dnSpy-net-win32.zip
- SHA256 3cb7340b5b0b250a5b8d6cbf45bee4355be09c9a4d4fe2b2fac9abd5c7b95efd
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dnSpy-net-win32.zip
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
1800 seconds
General
- Target dnSpy-net-win32.zip
- Size 75.8MB
- Sample240602-wryvvsbb89
- SHA256 3cb7340b5b0b250a5b8d6cbf45bee4355be09c9a4d4fe2b2fac9abd5c7b95efd
- MD5 f6fe2bd46f091e4c7494f8df876d6c9d
- SHA1 a9a4db38a2aee9d69641a065319f0e012bfea410
- SHA512 9eab2457da031074ea4f00d37863fd72b414823728560dee29b99efd9bfb860db86862d6b12e1ae597ebd0032e75d5073d21c5e3516e4ab7a7d0b2863c234a6b
- SSDEEP 1572864:+P0kspXUdyPR8gv0uOXUu0PfynU0rOrIOV7tZynZ8r:+cksJGyR8gFryUUOLKS
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 251 IoCs
Checks for missing Authenticode signature.
resource unpack001/bin/ICSharpCode.Decompiler.dll unpack001/bin/ICSharpCode.NRefactory.CSharp.dll unpack001/bin/ICSharpCode.NRefactory.VB.dll unpack001/bin/ICSharpCode.NRefactory.dll unpack001/bin/ICSharpCode.TreeView.dll unpack001/bin/Iced.dll unpack001/bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.dll unpack001/bin/Microsoft.CodeAnalysis.ExpressionEvaluator.dll unpack001/bin/Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.dll unpack001/bin/Mono.Debugger.Soft.dll unpack001/bin/Ookii.Dialogs.Wpf.dll unpack001/bin/cs/dnSpy.Analyzer.x.resources.dll unpack001/bin/cs/dnSpy.AsmEditor.x.resources.dll unpack001/bin/cs/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/cs/dnSpy.Console.resources.dll unpack001/bin/cs/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/cs/dnSpy.Contracts.Logic.resources.dll unpack001/bin/cs/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/cs/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/cs/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/cs/dnSpy.Debugger.x.resources.dll unpack001/bin/cs/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/cs/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/cs/dnSpy.Decompiler.resources.dll unpack001/bin/cs/dnSpy.Roslyn.resources.dll unpack001/bin/cs/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/cs/dnSpy.resources.dll unpack001/bin/de/dnSpy.Analyzer.x.resources.dll unpack001/bin/de/dnSpy.AsmEditor.x.resources.dll unpack001/bin/de/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/de/dnSpy.Console.resources.dll unpack001/bin/de/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/de/dnSpy.Contracts.Logic.resources.dll unpack001/bin/de/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/de/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/de/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/de/dnSpy.Debugger.x.resources.dll unpack001/bin/de/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/de/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/de/dnSpy.Decompiler.resources.dll unpack001/bin/de/dnSpy.Roslyn.resources.dll unpack001/bin/de/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/de/dnSpy.resources.dll unpack001/bin/dnSpy.Analyzer.x.dll unpack001/bin/dnSpy.AsmEditor.x.dll unpack001/bin/dnSpy.BamlDecompiler.x.dll unpack001/bin/dnSpy.Console.dll unpack001/bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.dll unpack001/bin/dnSpy.Contracts.Debugger.DotNet.Mono.dll unpack001/bin/dnSpy.Contracts.Debugger.DotNet.dll unpack001/bin/dnSpy.Contracts.Debugger.dll unpack001/bin/dnSpy.Contracts.DnSpy.dll unpack001/bin/dnSpy.Contracts.Logic.dll unpack001/bin/dnSpy.Debugger.DotNet.CorDebug.x.dll unpack001/bin/dnSpy.Debugger.DotNet.Interpreter.dll unpack001/bin/dnSpy.Debugger.DotNet.Metadata.dll unpack001/bin/dnSpy.Debugger.DotNet.Mono.x.dll unpack001/bin/dnSpy.Debugger.DotNet.x.dll unpack001/bin/dnSpy.Debugger.x.dll unpack001/bin/dnSpy.Decompiler.ILSpy.Core.dll unpack001/bin/dnSpy.Decompiler.ILSpy.x.dll unpack001/bin/dnSpy.Decompiler.dll unpack001/bin/dnSpy.Images.dll unpack001/bin/dnSpy.Roslyn.CSharp.EditorFeatures.dll unpack001/bin/dnSpy.Roslyn.CSharp.Internal.dll unpack001/bin/dnSpy.Roslyn.EditorFeatures.dll unpack001/bin/dnSpy.Roslyn.Internal.dll unpack001/bin/dnSpy.Roslyn.VisualBasic.EditorFeatures.dll unpack001/bin/dnSpy.Roslyn.VisualBasic.Internal.dll unpack001/bin/dnSpy.Roslyn.dll unpack001/bin/dnSpy.Scripting.Roslyn.x.dll unpack001/bin/dnSpy.dll unpack001/bin/dnlib.dll unpack001/bin/es-ES/dnSpy.Analyzer.x.resources.dll unpack001/bin/es-ES/dnSpy.AsmEditor.x.resources.dll unpack001/bin/es-ES/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/es-ES/dnSpy.Console.resources.dll unpack001/bin/es-ES/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/es-ES/dnSpy.Contracts.Logic.resources.dll unpack001/bin/es-ES/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/es-ES/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/es-ES/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/es-ES/dnSpy.Debugger.x.resources.dll unpack001/bin/es-ES/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/es-ES/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/es-ES/dnSpy.Decompiler.resources.dll unpack001/bin/es-ES/dnSpy.Roslyn.resources.dll unpack001/bin/es-ES/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/es-ES/dnSpy.resources.dll unpack001/bin/fa/dnSpy.Analyzer.x.resources.dll unpack001/bin/fa/dnSpy.AsmEditor.x.resources.dll unpack001/bin/fa/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/fa/dnSpy.Console.resources.dll unpack001/bin/fa/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/fa/dnSpy.Contracts.Logic.resources.dll unpack001/bin/fa/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/fa/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/fa/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/fa/dnSpy.Debugger.x.resources.dll unpack001/bin/fa/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/fa/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/fa/dnSpy.Decompiler.resources.dll unpack001/bin/fa/dnSpy.Roslyn.resources.dll unpack001/bin/fa/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/fa/dnSpy.resources.dll unpack001/bin/fr/dnSpy.Analyzer.x.resources.dll unpack001/bin/fr/dnSpy.AsmEditor.x.resources.dll unpack001/bin/fr/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/fr/dnSpy.Console.resources.dll unpack001/bin/fr/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/fr/dnSpy.Contracts.Logic.resources.dll unpack001/bin/fr/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/fr/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/fr/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/fr/dnSpy.Debugger.x.resources.dll unpack001/bin/fr/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/fr/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/fr/dnSpy.Decompiler.resources.dll unpack001/bin/fr/dnSpy.Roslyn.resources.dll unpack001/bin/fr/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/fr/dnSpy.resources.dll unpack001/bin/hu/dnSpy.Analyzer.x.resources.dll unpack001/bin/hu/dnSpy.AsmEditor.x.resources.dll unpack001/bin/hu/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/hu/dnSpy.Console.resources.dll unpack001/bin/hu/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/hu/dnSpy.Contracts.Logic.resources.dll unpack001/bin/hu/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/hu/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/hu/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/hu/dnSpy.Debugger.x.resources.dll unpack001/bin/hu/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/hu/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/hu/dnSpy.Decompiler.resources.dll unpack001/bin/hu/dnSpy.Roslyn.resources.dll unpack001/bin/hu/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/hu/dnSpy.resources.dll unpack001/bin/it/dnSpy.Analyzer.x.resources.dll unpack001/bin/it/dnSpy.AsmEditor.x.resources.dll unpack001/bin/it/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/it/dnSpy.Console.resources.dll unpack001/bin/it/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/it/dnSpy.Contracts.Logic.resources.dll unpack001/bin/it/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/it/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/it/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/it/dnSpy.Debugger.x.resources.dll unpack001/bin/it/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/it/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/it/dnSpy.Decompiler.resources.dll unpack001/bin/it/dnSpy.Roslyn.resources.dll unpack001/bin/it/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/it/dnSpy.resources.dll unpack001/bin/pt-BR/dnSpy.Analyzer.x.resources.dll unpack001/bin/pt-BR/dnSpy.AsmEditor.x.resources.dll unpack001/bin/pt-BR/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/pt-BR/dnSpy.Console.resources.dll unpack001/bin/pt-BR/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/pt-BR/dnSpy.Contracts.Logic.resources.dll unpack001/bin/pt-BR/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/pt-BR/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/pt-BR/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/pt-BR/dnSpy.Debugger.x.resources.dll unpack001/bin/pt-BR/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/pt-BR/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/pt-BR/dnSpy.Decompiler.resources.dll unpack001/bin/pt-BR/dnSpy.Roslyn.resources.dll unpack001/bin/pt-BR/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/pt-BR/dnSpy.resources.dll unpack001/bin/pt-PT/dnSpy.Analyzer.x.resources.dll unpack001/bin/pt-PT/dnSpy.AsmEditor.x.resources.dll unpack001/bin/pt-PT/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/pt-PT/dnSpy.Console.resources.dll unpack001/bin/pt-PT/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/pt-PT/dnSpy.Contracts.Logic.resources.dll unpack001/bin/pt-PT/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/pt-PT/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/pt-PT/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/pt-PT/dnSpy.Debugger.x.resources.dll unpack001/bin/pt-PT/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/pt-PT/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/pt-PT/dnSpy.Decompiler.resources.dll unpack001/bin/pt-PT/dnSpy.Roslyn.resources.dll unpack001/bin/pt-PT/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/pt-PT/dnSpy.resources.dll unpack001/bin/ru/dnSpy.Analyzer.x.resources.dll unpack001/bin/ru/dnSpy.AsmEditor.x.resources.dll unpack001/bin/ru/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/ru/dnSpy.Console.resources.dll unpack001/bin/ru/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/ru/dnSpy.Contracts.Logic.resources.dll unpack001/bin/ru/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/ru/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/ru/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/ru/dnSpy.Debugger.x.resources.dll unpack001/bin/ru/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/ru/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/ru/dnSpy.Decompiler.resources.dll unpack001/bin/ru/dnSpy.Roslyn.resources.dll unpack001/bin/ru/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/ru/dnSpy.resources.dll unpack001/bin/tr/dnSpy.Analyzer.x.resources.dll unpack001/bin/tr/dnSpy.AsmEditor.x.resources.dll unpack001/bin/tr/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/tr/dnSpy.Console.resources.dll unpack001/bin/tr/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/tr/dnSpy.Contracts.Logic.resources.dll unpack001/bin/tr/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/tr/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/tr/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/tr/dnSpy.Debugger.x.resources.dll unpack001/bin/tr/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/tr/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/tr/dnSpy.Decompiler.resources.dll unpack001/bin/tr/dnSpy.Roslyn.resources.dll unpack001/bin/tr/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/tr/dnSpy.resources.dll unpack001/bin/uk/dnSpy.Analyzer.x.resources.dll unpack001/bin/uk/dnSpy.AsmEditor.x.resources.dll unpack001/bin/uk/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/uk/dnSpy.Console.resources.dll unpack001/bin/uk/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/uk/dnSpy.Contracts.Logic.resources.dll unpack001/bin/uk/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/uk/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/uk/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/uk/dnSpy.Debugger.x.resources.dll unpack001/bin/uk/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/uk/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/uk/dnSpy.Decompiler.resources.dll unpack001/bin/uk/dnSpy.Roslyn.resources.dll unpack001/bin/uk/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/uk/dnSpy.resources.dll unpack001/bin/zh-CN/dnSpy.Analyzer.x.resources.dll unpack001/bin/zh-CN/dnSpy.AsmEditor.x.resources.dll unpack001/bin/zh-CN/dnSpy.BamlDecompiler.x.resources.dll unpack001/bin/zh-CN/dnSpy.Console.resources.dll unpack001/bin/zh-CN/dnSpy.Contracts.DnSpy.resources.dll unpack001/bin/zh-CN/dnSpy.Contracts.Logic.resources.dll unpack001/bin/zh-CN/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll unpack001/bin/zh-CN/dnSpy.Debugger.DotNet.Mono.x.resources.dll unpack001/bin/zh-CN/dnSpy.Debugger.DotNet.x.resources.dll unpack001/bin/zh-CN/dnSpy.Debugger.x.resources.dll unpack001/bin/zh-CN/dnSpy.Decompiler.ILSpy.Core.resources.dll unpack001/bin/zh-CN/dnSpy.Decompiler.ILSpy.x.resources.dll unpack001/bin/zh-CN/dnSpy.Decompiler.resources.dll unpack001/bin/zh-CN/dnSpy.Roslyn.resources.dll unpack001/bin/zh-CN/dnSpy.Scripting.Roslyn.x.resources.dll unpack001/bin/zh-CN/dnSpy.resources.dll unpack001/dnSpy.Console.exe unpack001/dnSpy.exe
File Explorer
-
dnSpy-net-win32.zip.zip 75.8MB
-
bin/API-MS-Win-core-xstate-l2-1-0.dll.dll 10KB
-
bin/Accessibility.dll.dll 19KB
-
bin/CSharpInteractive.rsp590B
-
bin/D3DCompiler_47_cor3.dll.dll 3.5MB
-
bin/DirectWriteForwarder.dll.dll 463KB
-
bin/FileLists/DOTNET Framework v3.5 Client.FileList.xml.xml 8KB
-
bin/FileLists/DOTNET Framework v4.0 Client.FileList.xml.xml 9KB
-
bin/Humanizer.dll.dll 207KB
-
bin/ICSharpCode.Decompiler.dll.dll 509KB
-
bin/ICSharpCode.Decompiler.pdb210KB
-
bin/ICSharpCode.NRefactory.CSharp.dll.dll 576KB
-
bin/ICSharpCode.NRefactory.CSharp.pdb260KB
-
bin/ICSharpCode.NRefactory.VB.dll.dll 193KB
-
bin/ICSharpCode.NRefactory.VB.pdb84KB
-
bin/ICSharpCode.NRefactory.dll.dll 280KB
-
bin/ICSharpCode.NRefactory.pdb134KB
-
bin/ICSharpCode.TreeView.dll.dll 58KB
-
bin/ICSharpCode.TreeView.pdb30KB
-
bin/Iced.dll.dll 1.6MB
-
bin/LicenseInfo/ApacheV2.txt11KB
-
bin/LicenseInfo/CREDITS.txt1KB
-
bin/LicenseInfo/GPLv3.txt34KB
-
bin/LicenseInfo/LICENSE.txt807B
-
bin/LicenseInfo/OtherLicenses.txt9KB
-
bin/Microsoft.CSharp.dll.dll 879KB
-
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.dll.dll 99KB
-
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.pdb50KB
-
bin/Microsoft.CodeAnalysis.CSharp.Features.dll.dll 955KB
-
bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll.dll 28KB
-
bin/Microsoft.CodeAnalysis.CSharp.Workspaces.dll.dll 692KB
-
bin/Microsoft.CodeAnalysis.CSharp.dll.dll 4.7MB
-
bin/Microsoft.CodeAnalysis.ExpressionEvaluator.dll.dll 66KB
-
bin/Microsoft.CodeAnalysis.ExpressionEvaluator.pdb31KB
-
bin/Microsoft.CodeAnalysis.Features.dll.dll 2.5MB
-
bin/Microsoft.CodeAnalysis.Scripting.dll.dll 125KB
-
bin/Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.dll.dll 102KB
-
bin/Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.pdb51KB
-
bin/Microsoft.CodeAnalysis.VisualBasic.Features.dll.dll 1.0MB
-
bin/Microsoft.CodeAnalysis.VisualBasic.Workspaces.dll.dll 758KB
-
bin/Microsoft.CodeAnalysis.VisualBasic.dll.dll 5.2MB
-
bin/Microsoft.CodeAnalysis.Workspaces.dll.dll 2.7MB
-
bin/Microsoft.CodeAnalysis.dll.dll 2.6MB
-
bin/Microsoft.DiaSymReader.Native.amd64.dll.dll 1.4MB
-
bin/Microsoft.DiaSymReader.Native.x86.dll.dll 1.1MB
-
bin/Microsoft.Diagnostics.Runtime.dll.dll 788KB
-
bin/Microsoft.VisualBasic.Core.dll.dll 1.1MB
-
bin/Microsoft.VisualBasic.Forms.dll.dll 194KB
-
bin/Microsoft.VisualBasic.dll.dll 17KB
-
bin/Microsoft.VisualStudio.Composition.NetFxAttributes.dll.dll 16KB
-
bin/Microsoft.VisualStudio.Composition.dll.dll 314KB
-
bin/Microsoft.VisualStudio.CoreUtility.dll.dll 45KB
-
bin/Microsoft.VisualStudio.Language.Intellisense.dll.dll 108KB
-
bin/Microsoft.VisualStudio.Text.Data.dll.dll 135KB
-
bin/Microsoft.VisualStudio.Text.Logic.dll.dll 81KB
-
bin/Microsoft.VisualStudio.Text.UI.Wpf.dll.dll 104KB
-
bin/Microsoft.VisualStudio.Text.UI.dll.dll 128KB
-
bin/Microsoft.VisualStudio.Validation.dll.dll 27KB
-
bin/Microsoft.Win32.Primitives.dll.dll 21KB
-
bin/Microsoft.Win32.Registry.AccessControl.dll.dll 25KB
-
bin/Microsoft.Win32.Registry.dll.dll 75KB
-
bin/Microsoft.Win32.SystemEvents.dll.dll 73KB
-
bin/Mono.Debugger.Soft.dll.dll 117KB
-
bin/Mono.Debugger.Soft.pdb60KB
-
bin/Ookii.Dialogs.Wpf.dll.dll 100KB
-
bin/PenImc_cor3.dll.dll 138KB
-
bin/PresentationCore.dll.dll 7.6MB
-
bin/PresentationFramework-SystemCore.dll.dll 23KB
-
bin/PresentationFramework-SystemData.dll.dll 21KB
-
bin/PresentationFramework-SystemDrawing.dll.dll 19KB
-
bin/PresentationFramework-SystemXml.dll.dll 20KB
-
bin/PresentationFramework-SystemXmlLinq.dll.dll 16KB
-
bin/PresentationFramework.Aero.dll.dll 428KB
-
bin/PresentationFramework.Aero2.dll.dll 434KB
-
bin/PresentationFramework.AeroLite.dll.dll 220KB
-
bin/PresentationFramework.Classic.dll.dll 256KB
-
bin/PresentationFramework.Luna.dll.dll 646KB
-
bin/PresentationFramework.Royale.dll.dll 315KB
-
bin/PresentationFramework.dll.dll 14.1MB
-
bin/PresentationNative_cor3.dll.dll 918KB
-
bin/PresentationUI.dll.dll 1.2MB
-
bin/ReachFramework.dll.dll 1.4MB
-
bin/System.AppContext.dll.dll 13KB
-
bin/System.Buffers.dll.dll 13KB
-
bin/System.CodeDom.dll.dll 405KB
-
bin/System.Collections.Concurrent.dll.dll 168KB
-
bin/System.Collections.Immutable.dll.dll 566KB
-
bin/System.Collections.NonGeneric.dll.dll 84KB
-
bin/System.Collections.Specialized.dll.dll 80KB
-
bin/System.Collections.dll.dll 248KB
-
bin/System.ComponentModel.Annotations.dll.dll 154KB
-
bin/System.ComponentModel.Composition.dll.dll 266KB
-
bin/System.ComponentModel.DataAnnotations.dll.dll 15KB
-
bin/System.ComponentModel.EventBasedAsync.dll.dll 33KB
-
bin/System.ComponentModel.Primitives.dll.dll 55KB
-
bin/System.ComponentModel.TypeConverter.dll.dll 610KB
-
bin/System.ComponentModel.dll.dll 16KB
-
bin/System.Composition.AttributedModel.dll.dll 24KB
-
bin/System.Composition.Convention.dll.dll 57KB
-
bin/System.Composition.Hosting.dll.dll 60KB
-
bin/System.Composition.Runtime.dll.dll 29KB
-
bin/System.Composition.TypedParts.dll.dll 63KB
-
bin/System.Configuration.ConfigurationManager.dll.dll 840KB
-
bin/System.Configuration.dll.dll 18KB
-
bin/System.Console.dll.dll 135KB
-
bin/System.Core.dll.dll 23KB
-
bin/System.Data.Common.dll.dll 2.5MB
-
bin/System.Data.DataSetExtensions.dll.dll 14KB
-
bin/System.Data.dll.dll 25KB
-
bin/System.Design.dll.dll 19KB
-
bin/System.Diagnostics.Contracts.dll.dll 14KB
-
bin/System.Diagnostics.Debug.dll.dll 14KB
-
bin/System.Diagnostics.DiagnosticSource.dll.dll 161KB
-
bin/System.Diagnostics.EventLog.dll.dll 265KB
-
bin/System.Diagnostics.FileVersionInfo.dll.dll 27KB
-
bin/System.Diagnostics.PerformanceCounter.dll.dll 237KB
-
bin/System.Diagnostics.Process.dll.dll 236KB
-
bin/System.Diagnostics.StackTrace.dll.dll 31KB
-
bin/System.Diagnostics.TextWriterTraceListener.dll.dll 50KB
-
bin/System.Diagnostics.Tools.dll.dll 13KB
-
bin/System.Diagnostics.TraceSource.dll.dll 105KB
-
bin/System.Diagnostics.Tracing.dll.dll 14KB
-
bin/System.DirectoryServices.dll.dll 885KB
-
bin/System.Drawing.Common.dll.dll 879KB
-
bin/System.Drawing.Design.dll.dll 13KB
-
bin/System.Drawing.Primitives.dll.dll 111KB
-
bin/System.Drawing.dll.dll 20KB
-
bin/System.Dynamic.Runtime.dll.dll 14KB
-
bin/System.Formats.Asn1.dll.dll 166KB
-
bin/System.Globalization.Calendars.dll.dll 14KB
-
bin/System.Globalization.Extensions.dll.dll 14KB
-
bin/System.Globalization.dll.dll 14KB
-
bin/System.IO.Compression.Brotli.dll.dll 63KB
-
bin/System.IO.Compression.FileSystem.dll.dll 14KB
-
bin/System.IO.Compression.ZipFile.dll.dll 32KB
-
bin/System.IO.Compression.dll.dll 217KB
-
bin/System.IO.FileSystem.AccessControl.dll.dll 79KB
-
bin/System.IO.FileSystem.DriveInfo.dll.dll 36KB
-
bin/System.IO.FileSystem.Primitives.dll.dll 14KB
-
bin/System.IO.FileSystem.Watcher.dll.dll 63KB
-
bin/System.IO.FileSystem.dll.dll 190KB
-
bin/System.IO.IsolatedStorage.dll.dll 70KB
-
bin/System.IO.MemoryMappedFiles.dll.dll 59KB
-
bin/System.IO.Packaging.dll.dll 240KB
-
bin/System.IO.Pipes.AccessControl.dll.dll 14KB
-
bin/System.IO.Pipes.dll.dll 119KB
-
bin/System.IO.UnmanagedMemoryStream.dll.dll 13KB
-
bin/System.IO.dll.dll 14KB
-
bin/System.Linq.Expressions.dll.dll 4.4MB
-
bin/System.Linq.Parallel.dll.dll 1.1MB
-
bin/System.Linq.Queryable.dll.dll 168KB
-
bin/System.Linq.dll.dll 362KB
-
bin/System.Memory.dll.dll 191KB
-
bin/System.Net.Http.Json.dll.dll 45KB
-
bin/System.Net.Http.dll.dll 1.5MB
-
bin/System.Net.HttpListener.dll.dll 544KB
-
bin/System.Net.Mail.dll.dll 467KB
-
bin/System.Net.NameResolution.dll.dll 75KB
-
bin/System.Net.NetworkInformation.dll.dll 129KB
-
bin/System.Net.Ping.dll.dll 65KB
-
bin/System.Net.Primitives.dll.dll 185KB
-
bin/System.Net.Requests.dll.dll 299KB
-
bin/System.Net.Security.dll.dll 577KB
-
bin/System.Net.ServicePoint.dll.dll 31KB
-
bin/System.Net.Sockets.dll.dll 471KB
-
bin/System.Net.WebClient.dll.dll 137KB
-
bin/System.Net.WebHeaderCollection.dll.dll 53KB
-
bin/System.Net.WebProxy.dll.dll 24KB
-
bin/System.Net.WebSockets.Client.dll.dll 55KB
-
bin/System.Net.WebSockets.dll.dll 130KB
-
bin/System.Net.dll.dll 16KB
-
bin/System.Numerics.Vectors.dll.dll 14KB
-
bin/System.Numerics.dll.dll 14KB
-
bin/System.ObjectModel.dll.dll 79KB
-
bin/System.Printing.dll.dll 864KB
-
bin/System.Private.CoreLib.dll.dll 8.2MB
-
bin/System.Private.DataContractSerialization.dll.dll 1.8MB
-
bin/System.Private.Uri.dll.dll 225KB
-
bin/System.Private.Xml.Linq.dll.dll 341KB
-
bin/System.Private.Xml.dll.dll 7.2MB
-
bin/System.Reflection.DispatchProxy.dll.dll 62KB
-
bin/System.Reflection.Emit.ILGeneration.dll.dll 14KB
-
bin/System.Reflection.Emit.Lightweight.dll.dll 14KB
-
bin/System.Reflection.Emit.dll.dll 14KB
-
bin/System.Reflection.Extensions.dll.dll 13KB
-
bin/System.Reflection.Metadata.dll.dll 959KB
-
bin/System.Reflection.Primitives.dll.dll 14KB
-
bin/System.Reflection.TypeExtensions.dll.dll 29KB
-
bin/System.Reflection.dll.dll 14KB
-
bin/System.Resources.Extensions.dll.dll 106KB
-
bin/System.Resources.Reader.dll.dll 13KB
-
bin/System.Resources.ResourceManager.dll.dll 14KB
-
bin/System.Resources.Writer.dll.dll 39KB
-
bin/System.Runtime.CompilerServices.Unsafe.dll.dll 18KB
-
bin/System.Runtime.CompilerServices.VisualC.dll.dll 17KB
-
bin/System.Runtime.Extensions.dll.dll 16KB
-
bin/System.Runtime.Handles.dll.dll 14KB
-
bin/System.Runtime.InteropServices.RuntimeInformation.dll.dll 25KB
-
bin/System.Runtime.InteropServices.dll.dll 44KB
-
bin/System.Runtime.Intrinsics.dll.dll 15KB
-
bin/System.Runtime.Loader.dll.dll 13KB
-
bin/System.Runtime.Numerics.dll.dll 187KB
-
bin/System.Runtime.Serialization.Formatters.dll.dll 283KB
-
bin/System.Runtime.Serialization.Json.dll.dll 14KB
-
bin/System.Runtime.Serialization.Primitives.dll.dll 25KB
-
bin/System.Runtime.Serialization.Xml.dll.dll 15KB
-
bin/System.Runtime.Serialization.dll.dll 15KB
-
bin/System.Runtime.dll.dll 41KB
-
bin/System.Security.AccessControl.dll.dll 186KB
-
bin/System.Security.Claims.dll.dll 81KB
-
bin/System.Security.Cryptography.Algorithms.dll.dll 601KB
-
bin/System.Security.Cryptography.Cng.dll.dll 374KB
-
bin/System.Security.Cryptography.Csp.dll.dll 159KB
-
bin/System.Security.Cryptography.Encoding.dll.dll 82KB
-
bin/System.Security.Cryptography.OpenSsl.dll.dll 32KB
-
bin/System.Security.Cryptography.Pkcs.dll.dll 669KB
-
bin/System.Security.Cryptography.Primitives.dll.dll 98KB
-
bin/System.Security.Cryptography.ProtectedData.dll.dll 40KB
-
bin/System.Security.Cryptography.X509Certificates.dll.dll 385KB
-
bin/System.Security.Cryptography.Xml.dll.dll 368KB
-
bin/System.Security.Permissions.dll.dll 135KB
-
bin/System.Security.Principal.Windows.dll.dll 129KB
-
bin/System.Security.Principal.dll.dll 13KB
-
bin/System.Security.SecureString.dll.dll 13KB
-
bin/System.Security.dll.dll 17KB
-
bin/System.ServiceModel.Web.dll.dll 15KB
-
bin/System.ServiceProcess.dll.dll 14KB
-
bin/System.Text.Encoding.CodePages.dll.dll 829KB
-
bin/System.Text.Encoding.Extensions.dll.dll 14KB
-
bin/System.Text.Encoding.dll.dll 14KB
-
bin/System.Text.Encodings.Web.dll.dll 84KB
-
bin/System.Text.Json.dll.dll 776KB
-
bin/System.Text.RegularExpressions.dll.dll 456KB
-
bin/System.Threading.AccessControl.dll.dll 60KB
-
bin/System.Threading.Channels.dll.dll 103KB
-
bin/System.Threading.Overlapped.dll.dll 14KB
-
bin/System.Threading.Tasks.Dataflow.dll.dll 409KB
-
bin/System.Threading.Tasks.Extensions.dll.dll 14KB
-
bin/System.Threading.Tasks.Parallel.dll.dll 96KB
-
bin/System.Threading.Tasks.dll.dll 15KB
-
bin/System.Threading.Thread.dll.dll 14KB
-
bin/System.Threading.ThreadPool.dll.dll 14KB
-
bin/System.Threading.Timer.dll.dll 13KB
-
bin/System.Threading.dll.dll 71KB
-
bin/System.Transactions.Local.dll.dll 299KB
-
bin/System.Transactions.dll.dll 15KB
-
bin/System.ValueTuple.dll.dll 14KB
-
bin/System.Web.HttpUtility.dll.dll 46KB
-
bin/System.Web.dll.dll 14KB
-
bin/System.Windows.Controls.Ribbon.dll.dll 1.3MB
-
bin/System.Windows.Extensions.dll.dll 65KB
-
bin/System.Windows.Forms.Design.Editors.dll.dll 14KB
-
bin/System.Windows.Forms.Design.dll.dll 4.5MB
-
bin/System.Windows.Forms.Primitives.dll.dll 661KB
-
bin/System.Windows.Forms.dll.dll 11.5MB
-
bin/System.Windows.Input.Manipulations.dll.dll 112KB
-
bin/System.Windows.Presentation.dll.dll 17KB
-
bin/System.Windows.dll.dll 14KB
-
bin/System.Xaml.dll.dll 1.2MB
-
bin/System.Xml.Linq.dll.dll 14KB
-
bin/System.Xml.ReaderWriter.dll.dll 21KB
-
bin/System.Xml.Serialization.dll.dll 15KB
-
bin/System.Xml.XDocument.dll.dll 14KB
-
bin/System.Xml.XPath.XDocument.dll.dll 15KB
-
bin/System.Xml.XPath.dll.dll 14KB
-
bin/System.Xml.XmlDocument.dll.dll 14KB
-
bin/System.Xml.XmlSerializer.dll.dll 16KB
-
bin/System.Xml.dll.dll 23KB
-
bin/System.dll.dll 53KB
-
bin/Themes/blue.dntheme45KB
-
bin/Themes/dark.dntheme46KB
-
bin/Themes/hc.dntheme37KB
-
bin/Themes/light.dntheme17KB
-
bin/UIAutomationClient.dll.dll 356KB
-
bin/UIAutomationClientSideProviders.dll.dll 759KB
-
bin/UIAutomationProvider.dll.dll 45KB
-
bin/UIAutomationTypes.dll.dll 261KB
-
bin/WindowsBase.dll.dll 1.9MB
-
bin/WindowsFormsIntegration.dll.dll 179KB
-
bin/api-ms-win-core-console-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-console-l1-2-0.dll.dll 11KB
-
bin/api-ms-win-core-datetime-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-core-debug-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-core-errorhandling-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-core-file-l1-1-0.dll.dll 14KB
-
bin/api-ms-win-core-file-l1-2-0.dll.dll 10KB
-
bin/api-ms-win-core-file-l2-1-0.dll.dll 10KB
-
bin/api-ms-win-core-handle-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-heap-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-interlocked-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-libraryloader-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-localization-l1-2-0.dll.dll 13KB
-
bin/api-ms-win-core-memory-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-namedpipe-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-core-processenvironment-l1-1-0.dll.dll 12KB
-
bin/api-ms-win-core-processthreads-l1-1-0.dll.dll 13KB
-
bin/api-ms-win-core-processthreads-l1-1-1.dll.dll 11KB
-
bin/api-ms-win-core-profile-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-core-rtlsupport-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-core-string-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-synch-l1-1-0.dll.dll 13KB
-
bin/api-ms-win-core-synch-l1-2-0.dll.dll 11KB
-
bin/api-ms-win-core-sysinfo-l1-1-0.dll.dll 12KB
-
bin/api-ms-win-core-timezone-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-core-util-l1-1-0.dll.dll 10KB
-
bin/api-ms-win-crt-conio-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-crt-convert-l1-1-0.dll.dll 14KB
-
bin/api-ms-win-crt-environment-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-crt-filesystem-l1-1-0.dll.dll 12KB
-
bin/api-ms-win-crt-heap-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-crt-locale-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-crt-math-l1-1-0.dll.dll 21KB
-
bin/api-ms-win-crt-multibyte-l1-1-0.dll.dll 18KB
-
bin/api-ms-win-crt-private-l1-1-0.dll.dll 64KB
-
bin/api-ms-win-crt-process-l1-1-0.dll.dll 11KB
-
bin/api-ms-win-crt-runtime-l1-1-0.dll.dll 15KB
-
bin/api-ms-win-crt-stdio-l1-1-0.dll.dll 16KB
-
bin/api-ms-win-crt-string-l1-1-0.dll.dll 17KB
-
bin/api-ms-win-crt-time-l1-1-0.dll.dll 13KB
-
bin/api-ms-win-crt-utility-l1-1-0.dll.dll 11KB
-
bin/clrcompression.dll.dll 702KB
-
bin/clretwrc.dll.dll 256KB
-
bin/clrjit.dll.dll 1.1MB
-
bin/coreclr.dll.dll 4.0MB
-
bin/createdump.exe.exe 42KB
-
bin/cs/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 27KB
-
bin/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/cs/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/cs/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 264KB
-
bin/cs/Microsoft.CodeAnalysis.Features.resources.dll.dll 67KB
-
bin/cs/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/cs/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 96KB
-
bin/cs/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/cs/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 282KB
-
bin/cs/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 31KB
-
bin/cs/Microsoft.CodeAnalysis.resources.dll.dll 32KB
-
bin/cs/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/cs/Microsoft.VisualStudio.Composition.resources.dll.dll 22KB
-
bin/cs/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/cs/PresentationCore.resources.dll.dll 104KB
-
bin/cs/PresentationFramework.resources.dll.dll 191KB
-
bin/cs/PresentationUI.resources.dll.dll 43KB
-
bin/cs/ReachFramework.resources.dll.dll 36KB
-
bin/cs/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/cs/System.Windows.Forms.Design.resources.dll.dll 132KB
-
bin/cs/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/cs/System.Windows.Forms.resources.dll.dll 347KB
-
bin/cs/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/cs/System.Xaml.resources.dll.dll 62KB
-
bin/cs/UIAutomationClient.resources.dll.dll 18KB
-
bin/cs/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/cs/UIAutomationProvider.resources.dll.dll 13KB
-
bin/cs/UIAutomationTypes.resources.dll.dll 16KB
-
bin/cs/WindowsBase.resources.dll.dll 83KB
-
bin/cs/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/cs/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/cs/dnSpy.AsmEditor.x.resources.dll.dll 59KB
-
bin/cs/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/cs/dnSpy.Console.resources.dll.dll 10KB
-
bin/cs/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/cs/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/cs/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/cs/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/cs/dnSpy.Debugger.DotNet.x.resources.dll.dll 6KB
-
bin/cs/dnSpy.Debugger.x.resources.dll.dll 43KB
-
bin/cs/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/cs/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/cs/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/cs/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/cs/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/cs/dnSpy.resources.dll.dll 52KB
-
bin/dbgshim.dll.dll 104KB
-
bin/de/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 27KB
-
bin/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/de/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/de/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 281KB
-
bin/de/Microsoft.CodeAnalysis.Features.resources.dll.dll 70KB
-
bin/de/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/de/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 99KB
-
bin/de/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/de/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 297KB
-
bin/de/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 32KB
-
bin/de/Microsoft.CodeAnalysis.resources.dll.dll 33KB
-
bin/de/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/de/Microsoft.VisualStudio.Composition.resources.dll.dll 23KB
-
bin/de/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/de/PresentationCore.resources.dll.dll 110KB
-
bin/de/PresentationFramework.resources.dll.dll 207KB
-
bin/de/PresentationUI.resources.dll.dll 44KB
-
bin/de/ReachFramework.resources.dll.dll 37KB
-
bin/de/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/de/System.Windows.Forms.Design.resources.dll.dll 132KB
-
bin/de/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/de/System.Windows.Forms.resources.dll.dll 354KB
-
bin/de/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/de/System.Xaml.resources.dll.dll 65KB
-
bin/de/UIAutomationClient.resources.dll.dll 18KB
-
bin/de/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/de/UIAutomationProvider.resources.dll.dll 13KB
-
bin/de/UIAutomationTypes.resources.dll.dll 16KB
-
bin/de/WindowsBase.resources.dll.dll 87KB
-
bin/de/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/de/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/de/dnSpy.AsmEditor.x.resources.dll.dll 60KB
-
bin/de/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/de/dnSpy.Console.resources.dll.dll 10KB
-
bin/de/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/de/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/de/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/de/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/de/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/de/dnSpy.Debugger.x.resources.dll.dll 43KB
-
bin/de/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/de/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/de/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/de/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/de/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/de/dnSpy.resources.dll.dll 53KB
-
bin/debug/DotNet.ex.xml34KB
-
bin/dnSpy.Analyzer.x.deps.json56KB
-
bin/dnSpy.Analyzer.x.dll.dll 164KB
-
bin/dnSpy.Analyzer.x.pdb58KB
-
bin/dnSpy.AsmEditor.x.deps.json58KB
-
bin/dnSpy.AsmEditor.x.dll.dll 1.8MB
-
bin/dnSpy.AsmEditor.x.pdb453KB
-
bin/dnSpy.BamlDecompiler.x.deps.json59KB
-
bin/dnSpy.BamlDecompiler.x.dll.dll 242KB
-
bin/dnSpy.BamlDecompiler.x.pdb63KB
-
bin/dnSpy.Console.deps.json45KB
-
bin/dnSpy.Console.dll.exe 54KB
-
bin/dnSpy.Console.pdb22KB
-
bin/dnSpy.Console.runtimeconfig.json274B
-
bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.dll.dll 10KB
-
bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.pdb14KB
-
bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.xml.xml 9KB
-
bin/dnSpy.Contracts.Debugger.DotNet.Mono.dll.dll 10KB
-
bin/dnSpy.Contracts.Debugger.DotNet.Mono.pdb14KB
-
bin/dnSpy.Contracts.Debugger.DotNet.Mono.xml.xml 10KB
-
bin/dnSpy.Contracts.Debugger.DotNet.dll.dll 53KB
-
bin/dnSpy.Contracts.Debugger.DotNet.pdb31KB
-
bin/dnSpy.Contracts.Debugger.DotNet.xml.xml 189KB
-
bin/dnSpy.Contracts.Debugger.dll.dll 137KB
-
bin/dnSpy.Contracts.Debugger.pdb53KB
-
bin/dnSpy.Contracts.Debugger.xml.xml 528KB
-
bin/dnSpy.Contracts.DnSpy.dll.dll 945KB
-
bin/dnSpy.Contracts.DnSpy.pdb302KB
-
bin/dnSpy.Contracts.DnSpy.xml.xml 2.2MB
-
bin/dnSpy.Contracts.Logic.dll.dll 191KB
-
bin/dnSpy.Contracts.Logic.pdb64KB
-
bin/dnSpy.Contracts.Logic.xml.xml 216KB
-
bin/dnSpy.Debugger.DotNet.CorDebug.x.deps.json60KB
-
bin/dnSpy.Debugger.DotNet.CorDebug.x.dll.dll 572KB
-
bin/dnSpy.Debugger.DotNet.CorDebug.x.pdb223KB
-
bin/dnSpy.Debugger.DotNet.Interpreter.dll.dll 66KB
-
bin/dnSpy.Debugger.DotNet.Interpreter.pdb28KB
-
bin/dnSpy.Debugger.DotNet.Interpreter.xml.xml 51KB
-
bin/dnSpy.Debugger.DotNet.Metadata.dll.dll 364KB
-
bin/dnSpy.Debugger.DotNet.Metadata.pdb175KB
-
bin/dnSpy.Debugger.DotNet.Metadata.xml.xml 292KB
-
bin/dnSpy.Debugger.DotNet.Mono.x.deps.json59KB
-
bin/dnSpy.Debugger.DotNet.Mono.x.dll.dll 221KB
-
bin/dnSpy.Debugger.DotNet.Mono.x.pdb95KB
-
bin/dnSpy.Debugger.DotNet.x.deps.json60KB
-
bin/dnSpy.Debugger.DotNet.x.dll.dll 269KB
-
bin/dnSpy.Debugger.DotNet.x.pdb115KB
-
bin/dnSpy.Debugger.x.deps.json57KB
-
bin/dnSpy.Debugger.x.dll.dll 1.1MB
-
bin/dnSpy.Debugger.x.pdb383KB
-
bin/dnSpy.Decompiler.ILSpy.Core.dll.dll 94KB
-
bin/dnSpy.Decompiler.ILSpy.Core.pdb36KB
-
bin/dnSpy.Decompiler.ILSpy.x.deps.json62KB
-
bin/dnSpy.Decompiler.ILSpy.x.dll.dll 35KB
-
bin/dnSpy.Decompiler.ILSpy.x.pdb19KB
-
bin/dnSpy.Decompiler.dll.dll 204KB
-
bin/dnSpy.Decompiler.pdb74KB
-
bin/dnSpy.Images.dll.dll 471KB
-
bin/dnSpy.Images.pdb11KB
-
bin/dnSpy.Roslyn.CSharp.EditorFeatures.dll.dll 7KB
-
bin/dnSpy.Roslyn.CSharp.EditorFeatures.pdb15KB
-
bin/dnSpy.Roslyn.CSharp.Internal.dll.dll 18KB
-
bin/dnSpy.Roslyn.CSharp.Internal.pdb14KB
-
bin/dnSpy.Roslyn.EditorFeatures.dll.dll 23KB
-
bin/dnSpy.Roslyn.EditorFeatures.pdb21KB
-
bin/dnSpy.Roslyn.Internal.dll.dll 51KB
-
bin/dnSpy.Roslyn.Internal.pdb22KB
-
bin/dnSpy.Roslyn.VisualBasic.EditorFeatures.dll.dll 8KB
-
bin/dnSpy.Roslyn.VisualBasic.EditorFeatures.pdb15KB
-
bin/dnSpy.Roslyn.VisualBasic.Internal.dll.dll 31KB
-
bin/dnSpy.Roslyn.VisualBasic.Internal.pdb16KB
-
bin/dnSpy.Roslyn.dll.dll 349KB
-
bin/dnSpy.Roslyn.pdb141KB
-
bin/dnSpy.Roslyn.xml.xml 34KB
-
bin/dnSpy.Scripting.Roslyn.x.deps.json183KB
-
bin/dnSpy.Scripting.Roslyn.x.dll.dll 78KB
-
bin/dnSpy.Scripting.Roslyn.x.pdb35KB
-
bin/dnSpy.deps.json172KB
-
bin/dnSpy.dll.exe 3.5MB
-
bin/dnSpy.pdb1.0MB
-
bin/dnSpy.runtimeconfig.json274B
-
bin/dnlib.dll.dll 1.1MB
-
bin/es-ES/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/es-ES/dnSpy.AsmEditor.x.resources.dll.dll 60KB
-
bin/es-ES/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/es-ES/dnSpy.Console.resources.dll.dll 10KB
-
bin/es-ES/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/es-ES/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/es-ES/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/es-ES/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/es-ES/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/es-ES/dnSpy.Debugger.x.resources.dll.dll 44KB
-
bin/es-ES/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/es-ES/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/es-ES/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/es-ES/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/es-ES/dnSpy.Scripting.Roslyn.x.resources.dll.dll 9KB
-
bin/es-ES/dnSpy.resources.dll.dll 54KB
-
bin/es/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 27KB
-
bin/es/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/es/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/es/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 274KB
-
bin/es/Microsoft.CodeAnalysis.Features.resources.dll.dll 69KB
-
bin/es/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/es/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 99KB
-
bin/es/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/es/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 292KB
-
bin/es/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 32KB
-
bin/es/Microsoft.CodeAnalysis.resources.dll.dll 33KB
-
bin/es/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/es/Microsoft.VisualStudio.Composition.resources.dll.dll 22KB
-
bin/es/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/es/PresentationCore.resources.dll.dll 106KB
-
bin/es/PresentationFramework.resources.dll.dll 197KB
-
bin/es/PresentationUI.resources.dll.dll 43KB
-
bin/es/ReachFramework.resources.dll.dll 37KB
-
bin/es/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/es/System.Windows.Forms.Design.resources.dll.dll 132KB
-
bin/es/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/es/System.Windows.Forms.resources.dll.dll 347KB
-
bin/es/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/es/System.Xaml.resources.dll.dll 63KB
-
bin/es/UIAutomationClient.resources.dll.dll 18KB
-
bin/es/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/es/UIAutomationProvider.resources.dll.dll 13KB
-
bin/es/UIAutomationTypes.resources.dll.dll 16KB
-
bin/es/WindowsBase.resources.dll.dll 86KB
-
bin/es/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/fa/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/fa/dnSpy.AsmEditor.x.resources.dll.dll 65KB
-
bin/fa/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/fa/dnSpy.Console.resources.dll.dll 11KB
-
bin/fa/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/fa/dnSpy.Contracts.Logic.resources.dll.dll 7KB
-
bin/fa/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/fa/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 9KB
-
bin/fa/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/fa/dnSpy.Debugger.x.resources.dll.dll 47KB
-
bin/fa/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 10KB
-
bin/fa/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/fa/dnSpy.Decompiler.resources.dll.dll 8KB
-
bin/fa/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/fa/dnSpy.Scripting.Roslyn.x.resources.dll.dll 9KB
-
bin/fa/dnSpy.resources.dll.dll 58KB
-
bin/fr/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 27KB
-
bin/fr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/fr/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/fr/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 280KB
-
bin/fr/Microsoft.CodeAnalysis.Features.resources.dll.dll 70KB
-
bin/fr/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/fr/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 99KB
-
bin/fr/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/fr/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 299KB
-
bin/fr/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 33KB
-
bin/fr/Microsoft.CodeAnalysis.resources.dll.dll 33KB
-
bin/fr/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/fr/Microsoft.VisualStudio.Composition.resources.dll.dll 23KB
-
bin/fr/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/fr/PresentationCore.resources.dll.dll 109KB
-
bin/fr/PresentationFramework.resources.dll.dll 201KB
-
bin/fr/PresentationUI.resources.dll.dll 44KB
-
bin/fr/ReachFramework.resources.dll.dll 37KB
-
bin/fr/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/fr/System.Windows.Forms.Design.resources.dll.dll 133KB
-
bin/fr/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/fr/System.Windows.Forms.resources.dll.dll 353KB
-
bin/fr/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/fr/System.Xaml.resources.dll.dll 64KB
-
bin/fr/UIAutomationClient.resources.dll.dll 18KB
-
bin/fr/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/fr/UIAutomationProvider.resources.dll.dll 13KB
-
bin/fr/UIAutomationTypes.resources.dll.dll 16KB
-
bin/fr/WindowsBase.resources.dll.dll 87KB
-
bin/fr/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/fr/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/fr/dnSpy.AsmEditor.x.resources.dll.dll 61KB
-
bin/fr/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/fr/dnSpy.Console.resources.dll.dll 10KB
-
bin/fr/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/fr/dnSpy.Contracts.Logic.resources.dll.dll 7KB
-
bin/fr/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/fr/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/fr/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/fr/dnSpy.Debugger.x.resources.dll.dll 44KB
-
bin/fr/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/fr/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/fr/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/fr/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/fr/dnSpy.Scripting.Roslyn.x.resources.dll.dll 9KB
-
bin/fr/dnSpy.resources.dll.dll 54KB
-
bin/hostfxr.dll.dll 380KB
-
bin/hostpolicy.dll.dll 381KB
-
bin/hu/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/hu/dnSpy.AsmEditor.x.resources.dll.dll 61KB
-
bin/hu/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/hu/dnSpy.Console.resources.dll.dll 10KB
-
bin/hu/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/hu/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/hu/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/hu/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/hu/dnSpy.Debugger.DotNet.x.resources.dll.dll 6KB
-
bin/hu/dnSpy.Debugger.x.resources.dll.dll 44KB
-
bin/hu/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 10KB
-
bin/hu/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/hu/dnSpy.Decompiler.resources.dll.dll 8KB
-
bin/hu/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/hu/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/hu/dnSpy.resources.dll.dll 54KB
-
bin/it/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 27KB
-
bin/it/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/it/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/it/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 279KB
-
bin/it/Microsoft.CodeAnalysis.Features.resources.dll.dll 69KB
-
bin/it/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/it/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 98KB
-
bin/it/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/it/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 297KB
-
bin/it/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 32KB
-
bin/it/Microsoft.CodeAnalysis.resources.dll.dll 33KB
-
bin/it/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/it/Microsoft.VisualStudio.Composition.resources.dll.dll 22KB
-
bin/it/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/it/PresentationCore.resources.dll.dll 107KB
-
bin/it/PresentationFramework.resources.dll.dll 199KB
-
bin/it/PresentationUI.resources.dll.dll 43KB
-
bin/it/ReachFramework.resources.dll.dll 37KB
-
bin/it/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/it/System.Windows.Forms.Design.resources.dll.dll 133KB
-
bin/it/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/it/System.Windows.Forms.resources.dll.dll 349KB
-
bin/it/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/it/System.Xaml.resources.dll.dll 63KB
-
bin/it/UIAutomationClient.resources.dll.dll 18KB
-
bin/it/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/it/UIAutomationProvider.resources.dll.dll 13KB
-
bin/it/UIAutomationTypes.resources.dll.dll 16KB
-
bin/it/WindowsBase.resources.dll.dll 88KB
-
bin/it/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/it/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/it/dnSpy.AsmEditor.x.resources.dll.dll 59KB
-
bin/it/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/it/dnSpy.Console.resources.dll.dll 10KB
-
bin/it/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/it/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/it/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/it/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/it/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/it/dnSpy.Debugger.x.resources.dll.dll 44KB
-
bin/it/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/it/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/it/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/it/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/it/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/it/dnSpy.resources.dll.dll 53KB
-
bin/mscordaccore.dll.dll 965KB
-
bin/mscordaccore_x86_x86_5.0.20.51904.dll.dll 965KB
-
bin/mscordbi.dll.dll 964KB
-
bin/mscorlib.dll.dll 55KB
-
bin/mscorrc.dll.dll 138KB
-
bin/netstandard.dll.dll 111KB
-
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 27KB
-
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 271KB
-
bin/pt-BR/Microsoft.CodeAnalysis.Features.resources.dll.dll 68KB
-
bin/pt-BR/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/pt-BR/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 98KB
-
bin/pt-BR/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/pt-BR/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 287KB
-
bin/pt-BR/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 32KB
-
bin/pt-BR/Microsoft.CodeAnalysis.resources.dll.dll 32KB
-
bin/pt-BR/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/pt-BR/Microsoft.VisualStudio.Composition.resources.dll.dll 22KB
-
bin/pt-BR/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/pt-BR/PresentationCore.resources.dll.dll 105KB
-
bin/pt-BR/PresentationFramework.resources.dll.dll 196KB
-
bin/pt-BR/PresentationUI.resources.dll.dll 43KB
-
bin/pt-BR/ReachFramework.resources.dll.dll 36KB
-
bin/pt-BR/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/pt-BR/System.Windows.Forms.Design.resources.dll.dll 132KB
-
bin/pt-BR/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/pt-BR/System.Windows.Forms.resources.dll.dll 340KB
-
bin/pt-BR/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/pt-BR/System.Xaml.resources.dll.dll 62KB
-
bin/pt-BR/UIAutomationClient.resources.dll.dll 18KB
-
bin/pt-BR/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/pt-BR/UIAutomationProvider.resources.dll.dll 13KB
-
bin/pt-BR/UIAutomationTypes.resources.dll.dll 16KB
-
bin/pt-BR/WindowsBase.resources.dll.dll 85KB
-
bin/pt-BR/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/pt-BR/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/pt-BR/dnSpy.AsmEditor.x.resources.dll.dll 59KB
-
bin/pt-BR/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/pt-BR/dnSpy.Console.resources.dll.dll 10KB
-
bin/pt-BR/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/pt-BR/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/pt-BR/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/pt-BR/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/pt-BR/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/pt-BR/dnSpy.Debugger.x.resources.dll.dll 43KB
-
bin/pt-BR/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/pt-BR/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/pt-BR/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/pt-BR/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/pt-BR/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/pt-BR/dnSpy.resources.dll.dll 53KB
-
bin/pt-PT/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/pt-PT/dnSpy.AsmEditor.x.resources.dll.dll 59KB
-
bin/pt-PT/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/pt-PT/dnSpy.Console.resources.dll.dll 10KB
-
bin/pt-PT/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/pt-PT/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/pt-PT/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/pt-PT/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/pt-PT/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/pt-PT/dnSpy.Debugger.x.resources.dll.dll 43KB
-
bin/pt-PT/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/pt-PT/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/pt-PT/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/pt-PT/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/pt-PT/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/pt-PT/dnSpy.resources.dll.dll 53KB
-
bin/ru/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 30KB
-
bin/ru/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 15KB
-
bin/ru/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 15KB
-
bin/ru/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 370KB
-
bin/ru/Microsoft.CodeAnalysis.Features.resources.dll.dll 82KB
-
bin/ru/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 16KB
-
bin/ru/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 117KB
-
bin/ru/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 24KB
-
bin/ru/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 383KB
-
bin/ru/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 36KB
-
bin/ru/Microsoft.CodeAnalysis.resources.dll.dll 39KB
-
bin/ru/Microsoft.VisualBasic.Forms.resources.dll.dll 24KB
-
bin/ru/Microsoft.VisualStudio.Composition.resources.dll.dll 25KB
-
bin/ru/Microsoft.VisualStudio.Validation.resources.dll.dll 14KB
-
bin/ru/PresentationCore.resources.dll.dll 133KB
-
bin/ru/PresentationFramework.resources.dll.dll 250KB
-
bin/ru/PresentationUI.resources.dll.dll 51KB
-
bin/ru/ReachFramework.resources.dll.dll 41KB
-
bin/ru/System.Windows.Controls.Ribbon.resources.dll.dll 17KB
-
bin/ru/System.Windows.Forms.Design.resources.dll.dll 143KB
-
bin/ru/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/ru/System.Windows.Forms.resources.dll.dll 452KB
-
bin/ru/System.Windows.Input.Manipulations.resources.dll.dll 15KB
-
bin/ru/System.Xaml.resources.dll.dll 81KB
-
bin/ru/UIAutomationClient.resources.dll.dll 19KB
-
bin/ru/UIAutomationClientSideProviders.resources.dll.dll 20KB
-
bin/ru/UIAutomationProvider.resources.dll.dll 13KB
-
bin/ru/UIAutomationTypes.resources.dll.dll 17KB
-
bin/ru/WindowsBase.resources.dll.dll 108KB
-
bin/ru/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/ru/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/ru/dnSpy.AsmEditor.x.resources.dll.dll 70KB
-
bin/ru/dnSpy.BamlDecompiler.x.resources.dll.dll 5KB
-
bin/ru/dnSpy.Console.resources.dll.dll 11KB
-
bin/ru/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/ru/dnSpy.Contracts.Logic.resources.dll.dll 7KB
-
bin/ru/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 10KB
-
bin/ru/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 9KB
-
bin/ru/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/ru/dnSpy.Debugger.x.resources.dll.dll 51KB
-
bin/ru/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 11KB
-
bin/ru/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/ru/dnSpy.Decompiler.resources.dll.dll 8KB
-
bin/ru/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/ru/dnSpy.Scripting.Roslyn.x.resources.dll.dll 9KB
-
bin/ru/dnSpy.resources.dll.dll 61KB
-
bin/tr/Microsoft.CodeAnalysis.CSharp.Features.resources.dll.dll 26KB
-
bin/tr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll.dll 14KB
-
bin/tr/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll.dll 14KB
-
bin/tr/Microsoft.CodeAnalysis.CSharp.resources.dll.dll 267KB
-
bin/tr/Microsoft.CodeAnalysis.Features.resources.dll.dll 69KB
-
bin/tr/Microsoft.CodeAnalysis.Scripting.resources.dll.dll 15KB
-
bin/tr/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll.dll 98KB
-
bin/tr/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll.dll 22KB
-
bin/tr/Microsoft.CodeAnalysis.VisualBasic.resources.dll.dll 283KB
-
bin/tr/Microsoft.CodeAnalysis.Workspaces.resources.dll.dll 32KB
-
bin/tr/Microsoft.CodeAnalysis.resources.dll.dll 32KB
-
bin/tr/Microsoft.VisualBasic.Forms.resources.dll.dll 23KB
-
bin/tr/Microsoft.VisualStudio.Composition.resources.dll.dll 22KB
-
bin/tr/Microsoft.VisualStudio.Validation.resources.dll.dll 13KB
-
bin/tr/PresentationCore.resources.dll.dll 103KB
-
bin/tr/PresentationFramework.resources.dll.dll 190KB
-
bin/tr/PresentationUI.resources.dll.dll 42KB
-
bin/tr/ReachFramework.resources.dll.dll 36KB
-
bin/tr/System.Windows.Controls.Ribbon.resources.dll.dll 16KB
-
bin/tr/System.Windows.Forms.Design.resources.dll.dll 131KB
-
bin/tr/System.Windows.Forms.Primitives.resources.dll.dll 13KB
-
bin/tr/System.Windows.Forms.resources.dll.dll 342KB
-
bin/tr/System.Windows.Input.Manipulations.resources.dll.dll 14KB
-
bin/tr/System.Xaml.resources.dll.dll 62KB
-
bin/tr/UIAutomationClient.resources.dll.dll 18KB
-
bin/tr/UIAutomationClientSideProviders.resources.dll.dll 19KB
-
bin/tr/UIAutomationProvider.resources.dll.dll 13KB
-
bin/tr/UIAutomationTypes.resources.dll.dll 16KB
-
bin/tr/WindowsBase.resources.dll.dll 82KB
-
bin/tr/WindowsFormsIntegration.resources.dll.dll 14KB
-
bin/tr/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/tr/dnSpy.AsmEditor.x.resources.dll.dll 59KB
-
bin/tr/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/tr/dnSpy.Console.resources.dll.dll 10KB
-
bin/tr/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/tr/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/tr/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/tr/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/tr/dnSpy.Debugger.DotNet.x.resources.dll.dll 6KB
-
bin/tr/dnSpy.Debugger.x.resources.dll.dll 43KB
-
bin/tr/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/tr/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/tr/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/tr/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/tr/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/tr/dnSpy.resources.dll.dll 53KB
-
bin/ucrtbase.dll.dll 1.1MB
-
bin/uk/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/uk/dnSpy.AsmEditor.x.resources.dll.dll 69KB
-
bin/uk/dnSpy.BamlDecompiler.x.resources.dll.dll 5KB
-
bin/uk/dnSpy.Console.resources.dll.dll 11KB
-
bin/uk/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/uk/dnSpy.Contracts.Logic.resources.dll.dll 7KB
