sicario-app-win-x64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

sicario-app-win-x64.zip
Size

23.8MB
MD5

ee9910790df9fcfe696c75415601af4f
SHA1

fada08af89490b15e14751dd738913d50d2ef985
SHA256

db7d35ec9a76ecb86aa77abd38209749477ef58b58ceea68ebc3bf91cf8920b2
SHA512

7d1b892e1e1fd6f60fed2c75cd8a3a0f6487f13e446bfe24e633d9bd1c5934dc4ba300875becbb9b1f96bf907860437b8aa963e240e96214957c08d58955df7a
SSDEEP

393216:qmMc3snWKqZDMOQaLdsL+JN90ETapLxyxoOwP7qOpjV5rCf3FXPa3NxeyeiR:qmJsWK63Lds0L0plyxoOUV5q3FXyduG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SicarioPatch.App.exe

Files

sicario-app-win-x64.zip
.zip
SicarioPatch.App.Views.pdb
SicarioPatch.App.exe
.exe windows:6 windows x64 arch:x64

21c545b801a2a9bdada8a6dcb7cc0fc3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\workspace\_work\1\s\artifacts\obj\win-x64.Release\corehost\cli\apphost\static\Release\singlefilehost.pdb

Imports

kernel32

FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
MultiByteToWideChar
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
RemoveDirectoryW
Sleep
GetCurrentProcessId
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
SetEvent
GetFullPathNameW
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
EnterCriticalSection
FindFirstFileExW
GetFileSizeEx
CreateDirectoryW
GetModuleHandleW
OutputDebugStringW
ResetEvent
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetExitCodeThread
DecodePointer
LCMapStringEx

advapi32

RegCloseKey
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegOpenKeyExW

user32

MessageBoxW

shell32

ShellExecuteW

api-ms-win-crt-runtime-l1-1-0

_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_configure_wide_argv
_initterm_e
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
exit
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
_wcserror
_errno
__p___argc
_initialize_wide_environment
_exit
_beginthreadex
terminate

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fwrite
_set_fmode
fclose
fputc
fgetc
__stdio_common_vsprintf_s
fseek
_wfsopen
fgetpos
setvbuf
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
fflush
fputws
fputwc
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
__p__commode

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
malloc
free
calloc
_set_new_mode

api-ms-win-crt-string-l1-1-0

__strncnt
_wcsicmp
_wcsdup
_wcsnicmp
wcsncmp
strcspn
islower
towlower
strcpy_s
isupper
wcsnlen

api-ms-win-crt-convert-l1-1-0

wcstoul
_wtoi

api-ms-win-crt-locale-l1-1-0

localeconv
_lock_locales
_unlock_locales
setlocale
_configthreadlocale
__pctype_func
___mb_cur_max_func
___lc_locale_name_func
___lc_codepage_func

api-ms-win-crt-math-l1-1-0

__setusermatherr
ceilf
frexp

api-ms-win-crt-time-l1-1-0

_time64
wcsftime
_gmtime64

api-ms-win-crt-filesystem-l1-1-0

_wrename
_unlock_file
_lock_file
_wremove

Exports

Exports

corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
hostfxr_close
hostfxr_get_available_sdks
hostfxr_get_native_search_directories
hostfxr_get_runtime_delegate
hostfxr_get_runtime_properties
hostfxr_get_runtime_property_value
hostfxr_initialize_for_dotnet_command_line
hostfxr_initialize_for_runtime_config
hostfxr_main
hostfxr_main_bundle_startupinfo
hostfxr_main_startupinfo
hostfxr_resolve_sdk
hostfxr_resolve_sdk2
hostfxr_run_app
hostfxr_set_error_writer
hostfxr_set_runtime_property_value

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SicarioPatch.App.pdb
SicarioPatch.Components.pdb
appsettings.Development.json
appsettings.json
aspnetcorev2_inprocess.dll
.dll windows:6 windows x64 arch:x64

a6651c000e0a8d3f510eff29cdf34469

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:d6:fd:94:a6:8c:ab:04:24:25:34:d1:0c:9a:67:f2:02:ea:29:d2:74:16:cd:aa:32:19:63:63:05:0b:1f:04
Signer

Actual PE Digest

cb:d6:fd:94:a6:8c:ab:04:24:25:34:d1:0c:9a:67:f2:02:ea:29:d2:74:16:cd:aa:32:19:63:63:05:0b:1f:04

