Release[.]zip | Triage

Resubmissions

25-05-2024 21:03

240525-zv5dlaad2y 10

25-05-2024 20:57

240525-zrtgxsab7v 3

Sharing

Copy URL

Twitter E-mail

General

Target

Release.zip
Size

22.8MB
MD5

d4e10e180be5939b828636b4891f6705
SHA1

24f3d046b28378a18bfc36114538e1db0bfcde32
SHA256

505c14a562732c086bd2c132d863a57b295776f244d97414f793aca4d5926611
SHA512

5ed4bd20a069829b6d1aa66c5c90808da6348da18883191d4533db875ab428050f712b69decd0de70832146b37595e15be29f0ae3a48e306d776528b0af4eced
SSDEEP

393216:yNhMVVtEIkPOvoCbRZhIzSzOvpBEYf9vMmQ2OErks47i/uX7ZWlTZ5ue:ghrAvDdZCG6vpSY1kmQ2ks4+DVjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 32 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Release/Eagle Monitor RAT Reborn (x32).exe
unpack001/Release/Eagle Monitor RAT Reborn (x64).exe
unpack001/Release/FastColoredTextBox.dll
unpack001/Release/Guna.UI2.dll
unpack001/Release/Leaf.xNet.dll
unpack001/Release/NAudio.dll
unpack001/Release/PacketLib.dll
unpack001/Release/Plugins/Admin.dll
unpack001/Release/Plugins/AudioRecording.dll
unpack001/Release/Plugins/Chat.dll
unpack001/Release/Plugins/FileManager.dll
unpack001/Release/Plugins/Hardware.dll
unpack001/Release/Plugins/Information.dll
unpack001/Release/Plugins/Keylogger.dll
unpack001/Release/Plugins/MemoryExecution.dll
unpack001/Release/Plugins/Miscellaneous.dll
unpack001/Release/Plugins/PowerManager.dll
unpack001/Release/Plugins/ProcessManager.dll
unpack001/Release/Plugins/Ransomware.dll
unpack001/Release/Plugins/RemoteCamera.dll
unpack001/Release/Plugins/RemoteDesktop.dll
unpack001/Release/Plugins/RemoteShell.dll
unpack001/Release/Plugins/ScreenLocker.dll
unpack001/Release/Plugins/Stealer.dll
unpack001/Release/SamplePayloads(x32)/PayloadCSharp.exe
unpack001/Release/SamplePayloads(x32)/PayloadDllCpp.dll
unpack001/Release/SamplePayloads(x32)/PayloadExeCpp.exe
unpack001/Release/SamplePayloads(x64)/PayloadCpp.dll
unpack001/Release/Stubs/Offline.dll
unpack001/Release/Stubs/PacketLib.dll
unpack001/Release/Vestris.ResourceLib.dll
unpack001/Release/dnlib.dll