-
bin/uk/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 9KB
-
bin/uk/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 9KB
-
bin/uk/dnSpy.Debugger.DotNet.x.resources.dll.dll 7KB
-
bin/uk/dnSpy.Debugger.x.resources.dll.dll 50KB
-
bin/uk/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 10KB
-
bin/uk/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/uk/dnSpy.Decompiler.resources.dll.dll 8KB
-
bin/uk/dnSpy.Roslyn.resources.dll.dll 8KB
-
bin/uk/dnSpy.Scripting.Roslyn.x.resources.dll.dll 9KB
-
bin/uk/dnSpy.resources.dll.dll 61KB
-
bin/vcruntime140_cor3.dll.dll 74KB
-
bin/wpfgfx_cor3.dll.dll 1.8MB
-
bin/zh-CN/dnSpy.Analyzer.x.resources.dll.dll 6KB
-
bin/zh-CN/dnSpy.AsmEditor.x.resources.dll.dll 57KB
-
bin/zh-CN/dnSpy.BamlDecompiler.x.resources.dll.dll 4KB
-
bin/zh-CN/dnSpy.Console.resources.dll.dll 9KB
-
bin/zh-CN/dnSpy.Contracts.DnSpy.resources.dll.dll 6KB
-
bin/zh-CN/dnSpy.Contracts.Logic.resources.dll.dll 6KB
-
bin/zh-CN/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll.dll 8KB
-
bin/zh-CN/dnSpy.Debugger.DotNet.Mono.x.resources.dll.dll 8KB
-
bin/zh-CN/dnSpy.Debugger.DotNet.x.resources.dll.dll 6KB
-
bin/zh-CN/dnSpy.Debugger.x.resources.dll.dll 41KB
-
bin/zh-CN/dnSpy.Decompiler.ILSpy.Core.resources.dll.dll 9KB
-
bin/zh-CN/dnSpy.Decompiler.ILSpy.x.resources.dll.dll 4KB
-
bin/zh-CN/dnSpy.Decompiler.resources.dll.dll 7KB
-
bin/zh-CN/dnSpy.Roslyn.resources.dll.dll 7KB
-
bin/zh-CN/dnSpy.Scripting.Roslyn.x.resources.dll.dll 8KB
-
bin/zh-CN/dnSpy.resources.dll.dll 51KB
-
dnSpy.Console.exe.exe 110KB
-
dnSpy.exe.exe 178KB
bin/API-MS-Win-core-xstate-l2-1-0.dll
- SHA256 7c3ac1d0edca143f9d72ef91a1e148482bdc6f2fb62a14e62044f40c9c3c79e1
- MD5 2cff9f45aa9698aedbab42cdb266d0fc
- SHA1 69da7348204afadecba88a70def9172daf6641c9
- SHA512 9c30ccb6f6da03c7444994972183b395c781620ba52dbc42c677ac663cba2c2f98946dee075044046d2af2065114d183945d78b6e841a477cfe399ddb493e0d8
- SSDEEP 192:uf5baWphWiWSawTyihVWQ4eWua8d90884LfqnajJNv8:uf5baWphW/wGyXJJllNv8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
04:4c:83:b4:e8:0d:5d:2e:03:3c:4d:b1:57:ed:de:14:9c:4c:d6:9b:d3:11:85:31:12:e6:4f:80:3a:86:3d:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-xstate-l2-1-0.pdb
CopyContext
GetEnabledXStateFeatures
GetXStateFeaturesMask
InitializeContext
LocateXStateFeature
SetXStateFeaturesMask
Name
.text
Size
1024B
Virtual Size
714B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/Accessibility.dll
- SHA256 759cc60cd64286916cb932a89317ee8697232014a4373b8f10bd4f756cccea45
- MD5 c46e0413edba49fcb022f2059b8328c7
- SHA1 c244c02b1eadb71dd7e389de16273e660dd1beed
- SHA512 20010408973909dc4cf1a0ac74cfe370f89178117d5ea256634f9fe6074883bf9997aeccf61b8da2bc10668e98decfa2d1e335bc9d9b2790b17ef06a27989a18
- SSDEEP 384:UWI/W82MkSiVKmE+FNZgOcHi8jdHRN7CGlGseoR:2NEEfOcHfRs0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3a:f0:de:d6:1a:65:65:c2:69:3c:f0:3e:7f:36:47:f8:dc:1e:00:b5:33:99:b0:ba:f4:18:1d:9a:9c:f6:1d:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Accessibility.ni.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/CSharpInteractive.rsp
- SHA256 baeefcf96b6358cf8dbf2b1fb8a89cb6cf70ce7ea045aa5ddb6718738b9a13cd
- MD5 5ac1a8681b95fbcf1079586bd673603f
- SHA1 596342cca54628098d493057bd45aee773c08aed
- SHA512 9bf646e3b433b0ac4e95ecc77a578423b4cfa5f8221b1551e457941e441b8b289a7846f3ad051d1b0a9c7e2401dbbe79522a8e95769efe2e91ba0713547eb6ac
- MD5 SHA1 SHA512
bin/D3DCompiler_47_cor3.dll
- IMPHASH 131726669bc1e34b495edb4198d0aca3
- SHA256 2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df
- MD5 2f2e363c9a9baa0a9626db374cc4e8a4
- SHA1 17f405e81e5fce4c5a02ca049f7bd48b31674c8f
- SHA512 e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924
- SSDEEP 49152:sXMoHAsisjBFjJMLhHELxJm8ZU8W/GBj5Z535TMpinAizxkl/cD11bqCG7jHbOkD:srZOb8W/G5hnAizxz7NZy9AG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:fd:01:43:fb:3f:28:db:1a:79:dd:4e:ec:6f:02:e3:6a:7b:f8:0a:6a:11:aa:c0:cf:63:6d:f7:5f:16:7a:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
2809424
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_47.pdb
api-ms-win-crt-string-l1-1-0
wcsncmp
strnlen
__isascii
strncmp
memset
api-ms-win-crt-math-l1-1-0
_finite
_isnan
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_controlfp
_clearfp
api-ms-win-crt-private-l1-1-0
_o__atoi64
_o__callnewh
_o__cexit
_o__chsize_s
_o__CIacos
_o__CIasin
_o__CIatan
_o__CIatan2
_o__CIcos
_o__CIcosh
_o__CIexp
_o__CIfmod
_o__CIlog
_o__CIpow
_o__CIsin
_o__CIsinh
_o__CIsqrt
_o__CItan
_o__CItanh
_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_fclose
_o_floor
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_malloc
_o_modf
_o_qsort
_o_setlocale
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
_except_handler4_common
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
wcschr
wcsrchr
__CxxFrameHandler3
kernel32
FlushViewOfFile
MapViewOfFileEx
SetFilePointer
CreateFileA
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
SetEvent
GetModuleFileNameA
ResetEvent
WaitForSingleObjectEx
CreateEventW
LocalFree
LocalAlloc
LoadLibraryExW
lstrcmpiA
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
FreeLibrary
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
HeapCreate
GetProcAddress
GetEnvironmentVariableA
advapi32
CryptDestroyHash
RegEnumKeyExA
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegQueryValueExA
CryptAcquireContextW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
api-ms-win-crt-time-l1-1-0
_time32
rpcrt4
UuidCreate
D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=57, id=261, version=23524,
count=1, id=260, version=23524,
count=2, id=257, version=27412,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1208, id=1, productName=Unmarked objects,
count=14, id=259, version=27412,
count=14, id=260, version=27412,
count=1, id=256, version=27412,
count=135, id=265, version=27412,
count=30, id=261, version=27412,
count=3, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/DirectWriteForwarder.dll
- SHA256 f8974f43e3253f023240d5f08ca762fb48d91ae01049ee58485e269db60c5ed8
- MD5 9efdf7e3043bedac1def2e1fb35d8d47
- SHA1 33129887e03d39a55c743bca284d5f8fb7c958f0
- SHA512 f19590dff98cbba08bce9d50e5942158af1c85c2e644f942495ffdc57babae8305f6d0b447e3f178be535784927d8b213e8669c0004629a27daa95e1833b37bc
- SSDEEP 6144:9ka6w3d6ZS1IdfNJ+U5lrFufY8voZizIYH4BH95deXRiIU8ZcNVSb7Ang5dn/lx0:9kG6ZfR3Zqpp1OPJXo6TbiPah
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1c:6f:aa:38:9c:a1:c6:7e:52:a3:cc:dd:1e:f1:60:b0:41:76:9a:14:b4:a6:af:73:00:d2:29:2d:a7:c2:dc:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DirectWriteForwarder.ni.pdb
F:\workspace\_work\1\s\artifacts\bin\DirectWriteForwarder\Release\netcoreapp5.0\DirectWriteForwarder.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
444KB
Virtual Size
443KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/FileLists/DOTNET Framework v3.5 Client.FileList.xml
- SHA256 fa14abf50db893120df43b6ad9e05d31b74556fdc546088a4c6ee8a64d1fa7cd
- MD5 ab73d16c5b4545a188b9a48969b48629
- SHA1 08e0ed2bc1cfbb9856ce317b06d6468bae830560
- SHA512 02c500ec5afa21ec19854699b4a394d8ba64427ef5c90bd1b945d39f1e25d43a2f803281b0e9e26399592b420e5c769bfd4ad878a474cf0ed617647fb9f690c7
- SSDEEP 96:weeHDrxn+h73B25E5U1Q9GH4s60umghF98ixIueWmu/yYMTe:7eiU1Q9GH4s67mghv8ixIueWmu/yYMTe
- MD5 SHA1 SHA512 SSDEEP
bin/FileLists/DOTNET Framework v4.0 Client.FileList.xml
- SHA256 93010c11cc6ee44b5c5f2b025c0ae80054f5488c787167d26c93af0a430bdb9b
- MD5 89feed0b0471c125b6136dd5e8b1bd33
- SHA1 fe72409f9d51bbf5f2dd103152d50c80b31f88c5
- SHA512 63defd1e22f87d25753fab3f1974a38438bb7463c9d79934324e81a10eb60c172bfe7ba8200bb9f721d9840ae57b25579171308d7b49f4439159869bca5da146
- SSDEEP 192:B4UxGFvFYFJFH3FzFqF+QJFCFiFpF8gMT4jF6tMIMYogjSDB/ml7ufw/HF98/Pm0:B4UxGlmb135wQQJkIfigMT4jQtMIMYoz
- MD5 SHA1 SHA512 SSDEEP
bin/Humanizer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40dff6faebcc6e2babe37003853509b2050e806edf3c5f141fbb85fdc0d1bea7
- MD5 5fc547c851275cc7a1227843c7b35daa
- SHA1 5e22f33bf7dfa5047fc9f661cf7ae069832bf006
- SHA512 3382ec32d38bac335fb01464337bc0189a1f8cef33fb94c5d99c02655b4c14160fdf02786789a9687c1d651af0ca1a2b55417e8f32570ec5355e44624266acca
- SSDEEP 3072:3EMxgfS3v/xcvZL8i6KHgFgJyEnJi5NV2XpFY7oejVLqoLbBr6h7sA/:37xgf+WlJiJ2XLYMejVTV6t
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4a:84:d6:3e:82:e0:da:84:82:1c:6d:a2:14:ff:03:62:49:5f:9e:e7:05:00:30:e6:9d:64:3a:f0:fc:2d:4d:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Oren Novotny,O=Oren Novotny,L=New York,ST=NY,C=US
Chains
May 23, 2024
Subject
CN=Oren Novotny,O=Oren Novotny,L=New York,ST=NY,C=US
Serial Number
0a:58:76:50:39:e6:54:bd:8e:62:09:95:1c:f5:19:ae
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2014 - Nov 21, 2017
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
210182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Humanizer.pdb
mscoree
_CorDllMain
Name
.text
Size
197KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ICSharpCode.Decompiler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eea43e707cc5212eb2c32f788df7441b47e5e13ef6ef4a3a9bf2cecba3d51bc0
- MD5 3f0b190b2c3de675c5dcd932ceecfe98
- SHA1 f0c5c533ac50f0009ab3bc7ed2935b2cfbf01d55
- SHA512 907b047d0f679ae657083d3c7aea5daed2c1aa678d35674f0c23438c2a2e7e61ca19b2f362294ec6d7edc9b9367659594cb071d4deadd97d3375f71cf83c74d1
- SSDEEP 6144:3Nulek0dQJywv/2ABniCx3DIWBQREWTWRKKxJ3s6gLP961yMINV6X20qlJJY+K:3ogpdQ0CFIytT5gMIhlJJY+K
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
526982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\ILSpy.Decompiler\ICSharpCode.Decompiler\ICSharpCode.Decompiler\obj\Release\net5.0-windows\ICSharpCode.Decompiler.pdb
mscoree
_CorDllMain
Name
.text
Size
507KB
Virtual Size
506KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ICSharpCode.Decompiler.pdb
- SHA256 7a304f2fd135078e6176c436d69c56a2f7cd60e987043d90b83159da578de21c
- MD5 734e5a2c4459bafdd2482bd15f14f4d0
- SHA1 7f30f0f0e2515e97f5fdd3db632ae802ad20688c
- SHA512 2f75e8604e4f037ed2263efc46a1cd3fc319ee8d2d5ee26c85c8c69d9a98386362d7b87f2af94cd10ee9a8a9f333af8853998ac0a303212a8e22e14571064912
- SSDEEP 3072:ewufLwDfVRyd7iWuiSOLr8TBF58EzG0o+EOzd5qxDf+F+ZUW7dUhWK:a20QySOH4B7DLdiE+S
- MD5 SHA1 SHA512 SSDEEP
bin/ICSharpCode.NRefactory.CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e5990f9b907e29a1b3cadecc278df05f27eb0e6130f135beb4b0152ccf2e9d2
- MD5 bb9b505e8de119d455b960dcdfd1379b
- SHA1 7e513fae3fbee42a8321e2dd25715552a8e54acc
- SHA512 aa307588a0116472af36c8b4accf221d352e0b35e83f4861f661cc1caff5603128775ec3eeb5537ec3b66f946ac963133a62fe52f18349927edd9f8dc0cef66c
- SSDEEP 12288:ItCo5SPhdfREvnwYCA+zkPggzWKOPKdCCfnPGJKI/k+5fxgyH1JZFkHHLVX4xbc1:TyO+Yse
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
595590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\ILSpy.Decompiler\NRefactory\ICSharpCode.NRefactory.CSharp\obj\Release\net5.0-windows\ICSharpCode.NRefactory.CSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
574KB
Virtual Size
573KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ICSharpCode.NRefactory.CSharp.pdb
- SHA256 8cda83d87d470d86f1ec81c9e55da95ba25c4b4f474807e11b2340d2c7811605
- MD5 dc510f6f8dff3ff243ddc66a86f33187
- SHA1 617351f92a94a745d16f1456eef7cde2ac05c1d4
- SHA512 36edc2a9421de56e59386aacd31ebfaa2abfa1692cdc79d1c76b7bf042aa3a8132052d105d99ea0681cfe5e3fb325d56f4dcbc2dd53ebabf02d23696d5f5d690
- SSDEEP 6144:V0A5FHOyttGrF05KXKnH4DcDncvA96n3EvNho0:VNXH9tGr6KaRDn4A9cUv7h
- MD5 SHA1 SHA512 SSDEEP
bin/ICSharpCode.NRefactory.VB.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54b757f43b63946b9e666c827f0023dce715ae09c45d762d267a08866fd9657c
- MD5 105185942e3b82168e85aca9245f177d
- SHA1 c72a5b96d4831cdbcfbe401700becca8f9f58786
- SHA512 f869bf91fd30ca9cfe4bff42920e5b6cfed4646ce8839fc0875c83218821e96639558942215f9c43d24dbfe2a008bab8971d24b52407df9a4504cfe219e4fb04
- SSDEEP 3072:PxvLbDjY3yiq/5WtOmas2MY4aVP/lTCcWlR0L2Pjs9vN7mGT:lLbtSQM5tbl7M7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
203010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\ILSpy.Decompiler\ICSharpCode.Decompiler\NRefactory.VB\ICSharpCode.NRefactory.VB\obj\Release\net5.0-windows\ICSharpCode.NRefactory.VB.pdb
mscoree
_CorDllMain
Name
.text
Size
190KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ICSharpCode.NRefactory.VB.pdb
- SHA256 3c1dc74cff70a7d32145e6bd8e0302781ee489848c0015fa7df5f6dd8fa3ef5e
- MD5 de69ee5260c0e9caff23f931e9bf05df
- SHA1 313c44756127f9cec5ef938ac6f482cf5e118519
- SHA512 7fbce99ab7aeeda0db2a5dfe17146093c0db143201545036cea7d0df1a112e3f4c964dc73645b4768aa409f75987a7e22581c36eda18b36fd7697a304ef91562
- SSDEEP 1536:fCr7XhamvXKlwFA3efKOHW1Vhfn1VXlvcccdNLU5uXGeJ4flozdhlKqFlFB60/w+:fwH2Hhfn1VXVcccjLrdWmFLjYfh3k
- MD5 SHA1 SHA512 SSDEEP
bin/ICSharpCode.NRefactory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ae880504db44b9811d57c615e42107c2aace31a2683a83bfad2e00f4e03beef
- MD5 599ac99e9726762a0430ca3c3b77f3c5
- SHA1 889b575c6de2bcd8eda28fe3dc75879b388622fd
- SHA512 bd459ef5f0599eeb0601b7fd219db7aaded22c193a3672da057da84062c5cd50abe252564cb38233bd1cf886ed2353ecad5851a97b95fce8b3bebf1d61df87ff
- SSDEEP 6144:26ene6DxXV3tcP9LT0WdT0eM3jTLdKlyn+lR+3Y:26eeuxhtQTDM3jTLdKlyn+lR+3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
292318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\ILSpy.Decompiler\NRefactory\ICSharpCode.NRefactory\obj\Release\net5.0-windows\ICSharpCode.NRefactory.pdb
mscoree
_CorDllMain
Name
.text
Size
277KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ICSharpCode.NRefactory.pdb
- SHA256 701a8a5c4757b8cda12de46d644b432c81679a69b11ddad0e36241edf4317166
- MD5 ff9cec669cb273e5f3e3bc0549ee2673
- SHA1 bcdfd0e9fa4aabb600ad383e9071cf08ab7568ec
- SHA512 acc235505be734fecb5baf526af85fffe6b005d677a0157a7f55e4eb6633b61422addf893b2a742203c5a7c0460848b43ef66cf05406cc716b51df37251390f0
- SSDEEP 3072:7Kop2iBwkU0frsdDLraujUMwm74gijpJJS0S4G:zjSp0yHiDm7cjAJ
- MD5 SHA1 SHA512 SSDEEP
bin/ICSharpCode.TreeView.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 af3e6cef5342c7d7dd813913dde2c765c1501ecf0832397dbb631cd5d15dda21
- MD5 1c754b4cf6bb9d6f36132b0dd0042a89
- SHA1 490a800de4ba5ab32c7c5d04e68b4e23abde3666
- SHA512 b61f4cf7f599db4b3083cd5e9f739afa239f408e6ead3bac7eed47babe8a8fde6c76110e8ff237606dd7176f4bc3ff56676f71f8ca329e46cc93439fbe2dd170
- SSDEEP 1536:8jwWaYuo0UVdlY4dDAtV2n//bbvlZhtTVDS1UFL6THwLurd:8U1Yuo0UVLxOUn//3NtCUeB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Libraries\ICSharpCode.TreeView\obj\Release\net5.0-windows\ICSharpCode.TreeView.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ICSharpCode.TreeView.pdb
- SHA256 fb76a00917887f59de2629f4113f151eae196cd26d1905867d3bfd4f6e1ab73e
- MD5 2ec501f63098fd10568b9145136de133
- SHA1 4f7b2832a93cdaf02bd135091339a8c1a7e6406d
- SHA512 d86df71078b554562b347fd3e463eb553287bc939ec54ed03907545c243dd624c05039b663242cc4262641263501f73fcf9f6d24c0c9b5276fce47ef362e326b
- SSDEEP 768:wJ877E89WmcVSb4PLcYchZ/9hjc1qbxrno:w789hiPLlc//rrbo
- MD5 SHA1 SHA512 SSDEEP
bin/Iced.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dec71b0af2c2267fa1ca8d1465faf914ab5350c7407d0e35edd690d1b4f421fb
- MD5 664c15683a6a3fb4204d5f1ff42e2e5c
- SHA1 181591babf235320241075da4c60d1bfe21c8285
- SHA512 cf5f17bed9e4b437c7354a1495a009de1f3ac3ffd1b59f9b8662b12c30f0c2e5e8f8f65610a433ff0be099963bc6c8a2a236bbdc8e8a0d8f35ef401da1fe06ee
- SSDEEP 12288:TSDMaFobUafDLGzkXNWx5g/nKjysieauTB6TJGv7FN7Q/918Gs2jRweNsUTrk61U:CkdWx5LvM/n1weSUTrk61uihPQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1482790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\iced\iced\src\csharp\Intel\Iced\obj\Release\netstandard2.1\Iced.pdb
mscoree
_CorDllMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/LicenseInfo/ApacheV2.txt
- SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
- MD5 d273d63619c9aeaf15cdaf76422c4f87
- SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
- SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272
- SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfH2:kOu9b01DY/rGBt+dc+aclkT8SH+
- MD5 SHA1 SHA512 SSDEEP
bin/LicenseInfo/CREDITS.txt
- SHA256 1b8c084c8f900ca6597f36fdb0f53753a8a58f72fa7adfebe5f60e863901960c
- MD5 0e3c4af9a19de3f180da7af426d4edb3
- SHA1 132a4058bd52c195da3282d99c88a487d4f69bcc
- SHA512 c1bcc7d40f6e782a40563298cef1a0a4609969bb75ed80eda2fd6395e51de38f86ffa15142ca32ae8a33764b0f63a3b64fdc57e28a14a5fb27b7633dc4e97c2f
- MD5 SHA1 SHA512
bin/LicenseInfo/GPLv3.txt
- SHA256 0b383d5a63da644f628d99c33976ea6487ed89aaa59f0b3257992deac1171e6b
- MD5 3c34afdc3adf82d2448f12715a255122
- SHA1 7713a1753ce88f2c7e6b054ecc8e4c786df76300
- SHA512 4937848b94f5b50ea16c51f9e98fdcd3953aca63d63ca3bb05d8a62c107e382b71c496838d130ae504a52032398630b957acaea6c48032081a6366d27cba5ea9
- SSDEEP 768:A7Y+tNdSz3ZlqXOWoInuzx3Y8N3WiYD0v:AVtNIq1uzZY1C
- MD5 SHA1 SHA512 SSDEEP
bin/LicenseInfo/LICENSE.txt
- SHA256 aabd9e3e68e8236c4b2a1504df411d258c06463ef214b00681e62e60bb2c4559
- MD5 6e62481bca4da045150c5e751387bfdb
- SHA1 c22fe28222e4940dee2fe6ef2425ffc626bd46c6
- SHA512 ef5d4cb9f8b757f2226ae6a1c7db3c3ca662b7557e87d288fdaaa2635565bcf7569813d3a71343345bef7ef5f217f2d5bb4feda667103000a63236395f71a183
- MD5 SHA1 SHA512
bin/LicenseInfo/OtherLicenses.txt
- SHA256 9307f5569a84496acc8c532ee8adaa0ac3804b42176e84741743adebaddeae7d
- MD5 e01de8f65ea7581f8f4b2a55154b9c5d
- SHA1 70be291392018fbde7d0fc6bc975c8cf1d5cbda7
- SHA512 e64b414fd24f57fc760359f1bbf89e454322bbf228bfeffaf274b17aac288bf65469aab3b6841813c7ad573a2c3b3d0e41b7983f8af94134ebb73159450dbe98
- SSDEEP 192:KQHbnQHbkQHvrnQHgi4BOrNcLY3w35gHgQHFfGQHdW:KqnqkOrnvibrNcLSK5gAYuUW
- MD5 SHA1 SHA512 SSDEEP
bin/Microsoft.CSharp.dll
- SHA256 1bd1f10d817ef2ecb3cc157747527fa5f3db7239377c2ee3ca0f06d7b3775800
- MD5 68434f91137349c05aeae000f3ea29b8
- SHA1 ffe9fd8a7209b902273c601b95c7933f3ae3d775
- SHA512 52d63998ff773f2ab7de071f0108e4b3a4abe7a7bfde01c74d964cf6ce39460f84c03c4beb249154205a6655e2f94a001cd2eec8de3bb722f8ac9de2ef7b9463
- SSDEEP 24576:WpORInlfl9o9yH8vXnOsV3GFAyAq19ucjG6ayG5S:vSd9o9yH8fnOsV3GFeqzy
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
60:76:16:76:f2:61:b3:15:e2:0b:8a:80:91:d7:d3:68:df:c8:b5:ec:e5:70:a3:e2:60:be:30:45:8a:7f:f1:54
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.CSharp.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\Microsoft.CSharp\net5.0-Windows_NT-Release\Microsoft.CSharp.pdb
Name
.data
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
824KB
Virtual Size
823KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 afdaf3294c67480ba855ca06f6750762a7828d4a104d79a32569c6f334a743c1
- MD5 c093e7d2deac718331b5a1f90a296e82
- SHA1 57b1e624faa420481a1b8efff8949a8f3a69c010
- SHA512 a6602766979a732885f6ffc1bc5dbaf9f2e4dd9640bd8e3478d60bc3114a0e62180b3d7e59d3707a48890beffd0bfcff2d32e0fd50d43d5a380fbbbe379a741b
- SSDEEP 1536:Rbf5/T3RO4A67T0V3etHeI43tvlKKmCuwMvNtO8P/aqCYYISv74osfy7NB6S+XPb:1V3A4AoHf4dvAKmCuwMS8X1LYIn2m7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\Roslyn.ExpressionCompiler\CSharp\CSharpExpressionCompiler\obj\Release\net5.0-windows\Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.pdb
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.pdb
- SHA256 67f72fda5e843510452c17b29ccdff406f6349c03683b613c8d1e8f23191f32e
- MD5 9da97ad4eea5e28207edd91f7dac2840
- SHA1 757916228d50e0d2702f15a1e7468974a1ab96d7
- SHA512 0a2bfdde63e2ff03999ddd4b07522ab168145a486943374cc26af19d4add5d70cf890c07d0dabebd036c2d771b36ddc7f6db70c5eddaee27ed768229807c3834
- SSDEEP 768:OSIGmOmx1zy6DMDhB2TmgFgVDSBNLUHZug0dLY8dfD6SA4LGuzMyFy:sGMzy9b2Tm/gNLU5ut6SUyQ
- MD5 SHA1 SHA512 SSDEEP
bin/Microsoft.CodeAnalysis.CSharp.Features.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fd7c989836facb6341057062bb87ae35ecce722de3329cc63930bc0d875dc1f8
- MD5 d0b6f0df27507b3321e57b04b15cccd6
- SHA1 82940bc154bc81a18bb4678f60a4de268c6babf9
- SHA512 e7a78e8a4dc3d31c16ba8a3ae1c62bfb6f8267b80e58468190e4044494ac727d6b9f521209c0e749cd53e6059c82542c3f773d9e5cbf97816b4e9be553a7d49f
- SSDEEP 12288:rqRBrFpSQor5EjxSKV1W+OWPb1sbTfncPAqoBPxfeh7z:6eQnVswsbTfn7Oz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
52:47:36:dd:50:10:05:23:40:d5:f1:7c:a3:76:62:73:1e:9f:e2:14:d7:f2:47:82:54:3a:dc:79:c1:ee:53:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
905966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/CSharpFeatures/Release/Microsoft.CodeAnalysis.CSharp.Features.pdb
mscoree
_CorDllMain
Name
.text
Size
877KB
Virtual Size
877KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c7b0746b960654a0cb51df95feb1fcd16b8ba99a1369a5603b00abcf31cb6b44
- MD5 975129c8b6a6e514c231441630179bd7
- SHA1 6e0d9e9abe646d574eebaa5359b9e16d6407a722
- SHA512 e2919caaf0bf3a22dca384bb257a075513829bba71d4e9babe5e64d995fb26a43858a75f883811ef50be9c49a7b22a3a79943eb157adc464a6fae65ec0c29535
- SSDEEP 384:SnkPsVDzfK8DkGP4D8oewY2kGqln2XhtmGkIcyWkVfW8S/0Lg/dl//Hq:kkGfdna8oe6lq12XhwGkTYRS8AK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5d:e7:8b:30:c4:ba:ae:94:cc:df:fb:29:66:6d:45:76:75:28:68:c6:5a:8f:5b:da:ab:93:94:91:6a:1d:bc:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
26194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/CSharpScripting/Release/Microsoft.CodeAnalysis.CSharp.Scripting.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.CSharp.Workspaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 310ebdfce5f3ffa522fdce334fae8938cb1db3fa887c4e7218e90e78c7a90e67
- MD5 7a56b5cb02da5b7208706ee49abd9d43
- SHA1 a331b07be743af5ba274249687578a28ce7b68eb
- SHA512 8c94439daa5b506500099d1549fee089640b65c8209665a42987d5401d664528d539adcfd992cbb66d740cdd377882e385d561476818cbdc28dc7a8bb19963a3
- SSDEEP 6144:VYbRJSfgneMuliMfTxwbxwgnjXP2V1Yh7TCJfNwIewaIRIfhCGz5Xo0gGfQmDm8K:LwsNfTxQx36V1YhOqIDu4fz8s8h9Y5R
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
66:b3:fa:38:4c:66:76:09:c6:6a:f8:f9:4a:8f:e7:58:69:7f:34:aa:0d:38:17:da:ed:6a:f8:7e:ec:98:fb:a5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
659358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/CSharpWorkspace/Release/Microsoft.CodeAnalysis.CSharp.Workspaces.pdb
mscoree
_CorDllMain
Name
.text
Size
636KB
Virtual Size
635KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.CSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75e17c4aa3d0374ecf1d04c2de449f6eee9f13cf5f291bb8c8c0d170b1cea4c8
- MD5 38343f3d8108eed296fdf5aa19102e20
- SHA1 f0995115254a0a76ac05329812368674dfa4f2ff
- SHA512 ea34cafb1af2abacbdaa826c3b060fd2772a912e5497e3fd373a5f88c3ec0a122671c55b541bb2f56cb8f8d86e9dd236aa3b61869d1589e3d97b7683564c2a7d
- SSDEEP 49152:gLlgqJOlmNmIFmLaXyXXjZJ0NZg39C+SDm00zc95YXjlB42hmNJQtf:tP4xWXXjZJ2Zg3VT+6jvb+af
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3f:54:a1:15:9e:ee:37:dc:6c:ca:38:d7:bb:47:16:db:8c:3a:6d:71:90:3c:0a:de:63:d1:85:d1:2c:b3:39:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
4232470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/CSharpCodeAnalysis/Release/Microsoft.CodeAnalysis.CSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
619KB
Virtual Size
619KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.ExpressionEvaluator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b130cfbb4dd9855cbd6627755e3826f90585f5891edb037515b74d8af80a90fd
- MD5 74df985b48b8cfbf96fbca0248591d74
- SHA1 0630e74fd47b2b675524e4e628bfaf6e9b79e964
- SHA512 a0c17a51db9dcc3855e3e0ae4989fbcabad756dcfc763e1ca0b11932fa606c6113e9e10c0fb0c4a0a92abba5f7f0bab6135950cfe4112f64a918c4398fb45a1e
- SSDEEP 1536:CeYDhga9x5QnTW3bX3XOKhHPiwLRA1BdAbRW:taGaaW373XOKhHPiwLRuBdAbRW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
73634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\Roslyn.ExpressionCompiler\Core\ExpressionCompiler\obj\Release\net5.0-windows\Microsoft.CodeAnalysis.ExpressionEvaluator.pdb
mscoree
_CorDllMain
Name
.text
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.ExpressionEvaluator.pdb
- SHA256 2647dce331bb64c0044fcf4b3e612fa1c918f099ceb88ef2b66e3f06d1332e5a
- MD5 e6ba2b73dc9fe32530ae71244e46e973
- SHA1 eeae77ca189f0dd01237d0334c0f5a0d7e5c3471
- SHA512 fa774399b5ff3688691562909fe70a74702cd902b840660c1a0077c4bab7823f0bb14b2bfad9740d2a6d8a76ba4df510f47cad60f891656fd234eab2fbe8fc55
- SSDEEP 768:3Y3BZnctVDSBNLUHZuiBAb3zsqNWf1AcvpCg:i3nEgNLU5uJsqNGEg
- MD5 SHA1 SHA512 SSDEEP
bin/Microsoft.CodeAnalysis.Features.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db8e814c2920c4c61db5c9e91b4044f146f972d0dc6dd166611b0fc4124caa2b
- MD5 592452fdb88ba0ff76d416a41ecdacd1
- SHA1 fd4d5ae37a2ee90ff1d0a05c8825a8ec75aa14b5
- SHA512 1514ccda636f88344904655119656a49e3f11247518ac7cd91da395faa2ba194d2e497bd87fa469631f24984a1c9ae369ab9519d12ccbf23659e466e639e34b5
- SSDEEP 24576:0oKsTVDW3i3jTI5Cp0icP7LfJWCc56ILN4kWLJLCLT5AHLCOhbIhp233UVY8pGD4:0oKsT5Ki33puPAVYW0B9AwDkl
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7f:55:fd:1b:ee:9b:e2:a5:6b:ef:ea:31:f4:56:82:c4:ce:20:1a:27:7d:03:14:54:14:af:a0:cf:1d:0a:f6:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
2221842
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/Features/Release/Microsoft.CodeAnalysis.Features.pdb
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
436KB
Virtual Size
435KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.Scripting.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b26b6df96e24329ade914203eae33cfe305e1a5a4c193449fd759e42abcb3837
- MD5 ec05b0d1fffae920cca19e7490e03d92
- SHA1 8fe500313cb587d80547c292e6e0495b56479fc7
- SHA512 8613649b4821f15eccf6b1ece0dcba31bdc70ff5d0a86c8eda686cd88069750f9c2d4296a6e1b06cba2aeef5041bc6c0a644c27df22f90f5d9ff89f24e4c33ad
- SSDEEP 3072:e+TY9yBgLD44DhA0YV1vOwpCDmMrxI7LkLmt:YL9Dq0YnmmCDzFI7Ht
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1b:95:cf:70:19:3d:67:f0:9b:7c:97:9b:fa:d0:22:cf:bf:3a:82:be:d9:88:01:a3:f6:a6:2d:90:18:da:c4:2d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
125658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/Scripting/Release/Microsoft.CodeAnalysis.Scripting.pdb
mscoree
_CorDllMain
Name
.text
Size
115KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69d0d2bb692fcd54c31c76f5b457caf0a15a7452b18ebe50e0697efdd66f84af
- MD5 2a40516c8b0eca8ea95895fb039a4b0e
- SHA1 4e8f038cdb1d93f4fcbded2760fe44a30ff3b348
- SHA512 28868c86940de1c8e6451f2aba6f7cd084cebba0c29f5188fbd7dbf6ce7ee09050f15865ee0583f91c1352c69065a7b8d3999cb13d7aa57333b8232f54d63bbc
- SSDEEP 1536:DQLxjaLM1AWduWNcEAVSKhX+fNjn8yUTaffh5iNCF3PWvVn5ic02cZa8i:DQke5MWpq+fBOUEUF3+oHpi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
109670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\Roslyn.ExpressionCompiler\VisualBasic\BasicExpressionCompiler\obj\Release\net5.0-windows\Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.pdb
mscoree
_CorDllMain
Name
.text
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.VisualBasic.ExpressionEvaluator.pdb
- SHA256 a043edea1564fdba7af74ee80ef34ac0b9378928aaa882c498039999aefef573
- MD5 66fc5402d0a3d8893000ca74f9a74062
- SHA1 cd41fc863c7364e61dcff5e0f977e893b6c93ced
- SHA512 1a8df4cfb276317b5ed9a665a190514ffb1eae2e16e4ef26e2cb1f3f45778500bc932131edd31014dc55c3d6c4783d663272f0844e2195936a3f38b5b2a944d7
- SSDEEP 768:znU0y9lAidBtQiV8bjJVDSBNLUHZuvDQgBN0Kp7zn+N0a9Yb8:DBy9lAmBRGbVgNLU5uv8V2Mt9Yb8
- MD5 SHA1 SHA512 SSDEEP
bin/Microsoft.CodeAnalysis.VisualBasic.Features.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c589dfe8ae495b154817ddb3d459a128b0cfe49d61e078d16682c7f38bf01279
- MD5 c57b00a9f0c44758524d51d0108c307f
- SHA1 abc8675dc380793bbb502ff04585d0d59914a1a0
- SHA512 a8c5fe313582a0f2519a691a6b42ea374279cfcee7aefec5a849e26d82c4ce503ca11e90871c35d5fca7a4e773ad439e263f3dc812c137959bbe05e16890212b
- SSDEEP 12288:N4Qjai4xQWi7Zmv9+44IOOhjEJf+pWloomozOKTlGHuvfzMNXcMGv+MFEUI3Ou5:7hfcmlGHuvLMVcMGv+iEB/5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ec:7c:c3:4c:b5:a0:f3:c0:5b:c9:cc:76:6b:f7:29:80:28:1b:8f:66:d8:b0:be:e2:c8:ab:4c:2c:ff:45:be:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
981454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/BasicFeatures/Release/Microsoft.CodeAnalysis.VisualBasic.Features.pdb
mscoree
_CorDllMain
Name
.text
Size
951KB
Virtual Size
950KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.VisualBasic.Workspaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db71b2cfe00285c76bccc26bd1489ecfd36521767546d274e9c38a3ce705386d
- MD5 5ec4b67a8acfef25dd46d95be2aefe9e
- SHA1 a241b685f7036681a0c1565adbf47129ef42d33b
- SHA512 eabf68af71851d8ffa28758a81907ab52ca1fefe37a86c2fc3b6528db98a817be87daad2191e38df3a84f38da6b9fdbe0d184ceb56cb216e1414b5cd2592c102
- SSDEEP 12288:lMz/1eNRZoUdl0trd7zaiZ50hh4bhsplJ:lePU274D46J
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c4:6d:3e:d5:63:b3:23:38:0a:98:16:79:2b:86:00:0c:ca:13:a4:ad:04:00:fc:cf:0a:39:dc:c4:2a:f7:67:c9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
718606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/BasicWorkspace/Release/Microsoft.CodeAnalysis.VisualBasic.Workspaces.pdb
mscoree
_CorDllMain
Name
.text
Size
694KB
Virtual Size
693KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.VisualBasic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21aeb6db0abfaa7ff6d0eb7f6eaa65708b6aa7ab08982504efd42d0a6cfad327
- MD5 b50dfcc8ccc16fdde20d2105c3ac20ac
- SHA1 fc5b1eb900efd911b56130c26add4fee80466d56
- SHA512 68644d7116aaf6a2d7132185e035cb261fccf02bda1509c7987ce74684325e97b1196eb123fcefb15ab542de77173d9af6a5cdc0928f3dfaf1e30d25f50af25e
- SSDEEP 49152:bbHdgubnmgRVsAsZ0bD4PtVBEd9I1UcFh3dNBAQl+Pqi:bpZRVsB2D4PtxAQcPqi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8d:41:fd:99:09:1f:ce:c5:88:bc:26:ec:1c:76:ee:cd:29:4c:50:b4:35:8e:5c:8a:b0:ae:60:56:e6:cf:fd:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
4820830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/BasicCodeAnalysis/Release/Microsoft.CodeAnalysis.VisualBasic.pdb
mscoree
_CorDllMain
Name
.text
Size
4.6MB
Virtual Size
4.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
560KB
Virtual Size
560KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.Workspaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 26f0bb24cecf6dfad03f27943acf420c2605b47b5c86cf90032f908c3a985c85
- MD5 17a23610a3d915e4037b775ec26700d7
- SHA1 7952c7c0cfcc0676600367097a4460fe7c440a9f
- SHA512 4fcffc018166a8367e2a8e4ff9978c542437bc33836bc6fa14042fcd471a4134547b509158da9b89c2e56bffb09e588e6a21b1468f617635c756798c3477b333
- SSDEEP 49152:+YSx4OtqdiOi8qj4djKn3xhforX3m+ZJiayt8VCkJpRwHSjx:+YSx4OtqdiOi8qj4YxhHkJ+ex
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
78:eb:ee:69:88:38:91:64:c9:04:c4:97:d6:15:ce:c8:b7:77:a4:c4:ef:65:dd:79:23:aa:3a:35:2e:c5:d2:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
2227942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/Workspaces/Release/Microsoft.CodeAnalysis.Workspaces.pdb
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
538KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.CodeAnalysis.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 85bbfdb35ee97be5dd5722076f7bb2a0ec674b2cdceb15179d72b87c336f5e1b
- MD5 3729a7ef430507d05046b1ae5eb843b7
- SHA1 0923ab82031c7ea8eafb513a1584aa4cd3fe5a55
- SHA512 ed1ea2059eeffc909cbc3239aca3bfd98e8c17b04b754ab6492abcbc8d94b068b7d218040d7fde04786056cb2b5161a7fa217530b4ef06fa33e1a1d98ffff06e
- SSDEEP 49152:knquGYXuy9lmKw/aIFLB6y8WUuZTwj4nLc:EquGYXV9cKSaIFFb9k4Lc
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0e:bd:78:ac:e2:b5:53:fc:53:9a:be:ee:7d:9e:59:96:18:75:19:ca:50:5f:af:ef:35:30:94:00:d4:41:de:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
2054126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Binaries/Obj/CodeAnalysis/Release/Microsoft.CodeAnalysis.pdb
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
629KB
Virtual Size
628KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.DiaSymReader.Native.amd64.dll
- IMPHASH c125d12aa68a74fb5955b04e53443789
- SHA256 95f301012ed09c09c9eb61a23a2803a7043e6a33f9c8957746379b610a52978d
- MD5 7e31e92dd59449f41c900862a16f0879
- SHA1 36ed049328fe585f2053a7e20be4b98a3c3a1f24
- SHA512 77fecd5611967f7234fce744e0e57525e8699ecb3eae99b6e7bb3e326ef4e10258ecdcc80ab5b9b402c4da32104b6a6566dc63bfb1b7c7192a75ebeb13e439c4
- SSDEEP 24576:SvcJOD+/r/bOMsrw9axAERkSlh+EQtU5PGKGvfCgTXzCK4zRKCHPZS:S7DALqMs8U+eUftU5eNvfCYb48
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0a:18:b0:2b:63:19:ad:7e:e4:68:25:ff:9f:ba:3b:40:9d:9c:7e:42:49:ce:5a:e4:65:a5:1c:dd:54:80:8b:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
6e:17:6e:f1:6c:dc:b2:d0:25:37:e2:89:88:5b:f9:60:65:b2:93:65
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 28, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
177072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.DiaSymReader.Native.amd64.pdb
kernel32
GetLastError
FreeLibrary
WaitForSingleObjectEx
ResetEvent
SetEvent
LoadLibraryExA
VirtualQuery
VirtualProtect
MapViewOfFileEx
GetFileSizeEx
GetFullPathNameW
ExpandEnvironmentStringsW
DeviceIoControl
WriteFile
SetFilePointerEx
SetEndOfFile
ReadFile
GetFileType
DeleteFileW
VirtualFree
VirtualAlloc
WideCharToMultiByte
SetFileAttributesW
GetFileAttributesW
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
UnmapViewOfFile
CloseHandle
MultiByteToWideChar
GetSystemInfo
DisableThreadLibraryCalls
GetEnvironmentVariableW
LCMapStringW
FormatMessageW
LocalFree
RtlPcToFileHeader
LoadLibraryExW
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
EncodePointer
SetLastError
InterlockedFlushSList
RtlUnwindEx
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LocalAlloc
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetTickCount
CreateEventW
InitializeCriticalSection
ole32
CoTaskMemAlloc
CoTaskMemFree
api-ms-win-crt-heap-l1-1-0
free
_calloc_base
malloc
_callnewh
_free_base
calloc
api-ms-win-crt-utility-l1-1-0
qsort
bsearch
api-ms-win-crt-string-l1-1-0
strcpy_s
wcscpy_s
_wcsdup
towlower
wcsncat_s
wcsncpy_s
strncpy_s
wcscat_s
_wcsicmp
_wcsnicmp
strcat_s
_stricmp
wcsncmp
strncmp
strcmp
_memicmp
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
abort
_initialize_onexit_table
_initialize_narrow_environment
_register_onexit_function
_cexit
_initterm_e
__doserrno
_initterm
terminate
_configure_narrow_argv
_invalid_parameter_noinfo
_seh_filter_dll
_errno
_crt_atexit
api-ms-win-crt-stdio-l1-1-0
_wfsopen
__stdio_common_vsnwprintf_s
_open_osfhandle
ftell
_write
fread
_get_osfhandle
__stdio_common_vfprintf
fclose
_wfopen_s
_chsize_s
fflush
fseek
__stdio_common_vswprintf
__acrt_iob_func
_wsopen_s
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
_lseeki64
__stdio_common_vswprintf_s
_close
__stdio_common_vsprintf_s
_filelengthi64
_read
api-ms-win-crt-convert-l1-1-0
wcstoul
atoi
atol
_wtoi
api-ms-win-crt-filesystem-l1-1-0
_wmakepath_s
_fullpath
_wstat64
_wsplitpath_s
_wfullpath
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
api-ms-win-crt-multibyte-l1-1-0
_mbscmp
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CreateNGenPdbWriter
CreateSymReader
CreateSymWriter
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectInternal
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
259KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=244, version=40116,
count=10, id=259, version=25810,
count=21, id=260, version=25810,
count=7, id=239, version=40116,
count=192, id=1, productName=Unmarked objects,
count=98, id=261, version=25810,
count=31, id=265, version=25810,
count=1, id=256, version=25810,
count=1, id=255, version=25810,
count=1, id=258, version=25810,
bin/Microsoft.DiaSymReader.Native.x86.dll
- IMPHASH 2750e561997e3d2f8e185972112eba29
- SHA256 f21da9fb831ac943736135b6ee109a4b352511b8d6c07cb03c66b61996d1ddc9
- MD5 4ff7094e3edfda47ced912012044296b
- SHA1 c6f3c9d81713687dc3820d8cabf14c2a32208d27
- SHA512 372867bbae96c51ee11b413f552a67a53992b16dbfa44105381db3813e3c2f9a3dc9d16fc6bd6366514d4e1b4bf1eeccce5261bc3df837bf3e3eb5a04446c551
- SSDEEP 24576:7Xg0Ff/wSOM0TJuCD0Kbyk3dIf//LXpWhIHWLRDAcc17QXk0:7HHFRKbhdIf/TcIIhk/0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
74:c7:89:0c:ca:76:a2:a2:df:f4:32:36:58:11:7b:17:64:4f:20:f8:9b:a5:3b:ae:53:9e:3f:43:a1:04:1f:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
62:bc:ea:ec:38:b2:c7:42:45:0d:0a:8a:25:44:ac:fc:cb:e1:75:36
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 28, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 2, 2017 - Jan 2, 2019
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
256480
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.DiaSymReader.Native.x86.pdb
kernel32
GetLastError
FreeLibrary
WaitForSingleObjectEx
ResetEvent
SetEvent
LoadLibraryExA
VirtualQuery
VirtualProtect
MapViewOfFileEx
GetFileSizeEx
GetFullPathNameW
ExpandEnvironmentStringsW
DeviceIoControl
WriteFile
SetFilePointerEx
SetEndOfFile
ReadFile
GetFileType
DeleteFileW
VirtualFree
VirtualAlloc
WideCharToMultiByte
SetFileAttributesW
GetFileAttributesW
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
UnmapViewOfFile
CloseHandle
MultiByteToWideChar
GetSystemInfo
DisableThreadLibraryCalls
GetTickCount
GetEnvironmentVariableW
LCMapStringW
FormatMessageW
LocalFree
RaiseException
LoadLibraryExW
GetProcAddress
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RtlUnwind
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LocalAlloc
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
ole32
CoTaskMemAlloc
CoTaskMemFree
api-ms-win-crt-heap-l1-1-0
_calloc_base
_callnewh
_free_base
free
malloc
calloc
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
api-ms-win-crt-string-l1-1-0
wcsncmp
wcscpy_s
_wcsdup
wcscat_s
_wcsicmp
_wcsnicmp
strcat_s
_stricmp
strncpy_s
towlower
wcsncat_s
strcpy_s
strncmp
wcsncpy_s
_memicmp
api-ms-win-crt-runtime-l1-1-0
_initterm
_errno
_crt_atexit
_cexit
abort
__doserrno
_execute_onexit_table
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo
_seh_filter_dll
terminate
api-ms-win-crt-stdio-l1-1-0
_get_osfhandle
_close
_chsize_s
__stdio_common_vsnwprintf_s
__stdio_common_vfprintf
_wfsopen
_wfopen_s
fread
fseek
fflush
__stdio_common_vswprintf
__acrt_iob_func
ftell
_wsopen_s
__stdio_common_vsscanf
_open_osfhandle
__stdio_common_vswprintf_s
_read
__stdio_common_vsprintf_s
_filelengthi64
fclose
_lseeki64
__stdio_common_vsnprintf_s
_write
api-ms-win-crt-convert-l1-1-0
atoi
wcstoul
atol
_wtoi
api-ms-win-crt-filesystem-l1-1-0
_wstat64
_wfullpath
_wsplitpath_s
_wmakepath_s
_fullpath
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
api-ms-win-crt-multibyte-l1-1-0
_mbscmp
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
api-ms-win-crt-time-l1-1-0
_time32
CreateNGenPdbWriter
CreateSymReader
CreateSymWriter
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectInternal
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=244, version=40116,
count=1, id=199, version=41118,
count=19, id=259, version=25810,
count=18, id=260, version=25810,
count=7, id=239, version=40116,
count=187, id=1, productName=Unmarked objects,
count=99, id=261, version=25810,
count=31, id=265, version=25810,
count=1, id=256, version=25810,
count=1, id=255, version=25810,
count=1, id=258, version=25810,
bin/Microsoft.Diagnostics.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 47adf5f9eed9c87ada36bf0d9b3848632c0aff44fb6de456ccc57bd56b379cb2
- MD5 f35a1b0788ce8a649d5d770aed379536
- SHA1 d4a881cb055b7ef86f8cac2778322566d93792a8
- SHA512 db6ad8d303e34cc71b3a9c6fc2fcc36f3567ec491de7b02f2cf04cf1282f9c50963e0e122f48505f4bf7024e0bcf419eb8aad0bcd6b41f2c6cf38de5082fc657
- SSDEEP 12288:GWDY4l8XPqEwxCQcN0T8MuIe95S6sEUEVENu6YqhXQmkuVbmT6lD:GWDYzPPw/cN0T0Cuxq3k0bDD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f1:6c:3b:2a:de:77:09:5d:c2:fc:6e:e7:05:97:ad:7e:6a:2f:82:29:38:e8:61:d3:47:6c:d6:85:db:83:40:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
803510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Diagnostics.Runtime/Release/netstandard2.0/Microsoft.Diagnostics.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
777KB
Virtual Size
776KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualBasic.Core.dll
- SHA256 fbb8be0b29c47baf9e40417ce74f525112339714f960e77b110606883f49398a
- MD5 6deb41ba7646c6f607c320afad4f9439
- SHA1 e3935b30e4de3a2aa3c4ea45213294b297e87c9c
- SHA512 8a130a4130aa916f5c14763b42eb1095647fdaae0b16ddf72b7d68c79adf6b02a75b4c7b48877637ee61399b10c32cdce1af664ad88c5939077a3e78f0378abc
- SSDEEP 24576:gQBPMlgy0iwjvpzsHyJfNKSkflvsdM2ZkQL:gQHFiwjvpIHUefCdMO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d0:f3:9d:ff:35:ea:13:d9:d6:1c:dd:4e:fd:81:2f:3c:d3:fb:f3:01:ea:ed:dc:fd:51:a9:9a:53:cc:6c:64:d4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.VisualBasic.Core.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\Microsoft.VisualBasic.Core\net5.0-Windows_NT-Release\Microsoft.VisualBasic.Core.pdb
Name
.data
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.VisualBasic.Forms.dll
- SHA256 de073de856bfeceb69c81a1aaa5183539bd8ee19670aa6ee75ed0d34963d91f1
- MD5 553c82cad6604aa4143b7e048969594c
- SHA1 d15e76988659e58c39ca16a293bc4ca7721e87d5
- SHA512 e682d7a3e495f5058ca3109f4409e8c6167eeccbcde07dd471f76c5cfafff28dc0108aac4a93ac3ce91f58caf7448ae303c6402c5ea433482a25b137ee50ff7a
- SSDEEP 3072:bfYVSiSR6No1YuhbO+xXPXxr1rWGidb2WZr+xj97brw6ODBOjuu0ZXvPTv0+5XLp:UV5SR6Sd1Px+6Zj+CiqI3h
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
52:55:1d:40:b2:ef:0c:e0:f9:f0:e0:1d:63:fd:15:a3:51:57:cb:c7:48:45:a8:00:28:e5:8c:ec:92:b8:d0:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.VisualBasic.Forms.ni.pdb
/_/artifacts/obj/Microsoft.VisualBasic.Forms/Release/netcoreapp5.0/Microsoft.VisualBasic.Forms.pdb
Name
.data
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.VisualBasic.dll
- SHA256 f5e88f52cd0dc7f597784cd032b322d50fe7d74557a40a3dca5617da08aa73b7
- MD5 1972ac9359700491d05ac6fcd256685d
- SHA1 b6d591711077ebe3cbcbe129e423c46b3fb28f20
- SHA512 4b827083f051738ad8f48dac79f11559ea1420ffea2e4283f2f191ecc32c25d02fa14e71f49f66f4ab82f36addd29cfc1bf4709f9cb473c1423a16ae9846f867
- SSDEEP 384:YxWmHR9QdW82Y5xLXGNg58d770PdHRN75BClGs0S2:YOl2c8d30Vn1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
90:ed:01:e5:98:34:d0:8d:6b:8a:e3:a2:6a:4b:c0:bc:85:9f:d0:f9:ef:ec:01:9a:60:02:ea:e2:dc:f0:4a:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.VisualBasic.ni.pdb
/_/artifacts/obj/Microsoft.VisualBasic.Facade/Release/netcoreapp5.0/Microsoft.VisualBasic.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.VisualStudio.Composition.NetFxAttributes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f14cda79ced3f285a1ed61a919f57ffe1350766f1c5bea87f2a8bc18a575b029
- MD5 01be062fc1732a2dc1b3d4681ba703ec
- SHA1 e106a5bfd68265ad3b86b40bf57c3de4e77f442d
- SHA512 fa680361131fb191357d7f8d3f5a46a5784c73b267a0a65b3d069f55337db4f3495935ac339b3e763dfb14000d28eaa8f8881dcc7a4efd0ea1626130701d51f3
- SSDEEP 384:dIsC66LvDccF3r2WXl9yKy2WlvFwq62Ktkl9A2S:D6LvD5Rt9yKytvF96
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
50:2d:f0:32:4f:43:f9:94:9c:e9:23:75:d3:d5:1a:90:1b:b8:fd:c2:03:b9:17:06:eb:2a:53:3f:64:30:17:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
12638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\132\s\obj\Microsoft.VisualStudio.Composition.NetFxAttributes\Release\netstandard2.0\Microsoft.VisualStudio.Composition.NetFxAttributes.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Composition.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5566740962768fe3bdaa32c53ccc5ed2b8c988fc76d663fe96d0399f649b3690
- MD5 595ff756e46aa13b0663b5de23c26292
- SHA1 9bf0c40ce6cd1a58780dba1670d94ad5f75618e3
- SHA512 620f66004240ca1a85eaa0c09872f3a662902b4b020e0836dd3162be09978e24ce945769eff7bbbd6a69efc6c6fdc417b82303bb620d408a3e160e3335b2ed00
- SSDEEP 6144:/o9nhr3lcpn68k+hLMyRiakXuEtcHVtChc25OLf4nX6Fms9:/o9wahyRd5TicC04w
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5c:5a:d3:81:0a:6c:40:97:5a:dd:be:33:a7:48:51:7b:32:12:84:72:b3:f5:b5:4f:fe:5c:f1:42:05:94:ba:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
291858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\132\s\obj\Microsoft.VisualStudio.Composition\Release\netstandard2.0\Microsoft.VisualStudio.Composition.pdb
mscoree
_CorDllMain
Name
.text
Size
277KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.CoreUtility.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b89be2024f64a5ead3ba16985c42d69c13e58f58745206b9a17b594978754713
- MD5 2d07b735a69ca36e3f0f38c6387b8e28
- SHA1 e06cd254f7361fe91f6ea3787e1457e910c6c1e8
- SHA512 14baa4c5c7dc07bd356f5c25459fa7c9a9d09fa70546b33cf556c2e6f3c3616649c7dd4cead87a0e66311ead94da3c48066f5616caba915b233b3d7cd84aa08d
- SSDEEP 768:jaEpZOPQmP/3rKs0+tgWeESOeVvQnfYmoi2qXl96:jaE3Xm33rKX+tgWeESOrnwmoTqXv6
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e5:8c:d9:93:0e:2c:88:43:d5:40:a9:0e:24:25:64:70:54:83:88:ef:85:08:68:5e:5a:bd:50:de:d7:71:ce:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
ef:ed:43:fd:1e:fa:70:ac:6e:c9:a7:e7:0a:23:b3:26:d9:22:28:01
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
28374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\69\s\out\obj\CoreUtility\net46\Microsoft.VisualStudio.CoreUtility.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Language.Intellisense.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee591319b81309f70617c0a444d8b7bc014bd8c86b3a35034748149b8d129554
- MD5 0b8ee9c16452e25ba8213164a8c0df19
- SHA1 83452dac59ef2392530171e6e32c6de479ec4b5c
- SHA512 4554d5b6315c4d7fe06141ab66847deb635d3e690ff147f733ba548116a4b74521a9ef72f2573a75205689ecefff73a45b946b7099ed065ec13df89f9165ab28
- SSDEEP 3072:scv4CRSERfCMzI+S0J1S802+gCigDPU0c92hoM3zC:ngCRbe49gPFcohjDC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
47:84:61:3e:79:ac:c2:08:fd:82:63:ba:fd:90:a9:86:7c:34:58:db:25:dd:f1:07:e0:83:96:80:45:0b:70:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
5e:b7:c0:5f:7f:73:da:12:34:dc:de:a1:45:05:11:e4:3a:0d:c5:65
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:6e:76:d0:4d:3d:fe:a9:65:00:00:00:00:00:c4
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
77986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\69\s\out\obj\IntellisenseDef\net46\Microsoft.VisualStudio.Language.Intellisense.pdb
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Text.Data.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5ac8022ab982a5c36d64fb30b8115e2e43faca91768c36ab8ba8b7e93e3dbde6
- MD5 eefa9b065f29c2794ac489244dafa7b3
- SHA1 a73e9cc49d06fb687cbf22052c261f5860ca425c
- SHA512 894050d2c35cc7ac56cd7ed01e083b0669aa70d19d23746c850b6a9ae3c1ebfabe14cba1f936d9c034359662906c64242be7610918e5417366d5fe27ce2084fa
- SSDEEP 3072:Ke6Q2dLHA3/Z5QiCIw01ohcD8jLnjl7ElUprEk7+626bfone:Ke6Q2dLHA3hLFKR91Nue
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d1:7b:f7:28:a9:ed:5b:d6:dd:af:10:a5:3f:9e:6b:38:6f:3f:b2:f3:00:a3:29:f1:e0:31:33:8e:9b:d7:62:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
ed:5b:0d:e8:4e:3e:a2:f3:5f:12:ce:16:db:6d:ec:f7:61:b0:d2:d2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
85086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\69\s\out\obj\TextData\net46\Microsoft.VisualStudio.Text.Data.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Text.Logic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 62905b7867d9487b5f1db82825904d0dfc04ace5966beabbfcee193ccf1c3d8b
- MD5 02226bf39cb9ba85e52e77f9789c8f07
- SHA1 46c98b8f7061fd98148d5f5d0a01136d7b425bef
- SHA512 6e16d72c7b1664e0c0c13bdbbb7b5409a819b0a097a681ecbb6712f998e7feff69c1ad71ece681ca3065628879d65ad643f8a8cd079c717c0e795da53a15ffe3
- SSDEEP 1536:0sNFDm5zRJbqeM6fy2qisMBTrq1Moliahwo5u:0sNFDGzRFTMT2qvImvwo8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7a:03:86:ee:74:b9:5b:98:50:b6:ad:47:38:2c:85:e1:fc:ba:65:78:bb:54:d7:ff:8a:a2:34:f8:0f:40:3d:31
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
38:3a:f4:ef:ba:4e:29:0c:1e:f1:27:d4:b1:d8:39:2f:fe:93:01:ec
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
52210
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\69\s\out\obj\TextLogic\net46\Microsoft.VisualStudio.Text.Logic.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Text.UI.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 afbb75d4627e03bbc623d431dc60a0369c5f1951db9f5f204348923feeff2420
- MD5 73eb6bce506cb1eea24b7eac9016961d
- SHA1 8c0a4fca8f07c6930612e657b55e8fb104c0b8fa
- SHA512 939fdb0275c67ad30fce06c3ad984f7ae4c89b4fc9ff2432729886ba08b32cb44444c1dcd90b126410f6ca621400abaccbfa7df7beeaa30b668ab39cf157ab4f
- SSDEEP 1536:hCDlZRvSTHVsys6BTGVk4s8Yu4KDtTp+sKCc59FBcTAOCzhUDwBo7LA:Glisys6BT+Ts8sKusJcMdCzhfBoQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ca:17:24:bf:31:ec:49:81:7f:bb:75:6b:60:ab:13:5a:88:71:27:ae:e1:26:60:8e:2f:8e:0b:0a:7b:b2:45:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
1c:7f:10:a5:03:e8:60:1c:e5:46:0f:fe:d7:f8:6d:b2:eb:5f:8e:ee
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
78030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\69\s\out\obj\TextUIWpf\net46\Microsoft.VisualStudio.Text.UI.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Text.UI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb6332d6c685f9aa6f2ca7e2fab34671ce3138681a978615c85aab6f8b79df13
- MD5 eb52de9017440e056d47952abebe4ef6
- SHA1 074e96ea5bd1443b65448e18289b5b7ff15a763e
- SHA512 f0678ce6d80a851469a346c35cf1977e4448e0fec8b07a6839348a6d91ec04d26faee95b41a0a2d89e9d27fecb41d43fee185790e68279aa2559eb9b1f475684
- SSDEEP 3072:Q5azM/dBQ3BYfplJolf8EGhWmcdL/+ozi:Q5y0doBYfpTolfvGhEdiai
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
57:63:d6:af:3b:ea:b0:cc:25:73:8d:f8:db:87:59:1e:d5:75:22:a8:21:5e:23:73:ae:fa:54:7b:af:a6:b9:16
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
b7:7d:02:18:10:0b:af:37:9f:c6:1c:b3:5e:b4:6b:ef:27:65:53:f3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:0e:9b:a7:d8:b2:dc:f7:2c:00:00:00:00:00:c3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
87870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\69\s\out\obj\TextUI\net46\Microsoft.VisualStudio.Text.UI.pdb
mscoree
_CorDllMain
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.VisualStudio.Validation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d11bd38cd3f818ce6c05909a4accbb7e24c1450ff17efb9c90fd2bdcac2be22
- MD5 afacfe5910b94215c77608666cd278b7
- SHA1 f0cb7cd1be7e9e9ed9aa1035724421f172a87513
- SHA512 857d773bbb60c042e099e45c025fcaf11f12b422f5919a5b0b1e3c97ed0adbcf58bfc6499bff3ba39d2af828844cf7f368c4cf441b5d62d2522af8b0eef1a464
- SSDEEP 768:jZoqPlmu9ssReuArCEMLnJS5/Wlo5G7n+:jZCaarTMLn05io5Gn+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9c:4c:2d:9d:a1:7d:45:d3:05:85:18:4d:cd:f0:06:ae:61:dd:41:07:56:71:f1:09:b8:5a:a5:07:98:7a:ba:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
22322
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\21\s\obj\Release\Microsoft.VisualStudio.Validation.Portable\Microsoft.VisualStudio.Validation.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Microsoft.Win32.Primitives.dll
- SHA256 2399f3cefd4df7ac452d7ffd106fc9e1c6d14e2888d01c1405d371b29073299e
- MD5 4d2c915b523026d5abc005b1a72a8bdb
- SHA1 b5306a105c8f27049d8502580c36c1b7948d9ad4
- SHA512 62343b50f046fd80d2e7cce13510ca694a714626ea95157127412b2e5eb32e58670fa4fbf6f2c451c86b3902b3f4e7f2f064ce64902336e23e17aa01a4ed4284
- SSDEEP 384:RWhqpWeLoxNFun5ChBNe3k9JOTodHRN7kTfVlGs5RR:NlL+NF859yOTGkiU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5e:10:a6:68:ca:ea:bb:05:e9:0c:ef:12:23:c8:cd:d1:14:1a:94:1f:7a:f6:96:2f:36:a5:12:9a:fc:59:a1:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.Win32.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\Microsoft.Win32.Primitives\net5.0-Windows_NT-Release\Microsoft.Win32.Primitives.pdb
Name
.data
Size
512B
Virtual Size
232B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
308B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.Win32.Registry.AccessControl.dll
- SHA256 95de8ca6c96be5024a576c99253390f49d2f1c6b28f8c5354d45c4389025342e
- MD5 6bf05cd783ac4a9151d18b671ca725a6
- SHA1 e726c5a763c3a03a4f95fedf2942eb55d8c2475b
- SHA512 bfe99ce306391cfcab6002c4b1fe8a0dafc950a28172c20cbecaad694725daf749fab8ce22f22b638af3e15fea33abb98bb36801431bcf1860b77f7b4c7645d0
- SSDEEP 384:6WFarWHDZUAI0FsPhH5XvMjm9Ons7gdHRN7bP/hl3+OG4:oODZU90Fg9kSOns7O73l
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e3:c2:74:b1:2e:3e:e2:87:f2:ab:8e:93:2a:84:83:f1:34:85:6b:13:25:01:35:c3:c4:cc:78:82:af:a0:aa:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.Win32.Registry.AccessControl.ni.pdb
/_/artifacts/obj/Microsoft.Win32.Registry.AccessControl/netstandard2.0-Windows_NT-Release/Microsoft.Win32.Registry.AccessControl.pdb
Name
.data
Size
512B
Virtual Size
236B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
408B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.Win32.Registry.dll
- SHA256 5459e4f9a447492d3344253a2dce86db071420c689b826b3d58577f2b3d66e58
- MD5 70e7c70fbd3409c799cea7066750d22c
- SHA1 c00499ffadce05c08899d3f0121f07dd7df0ce2b
- SHA512 406072ee96f9a56cc719e0611582e024ee4a7b298c3948d15edc45a9164d9d8c09f013d922d58704111b5716ac64409e8130cd9b01bd21b912a336dd5e5a18d8
- SSDEEP 1536:p87IUbZa0lk0XfGVi5odml52MiARM+WYFfEEZaPj01Y1:pUIUbrlk0GVi5Wml5iCF8EA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
41:d8:ff:47:3c:0a:d3:27:6c:4f:0d:aa:7f:89:09:c6:f8:40:48:cf:a7:1f:07:5a:56:7c:95:f2:d3:60:cd:2d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.Win32.Registry.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\Microsoft.Win32.Registry\net5.0-Windows_NT-Release\Microsoft.Win32.Registry.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Microsoft.Win32.SystemEvents.dll
- SHA256 01b6c06a77e530d470504ac673308a958da2d6753ecb90f6211d11074a24ac8f
- MD5 857f1c305d06a0d09577c60f0ec43c2d
- SHA1 63d3500f6ca1557c90de2d27b3672babb9a44232
- SHA512 07b86a3661ef7f07c3a8ec05d5120c4d8d895470920e7141bc3f7b89e5f4719e04275556af648d1f422f4ae91c409ab5f7e9692636f0934b037257121d3ee3ab
- SSDEEP 1536:Mp7e9dxdiLGWNrHRE6hpAEwhmV9oeE5xgH:Mhe9vdIlzod49ox4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cc:61:6b:7a:06:91:86:08:98:80:b5:50:c1:dd:82:46:bf:cb:89:a4:c9:6e:ba:96:b8:31:87:f7:65:f3:79:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.Win32.SystemEvents.ni.pdb
/_/artifacts/obj/Microsoft.Win32.SystemEvents/netcoreapp3.0-Windows_NT-Release/Microsoft.Win32.SystemEvents.pdb
Name
.data
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Mono.Debugger.Soft.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3312eea9e90ec973f11173257ce7554261530cdbdd4d8ac80a9d4ed591dea0ac
- MD5 ac4a88ce6122f49d3099eda3b4c8d39b
- SHA1 7a5c8463f8773299fa0668ca64bd7a93fb8de5ed
- SHA512 3940b975fb2b18170f3e4f1232929d67aeaebe36ef20860df6f40c0eda21147bfefa76ca3f48d4719f56aa7d42f98b9c0fc798e4b474a8654fdcdac8b38dd58c
- SSDEEP 1536:CxJm1X7QpZ5UpSZGaftKvrPd/yTa/gLE1Ge+kgtZmbDrYzv2V0malxPyzJv:EJm1X7NYIL/gE2ibvYiajxPyzl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
125722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\Mono.Debugger.Soft\obj\Release\net5.0-windows\Mono.Debugger.Soft.pdb
mscoree
_CorDllMain
Name
.text
Size
115KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
852B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Mono.Debugger.Soft.pdb
- SHA256 19ad81f1d70bfc7c97cf64827943b83c96cd18d63c9cd8de2df7ebe88f2114d0
- MD5 4dc729fcb70c2f3ee3481378062d2386
- SHA1 aeb645dfb6041bf1291db7c5cfdd20b01ad41321
- SHA512 e24b378030ffbb8cc308973fed405bb656d603b524636a0bebf861e749c421640e3d50eac12c8a9ea2c0b8f293cba207f18945d6b902fbdafe5c5d8dc96a9fd0
- SSDEEP 1536:On30W3fmVFzNLU5uX+WwAeQbo13ntdSfM:O30FBLrX+WbeQbo13ntdSfM
- MD5 SHA1 SHA512 SSDEEP
bin/Ookii.Dialogs.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b4d7be552c438386f322ddb9ea5ad615da13dfe41b81521327a3d2df44c54a7
- MD5 f5a593ec4441d927fe30751d952b8539
- SHA1 4944bd33f2fc4e1f3cd57b4c78a7ea5d03bbf4db
- SHA512 970871595125ff96e538471bc1ff6b86bae320c8b0450665897637b23765369d827e0d85f9cd4f71c32b2bcc87e0d96f0d5d7c8df0a424cbd5adb55384380843
- SSDEEP 3072:y/n/mgglas/5zpzuz98UXxJ9SxX4kGit:cn/mAs/5zpzuz98UBJoJGi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Ookii.Dialogs.Wpf/obj/Release/net5.0-windows/Ookii.Dialogs.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/PenImc_cor3.dll
- IMPHASH 14fa40f369acb705bd26130abf35bd70
- SHA256 ab7c80eddd3397f2698fc3a3fddcc093901c1bc221c8205a9ba56c7b8806d4b2
- MD5 9a85861a7ddd3a96dad1bf53b8887c16
- SHA1 ef74bf5db65e5c501ea26d2a12aa1037dff39a18
- SHA512 99d6cc536398ce6a71e1102597078a10da5609429d2bfa31d4b4bb6b3215274ed77aca8e7c81651db7d15f9f1e7f39bcced2ee321c99ea04749e84f83fcc9565
- SSDEEP 3072:so85CMC9LQd2OnyaoD+g5Z7N6c9JrTmajFY4Fbpr:MCMgtao+cCA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4c:d6:40:7d:a8:da:03:ff:c8:1b:c7:fd:4c:9d:8a:89:5c:bd:bb:1a:68:a2:36:cb:43:a7:40:6f:28:36:82:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
70640
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\bin\PenImc\Win32\Release\PenImc_cor3.pdb
kernel32
GetThreadLocale
SetThreadLocale
DeleteCriticalSection
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
CreateEventW
