DiscordChatExporter.Cli.linux-arm.zip
- SHA256 6b64fd587440fa51d7e67f59a1a04b3407ca57923f6aa82e9ea12ecb95e704ce
Password
stews
Overview
overview
3Static
static
3DiscordCha...rm.zip
windows7-x64
1DiscordCha...rm.zip
windows10-2004-x64
1AdvancedSt...er.dll
windows7-x64
1AdvancedSt...er.dll
windows10-2004-x64
1AngleSharp.dll
windows7-x64
1AngleSharp.dll
windows10-2004-x64
1AsyncKeyedLock.dll
windows7-x64
1AsyncKeyedLock.dll
windows10-2004-x64
1CliFx.dll
windows7-x64
1CliFx.dll
windows10-2004-x64
1DiscordCha...er.cli
debian-9-armhf
1DiscordCha...s.json
windows7-x64
3DiscordCha...s.json
windows10-2004-x64
3DiscordCha...li.exe
windows7-x64
DiscordCha...li.exe
windows10-2004-x64
DiscordCha...li.pdb
windows7-x64
3DiscordCha...li.pdb
windows10-2004-x64
3DiscordCha...g.json
windows7-x64
3DiscordCha...g.json
windows10-2004-x64
3DiscordCha...re.dll
windows7-x64
1DiscordCha...re.dll
windows10-2004-x64
1DiscordCha...re.pdb
windows7-x64
3DiscordCha...re.pdb
windows10-2004-x64
3Gress.dll
windows7-x64
1Gress.dll
windows10-2004-x64
1JsonExtensions.dll
windows7-x64
1JsonExtensions.dll
windows10-2004-x64
1Polly.Core.dll
windows7-x64
1Polly.Core.dll
windows10-2004-x64
1Polly.dll
windows7-x64
1Polly.dll
windows10-2004-x64
1RazorBlade.dll
windows7-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DiscordChatExporter.Cli.linux-arm.zip
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
DiscordChatExporter.Cli.linux-arm.zip
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
AdvancedStringBuilder.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
AdvancedStringBuilder.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
AngleSharp.dll
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
AngleSharp.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
AsyncKeyedLock.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
AsyncKeyedLock.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
CliFx.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
CliFx.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
DiscordChatExporter.cli
Resource
debian9-armhf-20240418-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
DiscordChatExporter.Cli.deps.json
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral13
Sample
DiscordChatExporter.Cli.deps.json
Resource
win10v2004-20240419-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
DiscordChatExporter.Cli.exe
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
DiscordChatExporter.Cli.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
DiscordChatExporter.Cli.pdb
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral17
Sample
DiscordChatExporter.Cli.pdb
Resource
win10v2004-20240419-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
DiscordChatExporter.Cli.runtimeconfig.json
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral19
Sample
DiscordChatExporter.Cli.runtimeconfig.json
Resource
win10v2004-20240419-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
DiscordChatExporter.Core.dll
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
DiscordChatExporter.Core.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
DiscordChatExporter.Core.pdb
Resource
win7-20240419-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral23
Sample
DiscordChatExporter.Core.pdb
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
Gress.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Gress.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
JsonExtensions.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
JsonExtensions.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Polly.Core.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Polly.Core.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Polly.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Polly.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