Files

Release.zip
.zip
Release/Eagle Monitor RAT Reborn (x32).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Eagle Monitor RAT Reborn (x64).exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Release/Extensions.txt
Release/FastColoredTextBox.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Flags/FlagsBase/LOCALIP.png
.png
Release/Flags/FlagsBase/NOCONNECTIONORLOCAL.png
.png
Release/Flags/FlagsBase/UKN.png
.png
Release/Flags/FlagsBase/_ASEAN.png
.png
Release/Flags/FlagsBase/_African Union.png
.png
Release/Flags/FlagsBase/_Alderney.png
.png
Release/Flags/FlagsBase/_Arab League.png
.png
Release/Flags/FlagsBase/_Basque Country.png
.png
Release/Flags/FlagsBase/_CARICOM.png
.png
Release/Flags/FlagsBase/_CIS.png
.png
Release/Flags/FlagsBase/_Catalonia.png
.png
Release/Flags/FlagsBase/_Commonwealth.png
.png
Release/Flags/FlagsBase/_England.png
.png
Release/Flags/FlagsBase/_European Union.png
.png
Release/Flags/FlagsBase/_FAO.png
.png
Release/Flags/FlagsBase/_Galicia.png
.png
Release/Flags/FlagsBase/_IAEA.png
.png
Release/Flags/FlagsBase/_IHO.png
.png
Release/Flags/FlagsBase/_Islamic Conference.png
.png
Release/Flags/FlagsBase/_Kosovo.png
.png
Release/Flags/FlagsBase/_NATO.png
.png
Release/Flags/FlagsBase/_Northern Cyprus.png
.png
Release/Flags/FlagsBase/_Northern Ireland.png
.png
Release/Flags/FlagsBase/_OAS.png
.png
Release/Flags/FlagsBase/_OECD.png
.png
Release/Flags/FlagsBase/_OPEC.png
.png
Release/Flags/FlagsBase/_Olimpic Movement.png
.png
Release/Flags/FlagsBase/_Quebec.png
.png
Release/Flags/FlagsBase/_Red Cross.png
.png
Release/Flags/FlagsBase/_Scotland.png
.png
Release/Flags/FlagsBase/_Somaliland.png
.png
Release/Flags/FlagsBase/_Tristan-da-Cunha.png
.png
Release/Flags/FlagsBase/_UNESCO.png
.png
Release/Flags/FlagsBase/_UNICEF.png
.png
Release/Flags/FlagsBase/_United Nations.png
.png
Release/Flags/FlagsBase/_WHO.png
.png
Release/Flags/FlagsBase/_WTO.png
.png
Release/Flags/FlagsBase/_Wales.png
.png
Release/Flags/FlagsBase/ad.png
.png
Release/Flags/FlagsBase/ae.png
.png
Release/Flags/FlagsBase/af.png
.png
Release/Flags/FlagsBase/ag.png
.png
Release/Flags/FlagsBase/ai.png
.png
Release/Flags/FlagsBase/al.png
.png
Release/Flags/FlagsBase/am.png
.png
Release/Flags/FlagsBase/an.png
.png
Release/Flags/FlagsBase/ao.png
.png
Release/Flags/FlagsBase/aq.png
.png
Release/Flags/FlagsBase/ar.png
.png
Release/Flags/FlagsBase/as.png
.png
Release/Flags/FlagsBase/at.png
.png
Release/Flags/FlagsBase/au.png
.png
Release/Flags/FlagsBase/aw.png
.png
Release/Flags/FlagsBase/ax.png
.png
Release/Flags/FlagsBase/az.png
.png
Release/Flags/FlagsBase/ba.png
.png
Release/Flags/FlagsBase/bb.png
.png
Release/Flags/FlagsBase/bd.png
.png
Release/Flags/FlagsBase/be.png
.png
Release/Flags/FlagsBase/bf.png
.png
Release/Flags/FlagsBase/bg.png
.png
Release/Flags/FlagsBase/bh.png
.png
Release/Flags/FlagsBase/bi.png
.png
Release/Flags/FlagsBase/bj.png
.png
Release/Flags/FlagsBase/bl.png
.png
Release/Flags/FlagsBase/bm.png
.png
Release/Flags/FlagsBase/bn.png
.png
Release/Flags/FlagsBase/bo.png
.png
Release/Flags/FlagsBase/bq.png
.png
Release/Flags/FlagsBase/br.png
.png
Release/Flags/FlagsBase/bs.png
.png
Release/Flags/FlagsBase/bt.png
.png
Release/Flags/FlagsBase/bv.png
.png
Release/Flags/FlagsBase/bw.png
.png
Release/Flags/FlagsBase/by.png
.png
Release/Flags/FlagsBase/bz.png
.png
Release/Flags/FlagsBase/ca.png
.png
Release/Flags/FlagsBase/cc.png
.png
Release/Flags/FlagsBase/cd.png
.png
Release/Flags/FlagsBase/cf.png
.png
Release/Flags/FlagsBase/cg.png
.png
Release/Flags/FlagsBase/ch.png
.png
Release/Flags/FlagsBase/ci.png
.png
Release/Flags/FlagsBase/ck.png
.png
Release/Flags/FlagsBase/cl.png
.png
Release/Flags/FlagsBase/cm.png
.png
Release/Flags/FlagsBase/cn.png
.png
Release/Flags/FlagsBase/co.png
.png
Release/Flags/FlagsBase/cr.png
.png
Release/Flags/FlagsBase/cu.png
.png
Release/Flags/FlagsBase/cv.png
.png
Release/Flags/FlagsBase/cw.png
.png
Release/Flags/FlagsBase/cx.png
.png
Release/Flags/FlagsBase/cy.png
.png
Release/Flags/FlagsBase/cz.png
.png
Release/Flags/FlagsBase/de.png
.png
Release/Flags/FlagsBase/dj.png
.png
Release/Flags/FlagsBase/dk.png
.png
Release/Flags/FlagsBase/dm.png
.png
Release/Flags/FlagsBase/do.png
.png
Release/Flags/FlagsBase/dz.png
.png
Release/Flags/FlagsBase/ec.png
.png
Release/Flags/FlagsBase/ee.png
.png
Release/Flags/FlagsBase/eg.png
.png
Release/Flags/FlagsBase/eh.png
.png
Release/Flags/FlagsBase/er.png
.png
Release/Flags/FlagsBase/es.png
.png
Release/Flags/FlagsBase/et.png
.png
Release/Flags/FlagsBase/fi.png
.png
Release/Flags/FlagsBase/fj.png
.png
Release/Flags/FlagsBase/fk.png
.png
Release/Flags/FlagsBase/fm.png
.png
Release/Flags/FlagsBase/fo.png
.png
Release/Flags/FlagsBase/fr.png
.png
Release/Flags/FlagsBase/ga.png
.png
Release/Flags/FlagsBase/gb.png
.png
Release/Flags/FlagsBase/gd.png
.png
Release/Flags/FlagsBase/ge.png
.png
Release/Flags/FlagsBase/gf.png
.png
Release/Flags/FlagsBase/gg.png
.png
Release/Flags/FlagsBase/gh.png
.png
Release/Flags/FlagsBase/gi.png
.png
Release/Flags/FlagsBase/gl.png
.png
Release/Flags/FlagsBase/gm.png
.png
Release/Flags/FlagsBase/gn.png
.png
Release/Flags/FlagsBase/gp.png
.png
Release/Flags/FlagsBase/gq.png
.png
Release/Flags/FlagsBase/gr.png
.png
Release/Flags/FlagsBase/gs.png
.png
Release/Flags/FlagsBase/gt.png
.png
Release/Flags/FlagsBase/gu.png
.png
Release/Flags/FlagsBase/gw.png
.png
Release/Flags/FlagsBase/gy.png
.png
Release/Flags/FlagsBase/hk.png
.png
Release/Flags/FlagsBase/hm.png
.png
Release/Flags/FlagsBase/hn.png
.png
Release/Flags/FlagsBase/hr.png
.png
Release/Flags/FlagsBase/ht.png
.png
Release/Flags/FlagsBase/hu.png
.png
Release/Flags/FlagsBase/id.png
.png
Release/Flags/FlagsBase/ie.png
.png
Release/Flags/FlagsBase/il.png
.png
Release/Flags/FlagsBase/im.png
.png
Release/Flags/FlagsBase/in.png
.png
Release/Flags/FlagsBase/io.png
.png
Release/Flags/FlagsBase/iq.png
.png
Release/Flags/FlagsBase/ir.png
.png
Release/Flags/FlagsBase/is.png
.png
Release/Flags/FlagsBase/it.png
.png
Release/Flags/FlagsBase/je.png
.png
Release/Flags/FlagsBase/jm.png
.png
Release/Flags/FlagsBase/jo.png
.png
Release/Flags/FlagsBase/jp.png
.png
Release/Flags/FlagsBase/ke.png
.png
Release/Flags/FlagsBase/kg.png
.png
Release/Flags/FlagsBase/kh.png
.png
Release/Flags/FlagsBase/ki.png
.png
Release/Flags/FlagsBase/km.png
.png
Release/Flags/FlagsBase/kn.png
.png
Release/Flags/FlagsBase/kp.png
.png
Release/Flags/FlagsBase/kr.png
.png
Release/Flags/FlagsBase/kw.png
.png
Release/Flags/FlagsBase/ky.png
.png
Release/Flags/FlagsBase/kz.png
.png
Release/Flags/FlagsBase/la.png
.png
Release/Flags/FlagsBase/lb.png
.png
Release/Flags/FlagsBase/lc.png
.png
Release/Flags/FlagsBase/li.png
.png
Release/Flags/FlagsBase/lk.png
.png
Release/Flags/FlagsBase/lr.png
.png
Release/Flags/FlagsBase/ls.png
.png
Release/Flags/FlagsBase/lt.png
.png
Release/Flags/FlagsBase/lu.png
.png
Release/Flags/FlagsBase/lv.png