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\_work\1\s\artifacts\bin\InProcessRequestHandler\x64\Release\aspnetcorev2_inprocess.pdb

Imports

kernel32

GetModuleHandleExW
SetEvent
CreateEventW
WaitForMultipleObjects
SetDllDirectoryW
SetCurrentDirectoryW
WaitForSingleObject
GetLastError
SetEnvironmentVariableW
GetCurrentProcessId
GetConsoleWindow
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
GetModuleFileNameW
IsDebuggerPresent
FreeLibrary
CloseHandle
DisableThreadLibraryCalls
LoadLibraryExW
FreeLibraryAndExitThread
InitializeSRWLock
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
LCMapStringEx
EncodePointer
QueryPerformanceCounter
GetFileInformationByHandleEx
HeapCreate
HeapFree
SetLastError
HeapLock
HeapWalk
GetSystemInfo
HeapAlloc
HeapDestroy
GetCurrentProcessorNumber
GetProcessHeap
GetModuleHandleW
InterlockedPushEntrySList
HeapUnlock
InitializeSListHead
InterlockedPopEntrySList
QueryDepthSList
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetStdHandle
CreateFileW
FlushFileBuffers
SetFilePointer
WriteFile
OutputDebugStringW
DuplicateHandle
GetCurrentProcess
CompareStringOrdinal
WideCharToMultiByte
GetConsoleOutputCP
CreateDirectoryW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetNativeSystemInfo
IsWow64Process
GetDllDirectoryW
GetProcAddress
LoadLibraryW
ReadFile
CreatePipe
CancelSynchronousIo
CreateThread
TerminateThread
GetExitCodeThread
AllocConsole
GetProcessTimes
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
SetHandleInformation
GetExitCodeProcess
CreateProcessW
LocalFree
GetBinaryTypeW
SetStdHandle
GetFileAttributesW
HeapReAlloc
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
ExitThread
QueueUserWorkItem
ReadDirectoryChangesW
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
WaitForSingleObjectEx
GetCurrentThreadId
GetStringTypeW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI

user32

EnumWindows
PostMessageW
GetWindowThreadProcessId

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ReportEventW
RegGetValueW
RegisterEventSourceW

oleaut32

VariantChangeType
VariantClear
SysAllocString
VariantInit
SysFreeString

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_errno
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_seh_filter_dll
_invalid_parameter_noinfo
_initterm
abort
_initterm_e
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

_wcsnicmp
memset
wcsncmp
__strncnt
_stricmp
islower
_wcsdup
isupper
strcpy_s
strcspn
wcsnlen

api-ms-win-crt-stdio-l1-1-0

fwrite
setvbuf
fread
ungetc
freopen_s
fputc
fgetpos
fgetc
_wfsopen
_fseeki64
fflush
_fileno
_dup
_dup2
fclose
_get_stream_buffer_pointers
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsnprintf_s
fseek
__acrt_iob_func
__stdio_common_vsprintf_s
fsetpos
__stdio_common_vswprintf
_open_osfhandle
_get_osfhandle

api-ms-win-crt-heap-l1-1-0

malloc
_aligned_free
_aligned_malloc
_callnewh
calloc
free

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-math-l1-1-0

frexp
_fdopen

api-ms-win-crt-convert-l1-1-0

wcstoul

api-ms-win-crt-locale-l1-1-0

setlocale
___lc_codepage_func
_lock_locales
__pctype_func
___mb_cur_max_func
___lc_locale_name_func
_unlock_locales
localeconv

shell32

CommandLineToArgvW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CreateApplication
http_cancel_io
http_close_connection
http_disable_buffering
http_enable_websockets
http_flush_response_bytes
http_get_application_properties
http_get_authentication_information
http_get_completion_info
http_get_raw_request
http_get_raw_response
http_get_server_variable
http_has_response4
http_indicate_completion
http_post_completion
http_read_request_bytes
http_reset_stream
http_response_set_known_header
http_response_set_trailer
http_response_set_unknown_header
http_set_completion_status
http_set_managed_context
http_set_response_status_code
http_set_server_variable
http_set_startup_error_page_content
http_stop_calls_into_managed
http_stop_incoming_requests
http_websockets_flush_bytes
http_websockets_read_bytes
http_websockets_write_bytes
http_write_response_bytes
register_callbacks
set_main_handler