RazorBlade.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
General
- Target DiscordChatExporter.Cli.linux-arm.zip
- Size 1.6MB
- Sample240501-ee43nsfb41
- SHA256 6b64fd587440fa51d7e67f59a1a04b3407ca57923f6aa82e9ea12ecb95e704ce
- MD5 bf33e747cf93270451f9d23b0a1d4be4
- SHA1 9c3612217abc2432e99ffde7c751896f46282139
- SHA512 07ce0c941cdca0477df3e55a5805abad9c1f5cee515897e116277aaac4c441944ece5f46c6321e65f16f6179083a35454f9428a0a0e5245dcdf6c204f5ef4112
- SSDEEP 49152:5tfld4m2dM8WvXnd8NdTcZ+7qNs5x7QsxhskAqvl:hdLyMZPEq+Oo5rxm8l
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/AdvancedStringBuilder.dll unpack001/AngleSharp.dll unpack001/AsyncKeyedLock.dll unpack001/CliFx.dll unpack001/DiscordChatExporter.Cli.dll unpack001/DiscordChatExporter.Core.dll unpack001/Gress.dll unpack001/JsonExtensions.dll unpack001/RazorBlade.dll unpack001/Spectre.Console.dll unpack001/Superpower.dll unpack001/WebMarkupMin.Core.dll unpack001/YoutubeExplode.dll
File Explorer
-
DiscordChatExporter.Cli.linux-arm.zip.zip 1.6MB
-
AdvancedStringBuilder.dll.dll 10KB
-
AngleSharp.dll.dll 931KB
-
AsyncKeyedLock.dll.dll 120KB
-
CliFx.dll.dll 176KB
-
DiscordChatExporter.Cli.elf 46KB
-
DiscordChatExporter.Cli.deps.json9KB
-
DiscordChatExporter.Cli.dll.exe 68KB
-
DiscordChatExporter.Cli.pdb24KB
-
DiscordChatExporter.Cli.runtimeconfig.json340B
-
DiscordChatExporter.Core.dll.dll 810KB
-
DiscordChatExporter.Core.pdb93KB
-
Gress.dll.dll 69KB
-
JsonExtensions.dll.dll 30KB
-
Polly.Core.dll.dll 236KB
-
Polly.dll.dll 289KB
-
RazorBlade.dll.dll 35KB
-
Spectre.Console.dll.dll 703KB
-
Superpower.dll.dll 89KB
-
WebMarkupMin.Core.dll.dll 147KB
-
YoutubeExplode.dll.dll 265KB
AdvancedStringBuilder.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff738e9b2dd63cde8ba61a6e4c0f7b57d4350c5c1caae0eeb5c80e36532c3849
- MD5 6a10c4867be9c10089dd25c1e12f6bfc
- SHA1 c9f03d6ea984fa9f1d80c3e09f69028abd2f0bc7
- SHA512 34c5ca3046f1fa916b9901120828113e46f9761e97b239a4cdb4e55d8eadf059bf1286d88662e2c68c8f95480245a80dfef40d57c69f99aa55b493eea40157d1
- SSDEEP 192:OFWaNStYHWAvLqemqIhRaIw+5O1ROEead+f9/8z2FFE56iyiaeOa1a:ANStY2AvLpmtRaIXEW8GWay6bfezo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
16518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\AdvancedStringBuilder\src\AdvancedStringBuilder\obj\Release\netstandard2.0\AdvancedStringBuilder.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AngleSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 917e0616e8c8da0f7788a8ee20768804a0917a018ab15d9c3c701ef88bd4ce60
- MD5 a01861985f9d24c43b16d22a60cf39ae
- SHA1 a6cfe31a0c4e1a5b00b6fbcd0385c0d98d6ca718
- SHA512 fe4e7d24a9658f357e9e9cc2bfe4878da79eee5dada2f9a0aef42344b2449d3ac7341512ebaa3559ed1dd0bebe32ae830be4881e7648586eec597aa391fd7528
- SSDEEP 12288:40HepziCQeGDT7l4hggW+TsRV406Wz1HZQXO:f/zgW+TeHeO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
959378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\AngleSharp\AngleSharp\src\AngleSharp\obj\Release\net8.0\AngleSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
929KB
Virtual Size
928KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AsyncKeyedLock.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7005fac5d7b14bafad21122c145aa101aa68a851f66ef27987760eaacb78d680
- MD5 aade159836fd0c75e990a1387e1a8699
- SHA1 c21168519f3700374e7a9065194b5b51fe37c612
- SHA512 32c29c2b65506ec311af29787ec04b67788e6c8acb9b8f7036e4cb114c8d62e353628d42e4a1f5181b19a442453fde3d855d0cc32f5f8ab3383bbe97ed7dd49b
- SSDEEP 1536:ywB7+k/nzzCTucxdIp9CxWOHboo+e7lyY7reX0B1lRTrrN:pR/4uOdc9IWYboo+UyY7remnTr5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
128498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
