FiddlerSetup[.]5[.]0[.]20243[.]10853-latest[.]exe

resource
unpack002/$PLUGINSDIR/System.dll
unpack002/DotNetZip.dll
unpack002/FSE2.exe
unpack002/Inspectors/QWhale.Common.dll
unpack002/Inspectors/QWhale.Editor.dll
unpack002/Inspectors/QWhale.Syntax.Schemes.dll
unpack002/Inspectors/QWhale.Syntax.dll
unpack002/ScriptEditor/QWhale.Common.dll
unpack002/ScriptEditor/QWhale.Editor.dll
unpack002/ScriptEditor/QWhale.Syntax.Parsers.dll
unpack002/ScriptEditor/QWhale.Syntax.dll
unpack002/Scripts/QWhale.Common.dll
unpack002/Scripts/QWhale.Editor.dll
unpack002/Scripts/QWhale.Syntax.Parsers.dll
unpack002/Scripts/QWhale.Syntax.dll
unpack002/Tools/Brotli.exe
unpack002/Tools/dwebp.exe
unpack003/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/System.dll

FiddlerSetup.5.0.20243.10853-latest.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 174c811a5c0da930f53f29d68fcce985e88994e4bef869a04b57f399bef25bbc
MD5 68c831dc8ee4a88592e26cb79a08d410
SHA1 67ffba83eac8f1b7414d7048d681240ddc747c63
SHA512 af3de69884cdc9b361a8a8764ddfa2cc2c67ad7e5319f1dceb7496d8f8639a85b042bffddf9516d796f7b21ee453d66dc80b139bcc7213de43b41f92d8acf2d7
SSDEEP 98304:Q3T82KbCk8NKNgKl3xpQ3Ll02nSadHnV8t7PrMT:Q3TLkCEpwx02nVdHoDrY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3e:76:3f:a8:8a:0b:4f:64:20:d0:0d:14:ca:00:a1:b5:9a:e5:fb:17:55:33:57:9a:43:3c:4c:55:e4:08:9c:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

13596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/FiddlerSetup.exe

IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
SHA256 229085282b304f9e76d1282419255201941948a7961472e00f28f09dd0a20ca2
MD5 9cfc955fb5d23835a83883134aca8db9
SHA1 3aaf8cec695c3d4457e4cec2f573c42c1bb597b1
SHA512 f57591cbb90338fa374c80967992498c33f32efac441469f79627f12b01c2d28da690da8e73fa9c2f602c054fae60ac92e1bdf0860540b6f36eda752129dd56d
SSDEEP 98304:vT82KbCk8NKNgKl3xpQ3Ll02nSadHnV8t7PrMB:vTLkCEpwx02nVdHoDrE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4c:42:b6:94:8e:f8:d4:b3:59:d7:4f:c3:96:a4:8c:ef:3a:79:3d:17:1d:0b:61:6d:75:e9:06:93:64:84:d1:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

13925

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Analytics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 166e1a6cf86b254525a03d1510fe76da574f977c012064df39dd6f4af72a4b29
MD5 1c2bd080b0e972a3ee1579895ea17b42
SHA1 a09454bc976b4af549a6347618f846d4c93b769b
SHA512 946e56d543a6d00674d8fa17ecd9589cba3211cfa52c978e0c9dab0fa45cdfc7787245d14308f5692bd99d621c0caca3c546259fcfa725fff9171b144514b6e0
SSDEEP 384:gpeCB0nVQ/EMq7+Zi9nQwnHgfLtVUEoBXejF6XFlnwnYPLYyTcGq1y2h33XcQ7:/U0VQMMrZi9QiHWtVxOFxwxGqXR7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

88:d6:f9:6c:b4:16:7f:04:df:a6:ff:4f:30:a7:e0:aa:cc:fe:71:43:5f:1f:09:78:41:15:be:a5:6f:eb:53:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

ad:32:b3:e4:b2:e0:3c:86:0d:e2:73:2c:d5:49:be:a5:28:e2:17:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 29, 2018 - Aug 29, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Minor OS version

0

Major OS version

4

Entry point

25878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\JFAnalytics\obj\Release\Analytics.pdb

Analytics.pdb

SHA256 03ca5a20d36bbc0aea28aa3184d65b322cecc3080d55a975cdf0f5d31199829d
MD5 f84fb6cd84b5d07e3de4d78d38f388ff
SHA1 0b31f09eeb1af0681614c2f9f90d98b541df580f
SHA512 03fa13b39d4fae8bc83b4f37cf24aafc8c4a12a5db0462968ae6a0c96232d727df9264d190ff641115921e350a1981ad518a4740c20e54c433b2f2065522ad52
SSDEEP 384:IzCZdxQVINRdRoNFAYAz3GclBLEKiuNCFJkOLxYbs63N:fxz3oNqbTLUnjpLxY
MD5 SHA1 SHA512 SSDEEP

App.ico

SHA256 fbe4d11ca28371bf36d48378a9e1da29dce0efc373ff4e092e47b656505fc4c4
MD5 2d49cdb07baad04a2bc9f50547783c6a
SHA1 604bac84fd8ae87bbe9dc9a7c6503cb3a4014839
SHA512 cdedf711ead1c551d33050db4c9502e09f50534904b1abfce72aaf64846a9032886bdb19f31af30c1e1a46303cd147091e4ecf244486934d8b3b7f3b7b25521d
SSDEEP 768:iYgTDEuowwuwwwwowwwwwwIwwwwwwwwOwwwwwwwwwwIwwwwwwwwwwwwowwwwwwws:iYKowwuwwwwowwwwwwIwwwwwwwwOwww8
MD5 SHA1 SHA512 SSDEEP

Be.Windows.Forms.HexBox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bbfd21490a4be96e1a44a92e39406e87978aea1fc58b603702e4e21a143dd89e
MD5 e6f7b8c5ec4d1543eaa7f5d148c6327c
SHA1 61a5bf82b4f7da4040f76e7aec4b4b5fe0c544ec
SHA512 6f4516677937f6d58d250f7b6a50f3815691f84ac17e455dd09dc6d4ecc215a8a8ea000706885c858708603223661908067ed36c037766a52d15f2eb33af1fc4
SSDEEP 1536:/KS4Z+5ZUOxinOGm7kF5Gw5qQ0DaK/nbL0LolKo4I/AhYe:T4ZkiHOGT0Dpf08Bve
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

44:b8:8a:a0:9c:ca:56:a6:4c:61:27:c6:1e:3e:60:16:1e:a2:40:8b:aa:d9:ca:87:5b:21:be:83:45:7f:f7:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Dec 15, 2016

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

cc:f7:3a:9c:9e:8d:a7:bb:85:fd:67:54:b3:ab:c8:ea:a5:32:33:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Dec 15, 2016

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 5, 2016 - Dec 21, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 5, 2016 - Dec 21, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Apr 11, 2027

Minor OS version

0

Major OS version

4

Entry point

54574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Countdown.wav

SHA256 e10937bd9491cc7944c8c5904faa3ecd971b329438cc1e5fe606ce731dc15dbc
MD5 3241067e4d532f5feb4ad907076946b0
SHA1 9130fefcaa638b7128c09ea12ee81a4d3a8aa720
SHA512 d9f189c89242594f9fd89c353037f2822b7869639c30984c424f7c45ad2f5135808ebcb776a6d7730f479147a3ccc9f33c246e33b7c1ccaa140b72db93219600
MD5 SHA1 SHA512

DotNetZip.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8e9c0362e9bfb3c49af59e1b4d376d3e85b13aed0fbc3f5c0e1ebc99c07345f3
MD5 a999d7f3807564cc816c16f862a60bbe
SHA1 1ee724daaf70c6b0083bf589674b6f6d8427544f
SHA512 6f1f73314d86ae324cc7f55d8e6352e90d4a47f0200671f7069daa98592daaceea34cf89b47defbecdda7d3b3e4682de70e80a5275567b82aa81b002958e4414
SSDEEP 6144:DuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/W:3QL32ikCaUS4csRBse6sfW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

465934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb

EnableLoopback.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1ab2c4a1d6d2b4899f63111466e4ebf944ab2ec7917926b20028bf181b22f49a
MD5 a897a628beb719bf888c95d70602ee83
SHA1 fe9dcec7c9c6f4f664814db6eb611a9a235a04b7
SHA512 11e6c91db91a3233bd4a68711e26144ad96f5f5b8f22004efb08a45d96e3526592ebc49aa6c20b3b8739c6091e3ffade4badefae20e07983e4ab2bc890354a05
SSDEEP 1536:21H50wOLFzrSh7DwZ7xmlkcYx8PfIctGl:21H5EFzrSh7bkd8Ijl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

fa:d2:c9:c5:4d:5a:e2:19:67:64:40:de:44:8f:9f:a8:bd:0e:e8:9d:fc:7c:a7:c7:7f:e4:6e:5a:c5:03:23:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

61942

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\EnableLoopback\obj\Release Signed\EnableLoopback.pdb

EnableLoopback.pdb

SHA256 129ee563cff96a9000e510f5be821bb8dcea2823d6f7527725ad43cf7ed5bb20
MD5 ffe53af7eaaddcd329c666b3723d749b
SHA1 f41792c21a02430a7d84492cbe8f41a00b98afa9
SHA512 8507f0ceb719797d40e7cf54c79fc9d965bca7b176b5d63ab5c185febed92e9f4c905403d6208dbd55866baf3613544e2458e6f26d5530b760e5a0352f105877
SSDEEP 768:zzpRU3Zxj/OWldA65YvwKGuctURhEbizN3E:zSld/+YlUtR
MD5 SHA1 SHA512 SSDEEP

ExecAction.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a23c852d3ed4148044708925e56e17246cdb88d6ecaaa375503fa1f915ba1272
MD5 519310853c0ee273a3f8787d7518dd2e
SHA1 22c4e25c4c4c2b5654d05cd6a1e737c6bcb588d8
SHA512 30e51202416ab2d0bac9cd294d08c12d7973e75696283b1823c6442033698f85075d14dcd79fb1f56886f4491981b1e278d3a506e5e458a1eee6bb372d5e683d
SSDEEP 192:ZsCrRJUlWDSnYe+PjPxucwwSoDvucwwfih5H0JOqxEV1a//bZ28WhTEn:GGOZnYPLxoAjo4S+JNY1cAhhY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