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
clrcompression.dll
.dll windows:6 windows x64 arch:x64

5c60dda7f0e42c4ab1a4510cd287d92f

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:da:89:af:7d:80:ac:01:54:96:0a:85:54:79:75:ab:a5:d1:5d:1f:bf:39:8e:79:4c:1a:6e:19:8a:e6:0d:71
Signer

Actual PE Digest

c7:da:89:af:7d:80:ac:01:54:96:0a:85:54:79:75:ab:a5:d1:5d:1f:bf:39:8e:79:4c:1a:6e:19:8a:e6:0d:71

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\_work\1\s\artifacts\obj\native\net5.0-Windows_NT-Release-x64\clrcompression\Release\clrcompression.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc

api-ms-win-crt-math-l1-1-0

log2

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_initterm_e
terminate
_configure_narrow_argv
abort
_initterm
exit
_execute_onexit_table
_cexit

api-ms-win-crt-string-l1-1-0

wcsncmp

Exports

Exports

BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetParameter
BrotliDecoderTakeOutput
BrotliDecoderVersion
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderHasMoreOutput
BrotliEncoderIsFinished
BrotliEncoderMaxCompressedSize
BrotliEncoderSetParameter
BrotliEncoderTakeOutput
BrotliEncoderVersion
BrotliGetDictionary
BrotliSetDictionaryData
CompressionNative_Crc32
CompressionNative_Deflate
CompressionNative_DeflateEnd
CompressionNative_DeflateInit2_
CompressionNative_Inflate
CompressionNative_InflateEnd
CompressionNative_InflateInit2_

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
clrjit.dll
.dll windows:6 windows x64 arch:x64

683f62770505579f5d043e11a2df1dd0

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:3d:e0:29:71:f2:07:14:d1:a8:d9:99:70:fd:4c:13:e1:72:4d:10:63:44:06:8a:24:7b:65:bc:d1:32:ca:a2
Signer

Actual PE Digest

6c:3d:e0:29:71:f2:07:14:d1:a8:d9:99:70:fd:4c:13:e1:72:4d:10:63:44:06:8a:24:7b:65:bc:d1:32:ca:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x64.Release\src\jit\standalone\Release\clrjit.pdb

Imports

kernel32

RaiseException
DebugBreak
OutputDebugStringA
WideCharToMultiByte
QueryPerformanceFrequency
QueryPerformanceCounter
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryThreadCycleTime
GetCurrentThread
HeapFree
GetLastError
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
SetLastError
LoadLibraryExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
RtlPcToFileHeader

api-ms-win-crt-math-l1-1-0

ceilf
ceil
sqrtf
_isnan
cos
_isnanf
_copysignf
_fdopen
_copysign
sqrt
sinf
_finite
sin
cosf
floor
fmod
floorf

api-ms-win-crt-stdio-l1-1-0

fclose
fseek
ftell
_fileno
__acrt_iob_func
_dup
_setmode
setvbuf
_wfopen
__stdio_common_vfprintf

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo
_cexit
_execute_onexit_table
_errno
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort

api-ms-win-crt-string-l1-1-0

strcpy_s
strcat_s
wcsncmp
strncmp
strcmp

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

Exports

Exports

getJit
jitStartup

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
coreclr.dll
.dll windows:6 windows x64 arch:x64

928b5195a4e2f71947928a5a7bb539c3

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:b2:a6:d8:82:dc:69:8e:f2:ee:1c:96:80:84:cc:db:c5:55:34:cc:7a:c3:d7:1f:6d:76:0e:b2:73:fa:5c:d8
Signer

Actual PE Digest

4b:b2:a6:d8:82:dc:69:8e:f2:ee:1c:96:80:84:cc:db:c5:55:34:cc:7a:c3:d7:1f:6d:76:0e:b2:73:fa:5c:d8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x64.Release\src\dlls\mscoree\coreclr\Release\coreclr.pdb