AsyncKeyedLock.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CliFx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c30e36e629555b176a444a7e60fc618e947c52becd98d23deb11038fb72baadc
- MD5 7eea4c38bfe0d3ced9a124a57c61653d
- SHA1 059496a71e302d3c4622aae0be74d258b86685cb
- SHA512 1b42c56afb53095fdd7ee48a932191705d027a0443cc3bd507e3ad9d3ce91780178eab6b47413013e8d163bd8ad6040f8d820f63a77d6e1f8589ee5ab7767e5f
- SSDEEP 3072:lYmEyG9GVBkY5M3WZY31hdMlUY9/NsP6mO+SlS9yodJXyBwUw06:yvyGemTdL4/Nevyo+nb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
185694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
CliFx.pdb
mscoree
_CorDllMain
Name
.text
Size
173KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordChatExporter.Cli
- SHA256 b5b44f0f29a98abfe7a40f8853192f5de9d8f3d23bfe0f6a1faddbea78f10a36
- MD5 3788f44163eaec1281ae47c746766e11
- SHA1 7d7715bc91aa44242ad4989e1f28bf63de0606bc
- SHA512 daf42e1ffb0e273fe93dbcc1aa6584d6aaab863a865f4302f202e3ddeb895c8477e054674542b7e4f16fc1a760d8bc65255f154271393e2d461c5b0dea85e0c8
- SSDEEP 768:tB87+rkUJEnDvlgRRsYhZ7vgQ+QOdAgTP6QUvS1nkI5mOXZ9L:tK7+IUkjeQgz8vOQc4nD5
- MD5 SHA1 SHA512 SSDEEP
DiscordChatExporter.Cli.deps.json
- SHA256 8bdf02f441432d891d8dad155f9420eb0bb31178dc350277fbcfdd274a87a3f6
- MD5 06058debc6060d9aa5a14e34e7fad414
- SHA1 eea6ef404575ca9f6cfc7d4176eb1723bea1a703
- SHA512 526e2d93d74a0bcfeaefb8ee82f16db69d6048887e4ad4343917af88e96dcec2b51ec45fc1fcbd7076fde4f5a5d17aa69e343cff2d8cf8d447916fcbbf35f7fd
- SSDEEP 96:2dAUAwEAObWUUAg2asOP8MRDpLAqF8vHM6FvIiyWwB8rmP:gdDmH0NP
- MD5 SHA1 SHA512 SSDEEP
DiscordChatExporter.Cli.dll
- SHA256 b4fc30aabbc20283e0a7f86efcb3017374dd9d7c3a3850f81d1bef4465a825ac
- MD5 ef426bed186d24aea12ac4c3ce12cb17
- SHA1 88dac3f6507d879d6e69d639a3855950fa2f6fd6
- SHA512 31f64f054069cec12f3fd87aec2f3787e2533ec9996be6f5bbac33e8194496e104b62280dab2403c6b60bf74b70c47cdfc3629d8798e23b23f73ab285eab1ef9
- SSDEEP 1536:9vLbe1mizflXWDBIy5E9h1iqfOwjGooM:w1miz9XqVRWOwjGoR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\DiscordChatExporter\DiscordChatExporter\DiscordChatExporter.Cli\obj\Release\net8.0\linux-arm\DiscordChatExporter.Cli.pdb
Name
.text
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DiscordChatExporter.Cli.pdb
- SHA256 8f3b716b4519a04ae6978faf44e018b158f0ca6f52e8b721b9296c00b69d9a01
- MD5 c3c393dcbcd774dc33c66a3103214b34
- SHA1 6f42cc4a78e49c7a83e527a38a69ef6a5e603c53
- SHA512 978b74f064edb743ec219a900e8a9591f3bc03cc308f9d8c518fdf9b904ad1517c4f9a57d1905127f5be6d453693bba80404e78579d54446a6cb1130b70086b8
- SSDEEP 384:F87KKqGFS1ue2LHb9CCZbd+auMDDtSHaT+1VhkXIhvtR3YeayHVfIUXP8RH4dA10:F0vqGgq7bL2nJvIRrs77xbic79T
- MD5 SHA1 SHA512 SSDEEP
DiscordChatExporter.Cli.runtimeconfig.json
- SHA256 28329cf08f6505e73806b17558b187c02f0c1c516fe47ebfb7a013d082aaa306
- MD5 253333997e82f7d44ea8072dfae6db39
- SHA1 03b9744e89327431a619505a7c72fd497783d884
- SHA512 56d99039e0fb6305588e9f87361e7e0d5051507bf321ba36619c4d29741f35c27c62f025a52523c9e1c7287aabf1533444330a8cdf840fa5af0fa2241fcb4fc2
- MD5 SHA1 SHA512
DiscordChatExporter.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 83ee01c15bbcdc5c7ffcb4916fcdcb2a6accdf0d23c8ba3bb69e131a3f87c4e2
- MD5 86c54cc96af39d168e7bbe53a964b185
- SHA1 c53628d221149aba8e16578c0968771e4f85a398
- SHA512 f01798dcb03df6e2db66cd07bc1999d18dc2cf3314274d858ca6bd29b76537a4b401bad0a923e2b84a4734b55b418bc9a0aa562ae36af7a0f08a69c21c6a90f4
- SSDEEP 12288:PpQ7Qg2hdi6u5wEaPWhX+Muw+mn9j93Hmki8KemqytoIEUUefVzVwLuYq4CZMigo:PgxNaHH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
835162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\DiscordChatExporter\DiscordChatExporter\DiscordChatExporter.Core\obj\Release\net8.0\DiscordChatExporter.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
808KB
Virtual Size
807KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordChatExporter.Core.pdb