GetCurrentProcessId
OpenEventW
OpenMutexW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetEvent
LocalFree
SignalObjectAndWait
IsWow64Process
GetCurrentProcess
OutputDebugStringW
CreateMutexW
CreateThread
QueueUserAPC
SetWaitableTimer
CancelWaitableTimer
CreateActCtxW
ActivateActCtx
VerSetConditionMask
LoadLibraryW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedFlushSList
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CloseHandle
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
CreateWaitableTimerW
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
GetCurrentThreadId
user32
SetWindowsHookExW
EqualRect
CallNextHookEx
GetWindow
GetParent
GetWindowThreadProcessId
PeekMessageW
UnhookWindowsHookEx
GetSystemMetrics
GetMonitorInfoW
GetDesktopWindow
MonitorFromWindow
IsWindow
MsgWaitForMultipleObjectsEx
GetWindowRect
CharNextW
advapi32
ConvertSidToStringSidW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
shell32
ShellExecuteExW
ole32
CoLockObjectExternal
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoGetApartmentType
CoCreateInstance
oleaut32
RegisterTypeLi
SysFreeString
LoadTypeLi
SysStringLen
UnRegisterTypeLi
VarUI4FromStr
SysAllocString
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncpy_s
wcscat_s
wcscpy_s
wcsncmp
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
realloc
_recalloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_invalid_parameter_noinfo
_errno
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
terminate
_initialize_onexit_table
abort
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
rpcrt4
NdrDllGetClassObject
NdrDllRegisterProxy
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_CountRefs
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_IsIIDSupported
IUnknown_Release_Proxy
NdrDllCanUnloadNow
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
CStdStubBuffer_AddRef
IUnknown_AddRef_Proxy
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CreateResetEvent
DestroyResetEvent
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLastSystemEventData
GetPenEvent
GetPenEventMultiple
GetProxyDllInfo
LockWispObjectFromGit
RaiseResetEvent
RegisterDllForSxSCOM
UnlockWispObjectFromGit
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
228B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=261, version=29118,
count=15, id=260, version=29118,
count=10, id=259, version=29118,
count=3, id=260, version=27412,
count=15, id=257, version=27412,
count=163, id=1, productName=Unmarked objects,
count=13, id=264, version=29304,
count=1, id=256, version=29304,
count=1, id=255, version=29304,
count=1, id=151,
count=1, id=258, version=29304,
bin/PresentationCore.dll
- SHA256 eae2aaa6f89e83c3841898be7b3ba94a773138f13943a36ac889d15972aba62c
- MD5 5919281fc845c2231ecda3f0a61766bd
- SHA1 81bf250dbea3adcf81e063d72fe07037793f81fd
- SHA512 baec4cc7241936bbd04a5e91ca92b7b3d87205a8c9c023adca806747ab96d20be679ea45c0e241311724d2f36864aa5ac1ccc33c809686e91e435b7a71ca6732
- SSDEEP 98304:JCvzgRxG9bdBMSwDrXvckYvUt6Gfvn+/BVw/z2Y83PI:cERxibdB6Lrt6GfvnU8bmQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4b:68:19:40:e0:c2:74:19:0a:35:f4:59:07:1b:13:18:87:ac:40:d6:de:17:83:df:41:ca:c5:69:22:00:57:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationCore.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\PresentationCore\Release\netcoreapp5.0\PresentationCore.pdb
Name
.data
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7.3MB
Virtual Size
7.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
308KB
Virtual Size
308KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework-SystemCore.dll
- SHA256 3b8dca38620e5818dfe961e87b4e196890d2aeb06b7fcfc31b414a6d36050c8b
- MD5 e68e90a1ddbe1d4b89214b986bcf440b
- SHA1 fd0e6ff9c7032d0e4fd5eed529ea601067523cec
- SHA512 cf4050b824cd468f7ecf7c7d1f70046a36941e0455fbad69d205aafe8b8c0ce33bc7b4c3e185af035b030b73537588dca7275bb2b2968249ddc3ba3fbd821cba
- SSDEEP 384:qW5EEpWzJqrWzJrTScQuAov3T1rJgABUrABB4HkdHRN7t0uw7lGsiPs3:VEQW3T1r6r8B4HauC/c
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
34:9e:e5:53:75:09:57:6e:b7:38:2e:cb:4c:28:0e:bb:0d:66:c3:f8:99:d7:e8:d6:a3:67:65:d6:52:90:9b:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework-SystemCore.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemCore/Release/netcoreapp5.0/PresentationFramework-SystemCore.pdb
Name
.data
Size
512B
Virtual Size
368B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework-SystemData.dll
- SHA256 0bf0726e94796cb3edf7922624c861e24f9b4fa735d6dfae307b99110c5714a6
- MD5 ebaff659a9d3fd07cc4729b3e11a7cc4
- SHA1 2826122b5c460c4edb9304677f973a0ecbf12ee7
- SHA512 52a3fa741660764e8a60e50fbd69c9ae66b0877a8398ecbfe0f5394822c3da109640adf87c9f735958985b5e86c158656f945c2b911f8b1d4d69e910c598d93f
- SSDEEP 384:sW50TvVEL5Ou4crBtatNQjsgAldHRN7c3zfVlGsa9:zEsrQuAzoC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0c:5f:c0:e7:36:e0:d4:28:60:3a:c8:99:f6:07:d8:50:21:99:44:bf:4f:22:fc:f5:76:c4:a6:df:af:e8:bc:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework-SystemData.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemData/Release/netcoreapp5.0/PresentationFramework-SystemData.pdb
Name
.data
Size
512B
Virtual Size
316B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
376B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework-SystemDrawing.dll
- SHA256 6491211c6d783a3a9cc89f04e28a2dba5e10336ad5011766c8f52c76ae6a1ded
- MD5 9c98dd54410612cbf6ca5477ae3fc032
- SHA1 6c42b66aee4e0fca3ffcc6aa4d562bd2e9852fb8
- SHA512 51e0633db882a80baa267bf04da373e333d349308af026b2062cb3049ab17460d5f90c1a05de25eeaf371a4a9aaba371e1afbbc7d8bdbaf5b74e8bc65f3b1388
- SSDEEP 384:sW0JSgFEd9Ip2e3zUIxjs0dHRN7rN/hl3+nwGn:6EewqwqBewW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
48:10:ed:dd:fc:05:1d:f8:a1:36:a1:bc:74:37:f2:3a:dc:4d:87:a4:d5:c1:65:6d:6d:d2:93:f3:6f:0d:2c:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework-SystemDrawing.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemDrawing/Release/netcoreapp5.0/PresentationFramework-SystemDrawing.pdb
Name
.data
Size
512B
Virtual Size
268B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
288B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework-SystemXml.dll
- SHA256 878e69b60e579a91bec8cedaa5aa2b1d63e06b1c62003e2462319955ad56cb16
- MD5 cc25620479dc857860bf0f43c668a3c3
- SHA1 db393d05e3c1a640b9c9f5e3ae2fe3a23607e0fa
- SHA512 5201f34ca55f858eec7b0b95a773e65f767b637cb3633a489bba949aa6b18e801ac2ba5b4ea38323e63357ba526a459c87fcf7798707a2580baf9b9b585572d1
- SSDEEP 384:zWQNrCnc4k+Wtk6XoetwhX09TODoQldd66dHRN7zfVlGsa9:PKxhet80Y7iIC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5c:8b:b1:bb:0a:e0:ad:0d:32:50:9a:1f:c0:18:85:68:6e:9a:10:8a:5f:40:67:ab:30:95:6c:51:c5:4d:87:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework-SystemXml.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemXml/Release/netcoreapp5.0/PresentationFramework-SystemXml.pdb
Name
.data
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework-SystemXmlLinq.dll
- SHA256 88042b38b08a983bfac7e3056cad41c3aef10e52eebcf6fefe375e5954362eca
- MD5 b2dd1fd47d7379f9d0e75b9e277c38e7
- SHA1 f8662ad43ff773ba1d00ec6b989a803b259b0f21
- SHA512 3fae0ccb5b68f9a4f4c3b882f6f4feb6b31cab79596c2bff03192a8808693884ce5c1760ebbbf454ab0afc8872b35a8c49bbe40aa6f2ac77318c8b0399ed74c1
- SSDEEP 192:tWEpAHn0t1qGawOVZgsq99LB5BW4GD5dHnhWgN7aQW7jVT/gqnajKsd2:tWEpenkwwOrxs958dHRN7Gj1IlGsd2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7d:30:2d:e5:a9:0a:dd:b8:ef:5f:c9:6d:f4:e2:4e:3e:11:a8:81:96:f5:d1:72:ed:d5:65:37:d2:03:e6:d8:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework-SystemXmlLinq.ni.pdb
/_/artifacts/obj/PresentationFramework-SystemXmlLinq/Release/netcoreapp5.0/PresentationFramework-SystemXmlLinq.pdb
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
136B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.Aero.dll
- SHA256 ad880f84c9aaf19e9c6d7f41d1c1135622aafbe2d08b135a45720bbbb4e40f1e
- MD5 916cb9bf70a1812698841a5a428d5985
- SHA1 d5bcb1edb14b8c880d5f1ed5f95d462ec0762530
- SHA512 b7586fdaa54b64eba4ba7ac8dbb1a6fe6f388c316e300fcaa177c3b765d49381b67f9bb1323b6a9452bbb2c699405ee3f54480a7deba1a4abe5a832b0a546179
- SSDEEP 6144:saWCy94nnnpRjsDXlObxG5mUWMyuY2L+HtbBew:saWCyMRjsDFiHX
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5d:ea:fe:1a:25:48:e2:5b:46:75:8f:2b:9c:3d:a5:9e:f3:46:35:cc:8b:db:4d:ea:76:57:43:31:85:cc:8c:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.Aero.ni.pdb
/_/artifacts/obj/PresentationFramework.Aero/Release/netcoreapp5.0/PresentationFramework.Aero.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
402KB
Virtual Size
402KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.Aero2.dll
- SHA256 4445b4aed4aba74039ef071e786c6196f46ef8bde31491913e9a36fb17441834
- MD5 0fe944d1c24c6219a9a6ad514ecfa83e
- SHA1 10ce96cfb2ea435569ef74d4c737042c5eecf5f7
- SHA512 1264b086ac93674cb8e0f3b7a6721feada8387c2f9d39b032b0b9cec2746eb9154e244cc53cce0d8d371247430c098063f0592a72c0e6f558a5df859048da867
- SSDEEP 6144:7aWC8ahQnnnpVUnVEPkTAv+ojvkCeaKFtbD0+yAoKgdXSGbB8MR/:7aWCveVUneP8kTS7MN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
75:0f:8b:61:fd:13:6d:36:67:ef:45:af:ce:ad:3e:e8:62:7a:c6:c6:c6:3e:dd:b8:78:45:42:41:ed:ca:fc:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.Aero2.ni.pdb
/_/artifacts/obj/PresentationFramework.Aero2/Release/netcoreapp5.0/PresentationFramework.Aero2.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
408KB
Virtual Size
408KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.AeroLite.dll
- SHA256 ad99f8d016ca0ca49c1338ceed78b483995c596de6959f6868e5a16aedf48eee
- MD5 5c90e38ba2352932dea3526f7ec77b3f
- SHA1 cdecf91ebbff1e908b1013e427271fd6b5c9567e
- SHA512 0fa2014e491a0d96888f3bbeb46071bfdaa7b046fb43b2a398004955896f90f3e847be97b3b3815a469626ad2d11125701cdbba0b59425f2d30100c9fd7b6c4f
- SSDEEP 1536:HDHLy7kMUWjEejN0zp/uvS++D1k9T7DwVNSPoV66yEKMtqWC6XOz9MFhpLBS+FNr:HDHLy4M/jg0K9K2SwFhn1BaM5z/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1f:b4:fc:c4:27:bb:b3:32:1a:63:4b:ec:4e:a4:d5:66:8a:ef:e6:57:c5:74:f4:87:c7:d5:39:81:0e:d0:a9:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.AeroLite.ni.pdb
/_/artifacts/obj/PresentationFramework.AeroLite/Release/netcoreapp5.0/PresentationFramework.AeroLite.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
205KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.Classic.dll
- SHA256 034c2df65de8f8445cde96032d6276a8c0e08282b74379e7efdff7689c7a67e2
- MD5 5e3c290677d560f8d1ebeccde949889e
- SHA1 6c4b4ee254d616ef999c1bb754f04baad4ca33ae
- SHA512 ec6f517fd64830b98ac5db74d3edc3121d3c98cce08b2a037f271ce56a973c9d927bb2dbbb487d3f0088163545dd9c3829d17980c536b9d78fca7d9ddac40429
- SSDEEP 1536:D9iXfH5sF6DULnNWmeLCX4fSFl5UXEUlFCpHVpltqznYqafevHnfFtJxN5zJf81R:D9ivZfoLnNPXxFlqupKGr1BY/qMW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:28:21:68:78:0e:9b:59:69:11:70:6c:d9:c1:50:70:d1:88:46:5f:07:29:c9:cd:b5:7c:31:9c:a3:37:07:64
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.Classic.ni.pdb
/_/artifacts/obj/PresentationFramework.Classic/Release/netcoreapp5.0/PresentationFramework.Classic.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
240KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.Luna.dll
- SHA256 72f80041f4cfd422362486c48b2393fde21d7a34e4662c8b164efd4abb71f0d9
- MD5 439a512df1d74ce2e34fe4bb7adf94c7
- SHA1 e09f572abb4cc1c6eab0aee7f1d2c6ce288759a4
- SHA512 9551d9330a4b597a8143ec690255ee0c21c43403fb109ce2c73e7254125f31c881e415f0e7012966c5e131bbf6b5ebf93d1e1b8d0990c18376c30ded2cee7c87
- SSDEEP 6144:w3fDSIfQ/uqQB7Wiahu1puryYjxrruqfd77DYXehvFU1XZ3Xl7:+eaQ/MPahM4xPrBYXehvFaZ31
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
83:9a:7f:d2:ff:d2:14:b7:62:34:c9:60:c5:cc:e9:c5:d1:94:f0:e6:52:ff:cf:be:c1:5d:c1:e0:02:4b:b4:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.Luna.ni.pdb
/_/artifacts/obj/PresentationFramework.Luna/Release/netcoreapp5.0/PresentationFramework.Luna.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
623KB
Virtual Size
623KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.Royale.dll
- SHA256 fe1cc75d3e3d0985cb56aa70668b9b334c34503689d700fd79101a87cd78aa8b
- MD5 f0d0e6828bee52d80bbcfb1460b8cf35
- SHA1 9f602b57ee19e1f66451efe85fe574459858b33b
- SHA512 b6b420d58760f32dccc9d67cb929428190a0b67bd8280d0620fb5f3b60c46c0c0c193415638d19dab94bf41fef356c961ce9bd0b0e480159811cc321a3ac65b9
- SSDEEP 3072:TJi+mkt0M1kILvK96Xcfb81vFdqPsBf8FTHdrvxG7B+5:ozILq6Xcfg9UPe8FTHd7YM5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
82:23:c2:eb:da:9b:f6:df:ee:d9:66:16:a7:20:2a:7a:5e:a8:fb:f2:f9:59:b1:b7:2a:5e:4f:52:0a:f1:39:87
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.Royale.ni.pdb
/_/artifacts/obj/PresentationFramework.Royale/Release/netcoreapp5.0/PresentationFramework.Royale.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
295KB
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationFramework.dll
- SHA256 1e5908dffebdc501a5cc37f64f9104e6fe241db2fceedfbb6a4c3d0285ceb337
- MD5 7a991ebf5ea07a2cbe6e96f370bcf028
- SHA1 198c2c633014878afc84fdeb84e68e4a98c26512
- SHA512 83dfc72bcd46b80f30082d989347383356bccc4391b6b29adea0315cbcf3736674b92c2cd87702b76a0c459e092c48f70323184eb7bfb9be75083665d5e6703f
- SSDEEP 196608:AzxKBalZP7dIgdG6wzRXEoxYI0u1S4eaZWRiFYlrsm7ALM9KSEx68A27W:AzldZ/4poa3YloYQx68p
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1d:df:e9:38:26:45:54:5e:ff:05:9b:4b:4f:64:67:84:ab:00:d5:f4:cc:01:27:68:bc:d1:ed:d2:a8:ba:d1:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.ni.pdb
/_/artifacts/obj/PresentationFramework/Release/netcoreapp5.0/PresentationFramework.pdb
Name
.data
Size
176KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
13.3MB
Virtual Size
13.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
673KB
Virtual Size
672KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/PresentationNative_cor3.dll
- IMPHASH 1ba17ed539f0828d6eb789fa20855dd9
- SHA256 1f2063ea6133f6152ae0060c1325a9ef5ea44b294626c4634bc9aa2f91f5b5f4
- MD5 032701dc5a8d9682f6fe83e2870725f7
- SHA1 1ef502d6722b17039eb418269fd6528d61f51484
- SHA512 a716523fe43c9d4ec49f82c6aae24f103dae09922c29e6982cd40ac89346db26af87285061081132a659a35fa8a43e9fd92378d6dc1869d6cd911eb027c673e2
- SSDEEP 24576:1tajtIEexOud2LlwjKfQtP3H2dLjRqvaiRW45JnFyYRSDHYd:1sjtIEexOu2w2fQpOxoaisIpe4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c5:3a:dd:0d:d6:d9:0d:95:79:b2:98:08:e1:af:61:b6:48:76:f2:02:e1:78:e6:31:ba:44:40:30:5b:5b:0f:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
5568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\bin\PresentationNative\Win32\Release\PresentationNative_cor3.pdb
kernel32
TerminateProcess
IsProcessorFeaturePresent
LoadLibraryW
GetProcAddress
VerSetConditionMask
SetUnhandledExceptionFilter
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
UnhandledExceptionFilter
GetCurrentProcess
DeleteCriticalSection
DisableThreadLibraryCalls
FreeLibrary
InitializeCriticalSection
OutputDebugStringW
GetCurrentThread
TerminateThread
InitializeCriticalSectionEx
GlobalDeleteAtom
OutputDebugStringA
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
RaiseException
InterlockedFlushSList
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
GetLastError
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
abort
terminate
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
api-ms-win-crt-string-l1-1-0
iswpunct
wcsncmp
strcpy_s
memset
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
ntdll
NtQuerySystemInformation
DbgPrintEx
DbgPrompt
DbgBreakPoint
RtlUnwind
user32
GetMenuBarInfo
SetWindowLongW
SetScrollPos
SetFocus
MapWindowPoints
GetWindowTextLengthW
GetWindowTextW
GetWindowLongW
GetWindow
GetParent
GetKeyboardLayoutList
GetAncestor
FindWindowExW
EnableWindow
gdi32
GetTextExtentPoint32W
ole32
CoCreateInstance
CoTaskMemFree
oleaut32
SysAllocString
VariantInit
VariantChangeType
VariantClear
CreateDocContext
CreateInstalledObjectsInfo
CreateTextAnalysisSink
CreateTextAnalysisSource
DestroyDocContext
DestroyInstalledObjectsInfo
EnableWindowWrapper
FindWindowExWrapper
FsAddFigureObstacle
FsClearUpdateInfoInPage
FsClearUpdateInfoInSubpage
FsClearUpdateInfoInSubtrack
FsClearUpdateInfoInTableSrv
FsCommitFilledRectangle
FsCompareSubpages
FsCompareSubtrack
FsCompareTableSrv
FsCreateDocContext
FsCreateDummyFootnoteRejector
FsCreatePageBottomless
FsCreatePageFinite
FsCreateSubpageBottomless
FsCreateSubpageFinite
FsDestroyDocContext
FsDestroyFootnoteRejector
FsDestroyPage
FsDestroyPageBreakRecord
FsDestroySubpage
FsDestroySubpageBreakRecord
FsDestroySubtrack
FsDestroySubtrackBreakRecord
FsDestroyTableSrv
FsDestroyTableSrvBreakRecord
FsDuplicateGeometry
FsDuplicatePageBreakRecord
FsDuplicateSubpageBreakRecord
FsDuplicateSubtrackBreakRecord
FsDuplicateTableSrvBreakRecord
FsFAllFootnotesAllowed
FsFFootnoteAllowed
FsFormatSubtrackBottomless
FsFormatSubtrackFinite
FsFormatTableSrvBottomless
FsFormatTableSrvFinite
FsGetClientHandle
FsGetColumnRectangle
FsGetEmptySpaces
FsGetFigureObstacleData
FsGetFloaterFsimethods
FsGetIntervals
FsGetMaxNumberEmptySpaces
FsGetMaxNumberIntervals
FsGetNextTick
FsGetNumberSubpageFootnotes
FsGetNumberSubtrackFootnotes
FsGetPageRectangle
FsGetShiftOffset
FsGetSubpageColumnBalancingInfo
FsGetSubpageFootnoteInfo
FsGetSubtrackColumnBalancingInfo
FsGetSubtrackFootnoteInfo
FsGetTableObjFsimethods
FsGetTableSrvColumnBalancingInfo
FsGetTableSrvFootnoteInfo
FsGetTableSrvNumberFootnotes
FsJustifySubpage
FsQueryAttachedObjectList
FsQueryCompositeColumnDetails
FsQueryCompositeColumnFootnoteList
FsQueryDcpLineVariantsFromCachedTextPara
FsQueryEndnoteColumnDetails
FsQueryFigureObjectDetails
FsQueryFloaterDetails
FsQueryFootnoteColumnDetails
FsQueryFootnoteColumnTrackList
FsQueryHeightDefinedColumnSpanAreaList
FsQueryLineCompositeElementList
FsQueryLineListComposite
FsQueryLineListSingle
FsQueryPageDetails
FsQueryPageFootnoteColumnList
FsQueryPageSectionList
FsQuerySectionBasicColumnList
FsQuerySectionCompositeColumnList
FsQuerySectionDetails
FsQuerySectionEndnoteColumnList
FsQuerySegmentDefinedColumnSpanAreaList
FsQuerySubpageBasicColumnList
FsQuerySubpageDetails
FsQuerySubpageHeightDefinedColumnSpanAreaList
FsQuerySubpageSegmentDefinedColumnSpanAreaList
FsQuerySubtrackDetails
FsQuerySubtrackParaList
FsQueryTableObjCellList
FsQueryTableObjDetails
FsQueryTableObjFigureCountWord
FsQueryTableObjFigureListWord
FsQueryTableObjRowDetails
FsQueryTableObjRowList
FsQueryTableObjTableProperDetails
FsQueryTableSrvCellList
FsQueryTableSrvRowDetails
FsQueryTableSrvRowList
FsQueryTableSrvTableDetails
FsQueryTextDetails
FsQueryTrackDetails
FsQueryTrackParaList
FsRegisterFloatObstacle
FsReleaseGeometry
FsResolveOverlap
FsRestoreGeometry
FsShiftSubtrackVertical
FsSynchronizeBottomlessSubtrack
FsTransferDisplayInfoSubpage
FsTransferDisplayInfoSubtrack
FsTransferDisplayInfoTableSrv
FsTransformBbox
FsTransformPoint
FsTransformRectangle
FsTransformVector
FsUpdateBottomlessPage
FsUpdateBottomlessSubpage
FsUpdateBottomlessSubtrack
FsUpdateBottomlessTableSrv
FsUpdateFinitePage
GetAncestorWrapper
GetFloaterHandlerInfo
GetKeyboardLayoutListWrapper
GetMenuBarInfoWrapper
GetNumberSubstitutionList
GetParentWrapper
GetScriptAnalysisList
GetTableObjHandlerInfo
GetTextExtentPoint32Wrapper
GetWindowLongPtrWrapper
GetWindowLongWrapper
GetWindowTextLengthWrapper
GetWindowTextWrapper
GetWindowWrapper
GlobalDeleteAtomWrapper
IsPrintPackageTargetSupported
IsStartXpsPrintJobSupported
IsWindows10OrGreater
IsWindows10RS1OrGreater
IsWindows10RS2OrGreater
IsWindows10RS3OrGreater
IsWindows10RS5OrGreater
IsWindows10TH1OrGreater
IsWindows10TH2OrGreater
IsWindows7OrGreater
IsWindows7SP1OrGreater
IsWindows8OrGreater
IsWindows8Point1OrGreater
IsWindowsServer
IsWindowsVistaOrGreater
IsWindowsVistaSP1OrGreater
IsWindowsVistaSP2OrGreater
IsWindowsXPOrGreater
IsWindowsXPSP1OrGreater
IsWindowsXPSP2OrGreater
IsWindowsXPSP3OrGreater
LateBoundStartXpsPrintJob
LoAcquireBreakRecord
LoAcquirePenaltyModule
LoCloneBreakRecord
LoCreateBreaks
LoCreateContext
LoCreateLine
LoCreateParaBreakingSession
LoDestroyContext
LoDisplayLine
LoDisposeBreakRecord
LoDisposeLine
LoDisposeParaBreakingSession
LoDisposePenaltyModule
LoEnumLine
LoGetEscString
LoGetPenaltyModuleInternalHandle
LoQueryLineCpPpoint
LoQueryLinePointPcp
LoRelievePenaltyResource
LoSetBreaking
LoSetDoc
LoSetTabs
LocbkGetObjectHandlerInfo
MILGetClassificationTables
MapWindowPointsWrapper
NlCreateHyphenator
NlDestroyHyphenator
NlGetClassObject
NlHyphenate
NlLoad
NlUnload
PrintToPackageTarget
SetFocusWrapper
SetScrollPosWrapper
SetWindowLongPtrWrapper
SetWindowLongWrapper
Name
.text
Size
758KB
Virtual Size
758KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=30, id=261, version=29118,
count=13, id=260, version=29118,
count=8, id=259, version=29118,
count=15, id=257, version=26715,
count=105, id=1, productName=Unmarked objects,
count=228, id=265, version=29304,
count=1, id=256, version=29304,
count=1, id=255, version=29304,
count=2, id=151,
count=1, id=258, version=29304,
bin/PresentationUI.dll
- SHA256 c5d812e01acdf86b9e636a8fc6338c786dd2aa3208ae139c89a0a2b315775957
- MD5 8b98b3bb5f6821c25a43e19d63deef17
- SHA1 af84ec8d5ffced62879e5b7e4764542e9e1360a1
- SHA512 abef12f0c5dcadd66bc6e37b5c858b2eb1f5f99af190602e00712c9268bc73cfb261f9e4c9d3fff2f1949f67928b460a35be4e1d1f6de5926834eb711bbb13e9
- SSDEEP 24576:Ry6E0FGlyYQfoVGd3H59KrUbRLIkQ3qoYlU:3Efk9KrUbRL83qz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
60:69:55:fa:fe:94:34:e5:23:24:f3:f8:b6:0e:03:50:11:1b:a7:50:f2:b2:e1:56:e0:d7:29:90:26:48:c4:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PresentationUI.ni.pdb
/_/artifacts/obj/PresentationUI/Release/netcoreapp5.0/PresentationUI.pdb
Name
.data
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/ReachFramework.dll
- SHA256 aac696b21ffd148ad9545a50a034b8e957cfbb091bdd6cf4d10221ed5c109423
- MD5 7799481daea09f2f59ed58922e608c94
- SHA1 1011f5469d7426c1e1ed23181c5dcc19a9b016db
- SHA512 86283ec1d6600ad00ce81156723b4fd6e6021bb6df8a087f296110db25ad7b11b3230e97d0fa49dd8a4c2d8788740c2bf20783a20e5dac931aa9fafe4516e2f3
- SSDEEP 24576:MeTIfLo2Qbepp01Fl838GWa42HR6gu+gZQx/E:vTIfviC0hGWaRjrgS/E
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d8:81:7b:02:f2:aa:71:ba:75:23:25:72:89:a2:2f:96:3d:3c:d0:b9:79:65:bb:08:76:fb:e9:e3:4e:70:70:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ReachFramework.ni.pdb
/_/artifacts/obj/ReachFramework/Release/netcoreapp5.0/ReachFramework.pdb
Name
.data
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.AppContext.dll
- SHA256 c3a60ddfe273dc4613034887b0428cceaacaedb89012784c74ff737195c468e4
- MD5 c5c6b76545d27a01dc8ae99eeda71e08
- SHA1 be7d82fbbe3b1df1dab7dc7e978ce0edbb9da5f7
- SHA512 dfb827b71a3dd75a0193ee76dfa796d56a59b3c6e1a690a750947168456b030893da464750c62c91e140ff7d23c0a1f30e80c12bdb2c2ac955ea6764a3aa8304
- SSDEEP 192:DWW57WL4ART1U9xoOHW4GD5dHnhWgN7aQWjyV9/oIVFWSqnajKsWU:DWW57WvRCHoOOdHRN7J/oiFWSlGsW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0e:d2:ac:57:be:0e:52:be:a1:0b:64:9b:0d:6a:35:58:80:41:b7:54:a0:c7:59:15:5b:82:76:26:fe:84:66:8f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.AppContext.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.AppContext\net5.0-Release\System.AppContext.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Buffers.dll
- SHA256 a7acd6c46b241fcab4585676ed58d5f94a78faf51487bce467f45328b7945647
- MD5 305c0061d9ba2bf28a561cb8c1fdacd5
- SHA1 ffd0c5f8a2f5d6768c3cd7463d58c6c4f32bff5b
- SHA512 aae8a6185273e8419a6a11d4089ad8570c2dd0bd98e78959645df297e39658a8afaca04618a238ef6d8a404597e4c61ebd6abfc0cb71374795a93ff4c31e3276
- SSDEEP 192:tWs2WLoTzW4GD5dHnhWgN7aQWceVT/gqnajKsINzC:tWs2W8TqdHRN7C1IlGsINz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:96:6c:ed:e4:7f:dc:ee:a6:46:dd:a1:7f:05:e0:be:3b:d5:8a:96:19:02:99:fa:4d:5c:5a:ca:20:ea:b5:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Buffers.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Buffers\net5.0-Release\System.Buffers.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.CodeDom.dll
- SHA256 247c565d9fec0d2c623075d6a47b296a2c6c23da92275a976b3cf09eef11f848
- MD5 53e6a6b9df6e87b767a64ed5124b03bc
- SHA1 13bed6ba195e8e64799ab125707d92ce7293742a
- SHA512 4f5063d233739afe397ed4071d121ec964aeefa576f265de6f8f59c098198ebdbc8dc3a3284543237e19547464ce24422c379adb8ba1e331074f9ee93dbf6f3b
- SSDEEP 6144:BIrYoPi1v2jCD3mkVKOHSi9iCmRJ7HaBDGqS07W6:BjoP6icKOHS5CcpMGx066
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
55:7b:e4:dc:8f:b6:b7:9b:56:07:f7:80:33:df:5d:3c:50:0e:15:b9:4c:25:e3:c8:c2:64:48:14:0b:44:97:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.CodeDom.ni.pdb
/_/artifacts/obj/System.CodeDom/netstandard2.0-Release/System.CodeDom.pdb
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
370KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Collections.Concurrent.dll
- SHA256 681760a614c73ac8c35e6a3691082452521bff532e134d22d0e8d37bf5f80095
- MD5 36fad7241e0caf8948be0e7b07dcb04e
- SHA1 7a5d9912f5b6743d67c6964ce21d0ec707e9b2fc
- SHA512 1e8381947d10d85d5169be4ddcbe4fd6d0dc013324b3784c83852c984b02f9b9da80c677ebb9ae0955c4000a0fe9235ce9a278f11bd964fef9bc28dcf5244d87
- SSDEEP 3072:w+g903sy/N5O2V5CeQrZM2b0gitz7hUrTEBULSe4vJQIisxxSDvjlRpZ:9TvO2Nnt3UfLSeeP8JV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
01:40:71:e4:ea:af:0c:f5:92:40:ee:93:50:10:7b:d4:ab:44:18:0b:fb:25:a2:97:ef:2d:0a:57:58:98:9f:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Collections.Concurrent.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Collections.Concurrent\net5.0-Release\System.Collections.Concurrent.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
152KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Collections.Immutable.dll
- SHA256 de34c4aa6f5275fdad3a79e9a02c88dcc12aa1fe1c5fdc33667a6f07f07bc4c2
- MD5 e7f89edb49ee0f3b922ce3fbecac2883
- SHA1 98ea8d0672cf742a35d3da1af704e8138639b9b2
- SHA512 fe23218bd77d1bf58d02fe611ac23f638a52065410a5ce8654c8e889e05801816f0bb76ec0a3a4252b7e7cff3f7a0bbf8d9d61a9a7adfbca98f2e2f7dd6a3a00
- SSDEEP 12288:wXHFALDC5G+UM2LLMiI2h4Uk20AvbcOzi9CIVAOAnwANDwV2dlgtT+5E54f4t:hDCrUD6vicx9tVenwA5w0gtTcfK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4d:0b:aa:ef:0a:bf:a7:09:90:06:e5:ce:df:db:01:dd:26:3b:8b:d0:f7:2f:8a:0c:4e:17:cb:95:98:38:76:ce
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Collections.Immutable.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Collections.Immutable\net5.0-Release\System.Collections.Immutable.pdb
Name
.data
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
521KB
Virtual Size
521KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Collections.NonGeneric.dll
- SHA256 b150f551fe266d81a9cc46d9c98e461ea163023604b5396edd57b10aae38effe
- MD5 ba890f474a25b8d56b102e5a340d5558
- SHA1 4fa0666e3a85835685fe44e84836b87fca3bab67
- SHA512 fdffe9b21c130306ba7d10b9a69b9e20769cf3b0a8108d6a2d99aba69670864a8075aa587dab57366e933af66b645b1ffa54e775bab91f4f17ebf877d0eeb5bd
- SSDEEP 1536:d+hSo0hUxmjPOLlyAJ5n6CBPw8TaFNstE6rcm:d+hchUxmjqAIB6EPw6aFNq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:bd:7c:0d:9f:17:c2:a9:68:b9:2f:fc:fc:79:00:33:98:96:d3:40:78:94:24:0f:83:ce:21:b2:d6:dc:a2:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Collections.NonGeneric.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Collections.NonGeneric\net5.0-Release\System.Collections.NonGeneric.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Collections.Specialized.dll
- SHA256 3b89b21d068b245f1fe3d4fd1ede456e81b2dc19f8fea37e8cb85e14baf0f2af
- MD5 d07cbae6132234b32b921ffe3468da37
- SHA1 9812c6cc5257ae76d521a8486de1aeeb4fafc539
- SHA512 ee8bf65939659f04ea4f44dc9423bbc3ddf0ddb5168ebe2f01125206226a91c743f7ab90a962398899d592abbe7efa475cfb6526ceb1a1fc3cf48f253187f6e8
- SSDEEP 1536:G2Ho7JYdgktAPwhLwiLQ8BrH8wqps4ul+vicu0zrR:Gyo7JYdg9WnJX4ul+J/Z
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fb:84:27:5c:4e:88:f3:89:53:dd:8e:4e:53:fc:4b:96:77:11:ed:8e:64:ef:40:d4:c1:ce:de:0e:86:33:73:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Collections.Specialized.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Collections.Specialized\net5.0-Release\System.Collections.Specialized.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Collections.dll
- SHA256 f19e7893dd9719a53f383b04f35a86031c2ade883eb1b93a8aa560bf3b31b3f7
- MD5 74d83a4cb6a652d5797559d468b6ecb1
- SHA1 9341cec0fa7e0d6942b04fae75c7b3bf282247cd
- SHA512 9c4d9ed16b9b9543f6c2f9f4411d2ce3f34e5e4400e443a41522d60f959a773d786684952b85a27dfe802fa888764502092649c9cd03ca63eb79ef445ada76b1
- SSDEEP 6144:FgXJVcXJVGrPRobzq9UswlNiQbFxpOlEm:FKuXJkrPR0zq9Usw75MlE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
96:e3:d1:4c:be:48:46:e8:60:49:e1:39:b8:fe:62:42:13:4a:5f:b7:e1:74:5f:81:ed:68:40:2c:5a:e0:21:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Collections.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Collections\net5.0-Release\System.Collections.pdb
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
225KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.ComponentModel.Annotations.dll
- SHA256 9ed309fa42c5a650be16d46f5bf66361d3570fb8ac0f3d2751c042bd96b83a6e
- MD5 446f7660f25405009d5ab19d20d478f4
- SHA1 272e09b0479887e18e439b0112e29d933a9cc757
- SHA512 0c10c332d975de217a7bebe8c66efb9987857495605946870375d3063c06162cc01671808f620d7a885d6370d8ae71d4c52f920187e8bba505dd1a252b9e2b56
- SSDEEP 3072:iXSaz+0v5D5/vbF6kc0aAOYJwVh16Mw1kKFb:iSyTv5Y0aAOYJyyjr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cb:bc:b7:6b:a9:91:15:04:48:61:37:0e:0d:d1:c9:c9:ec:97:bb:93:7a:e8:27:da:11:8e:7e:5a:82:ab:ff:ea
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.Annotations.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ComponentModel.Annotations\netstandard2.1-Release\System.ComponentModel.Annotations.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
137KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.ComponentModel.Composition.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab23a9ee4ad84643847865d6e975c6746bd913270dd63e7ca9125e4dc255645f
- MD5 868ad071108f7b0adceec2e9ffcd0fe0
- SHA1 79ae0c2b26937d94dffae39acfab724d79f88630
- SHA512 4e6bbd0b4c1fd177120cf92b510c07a19034c0487b48a63f824ad7fa53156236b2e3169523c240908446043d2014ff0cf16012cb73a0f5b04bf38edc002a5a4b
- SSDEEP 3072:efuJ1ZyVxoSVjtWSXGTEdT0PaczEE7EEwEEy/RV+3grf+gDPLCDtC1aSlJmjhcEe:9wxxzWSX9T01/xjbQtC1aSlsj4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
81:c4:2f:a7:d9:5b:0b:cc:be:6c:06:9e:42:77:2c:26:a4:0d:60:17:f5:02:48:f7:0e:20:bd:44:be:82:24:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
73:9b:45:08:9a:81:41:19:72:70:a3:10:3b:da:34:fb:27:99:61:3f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:6e:76:d0:4d:3d:fe:a9:65:00:00:00:00:00:c4
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
261950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ComponentModel.Composition\netcoreapp2.0\System.ComponentModel.Composition.pdb
mscoree
_CorDllMain
Name
.text
Size
248KB
Virtual Size
247KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/System.ComponentModel.DataAnnotations.dll
- SHA256 6ecf2262506e45b280e3c5095f5874a1956656683067b98bafc0085c25dd9c9b
- MD5 1fb6b95966c6118af6a63aa82cf6f185
- SHA1 8b5abebbbc85d6c4c618e4238669da3d7388a3fb
- SHA512 c8b871d932d79905e7f423d59599b9ae4c7b181f625cf0442d5f28025c478c35d3d3754b06ab93e3af05b1df5dadef56ed57412e63df789e9f9eb3ae6694e50f
- SSDEEP 384:EW9XW+myfJe9eGXxCRBP44Nc9HP0dHRN7txJXlGs0:fsqcBCVE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
44:27:3d:23:4a:e6:00:8d:2b:46:4c:c1:18:af:21:35:4c:1b:db:53:4c:93:69:33:3f:82:fb:0f:6f:63:40:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.DataAnnotations.ni.pdb
/_/artifacts/obj/System.ComponentModel.DataAnnotations/net5.0-Release/System.ComponentModel.DataAnnotations.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.ComponentModel.EventBasedAsync.dll
- SHA256 eb4b605875637b11ef5c3e85be6f92972f68c1341a2ef3856a145e05f47ffaaf
- MD5 db46e74d782b81f9fae875e86ad893dd
- SHA1 5cfca7b29a3cbc4c886e97b767320aca10f83f5f
- SHA512 e5611cb4e5762b37fe6a4226ee4b8793db6815464917484a72286fcce35e5bbe8eccb3a0c4602fb442cca6c346f8e3e8ea8e55f9e0f0a30e0c24bace6445ce78
- SSDEEP 768:F9hlRah6AAdAu0ve686P06K64JNPa7VEO1m+kPzr:Fzyhk686P06K64HPkVEymzPzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fc:05:dc:14:00:02:46:83:23:82:5e:be:ae:87:fc:01:82:e3:2b:85:25:ed:b4:62:3c:43:2a:64:12:d5:21:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.EventBasedAsync.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ComponentModel.EventBasedAsync\net5.0-Release\System.ComponentModel.EventBasedAsync.pdb
Name
.data
Size
512B
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
656B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.ComponentModel.Primitives.dll
- SHA256 da60a90a49a1fdaccb8dc4eddd1e216cc2a9945e5d2b38085992f4c92f59c69b
- MD5 8c418cf01717b08cbce657505478c96a
- SHA1 299e0c95d9cb3d1146350c2cb5d2910bbf9a5834
- SHA512 e5e101596e4ab255978f38fa80e1603e98e9f081608c52fd5886b4d319a35f6cad4ddeaf967b05de7bad9372c759259ac114f84b3f7b5254ae28a69a5d3d2318
- SSDEEP 768:ULMaGezU31KvfrvUGjNqTPPMYtnOvEG1OII8OP0Ys+6Og+UM8C:ULMaGiE1KHQGjNqrPpcfSPJs+NgVMD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e4:ae:bb:3b:5a:8a:b2:7d:cf:fd:c1:fb:c1:82:46:d7:f1:d4:0b:00:77:d9:d1:cd:d7:2d:b0:00:30:f7:9d:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ComponentModel.Primitives\net5.0-Release\System.ComponentModel.Primitives.pdb
Name
.data
Size
1024B
Virtual Size
820B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.ComponentModel.TypeConverter.dll
- SHA256 283fee5dc2b2aae112fb0d6e26aba2a92b723f9acae77668c64e7c5c564a9058
- MD5 43665abb5d9003ba8c20e77ec13703d7
- SHA1 0f43f5dc3e1ffe9ec971b375af40735c22f9efae
- SHA512 3d23e15fbbe53eb6ae35d8f2fa7205a348300ca7abbc99554b67ecfa6e5ec97da75cd83a116677b052cb60e4b0b912ccbc163985d03ca3f5dc937e508e8698f6
- SSDEEP 12288:kDr8xgIFHAWPQ1ShBabgpPbSEHom7r94X1zFTnIiHYU:M8xg4HHgwRIex4XpF8iH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
83:f7:53:07:43:79:08:9f:22:2e:5b:17:65:2c:ba:dc:09:55:bc:48:61:07:67:79:52:35:96:0e:38:97:8d:71
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.TypeConverter.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ComponentModel.TypeConverter\net5.0-Release\System.ComponentModel.TypeConverter.pdb
Name
.data
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
565KB
Virtual Size
564KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.ComponentModel.dll
- SHA256 2f0d1a9d100fd54f289e69a2cd60efb463668a790a5a89d25fe446e36614f4a3
- MD5 04419015f791b988c655654ad4a5327d
- SHA1 cc8e9ea4c67d54f716532b66fac5651af97142d5
- SHA512 b9350d6c75da0fa50c97ebc219d5c7c9026da76b95cad07fbd895470431e45c160eb9e4092278e73674eac36e9c1f3d80aa2f4e9a3f0276f94ba29b56296aff5
- SSDEEP 384:hWt1WvmqN0FJNLtoBjO7PLdHRN7BSz1IlGsINP:IIniLBhBSRJX
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1a:85:f0:6f:41:c6:af:3f:f6:ad:fd:8b:5f:8a:14:b1:61:a6:5c:c5:0d:9b:c4:00:97:28:e8:39:43:e6:e6:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ComponentModel\net5.0-Release\System.ComponentModel.pdb
Name
.data
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Composition.AttributedModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 04d8eb1419e053fb7502dd952f3977f75b27dede5418d5f87d21de16adbd8313
- MD5 24a0c8cce8c132df82c9b9c1ae834d05
- SHA1 1ce7555a43e74f5ac95fc734505068c4e0c4a78e
- SHA512 8096b3559b814f4720dd0bdba0018b7ee5de7ade77a14037d4fccc9ccc245958ddd9919949340f143b43961999835db2fc8f077b744cd77448ce8145101a6363
- SSDEEP 384:f2NWQiLb2IXti0rYPnjY+WIOUxcW63rq0GftpBjIRpQERHRN7O5Ol78oWCmtGhV:OQQiLKWVoOUxKiYpQEBOqeE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
51:f6:4c:d0:76:67:b0:81:a3:89:cd:26:f4:58:67:3c:15:a5:34:94:de:c3:ec:a1:b5:de:a6:c2:e8:bc:9d:16
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
08:1f:b5:ce:88:31:ae:00:d6:04:82:2f:f8:35:d9:a1:87:37:b3:8b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Composition.AttributedModel\System.Composition.AttributedModel.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/System.Composition.Convention.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0bd24c729772169c995590d0faa92ffd428a9e17c41845c614c4afba5b0c787f
- MD5 8246fe61081b4c23ffd9c45dd0e4b15b
- SHA1 02b3a0404bdfe06f0bcdddea28ff2fff059d805d
- SHA512 24a56590ad205eee0862d7b20bbee3fdf036573c646999376a908b9a95b81415c6a282f9d92e89363144603585f5d8db0701c9b3af0407728710e6821091bbf1
- SSDEEP 768:3ROu6y/b7cNjhLBaoeK7BzzZSzqye/a7sengq4/LfJmcs6TN1x8iEDGEB/Qbe:38ty/b7cNjhLBY0NcTuQ3EahGEBIS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c2:0a:17:34:44:6c:ee:08:f9:56:d5:f1:f9:6a:6e:4e:2d:0a:7e:1c:3d:33:3d:38:21:1c:fd:8d:85:91:e9:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
ff:80:f1:03:b5:2f:db:04:e9:c4:dd:e0:51:ff:81:c1:84:b2:91:2d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
48582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Composition.Convention\System.Composition.Convention.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/System.Composition.Hosting.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a26e95e0f75e803adb555ecfd02bca59a533a4855db6c861a3defb619dce813
- MD5 d84515ee702052020eaab048c0c221e3
- SHA1 176d597ad944efd1774759f9032d86c8ba216813
- SHA512 a315215d0d8065e7922cba3313d61c8ff8927b6d5a9d1e4a47bd5db9f664a769844fb4d66fb1b7e2f39bc9e9b63e7e4693499b63cfd25c7989c300e001bc9c08
- SSDEEP 1536:+EcBlJ8+HDTAwiufvwKdxL2sOkheu4jGEBY/:+XDTssIOBTOkMu4jGEm/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:86:83:c4:7f:eb:5c:09:19:7f:51:43:38:15:5c:3b:15:8c:5c:99:7c:af:31:26:e3:a9:b2:db:d3:2a:50:b3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
06:c6:ca:80:50:93:f1:00:2b:72:68:73:0f:dd:73:63:53:4a:46:0b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
51262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Composition.Hosting\System.Composition.Hosting.pdb
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/System.Composition.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c419e3d51f9eefb1f6fc0fb7ccf9b5ac5cc4b75fa75131d4af0c74252914eb10
- MD5 d18c354a78688d6a3cf68a0567af40e3
- SHA1 064a5fd748bc75f485196e1001c704aef20b3f5b
- SHA512 99fce5f32f6e1fdc854532ee82d355dc33c844c5df491c1a01faff146bb9d1c8badb889f2ae9e53a5cee62411b86afe83404434ddf6ef0a7c235dad38a490f1d
- SSDEEP 384:bHAtlI1bvGA9iCsyeHp+AJasJxTTa+yubC6sOwiyuGny2jUG+NWQ1txfWoQ7q0Gz:bgtlIQbLa+5C6pwjnTOj1tx8iWQEBXSv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d9:48:89:b5:3b:e3:26:74:3d:99:4d:63:74:06:f8:1d:03:89:ca:02:78:4b:0b:67:b2:d1:a3:df:2e:9a:8e:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
ac:51:2d:19:63:e8:91:45:f4:57:9c:50:41:74:00:37:e7:30:5d:21
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
19138
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Composition.Runtime\System.Composition.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/System.Composition.TypedParts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c609bed3bbd2be810471e31e36b12cb321a50fc2541e8f29c1f59c8cf869c41
- MD5 b91887bfca35e50cce9f2d7102c88706
- SHA1 0607290006d8c4d92bd1233d7e061ee714d0d53b
- SHA512 8d69d2e9329bef2ea2767c69a04171abdb3e7334f69519481ecca50667f339c78187ad07bb41d116f554be99733375712129d441ef7b6fc8d8f036ea81e2125a
- SSDEEP 768:KEjWUFaYTSGt60JBL4AZ9W5RlB1FhAQXGT8xv635lWJz2Ek1ycx9NzsLTeHbWOCx:KRqVfoASWqGpMk1PzsGHNFmOEBkbQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:fb:ef:80:9e:bd:df:bc:8d:3a:45:61:a2:48:bd:3c:81:03:03:8d:f5:a3:b7:8d:2d:18:39:d0:97:65:b8:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
PE Signature issue
Digest
15:94:b9:63:7a:2b:47:06:a2:32:83:d4:8c:78:aa:34:f5:b7:7d:a0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
54090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Composition.TypedParts\System.Composition.TypedParts.pdb
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/System.Configuration.ConfigurationManager.dll
- SHA256 b575f198c02a16993eb6aecd40487d8b2b785fa942a9e85430a0d1099d11771f
- MD5 40a8e3f673addce89933179a16450030
- SHA1 ae90e5cf42541a33c412c8c7645384f9d4aaea41
- SHA512 9716960b4c1a9493bb980812b673363387efc7a7ee6c9af69d1b65d0890c0a85f0b65f9657a7fbf29862116713be8bcffa056afd9c5e61a2eb0fe803542308c4
- SSDEEP 12288:vhr2g/0HBgheaoz3/LEOAQ+2/NVQ8GLa0Uh55T3lEC/IOPbZhNZfrhSQfOsdV0ZT:veHBsi3/5NvBw4S/EdteL4dLqks
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
68:bf:f0:e6:13:52:f1:8f:65:33:50:ea:90:32:66:ae:7f:52:10:ce:83:dd:4a:86:3e:b9:45:a1:d2:42:71:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Configuration.ConfigurationManager.ni.pdb
/_/artifacts/obj/System.Configuration.ConfigurationManager/netstandard2.0-Release/System.Configuration.ConfigurationManager.pdb
Name
.data
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
788KB
Virtual Size
788KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Configuration.dll
- SHA256 9ca9216acba4ea8d6da77084db35def4c6458e1dcb17096404046a5d7b588d55
- MD5 6f222c9cca4fa9dfcb90424bc7586b14
- SHA1 0c946e8ee3a564e09345678d01aa2b52ca42e9ce
- SHA512 27baa83066f7d14029649f791e4cf8c974c391cb38ff130e649bdeb42bc3deb340a9bcea15719856dfd3f592289e346f3914116f63d331d3888d80748008a3fe
- SSDEEP 384:UWONWWuXTSv/fvNRvGZYdf3zyP/wes8sbqyP6yO9PWdHRN7FfVlGs5R:gniBMji0s
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
db:a4:15:73:ee:f8:a1:16:65:14:5a:cd:fd:67:fb:a2:ce:aa:1e:c4:80:2d:c5:4a:9c:fc:53:bc:1d:bb:b1:3e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Configuration.ni.pdb
/_/artifacts/obj/System.Configuration/net5.0-Release/System.Configuration.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Console.dll
- SHA256 c928e4a500f063de9795b1e412d774fb1e5460031cc23cf37695a2a971616099
- MD5 83f00eea290989e0776485a77b2a59c0
- SHA1 a7e19c5b7ac78c3227d8f7f721d90cb6f509536e
- SHA512 4808e31f3a5a3018cf3ff15c0a5fc5992af2749fe7cd1d1e5800c2e292165cbb618c9ac36df8169883d755bca5aec933e21b48a9be63ed7bf4dd057088f9c212
- SSDEEP 1536:NA7cfZYzF8+3j9cmCJNSFslwFEfyjmkyR40r296mU3PnyT9sMqCEGPCvU49Pncb9:NAQZ4fiJFamN+09R3PyZqCEoG9S9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a2:3c:94:df:8c:54:06:ce:23:75:29:ff:27:ea:4a:35:c7:08:63:b1:fa:56:3b:1d:db:fd:f4:15:18:fe:78:53
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Console.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Console\net5.0-Windows_NT-Release\System.Console.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Core.dll
- SHA256 54d35f55fa6f0eb660857ac848465e4b2bd18243c00f17a8939a7ec3f0379bf6
- MD5 4136eab2fbc7792db2d3eb6b6b3be1dd
- SHA1 4e9a08e321a9dac008f3a54cda0b2940313a5fa4
- SHA512 62ca71dfdeec1c94b0ec21b21c9e5bac0d9592184c292d199cb8256ac8e03427ecb4b23c727ae8dfdf76364cb035969eb5fd8c37a4ad4590d2a26695d368f778
- SSDEEP 384:RWj2W0xkBm4U1zXt+Vlgq2wv3xze2KMAFv+YC/5bGoBJrlv1swVbC1MOXz/h2Pbu:SZk0Vlp2wv3xze2KMAJ+YC/5bGoBJrlQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
18:ef:a9:9a:24:b3:e0:f9:f5:2f:11:f8:c2:5f:b5:fc:6d:36:17:c1:e0:45:a5:f7:e1:fa:c5:02:4e:21:1b:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Core.ni.pdb
/_/artifacts/obj/System.Core/net5.0-Release/System.Core.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Data.Common.dll
- SHA256 83b1937d79f5adc474e8fbee5c9afc9fd965326f33206221434ee9b46887fc6c
- MD5 923b9460d25ac25d62aa2a6bd6ca3b30
- SHA1 d178e0c2d02438bd476b5987a9777f9c02e1c675
- SHA512 0ccad3c8d72e8f0e9398a92d059099127c249cf2ddeda9fcebde0cce212def109593575262955fcc670714d06e46b09b80f33c458787df404667d64c8ad536d0
- SSDEEP 24576:K5nJ9+EtltbtaqBEtpDe2eYCd88DG9G3qKFswCGwzCiW6GoQJJYhWivtwZ7Sl7d8:K79bPQqB8prCdrDP3rJiWpNEWyCZ7SgT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
35:0d:4b:b7:07:48:36:c8:fc:48:69:51:af:9a:5a:ec:6e:66:94:49:d2:ae:a8:b7:d5:a4:54:4d:95:c9:c8:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Data.Common.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Data.Common\net5.0-Release\System.Data.Common.pdb
Name
.data
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
111KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Data.DataSetExtensions.dll
- SHA256 1d3d09340b26994b510f93b3d6357c3ed4715f41338cef5a5823c328063b1517
- MD5 8b83ca49a06c471bb6c8543032d7c2c6
- SHA1 7f40040e390f100c18084e3115647b145f0767f7
- SHA512 f784e2d811fb0974013bd9d9b34afa70e02c6263d77b18974733f51c3c097eb018aa295e81ab12dc8bc12a678868fa207a8c2b40837e00441f48a5f29b4a53a5
- SSDEEP 192:dWV7WLAO/MnYgkC5lW4GD5dHnhWgN7aQWeID7DiqnajKs4CfI:dWV7WuYgl5wdHRN79IGlGs4C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2a:bc:55:a6:43:aa:d6:3e:27:43:8f:66:12:d3:6a:20:14:ea:c3:3f:19:84:3c:bb:2b:ba:27:ba:f7:37:f6:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Data.DataSetExtensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Data.DataSetExtensions\net5.0-Release\System.Data.DataSetExtensions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Data.dll
- SHA256 b0e6ef9459a602340e0c74a04560abaea8c0af558fbc98f9031b8f671f92e25f
- MD5 fc537f5890fe4a48eb8e8dd553568f49
- SHA1 4f39f3824dd11ed87ded319dbdf5ee0826ae2e80
- SHA512 02332413979685c4224ab5bf14f31587a21ca69bf316482769079bccfdedf8ff9065dfef3950da8c7537e6f448dceb97a4463d33ad9dc047fc1320f586010fcf
- SSDEEP 384:lWDFWmQmGP2SoxDZQxXwq7PM/2t3cX+/dHRN7GfVlGs5R:WwmJDZQtPLeOFd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ab:4f:df:af:cf:20:2f:37:ac:17:71:09:9c:41:b1:02:26:91:51:98:76:41:5e:45:3d:a5:39:24:52:41:1d:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Data.ni.pdb
/_/artifacts/obj/manual.System.Data/net5.0-Release/System.Data.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Design.dll
- SHA256 0e672916ddcb921e84efe80bdbcf354c722c7e657ed3baec5d1003cc90ae992e
- MD5 59d4daa52185b8fc5e85385b82034331
- SHA1 fd3c54ee49c19940bd0e16add934963f6c9b75c1
- SHA512 6f75189edc04feb9791cc2780d9708a849e74aeddfc879dd2ea85b07baba88b03736ac8cbb987c34fbe2554679e092de6dc55281427c289c7bdc4ba1d40ec22c
- SSDEEP 384:WWwHW82xLGrw/ciF/tGA+ejjpspXCMMdHRN7/TwuAzXulGswDbL:YCGrwTtGA+IpspSMS/uzrF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
57:7f:6c:c9:14:5a:fc:dc:46:e2:8c:07:03:0b:82:08:68:7f:95:29:c4:5f:82:f5:64:d1:77:e3:e7:6d:99:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Design.ni.pdb
/_/artifacts/obj/System.Design.Facade/Release/netcoreapp5.0/System.Design.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.Contracts.dll
- SHA256 744be88a7721ff84bcabd1c2f7aa24509151667d009277723542bb4293772cc3
- MD5 26395f332565a3e55fe8904a544f5271
- SHA1 2232053c9691588fd7aefaf12eaca90482e499b1
- SHA512 c07a301e402af325eacae85a132e3332a63ddf649513ffd29a7d8d2578843236b4ddc76e9485f58930fdd393f8701933344f8e1b785dce2a39baff9903cc3678
- SSDEEP 384:DW22WZER2rlAimdHRN7+2UP+CcWlGslakrB:12YAi8+5woNF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d5:bc:b4:02:03:99:fb:8c:27:a2:81:42:c4:14:0b:d6:15:91:a7:46:df:b2:44:49:aa:14:6f:65:78:50:04:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Contracts.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.Contracts\net5.0-Release\System.Diagnostics.Contracts.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.Debug.dll
- SHA256 3605170ff9d76a264f2a95c41e62140c55b8da629683b5367aade5791f79175e
- MD5 6f8736e618b2fe423eb4db806f8cf487
- SHA1 94a58f3855cb4bc60d0203807e40df4abbb6bb5a
- SHA512 fadfe5cfbdf2d416befcc1fbb6d392ba9156ed85646b5dce06a27e01fac593575a815c8f4b7a707bc0dff23ee8b7f8949d7ea16354052b5493df0b5361deda78
- SSDEEP 192:5aHW6mWLZxdVfZW4GD5dHnhWgN7aQWHSID7DiqnajKs4CfY:yW6mWfdVMdHRN7CSIGlGs4CA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:1a:56:94:03:41:bd:cb:c5:a7:5d:fb:e9:54:b3:04:83:a0:4a:94:26:5f:b2:5c:a0:5e:65:1f:8f:22:9b:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Debug.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.Debug\net5.0-Release\System.Diagnostics.Debug.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.DiagnosticSource.dll
- SHA256 2e3ed562e4999dd4a9cb8de418b5412a0830429a8a9e185ab3aefa99ab8970cb
- MD5 198e660e24f36a1ff2d0e422d13a4b6b
- SHA1 b0c1771e0ffbb58196f88633a067f946cad55371
- SHA512 ea908927fb2e8b27372ec6e24aa0db73d1856e9be32c5cfc8f06f5476ca8b23e82c63bf720b6034ee4fd28a1b461c5c76231586dd3ba9009c9a222fdc4e639d4
- SSDEEP 3072:hmG6OCHX5IfemB5nRrO/N8LUDs6lFI38Kq/kW94hrAuHv:XC3yDB5nRr9LUDNtiW2qu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
48:3c:86:a0:a9:98:76:a7:07:01:30:f3:1b:1f:6c:4e:5d:22:ca:f4:52:f2:42:66:e9:b8:26:7e:bf:0b:9f:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.DiagnosticSource.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.DiagnosticSource\net5.0-Release\System.Diagnostics.DiagnosticSource.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
143KB
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.EventLog.dll
- SHA256 e23b89b8b13beae7fafa44b9573c46a5cbd1fdf3c49684ce15face730e2934c4
- MD5 10dc811bba1950db665de8aa03a8f1af
- SHA1 607f4ad25d5249b1aa430757bbbe63106d1489f8
- SHA512 6df2430517b821e802ad00f2f726f67dca4fd94523dfa1714543758a8f5972f11be8a28d16589b1d85758b2879eb6f56b7381afe81eabd9fd865d4f1c3393b61
- SSDEEP 6144:kbnNLgMivs+qdb/+k//Jg3UiDiDp87nZ7hAI0aoFwckJX:G2iDpShAdaonU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
22:4b:b8:17:df:a0:60:98:40:2b:79:d6:cd:76:a1:33:31:87:87:fc:ff:68:a8:8a:ee:63:19:f6:56:5b:2e:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.EventLog.ni.pdb
/_/artifacts/obj/System.Diagnostics.EventLog/netcoreapp2.0-Windows_NT-Release/System.Diagnostics.EventLog.pdb
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
242KB
Virtual Size
242KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.FileVersionInfo.dll
- SHA256 7145fc04b39b7e1860392ea0e0c83b413361ba41507101b28df2318cb62930e8
- MD5 686a789cfa291531c16fbc84dc4f4121
- SHA1 a619e11bace5a011c1d98bd3be2ed06154ebc1a3
- SHA512 60712e71f9ca78f792693665d2674148324c24c874ccaf6cfdca557f494ee0085a5ad46e66a71243465860a92639b60414ee84b74e374a03528141c58583c34a
- SSDEEP 384:kWQV9Wx3FOiK2s0+y1UEWDUdZ1oDA7xJJghyr4/HVegdHRN7yQ3klGsIG:e8VOiKX0+y19nSA7xrJr4/HVeOp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
20:89:f0:cb:4c:92:61:af:40:7d:f6:ef:6d:32:28:80:03:04:cd:24:8b:6b:db:d7:de:d5:45:1f:64:0b:05:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.FileVersionInfo.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.FileVersionInfo\net5.0-Windows_NT-Release\System.Diagnostics.FileVersionInfo.pdb
Name
.data
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.PerformanceCounter.dll
- SHA256 49da17e0391fc24cee4e56b113af0f08b7b3f830ab03946a92b9fbe28219deec
- MD5 f588ecc3882c2849e62fb7aba3b861b7
- SHA1 74ee495b9fccb68d59bdc5b88b7711e1536f3014
- SHA512 ef30bf142a67756e71b109b0a6d43025ae57bca19d666276b91e85b2298b2e3b80bea29d4b0948f3475f9f8326cb1c6e73cf20d4f405a9caec7aa4140f94b672
- SSDEEP 3072:gyRZ8ZqtHiP2vbgN0IS1bv8+ouue1jgRCLyjfnsLLyUgBOoq3+RDilsaXVixv1TV:xMabF5bvZf8tjfa0xq3+RgXVir
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e1:ce:66:c2:f4:12:84:9d:f9:61:3f:16:2d:20:88:94:a3:d2:13:cb:27:b8:0c:bb:24:9a:39:2e:d5:41:7f:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.PerformanceCounter.ni.pdb
/_/artifacts/obj/System.Diagnostics.PerformanceCounter/netcoreapp2.0-Windows_NT-Release/System.Diagnostics.PerformanceCounter.pdb
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
217KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.Process.dll
- SHA256 93c044f404bda1c00881c52fd53c1031390a4af640f6ac6b6cafae486ef08c26
- MD5 967ebd5913bc407520c0dd77d8f4802f
- SHA1 dd92bb153ecb070f6fa009d8bc1a020af4854982
- SHA512 5daf0138eb19a24aa175cb3d872e90157d8156b743f5435d9a13b9ec80cfcd766ae01fb6d1092a3d37006ec538e303a64e89f764d51b2f9f6ed2f98d483d2edb
- SSDEEP 6144:XACmgznLpdt9brjPY6HvHW3zPqnlHwDYI14iKVyMpm/V85Mzp:XpnLfyzyp+gVyMpmCQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bd:df:cd:79:77:6e:56:a3:d1:c1:0d:e6:49:33:34:4f:d1:d6:43:8e:69:a3:d3:39:fd:08:83:6a:76:7b:7e:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Process.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.Process\net5.0-Windows_NT-Release\System.Diagnostics.Process.pdb
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
215KB
Virtual Size
214KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.StackTrace.dll
- SHA256 d3e9717274b8edb8f686003cafee6d11c863ea9f9f65c1dd718173058dd369b0
- MD5 630f8c1df35f9906f1c1281cad10e1c5
- SHA1 b95cfdf25c960456ba5a5f76456a100db807999b
- SHA512 e558df79c319b4f6a3829255bd265b28a8b6d849b6208ac7c28dc3f3e9890f833975992b18317fa458fb9d53c3c89588705744e88e4bf38e6fe6ed9b641abb75
- SSDEEP 384:AWFgWqDF+rfwlu8gIsosngZ5a2JbbAmVwBlauyF0lQmtBs8aLSw2mdHRN7QJXlGt:rmF+rfwu8W5Ka2Fb/KadF0tvaLk8WE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
74:4f:07:38:a0:6d:bf:89:95:8b:b6:54:31:8e:54:9c:b8:18:13:b8:17:a5:ef:0b:67:d0:10:dd:c2:b1:10:91
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.StackTrace.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.StackTrace\net5.0-Release\System.Diagnostics.StackTrace.pdb
Name
.data
Size
512B
Virtual Size
416B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
396B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.TextWriterTraceListener.dll
- SHA256 77eb00b7a070c8c1fd95243b8127b33236b8366613f5fef3a35c1e7504c0f85a
- MD5 714240685a41aabd74abb84f774397e0
- SHA1 7dfb5ca96be5ed2719102f943aef05a1ab69c367
- SHA512 d6a715a7e307e2cc4904dbeed9ecd9a9dc8289939395ec0655ae16454a147dd35f224a1b6dab802c83861faa294ce825921193cf7ff3cd07022a324593ff9455
- SSDEEP 768:Q9mEqEbkn1MlVd9vAQhXg/dSQvAlCLBRDjyrii8jE3DnN7B1OF7fWQW9LetO6J:QuvY2BRD2iZcDnxOxfxWZwDJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ba:f8:a3:aa:3b:97:33:0e:e5:93:b0:94:96:ac:2d:59:9c:18:6c:b3:b7:5d:67:d8:99:93:01:51:61:ee:e2:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.TextWriterTraceListener.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.TextWriterTraceListener\net5.0-Release\System.Diagnostics.TextWriterTraceListener.pdb
Name
.data
Size
1024B
Virtual Size
988B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.Tools.dll
- SHA256 7277320963bd7c232f78be5ae32a1b830c1a06bd77702aa2cf48f0f955e2df27
- MD5 bc52e1fb72c18b9cb10cf961cc3175cb
- SHA1 53491d62e200a55ee9d3638a8c0a0cb7a8bdd54b
- SHA512 5667c822e5ad901fd0b2f7ddc897d1fcf6aa3a8ca1670a5a770c9bc991c0559911e9d9d3d39d3681d2be2a7bea2988267556047de861a58e6faf75ebb4713499
- SSDEEP 192:PFWaUWLOWxxgP1W4GD5dHnhWgN7aQW7tYqCE0qnajKsDw:NWaUWCcxgPgdHRN7qBClGsD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
41:89:b9:65:b7:51:7d:f1:4d:f5:3b:8e:75:48:dc:17:be:2a:d5:2b:e4:ac:e0:b1:3d:53:14:57:8d:2b:4c:4f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Tools.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.Tools\net5.0-Release\System.Diagnostics.Tools.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.TraceSource.dll
- SHA256 464773e5be07cbe2be86b63164d565b8f2158b516e260d94f666164883bf2614
- MD5 5b1eda36bb35ef55b810c31b41033d98
- SHA1 8daf38356e24bd368b89fae29132137022e669e3
- SHA512 f3dc1164a66e0b3564d8cbc1658858a786d852ef89e96d59a6b07acd693e7fec27feefb7aa78d2f083666df509cf1660dbf54a08602a326c8ab7665eeecaff6c
- SSDEEP 1536:wlu/19RnMxl8te8C/AP8mWNIgGmQikgNx3rEKC4TJCKe7o:wlu/19uxl8tgwRPmZzP3rE54TkKW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c3:73:9c:9a:c3:8d:03:55:31:3a:58:d8:8e:6b:13:07:85:c4:49:05:b5:0f:74:64:9c:8d:46:fc:de:7c:bd:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.TraceSource.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.TraceSource\net5.0-Release\System.Diagnostics.TraceSource.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Diagnostics.Tracing.dll
- SHA256 3ad16ad5d3d760e9b216281f9f67906fbef15a1a3a8c7a7694d2795c8f170e1a
- MD5 662d49d915925d421e8489a78964df12
- SHA1 3cc9397233bd6ffb218ed4d7403537f8ca931f5d
- SHA512 4ea940cdc7ed7a6d5afd2a5dc43d1ee0598fca7d63cfebad5bafa4fa23cf668c27fe401cafcbb509b5f5b43c10db7465cf5838c55620abafe60f42694ff7ff29
- SSDEEP 192:PWIDWL07pj+yQkgI7xW0bc/TW4GD5dHnhWgN7aQWsyGbsE4eAqnajKspi:PWIDWy+yQkW0I/KdHRN78GpJAlGspi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2f:bf:1d:84:74:71:bf:ff:f1:c6:d9:70:1e:12:93:b3:ea:d3:22:a3:e4:f9:e9:73:14:07:87:97:ea:b9:88:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Tracing.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Diagnostics.Tracing\net5.0-Release\System.Diagnostics.Tracing.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.DirectoryServices.dll
- SHA256 a0b43db76071974cc028f36a1bc64293141b97aca1a29f8e4f98a0ba556d8439
- MD5 64e4a92982759cdd9bbc5b6956ac6f5a
- SHA1 d047a20d48b36df83e8f46e7a94e4a532970ee77
- SHA512 e7045dc448d9a9483d1eb60854534081e53db6390b88184b16480b119461b6b7976093a49a3083424a6d0acc188a7166ceb2ce4b1924182972971ace57914214
- SSDEEP 12288:vpIjnNpqxNQNGl6MXR5M4jItZCdEdHWQMIFfa:gpqoNGlFXR6qOcdEdIa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
11:22:f4:96:2d:d1:94:a8:ec:9c:fb:8c:4e:a0:a1:30:ba:d0:1b:19:41:fc:99:8e:8d:3a:57:9a:18:f4:15:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.DirectoryServices.ni.pdb
/_/artifacts/obj/System.DirectoryServices/netcoreapp2.0-Windows_NT-Release/System.DirectoryServices.pdb