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
GetTickCount
CreateFileMappingW
RtlAddFunctionTable
RtlDeleteFunctionTable
GetFileSize
FlushInstructionCache
RtlLookupFunctionEntry
HeapFree
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount64
DuplicateHandle
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
GetThreadPriority
ResumeThread
GetCurrentThreadId
Sleep
TlsAlloc
GetCurrentThread
CreateThread
WaitForMultipleObjectsEx
SignalObjectAndWait
RtlCaptureContext
SetThreadStackGuarantee
VirtualQuery
GetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
MapViewOfFileEx
UnmapViewOfFile
GetStringTypeExW
SetEvent
GetCurrentProcessorNumber
GlobalMemoryStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
SleepEx
GetQueuedCompletionStatus
GetCurrentProcessorNumberEx
ExitProcess
GetActiveProcessorGroupCount
GetActiveProcessorCount
GetSystemTime
GetSystemTimeAsFileTime
CreateMemoryResourceNotification
GetProcessAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
GetLargePageMinimum
VirtualUnlock
GetLogicalProcessorInformation
SetThreadGroupAffinity
SetThreadAffinityMask
IsProcessInJob
QueryInformationJobObject
K32GetProcessMemoryInfo
VirtualAlloc
VirtualFree
VirtualProtect
SwitchToThread
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
ResetEvent
CreateSemaphoreExW
ReleaseSemaphore
CreateMutexW
RaiseFailFastException
GetThreadContext
SuspendThread
SetThreadContext
GetEnabledXStateFeatures
InitializeContext
SetXStateFeaturesMask
GetSystemDefaultLCID
GetUserDefaultLCID
RtlInstallFunctionTableCallback
RtlUnwind
HeapAlloc
GetProcessHeap
HeapCreate
HeapDestroy
FormatMessageW
GetACP
LCMapStringEx
IsDBCSLeadByte
LocalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleFileNameW
VirtualAllocExNuma
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
GetLogicalProcessorInformationEx
GetThreadGroupAffinity
GetSystemTimes
CreateProcessW
GetCPInfo
LoadLibraryExW
CreateFileW
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
OpenProcess
OpenEventW
ExitThread
HeapReAlloc
CreateNamedPipeA
WaitForMultipleObjects
DisconnectNamedPipe
CreateFileA
CancelIoEx
GetOverlappedResult
CreateEventA
ConnectNamedPipe
FlushFileBuffers
MapViewOfFile
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
SetConsoleCtrlHandler
GetLocaleInfoEx
GetUserDefaultLocaleName
InitializeCriticalSectionAndSpinCount
RtlVirtualUnwind
IsProcessorFeaturePresent
RtlUnwindEx
EncodePointer
TlsFree
RtlPcToFileHeader
GetCurrentProcessId
RaiseException
WaitForSingleObject
RtlRestoreContext
TlsSetValue
TlsGetValue
SetLastError
FreeLibrary
GetModuleHandleW
GetSystemInfo
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLastError
InitializeCriticalSection
InterlockedPopEntrySList
WriteFile
GetProcessTimes
GetCommandLineW
ReadFile
SetFilePointer
GetProcAddress
GetModuleHandleExW
SetErrorMode
CloseHandle
GetCurrentProcess
FlushProcessWriteBuffers
OutputDebugStringW
DebugBreak
LoadLibraryExA
MultiByteToWideChar
ReleaseMutex

advapi32

RegisterEventSourceW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
DeregisterEventSource
ReportEventW
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
SetThreadToken
RevertToSelf
OpenThreadToken
EventWriteTransfer
EventWrite
SetKernelObjectSecurity

ole32

CoCreateFreeThreadedMarshaler
StringFromGUID2
CoGetContextToken
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetClassObject
CreateStreamOnHGlobal
IIDFromString
CoReleaseMarshalData
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoRevokeInitializeSpy
CoGetMarshalSizeMax

oleaut32

CreateErrorInfo
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetRecordInfo
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
GetRecordInfoFromTypeInfo
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
VariantChangeTypeEx
VariantChangeType
SafeArrayGetVartype
LoadTypeLibEx
QueryPathOfRegTypeLi
SetErrorInfo
SysFreeString
GetErrorInfo
SysAllocString
SysStringLen
SysAllocStringLen
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayDestroy

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

strncmp
strncat_s
wcsncat_s
strcpy_s
wcscpy_s
wcsncpy
wcsncpy_s
strtok_s
iswascii
wcscmp
wcscat_s
towupper
strlen
strncpy_s
towlower
iswspace
strcmp
strnlen
strcat_s
wcsncmp
_wcsicmp
iswupper
_wcsnicmp
_strnicmp
_stricmp
isalpha
wcsnlen
isdigit