- SHA256 46d0b6576f725ec687759df680d6ae3fc42cc8cc9145bb84ff92e235d3fb1666
- MD5 ab5cb09dfb6b583393d164155ba753fd
- SHA1 367d10b9f778cb3f4de596713772333870cb0585
- SHA512 2f2c1232d5459b199d38aa939a0c5f17f623466eef4755135d5142f872f71ec7818fb17d3c0f40c0fc2ca7f6517f32877332de52937b11c34fdfa25f65d831eb
- SSDEEP 1536:K1T5zQVjVf6WDV9QrqfX6c+DfEVjXMwso6f5nnJvIRdADtEPKwTF:Kvz+z4MVJsfJvcADtk
- MD5 SHA1 SHA512 SSDEEP
Gress.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 57734ec3a3412c38f7d14aad6da7cb3d2ffc5c339a269862f172f9c6ee273aca
- MD5 3effb4dc1522d2ec34057c26ae8996f6
- SHA1 a251a798639f65447fa8ffe132e7b2f8b0501db8
- SHA512 b6989ddffc62cbdcc4a8ca1c7e6f15f8222a101722e2b91465d10ce0f17086700d84edcddac86e01f5ead94944651f1629ebe4a39d47b0f0201a1aa8beeb16a4
- SSDEEP 1536:M5XxjstYJn8De36FrNBQA21jUn58cSWeMHMRG:4xJk3FrNBQA2KrfcG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
76622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Gress.pdb
mscoree
_CorDllMain
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
JsonExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a55afc3f827c78ee2bfbd48654475f06ae78ba3eae1f81a1b0744956c532269
- MD5 be566244d3ecba8864edb2dd2acb746c
- SHA1 4876d44642cbe635aa9c038f4d4cc8fca72276e6
- SHA512 b04f6986fe81b4bb1b00e6965b95bf189680db9ea00518acb98bf831aac51cb951c18616db83b49181c84c0e64bde7ae5ab65dc3c21259ac93a47c5ce123b4c2
- SSDEEP 768:b0SlGhj+U4nnnnnnnnnnnnnncuuXLw8aFgTl4XWdcOASk4qc1x/:QSwMUYowKTGXIvJLX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
stews
Minor OS version
0
Major OS version
4
Entry point
36510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Polly.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f364e0a460a099f8880ba4665fbe28d2499c1f539be7d16adea262216d48f81f
- MD5 204afcc43827eecf75b1c79e3ae72ddb
- SHA1 a85a1fe53c23ab9f7e0d8955bae07a78435c3c06
- SHA512 ec91dee701f649ea7bdfff3d009a4e70e13bdbbea5db0e83298ef1bc23c51f6a14d96de3d5c05a6cf4b1e3921b47c17aa03396685c4aab3f147c6ceda136f6ee
- SSDEEP 6144:YBDTOR2blQ1zBLBp+UjI2P96AG8kJiOgQRIPf/J0k:VR8lOjb9Sw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4d:f7:ba:e4:80:09:73:89:cd:3f:aa:bc:ef:0e:65:e0:a4:5d:fa:79:c6:26:6d:48:24:18:23:8b:16:88:80:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 6, 2024
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:c7:0c:2e:d0:30:ed:1c:6f:67:8e:ba:97:5f:a8:9b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2023 - Jun 1, 2026
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:C392-9641-4540,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2e:30:2b:14:37:07:50:ad:83:00:00:00:00:00:2e
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2023 - Jun 14, 2024
Minor OS version
0
Major OS version
4
Entry point
235122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Polly.Core/release_net8.0/Polly.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
222KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Polly.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 560d7ab9c6e637e1370fc1665a58007dc042c19022f2f1ef0c197e876989efac
- MD5 c816ce8e8df03922c8634d75d09bee6f
- SHA1 6b2ddc8990ac26a378dc0917919202ea386a0fd8
- SHA512 1a6d77fa9900a9883682891cd4986d3b710b0d5651d5069e2db243327457c051bd411eb7c86e3b4460b63d36dee92a2c8f7007c7cb77486b790b4013f9a9cd44
- SSDEEP 6144:6jd137ZoXuvBhvBxrbB9ruiBOyDfyfaGWL146:e1GXGfyfaGWL1z
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c5:79:0b:c6:66:1e:d7:52:08:dc:7c:32:65:fd:5b:76:55:38:0c:0b:01:52:0d:c9:c9:32:e8:5b:ad:4f:f1:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 6, 2024
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:c7:0c:2e:d0:30:ed:1c:6f:67:8e:ba:97:5f:a8:9b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2023 - Jun 1, 2026