27:83:40:20:fe:5a:55:25:ad:6f:41:20:5c:e0:28:cd:0e:c4:dc:2b:80:e3:4e:b5:50:50:26:0c:21:8d:7f:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Dec 15, 2016

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

80:a1:70:c5:99:24:24:64:9b:15:e4:19:82:b2:b6:cb:8e:c4:2a:d3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Dec 15, 2016

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 5, 2016 - Dec 21, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 5, 2016 - Dec 21, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Apr 11, 2027

Minor OS version

0

Major OS version

4

Entry point

11582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\src\GitHub\fiddler\Fiddler2\Common\ExecAction\v4\obj\x86\Release\ExecAction.pdb

FSE2.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3ba5c6b11b139f4cc94b8ebb232e5743b5cf759de6dc13a21b1ed91fe9678d85
MD5 b03e0f29eda6e4629646560c8cbb6b0a
SHA1 dbd2d49721f4d1838a72023ce227406b6b532272
SHA512 47f1a32e0c021b20b31e76004d937be36dcbadb5a33d785dd92010528d006146f6067e0b5044903bbb80ba155b0a8e45fde2ff74a020b8ae87e2a6740ccf8b5a
SSDEEP 768:IhiPG/qDnv6rF+zQ3Eo8G0gsH8Ufj02e0r/pEHkGzwR:4zKniZ+z7o8/gsH5fjnrR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55298

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\FSE.Net45\obj\Release Signed\FSE2.pdb

Fiddler.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 892ff0f941cba2ef1e8d5f7ddb14002e21c95f21a132c50762a4c79ef9fdc475
MD5 d8d686a8e171c52a856187dd6d5b18f2
SHA1 53bd857635684130bf340995e452457a61bcee23
SHA512 fb1f026d92cd2cbcdc0ce9a4bb81a370999cca77c99c5db2b6089a510f55af9aa1c908727fe3f31de3ec8eb3142b3b1f7e2deeca641e2b9d56eb3543ebbbe714
SSDEEP 49152:1eKNJIAQNW8kwdMxVZaNoZy9o1iQtGqc56S54:1eYJIAQNWvwd+G4iKGqy1i
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

95:ee:1e:6b:ab:42:81:35:d6:1a:d3:0c:b6:18:bd:d9:5a:42:87:6f:ef:3c:ae:e3:f4:fa:12:ec:b0:fc:85:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

3669694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Fiddler.pdb

Fiddler.exe.config

SHA256 e59afc2818ad61c1338197a112c936a811c5341614f4ad9ad33d35c8356c0b14
MD5 c2edc7b631abce6db98b978995561e57
SHA1 5b1e7a3548763cb6c30145065cfa4b85ed68eb31
SHA512 5bef4b5487ecb4226544ef0f68d17309cf64bfe52d5c64732480a10f94259b69d2646e4c1b22aa5c80143a4057ee17b06239ec131d5fe0af6c4ab30e351faba2
MD5 SHA1 SHA512

Fiddler.pdb

SHA256 417491efaff1fd50a7da5b2c9e5fd6f2a8b04da9bd0921e3b81d8d2fa9957ada
MD5 4d02ec7da3ea0818aa50ba3a9db8c557
SHA1 9ec1ba5509edc2ee6001663a2ad430f924d614a4
SHA512 0adb2279b62c687f1bce22327823901bbf66c42dc2833cda76cb7a925aeb7073d42094c615e376832c9a0a5110c1c254f1e497f84f687e55577c768982d53a36
SSDEEP 12288:u+NdVzptqXrXgmjHOJwcXGm41mAjYlPo30LSc84y3oKW:u+TNptqXrXgmKJwcXG/14lP984y3oR
MD5 SHA1 SHA512 SSDEEP

ForceCPU.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d
MD5 b982a103b0d4e0db856026a163124bf3
SHA1 40772be00068bbd394ff0fccd551151a822f3e70
SHA512 214ecdf348e2093e91a489c0541f05eb3356e2531c1840a99d9f727caf1130f5041ccbc6356a7bc31fb4dece927d3fee2fa9e4689d2badbe680fd40104a9d327
SSDEEP 192:fHtIemmfltxD5WLtWwiyT5hNGnYe+PjPxucwwyibSucwwQJk35H0JOqxEV1a//bG:xD5WLZ5qnYPLxoDfoDg+JNY1cAhhv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

70:c3:fd:94:6c:88:9d:63:5d:58:6e:88:2b:63:48:3e:a5:ee:de:c5:86:5d:4d:d1:a9:2c:5d:f4:d3:89:60:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Dec 15, 2016

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

d9:34:02:4c:de:61:c0:a6:dd:6b:14:e9:c7:48:29:7c:a9:1f:ff:da

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Dec 15, 2016

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 5, 2016 - Dec 21, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 5, 2016 - Dec 21, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Apr 11, 2027

Minor OS version

0

Major OS version

4

Entry point

11854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GA.Analytics.Monitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e3261a13953f4bedec65957b58074c71d2e1b9926529d48c77cfb1e70ec68790
MD5 6f9e5c4b5662c7f8d1159edcba6e7429
SHA1 c7630476a50a953dab490931b99d2a5eca96f9f6
SHA512 78fd28a0b19a3dae1d0ae151ce09a42f7542de816222105d4dafe1c0932586b799b835e611ce39a9c9424e60786fbd2949cabac3f006d611078e85b345e148c8
SSDEEP 768:7su21mzJ3+LDDke5WcsvOvHOQ+5bQZdKXJccxYi:7qmByvke5Wcs22QRGKLi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

fa:f1:7f:01:54:15:0d:ab:ee:e3:96:00:c9:db:28:a2:58:c4:e5:01:f1:83:45:bc:88:82:8d:9b:a4:48:0c:fd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

4b:a5:04:79:a5:09:02:ba:2b:3f:59:c4:37:a8:91:b5:03:76:cf:13

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 29, 2018 - Aug 29, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Minor OS version

0

Major OS version

4

Entry point

45714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\GA.Analytics.Monitor\obj\Release\GA.Analytics.Monitor.pdb

GA.Analytics.Monitor.pdb

SHA256 6c19ec08ffb13998ace51e1b531128af12cd47ccadff5e346176c6992c00a843
MD5 df9591879a5af2a8458fb9148e197313
SHA1 189df547db269f1694603eab40519ec0086fc326
SHA512 89c8f7686048e3329d47bd7f6678cca880d1c2a704664a44276090ed2a5b6452d964c69e2d0161ec8b69586e3aae3c99f63445c22122a1b9bf532234f93af65c
SSDEEP 768:qT0N9rXf8+G/ne3F8VWITK2gaZbAjJcrNtPja+RLDVa:i0N9rX2nevITK2CjC2+RPVa
MD5 SHA1 SHA512 SSDEEP

ImportExport/BasicFormats.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 74a6e70d6431196b39c96947d719fe0e6226a3c0fea97cd15ee8ca41b6005141
MD5 1a9fddba5da127c177a48e6d38545143
SHA1 7fb7befd25e23de2f8ce19765a2b79abb262fc5d
SHA512 5b60cc17266037e764fb9aa9195801ca0850d862fdbec31968bf710d333db32fb86f672ad13711ee86b573beb345ffbe12c170cf8a87f38520354c96c347ca56
SSDEEP 3072:c5zlHe5PmFt6DRIn9TQupG9H1rERA1TenjV++HOy2gsE:QlU62gt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f9:80:7d:a7:58:50:2f:98:7b:bd:aa:1e:ed:c6:3d:02:f2:c3:13:8a:0a:c3:69:ab:66:5d:b6:fb:92:72:50:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

111510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\BasicFormats\obj\Release Signed\BasicFormats.pdb

ImportExport/BasicFormats.pdb

SHA256 e763b77a76b220d1dccd961e49fbaf011f1783cb4114597fef8e8ccb92579e05
MD5 fde283d2c9ae4f24ac483b29d4730682
SHA1 b19cf8d680c521e014d6461462469d4d2bd37a2f
SHA512 d1497f66c46fb2a1fcff359a578284df2374b254af06b80b1f6d8f5350f6973b44bbb54b1b73da5d2c1a99469d3d25234be9e63cd3be2ba732f1f92ec8160911
SSDEEP 1536:ichKTzCxE+1iFoNKelb/PxrEw+aFlq/NFx55T4aXrkAcQ3hIHCmcSvbhcVYhN2x/:i/saXrZxTmcYhtN+UgwsC6Yd
MD5 SHA1 SHA512 SSDEEP

ImportExport/VSWebTestExport.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 507a68f382d9fbce799ab14d4179e81248a56e4076afc45fad72e94eddf358bf
MD5 96df2ae9bd6ae0e0b9ee4385d7d5f2ec
SHA1 069d06bf66f194cdc929f6a8e6b3f87411af7c2f
SHA512 f0d6434b738f270970eaea6cb49780dfda2041934ddd93d9357347124f85a36ff025d1b6c8e2b5a2e1eb2d93699a821eab952747dc38a295147f008f234d376a
SSDEEP 768:FbJ9Yyrdng1T7Enn/IRXILJtGiU83aTDiRxqTxf1mlTAwrFw:fyE5/LtrU83ayRxCfIcsy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ba:0f:d7:f2:4f:8d:64:f5:26:0d:f3:6e:96:28:1c:c6:2a:21:d9:2a:37:60:60:fe:9d:3a:65:49:3d:45:74:89

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

42778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\VSWebTestExport\obj\Release Signed\VSWebTestExport.pdb