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstoul
strtoul
_ltow_s
_wcstoui64
_atoi64
atol
_itow_s

api-ms-win-crt-stdio-l1-1-0

_wfopen_s
__stdio_common_vfprintf
fflush
fopen
__stdio_common_vsprintf_s
_flushall
__stdio_common_vsnprintf_s
__stdio_common_vfwprintf
fputs
__stdio_common_vsnwprintf_s
fwrite
_putws
__stdio_common_vswprintf_s
_wfopen
__stdio_common_vsscanf
fgets
fclose
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_errno
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
abort
_invalid_parameter_noinfo
_controlfp_s

api-ms-win-crt-utility-l1-1-0

qsort
bsearch

api-ms-win-crt-math-l1-1-0

tanf
tanh
sinhf
sinh
sinf
cosh
cosf
sin
cos
ceilf
ceil
atanf
atan2f
atan2
powf
asinf
asin
acosf
acos
pow
logf
tan
log10f
log10
log
fmodf
fmod
log2f
scalbnf
acoshf
cbrtf
atanhf
fmaf
ilogbf
asinhf
asinh
cbrt
ilogb
fma
acosh
scalbn
floor
atanh
expf
log2
exp
atan
modff
modf
_finite
_isnan
_copysign
coshf
tanhf

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

_wmakepath_s
_wsplitpath_s

Exports

Exports

CLRJitAttachState
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CLR_UEF
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 815KB - Virtual size: 814KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mscordaccore.dll
.dll windows:6 windows x64 arch:x64

89d95008a9b2af1f7f34931c92913790

Code Sign

33:00:00:03:de:8d:56:82:5a:f1:a4:a9:67:00:00:00:00:03:de
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:24

Not After

02/12/2021, 21:24

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:29:1a:ce:49:5b:75:5e:68:01:45:e2:02:26:8f:7a:ce:08:5b:3b:d0:85:e4:ca:c6:36:e6:5f:28:99:8f:01
Signer

Actual PE Digest

ca:29:1a:ce:49:5b:75:5e:68:01:45:e2:02:26:8f:7a:ce:08:5b:3b:d0:85:e4:ca:c6:36:e6:5f:28:99:8f:01

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x64.Release\src\dlls\mscordac\Release\mscordaccore.pdb

Imports

kernel32

FreeLibrary
CloseHandle
GetCurrentProcess
FlushInstructionCache
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
HeapFree
HeapDestroy
GetACP
LCMapStringEx
IsDBCSLeadByte
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
ReadProcessMemory
GetProcessAffinityMask
SwitchToThread
SetLastError
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
LoadLibraryExW
CreateFileW
GetEnvironmentVariableW
GetFullPathNameW
IsDebuggerPresent
GetProcessHeap
HeapAlloc
GetSystemInfo
GetProcAddress
GetModuleHandleW
InitializeCriticalSection
DebugBreak
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
MultiByteToWideChar
DeleteCriticalSection
RtlPcToFileHeader
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
InitializeCriticalSectionAndSpinCount

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoTaskMemFree
CoCreateGuid
IIDFromString

oleaut32

CreateErrorInfo
SetErrorInfo

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

_wcslwr_s
wcscpy_s
wcsncpy_s
strnlen
strncmp
strcmp
strcpy_s
strlen
strncat_s
wcsncat_s
wcsncmp
strncpy_s
wcscat_s
wcscmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
_seh_filter_dll
_initterm
_errno
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_configure_narrow_argv
abort
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free