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:C392-9641-4540,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:2e:30:2b:14:37:07:50:ad:83:00:00:00:00:00:2e
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2023 - Jun 14, 2024
Minor OS version
0
Major OS version
4
Entry point
289430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Polly/release_net6.0/Polly.pdb
mscoree
_CorDllMain
Name
.text
Size
275KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
RazorBlade.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c58fb78fa7230e2055c6e61b69f969a3e860332151127473c452009b8141e97f
- MD5 b75f33252d82a717c7075628f6ddcde0
- SHA1 8189888aa87db4227b410e67ea05c37c8f488340
- SHA512 d05a48ddaafeefd30b9ef17df463e39e58f5fb6b0efcc90a3c24182333c7c813ece81e8072c35202724e27264baaca5c2b620c318c0b3cc4081375b68aa1ed7d
- SSDEEP 768:7FJrL6ixErjNDs2MrkfMipiukSw/I6Sj/9Pa3QSKKg+ZRmCWO1CRdJh:H+gErC2i4fAupw/I6Sj/9Pa3Qh+RWO1u
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
RazorBlade.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Spectre.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 200fb336c0516ae15912b2ad772931d5c4e8e48327b3e0c79bb4c15305ec4b94
- MD5 dbe16490070588fa2d957e1a1e907422
- SHA1 0d271b1ae340f64ed084b8a51c75f804eb12e95c
- SHA512 947bac2f7c4c35f2eb65b128b71da5479f892010da25266ba3a563118b7c6d586fe211f89ce4c8b70efc7158d1c043fe73d6105ec525682551a844fd717c3df8
- SSDEEP 12288:HiIEoUd+hgwJGv7Jq0mR7kuv+YpiTiWlzF/1+:HFSD7AZfiTiQZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
682598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Spectre.Console.pdb
mscoree
_CorDllMain
Name
.text
Size
700KB
Virtual Size
700KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Superpower.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ce59cd33a2a43c38ab1f28a18faea7e23839590e7d88f727604a83d2ba722401
- MD5 e991ac2152429e4c851996fd49b71e6a
- SHA1 d6a2e9d1643c22d7bb252e2aa26dc74d8d777435
- SHA512 4391f323b5b76e2389e4eb2e73ea34e55208bc0ccc58666ae31c7c1c56ffbefb82f7ea468ea7fa4521c2ec0fc09bf7e08112ef8246b431d484d48067ed84d47d
- SSDEEP 1536:d7W1kjSS+e/DdFA/sS5UE1wG0g3A4tigfWyeYaiJjntjN99wdk7LBoeCVeS:BW0XssgZfOQ7tjNLwaBNCl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
97638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\superpower\src\Superpower\obj\Release\net5.0\Superpower.pdb
mscoree
_CorDllMain
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WebMarkupMin.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 63c4fb34ced14bcbedd615eeffcf8a07d626bc4dda5d948bb1dfb438ccb52c41
- MD5 492111e9bbb643d50f12656cdcc42a83
- SHA1 adbec13fa2d96e7e46db5e9ff6ccc591efd45b3e
- SHA512 b9a57ef191eeea218c8855b29175c333a77e61a4cf23a5a9f6b825b7bfd9954bac359b2915e86c375a23cf029b50591cc01fd186d7336826d6a1c59539107cde
- SSDEEP 3072:v8GBkurqVD5al9mVPNNNtbhBdBZtzHniJ9lbcamORgu+x3xSawGB:UGBkuru54GYlcZvxSX+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
156566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\WebMarkupMin\src\WebMarkupMin.Core\obj\Release\netstandard2.1\WebMarkupMin.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
145KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
YoutubeExplode.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93434568dc99f616e7c4679fd9b8d3f3ad50d8a7769d14b8528e6b6e7d74dc3a
- MD5 6882784be9e0dac0edcd840bc56e29b1
- SHA1 7c00dd8b027921e22f045b6e540690d188977c64
- SHA512 fc9fe8d6309aed7b238fb5c682d5b5eb82ad87d21ac66b7f60e7ffecf8e9fb28d784dd68e3f36ccad18c1eec15a48035e13a4afa66b6d49f7907fe038d7bc18a
- SSDEEP 3072:GvTPMZ4+plFAP0yjakV/kG5LOOKjyUVR0bO7n+YDhEAWjyw1WXUfaeYam5xkW1tn:ukeugc/17nxqosY514FaQdDGiV9Omq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
276622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
262KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