ImportExport/VSWebTestExport.pdb

SHA256 c8bc6b9ad56245d028976bfd1c0db78da82929faa5c4b37729812fad7d88e74b
MD5 ebfc8d2c706f7c1afb8ecb4f157c9b5d
SHA1 4aecfeb2eae49a0776d975c36a32598c9031d430
SHA512 c62beb9c42fd79fa4f0d53fe4fdc99f82fb3fb2a78613ed9a18027cbf16d69124270abb6c4dd1387cf3bdca18cfece057dd566fe3d74b7cfbcf2629223486d05
SSDEEP 768:5zb4+hNvVmLAzJJ1LcR4OSEMGvq/G2DzfKRPb3eUCYiumAyxens+d0hT/Hj8qnAk:5jPfKRPb3D1y8nehTvpAOd/xV5
MD5 SHA1 SHA512 SSDEEP

Inspectors/QWhale.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 93b0f5d3a2a8a82da1368309c91286ee545b9ed9dc57ad1b31c229e2c11c00b5
MD5 ac80e3ca5ec3ed77ef7f1a5648fd605a
SHA1 593077c0d921df0819d48b627d4a140967a6b9e0
SHA512 3ecc0fe3107370cb5ef5003b5317e4ea0d78bd122d662525ec4912dc30b8a1849c4fa2bbb76e6552b571f156d616456724aee6cd9495ae60a7cb4aaa6cf22159
SSDEEP 1536:jnPlSpsvrGlP3wYeBKpqmSNbgM9ZtZLZQErK3PmIDXRtFhCj6ocpjyc44lc:rlSpsnQCg4ZtZmECfRtF0cpjy94lc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

192302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Common.pdb

Inspectors/QWhale.Editor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fe26c7e4723bf81124cdcfd5211b70f5e348250ae74b6c0abc326f1084ec3d54
MD5 eaa268802c633f27fcfc90fd0f986e10
SHA1 21f3a19d6958bcfe9209df40c4fd8e7c4ce7a76f
SHA512 c0d6559fc482350c4ed5c5a9a0c0c58eec0a1371f5a254c20ae85521f5cec4c917596bc2ec538c665c3aa8e7ee7b2d3d322b3601d69b605914280ff38315bb47
SSDEEP 12288:vC84TFHhCRR87er17m62l/YpMVuRWGoN0ty6B:vC9T+R87er325wMVuRaGtPB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

830670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Editor.pdb

Inspectors/QWhale.Syntax.Schemes.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9ad5749ba1914101cd4cf2736d0e74bbb8c7abbe93fd5e83377d5cbf33ddb78d
MD5 681abb88692a8d2662c527eab350744b
SHA1 58bf5fdfa668c2add65a6b7edbb43eab47648821
SHA512 5f2a370b4bd64e03469ddaa90b7ebd75e588033dbe48ae1b111fa537e56aa13b5bd7e067126d3cc543faf45cd0595ea2355d8fa412197b61f18754e4f9876823
SSDEEP 1536:/YiCDgqGqtbeBLmTnNLUSgk9NPOEbg0hIc2Vrl2XuPtlPpXB1sJOm8M93f2AkkgW:abMmTnNLUSgk9NPOEL2Wg1TOV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

282862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.Schemes.pdb

Inspectors/QWhale.Syntax.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79a2c829de00e56d75eeb81cd97b04eae96bc41d6a2dbdc0ca4e7e0b454b1b7c
MD5 3be64186e6e8ad19dc3559ee3c307070
SHA1 2f9e70e04189f6c736a3b9d0642f46208c60380a
SHA512 7d0e657b3a1c23d13d1a7e7d1b95b4d9280cb08a0aca641feb9a89e6b8f0c8760499d63e240fe9c62022790a4822bf4fe2c9d9b19b12bd7f0451454be471ff78
SSDEEP 3072:Ns/3b/8FpHf3kBFcCsbfqai2/8Fjitdmus95jMRrgk+vWZYz39dHiB796k9gR5+r:NQLa/kBFcCsbfRgzM07XGk+V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

227134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.pdb

Inspectors/Standard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e673dc35530cac477135267c41212de263798fe49b0e77ba9511eef908e4f7db
MD5 0f8191a9defbcc4e27cb6d6d455bbd09
SHA1 17fe3a6f0d93082e1fcca23925db99be023b65c4
SHA512 43c07afe0e53ea7007cd1718797c53c87843c04bdcae58f531a5f1cfd579c8927b0938489e158c7106a9c77ed41b4a2e4ae805449686408cd2c65908cf091f68
SSDEEP 6144:jDdXkVTfwIyE8W+pl7fdQ/51ftYx2Ngzs2L3NUR/m1Nt:jDdXkiIyEV+pl7Snrxmbt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

41:70:54:a9:d9:c2:b3:9c:28:c5:d1:13:d3:f8:04:fa:4d:99:f6:cd:b7:cf:ef:ed:ec:17:80:ba:3b:c9:25:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

249302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Inspectors/SyntaxView.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 75ace796c6f2f1cafbb487b9de9fae7b33b8c6f68c56869654b0ae77618535ba
MD5 9271edebeb231896252e527ad4f2c1c5
SHA1 518b8a5415b879147a9666e9c8b6ddc5841c290f
SHA512 2fb2265b7fa7fbac6ecdde4fe27047f44e0d11d74f917b4d43aaf7303f5a70452e1f1b050e4545875d0f47d4dd2b7aa63d842eac39224f119a4c6aeb7dc64a02
SSDEEP 1536:ESYKCJHDFPc0WIZ1zf2trbOWzIxHfIcAf:E2CRDFYIZ1zfBgggx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

66:d9:8e:89:6e:de:34:c0:70:b0:61:41:c1:86:9d:90:e0:77:a3:7b:65:4c:5f:14:b1:83:08:3a:9a:8c:9c:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

54010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

LoadScript.wav

SHA256 4d97caeee07cfd354e2f5210ad1522c948bdcfc520fe8bde27652cda92f28241
MD5 6ea0adcb5af7ab65714e76374ad655fe
SHA1 6bd0ecafd9ecd4b7921624dba983680cadec14fe
SHA512 834391490fe6f99efe358dbd58f051a87717accce839fde5524f8cef4d7f872707b220ae975591038909e9ae95d04a04104ee7294d4ac0c53ecf5ca0076c4e39
SSDEEP 96:IiHTx2ZENf0NWxuKKVf5Pwb1fT0qUB6X6:lTx22kWxujf5Pwb1b07
MD5 SHA1 SHA512 SSDEEP

LoadScriptError.wav

SHA256 dce3297d94996c91126446e133145e4395c87ba47c4b731ca86c4c845dad8049
MD5 72309f20f2bfee0595fe8d20b8cbefb0
SHA1 efc2b2b263722dddffea44ffc7a116daf09709b3
SHA512 0de89f9b0ca62cd9977e2becf30d8e9c416ad42f66d1bfbf78e34dc6301e0cec559813d76a05f11abeb39c7cac45e6c20bdf88c86c398c09158cb9f6c3af5942
MD5 SHA1 SHA512

NOTICES.txt

SHA256 0a28fb1c261b7eed6cf8f59373bfed456a622b1c30ba828693f1834cd24c1e25
MD5 adfc592f90745c1ceb5088be6233ca8e
SHA1 323558f4eec2237d47dfa0805337c99fa1e952cd
SHA512 0bb50a823270f9aa629e4cf7de4d4de3b04bdb79a6f2dc732c50243de1040cdbdaa46e8e75ce0b3dd9cd85224d69974ce44e57ff319fddf4b1bedcf19ae51d9f
SSDEEP 1536:SNtCkkRZhAgD0eL8kcp8ZMoh0FVntHOIzm:SNtgRZhF58kcKiXtHnC
MD5 SHA1 SHA512 SSDEEP

Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 8, 2023

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

704578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3564b25b24569b8d8a0128f2f4bddec89c0b8986da7542d9c64aac730360a600
MD5 5889357424d717c8629c8bfabcd0be50
SHA1 87e7047a40e24bd5ac23f89e072ee39a14a53023
SHA512 1af458742cefd4730d64b19ecc05460354f0e47a79cdcd7794877aa0f6c56cfb92f37a0daf66fedaec2a579eb0187d774b7d5ba1fff65d6ab1504df4c3668fad
SSDEEP 768:2LpjNBBUyOzcB7RZbkTg+jO4HmBWKNTjNTlfKaE:2LB9VRpOg+jmBPFjF0aE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

a6:c2:80:24:e2:f9:6f:3a:e5:9b:b5:71:bb:b5:d1:88:9f:3f:d3:33:91:4f:b8:e5:02:42:d9:c7:67:f6:5c:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Chains

Oct 3, 2019

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

33:a3:6e:43:4c:f3:22:e6:91:dc:ac:96:4c:27:4c:c9:e1:da:4d:bb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Chains

Oct 3, 2019

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Serial Number

6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 3, 2019 - Jan 16, 2020

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Serial Number

6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 3, 2019 - Jan 16, 2020

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

2b:b1:74:16:9b:8c:42:56:00:00:00:00:55:91:e9:0e

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 5, 2018 - Jan 5, 2030

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Minor OS version

0

Major OS version

4

Entry point

26342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Jenkins\NetworkConnections_Release\workspace\src\Telerik.NetworkConnections\Telerik.NetworkConnections.Windows\obj\Release\net40\Telerik.NetworkConnections.Windows.pdb

ResponseTemplates/200_FiddlerGif.dat

SHA256 07db49dc0d250b90e8f6cbd8d3a4340eb01af2afbcc1ae6e539312b1e7f71b97
MD5 0847d00123f892514a4ad127632ae14e
SHA1 193c87427c3b37fcea7e1ff20918bd18f4d487ff
SHA512 dd5727b39f13eb05be49aec3654479ac5162c28157258bf8af8f6878ff55b1e111335fd73be04346a6685ecd0c22ccd7726e7d7b2cd7ce871888f9bc148be27e
MD5 SHA1 SHA512

ResponseTemplates/200_SimpleHTML.dat

SHA256 c1de5d01d11cfe466b819af52ba381f217573c889781c60be82eb285e9fa8908
MD5 ce18f4915c278f5196cacbb086e0afdd
SHA1 3cd4f950beedba52f6988f082bec98c153706ae3
SHA512 d4b756f9ad78da3fe740cc283aaab754e3fbcce81e030ad01598f63022452e0afbbea06f9eabd45f22cb0aea12e876bdea462ff56fc7a0cf4f432219f0f008d8
MD5 SHA1 SHA512