api-ms-win-crt-convert-l1-1-0

wcstoul

Exports

Exports

CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx

Sections

.text
Size: 815KB - Virtual size: 815KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
web.config
wwwroot/.gitignore
wwwroot/SicarioPatch.App.styles.css
wwwroot/_content/BlazorMonaco/jsInterop.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/base/worker/workerMain.js.map
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.js.map
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.de.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.es.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.fr.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.it.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.ja.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.ko.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.ru.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.zh-cn.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/editor/editor.main.nls.zh-tw.js.map
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min-maps/vs/loader.js.map
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/base/browser/ui/codicons/codicon/codicon.ttf
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/base/worker/workerMain.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/base/worker/workerMain.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/abap/abap.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/abap/abap.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/apex/apex.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/apex/apex.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/azcli/azcli.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/azcli/azcli.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/bat/bat.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/bat/bat.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/cameligo/cameligo.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/cameligo/cameligo.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/clojure/clojure.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/clojure/clojure.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/coffee/coffee.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/coffee/coffee.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/cpp/cpp.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/cpp/cpp.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/csharp/csharp.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/csharp/csharp.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/csp/csp.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/csp/csp.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/css/css.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/css/css.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/dart/dart.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/dart/dart.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/dockerfile/dockerfile.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/dockerfile/dockerfile.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/ecl/ecl.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/ecl/ecl.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/fsharp/fsharp.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/fsharp/fsharp.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/go/go.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/go/go.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/graphql/graphql.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/graphql/graphql.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/handlebars/handlebars.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/handlebars/handlebars.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/hcl/hcl.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/hcl/hcl.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/html/html.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/html/html.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/ini/ini.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/ini/ini.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/java/java.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/java/java.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/javascript/javascript.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/javascript/javascript.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/julia/julia.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/julia/julia.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/kotlin/kotlin.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/kotlin/kotlin.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/less/less.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/less/less.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/lexon/lexon.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/lexon/lexon.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/lua/lua.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/lua/lua.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/m3/m3.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/m3/m3.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/markdown/markdown.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/markdown/markdown.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/mips/mips.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/mips/mips.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/msdax/msdax.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/msdax/msdax.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/mysql/mysql.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/mysql/mysql.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/objective-c/objective-c.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/objective-c/objective-c.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pascal/pascal.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pascal/pascal.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pascaligo/pascaligo.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pascaligo/pascaligo.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/perl/perl.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/perl/perl.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pgsql/pgsql.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pgsql/pgsql.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/php/php.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/php/php.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/postiats/postiats.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/postiats/postiats.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/powerquery/powerquery.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/powerquery/powerquery.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/powershell/powershell.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/powershell/powershell.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pug/pug.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/pug/pug.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/python/python.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/python/python.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/r/r.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/r/r.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/razor/razor.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/razor/razor.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/redis/redis.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/redis/redis.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/redshift/redshift.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/redshift/redshift.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/restructuredtext/restructuredtext.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/restructuredtext/restructuredtext.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/ruby/ruby.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/ruby/ruby.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/rust/rust.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/rust/rust.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/sb/sb.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/sb/sb.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/scala/scala.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/scala/scala.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/scheme/scheme.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/scheme/scheme.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/scss/scss.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/scss/scss.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/shell/shell.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/shell/shell.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/solidity/solidity.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/solidity/solidity.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/sophia/sophia.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/sophia/sophia.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/sql/sql.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/sql/sql.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/st/st.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/st/st.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/swift/swift.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/swift/swift.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/systemverilog/systemverilog.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/systemverilog/systemverilog.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/tcl/tcl.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/tcl/tcl.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/twig/twig.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/twig/twig.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/typescript/typescript.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/typescript/typescript.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/vb/vb.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/vb/vb.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/xml/xml.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/xml/xml.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/yaml/yaml.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/basic-languages/yaml/yaml.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.css
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.min.css
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.de.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.de.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.es.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.es.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.fr.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.fr.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.it.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.it.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.ja.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.ja.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.ko.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.ko.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.ru.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.ru.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.zh-cn.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.zh-cn.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.zh-tw.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/editor/editor.main.nls.zh-tw.min.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/css/cssMode.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/css/cssMode.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/css/cssWorker.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/css/cssWorker.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/html/htmlMode.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/html/htmlMode.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/html/htmlWorker.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/html/htmlWorker.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/json/jsonMode.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/json/jsonMode.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/json/jsonWorker.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/json/jsonWorker.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/typescript/tsMode.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/typescript/tsMode.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/typescript/tsWorker.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/language/typescript/tsWorker.min.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/loader.js
.js
wwwroot/_content/BlazorMonaco/lib/monaco-editor/min/vs/loader.min.js
.js
wwwroot/_content/Blazorise.Bootstrap/blazorise.bootstrap.css
wwwroot/_content/Blazorise.Bootstrap/blazorise.bootstrap.js
.js
wwwroot/_content/Blazorise.Material/blazorise.material.css
wwwroot/_content/Blazorise.Material/blazorise.material.js
wwwroot/_content/Blazorise.Snackbar/blazorise.snackbar.css
wwwroot/_content/Blazorise/blazorise.css
wwwroot/_content/Blazorise/blazorise.js
.js
wwwroot/_content/SicarioPatch.Components/SicarioPatch.Components.bundle.scp.css
wwwroot/_content/SicarioPatch.Components/components.css
wwwroot/_content/SicarioPatch.Components/download.js
.js
wwwroot/css/bootstrap/bootstrap.min.css
wwwroot/css/bootstrap/bootstrap.min.css.map
wwwroot/css/material-plugins.css
wwwroot/css/material-plugins.css.map
wwwroot/css/material-plugins.min.css
wwwroot/css/material-plugins.min.css.map
wwwroot/css/material.css
wwwroot/css/material.css.map
wwwroot/css/material.min.css
wwwroot/css/material.min.css.map
wwwroot/css/open-iconic/FONT-LICENSE
wwwroot/css/open-iconic/ICON-LICENSE
wwwroot/css/open-iconic/README.md
wwwroot/css/open-iconic/font/css/open-iconic-bootstrap.min.css
wwwroot/css/open-iconic/font/fonts/open-iconic.eot
wwwroot/css/open-iconic/font/fonts/open-iconic.otf
wwwroot/css/open-iconic/font/fonts/open-iconic.svg
.xml
wwwroot/css/open-iconic/font/fonts/open-iconic.ttf
wwwroot/css/open-iconic/font/fonts/open-iconic.woff
wwwroot/css/site.css
wwwroot/favicon.ico
wwwroot/favicon.png
.png
wwwroot/js/material.js
.js
wwwroot/js/material.js.map
.js
wwwroot/js/material.min.js
.js
wwwroot/js/material.min.js.map
.js