.png
Release/Flags/FlagsBase/ly.png
.png
Release/Flags/FlagsBase/ma.png
.png
Release/Flags/FlagsBase/mc.png
.png
Release/Flags/FlagsBase/md.png
.png
Release/Flags/FlagsBase/me.png
.png
Release/Flags/FlagsBase/mf.png
.png
Release/Flags/FlagsBase/mg.png
.png
Release/Flags/FlagsBase/mh.png
.png
Release/Flags/FlagsBase/mk.png
.png
Release/Flags/FlagsBase/ml.png
.png
Release/Flags/FlagsBase/mm.png
.png
Release/Flags/FlagsBase/mn.png
.png
Release/Flags/FlagsBase/mo.png
.png
Release/Flags/FlagsBase/mp.png
.png
Release/Flags/FlagsBase/mq.png
.png
Release/Flags/FlagsBase/mr.png
.png
Release/Flags/FlagsBase/ms.png
.png
Release/Flags/FlagsBase/mt.png
.png
Release/Flags/FlagsBase/mu.png
.png
Release/Flags/FlagsBase/mv.png
.png
Release/Flags/FlagsBase/mw.png
.png
Release/Flags/FlagsBase/mx.png
.png
Release/Flags/FlagsBase/my.png
.png
Release/Flags/FlagsBase/mz.png
.png
Release/Flags/FlagsBase/na.png
.png
Release/Flags/FlagsBase/nc.png
.png
Release/Flags/FlagsBase/ne.png
.png
Release/Flags/FlagsBase/nf.png
.png
Release/Flags/FlagsBase/ng.png
.png
Release/Flags/FlagsBase/ni.png
.png
Release/Flags/FlagsBase/nl.png
.png
Release/Flags/FlagsBase/no.png
.png
Release/Flags/FlagsBase/np.png
.png
Release/Flags/FlagsBase/nr.png
.png
Release/Flags/FlagsBase/nu.png
.png
Release/Flags/FlagsBase/nz.png
.png
Release/Flags/FlagsBase/om.png
.png
Release/Flags/FlagsBase/pa.png
.png
Release/Flags/FlagsBase/pe.png
.png
Release/Flags/FlagsBase/pf.png
.png
Release/Flags/FlagsBase/pg.png
.png
Release/Flags/FlagsBase/ph.png
.png
Release/Flags/FlagsBase/pk.png
.png
Release/Flags/FlagsBase/pl.png
.png
Release/Flags/FlagsBase/pm.png
.png
Release/Flags/FlagsBase/pn.png
.png
Release/Flags/FlagsBase/pr.png
.png
Release/Flags/FlagsBase/ps.png
.png
Release/Flags/FlagsBase/pt.png
.png
Release/Flags/FlagsBase/pw.png
.png
Release/Flags/FlagsBase/py.png
.png
Release/Flags/FlagsBase/qa.png
.png
Release/Flags/FlagsBase/re.png
.png
Release/Flags/FlagsBase/ro.png
.png
Release/Flags/FlagsBase/rs.png
.png
Release/Flags/FlagsBase/ru.png
.png
Release/Flags/FlagsBase/rw.png
.png
Release/Flags/FlagsBase/sa.png
.png
Release/Flags/FlagsBase/sb.png
.png
Release/Flags/FlagsBase/sc.png
.png
Release/Flags/FlagsBase/sd.png
.png
Release/Flags/FlagsBase/se.png
.png
Release/Flags/FlagsBase/sg.png
.png
Release/Flags/FlagsBase/sh.png
.png
Release/Flags/FlagsBase/si.png
.png
Release/Flags/FlagsBase/sj.png
.png
Release/Flags/FlagsBase/sk.png
.png
Release/Flags/FlagsBase/sl.png
.png
Release/Flags/FlagsBase/sm.png
.png
Release/Flags/FlagsBase/sn.png
.png
Release/Flags/FlagsBase/so.png
.png
Release/Flags/FlagsBase/sr.png
.png
Release/Flags/FlagsBase/ss.png
.png
Release/Flags/FlagsBase/st.png
.png
Release/Flags/FlagsBase/sv.png
.png
Release/Flags/FlagsBase/sx.png
.png
Release/Flags/FlagsBase/sy.png
.png
Release/Flags/FlagsBase/sz.png
.png
Release/Flags/FlagsBase/tc.png
.png
Release/Flags/FlagsBase/td.png
.png
Release/Flags/FlagsBase/tf.png
.png
Release/Flags/FlagsBase/tg.png
.png
Release/Flags/FlagsBase/th.png
.png
Release/Flags/FlagsBase/tj.png
.png
Release/Flags/FlagsBase/tk.png
.png
Release/Flags/FlagsBase/tl.png
.png
Release/Flags/FlagsBase/tm.png
.png
Release/Flags/FlagsBase/tn.png
.png
Release/Flags/FlagsBase/to.png
.png
Release/Flags/FlagsBase/tr.png
.png
Release/Flags/FlagsBase/tt.png
.png
Release/Flags/FlagsBase/tv.png
.png
Release/Flags/FlagsBase/tw.png
.png
Release/Flags/FlagsBase/tz.png
.png
Release/Flags/FlagsBase/ua.png
.png
Release/Flags/FlagsBase/ug.png
.png
Release/Flags/FlagsBase/um.png
.png
Release/Flags/FlagsBase/us.png
.png
Release/Flags/FlagsBase/uy.png
.png
Release/Flags/FlagsBase/uz.png
.png
Release/Flags/FlagsBase/va.png
.png
Release/Flags/FlagsBase/vc.png
.png
Release/Flags/FlagsBase/ve.png
.png
Release/Flags/FlagsBase/vg.png
.png
Release/Flags/FlagsBase/vi.png
.png
Release/Flags/FlagsBase/vn.png
.png
Release/Flags/FlagsBase/vu.png
.png
Release/Flags/FlagsBase/wf.png
.png
Release/Flags/FlagsBase/ws.png
.png
Release/Flags/FlagsBase/ye.png
.png
Release/Flags/FlagsBase/yt.png
.png
Release/Flags/FlagsBase/za.png
.png
Release/Flags/FlagsBase/zm.png
.png
Release/Flags/FlagsBase/zw.png
.png
Release/Flags/FlagsPack1/ad.ico
Release/Flags/FlagsPack1/ae.ico
Release/Flags/FlagsPack1/af.ico
Release/Flags/FlagsPack1/ag.ico
Release/Flags/FlagsPack1/ai.ico
Release/Flags/FlagsPack1/al.ico
Release/Flags/FlagsPack1/am.ico
Release/Flags/FlagsPack1/ao.ico
Release/Flags/FlagsPack1/aq.ico
Release/Flags/FlagsPack1/ar.ico
Release/Flags/FlagsPack1/as.ico
Release/Flags/FlagsPack1/at.ico
Release/Flags/FlagsPack1/au.ico
Release/Flags/FlagsPack1/aw.ico
Release/Flags/FlagsPack1/ax.ico
Release/Flags/FlagsPack1/az.ico
Release/Flags/FlagsPack1/ba.ico
Release/Flags/FlagsPack1/bb.ico
Release/Flags/FlagsPack1/bd.ico
Release/Flags/FlagsPack1/be.ico
Release/Flags/FlagsPack1/bf.ico
Release/Flags/FlagsPack1/bg.ico
Release/Flags/FlagsPack1/bh.ico
Release/Flags/FlagsPack1/bi.ico
Release/Flags/FlagsPack1/bj.ico
Release/Flags/FlagsPack1/bl.ico
Release/Flags/FlagsPack1/bm.ico
Release/Flags/FlagsPack1/bn.ico
Release/Flags/FlagsPack1/bo.ico
Release/Flags/FlagsPack1/bq-bo.ico
Release/Flags/FlagsPack1/bq-sa.ico
Release/Flags/FlagsPack1/bq-se.ico
Release/Flags/FlagsPack1/bq.ico
Release/Flags/FlagsPack1/br.ico
Release/Flags/FlagsPack1/bs.ico
Release/Flags/FlagsPack1/bt.ico
Release/Flags/FlagsPack1/bv.ico
Release/Flags/FlagsPack1/bw.ico
Release/Flags/FlagsPack1/by.ico
Release/Flags/FlagsPack1/bz.ico
Release/Flags/FlagsPack1/ca-bc.ico
Release/Flags/FlagsPack1/ca.ico
Release/Flags/FlagsPack1/cc.ico
Release/Flags/FlagsPack1/cd.ico
Release/Flags/FlagsPack1/cf.ico
Release/Flags/FlagsPack1/cg.ico
Release/Flags/FlagsPack1/ch.ico
Release/Flags/FlagsPack1/ci.ico
Release/Flags/FlagsPack1/ck.ico
Release/Flags/FlagsPack1/cl.ico
Release/Flags/FlagsPack1/cm.ico
Release/Flags/FlagsPack1/cn.ico
Release/Flags/FlagsPack1/co.ico
Release/Flags/FlagsPack1/cr.ico
Release/Flags/FlagsPack1/cu.ico
Release/Flags/FlagsPack1/cv.ico
Release/Flags/FlagsPack1/cw.ico
Release/Flags/FlagsPack1/cx.ico
Release/Flags/FlagsPack1/cy.ico
Release/Flags/FlagsPack1/cz.ico
Release/Flags/FlagsPack1/de.ico
Release/Flags/FlagsPack1/dj.ico
Release/Flags/FlagsPack1/dk.ico
Release/Flags/FlagsPack1/dm.ico
Release/Flags/FlagsPack1/do.ico
Release/Flags/FlagsPack1/dz.ico
Release/Flags/FlagsPack1/easter_island.ico
Release/Flags/FlagsPack1/ec-w.ico
Release/Flags/FlagsPack1/ec.ico
Release/Flags/FlagsPack1/ee.ico
Release/Flags/FlagsPack1/eg.ico
Release/Flags/FlagsPack1/eh.ico
Release/Flags/FlagsPack1/er.ico
Release/Flags/FlagsPack1/es-ce.ico
Release/Flags/FlagsPack1/es-cn.ico
Release/Flags/FlagsPack1/es-ga.ico
Release/Flags/FlagsPack1/es-ib.ico
Release/Flags/FlagsPack1/es-ml.ico
Release/Flags/FlagsPack1/es-pv.ico
Release/Flags/FlagsPack1/es-variant.ico
Release/Flags/FlagsPack1/es.ico
Release/Flags/FlagsPack1/esperanto.ico
Release/Flags/FlagsPack1/et.ico