ResponseTemplates/200_TransPixel.dat

SHA256 55e9d8acc7dc6ead2e4b09c5212d23fde6e9d7f8de739a2cf3821c4d93713845
MD5 2312c8130d9203f27c0cece742b8928f
SHA1 03ffc27128a1d8c87e0e3b47797fc1914aad5c40
SHA512 afb5a0fafa9f2297899c16745e04cb2f8c647f1c8caeae6522732e5c62075a1b771156795e0c148d64fb79a738e33febb28523217ebc9a7ec7a548d574ec77a6
MD5 SHA1 SHA512

ResponseTemplates/204_NoContent.dat

SHA256 57a03ea6c0480797d923c72ece7e6e5d3b0b34299bfb879f67e519c9b6cd4fcc
MD5 b381d9c48a57ec5d61d20b963fa2e0c7
SHA1 77d0e8255534785ced3dda0906c871f2d662a7d2
SHA512 07a8a08143ab20350ce04fb51c70356748e76c486c33495b5bae1d72d53b8913bb420694b55f7fea8d9ce087b4418b965f7fdc4fe368f61662569ea2dc109808
MD5 SHA1 SHA512

ResponseTemplates/302_Redirect.dat

SHA256 5192579a4a2761b0c65544d1b61804222c169cdabd007fed0f40de09c3f9e854
MD5 bed4c478ec0842f8230bf9a025491a14
SHA1 362e4d075aa2846c4e1b998e1a3f15a1d96dff81
SHA512 723e56024f577a082fde1907a29ccd80b8a5d0cb9a2877ba68d1c0a69aa5ab0395cfd8749e8d73b70d4e680bc8e7892a7100dc42eaf8fff921d25b8505129f33
MD5 SHA1 SHA512

ResponseTemplates/303_RedirectWithGet.dat

SHA256 e857508c27591ecf82c522121ab261472ac57023cbf817ca5eb1212ac8b18735
MD5 972cdf70d09eac166bd8d82573382698
SHA1 df3d3874688f2294de50590c754411aad8171952
SHA512 96c4c0dcfe37236845f135d9a50b895433d4b49d532d3dac3a0d7e2831a9afae5c2bb8fcfdf5723d74d50be842a67ad675c33c2f1554d2f59a05b476e7e7c33a
MD5 SHA1 SHA512

ResponseTemplates/304_NotModified.dat

SHA256 4d34160482a2fe82b27d396eac3c32b5e9aed7e774e8a60dbe787bd066988944
MD5 155d2112c5a34e0122456e65eea0415e
SHA1 4600910ab706b69a9ef2eeeaca73fc015ba16c92
SHA512 7faa29cab291902af60fdb8aed74e3a686de80b047b0941d4b47dd1d8d5c669f640d220acd785ac775f74b3a0c7f852ba1859c5f09ae82e31af0589d3ffd97b1
MD5 SHA1 SHA512

ResponseTemplates/307_RedirectWithMethod.dat

SHA256 631ee98f55964e23c04d6e24a445cdd0b0de7d2f1dc3eaf5be7ae211ddb7d2dc
MD5 ec8f186d82b4d5d32ee18db08c59bfb0
SHA1 452a15ebfa2a7c0ff53f4a5a85903f8d09c8ed65
SHA512 ff5c154f8f8992816fe9f41ca6ce84bff2318adee26e5090dc92a4371fed08ec3b36e848a864cb509813ccf4dbfb3f830d1f5d45bf89e5c502d0bda9a4274c25
MD5 SHA1 SHA512

ResponseTemplates/401_AuthBasic.dat

SHA256 3e2e69628454fd3c220f099fec1ccce73f2e779bd43939762928bc8079383dfa
MD5 0760f4f0adbee7abfb5d05530450ff33
SHA1 69d35928f1d2061047129c99bedf56b5e0d0fbcc
SHA512 c3824dc3882282399d2c3211217def0e96f94d6986b6fbff5378b3aa864d8e93788b529502fe3137e15bd753dd52496192851c846a83d09f471998ec2741fc1e
MD5 SHA1 SHA512

ResponseTemplates/401_AuthDigest.dat

SHA256 cd8b03f62a20d47fc5c9a495615b350e4da7eabfff34b8e112afec63bab1cbec
MD5 49756f7861bf92ff1fd84076616b242a
SHA1 38187c1d3c748fade05dbc10da27dc93d183fd15
SHA512 08655d1d59e13f95d8a2a36a9de88be2a5abd3b6a21a98ed8ddc8b7c53f38e912e64064bf1d9d83d2df4eb41e3abc2477463cc454bd531800f49857da8d7dca5
MD5 SHA1 SHA512

ResponseTemplates/403_AuthDeny.dat

SHA256 3768d4f6467396343baad8df2fe102d22611318f2be090c2cfd8ac82fd201513
MD5 7374b4d828fba72d4c46f9badc47ca3e
SHA1 0dee779bb2d38fe4e8e712f214e743d647a8788c
SHA512 678046183fa344be53841d88b2a978fef3fa1352a1c084a50d1864d6f95d36188523d6d1987df14d682fd589efec6d2228530f18f038725c6e94a86f22946813
MD5 SHA1 SHA512

ResponseTemplates/404_Plain.dat

SHA256 a136c0e17264c40873534669af5f78e7e17e70f8661046c32599c6615cad80cf
MD5 5463ff9babdc2dc1e1304f04400120aa
SHA1 351449f2043e8ccef14ac76ae8aa87e8ca4b7a9d
SHA512 3c8f8d41acf6c26f85a5fff8fb12d062381f45820d529e6037e54804cc043eb4d956bf5a4f807429a9eb816a8fafa29bec4db720b6ecb987075ccd13845d6bbb
MD5 SHA1 SHA512

ResponseTemplates/407_ProxyAuthBasic.dat

SHA256 a39a2dba0a39ab590535ec9bb33c1095b7b6e79f7686c2fd5368230010721876
MD5 32c8d78b7bcefa8ea4d459bd9328bcb0
SHA1 f816a637e20f541618bb9c62095c175df16ed48b
SHA512 5d6339daa5bb788e6ad6b3a600f153467859793e78e8fa1e2143d335e90d815bd683a1660ed97e5672350be61085f15b0d84ac3c24c59fb89fbcd8db8f59d9f5
MD5 SHA1 SHA512

ResponseTemplates/502_Unreachable.dat

SHA256 056e734fd9ef5bbe213a5fccfc32b23f71f7f6cf7b792fa8e614d1c968a2210e
MD5 1c7df40e98f04b29a79af929a3aec437
SHA1 c7e246673a4efbdae3955095f3183c95af2f3732
SHA512 552d3d89716bf3c9068179e2190d6dc257ae1bc023356a228ba36fa5fc6e61c89ac9a9cee95bd67779f13b8c04fe1c3cea08834d4e96d2cfb08e6e54e81dc5be
MD5 SHA1 SHA512

RunNsisUninstallers.bat

SHA256 80d570928745176a574d82e45adb33dcab7fa68f80da07038c3da415c355463b
MD5 adedc0065e7ede15a0d8dab1c985ddee
SHA1 53803b6179deaded7c57606cea410de34bfcb301
SHA512 b303123360d4c6ce787814376526ae5af035a0105fe2114d50fc9b8f6e5de8bac0db3de6a0756f6a53294bf6ec379c2ff034058eb84b2a1e510164bf816599a8
MD5 SHA1 SHA512

Screenshot.wav

SHA256 d474865a5e5c2f9d039c0f7a017e9a5e23a159cf6f534e879e979c61085fa1f9
MD5 99803241008ee3d6f14ad27a5f24c34b
SHA1 43a13f3c5844a577a5221fcfdbfb75a58478683f
SHA512 4366935af45cb5c3b963aeea3d19507a028760be375717c5f7ec59115417680359a404c8d87a33a5be362ebf3f12eb28cdac539c153f3388446d912a57b37c96
SSDEEP 384:dIR94458ov44jkTZeh9QUHsG0h6rWll9Rm3BI:GZnPjkTZeh9fBMAiNm3q
MD5 SHA1 SHA512 SSDEEP

ScriptEditor/Analytics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 166e1a6cf86b254525a03d1510fe76da574f977c012064df39dd6f4af72a4b29
MD5 1c2bd080b0e972a3ee1579895ea17b42
SHA1 a09454bc976b4af549a6347618f846d4c93b769b
SHA512 946e56d543a6d00674d8fa17ecd9589cba3211cfa52c978e0c9dab0fa45cdfc7787245d14308f5692bd99d621c0caca3c546259fcfa725fff9171b144514b6e0
SSDEEP 384:gpeCB0nVQ/EMq7+Zi9nQwnHgfLtVUEoBXejF6XFlnwnYPLYyTcGq1y2h33XcQ7:/U0VQMMrZi9QiHWtVxOFxwxGqXR7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

88:d6:f9:6c:b4:16:7f:04:df:a6:ff:4f:30:a7:e0:aa:cc:fe:71:43:5f:1f:09:78:41:15:be:a5:6f:eb:53:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

ad:32:b3:e4:b2:e0:3c:86:0d:e2:73:2c:d5:49:be:a5:28:e2:17:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 29, 2018 - Aug 29, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Minor OS version

0

Major OS version

4

Entry point

25878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\JFAnalytics\obj\Release\Analytics.pdb

ScriptEditor/Analytics.pdb

SHA256 03ca5a20d36bbc0aea28aa3184d65b322cecc3080d55a975cdf0f5d31199829d
MD5 f84fb6cd84b5d07e3de4d78d38f388ff
SHA1 0b31f09eeb1af0681614c2f9f90d98b541df580f
SHA512 03fa13b39d4fae8bc83b4f37cf24aafc8c4a12a5db0462968ae6a0c96232d727df9264d190ff641115921e350a1981ad518a4740c20e54c433b2f2065522ad52
SSDEEP 384:IzCZdxQVINRdRoNFAYAz3GclBLEKiuNCFJkOLxYbs63N:fxz3oNqbTLUnjpLxY
MD5 SHA1 SHA512 SSDEEP