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
825KB
Virtual Size
824KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Drawing.Common.dll
- SHA256 d74451856c6979b2d07592557b73724da4abb44a736cfbb515dba58679cbdf08
- MD5 1305bf48c126409d633938dab8d07d6e
- SHA1 2d67a37eff30c7281d2092a6e0c609ffad5c75ce
- SHA512 c793a9273b2496214524d5fe03fb51f345dd1938b1b000f3db6fb722e19a0abc26054e7d10518f0a03be7d2535cffe43a820623eb04c11e2bb3b266f4e6c76a9
- SSDEEP 12288:RRarwB66HWt31QS40aax81iH85AM/5EsS8:iMB66Hctsax81iH87Q8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:ac:a5:e5:95:9f:7c:a6:22:33:b8:9d:c6:65:df:bf:e7:fc:ca:0d:ca:d9:dc:fc:25:e9:d0:1b:4d:d9:5c:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Drawing.Common.ni.pdb
/_/artifacts/obj/System.Drawing.Common/netcoreapp3.0-Windows_NT-Release/System.Drawing.Common.pdb
Name
.data
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
828KB
Virtual Size
828KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Drawing.Design.dll
- SHA256 e92b66e81f50dde3c149a5be2436f126440364ee6d8a8bdb6f8d9a05b273476f
- MD5 ef0bf9227a3c9185217aa40ef4414288
- SHA1 f7f28a958406375e662cd8a2b5a8303433ad75e8
- SHA512 e30d1000bfbb0753a1056518948a0f8c2a2c601f344b1bff78e70c60bbaa6888c1ee480e3050a78717198ff115100bf1339cce67151f271e66bb3e203776ccd4
- SSDEEP 384:dWoBW82l7sbffg2va7SdHRN7fE4K/hl3+0Gl9:p2mfEwfSpw9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
00:09:6a:96:e0:e0:a4:0f:ac:67:d9:91:7d:6c:e6:ae:1a:8a:3b:c3:52:cc:17:21:e7:1b:85:ca:41:2b:7a:57
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Drawing.Design.ni.pdb
/_/artifacts/obj/System.Drawing.Design.Facade/Release/netcoreapp5.0/System.Drawing.Design.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Drawing.Primitives.dll
- SHA256 6bb6e9c95fbb1d77beb6d84ecc35d62ced3d32b02d48a3565612c78508bc431a
- MD5 6db5a9aa45179fd123b27576f4d4fedf
- SHA1 54d7c15a9d791822982d1516c8f7fdc6d9ebbb10
- SHA512 6cf9c9107e15484939bbd34f321a3ad0122bef12bb2eae73e73f287618b940f6a5ac86b2c99c9306d2b42a6689bed65380384c412c2c14f0cd208402fbe05043
- SSDEEP 1536:JYN5vyJFI4nxzeUvEpemCARPDUFjhHltVzqZrfuFnslm/kYx/:JYLKnxzNmCMCFtVzorfGn6mF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6b:07:54:a4:30:0f:b6:e3:68:1d:1f:4e:ca:a4:60:30:fd:27:df:56:e1:1f:73:2e:ac:6c:d5:bb:10:e8:64:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Drawing.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Drawing.Primitives\net5.0-Windows_NT-Release\System.Drawing.Primitives.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Drawing.dll
- SHA256 c86de72fee8b95bed63692e89c2b4d03d84f664ac41bb046ee43e5a2214ef04b
- MD5 a3d55b8b5864e8fa53194e8dc1064b3c
- SHA1 2381f54b232134e6f9a6cadcd0a229863661f715
- SHA512 0dac1fe21cf3df4870fd012387ccfb0b4879f17e9ef31ed3531290d293d3c259fb1215df17dfb1b8a5a96853c1145733eeb4c57a8fb5bab81d493006e12905c4
- SSDEEP 384:0WZtW82XUe7VYrYOjT/v5lJMisLJ6xDxryspq6M1cekFRE0lp20YxI8MPh77dXB2:L9RJX5gHP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:1c:f1:d2:e3:12:5a:70:09:50:c9:ba:54:2a:83:25:ac:8a:79:67:92:06:9b:d0:43:1e:b4:0b:ea:ea:0a:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Drawing.ni.pdb
/_/artifacts/obj/System.Drawing.Facade/Release/netcoreapp5.0/System.Drawing.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Dynamic.Runtime.dll
- SHA256 c198c2e03e9824c73a4d3eea911c1bfa3d699311d86034b81766c16dbd7d4c0e
- MD5 e5e7d2690b0132a38020cf8ddc799163
- SHA1 94553963d12c481ef82b080b84bed63347cb70ed
- SHA512 b90a9c086c90cf4f89632aeb084df2a14c0bef83350b0b4ff1658de1a3a40af40cf3185472d916de31281e83958057569c6b9bc3660eaef4bc054cef1f95463a
- SSDEEP 192:ihMWUCWLpO+1xIjGZKW4GD5dHnhWgN7aQWoLrOQophFKqnajKs0j6:gMWUCW9OyIjGPdHRN7PLrJXlGs0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bf:b4:f5:c5:dd:cb:2c:75:b1:05:bf:97:be:f5:cb:79:1d:5d:26:06:6a:f9:d7:27:fb:e8:33:a1:f4:3a:eb:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Dynamic.Runtime.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Dynamic.Runtime\net5.0-Release\System.Dynamic.Runtime.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Formats.Asn1.dll
- SHA256 505b86d299b3421a5986b5dbee3bc34579824f90d9f72ff1b0d689213dc90874
- MD5 f69a0b43a54967b5c976793293f54735
- SHA1 0c68203599f88e3ce29e6daf6da91dcdc929a8ae
- SHA512 554e51e3387fc75ffa0a04d1fd71dc202adf6aa63e26125ab7e13ae73cf9b685f69c9cec1587c5e556e2a6ced5c12a2c5b1258e0ef60073fa3f68f7edf258271
- SSDEEP 3072:46dmORhWSjtV4krZAuwZjZgvF/k97HICcZo6naEeSiFGYXWxp:1gOR1t6pHIJZoUaEeS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
02:21:c3:45:f8:51:ae:c9:fa:a4:6d:af:7f:a3:c8:a2:65:5a:04:e6:5e:4c:e3:f3:b0:8a:7e:04:87:75:48:74
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Formats.Asn1.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Formats.Asn1\net5.0-Release\System.Formats.Asn1.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
150KB
Virtual Size
149KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Globalization.Calendars.dll
- SHA256 bcfe9419310848a4fba16db7fa4385811d7a4f7cdfe67e4ca285ced46f5978d9
- MD5 066c4ecc69a82a5e82ebdf02bd384fb8
- SHA1 e0f9122c33cc2717b5013a3aba9ca37721b70ed6
- SHA512 4604c35d7d13bafb76fd4e36461552987c16dbb11e3230b4d7d6be8184de3baa67251e6e6b46c9254ed60d25505124b6c165ff13c4b4db109b612d68e6b1a8a9
- SSDEEP 384:/RqXWDRqVRqm0Rq7WdAhWiBHQdHRN7+LjP+CcWlGslanoD:JqKqTqmuqwAhWa++HwotD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4b:16:80:96:24:24:2e:bc:de:8a:86:cd:a1:e6:24:b2:55:68:e5:d8:3f:3d:0f:c0:a4:a7:4a:2b:c5:c3:ea:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Globalization.Calendars.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Globalization.Calendars\net5.0-Release\System.Globalization.Calendars.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Globalization.Extensions.dll
- SHA256 ba015e41641a49c700d991cf1313ab6e4fe17f49801fd77d9eb2d15eef1b8f7e
- MD5 167dfd972930c50de30ba1663b96cc82
- SHA1 76c1a558414e9167509d1826a1fb99bab26a8aeb
- SHA512 36d4ea3cf8bcf82893acd3a1e556b776c8d97eba76f305d9b1cbfbb8f5906db1de11ffe4dfbf17c81e290c59eb47fe0a2d2305d2133b50fd906fb4e490ef3f15
- SSDEEP 384:ERPWYRqRp0RjW502yvxdHRN7E0FoiFWSlGsWq:+NYpu2CX0HPK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
51:18:d1:81:9c:25:38:40:a5:3b:dc:67:a7:67:6b:e5:a7:0b:c0:4b:39:b1:5f:ee:d5:6f:93:6f:cd:23:7e:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Globalization.Extensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Globalization.Extensions\net5.0-Release\System.Globalization.Extensions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Globalization.dll
- SHA256 2568163d350a3d16aea79646d0753d4970cbf93412fcbb0e4d1772193eb189db
- MD5 ee2daa2e97b7250a8db0f6e74ef772d4
- SHA1 0ce9566bd1fd61790fcf7be076b77a9f78749df2
- SHA512 a61a1c0e04ec59b07822d14eaafb738ce39aa3452a9459d275c6d7fef5a258d24d9238b38d5de739c29d9d6a927cf70430bf1da1b6a962fed1780cc1350b201f
- SSDEEP 384:mRLWdRfRA0RHWz6FApdHRN7JQ3klGsIGd:s0pAuC6u/Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ae:7b:b4:e6:50:14:5b:f9:3d:0b:28:59:01:4a:0d:02:b9:37:96:a3:5b:ac:46:da:4d:67:d8:7c:21:0a:ed:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Globalization.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Globalization\net5.0-Release\System.Globalization.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Compression.Brotli.dll
- SHA256 27967606f77cf17e4ab94e64bb6491088de8ba8b3fcdcdf362c7d97d68b91a70
- MD5 74967ec44a71d6c2aa2e4e641e588a49
- SHA1 0275480831c609f6274fad7be775f8869529156f
- SHA512 b9e5bf2a530079f5557cf3f422ee2b19ddad491bae51e7938e355f73d937d1e75cc6356fa9d549738244be4b779fe452d1c548a5ef4ad9deb4eb504d26ac2ed0
- SSDEEP 1536:Ko9sLrI+fbcWSxJzj+pnFvjrU1ECXsD1OdPCwA:Ko9sLs+fbct1+A1cD1O
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:de:ae:2b:85:da:7a:ef:b5:da:ba:eb:a6:c2:93:f4:a8:f9:69:a6:96:05:79:cf:76:75:08:ba:5a:d1:d0:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.Brotli.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.Compression.Brotli\net5.0-Windows_NT-Release\System.IO.Compression.Brotli.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Compression.FileSystem.dll
- SHA256 d5ff77a4b8c9bd42349781caa9327e53f295aaa38b9962babf52ab19f41d4b15
- MD5 655ede2cb37a778c9c1adb3f06504ae8
- SHA1 85acd2f9e1817d4f428052b9a9c922aeea44fa25
- SHA512 3390857faaa69be8e1f4157f86734919c7048c97ff7bf467a2a3dc40f291a4fd8cc9ff36112aafb963f8f05270565d8636c629cdd134fb0be4de4df1d2de9b60
- SSDEEP 192:uTWimWL4LztpQeW4GD5dHnhWgN7aQWgOQophFKqnajKs0jiJ:uTWimWOQtdHRN7/JXlGs02
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f3:67:fe:fe:c3:72:e9:b2:af:6f:4f:9b:1b:43:2a:fd:b8:52:94:45:8b:42:c5:0f:4e:99:90:88:49:bf:30:c1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.FileSystem.ni.pdb
/_/artifacts/obj/System.IO.Compression.FileSystem/net5.0-Release/System.IO.Compression.FileSystem.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Compression.ZipFile.dll
- SHA256 d431044174a61d7f6e8b6933e9c4de63b4f228275c9fb695bf74fc13dcaf57ae
- MD5 8d95e3a1161843a9e80a3c8bc2e6ca2f
- SHA1 2250e1ec2ab27ce582494c4e12f0de3fc5c21327
- SHA512 89120f31d58a36b53d409a6eeb7ce3d0abe2df21230587d18aa715377409d22a6782da9da402689a410be99b2aaeb29469d35471ef1d6edc246df461658e57a8
- SSDEEP 384:DW1IWoIwWHFKGA3B6PtFa7oacDosawY+Zr7Rcwi5XdmtVd4+18JxOMzpLETdHRNB:G7wWHsH7oaNru7Rc07d4+1KxDzpLCzQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
24:3f:3e:3e:4b:85:a7:af:56:cb:cf:de:d1:07:82:92:cb:fa:f2:6a:3d:f7:04:9f:05:26:40:83:e5:68:0b:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.ZipFile.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.Compression.ZipFile\net5.0-Release\System.IO.Compression.ZipFile.pdb
Name
.data
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Compression.dll
- SHA256 cb592781cbb322807a7ad81138d54ad233239a232d3051bdc9f7dded3627188e
- MD5 f6aad484a126eca9e04272c05f4e0fd2
- SHA1 5e64dfe9d7c2dfc42261a897d407403b0960f640
- SHA512 6b0348eb3b23893a59046a80a0b17ec1b3982b3549a84405da24fb38f4613ed814c0c1cff3a0541a844726ffc783ba2649055548b0137ffa1ee5408de52b5efa
- SSDEEP 6144:cxwZr3Rz+6lCgBb2KuinmxJ0Eqd/MaiR:c2p3PTBb7nmxJ0Eqd/MfR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
20:71:c6:93:ba:13:12:9d:7c:d3:8f:e5:e8:9c:41:fa:f7:6e:d3:6a:76:a6:30:aa:c7:f8:ec:d3:ca:b7:e9:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.Compression\net5.0-Windows_NT-Release\System.IO.Compression.pdb
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
196KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.FileSystem.AccessControl.dll
- SHA256 f67c64299145b22088bc759e84de7fc967e3aeb67d520e7d0260325802540034
- MD5 ffe04ea9e8eb2d9a6ff0e3ff0b0dc3c5
- SHA1 67495d1acb1b12fe36c68d36fc1591fb925e8307
- SHA512 2b3cffbde2bf12fa7d84fcf9a440bc5a5a03b4ebb98dfc3cd545472d6d8d6942a8e977d136f1d8552cbc76429a14577641382af53084ddb40b7a8b34514c27d9
- SSDEEP 1536:3LCaxRCvFdCQjChOPmMAFI1xnAeHDmbTR28zZk/S:3LpjPQjP+M0OxAeHDmbTLZk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2b:7b:9b:1a:7d:5c:a9:1c:4c:31:8c:ce:7b:9c:ef:db:bf:de:54:c4:82:3f:8e:e1:98:20:35:f9:73:79:6e:83
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.AccessControl.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.FileSystem.AccessControl\net5.0-Windows_NT-Release\System.IO.FileSystem.AccessControl.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.FileSystem.DriveInfo.dll
- SHA256 60347c531f77b25bc6a3d92fa602b5545129dd92f1e6c9af64d259262b4924ca
- MD5 9d5893b9d9e6953274de082330624065
- SHA1 53d3db1432aab6fa86f948a4d74284d655174547
- SHA512 4233ace5df446b0d4dc2229c96b2e5be16e9f9fafc362bd339d194855e8a9e64535b1b6befce4e9bbbe6fc96d1b6f2eb6a2562a7ba370ad1868443767a2a9839
- SSDEEP 384:VgWcyW00wgASusXmBPL2Wp7KIV/6rnVCHWl2Yd5zwNiXJLykx5hVc8qx+18dvVdU:QtwpSusWVaWc0/If/VjheB+1yvjWwo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
78:ca:ad:0b:d6:e0:d8:90:8c:f6:29:cc:1b:31:13:d5:6d:a9:71:71:fc:8f:e6:fa:48:0e:e0:84:30:cc:99:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.DriveInfo.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.FileSystem.DriveInfo\net5.0-Windows_NT-Release\System.IO.FileSystem.DriveInfo.pdb
Name
.data
Size
1024B
Virtual Size
540B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.FileSystem.Primitives.dll
- SHA256 cdeaf24220bee79ac0e7e62d142df46323f2b90e161c027f7474b12418dd8d95
- MD5 641dba07f92eec4abdb4816645f70d95
- SHA1 244f96d8d476d72fbbdf80ce3f8ec94c778e66fd
- SHA512 4dedb60ff47c8c3f667b634019fc0da339a51428ed013e7e08cc075b5a93024a147642ad963d2b3de0d2545be25700554f94fb305822e345cea9798ee7f0e480
- SSDEEP 192:wWPqWL5YQSxa6wW4GD5dHnhWgN7aQWO+OQophFKqnajKs0j4:wWPqWV4a6jdHRN75+JXlGs0E
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4a:13:85:ae:6b:be:41:35:77:d8:6a:7b:1a:b0:ff:76:89:67:40:d1:9e:0d:f2:4f:cf:2f:a1:99:c8:d4:ad:29
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.FileSystem.Primitives\net5.0-Release\System.IO.FileSystem.Primitives.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.FileSystem.Watcher.dll
- SHA256 7f62b51ce464accb8208627d68c64516f5a4535b00b3533c442df7f142965a06
- MD5 dc2fbca8f641fc76fbfc811bee713cc8
- SHA1 8c518f5ccf2c5d7f4add402fbf85c4505b02e578
- SHA512 87feff7dcf880e7a1f6c5c56abec8a6d852d3303b028c0d169600e7c5520500f9029d4c0a98fc2ad1679bfed68216e4cd3df36180db6fb549db21c3415fd0cd6
- SSDEEP 768:6ATwXl2zUJ6GdxvXx5U92lB6SIfpM3tQcUHP5MC+CkIYli81UUO+Qa/Ie3:6yw1xdxs2lB12M9QcUSCVVohQa/Im
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
99:63:6f:d8:1a:5b:63:4b:b8:94:d4:80:0e:bc:bb:05:64:b2:c1:64:39:50:1f:f7:ee:f6:16:e0:cd:b0:4e:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.Watcher.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.FileSystem.Watcher\net5.0-Windows_NT-Release\System.IO.FileSystem.Watcher.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.FileSystem.dll
- SHA256 98615dfaf418992d36acc335b56268dee1ad18de98f28a7802139210ad61bfc1
- MD5 232510448ce8e417e01cd10fe78d4932
- SHA1 8ba8aa3a3f74a7cee892aeea44906b67b34e75e5
- SHA512 ffbae469553ee824c57a310322164f03fd12953f97d7e863c855889358ab13dd771ef91ff06321775750b202b9a7e04eb9426da1b59e5cd48f00b97671696637
- SSDEEP 3072:igz4tyYGbMSuAUsTO6+2pUjYSwskKBDM6bs1B8ybwwbuqGxd3mec7WbmeoWcjWre:bP+2pUE0M6bs1B8ybwwbuqId3md7WbmC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:e2:bd:68:6d:fb:18:3b:5a:dd:94:ed:34:48:cc:cb:d3:d9:cc:b0:6b:32:0c:c9:8a:16:6c:60:d5:28:98:19
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.FileSystem\net5.0-Windows_NT-Release\System.IO.FileSystem.pdb
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.IsolatedStorage.dll
- SHA256 ef6eece821074182629e2b28699cc3b1dd47e937b0c84008f45c5612e74473ee
- MD5 abcd5f25b69e962ca0ac2e29d6d00b38
- SHA1 0d49c61a1ae797c34de9c08f5ee17dfa4ee7e9d0
- SHA512 5e6ff4244bc9b4720c8af55b33f1f4c5fff61d70e4605b78774f39bd8590b6b841423d1192372a017c9b814ec90f1d856bb4e0f5a4aaec7936689cbb46d1382a
- SSDEEP 1536:jgCs/LFwNbM/abSz2ruC3zoJibDFlWkx:0Cs/LFwN4/aI2ruCDouZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e8:20:f1:3c:79:cd:4f:f8:e0:40:e3:82:04:fa:18:ad:82:90:82:67:55:14:9b:5e:03:30:c4:a6:8e:63:f6:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.IsolatedStorage.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.IsolatedStorage\net5.0-Windows_NT-Release\System.IO.IsolatedStorage.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.MemoryMappedFiles.dll
- SHA256 6bb13481bae22424df7ac31527a79ae1ebf855bd0d623a87fcfd67fbfcf6782d
- MD5 5a9d4f8e459bf9c487c65d96e4c60472
- SHA1 e71c06513f1d28302b6a78c85dd16444fb2fe6df
- SHA512 0d33df7f00fcd7471bc5bc647a8073a4ebb1486383fb93659e2ce07a7fe69524bb557836b52ec872e3c5ad9c76e1a5b8ad6e8eabeb63e90dc3448d2f35cab01e
- SSDEEP 768:Iw/TyLxabpTolHFX020RqaGMNdQs+eLfPbg1yc3T6i0KaGe2fk10b6npPgvHPl:IwbjRqTMNd1rbgJjbe2o0b0pPg3
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
93:38:a6:8f:84:9a:9c:a7:a4:41:bd:a4:5e:8b:5a:c5:3c:bf:87:38:36:3a:78:5b:84:6a:ed:78:e0:e5:e6:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.MemoryMappedFiles.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.MemoryMappedFiles\net5.0-Windows_NT-Release\System.IO.MemoryMappedFiles.pdb
Name
.data
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Packaging.dll
- SHA256 969b39a7f162d22a3d624e8fad8396d1f8b569ba588e40fbdaf0f17b412849a4
- MD5 48ef4b2f61f728714503f27afccfccee
- SHA1 1b04acbfc18dc163b6fc06da408eccaea83e3468
- SHA512 0d846e822746d6b38206611aef21bf276f4157823f4df06108f72da23e067495a2b16b1d96834cadda62388ef062c1078b886a47a3ef127820a88c0ea7230225
- SSDEEP 3072:E0t5zc27uXxLL4apPRFgX5mU//vSmW2RudlprYkXaTis6AzBWF3sWDegZ9phDxVI:ftdc27uXWosePUkszgZnhDxV8PTp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
46:0d:df:5f:47:a8:f6:d1:34:54:b6:1e:63:a2:34:0b:00:7b:f4:06:01:95:0c:d0:6c:a9:15:fa:e0:c4:be:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Packaging.ni.pdb
/_/artifacts/obj/System.IO.Packaging/netstandard2.0-Release/System.IO.Packaging.pdb
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
217KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Pipes.AccessControl.dll
- SHA256 2165b48a5279ddee76f62762a6a476ea1b219259f779b58a02c2eb2d258dc378
- MD5 f38f5ce02b9284f569089ea03882b463
- SHA1 36caedb4c32eb65e46afc888a43e8536a3cfc0fa
- SHA512 042977f8a73e55761599a69153d702bb4f839911a04cf2838fd2ad19cfa6dbbf25bf23456fb9c04cb6af6ff99c252be7ce9ba8d37820bf529f78043a61648a15
- SSDEEP 192:GWVPWLJnxWTAQWW4GD5dHnhWgN7ayvWn+1Zk9gTFqnajT12UGrbx:GWVPW3WTLFdHRN7c+/hl312UGfx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d8:f3:5d:bb:db:a1:b9:90:aa:34:5f:e5:5f:9d:83:74:a9:17:b0:59:03:48:13:4f:00:89:59:a5:b7:cf:77:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Pipes.AccessControl.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.Pipes.AccessControl\net5.0-Windows_NT-Release\System.IO.Pipes.AccessControl.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.Pipes.dll
- SHA256 71f82a195f49043534114c95926f666d613ec4efbfe7143a902e84cbc6bb3cc5
- MD5 e5a2a0ba11df94459fe5d52149a6c192
- SHA1 bce03d6a7e8483f0e44d31fb1e3697a523d5e15e
- SHA512 33a7ac1d57b3d8872cf97e665fc9538f3877f368fcf2c57f3413a4c905a519e75b859ac060ba16eb2ad09ef978adbde73978a48eaab12833726d8a2db00ca562
- SSDEEP 1536:mhC6qMps41QQafmdZFtLXZJB8YZxb8DJWbj5m/aqVTQjfGEmww:mhCKswQQzFtZ8YX8Do3w/aoC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ab:ed:fb:ae:f4:52:86:5b:1d:d6:d6:58:03:84:87:44:e0:4f:b0:45:0a:e9:95:69:89:3b:e6:0f:1d:8e:8e:80
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.Pipes.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.Pipes\net5.0-Windows_NT-Release\System.IO.Pipes.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.UnmanagedMemoryStream.dll
- SHA256 69c5c362744e6b76c167d133d755d9be02204add1ea4264fecea4ad02eca56a9
- MD5 74b46802470116950242536dfc5c1ec5
- SHA1 0993de8da1ba0934af592b8f452c1dda0e684918
- SHA512 e1660ac5369814dbd9e03a380124aaeb18624865df9527cadfcabaf234b2f0c0f7f4dbaab768504c68b0401249a84bfb81e5b0636abbd651efac5bb2b8171e3d
- SSDEEP 192:uW/+WL1kwc1xBDIgW4GD5dHnhWgN7aQWQVoIVFWSqnajKsWI7E:uW/+WGwc/B8zdHRN7foiFWSlGsWH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
90:8c:00:eb:a0:f0:fc:c6:b3:59:4f:cd:b9:57:dd:94:fc:bb:82:d4:1f:21:92:91:9c:82:b6:27:36:7f:8e:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.UnmanagedMemoryStream.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO.UnmanagedMemoryStream\net5.0-Release\System.IO.UnmanagedMemoryStream.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.IO.dll
- SHA256 2b065e31129b5ea260eb621867f73cbe38f960a56c4998cf265deff1466ee58e
- MD5 e1cba4b34e6f2d138365d7c877401190
- SHA1 a4011898427eff41d823930b723c0d2896af9d5a
- SHA512 382fbc9b364b5ba92091238cf4ae3f87519d64f45acd41586111d0a202ecb2ad08475b70dfd70bb07ab529ebb455fb7bcf35e62c8701f40c77681d5638021993
- SSDEEP 192:MHWRbWLt83wxHwf0W4GD5dHnhWgN7acWoQ2SkqnajKsIGYt:OWRbWZ83uH23dHRN71Q3klGsIGq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0c:04:9a:54:67:c2:0a:96:a9:a0:4d:bb:f4:56:06:5a:6a:ac:28:95:fe:c5:cd:37:9b:dd:4e:86:c4:5a:b5:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.IO.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.IO\net5.0-Release\System.IO.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Linq.Expressions.dll
- SHA256 cac9c43cce6bdd5508f46f6a2ebfd7f5f0626a1708799eff20ce2264be60dc0a
- MD5 0eef04cc1acec5ed7e1d78748624eb14
- SHA1 f7abbf228dec05602a2a171cd2ca03e92d603c68
- SHA512 43bdc4a9b0c2a6e802c723bc3e8b12af036f951fe84304246436d85abbbaed9a5c26823b9909d60f9b4d1810b93ee455ed8f6ca62abe05cd12c7ba03b1b5d20b
- SSDEEP 49152:t8aQ+YtXZsZxOH7apgE+PLua4I3rDLrwMRr6+Mnyv:t87cgEI4I3rDgMRr6+Mnyv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ea:ad:1f:49:71:1d:12:68:73:03:63:7b:c1:0f:34:73:fa:0f:5c:d5:b9:4e:08:44:56:07:45:bc:39:f5:46:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Linq.Expressions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Linq.Expressions\net5.0-Release\System.Linq.Expressions.pdb
Name
.data
Size
96KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
288KB
Virtual Size
287KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Linq.Parallel.dll
- SHA256 2fab4490f28f657734b2531e60f4543fcdabf2c9c4537a9a3355798557fb4641
- MD5 20c9b06255589a86739be3e78715f6ab
- SHA1 807d5827ffb6f45c52c7c5ae393d4fc56d8c150f
- SHA512 6a3eacd7483c93d51ffb896ab61e89134536d96a07378874c37d1c72df886bb9b9b44684bc3a0b7997a02e6da5ddc702fe2bff05c435bfb6d1383df9646d50a5
- SSDEEP 24576:GUXr8L4mIp6VnRtqE2ratmQK0Qwxa/hR/aCZx2Q7iT0VpTBNsaxJN8U/aHM:G+8cmIZRj7JTT+UyH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a3:b1:de:7b:2a:16:0c:6d:7e:68:b1:47:ad:d7:02:a4:f6:e8:b1:93:b3:c4:5e:77:c0:95:46:51:63:3b:c4:49
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Linq.Parallel.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Linq.Parallel\net5.0-Release\System.Linq.Parallel.pdb
Name
.data
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1010KB
Virtual Size
1009KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Linq.Queryable.dll
- SHA256 b5391f46992ecabc07608e1f9d8105c12b672122aab02ae14eb9fb9e4ec09ebb
- MD5 edff3861a59ea60b2d778cd7f6ab6046
- SHA1 cefc563476823d7cc6bc70c1f88d9b72a907a6dd
- SHA512 fbc71748077c6459d861c5b94acf0222ab3279b0eddbc742fe043bf4270e553ccbdd219c5030407e71d2938c9173c39bbc1b5c828b5326b502718d76997a1ab7
- SSDEEP 1536:t/rl54YeIYj3kojJ6HfBCuRkq7QC0zJ+CZlbvi6nPQHXTnvuVnsmL4o4:t/Z5sIYj3ks6Hp5lolb4nost
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f9:f8:3c:6d:7c:34:cb:12:25:eb:d8:c1:94:ab:57:9d:b8:76:b0:9f:17:4f:4d:e9:e0:23:4b:01:b7:7e:e8:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Linq.Queryable.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Linq.Queryable\net5.0-Release\System.Linq.Queryable.pdb
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
146KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Linq.dll
- SHA256 2af55d08ec01900616a59de429ec8b00e188ebb16c2f7a8e2d0b3b0f9068322c
- MD5 e8cc5234a22473f7955a8dbb8795db14
- SHA1 f537e230e97208ffd36c3ca43b8df0ae8288d775
- SHA512 a82a3f44176ae7111c3f11d29edb2076a506b6ec2b9abbe1ed7356ac0216b1826a72cd4dd88d83aae6ebcd599418a949ceaa871f44aaa45fada59d312f4d674c
- SSDEEP 6144:y2NbqEzMg8PPNM1mplGzTiipKdmXIZgFS6HVJxQYp5kfj0cFZ2qIkXR4NomtiAP2:yUqBgSNflGzTiiERGomtdP2zxZJlJxbp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
78:42:ca:51:d8:4d:6e:86:b5:c3:38:41:b2:62:76:83:fd:71:d0:d7:24:7b:c5:20:49:f8:47:34:61:32:b8:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Linq.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Linq\net5.0-Release\System.Linq.pdb
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
335KB
Virtual Size
334KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Memory.dll
- SHA256 b0bf5cb1720be5a4f1475b6064ab500a29abbc95d1102c4d277121f4621c6b68
- MD5 98f0395dbabe5bb3c84f4bc04fc37513
- SHA1 24bfeca7c7e35d7411824818de855c16b4bd7c3b
- SHA512 aba00ceea6572bedbd06b1fdfeebf2c12443482d0ba6aad14750825b9a417a2451687b9a1f48857cfb906767b078e80ee07bb0b0f9920432e3364c8f92414ea4
- SSDEEP 3072:0jLIk3qGyyh5FIVwupEXjV4VXc7MpJKY6zkCHjZZFZEC/JbVW:sV9IOupEXwXc7MGY8kwwCR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4f:64:5f:5f:dd:34:06:e2:82:ae:ca:28:b2:d2:23:8f:17:94:a1:b6:dc:b5:a0:f9:4e:d7:d8:7f:32:b1:d3:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Memory.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Memory\net5.0-Release\System.Memory.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Http.Json.dll
- SHA256 cbda535e2b973494eef5e09a248db79d13e974233f2c210eced16f7dc470f98f
- MD5 7481595980e6bcec3ddbd280823bba52
- SHA1 43fa8037a392a75faca631c8d5277819baefcfb2
- SHA512 99af6da4739d7a3ff64f583488334f06ab030fc6886e4ea1e0a81ef0a139a05516a48de3ce5bff5418caf9f335cbbb45b6b2bf1d97e9ccce9af4947cb2968550
- SSDEEP 768:m/NwMHKY9bDeeGZJoxnyueOAkD+K0B1OKAzy3WjJ:m/NwaKY9bDeHZapHeOAkD+BOKAG3WjJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
69:3c:0f:09:06:20:43:d8:f7:ec:41:60:bc:20:9f:05:50:1e:ca:6e:76:02:66:07:03:5b:9d:a1:9b:c1:da:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Http.Json.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Http.Json\net5.0-Release\System.Net.Http.Json.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Http.dll
- SHA256 4e87ef58a9858035d92b6f8c8489f75f0fac385697d2d375a4ee0d7b246c2b66
- MD5 6fca26e3c827667ae238b2e69d8802fd
- SHA1 9e48f58e6f808f62957ec5dd4474d387b4162188
- SHA512 267829c6bdcfd4b827d1291596fb28ced9acb2beb4b4d7a768dc84a4b7e86bfe54d7abdbbfde454d26adef91011cf4c77c1be17da64adadc9f3aad1155bacfd6
- SSDEEP 49152:Hc/T64CTrAbuCqL1PkRSz4XBH9+/pZhDz0fb9wT2U6yqiN:H2V7ju4y/N
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8d:8b:83:af:d7:31:4e:2b:6d:10:81:9c:b6:dd:38:37:cb:58:82:a4:05:88:04:03:43:ef:97:ed:97:c3:c5:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Http.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Http\net5.0-Windows_NT-Release\System.Net.Http.pdb
Name
.data
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.HttpListener.dll
- SHA256 ba89c82e65ee026a5c520485d7ac21766671c3c7c563cf77ad76d9c80f7d0339
- MD5 b769af4a6502d1229480438714e1f409
- SHA1 1ad5c52730fd1bf06d07d81ced4c50dd957a8bca
- SHA512 4c66766442cbd75c09e46303b038d5eff07a0a7f98434ddee1f0a900509c683fe7dca36dbf3d3065018c9ba8c4a4ab751218275f68ee7a347b41add5456cfa29
- SSDEEP 12288:83geoItD/mPXAeHp4mGeVb5JhfkYVYpKMuLjAVWAy4w:xHp0ed5JhfktpPuLOWt
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
06:cf:7d:42:38:be:1f:bc:a8:52:1a:8d:75:04:2c:5e:b0:d1:99:38:a3:f5:a1:32:8c:43:5e:46:c1:52:fd:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.HttpListener.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.HttpListener\net5.0-Windows_NT-Release\System.Net.HttpListener.pdb
Name
.data
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
505KB
Virtual Size
504KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Mail.dll
- SHA256 33dd0c2668e859ca4edb8b8b54c9ac4ddd867e0c218086e00cba456ddca232f3
- MD5 04dfdfa76153abbc214df2457bae8c06
- SHA1 57088878213b0adff5425577ccfbfa6a3c71753f
- SHA512 0459151fb2633b68b3bf94a56e97af977c8cc21c72420d008fbb3cea4f0b27dff653ec41d0aad0e36591631a61edfc665557fda4b15ef3a8a4be78c713b72172
- SSDEEP 12288:IFKnutAGZ9cqmZJWSfoQN6A4j7o8SULy/:IFiutZblmbWSfxgAGSU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
70:19:d2:88:25:b7:dd:20:ad:ca:d6:14:13:f0:d4:69:27:7f:fa:73:3f:11:83:b1:31:40:97:4e:f7:82:2b:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Mail.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Mail\net5.0-Windows_NT-Release\System.Net.Mail.pdb
Name
.data
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
433KB
Virtual Size
432KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.NameResolution.dll
- SHA256 01aa870229fca6aa7c96a8ddbc3bd4ec1c199c52b4ad38dd58f49fa1f8130125
- MD5 9dbf7efe99745a1b3da231e97ea4f8ae
- SHA1 c5de885249c2af2bd06ad13945a0e41aead56503
- SHA512 249104b0154b2a7b6758ad5932d13f3f6ab7805418f1548b016de20747013876c2acfe2b112d29c54f46fbd21c44fd5d1546029810028aa74888049811a9bdc1
- SSDEEP 1536:FZK0Rog6sJyAGi8XpAuYfIx+fZ254aIedBzr:Fk0Rz6Y2i8XpAfIx+B2xJr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:c4:d2:27:49:27:d0:11:25:a4:9e:65:de:8a:3f:13:57:bd:3c:a8:ab:46:90:7a:e4:90:52:54:23:d1:9d:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.NameResolution.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.NameResolution\net5.0-Windows_NT-Release\System.Net.NameResolution.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.NetworkInformation.dll
- SHA256 d2b5a7e500417240a9a872f480edf88a292d28a5f735734dbb9a9c177bbcc68d
- MD5 d005c961b0857fc333cceca0b26f936a
- SHA1 dd3ef8f13ce97c10a2ca3ad584cea9e217ce4e24
- SHA512 b3b2ee5d7865c5e7eefa333641b2efd31fa03b9a8fe26911f8ce8d68740002dfc27c917fc0df2bed188c44e2a838d5bba613de7cf012190637a414fbd4a5a13d
- SSDEEP 3072:pW5RMdPbJ4OWA9dOOdun6eZ0X9057T41NczKZvk7+:35wHZO9zZo+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0e:fe:c7:76:ac:1c:c0:2b:21:0e:7f:0a:1b:f8:f3:23:12:9d:02:fa:48:65:fb:bb:43:b5:d6:ad:63:e6:99:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.NetworkInformation.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.NetworkInformation\net5.0-Windows_NT-Release\System.Net.NetworkInformation.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Ping.dll
- SHA256 00e15ddec1bdeb35bd1006aa5bde84061c79492e9dec3fc27ec271856fae9a94
- MD5 a80d1d62dd1b95c067859f0c3e0d2582
- SHA1 65a7222ad8c97d4a16b68398c300da832e67fa71
- SHA512 b4bce30f8e19125ded2ee27adec7ba77bd1d1748413cbb93fb67c47b096b5e5d1af00393ca6680155bea603eec5f376c29c244c3ab3d623fa73af0611fb4a3ee
- SSDEEP 1536:p6jQ4NyjKstjwTEqvgFrIHs3XqaFBZUIfcFZWscPtQvV7E:poQNju1gFrIHW77ZLfcFZWnPW9E
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fe:02:96:c3:8c:ff:08:32:3e:83:b4:3f:53:21:14:05:43:fa:35:57:2c:85:e2:38:40:de:5e:54:ae:b6:90:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Ping.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Ping\net5.0-Windows_NT-Release\System.Net.Ping.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Primitives.dll
- SHA256 14d7a7543ab9c32eaa19a155a918d0309086984656137b390bd1a35284defacb
- MD5 de2dea556f7571727c45416a62215d34
- SHA1 51a70db627d38ba4ae5c09d06982ee886ccc07bf
- SHA512 f3b1e8696fb636aac4d2a4b966eff41c622c21cea3870cfb2233d0c982eacd4a8d7201c4b19218669414ee9f439aa09d5d40ddf86dff739f23cd7e5a09a15ad7
- SSDEEP 3072:8YOsiv8QbQ2Wpdjhq0MgEafud9Zsv3QXg14cndxdE9F:k1ipdVBMgEafudHmQgk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6e:e0:4a:20:27:cd:b4:a6:a8:87:36:c5:9b:08:23:b9:19:78:39:f3:75:59:22:a5:4d:3a:77:7c:f6:e8:e0:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Primitives\net5.0-Windows_NT-Release\System.Net.Primitives.pdb
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
166KB
Virtual Size
165KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Requests.dll
- SHA256 81848523cf0e480d9ac226e7db10067bf7aad5dd58c404e25ed12daa467f4dd7
- MD5 d749114f9d88914a6294b1bd1d37aaff
- SHA1 dd9b12a4fa25bdf1c134f8021e892c770c113769
- SHA512 27d753bed0867da8a94c2b8e763330c23912aef9fcd3d6d38ed84b4e06e17c9df00634a300e23b39fbaf0bd52b46a786964f4844304bfea41b1a0364719f4159
- SSDEEP 6144:tDE9WfpAhY4l0tXyAP+BXzaINIqXGm/NEtB1dp:cl0ZyAP+BjaINIqXl/N2B1dp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e2:69:3f:6c:9d:73:68:39:68:fe:2f:ed:03:24:f3:83:85:51:14:24:1b:6a:10:d2:d6:d0:73:33:6c:49:1d:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Requests.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Requests\net5.0-Windows_NT-Release\System.Net.Requests.pdb
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
271KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Security.dll
- SHA256 9a74c1b44ab78f840c559c70878b509d46159fa44e859e73b0db6e334bcbcf4c
- MD5 ecb07e334d505842ade202e0238e666a
- SHA1 47ee6e45ee3d01071de76640bb1be67e61b8daa9
- SHA512 65f98c9488ff0fd920f1e765eaed9b0a99e27c8df98cff6635677d21d23decb55179c1514fb7ed8db1662cc8bf590d35a3ee0785c1cc414799f3517b1d17faf3
- SSDEEP 12288:WBFDI18dxEZdGzXSkajPr3Hs9rFkvff544rz:WBpIOOrNjr3HMc5R
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
04:b8:5c:81:0e:27:66:b1:05:31:49:26:62:a9:3a:6a:dc:2d:9b:59:54:b0:f2:d1:e5:2f:96:f2:97:cc:5d:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Security.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Security\net5.0-Windows_NT-Release\System.Net.Security.pdb
Name
.data
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
538KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.ServicePoint.dll
- SHA256 95f22497ae7dc4f2c12636d0098c5ba888a1f1538729b013908e8113950bfbac
- MD5 e061671b142337ef61237c59a885c693
- SHA1 79fa38bce659cafe0002bdd54af14ba4505711cd
- SHA512 a484a21d21178ac24bdc2fbed516327e09ab6ed81e34cf821bca76abedea72718a725d5a6ba7716227ddfd969afd0b94e2c903f12205486bdc9d97d11f82cc4e
- SSDEEP 384:kWXFWB6lMAk1P2l67DIXHvVtwXKNY9lee6W23+pcNXzV31eH0+XdHRN7EiowuAz0:F691pYaXKNY7es2OWR31W0mJzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
70:f0:a9:95:3a:1a:4e:4c:03:8c:96:50:45:59:2a:3e:48:73:92:b5:da:bf:d8:e4:82:8f:22:21:6e:a5:9c:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.ServicePoint.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.ServicePoint\net5.0-Release\System.Net.ServicePoint.pdb
Name
.data
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.Sockets.dll
- SHA256 3aa1dc84d8a4cefdb2c3b7007de1e8e8433be4da46d2397846d98a3ae131ba10
- MD5 0d9fe58dc99ee96165c3954e0ab5d161
- SHA1 c1c6ee6c1f05025f6d8fad01ad90eda3f69983d2
- SHA512 77d1b81d69a256bea0b36e4649e46db4557780258abcf0945ac396e929dc91e0a9316628ac90418cc926448fd8c475ed2dea41be61ae31e8779a819f893d3d88
- SSDEEP 6144:YhFYoGscPSgR7PUhc288ee/BYDRZ2QT0EidrW4r/PSqLXov111q:nocchc288eeC1ZOf6C/1svo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6c:fb:e1:87:ce:9d:35:2e:90:76:9b:99:29:bb:9e:97:e2:3e:28:aa:a2:3d:64:8a:b5:82:d6:09:87:bf:16:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.Sockets.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.Sockets\net5.0-Windows_NT-Release\System.Net.Sockets.pdb
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
437KB
Virtual Size
437KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.WebClient.dll
- SHA256 1f3abd0539374c78a517c2df5b59a267ca473d65f73132ad8eb5eb4152bee4a6
- MD5 96ca8ee3eeaf6d39d8a3b8168b12ce2e
- SHA1 106184c2cc3107d713ce2e4e1c96ed879b76e8aa
- SHA512 9a8d2ccd03a6d4bbcbe95eca6194d070ab3d1316133a5fe4d64df16b2fdc2b7838f2fcf71a7e7719603075e34707be48d4facd34ea689431d1be3e7ab780860c
- SSDEEP 3072:GqJAbGnt2C1YSQmtfUjuDP1izwm+T3gTg3Tz6hCJuJSFoBOT:vpiiDP+83vHuU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
be:1a:63:57:7c:1a:42:2d:bf:c9:eb:db:40:64:17:c8:c4:6e:3d:73:ce:e7:7f:7e:91:ce:50:0d:f5:0e:ef:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.WebClient.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.WebClient\net5.0-Release\System.Net.WebClient.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.WebHeaderCollection.dll
- SHA256 45253f2f0f2fe4339fb288430dea7c453a4c1172c96a6cdaf5baccb735c33900
- MD5 6ce9be4be312e9f11c7ebe9c4dc58e1c
- SHA1 37fe1d2b4e4316f89dff8a3dfcde7fb93634d501
- SHA512 9d7863804044808e65e509316059f6ee9309416edf738c136214bfe9bbe2e4f63a0f147523ac6b640db25633936e026b854f07adaad906ddff03687428bf8e91
- SSDEEP 768:1E2Ub7E5oBvF/Nqvn95fRJ8s6Qy3gSGy1q1IKVwHI6Es:1E+GFlw95fRJAtgSGy8IYwoLs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
34:eb:25:8f:89:8c:06:56:b9:57:40:f6:0e:e4:de:4e:72:ea:9c:02:fe:d7:d2:d6:1b:81:ea:2e:79:9e:e1:cf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.WebHeaderCollection.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.WebHeaderCollection\net5.0-Release\System.Net.WebHeaderCollection.pdb
Name
.data
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.WebProxy.dll
- SHA256 dc1c97a672c23599c49efb7dc9e6d9eac0089ccc6be71a5f39899cb687e52fa0
- MD5 3ac48b39ba3a01d49e6c5a35bb406dbb
- SHA1 d10856d6ab8354346e85cbf2113855b0ef75ed71
- SHA512 a50606fe3eeb750e1d61ee50255aa23c2852c682078125b2c4499102660a0fe687ebbdba91a18d423f94d3e6e9efe43e82bcd4e7ede8c9f8fc9686b9c1b44ec0
- SSDEEP 384:y3WbwWeWy9RhztITK0lh7g7B2xi6S6yW9quedHRN7+wuAzXulGsw6:yoeSTSLW9quEjzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
30:5e:01:b9:e6:07:88:57:7c:cf:76:da:19:10:78:86:5b:f7:54:44:49:1b:8e:82:69:95:10:5c:2c:9d:67:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.WebProxy.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.WebProxy\net5.0-Release\System.Net.WebProxy.pdb
Name
.data
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.WebSockets.Client.dll
- SHA256 d247f2a165f4903a5c1f333729687a33e6eeaf4eec9e9f4183d5257045efb6e2
- MD5 b3067975ae863e5aa344735cfe1e95b8
- SHA1 734dfe1594d2bbc43859397135c4430d7cb966ff
- SHA512 cb4333b317bdcb5f75b5b2517ec52eb76ffa1519abd31e9d24f2617bf59c8b58c3181297f60f018644a3b96eed5c359be6034996b83ac5d94f328494b768c304
- SSDEEP 768:FTxw3jDuvN8Sm/GQz15Bn4J5IHf8YG1jaSwNqLnkI1M7vF:FFwiNy1z4J5IHUYymSwNqLLM7vF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0e:bd:f2:98:99:b7:f8:64:c8:44:51:62:87:dd:9b:f5:9d:86:ef:7e:fd:4f:82:b2:09:90:5b:2b:e9:a0:a9:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.WebSockets.Client.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.WebSockets.Client\net5.0-Release\System.Net.WebSockets.Client.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.WebSockets.dll
- SHA256 6565f8621f1cff2f9a54dd1f4d3c3e46f0734e9cd0f6c03c0461e7a657bc64ff
- MD5 047ebd3f5bc19b8409f5c27a39d62684
- SHA1 f18e14ddc3ab4a2d241706a4fb669ce10c30cf1f
- SHA512 448c039448e2c93570ff9d88bf08a7733b0b6e34825c85e1a40ad89b864d89fb7b89309165dbbf68674f64c99c49c0f9e6eb9c9cfc3d385b71dce01cb9680f24
- SSDEEP 3072:ApD8JUmqiCYnbeSp82Drt5UQmKo52J3pavic3FxAP+NfEI:vbPDZSQmj5aOiAAxI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:79:15:4e:3e:cf:4d:ca:0b:8e:df:04:67:e0:25:c2:00:4e:db:00:ed:20:56:7f:59:04:61:52:0d:f6:cf:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.WebSockets.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Net.WebSockets\net5.0-Release\System.Net.WebSockets.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Net.dll
- SHA256 398f251dcc03fe2092d8aab4ca6eaa0e12a67757ec7f369d157504eea45d075f
- MD5 61f70262acae30fbc54b499df360ade0
- SHA1 c1a3cdc77ac145cd988db4023b0091d2d2a6cd28
- SHA512 5b86a796c0ef798296eea3dd0a16ae4a92692b77075e1705646e41bbfa03a8ab50df269d8782076efd5cd8278ab2e9fc16b336636922485b874d3fe109dc774b
- SSDEEP 384:zW2VaWzbw13qHhf87KdzdHRN7qLZ/hl312dGlv:XnU134wKdhuodiv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d6:81:0b:80:73:6f:80:94:2c:cb:1d:a4:f6:95:11:59:b6:66:6c:a8:17:97:58:5c:30:da:7a:4f:05:4b:9e:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Net.ni.pdb
/_/artifacts/obj/System.Net/net5.0-Release/System.Net.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Numerics.Vectors.dll
- SHA256 1a6886b16ea89f526cea9e4871d46504b68ce84370afa5e4885bc38338be76e7
- MD5 0e019cc85e091057ea13ddeefca60ec9
- SHA1 a456b19c15d38cc914f22282759102510423f26c
- SHA512 081f95d64f3949ed681993eb52e607d601b44973ca6ad9c635efdb16455cd1bab05e77974ce2853b6b20d655252b2fab6f1a8e6007c8579896bccd25ab972c53
- SSDEEP 192:GWnBWLU7xkdhRW4GD5dHnhWgN7aQW/tybsE4eAqnajKspRR:GWnBW4kdhsdHRN7MtypJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ef:96:f9:6b:61:43:f6:75:da:2a:46:31:72:eb:53:da:fe:1c:5d:32:4c:5a:39:f5:f1:0b:d1:22:a4:7f:60:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Numerics.Vectors.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Numerics.Vectors\net5.0-Release\System.Numerics.Vectors.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Numerics.dll
- SHA256 2e47ec65e5b8c45e3c5e761994a41491b8dc06f23cac53ec8015fdb442da0d68
- MD5 0d8cc1299d4cec7570763ebde013710d
- SHA1 dedd8432a4d2bc6f8ad39ce9c7ec4970d8dbddef
- SHA512 22d27723db559c6c16d3626ec123e15669c3ed62f3a56daa2429cf4f1e078fb2644c8170e30b3a9fb44c6d38e96bb57b9e5a1827582588cb6129f2d357147529
- SSDEEP 192:2WfNWL3+3mIgBW4GD5dHnhWgN7ayvWMA351Zk9gTFqnajT122Grd:2WfNWD+2/8dHRN7Qp/hl3122Gx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e8:66:72:2b:8b:87:a9:fe:d4:f6:32:0d:3d:32:1a:ff:4c:ea:f0:f9:09:57:58:e4:78:a3:66:3e:d1:30:43:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Numerics.ni.pdb
/_/artifacts/obj/System.Numerics/net5.0-Release/System.Numerics.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.ObjectModel.dll
- SHA256 46f23b78ce5a4ff0f8f618c8db22eeed30194ecf20498be4c2af76e8f63719ec
- MD5 33b6db420b1a6588005d3cebc836b971
- SHA1 2f40777bf168b882c9d7e2bc71345ee7792cff87
- SHA512 fbd91aa86c2d2b0989d2c380334eb1fcdf80845b0d10ef413a3a09a5d1e47410ec69033078aae6c0dd4b2aebe1a90698d3ef34bbefc7a03f97b6c3ed3809e7a6
- SSDEEP 1536:V3XgdTtIOokgGkOOwDSlrWIdOUZKpVmUsH8Tv3PhFrb1XY:V36TWO54wDSlKIdOoKpVLsA3HP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ee:ce:27:ec:56:71:6e:9b:1c:f6:44:7c:a5:17:d9:1f:34:cd:39:00:ce:6c:d8:85:70:53:46:9f:da:1e:b4:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ObjectModel.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ObjectModel\net5.0-Release\System.ObjectModel.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Printing.dll
- SHA256 27bbd6432c19b565c32e1244619329f1c5792419dee121e03533d042419ca187
- MD5 25e359c17f53695eb4254dfdbe38de40
- SHA1 8a408fdd25e88d1f0ef74e6f3f47465598f2eedb
- SHA512 c951f679c0d399fe6e4ed242e26f991685adcca4d1ffe73b7344e840967e547b8e495852fde2caee1944af505ed8ed4a56455f5e4ccabe1caafa90990afa613f
- SSDEEP 12288:g2vQU8hUeWiEZmRQxt6i1z/3P1DEzZbZgCwHULQTzFP10a+q:h8hUS4mY1z/3lEzZ6C1ozFP10a+q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
17:85:be:0e:a8:2a:78:4d:04:46:91:52:37:b8:a2:e7:32:dc:b8:e7:e1:71:51:0c:bc:8c:86:8d:d9:a7:7a:3f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Printing.ni.pdb
F:\workspace\_work\1\s\artifacts\bin\System.Printing\Release\netcoreapp5.0\System.Printing.pdb
Name
.data
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
812KB
Virtual Size
812KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Private.CoreLib.dll
- SHA256 fc212d3841c81d50518c066333b9ccef9346d86d679bd6cac19771b0d23bb8c9
- MD5 677daf60c0ef7d4c5e7566d56b63e336
- SHA1 0b9a1d8b16fd84072f214862b19c2b17923792bf
- SHA512 92372aa3bcf7a87d93cf61681a5b3acf1b72b065458b49230e88e29d7d9186ace47397240a6d6fadae5a9847dd4b3610693c4f4a516c8be3a8993f8bfdac6cbc
- SSDEEP 98304:4WkVNfioPQt4/uOt1bPukyUb/A3m1V2EGSaFW:4F9oINTukn/mmiSaFW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:b3:30:a3:22:cc:25:29:f2:27:62:a4:89:bd:5e:d1:59:e7:a0:17:fa:d6:fa:be:9a:3b:8e:c7:66:f4:7c:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Private.CoreLib.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\coreclr\System.Private.CoreLib\x86\Release\System.Private.CoreLib.pdb
Name
.data
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7.9MB
Virtual Size
7.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
230KB
Virtual Size
229KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Private.DataContractSerialization.dll
- SHA256 672f1b00e0e01a5b08ced77e134ba2853fa16e7459ea27419248e2b77d907606
- MD5 a4972c359121bee3c7e0e71212bd2fec
- SHA1 63f36304ffdcd6d9736cfec5d9c6d10ccf413cdb
- SHA512 c7826c1aa2684153e3ba0a7df0e23529edbcd832ede096473ab5890ca3a8ed525e0ac1f1f5b47a65d5b2ba6c0d7416fca60aa8557d92290a57b1e7ef0229aa2d
- SSDEEP 49152:tq8SFzOGPPLIa2DL9RSkN0QdnEr22cpJ79pf49rzFzY:XaFWpfWxc
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b1:6a:8c:62:40:b7:42:3f:03:9e:5e:cb:94:71:84:58:d5:09:65:18:57:c2:40:79:4b:e5:b6:88:8d:f7:bb:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Private.DataContractSerialization.ni.pdb
/_/artifacts/obj/System.Private.DataContractSerialization/net5.0-Release/System.Private.DataContractSerialization.pdb
Name
.data
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Private.Uri.dll
- SHA256 5248aef495251f20444d081e03db1e456d501b0e28614b4088519c70afd26d6c
- MD5 4f8b1d6ea13e44a3a8f675e9ae295a18
- SHA1 b55b77a15d496a48d46af97c16b38342aa201679
- SHA512 6c27274a502000799134a7cdc88d8eaafadbc0d9e1ded326793f4857d317d67715f03d3482a6607f6a889831236f1be64398d35e5a3d121f164c129e26aed3ee
- SSDEEP 6144:5UsdgweaVg712TpDTJr1swiExRVWhKwlx:5jffgJKtTXDxDmK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
28:d0:05:4f:bc:16:c8:78:00:c7:0c:26:e0:65:9d:13:70:1a:69:59:87:19:28:11:d3:a3:67:90:83:99:9b:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Private.Uri.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Private.Uri\net5.0-Windows_NT-Release\System.Private.Uri.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
208KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Private.Xml.Linq.dll
- SHA256 56451d904548e2b7aba2bc3d9a8ae7051ede2bc39a6dfcad39cfda73c79e62d8
- MD5 09cec04dcb123c7c3b787523145642d4
- SHA1 d63406ccdb850a5a509de9161196409f4201031d
- SHA512 ddf2569cbefd648193d6a0415c011f88f55dc4145b4a457c993c31bef9c74dec08bd9e0a4c434e3ab69dc3c250f14a12cabfead13af6252ff4f3a85348064deb
- SSDEEP 6144:jlLm4rU8UwnPs5I0CdYXXHmuxCz8FBegWwqe+Pl1EW7pNBNoQvbdHdSCz:M400PiCYXXHmunegm1X1NbdSCz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
94:2f:f0:54:2b:17:b3:b2:4b:7c:51:5b:e4:6f:ad:6f:b9:69:cc:f8:41:14:d2:5d:ab:21:9f:72:59:3f:72:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Private.Xml.Linq.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Private.Xml.Linq\net5.0-Release\System.Private.Xml.Linq.pdb
Name
.data
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
314KB
Virtual Size
314KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Private.Xml.dll
- SHA256 0b4104f7f3a38f8be919b41e664e718eda3ee6fb3b2fe6e272fd9e62fc9592d6
- MD5 bab599642433086c2eb1b4feedb5edb6
- SHA1 9e3e8d4fe9c1498bb69068e942a084786b896f41
- SHA512 91b6e2f71be9ca41fd87d601adbda154aff9481898574fc34bafc79f328fdcdebd25e79dcb65d5ce6483a083fca5b7be33d7b828a38e56545a4ef05a6d35e961
- SSDEEP 196608:bG2/dLordmS15GS5iNjEBkqYnIgJM0cAZa7SGTAcA6898ygNQvoL0uyMLGp7WTDN:adN5GS5iNjEBkqYnIgJM0cAZa7SGTAc1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6c:be:81:c2:82:5a:37:77:eb:5c:ad:8e:c3:79:45:ac:51:b2:d1:74:77:b3:a1:14:d9:73:80:36:c8:6c:25:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Private.Xml.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Private.Xml\net5.0-Windows_NT-Release\System.Private.Xml.pdb
Name
.data
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6.9MB
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
289KB
Virtual Size
289KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.DispatchProxy.dll
- SHA256 77f6590dd938be4be1eea576258a13b764f4eca3d9f022ce399c67f24c0d8a41
- MD5 8a09f5bc40bb8b2f416ce6eabbb9a95c
- SHA1 cfb04b15d4f403351d267e5d160e19a3fbd56fe6
- SHA512 dcbf49b825805e04a32a68cb7d54f6b75c38496a71c6c0a82d65f61757dde9ddbfe65b657b5a265107e81664524cd569a31df385a89fb9fc558e8c76830b0dec
- SSDEEP 1536:nNxuuoinnuakG3GdfgUBvQ9rBPggJHPaOD5eOpkJ:nNxz1ua/2dfjSBjJvasT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
36:75:ba:d3:e0:b8:40:af:86:bb:cf:c3:0b:e2:25:e6:8f:1e:dd:84:70:38:31:b4:88:82:2a:2b:ac:96:3a:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.DispatchProxy.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.DispatchProxy\net5.0-Release\System.Reflection.DispatchProxy.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.Emit.ILGeneration.dll
- SHA256 a08f6798b5df690bbb13a3b84423e273a0eeb60ab821a61acac03c238d21704f
- MD5 4999f4ff1e0da6d27039152f860d71f7
- SHA1 da9efba10f1eb0cc0c131b911ed6a770a80a75d3
- SHA512 5c3aa4372dbe021e19d28308d48bd806572dcec3d33fe9387080bb63415a767b291bb79d4f9d7b8f2a0e909955c62219bbbde25f21a1c29a248abf5837339a56
- SSDEEP 192:qWbUWLs2xb51W4GD5dHnhWgN7ayvWWna71Zk9gTFqnajT12tGrJDdB:qWbUW48b5gdHRN7Pna7/hl312tG1DdB
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
13:a1:d9:fe:85:f9:2f:f0:68:e1:d6:e8:dc:0d:94:96:e2:4d:51:a0:48:46:dc:7a:53:e0:e9:d8:cb:90:3b:bb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Emit.ILGeneration.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.Emit.ILGeneration\net5.0-Release\System.Reflection.Emit.ILGeneration.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.Emit.Lightweight.dll
- SHA256 b04381e8584425d09b36868afc0a826d07fcc5a1686ccfae4fee6966df747da5
- MD5 29aaa2e5c34a6ce437d1124396a784f5
- SHA1 2fae0cac098458502fa7dd75e202891b20140580
- SHA512 f1650ca41d8d67a0f6204738aa2c6e226258daba6678cd746fe5cec70f69b810e0b6f1b9a046890171bb7fca3796c3969f62c2c22ecd7ce7f7b18340c688099d
- SSDEEP 192:S7WAVJWLUW7xKBJOW4GD5dHnhWgN7aQWjD7DiqnajKs4Cf:S7WAVJWYWVKBJ9dHRN7cGlGs4C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6d:3d:19:e1:e6:c5:05:22:23:43:62:74:37:13:35:8d:d7:e2:46:d3:d1:2b:95:92:01:9c:67:0f:ea:b0:39:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Emit.Lightweight.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.Emit.Lightweight\net5.0-Release\System.Reflection.Emit.Lightweight.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.Emit.dll
- SHA256 ca9832277861a74d7dca3d82f3b84ff2b8f03306a7fbb53381b836b732aa6aed
- MD5 9c6c9cc23b208c755634a8bf897ed1c7
- SHA1 1cdac358b09475d41d4074ef8955ff596323234a
- SHA512 22238f614d12c300591dbcb2d31a8d167648eb3222903aa3ce640401719b69f6f713b7a6e905b58da85117f6b414c4c94de91a1f4256f0a80d03db3c4bad74db
- SSDEEP 192:eLLW6FRWLl0Orpx38jbW4GD5dHnhWgN7aQWVgVT/gqnajKsINr:eLLW6FRW5rz38jSdHRN7Kg1IlGsIN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:e4:7f:c5:04:49:fd:7a:2f:4a:dd:f4:3c:59:ea:4c:d0:bc:4b:45:66:61:a7:11:e6:6c:56:18:17:9d:7a:80
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Emit.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.Emit\net5.0-Release\System.Reflection.Emit.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.Extensions.dll
- SHA256 4bb7637a331496fe5148c273a9e0a0b4ccfb8a828ee8f65d747dd59720846f0e
- MD5 f7a9e5782b1c494b30d97cd6e5004a9c
- SHA1 1572f92ebaf01cf6453001a5e4b8ed2eedd7d6da
- SHA512 f4df001fe8f5a40b3e902e88a5a72c771aa480b8d78d63961e5ffc031caa0986c262f441fc06f333fc18d8602321f383dccdd96c2f46e278d3f9690d83a02bc5
- SSDEEP 384:EW2WWLLM18BdHRN7MjXqJwuAzXulGsw605:ofjnMbqczrf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d6:e1:b5:e6:bd:6e:ad:7f:7d:b9:a3:07:dc:b3:14:b2:d6:14:16:07:df:6d:6f:3c:06:0b:a3:af:a4:be:06:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Extensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.Extensions\net5.0-Release\System.Reflection.Extensions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.Metadata.dll
- SHA256 f2d4e528d759869942010aaa4d5fe7ce8386a05f5907e394aa7f248b91d3a5a7
- MD5 ca7466d9f6f3460a2669eb4de896ccde
- SHA1 b7e4446ce7086b96dcb0d48d21ea967e3a230d87
- SHA512 ea79f0e3857a7318d4e8d139f988d013dea947ba1480fcc9c56fe401fff5248ecf407a38acaf02ab54213ea2b985ae4a9312982e602a673d0020dd06442dc340
- SSDEEP 12288:iaZNgQ7J9GqifhAj6JCUapkTZw+yVDnguklkDZo9VnqeKpTsRs295vOgfTqN5Ez:T73mfhAja4DwlkDZo9VnuART9MmP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1a:66:13:45:7e:ae:2a:9b:05:a4:db:d1:9d:f3:f0:31:85:36:20:6b:84:03:f5:4e:23:2f:89:55:da:83:2b:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Metadata.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.Metadata\net5.0-Release\System.Reflection.Metadata.pdb
Name
.data
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
913KB
Virtual Size
913KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.Primitives.dll
- SHA256 dca52587215cf63e868cb332d0c7b9327a49979072afb4cc183f9b107f084838
- MD5 2a70dde5c3bc3ea14d726b14e69c07c5
- SHA1 bfc1a33bdc00dd732c84bb092081e88fd359a04f
- SHA512 078cdda7bf32d4a599fab23caa751efa6acee85cf8a39de3080d065bf7c06b8e2d907fb1428d49687e18e5acd84175a88b34b77c6e8cf180f668675469c0a531
- SSDEEP 192:EWW+WLY0SxfN3W4GD5dHnhWgN7aQW5V4r+YVqnajKs5R52:EWW+WR4fNedHRN7MWfVlGs5RI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bb:97:ec:70:85:ba:97:19:e8:97:aa:0c:ca:99:ea:51:4c:6f:f1:6f:0d:b7:e1:35:5c:b8:18:45:3e:45:b3:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.Primitives\net5.0-Release\System.Reflection.Primitives.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.TypeExtensions.dll
- SHA256 48b72d1bd15724710e6414b347e84347a2bc5bc0755e646180dfcd0281e9787a
- MD5 63eda07c6904b3ff8196b4551436ec1c
- SHA1 31b55028010ad1d6de5a4b059e0266b6fc2a8556
- SHA512 3f66ac6c2e854ab4b7e709cbdc9629597dd05f271693778117e44018afbae74c6051e1eae3a7abc9cee746640497f36d685a5cd146bed09c3a217f54b8c15ad9
- SSDEEP 384:vWyeWo0UemOJuIpxayMPYL2tM9YctVlHy/m1ue6hcdHRN7wP+CcWlGslaX:dWemOuaxayMwL6cHly+1/6UEwo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
00:4f:4f:6c:08:db:be:60:89:aa:3c:7c:86:d9:9b:fd:e4:e8:0f:6c:19:b4:3d:f4:af:62:fb:a3:07:98:cb:e5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.TypeExtensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection.TypeExtensions\net5.0-Release\System.Reflection.TypeExtensions.pdb
Name
.data
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Reflection.dll
- SHA256 344913cbf6cf7e9329aa0e1caad54165bcb3e76d4de09cf75e7a35cd999acc36
- MD5 5801343ff9906c8c0870078e446edf84
- SHA1 41d53124b4d820b4494cd76e4d218e7cc0662ab0
- SHA512 7ee4271de55c7e46681a3e964617ff5dc720ee82e475b62589b256011b40132e427ae01954e2399d439b98e3f4afd963e8e8652faa2ddad4e47aeefb40e019ed
- SSDEEP 192:J2WpCWL81Kemxh6iW4GD5dHnhWgN7aQWVXWPQ2SkqnajKsIG:4WpCWirMh6xdHRN7umPQ3klGsIG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
12:68:eb:5c:4f:0f:f9:20:a2:20:7d:8d:aa:9f:13:a3:1c:d5:da:bd:b2:7b:76:66:29:24:84:0d:cf:40:95:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Reflection.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Reflection\net5.0-Release\System.Reflection.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Resources.Extensions.dll
- SHA256 2d58b06d1d81cc5b89458c9fcbdf61e10b8dc31118bf003c657ea1d3874879bb
- MD5 43c461510c44dc17f7c94f5f53a663bc
- SHA1 4bff9a4af778d472aef7aa8d0cc4f257b048d85e
- SHA512 2bcb033379c4de875a0c66c5c9db1bb4a59a7558560dee4b25de88618da965e4b97bf0a7a5709d6f5e857e0a2b55c2889618f689ce942e87960c1de0c638d26b
- SSDEEP 1536:ATB0pMT1IFtuIVYQkpLa4i+TNynk6MLiCZq+q7KisHnhj/a65:ATB0OJeoIiQkpLa4bTNpb2KVHnNa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9c:fc:18:11:cc:17:9a:6f:bc:92:6a:09:4f:af:f9:43:e9:3e:ae:b3:49:41:ca:ee:6b:5e:f8:5a:42:49:99:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Resources.Extensions.ni.pdb
/_/artifacts/obj/System.Resources.Extensions/netstandard2.0-Release/System.Resources.Extensions.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Resources.Reader.dll
- SHA256 de78339d0a23d24d2db2e01b9b67f20fe4a5acb1e7c8c67d33c4c8a2d6a5b39e
- MD5 b7218b97380cf7b1b2dc5ec35f65cfbb
- SHA1 041d6ff8919ca1e82931a4519512563431600d9a
- SHA512 bc10ba2412829644053788670f01c93005eb6c6112fb70a53b7162e3cf7c3d1f6859d9f0671e17c21faf945f0db4ee21d05d8d675da7e7047357ec7987ff285f
- SSDEEP 192:BWX3WLNx1kPW4GD5dHnhWgN7aJeWo35jWqnaj5e:BWX3Wj1k2dHRN7W03pWlde
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8a:79:b5:0b:e9:29:57:d9:0a:6c:77:f9:7d:78:e0:ed:39:a8:12:6f:21:a4:47:50:c9:7e:54:c0:22:84:44:71
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Resources.Reader.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Resources.Reader\net5.0-Release\System.Resources.Reader.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Resources.ResourceManager.dll
- SHA256 92db3a35b7f4191674ad7e15f464d4ebd8edec6372a3eedbb2fa257efb5580fd
- MD5 f4c03555609a683991b3992ffd42e5f6
- SHA1 c845ea27a77ba42206cd6f04a70ab35d65cf6386
- SHA512 3435d52ef10c29091fb7fd0ec3e6d65156a7366b59fda2f6f6f8eed2c0ae0a056a6ad0b1c2a7650dd825284d3f5d59544f6deb3a5e2f01bceb7fbb7c61661681
- SSDEEP 192:/WyzWLxBB9nxuuhW4GD5dHnhWgN7aQWsWAbYqCE0qnajKsDg6:/WyzWXRuucdHRN71WMBClGsDg6
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fa:6d:bb:31:cb:5f:e5:11:01:16:25:f8:bb:cd:98:c3:a4:3a:e3:61:10:02:bb:8a:29:73:5f:de:54:51:0e:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Resources.ResourceManager.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Resources.ResourceManager\net5.0-Release\System.Resources.ResourceManager.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Resources.Writer.dll
- SHA256 0e78af1e4feceec07553ad6500dd4fc33af9ac5c27a5a5135367bd812c1daea9
- MD5 ab9ca2e1c5c68248f68b0f804148481d
- SHA1 eca8152d23ab621360179b0642e46c1bac1cd0c9
- SHA512 33d4a28b731ba6dece5700923048f2ec2e9b6c086741eece3a1c92a15bb5123477191fbd3a71b53023584c25fd5078889e6f1527b3756ff2c89f11244ce1c833
- SSDEEP 768:VtEVZIIpRYkwPpFrf4Cxvt7WueiZ92pz1sCSAvErrouV:VtX1pFrQCb7hdaRdwzV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
05:d4:80:88:e5:3a:a1:a7:34:17:55:dc:83:0c:eb:b0:cb:ce:1f:45:d6:9d:16:6b:34:21:73:71:c2:de:60:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Resources.Writer.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Resources.Writer\net5.0-Release\System.Resources.Writer.pdb
Name
.data
Size
1024B
Virtual Size
852B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.CompilerServices.Unsafe.dll
- SHA256 8052825812623fcad7abff60f27e2d43abc97d2716908a0a49120243b5d7d87d
- MD5 f97b21c63180414ba85ea4d6fe061648
- SHA1 c5a4dfddc216419ab5e4cd564156ad5c844f1e05
- SHA512 e6b2fdbbe4be4af3acad578eb1e08d2dd2e83431ab738da2d09e1f5c47000523176422b31e5155543498d50e2959237787f98a820a742971a1c6267c9f40cd34