Release/Flags/FlagsPack1/european_union.ico
Release/Flags/FlagsPack1/fi.ico
Release/Flags/FlagsPack1/fj.ico
Release/Flags/FlagsPack1/fk.ico
Release/Flags/FlagsPack1/fm.ico
Release/Flags/FlagsPack1/fo.ico
Release/Flags/FlagsPack1/fr-h.ico
Release/Flags/FlagsPack1/fr.ico
Release/Flags/FlagsPack1/ga.ico
Release/Flags/FlagsPack1/gb-eng.ico
Release/Flags/FlagsPack1/gb-ork.ico
Release/Flags/FlagsPack1/gb-sct.ico
Release/Flags/FlagsPack1/gb-wls.ico
Release/Flags/FlagsPack1/gb.ico
Release/Flags/FlagsPack1/gd.ico
Release/Flags/FlagsPack1/ge-ab.ico
Release/Flags/FlagsPack1/ge.ico
Release/Flags/FlagsPack1/gf.ico
Release/Flags/FlagsPack1/gg.ico
Release/Flags/FlagsPack1/gh.ico
Release/Flags/FlagsPack1/gi.ico
Release/Flags/FlagsPack1/gl.ico
Release/Flags/FlagsPack1/gm.ico
Release/Flags/FlagsPack1/gn.ico
Release/Flags/FlagsPack1/gp.ico
Release/Flags/FlagsPack1/gq.ico
Release/Flags/FlagsPack1/gr.ico
Release/Flags/FlagsPack1/gs.ico
Release/Flags/FlagsPack1/gt.ico
Release/Flags/FlagsPack1/gu.ico
Release/Flags/FlagsPack1/gw.ico
Release/Flags/FlagsPack1/gy.ico
Release/Flags/FlagsPack1/hausa.ico
Release/Flags/FlagsPack1/hk.ico
Release/Flags/FlagsPack1/hm.ico
Release/Flags/FlagsPack1/hmong.ico
Release/Flags/FlagsPack1/hn.ico
Release/Flags/FlagsPack1/hr.ico
Release/Flags/FlagsPack1/ht.ico
Release/Flags/FlagsPack1/hu.ico
Release/Flags/FlagsPack1/id.ico
Release/Flags/FlagsPack1/ie.ico
Release/Flags/FlagsPack1/il.ico
Release/Flags/FlagsPack1/im.ico
Release/Flags/FlagsPack1/in.ico
Release/Flags/FlagsPack1/io.ico
Release/Flags/FlagsPack1/iq.ico
Release/Flags/FlagsPack1/ir.ico
Release/Flags/FlagsPack1/is.ico
Release/Flags/FlagsPack1/it-82.ico
Release/Flags/FlagsPack1/it-88.ico
Release/Flags/FlagsPack1/it.ico
Release/Flags/FlagsPack1/je.ico
Release/Flags/FlagsPack1/jm.ico
Release/Flags/FlagsPack1/jo.ico
Release/Flags/FlagsPack1/jp.ico
Release/Flags/FlagsPack1/kannada.ico
Release/Flags/FlagsPack1/ke.ico
Release/Flags/FlagsPack1/kg.ico
Release/Flags/FlagsPack1/kh.ico
Release/Flags/FlagsPack1/ki.ico
Release/Flags/FlagsPack1/km.ico
Release/Flags/FlagsPack1/kn.ico
Release/Flags/FlagsPack1/kp.ico
Release/Flags/FlagsPack1/kr.ico
Release/Flags/FlagsPack1/kurdistan.ico
Release/Flags/FlagsPack1/kw.ico
Release/Flags/FlagsPack1/ky.ico
Release/Flags/FlagsPack1/kz.ico
Release/Flags/FlagsPack1/la.ico
Release/Flags/FlagsPack1/lb.ico
Release/Flags/FlagsPack1/lc.ico
Release/Flags/FlagsPack1/li.ico
Release/Flags/FlagsPack1/lk.ico
Release/Flags/FlagsPack1/lr.ico
Release/Flags/FlagsPack1/ls.ico
Release/Flags/FlagsPack1/lt.ico
Release/Flags/FlagsPack1/lu.ico
Release/Flags/FlagsPack1/lv.ico
Release/Flags/FlagsPack1/ly.ico
Release/Flags/FlagsPack1/ma.ico
Release/Flags/FlagsPack1/malayali.ico
Release/Flags/FlagsPack1/maori.ico
Release/Flags/FlagsPack1/mc.ico
Release/Flags/FlagsPack1/md.ico
Release/Flags/FlagsPack1/me.ico
Release/Flags/FlagsPack1/mf.ico
Release/Flags/FlagsPack1/mg.ico
Release/Flags/FlagsPack1/mh.ico
Release/Flags/FlagsPack1/mk.ico
Release/Flags/FlagsPack1/ml.ico
Release/Flags/FlagsPack1/mm.ico
Release/Flags/FlagsPack1/mn.ico
Release/Flags/FlagsPack1/mo.ico
Release/Flags/FlagsPack1/mp.ico
Release/Flags/FlagsPack1/mq.ico
Release/Flags/FlagsPack1/mr.ico
Release/Flags/FlagsPack1/ms.ico
Release/Flags/FlagsPack1/mt.ico
Release/Flags/FlagsPack1/mu.ico
Release/Flags/FlagsPack1/mv.ico
Release/Flags/FlagsPack1/mw.ico
Release/Flags/FlagsPack1/mx.ico
Release/Flags/FlagsPack1/my.ico
Release/Flags/FlagsPack1/mz.ico
Release/Flags/FlagsPack1/na.ico
Release/Flags/FlagsPack1/nato.ico
Release/Flags/FlagsPack1/nc.ico
Release/Flags/FlagsPack1/ne.ico
Release/Flags/FlagsPack1/nf.ico
Release/Flags/FlagsPack1/ng.ico
Release/Flags/FlagsPack1/ni.ico
Release/Flags/FlagsPack1/nl.ico
Release/Flags/FlagsPack1/no.ico
Release/Flags/FlagsPack1/northern_cyprus.ico
Release/Flags/FlagsPack1/np.ico
Release/Flags/FlagsPack1/nr.ico
Release/Flags/FlagsPack1/nu.ico
Release/Flags/FlagsPack1/nz.ico
Release/Flags/FlagsPack1/om.ico
Release/Flags/FlagsPack1/pa.ico
Release/Flags/FlagsPack1/pe.ico
Release/Flags/FlagsPack1/pf.ico
Release/Flags/FlagsPack1/pg.ico
Release/Flags/FlagsPack1/ph.ico
Release/Flags/FlagsPack1/pk.ico
Release/Flags/FlagsPack1/pl.ico
Release/Flags/FlagsPack1/pm.ico
Release/Flags/FlagsPack1/pn.ico
Release/Flags/FlagsPack1/pr.ico
Release/Flags/FlagsPack1/ps.ico
Release/Flags/FlagsPack1/pt-20.ico
Release/Flags/FlagsPack1/pt-30.ico
Release/Flags/FlagsPack1/pt.ico
Release/Flags/FlagsPack1/pw.ico
Release/Flags/FlagsPack1/py.ico
Release/Flags/FlagsPack1/qa.ico
Release/Flags/FlagsPack1/re.ico
Release/Flags/FlagsPack1/ro.ico
Release/Flags/FlagsPack1/rs.ico
Release/Flags/FlagsPack1/ru.ico
Release/Flags/FlagsPack1/rw.ico
Release/Flags/FlagsPack1/sa.ico
Release/Flags/FlagsPack1/sb.ico
Release/Flags/FlagsPack1/sc.ico
Release/Flags/FlagsPack1/sd.ico
Release/Flags/FlagsPack1/se.ico
Release/Flags/FlagsPack1/sg.ico
Release/Flags/FlagsPack1/sh-ac.ico
Release/Flags/FlagsPack1/sh-hl.ico
Release/Flags/FlagsPack1/sh-ta.ico
Release/Flags/FlagsPack1/sh.ico
Release/Flags/FlagsPack1/si.ico
Release/Flags/FlagsPack1/sindh.ico
Release/Flags/FlagsPack1/sj.ico
Release/Flags/FlagsPack1/sk.ico
Release/Flags/FlagsPack1/sl.ico
Release/Flags/FlagsPack1/sm.ico
Release/Flags/FlagsPack1/sn.ico
Release/Flags/FlagsPack1/so.ico
Release/Flags/FlagsPack1/somaliland.ico
Release/Flags/FlagsPack1/south_ossetia.ico
Release/Flags/FlagsPack1/sr.ico
Release/Flags/FlagsPack1/ss.ico
Release/Flags/FlagsPack1/st.ico
Release/Flags/FlagsPack1/sv.ico
Release/Flags/FlagsPack1/sx.ico
Release/Flags/FlagsPack1/sy.ico
Release/Flags/FlagsPack1/sz.ico
Release/Flags/FlagsPack1/tc.ico
Release/Flags/FlagsPack1/td.ico
Release/Flags/FlagsPack1/tf.ico
Release/Flags/FlagsPack1/tg.ico
Release/Flags/FlagsPack1/th.ico
Release/Flags/FlagsPack1/tibet.ico
Release/Flags/FlagsPack1/tj.ico
Release/Flags/FlagsPack1/tk.ico
Release/Flags/FlagsPack1/tl.ico
Release/Flags/FlagsPack1/tm.ico
Release/Flags/FlagsPack1/tn.ico
Release/Flags/FlagsPack1/to.ico
Release/Flags/FlagsPack1/tr.ico
Release/Flags/FlagsPack1/transnistria.ico
Release/Flags/FlagsPack1/tt.ico
Release/Flags/FlagsPack1/tv.ico
Release/Flags/FlagsPack1/tw.ico
Release/Flags/FlagsPack1/tz.ico
Release/Flags/FlagsPack1/ua.ico
Release/Flags/FlagsPack1/ug.ico
Release/Flags/FlagsPack1/um.ico
Release/Flags/FlagsPack1/united_nations.ico
Release/Flags/FlagsPack1/us-hi.ico
Release/Flags/FlagsPack1/us.ico
Release/Flags/FlagsPack1/uy.ico
Release/Flags/FlagsPack1/uz.ico
Release/Flags/FlagsPack1/va.ico
Release/Flags/FlagsPack1/vc.ico
Release/Flags/FlagsPack1/ve.ico
Release/Flags/FlagsPack1/vg.ico
Release/Flags/FlagsPack1/vi.ico
Release/Flags/FlagsPack1/vn.ico
Release/Flags/FlagsPack1/vu.ico
Release/Flags/FlagsPack1/wf.ico
Release/Flags/FlagsPack1/ws.ico
Release/Flags/FlagsPack1/xk.ico
Release/Flags/FlagsPack1/ye.ico
Release/Flags/FlagsPack1/yiddish.ico
Release/Flags/FlagsPack1/yt.ico