ScriptEditor/FSE2.exe.config

SHA256 f72019a677a2a8447d6e72a731c2ec3ebec6ae03cd7fe266637e665ee11af7ff
MD5 c5ad2c7e6331c37e5a70d989832eb250
SHA1 53c2ec3aae4bbd62b5b7095bec8fe7e915ade4f6
SHA512 92da69b448df5821895aa017f630f1f9916f8a8623f726d72c245375b6bda6c8b6522dd629e297e65c70f854a6457bfe9b43534ffa3a0a28fe0084eb0a07e30d
MD5 SHA1 SHA512

ScriptEditor/GA.Analytics.Monitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e3261a13953f4bedec65957b58074c71d2e1b9926529d48c77cfb1e70ec68790
MD5 6f9e5c4b5662c7f8d1159edcba6e7429
SHA1 c7630476a50a953dab490931b99d2a5eca96f9f6
SHA512 78fd28a0b19a3dae1d0ae151ce09a42f7542de816222105d4dafe1c0932586b799b835e611ce39a9c9424e60786fbd2949cabac3f006d611078e85b345e148c8
SSDEEP 768:7su21mzJ3+LDDke5WcsvOvHOQ+5bQZdKXJccxYi:7qmByvke5Wcs22QRGKLi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

fa:f1:7f:01:54:15:0d:ab:ee:e3:96:00:c9:db:28:a2:58:c4:e5:01:f1:83:45:bc:88:82:8d:9b:a4:48:0c:fd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

4b:a5:04:79:a5:09:02:ba:2b:3f:59:c4:37:a8:91:b5:03:76:cf:13

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 21, 2018

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG

Serial Number

79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 3, 2018 - Dec 22, 2018

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 29, 2018 - Aug 29, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Minor OS version

0

Major OS version

4

Entry point

45714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\GA.Analytics.Monitor\obj\Release\GA.Analytics.Monitor.pdb

ScriptEditor/GA.Analytics.Monitor.pdb

SHA256 6c19ec08ffb13998ace51e1b531128af12cd47ccadff5e346176c6992c00a843
MD5 df9591879a5af2a8458fb9148e197313
SHA1 189df547db269f1694603eab40519ec0086fc326
SHA512 89c8f7686048e3329d47bd7f6678cca880d1c2a704664a44276090ed2a5b6452d964c69e2d0161ec8b69586e3aae3c99f63445c22122a1b9bf532234f93af65c
SSDEEP 768:qT0N9rXf8+G/ne3F8VWITK2gaZbAjJcrNtPja+RLDVa:i0N9rX2nevITK2CjC2+RPVa
MD5 SHA1 SHA512 SSDEEP

ScriptEditor/QWhale.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 93b0f5d3a2a8a82da1368309c91286ee545b9ed9dc57ad1b31c229e2c11c00b5
MD5 ac80e3ca5ec3ed77ef7f1a5648fd605a
SHA1 593077c0d921df0819d48b627d4a140967a6b9e0
SHA512 3ecc0fe3107370cb5ef5003b5317e4ea0d78bd122d662525ec4912dc30b8a1849c4fa2bbb76e6552b571f156d616456724aee6cd9495ae60a7cb4aaa6cf22159
SSDEEP 1536:jnPlSpsvrGlP3wYeBKpqmSNbgM9ZtZLZQErK3PmIDXRtFhCj6ocpjyc44lc:rlSpsnQCg4ZtZmECfRtF0cpjy94lc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

192302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Common.pdb

ScriptEditor/QWhale.Editor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fe26c7e4723bf81124cdcfd5211b70f5e348250ae74b6c0abc326f1084ec3d54
MD5 eaa268802c633f27fcfc90fd0f986e10
SHA1 21f3a19d6958bcfe9209df40c4fd8e7c4ce7a76f
SHA512 c0d6559fc482350c4ed5c5a9a0c0c58eec0a1371f5a254c20ae85521f5cec4c917596bc2ec538c665c3aa8e7ee7b2d3d322b3601d69b605914280ff38315bb47
SSDEEP 12288:vC84TFHhCRR87er17m62l/YpMVuRWGoN0ty6B:vC9T+R87er325wMVuRaGtPB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

830670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Editor.pdb

ScriptEditor/QWhale.Syntax.Parsers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 acff23204982780d844f5b0cbfe0bf1849c1dfe782cb4084ba2bdc9bf53f026c
MD5 9fe6e9cfedb661c61a2c70fa75008ec3
SHA1 0f6a0f4e7fc5552088d3f2dd0c0adf6f6c45b686
SHA512 a8864ee43628f667d6e0acf071fbba414ff768fe9dd302e6f9498432b3ce48a22deecfe438099a3caa684ad8e9588fae111de752c37c158eebd76e48ab67e02d
SSDEEP 6144:DDsAkHPWoMvThdMlLQtRZfScxaHrlXnp55VAWvRY02OCo6+shEd2qxrGa:DDs7uounM5WSNAG2otTh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1191710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.Parsers.pdb

ScriptEditor/QWhale.Syntax.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79a2c829de00e56d75eeb81cd97b04eae96bc41d6a2dbdc0ca4e7e0b454b1b7c
MD5 3be64186e6e8ad19dc3559ee3c307070
SHA1 2f9e70e04189f6c736a3b9d0642f46208c60380a
SHA512 7d0e657b3a1c23d13d1a7e7d1b95b4d9280cb08a0aca641feb9a89e6b8f0c8760499d63e240fe9c62022790a4822bf4fe2c9d9b19b12bd7f0451454be471ff78
SSDEEP 3072:Ns/3b/8FpHf3kBFcCsbfqai2/8Fjitdmus95jMRrgk+vWZYz39dHiB796k9gR5+r:NQLa/kBFcCsbfRgzM07XGk+V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

227134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.pdb

Scripts/FiddlerOrchestra.Addon.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c3ae6b22fc6d7a8842747fb2bdea9f89bad48b7ba0de0440cbb6f41425ef8684
MD5 094270ab2522a4228925480f5a07f4bb
SHA1 bb450f6931252a132c029c23b2fa10278a8c695f
SHA512 01d23e7c0733c2326ec2238938aaa7c0749c74ab0966025ae2b0fec965da54eeb6ab0a097db9fe401c9110334e8f7f433060a3266d1da9a3851b41bb5bb21600
SSDEEP 768:N/CVPuRQuxvtICXEI086vCNVTFzQyxQyHjNbpVQ5yUmhLx4jCxf1mlD0:N/5pEI08WCNVTPHjdvQUhLx48fII
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b9:b5:13:de:87:4f:64:bc:a9:45:c5:b1:f6:8e:86:c1:1a:63:ef:8e:cf:a6:f9:7b:2b:fa:af:e1:06:e8:9a:0a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

44794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler\FiddlerOrchestra\FiddlerOrchestra.Addon\obj\Release\FiddlerOrchestra.Addon.pdb

Scripts/FiddlerOrchestra.Addon.pdb

SHA256 fcacce953f6f184c2d307110035e8a913d7bb3cf79e7892a35652b5fcd5a1080
MD5 4535e61a35ec1e3873b74406a3a9be83
SHA1 932a22d236cd54d9d64dc65c236e2727b75c5f0e
SHA512 e471d6ccbc4c4d1e6ffc38f7f8e7b38732d7f3ddfbd6ad735f902903ad3e803a0ab712e8f1359679f70ba0f86df852fe2b1b71c0754e2ab5e82b4eb8d070486c
SSDEEP 768:5ziqJO0yHHfxdjKn5z/SLewt6WohS79rHsjbYblVkE81JbvaYB7O4K/N803ed:5FMJt6RS9fVkp1JbvzvK/N803e
MD5 SHA1 SHA512 SSDEEP

Scripts/FiddlerOrchestra.Connection.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7521e7e1e669ffe5a75738f55f685cba0ba4c4af1b81faa6b681678f5ad4c3f
MD5 8dfc61a6a71de70bb8fb9e637b35611c
SHA1 e6deaec2920460f7fb61cd3a9a35ff4d8ce8cb27
SHA512 54da6d578f40ecfdcf532285a78e287d3ca8d91dc9bde5c3fd009bf54718bbcb0696ea757cca8b77dff6bcb332bd16a834e1b90a014ac1170981d9f924a20c4d
SSDEEP 49152:lkLbcPdI5jVkVyEf8MLFlBvdl7KsQ3+rLmk54anl5CfZvtx:UEBFXMfVL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

21:6c:af:b0:b8:6a:c6:0c:84:93:ea:81:6b:95:65:25:20:26:a9:5a:8c:b1:28:04:65:de:8f:df:d1:36:cc:00

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

1872950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FiddlerOrchestra.Connection.pdb

Scripts/FiddlerOrchestra.Protocol.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cf4288d9c5f821fa031e1345fb2f84a29595939a116bbdfb534998a9bf80c82b
MD5 6a2eae44b3c3119e58f7f45a333104b7
SHA1 af79a4a2b7cb5db17616eecaaeeff213f06868e6
SHA512 6426e22a4443ee89cff7c1ebd3569fd6bbac4e7208a4f8435735aa7565ee416396880ba3c4b01fbf0eab5a3da076e591baf0b3f8014eed5347db5582e382335a
SSDEEP 384:MjDVyaBjiEBhXo/KFBBXQ40jOOzxRbuw3nrkix5ZsXTjdAA1m5wMT9YMWuuwiFgK:McUFf0KOzxRyunTxXsXTxf1mlTAwiFT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

00:7d:11:60:09:f4:18:0f:4d:60:6d:32:4d:b5:9e:21:d8:0b:e8:44:44:56:b8:b2:7c:12:5a:78:4d:83:7c:56

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

20242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FiddlerOrchestra.Protocol.pdb