Sharing

General

Malware Config

Signatures

Files

21c545b801a2a9bdada8a6dcb7cc0fc3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

shell32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

Exports

Exports

Sections

.text Size: 294KB - Virtual size: 294KB

.rdata Size: 106KB - Virtual size: 106KB

.data Size: 5KB - Virtual size: 9KB

.pdata Size: 12KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 252B

.reloc Size: 1KB - Virtual size: 1KB

a6651c000e0a8d3f510eff29cdf34469

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

cb:d6:fd:94:a6:8c:ab:04:24:25:34:d1:0c:9a:67:f2:02:ea:29:d2:74:16:cd:aa:32:19:63:63:05:0b:1f:04Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

oleaut32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

shell32

version

Exports

Exports

Sections

.text Size: 209KB - Virtual size: 208KB

.rdata Size: 78KB - Virtual size: 78KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 11KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 172B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

5c60dda7f0e42c4ab1a4510cd287d92f

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

c7:da:89:af:7d:80:ac:01:54:96:0a:85:54:79:75:ab:a5:d1:5d:1f:bf:39:8e:79:4c:1a:6e:19:8a:e6:0d:71Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

.text
Size: 294KB - Virtual size: 294KB

.rdata
Size: 106KB - Virtual size: 106KB

.data
Size: 5KB - Virtual size: 9KB

.pdata
Size: 12KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 252B

.reloc
Size: 1KB - Virtual size: 1KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

cb:d6:fd:94:a6:8c:ab:04:24:25:34:d1:0c:9a:67:f2:02:ea:29:d2:74:16:cd:aa:32:19:63:63:05:0b:1f:04
Signer

.text
Size: 209KB - Virtual size: 208KB

.rdata
Size: 78KB - Virtual size: 78KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 11KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 172B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

c7:da:89:af:7d:80:ac:01:54:96:0a:85:54:79:75:ab:a5:d1:5d:1f:bf:39:8e:79:4c:1a:6e:19:8a:e6:0d:71
Signer

.text
Size: 268KB - Virtual size: 267KB

.rdata
Size: 446KB - Virtual size: 445KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 4KB - Virtual size: 3KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 376B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

6c:3d:e0:29:71:f2:07:14:d1:a8:d9:99:70:fd:4c:13:e1:72:4d:10:63:44:06:8a:24:7b:65:bc:d1:32:ca:a2
Signer

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 154KB - Virtual size: 154KB

.data
Size: 512B - Virtual size: 9KB

.pdata
Size: 40KB - Virtual size: 39KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

4b:b2:a6:d8:82:dc:69:8e:f2:ee:1c:96:80:84:cc:db:c5:55:34:cc:7a:c3:d7:1f:6d:76:0e:b2:73:fa:5c:d8
Signer