- SSDEEP 192:hTWU2WLXp2xZTxrEy9X+CW4GD5dHnhWgN7aQWsoctD9bsE4eAqnajKspp:5WU2Wd27NIypIdHRN7FnJ9pJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
80:7e:71:5e:c9:6b:db:a7:8c:37:15:6b:6b:5c:5e:47:42:d8:b8:aa:8e:38:72:a2:fc:28:37:dd:9b:4a:75:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.CompilerServices.Unsafe.ni.pdb
Name
.data
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.CompilerServices.VisualC.dll
- SHA256 8f6bcd64e9bdccdc9532aeb2725a2adc21ba944bd1f6b3a7757025af44eaf2a3
- MD5 01b9a8843838629b55b50305af9a9598
- SHA1 6183061dace06a1a9ff7461692b5a7395d15128c
- SHA512 bcf533b1daddbe857f61def987a7e7c45a8864f7d9fac7bc5f9246ecb2bd7ca515b936fbb8e0837203a96da3ac07b28aaf3c8327dbdccd32c254798d01dfe9cd
- SSDEEP 192:UWXLWLUMNahykcNp9P0xRNSfhPNWV3wVIVK6W4GD5dHnhWgN7aQW/YOQophFKqna:UWXLWNkhJcNCEJVyKJdHRN7IYJXlGs0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d7:dd:83:7e:50:e9:fc:67:e1:bf:b4:70:dc:83:3a:ac:33:dd:a2:9f:23:cd:0d:89:40:b8:69:ae:68:db:e5:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.CompilerServices.VisualC.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.VisualC\net5.0-Release\System.Runtime.CompilerServices.VisualC.pdb
Name
.data
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Extensions.dll
- SHA256 141b0f1c8dce03c86ed052cd09e3c302b1ac4909e3ddeafa10ecb49a3d5484bd
- MD5 846f1997a38f1cd4c254f2956a7ae561
- SHA1 dc07b019fec32db20c05bedc24b85cc713979007
- SHA512 bdcd43771cea6dd1d91253f3b739fa1bfa21a3553cbeef632e4a138769fdc6872267e93466579711dfd5d4679b4476386b7202ce8905f78697c690e89906fdca
- SSDEEP 384:IWhNWo9xCKTzpWdHRN7ZP+CcWlGslapFj:nVdNslwo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:33:9f:cd:34:40:93:6b:3c:27:3d:a8:1f:69:bb:45:28:41:6e:1f:21:10:11:b0:6d:37:18:21:e5:ae:a2:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Extensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Extensions\net5.0-Release\System.Runtime.Extensions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Handles.dll
- SHA256 b7b104f5a8041f22277f3ba5232f0129a7d99ebf25f75931a7d4d683b56ab7d5
- MD5 b53392dd537d48d9f53c87a428287f5d
- SHA1 175dfdbce7c5af8d3988a91c706f87e992a9ed7c
- SHA512 d6a0deda5d635b140d38dafd3568d059537516aeab54f1debadde4bbcc64d7df4243e701c19a487887d4eaf4eb1bbdf2a208fc0a89a4b71cb69783c98183534b
- SSDEEP 192:kIWkmWLW8xI54qW4GD5dHnhWgN7aQWIqGEEr+YVqnajKs5RyM:kIWkmWyqI54ZdHRN7GGEEfVlGs5R
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cb:be:1c:f8:99:ef:0e:a8:1b:78:2a:89:27:eb:4b:0a:bf:b5:4b:08:fd:21:2b:8b:19:bc:b7:a0:a0:00:26:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Handles.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Handles\net5.0-Release\System.Runtime.Handles.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.InteropServices.RuntimeInformation.dll
- SHA256 73f46b2c273e4adfaf930b2c7ade56ae264abbef5d182d0e6aff555cf9ebc7f5
- MD5 3b6c4f8ef85682a3e9054b7d54ffe83b
- SHA1 0e7260caf6904f27b2e4af167e19aa816652140b
- SHA512 64e2273ac9f3324d349345b44d5f08fd5e9a0d9d3579992208cfec8c928f60e6eb4c93066ddea7f5731a0fc09e90b978f346e9597125d01a63d6536dfb2306f9
- SSDEEP 384:qNaWZUWth8mDa1B6+ElrU8kPKttxK7H5cWE5BbOOv103dmjGdHRN7ERGlGs4Ch8:2zhL4BTElrUTy0+Wov103dmjcERR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
11:2b:07:95:cc:42:2d:75:0f:61:99:26:20:61:fa:69:da:ee:ec:b6:cb:9a:98:98:99:5b:aa:b3:58:0a:54:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.InteropServices.RuntimeInformation.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.InteropServices.RuntimeInformation\net5.0-Windows_NT-Release\System.Runtime.InteropServices.RuntimeInformation.pdb
Name
.data
Size
512B
Virtual Size
360B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
400B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.InteropServices.dll
- SHA256 0c086fb84072558569192dbc99cf13f77a9fae2dd0049366f544ee7f41519af9
- MD5 888b666d4c6e049084613552946193e2
- SHA1 0fd85ee9d0b096fd71f98817425b1d9622463b40
- SHA512 46dab991a55d55c2b8ef09627851a88b53026762dcb6092316b83a89eb3c6a07df9aba49ba23550b538767074bbfb0002612bbb49a94b88ddd1a3c76ee263fd6
- SSDEEP 768:c1B391X7XKQDCHJM+0nszeGTTim2wvRnNqKmFJrXjdZ71Kizy01eHP:c1d91LXK+CqGTTim2DKm/57Kizy01M
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9f:dd:33:bf:01:80:eb:6a:78:e0:ad:f0:ff:ec:79:a5:20:69:5d:a7:1b:85:94:ed:5a:1d:54:39:c5:26:51:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.InteropServices.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.InteropServices\net5.0-Release\System.Runtime.InteropServices.pdb
Name
.data
Size
1024B
Virtual Size
540B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
692B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Intrinsics.dll
- SHA256 b70055c05cb85fe3693f87131ff5c01a5ea7934cd16511c1c9aee58444c5ab4d
- MD5 b19a9275171a96d74c10d2347f1e588a
- SHA1 7502c417b9ccf2ff28d4fad436f7635f6a9ded59
- SHA512 44c79d6b2e70295c891cae516745b026afe2220b3908ad4e8b37b62e8fa4e3b67482d747d145717271617de358fc9b77400f5887a9271d9782bfc86fae493950
- SSDEEP 192:unWhLWLuszdaEp7r7OtW4GD5dHnhWgN7aQW9OQophFKqnajKs0ju:QWhLWS2daEx64dHRN7mJXlGs0q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b9:e7:fd:eb:ed:61:d2:4f:ab:88:24:90:6d:96:eb:91:8b:ee:ff:49:3b:36:ef:ec:c4:d4:ab:c0:cc:f6:7a:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Intrinsics.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Intrinsics\net5.0-Release\System.Runtime.Intrinsics.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Loader.dll
- SHA256 2ea40e6f3c44a3e4e6862658ccd2059356af20970660112730e6dfa0aff13696
- MD5 33183f7b0712ba4df7c83012bff7f135
- SHA1 ef45fe9607c2a9e0ad818c0b991f299c4993673e
- SHA512 483cd5b1495cac03c5622fdc96a53597d31b7f04aec59f537d2631eb9cd4ac5ac2a530a90c0961f2564f2f8f90dc386c122b3b2829966f9eee850b5aa56122f1
- SSDEEP 192:HWdGWL/C5xFheW4GD5dHnhWgN7aQWsdRyWYqCE0qnajKsD0:HWdGWWjFhtdHRN7RDdBClGsD0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1c:c0:e5:30:9d:62:cd:92:8f:eb:04:65:df:50:84:0d:60:f9:71:87:f9:17:4a:98:b0:b5:28:cb:18:e1:0c:99
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Loader.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Loader\net5.0-Release\System.Runtime.Loader.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Numerics.dll
- SHA256 aa8e046e584bf1800f108e7b3ad051e6ab1807ec8a0df5b787f66c825cd30451
- MD5 217e6fe2d8ae4d93ae633c033407068d
- SHA1 03f2eece5e3b2d8536089a1f9a8a5583bfa24227
- SHA512 e71783d2d2c6f591533f1e3b14d61a320703087be10947daa90213774afbf9c989b457e68ad729335d141ac436635e86deac8dba10905b7defbd1ea7a507682e
- SSDEEP 3072:q3euL7+dFTE69P5M9qjnOhlghW5h0goISIE21DbNozZnNyfG:mL7vY8qjQ5OZBIE2pbNyZNy
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5f:6d:95:18:1e:1d:31:59:28:45:4a:d6:d7:1c:f6:57:3c:64:de:e3:61:9d:d5:71:72:e8:74:80:2a:35:62:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Numerics.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Numerics\net5.0-Release\System.Runtime.Numerics.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
172KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Serialization.Formatters.dll
- SHA256 2d45f47e4d6386429a5ba94623824b941f628400412dd99ef1aa5b55d84620bb
- MD5 3601cb7f81b22104aa8b2e449d79111d
- SHA1 fb93d74d0e4e2419044ca702972400c1112b087b
- SHA512 2503737718ce575c3f506909de727c30f1e281c5abae40dfcdd83314164f5270375a749a52e3929034b09c9b80f8fd61108a155d51018e54043ab2647da8d4da
- SSDEEP 6144:q03vFVdAC+EUrTa2IzBr8UhNF8JzeyXVas/BZ4E:R3vFVeoUrT0Br98JzzJ/B
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cd:c9:89:10:d9:98:40:65:97:4b:59:ba:12:6c:ed:e6:b5:1a:01:1a:bc:dd:9a:8c:88:54:78:0a:4d:29:5e:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.Formatters.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Serialization.Formatters\net5.0-Release\System.Runtime.Serialization.Formatters.pdb
Name
.data
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
258KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Serialization.Json.dll
- SHA256 61e1ea44816cc748300e1c6dc5c367b29da21efbfef794055c78823fc393eeb2
- MD5 1269f31b67e6b3a07992fd5f58e79d1f
- SHA1 63b06442980249d2c97bf6115905bb05a4b94610
- SHA512 05a2aafd508844aefb3412cb10a90f9fbf08741326566a2c3bec1982a6965a30da727740937732bef05ce9fb35e6f63a881270ac4369851e92c74d9f31c8026d
- SSDEEP 384:SVWbvdB5WDMhB0fSdHRN7byzjwuAzXulGsw6:SWvdBkW6wbSezr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4e:9f:fc:89:24:b2:8a:4a:ed:d5:45:50:38:bb:93:04:ee:a5:1b:ff:72:f1:9e:e4:50:87:43:5a:b5:d5:a8:38
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.Json.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Serialization.Json\net5.0-Release\System.Runtime.Serialization.Json.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Serialization.Primitives.dll
- SHA256 3cddae06efbddcbee648450160356dab72bab1fd5e3aeb4843d7bef644375846
- MD5 3fe5da0c9efde0c60205bcfd9392505c
- SHA1 8da1227939d4f004881cd97b6a87e1a5dc9fa9f7
- SHA512 19412bf3ae6d73401f7d2f80a1e83acb42d352b0d80d1bf2f63b355d3b680cf3cef60d9c416bbd1d60e65ce8c8e236fb8be64aaafbc971af78045b30808a4082
- SSDEEP 384:VHWFLJBrWkUMW+k2aIHD1kyD6rMtBgpDnjhwu/Wh1YM2UPdHRN7PwuAzXulGsw6:VqLJBRWMgrMtBgfwuuh1flqzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
eb:5e:fa:b8:af:cd:3e:b9:d2:be:12:30:6e:de:32:75:91:fa:fc:09:b3:3b:e6:bf:17:63:cb:b2:18:ea:6e:a6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Serialization.Primitives\net5.0-Release\System.Runtime.Serialization.Primitives.pdb
Name
.data
Size
512B
Virtual Size
172B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Serialization.Xml.dll
- SHA256 3a15feafb6e46bf20db985e0a8e3b071f589768f276eef3ab9bbaeef4a7dc5ce
- MD5 d58d0cc40fdf7c202e355487489dd8c6
- SHA1 3e0f8fbacc908d782721183238b585c258756918
- SHA512 d69252b7c82a9fbb4c1f24b03771d558e5319210cc834b5c44e3816803a31c2491364f44284226c202b2707080d5719dd1349135f84eb35e8cdac87294b1c405
- SSDEEP 384:ZMWsjBBgWBklmI8N7+CwdHRN76JXlGs0gU:ZijBBHklmI8N7heQEmU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:fa:5a:8b:64:9d:fd:21:2d:f5:da:eb:75:49:32:d4:fd:5e:db:eb:ed:40:53:66:c2:8c:4a:27:85:19:86:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.Xml.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime.Serialization.Xml\net5.0-Release\System.Runtime.Serialization.Xml.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.Serialization.dll
- SHA256 2c857320c642f5839074af5dbeccf2fe9d0ea067329e0c2946d65f27910640c9
- MD5 9b00b14d464d67586e221317b8dfb065
- SHA1 e8c706ae0cf25203de485db0d90775fc0bdea77e
- SHA512 46bd6f933c00b87d6ca4a92e6a2a967d328b3b18a0bfae01ec5b08fb71c5d1d72b204ad1c4d837756c50f559d99d7678d0e8d080d82d66a313a6452d894960aa
- SSDEEP 384:7LWgu4BHWHEvDj8NqERhCl5dHRN7qGlGs4Cr:7Pu4BoEvDj8NxRKPkK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e2:e3:cc:7b:4c:1b:78:85:5c:8c:1d:6a:b8:94:07:f4:d4:a6:fd:a4:27:a5:cb:f8:cf:27:d7:fa:11:3b:62:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.ni.pdb
/_/artifacts/obj/System.Runtime.Serialization/net5.0-Release/System.Runtime.Serialization.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Runtime.dll
- SHA256 3c84a57c7fe42bffc2803d0b49994a796dd4aa479a035de003da006a08eba856
- MD5 1b8e5c63925265e061554c07e88a1d63
- SHA1 68a1acebe957fde02c64f11f689ac833e8e248e7
- SHA512 1d06968f32675756c85b44fc3cb67af8249210754f211b8e896f99fc7d025d4494e9f7aef3ca8d7827ae6399760ca0144fa9b73186e82e621c62267fc7a7d558
- SSDEEP 768:JeYK594bQRi0RVbLM9p3N7afVapLmuNExlRWVo9l:JeYK594bQRJY9tNaVm6uNExnWSl
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b6:5a:82:26:5f:dd:8a:b4:d2:fd:46:23:c0:9d:87:ce:15:d7:d8:fa:f3:a2:41:27:0c:36:49:91:e2:b3:b3:64
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Runtime.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Runtime\net5.0-Release\System.Runtime.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.AccessControl.dll
- SHA256 53289d86df90ac4a2d87c9a08d828037d388ccbc28fe076d5f7469ddfae588ae
- MD5 2d7342eb7d0eb9a8d2d624b3652a6569
- SHA1 5a5c3dbe90be3cea567f73c77fc35b5d4128c6dc
- SHA512 b2b6a5e2618577c9ecece54f92869f94ee19188e5e21e0eef10005345c52031af76cd1a6c880550f00104d86f441af880d7aa805c1cd33c58121e4f66d32c520
- SSDEEP 3072:a0xsnMsZDh81ziSMStap6Li3cBTrdydqzDK5SNPe/KfS:J2crtawLSCdy+eb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4f:47:06:22:9f:ba:d5:dd:65:23:7d:86:5e:b7:f2:bc:4c:d7:3d:9a:5c:5e:0b:cf:6d:4d:e1:0e:a0:e1:26:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.AccessControl.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.AccessControl\net5.0-Windows_NT-Release\System.Security.AccessControl.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
169KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Claims.dll
- SHA256 75a75e52f1eb50e80f1a959a182ae42d329c0ef5fc68c41815925ecd50a55e90
- MD5 1a9269b98bbdd07a02a51481ac8137cc
- SHA1 a690099959f8f7b362f7ffe0ecc77df8b5e9fe5c
- SHA512 d0046a77d9c713ea08d7a12ce1fee58aeeedb1cd5f8ac0d05193f1fdda4f18ddf7b6bb208330fa25c6229d834026ac54c8ac56e691ed80b2588e12d426a44c1e
- SSDEEP 1536:hIJdqSFMrMHfrJeRi6rnOQwQ7rzUU3q2bP69Gw2/KhtcdA/1JxntwiT:hIJQSFwMHfrnfGwIdA9Tt
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
25:07:c6:91:6d:17:4c:f2:f4:16:b9:f3:24:8c:99:5c:e6:ba:59:d2:a7:28:55:ad:51:62:44:c6:46:24:f3:2a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Claims.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Claims\net5.0-Release\System.Security.Claims.pdb
Name
.data
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Algorithms.dll
- SHA256 3f3008a84a64ebb04ea2a95bb3c30f29e1a73daa38eaf44eeec87837162bf5be
- MD5 42419826f8ec1f3a48005f9eb3aefa68
- SHA1 42b8151c5dee17e38c026201d9cf103dfe7c9459
- SHA512 1a35eb98de4bb19cb2460b9172cd5fb2acc44fc39b96fb437305fccfcea3cc83abce15ed2542bdf7576deb48786e4253c9cd3ad9b070a397bae413125c76e57f
- SSDEEP 12288:1YhVLpzZG2wk6D5IR5m5/DLurlRVPI7LQbDvnjQeKNZIayFxqRU66cxZZk:1YzLpzZ/L2IXoQlRVPIPQbDvnjQeKNZK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e6:df:0f:56:55:b1:cd:02:e2:c5:ef:c0:0a:8d:b0:68:84:40:7b:cc:51:0b:12:5e:3c:94:d0:1b:2d:7b:70:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Algorithms.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.Algorithms\net5.0-Windows_NT-Release\System.Security.Cryptography.Algorithms.pdb
Name
.data
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
562KB
Virtual Size
561KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Cng.dll
- SHA256 baf28e8386a3d517dc6e2a34a722438be57a55f2b30c7dc8ef53262e4a51f6ba
- MD5 a0fcb3cc717151605542c69d16c5e2ee
- SHA1 0304f7a8dd347bd948eca0c92edff18995de4a48
- SHA512 7f7efc532147333a7d89563c45c0d1cb28a5e1d792ed404fb71419711a4e9d956538bb69fb879470509445bd78a215b1b4ce421c8c63c8788f35f7083d1a2009
- SSDEEP 6144:6glu//OY1RwEegCJphdox0ZbPZQsrsv1x7Bi8AunCG/7ZbB72y6WbMdPm8LEg9dh:6gvY1Ot97ivjT7/7ZbR2yPbMpjLEg6o
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
89:87:84:ce:39:69:d4:03:9e:2e:04:a8:3f:29:0c:63:b1:a8:e7:84:24:fe:07:e2:5c:88:28:76:13:dd:cd:2a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Cng.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.Cng\net5.0-Windows_NT-Release\System.Security.Cryptography.Cng.pdb
Name
.data
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Csp.dll
- SHA256 06c8ec4949803105cbec09c8a7119088ca0683211c09d186ffd29c588cf591f8
- MD5 11c4c776a4149d8e849763716ad6125f
- SHA1 fdf2310fcfb2f84afd111292025c5d9b96c0bad0
- SHA512 1ee7551279f45085dfd3dd7ddf77c85a9c14d4d1bf187817c1aafa52359636768217e963e5feeab2adf5f55de349d213e03a5fdfe33be8867e9e94ad81c0bef8
- SSDEEP 3072:QnIRJvd/6UQrELb3HNGtVjH048YsOeZMW/9fPDKKzmqVW:nJl1b3HNGt938YsNPDKKFk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c6:1b:1b:78:86:59:59:24:b8:27:06:50:0e:8d:b8:b9:07:2d:f8:32:16:96:04:01:c5:9f:d3:a4:81:aa:ad:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Csp.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.Csp\net5.0-Windows_NT-Release\System.Security.Cryptography.Csp.pdb
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Encoding.dll
- SHA256 dad0d12ef8c7d352eeea31c768dba98e0d3115c72810d1950d3f32fe3195b043
- MD5 7b808d4c6c05a6ea92da1929a69a3295
- SHA1 c651b81734a20e04ab312ddc0a2796637f4f1b95
- SHA512 8801d1054487fd4dfd6de0248067dcdf3d9e3a464f9d943f32171c2be50a33580f721a1346df88e3c574a7e4b89a97df95508808cc80c451024804c12bc8c7c1
- SSDEEP 1536:4ky638/7izXd/Zz6hgDT10N0sSsOdnaF5+WS8JPFKyVXZV:4fC8TizXnz6oSvP5hBJV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ec:df:65:ae:87:43:35:37:68:db:89:79:e2:bb:9a:16:2c:bd:ce:c5:1f:d9:fe:7c:79:18:62:d5:11:85:62:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Encoding.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.Encoding\net5.0-Windows_NT-Release\System.Security.Cryptography.Encoding.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.OpenSsl.dll
- SHA256 6f966b1cb7907f8f0370f543560b7de544f2159e0ac43b8c7b7ece475bdd2880
- MD5 b136837da48fbbbadfac5eda50dc7942
- SHA1 4582bec3136510d34a929508d87ffefba9e5773f
- SHA512 83cc74449d00dcf26dff3d8a6b6481de398e08bff7b937eaff6e49b0d0818e277021e4ac4c48472feadef90a6e072ed1137d7bfb3896a4c57e78e392ad75c716
- SSDEEP 384:b9WA8ijRWLr5WnWUd9BlAghtTsPQ7vz8zlPKU4WaglXKfOCr3BZhwnMZM1iQFJiE:nkrcLleaglXCDM1iQfibtD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c9:fc:6f:da:84:06:b4:3d:14:4f:1e:46:8c:4e:e4:69:a8:82:a5:04:ef:0c:6f:8f:b0:d7:af:35:b1:da:5d:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.OpenSsl.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.OpenSsl\net5.0-Release\System.Security.Cryptography.OpenSsl.pdb
Name
.data
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
584B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Pkcs.dll
- SHA256 30e1ec5288f7fbf5d7fa278997a62c56d42c9d1a1f938a18fec8f0866a03a084
- MD5 9a3babe6d2af5145dd1be20f46a1ec27
- SHA1 0735d2e1b964270b87f98828fbfc8805378d29d5
- SHA512 823415dac6ae6dddf75d9b8cdff0391d7c4135160835e4e6b7adbd7c2241b55b4ba70f832fe8bd38df6716c7bf3a53ed2deec3c3fd904cee3a0d0e5dffdec7f3
- SSDEEP 12288:5rb+zzyBWsflB9ZsZ7FBfD2vnj7viF3cGX/EbTU:l+zOWsflpsZvfD2vj7vi5cOj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
88:42:ac:97:7e:30:62:d7:ba:f6:cc:65:c1:4c:2a:82:76:dd:b6:eb:14:7c:e1:85:e3:d7:c2:62:bc:b0:bb:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Pkcs.ni.pdb
/_/artifacts/obj/System.Security.Cryptography.Pkcs/netcoreapp3.0-Windows_NT-Release/System.Security.Cryptography.Pkcs.pdb
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
625KB
Virtual Size
625KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Primitives.dll
- SHA256 45260c6669d49f682ea5d1922b14f6bfaea3aec1f1d689c67b674755a26a8f72
- MD5 1c98bb2f1e5b990982da77235683ee1e
- SHA1 0528fdb8b86cc4468963d4e4e8b09f9b8b15849d
- SHA512 e450207591ca0a1c08fa85b087e6d7fcbf8ae07142b51fe6083056d190616cd3478efb686d5336ae17a3ba56ead91f9bd4f90e3d9710a998527024f4263a319a
- SSDEEP 1536:kY1LkZYNbckyKtGEONKTHkdlG0vmXB3pMl9LedSX7TRH2W/T8q:P1IYNbckyKAEONKTHkrGz5K9Le0777
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
63:9c:55:e3:9d:62:82:3a:b0:7c:85:29:2b:be:59:63:0f:de:11:cd:9d:f0:18:e0:37:c6:83:b6:08:6b:8d:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Primitives.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.Primitives\net5.0-Release\System.Security.Cryptography.Primitives.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.ProtectedData.dll
- SHA256 5b4bf2eaba6b0850cf274e7b4f968b8516fd4812185ac123a62af11521644cdf
- MD5 c56b2f775eb548bc42187ff51ff5c968
- SHA1 71c8f6d3534b34b575d6ba66bca4dcbec8b0f47a
- SHA512 66facc69485435b3b25602b711815ff90cca9979e93974a7409965fa8f46d725fdc63b108a5ef6cbe1606d0cdcefd40b5d0c433ca0bd90e747448c3b03f5845e
- SSDEEP 768:CC0f1HX7FKUid2mPjKB3V24WNJtE5//RHP:CrHLFAd2GWB3VxWLtE5//B
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8a:ab:00:1a:7f:e9:83:74:4d:de:1a:30:05:a1:12:f9:29:de:e6:d6:f2:42:87:c8:11:a6:aa:a0:a5:99:eb:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.ProtectedData.ni.pdb
/_/artifacts/obj/System.Security.Cryptography.ProtectedData/netstandard2.0-Windows_NT-Release/System.Security.Cryptography.ProtectedData.pdb
Name
.data
Size
512B
Virtual Size
364B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.X509Certificates.dll
- SHA256 5fd27cf61e076251d795ab04de06933e3ffbee5eaece6aa19e1b83107c26e451
- MD5 dcfe86037d260101bcadc0ff4bc226bf
- SHA1 116b62d563cd877c3fdf458327c7f32cee785cee
- SHA512 986a1b3a4cf8ebdf42e18469b6482a0ea63a1150606011171089d6139e5055c0e2e79d442b5fb9995dab5363ad2a66076a2ae08df98844140584a17f142a26fd
- SSDEEP 12288:fEMMvj9wZg6wIgcX3eB9M5M5exUZb7pOaCt2OwKa:fEMEj9F6wBcvS0lfwKa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
28:4d:5b:8a:23:30:1f:68:6a:57:6a:ca:c8:b7:8a:45:b6:d0:36:c1:88:bb:b7:4c:96:60:1e:99:25:07:98:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.X509Certificates.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Cryptography.X509Certificates\net5.0-Windows_NT-Release\System.Security.Cryptography.X509Certificates.pdb
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
356KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Cryptography.Xml.dll
- SHA256 7d854f0abf8cafcd327a00eddf894da9c71dd2e329d7975e007a7f0a1a719285
- MD5 708a317a8c1f90f31fe1f66468003380
- SHA1 0eafb6c1b8fe5fa4714902f770ffb32f7914c56d
- SHA512 4e4f835c5c87fdc856cad4dfd51943f44e94ae5ca4d7b3c9865752259403deb3baa9e30f2593edd0810ce60b6589c628a660fa34b2a5d5058dfe857e2c99ec4d
- SSDEEP 6144:Cp/TYYQiYz7VSUw7K1xwoqrr/YuEHd8bO5iwWA+yWprpeMA6uk6AYr49CLa0S:qQiY0HwWrprFukDPf0S
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6d:c7:75:da:88:36:15:9f:7f:24:f2:e9:7f:bf:08:2d:e4:1e:b5:8e:f6:0e:66:f7:9b:27:42:a1:6d:24:c5:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Xml.ni.pdb
/_/artifacts/obj/System.Security.Cryptography.Xml/netstandard2.0-Release/System.Security.Cryptography.Xml.pdb
Name
.data
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
337KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Permissions.dll
- SHA256 8a6db0836d7d667fb79d46887df79fdf2290c99fd74a317d2ada0676bdff978a
- MD5 09e275923bf50be3c85fe98275fad103
- SHA1 03ee0a5cdf3b50c73b39eea83de425747e48b73e
- SHA512 4fb3900d5975f0779bdd52f5f8aa8ab369f9ec25a39ce6ecaadf3b043a93abf327a0b836391f00003f8e4185cd5eaf1a9dd66d9ccae051d93bc4374162157896
- SSDEEP 3072:i6YY1GhWhzVO2C/Ypdy7A4jX9t4mDpkR7goUW:p510GzVO8pgL4SVoF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c4:67:3c:ab:ed:e6:c2:b0:89:8c:05:15:b5:ef:6c:ff:cd:10:75:3b:b0:98:ba:72:ad:ea:74:80:8d:bb:c5:3f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Permissions.ni.pdb
/_/artifacts/obj/System.Security.Permissions/net5.0-Release/System.Security.Permissions.pdb
Name
.data
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Principal.Windows.dll
- SHA256 362f2219bd79aac6d13996d4622665e83c50831d694dcf30bcd7d0099f7c3a78
- MD5 22d6e25cda44d43de77663a9d21319db
- SHA1 5629da3eb04b8ba1e5c89b8843cbd815414b3e19
- SHA512 ab6200478f0f383e40f71ef4d721992a88d3c86a1bd200609d211c07c1072220f5b4be1fac4ec9e85e2b145a77c0d69014a238e3eb7b4a36a5e2ffd94cb42e8b
- SSDEEP 3072:+GC4i3Z6/Pk4LPxfFOiVIS22gQDHCUwc6G5bnB5smuaDY7v:U4i3M3LJdOiVISpNtq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:42:42:77:76:19:ac:61:a5:31:34:8b:28:04:a3:c4:ef:b7:8d:6a:0e:9f:7d:0d:3a:7f:e8:2d:ce:33:5f:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Principal.Windows.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Principal.Windows\net5.0-Windows_NT-Release\System.Security.Principal.Windows.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.Principal.dll
- SHA256 71f55cad9fb9753862b8208dd99b5baed41304c75192f3e88fb63074fbcb712b
- MD5 063d3f30be97e7721c567adcbdf3baca
- SHA1 22c49df8c79ae65a762be19745b53532e17a6d6f
- SHA512 7e30c24b280fc5525bcb75ea3df1a379014ade3310821fc5f125865411a20171e5344c116c694465d507e0f303fd71c8ad60fee9c28af9a20a2bd187cb126a34
- SSDEEP 192:v3jWVzfWLDeCp0xQAg3W4GD5dHnhWgN7aQWdIVQ2SkqnajKsIG4:rWhfWHBkQAtdHRN77Q3klGsIG4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
18:e6:13:cc:19:aa:8c:34:24:17:d3:0b:ef:5b:1b:60:b0:38:e3:c7:2c:ad:18:35:7d:e4:65:2d:1d:9d:d6:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.Principal.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.Principal\net5.0-Release\System.Security.Principal.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.SecureString.dll
- SHA256 22168653a40d569ee120bfd4f13a7748747f055741cd351767b0a78595f2d50f
- MD5 6ea331b62b45bd02c00175b6fa0deec8
- SHA1 0535bfbba36b1e032591f4f34f1ff94233abf57e
- SHA512 327a3730508f4a1ad67beaf27fd9dd1e0df2a6dc84dc5ca6f820dddabcff04752ce3f6d39fe850238ac12720ef8af7bf1982179d63f94119c205cde5a6d8783d
- SSDEEP 192:ftWm3WL3SOS3xF2RW4GD5dHnhWgN7aQW2hFP+CjAWqnajKslag:lWm3WfcF2sdHRN73P+CcWlGslag
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b9:b7:b6:09:ad:10:05:18:1c:51:87:ec:f6:89:a8:0e:1d:b7:8f:a9:39:2c:c1:a5:a8:2d:b2:a8:5b:44:5d:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.SecureString.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Security.SecureString\net5.0-Release\System.Security.SecureString.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Security.dll
- SHA256 e6c360e927945cc28e80323b792fafdbbaf3fb7ec4437974d5a22b769694287f
- MD5 72c2c56b86e4d77735c828b16fa7a5a2
- SHA1 b090a8830161c23371f3964ff313afeda59764b0
- SHA512 fe7a20d44f461231822eb2cf1acb9f3d99d7b660c7c289dad7ac1e6cfa7012974dba24f2974318253b00cf29b5e5d0a3ed92574a8f477bbb9deaca0f065e0d00
- SSDEEP 192:B3WPDWLQXHkP3jDvupZFi5yJaLHDnx23MwFho1W4GD5dHnhWgN7aQWMQibsE4eA5:B3WPDW2DAbDxBwsgdHRN70ipJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
93:22:f6:2c:4e:df:3c:42:ec:64:c0:58:1b:5f:53:f3:20:d1:5e:6c:b5:f8:ac:36:7d:e5:be:1e:28:5e:0c:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Security.ni.pdb
/_/artifacts/obj/System.Security/net5.0-Release/System.Security.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.ServiceModel.Web.dll
- SHA256 5154c1006b3190e8f4920ed655c28fee5371a1ddf8d0e609ae8e05ad9bebd06f
- MD5 f578e7a0870a046841565c000ecb68ec
- SHA1 f11fc5cc74b18f3606ea0120060f441deefe5db6
- SHA512 09e04c5484120c546e0f31c38d63bf198e708116c2dc872721ea880790bb5f2d5e21d6650cfa894fd64a0a90aab443e997604139334c3f3338edebbc4a19b34e
- SSDEEP 192:NWn5WL08BRkqY0W4GD5dHnhWgN7aQWpGiD7DiqnajKs4CfN:NWn5WIIDY3dHRN7MGlGs4CV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
63:f9:c5:7d:34:8c:a9:3f:54:71:0e:77:82:18:d0:eb:9a:36:bc:c7:bc:7a:a6:7d:30:ad:f5:95:76:23:a6:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ServiceModel.Web.ni.pdb
/_/artifacts/obj/System.ServiceModel.Web/net5.0-Release/System.ServiceModel.Web.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.ServiceProcess.dll
- SHA256 5bbd25849fb6c3c762e3243f9d91a8dc0984c4f91d6e57129c77148077f65cf5
- MD5 939d4b94fb38ebdcd8369f5de506dff5
- SHA1 f7f452d6138225c8c98ba952861e519e4cb5e70d
- SHA512 7fd1bc1732697ea33081cd3086b1f28babc31ddec720d197d07894737cf4b996f9c716db92186147f7012f291f49bb1e56cadf3229206532cc5e2d06e13b2e58
- SSDEEP 192:6hpWn/lpFWL1jy12Dx2u+VW4GD5dHnhWgN7aQWSnr+YVqnajKs5R67:2pWn/lpFWY6b+AdHRN7PfVlGs5R
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
98:31:93:7d:7c:31:d3:db:c7:b2:09:c1:fb:48:78:17:1d:76:0f:d9:6b:77:2b:a7:f7:73:0d:2d:8b:4f:ab:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ServiceProcess.ni.pdb
/_/artifacts/obj/System.ServiceProcess/net5.0-Release/System.ServiceProcess.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Text.Encoding.CodePages.dll
- SHA256 4317348ca9290fd0b98416c2e3bebe66a751d534c83e71a9d819f71eddc91936
- MD5 198a5ba56004e28c055c40c9c97afc8e
- SHA1 12fb6725145ecdf8be99c0bd670b951048dea2c8
- SHA512 0bfe4c45fd85ee3dcf461f57eb22294a77491491d8365339a0add63923c3d49613aa028f205fc896d15249802a00047a2e3c3a4dfecb02275e3da5bfb21467db
- SSDEEP 12288:Vz47ZzehE7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPBtS6UReDb:Vzqzec9km6k/IwRYbiBeKGC8tS6l
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bf:4e:b1:9c:25:46:e6:09:da:9f:76:6b:cc:1e:5b:ac:29:18:36:8b:0f:ec:f9:d4:ba:ff:57:95:0e:59:82:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Text.Encoding.CodePages.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Text.Encoding.CodePages\net5.0-Windows_NT-Release\System.Text.Encoding.CodePages.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
811KB
Virtual Size
811KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Text.Encoding.Extensions.dll
- SHA256 435b7ca895bb36efbe01f5c562851d05dd387498a550b3e3f12c2bdeb1df2c3b
- MD5 310e2a704eecfcbb318e2456c8c4a0db
- SHA1 f459dfc8987e9407049a7b3ac176617d48bfadeb
- SHA512 0de9d78b8efbbe07196525bef45fd6752ef945d6066673df17595afe5fd8fee07a6e5a4f13bd23faa5ae8cc795ec55c95029d07122c755c572812277e88163cd
- SSDEEP 192:aWfJWL/xUFklW4GD5dHnhWgN7aQW67YqCE0qnajKsDr:aWfJWtUFkwdHRN7hBClGsD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ab:5a:08:59:16:8b:19:f3:94:68:22:a8:fd:9e:f9:ae:58:51:ea:7f:08:dc:ce:c2:de:a7:e0:9d:db:40:8b:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Text.Encoding.Extensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Text.Encoding.Extensions\net5.0-Release\System.Text.Encoding.Extensions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Text.Encoding.dll
- SHA256 ce1fc1544079f4a2964bd267b87fe02e8e1abc37e416cfcbc56eac4f02578379
- MD5 cf0d252de2cb6f5c04b942e1a25268ed
- SHA1 85867b64826a3b860c6d15a5458e7fbf4f167914
- SHA512 45029e6533cf436329ef64ab81d9cf21a3666e4e181cdc9a694e29f5551926308f26865809631aa034053dfacaef030df30eb5544f8a992c4ab93c7823c9f38c
- SSDEEP 192:AW+NWLrp/Hxcb1W4GD5dHnhWgN7aQWgLbsE4eAqnajKspn5:AW+NWh/RcbgdHRN7lLpJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
98:4e:61:6d:2d:57:6b:30:8e:a0:01:9c:22:d2:71:76:87:3a:c3:e3:16:b3:ee:05:6f:c4:6b:04:3f:56:ce:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Text.Encoding.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Text.Encoding\net5.0-Release\System.Text.Encoding.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Text.Encodings.Web.dll
- SHA256 d3198ecf5ae015c652fad80d865d1c5332dcc572ea5dd4af110bc34f8593ce8b
- MD5 3c4b6ee7ef31e201e232bc614390a465
- SHA1 a7545afa7a9489ce25bed9b99a8d9d0959daa7b1
- SHA512 cd0a0a7fd32da01c2e1cb771a1ef9a8615768160d827d54f2a01ce6ad0cc0b82691b4da00570f4df3920dee01742c05ebe8fbb5bcd6f67da717a8b541c374681
- SSDEEP 1536:dtk+TfG+qDGETJZ+3uIvMTCalcLM3Nli7eD6bNdlmTTx:dQX6E/+RMxlcLuNEDNdl
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7a:74:d3:cf:96:e9:27:36:80:be:7b:09:20:4e:43:14:a8:79:e5:9f:89:0c:50:0e:04:54:ce:ac:f0:60:e0:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Text.Encodings.Web.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Text.Encodings.Web\net5.0-Release\System.Text.Encodings.Web.pdb
Name
.data
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Text.Json.dll
- SHA256 e16b3eb7a7e54d31fc824cf03fd3edff5f21189edafadcd859f29ce1ba9b3a72
- MD5 1673b73207b9d8e3293dcbf71b47455e
- SHA1 69280b53ffe75438023512d9da6f44aead169ada
- SHA512 afa8c9e79ff2e34c2082dad6d1cb66cd766bc80cf5367ce7c1859b07ad25456a2c5abdda8109ed64960b3ac824d73ce9df90c6f9fffdc4840ca0ae28b9dcfa65
- SSDEEP 24576:oDCGePlAKZPKx+gwb9/jzTJ/IhVreOKmwImPJOas:DPPuKMIgwbZl
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bb:9b:4a:8d:1c:ad:a4:d0:a9:0a:3c:e4:97:de:23:89:80:69:1f:c3:ab:d3:a1:5c:bd:e6:7f:5b:fc:6b:70:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Text.Json.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Text.Json\net5.0-Release\System.Text.Json.pdb
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
732KB
Virtual Size
731KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Text.RegularExpressions.dll
- SHA256 34790bf37046893ac8876a51a604ce198bb8d7734cd1335ad899b97445e24bd6
- MD5 e106f6e8f87d8f2dda2a6e62b5708c19
- SHA1 9aa4cbc8c78d4f81a1da715ee1d6c4bbe3e1b4cb
- SHA512 1361f24d86510e240af474bfc0eb78b1a97027a1b1828e3ce23081f1bb07be011615bfad6cbac30c06e48a37b34f254f0eef9ab8b80bdc6180f0064a89b0888a
- SSDEEP 6144:NbJEidCWWDeXFJhAO1bAugvAV+l4aC2kV/NIYLzmPQV8L72:N6idCWWDs3StoQJP2/NIA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d2:f3:e5:49:59:14:f8:7c:fa:8b:5a:11:33:24:05:53:f9:51:b6:11:61:3f:20:eb:0e:cf:ef:f4:04:06:9b:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Text.RegularExpressions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Text.RegularExpressions\net5.0-Release\System.Text.RegularExpressions.pdb
Name
.data
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
423KB
Virtual Size
422KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.AccessControl.dll
- SHA256 1b8642f2ac86971cedeb13e22a272578fea6fe6e0269c02478d44978913a35c3
- MD5 9692b5a3b4585000e4af1ff6f28c0e8b
- SHA1 63bd585bcd4497c47c6fa78ef3dbcd7249502c75
- SHA512 10401854aead94f6c8001e14d9062e86a777c49fd501eedfb7d80f4d9596708f7b123a4737855e849e20c6b3e25fd4eca14e219a5d6d325a412cc1d5ca164485
- SSDEEP 1536:938+FNrGfZ4AuqZWkqXGD88rZ20aC9fN:93pFl7qZdqC8s5a
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
eb:f6:78:b4:ac:93:03:16:af:b3:d8:c3:75:7a:ca:a1:cb:e6:5b:8c:77:97:09:a3:a3:44:9a:4a:c6:e2:32:65
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.AccessControl.ni.pdb
/_/artifacts/obj/System.Threading.AccessControl/netstandard2.0-Windows_NT-Release/System.Threading.AccessControl.pdb
Name
.data
Size
1024B
Virtual Size
924B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Channels.dll
- SHA256 347cf8dad671c15f3b76679467e531048fcde9b0b895250f0cccf07f021cb41e
- MD5 a7f4a6ccf90048ccd6ab8cbd8a1b9941
- SHA1 e00c92b6c150703a483e9b05af0fd86011943a2a
- SHA512 7cc07f6c729772abdcb64c7b188912242ab7c4fc16f4764467803d62e85306e6f92a55554630327d5700f47446259a412b73da1d7f0e2de068b22fd2dbce5c92
- SSDEEP 3072:jcOb/S4Ij0mZZ852s8kpKoGbpHyLL+zFnSBN5Xs:vS4Im52s7pKoGt9uNa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:7a:31:b9:6b:5f:f1:5b:8c:a6:59:b3:64:fb:23:37:01:d5:7e:aa:91:3d:06:85:e4:44:e4:c4:33:27:66:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Channels.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Channels\net5.0-Release\System.Threading.Channels.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Overlapped.dll
- SHA256 0e3053521f57bd4df5244ceb14ade75a76d27905807c453b3f57ee307c503dd7
- MD5 c3a0fb36818f6bd11575b528b9a6a331
- SHA1 f503a8310948472ddac6b09b3bffe5cd9f12349f
- SHA512 55a3fb3445c1d87fb1fed57231cf4e70b392b523e3fb7650656ba4c5fbbc9176e34b5e2e59e7f90285f0b8ca2aa3de0ba0556e48c97889e89b652f89e01467f8
- SSDEEP 384:IWTHWWHYEHbFEuHVHHrHQH8gHIdHRN7CpJAlGspt:lrFZBG3i
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5e:18:cc:f0:c3:9f:db:1f:9c:ab:2d:63:b3:11:ea:b0:fd:22:81:ee:2c:0e:08:00:77:e3:c3:d5:2b:5d:0c:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Overlapped.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Overlapped\net5.0-Release\System.Threading.Overlapped.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Tasks.Dataflow.dll
- SHA256 5b4fac63e244e6b4597d012c3164853106b9de45b0a598d2b379e31e316322b5
- MD5 c1743e545cee6179fc58b2e199df25a6
- SHA1 e23d784e2fc607962e982cead0b303eb096727ae
- SHA512 441d0779c120ab8556e19ee3358f680e6f1e6dd33162d2b14c280c9b0836f86c6a7bc23132931f27e1c3038449eb65f0d5eba882a607b2b0e248cb57e1ec9c1d
- SSDEEP 6144:ADWII7mRl4h450L28YxzzEva3788JGlgCxfh7kcYft3rdnmhwOHUe6BArf2q:ldCPD50Lk7zJGlgCxfh7kPZnwwOl7D
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
93:bd:0d:3b:e9:ce:36:2c:a5:7c:94:0f:30:fb:92:77:35:17:01:86:b7:24:d8:3a:cd:42:94:fb:d7:8c:09:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Tasks.Dataflow.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Tasks.Dataflow\netstandard2.0-Release\System.Threading.Tasks.Dataflow.pdb
Name
.data
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
378KB
Virtual Size
378KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Tasks.Extensions.dll
- SHA256 755548a49e1e7be7d893c935174f9b00d969e5462833377f4eba931040f10e8f
- MD5 f455ce03c6f3e9dc44151f0f1e517010
- SHA1 877f78a14cd543d34336fdaa7e1a4c92e60681cf
- SHA512 4ea0551d947b5330c7390a290a4d0402e4ff3f13c9704a5bfcb3c0325a66df58004aa87bbcfd65f2f487e8d1de192794e6d66e8c79aedc4dc90e14bda1b9cdc4
- SSDEEP 384:BW5XW8053071ncmU5Q9vDxtyIGgLdHRN7zfwuAzXulGsw6:8sqW5Q99Gi+zr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
23:02:2f:24:bb:17:67:ba:f2:b4:d2:3c:59:bf:c9:0a:5a:94:ef:10:84:3b:68:c9:92:56:14:0f:49:54:22:a6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Tasks.Extensions.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Tasks.Extensions\net5.0-Release\System.Threading.Tasks.Extensions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Tasks.Parallel.dll
- SHA256 d38d95edb838ebe00c8cedef40af4d04ff98124d5df9140a4e5b12b0af98ff9d
- MD5 f23db3c644ed36fe950824b26ebb307d
- SHA1 93f3c708b7ddc848c707b059868b39340175765d
- SHA512 57452928304e769c1d4104862b01d03c4c1b8a9323f52bdd193cbe1ea9ad24fe4f79d88b6ca3ae73c1e7c6181ab94470371961f5e1419621a8765194354dd6e6
- SSDEEP 1536:liPoFtIrt/g9SFQCNkeQzn9+Hg28bcRkaLEM2755n:livp/g9Gkdzn9Cg5YRkCs7n
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d5:7b:bc:21:61:aa:d7:17:04:d4:9d:64:78:08:4d:b4:3f:4f:0e:ab:9e:3e:be:22:69:c1:5c:17:a0:08:b3:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Tasks.Parallel.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Tasks.Parallel\net5.0-Release\System.Threading.Tasks.Parallel.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Tasks.dll
- SHA256 74d7a971e6eebff5e790b9a9f935a1a1fce6cf26f2f0c4476ca661fec8fb6069
- MD5 d44116a35bf3c9b3f413e8ea7a37e8ef
- SHA1 0d42fbdcfa2718bf74c26c1bf0caf50b7bbe21a6
- SHA512 04d55c63ef1b06e6974bf60bb5d86b15356566e38d741a6eba051dc1e13020794df284e40cab4089fbb93da4ac0cf3da7edf92b4a1f4172aa997cd24a3c43a2d
- SSDEEP 384:G9WEzWYa4Ak3/ZOC3qF4PVgXgndHRN7lwuAzXulGsw6:4Na4Df3pUCIzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1f:61:d2:dc:e6:0c:1f:a0:6e:ef:f4:3d:3c:a9:88:d3:35:39:64:5b:0b:f5:ed:45:e7:b3:39:22:80:b0:be:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Tasks.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Tasks\net5.0-Release\System.Threading.Tasks.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Thread.dll
- SHA256 4b8192a1a68454cb54eaf689d0235ff8d41ca50d1ab479f26712936a58713165
- MD5 20e7babf97c672de738940c57b067032
- SHA1 83c3ce44d4aa653cf9cd204b95fa8ed0cd81b0f3
- SHA512 82a3f360e3c696050e63e0c8997cae5fb91685e1d6c7014000db4f7ff22090f7be690f5c0f4ea602f0172771dfbb434a0d37cc59f04dc249caea44b6a028f879
- SSDEEP 384:BRWH7W+ozuejg2VIj6QAgEdHRN7W0fV1x4lELl:BuiGfIhzV3X
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3c:4a:7c:b4:76:ec:45:a5:42:e1:fc:b6:42:89:c3:ab:f6:15:9c:36:a4:08:f9:4f:58:59:9e:29:07:69:79:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Thread.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Thread\net5.0-Release\System.Threading.Thread.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.ThreadPool.dll
- SHA256 69ae68edde13f0e209d86d100ef31b26561f57f945d11a91a530ffda67c6d992
- MD5 27306eebc447d02d2752eafdd5c437ad
- SHA1 a3a3d4bf26c9175b9f967fda029c9aa360e7d284
- SHA512 56777a18cbec65969d557f7ae016daf600eeeb86be0260202afc26f713c865c71de27ff0cfd3e5aa6eb5a9350275bbd1f900d7c6ea6a57ae3f9f2bbe5e18e4f6
- SSDEEP 384:dWjvWlv2QOTE+iLgVdHRN7NpoiFWSlGsWfO:OqfAN+HP/O
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
35:84:5b:2f:93:38:5b:6f:24:47:e4:d9:c2:dd:d7:6b:8f:a8:bf:18:89:98:43:12:b1:82:e5:18:4b:bd:fb:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.ThreadPool.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.ThreadPool\net5.0-Release\System.Threading.ThreadPool.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.Timer.dll
- SHA256 e86b107cdeac6dde8415848fdc909df300c923635e41598e51fcd380cb0b8b69
- MD5 faab38723aaab053961b44f96ae0a59f
- SHA1 6fddafca214e1aa76b3b22e6ddc6097fcc5625ac
- SHA512 317cec73b64bee332e59edea057cae7b67178162c4d78a4925b101fd67c0b42a4283f96594eecf55a6beb1a1315b588cad6c4852c373ffbc4c059f85e4c7ab7d
- SSDEEP 384:BsMW0CW5KF6n3qM94fogvQMdHRN7c8GlGs4C:vd37ccK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
71:12:56:7b:85:b9:e6:8f:25:1a:7d:d7:b9:36:5a:8a:fc:34:3b:02:10:0d:c4:4f:d2:94:49:47:f4:90:70:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.Timer.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading.Timer\net5.0-Release\System.Threading.Timer.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Threading.dll
- SHA256 dbc85fb9166f8c25424b1ce95c57113cedd7403a608016a424656f5634c22c29
- MD5 8df5383909f3a0e0c8090f3364035b26
- SHA1 796e5e051becadbd37c0af27fee9c4846c16bede
- SHA512 c5cd9aa2ce4d53603e93a5deb8d03abb91a06c28c28fcf16d90dd7caa967db45932d05fc776afe41f981f1bfb490f6ba06c3adaa89294d7dee4d29c3e9eec760
- SSDEEP 1536:6ziGgW7HWs29ZfklIXUL9+VT/StqXMmJ2v:6ziGgW72s2NXUJ+VT/Ste+v
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:28:d2:c5:e7:a2:5b:ae:3a:16:39:ca:36:91:0e:e1:10:ce:d8:bc:34:e3:5b:a1:c8:d6:cf:16:67:8a:7d:80
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Threading\net5.0-Release\System.Threading.pdb
Name
.data
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Transactions.Local.dll
- SHA256 e8aa5c10836f3eecc7cbc6ba382701266b5a99c8c7af2e31af4fcdc967bc7749
- MD5 6ffcf0d98b2510f95ba6436aa87e1c4e
- SHA1 a74350482c04178bb00ef24bbfa196106b617781
- SHA512 41f05e7c9b7aabc4f1601c6790c91794d8879a5d46c69ef0cbd7c727eb75051afd56b310c6fe1bf1fdc00976fef466cca21a090c5354a782aebf657ce7e77c61
- SSDEEP 6144:1v3z0M5KAt/IBwVFY+ImFMnbAApUW1Suf+eszXz/CQ+Zs:1vx5MByOmFMnbAApUW1SA+pB+Z
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
33:9d:35:21:a5:14:d9:d2:17:fe:2a:6d:d5:1d:30:bd:5d:38:5f:a6:dd:95:4c:af:0c:34:2d:75:c3:3e:91:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Transactions.Local.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Transactions.Local\net5.0-Release\System.Transactions.Local.pdb
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
275KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Transactions.dll
- SHA256 ab830ac0d564bc070176c94409f7bd6ae5286d65226968ab5112c7088a49e484
- MD5 c0c4fab8db5af1048b1301a14b29bd25
- SHA1 c3aeda6f7ae9c9c3757e4cfca9e0aed1c1fdf592
- SHA512 3aa212f4814664650b68236419da6d15342780ff0551d033ddc2518c6dd68916e441e3b087825b1cd632cd80b74a2b79369d6390091b0169943c778883f52934
- SSDEEP 192:IWriWLwFRy77EwAJKLQW4GD5dHnhWgN7acWlTeUD7DiqnajKs4CfkWX:IWriWcFRy77EweKLDdHRN7YGlGs4C8m
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a6:1e:d9:66:0c:a5:70:28:20:de:4d:25:b2:45:dc:47:70:ac:e7:f9:89:2a:b3:a3:9f:6f:5c:f8:be:30:fb:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Transactions.ni.pdb
/_/artifacts/obj/System.Transactions/net5.0-Release/System.Transactions.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.ValueTuple.dll
- SHA256 20585542d9b7ea78d32c0a9708b0bc55f5a40a0e145207417d3dc22e11c0c12f
- MD5 a763c9246a43433d508de8714252eb93
- SHA1 fedbfd53104d80a601b8288d0aafa8c863d21fa6
- SHA512 7cc541ab8aed98a01b2778386fa1d7d9666200827aa2aeee57df151f39502afc6dea0aa61ea7ba0469a22c6f8f255a4967ddc25cbd029fec29c3b48a38fdc548
- SSDEEP 192:EWrVWhWLpySk2PSoH9W4GD5dHnhWgN7aQWtoIVFWSqnajKsWJ36d:EW5GWtySJPSoHodHRN76oiFWSlGsW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e8:d9:5c:1b:15:fc:97:83:ff:42:3b:68:d0:98:a4:83:3e:b1:08:d5:52:ae:b9:97:65:a1:44:68:44:c7:74:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ValueTuple.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.ValueTuple\net5.0-Release\System.ValueTuple.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Web.HttpUtility.dll
- SHA256 0c6ac7a1b565fdd034263bcce7a7362b319361628f7dae4eca7c75a574724a09
- MD5 23e95055f2e666b74faae5291110d703
- SHA1 bf8d5eca1a1b50040c0311d98c459e12a68a2254
- SHA512 7632218bc026445f06fd2862ba8d14b3d304898dcd71fa23bdf1f0dfcf9ae3c14ddbdab96641b936d1bf86c6964106504f2836af0c92f90f475cbf3a6bfb997b
- SSDEEP 768:JcFFGw38TfwX/X0wX3D6TZaEwv7YytwgMz83NBKYRAp3DIfgREn:J4A0AwPXjCaVsTgJdAp3D87n
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
66:50:d5:49:52:91:98:ea:ef:e0:87:b4:1c:ab:db:a9:42:54:2e:aa:8a:60:e1:62:20:4b:e5:8d:5f:84:0e:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Web.HttpUtility.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Web.HttpUtility\net5.0-Release\System.Web.HttpUtility.pdb
Name
.data
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Web.dll
- SHA256 dde1a6efd87f5e1695cd4e314c49c32d09f0ee1a76c1780d7ac5e8f960ea3ab3
- MD5 02f54c7e3012b6cbec87c791b658a873
- SHA1 ef45aeb77632e745bf1404a5bdbe0174b801fce1
- SHA512 d25db485094074571f00aa9873f413bc3e9106c06b8cd81bde698e3fd3c0bd916b07be837c544d78f11ef5785734291f77e66db69785495842cefe418a61f2e5
- SSDEEP 192:xW3o9WLRhtTx2KDoBW4GD5dHnhWgN7ayvWkgnS1Zk9gTFqnajT12TGrfJ:xW3o9WlVfDo8dHRN75Z/hl312TGbJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0f:08:89:cf:46:46:58:88:7a:8b:f8:7b:7b:8b:a7:17:4d:d2:f2:ed:1c:1e:2d:fe:d0:e2:10:08:88:46:25:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Web.ni.pdb
/_/artifacts/obj/System.Web/net5.0-Release/System.Web.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Controls.Ribbon.dll
- SHA256 c1288d2aab9c29933c80fa345539ab1ea4c14bacdcd83067f0846e5f92fe9103
- MD5 26161490e84d538e962ca7abcf3cf516
- SHA1 6033b257a34385b8ebbda34e5f85698edf4c6f06
- SHA512 975452ca4b84761cb0869039d83e1cc7bb811c3552f307072231ecd289cfde251b536374f051f73091356ac9d6999076a0d945f00c280465680b2db94921b7e0
- SSDEEP 24576:RluXlgoVDZdlRYS616HJ6SFu8XpPaMB0DbnZ39WN7dy+UaBGOaB8dl:REVhlyS616HJ6SGF+xL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
19:2c:73:77:a0:48:e5:08:43:db:4e:e8:6f:2d:fd:26:c5:01:6c:82:ee:d3:67:6b:e5:e9:a8:e9:f6:fb:4f:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Controls.Ribbon.ni.pdb
/_/artifacts/obj/System.Windows.Controls.Ribbon/Release/netcoreapp5.0/System.Windows.Controls.Ribbon.pdb
Name
.data
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Extensions.dll
- SHA256 89e23a3d4c58a93796103d94595222369a5ef370a3bf360113ab538747249e5f
- MD5 945aa61b2bc85cfa83b9ec6ce150f487
- SHA1 e8997392a06953da5d357b7e11ae9e8f620236fa
- SHA512 662d09d4ee51cb9fb6a72285b633f0101f163af927475acb4c29a7e6563a5c62ff4b99e8d7884e120da43368e93a9e6eb547a1b6d5bf06f2ee79234c8a71240e
- SSDEEP 1536:bKrh9gdcgYImVblHssEWGkP4UQsoEAcY0wMIfN53PYDhRdkeUf:bKrh9gZYI4Hsda0P
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:db:fe:f1:02:51:b2:8b:a5:16:f3:84:fa:a9:b1:8b:09:d8:b9:8c:ba:21:b0:a9:43:8f:8e:22:70:44:9a:83
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Extensions.ni.pdb
/_/artifacts/obj/System.Windows.Extensions/netcoreapp3.0-Windows_NT-Release/System.Windows.Extensions.pdb
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Forms.Design.Editors.dll
- SHA256 2a6e6737aca3c214bc44e4b933a34a658c2b1bde46496f1b147a1589d43108f7
- MD5 e3aba080d8d499afe56b535464cbbe56
- SHA1 b8002fe81448ef6d10141390927d3f8337e46d12
- SHA512 757a710e323f524e5149eb5c99c6ec156b2978376eed865fcd96706b97294828d0100fa6146f79a4db224eca1ebd035699249fb0b538e62d6545c2d60f86f780
- SSDEEP 192:VQW6BW82CYn7THnkxgoWW4GD5dHnhWgN7aQWP4D7DiqnajKseQykO1F:VQW6BW829n7DyNFdHRN7y4GlGse
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f5:af:32:94:25:9a:37:9c:bd:29:6d:4c:5b:15:70:f7:71:68:e2:99:5e:1e:40:52:9a:62:e2:ea:3d:56:bc:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Forms.Design.Editors.ni.pdb
/_/artifacts/obj/System.Windows.Forms.Design.Editors.Facade3x/Release/netcoreapp5.0/System.Windows.Forms.Design.Editors.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Forms.Design.dll
- SHA256 a25ba608c08c5d8e7d23f7b11b6b7e4c58b307dc3d3b57a5392a24ce2becaf27
- MD5 3e1eba2a55198ef9d45756688fc578cc
- SHA1 fdcb26335fa333fe8205c8422456a0aae63e8aaf
- SHA512 486097de6bba0ac14c4edcfd79d10870c809aaa4c9d5baadead819daac1cfd58cc8bdd73bbd76fdb18449f2e528c47a25502020046f21ea5c082ce3472e736d3
- SSDEEP 24576:B1iUefLFaEzBAmbDIZ8aGtRl/OkMeaS1LwJm+cKy9RJz0M04xS9Ua8+Jzwi3vuaq:niUYhVAmbDIgCk/Jw44Ua8+JcilIj0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8e:37:e0:73:24:14:9b:a2:43:13:76:5a:e9:8b:30:2f:4e:00:6c:66:f0:aa:3c:42:17:7c:d6:25:51:1b:e6:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Forms.Design.ni.pdb
/_/artifacts/obj/System.Windows.Forms.Design/Release/netcoreapp5.0/System.Windows.Forms.Design.pdb
Name
.data
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
125KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Forms.Primitives.dll
- SHA256 3edf25225a7cd578c6269c7ce92ff4e8b22eac09719c925db3724ddc51c38e33
- MD5 99475dbd72bfb3406c4497dbfcf700ed
- SHA1 3d1f92f005df6d2e7455db3a09a401b012fdb105
- SHA512 d2a5052750997520401b303923b78aecc00311670de7b19a5e62a1566ae06e83e7535859b3ba5aef60aa7859d1537729c666b8a28647e2f14d5156ce6f54eb80
- SSDEEP 12288:rMkUYjwZ1OZmLkXnT9ebNUrr701/gmGyzfJdLo3IaE5Y5ZjeTwsuh:rMXh1oIVY3eTd6
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c7:22:08:8b:18:3d:96:b0:82:e7:f5:90:66:ad:bc:43:1d:18:f3:56:c9:0b:f1:46:a6:62:e0:4c:55:65:ea:49
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Forms.Primitives.ni.pdb
/_/artifacts/obj/System.Windows.Forms.Primitives/Release/netcoreapp5.0/System.Windows.Forms.Primitives.pdb
Name
.data
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
636KB
Virtual Size
635KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Forms.dll
- SHA256 e036f6fdbc081d276d8c89989c0ee79264bcc3ed40afd35ca3a3491b76a4f54d
- MD5 2a73dedc888d37ede587e63b392fc24e
- SHA1 e1cce8ed3058eb72f84ff9ca97fde225d84f85b2
- SHA512 cfe0ddf60ab456068034df2471b73b4a296e0ba83afff91f2f7105d56b2e52a3a90f743307130b5401159c8bef518324e4330a6f96ac685368dcd8332aa115e3
- SSDEEP 196608:ByqFu0XmjPvwqUulqVEWN1egu2Ez2kToIr9hIq9ED3:BNXmjXwqtlPWN1egyK8oI5hI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6d:71:dd:b9:5b:96:d9:17:52:0a:31:74:75:58:be:b7:b7:c3:28:a0:81:9c:c4:b6:73:26:22:e6:77:79:bd:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Forms.ni.pdb
/_/artifacts/obj/System.Windows.Forms/Release/netcoreapp5.0/System.Windows.Forms.pdb
Name
.data
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
11.0MB
Virtual Size
11.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
420KB
Virtual Size
419KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Input.Manipulations.dll
- SHA256 95f5af19457893e6fc693d5a53ea97b91db18246136b3ef8145095057d54d1c0
- MD5 9479f0af94a98b88f3a5c28d4dbdb697
- SHA1 5a87ffe88671063e5685f4c11427d79c5f890a5d
- SHA512 a96a5ea472e409f37132a5485658fc5c534977d36bfd6c36b1a11723556ca9aa0b009b11de25ed9f22b81bfef3809b7a17c8a328f3510318fc4e0a7e3be74bac
- SSDEEP 3072:0jqlkjo1TQFTq40SADA29pwNBiZyRzG7b7lS9muq:sskjo1TQFTq47Ap9pwNB8ykb7Imu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d9:a4:ea:d5:d6:a5:c8:1c:8f:30:4f:45:62:c3:50:91:06:d4:27:6c:93:bf:13:1a:78:32:9a:c5:05:10:d5:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Input.Manipulations.ni.pdb
/_/artifacts/obj/System.Windows.Input.Manipulations/Release/netcoreapp5.0/System.Windows.Input.Manipulations.pdb
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
98KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.Presentation.dll
- SHA256 4c76b4342fc3d60af7addc41971daf87ba61e01f893cd3b7f6b30fefc6d71b38
- MD5 0349f554306c773d457158b0a3eb3af0
- SHA1 01c895fe2e749e80aaf2365a39e7bd0dc8286830
- SHA512 22d43c133d38fa74b88eda848af772cf38d0c8e380e6be16bc43e8ab3d4f5e8c60d92ecf4c5392d61c26505a07ae6a4304c6f2777ad2fdafef6171541eb3542e
- SSDEEP 192:5PWMBY+8WxbzztVjo9jF1UY6RRW4GD5dHnhWgN7aQWIbsE4eAqnajKspye:1WMB+AfZVjip1URsdHRN7zpJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8f:e3:86:93:c3:48:bf:c6:11:9d:5c:70:9a:89:b6:48:7a:e9:4c:c4:73:6d:32:e6:73:81:6f:e3:ea:1e:e2:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.Presentation.ni.pdb
/_/artifacts/obj/System.Windows.Presentation/Release/netcoreapp5.0/System.Windows.Presentation.pdb
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Windows.dll
- SHA256 d154f26657e1f14e80174d14990625db0bfd7b6c657d906208779ad888e8c4f2
- MD5 b0408fb50708392a84b44821c83a3769
- SHA1 f282d68cda219496594e00ca852c42adb111bd19
- SHA512 eebdc94dcd347e5ae8f86e6755edfcd9b6470e2f5e91f2aea6e1ae54e3d5545e6fc066874a0a935eb5bb034a3c2eca1a6be81e4fee36ba9f51e89c200a1f4011
- SSDEEP 384:qWsSWKvaMt86KrBdHRN7tNwuAzXulGsw6Y:QbLJrnOzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
77:d3:59:a2:9a:da:b3:6a:84:1c:fe:2c:59:fe:ce:e4:9d:00:e3:47:27:a8:80:c4:75:a5:88:1f:76:99:b1:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Windows.ni.pdb
/_/artifacts/obj/System.Windows/net5.0-Release/System.Windows.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xaml.dll
- SHA256 e3de85558eba1fdfdce59ba271e9b0dc0688b3f9e1a6453a4f7740758ba9433d
- MD5 fe1ffe711bb3044464204e19a314618e
- SHA1 eb2a79230b70df3224940d987b909c82b4c0de1e
- SHA512 4fca5ba332bf100997d0db5dd71397d56304a1380ff77559b125eae8b22e390d791d58da56d5a6825c9c22212a93fd1cb556a1625afafc778bb8433434471ccb
- SSDEEP 12288:LcVaVxUNCoYRycXartZM/UaeZEAMRPzIjno7r2eYItx6vzPy0Bg8Ql3UPZ1KWa:Ak4NC6cXafM/Ua97IjgwTZ84zK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
08:9d:4b:54:a2:10:19:ac:50:41:0b:8a:8b:0b:7c:3a:47:2f:f8:5f:f6:7b:37:3f:20:17:2d:17:83:01:06:4f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xaml.ni.pdb
/_/artifacts/obj/System.Xaml/Release/netcoreapp5.0/System.Xaml.pdb
Name
.data
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.Linq.dll
- SHA256 8ff616b762ba70b8ce83df54b17670744b3520f74dde741e774c4c743954aeec
- MD5 ef46c718ad814d91a6e6db5fbeb694b6
- SHA1 1dbc272fc853f07b0fd5cbcfc03994b1f87b1f24
- SHA512 b90b283cab77fdce7f25f67c6a4d83dbb7ebdde0d2b4ff706efc849fc93087028a3169cc6c55e0e3b2a720b1801ba0c7a39c7efec5c91e14c239a2d64443d850
- SSDEEP 192:pWf4WLqrWu+9RrPpgW4GD5dHnhWgN7aQW3LQ5ybsE4eAqnajKspc:pWf4WIr+9pPpzdHRN7ELmypJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e9:70:be:c6:7c:f2:5b:2d:18:b2:ec:c7:c3:eb:30:0e:52:5e:60:cd:85:5b:7f:02:12:22:69:08:eb:cb:29:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.Linq.ni.pdb
/_/artifacts/obj/System.Xml.Linq/net5.0-Release/System.Xml.Linq.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.ReaderWriter.dll
- SHA256 127b2f9b27ae917b773bdf08a648b4664a5ee508176cbb0f988b5b344f946df6
- MD5 e9490ee058f5fb1173d3a1113852349f
- SHA1 b2aacd96575c19d1e51dd500325557a3fdbb1a9a
- SHA512 77dde59de83368bf882499fbaa76618dc89e056c305bfb67baabf299329c2ab228e98cf3cc52451786780b6475c4833bb759b3e79854fe0943233561f194c3f6
- SSDEEP 384:EWXAW+5qkxK67ex4FC87DBAd/0bPAX0adHRN7pwuAzXulGsw6X:F4Lh7DW6bPAEo8zrm
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bb:88:99:df:bc:7b:ae:9e:bb:ae:fe:6d:7a:6f:86:f1:c5:e1:d4:77:c4:b4:ce:f5:c6:01:d1:e4:87:83:32:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.ReaderWriter.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Xml.ReaderWriter\net5.0-Release\System.Xml.ReaderWriter.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.Serialization.dll
- SHA256 1c9c8c60f5338ed7e9aa94f7475525a4c0f4ad28e21bd1a106cb0985dd84c620
- MD5 3fd41390eb5dcd8b0cdb65a3121affd7
- SHA1 d06b263906f40fc8642846fefe83c5094d3b82b8
- SHA512 6c3021788056501578c0d132b33305676ad9ce3172a9b99ff267cf5927207e33309e286768328e113bcfece48be28ef869b385410996882c651c8795390f773b
- SSDEEP 192:r5LW7BEqHWLhb0GCD+iW4GD5dHnhWgN7aQWLZYfuVT/gqnajKsIN:1LW7BEqHWl0+xdHRN7Pfu1IlGsIN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
be:9c:17:e4:f9:4a:f4:30:c3:a1:00:6c:97:fe:79:9a:38:4e:15:6d:1d:3a:94:fe:f8:f4:b1:5e:65:a9:ab:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.Serialization.ni.pdb
/_/artifacts/obj/System.Xml.Serialization/net5.0-Release/System.Xml.Serialization.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.XDocument.dll
- SHA256 3cede00bad51746321e07e75aa4b50c583e359cd78d70c52d5c898ad2583a68b
- MD5 064e73dc21144ee4b44658598b754565
- SHA1 eb664f1aec141e503b89f73c41435e9ea291f1cd
- SHA512 929e5bb7fa12361e22df1ca29b6c6d8396e9d57adb7880bd2763727914363eed9d59f00b5b62e23bd7bedd27507015ffe5803559ac2b9a6f798d2b6a0474740d
- SSDEEP 192:gWOdWLQdBxM73W4GD5dHnhWgN7aQWmjVT/gqnajKsIN:gWOdWCM7edHRN7N1IlGsIN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fd:9c:50:9e:6d:a1:1f:af:52:f2:eb:12:d8:77:63:10:87:38:4d:20:69:a9:d9:9d:ad:b8:39:6b:12:44:78:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.XDocument.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Xml.XDocument\net5.0-Release\System.Xml.XDocument.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.XPath.XDocument.dll
- SHA256 ff26f350ec9e6b071fde9e7125b733e45a9733ba96025a30e09b9fd693e10743
- MD5 674f376b6b2ef13130ab4ee294bab5e9
- SHA1 8148b1dc3c6a3de5b70a0e342f24acfbe1e6d551
- SHA512 93971907fd20fe94c4000215c027101cafe9d7eb59a5700f620ea6c9411c61fd4973faed27cb2ebb110e203ebebec8b06288b49e9b3eecd5657696b5a7401d1d
- SSDEEP 192:qWIeWLJcY5ISkZvxQfhFbKZVW4GD5dHnhWgN7aQWV2GVT/gqnajKsIN:qWIeW9cYmn7gCAdHRN782G1IlGsIN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
89:60:21:d4:cd:8d:ea:46:7d:c1:68:2e:2b:1b:0c:a1:74:4b:8b:db:4b:3c:7c:c2:8d:0f:7c:56:62:c0:b2:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.XPath.XDocument.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Xml.XPath.XDocument\net5.0-Release\System.Xml.XPath.XDocument.pdb
Name
.data
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.XPath.dll
- SHA256 6f63d97740102faa2f7d6b1c9783533f9317b5def309002732ac833f5c8f2494
- MD5 46700aabc536f7ec2cf403877b59c7ea
- SHA1 5b6f64c02282a8163193da20e6525bad40194c07