Scripts/FiddlerOrchestra.Utilities.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e6ffde792bf1b185f6832c44bc6cb3ac32e062c21f4741909ed8275bc1490f36
MD5 9cc10f9727a4711b75f77a02d48a052e
SHA1 f6096f609eacd11175a651773990ec5a6eba546d
SHA512 d66ce0207a240206ec5214901887b39a87f36b4ec751db5d429b4b4b5e7bd10b4555ca046f11822f315cd9021ec7d761c0157bdc62df0d48c449b2bfdf46ed9d
SSDEEP 384:IL04oazaJUv2PZZ+63r3ixY6rCjdAA1m5wMDBuHb:X4oNJwo73GxdCxf1mlD0H
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

be:62:e2:1d:ad:83:1e:19:e7:96:65:10:b9:f8:90:80:a5:b9:61:66:41:d2:cd:f2:80:86:db:69:7f:3e:b2:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

15498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FiddlerOrchestra.Utilities.pdb

Scripts/QWhale.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 93b0f5d3a2a8a82da1368309c91286ee545b9ed9dc57ad1b31c229e2c11c00b5
MD5 ac80e3ca5ec3ed77ef7f1a5648fd605a
SHA1 593077c0d921df0819d48b627d4a140967a6b9e0
SHA512 3ecc0fe3107370cb5ef5003b5317e4ea0d78bd122d662525ec4912dc30b8a1849c4fa2bbb76e6552b571f156d616456724aee6cd9495ae60a7cb4aaa6cf22159
SSDEEP 1536:jnPlSpsvrGlP3wYeBKpqmSNbgM9ZtZLZQErK3PmIDXRtFhCj6ocpjyc44lc:rlSpsnQCg4ZtZmECfRtF0cpjy94lc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

192302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Common.pdb

Scripts/QWhale.Editor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fe26c7e4723bf81124cdcfd5211b70f5e348250ae74b6c0abc326f1084ec3d54
MD5 eaa268802c633f27fcfc90fd0f986e10
SHA1 21f3a19d6958bcfe9209df40c4fd8e7c4ce7a76f
SHA512 c0d6559fc482350c4ed5c5a9a0c0c58eec0a1371f5a254c20ae85521f5cec4c917596bc2ec538c665c3aa8e7ee7b2d3d322b3601d69b605914280ff38315bb47
SSDEEP 12288:vC84TFHhCRR87er17m62l/YpMVuRWGoN0ty6B:vC9T+R87er325wMVuRaGtPB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

830670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Editor.pdb

Scripts/QWhale.Syntax.Parsers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 acff23204982780d844f5b0cbfe0bf1849c1dfe782cb4084ba2bdc9bf53f026c
MD5 9fe6e9cfedb661c61a2c70fa75008ec3
SHA1 0f6a0f4e7fc5552088d3f2dd0c0adf6f6c45b686
SHA512 a8864ee43628f667d6e0acf071fbba414ff768fe9dd302e6f9498432b3ce48a22deecfe438099a3caa684ad8e9588fae111de752c37c158eebd76e48ab67e02d
SSDEEP 6144:DDsAkHPWoMvThdMlLQtRZfScxaHrlXnp55VAWvRY02OCo6+shEd2qxrGa:DDs7uounM5WSNAG2otTh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1191710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.Parsers.pdb

Scripts/QWhale.Syntax.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79a2c829de00e56d75eeb81cd97b04eae96bc41d6a2dbdc0ca4e7e0b454b1b7c
MD5 3be64186e6e8ad19dc3559ee3c307070
SHA1 2f9e70e04189f6c736a3b9d0642f46208c60380a
SHA512 7d0e657b3a1c23d13d1a7e7d1b95b4d9280cb08a0aca641feb9a89e6b8f0c8760499d63e240fe9c62022790a4822bf4fe2c9d9b19b12bd7f0451454be471ff78
SSDEEP 3072:Ns/3b/8FpHf3kBFcCsbfqai2/8Fjitdmus95jMRrgk+vWZYz39dHiB796k9gR5+r:NQLa/kBFcCsbfRgzM07XGk+V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

227134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.pdb

Scripts/RulesTab2.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17cc1be54b11bac35f7d130a78684bc7a25d32891d51ba619f748b42c5eabfca
MD5 b2bd0db74d2cce3553a3cb84a7b0db92
SHA1 1858ecedd27126ffa3c66bac3fcb54b7cc8e083c
SHA512 241c34343a82d61c2202e5431de2143d72b2393f54698980b2b2002c111e54803e9fc87b72fa1d28ad8ae2029f841eaa633e79ce7a9755204216854e539977a7
SSDEEP 768:eNoBcMhn986ePna/U4xcrTxf1mlTAwRFE:e+n9nKaM4xYfIca
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e2:67:ac:c2:98:89:5b:ad:0e:e6:8a:ef:10:8b:35:45:fc:9b:ac:9f:6e:a1:2d:0d:1d:12:8f:fd:02:b9:dd:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

32454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\RulesTab2\obj\Release Signed\RulesTab2.pdb

Scripts/SampleRules.cs

SHA256 f2420514316f503089865cbdc2b3da6f0cfd7cf7efdca46677a6cdf7b327697d
MD5 805fab2323135d4ca11fd855ae509f1e
SHA1 e9807a47e2e7fb69ac39544414c03b5ec549b8f8
SHA512 0b2e40e0d1119c27cc79f70a04ba6eda255d0c3e6908b061d354dbb9411b50126890df42e873872829a8b6ad7e922780e92dde130b9cf07f34971d61d31bfe45
SSDEEP 192:/HpPa8Y59pOJ6vClGRhLYTOdyB0kHKdbKAzUaN5lXDmxpl9XB3KLTHIJLerD+xFc:/pPYvCA8fJDdHtVYOm
MD5 SHA1 SHA512 SSDEEP

Scripts/SampleRules.js

SHA256 69cc5397e0fa9f99a0d21476da21147631a213f9f15652f8f182f34025abb500
MD5 cb7bf8b2d0e15c0ecc290a242b9f743a
SHA1 f1215262c0729dc6700fd5158ef6e437e64a4821
SHA512 49202347079e366477ba67372b086f5064b108c0c40aa52dfd833dee821b87cc37d9929d5da4fefdd62a824ebf34c161107f08ea7b33d866d21c266ce99972fe
SSDEEP 192:M8hsqImy1MTb0LB1GeagkQqzzzgWGZIVW0Gdcen9CpNlPdhr3f8nYny7+zjW6CXp:MI0gg2zWia9SVnyqOZ
MD5 SHA1 SHA512 SSDEEP

Scripts/SimpleFilter.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bbf13d9928338c6a12046987d9027f809fb79abbc3d0854fecad62e3bcb6e6f3
MD5 429d745780defb0e1dd4a2c99a48eab1
SHA1 ece6236e18d2f6d21295519c459139cf8dbcabbf
SHA512 4929093a2e0126ed2efe714c7ce20e9d1abe5001504dc1ecfbbb1a5fe8b570fe960e94bb04d349a5c263cabf9b97d053150d6514b4642a453068ad410e64b187
SSDEEP 3072:MZNNChh9B+OJy6kGDoK6zOtXJuJCy6zqgqklA53eD5ARZDVaOrMz0k7CDeqyHHOZ:MZNN6+OJy6kGDoK6zOtXJuJCy6zhqklE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

85:30:8f:ab:c7:d2:6b:f8:d2:b1:20:5b:cf:6f:36:6c:c3:51:07:82:5a:f9:62:a2:19:18:b9:88:b1:47:3a:89

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

135998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\SimpleFilter\obj\Release Signed\SimpleFilter.pdb

Scripts/SimpleFilter.pdb

SHA256 147ad0303e507da0b90ccc684e34b5c35afed671d9b907a197f1eade0c49924b
MD5 a5352b74fc2840f08da0eece7b0fbc5a
SHA1 719aaa3f7bb693f4fd693baf680713d4cc048824
SHA512 99427a87ba6dffac3b634c0739cca6466f1e370a464dd5526c664765871ace415d8216ba7492fa242e14253226022f5e827bd607525b52decddf08aaea81a7ac
SSDEEP 1536:SLftXaPf0NoEi+zjJXmpYCL16PQJP5YFwRsCQ2tL8fuWdfW6IwAvq:SLwUNiUVsfYIim+CFL8fbdJI3
MD5 SHA1 SHA512 SSDEEP

Scripts/Timeline.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 44202e9142630d1466829578aa85ffef5446b959235a3f2bf816d48a9a529789
MD5 524430838cca89a4143e927c98175159
SHA1 26b960380f92c7dbe20c6627cf726030c0bf5f77
SHA512 230fb6794287cad2382b12b52ef5275db4a5af3cc345adc44e9a2c551f2527a86e3558ba68c3b20c87bf501a86e4300e7d2b9e58e3af946a71ed0b4c9f293691
SSDEEP 768:/E8uqoL19VqLPLyYh/9L5SOBRz6e4NPTiO/xt+Txf1mlBqsDvDr:iVqLPLyYh94GzyiO/xtefIQsD7r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

cf:4a:3f:eb:33:02:69:8c:3a:a2:b9:c5:1c:8d:f8:85:8a:80:a2:99:09:c0:89:79:91:92:d3:e0:67:df:a3:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

36570

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\Timeline\obj\Release Signed\Timeline.pdb

Scripts/Timeline.pdb

SHA256 09bbd2ee1d5e51d49b5adbaf520e8eca4ddf36e522705cd60da031cf7a29084a
MD5 3e335723aedded4bba21d5713cd67d36
SHA1 dc8658b7b1de573a3e0e704efa032c82c9d69525
SHA512 799ba8da81cfdf26fe23542afe08d704508ae74e44e3703a7b9c4e8b99fa0a61610703998eef9574d1f9723799b41e31546b12abc86b4dc9e41b9cc2eec3b6ab
SSDEEP 384:lz4RN/qYENw2WU576+k2g1K1Kz3Z3I44JLJbanBg+ekK2:lz4RN/qC2Thk2g1L35WLJiK
MD5 SHA1 SHA512 SSDEEP