Release/Flags/FlagsPack1/za.ico
Release/Flags/FlagsPack1/zm.ico
Release/Flags/FlagsPack1/zw.ico
Release/Flags/FlagsPack2/031-corsica.png
.png
Release/Flags/FlagsPack2/055-scotland.png
.png
Release/Flags/FlagsPack2/061-saba-island.png
.png
Release/Flags/FlagsPack2/069-british-indian-ocean-territory.png
.png
Release/Flags/FlagsPack2/072-bonaire.png
.png
Release/Flags/FlagsPack2/082-united-nations.png
.png
Release/Flags/FlagsPack2/093-basque-country.png
.png
Release/Flags/FlagsPack2/101-northern-cyprus.png
.png
Release/Flags/FlagsPack2/102-balearic-islands.png
.png
Release/Flags/FlagsPack2/112-laos.png
.png
Release/Flags/FlagsPack2/114-british-virgin-islands.png
.png
Release/Flags/FlagsPack2/116-curacao.png
.png
Release/Flags/FlagsPack2/123-british-columbia.png
.png
Release/Flags/FlagsPack2/129-ossetia.png
.png
Release/Flags/FlagsPack2/130-sicily.png
.png
Release/Flags/FlagsPack2/142-tibet.png
.png
Release/Flags/FlagsPack2/148-madeira.png
.png
Release/Flags/FlagsPack2/161-ivory-coast.png
.png
Release/Flags/FlagsPack2/171-galapagos-islands.png
.png
Release/Flags/FlagsPack2/175-rapa-nui.png
.png
Release/Flags/FlagsPack2/197-melilla.png
.png
Release/Flags/FlagsPack2/215-falkland-islands.png
.png
Release/Flags/FlagsPack2/216-england.png
.png
Release/Flags/FlagsPack2/233-transnistria.png
.png
Release/Flags/FlagsPack2/240-azores-islands.png
.png
Release/Flags/FlagsPack2/247-somaliland.png
.png
Release/Flags/FlagsPack2/250-sint-eustatius.png
.png
Release/Flags/FlagsPack2/253-seychelles.png
.png
Release/Flags/FlagsPack2/254-nato.png
.png
Release/Flags/FlagsPack2/257-sardinia.png
.png
Release/Flags/FlagsPack2/259-european-union.png
.png
Release/Flags/FlagsPack2/262-hawaii.png
.png
Release/Flags/FlagsPack2/ad.png
.png
Release/Flags/FlagsPack2/ae.png
.png
Release/Flags/FlagsPack2/af.png
.png
Release/Flags/FlagsPack2/ag.png
.png
Release/Flags/FlagsPack2/ai.png
.png
Release/Flags/FlagsPack2/al.png
.png
Release/Flags/FlagsPack2/am.png
.png
Release/Flags/FlagsPack2/ao.png
.png
Release/Flags/FlagsPack2/ar.png
.png
Release/Flags/FlagsPack2/as.png
.png
Release/Flags/FlagsPack2/at.png
.png
Release/Flags/FlagsPack2/au.png
.png
Release/Flags/FlagsPack2/aw.png
.png
Release/Flags/FlagsPack2/ax.png
.png
Release/Flags/FlagsPack2/az.png
.png
Release/Flags/FlagsPack2/ba.png
.png
Release/Flags/FlagsPack2/bb.png
.png
Release/Flags/FlagsPack2/bd.png
.png
Release/Flags/FlagsPack2/be.png
.png
Release/Flags/FlagsPack2/bf.png
.png
Release/Flags/FlagsPack2/bg.png
.png
Release/Flags/FlagsPack2/bh.png
.png
Release/Flags/FlagsPack2/bi.png
.png
Release/Flags/FlagsPack2/bj.png
.png
Release/Flags/FlagsPack2/bl.png
.png
Release/Flags/FlagsPack2/bm.png
.png
Release/Flags/FlagsPack2/bn.png
.png
Release/Flags/FlagsPack2/bo.png
.png
Release/Flags/FlagsPack2/br.png
.png
Release/Flags/FlagsPack2/bs.png
.png
Release/Flags/FlagsPack2/bt.png
.png
Release/Flags/FlagsPack2/bw.png
.png
Release/Flags/FlagsPack2/by.png
.png
Release/Flags/FlagsPack2/bz.png
.png
Release/Flags/FlagsPack2/ca.png
.png
Release/Flags/FlagsPack2/cc.png
.png
Release/Flags/FlagsPack2/cd.png
.png
Release/Flags/FlagsPack2/cf.png
.png
Release/Flags/FlagsPack2/cg.png
.png
Release/Flags/FlagsPack2/ch.png
.png
Release/Flags/FlagsPack2/ck.png
.png
Release/Flags/FlagsPack2/cl.png
.png
Release/Flags/FlagsPack2/cm.png
.png
Release/Flags/FlagsPack2/cn.png
.png
Release/Flags/FlagsPack2/co.png
.png
Release/Flags/FlagsPack2/cr.png
.png
Release/Flags/FlagsPack2/cu.png
.png
Release/Flags/FlagsPack2/cv.png
.png
Release/Flags/FlagsPack2/cx.png
.png
Release/Flags/FlagsPack2/cy.png
.png
Release/Flags/FlagsPack2/cz.png
.png
Release/Flags/FlagsPack2/de.png
.png
Release/Flags/FlagsPack2/dj.png
.png
Release/Flags/FlagsPack2/dk.png
.png
Release/Flags/FlagsPack2/dm.png
.png
Release/Flags/FlagsPack2/do.png
.png
Release/Flags/FlagsPack2/dz.png
.png
Release/Flags/FlagsPack2/ea.png
.png
Release/Flags/FlagsPack2/ec.png
.png
Release/Flags/FlagsPack2/ee.png
.png
Release/Flags/FlagsPack2/eg.png
.png
Release/Flags/FlagsPack2/eh.png
.png
Release/Flags/FlagsPack2/er.png
.png
Release/Flags/FlagsPack2/es.png
.png
Release/Flags/FlagsPack2/et.png
.png
Release/Flags/FlagsPack2/fi.png
.png
Release/Flags/FlagsPack2/fj.png
.png
Release/Flags/FlagsPack2/fm.png
.png
Release/Flags/FlagsPack2/fo.png
.png
Release/Flags/FlagsPack2/fr.png
.png
Release/Flags/FlagsPack2/ga.png
.png
Release/Flags/FlagsPack2/gb-wls.png
.png
Release/Flags/FlagsPack2/gb.png
.png
Release/Flags/FlagsPack2/gd.png
.png
Release/Flags/FlagsPack2/ge-ab.png
.png
Release/Flags/FlagsPack2/ge.png
.png
Release/Flags/FlagsPack2/gg.png
.png
Release/Flags/FlagsPack2/gh.png
.png
Release/Flags/FlagsPack2/gi.png
.png
Release/Flags/FlagsPack2/gl.png
.png
Release/Flags/FlagsPack2/gm.png
.png
Release/Flags/FlagsPack2/gn.png
.png
Release/Flags/FlagsPack2/gq.png
.png
Release/Flags/FlagsPack2/gr.png
.png
Release/Flags/FlagsPack2/gt.png
.png
Release/Flags/FlagsPack2/gu.png
.png
Release/Flags/FlagsPack2/gw.png
.png
Release/Flags/FlagsPack2/hk.png
.png
Release/Flags/FlagsPack2/hn.png
.png
Release/Flags/FlagsPack2/hr.png
.png
Release/Flags/FlagsPack2/ht.png
.png
Release/Flags/FlagsPack2/hu.png
.png
Release/Flags/FlagsPack2/ic.png
.png
Release/Flags/FlagsPack2/id.png
.png
Release/Flags/FlagsPack2/ie.png
.png
Release/Flags/FlagsPack2/il.png
.png
Release/Flags/FlagsPack2/im.png
.png
Release/Flags/FlagsPack2/in.png
.png
Release/Flags/FlagsPack2/iq.png
.png
Release/Flags/FlagsPack2/ir.png
.png
Release/Flags/FlagsPack2/is.png
.png
Release/Flags/FlagsPack2/it.png
.png
Release/Flags/FlagsPack2/je.png
.png
Release/Flags/FlagsPack2/jm.png
.png
Release/Flags/FlagsPack2/jo.png
.png
Release/Flags/FlagsPack2/jp.png
.png
Release/Flags/FlagsPack2/ke.png
.png
Release/Flags/FlagsPack2/kg.png
.png
Release/Flags/FlagsPack2/kh.png
.png
Release/Flags/FlagsPack2/ki.png
.png
Release/Flags/FlagsPack2/km.png
.png
Release/Flags/FlagsPack2/kn.png
.png
Release/Flags/FlagsPack2/kp.png
.png
Release/Flags/FlagsPack2/kr.png
.png
Release/Flags/FlagsPack2/kw.png
.png
Release/Flags/FlagsPack2/ky.png
.png
Release/Flags/FlagsPack2/kz.png
.png
Release/Flags/FlagsPack2/lb.png
.png
Release/Flags/FlagsPack2/lc.png
.png
Release/Flags/FlagsPack2/li.png
.png
Release/Flags/FlagsPack2/lk.png
.png
Release/Flags/FlagsPack2/lr.png
.png
Release/Flags/FlagsPack2/ls.png
.png
Release/Flags/FlagsPack2/lt.png
.png
Release/Flags/FlagsPack2/lu.png
.png
Release/Flags/FlagsPack2/lv.png
.png
Release/Flags/FlagsPack2/ly.png
.png
Release/Flags/FlagsPack2/ma.png
.png
Release/Flags/FlagsPack2/mc.png
.png
Release/Flags/FlagsPack2/md.png
.png
Release/Flags/FlagsPack2/me.png
.png
Release/Flags/FlagsPack2/mf.png
.png
Release/Flags/FlagsPack2/mg.png
.png
Release/Flags/FlagsPack2/mh.png
.png
Release/Flags/FlagsPack2/mk.png
.png
Release/Flags/FlagsPack2/ml.png
.png
Release/Flags/FlagsPack2/mm.png
.png
Release/Flags/FlagsPack2/mn.png
.png
Release/Flags/FlagsPack2/mo.png