- SHA512 5b523f0b259de252a9b1f90547f3bc9cbb0659e98397c2577bac526765e4a68b28c891fecc7845f6628c5703b7f082ec2fd3f1ef9632428509f53b1f941dd542
- SSDEEP 192:4WSvWL4yiA2gmQjxOCvW4GD5dHnhWgN7aQWIkD7DiqnajKs4Cfr:4WSvWsyiA2gmoOCWdHRN74GlGs4C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7c:d2:a6:b1:19:12:54:f9:23:0f:a5:ae:a2:c9:b1:a1:a5:6d:07:e2:92:20:c2:e3:88:d0:0b:9e:62:72:dd:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.XPath.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Xml.XPath\net5.0-Release\System.Xml.XPath.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.XmlDocument.dll
- SHA256 aacd7efd0bbb43097f42a08a7a69407fbc9235d2638ed771ba11a1a1789b3fc8
- MD5 5c2fa9496cd7b3fedd185c12dd71e20e
- SHA1 bdae5b45b5da9b8b4f0c771727070ab4edf1ea14
- SHA512 82cb58a81125ba5dc6a934cbcc083701786e2085cd30b436b826f8cba592d2aa2cf068f3e61e8f0ae140c001e6e9b1a284c49968278f649754ec556afaffa78f
- SSDEEP 192:z14WAbnPUWLhRAxPfVreW4GD5dHnhWgN7aQWH6RVT/gqnajKsINdVV:ziW0sW3ePfVrtdHRN7VR1IlGsINd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7d:8d:ee:85:27:13:f7:14:e9:b4:8c:4c:a4:c5:11:da:20:1a:50:d3:f2:61:d8:8c:e7:50:4c:16:9c:bb:11:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.XmlDocument.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Xml.XmlDocument\net5.0-Release\System.Xml.XmlDocument.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.XmlSerializer.dll
- SHA256 2b7e3895d8675e0419de93d3758a4790240c2841bd8c98a39fcf017c3c2406e4
- MD5 9261e63158491e37914b1deba704a867
- SHA1 2bb879b58c80654b542406aa1f567d1e61131939
- SHA512 06b4353f855bc10f331dc0e272d5bbf6cae656e440121fb37ebd54e1e3c4bb643b4aeaf4df2262c04b5778c120fe73d9c4860264a87073d1b4b33b06bdce18ac
- SSDEEP 384:NWavWLitjSKrSA8LGVdHRN7FrP+CcWlGslaH:/2R0S/ijFTwo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f7:3d:17:f1:7f:8a:0b:fa:9a:28:2a:bc:ab:34:ff:50:a8:c2:08:17:dd:6a:27:47:8e:dd:84:d6:f5:6b:3d:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.XmlSerializer.ni.pdb
F:\workspace\_work\1\s\artifacts\obj\System.Xml.XmlSerializer\net5.0-Release\System.Xml.XmlSerializer.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.Xml.dll
- SHA256 df3722f31cc8b9eb8ea2980e2d4f68cad91918f4c6823560e17daefcce878c6b
- MD5 cd87743766e4964155d05431aebb7569
- SHA1 d3ea993c939169e811ecac385d88123ba584dd26
- SHA512 a89afe2e2a7f8b0b3086e54a0d93bf822b7744cd74fdab09e4d1b90458875c76c164961b37df9ba190a4c1a522e22fd22f615667ac646b60a547961a56ac40fb
- SSDEEP 384:JWMjsWA5qohA8bhUVGr3l5U1HO92XK/dHRN7Hq9CVJXlGs0:VYOUE1laFHqsPE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
08:b0:81:12:80:46:9e:9a:a5:22:6d:43:c8:59:50:0a:29:6e:10:d0:7b:26:b4:bc:c3:0c:c2:94:32:b3:63:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Xml.ni.pdb
/_/artifacts/obj/manual.System.Xml/net5.0-Release/System.Xml.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/System.dll
- SHA256 3dc0b50aa51155b68d894c03e9e006852dd3c0af041d5fc06f9f7a8dd3d28a08
- MD5 4b36d4edf954e901976a778f35ee7551
- SHA1 b60df77dce193cf8d9247113ce29e0ebf6412f2d
- SHA512 fe034a08d3cd718938982e1f54ef8b02c6b1b310cfe53c4f5478ba663aef1937e5e63c66b9181da25e826e5cefa76180a62a960d713f2d62552b42ae1bece301
- SSDEEP 768:B0A1ZX8TRNB5JVbOd502zq1TntVDUJEjji8wT2JNktTWUdwol:BtZX8m5jzC34J4ST+cKUdwG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8a:06:f2:ce:9f:4b:9f:be:11:80:b1:64:92:9b:31:8f:b7:51:35:f4:73:92:97:ba:04:75:6a:6b:56:d7:14:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ni.pdb
/_/artifacts/obj/manual.System/net5.0-Release/System.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/Themes/blue.dntheme
- SHA256 efb657cf77a09da52cf68de3b6123706afc2f011aabd135e2da3e2598dd3226e
- MD5 35a4dfe964054c06678c8e6e2891429a
- SHA1 2c036196e93ed4da9aabe0bad81823e799ca24aa
- SHA512 ef1916b3f03d0c552e8bb6cd6295e4427755ba4a0a985d7be0b1de7d4b18fa1d1b7ce424f8314bbcfefa95f84dc343d4542e13d5751c2ab86da97893230aaeee
- SSDEEP 384:Qn4mAEkGCbuimSO2d2XHAWdbZW9WdKw5ngg7KZJpQwMC:Qn4mA1GCbuiewwHNdw9e5ngg7KpQwMC
- MD5 SHA1 SHA512 SSDEEP
bin/Themes/dark.dntheme
- SHA256 3b9c9fd346409c73ab568ca1a36929519d82fa09343bbb0b6b44a7b205003c6f
- MD5 d3ac02147922c949c063cad11f68a2d6
- SHA1 3ccf69ae71fb735bc8ddd503d5e2128efa02a77e
- SHA512 88d2bd770bb1f7e4103ca6d846a5b41b70d4361002618ba5225c80be4d0f16d76d7cf38099c21e57678e42648f882239de16b67baf7b207c045c275b9af75c6d
- SSDEEP 384:v139E6nLOPrm5cIGo0zMtCSTDYXrmGw/yaZHr8d94RofmMlYzhgwdMgRmCWypxQA:v139HnLOPrNpo0wCyDpGgHruqxjUm
- MD5 SHA1 SHA512 SSDEEP
bin/Themes/hc.dntheme
- SHA256 f04f79f877751db13376130b250ad3accf65fe05f845f0ec871bb850e5bbc923
- MD5 8043cfbffb29f61a18f3236f65ad48a6
- SHA1 3d8cb0b7e07e5ab91b1bf295e7608b12ae53dde6
- SHA512 1ec65543923fadc62294baf68c477114ce90a77bea72931bb009c4fa4916cc92710d10f3c6c3540faace970f0f56edff9951b3eac28568503dc863e00c22ef8a
- SSDEEP 192:fLFNKXq2B5cA0qWdRZ0/ujnoY2DciQ5KapKZ/ZvZ+QKP0/6ZtkGX:zCqcWdRZEujofwZtkGX
- MD5 SHA1 SHA512 SSDEEP
bin/Themes/light.dntheme
- SHA256 28f01d7e13fdc6d165a7bbf794c13fd31453dd8e23bc501715f52fa408321a9b
- MD5 6d7d4c5d52ae7227c7d553d0014952b2
- SHA1 932e4cb2d46a0fdeefadef0c476935ff2b5be0b0
- SHA512 86c590bd1a80f8e9842ee8456a07bc3a0f0ad4e59f09139bfdede1ce07574547f398ddd4ffed454c7124ae80462edd035030a85e6d547a00679d30d409e38eb9
- SSDEEP 192:U0D8lR4mAEkGCbuimSO2ddLFhvSXpBAiCe4Qb0ey:on4mAEkGCbuimSO2d8XHAWdbZy
- MD5 SHA1 SHA512 SSDEEP
bin/UIAutomationClient.dll
- SHA256 4c1882c8c63a5f260a326882ed6c9b6d1c6f01a6c1a6f8d41445ce670113fe65
- MD5 a576b8a924a5cb89dba0be4f03f36844
- SHA1 56217e1fee37b316d5b1185e6755d70f06465767
- SHA512 c43b06802124e6bf0bf22a47308ca0c48c39a71943f27b9735506e76a02d7f88be090aa42d1bec5b9393590f243067c7e3d8ce67b01897afe8e24421efd101af
- SSDEEP 6144:Whg+cmxmeY8xOa+/+qDMKU6mraCZ4P9ov4UIitfAx:WcevOauDMj2u4y
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
87:38:28:f1:d7:9e:3c:91:ea:00:96:24:f6:e4:8d:21:cf:7e:1f:f8:0b:70:d3:be:9a:ea:eb:8b:e4:94:17:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UIAutomationClient.ni.pdb
/_/artifacts/obj/UIAutomationClient/Release/netcoreapp5.0/UIAutomationClient.pdb
Name
.data
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
327KB
Virtual Size
327KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/UIAutomationClientSideProviders.dll
- SHA256 7e51cf5d163c3ffbb736ec146a81266ca2db206830939e24ce73ff9226f4eb76
- MD5 bd8f8227340481cf8228631e77d7b09b
- SHA1 c564f2f7417bcb1c2f679211969fe010e41d1c39
- SHA512 13ccd71f39b683f6238f2166bf4100eeb5a027aa28aa335b97bdf7a661190e298acdca74e349a2ab6bb05937de5ef58d5b63113aaf9f956e0e646eeede2749b4
- SSDEEP 6144:+v+hSnes2YasUR5eiKZzqINpCl9Oq9j8jypdFSSRbjtXEBBHBUdcgJ2ej39p7EmS:i+D5aQ0mo5BeTceLWUIzlRrgYd1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
14:1e:9d:43:79:ae:4f:4e:80:92:bc:84:6b:8e:9c:86:6f:36:ac:8e:65:31:fe:da:a3:5c:42:b9:45:29:9b:a5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UIAutomationClientSideProviders.ni.pdb
/_/artifacts/obj/UIAutomationClientSideProviders/Release/netcoreapp5.0/UIAutomationClientSideProviders.pdb
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
715KB
Virtual Size
714KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/UIAutomationProvider.dll
- SHA256 d3addfd5514f3b7e25c337061f4c936294c927afe5d595ef909f8f7f7b195dcc
- MD5 4c687f9cdf810973f2627b67e31732e8
- SHA1 0218b199548c6dbc79f3bde7001ad585699f2907
- SHA512 fc49cf08704405bc0ddcd6da23e188f3dd851860bf216887fce54bf885d1f408989218dc950fc9a2de1528060c1f5c253bd540058475e400d97ed175f43033a7
- SSDEEP 384:YW9g1Go8FVImFTsGoB+4GLBMIDyCtVyoCrQIjDZBv0gAxSXLg5oEL3D/bB368p/M:7yAF5XZv/t5B5JRp/ENAO0fnmsW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:4b:9c:aa:63:75:03:73:14:6b:81:5f:6e:6c:d5:23:c8:04:c7:0f:65:23:92:7c:3b:b8:4e:d3:36:50:0e:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UIAutomationProvider.ni.pdb
/_/artifacts/obj/UIAutomationProvider/Release/netcoreapp5.0/UIAutomationProvider.pdb
Name
.data
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/UIAutomationTypes.dll
- SHA256 48cacdf3bb5d27e7323898454e7816b0665e30143e67fda79e7e76007fffb477
- MD5 cc62ac0056eefbe2a9729295386f3088
- SHA1 2234cd13e708c0cba52527231052a51ed09342af
- SHA512 bdd36a43ac1412450ee318f7e53ebe93c1564d2d444cd2a7faf854e75b499bc5df154631f717fe38400b0a717718cf22ac244e60ac7410583c9d1c0fa94cb1b3
- SSDEEP 3072:/x3Q6c/Zf/jf0z13R9VL7PRWx8NOk6f4zHUs+HLnIJL6jxuDOYgpDFxmUBuVLOcb:5A6ijsz13RjpB6w+HLbuDFguVLNGj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
87:d3:b2:f5:3f:9d:c2:ca:0e:3e:f9:5d:6d:a9:90:e4:33:37:48:8f:cb:a3:3f:99:e6:31:60:fd:3a:3e:50:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UIAutomationTypes.ni.pdb
/_/artifacts/obj/UIAutomationTypes/Release/netcoreapp5.0/UIAutomationTypes.pdb
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
245KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/WindowsBase.dll
- SHA256 9966d7144cda77f80beaf933d536f6a63fcd91c01abdb3436d784a1299102aec
- MD5 6ed75d8809b566c304cf3d0d22ac8b16
- SHA1 bc49a8bf77c510d922293afb1308fccc464be2a6
- SHA512 0f11b1cb8497f5649dce7d74047ae7e163e47932413de3a11887c517e17447e5c15ad604e98a0a04b13a316cc753a44f3b30f2258d9a3cc08fe08c2c45c8b1a0
- SSDEEP 24576:kLv5JzXsN3vIxCKOXrS/HvLUtt5byOmfqKg+iMna504ORR0vrI0iHBg6KLzRv:gLXsVvIl3TUttRyOmyf+i2RelRv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
12:ca:b0:49:42:2b:11:47:0e:f8:55:f7:ab:90:55:01:bb:0f:09:4f:de:4d:a5:1c:15:e8:5a:9d:9f:9d:bf:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
WindowsBase.ni.pdb
/_/artifacts/obj/WindowsBase/Release/netcoreapp5.0/WindowsBase.pdb
Name
.data
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/WindowsFormsIntegration.dll
- SHA256 41a5f6e455349298612015d5a24f1660fb42d433c7f613c09d53c77820fa30f5
- MD5 3df8ba758d0afb16ab3371325dd10645
- SHA1 21424970f971d177b50474fd386f90fabf82f37d
- SHA512 b371498d91029a22a492121ce6155b86f4c43d036502796e9c043a525d0eeaa67b96ed4f52183bcc69c13876b8a76f3bb62d66623f017d9391ecb4e5292b4609
- SSDEEP 3072:XkDwyVOBDM/hOELS/UbGEFhkEdo/5IkV8YzHHL0BVbaTImcQrGe6kOmsWzA9UOqQ:0aBDah/bGSo49fQ6ezyxIod71G
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
73:85:ca:b9:4b:99:1b:01:05:4d:f2:3e:3e:30:c6:2a:af:95:2a:9b:a5:1b:95:c6:4e:7b:e3:c1:57:60:8f:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
WindowsFormsIntegration.ni.pdb
/_/artifacts/obj/WindowsFormsIntegration/Release/netcoreapp5.0/WindowsFormsIntegration.pdb
Name
.data
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
157KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/api-ms-win-core-console-l1-1-0.dll
- SHA256 c7d803e0464fa96c062b58dca0ec44ce792dab12c62e220b86c1c29ce6005c3a
- MD5 18c9b3e3cba9f9dcfd4f46be55de709f
- SHA1 88e493b1bd4df6c6e91bc2ecf522d552b39d4cc9
- SHA512 e699186403e7017ff69c325154602d63a164111f77ffc463783baaf6aca3d08ea09ce66462ef5ccf92eaf7f81344ae3cdb4d212bc54773129f4bfb7af652c6a7
- SSDEEP 192:5sWphW9WSawTyihVWQ4WW5MAOT2XNfqnajVAilG834EN:SWphWqwGy1k9flx6Y
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
73:5c:5e:98:b1:81:63:76:71:77:f0:dd:dc:e3:fb:f5:72:ae:8f:d8:bb:db:11:b3:b9:0c:62:4d:1e:8d:20:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-console-l1-1-0.pdb
AllocConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-console-l1-2-0.dll
- SHA256 a6079737a41364283c1990d2e52e7289c01a88a0abe19a831f72ea37771e856e
- MD5 c72a9ca97ed04384c43d71b6c2819a78
- SHA1 631b49e76f3fbc42d8fd710de2b3106c3b244ba5
- SHA512 f76f0e7ab3958b8fb4133ed06ad1b23ba5f455111a01000e941237a6050aed43f3b0d3bc01b38a38b3a316954d51d6068bef2b48c6f0a4f3ba13726b037eb27c
- SSDEEP 192:it8WphWXWSawTyihVWQ4eW8Phk3pPqs7IwdY+kqnajHaqxgm:iOWphW4wGyngzIwS+klTx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
be:b5:4b:45:45:eb:e3:2d:1b:29:e9:b9:6a:62:de:4e:7c:b5:3f:a0:8c:71:25:fa:74:3c:8b:d6:25:c8:e7:4f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-console-l1-2-0.pdb
AllocConsole
AttachConsole
FreeConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
PeekConsoleInputW
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-datetime-l1-1-0.dll
- SHA256 e92f98ec9afb424fbea02ae7b4d881b11d85371d9a303b35c02de1a74ed4e81e
- MD5 e7b05ab16d02619ec58ca4e1964a2182
- SHA1 fc356fdae1cb5f0b4c4217292e4a291eb190faa8
- SHA512 48197499352e5030d07b9229e5c8ad8a2dac8339d55701497721cccbb7bd981c58de1e1d888e490f182646180dc0ea47a54b990fc2dc8b8f3905df3420379b07
- SSDEEP 192:P0WphWfWSawTyihVWQ4eWBURahpeLirKqnaj/:P0WphWwwGyTRnLIKlz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
be:fe:8c:cc:ee:33:4f:90:ca:0e:0a:1d:4c:6e:72:ff:ef:25:08:e2:1f:3d:1c:e2:3b:3d:4f:65:d6:f5:bd:9f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-datetime-l1-1-0.pdb
GetDateFormatA
GetDateFormatW
GetTimeFormatA
GetTimeFormatW
Name
.text
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-debug-l1-1-0.dll
- SHA256 098678c7c35e7c1ad545abde1fa5bca27b66c38bc122c8b54295ada1023ff18a
- MD5 765db87311161a131cee64e9d8f2af8c
- SHA1 c8f2ab097f1fa7b55ad1ff27741147db6fd558fa
- SHA512 b936e072bbd667df03b2a9da43872e628d2de4bfe747d13595e0703c3800221dd8e72a76759bdf886a4dea9ed0a27b27af3ffec8d9cc4578865d935e8477fb99
- SSDEEP 192:xWphWiWSawTyihVWQ4eWJgcX5qAAqnaj/IeSx:xWphW/wGy/lDAx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bf:ab:9f:2c:91:e2:4d:ee:de:a4:0e:da:0c:65:cd:72:1a:d0:0e:77:a3:72:b5:50:3c:4d:3f:88:68:63:de:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-debug-l1-1-0.pdb
DebugBreak
IsDebuggerPresent
OutputDebugStringA
OutputDebugStringW
Name
.text
Size
1024B
Virtual Size
571B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-errorhandling-l1-1-0.dll
- SHA256 56bb6208278eec8dd62b636ee2dcec2383ee59798d722410d7df8b0c3c04f3d6
- MD5 7b7cd224de0dfacd07d95b0045dd0d5a
- SHA1 ec0491a4c45778c9d40002871ef5709f9ba14731
- SHA512 4bf4e8f8376b4570782eb8ef21c4086616779e59d464d4127e36928c530c04cfce87696480aaaef3630568f4d4ab163464e13db35968219d048231e420e51558
- SSDEEP 192:8amxD3PWphWSWSawTyihVWQ4yW98DcMpVwyqnajlAww3u:8aUWphWPwGyimvlmww3u
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b1:9c:19:b1:27:40:6f:ec:2b:56:36:c5:70:15:74:74:e7:67:f8:a4:bd:09:ca:d1:23:ca:af:29:9e:e1:9c:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-errorhandling-l1-1-0.pdb
GetErrorMode
GetLastError
RaiseException
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Name
.text
Size
1024B
Virtual Size
742B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-file-l1-1-0.dll
- SHA256 6696608a50c505cc420b41b70cb47c4b403c2785c52c8aeb8a3d04cf7982b19b
- MD5 5beb048eeaa4d22865414f6a0ae825b7
- SHA1 9476aebcd2ab30f9bf62b374f61417aeb00fee11
- SHA512 e6c766bacf91789a297b3b787bd63b5564caf88ff4772f6b14c8fff2d7b61825f9c3d6129afbfc9c589402f958732e1f0128ee529679fe3828a1d1d537981b47
- SSDEEP 192:1CYYPvVX8rFTsFWphWFWSawTyihVWQ4WWlGM2XSoaqnajVMSLadjbwf:1C7PvVXXWphWiwGyvZalxbhf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:4d:d4:34:e5:b5:09:da:57:80:60:5e:7b:35:65:12:92:7d:f7:bd:13:70:94:50:fc:c9:08:7e:d0:d1:33:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-file-l1-1-0.pdb
CompareFileTime
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DefineDosDeviceW
DeleteFileA
DeleteFileW
DeleteVolumeMountPointW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindFirstVolumeW
FindNextChangeNotification
FindNextFileA
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleA
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameA
GetLongPathNameW
GetShortPathNameW
GetTempFileNameW
GetVolumeInformationByHandleW
GetVolumeInformationW
GetVolumePathNameW
LocalFileTimeToFileTime
LockFile
LockFileEx
QueryDosDeviceW
ReadFile
ReadFileEx
ReadFileScatter
RemoveDirectoryA
RemoveDirectoryW
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetFileValidData
UnlockFile
UnlockFileEx
WriteFile
WriteFileEx
WriteFileGather
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-file-l1-2-0.dll
- SHA256 8e096b90b0687a45a56bb85deee36a9bd3624b653901fd5585582e0035a1482a
- MD5 fc012c8e58ebab289adaa27fc48d2ab3
- SHA1 92cbe81dbc3bb8632a619a4bac4a083ddb36b33f
- SHA512 714ef73c1bf4a6f9f588ca7401ba989a973c5212310fadf7f68c0d52386c55cf7b7ddf2a4780abe8b173e5902f73dd9a61865796aa6a94eca6e1a1b4470c9a6b
- SSDEEP 192:laH1WphWGWSawTyihVWQ4eWh3S4kOqnaj2NLPm:U1WphWbwGyelg7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f8:14:8b:c6:7e:5f:17:b5:b4:2e:cf:8b:f9:b3:10:c4:7d:95:26:28:39:a6:fd:df:61:ae:c3:a7:6c:31:58:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-file-l1-2-0.pdb
CreateFile2
GetTempPathW
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
Name
.text
Size
1024B
Virtual Size
620B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-file-l2-1-0.dll
- SHA256 ce6b41db80cc6e437faac2b17852f26895ece6fa5ca1e31ded5339db4d1ae0a6
- MD5 ef92efa971eeaf443f38a3c677fbab38
- SHA1 b23e588c7faa1e292786da55c90fcc4ef52b96f0
- SHA512 b0fe8918caf89f2a3031b141c73a6c366629b103423c4bfbfbbb5726ca4a01976247620df6a69500780a07d68e928f3ac9d40d97c68a86ec5ddac449b4cc790f
- SSDEEP 192:hWphWtWSawTyihVWQ4eW88jDgpeLirKqnaj/dn:hWphW6wGyY1LIKlz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
27:ba:1e:81:98:40:e3:53:51:07:b3:d3:75:4c:2c:38:b2:58:aa:44:e2:59:67:30:68:c2:eb:85:a2:e6:6f:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-file-l2-1-0.pdb
CopyFile2
CopyFileExW
CreateDirectoryExW
CreateHardLinkW
CreateSymbolicLinkW
GetFileInformationByHandleEx
MoveFileExW
MoveFileWithProgressW
ReOpenFile
ReadDirectoryChangesW
ReplaceFileW
Name
.text
Size
1024B
Virtual Size
941B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-handle-l1-1-0.dll
- SHA256 16b9c409c3f4cef7a276170aa9dd020afbfb70bafb1f10acea5e8d0e7aa0f6b4
- MD5 00a96ebeb236c3d93389e23c7c40d6f1
- SHA1 e0c4d209404b1890f988a099636dbcf4b79e4d85
- SHA512 1558e6e4437a6b79a3061f960067333852a66dc3ac121617db341bed114d6ecdd9ac460a3c7a85f72af1d031754c08f732a55a1d1cc9bb5d27cea801e4849d15
- SSDEEP 192:tWphWxWSawTyihVWQ4veWixEdiqnajVCyS:tWphWmwGyEwnlx/S
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6b:24:91:b4:2e:54:2c:38:23:02:b3:c1:03:78:f9:e3:46:21:68:e0:df:9d:a2:7f:f9:0e:2a:33:41:97:f6:b3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-handle-l1-1-0.pdb
CloseHandle
CompareObjectHandles
DuplicateHandle
GetHandleInformation
SetHandleInformation
Name
.text
Size
1024B
Virtual Size
639B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-heap-l1-1-0.dll
- SHA256 4fce17577c2eab622835267bb5e355442221de85a0e481b4eef284a2eb0fdb04
- MD5 6578096f353a0390bb5012cab7c575e6
- SHA1 9d4d9b988b28a79e59edc24ddad1ea33718821c3
- SHA512 6b95e1d61f85625ca91d03cbb1fea1eeabeb0e6eca1590352ac3b072b5cd42756765c2cfec73a7ef7555c9239e141eb7c76b2eaacd4314bb8b4dfcf42e514514
- SSDEEP 192:vcl6WphW8WSawTyihVWQ4eWImCt+6ArNc4qnajr7vg:kl6WphWFwGy5V4lrv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9d:7e:7e:5a:6f:ea:f9:5d:d2:37:6a:37:96:2b:a2:ee:08:2a:cf:fa:3c:46:36:6d:11:be:5c:33:82:b2:f6:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-heap-l1-1-0.pdb
GetProcessHeap
GetProcessHeaps
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
HeapSummary
HeapUnlock
HeapValidate
HeapWalk
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-interlocked-l1-1-0.dll
- SHA256 e378bc303f7008a76a845736d5a6b0d56746e4904a9792fdb642cddd52028b4b
- MD5 54864a516d26061e225ebf656eaa5655
- SHA1 1a2cab704a4a56da8424ef114d977518f2dce65b
- SHA512 d529c7064175cf77607c54f69084973774c473a21c55ecb6bc9e26404a6ba1f893087be91c7c3003cfc66b4bd8e73c8d40a6a203378e98dd72da23e175303ca1
- SSDEEP 192:qXxDYsFYWphW3aWSawTyihVWQ4eWrBC5uE7Mqnajcf:qXxDYsFYWphWXwGymeuOMlA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7e:1e:67:29:c1:5c:a6:dc:99:1d:3f:20:da:d1:df:99:c7:fe:b8:83:eb:47:9d:e3:f4:c6:ff:b9:1d:a0:e2:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-interlocked-l1-1-0.pdb
InitializeSListHead
InterlockedCompareExchange
InterlockedCompareExchange64
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedFlushSList
InterlockedIncrement
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedPushListSList
QueryDepthSList
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-libraryloader-l1-1-0.dll
- SHA256 018c64386a62c9759da743b29079b9fe205db71385c758d42e5065a58b7b8c14
- MD5 2791e9e5fb104a377c5c4c16b27f2612
- SHA1 0d514d0d2efaf0c14a18d32d5623f0becec184ee
- SHA512 6a7d6dcebf7ccaf27f8aa60b27a755a80b72913e078a53b9c2d69622be130221e1ba81348951c3ff5e3e024acb03e93481df4571ec65b2a5675c60962e37370f
- SSDEEP 192:JSvuBL3B5LgWphWMWSawTyihVWQ4eWBg2Pi43pPqs7IwdY+kqnajHaqxgm+2:UvuBL3BSWphW1wGy2fPbzIwS+klTx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4b:c7:d9:3f:8b:ae:31:cf:29:78:b0:cb:ba:11:94:6e:c5:14:0a:07:97:02:8a:64:e8:b1:d1:8c:c3:53:5b:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-libraryloader-l1-1-0.pdb
AddDllDirectory
DisableThreadLibraryCalls
FindResourceExW
FindStringOrdinal
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadResource
LoadStringA
LoadStringW
LockResource
RemoveDllDirectory
SetDefaultDllDirectories
SizeofResource
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-localization-l1-2-0.dll
- SHA256 8e022faf3a8f7df42fb5c955b78a1416c455b819b4708cfc3bd619c914c1d5a7
- MD5 ca9350d978ec4e395d8d76b54da8b7a3
- SHA1 fccfdbbc86303e2f84f5a882fc6337de72252444
- SHA512 827a6e9773e698cc69b415c2d4fafc0ffc514a0636e05be68f3d06acfb97daacdcf35e34a9e5463d684c1a40fa330126843322ec5e6dbd65bdfe26ab21b684e4
- SSDEEP 384:+HOMw3zdp3bwjGfue9/0jCRrndb9WphWwwGyg4lrv:QOMwBprwjGfue9/0jCRrndb4X
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9f:45:ed:68:b7:b9:8d:90:5a:9e:d6:76:fd:a7:91:70:39:26:5b:a8:1b:bf:a0:05:b6:29:07:91:50:02:d9:31
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-localization-l1-2-0.pdb
ConvertDefaultLocale
EnumSystemGeoID
EnumSystemLocalesA
EnumSystemLocalesW
FindNLSString
FindNLSStringEx
FormatMessageA
FormatMessageW
GetACP
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetGeoInfoW
GetLocaleInfoA
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
IdnToAscii
IdnToUnicode
IsDBCSLeadByte
IsDBCSLeadByteEx
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
IsValidNLSVersion
LCMapStringA
LCMapStringEx
LCMapStringW
LocaleNameToLCID
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetProcessPreferredUILanguages
SetThreadLocale
SetThreadPreferredUILanguages
SetThreadUILanguage
SetUserGeoID
VerLanguageNameA
VerLanguageNameW
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-memory-l1-1-0.dll
- SHA256 e7c72a3db22143283d7b4d9ed66fb98a37fa9de06ea1296b076941d22c2120f1
- MD5 9846995dd9919b1e376036e06953fa74
- SHA1 dd96f69d9a22a1f6d8dd5d7272ae4c33b0c08b0d
- SHA512 0f3774690f2b796fb96f7a6af4dca5046ffb0a6169c909b450be66f0ea38bce6aa8eda6af29d873c5a239975032ba5b89e050d84bac3e08a7e327759e6550020
- SSDEEP 192:VDKhWphW6WSawTyihVWQ4eW6Bam06ArNc4qnajr7vLOs:0hWphWnwGyVV4lrvi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
47:7d:f5:15:7a:d6:48:3a:b3:55:47:7b:97:49:f2:bc:e5:52:d2:fa:75:ea:9b:c2:fb:00:68:58:f5:26:b8:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-memory-l1-1-0.pdb
CreateFileMappingW
FlushViewOfFile
MapViewOfFile
MapViewOfFileEx
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WriteProcessMemory
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-namedpipe-l1-1-0.dll
- SHA256 3dfc2a67b380b0d1ef0a206c6b2880fb975267d206773a2e0cf98bed206727e8
- MD5 d8661447deb6a1f46d5e220fc75bbae8
- SHA1 554bef2243f0e4d2802723d43af056c6fe3b1d35
- SHA512 d5cc94a459b951b2d32df163078b7e026a35e9332f01e9662e1100206bbe15c352e32736678e1eb88b9d3a60fafe3c8c0dcf5ab385dd6a2be99b7466768a937e
- SSDEEP 192:iWphWEWSawTyihVWQ4eWYBc5M8xOSqnaj3yfU:iWphWdwGyZNCTlufU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a9:c7:62:b2:1d:90:3b:09:7b:11:77:b5:0d:ac:92:2f:80:c6:8f:df:08:80:4c:f3:a7:88:34:4c:c3:81:11:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-namedpipe-l1-1-0.pdb
ConnectNamedPipe
CreateNamedPipeW
CreatePipe
DisconnectNamedPipe
GetNamedPipeClientComputerNameW
ImpersonateNamedPipeClient
PeekNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
Name
.text
Size
1024B
Virtual Size
949B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-processenvironment-l1-1-0.dll
- SHA256 67f146e4508967d30df406fb18d4d771217b6d3585659a5c9aa2499cdad01500
- MD5 589914e52bed4161fd4b288b2c07de94
- SHA1 e8775b997fbf7e2c39ac881a217f57744b41b6bb
- SHA512 7b4b815a1a1b13a7a12c6283d0739c31ea93abf70a23aeda480b2884416926ad910b05e477ad2ba63683540348d16bc3df50d598c32146d55e5b1e9a17ddbd79
- SSDEEP 192:AZ7WphWD0WSawTyihVWQ4SW64q1usUDR0qnajVXj9GOC:AZ7WphW5wGyKq1uQlxzbC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
57:f7:5b:2a:be:aa:49:76:53:cb:d1:fe:ae:c2:55:65:81:3a:f7:4e:1c:dd:da:92:83:12:b4:c8:7d:9c:3a:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-processenvironment-l1-1-0.pdb
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStdHandle
SearchPathW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
SetStdHandleEx
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-processthreads-l1-1-0.dll
- SHA256 f8c0711a512059c648e83bef2f5b23119a454f457496e1dfead71d6942298863
- MD5 1641a8027af5a754dd164d6044917014
- SHA1 5577d0be9d5d3874448e9f2c77286870c05f6d1d
- SHA512 dded04a5211fe7762952afe39d51fa3540c0d7025c19468d2b5218f58bdd88043977f9eff99aa33decb6599bb3a4dd2a326cf9fc4fd7f6c4f3d38ef18e77d339
- SSDEEP 384:1Hk1JzBcKcIpWphW8wGyaGECifl/zdbQD:1+cKc1/tzO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e9:79:9a:ed:f0:7f:45:a0:c8:d5:d8:72:bc:17:e9:48:66:79:56:dc:40:31:89:d4:fe:67:86:0b:9a:5b:1f:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-processthreads-l1-1-0.pdb
CreateProcessA
CreateProcessAsUserW
CreateProcessW
CreateRemoteThread
CreateRemoteThreadEx
CreateThread
DeleteProcThreadAttributeList
ExitProcess
ExitThread
FlushProcessWriteBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeProcess
GetExitCodeThread
GetPriorityClass
GetProcessId
GetProcessIdOfThread
GetProcessTimes
GetProcessVersion
GetStartupInfoW
GetThreadId
GetThreadPriority
GetThreadPriorityBoost
InitializeProcThreadAttributeList
OpenProcessToken
OpenThread
OpenThreadToken
ProcessIdToSessionId
QueryProcessAffinityUpdateMode
QueueUserAPC
ResumeThread
SetPriorityClass
SetProcessAffinityUpdateMode
SetProcessShutdownParameters
SetThreadPriority
SetThreadPriorityBoost
SetThreadStackGuarantee
SetThreadToken
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UpdateProcThreadAttribute
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-processthreads-l1-1-1.dll
- SHA256 30a25b56d4778e94f5fa2ac25facfab779dc0ead6d9c2f19e20244b6604c153b
- MD5 16ef841ae26b27e21957173fc22fff30
- SHA1 730d5d6c7b4a16c031a334dd677a76c8342d0f4e
- SHA512 f6b2ec2f8b2028df3ed03953d7c8df9e9e45847948faca1c0acd4177aea9186698f80388bdee4206b160d4b64791686d9577b0402be11a78808b3037d998ccbf
- SSDEEP 192:o/DiDfIeBWphW7WSawTyihVWQ4eW9zGBQRW52fqnaj7zdKT:1DfIeBWphWUwGyXifl/zdK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
36:64:6a:a2:88:c9:c1:e9:d7:df:94:a3:bc:17:1f:82:13:10:74:01:6d:bc:33:e9:fb:14:03:41:bb:10:6c:38
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-processthreads-l1-1-1.pdb
FlushInstructionCache
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThreadStackLimits
GetProcessHandleCount
GetProcessMitigationPolicy
GetThreadContext
GetThreadIdealProcessorEx
GetThreadTimes
IsProcessorFeaturePresent
OpenProcess
SetProcessMitigationPolicy
SetThreadContext
SetThreadIdealProcessorEx
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-profile-l1-1-0.dll
- SHA256 a4cb4009975ce0038c9cf9b230d237f105193f202722094d39c63e49d923bc97
- MD5 c2214603327f41ec82d53ef166da91d6
- SHA1 96069a26ca213b4e5762d4a4257cbf0cf5d71337
- SHA512 830d26552ac2aa52e3c751549203ed9808d2b569a144425030f0cebf0c6a2c7fe18b6cef95d95cec2af5ad92bbf6dc23d272741bfbd2aa4fb7640937a4738dca
- SSDEEP 192:cnaYWphWXWSawTyihVWQ4yWropVwyqnajlAU/j:caYWphW4wGylvlmU/j
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
28:c5:47:ee:23:48:60:3a:37:1e:83:c0:e4:cf:a9:01:16:79:80:5a:67:fc:f0:05:bf:76:98:16:cd:ca:e0:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-profile-l1-1-0.pdb
QueryPerformanceCounter
QueryPerformanceFrequency
Name
.text
Size
512B
Virtual Size
501B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-rtlsupport-l1-1-0.dll
- SHA256 f344fa150e3ecc77387378e017fbb72a5b90cf2c8c451cae90c4eba3f04bfbdd
- MD5 84d7a38d4f0a1f63be32d3d85a84b5d9
- SHA1 d51faa128f6e2b61ee282d05e986579eb9696769
- SHA512 f6375a45458ac9a018c9dbb70e78c67ccb9a7e8a21483a330fc3bbcd95a15576d6ddb795435b71b028dc9717331a63313d450e9699e5c7088e9afa70c5e028b9
- SSDEEP 192:2G9WphWgWSawTyihVWQ4eWHaZGEpeLirKqnaj/H:2G9WphWhwGyR+LIKlzH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
06:7e:c8:27:24:d3:8e:8c:04:fe:c3:9e:ae:ba:54:0c:dd:df:10:91:57:bf:2e:bb:98:f5:bc:7b:5f:3b:3a:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-rtlsupport-l1-1-0.pdb
RtlCaptureContext
RtlCaptureStackBackTrace
RtlUnwind
Name
.text
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-string-l1-1-0.dll
- SHA256 e36f999d1e2bb978274a8dc2d6b7fcdbc04227d51645a0250df8e2bf915b1ebf
- MD5 fc9d5650c0a6992895a7b2b5cf6d39e7
- SHA1 cab181c155bd6b8abb3485304714e2243ec3270a
- SHA512 8d7f2aeb9b01077856e835f5749ae22407389562204331bce54787d519765e0b537ee77efdc8b01e18134313730958f22104601335d7f9e90d0e9062b55de28d
- SSDEEP 192:xGyMvBWphW5WSawTyihVWQ4SWbPquJqnajjqP6G8rgk:xGyMvBWphW+wGyIJlvCz8rgk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f6:49:47:78:af:21:5d:6c:4c:a0:44:79:d8:ab:a8:05:45:eb:6a:b2:00:20:17:d8:08:c3:47:7e:5c:19:42:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-string-l1-1-0.pdb
CompareStringEx
CompareStringOrdinal
CompareStringW
FoldStringW
GetStringTypeExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
Name
.text
Size
1024B
Virtual Size
786B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-synch-l1-1-0.dll
- SHA256 4ef4b7559269a0a826617eb824269eb610bbbc668c0de36cd50cbd7da0e4df85
- MD5 d3805f7ad81f965327a67cf7b1acf853
- SHA1 ffa849800d57097d4c8795d8c2c8f184573a1be8
- SHA512 afdec49739b165450ccec8cf3aa12cdbf946617ef066b92e4ed7f271bf2bb81bf5a635031bf13a8cb300bf5f7d43b61a9fa637281b2ecc1c4d8f54401ed3622f
- SSDEEP 384:2dv3V0dfpkXc0vVaXWphWnwGyE0e3nlx/s:2dv3VqpkXc0vVaWgeb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
70:7e:c7:2d:7d:6d:d0:94:1e:3a:7d:c8:d7:b5:32:1c:de:05:00:c0:57:ee:d3:48:24:d2:9a:a2:22:5a:eb:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-synch-l1-1-0.pdb
AcquireSRWLockExclusive
AcquireSRWLockShared
CancelWaitableTimer
CreateEventA
CreateEventExA
CreateEventExW
CreateEventW
CreateMutexA
CreateMutexExA
CreateMutexExW
CreateMutexW
CreateSemaphoreExW
CreateWaitableTimerExW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
LeaveCriticalSection
OpenEventA
OpenEventW
OpenMutexW
OpenSemaphoreW
OpenWaitableTimerW
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
SetCriticalSectionSpinCount
SetEvent
SetWaitableTimer
SetWaitableTimerEx
SleepEx
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-synch-l1-2-0.dll
- SHA256 2e693984cadb0f5076160d800252017e5089928557cde628caa0966d2b3b8f0d
- MD5 93e94d0e45aeec0c186bc3f74577bdf6
- SHA1 9268a0568a0c296ceb54881f2c581a2549b3aa5c
- SHA512 b4b9162f0548f31533a3c09281447ac3261415659176153fe6dd3f3c4255024eafb808dd7de2a055f3640d0d76c4531ff4ba111d124cd6e8eefe62ad65c2d585
- SSDEEP 192:BY3ZDQtZ3IWphWDKWSawTyihVWQ4SWnr11usUDR0qnajVXj9y:BY3ZDQtZ3IWphWbwGyW11uQlxzc
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9f:70:8c:4f:3e:2a:92:0e:ab:15:62:1e:20:3c:9e:be:f7:f0:c6:cd:c6:ad:91:db:86:44:06:ab:db:40:03:21
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-synch-l1-2-0.pdb
DeleteSynchronizationBarrier
EnterSynchronizationBarrier
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitOnceInitialize
InitializeConditionVariable
InitializeSynchronizationBarrier
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-sysinfo-l1-1-0.dll
- SHA256 234a768483b288a5065986a6b44e3e1d133c4fe61508601e26f2c1c52a6db3fb
- MD5 4025ae33cf64c88aa4d73ff1b74ea515
- SHA1 2ddc1928982fb60c03261e399d9e627a51683938
- SHA512 17ee91236d068ea35f938aafd15f1f710a0fa00f58be29f4232a7faa79c459638623a8a93eb72086f55c948666dd747e26ce3739c3bd81fd8dd029f9a5c93247
- SSDEEP 192:Q7QzKIMFMWphWUWSawTyihVWQ4WWLABOhKEwkqnajVkL2yEHAE:Q8zZWphWNwGy/BOhKtklxtbgE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b0:91:4d:2b:a3:e9:4a:46:9c:f3:b2:5c:58:3d:5e:65:4a:ca:17:00:bf:9c:56:b4:97:fb:7c:cf:d0:e7:a3:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-sysinfo-l1-1-0.pdb
GetComputerNameExA
GetComputerNameExW
GetLocalTime
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTickCount
GetTickCount64
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalMemoryStatusEx
SetLocalTime
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-timezone-l1-1-0.dll
- SHA256 94c1677139cfcd687dcc11b7b9cd94a82aa7ac2084992aa7d9db6a06010609a2
- MD5 1c52f55e2f2affeccc5a070a54e5a68f
- SHA1 e77bf8002dbf8aa1bb70a3336686d7ae6af4d139
- SHA512 c65395073c23171402d6faf50bd3cc8b789256e5284cc4d0c0416c5bb62ec046c21ff2f40dceea89dd0862b92d56e0cd8ada8c73f5b8fb59fc5931eaaab5da3a
- SSDEEP 192:ePWphWOWSawTyihVWQ4uWSkDA0884LfqnajJNyb2n9A:ePWphWTwGy5JllNo29A
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bf:47:78:54:64:14:c0:6e:30:a2:85:74:db:a6:2e:62:30:5f:a9:af:6b:d7:c5:45:74:d9:d4:6f:14:b2:70:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-timezone-l1-1-0.pdb
EnumDynamicTimeZoneInformation
FileTimeToSystemTime
GetDynamicTimeZoneInformation
GetDynamicTimeZoneInformationEffectiveYears
GetTimeZoneInformation
GetTimeZoneInformationForYear
SetDynamicTimeZoneInformation
SetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
SystemTimeToTzSpecificLocalTimeEx
TzSpecificLocalTimeToSystemTime
TzSpecificLocalTimeToSystemTimeEx
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-core-util-l1-1-0.dll
- SHA256 6b38b7cbd1e1c387514f1bc464c0eef74537d059e09a20b3883dad5ba5e19d34
- MD5 e36aa2b1607c38379e6749d106d316db
- SHA1 d47e25f957ecdd7274ff249556a7a6500eeb0bb1
- SHA512 079f4291ab644ddef1bed66984dc4b9ddec735e8dd0eb5a7915e21510d366a7e649a2ef9f3c49077ccfd5fbdff657ff7cc72c9b61e0a543b52eb6b90f12d2cdc
- SSDEEP 192:ZKWphWGmWSawTyihVWQ4eWEVc67lqnajX8QKX8Q:ZKWphWG7wGymolz8D
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
94:67:d0:8d:af:8c:89:27:b9:99:b5:fa:24:55:7d:24:6d:ac:cd:b3:ae:38:c7:ff:39:46:27:54:c0:b1:65:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-util-l1-1-0.pdb
Beep
DecodePointer
DecodeSystemPointer
EncodePointer
EncodeSystemPointer
Name
.text
Size
1024B
Virtual Size
601B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-conio-l1-1-0.dll
- SHA256 22c729fb45b274cde72fbe83078d28d76e94d61914e0087cebb73cefb8e590bd
- MD5 b4489c03753849621a05fdf7a9d6c215
- SHA1 b27fef508549083c38a91fbf2f7eae4996f20bfc
- SHA512 bf1ed673342c226b01bf372beb38f6f6cde582492beb9f0c863f09e8c3d0664d748f2b3a0536e787313af4b5418ba600d031fac41b083ab7b61f319ea68e252d
- SSDEEP 192:aEWphWsWSawTyihVWQ4eWRG6c67lqnajX8QJsCdy:aEWphWVwGyLolz83k
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fd:be:05:ac:14:e1:81:85:79:0c:bf:cc:0d:6a:64:80:ec:0a:a0:40:10:18:3c:d6:4d:5f:30:8c:1c:18:de:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-conio-l1-1-0.pdb
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
_cgets
_cgets_s
_cgetws
_cgetws_s
_cputs
_cputws
_getch
_getch_nolock
_getche
_getche_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_putch
_putch_nolock
_putwch
_putwch_nolock
_ungetch
_ungetch_nolock
_ungetwch
_ungetwch_nolock
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-convert-l1-1-0.dll
- SHA256 5253093eb83612fdfa121dabf3e4aa63a8b24ae74a6d14ea2b59f02c2059df02
- MD5 86687c52e23debedaddd5baf63ed82f4
- SHA1 dfa253dd1f9b4f84a54badd7d42ebd7a9881b451
- SHA512 f3d33a391737f046d2fe6913c7d6da68b077d6249b8d09c70da009d9972e29a619c6b956f52d3ad2d6b0400d4dd63a893229f3d094a8928204c607465a586d0e
- SSDEEP 192:JM0wd8dc9cy1WphWLWSawTyihVWQ4eWSJ6615uE7MqnajcPQ:G0wd8xy1WphWEwGyyyuOMlA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6b:92:4c:3e:61:23:29:21:f5:b9:17:2f:ba:8e:9e:96:e9:2f:ef:18:34:3c:ec:e4:de:f1:08:4b:37:a9:a5:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-convert-l1-1-0.pdb
__toascii
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_ecvt
_ecvt_s
_fcvt
_fcvt_s
_gcvt
_gcvt_s
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_ltoa
_ltoa_s
_ltow
_ltow_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wctomb_l
_wctomb_s_l
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
atof
atoi
atol
atoll
btowc
c16rtomb
c32rtomb
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
strtod
strtof
strtoimax
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
wcrtomb
wcrtomb_s
wcsrtombs
wcsrtombs_s
wcstod
wcstof
wcstoimax
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wctob
wctomb
wctomb_s
wctrans
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-environment-l1-1-0.dll
- SHA256 4c246a9b3c55b0ca1ee1f53a70034c8d0a073876b8b938bcea3e294505414714
- MD5 d0f621b4fd5a2c6613333ff1df29ba65
- SHA1 ca623f7413eebd7724771af1f2cb9e384a3c1ee4
- SHA512 c9bad970ae0f52dcecfcc4a087c48f7e1b0f4dc73432a77898ae22719e5b7b0be0c48b3a879e2e96beefc94cf2b976479ea18ccd0f091bd63ed2694b182a1f98
- SSDEEP 192:a9KNcWphW7WSawTyihVWQ4eW+gS4kOqnaj2NLFmPV:YKNcWphWUwGyilgpw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
77:2b:44:fe:cc:c0:31:bd:b6:19:c8:57:ca:89:4f:09:58:00:b2:a8:97:9b:64:b3:ef:eb:ae:94:b1:2e:a5:ef
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-environment-l1-1-0.pdb
__p__environ
__p__wenviron
_dupenv_s
_putenv
_putenv_s
_searchenv
_searchenv_s
_wdupenv_s
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wputenv
_wputenv_s
_wsearchenv
_wsearchenv_s
getenv
getenv_s
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-filesystem-l1-1-0.dll
- SHA256 2237fe7b80eae43679e2a770291a9a34f6811c320fffcda247794e0972c6f39a
- MD5 12ef188b3d44a114d553902b7e9f3901
- SHA1 e7aa13c21b821969af032eb7e9a60a5fd9b889e7
- SHA512 38ad0445167d00f84149fb1c9758677e591fdf74c5cdd8d405d1aa3f21475f8006d0c7737aafef446d506e5f9a275abf489d49f9c484fd72536046f8c96f3a2a
- SSDEEP 192:yGnWlC0i5C9WphWZWSawTyihVWQ4uWXduQRW52fqnaj7zdCTyRk:tnWm5C9WphWewGy8Qifl/zdCeRk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
59:4b:1a:23:2e:3c:f1:d9:b4:b9:08:9e:43:a7:72:10:03:f0:cb:72:2b:49:c9:be:b3:6d:65:6a:f1:78:1b:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-filesystem-l1-1-0.pdb
_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-heap-l1-1-0.dll
- SHA256 d5f8c30abe8737c1473da4b0a0e17105f7e02787a26d5b56e5d33f6904b81387
- MD5 c0ec87ee5b27bae483814a8dd12fabc2
- SHA1 1375eccef419b27057734a91a7a2e0cb751e80ee
- SHA512 409b826c85727516231bf65f9cd17b278edc81ac7c7a48c40043ad05d0ecf0f8ab871076b7893dcd139e3f44257848ffeed85ad9058b98ac578e0c234cd42306
- SSDEEP 192:raY17aFBRQWphWoWSawTyihVWQ4eWMBjX6ArNc4qnajr7vgq49N:zVWphWZwGyt84lrv3wN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f9:79:73:6c:6e:06:9c:15:f8:da:ab:88:b9:26:42:d3:db:c2:2f:87:30:fb:ed:b0:22:e8:8a:80:09:a6:e8:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-heap-l1-1-0.pdb
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_callnewh
_calloc_base
_expand
_free_base
_get_heap_handle
_heapchk
_heapmin
_heapwalk
_malloc_base
_msize
_query_new_handler
_query_new_mode
_realloc_base
_recalloc
_set_new_mode
calloc
free
malloc
realloc
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-locale-l1-1-0.dll
- SHA256 3679526600fc83b81424caf6e39010fe20a2619519a1f293aae65e1cf93169ea
- MD5 6c7857b8cc69ab0ba8e0ec9eb6a60bf9
- SHA1 62a9400b4ddc439797a46d02493476be6311d642
- SHA512 248622ffcc61a20687bbb6a16771a9ec07a707e67c9eb65663e6dd5f4414d269c739e04c20a35b1619510ded81b8707dc854deada60ca87cb6cff3739ddcca16
- SSDEEP 192:G9vbhWphWqWSawTyihVWQ4yWhPC67lpVwyqnajlAdmh:G9vbhWphW3wGyCC6Xvlm8h
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c7:d7:5b:5f:ad:93:46:6b:0f:c0:0e:2b:70:fe:db:eb:6e:d5:30:d2:3a:5e:ca:5a:06:f5:37:1b:e6:47:03:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-locale-l1-1-0.pdb
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-math-l1-1-0.dll
- SHA256 247b3dc70ca0540ba7a31e66ad765b2273d7253c20db719c0b14fa48420ce545
- MD5 f16cc6ca3fe38a47608c5300a5eeb7f0
- SHA1 ff69bce13fe14973a96f32923fb75f8b3a9b013e
- SHA512 9147681876ef5fa21d2fb4b7d87ecb94a9f2e56dbd677c9bebfebe1b59d4cc18759b4ed61d1f4092358a3315fc0bee6ca92b538174a6b4f82654a85eff742dc0
- SSDEEP 384:wt1MCbM4Oe5grykfIgTmLSWphWMwGy2VlgEBlD:k6gMq5grxfIndDHT5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
40:42:58:29:9f:e0:79:fd:2b:82:2a:f7:0e:80:11:d5:b9:8d:b6:95:a9:71:3e:6e:3e:be:e1:10:21:ba:4f:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-math-l1-1-0.pdb
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_Cbuild
_Cmulcc
_Cmulcr
_FCbuild
_FCmulcc
_FCmulcr
_LCbuild
_LCmulcc
_LCmulcr
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__setusermatherr
_cabs
_chgsign
_chgsignf
_copysign
_copysignf
_d_int
_dclass
_dexp
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_except1
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_finite
_fpclass
_ftol
_hypot
_hypotf
_isnan
_j0
_j1
_jn
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_logb
_nextafter
_scalb
_set_SSE2_enable
_y0
_y1
_yn
acos
acosh
acoshf
acoshl
asin
asinh
asinhf
asinhl
atan
atan2
atanh
atanhf
atanhl
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
cexp
cexpf
cexpl
cimag
cimagf
cimagl
clog
clog10
clog10f
clog10l
clogf
clogl
conj
conjf
conjl
copysign
copysignf
copysignl
cos
cosh
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
erf
erfc
erfcf
erfcl
erff
erfl
exp
exp2
exp2f
exp2l
expm1
expm1f
expm1l
fabs
fdim
fdimf
fdiml
floor
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmin
fminf
fminl
fmod
frexp
hypot
ilogb
ilogbf
ilogbl
ldexp
lgamma
lgammaf
lgammal
llrint
llrintf
llrintl
llround
llroundf
llroundl
log
log10
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
lrint
lrintf
lrintl
lround
lroundf
lroundl
modf
nan
nanf
nanl
nearbyint
nearbyintf
nearbyintl
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
norm
normf
norml
pow
powf
remainder
remainderf
remainderl
remquo
remquof
remquol
rint
rintf
rintl
round
roundf
roundl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
sin
sinh
sqrt
tan
tanh
tgamma
tgammaf
tgammal
trunc
truncf
truncl
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-multibyte-l1-1-0.dll
- SHA256 622246592d9b118ffcf2a30ef619d0a81d921dac5735362050093471d6c9ffea
- MD5 49e08414c8919c5bf316c2c8327bf51b
- SHA1 3283d95843d91ad9ff38be1574fa727c755bedc2
- SHA512 3ae3a4d4a5e8a4e210cd1b954864a148d5e1b2a3e6dd208e1ce5ae0fd31104c789ab4e8fa9fb8cb6ca35f98329a0ae9e610b4f6ad9653b8b03b4a933b1af5ae5
- SSDEEP 384:iSrxLPmIHJI6/CpG3t2G3t4odXLZWphWNwGyfpLIKlz3:iiPmIHJI6iGopL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d9:00:99:76:36:2b:f2:2a:16:db:5e:bc:18:0e:cf:9d:9c:62:17:e2:ba:65:88:4f:95:20:b3:5d:3d:1d:f3:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-multibyte-l1-1-0.pdb
__p__mbcasemap
__p__mbctype
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsdup
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-private-l1-1-0.dll
- SHA256 fb3d921311b54253cb93a1dd0cd8db7ca96463bfe40cccdd3f96d19b58757708
- MD5 71e4937249b1d5394a60371eb3deebb1
- SHA1 0365f5435dd6d0ed1854c1543c55135ccf53acf0
- SHA512 48ced3bab54fbbbe2bd4988a23a53e362503c0df5f4c8e623a4560347fd8b8834685b9e0f287574412342a3dab8db446bc2a96e69705398703672c71ef622407
- SSDEEP 1536:yfolDe5c4bFE2Jy2cvxXWpD9d3334BkZnkPTP1:SolDe5c4bFE2Jy2cvxXWpD9d3334BkZS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
93:13:c0:d1:b3:83:29:80:e1:1b:0b:13:f2:8c:4a:b7:43:0c:f4:04:b0:bc:66:b4:d9:f0:a8:64:36:e5:58:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-private-l1-1-0.pdb
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__intrinsic_abnormal_termination
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_o__CIacos
_o__CIasin
_o__CIatan
_o__CIatan2
_o__CIcos
_o__CIcosh
_o__CIexp
_o__CIfmod
_o__CIlog
_o__CIlog10
_o__CIpow
_o__CIsin
_o__CIsinh
_o__CIsqrt
_o__CItan
_o__CItanh
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__Strftime
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__Wcsftime
_o____lc_codepage_func
_o____lc_collate_cp_func
_o____lc_locale_name_func
_o____mb_cur_max_func
_o___acrt_iob_func
_o___conio_common_vcprintf
_o___conio_common_vcprintf_p
_o___conio_common_vcprintf_s
_o___conio_common_vcscanf
_o___conio_common_vcwprintf
_o___conio_common_vcwprintf_p
_o___conio_common_vcwprintf_s
_o___conio_common_vcwscanf
_o___daylight
_o___dstbias
_o___fpe_flt_rounds
_o___libm_sse2_acos
_o___libm_sse2_acosf
_o___libm_sse2_asin
_o___libm_sse2_asinf
_o___libm_sse2_atan
_o___libm_sse2_atan2
_o___libm_sse2_atanf
_o___libm_sse2_cos
_o___libm_sse2_cosf
_o___libm_sse2_exp
_o___libm_sse2_expf
_o___libm_sse2_log
_o___libm_sse2_log10
_o___libm_sse2_log10f
_o___libm_sse2_logf
_o___libm_sse2_pow
_o___libm_sse2_powf
_o___libm_sse2_sin
_o___libm_sse2_sinf
_o___libm_sse2_tan
_o___libm_sse2_tanf
_o___p___argc
_o___p___argv
_o___p___wargv
_o___p__acmdln
_o___p__commode
_o___p__environ
_o___p__fmode
_o___p__mbcasemap
_o___p__mbctype
_o___p__pgmptr
_o___p__wcmdln
_o___p__wenviron
_o___p__wpgmptr
_o___pctype_func
_o___pwctype_func
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___std_type_info_name
_o___stdio_common_vfprintf
_o___stdio_common_vfprintf_p
_o___stdio_common_vfprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfwprintf
_o___stdio_common_vfwprintf_p
_o___stdio_common_vfwprintf_s
_o___stdio_common_vfwscanf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsprintf_p
_o___stdio_common_vsprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vswprintf
_o___stdio_common_vswprintf_p
_o___stdio_common_vswprintf_s
_o___stdio_common_vswscanf
_o___timezone
_o___tzname
_o___wcserror
_o__access
_o__access_s
_o__aligned_free
_o__aligned_malloc
_o__aligned_msize
_o__aligned_offset_malloc
_o__aligned_offset_realloc
_o__aligned_offset_recalloc
_o__aligned_realloc
_o__aligned_recalloc
_o__atodbl
_o__atodbl_l
_o__atof_l
_o__atoflt
_o__atoflt_l
_o__atoi64
_o__atoi64_l
_o__atoi_l
_o__atol_l
_o__atoldbl
_o__atoldbl_l
_o__atoll_l
_o__beep
_o__beginthread
_o__beginthreadex
_o__cabs
_o__callnewh
_o__calloc_base
_o__cexit
_o__cgets
_o__cgets_s
_o__cgetws
_o__cgetws_s
_o__chdir
_o__chdrive
_o__chmod
_o__chsize
_o__chsize_s
_o__close
_o__commit
_o__configthreadlocale
_o__configure_narrow_argv
_o__configure_wide_argv
_o__controlfp_s
_o__cputs
_o__cputws
_o__creat
_o__create_locale
_o__crt_atexit
_o__ctime32_s
_o__ctime64_s
_o__cwait
_o__d_int
_o__dclass
_o__difftime32
_o__difftime64
_o__dlog
_o__dnorm
_o__dpcomp
_o__dpoly
_o__dscale
_o__dsign
_o__dsin
_o__dtest
_o__dunscale
_o__dup
_o__dup2
_o__dupenv_s
_o__ecvt
_o__ecvt_s
_o__endthread
_o__endthreadex
_o__eof
_o__errno
_o__except1
_o__execute_onexit_table
_o__execv
_o__execve
_o__execvp
_o__execvpe
_o__exit
_o__expand
_o__fclose_nolock
_o__fcloseall
_o__fcvt
_o__fcvt_s
_o__fd_int
_o__fdclass
_o__fdexp
_o__fdlog
_o__fdopen
_o__fdpcomp
_o__fdpoly
_o__fdscale
_o__fdsign
_o__fdsin
_o__fflush_nolock
_o__fgetc_nolock
_o__fgetchar
_o__fgetwc_nolock
_o__fgetwchar
_o__filelength
_o__filelengthi64
_o__fileno
_o__findclose
_o__findfirst32
_o__findfirst32i64
_o__findfirst64
_o__findfirst64i32
_o__findnext32
_o__findnext32i64
_o__findnext64
_o__findnext64i32
_o__flushall
_o__fpclass
_o__fputc_nolock
_o__fputchar
_o__fputwc_nolock
_o__fputwchar
_o__fread_nolock
_o__fread_nolock_s
_o__free_base
_o__free_locale
_o__fseek_nolock
_o__fseeki64
_o__fseeki64_nolock
_o__fsopen
_o__fstat32
_o__fstat32i64
_o__fstat64
_o__fstat64i32
_o__ftell_nolock
_o__ftelli64
_o__ftelli64_nolock
_o__ftime32
_o__ftime32_s
_o__ftime64
_o__ftime64_s
_o__fullpath
_o__futime32
_o__futime64
_o__fwrite_nolock
_o__gcvt
_o__gcvt_s
_o__get_daylight
_o__get_doserrno
_o__get_dstbias
_o__get_errno
_o__get_fmode
_o__get_heap_handle
_o__get_initial_narrow_environment
_o__get_initial_wide_environment
_o__get_invalid_parameter_handler
_o__get_narrow_winmain_command_line
_o__get_osfhandle
_o__get_pgmptr
_o__get_stream_buffer_pointers
_o__get_terminate
_o__get_thread_local_invalid_parameter_handler
_o__get_timezone
_o__get_tzname
_o__get_wide_winmain_command_line
_o__get_wpgmptr
_o__getc_nolock
_o__getch
_o__getch_nolock
_o__getche
_o__getche_nolock
_o__getcwd
_o__getdcwd
_o__getdiskfree
_o__getdllprocaddr
_o__getdrive
_o__getdrives
_o__getmbcp
_o__getsystime
_o__getw
_o__getwc_nolock
_o__getwch
_o__getwch_nolock
_o__getwche
_o__getwche_nolock
_o__getws
_o__getws_s
_o__gmtime32
_o__gmtime32_s
_o__gmtime64
_o__gmtime64_s
_o__heapchk
_o__heapmin
_o__hypot
_o__hypotf
_o__i64toa
_o__i64toa_s
_o__i64tow
_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__isatty
_o__isctype
_o__isctype_l
_o__isleadbyte_l
_o__ismbbalnum
_o__ismbbalnum_l
_o__ismbbalpha
_o__ismbbalpha_l
_o__ismbbblank
_o__ismbbblank_l
_o__ismbbgraph
_o__ismbbgraph_l
_o__ismbbkalnum
_o__ismbbkalnum_l
_o__ismbbkana
_o__ismbbkana_l
_o__ismbbkprint
_o__ismbbkprint_l
_o__ismbbkpunct
_o__ismbbkpunct_l
_o__ismbblead
_o__ismbblead_l
_o__ismbbprint
_o__ismbbprint_l
_o__ismbbpunct
_o__ismbbpunct_l
_o__ismbbtrail
_o__ismbbtrail_l
_o__ismbcalnum
_o__ismbcalnum_l
_o__ismbcalpha
_o__ismbcalpha_l
_o__ismbcblank
_o__ismbcblank_l
_o__ismbcdigit
_o__ismbcdigit_l
_o__ismbcgraph
_o__ismbcgraph_l
_o__ismbchira
_o__ismbchira_l
_o__ismbckata
_o__ismbckata_l
_o__ismbcl0
_o__ismbcl0_l
_o__ismbcl1
_o__ismbcl1_l
_o__ismbcl2
_o__ismbcl2_l
_o__ismbclegal
_o__ismbclegal_l
_o__ismbclower
_o__ismbclower_l
_o__ismbcprint
_o__ismbcprint_l
_o__ismbcpunct
_o__ismbcpunct_l
_o__ismbcspace
_o__ismbcspace_l
_o__ismbcsymbol
_o__ismbcsymbol_l
_o__ismbcupper
_o__ismbcupper_l
_o__ismbslead
_o__ismbslead_l
_o__ismbstrail
_o__ismbstrail_l
_o__iswctype_l
_o__itoa
_o__itoa_s
_o__itow
_o__itow_s
_o__j0
_o__j1
_o__jn
_o__kbhit
_o__ld_int
_o__ldclass
_o__ldexp
_o__ldlog
_o__ldpcomp
_o__ldpoly
_o__ldscale
_o__ldsign
_o__ldsin
_o__ldtest
_o__ldunscale
_o__lfind
_o__lfind_s
_o__libm_sse2_acos_precise
_o__libm_sse2_asin_precise
_o__libm_sse2_atan_precise
_o__libm_sse2_cos_precise
_o__libm_sse2_exp_precise
_o__libm_sse2_log10_precise
_o__libm_sse2_log_precise
_o__libm_sse2_pow_precise
_o__libm_sse2_sin_precise
_o__libm_sse2_sqrt_precise
_o__libm_sse2_tan_precise
_o__loaddll
_o__localtime32
_o__localtime32_s
_o__localtime64
_o__localtime64_s
_o__lock_file
_o__locking
_o__logb
_o__lsearch
_o__lsearch_s
_o__lseek
_o__lseeki64
_o__ltoa
_o__ltoa_s
_o__ltow
_o__ltow_s
_o__makepath
_o__makepath_s
_o__malloc_base
_o__mbbtombc
_o__mbbtombc_l
_o__mbbtype
_o__mbbtype_l
_o__mbccpy
_o__mbccpy_l
_o__mbccpy_s
_o__mbccpy_s_l
_o__mbcjistojms
_o__mbcjistojms_l
_o__mbcjmstojis
_o__mbcjmstojis_l
_o__mbclen
_o__mbclen_l
_o__mbctohira
_o__mbctohira_l
_o__mbctokata
_o__mbctokata_l
_o__mbctolower
_o__mbctolower_l
_o__mbctombb
_o__mbctombb_l
_o__mbctoupper
_o__mbctoupper_l
_o__mblen_l
_o__mbsbtype
_o__mbsbtype_l
_o__mbscat_s
_o__mbscat_s_l
_o__mbschr
_o__mbschr_l
_o__mbscmp
_o__mbscmp_l
_o__mbscoll
_o__mbscoll_l
_o__mbscpy_s
_o__mbscpy_s_l
_o__mbscspn
_o__mbscspn_l
_o__mbsdec
_o__mbsdec_l
_o__mbsicmp
_o__mbsicmp_l
_o__mbsicoll
_o__mbsicoll_l
_o__mbsinc
_o__mbsinc_l
_o__mbslen
_o__mbslen_l
_o__mbslwr
_o__mbslwr_l
_o__mbslwr_s
_o__mbslwr_s_l
_o__mbsnbcat
_o__mbsnbcat_l
_o__mbsnbcat_s
_o__mbsnbcat_s_l
_o__mbsnbcmp
_o__mbsnbcmp_l
_o__mbsnbcnt
_o__mbsnbcnt_l
_o__mbsnbcoll
_o__mbsnbcoll_l
_o__mbsnbcpy
_o__mbsnbcpy_l
_o__mbsnbcpy_s
_o__mbsnbcpy_s_l
_o__mbsnbicmp
_o__mbsnbicmp_l
_o__mbsnbicoll
_o__mbsnbicoll_l
_o__mbsnbset
_o__mbsnbset_l
_o__mbsnbset_s
_o__mbsnbset_s_l
_o__mbsncat
_o__mbsncat_l
_o__mbsncat_s
_o__mbsncat_s_l
_o__mbsnccnt
_o__mbsnccnt_l
_o__mbsncmp
_o__mbsncmp_l
_o__mbsncoll
_o__mbsncoll_l
_o__mbsncpy
_o__mbsncpy_l
_o__mbsncpy_s
_o__mbsncpy_s_l
_o__mbsnextc
_o__mbsnextc_l
_o__mbsnicmp
_o__mbsnicmp_l
_o__mbsnicoll
_o__mbsnicoll_l
_o__mbsninc
_o__mbsninc_l
_o__mbsnlen
_o__mbsnlen_l
_o__mbsnset
_o__mbsnset_l
_o__mbsnset_s
_o__mbsnset_s_l
_o__mbspbrk
_o__mbspbrk_l
_o__mbsrchr
_o__mbsrchr_l
_o__mbsrev
_o__mbsrev_l
_o__mbsset
_o__mbsset_l
_o__mbsset_s
_o__mbsset_s_l
_o__mbsspn
_o__mbsspn_l
_o__mbsspnp
_o__mbsspnp_l
_o__mbsstr
_o__mbsstr_l
_o__mbstok
_o__mbstok_l
_o__mbstok_s
_o__mbstok_s_l
_o__mbstowcs_l
_o__mbstowcs_s_l
_o__mbstrlen
_o__mbstrlen_l
_o__mbstrnlen
_o__mbstrnlen_l
_o__mbsupr
_o__mbsupr_l
_o__mbsupr_s
_o__mbsupr_s_l
_o__mbtowc_l
_o__memicmp
_o__memicmp_l
_o__mkdir
_o__mkgmtime32
_o__mkgmtime64
_o__mktemp
_o__mktemp_s
_o__mktime32
_o__mktime64
_o__msize
_o__nextafter
_o__open_osfhandle
_o__pclose
_o__pipe
_o__popen
_o__purecall
_o__putc_nolock
_o__putch
_o__putch_nolock
_o__putenv
_o__putenv_s
_o__putw
_o__putwc_nolock
_o__putwch
_o__putwch_nolock
_o__putws
_o__read
_o__realloc_base
_o__recalloc
_o__register_onexit_function
_o__resetstkoflw
_o__rmdir
_o__rmtmp
_o__scalb
_o__searchenv
_o__searchenv_s
_o__seh_filter_dll
_o__seh_filter_exe
_o__set_abort_behavior
_o__set_app_type
_o__set_doserrno
_o__set_errno
_o__set_fmode
_o__set_invalid_parameter_handler
_o__set_new_handler
_o__set_new_mode
_o__set_thread_local_invalid_parameter_handler
_o__seterrormode
_o__setmbcp
_o__setmode
_o__setsystime
_o__sleep
_o__sopen
_o__sopen_dispatch
_o__sopen_s
_o__spawnv
_o__spawnve
_o__spawnvp
_o__spawnvpe
_o__splitpath
_o__splitpath_s
_o__stat32
_o__stat32i64
_o__stat64
_o__stat64i32
_o__strcoll_l
_o__strdate
_o__strdate_s
_o__strdup
_o__strerror
_o__strerror_s
_o__strftime_l
_o__stricmp
_o__stricmp_l
_o__stricoll
_o__stricoll_l
_o__strlwr
_o__strlwr_l
_o__strlwr_s
_o__strlwr_s_l
_o__strncoll
_o__strncoll_l
_o__strnicmp
_o__strnicmp_l
_o__strnicoll
_o__strnicoll_l
_o__strnset_s
_o__strset_s
_o__strtime
_o__strtime_s
_o__strtod_l
_o__strtof_l
_o__strtoi64
_o__strtoi64_l
_o__strtol_l
_o__strtold_l
_o__strtoll_l
_o__strtoui64
_o__strtoui64_l
_o__strtoul_l
_o__strtoull_l
_o__strupr
_o__strupr_l
_o__strupr_s
_o__strupr_s_l
_o__strxfrm_l
_o__swab
_o__tell
_o__telli64
_o__timespec32_get
_o__timespec64_get
_o__tolower
_o__tolower_l
_o__toupper
_o__toupper_l
_o__towlower_l
_o__towupper_l
_o__tzset
_o__ui64toa
_o__ui64toa_s
_o__ui64tow
_o__ui64tow_s
_o__ultoa
_o__ultoa_s
_o__ultow
_o__ultow_s
_o__umask
_o__umask_s
_o__ungetc_nolock
_o__ungetch
_o__ungetch_nolock
_o__ungetwc_nolock
_o__ungetwch
_o__ungetwch_nolock
_o__unlink
_o__unloaddll
_o__unlock_file
_o__utime32
_o__utime64
_o__waccess
_o__waccess_s
_o__wasctime
_o__wasctime_s
_o__wchdir
_o__wchmod
_o__wcreat
_o__wcreate_locale
_o__wcscoll_l
_o__wcsdup
_o__wcserror
_o__wcserror_s
_o__wcsftime_l
_o__wcsicmp
_o__wcsicmp_l
_o__wcsicoll
_o__wcsicoll_l
_o__wcslwr
_o__wcslwr_l
_o__wcslwr_s
_o__wcslwr_s_l
_o__wcsncoll
_o__wcsncoll_l
_o__wcsnicmp
_o__wcsnicmp_l
_o__wcsnicoll
_o__wcsnicoll_l
_o__wcsnset
_o__wcsnset_s
_o__wcsset
_o__wcsset_s
_o__wcstod_l
_o__wcstof_l
_o__wcstoi64
_o__wcstoi64_l
_o__wcstol_l
_o__wcstold_l
_o__wcstoll_l
_o__wcstombs_l
_o__wcstombs_s_l
_o__wcstoui64
_o__wcstoui64_l
_o__wcstoul_l
_o__wcstoull_l
_o__wcsupr
_o__wcsupr_l
_o__wcsupr_s
_o__wcsupr_s_l
_o__wcsxfrm_l
_o__wctime32
_o__wctime32_s
_o__wctime64
_o__wctime64_s
_o__wctomb_l
_o__wctomb_s_l
_o__wdupenv_s
_o__wexecv
_o__wexecve
_o__wexecvp
_o__wexecvpe
_o__wfdopen
_o__wfindfirst32
_o__wfindfirst32i64
_o__wfindfirst64
_o__wfindfirst64i32
_o__wfindnext32
_o__wfindnext32i64
_o__wfindnext64
_o__wfindnext64i32
_o__wfopen
_o__wfopen_s
_o__wfreopen
_o__wfreopen_s
_o__wfsopen
_o__wfullpath
_o__wgetcwd
_o__wgetdcwd
_o__wgetenv
_o__wgetenv_s
_o__wmakepath
_o__wmakepath_s
_o__wmkdir
_o__wmktemp
_o__wmktemp_s
_o__wperror
_o__wpopen
_o__wputenv
_o__wputenv_s
_o__wremove
_o__wrename
_o__write
_o__wrmdir
_o__wsearchenv
_o__wsearchenv_s
_o__wsetlocale
_o__wsopen_dispatch
_o__wsopen_s
_o__wspawnv
_o__wspawnve
_o__wspawnvp
_o__wspawnvpe
_o__wsplitpath
_o__wsplitpath_s
_o__wstat32
_o__wstat32i64
_o__wstat64
_o__wstat64i32
_o__wstrdate
_o__wstrdate_s
_o__wstrtime
_o__wstrtime_s
_o__wsystem
_o__wtmpnam_s
_o__wtof
_o__wtof_l
_o__wtoi
_o__wtoi64
_o__wtoi64_l
_o__wtoi_l
_o__wtol
_o__wtol_l
_o__wtoll
_o__wtoll_l
_o__wunlink
_o__wutime32
_o__wutime64
_o__y0
_o__y1
_o__yn
_o_abort
_o_acos
_o_acosh
_o_acoshf
_o_acoshl
_o_asctime
_o_asctime_s
_o_asin
_o_asinh
_o_asinhf
_o_asinhl
_o_atan
_o_atan2
_o_atanh
_o_atanhf
_o_atanhl
_o_atof
_o_atoi
_o_atol
_o_atoll
_o_bsearch
_o_bsearch_s
_o_btowc
_o_calloc
_o_cbrt
_o_cbrtf
_o_ceil
_o_clearerr
_o_clearerr_s
_o_cos
_o_cosh
_o_erf
_o_erfc
_o_erfcf
_o_erfcl
_o_erff
_o_erfl
_o_exit
_o_exp
_o_exp2
_o_exp2f
_o_exp2l
_o_fabs
_o_fclose
_o_feof
_o_ferror
_o_fflush
_o_fgetc
_o_fgetpos
_o_fgets
_o_fgetwc
_o_fgetws
_o_floor
_o_fma
_o_fmaf
_o_fmal
_o_fmod
_o_fopen
_o_fopen_s
_o_fputc
_o_fputs
_o_fputwc
_o_fputws
_o_fread
_o_fread_s
_o_free
_o_freopen
_o_freopen_s
_o_frexp
_o_fseek
_o_fsetpos
_o_ftell
_o_fwrite
_o_getc
_o_getchar
_o_getenv
_o_getenv_s
_o_gets
_o_gets_s
_o_getwc
_o_getwchar
_o_hypot
_o_is_wctype
_o_isalnum
_o_isalpha
_o_isblank
_o_iscntrl
_o_isdigit
_o_isgraph
_o_isleadbyte
_o_islower
_o_isprint
_o_ispunct
_o_isspace
_o_isupper
_o_iswalnum
_o_iswalpha
_o_iswascii
_o_iswblank
_o_iswcntrl
_o_iswctype
_o_iswdigit
_o_iswgraph
_o_iswlower
_o_iswprint
_o_iswpunct
_o_iswspace
_o_iswupper
_o_iswxdigit
_o_isxdigit
_o_ldexp
_o_lgamma
_o_lgammaf
_o_lgammal
_o_llrint
_o_llrintf
_o_llrintl
_o_llround
_o_llroundf
_o_llroundl
_o_localeconv
_o_log
_o_log10