Scripts/netstandard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8be4a2270f8b2bea40f33f79869fdcca34e07bb764e63b81ded49d90d2b720dd
MD5 0adf6f32f4d14f9b0be9aa94f7efb279
SHA1 68e1af02cddd57b5581708984c2b4a35074982a3
SHA512 f81ac2895048333ac50e550d2b03e90003865f18058ce4a1dfba9455a5bda2485a2d31b0fdc77f6cbdfb1bb2e32d9f8ab81b3201d96d56e060e4a440719502d6
SSDEEP 1536:Q2Ec05j4eAH64rh5fSt5T9nFcI94WiVQTjpu:nlK4eA7mDmWqQXpu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8e:56:4d:05:69:0c:fa:09:46:27:ef:0b:e8:36:5f:b0:7b:27:1c:55:01:fc:39:d0:19:d8:78:be:b9:ce:56:66

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 23, 2024

PE Signature issue

Digest

8d:e0:1e:69:c8:d1:ea:17:33:ff:e8:81:e3:03:2e:80:ff:4c:05:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Dec 11, 2017

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Minor OS version

0

Major OS version

4

Entry point

87550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

SetupHelper

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b22130b228a0777d7fef3cec8a0ba3789bca488978d1607e36dccc85f3e8372f
MD5 94dc69e00d3c9728e5b9924907930a11
SHA1 61a8df9ccf28af1da33a69158de6a9a59a01f848
SHA512 a02e5d28dc1cd95f534e26abe5be2ff076e39c164ec37f44717c2ed6c8c013e0230ad621cb33048f79d5df23bd9dcf2748c747b5c89c777982b7ce4799a24673
SSDEEP 384:6rgQl6Tk+JUEt/aSoXaAuixPo0TjdAA1m5wMT9YMWuuwvFg4qcF:6rHsk+JxaSEFxvTxf1mlTAwvFx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9e:bf:5d:9c:ae:1c:35:1f:31:a4:69:fd:09:52:2c:7e:86:67:7d:e9:74:5d:17:88:2c:66:98:a3:e9:11:bc:89

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

15018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\Fiddler.SetupHelper\obj\Release Signed\Fiddler.SetupHelper.pdb

Telerik.NetworkConnections.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fb90b6e76fdc617ec4ebf3544da668b1f6b06c1debdba369641c3950cab73dd2
MD5 798d6938ceab9271cdc532c0943e19dc
SHA1 5f86b4cd45d2f1ffae1153683ce50bc1fb0cd2e3
SHA512 644fde362f032e6e479750696f62e535f3e712540840c4ca27e10bdfb79b2e5277c82a6d8f55f678e223e45f883776e7f39264c234bc6062fc1865af088c0c31
SSDEEP 768:GfDHRLnD0jEGs7UUe7DZXKNT8NTcYfKal:SHZgZ6F8Fctal
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

09:25:f9:02:38:ec:01:73:20:e8:df:4f:f6:06:db:87:bb:4e:52:2a:80:80:7e:18:1a:26:03:8e:7c:a8:08:96

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Chains

Oct 3, 2019

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

89:6d:82:44:27:91:d5:78:9e:c9:33:50:20:05:c3:9c:97:d9:f6:ae

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Chains

Oct 3, 2019

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Serial Number

6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 3, 2019 - Jan 16, 2020

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US

Serial Number

6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 3, 2019 - Jan 16, 2020

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

2b:b1:74:16:9b:8c:42:56:00:00:00:00:55:91:e9:0e

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 5, 2018 - Jan 5, 2030

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 22, 2015 - Jun 22, 2029

Minor OS version

0

Major OS version

4

Entry point

27198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Jenkins\NetworkConnections_Release\workspace\src\Telerik.NetworkConnections\Telerik.NetworkConnections\obj\Release\net40\Telerik.NetworkConnections.pdb

Tools/Brotli.exe

IMPHASH abde5b16095d3ba52da82b2720c99f51
SHA256 bdf333ebad3c91e5280755c07ab6eb4e8ffd4463f96617f33c25f66ef82b341f
MD5 e57e9adb99414cf052cd9c90205bfe3d
SHA1 5765b48637395c48ac839bb31c0842e90eaffd90
SHA512 2f1a75de7b49bc150deaa28c99b9c970c02e1d562598097e64e5128613dc79dcfba2a6f9d948fda9dbf5c5363c842fa7c5dade51475751de91a005683da3b9ac
SSDEEP 12288:I3H2D06ndyrxxCP9myHMfAHhlyVM1o/5XTw05nmZfRR8cdMnXFb:GH2D06ndM2Vmy2AOKAmZfR2cdMnXFb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

258KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

421KB

Virtual Size

420KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Tools/JXR2PNG.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b210d589290a6364a9e303c2f72831c9f6a303b73f898e9ae4aec961e61df875
MD5 1ba9ad64054a370e87d4f50b8c66572d
SHA1 c78eb09db64f8414274aef95c5133095fd35a776
SHA512 7dc88886c6d67251546301c6064fd0465a29aa7d1709d979590b004e7433af5bf78e0210cb93d9b919b55ee079a1af4481101375de9f752b0348904a04b6a312
SSDEEP 192:62ma8AyahFW1zxM7x0tbKktMhDWpHeLWwsU7K6CY1PK:wAHhFW1gzzDGNMK6j
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

8a:8b:6d:34:5b:59:1c:53:3a:bf:e2:04:31:54:83:c1:16:ef:2c:3c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Eric Lawrence,O=Eric Lawrence,L=Austin,ST=Texas,C=US

Chains

Jul 24, 2015

CN=Eric Lawrence,O=Eric Lawrence,L=Austin,ST=Texas,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=Eric Lawrence,O=Eric Lawrence,L=Austin,ST=Texas,C=US

Serial Number

0e:7a:7f:db:64:01:29:64:95:1c:89:0f:fc:f2:3c:10

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 23, 2015 - Jan 31, 2018

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

11550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\src\JPEGXR2PNG\JPEGXR2PNG\obj\Release\JXR2PNG.pdb

Tools/JXR2PNG.exe.config

SHA256 eaaeba1a6b05a4091d7271da8b8a7bd0c3f39b73968c50287267a78d60e0fdd2
MD5 f7cef9ef7b7b0d5d17e496a0aa5ef753
SHA1 26605124011ae156ee2687b7973f95c1862f6106
SHA512 76b0fae88a24b1ed5a5b03db672cf2d3b0b44dc515eca5ee0aa631c7d30dc825bb964017dde131be72424ee958311ac346047d8ebf20b7e2bd65125ac5e86c0b
MD5 SHA1 SHA512

Tools/PngDistill.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d930224e31a06889df2eb4d43df818996f2584f0734bced70d417a3d7e648070
MD5 fce5118efb541ce6488144db2a616fad
SHA1 2a116c6942a7002678c267db09397fcefde11a9f
SHA512 5c574b191b4971cdb9c97d5789937e12b49335fcd5e0699fcadbc0131c6f26627b43ec079c562ead8aacb526bdd9d601e5b7fd2742460a67c1c4ecd3f99bc434
SSDEEP 768:qkIVnY1pWyMxzph6akvwGygF0U0QwvI1KmwkxTcTxf1mlA6fVaJzn:qLnYTspdkvDyU6vi9wkxTQfInfsJzn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2c:0f:13:a8:9d:4c:73:4f:f7:08:7a:ec:bc:5b:c2:c6:32:c1:c3:a5:23:4c:84:13:30:b7:44:27:83:03:2e:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

26326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\PngDistill\obj\Release Signed\PngDistill.pdb

Tools/PngDistill.pdb

SHA256 a0790871e0e3787eca43f9402f522df21f026990896fbb4c084f97b4f8f5ccdb
MD5 b312d7ab6485702b7eef4c567043b982
SHA1 519b57a23722489b115d16f269e1d549a4e86f64
SHA512 7e50bb74da4d96ab2df139101f2f90a8292b1e33a78eac06361d566d2eb78752c85ba3fab059f091b6624518ea4d84de2be2ce25f9872d2f69c1644e54a7605a
SSDEEP 192:RMAPNAPAAPOKZ3wKpuCYbIHYTr9dYLWAyy3UOx9T8xweKOCBz31UO4eC5acXNww8:Rzm/LiIAYWAyy3UOx906r1QCXmV
MD5 SHA1 SHA512 SSDEEP

Tools/Zopfli.exe

IMPHASH 0ee9b066fb0acca861b061bc6205cb49
SHA256 ff6b47ee6165f4e10d450c96c1875d932b8e7fe788d0f53e615f2f25558db06b
MD5 9c8cc053ce3163bdc94258df6fac1419
SHA1 98adc48aca53ca5c6c90b9aa3dfbb60db57fce76
SHA512 099a6acaec501462702a33ee9a2c2a7b5e2bb91b7bb77e4e762e50166bc4af3ea8cde675289ed7769981627664d7161fd4e1f7eb711b91a57b6fcc550b338077
SSDEEP 3072:WQBil5nSdPza27aZK4zFD6bLIuEke1KsXL4PoYmopuJQ74PoXh:WQAlUdL3mF+LIWC5kd7f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

63:f5:4e:21:54:95:f8:70:75:30:eb:3f:7b:c1:e1:45:18:77:a7:c5:93:d4:d5:33:0c:9e:9d:6a:29:dd:6f:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 7, 2016

CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Digest

e4:0b:3e:dd:e9:94:cf:77:e2:3b:cd:7d:18:e5:b6:eb:a8:70:69:fc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Chains