.png
Release/Flags/FlagsPack2/mp.png
.png
Release/Flags/FlagsPack2/mq.png
.png
Release/Flags/FlagsPack2/mr.png
.png
Release/Flags/FlagsPack2/ms.png
.png
Release/Flags/FlagsPack2/mt.png
.png
Release/Flags/FlagsPack2/mu.png
.png
Release/Flags/FlagsPack2/mv.png
.png
Release/Flags/FlagsPack2/mw.png
.png
Release/Flags/FlagsPack2/mx.png
.png
Release/Flags/FlagsPack2/my.png
.png
Release/Flags/FlagsPack2/mz.png
.png
Release/Flags/FlagsPack2/na.png
.png
Release/Flags/FlagsPack2/ne.png
.png
Release/Flags/FlagsPack2/nf.png
.png
Release/Flags/FlagsPack2/ng.png
.png
Release/Flags/FlagsPack2/ni.png
.png
Release/Flags/FlagsPack2/nl.png
.png
Release/Flags/FlagsPack2/no.png
.png
Release/Flags/FlagsPack2/np.png
.png
Release/Flags/FlagsPack2/nr.png
.png
Release/Flags/FlagsPack2/nu.png
.png
Release/Flags/FlagsPack2/nz.png
.png
Release/Flags/FlagsPack2/om.png
.png
Release/Flags/FlagsPack2/pa.png
.png
Release/Flags/FlagsPack2/pe.png
.png
Release/Flags/FlagsPack2/pf.png
.png
Release/Flags/FlagsPack2/pg.png
.png
Release/Flags/FlagsPack2/ph.png
.png
Release/Flags/FlagsPack2/pk.png
.png
Release/Flags/FlagsPack2/pl.png
.png
Release/Flags/FlagsPack2/pn.png
.png
Release/Flags/FlagsPack2/pr.png
.png
Release/Flags/FlagsPack2/ps.png
.png
Release/Flags/FlagsPack2/pt.png
.png
Release/Flags/FlagsPack2/pw.png
.png
Release/Flags/FlagsPack2/py.png
.png
Release/Flags/FlagsPack2/ro.png
.png
Release/Flags/FlagsPack2/rs.png
.png
Release/Flags/FlagsPack2/ru.png
.png
Release/Flags/FlagsPack2/rw.png
.png
Release/Flags/FlagsPack2/sa.png
.png
Release/Flags/FlagsPack2/sb.png
.png
Release/Flags/FlagsPack2/sd.png
.png
Release/Flags/FlagsPack2/se.png
.png
Release/Flags/FlagsPack2/sg.png
.png
Release/Flags/FlagsPack2/si.png
.png
Release/Flags/FlagsPack2/sk.png
.png
Release/Flags/FlagsPack2/sl.png
.png
Release/Flags/FlagsPack2/sm.png
.png
Release/Flags/FlagsPack2/sn.png
.png
Release/Flags/FlagsPack2/so.png
.png
Release/Flags/FlagsPack2/sr.png
.png
Release/Flags/FlagsPack2/ss.png
.png
Release/Flags/FlagsPack2/st.png
.png
Release/Flags/FlagsPack2/sv.png
.png
Release/Flags/FlagsPack2/sy.png
.png
Release/Flags/FlagsPack2/sz.png
.png
Release/Flags/FlagsPack2/tc.png
.png
Release/Flags/FlagsPack2/td.png
.png
Release/Flags/FlagsPack2/tg.png
.png
Release/Flags/FlagsPack2/th.png
.png
Release/Flags/FlagsPack2/tj.png
.png
Release/Flags/FlagsPack2/tk.png
.png
Release/Flags/FlagsPack2/tl.png
.png
Release/Flags/FlagsPack2/tm.png
.png
Release/Flags/FlagsPack2/tn.png
.png
Release/Flags/FlagsPack2/to.png
.png
Release/Flags/FlagsPack2/tr.png
.png
Release/Flags/FlagsPack2/tt.png
.png
Release/Flags/FlagsPack2/tv (2).png
.png
Release/Flags/FlagsPack2/tv.png
.png
Release/Flags/FlagsPack2/tw.png
.png
Release/Flags/FlagsPack2/tz.png
.png
Release/Flags/FlagsPack2/ua.png
.png
Release/Flags/FlagsPack2/ug.png
.png
Release/Flags/FlagsPack2/uy.png
.png
Release/Flags/FlagsPack2/uz.png
.png
Release/Flags/FlagsPack2/va.png
.png
Release/Flags/FlagsPack2/vc.png
.png
Release/Flags/FlagsPack2/ve.png
.png
Release/Flags/FlagsPack2/vi.png
.png
Release/Flags/FlagsPack2/vn.png
.png
Release/Flags/FlagsPack2/vu.png
.png
Release/Flags/FlagsPack2/ws.png
.png
Release/Flags/FlagsPack2/xk.png
.png
Release/Flags/FlagsPack2/ye.png
.png
Release/Flags/FlagsPack2/za.png
.png
Release/Flags/FlagsPack2/zm.png
.png
Release/Flags/FlagsPack2/zw.png
.png
Release/Flags/FlagsPack3/014-wales.png
.png
Release/Flags/FlagsPack3/019-ceuta.png
.png
Release/Flags/FlagsPack3/031-corsica.png
.png
Release/Flags/FlagsPack3/048-abkhazia.png
.png
Release/Flags/FlagsPack3/054-canary-islands.png
.png
Release/Flags/FlagsPack3/055-scotland.png
.png
Release/Flags/FlagsPack3/061-saba-island.png
.png
Release/Flags/FlagsPack3/072-bonaire.png
.png
Release/Flags/FlagsPack3/082-united-nations.png
.png
Release/Flags/FlagsPack3/093-basque-country.png
.png
Release/Flags/FlagsPack3/101-northern-cyprus.png
.png
Release/Flags/FlagsPack3/102-balearic-islands.png
.png
Release/Flags/FlagsPack3/112-laos.png
.png
Release/Flags/FlagsPack3/116-curacao.png
.png
Release/Flags/FlagsPack3/123-british-columbia.png
.png
Release/Flags/FlagsPack3/129-ossetia.png
.png
Release/Flags/FlagsPack3/130-sicily.png
.png
Release/Flags/FlagsPack3/142-tibet.png
.png
Release/Flags/FlagsPack3/148-madeira.png
.png
Release/Flags/FlagsPack3/161-ivory-coast.png
.png
Release/Flags/FlagsPack3/171-galapagos-islands.png
.png
Release/Flags/FlagsPack3/175-rapa-nui.png
.png
Release/Flags/FlagsPack3/197-melilla.png
.png
Release/Flags/FlagsPack3/215-falkland-islands.png
.png
Release/Flags/FlagsPack3/216-england.png
.png
Release/Flags/FlagsPack3/233-transnistria.png
.png
Release/Flags/FlagsPack3/234-australia.png
.png
Release/Flags/FlagsPack3/240-azores-islands.png
.png
Release/Flags/FlagsPack3/247-somaliland.png
.png
Release/Flags/FlagsPack3/250-sint-eustatius.png
.png
Release/Flags/FlagsPack3/253-seychelles.png
.png
Release/Flags/FlagsPack3/254-nato.png
.png
Release/Flags/FlagsPack3/255-brazil.png
.png
Release/Flags/FlagsPack3/257-sardinia.png
.png
Release/Flags/FlagsPack3/259-european-union.png
.png
Release/Flags/FlagsPack3/262-hawaii.png
.png
Release/Flags/FlagsPack3/ad.png
.png
Release/Flags/FlagsPack3/ae.png
.png
Release/Flags/FlagsPack3/af.png
.png
Release/Flags/FlagsPack3/ag.png
.png
Release/Flags/FlagsPack3/ai.png
.png
Release/Flags/FlagsPack3/al.png
.png
Release/Flags/FlagsPack3/am.png
.png
Release/Flags/FlagsPack3/ao.png
.png
Release/Flags/FlagsPack3/ar.png
.png
Release/Flags/FlagsPack3/as.png
.png
Release/Flags/FlagsPack3/at.png
.png
Release/Flags/FlagsPack3/aw.png
.png
Release/Flags/FlagsPack3/ax.png
.png
Release/Flags/FlagsPack3/az.png
.png
Release/Flags/FlagsPack3/ba.png
.png
Release/Flags/FlagsPack3/bb.png
.png
Release/Flags/FlagsPack3/bd.png
.png
Release/Flags/FlagsPack3/be.png
.png
Release/Flags/FlagsPack3/bf.png
.png
Release/Flags/FlagsPack3/bg.png
.png
Release/Flags/FlagsPack3/bh.png
.png
Release/Flags/FlagsPack3/bi.png
.png
Release/Flags/FlagsPack3/bj.png
.png
Release/Flags/FlagsPack3/bl.png
.png
Release/Flags/FlagsPack3/bm.png
.png
Release/Flags/FlagsPack3/bn.png
.png
Release/Flags/FlagsPack3/bo.png
.png
Release/Flags/FlagsPack3/bs.png
.png
Release/Flags/FlagsPack3/bt.png
.png
Release/Flags/FlagsPack3/bw.png
.png
Release/Flags/FlagsPack3/by.png
.png
Release/Flags/FlagsPack3/bz.png
.png
Release/Flags/FlagsPack3/ca.png
.png
Release/Flags/FlagsPack3/cc.png
.png
Release/Flags/FlagsPack3/cd.png
.png
Release/Flags/FlagsPack3/cf.png
.png
Release/Flags/FlagsPack3/cg.png
.png
Release/Flags/FlagsPack3/ch.png
.png
Release/Flags/FlagsPack3/ck.png
.png
Release/Flags/FlagsPack3/cl.png
.png
Release/Flags/FlagsPack3/cm.png
.png
Release/Flags/FlagsPack3/cn.png
.png
Release/Flags/FlagsPack3/co.png
.png
Release/Flags/FlagsPack3/cr.png
.png
Release/Flags/FlagsPack3/cu.png
.png
Release/Flags/FlagsPack3/cv.png
.png
Release/Flags/FlagsPack3/cx.png
.png
Release/Flags/FlagsPack3/cy.png