_o_log1p
_o_log1pf
_o_log1pl
_o_log2
_o_log2f
_o_log2l
_o_logb
_o_logbf
_o_logbl
_o_lrint
_o_lrintf
_o_lrintl
_o_lround
_o_lroundf
_o_lroundl
_o_malloc
_o_mblen
_o_mbrlen
_o_mbrtoc16
_o_mbrtoc32
_o_mbrtowc
_o_mbsrtowcs
_o_mbsrtowcs_s
_o_mbstowcs
_o_mbstowcs_s
_o_mbtowc
_o_memcpy_s
_o_memset
_o_modf
_o_nan
_o_nanf
_o_nanl
_o_nearbyint
_o_nearbyintf
_o_nearbyintl
_o_nextafter
_o_nextafterf
_o_nextafterl
_o_nexttoward
_o_nexttowardf
_o_nexttowardl
_o_pow
_o_powf
_o_putc
_o_putchar
_o_puts
_o_putwc
_o_putwchar
_o_qsort
_o_qsort_s
_o_raise
_o_rand
_o_rand_s
_o_realloc
_o_remainder
_o_remainderf
_o_remainderl
_o_remove
_o_remquo
_o_remquof
_o_remquol
_o_rename
_o_rewind
_o_rint
_o_rintf
_o_rintl
_o_round
_o_roundf
_o_roundl
_o_scalbln
_o_scalblnf
_o_scalblnl
_o_scalbn
_o_scalbnf
_o_scalbnl
_o_set_terminate
_o_setbuf
_o_setlocale
_o_setvbuf
_o_sin
_o_sinh
_o_sqrt
_o_srand
_o_strcat_s
_o_strcoll
_o_strcpy_s
_o_strerror
_o_strerror_s
_o_strftime
_o_strncat_s
_o_strncpy_s
_o_strtod
_o_strtof
_o_strtok
_o_strtok_s
_o_strtol
_o_strtold
_o_strtoll
_o_strtoul
_o_strtoull
_o_system
_o_tan
_o_tanh
_o_terminate
_o_tgamma
_o_tgammaf
_o_tgammal
_o_tmpfile_s
_o_tmpnam_s
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_ungetc
_o_ungetwc
_o_wcrtomb
_o_wcrtomb_s
_o_wcscat_s
_o_wcscoll
_o_wcscpy
_o_wcscpy_s
_o_wcsftime
_o_wcsncat_s
_o_wcsncpy_s
_o_wcsrtombs
_o_wcsrtombs_s
_o_wcstod
_o_wcstof
_o_wcstok
_o_wcstok_s
_o_wcstol
_o_wcstold
_o_wcstoll
_o_wcstombs
_o_wcstombs_s
_o_wcstoul
_o_wcstoull
_o_wctob
_o_wctomb
_o_wctomb_s
_o_wmemcpy_s
_o_wmemmove_s
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Name
.text
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-process-l1-1-0.dll
- SHA256 0acc16ddaf549de0850e50c1a9f68cdf2e2d17789cb37a1d466373193e8f6a6a
- MD5 d52c7926d68a33cf1ba357af450f5c52
- SHA1 274520849dc07123e53406736b69f10dad265503
- SHA512 890b8d19dcc83325471e6fe063ee9f148399c5a4975248600305ca3ffd6fe2567ddc3dfdf401a7e6b181dbb44e02fcc272c33a283ebbebb10d1cb7e6da5c5241
- SSDEEP 192:Fonqjd71WphWjWSawTyihVWQ4eW7e5qAAqnaj/I4R:Fon8WphWMwGyOlDd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e3:f9:86:8f:2e:4b:fc:bb:3f:06:f4:80:db:7a:7e:06:34:32:5b:89:49:81:a2:b2:34:b5:9f:9b:da:80:50:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-process-l1-1-0.pdb
_beep
_cwait
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_loaddll
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_unloaddll
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-runtime-l1-1-0.dll
- SHA256 4adff24cfea9d01a4b0feb1616b601123aae66f937189191a3ea85b964797b91
- MD5 aa4ecf393c106e9687b7bb8ab91bb431
- SHA1 3a726a8a830c12b30135cbe69b597dd1e358dee6
- SHA512 3b7c087e30c6bbb406f75bf15b8fe72a96b7e3e5f242f4847efefd95c0633c86523221204de34ff1b699867ff6efea0d235727970a443afbb71829c28249d6e0
- SSDEEP 192:0JB0fhrpIhhf4AN5/ji7WphWb1WSawTyihVWQ4eWDRSDN3pPqs7IwdY+kqnajHa4:00hrKYWphWbywGymozIwS+klTx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7c:b5:64:9b:5b:21:1a:c0:89:ed:fe:d3:2d:e0:c4:ef:1f:db:b3:39:85:0e:e5:c8:4e:a4:b7:52:fd:f6:f7:2f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-runtime-l1-1-0.pdb
_Exit
__control87_2
__doserrno
__fpe_flt_rounds
__fpecode
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__pgmptr
__p__wcmdln
__p__wpgmptr
__pxcptinfoptrs
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__wcserror
__wcserror_s
_assert
_beginthread
_beginthreadex
_c_exit
_cexit
_clearfp
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_crt_debugger_hook
_endthread
_endthreadex
_errno
_execute_onexit_table
_exit
_fpieee_flt
_fpreset
_get_doserrno
_get_errno
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_pgmptr
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_wide_winmain_command_line
_get_wpgmptr
_getdllprocaddr
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_query_app_type
_register_onexit_function
_register_thread_local_exe_atexit_callback
_resetstkoflw
_seh_filter_dll
_seh_filter_exe
_set_abort_behavior
_set_app_type
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_invalid_parameter_handler
_set_new_handler
_set_thread_local_invalid_parameter_handler
_seterrormode
_sleep
_statusfp
_statusfp2
_strerror
_strerror_s
_wassert
_wcserror
_wcserror_s
_wperror
_wsystem
abort
exit
feclearexcept
fegetenv
fegetexceptflag
fegetround
feholdexcept
fesetenv
fesetexceptflag
fesetround
fetestexcept
perror
quick_exit
raise
set_terminate
signal
strerror
strerror_s
system
terminate
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-stdio-l1-1-0.dll
- SHA256 38b98b4e2f41867da273a37c9224a4a111974cc68f7daba4560bc2dd9e404b39
- MD5 004a1a453191f514d764107a0eaa5c95
- SHA1 1f4a82d4239691c74bda12feb4dbe427703ee61a
- SHA512 ef50341144632fca0dc680e0c03b4548a66571e10dced82e291f6b079e084ed4e8f14757682943a8824080230757259f8bfe91c37e3309570486320fa3182973
- SSDEEP 192:rpPLNPjFuWYFxEpah7WphWJWSawTyihVWQ4eWlSws0884LfqnajJNRE:r19OFVh7WphWuwGyE0JllNRE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2c:17:d4:c8:a3:65:08:65:89:ef:4b:c3:72:51:2d:f7:83:2e:59:05:02:ff:ea:dd:e6:13:e2:a6:4a:2c:fe:34
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-stdio-l1-1-0.pdb
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
_chsize
_chsize_s
_close
_commit
_creat
_dup
_dup2
_eof
_fclose_nolock
_fcloseall
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_flushall
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_ftell_nolock
_ftelli64
_ftelli64_nolock
_fwrite_nolock
_get_fmode
_get_osfhandle
_get_printf_count_output
_get_stream_buffer_pointers
_getc_nolock
_getcwd
_getdcwd
_getmaxstdio
_getw
_getwc_nolock
_getws
_getws_s
_isatty
_kbhit
_locking
_lseek
_lseeki64
_mktemp
_mktemp_s
_open
_open_osfhandle
_pclose
_pipe
_popen
_putc_nolock
_putw
_putwc_nolock
_putws
_read
_rmtmp
_set_fmode
_set_printf_count_output
_setmaxstdio
_setmode
_sopen
_sopen_dispatch
_sopen_s
_tell
_telli64
_tempnam
_ungetc_nolock
_ungetwc_nolock
_wcreat
_wfdopen
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wmktemp
_wmktemp_s
_wopen
_wpopen
_write
_wsopen
_wsopen_dispatch
_wsopen_s
_wtempnam
_wtmpnam
_wtmpnam_s
clearerr
clearerr_s
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
fopen
fopen_s
fputc
fputs
fputwc
fputws
fread
fread_s
freopen
freopen_s
fseek
fsetpos
ftell
fwrite
getc
getchar
gets
gets_s
getwc
getwchar
putc
putchar
puts
putwc
putwchar
rewind
setbuf
setvbuf
tmpfile
tmpfile_s
tmpnam
tmpnam_s
ungetc
ungetwc
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-string-l1-1-0.dll
- SHA256 6385565a417feb3cf7165244826479d2ee12215eee930390b3ad28ee3608af12
- MD5 146ae739f3acde4e04f992e1f6dc26f2
- SHA1 9d0a36bcefcb06bae0284482c9f207799409e93c
- SHA512 05e06f644c7694dd530dcea20474b5cfc4341e267fa05e90db2bc700a5e2e39f957005c7c75c8921d924e602974e20944e9bf3ef48dc82fafe5645cf5b3076e6
- SSDEEP 384:PFvU4x0C5yguNvZ5VQgx3SbwA7yMVIkFGl3WphWwFwGyOnk9flx6BGM:55yguNvZ5VQgx3SbwA71IkFxFFMyGM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d8:b4:95:02:bc:aa:57:f8:a4:cd:f8:bc:13:ed:d4:8f:f6:9b:71:d3:d7:f1:2d:dc:30:88:85:c0:b3:62:45:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-string-l1-1-0.pdb
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__strncnt
__wcsncnt
_isalnum_l
_isalpha_l
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_memccpy
_memicmp
_memicmp_l
_strcoll_l
_strdup
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsdup
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctype
is_wctype
isalnum
isalpha
isblank
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswblank
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
mblen
mbrlen
memcpy_s
memmove_s
memset
strcat
strcat_s
strcmp
strcoll
strcpy
strcpy_s
strcspn
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strspn
strtok
strtok_s
strxfrm
tolower
toupper
towctrans
towlower
towupper
wcscat
wcscat_s
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsspn
wcstok
wcstok_s
wcsxfrm
wctype
wmemcpy_s
wmemmove_s
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-time-l1-1-0.dll
- SHA256 15e214446a836735fba73b2b647feac76fb6b82c307da67fed742fba96f9ce00
- MD5 d39831f59fc93eb7dfa18bd5c371a2ee
- SHA1 a431cd881ad4ab1cc8aa1f2bfbbe82d0ea09b7e3
- SHA512 51f1ae8d9cb9593500cf9639daa99583c9e1e8589a15c9a540cd224a7384489d7142cc338cab0c7eb8e6dbc2545f2f323b4561cec2d28e627e1663886259a3a3
- SSDEEP 192:gy5NDSWphWXWSawTyihVWQ4eWD8jo5M8xOSqnaj3yo:gUEWphW4wGyTBCTluo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8c:d5:c5:6b:27:c7:df:92:f7:98:2d:22:a7:c3:df:90:0b:d9:46:00:f1:4a:47:4b:2e:c6:c5:0a:48:4a:50:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-time-l1-1-0.pdb
_Getdays
_Getmonths
_Gettnames
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__daylight
__dstbias
__timezone
__tzname
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_difftime32
_difftime64
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_futime32
_futime64
_get_daylight
_get_dstbias
_get_timezone
_get_tzname
_getsystime
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_mkgmtime32
_mkgmtime64
_mktime32
_mktime64
_setsystime
_strdate
_strdate_s
_strftime_l
_strtime
_strtime_s
_time32
_time64
_timespec32_get
_timespec64_get
_tzset
_utime32
_utime64
_wasctime
_wasctime_s
_wcsftime_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wutime32
_wutime64
asctime
asctime_s
clock
strftime
wcsftime
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/api-ms-win-crt-utility-l1-1-0.dll
- SHA256 ec1c5e3c9dd3a818112b3c2920af5bc558b7ec3bcbca432e945eb712d4a0d85b
- MD5 013140c067efb346386c9aa47fac6fb7
- SHA1 d182af7e337b552b70c692a255660347a2b17a34
- SHA512 57897b29553b145634d20048f13795fffa85e48d2b3086889abf765fa9449f130b7171eb593bb995a0eb25384b349a1d6cecc1e3260506681fec7f5575e2ac46
- SSDEEP 192:/mXI6fHQduHWphW0WSawTyihVWQ4uWS+GB5M8xOSqnaj3yUvB:/+fxWphWtwGy10CTluU5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b0:d0:5b:32:c8:33:6d:e4:a2:79:8e:08:8f:13:c3:df:29:f8:a4:96:3f:ff:4d:22:df:57:19:6a:ec:f3:d4:c9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-utility-l1-1-0.pdb
_abs64
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_lfind
_lfind_s
_lrotl
_lrotr
_lsearch
_lsearch_s
_rotl
_rotl64
_rotr
_rotr64
_swab
abs
bsearch
bsearch_s
div
imaxabs
imaxdiv
labs
ldiv
llabs
lldiv
qsort
qsort_s
rand
rand_s
srand
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/clrcompression.dll
- IMPHASH 8155ff71c61cc7fd2548f59565fc151c
- SHA256 2b1e5be67bb442fe19f3a865b1396706763a792dcec039a6e1a596b346109815
- MD5 edc1bd6f1fe14b421cddf528cbba0f9f
- SHA1 e0f80eafaecd3db89ff6b6b3587852c5938f24d7
- SHA512 e1a840d7e18b01ab9a806ac0b7f7ccf8559570fef99cc91be6f850ea31d4f31496586f4fa9e97e59ba6aa271ef827969a0205b778126f0b0c28a9b6099e1d840
- SSDEEP 12288:MDjJ2aGk2+Ak2QbsyPVxSOjs8+AIStF16ftTNMqAHhlyHMD8UXTw05nmZfRggoH:MDjJ2aGk2+Ak2LOIPdS2TWqA0TfAmZfK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
10:db:28:cd:03:5e:a8:c6:e3:f8:70:7b:43:ce:4c:ee:14:0b:5e:8d:46:19:9a:33:3d:d9:2d:1c:76:07:31:80
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
247136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\native\net5.0-Windows_NT-Release-x86\clrcompression\Release\clrcompression.pdb
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-math-l1-1-0
log2
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_execute_onexit_table
_cexit
_configure_narrow_argv
exit
abort
_initialize_narrow_environment
_seh_filter_dll
_initterm
_initterm_e
terminate
api-ms-win-crt-string-l1-1-0
wcsncmp
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetParameter
BrotliDecoderTakeOutput
BrotliDecoderVersion
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderHasMoreOutput
BrotliEncoderIsFinished
BrotliEncoderMaxCompressedSize
BrotliEncoderSetParameter
BrotliEncoderTakeOutput
BrotliEncoderVersion
BrotliGetDictionary
BrotliSetDictionaryData
CompressionNative_Crc32
CompressionNative_Deflate
CompressionNative_DeflateEnd
CompressionNative_DeflateInit2_
CompressionNative_Inflate
CompressionNative_InflateEnd
CompressionNative_InflateInit2_
Name
.text
Size
247KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
439KB
Virtual Size
438KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=27412,
count=55, id=1, productName=Unmarked objects,
count=30, id=261, version=28920,
count=13, id=260, version=28920,
count=13, id=259, version=28920,
count=40, id=264, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/clretwrc.dll
- SHA256 e6d21e7da05bc8e4ff26b2ef0ac4863d6a0ba9bdd53f1d29424be3b2e0995fea
- MD5 eaecfa59fc19bcc8836bb548f52af147
- SHA1 2a9f8e0b6903390af914aedc0b6771eec9d995de
- SHA512 8eea5f889295158f9e345d1b0cd05815e1c3085c372063ae6d5508fcf52a438749124571705b1617e25bfdb6f02a4dbcff2716b37c9c3f09f7262a83968ba101
- SSDEEP 1536:6cdp32g/JEjptNiHaAXQSWyNEpv9jILpQ01/fzCIe7J:6cd/CptNiPQSVNE98ffzB
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6a:69:3b:b1:6c:dd:64:e1:8b:75:93:56:06:ee:ad:d0:38:07:4c:ee:f6:5b:18:ec:17:43:59:76:21:f7:80:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\clretwrc\Release\clretwrc.pdb
Name
.rdata
Size
512B
Virtual Size
320B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
246KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/clrjit.dll
- IMPHASH 73a3ef33b6fa5503d5dc4f6ad1cd2ea8
- SHA256 9646326e52db7b28c19269f34d2ca937800deb16b3f97b9bcb634ee9669e5c9b
- MD5 4a3121fea51793566df439932cb42069
- SHA1 c21ef3473818c038313cfdb6208ea73e78556373
- SHA512 5f65c97467c13111a7e88108e999d6b1b26e9c94c8cf5a63d5237080d9936c39dd1ba4c760b190906a841abc41e38d09cb6ca2310a11b510b8a575fa4a86f997
- SSDEEP 24576:R0onpUF4EaooYLsAFHyzaDDkEDLbPk1754/+fcDY5fN7Olrjilx:hiF4EaRYbf/DfPaW/mcU7I3ilx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2f:c2:4e:b3:1a:a8:90:6e:9e:7b:ca:bc:69:8c:7a:ff:48:b9:aa:4b:aa:35:9f:0f:06:6d:10:a1:21:dd:76:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
712832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\jit\standalone\Release\clrjit.pdb
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryThreadCycleTime
GetCurrentThread
HeapFree
GetLastError
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
SetLastError
LoadLibraryExW
OutputDebugStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
RtlUnwind
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
WideCharToMultiByte
DebugBreak
RaiseException
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
_CIfmod
_libm_sse2_sin_precise
ceil
floor
_isnan
_fdopen
_libm_sse2_cos_precise
_copysign
_finite
api-ms-win-crt-stdio-l1-1-0
fseek
ftell
_fileno
_dup
_setmode
setvbuf
__stdio_common_vfprintf
fclose
__acrt_iob_func
_wfopen
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_errno
abort
terminate
_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
api-ms-win-crt-string-l1-1-0
strncmp
strcpy_s
wcsncmp
strcat_s
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
getJit
jitStartup
Name
.text
Size
962KB
Virtual Size
961KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=27412,
count=133, id=1, productName=Unmarked objects,
count=30, id=261, version=28920,
count=16, id=260, version=28920,
count=23, id=259, version=28920,
count=100, id=270, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/coreclr.dll
- IMPHASH 1d89e91c67b4746c595ced582c1015f7
- SHA256 8d87d4b97ce741746619da01b746caac150000c37bc43ed0e909f71a63c57a09
- MD5 47802bf022d47dd533f9196227c37962
- SHA1 5f289d2cdcf8c98fc0789cbbb34a1b203e4f7c9d
- SHA512 9059aa503eb517e440529d81d809e8ed4c97018fc98592bd7fca3a14587b7d93ed323460f31bebb4de21206f28b22a9db3dcb56a1653d040e1bf056eb62991dc
- SSDEEP 98304:lhx5vI1aNIpgHI15f7nJXULqI5PXua6cibjL7X0:fx5wkIpgoHnRI5PXuaxcjf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
53:1f:3f:1b:30:d3:e9:5e:00:a1:1e:96:55:78:4a:e6:84:8f:04:c1:33:a1:97:bc:5c:10:52:1c:21:54:eb:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
949152
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\mscoree\coreclr\Release\coreclr.pdb
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
GetTickCount
CreateFileMappingW
GetFileSize
FlushInstructionCache
HeapFree
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount64
DuplicateHandle
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
GetThreadPriority
ResumeThread
GetCurrentThreadId
Sleep
TlsAlloc
GetCurrentThread
CreateThread
WaitForMultipleObjectsEx
SignalObjectAndWait
SetThreadStackGuarantee
VirtualQuery
GetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
MapViewOfFileEx
UnmapViewOfFile
GetStringTypeExW
SetEvent
GetCurrentProcessorNumber
GlobalMemoryStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
SleepEx
GetQueuedCompletionStatus
GetCurrentProcessorNumberEx
ExitProcess
GetActiveProcessorGroupCount
GetActiveProcessorCount
GetSystemTime
GetSystemTimeAsFileTime
CreateMemoryResourceNotification
GetProcessAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
GetLargePageMinimum
VirtualUnlock
ResetWriteWatch
GetWriteWatch
GetLogicalProcessorInformation
SetThreadGroupAffinity
SetThreadAffinityMask
IsProcessInJob
QueryInformationJobObject
K32GetProcessMemoryInfo
VirtualAlloc
VirtualFree
VirtualProtect
SwitchToThread
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
ResetEvent
CreateSemaphoreExW
ReleaseSemaphore
GetCurrentProcessId
ReleaseMutex
GetThreadContext
SuspendThread
SetThreadContext
GetSystemDefaultLCID
GetUserDefaultLCID
OutputDebugStringA
RtlUnwind
HeapAlloc
GetProcessHeap
HeapCreate
HeapDestroy
FormatMessageW
GetACP
LCMapStringEx
IsDBCSLeadByte
LocalFree
VerSetConditionMask
VerifyVersionInfoW
IsWow64Process
GetModuleFileNameW
VirtualAllocExNuma
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
GetSystemTimes
CreateProcessW
GetCPInfo
LoadLibraryExW
CreateFileW
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
OpenProcess
OpenEventW
ExitThread
HeapReAlloc
CreateNamedPipeA
WaitForMultipleObjects
DisconnectNamedPipe
CreateFileA
CancelIoEx
GetOverlappedResult
CreateEventA
ConnectNamedPipe
FlushFileBuffers
MapViewOfFile
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
SetConsoleCtrlHandler
GetLocaleInfoEx
GetUserDefaultLocaleName
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
EncodePointer
TlsFree
TerminateProcess
RaiseFailFastException
RaiseException
WaitForSingleObject
TlsSetValue
TlsGetValue
SetLastError
FreeLibrary
GetModuleHandleW
GetSystemInfo
ReadProcessMemory
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedPopEntrySList
WriteFile
GetLastError
GetProcessTimes
GetCommandLineW
ReadFile
SetFilePointer
GetProcAddress
GetModuleHandleExW
SetErrorMode
CloseHandle
GetCurrentProcess
FlushProcessWriteBuffers
OutputDebugStringW
DebugBreak
LoadLibraryExA
MultiByteToWideChar
CreateMutexW
advapi32
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
SetThreadToken
RevertToSelf
OpenThreadToken
EventWriteTransfer
EventWrite
SetKernelObjectSecurity
ole32
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoGetContextToken
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetClassObject
CreateStreamOnHGlobal
IIDFromString
CoReleaseMarshalData
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoRevokeInitializeSpy
CoGetMarshalSizeMax
oleaut32
CreateErrorInfo
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetRecordInfo
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
GetRecordInfoFromTypeInfo
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
VariantChangeTypeEx
VariantChangeType
SafeArrayGetVartype
LoadTypeLibEx
QueryPathOfRegTypeLi
SetErrorInfo
SysFreeString
GetErrorInfo
SysAllocString
SysStringLen
SysAllocStringLen
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayDestroy
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
strncpy_s
strcat_s
strcpy_s
_wcsicmp
wcsncpy_s
wcsncpy
iswspace
wcsnlen
towlower
wcsncat_s
wcscpy_s
wcsncmp
iswascii
strlen
wcscat_s
strncat_s
towupper
strcmp
strnlen
_wcsnicmp
iswupper
_strnicmp
_stricmp
isdigit
isalpha
strncmp
strtok_s
api-ms-win-crt-convert-l1-1-0
atol
strtoul
_ltow_s
_wcstoui64
wcstoul
atoi
_wtoi
_itow_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
_putws
_flushall
fopen
_wfopen_s
__stdio_common_vfprintf
__stdio_common_vswprintf_s
__stdio_common_vfwprintf
fputs
__stdio_common_vsnwprintf_s
fflush
__stdio_common_vsprintf_s
_wfopen
fwrite
__stdio_common_vsscanf
fgets
fclose
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
abort
_errno
_initialize_onexit_table
_initterm
_initterm_e
terminate
_cexit
_crt_atexit
_configure_narrow_argv
_initialize_narrow_environment
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
api-ms-win-crt-math-l1-1-0
fma
fmaf
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
__libm_sse2_cos
__libm_sse2_atan2
_libm_sse2_asin_precise
__libm_sse2_atan
__libm_sse2_asin
__libm_sse2_acos
_CItanh
_libm_sse2_acos_precise
_CIfmod
_CIcosh
_CIatan2
ceil
_libm_sse2_tan_precise
_libm_sse2_log10_precise
_libm_sse2_sqrt_precise
__libm_sse2_tan
_libm_sse2_sin_precise
_libm_sse2_pow_precise
__libm_sse2_sin
log2f
scalbnf
acoshf
cbrtf
atanhf
ilogbf
asinhf
asinh
__libm_sse2_pow
cbrt
ilogb
acosh
scalbn
atanh
__libm_sse2_log10
log2
_libm_sse2_log_precise
__libm_sse2_log
floor
_CIsinh
__libm_sse2_exp
_copysign
modf
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-filesystem-l1-1-0
_wmakepath_s
_wsplitpath_s
CLRJitAttachState
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
71B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
580KB
Virtual Size
579KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
203KB
Virtual Size
202KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=27412,
count=11, id=257, version=27412,
count=408, id=1, productName=Unmarked objects,
count=37, id=261, version=28920,
count=18, id=260, version=28920,
count=29, id=259, version=28920,
count=6, id=259, productName=VS2019 v16.7.1 build 29111, version=29111,
count=459, id=270, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/createdump.exe
- IMPHASH b858c6fa922134cfa3b9744c3e711ed7
- SHA256 bab6e90fa4ab0eec4148188d67baeb69e3deb73c862e85fdc6fa82fd8065aab6
- MD5 05c49c8d2950b29fb7e4d991a75c88f4
- SHA1 0c12f246b617a35429b72038a959b69873cb3b7e
- SHA512 07cc6781c6d39fd36bd788a07f08a32b685510e4439afba801d1ae432e30d53bf25d269544321569b0f69b862f11ae0d5686ccebe696d5ab0f8b1f8e29bd35fa
- SSDEEP 768:+En4QhtfbeXgsq75FOhinrQhfQlEzZfnHQWaz97uU9xiF4HPe:Xqwsq7DbQhg0ZQPX9xiFWe
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fd:20:e3:16:eb:4a:67:3f:c8:f9:ac:ce:44:1b:b5:13:9a:39:e5:1f:68:06:01:6d:7b:fc:9e:2b:c0:d4:01:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
8960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\debug\createdump\Release\createdump.pdb
kernel32
GetTempPathA
GetLastError
OpenProcess
CreateFileA
CloseHandle
K32GetModuleBaseNameA
EncodePointer
SetLastError
RaiseException
RtlUnwind
GetModuleHandleW
LoadLibraryExW
GetProcAddress
IsDebuggerPresent
FreeLibrary
TlsFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsSetValue
TlsAlloc
TlsGetValue
dbghelp
MiniDumpWriteDump
ws2_32
WSAGetLastError
gethostname
WSAStartup
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fflush
__p__commode
_set_fmode
__stdio_common_vfprintf
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-string-l1-1-0
strcat_s
wcsncmp
strcpy_s
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-runtime-l1-1-0
__p___argc
_initterm_e
exit
terminate
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_exit
_set_app_type
_seh_filter_exe
_controlfp_s
_invalid_parameter_noinfo_noreturn
_crt_atexit
abort
_register_onexit_function
_initialize_onexit_table
__p___argv
_cexit
_register_thread_local_exe_atexit_callback
_c_exit
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
_callnewh
malloc
free
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=261, version=28920,
count=15, id=260, version=28920,
count=8, id=259, version=28920,
count=7, id=257, version=27412,
count=84, id=1, productName=Unmarked objects,
count=3, id=265, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/cs/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0188d45e85931b5ecc84948f69fd58dde444d481930fd07026997906f91cc3e0
- MD5 8c401c0e317a9dac05e130af834eab13
- SHA1 e5f5c41a73bd0e78e8972ccfea8e1e257c0c0fe2
- SHA512 48e8b0563f278542c371aca5cc647857a1fd24b40138bd43d1ffee4185c4e815975d23609514560782f45d60884e0670dc325590babe1d9bed19ec6a6fbdb76f
- SSDEEP 384:ckpebAeAw43cUZe6CBdtElLmdDkOxwVRlT2l4VCprQSm1+fyeV+IzKy5WFYZWjSM:R8bAe3orOsTw4g2+fyeV+Q9/gS8Y/I
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4c:68:53:e7:f9:ac:0b:89:e0:bd:3c:9e:0f:1c:1b:84:5b:20:1b:b5:84:fd:17:70:0e:ce:70:6b:93:c3:d6:02
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
24598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b36c613d0a7a79aac77dd453fe62d83d848a4b5f05ac4e9ea1cbc5bd7cd446b5
- MD5 3f61a0b33bdcb34a4562e6a39ff0c867
- SHA1 bf8c11c2fa1df5864815acaaaa051d9671d9153a
- SHA512 42b580ba3c175477300da1297fa69238fe5dceb29166b2583231810c340c29ebd86c74902668d4765a55b029d80a4fefd964ac5c4c83b51345b7acc1c06384a7
- SSDEEP 192:wjbM1SSl0YnWkGuIJ+WGqWzSoyWvLgVWQ4+WpLyFqnajW8B8x:8M1SPYnWkQQWuS/0LgiolC8B8x
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e4:15:7c:91:12:c6:4b:8e:c0:f8:68:1d:91:84:53:e7:d2:77:07:e1:e9:66:ec:dd:ee:6c:a4:de:b6:6f:f5:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f7e029f5babad74774c9870b670140788d467a2e50c88047059c3affc2e7ebc7
- MD5 f60f477f30c83ef5e1d8780dfbd15466
- SHA1 2d8647d235d3161494bedbe8d26bc72f8b622421
- SHA512 2822d4d72c0f187b90c39e80c9d32bd04718bd94618583d588cec506400850d66e3bfcc171d2f73a9fa2adfa323e9e1bcbca62e0d47630f77289487a0e2258a4
- SSDEEP 384:8cF9c+O/W3YKWXS/0Lg+GHPHaxlxW/EQ+D:8cCTS8pGv2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
af:97:5d:d0:cb:a4:6c:e8:ff:93:fd:3b:2c:70:50:db:ca:cb:07:f0:d4:8f:eb:da:ec:6b:6a:6c:bc:b9:0e:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1459d4b53f705282dc247534938cdda0a5d8d09cc3b5d27f621febcfe4d271d2
- MD5 9dfbb0deef66eedda15a44c5ad9de0ac
- SHA1 421933092ff2a75170efcc2ae501c8a70fe0b63d
- SHA512 a820e09c613d3de4ce9ca7de96d18c4efdf135dcdd33ac14f2dc36fcae8b9e951c039815574dfa6a19ab5c595ce45323c4e959ccb241844ea9d9457f48fd9c34
- SSDEEP 3072:ApOleM2j7NWQ8uAoM/xcNHYctLYSWV7p2WKbVfMyyFHd5RKieGeGBAtZG4k3rU0h:ApCk0UbVfM/GZG4k3rUagqc5GX
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4b:78:70:b8:e4:42:ff:4d:b8:6b:c0:86:68:05:87:27:eb:2e:b5:7d:e9:da:cb:07:a9:29:d8:93:69:6c:0e:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
267866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
254KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 92ec161086037fcaf19043fbae45d2035c6e3c0c977c45320d6aab271e027e34
- MD5 07c41bb99ef1cf5b4068c8db3db80a50
- SHA1 951ca96239ea30cd538c270fd7312737886e677c
- SHA512 2bba3df98cf95c9572dfd75e8afc3361c38690bd0ec9058a512a93a263476491c815e25cbc9fe05179e2e92c57d96f2ef95a14824b581c1335ff1ce802d318df
- SSDEEP 768:f3Z3hTTpIfJGPSUUgeYafSMuSC6B8lx3qI6F2NsS72qWRi+/+p6jQ8JS8kUMd:PhxP6gwDRCAIRUmkjQ8J1C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:52:d4:83:7e:c3:ce:05:63:3a:29:2b:4b:0e:92:2c:90:20:e9:0a:65:99:62:21:ca:63:80:82:05:db:ed:53
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
65794
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 093b817f812411e51683ef488d7a8e652cf0db2302a96411ffad059eeb3ef732
- MD5 ea803bed474508ff2baa96372f6d7354
- SHA1 6b2e883d4814d883ca237833cf444e82b7cf2b47
- SHA512 d4c609b5d50430a364a09fdeb5bc3dbb0aa3972dbdc95a8758ded5f78e31c57d169c6be8f5f3afcc586632cbc0c432b8b929452a1b9e7c3cd817a017c1411689
- SSDEEP 384:gwJp/RFaOsYVn5AL3PWP4eWpS/0LgY4dl//t:gGprsLbpS874t
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
46:c5:17:42:a9:a5:e4:b3:35:08:12:37:d4:6e:9e:15:00:d7:66:e9:ae:ed:0c:37:79:86:0d:46:e9:49:fa:c9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
12950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1bf4ddbb2a12a18128a3da3ca30c76426fc78bda9c454e3f1d9f414e7a1222b9
- MD5 294d2336b8497c035eb8b1a73777e064
- SHA1 c0977d13ffb491a07a8f5acd08da9ea6f18f93b0
- SHA512 0ee9012d33da07e448dfda62d7765948ac0635ad58406132dcc772762f3b0f448f719c908671755b07d34bc6fd0729b2a1b9ac3cb5b73ce18f1d69712cd95df5
- SSDEEP 1536:IRJYM85N78k8IGQSgkNKB/CXzlkJ4JVMvOIM610s:qYM85NIk8IGdg6lkJ4OZM6J
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
80:04:b8:8e:d8:78:6a:d7:b5:e8:07:65:5a:0e:53:2c:66:8b:80:71:c5:8c:77:53:67:fc:25:8c:75:ad:fb:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
95570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a7f046599ef848f8779f891f204d24b2e8312e46006b230008d5ca9b0166399
- MD5 d9aa08c852b69a78f76525f9731ee520
- SHA1 0f56cf1b5a0b5f028c5bc32d8d764310508ddbfb
- SHA512 f606a277260a68433af876eab6d5887dbf7eda9b6c823f39f278d59a47f3a5c15688d90c7a20f0408440ee03560ab36dc89f5433a22dc2e9a4b47eff761b605f
- SSDEEP 384:/4cF8FD98tgvGXs71gLgCC2jISpBYjQwZgkEHBoXtOtzWOmEGJAWmBS/0LgBqlwp:R2j6a8O0MTWUQS8Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
91:ca:b4:fd:dc:ee:6b:ea:4c:b5:40:b1:23:f4:d0:fd:91:d1:40:34:01:f8:c1:96:24:74:b5:55:8b:b2:7f:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e5d85a6132d035e99f588e2adc121f5b58e432fa8a3e6e5dea396c7a1e3c68f2
- MD5 1222f33a76a0338971f6e6e381480d25
- SHA1 8d6fb1934e9f799428a1523592f23f0b40a81ff4
- SHA512 35d60ae446a5a408a198a8f08e78c5e915f6a38f65862c8a352213667b18816e63f001dcb2150159793311710eb54a58a6b65db7b4e2b5181a41a1d0b70d73eb
- SSDEEP 6144:UySmO/tVV9Ec2bQwevGcfRIvGei5m17QGlNXd:U3yvGeUQ7Q2d
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a3:b3:c3:f2:b3:ca:f0:2f:e3:df:a2:c3:2b:57:a7:7f:20:c7:2c:23:10:d0:7c:ed:8e:40:2b:7d:4e:bf:28:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
286030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
271KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cf7335ea8f5758f1c041ff7e64a914f8ffa8ca90724e82be02d4e90933d33e20
- MD5 55ef9bd052671675a4b6c64d9153645e
- SHA1 4ed02241b9daacd78da6998b91cb9a35dca60c91
- SHA512 82d605d6d71aa846546fdce70c43e47eab70f9ef5d092edbc28ab69acc64df91a8b323e16d179be058099d1d7108c6b67b8b1eaf952c33b98fbb10602669e627
- SSDEEP 384:of/+gK+W52y03DO2rsxWL+v99rq606dHljeT9exxxiHy+T60ACuaYN3W+1zhWaA6:Y+LTVeom9LzA3vN3S7S8rh2H
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
de:2a:cb:aa:e6:26:f8:c1:35:f7:5b:56:cf:7b:90:e7:6f:ac:6f:a3:7d:b3:9d:32:57:4f:2d:ed:1c:7e:9d:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
29586
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 814f4614820f482b9f8e8bb0baf3c80d364010aeba0c5d38d3c023c1ea1394b7
- MD5 c955814a314189a64f32c86f9b67262b
- SHA1 0df8a35a1f5a48b127d5d37072d1169704e79403
- SHA512 c03f36d1c2a69180ea7a57c41f0a5462faf2f9ab04d0a78c4e7192c3a951c85404c1f9841e8101594cbde95b35732d1b186400050684b163dc65839a514ffc1f
- SSDEEP 384:H17Mw6wXc4hOzweZnhNf10L7BwNOH4N4Fhnys7WVY9WtS/0LgevTTXZltK:V7Mw6wlopkBjxFxlSS8RE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c4:c2:4c:c1:0d:b8:f0:49:f0:d1:04:58:ce:1c:e8:f3:a3:14:9f:a9:40:d2:e6:d2:59:c5:aa:26:a6:99:6e:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
29994
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e5f2ed890a004b9c6029e41b45cf0516cc43dfe06de73d3b3c2af8904ae24709
- MD5 276530365c9494567c65482c9e479336
- SHA1 5b42caebafaec7512283cdd456370f4ba6375ecf
- SHA512 3122370442baaf61634d8e81b59d9583c170f661bb3e3b990bf9f70c9b0b2c125229ec4133b0aa8934f2f55ee6586172f9f17f091851b6cfde362876dbadafbe
- SSDEEP 384:iy99XSXRaRgGYXdXxa3HNDQuEFX2h3DhT3HvCNszpaWYHqhQ5W825dHRN76pJAlS:iy9kG7tEpsX76yd/u3b
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
77:4a:17:43:c7:e9:f5:d7:16:b8:07:05:5b:01:d1:a0:26:59:10:d8:59:52:e1:f9:a4:e4:c3:3d:c3:ca:a1:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22b8a6ed7b7aee309486722b11f78e2efc1067cdd0bad6e65a75b594289ed771
- MD5 1cc0c41f2de3655b44520b36b46dc924
- SHA1 2bcfef833b4d80dc71ddd8bcd1fbdaadd4ca7583
- SHA512 b23fa1e8a76fd643e3c504fbf99d0aba511f2ec38aebfe09d608598ef68305950d448976e4c8d52f675dfb05b90e5a84364201e2c57da6df3e0c74dc7dc1037e
- SSDEEP 384:uduKALNBW70DEzmTSqqz8yvhHM6OhrkKkytnKP1WZl1ufy3WlRoSw9ol9tY9M:muKALNBLeQos6OvdAPA1ufy8RoSHyM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1b:d5:d7:41:ab:56:20:3d:0a:c4:a6:4b:55:ac:05:07:c9:37:7c:08:1e:e7:d9:67:2e:30:a4:7e:a3:a0:61:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 be0f952b7ba205c3cbf9bb0f1c2c404c8a7d71c9cc7ada6289a3d55a7edfa17c
- MD5 419cbc58897e4b86e34746529779dc26
- SHA1 ed268ee8657648dcd2d85a081abaf59d89eef49f
- SHA512 76b39d68073481b7b94381daef17129b61f4dbdc2fd8933a5f0d35f2f1085050162a8443ebe21b363fcc275f3ef498f1bd74f115aea2e89f663306b07c1132a0
- SSDEEP 192:DW1WM88fQxls5h3zMrWY8WebtuVaVWQ4CWox5qqnajqgYWgEsW3Q:DW1Wh8fOlsD3wrWXZHAlxBgErQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
83:eb:b7:74:45:5f:7a:d9:7a:5e:53:0f:36:5c:ce:17:99:24:da:4a:ff:16:97:44:4b:d3:92:47:b7:ad:bf:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 466668c9f2fd5014ffea823d3677e98b46e17bf945c6615e42fa4025fcbe5856
- MD5 0ac0aedad1e34cc7fb36dfd918373c04
- SHA1 ee4146b76e370c096db5c8bb21b1bd33489551d4
- SHA512 881373ea68443e18349c31093e180117dd62d740bcac8fb3febe5339dae48f50ad0f97f9c8eeedf9124c240866143c30ca60d8f6694581d5ee2ba442e1492276
- SSDEEP 1536:761jOO+/VC5XHtO6sC+vKRhMrRPr+vbCh1gGfWlkoJKDo3VUI:21iO+/VC5XHtO6sC+vKRhrqvaKDov
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
41:7d:be:96:9c:0d:2b:d5:f8:d5:23:8e:df:82:a5:93:35:bd:55:94:31:93:60:8d:a2:09:39:86:eb:9b:a7:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
103490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a842131937875f5a8370263f46d4cb50ff801bb02221c100f70ff1b5129e628f
- MD5 7a6ff801988fe97afe3d66d0f1dfc1b6
- SHA1 2346808dd70823c043856bae1d5f9b3618040566
- SHA512 bacf6f0cef3b946750b781394f71ec2d3909052dd5a2897c7b0e7ffd9bcebe082f61dc71dd48f496620803229e98aeb719053cb6b5e9e83118a5c606cd91ec64
- SSDEEP 3072:oZbHPmNMzn4KIr62w7irW9gmOlkOVujQi1oDdJQmRagCRvgTH8tSwv0g83:oTROlkOVujQi1oDlbegbi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:08:ac:26:9b:e9:a0:ae:21:0a:a1:fd:e9:f3:2c:23:9a:5f:f3:09:2e:16:0d:48:9a:93:b1:45:ec:5a:52:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
192330
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e2698a5cc17c98e2274abeb43a996b3132a2a1dd5f4a728693b821b28efd11b6
- MD5 29b3426d2cfb65e5342a16fa78b18afb
- SHA1 6bc536c6d1629613fa2e00caf5a9e01fae3873f4
- SHA512 7a5987ba9bfa1fe04f57990465256923fdedf11c8627457edd47b137022e0ef8a766751c22a8863c79763b14c819544418abb5706a487c0d12d23888c11585f5
- SSDEEP 768:wi+UU5rEkdkUXF5y7VKRJXRIl76wgGk65g9MN0aziF4NsRagVLA9OIq/Bl:fU5rEkYQRJXRIl76wlk65g9MN0a/uaQn
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3e:be:ef:d4:fe:55:bf:64:e8:92:d5:0c:1a:eb:b0:cf:19:ab:c4:95:63:cf:07:ac:31:1e:87:a8:dc:33:9d:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
40502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5f07439102f3253f2153d0a101a9ecf69e4089f6d6c2e75f0be99c155c31c933
- MD5 57b8178722c8cbeb0e6479e69d411576
- SHA1 e8beb784214a6dda5eeb25f5d8b1b9db61090213
- SHA512 4119a7a2f2dff9e334405876224f814c3a8d3097d0a30c8ded296765f4df99a1fd39984d504a53062639507a5f4afdfc6e4a3485733236f17b04b5d30bb675bf
- SSDEEP 768:NiSzmZ9ewDSc2PpTzggPY2hn3sK3jjRsODMhlOLYIfUVrRGKUPGm4hFf7YrDWBwF:bzmZ9ewDScDyc6WBw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
71:5b:e6:a4:ab:65:cf:5a:83:36:a0:51:1f:a0:2f:2d:03:55:66:44:6f:fe:6f:ae:07:16:29:1d:ca:6d:14:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
33854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0ece49ce66a08636efdc145ca397ba58052c2c1d500c657636d75d913f9cc804
- MD5 b41faacd8c1d66468c4e7c4b505270ef
- SHA1 a0ddacc4cca991faecc8fc7b4c22df989a762b35
- SHA512 39a660f5f46d6b2298aa528334457e51e64b1d99932560fefaa4bc1b2fbe1418752a8effd95d72224e8801e89f39436084388e4863fc7406c19848fd4ba473b4
- SSDEEP 192:xKRzQ+7n8yzrEoEW1InXWKzLW4GD5dHnhWgN7ayvW41Zk9gTFqnajT+vGNL:4h5hznGWKzidHRN7f/hl3+vGV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a9:f8:f9:67:a7:de:3d:6a:c1:80:40:a1:95:a0:65:23:d0:ff:d4:de:e3:06:80:e8:d5:89:95:f1:48:0e:22:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3170d7fc0a3e6dc19220b9b82f4ab5f7138345f98730bbd851b983a3cb67db06
- MD5 07b1dd6f12d13e0e009e33a6444f4f43
- SHA1 c394645dc51f90d816aea9c6e9c362e065e87e8f
- SHA512 95f69d845c7174027416bc6071ca6bde8916bb91cebae4616dd1ccf40a3e1142ef076b05d3b0917f12e2fe60279fc6aa7a7688e72070f428712098eaddd41737
- SSDEEP 3072:5zoR9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yn8ZCeLo98bB2Y3eRhwvMhAUlELO:5zPEL3eAVR6Kc4paH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ce:d9:aa:b5:49:f9:c6:9d:4b:6d:e8:0c:2a:ec:88:17:ef:03:36:19:ff:69:15:9f:52:7e:b2:f8:b5:df:53:bb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
132078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ed757d84d5e70557047088a8f8327ddb0a32aaccc98c63a31a6c913e334dc4f5
- MD5 3ed05ab8ad68ee88c78096adea8f94bf
- SHA1 c2fd84d1d31d1a4801a85ea0e4b0a6cfb55ac4c4
- SHA512 8c4ca3939d39231abbd909ea97ba3824636c7219f2fdc47fa2095a1cc33bb81f2bc208e6b43681d23f4a947c5fb391c0ba4284882eb33e80893afe71695be8b4
- SSDEEP 192:Th/WviW82rUW4GD5dHnhWgN7ayvWVq1Zk9gTFqnajTsDGX:9/WviW82rXdHRN7Sq/hl3sDGX
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
62:4c:b2:a0:aa:ff:aa:ae:02:b1:0a:47:0c:c9:9e:42:57:c0:69:6f:a9:52:25:fc:55:f6:f4:bd:48:ae:ab:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b83e4eddc767386832af2d5b36254630cafabefa4560d1edb17e36f3f59708bf
- MD5 905b3ba780e54e03b98aad10c34f5018
- SHA1 5899ca54bec06bed9724e91d3656798c4d14c7ad
- SHA512 3c0e5bb21bf9518e0179cb23a6ef97ab40644695debf88609a6cc3db94d8c1c751dc9fd3d9d63966956cb6c44efc2b9023ca039de07d84b47d49eb43e7bbee59
- SSDEEP 6144:p2WH3HKNEjKlInRViEhKJ7UYlmqcsPPixS879PRXlzYsrxiVTSqq:p2WHP6R85PRXlzYib
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:09:1c:18:34:e5:4d:82:91:5c:a9:27:f7:7a:72:55:2a:ad:74:c0:7c:8e:99:87:7b:df:4d:02:ef:fe:8b:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
351906
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
336KB
Virtual Size
335KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2c4d04c6f3a79bfd22972317c48985c5d8749b128689eb07f9cb6efc2105721
- MD5 3136d51406f273a3c75ebe6c05bd0560
- SHA1 f8d8382f09dbfa2c3b56c635417750750817db8f
- SHA512 79db8e573ef75a0364ebc05d926e8df8c25b4d26458459024ad087f65d89997ced6f5e80dd8073fa4b4cf9a665b7cefe8de266c7de19711d4247e7b8616ae79f
- SSDEEP 192:64oIbSN+tJ4EjCH99ojCXCW+vVW4GD5dHnhWgN7aQW1z7008Cw7qnajKsi:9gmGygCW+vAdHRN76z70uw7lGsi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
62:38:13:2c:a3:99:e7:c9:cf:66:ec:1f:2e:62:a9:df:a7:f4:c8:cc:2c:cc:25:8e:16:b4:7f:1f:24:c7:b1:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6628d18a55f50886a887658f90b960f320c601d0abbb35f70252507f9b3aac3f
- MD5 2acf15acbcae1032059d085362f6ef0d
- SHA1 7232b6caec2745fd3f661ee559523d5f6a6e4701
- SHA512 81d3ff3cbeed79ab3caaba268ff6635211e9656d46358da66d7b8a787a1ccae1231493b86f06543d0e06bb14d5f584bda26a2d14d19dd773ddfe33ffa5078876
- SSDEEP 768:0oOCK7e4VKEoT/pba9wcfRm+eiOfF/gD/F4oGiYspNqHMK/xExeC+O6Nx+tVx0VF:WljVK7fFC/4i3p6xVGws/5ozzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
82:c5:4e:a3:4d:39:d6:31:18:4e:97:71:a8:5a:47:05:15:20:84:0f:06:54:c3:dc:3c:c9:b1:c7:44:41:23:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
60158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1fe2cd566d3ae2f4e104efdb70634e5c119d3098589c6ea03a96aee6b545aa9c
- MD5 99f93027e2335624c6107f2f88190e97
- SHA1 e1ce49cc49ed5bf9b558abc62fdf53758d707a70
- SHA512 2c1021cc7f2681361823e757683451ecbb7699018caa8e42e9904f24c37230dc4d8b7b42ef531331a5db6d735f0fa5b8bbdb20145f6f64efaf80625c6efc7313
- SSDEEP 384:fqlfl/3YTo9rbJTTHWWwJIcWSFPpdHRN7JoiFWSlGs4u:fqFl/3c0TbWWfIXeHPU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4b:ca:c2:2d:b9:2f:b0:7b:38:50:9a:3f:3d:06:77:d4:e8:b7:fa:e2:8c:ba:fc:ec:29:85:da:1a:48:cf:73:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
15054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ba87bf88e87562dafddcc7040ed55d20d2020e99e8969fe07a71819285ab4159
- MD5 3255baa929e4d8a37835c4cd193f6c66
- SHA1 9dd7d51a1ad0f2615f0dc15bcb61df1d29990c27
- SHA512 3c3efd8085d6cd91d9d311cf9804c4b51905097a02f41b50c1d579d591aea3e61cfef517739bfa1fab558bdbbf9cd4fe4cefb21269199999f2b8aa9db229cda5
- SSDEEP 384:zNAMEXIoYk1fkvFAw7hWl4sdHRN79y/hl3+cGVV:pAMExYk1fkNAswX9adGV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
49:ef:66:22:3c:0a:01:0e:23:c9:7b:79:8e:ae:07:1e:02:a0:f7:c1:e4:33:6b:18:4e:38:80:59:a1:c3:d7:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
16014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a6b9bd7a0047273db554fe816904da2074f3367c9090790c0b5ef44ff11c184
- MD5 a23101bb55d610981f35f3500b9a7c3e
- SHA1 6b4d0f3e2df9949adf880ec9ab9c651bbbf112d0
- SHA512 81a696f4f88d7925c47d0e5fe88f8057c2436e2e7f3a225592927b4d6be1ae80b8a810fe8a764edbb33cb4bedb7c6ccafd48945cf517f98ba3f1d5ee15fac89a
- SSDEEP 192:qF3Z3r7WPFC8WQdrW4GD5dHnhWgN7aQWf3KP+CjAWqnajKsSLeMxGlU:WlfWzWQdCdHRN726P+CcWlGsS6MxG6
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
75:b4:77:a5:8d:bd:22:f8:f0:c8:d8:31:3e:43:cd:2e:8a:6b:f9:f3:f2:dd:98:1c:34:26:cb:50:47:ea:4a:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10266
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2aa4fe93a2b5b96476c50753a67db623a64bfb773cc14fe4e2bf404cc3c8afb2
- MD5 49790e7944903a8573d551643b39527c
- SHA1 8cbaa4138c4cdb8badb6e579a06d9dcfeed741c2
- SHA512 bbc43e1767f38fc82bf6b9ea4a7b366f61f52430856fae00fd15471fe4b3a25c348054a417955e6aacd1300677526770f914b98147b8063a6728e2e04b2502cc
- SSDEEP 192:TTBHk2+QrFhUWLZRBJyzW4GD5dHnhWgN7ayvW0LN1Zk9gTFqnajT+nRGNRT:HBHqQrFhUWD6qdHRN7rZ/hl3+nRGn
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
85:47:70:eb:4c:c8:81:7d:1d:34:3e:3f:b1:4e:d1:7f:d0:0d:7b:c3:f7:46:e9:4b:07:b8:f2:ec:77:8e:df:a0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13530
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a3a617b3997b8fe16a5df3bb3d9f1c1ef909ec44614e950e1a7e66ddddfd97e
- MD5 2efe8ce4925868cb137c7128991bca5e
- SHA1 64558b176bb524c31bea7582d6f45d29e7f8cca5
- SHA512 079a1a2204bc0942d739e04730eb338d0500dc73341fd3991190e729792dc54765843722d67b03f154cde19fc097c49ffc174b7aa40941d2556d155051ab99a3
- SSDEEP 1536:FD1u7XRzwAFWsY6kmnmmUIaRQoZk67eEPPdVYFW+OLJ:FU7XRzwAFKmUOwdPsB
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:13:b7:ab:66:32:62:70:54:a8:58:d7:66:7d:d5:0c:8b:84:4c:79:e4:d3:64:4e:23:1f:47:f9:9d:e2:a4:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
82006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0cad4d393f72fe24d2ff976e8eaa573d5d59d9b6a6c7a6b1417da7de1fb5b0f5
- MD5 12da96d8fa5490418ebeace7b067e3cd
- SHA1 517989a0936e71d627a7e8deab08c0b3f29a3522
- SHA512 e4b147bec856d8899eaed763820f89dd5d6a60f18f1e7dd7038af700a11781705e3342dcbd74257aebb26b5c0a539d04b7fb19feb99f87129c68bb22172f1d26
- SSDEEP 384:JKmLFLHMaW2DrW9Q1YdHRN7rZ1IlGsda3x:RZHMf2i82rXJP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fb:4c:21:03:34:f6:9a:ea:c6:f9:d2:f5:bb:ea:0f:04:9e:e9:e7:a3:05:f1:04:f0:0c:9e:98:2f:d1:59:89:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee9b26c29eb83008dd5b5f6659f99365f4ce12c6f7c1845f05690180e72d25a5
- MD5 8ae531080e7545196c5e897a1e7f71e1
- SHA1 8dfba38aa9adeb00ede68f02822b36661054c3cb
- SHA512 cd6412f27ca1a448e3f34296c93c7ac911b2d2bf126a6e98c9547092c7373c7fc5a6f351ded94229f2c4aa99796e1021aba36bc49ef7fb914c41eb582b71cce7
- SSDEEP 48:6aFSyGEuHh7kiMI5EQTBDq3cpu0lvlAal2V6e6Lm+iQ3RtiC7Zd3DmvSBmTdR1Zw:SB7kiJFte8nH3DmqGdfZCl1ZPTY6n+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f7f6057df80b787ba3305e70247174c54eef3cc394c4f4c0e71576537cebd03c
- MD5 c3ec5f295999b78a8cbb46ed1d095956
- SHA1 17bb055d8af733ef6ae7c15cfeb496c6a9b11f45
- SHA512 3f72331ad2080ff2c3cfd922897957b2c3d19c87f616cf575c11f6027c3363441ab2daaa06a81a7af92d8a8eae11ebdd2301007e36c75b6b3ae891460708c7bb
- SSDEEP 768:IEy2T7+qbnABlFUbNQWkPkxBMOw1CgXqrSUHQ0KhScVwhft:jHdnA6CWkPkxBMV4gXqrSUH9Khlq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4cc8e9c246efd9191986785b3ed593da1c9ef6961acab2b710b66a1f94c77c85
- MD5 f3a8d420b630d4ac0613da6b440342f1
- SHA1 729a6b5cf9f2192151528852a72aaa6c92288ca4
- SHA512 beb1484ae09254b6b3175611fb9b35dfbcb632eb47b6176edfcea9a4511d0f31ad37001c5cc590679134319656afffa450c9bb95537a5356608f1ab1605167e2
- SSDEEP 96:Y1XQX58nQdEWw0QIl+ZljkjSd+SdctSdSZSd/Sd:AQXOnmRpnMZlo2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 782d8c205eca4dc58c3df656f2fc93ce271a904ed0fd7942f2230b9c00449d99
- MD5 9c1b997732d28edef71fbf12e63cb970
- SHA1 74e5a64594b4587ec28822d94695268885104eae
- SHA512 352d86c5b83f07bb9107d409a0f1ecc21615423bd1c4f74c3264cf4f4125cb22ac324cc74ce61be6e499318ffe847ae48c3c28fb4ef095a6052ac608e3d82a14
- SSDEEP 192:F6lIZ6O7qdBGXD1CCRuUwWsqvpYpHOJpt7lIJ0WKOfi9OM2FsuWR:QlIZ6tdakUpsqRuHot7Y0ufAOMCe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3274e1b357c7549200f66e114b193b045a416516da02253527ddeb49b4db93fd
- MD5 89cbf446849efd634dd59c689c04c01f
- SHA1 489fb923486e9371a10d535a9d32f036f2851233
- SHA512 e104c58291291275af889ccac9f6af00cd1a9ca2681b494ebdb07321a20d9549bcdc4a016f1eaac38e6f6bd7950bbe7331b6e220e49dd57fc0faeb1647736e11
- SSDEEP 48:6Or8HGISrs1D0WkcPmH9p2srikOYOqNwtRUmYucVrjPwIMU/2l1LZ2AFTqcsjBHt:j8x9yl7OY/N4xYTnI/tl72Y2tHPJJsy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd5a8577f587696c807512f3164c391433e2ec156aade2e8acbeeab985f3c0dd
- MD5 05deec6f81273f6e0608b2d1e75ba7f0
- SHA1 871397e9fb972442bb64a5f7eaf8ff6fedc8754c
- SHA512 76357591d39176bd1f1b574131d5277ab126e2cc1fbcf83353e67f5ea2ee360cb024e8bb9411f3600fa5c74cebd12ab5237e9ffb21609fbdb23e528d8f711876
- SSDEEP 96:dpmzKSD/LZmeKCO1N8UtyqelSfquCqIG3recFuej3Fc/l72KhTJPHJso:dwGCP92Kt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9befc8d76dffd36c8a21bd753498ba2836cba3e287072ce01a52eb7a17d1fad3
- MD5 c93027be00573ff27c4ef5aa3b99224f
- SHA1 26f2a919fb4948c7d5cdc25d1f63c8953482373a
- SHA512 4d1cb22a6fb1fc4ba997ef7c0ee3a5d505645b1f50b67590969f140e9df080d366f4c66fa637ba9a05279aba29e816161627f36b0cce4800e4abcb3f5512c299
- SSDEEP 96:k1i+6tOKdYlsEv0bxcpAty+BF6bW99e0Hv7W2NzVgVVbvl1YyAnKVlBn7dArCNNU:8iRtlASQIP6bIpAGEnpgXSePg3s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a959f942e40bccf81f06e00af3ea513f9ab832fbaf974d0fc2d88826828256f
- MD5 d010a77166f77bf46898e83b375a6055
- SHA1 f49341c88f7579d0f306fcc542ef462748d5e614
- SHA512 46f72bcd9d31cee037e848769caf0a09e9e03c223e57ab2a73f461e3ed54a73f32e0dd8a52e18a94518c74206f7133963d78e3ee8ca38ca72994b0dbee0277c9
- SSDEEP 96:E9QePUGTL94oqvAy8GTI9y//wAIXBF5yivZV43UhKnKEqXLplm/rQzlk:KrUGTLaPvlTI9TAID5ZgQoiX14/kG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5bde8c21f7759bcbefd5b08ad00d237f589a3ed63fec0858e3c7d8b54f4bf86
- MD5 d912d3627c2467ad8be96dea0f937775
- SHA1 6344f44488e5c549552e80d8f3995c097b7380cd
- SHA512 3efb5223f2ee8db5551307b5102bfdaa0cdd5862d47b4aaf44202089034d974f0b99a5dbf9ee5d16b38140df6e7c415f876989f05b081f194de6406a69eeda95
- SSDEEP 96:mdeDsFqcrQEGHDB/63vWOvW5u+YNEX0lBq3ehv:nDsa/Rsz/xNRvq30
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6280c144a776be95426a30772fb70e4d7521a3efd9a18622a4a949a0c2cd180
- MD5 27a3c7920466748a4fb300ee06cd128c
- SHA1 d19e47911a9dcf795d3c86d376dd5af5de95100d
- SHA512 0a54d0fc7d86898236cd75931de901f7a3117aa9807b1023970a2f2ffb375d9a37996b2e1f4929dddddb6bfe8fa12a8acdc51f82f6d6fc8165f6db6d08fe2503
- SSDEEP 768:XDAe5Yc18DPnDSnyn9ndnICnICqCF72siuHxd1dNXtmnVqy8eihJZLglP3QQllPB:zjTtm9DCqy8eiLZLgl/QQllP71z
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 022e3c87dce2af9dc5d70bd8623bebc7d69c1730441be345f849540a9ea5c5c0
- MD5 423ca836a8c194b142806c4cba46ee3b
- SHA1 f148f34eeb9bbba0358ad5d157911565e7860f6b
- SHA512 1279643edd6b16038c0030d9e7b2497ce024b15f2eae7f2c2581ebe35303b9b253335be91d1d20a232f1d7ea028c5c3b3c976dd99d098bfce152f3a5a71a83a5
- SSDEEP 192:3xio8qeEYPs6XAV0rPj9iIfCruGXFDtr1sqKR:Bi5q+QUFGltr1L8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 564c97a0f5914dcd4c0af3f3726dd6150a2d301eb247fe2345be9fae0014045b
- MD5 b6f2fd114bd97549f95b02e7979d463c
- SHA1 5e25ca54a076aff3c57efc67c721596fb4ef7a29
- SHA512 80d7bd08c2d6164293e05906e9b662721bd81490ec0f16b9e07ef0a9dfc2eb366c1aa7529e3d83173de4716f053f97cd9746cbd708eda97e2d890c375ac4833f
- SSDEEP 48:6pWh7/HOGKlG7yUTD6l1CPpfrDqFybWsEiZbTLliH4Be7:nh7/uGKlG5n6lIP3Ssn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f80a742cde6e90cdaa6daafd1d4e4d0f066eb795a0d3bd3d107ce2eb2b2cac61
- MD5 0ce111db1aa63376faad1000bcefe4de
- SHA1 7f08722461c83175193cc1b26c09e28d60fab6f7
- SHA512 8f2c7348bc03caabf13102350bf095982fc7678eaf79a45312d7e949b5972535c01c9bf174ac9e73390431035e49424066ae51d3cbe204cc800ba270713dd298
- SSDEEP 96:ElxzyHVlGPOvPlAtGrC34+1qQhmWIPSgbplAP7LRaPg:ElxzwPGea14mVmpa8piPf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0b03ac67c5b8b573e390740aa0d9a52e7c01c9196ac12871a08cfde6fab75b89
- MD5 c53baef2915bfa2c53c2068b82c2457b
- SHA1 a467e3730cde49016679153dc0e8a69a62c6132c
- SHA512 6e725889ce34e5fad7427a714f92dad6c84f221731e144d8c316246eabc81debcc4f5d9cfd5132654de9bbacb8dac4fa0d24f8495965984c2ee1f7db9b5f540d
- SSDEEP 96:fPkEExN7u+/uViyd/U85PYN8QuIh+OKueSFtm8hIWuAdlsiX+n8U:kEExD/Ud/Z4h+n6FVuAd+iG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54009b948095d1dc6cb8135b8b73cb32639512b0751d27237b52bbf2e1213c77
- MD5 849d5a6a070c2814bcd3c2db3eced25a
- SHA1 1d8bedbabb78c9d4b2a047c035163762c7c47880
- SHA512 364281c0ee1d651fd5f7a109513b629a15486e6099965b2eacdac5e8ed9103b1db5bbd60adc0c457e9f40cfd76c1fccd630e9a115a7595225b07c517cb73b065
- SSDEEP 96:SCmXdCA4f9abC9JCiXgSbLvzGoBGxUKTJSWm/4XXdTxA8lIPz/sHvY:nmE9ahiXgSbL7JGZFSreXA8aPz/sg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/cs/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0a8d47ed004dfe23f1a838c5dded6d6df2baad12cdb42ebedb5c63e629a4bd1
- MD5 d217f54779c197b142c74834234e4052
- SHA1 a5c54af2a443cb2930b738c6c965bbca57bcedfe
- SHA512 cc2128010db710a8c353689c42025edbb286b56464a9c09a660bf44b1062843c3f30359f0bc1802bd71f1993c97b196bf001115435225012cd3aca83872a19bb
- SSDEEP 1536:J1G/OdeaVLuReourGrLr5VoVNVIoRGhIIMijUmBRUbavWq6A2/LlMetHvKUeRzTE:J1G/OIaVLuReourGrLr5VoVNVIoRGhI/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
59646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dbgshim.dll
- IMPHASH a2ab5dd3bea9db7c3176f85dedfb382b
- SHA256 dd46ca4bad7ab7631bb8a71293bef07901ed79412368b057d0fcd8b96ec27956
- MD5 82b2251acd82d805c6ac93877a07a0dc
- SHA1 3d8620a23c7107581126f84e20cecc566c7fb2b0
- SHA512 42b465a3737b25e8533a1138385426f87b9f4a3cc006905c8e081bff2cfff36adef5e8e2889b9c42c5ebc8c4d0b4b9a3a82cb4e234bf4446f23ea9d1090bd4e2
- SSDEEP 1536:bNihS2ZPtghY+q+Qis3Hejh6rCrP8YHT86q8vbe9U8mxWi5+1IPdZ:c42tuq+QiHVIYz08DeNmxWi5+I
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c3:ab:85:48:69:8f:d9:23:23:b6:5e:15:77:b0:54:b2:14:c6:c2:5f:b7:41:d6:8b:50:1b:75:af:91:ee:98:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
44944
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\dbgshim\Release\dbgshim.pdb
kernel32
MapViewOfFile
CreateFileW
LoadLibraryW
HeapAlloc
HeapFree
GetProcessHeap
RaiseException
LCMapStringEx
MultiByteToWideChar
IsDBCSLeadByte
FormatMessageW
LocalFree
SetLastError
LoadLibraryExW
CreateFileMappingW
GetFullPathNameW
GetSystemTimeAsFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
TerminateProcess
IsDebuggerPresent
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentProcess
K32EnumProcessModules
FreeLibrary
CreateProcessW
GetCurrentProcessId
ReadProcessMemory
GetFileSize
GetProcAddress
CreateThread
CloseHandle
SetEvent
GetLastError
Sleep
ProcessIdToSessionId
CreateEventW
OpenProcess
DuplicateHandle
UnmapViewOfFile
ResumeThread
OpenEventW
GetCurrentThreadId
WaitForSingleObject
K32GetModuleFileNameExW
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
user32
LoadStringW
advapi32
GetLengthSid
CopySid
SetSecurityDescriptorSacl
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
ole32
CoTaskMemFree
oleaut32
SetErrorInfo
version
GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswscanf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-string-l1-1-0
wcsncpy_s
_wcsicmp
_stricmp
strncmp
wcsncmp
strcpy_s
wcscpy_s
api-ms-win-crt-runtime-l1-1-0
_errno
terminate
abort
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
api-ms-win-crt-heap-l1-1-0
free
calloc
malloc
CLRCreateInstance
CloseCLREnumeration
CloseResumeHandle
CreateDebuggingInterfaceFromVersion
CreateDebuggingInterfaceFromVersion2
CreateDebuggingInterfaceFromVersionEx
CreateProcessForLaunch
CreateVersionStringFromModule
EnumerateCLRs
GetStartupNotificationEvent
RegisterForRuntimeStartup
RegisterForRuntimeStartupEx
ResumeProcess
UnregisterForRuntimeStartup
Name
.text
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=261, version=28920,
count=17, id=260, version=28920,
count=10, id=259, version=28920,
count=13, id=257, version=27412,
count=177, id=1, productName=Unmarked objects,
count=42, id=265, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/de/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e493ffbd9ce306d12e3bad48eb799499b49c4c9a7f657a2e39cef9b0c87b8c6e
- MD5 dad3a731790cead4db4432fabbfea4be
- SHA1 49cf0a66f2b31e9c8a6b4ffb677a7c92ae20478f
- SHA512 2bef2e30d656a82f0aa3a1196124ea26b0bcaaf5b4fbb137f15f0a83d90831034415231d58340147bddd2b2e82af72efe6b076bb831be9bc5fe9f68b06a716ee
- SSDEEP 384:TikpebAe7DGa6m/0BURJ33FJ/UqskAUVHlT4UbVHpP+MPWZIN9zlgo8WFYZWYS/4:j8bAeeJkVF3bNXWizlgoIfS8Qg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2d:8f:09:d8:96:fb:80:8d:ef:54:e5:92:f1:14:d8:c3:f9:24:f7:6f:0d:21:8f:78:86:92:93:2d:6f:76:02:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
24766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40f6e6f648f246ca10e3db0c5bf945349a242aaf83bdfa40fde1130369e5a012
- MD5 68cbc512614b7b9b72e32e06e5d8f4ca
- SHA1 64d8bf25833bc845348a96c4702e8fdc32df1bdc
- SHA512 c6fc2c91931ba135e20bb84fd9301237c399bbee272ccf01341ca651cad249f6e1caaf8679ea1000bc1a26a28c8a17eeef9019f47e62984ef7b2114a6b5f56e6
- SSDEEP 192:bRUhfqxhUwoFuVESWkGuIJ+WGZIWzSoyWvLgVWQ4WWgW3JSdqnajKJW/NA:bcqT1BqSWkQQWwJS/0LgPWEdl//
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:b5:b7:8b:d2:ca:ea:a4:0d:2f:36:fb:6d:2f:eb:93:77:09:e1:6d:66:0c:a8:30:87:96:96:d1:43:21:6b:29
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eb6f2485d8afc009c120b743248eace2f1c8b406fab1bc78e3f0c2ecc538421a
- MD5 418e57fa8ad2f599d5dff2012a1b2856
- SHA1 16d8d2dc9387525900613a441fee64a882f9027c
- SHA512 0641e0038035ea61e45830a6a143feff5f4c73267ef88010c5fb930c7639093144c1d659a23e300da92200dd307bf75db094871fcd87d059ee4a5adbac0d8e57
- SSDEEP 192:Ia1hcGXSIrrE+4W3G8mJEWGCWzSoyWvLgVWQ4yWguI2u4V8gqnajV2EJR2At:5hcGg9W3YKW+S/0LgDuIJglxJJRR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b6:11:23:0a:ad:83:f5:1a:86:fd:e4:ad:bd:06:20:f2:60:03:9e:18:99:c4:d8:58:6a:5c:d7:44:4e:17:ad:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b643c25424dcd1f11587c06e575c6b7c7d50f25a9d98dc66a24b52049d927c27
- MD5 c8d3644cd0a6fe5ba16768a3a1f174a5
- SHA1 ac320e3b1398794d679352feda2cca06cd8f3f92
- SHA512 90677e0c65ad5546f3667f7b7ab31e6847ce04f9eea49f2a8b0a6725db90f2a0ffdc59946f02fb555f99e8cdac69e1c0569ceb68e4a30a7cc474715ec6b657ea
- SSDEEP 6144:kpCLYDhjefLFz/9q4Ll1JfATXY43VcvGQZt:kpSBz9q4x1JfATXLFc+QZt
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ba:ac:20:cf:d0:c5:19:08:1e:24:c5:74:66:bb:00:00:8d:04:83:03:09:dd:21:e1:ad:87:9e:2f:8f:d0:1b:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
284998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
270KB
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3ca8d5219d9373ec7d1d7475091c44c697b83e429d6db7e6bffe136addc8b18c
- MD5 c87497093a7b8c61cc3aa28ab7a1ee5d
- SHA1 2738e5a7f04e3fdecdf880cabf793138b1390b4f
- SHA512 bd940fee84529ad8ab3b8f73f0d9b7fbdbaff417c2cfb40905cc71832ad49c762ca1bd6c6b50bd61b78305d23d6fd7f231d230722d45011e7a0600ed4dba088b
- SSDEEP 768:n3Z3heaSUBvyaD0/bLQArySYQ2UqX5nJa8lk57GCVA4p3B+Xhfj4/deo7ykFb9Ic:3hrqPFnZLYXIDeP1Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
19:72:f1:fc:4d:5a:20:07:9d:68:81:ee:7d:dc:b8:40:f2:74:5a:69:1c:cd:9c:ea:8e:26:1c:d4:aa:ab:07:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
68870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a580a9002e6a667d4a18980680ce6303836e1256ea74a2c01b41c58abb95c6c5
- MD5 ec9ad39c52fb2f1f3b8e50ff7b9fda2b
- SHA1 9fb581fdf5ce6aaa9e86db47930ae928a0df14e8
- SHA512 31bbe828feb9134dec33ef73b9674795038a7118d40532f5a64339a70fc74d110a5353a434661467377661448e69f498eeef4b39aa6ca00001c8f6ded151174a
- SSDEEP 384:NTRXFa5hJdrDT9WP4eWJES/0LgxJhHudl//t:Ntah3DTRuS8O7Hut
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
80:b2:2f:2a:6c:79:ac:73:f0:9e:a8:8b:4d:6d:93:ed:1e:10:61:cf:4c:1b:5f:67:8a:99:84:ed:1a:4b:93:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
13234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b989af9db7ab5c656409595bbd8634334308bc497af8685c97899d59192a382a
- MD5 888bdbedfb6737c6d341604e5a5af046
- SHA1 5fe0bd31a9bdb5d3b8b45e7844677587e7dc88d7
- SHA512 73a6f7ae5d1586327baac08a199233e0f1cad6403eda3f8fb5e8ac7bfba0b1d03c41cbf2329d146dba40bae5219948d6f794a7eb59655d5909d709e7827fba1a
- SSDEEP 1536:uQ3hZLle1o1gSFG38RVl0bzcRh4opfXN0BvBcvLIJZOPygRLjXlPlXkNCh2LORpG:/3hZLle1o1gMlaK8Y3ZwJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3b:6e:3a:46:64:9b:f6:d9:4c:01:0d:1c:e3:91:25:85:c8:e9:2a:e4:04:36:86:8d:f2:10:15:e2:c4:6f:1d:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