Jun 7, 2016

CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

14:59:b2:a4:9c:0c:d9:2a:08:f9:c5:03:15:cd:3d:8a

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 28, 2016 - Dec 16, 2016

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG

Serial Number

14:59:b2:a4:9c:0c:d9:2a:08:f9:c5:03:15:cd:3d:8a

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 28, 2016 - Dec 16, 2016

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Apr 11, 2027

Minor OS version

1

Major OS version

5

Entry point

28667

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\telerik\fiddler\ThirdParty\zopfli\Release\Zopfli.pdb

kernel32

GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetLastError GetModuleFileNameW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ExitProcess GetModuleHandleExW ReadFile GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc SetUnhandledExceptionFilter CompareStringW LCMapStringW GetFileType HeapReAlloc SetFilePointerEx GetConsoleMode ReadConsoleW CloseHandle SetStdHandle GetConsoleCP GetStringTypeW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetProcessHeap FlushFileBuffers CreateFileW WriteConsoleW HeapSize SetEndOfFile DecodePointer RaiseException UnhandledExceptionFilter

advapi32

SystemFunction036

Tools/dwebp.exe

IMPHASH 2d085d0bc738a6c295d68bd5aed725a8
SHA256 7230212a8242f90a518b5282717cce125c06599d52274547657491c848334867
MD5 20e8776b40c1ae01526df9d629a8976b
SHA1 34045f876b75b178c706e7d2b5cfc7db636835c0
SHA512 97f9ee3da84851668b12449f003b9c7cfc03cfbc7d8f77ff549dd8817de357bd292c9defeef094bc91ccf2210b47debdd249fa4ba7a2a5cfad2e6237b2eb9380
SSDEEP 3072:quomVW49bB0zguJ25uPpHbbaa3TlO78fn0HZ3mHWqnaSBuPJ31T6+/zdqH:qunZb78f0wHWqD+Z1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

130769

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoInitialize CoCreateInstance GetHGlobalFromStream CreateStreamOnHGlobal

shlwapi

SHCreateStreamOnFileA

kernel32

VirtualFree RaiseException GetProcessHeap QueryPerformanceCounter QueryPerformanceFrequency GlobalUnlock WriteFile GlobalSize SetConsoleMode GlobalLock GetConsoleMode GetStdHandle SetThreadPriority CloseHandle WaitForSingleObject InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateEventA CreateSemaphoreA SetEvent ReleaseSemaphore GetLastError HeapFree HeapAlloc GetCommandLineA ExitThread GetCurrentThreadId CreateThread GetProcAddress GetModuleHandleA SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetModuleHandleW ExitProcess WideCharToMultiByte GetConsoleCP RtlUnwind SetStdHandle HeapCreate VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError MultiByteToWideChar ReadFile GetModuleFileNameA SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount LoadLibraryA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize SetEndOfFile

TrustCert.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 881947bce511304815ce6d01e95c3ce83c015ff257bdc92475d75494a8729273
MD5 2c8cd428daaef524120cfd69b78d3df4
SHA1 ab66c164ad4b46241d12c737fab9129816921254
SHA512 71b5933eb6c0a89a877e7a5f047566611f0667a120de94cf0fee1b8f9f03a951751f26594668838a01a6c7f083738d379690e260a1894c9e1a55131184d1a860
SSDEEP 384:7cfsyPDmstjY3ixRo8TjdAA1m5wMT9YMWuuwpFg4quK:6PC6jYyxS8Txf1mlTAwpFlK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f3:f1:3d:a4:35:42:83:6b:76:61:97:80:b1:67:eb:67:4e:5a:50:07:b0:6e:3f:ea:52:4a:bb:51:c5:71:ec:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

14470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\fiddler-classic\fiddler-classic\Fiddler2\TrustCert\TrustCert\obj\x86\Release Signed\TrustCert.pdb

TrustCert.pdb

SHA256 0f1782e86fe2b8e25343b283c691d8e80ed48e34efe209ddd1bc74409e705a43
MD5 63ffb425768050d164517fc7cb14eed9
SHA1 211edf8c1eb1db07ce1bf63a907ac27d4a381bd4
SHA512 f50b2c27fc7895b658f920543f9eaab3232e32791060d3a36de5fe30a6a663a68b7fcbd8c8eeb8e1c9f61e10cbed7e4f9c3cb7b27757d60b57f0ee1ca65a3372
SSDEEP 192:nfMAPZFAPAAPrTFBzF3tfxWtEf4zVZ31SFz97JhN:fzs/Dfg3K
MD5 SHA1 SHA512 SSDEEP

credits.txt

SHA256 0b63b836496ce758c4a84b175eac7db0a0dbb1104dac33d1f97a71703e5146c6
MD5 622517e6d7a15a9950c8be105f25039c
SHA1 ef98484f96bbc6440d9515d6f1048dc62a8e961f
SHA512 039870cc4aa92931bcd4c002669e129bab004a0c311654551b802a1ec35bb20af007437dcc7752459d1df7c6168233f9aae413aac18d61a1996f79d2995567b8
MD5 SHA1 SHA512

license.txt

SHA256 53b68dfc6f203a233364dc18c550f3ddf5ff224d922177f119eae47b97f3d797
MD5 da2c3104a5797f34948f766c8bacbc28
SHA1 1c5aa77277b7178abe2fa0938c78fb64682497ca
SHA512 5a997268de9b1fbbe19b267a83b32341c8462b620da6fb57b05d3b0aab5e652007255be8d1b966cb0d54f768b5eef19fa3cca4eded50614e16d1a967a9bb6c31
SSDEEP 96:z220PCCe4nnikZsB1d/+DYw6Roh5RY4uYNoizT:zZmvPnnikyB1dmR6ezRYzKTT
MD5 SHA1 SHA512 SSDEEP

makecert.exe

IMPHASH 8edc201d42ea718d1e65bb5d3125c066
SHA256 61d76327de227ae8f15afbb0f99c1df6152061855df7b35dbd6ff7329fc1ba4d
MD5 3da54bd90c1a4ef9a12270102c047fc5
SHA1 f1633906d490813514621de980e12e4b4b9fba0e
SHA512 90161aa69d9b59e6a5864b61237dd00bec121b24607bc8dcb3184159e42eca81fde64e68e4cae2f8ee7e798a6051affce8af47b005883adf23f73beefba9a66d
SSDEEP 1536:Mh3UWxHO1W7R//8XfpenTJ42aar/dN1Eq52:MhEWRz7Rn8PpenTJ42aUfEq52
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

8f:e9:cc:ee:a9:91:fe:40:b3:fb:c2:f1:56:90:9c:e8:9b:77:6a:71

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 15, 2009

Minor OS version

1

Major OS version

6

Entry point

24327

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MakeCert.pdb

advapi32

CryptReleaseContext CryptGetProvParam CryptAcquireContextA CryptDestroyKey CryptGenKey CryptAcquireContextW CryptSetKeyParam CryptGetKeyParam CryptGetUserKey

kernel32

GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter RtlUnwind InterlockedCompareExchange Sleep InterlockedExchange GetCurrentProcessId TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetVersion MapViewOfFile CreateFileMappingA GetFileSize WriteFile WideCharToMultiByte LocalAlloc MultiByteToWideChar CreateFileW GetProcessHeap HeapSetInformation CompareFileTime GetSystemTimeAsFileTime FileTimeToLocalFileTime FileTimeToSystemTime LoadLibraryA GetProcAddress FreeLibrary LocalFree DeleteFileW UnmapViewOfFile CloseHandle FindResourceA LoadResource SizeofResource LockResource FreeResource SetLastError SystemTimeToFileTime LocalFileTimeToFileTime GetLastError GetModuleHandleA GetCurrentThreadId

msvcrt

malloc free vwprintf _wcsicmp _wcsnicmp _vsnwprintf _controlfp ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode __setusermatherr _amsg_exit _initterm exit _XcptFilter _exit _cexit __wgetmainargs strtok ??2@YAPAXI@Z ??3@YAXPAX@Z memcpy memset _wtol wprintf

mssign32

SignError GetCryptProvFromCert FreeCryptProvFromCert PvkPrivateKeyAcquireContextFromMemory PvkGetCryptProv PvkPrivateKeySave PvkFreeCryptProv

crypt32

CertDuplicateCertificateContext CertEnumCertificatesInStore CertFindCertificateInStore CertCompareIntegerBlob CertFreeCRLContext CryptSignAndEncodeCertificate CertCreateCRLContext CertGetPublicKeyLength CryptHashCertificate CryptHashPublicKeyInfo CertStrToNameW CryptQueryObject CryptEncodeObject CryptExportPublicKeyInfo CertComparePublicKeyInfo CryptDecodeObject CertCreateCertificateContext CertOpenStore CertAddEncodedCertificateToStore CertSetCertificateContextProperty CertFreeCertificateContext CertGetCertificateContextProperty CertCloseStore

user32

LoadStringA LoadStringW

ole32

CoUninitialize CoCreateGuid CoInitialize

oleaut32

VarDateFromStr

rpcrt4

UuidToStringA RpcStringFreeA UuidCreate

saz.ico

SHA256 6d0e756d6ef91ee4a45a55857dc473ca8e4fcc2d47bb3285cb6be9b52bf9d239
MD5 a1d6a5ff94fefbef1d05bcbced52126c
SHA1 4e6b230e29ea4b73ca8fc6b4ab8e433bb10b97c8
SHA512 45d44046b6ffbfefd8151908b252fbb799415718108b99efac8e3008cf97f62e288fbfb5617ac26d85d75bfeab7bd8a1248f69c27577ca52dbeeab12ebb7f110
SSDEEP 48:uy2FX87Vo3+Qzm0atW7NZ5hwpwk+3Z4VaR2TLPv/i0S3duwR/O0YUIemJojskYt5:LUT3+Qz3aY7NfhSpwZ4VaRC60jUmOjsx
MD5 SHA1 SHA512 SSDEEP

uninst.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 f28faac8b095b1340abc0886dfa1e7397e8bde92300085e81138bd24ee969572
MD5 bbf6a346edc5954c3c3cc746110a1441
SHA1 6d0b84894881e84ceccbe82f38dea2d781c54aed
SHA512 f8c07a7a3ed3f424f1e525b5023f188a6907170d2c10b5fd9740003a539ec5c40fcb1ec2fd3c4b3045e37f56308dbf784b301e02ac16980b5e480a57b5f505eb
SSDEEP 1536:DfHLrLkSRoybCQUZsrs0DC1cuGwwwwwwIwwwwwwwwOwwwwwwwwwwIwwwwwwwwwwp:Dfr3k+o5buDC1cuisvWuiSlua
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2e:72:f6:a0:6c:31:94:71:6b:08:9b:5f:92:c6:8c:c5:9b:5d:32:8b:d6:ac:56:be:5b:31:70:bc:51:61:0e:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 22, 2024

Minor OS version

0

Major OS version

4

Entry point

13650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer