.net 4.0\Guna.UI2.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
protobuf-net.Core.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
protobuf-net.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