.png
Release/Flags/FlagsPack3/cz.png
.png
Release/Flags/FlagsPack3/de.png
.png
Release/Flags/FlagsPack3/dj.png
.png
Release/Flags/FlagsPack3/dk.png
.png
Release/Flags/FlagsPack3/dm.png
.png
Release/Flags/FlagsPack3/do.png
.png
Release/Flags/FlagsPack3/dz.png
.png
Release/Flags/FlagsPack3/ec.png
.png
Release/Flags/FlagsPack3/ee.png
.png
Release/Flags/FlagsPack3/eg.png
.png
Release/Flags/FlagsPack3/eh.png
.png
Release/Flags/FlagsPack3/er.png
.png
Release/Flags/FlagsPack3/es.png
.png
Release/Flags/FlagsPack3/et.png
.png
Release/Flags/FlagsPack3/fi.png
.png
Release/Flags/FlagsPack3/fj.png
.png
Release/Flags/FlagsPack3/fm.png
.png
Release/Flags/FlagsPack3/fo.png
.png
Release/Flags/FlagsPack3/fr.png
.png
Release/Flags/FlagsPack3/ga.png
.png
Release/Flags/FlagsPack3/gb.png
.png
Release/Flags/FlagsPack3/gd.png
.png
Release/Flags/FlagsPack3/ge.png
.png
Release/Flags/FlagsPack3/gg.png
.png
Release/Flags/FlagsPack3/gh.png
.png
Release/Flags/FlagsPack3/gi.png
.png
Release/Flags/FlagsPack3/gl.png
.png
Release/Flags/FlagsPack3/gm.png
.png
Release/Flags/FlagsPack3/gn.png
.png
Release/Flags/FlagsPack3/gq.png
.png
Release/Flags/FlagsPack3/gr.png
.png
Release/Flags/FlagsPack3/gt.png
.png
Release/Flags/FlagsPack3/gu.png
.png
Release/Flags/FlagsPack3/gw.png
.png
Release/Flags/FlagsPack3/hk.png
.png
Release/Flags/FlagsPack3/hn.png
.png
Release/Flags/FlagsPack3/hr.png
.png
Release/Flags/FlagsPack3/ht.png
.png
Release/Flags/FlagsPack3/hu.png
.png
Release/Flags/FlagsPack3/id.png
.png
Release/Flags/FlagsPack3/ie.png
.png
Release/Flags/FlagsPack3/il.png
.png
Release/Flags/FlagsPack3/im.png
.png
Release/Flags/FlagsPack3/in.png
.png
Release/Flags/FlagsPack3/io.png
.png
Release/Flags/FlagsPack3/iq.png
.png
Release/Flags/FlagsPack3/ir.png
.png
Release/Flags/FlagsPack3/is.png
.png
Release/Flags/FlagsPack3/it.png
.png
Release/Flags/FlagsPack3/je.png
.png
Release/Flags/FlagsPack3/jm.png
.png
Release/Flags/FlagsPack3/jo.png
.png
Release/Flags/FlagsPack3/jp.png
.png
Release/Flags/FlagsPack3/ke.png
.png
Release/Flags/FlagsPack3/kg.png
.png
Release/Flags/FlagsPack3/kh.png
.png
Release/Flags/FlagsPack3/ki.png
.png
Release/Flags/FlagsPack3/km.png
.png
Release/Flags/FlagsPack3/kn.png
.png
Release/Flags/FlagsPack3/kp.png
.png
Release/Flags/FlagsPack3/kr.png
.png
Release/Flags/FlagsPack3/kw.png
.png
Release/Flags/FlagsPack3/ky.png
.png
Release/Flags/FlagsPack3/kz.png
.png
Release/Flags/FlagsPack3/lb.png
.png
Release/Flags/FlagsPack3/lc.png
.png
Release/Flags/FlagsPack3/li.png
.png
Release/Flags/FlagsPack3/lk.png
.png
Release/Flags/FlagsPack3/lr.png
.png
Release/Flags/FlagsPack3/ls.png
.png
Release/Flags/FlagsPack3/lt.png
.png
Release/Flags/FlagsPack3/lu.png
.png
Release/Flags/FlagsPack3/lv.png
.png
Release/Flags/FlagsPack3/ly.png
.png
Release/Flags/FlagsPack3/ma.png
.png
Release/Flags/FlagsPack3/mc.png
.png
Release/Flags/FlagsPack3/md.png
.png
Release/Flags/FlagsPack3/me.png
.png
Release/Flags/FlagsPack3/mf.png
.png
Release/Flags/FlagsPack3/mg.png
.png
Release/Flags/FlagsPack3/mh.png
.png
Release/Flags/FlagsPack3/mk.png
.png
Release/Flags/FlagsPack3/ml.png
.png
Release/Flags/FlagsPack3/mm.png
.png
Release/Flags/FlagsPack3/mn.png
.png
Release/Flags/FlagsPack3/mo.png
.png
Release/Flags/FlagsPack3/mp.png
.png
Release/Flags/FlagsPack3/mq.png
.png
Release/Flags/FlagsPack3/mr.png
.png
Release/Flags/FlagsPack3/ms.png
.png
Release/Flags/FlagsPack3/mt.png
.png
Release/Flags/FlagsPack3/mu.png
.png
Release/Flags/FlagsPack3/mv.png
.png
Release/Flags/FlagsPack3/mw.png
.png
Release/Flags/FlagsPack3/mx.png
.png
Release/Flags/FlagsPack3/my.png
.png
Release/Flags/FlagsPack3/mz.png
.png
Release/Flags/FlagsPack3/na.png
.png
Release/Flags/FlagsPack3/ne.png
.png
Release/Flags/FlagsPack3/nf.png
.png
Release/Flags/FlagsPack3/ng.png
.png
Release/Flags/FlagsPack3/ni.png
.png
Release/Flags/FlagsPack3/nl.png
.png
Release/Flags/FlagsPack3/no.png
.png
Release/Flags/FlagsPack3/np.png
.png
Release/Flags/FlagsPack3/nr.png
.png
Release/Flags/FlagsPack3/nu.png
.png
Release/Flags/FlagsPack3/nz.png
.png
Release/Flags/FlagsPack3/om.png
.png
Release/Flags/FlagsPack3/pa.png
.png
Release/Flags/FlagsPack3/pe.png
.png
Release/Flags/FlagsPack3/pf.png
.png
Release/Flags/FlagsPack3/pg.png
.png
Release/Flags/FlagsPack3/ph.png
.png
Release/Flags/FlagsPack3/pk.png
.png
Release/Flags/FlagsPack3/pl.png
.png
Release/Flags/FlagsPack3/pn.png
.png
Release/Flags/FlagsPack3/pr.png
.png
Release/Flags/FlagsPack3/ps.png
.png
Release/Flags/FlagsPack3/pt.png
.png
Release/Flags/FlagsPack3/pw.png
.png
Release/Flags/FlagsPack3/py.png
.png
Release/Flags/FlagsPack3/ro.png
.png
Release/Flags/FlagsPack3/rs.png
.png
Release/Flags/FlagsPack3/ru.png
.png
Release/Flags/FlagsPack3/rw.png
.png
Release/Flags/FlagsPack3/sa.png
.png
Release/Flags/FlagsPack3/sb.png
.png
Release/Flags/FlagsPack3/sd.png
.png
Release/Flags/FlagsPack3/se.png
.png
Release/Flags/FlagsPack3/sg.png
.png
Release/Flags/FlagsPack3/si.png
.png
Release/Flags/FlagsPack3/sk.png
.png
Release/Flags/FlagsPack3/sl.png
.png
Release/Flags/FlagsPack3/sm.png
.png
Release/Flags/FlagsPack3/sn.png
.png
Release/Flags/FlagsPack3/so.png
.png
Release/Flags/FlagsPack3/sr.png
.png
Release/Flags/FlagsPack3/ss.png
.png
Release/Flags/FlagsPack3/st.png
.png
Release/Flags/FlagsPack3/sv.png
.png
Release/Flags/FlagsPack3/sy.png
.png
Release/Flags/FlagsPack3/sz.png
.png
Release/Flags/FlagsPack3/tc.png
.png
Release/Flags/FlagsPack3/td.png
.png
Release/Flags/FlagsPack3/tg.png
.png
Release/Flags/FlagsPack3/th.png
.png
Release/Flags/FlagsPack3/tj.png
.png
Release/Flags/FlagsPack3/tk.png
.png
Release/Flags/FlagsPack3/tl.png
.png
Release/Flags/FlagsPack3/tm.png
.png
Release/Flags/FlagsPack3/tn.png
.png
Release/Flags/FlagsPack3/to.png
.png
Release/Flags/FlagsPack3/tr.png
.png
Release/Flags/FlagsPack3/tt.png
.png
Release/Flags/FlagsPack3/tv (2).png
.png
Release/Flags/FlagsPack3/tv.png
.png
Release/Flags/FlagsPack3/tw.png
.png
Release/Flags/FlagsPack3/tz.png
.png
Release/Flags/FlagsPack3/ua.png
.png
Release/Flags/FlagsPack3/ug.png
.png
Release/Flags/FlagsPack3/uy.png
.png
Release/Flags/FlagsPack3/uz.png
.png
Release/Flags/FlagsPack3/va.png
.png
Release/Flags/FlagsPack3/vc.png
.png
Release/Flags/FlagsPack3/ve.png
.png
Release/Flags/FlagsPack3/vg.png
.png
Release/Flags/FlagsPack3/vi.png
.png
Release/Flags/FlagsPack3/vn.png
.png
Release/Flags/FlagsPack3/vu.png
.png
Release/Flags/FlagsPack3/ws.png
.png
Release/Flags/FlagsPack3/xk.png
.png
Release/Flags/FlagsPack3/ye.png
.png
Release/Flags/FlagsPack3/za.png
.png
Release/Flags/FlagsPack3/zm.png
.png
Release/Flags/FlagsPack3/zw.png
.png
Release/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Leaf.xNet.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Microsoft.CSharp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:27:f8:da:df:a8:8b:f4:8a:59:00:00:00:00:01:27
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:39

Not After

04-12-2020 20:39

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:c6:f5:f8:53:89:26:21:67:19:6d:e1:3a:89:d3:92:63:d3:63:d3:46:ea:4b:88:42:f5:d6:22:22:24:80:b6
Signer

Actual PE Digest

cc:c6:f5:f8:53:89:26:21:67:19:6d:e1:3a:89:d3:92:63:d3:63:d3:46:ea:4b:88:42:f5:d6:22:22:24:80:b6

Digest Algorithm

sha256

PE Digest Matches

true

46:21:80:11:4d:40:9a:e9:65:94:b4:10:29:cf:f8:10:7c:b2:10:ad
Signer

Actual PE Digest

46:21:80:11:4d:40:9a:e9:65:94:b4:10:29:cf:f8:10:7c:b2:10:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:2c:aa:51:49:df:36:06:3b:6e:00:00:00:00:01:2c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:40

Not After

04-12-2020 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:eb:16:51:37:aa:6d:65:75:08:51:42:03:bf:90:d2:63:3f:50:a6:6f:70:e7:9f:4d:b5:8b:68:18:b7:8b:27
Signer

Actual PE Digest

78:eb:16:51:37:aa:6d:65:75:08:51:42:03:bf:90:d2:63:3f:50:a6:6f:70:e7:9f:4d:b5:8b:68:18:b7:8b:27

Digest Algorithm

sha256

PE Digest Matches

true

d5:a1:df:fd:fa:e0:28:8b:88:ec:52:6c:8b:1e:73:94:8e:9d:66:6d
Signer

Actual PE Digest

d5:a1:df:fd:fa:e0:28:8b:88:ec:52:6c:8b:1e:73:94:8e:9d:66:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/NAudio.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Code\github\NAudio\NAudio\obj\Release\net35\NAudio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27-04-2018 12:41

Not After

27-04-2028 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25-10-2018 00:00

Not After

29-10-2021 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Signer

Actual PE Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Notification/notification.wav
Release/PacketLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Admin.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/AudioRecording.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Chat.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/FileManager.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Hardware.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Information.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Keylogger.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/MemoryExecution.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Miscellaneous.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/PowerManager.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/ProcessManager.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Ransomware.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/RemoteCamera.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/RemoteDesktop.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/RemoteShell.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/ScreenLocker.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Plugins/Stealer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/SamplePayloads(x32)/PayloadCSharp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\Personal\Eagle Monitor\Execution Dlls and Exes Source\PayloadDllCSharp\obj\Release\PayloadCSharp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/SamplePayloads(x32)/PayloadCSharpShellCode.bin
Release/SamplePayloads(x32)/PayloadDllCpp.dll
.dll windows:6 windows x86 arch:x86

e2d25fa2919156439bbe4544058fbe88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\Personal\Eagle Monitor\Execution Dlls and Exes Source\Release\PayloadDllCpp.pdb

Imports

user32

MessageBoxA

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_cexit
_configure_narrow_argv
_execute_onexit_table

kernel32

GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/SamplePayloads(x32)/PayloadDllCppShellCode.bin
Release/SamplePayloads(x32)/PayloadExeCpp.exe
.exe windows:6 windows x86 arch:x86

2cd835961274a4150f560828df6cbe1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Personal\Eagle Monitor\Execution Dlls and Exes Source\Release\PayloadExeCpp.pdb

Imports

user32

MessageBoxA

vcruntime140

__current_exception
__current_exception_context
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
__p___argc
__p___argv
_controlfp_s
terminate
_exit
_initterm
exit
_register_thread_local_exe_atexit_callback
_c_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/SamplePayloads(x64)/PayloadCpp.dll
.dll windows:6 windows x64 arch:x64

e73e850d28a8b9137f599e9eeee15b8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\личный\программирование\C#\ShellCodeLoader\x64\Release\PayloadCpp.pdb

Imports

user32

MessageBoxA

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler
memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

kernel32

GetSystemTimeAsFileTime
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Stubs/Offline.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Stubs/PacketLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Stubs/client.cs
.ps1
Release/Stubs/client.xml
Release/System.Design.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:31:8d:e1:be:a7:9f:0a:35:e0:00:00:00:00:01:31
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:40

Not After

04-12-2020 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:54:be:f5:4b:48:80:81:07:d4:e1:32:ac:d7:bd:9d:75:1e:ea:db:da:92:37:64:51:de:c1:13:de:33:36:5b
Signer

Actual PE Digest

42:54:be:f5:4b:48:80:81:07:d4:e1:32:ac:d7:bd:9d:75:1e:ea:db:da:92:37:64:51:de:c1:13:de:33:36:5b

Digest Algorithm

sha256

PE Digest Matches

true

77:a8:df:49:2d:ec:c1:e1:f6:72:d6:35:8b:44:96:fc:58:5d:7f:f1
Signer

Actual PE Digest

77:a8:df:49:2d:ec:c1:e1:f6:72:d6:35:8b:44:96:fc:58:5d:7f:f1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/System.Drawing.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:40

Not After

04-12-2020 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:57:df:01:5e:3c:f8:5e:1c:ea:05:b9:50:8e:ed:3a:c6:3b:57:39:16:ea:5a:14:70:48:00:d2:d0:4d:2e:27
Signer

Actual PE Digest

89:57:df:01:5e:3c:f8:5e:1c:ea:05:b9:50:8e:ed:3a:c6:3b:57:39:16:ea:5a:14:70:48:00:d2:d0:4d:2e:27

Digest Algorithm

sha256

PE Digest Matches

true

3d:65:ce:ee:1c:9e:c7:44:b5:e1:ab:95:8c:ed:a2:a5:a7:18:78:aa
Signer

Actual PE Digest

3d:65:ce:ee:1c:9e:c7:44:b5:e1:ab:95:8c:ed:a2:a5:a7:18:78:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/System.Windows.Forms.dll
Release/System.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:2f:0d:ca:5a:e9:ea:70:8d:f5:00:00:00:00:01:2f
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:40

Not After

04-12-2020 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:12:99:17:99:e9:19:c5:28:c4:67:f6:7d:3f:40:f1:55:5a:13:05:36:be:e1:5b:07:9f:57:bc:5d:bb:08:86
Signer

Actual PE Digest

ff:12:99:17:99:e9:19:c5:28:c4:67:f6:7d:3f:40:f1:55:5a:13:05:36:be:e1:5b:07:9f:57:bc:5d:bb:08:86

Digest Algorithm

sha256

PE Digest Matches

false

4c:64:67:1d:a5:a9:42:52:be:5e:82:3c:af:d1:5b:c8:d8:65:2e:86
Signer

Actual PE Digest

4c:64:67:1d:a5:a9:42:52:be:5e:82:3c:af:d1:5b:c8:d8:65:2e:86

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/Vestris.ResourceLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\resourcelib\Source\ResourceLib\obj\Release\net45\Vestris.ResourceLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Release/config.json
Release/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\dnlib\dnlib\src\obj\Release\net45\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 119KB - Virtual size: 118KB

.reloc Size: 512B - Virtual size: 12B

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 119KB - Virtual size: 118KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 320KB - Virtual size: 320KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 127KB - Virtual size: 126KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:27:f8:da:df:a8:8b:f4:8a:59:00:00:00:00:01:27Certificate

Extended Key Usages

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51Certificate

Extended Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

cc:c6:f5:f8:53:89:26:21:67:19:6d:e1:3a:89:d3:92:63:d3:63:d3:46:ea:4b:88:42:f5:d6:22:22:24:80:b6Signer

46:21:80:11:4d:40:9a:e9:65:94:b4:10:29:cf:f8:10:7c:b2:10:adSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 28KB - Virtual size: 28KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 119KB - Virtual size: 118KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 119KB - Virtual size: 118KB

.text
Size: 320KB - Virtual size: 320KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 127KB - Virtual size: 126KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:27:f8:da:df:a8:8b:f4:8a:59:00:00:00:00:01:27
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

cc:c6:f5:f8:53:89:26:21:67:19:6d:e1:3a:89:d3:92:63:d3:63:d3:46:ea:4b:88:42:f5:d6:22:22:24:80:b6
Signer

46:21:80:11:4d:40:9a:e9:65:94:b4:10:29:cf:f8:10:7c:b2:10:ad
Signer

.text
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:2c:aa:51:49:df:36:06:3b:6e:00:00:00:00:01:2c
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

78:eb:16:51:37:aa:6d:65:75:08:51:42:03:bf:90:d2:63:3f:50:a6:6f:70:e7:9f:4d:b5:8b:68:18:b7:8b:27
Signer

d5:a1:df:fd:fa:e0:28:8b:88:ec:52:6c:8b:1e:73:94:8e:9d:66:6d
Signer

.text
Size: 109KB - Virtual size: 108KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 499KB - Virtual size: 499KB

.rsrc
Size: 1024B - Virtual size: 948B

.reloc
Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Signer

.text
Size: 675KB - Virtual size: 675KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B