99290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46834ea25669d4d84536c3cc9074d1b7bb0252808ea98afee2892090434a9288
- MD5 0b06b7cdaccff619a5947df743f24e1e
- SHA1 ca41b5032fe8f98993d1b6f566d01c1967668bee
- SHA512 54574c3414a72253a1cc23175a81dd3d364b6056b14545ab80f167860305ed5780d3a38e9b8cef2bfa14f48aca28e2d89b303e497736505f65ff1a9b2c3f8174
- SSDEEP 384:Gh44FnFAizRgS2firSfgsgIa4DrSWvYAQTjqgbhHgRFh/DOeo+0tEWOmEGJAWme8:q5btIbCP6ohHgRbDO9TS8LEwS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
34:3d:e3:d6:bd:9d:d9:ca:b6:b3:eb:0a:0b:da:9d:c3:06:14:4f:2b:3b:68:96:18:b7:1d:36:f7:b8:fb:7f:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
20070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 33510a1d01cbe59d412380426bec3940eb15de9a8fcb3c9e0b2d817c593248f2
- MD5 ce84c426c795e5758849fd9bf4afe1c0
- SHA1 596da4824c6b969560ef09a28218db3127a447e2
- SHA512 082bedf439142fb94d357d38f599b0db7438fb959b31361c7baeeef575bee008d0f1199c656926cbf849432f22c60dca50945005e126624c924e6a1670c017c4
- SSDEEP 6144:cyoEDGx+UjAmYqVZckGDUvch6VLv8swsCFilihTz:ciYkh6VLv8swsCFiqz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:7e:ef:e0:6c:67:0f:8b:d5:2b:51:8a:81:42:97:4d:2a:16:a2:00:a6:c6:ef:8d:76:41:6d:ea:7c:17:02:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
301834
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
287KB
Virtual Size
286KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8827347c6bc9c208e97f09d67fff6d16fc175ac187fe16ea5a8d8534a76bf353
- MD5 1ea03fb1581509b9fb43eedf8be41864
- SHA1 703bc2d90cfa724cfed3b276baea635c35bada85
- SHA512 69bcc0e98817f203b02239a0c43be9880a5badcd00361db95c3ebbca40b5280e1d233e3e999e3659afc5e2dfd4e02feae47e09f2c57abc761cb42763d5be7213
- SSDEEP 384:LXG/+gK+cHJe6bmsEjXlEorsW9m7nLmZhqjaUxXxCcKs2kX5Kh2sqKeL2Yd8ZbiA:4+L/bsL0abksN82Yd8ZbiTdDtS8yfISf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
51:06:d0:99:ca:0a:0f:08:54:aa:02:5d:d4:42:7d:a8:7f:ab:c9:4a:00:2a:9a:e3:3c:32:f4:54:b7:6b:ac:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c172ee7e722532294fd8bd5f3aa1da49b8e7b5a175ed27e449159947e2b243ce
- MD5 9ed14cad8f109ee97714ca4cc87f3f93
- SHA1 e9876c886a1de39e6edc3205d0c207a7a52787bb
- SHA512 64dd9066e6fa0201fd65b549f34cc271187c333a4914aff2ad6186ce1dc4e18b3e6ad22dbfd4d696ffc5fde2225179e89639fb421f966eddb8a63e9781f7ad1f
- SSDEEP 384:Mq17Mwhp6phgC9rQxNCNKNLhj2em0KgxpkitvYY84ER5aLQdWVY9WPS/0LgBD7Q1:t7MwhUpkxDN7m0K8nFQa0j0S8OK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
33:05:a2:2f:8e:16:84:67:d8:e7:1c:2e:02:b4:36:95:06:0d:65:f5:23:a4:20:13:9e:26:ac:ed:91:e9:c5:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d924c3ef471115c8d29e08abb6c4e769cabab665b460535cb7125615948e0c79
- MD5 a0c4dcfdf6b52c7d75e5d4b3541521fd
- SHA1 f80f6fb87b5b3a7cae637963797914d7bfde8c1b
- SHA512 988750541c51a2429f15482eb93d4c54ce0ac414e6f3217b0bea42f71dbde7ae06e4885a9720e51c716108929f4b7499a2337610c1a8086d0597d159beda8434
- SSDEEP 384:ZWXSXRaRmIPXdXxa9G/Quw22zdXhY//QxpsJp2daWYHqhQ5W82JrdHRN7PifVlGS:ZjIOGIR3o/oei5pPZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
17:57:77:f9:48:98:25:b6:c7:30:76:28:25:7d:95:2b:96:6f:1c:e4:c2:90:b7:03:e7:89:26:0d:c5:8a:4a:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dea702e3731e004646e65bac23f2a3a1e6d70d248220df3a209a2da0eae90af7
- MD5 2d6cd3f714e1750ccbf09c4e92fda65b
- SHA1 eaba3f22618643367d337b159fd478d8e52e139e
- SHA512 207e3ca239cb9043d7dc39f67db0e306696cf8fff5179a967c4721634c812bbfcfa65ce2df2fe641b6bf56501e63e48c7c4ef10b976a7a995dbaac42f9247d8f
- SSDEEP 384:oOxdxhF+HCgWK3KopDKJwRC7vmNU3iglGYtnFP1WZl1ufy3WlR0wlpp9fl92XBn:ooxhsHrWKTpDK6RC76gzDPA1ufy8R00C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4f:48:42:e0:f6:a3:5c:d7:af:8c:b9:d8:fd:81:df:6a:37:ad:a1:8c:dd:bf:05:38:d2:e2:ac:4b:c6:65:e3:1e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c714fa3f9f4f8f374104a410d0930719adec54d851034dbc0edd242127a59d7
- MD5 6a4b89076238f6e71babbae2d41adfc4
- SHA1 a0bd8ca951d17d49f8c7552df099794397a1d756
- SHA512 e21c0978cb56c8dd052a601a75329b45b541b82239cfc17d89be384c94828a2c4d34e7a12faff528b804ad889751f292ce78f0565b816632bed6568d8630e46d
- SSDEEP 192:oWZ5i88fqxls5h/zMrWUP8WebtuVaVWQ4CW91qnajiPN03fPja:oWHr8fwlsD/wrWHZE1lgavPja
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e5:f6:85:15:86:38:6a:75:c9:d8:96:9d:51:55:b2:7a:d8:a9:9c:2e:a8:d1:59:fc:ca:31:f3:ab:19:3a:ad:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 10f5f345c6ac5b66ca06fc311fb1a34614d2171f05b4dfb0465441c8efb5d9a4
- MD5 dad7c26cd9a9d23bc063ae5f59cfa1a2
- SHA1 c89bd2fa8ee53d8e12a9e2f677b1b1507d07377e
- SHA512 2eff3261f94014c30a0d0a84dc1a5013ae7ac5c860aed997741c179e070ad1613ce2c1af5276fc5319c261303f74acc0278945ad91e37557c0c855951804e762
- SSDEEP 3072:e1i647k5ojYyLp8oMaMPP7zgLYbiEjaFEgy2Q:e1iX7kajYW8oMaMPP7ULYbiEOF/7Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
59:6a:eb:b2:87:7c:8f:f0:79:0c:7d:09:cc:43:1f:26:9f:3d:7f:da:12:09:2f:4a:d7:d5:8c:fd:b9:07:80:91
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
109166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
99KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 67a21076d59467faaf51db3ec526833ed08b145ef3f49a6329c798550bc7395f
- MD5 35cfd6dc6f451b0ad81e93f08c87b194
- SHA1 cddd25b534f4b420840ec28d8ea459b0a2857cb9
- SHA512 1e3d679b4f9a95d6c94f9037fb4ebab8432e47e26fab3220a369b77b2e641f27175b39381ee63f6ff9d05b15f1ee02f222ffeaf1c8fcb9d45ee533eb6f10bc1a
- SSDEEP 3072:cZ3pPMKCjcKNI3DPzjPZTBS6fZquXuWHnTdTm+P2rM2fhpHLzNuW4pO7eLgArc+m:cfhquXuWHnTdK/RhhNuW4pYeg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
43:dc:bc:08:98:16:41:a2:bc:4b:e6:88:61:db:1a:a2:6c:0f:6e:dc:0f:c1:ed:be:7b:29:99:43:fa:e0:b7:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
208990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
196KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 45dc1902cfb268ea0ec9201677a57af1c25925b6fcba0083080ed5ea0ae73ae3
- MD5 b704b5bd8ad06e799e57613fb84763c3
- SHA1 250f2836ae1eb8ed83f5e1983854c4776f8d2295
- SHA512 dd1ac299c2eb9fa6d9613554293ec4d0b110bc1ad5fc8bbe15afb405e8e72dd359247293d2945b8361d4631c943e2e01fff1c7ab47e9dba06e8d9a0ed69f2e51
- SSDEEP 768:zp4ICj0Yq+OlNOVTzKx09t9yZ6OHMa3gEj1a/dV/J/xw5BmEm3hOnWhW9pnGUE9M:V4ICj0Y5TB9yZ6OHMa3vj1a/dV/J/xwr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9a:69:81:e1:98:a3:d9:1f:d4:57:63:ac:56:c5:e2:d9:dd:b7:1e:e4:64:64:7c:67:3d:57:a4:1d:f5:a7:f6:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
42030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0606b234401330666049c93d3bfc640905a361a4a36f28cee3a1a35d4a4efec7
- MD5 aba7a37578cc05dd6183956be6f06c1b
- SHA1 23895aeb5eb9a4b58eeb1a45ce019501eaa79dba
- SHA512 bae6f82d9e861538f01d21ee31d3d1d9cbf3fed305538352ac4e7f3da3346182491bcf9d4be11915d80bc43359792a19c45830d4f0e5556d3977694063874376
- SSDEEP 768:SO/ENueEDeiW9c/Fb5P+2Hi45s7j5fF9zw1EOb4mjpbjlhewSRACReChPizr:R/ENueEDeiKnACReChPizr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
25:d3:bd:7b:e3:27:09:6c:25:53:e6:0a:d3:76:51:29:ac:7b:d3:fd:fe:cf:99:aa:eb:35:9d:39:c7:0b:c2:0d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
34714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0fdd41d633f5f5873041c7b6e1960a161f7b96b15755f9ef9774d69292a0b238
- MD5 9ded4302f95a8d2a7219988cf1e712d6
- SHA1 006eafeecfcae41afcb9adf417b087978c4b5a7d
- SHA512 ff73c37543cd8a2604abc47043a90a6bbd05a58d11566966ea0d205db4301976ead5ed8322bbc5de5f65cfdb54d48f47a96b4a2d0eba70969ce140d8a11cd45e
- SSDEEP 192:9OERz5kD/2OI+OwpyE+EU11ZQrWKzkW4GD5dHnhWgN7ayvWB/CW1Zk9gTFqnajTq:wEhihsp18WKzHdHRN7hW/hl3+sG1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bb:4c:85:5d:d3:23:d7:d1:81:3d:8c:c4:46:eb:12:c7:ec:08:41:18:24:bb:18:a0:10:14:94:74:09:56:38:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 add7d912cc9a917ddf96a5db6b36d0e2e53be8dd8e75c089083b1878fe2054be
- MD5 6b0291e24126124e3014d65bc2f7b961
- SHA1 6e9cc2a77d8fe0141193836569082382d53221ee
- SHA512 8c253810d267d2a61a90f2f7107827168f0cb9b7684ab569ddb99cf941f8a2ea08977ca5d1389b2c8efeb5ca2975a21f9f4905a58210a1e4cc939249b455c489
- SSDEEP 3072:bR9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyf6pu39kP4TCTEWFy5VuJ27/A0NwMe0:lNwMeyXv44lw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:52:2c:ba:76:00:cb:29:0d:70:97:a8:de:1c:a7:81:e1:b3:ac:6e:b4:01:e7:95:2f:6c:69:8b:93:41:81:b3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
132482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5bba8d0aabc10ddc0862429c75877715169713ff3ef5fd93f1d94c655cd9e92a
- MD5 d366a9e45dddf823812370809ee32539
- SHA1 0813e827fbd916a85abe0cd3bbdb39f8630365db
- SHA512 f81b4fb1d3e3d810bd0259f7ba3c28146b6032b70a472ceef203261e0b7289c62a7e6aed5661cbc180f3535b54ad43bd6bb83cd16ed20cf32a7a975dc2c3b1c8
- SSDEEP 192:+Qs4svWviW82ZW4GD5dHnhWgN7aQWrcWYqCE0qnajKs0lS:+TTvWviW82UdHRN7MVBClGs0lS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f8:fc:1b:6e:7b:37:a6:d9:71:aa:8d:28:b2:a8:75:32:a1:fa:9e:95:e1:e4:6d:90:2f:c4:e8:b7:fc:3b:f1:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ab5dd235ae196f81c2cdcb2f848141d033e28402936d2639e65e189e3803ec0
- MD5 da5675d83102821e4ed6e5a319ebba92
- SHA1 5f1c2139fe3f75ec929ca919d27598905bfc67ab
- SHA512 7937cfe13364b0172fde1ea2369bf84fe01bcf44db1717b093e233b904877c1fd79fe9631bb308805ccc8e86dc93fb5485e3113a570bef5bbd89bea0edb5ebe1
- SSDEEP 6144:e2WJD5ocoH1tYk/koJq1fSgNxmTqCiWOaRB5J9Q5fWWQM/hc1H8p5:e2WJNoDifWW5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
72:94:13:a7:82:87:f1:8e:c5:9d:f5:2c:ce:3f:58:77:af:96:40:cb:84:e7:56:a1:b5:03:fc:45:18:f4:2e:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
359530
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
343KB
Virtual Size
343KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc3a49da9e0fbbbe8e3e36372d320a06037313e9d4625bfcbad677804be4dcbc
- MD5 2f2609c59148f1d033159d892f4c600b
- SHA1 42b71e370c841474a43fa8bd83fbc9cdb3838aca
- SHA512 55fe4b78d0a2bae3d1e09e7d2e80bd96d47231dc5f98f792152c679121dd16b8d71ab7424bab3e484bdd5eec959a08be4df029598ceb7ba613f6461431943cd4
- SSDEEP 384:0oe/9pWtHKmW+vgdHRN7UIdwuAzXulGswD53:IWtHvW+zr7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
97:af:18:a3:09:b0:d4:51:45:2b:1d:53:6a:09:57:0d:93:d0:9a:c6:4e:e0:c1:58:73:bb:e9:1a:69:c1:5f:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9dee7c03b39a9380f090b5545ffc2806c0a1a3d331dc1851205920c3497e2cf8
- MD5 c1649b953a4dd55450c1b98e47c36b30
- SHA1 32287e2d66a54e8d6e89726c1d44fae1b78b1f67
- SHA512 9d79906ca416e495996df65eed2e337841a3ecea05723ce7951584f9a786833988260b28cd0592f2ed1b8c80550940ffc914633f160b5f1300164844b0c5c8a3
- SSDEEP 768:TQoOCK7e4oCTW5li8Al/ENw01jT+0wdMBmXAQAzmV3rOIBG1QmNuCsD3:+ljokwHJoMDz6GbuCsz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e5:32:21:57:a2:24:ec:f9:ee:c9:7b:9b:d3:b2:d8:44:0c:30:fa:40:e4:83:6b:e1:4e:d1:15:32:ff:ee:81:8f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
63962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d8cb6bc0df7d517e757d47c1f86956ad73cdb42a09269504f93945d6f136bb9
- MD5 be91a517c61656a962b8e780b867f88b
- SHA1 0ce4d66aba4809ab5345772ce61db00f077395ac
- SHA512 03d4091b0c91fd6daef42c03983347f4ba048ef7a59008624e1ac770e45cd734f4ced358d50f2a79412fc42fc799f4ea29851f0d0621ac097db8b48aef348a77
- SSDEEP 384:2fSv3yPYTz3rdWtWSFP8dHRN7nJP+CcWlGsS6Mx:sSv3K4AzanVwF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3f:00:a2:3f:f0:c0:e0:f7:63:3e:39:98:e4:3c:52:eb:26:50:6a:9f:c7:de:45:22:8e:e5:8e:63:e0:08:f7:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
15206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50abca69647e1fa717c9798d5b9848b9a0f317f0130eec1f25058aad664ad5c7
- MD5 ff0742f354b80d0bfda9841398cfae4e
- SHA1 e253c04b19799970865a19da20136395d5ed31a7
- SHA512 b93b9fcc3773b08a173ddd6224224a1d5ce938f5939586478c8da546e0d74901aab7f18ba97833f298b7b49213ea04cffcff8e8d29d67b066bd13b79c3c1ddb1
- SSDEEP 192:d6V9Zbc+zA95Fe9+s+lD1IpkaZCWl4s3W4GD5dHnhWgN7aQWgSM008Cw7qnajKs:4o950+sQCfEWl4sedHRN7+M0uw7lGsi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f1:2b:cf:28:25:66:b8:86:5e:74:ac:56:f4:b5:95:7d:88:80:dd:2f:c5:d7:fa:b4:98:69:b4:94:ba:69:b1:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
16210
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 163b32f77ee72211589e0f76511eeb38b2cc84cefd3b838a793e0b4e5dc5b166
- MD5 66c1c8c4bfce0893be91fc3894036392
- SHA1 9ab03e44326a893355ce11e97cb53a1317fde125
- SHA512 714fff7cbed81d65766edb51fc25a2c77ee3a8151493b435ec26876501234438cd042cc6f4e8c59e6b9bd48a70393dcb7b2ab68c6d40230c55da85e3f86659a3
- SSDEEP 192:bIg083+o3jWt0NWQdrW4GD5dHnhWgN7ayvWNFP1Zk9gTFqnajT+yGNnUQn:X0mbjE0NWQdCdHRN7eP/hl3+yGVf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9b:8b:6a:dc:7b:ca:61:6b:eb:24:d2:e8:8c:bb:78:dc:10:66:2f:bb:13:56:4d:6b:67:c1:64:63:c2:01:31:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f291377dada9eba59a9858bcf76b970788049b5d40ad7fd096300e82f91ae40b
- MD5 a0b8ebf2e3a5fc0bcf09343ca0e49949
- SHA1 98981ab2d5463dc91723e5e9d183772810de8fb9
- SHA512 9ef53138f68b48249035216ce205dbf3db442a44e01012cedb340479a5deb1c00f1074fa8d2a971e4902a9519ba8e7f593eb6deca30af3d5bd22a2b0621b8f5c
- SSDEEP 192:l2aJYT2YzEZOxd9GITjVWLZRBJyuW4GD5dHnhWgN7aQWR8L5pQ2SkqnajKsWObi:UaJGPI2GGWD6ddHRN7kGQ3klGsWO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:05:a9:91:fe:6d:ce:20:dc:7c:63:25:fa:f7:7e:9f:f0:94:44:56:bb:0d:c3:b0:70:bd:d4:88:60:04:bb:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 07b7abd98559d8bb60964bb05e7f24864e579dc4230b4ba19070e179de589f35
- MD5 9a2e3e064aa5a9a604e0ae4f59dcad6d
- SHA1 8a777a684bf32533a3f668fff170fbe3f0ad86f6
- SHA512 47ea9fa03de43b961d54b96b6e4a979ff0dc621325201daa5bf15c32843c181aa8dd9bfa4acd50d3d45c9489d1a5148d4a8c6bad2958d6a3deff380b0f716ff4
- SSDEEP 1536:sD19QyqEOcQmg81PrZMWHT6NSR/fGxTEhmJEJG7VW:sQyqEOcQf81zpWNSR/ffhmCg7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
41:c0:cd:ff:ed:5e:d6:a9:26:57:02:75:43:02:2f:ae:00:88:47:09:29:b2:74:3d:d7:1d:b7:71:08:3e:ab:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
86522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dc2b1311103ffaf2550982ca6812f721412f75b8568418acbbbcf0a6bb8c945a
- MD5 c0f514387c06d3eccd3a89f9de3d1ab0
- SHA1 822aa5cfca00cc83047834c1ea58f2917b79c313
- SHA512 5c3245d4454567d842587ea1db8bf1263cdf4754949e67a0ff02eef3f8ecc47e858ae1fbe95f87fedeb51ff23bd78e2420e3f76f3c17d24671ba8186f00e2c02
- SSDEEP 192:eXML4yLpBeWsPzGVEzW9Q6W4GD5dHnhWgN7aQWUHbsE4eAqnajKspvA:NL4yLpAWsr1W9QJdHRN77HpJAlGsp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
31:8f:d2:a1:e6:7f:14:34:80:4e:b6:49:01:76:c8:1e:d4:d8:47:2f:32:30:64:41:9c:23:41:a8:3e:f9:7d:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8803bf748d8755f2085e8dd9e3498fc31393b0587c59dd08335939b31e11e53
- MD5 2fc827356a3add0851df51ef1c07fc10
- SHA1 07ccc51669a92189496d0961e47111bff9ddd41b
- SHA512 a64e95754f382bd119ccc88529f82048b90176046139e870cd36b92a0d84b34f8ecfe98f5e4a056d5e0aa0d7187ebd2fb16a2f38e3663cda7baf2d05528a535b
- SSDEEP 48:6PF/irvGHh7kiMIC8oQeYq3cTC+lrl6WlDH4qeFiP3N7pqf2/tiC/PDct6je29un:SEvGB7kiJCcZFYsDsuuCl1ZPF6n+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f2556e7094d27c7355d17d6c12e5763affc47cd10889890cfd3753945c1c08da
- MD5 61599b7df50804abcfdb9cbf8b2ec90c
- SHA1 51a470c924acf03df363bdc953004b2631b3bbdc
- SHA512 f81dd0a6fb21d473d9b399da96d1f0cb4f70baf5033a9bb02d4cd64889fe998dc337d10d46e2be694251dccd6ab989789265ae9475ddefd79921380ce4da5ebe
- SSDEEP 1536:/HdnAO5CIV6ABgNtNUCvGHhH0FHAnw0JcJ:/6O5CIV6ABgNtNUCxAw0J6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 818c2747e5684a27685cf8f22e1fea2c3d6d3182f19bd367f198a741512db1ad
- MD5 433cca9be79a1c115561e6f4ec30a99a
- SHA1 1414db15c48623107d5a646b2b5aaa874567dd54
- SHA512 4a98545b4a4364e64618c403472b818a0fa152e219c166ba2cb9e77440d92a8b14ef6af55c395e7944e7ff260ae659d81a260d0a10876f498bc3972caa5f5859
- SSDEEP 96:VoPp2br54/udEXwhDR8ul+Zl+jSd+SdctSdSZSd/Sd:uPpsqQMMR8uMZl+2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8cebe5d7b0388ec137c19b3c8d3423b25bb4de19466a599df46ca7f3d5cd8a7d
- MD5 e5b743ee0900a6ab45794ae0f0dd9c02
- SHA1 de83933a9479cd0e25ddb81236e16d4b269c7749
- SHA512 60dc6361bd6204b824ce8ff6719a59b7df66855a69116afbff9a626438fc384e2bdbf196ed28c642351b9b2c05edd72fc80f49922ad74f940efe8662aa17aead
- SSDEEP 192:CL36O7gTY7txy95FE+oSr+OPC3bm69vZj2Fz/WR:A36LYc2Sr+Oa3bm6xZjCy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22a8a8815fa1305fba972774483974a7e9be64246bcf7ef9804ab2b90c27588b
- MD5 deccc0508086b5d68fead99b92b79a1e
- SHA1 15c4bf3990dc3ac165b559c3ca1311d64a1b5217
- SHA512 a5c4a4b7b22c6da32830fc63f44c4c1090a07db5bac301a47fabf6d91e780639ba62faa0b523089b0c4c0d663710dac9b8e57db5f100357b1abe1b41db4551a5
- SSDEEP 96:URFux9I3tXCWqnu1BoCinZC5WBU8l7216tHPJJsy:URFux9QBVDkPnZC5WBU89218
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d32c746f48bf94abf88c59892adc9b3ad92e23ad09e81474b9eafe05d8b4517
- MD5 f2778ce77370526cbb5e6212cf2c9fe9
- SHA1 c690d30bd4038b7e7b7d04abdd4f6734bdc29117
- SHA512 e8e6957cc2e85ea4aad56bc4f549418a5ddb6a789e560e6da1248394c867487102fbfe2bec17ac0c9d9023d4b2c6247759e047b64d9aa06b5d5c61cf49fb162f
- SSDEEP 96:RAs60pmzKQk/XdjesAYl4mwOUsptczRWTsVvgxESGi++USQyQQEl723TFTJPHJso:RAsX++rE92jZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 108f9a5f9431a2b9402136c3c532e4d3ff50d5e206349314ac303a017d00f848
- MD5 413fbd40b5002d3606a33e32cee987a3
- SHA1 b06b15c9107d951661cc488e64601f4c8aa1c3f3
- SHA512 d99fe520cc00c8f5a9624046e10bc7bbd555005840ee6e1ce1781cb7b0b81b8b956c256cfdc886d06b5faa9ed715c4cc36c1dfb75cbe242bc8b062549514105c
- SSDEEP 192:B1iRtYa/f7akihXFFEf5JhLJTEIOw3/5VKS/yw:CjYa/f7akihXfEhJZJOw3/Vx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28170bd018ed228b677770a1d7906176cf5fc095d90441295be9b235e6c180d3
- MD5 365410b2559e213c80f08017436cb518
- SHA1 85ed6190b3b5466045b060090fae055cea9c20a4
- SHA512 44b0fa896a4bbdf580317d2b8591daf9ff311dd80971a500692409ef2ae5986ac12abe019eaefaa2fc829c27c1ab2298ef7a5d80c73770305afa6e9f59788a82
- SSDEEP 192:TUGTLaAg8P5Ng2VIfogXK1H+86YynLaGqW4/hn:TUy2Ag8hNRCfxXQetPqZ9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d3b6aa619ed246fb54970bfa13420b6b26ffb0791015373e41f8b250ba35d448
- MD5 fd3f472cd4913e02ae8e0a9217f68e57
- SHA1 f129993ca204442e857ed79c5705ca97adf48039
- SHA512 ab99000d5fa352866dca8428c87663ee74d702dab6d7ff273db7335820e96b77686ae647b81f8b2d7a32ad6fa208022681798af62802cfdb9cc108ab02d53b8b
- SSDEEP 96:fsFqweQ75rVEsTnvWTvWCsLef1DbkKy6TalBp/ehv:fsPVJLGHsLeNDg1vp/0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 63c4cb90aa09d4651bf566be7ad0bff310245c33b91cf04a4caa8384d1865b39
- MD5 7ad9c3c68ec66ee906284725e9ef833a
- SHA1 386ad453601a3e1f678e8074467fed22c23c528e
- SHA512 215dfe7c4cb8f7ee7460c437b7c126ce02ae9a391196e83b20ad312b5528ef105fea655c07c5e8d4e90d91213da8273ee17b4fa79a29ff855392a26a4c427dea
- SSDEEP 768:/DAe5Yc1IoDcnzS3rn/nFnI2nIuc5Cf4/CqMKbPv98wmyky6LQCFbuKyyealJgPh:7jTGY4jBaLQCFbvyy/iOEXT/fF1p
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f19d00cf0d5c80cd5cf727acd1e6481ace1aec420a0b2aae3b9f8d4ffa65ce9e
- MD5 c8e1a03478bdd7b3dead99c500b80737
- SHA1 56466b94acfad74d0860381a352b64a31e7ac302
- SHA512 b1efd3a2cba869304c7f97abfae09e83763b09e5a3c7a926d5a4111827b5f44a8a7c88ef191db169eafaf99c481259adc98a1e00d65114b82aece76bca74657e
- SSDEEP 192:TXo8q2csp6YkX25zH95OzhEkfxfE/tzqKL:TX5qakn5CUS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d3b7a23d4a7548be19dd5e1bea17a8b2a0e5cdf53db0cce9ca37171084d5c06a
- MD5 d3de0efe5df6bda68af692015156e5b3
- SHA1 d22a7546e89d4631dcb8fb46668a98fc7ea956e0
- SHA512 9c58f5bdfd7401452b75e9d2fb15ca9511e046339a6b60f5999d82a1f96f4e417ea41c9cab1ccf5ae41cf81fe974a2a4f1a3884065300e9d2bf6ef9c07e350d7
- SSDEEP 48:66FGqfhrHOGKlGqHU/2J6l1CPpfiDLsFybW8EiZbTLliH4Be7:EYhruGKlGddlIPADS8n4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 aafc90d8fd25e0ddf5fb5d920fc81a1566a6382f4cad8fd224dbd071a1f49cf8
- MD5 16b8635d4246d06dde4f5dc968b145ef
- SHA1 d3b68c299a25382fad6919ed2054df3adf333365
- SHA512 e6b064516b4119e2d17b609b2c394cb0adc49154ba5451206259999a96488927e83f7f943d08446ce13b79a1ebba6df1eae6233a46a56702545a4d3ea32ed2be
- SSDEEP 96:RzQLxzyxJlGPLv02MAxf2vcZVQmG+4iv1BAZOw+ruKEC658DolAPI3BaPg:6xzarGtI0nnG/eTAEw+CDOoig/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0e16f43786b3adc4f8c95457b79dd8a94ca5257098493d67fa6e37e6d05ad89
- MD5 79f99c09b508815974d8ba0f39279aed
- SHA1 b0a72216179fe7928182ef6353e8973150f7aa73
- SHA512 17591835c3c0d6cf9dee0411364ff9fb72234f99b90b43ddfe7b9212142e5045cd40a4187deb4a411bf2a5004f720a84232290e430346692080c70189b79f2b4
- SSDEEP 96:B+ExbIu+J/ffZRa3FNWWryVezoNpZkB09BBLlsOWn8U:gEx4xZRMyVeUNpZkB2BJ+O+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ad3748e6783c556d17829716b2ffe704226390b983546a7292db383d34c95ec
- MD5 8c0529fc7cdc9068be3f145002f0372e
- SHA1 ff65ed5d5a33cc74ec7ad894b6b6b2d55ffc26c7
- SHA512 71373ab4ab7971133edbe69fe08b63d16bb3ab1dc7d99423c4012d645278401ee35941b88a12d4157b2f61679426812ff490bc12c798a260cf062966e1168151
- SSDEEP 96:1JZAfXdCA4WRgXO+7fCcW3UD/wVzzIiSoMvo2xBErifulIP//4HvY:3ZsZRDeWED/wdzIidMQOE/aP//4g
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/de/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38175d497604a225c70b03f94e42b9a2b1b7460f36092941cad31cfe46bd25b3
- MD5 622a05727a111c8e9f24660780fa1f43
- SHA1 cbaf711cb6470c10248bd7ae399ebfab68079d1a
- SHA512 40bab6f1ed0e879cd16a0ca3a7acdce18758191bad07719ed6adfc00be7fd200d02a9ce5ec720c3663db543f8205447d8a3da0c899eb82962243f10f62004b4b
- SSDEEP 1536:71G/Od/qOmPteH3rDrsrFVZVNV5oRfh0Ih6QKBSUfi1jQv7zcduyan16Xtz+Al2H:71G/OxqOmPteH3rDrsrFVZVNV5oRfh0h
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/debug/DotNet.ex.xml
- SHA256 e3e070bd833aadb481bb260111218886a1c78582ae2ccdbcadf49ee31f93e38e
- MD5 a2b6052844b6d57bf393e5f96c5ed6c2
- SHA1 9b071b9bfd0b32ef277f5fb98e8cd332e9a1715e
- SHA512 80c571afefa85d9a6a5dd1650d29491213a45a74a759ae4bff0b117810102cd1c7f34a389ac3d6e3487844dc0c043603668685b3cc6c7b6df8ccdfad36d4f95a
- SSDEEP 384:sFo4JKgv6j3OiZRPi3f2KQzyKu3mnu3yUuEAwAOyfuhVbrR+2KAt2VDfI0J5ae:eOnuiRfOyfhJ
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Analyzer.x.deps.json
- SHA256 34a0d085a0316e58c25478f66c8e4e918851c4883ea32e4e7234f0da5494802c
- MD5 896aa14c0f3cd398bfe67bdeb91afc17
- SHA1 53919cc2e4a7de99b7b945a1428ca1af9a3c795f
- SHA512 9e3fd88df40637aa39e854605b2d01e13447ebcf3e0cceb19f687f5a78bbb18239ae4fe6baa386d44775dc07f84391aa366c0c0b6e0c86733ade38f1dafe81b9
- SSDEEP 384:nH8iO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Oj+3qyz0fZb7X:HjnKGHwa4A6JjMz05
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Analyzer.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7156332466021eccc0aea952c1f87403de616a551f5fbbe14625f18a059ddb8
- MD5 3ed0714402df42948c21f997b2f18d9a
- SHA1 e16335ff4610e3cc5ff203c70f2c7c59d94902ab
- SHA512 762a1280afaab897c0340da0065006af5f0e8e6d63a5ac263dfac075cd9e81c75cb9f97411b9a9878da1370a147d452d2b2831508f5e1814fdf452a1060f85ea
- SSDEEP 3072:BZeLrmCt2N7fzs3rdDoORPxnbAgwm6WbXMxe:BZeLrBt25zs7loORPxnMgwgo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
174362
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Analyzer\obj\Release\net5.0-windows\win-x86\dnSpy.Analyzer.x.pdb
mscoree
_CorDllMain
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Analyzer.x.pdb
- SHA256 1137b6041041b668f45e2af8a488315f314efda943916c99cea3e5459a21e31a
- MD5 51b457c655717c99fab62cedbbdd1f2a
- SHA1 acfa6e2622d277c9fb276648415d64eadf7ed660
- SHA512 f34f26955ba5e0e465a60c1ee1a67259b8cb1511093079eda3dd0e2a56bfaf0fe31b8346a5e44780330596f2151764c8983455973130243a4ed1feb4ccba4a61
- SSDEEP 1536:zurZVIdQyYoJURAVx7tvDZpPLlc/rl9P0FGDc8tzVw3M:SI7vvLe9sFIhG8
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.AsmEditor.x.deps.json
- SHA256 d33abbbd41db8a5745ad4b9e5531c05313c21b3ebadcdbded2b6b08598bb6cdb
- MD5 32c97fd1685e17a04b899ca4b4933052
- SHA1 c395b6fed28f296f537573ec9508eccc0c7e3fdb
- SHA512 3ad0c4f646776612eea15a40db2b34e6808c95d6aaf510f8da692fc8e294e562a75837d3a67d50cd650f2bea861f1b955d146fd6c6e3c1f1c65e0c350cd6662a
- SSDEEP 384:nH8wO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Oj+3qyzFfZb7R:HDnKGHwa4A6JjMzFP
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.AsmEditor.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c9713d753c9171baba5b91c9278518fefbc591279cfdc57d5f12bcb2a1a5864
- MD5 1aae6bb642acf46225a9fd41f7527953
- SHA1 46d0b48c452a6b15f6327e988ca49b1e2ff0e6c6
- SHA512 b52b9e8297bd794e6f2beae00a62fe57d60f85f1968e6ed8cd09faf6bf9a9ff9aeba0f566564538f6c6ca59cb2fbd85e1976950699713949cf384299830be6f3
- SSDEEP 24576:rN2HA4dy4xFSpnTfyrsjDv7fE/N4IO0b1rpB:J5fKlN3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1843846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.AsmEditor\obj\Release\net5.0-windows\win-x86\dnSpy.AsmEditor.x.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.AsmEditor.x.pdb
- SHA256 1329658f2f218e37e7ba29c39bec66235392664718281b6fc4a6297284505fa7
- MD5 2e68ab5490e3bd2c1516be23d6443a49
- SHA1 af0885045a7a1a52850f660c8baf1cd305ec43f5
- SHA512 0268a5734f72095c96c3142797d4131b30be2ff6a3dcaa936e924704a0e01b89d120f67d9c275bf5e9db229b668e2362ce3ca313bccb8ba055ecccf8eb184caf
- SSDEEP 6144:D772ArsYnl/GFCWOSs1Bhx0TujfXHyFbBLxD8LUykNGRzZP:D772AYAdZSQdfiBLxD8oGb
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.BamlDecompiler.x.deps.json
- SHA256 af0ddf7a8fadf48f8c4c70287a09add3dab9c2347304fd97f365d06d277cd666
- MD5 ed9aba5a89c11a00c158434a5faa263f
- SHA1 c67b276d1117eefdf46973d43153ec084fc203f0
- SHA512 b2760f45b769dba716c8fac4114033c629c5e50c1e27bf9206179dda6637507f92df06e676da5d8908ec2759b690b56597b306727bbd2a15177fc9d145f0da46
- SSDEEP 384:nH8KO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Oj+3qyz7fZb7s:HjnKGHwa4A6JjMz7y
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.BamlDecompiler.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b7d5714fe8c0e7b9b8b1ff4833cafa0da90b0d06ba4d20e7cc0ca499c01f611a
- MD5 5b7d1f5d64217d71f177b66918835091
- SHA1 639c4b4e18fc3f87f8a0c947243cf88644b09baf
- SHA512 764b3ebff11fafc53cbfef31cccc0d5a8aa4bb07d871330bfa1c46364bb37df0f2dcee5403810a2168bbabb4d4f15a5de8bc80ad97de679e59c24bd8537c7eb7
- SSDEEP 3072:j4AJbmzsA+j6hE3mj5hzh+Ep/I+vMk9bKszh5XMz9/5tA7gbbZ4iwci+uANwmoL6:jZbmzsA+j6hErv/uMUf1LE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
253830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.BamlDecompiler\obj\Release\net5.0-windows\win-x86\dnSpy.BamlDecompiler.x.pdb
mscoree
_CorDllMain
Name
.text
Size
240KB
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.BamlDecompiler.x.pdb
- SHA256 010ad66254d4d32f167767b1108084e7fb838738defd9d310affa7141a83248b
- MD5 1f039ad6072b7fd8efc3e43ca81157aa
- SHA1 a1e8d106b2f8c9b8912723745b808dcc619f5178
- SHA512 5ddf87d24c2099e854d109bd02e678822252ab479d58f6e82affd7d4d7244bd463782c29da136848c160802984621f1ad4940adac11fd469698d6ae9112c81a9
- SSDEEP 1536:0FR7GTwarzvDZpPLlc/rl9Wqiel8AR0MYOEKN:0j6TwavvvLe9DYKN
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Console.deps.json
- SHA256 4c57145ba55a67bf643b7534ba59180806d1f01513aec08ef8ad081cc07e9223
- MD5 032f68eb3106bc497abd737bf7d4d3d4
- SHA1 9940db02c4f897deb3d124f39257576521589832
- SHA512 ad0b08e91b9cb52507adaa80b4d3498fb7ec6e134499b0bed796737103b736d3b8926fc16da96827835cdac524fd9f9dc768a475ff5e06cb5e2a34581fe30fd0
- SSDEEP 384:nH8dj5G4aaQ1gWJHV2k1krHTfT5SDTJaScHw712vARG7wOOjD:HiGrcHw74A6ajD
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Console.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 77d84934ca584712c067a753df03105d564a8135d41464159a853feffd31e41d
- MD5 7a45f5741c653a41b97fc432c7fac0ba
- SHA1 d9565f4b9443b02f3e35c42091d5e8a5b6669de2
- SHA512 6d5ef4ddf2df8fa12adef6a298b03e04a2234dd8bd6728af4b43536a37c46711854d7c4fa9e9dc416cbacd8e1815cd40ecec30ebca59072c8f4156e877f3f01f
- SSDEEP 1536:QWjGEhpXnpSIXooc1j25sRFH3UssBxnCabocV:QaGeXpSIXoohUFH3U5L7V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Console\obj\Release\net5.0-windows\win-x86\dnSpy.Console.pdb
mscoree
_CorExeMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Console.pdb
- SHA256 29cdc659a8192f35e5be68b58b5f4a0ba1d794176fe33831c459da013eb59688
- MD5 750b66460da1802e669abd54781b72e2
- SHA1 8e25d82a055a259eed95f07fb564060b85a8b568
- SHA512 16a770d6100fea424253f233ba5da6b9cc812dc907aea4eff791570aea6781444e463c0df63ee7916d8b1b040ec67cba770b09bfc8bfb7237acca45c2ac592e4
- SSDEEP 384:xssdrV0xAc7yuRlQlhav4rZ0k/A8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+H3htrDj:xssNKbycV1kbgpPLcYchZrl92hwXPc+
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Console.runtimeconfig.json
- SHA256 d73d166ed2c36560e74ccd1067673bc17c881d570e09394ddd5ef0ffd3d9e8a4
- MD5 c0bbae9a92c0004f0e48a1303834a4f1
- SHA1 6254cc2e4595c272c88200a569ced499f82fb531
- SHA512 29a0025944bc65b708909a18e8d42723de52b5bf9fb191ab7936090f51edc4430791f341229f204e875d0673b046bc71e73842babc72312e19eb9c9019549272
- MD5 SHA1 SHA512
bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c8f6656ca5f8a5e1be58770798a5de945c29fd2c62f84d12dda74c7234a33445
- MD5 194609db5888e53bc1891a1e30e0ba1f
- SHA1 8d9fb91d06b9394fbe12d11b507646c584e39bcd
- SHA512 4bbdad596eb55a0a42d90e793fa88153eda2313b9c7276e6af42c67ab0a80b7d9b64deb733219761b14a093a26b909524ed8bc0011940ff9cc8790c2f81746cf
- SSDEEP 192:A9H3bK113CHoVbYJtJnV1D5rR9BFbLTzz/:0HKCIenzDBfzz/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Contracts.Debugger.DotNet.CorDebug\obj\Release\net5.0-windows\dnSpy.Contracts.Debugger.DotNet.CorDebug.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.pdb
- SHA256 d67c4b7628290e2a372439193e924a872cd28e888fd832c54de4c8b803ca230f
- MD5 d59044d33333488516b5a8e6ddd9d35a
- SHA1 d2bef8aa4c3835d7a462f9d8736871b20e30cdc2
- SHA512 634288a07ac7818671713f5e602cd939158cc7b5bfb6adb9bdbeac5122c364f0714d54d74aba5ddd10757ee4b07815e67608172cc957c0adf2c4c5ad1a0aff8e
- SSDEEP 384:fTs3vuRlQlhav4srZ0k/A8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+H3htrDx9Agm:LovcC1kbgpPLcYchZrl9Ar
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.DotNet.CorDebug.xml
- SHA256 5a7dda2e73efdbf6b28aec769f806281b5055738330db9307066a7f8ef2150d4
- MD5 ce5852666f219af8d69c36340615fcb6
- SHA1 97f48e427dcfa9907b9a465ec1ec3c32c970566a
- SHA512 74aef84eb8c7a85d287ece3319d7f81522c9f39423e65c7827496f58554b9e5189ca3f3739736ed103522e9ff6add9ece99f649238ef1419d02ba139d204a0bb
- SSDEEP 96:OPjw35DrWh9b6ce3wTq6aUgx3O8QVVy/nqs4KU:OPjw976aUgJO8QVICHp
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.DotNet.Mono.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9bd3f931f37f94d5761e4a852ed2c883c539d7b4e9f273a30c56e6f770dc0d81
- MD5 8e1b79cca6a873edf64cff1aac52df18
- SHA1 7ade87ee35b6f1d114d2cf17812bd35c27e32b26
- SHA512 ee7e89c53396209ea325c42758dcb0b24bf8251c612ba22f3a10aa77c66d0b05098e92d92e9289f8954050778e4c15286fecb42869a19a81b954eb33f5d73601
- SSDEEP 192:UjruQ1boHzYaLj+QJuNaa+qtFbTl+zzu:O1b9aLjipl+zzu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15994
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Contracts.Debugger.DotNet.Mono\obj\Release\net5.0-windows\dnSpy.Contracts.Debugger.DotNet.Mono.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Contracts.Debugger.DotNet.Mono.pdb
- SHA256 af7b2dfe53d5d8ebc90d1f9b1ef0810c7babd6d9bfb948b517308e12329a77c2
- MD5 0330b0f7a9b0ae3c0538259f98ace331
- SHA1 ba454a15fb2e17a9055073094b68793f42d67000
- SHA512 973080279da84008ce29a163b490e2ddba079992d0241bdb7ef683d9e5f3485fecd9b991b752ee45bb8da531c84ca44b952127b78e657fe885cc3e6fe64d9b9a
- SSDEEP 384:IZ9s3vuRlQlhav4srZ0k/A8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+H3htrDx9Tr:InovcC1kbgpPLcYchZrl9f
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.DotNet.Mono.xml
- SHA256 b1523f8875f244c09eeaf5c2c3487f63e30df26cb774d5d9f39f8f6279241310
- MD5 7e7966f8c5b6ac43ae9fa2b0dbeec912
- SHA1 153d39140506627de26de0b601375e2e088c070f
- SHA512 a62c9c8b4de49e2cc986469ef912fe22fa21936136ab5cbb8f26abc2d2f709f77664447b8ad33e0c4dc187e3765e523a204ce919e3840dd147d4374db3a1069c
- SSDEEP 96:K0L7e9B9H9//9m9t9VhI9E9u9Hjm959E9wT5hNmccjb/6qAJqsmsSpLEh0fBSHZv:K0L7HyjoqzpE
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.DotNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 30eb2cb4d1ba8e42b4d80162d135dd37d23fe2002652b27c350c7c7ee7a6e4ff
- MD5 a322175d0d1bc7b92b13e45eca746cb5
- SHA1 402e046394a2ffbe7933b9fc006c559220575177
- SHA512 bb50733374f0284da37c9d4a65c7bf7a383fbf88df6280f4f1a389dc501ed8053956519cada06de970343a96ca9861beb150e353e22e2a0fba4da3b89e883606
- SSDEEP 768:5yNVX2JsoyUNNGgKXkWMukUmmXTK7zQ/acNgBqdEzzM:5yH2JsINGgKUnukcsqd7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Contracts.Debugger.DotNet\obj\Release\net5.0-windows\dnSpy.Contracts.Debugger.DotNet.pdb
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Contracts.Debugger.DotNet.pdb
- SHA256 82b0f05ea5394c8c80d871b1e0608cc17fdba23b506e0e31524b00702a311cc8
- MD5 686d5fb16eeaa0c172a965b3a4a465e1
- SHA1 a4b8542a781d60acabe79989b45b10a83d0676c8
- SHA512 75b5da73ddcc45acfc60be188ccdac8615933adeb8cdd772011bd6262582629573dbaab6662801e9414519719b9b15e2477393600035f557215eb9840761d6d9
- SSDEEP 384:y2rOnYXliIgzj3vuRlQlhav4srZ0k/A8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+H3Z:yUkYV4TvcC1kbgpPLcYchZrl9FP0YMI
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.DotNet.xml
- SHA256 717d6b7720d66367aa34aa9a469b06266ddcda5167a57125e3c68e70b9847d61
- MD5 4279fba772c17f6dbe3af8c58fca0d55
- SHA1 b7f4772bcf186435c21a8f939361ad65221ef207
- SHA512 c8b6a2dcf8c4c6f93f5f04c6844d3a8321d74e48d59751b2853b05ce07b02d92a50a01ffea6b70bd8de6e06b7201b6328cde9a6a48bd8ba7d1700a548196a466
- SSDEEP 1536:24Xv9WvoAeMsZqcUG6l2ctVTkRmeFAScsOHSMmGWZXbg0SxLVZzY72rOVlYNed+h:TvA1sZqcUGqTy1c1x5klYNeu
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d026836abbbeb3be6798e92485cf328300124fd9218ed8d4bca83ce4e206c24
- MD5 181a2439c1155441124c1776f8f662ac
- SHA1 b64c8f3d695139568b9ea50c6cea29e4c475d23b
- SHA512 faafdc95559637a0d91e032b91f341ec669b50b38a4d13b30fd591b4c1c760b82a350965d55934f1775a2d7c73cf73d1c393498a76f3f4f6c6916d80bbcad646
- SSDEEP 3072:chlRUzOtuqNMVNFnHOQ3RwMT1Ku2OhpZvhFRF9P846kV:chlRUzomNdhwMT1Ku2OjZZ1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Contracts.Debugger\obj\Release\net5.0-windows\dnSpy.Contracts.Debugger.pdb
mscoree
_CorDllMain
Name
.text
Size
134KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Contracts.Debugger.pdb
- SHA256 39ad51a6542acfffb227af16cca17e5e06da25ad8abeaae2a5835c6726934d9e
- MD5 8bb4035205efe47317d12571c1bcfd23
- SHA1 4b79f51c1594041f23e69e2b2f34c9a0d472df5d
- SHA512 e6b3a85ea76f0eccbf61ae3ed28ff0395493b4208cd156d40471341671fe0e21c82e4ca8da79016b39372d89fd27fc881945df9b5695fc72442d3d83f2aa7005
- SSDEEP 768:ziGP7ZYCHqdtUaSvcC1kbgpPLcYchZrl9+bM5Dj/ZA2h7/gg8un6sJ:NTZYCKEvDZpPLlc/rl9+gh7/HzJ
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Debugger.xml
- SHA256 446228e59ad01eaa3c60fe03ae5a7464ab6f3434a64ed72664057b3718c8d436
- MD5 e8d42a76e5cc5b47e133942def4a39c9
- SHA1 04980372a89d06ac7f11bb825e71f4efdb66e49e
- SHA512 c49c3691f32b33294808a5d70c930f81ff1ff9097a8fa24c77c126377fa33474dbd9e1eed2b6de8ac56e872ab51c9a52f523bfad81d6a26f692d26697224ec0c
- SSDEEP 3072:AULBchXjRm8skPiUH4zg1YPIHJlzyXjClwX1JDUdku18IH19nWl0saTfptzXHnVb:21XnSu
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.DnSpy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a06639a52050f3d0f4644ccd55c7ba1572a7f63b5cf51067f8e9088f7cae2449
- MD5 5897a5f8bb3fdbaea1f5d37f1a0137e5
- SHA1 ad75c9397106112ae52dd1cb93899d81ea0c2d6b
- SHA512 7f6567700efa2b8b01193e58992dbba714c21ba9e67896a39247335886c0f4e6a210d0023b6b7559c509131f83d99e2f16acbd08b0c4ad672b15582bfc234add
- SSDEEP 24576:cpjtDrze3LijKZqaJG0pOUZrM0HkCeD0:cphKOD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
973330
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Contracts.DnSpy\obj\Release\net5.0-windows\dnSpy.Contracts.DnSpy.pdb
mscoree
_CorDllMain
Name
.text
Size
943KB
Virtual Size
942KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Contracts.DnSpy.pdb
- SHA256 4a0e0b0e853fe99588d1b24f8f3c2476477ba757535ec021d11bfb1c5143df51
- MD5 cfd22acd47ec42da2364c0566c047ed7
- SHA1 45b33af49d5f1c0865d797b86daa75e0ded420e3
- SHA512 2fb26cba555eaa30096b9834b83874fe1b8020545bf70ef422e9d3e13e642b40e59d33ccec269570f6911d1e848fcf83fc5c5ae58d1a7aed6d12dc5687bf42cc
- SSDEEP 3072:nPqLJFx9FubuNAC+4aAHZ9vvLe9AM2j+CtVdo0REestHFC/zF2BEkMArDz:ClubueC/aAbHyOkvwEbMmz
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.DnSpy.xml
- SHA256 dbab17022644d59ddc1e4ef029a8c3e4d21982f824ada1d4d58f2951f8a5c59b
- MD5 1b45548c71a6c88ca4878a029412f4aa
- SHA1 157d0375305891953c428f355b9e93ecdc06f0be
- SHA512 3001756cc15294137af07c8c19219cd092fa6f85b907b2b83416c92544a6db73a47c128c7988122bb44971d966fc1fff5a533099c99d936fa6387c070fc44cc3
- SSDEEP 24576:1ikc9dE03ABzc4jK7twTB/Kqx6OkCOKpEE4kdTgL2:1ikc9dETgL2
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Logic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a84656da202d4a809b9bcd73eeb0dd93f780068d2327330bc0dee95f3b0601f7
- MD5 87afaf725af4f6819ff4383247d98749
- SHA1 965cd1dde88bb59b5cc518ce92965ff7113e3a29
- SHA512 5e1f1d71525c3d79d55733009706575bf01115a46239b7245622bba34db4767c43f32eb4db3dc5a241aa72f854515f27f9a9df9ba96ca2eb848bef3327354c55
- SSDEEP 3072:t2+eJi0eDFYQlrWkuPSmDK4444444S7PzmVmG5nL9VO+vzy8SRC3:ii0eDFRlrWk38rVj5s8w
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
201606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Contracts.Logic\obj\Release\net5.0-windows\dnSpy.Contracts.Logic.pdb
mscoree
_CorDllMain
Name
.text
Size
189KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Contracts.Logic.pdb
- SHA256 16d34a2808d5a0273eea930ac06685a4a88e4ca0768c3d95de4e8eff880f852d
- MD5 5799e503f4c7ed6da36cd1f6190ce0d2
- SHA1 6d1ef3329459af1193405b22f153b06be5802014
- SHA512 a18427f1177242ebd63f51ae15a54e8cee639535735554549223f7fa0e7a0da9e8a3dbbc1f9eae9e455a6189c3fa299a42fff61a9e375f608b4dea201b2c2fd2
- SSDEEP 1536:9uA1PNVGoWOtqNLU5uGHYYYYYYleh5qgxFaEJ2evySY:99OoWOtgLrGHYYYYYYlezqgxJ2OY
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Contracts.Logic.xml
- SHA256 33fda0ee7ac15bf11a83cde235fcff8229feb193945d41798a69f971d872f4f2
- MD5 0b62386c2238c2fbabebaa69dae2ff4c
- SHA1 b9c43c2416fa293bf7bd54c8d83a85727f31019b
- SHA512 ea7b2ded2ab46c69078302d124f5b4173103ebf7d89f1fde0abf06b9d46a8053f9126544ee5c6b0a6e47ace90e1611c92b837efe972d7cebb3789b791e4dba8a
- SSDEEP 1536:3OQpWY+12Wf5L2SR82Et3TqVCxC0u/SUOI:3OeSliu/Ss
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.CorDebug.x.deps.json
- SHA256 bb216fc68ca4432367259ca5f193a8ab585e6037fcf96ca84140f7c9589de4b3
- MD5 8ecba0e391875da9d42b00829c840a69
- SHA1 684d3ad6bbced08c61e347e6c1a2a8b5422cf4f7
- SHA512 7776f5f31c44d06577978519bd55246a23b70996bc316127c88549212531dbee933ef3acaed900983c77d8c065623ccd4d5cd45f6c5494f787a5b1dcbf7371b7
- SSDEEP 384:nH8tO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3OjvE3qyzzfZb72:HmnKGHwa4A6JjezzA
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.CorDebug.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82d5c5aa8a34239588949980714d3c0e182fe6e71cdf4c9cfcd0ee63341daab4
- MD5 81b67a86ce14a218ace16250a88df15c
- SHA1 a6928ef0ceea59c90aec19854d373432153a92ab
- SHA512 6b74cabc19915391a0cdf7505bc2e2f27fb2ddd68bf8b9775abad07ab5480cb73cfbf0c66fa711e917bbc4602109f03ae56472cc31eec1d88c5a8d19fa44117d
- SSDEEP 6144:TJ0zwlRTGg9tGPvL8/Vvs7nfkGZ1NCzef0LRsWRaB99zGeTKiAwadLHYpbcU4imz:QwlRjwyVcfktzHsWRaxqeTKiA5W4hFZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
586222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\dnSpy.Debugger.DotNet.CorDebug\obj\Release\net5.0-windows\win-x86\dnSpy.Debugger.DotNet.CorDebug.x.pdb
mscoree
_CorDllMain
Name
.text
Size
570KB
Virtual Size
569KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Debugger.DotNet.CorDebug.x.pdb
- SHA256 54d2d6ea3848409104f37cb8760be7113d1358b3731947935607baa4a39be6c3
- MD5 ffdc1b44064e2fec4c1684dbb9fe9e2c
- SHA1 47fc2e975b3dc7cd13e17bb8c748340024be71a9
- SHA512 ed5c9e2e1a0c7a3338849a17f216ed46e5575f214da6e3ead89d2aeeb6740a27b8c484f2b5c0797ed239074e51d49bdec7d1091cc0f8eb5326a8be81d3f6ff2c
- SSDEEP 3072:icm2MJWhXaUvaNK+9jCxovvLe9/SJ5ZOVnPaJNvxtvEA:icmvYvoDHyoZzJtsA
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.Interpreter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22efb188cde722408b66fae38cc990c6c0d0e5dbf42e624ee8f24238bb095803
- MD5 ebfea58ca8930b12413e620d5d2fa734
- SHA1 2449ff6c76f3fdcb66bef5c3a7ce9faf5bc84eb9
- SHA512 c87eb0ab0fedea11808634dd9bf2dcd51198be2f171bcec5653ea028a6a6090c0ee8f704f6323deadb4fe45acbdb8cb5c20ff46232b2663c3cd2b4c7998ab791
- SSDEEP 768:98ChIxe5mZRwshGtLs+Bl8E55e8JKwEKF+PWA19Kg7QkRIvJlSlWiWPZvxhozq:98zA0zhGJj+PBK8zivzeKZHo+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\dnSpy.Debugger.DotNet.Interpreter\obj\Release\net5.0-windows\dnSpy.Debugger.DotNet.Interpreter.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Debugger.DotNet.Interpreter.pdb
- SHA256 1172313de45e47b5d6cc2835743b1a83c6b01a462b6aeb48539c38ab623852fe
- MD5 0ebbb8e09931176318a336ed0dbfb8f5
- SHA1 30f449294c12cee953bc69c55d1f64f107202a92
- SHA512 1aa76ba568fc81a8fbddbcdb2bf97a2ba637e14e1bddc4dac3160960113fb9aa079719615580d495ba7bce3bf4c3dacf620e93b0e63814e2d7bd686b28ce1ea2
- SSDEEP 768:5al0SBNLUHZuGjvJAGPjjL8VHn9PV+F3HVTIcR56r5151bccyFTFn+OC/vIIjBIm:58NLU5uS6dPEFI
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.Interpreter.xml
- SHA256 40e2b57fa18258f9c5769c914ccf38cfbeafb6d75b8f994ba7891faa4be80731
- MD5 059a3124e76e32f2f7528366e9b20433
- SHA1 da67de25481817f0bcda2bbfee5fd903e8a2c25d
- SHA512 7bfe2612e10e0dcc00c8a8d114b56831a4e3a805bff53b5f57873e6cb126cd3394f462c6a8d8ee999b00626a85ceb9b40879fbc31a3daac23eff8ca54e68fa5a
- SSDEEP 1536:KOpUPaPBsGJ6fyFO1yukezyQJDTF4ZCiTpJoMZ7/qJuptn4475KD6FGpyHDpPQkf:ZbNx+cJ
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.Metadata.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 992037bc15ec9204a0677cae483aabbe2bd990e4672ce9e3904eaacb2c7b70f6
- MD5 c0d818aa697e303cf5f3f6cf8d60a3f4
- SHA1 065c532093f6ef0198a98c6916d4b0c1ed1a9181
- SHA512 fe7a308688f6aca38b7a9fc629e614284198559bf5c92971644cbbe33f39470e19ed6cb9c8b5876926682428ae6f78c6bcec2c083a1db8ecab09e08800d3abb3
- SSDEEP 6144:pzm39ux8YIbQ1PvuuH5/gypI0HxK+qVfOb1yI1tUknwhBax9uUEzUX5zmvU:pzm39i8O1PvXZ/I0YVfObwI1uknwhBaa
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
378746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\dnSpy.Debugger.DotNet.Metadata\obj\Release\net5.0-windows\dnSpy.Debugger.DotNet.Metadata.pdb
mscoree
_CorDllMain
Name
.text
Size
362KB
Virtual Size
361KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Debugger.DotNet.Metadata.pdb
- SHA256 09b3b5c75b281ea2bd51cbe02cb81756c7fc8f5c59d53a78213e84a5e3a31663
- MD5 9707e5bf53373a5805139d7e44cb7c6b
- SHA1 b28bfadd12224aba85b74b1fdabe75e478365d2a
- SHA512 7d7881d6dc12e8392f58646c67dfc024147d13cf59ae3bd1782729f3c9db113340de8199ac11b9cf1cb4190fd4e543058c6a80a52f52d7fcabff5ec4f2d34dc1
- SSDEEP 3072:jWzG3zNUkqCgXy8ELr3ttkF3/Im4A+84v:jWzwzNUkYyfH3nkh/Ihv
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.Metadata.xml
- SHA256 e3ec492f3715e875e47b291b5ef49370e4a004ae2ff68e88186a3701e7670159
- MD5 e6afca2f3acec02484877e9091a19c2f
- SHA1 6a95180d6290c76a5bceb3a45e35d7fc57dddaac
- SHA512 220945eb263c5cab64cad7327f0472046cf47a8f0e5ec71b36d119aff9c9dbc16e8bb66e58880c3aa2c48ca68eaec5dea316a01066483a448cefa040a9edc49e
- SSDEEP 1536:YQfPQ9VMMDwLFj+rDwLFeVVtMDwLFeAVHsSMeDwLFj0jaDwLFjBdDwLFjPRRkDwg:UQsjwzUqbDM9ouz
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.Mono.x.deps.json
- SHA256 1a074fbb0fb68521ea010c4d78ad709ac0f6e7d9f850ff31582d0c28da71940a
- MD5 89189ea4dc6309ca58a1d4c0b90b128d
- SHA1 bb1d74e7bbfaf48280d83d8806e212dff3edac91
- SHA512 1e4b215e30b44cf4cb39816ceebee780bb1c7493440688a5662cfa83b49abf0f58b2185f905398e75ec3bad71ef35b51646cc6a4fef6bfabec9d75e70e297a40
- SSDEEP 384:nH8KO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Oj+3qyzHfZb78:HnnKGHwa4A6JjMzHG
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.Mono.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f3dbf91d6c5863cce3560dbc0f7a473cf3febef68f6d055d871811e0762805f7
- MD5 d9f7ccb8b1f44756d5b05f245bbf363c
- SHA1 d69b5f2c11dd48060ff7a7429add9bbcf0f6e07f
- SHA512 2731cafb196ac706a888fcfb0ce445a48da7ade912d15fbd59eb825fcb18948525db814f8fbfbb422114ef1cdc2055108317579e6f6176696a395fa567de1dbe
- SSDEEP 6144:w4XbHgzrpqMSFkxOoR+V/DkUh3Ck9pzUPI:PrgnlckA/TpzQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
232210
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\dnSpy.Debugger.DotNet.Mono\obj\Release\net5.0-windows\win-x86\dnSpy.Debugger.DotNet.Mono.x.pdb
mscoree
_CorDllMain
Name
.text
Size
219KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Debugger.DotNet.Mono.x.pdb
- SHA256 07d364bf3ba12d31b73c519804611e7baeaa8635157f6b02e1c3ac91b47e85e9
- MD5 52ac60a7ee3014a5aa83206baa98a3f3
- SHA1 aa685d43b03e4f36328408a60223feb672f42227
- SHA512 a1964d362f5f4fa8d14faeafd68e3b37ff092f84d23a94c06ba6242c39bc841ff813f81ec39ffc0fbf58229badcfe0455d9c527b84adc4e4fc53bff435f30462
- SSDEEP 1536:FAJMXi3vhYJ2FCioc0M4sS4JWvDZpPLlc/rl9QMYe2xoe52npBRleYSAljWq5S0G:WUavbo04sSNvvLe9XK7WKijTy
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.x.deps.json
- SHA256 3acc11a717d7fbcff22fe973db256dfde388f54226083fa06edda20721181135
- MD5 b4defbb1e756cba08381c269bd04a50c
- SHA1 447fdd791238148f4f5b9bc8f8c8eedc49fca7d9
- SHA512 01fd9ea021639cbdadab2d99eb0602672bc0ccc172beb5f2b1b8ef8e54a6b308267dc93519b474a6be78135d90882800feb8a3b19ae92b705509fc55ce514d2b
- SSDEEP 384:nH88O5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Oj+3qyzbfZb76:HTnKGHwa4A6JjMzbs
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.DotNet.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 63834a4fd994d55293e0d0ed594ea87b1d96b7b22c85933d2fe3d795c3865518
- MD5 23e7653073ff1b702baa239b0238e563
- SHA1 b44756a8c342e7e23c9b7a5709df9309ba57495f
- SHA512 e8f9a07c6db8941d3f01ba38af2d12a2b253aca57cefa1545d21baf1c3ccbd23ad0527a928ee6cd798ede95c7aaada82d4d6dfc0efd4440297a4d8ba708790b9
- SSDEEP 6144:1bbtCcdz7hYE2yU0GrG7vJoqoO0SB36t9E4GUeLl2xJBYHO5RMC697Z9CS5nqw:hbtdx2/RGTuHO0SJ6Q4GUtYH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
282070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\dnSpy.Debugger.DotNet\obj\Release\net5.0-windows\win-x86\dnSpy.Debugger.DotNet.x.pdb
mscoree
_CorDllMain
Name
.text
Size
267KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Debugger.DotNet.x.pdb
- SHA256 35e4a744fc3751d32b419d1edc6e4707fa51dc69837aa032e4772484251ceb20
- MD5 bc5ffa03459673dc92f4bea97fddd28c
- SHA1 ee814ce01f9f9296fece65aa91b2d2eec196041e
- SHA512 f2da03f90952b76e472e4e0a54dbdbc4ab918c6c7eb8827d02cc372505f10dde42bc3fb65a0cdbc86087ee9f8e01bf5407a81ee539de63c6afb3b583db695b10
- SSDEEP 1536:KZuT2s6DXcsHonDpCTgsvDZpPLlc/rl9Hikx2PRzRySe7OpHWpMHINzTaiXX:Kwis67HvvLe9Hh25zRaipdH4+iXX
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.x.deps.json
- SHA256 7d84e09e1cf55b6aca34d2d6c4a5343b0a43ad7f1224eee763f2c7988aeaa1ce
- MD5 d2ebaa90e40477c3c806a727b3429270
- SHA1 aa0b0aa2c5bce93304bfc49706a4345001870070
- SHA512 ab59cb03a38bad4968f83c7649b42b8a9c71fb7269063324f5720d9894f77387bbf2df07733a41a8f8d9bfd8090c95edbd695b41b645d7e3922258aabb50b116
- SSDEEP 384:nH89Q9PcKvvZjmT3BO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Ojvf:H2Q9PcKvvZjmT3BnKGHwa4A6Jjnz1N
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Debugger.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3de282aa73e16a1d87ae03536c3f70626469f275e17917d49285fef7659a231
- MD5 1693d42ad1c27b6c618bc9b8e4752d51
- SHA1 57c010a16e182f395722b1d846ccf817be7518a4
- SHA512 f752e80ea2bcc9eb0cbc8d980364a6c8d12e08b4eb98df2d2a6ca4b598c2ed344266092bfb1051fd013f9dc3c52fc55affbae956d0a5735e4a8f7534669f7520
- SSDEEP 24576:WOr8i6H9i5FVj3uyIKyWRzauE2oviGgv2FN51B9kREcegF:4H9IF4DX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1207526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Debugger\dnSpy.Debugger\obj\Release\net5.0-windows\win-x86\dnSpy.Debugger.x.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Debugger.x.pdb
- SHA256 12b70953e5acb804df04c3be195f2cb79b435dd52d1748c500a0040f6f4a3389
- MD5 b1531acb8044c692f961ead06df8f7dc
- SHA1 b709d932240f8ac858ed6d3391a523285d5fa2cc
- SHA512 a292fcf6fc8004ed07ad04f9712e6430af996da05c1ba142b8afeb9d113ce88a71584932d10cffb52a672c22b6de962787535116a5e122357c79b98e13456c56
- SSDEEP 6144:fPXAJlP3HUFDf1k4flTHyr26mhipPqhkDBdEZKQ:3QDKtX+H4
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Decompiler.ILSpy.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d329dbc74125ab92fbcec06ddc1414e215a74153c280bc9781cae093e603897
- MD5 2ef0a2cb16f80a3d6aff1ab4c481496e
- SHA1 03a92c4e9dae5426afe75a1a98a11e88d237386c
- SHA512 29d7597fe70e5811b3f811edbfdf2d9d15d196366b72c76f1cead3381ab1145f602a6820d6b4ef657dd2757ddd61af609e1519fb35fa020cbf25c56df41fa89a
- SSDEEP 1536:i980lCFVxjwshX+hBC4JfO6dYrcpcbJDo3o1qFPHtUzfd4M0w456kcGO6s:GPEmshX+FJftOrd1SFPHtE456dP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
101666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\ILSpy.Decompiler\dnSpy.Decompiler.ILSpy.Core\obj\Release\net5.0-windows\dnSpy.Decompiler.ILSpy.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Decompiler.ILSpy.Core.pdb
- SHA256 5e67a1eabfa5bd1888f290149e159cf1ccc9b4d582b35cf8789983caa0ac1600
- MD5 66581a97a63797d3978a399734cd02d5
- SHA1 175aeb706509c9c514f780cb402f5ee62625d61f
- SHA512 785fa35560aafb1acea4b176cc396aedb94863890788a4cd251e9e502beacaf2f52407689f17d1071b7077967974e612ac0da3bac668bf153156175327199628
- SSDEEP 768:zzYxQmmM05DzcV1kbgpPLcYchZrl9C3H6IoSDad0QL4:xD95vkZpPLlc/rl9CKIofL4
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Decompiler.ILSpy.x.deps.json
- SHA256 944f2f019b9c52cc425bbfb81ff5b6f126841090b41e007916e4e46bb7fa38a9
- MD5 fece0fd46698e6f37d097469f706a6ac
- SHA1 2bf8b02bf335d5b7388997102ce910a92e73636d
- SHA512 ee700af4f8b22c81da5accd139b50421c86ee768cd550e783b93d372da3c8a70cae73492f68789620ae1350de56e96ce429798e42139a0045416b32faeffb013
- SSDEEP 384:nH8VO5G4aaQ1gWJHV2k1flrHTfT5SDTJaSGHwa12vARG7w3Oj+3qyzWfZb7Y:HGnKGHwa4A6JjMzWW
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Decompiler.ILSpy.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0457947e885befefd9cab1fb33666a7b6c05664a60a819f1510be7ed1f45f49
- MD5 1cc594210e498086c22e0a0216747ab0
- SHA1 c59ad8b339ab5fe7b5d1f0a0be6f14f017b56d5a
- SHA512 ff3e243d3dfb80e9f7b3cdf72b784de3ff1f140c083528b43eec0242e08b52fc341dcdeaff3514c57d82a6d62c64f7b1b76c2d439676f3f1ff397bdbf25e3073
- SSDEEP 768:riszD6KfLR6pkm6VR1nqjQ++JCee4L4Y1+7:nzD/6Wm6rgjn+Ygs1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\ILSpy.Decompiler\dnSpy.Decompiler.ILSpy\obj\Release\net5.0-windows\win-x86\dnSpy.Decompiler.ILSpy.x.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Decompiler.ILSpy.x.pdb
- SHA256 ec49c62ff5c14c6c770934f9188641e6510453bfcd1f04750d3b2d86b42c0e96
- MD5 90ad1b553c7618735b1fbb863cd38246
- SHA1 6663f3f170889bf36fd92b2c47be393e3e84e38f
- SHA512 4712c416998542a2a4eee09bbcffb369899de4d835a7b6784e33448782ad454d124fedf366406468fe2eea8212b34a9b87f4610ea6641171d6ee4e4c2d9fcfb7
- SSDEEP 384:Wj1nu03vuRlQlhav4srZ0k/A8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+H3htrDx9YB:WjdugvcC1kbgpPLcYchZrl9Rm4m1
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Decompiler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cda009ba0abd7c22eaf28c917291193853fcf5189913f29845d42dbae361e302
- MD5 07b0f9afb082f6e5b3694bcf2de0cd01
- SHA1 26bd1d8a8fb6ee24044f0d09cc07a66158bf0423
- SHA512 8af912133dc748e7a1f5cf1397148c0e63b1b14375bf5a5af2e6866c6eb66c8a313296754a2c2dd93dbc86cbb96586114df51af99e6297d87c24f55d940a1532
- SSDEEP 3072:clPvzbDP1jujpdrZyvPCWAi7djg18tffjr6mV+ovdJ9mORR8:a7n16jpd/Sg3qd5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
214994
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Decompiler\obj\Release\net5.0-windows\dnSpy.Decompiler.pdb
mscoree
_CorDllMain
Name
.text
Size
202KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Decompiler.pdb
- SHA256 93433d8cfea83d207f335f47ebfa11988e1fc3792c1640d797de334e64c1c08d
- MD5 c9565685378d27e2a983cde23fc7cc7b
- SHA1 df9856f0d461873e53782df52dc24ee87eb7f41b
- SHA512 f13cd02cbd8ea463e047d68253ee3c98a1ddce6d4f964ae6d35469e1b151316ebb499abf17348dd1dde3a5db50d7a4fbeeac6d2dafdb4dae9f22f4e48bba31af
- SSDEEP 1536:mHxM9McUcg+IdPupfHdxkZpPLlc/rl9E/L21UBaod0D6R4goB:WMXbHHMLe9MK1UBaoOD6ygo
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Images.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f09ae72b89b2ccee1d06a6108244e2c48a17214dc068e3fbbacdbc6781fbbf1b
- MD5 1c028a62ac48fa4d993385061b00b5c0
- SHA1 5ace527cfb6db9b5550afa392c2b93346ed8b027
- SHA512 086e9fda1334fcc4f17f19922a7a9ddea0c1e6c4e393cc054fc14cbfee8f05b738eb25c67831d7d36562892e01016d54b09c15894c9bd490e089cc1d8131660e
- SSDEEP 6144:oZ4uQ4zY9l0CO0sq/65gi/7qZlblxle7:oZ6hRO0BqW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
488218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy.Images\obj\Release\net5.0-windows\dnSpy.Images.pdb
mscoree
_CorDllMain
Name
.text
Size
469KB
Virtual Size
468KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Images.pdb
- SHA256 e0f9b6e0b294fa9c85603974a83176fcfb8c3acf8b4f793fcbedbd45a2cf6209
- MD5 568433f31d561db2dbc41ba2c01ab122
- SHA1 548ca73c1590fc567572f36fc8c66f837801464d
- SHA512 3f8fd32ed6960dce241487b0113c9879cbe81f4bd7a4d2c603f73f3ab5df2226e2896b38fa588a4dcf9d6fbcea08480887bcf4e3cc16076155719584cdfa24a9
- SSDEEP 192:LPMeS5RlQlhav4rZ0k/A8QZSb8eT16Z5lYxw3nt/LM/Ywx7kSkNV6apH2fCcI+HN:DTuRlQlhav4rZ0k/A8QZSbPEZ55LM/YG
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.CSharp.EditorFeatures.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ffc69eaec54819cd97a9ae34c088a41a26c186c31b1618c95717eabc69c0ab9b
- MD5 cce48fe96bdafb4adb1d4518bf87f840
- SHA1 e4897d777311957187baf13971fe41be0d3cbd74
- SHA512 e334d921d3f86484e2a7596946a5886d144ac4e351166fea2f9d90c9adab9d3a3932c2b03150649a57f192e02d0311f4d186bdbc508bd8f8dc0e488d1ce85ce5
- SSDEEP 96:zSlyfdcC9Qt3rTfjokf7l607MZ0YKmx5GxoXnpuDFPtX+zdaNB1FyHT2:OlyfkH7f7l6douz9i
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn.CSharp.EditorFeatures\obj\Release\net5.0-windows\dnSpy.Roslyn.CSharp.EditorFeatures.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.CSharp.EditorFeatures.pdb
- SHA256 59f0468b3c63537b895eecb2ee7aa2ae98b16fed037825d72d2bb78aff6525cd
- MD5 392ae708b3c632893f8244c5536f7847
- SHA1 f5d83cb8616b573939eaf3a88a22bb3bbc0d5d07
- SHA512 1981a32c2dee43b0af5e7888aba05ca973568a6e3207525ee4057072be0ee9d6eda0a13c09addc69fdc87d609c63ebe20b1a05680eb5ae54ad007dcc29538342
- SSDEEP 384:P1HoTLu3vuRlQlhav4srZ0k/98roWA8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+H3h5:P1+uvc/1kbgpPLcYchZrl9nD
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.CSharp.Internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9055b592c29c5ab9d58f4815cfb7a6006543ead6a76a5a601256b4f3210c1037
- MD5 7abaebdc2348aa1be6aa21353d275e93
- SHA1 dbeb975eb9a553bf2359c349044a3c9cc3ff1d64
- SHA512 4b7dd561a806be8d74155643871c3c1c8748a7a031e7d96038a79c0267ad8c7c393445981f13c540ba26bb0ffb5cc98ebd64ee34ed4bb4c1f0ca7d97cc057082
- SSDEEP 384:/g+jwzCD/ZnQupmOyVnfn5nWVP6znREaFa30EJmpRzp:jMzwBnQueVfi6zRiksYzp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24394
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn.CSharp.Internal\obj\Release\net5.0-windows\dnSpy.Roslyn.CSharp.Internal.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.CSharp.Internal.pdb
- SHA256 ae52495baa7a691da66a745e3f7645c888664b2aabe05d0f6dd0f5623e063cad
- MD5 5529a408caff1769b7bc3f56fea24812
- SHA1 8a4a0b23c95470038a421d6dda6614e71028ef32
- SHA512 5a319d4539c82d7ee70c67c5aa8ee41006164f09a7c82715250afcc17115bb8c9e41371bdacfa4bd11cf53d7f7014db299cc3b324397b878c3b353a03df8bb7f
- SSDEEP 384:f4UnyB1lQlhav4rZ0k/98roW8QZS+EZ5vLMNdapH2fCcI+H3htsxaOhBd7YzNf:f4UnetDSBNLUHZuMf
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.EditorFeatures.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 16f43b2f55a63eec692f2a9017962cf9feb8e5516105b9e34597fe5d320a3a29
- MD5 33dc2923f257d1d40bcda2553e426a20
- SHA1 c45d48a2c7715714398813484f24dd78d576b2ba
- SHA512 fd7c0997bf193c7e5901e73e7450af6e1d967d08ffb25a56d849d0bcfcaae7863bbb7cf835c18fe30459f6b690e818e1d6f049d7241076cdd2021a8743a331be
- SSDEEP 384:lNBHUn2hSAA5oIy7vHvx/48uYad93N6PKIzfsI0zA7:3Bs2hZ9uddWCIr0z6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn.EditorFeatures\obj\Release\net5.0-windows\dnSpy.Roslyn.EditorFeatures.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.EditorFeatures.pdb
- SHA256 8481113d741992fa45c33212d69983c1c5447f07148123862e7e7e51551d1528
- MD5 8c9fae659f70654c4cc0316b145fe30f
- SHA1 e9c373c18b7afe65b20d5516d031007b879b6e4f
- SHA512 45a5e03ba7251270f24f46b5e81c6e0c58cafcdaca03bdfe49a08111d66181bd4d841f6ce2233bf63704ec151e3c2d9dcdea0a511c8e933ce00a0f6cbee6a526
- SSDEEP 384:sLYOxPgVLcyiu3vuRlQlhav4srZ0k/98roWA8QZ1kbPW7nXZ55LM/YcU6apH2fCS:VVMuvc/1kbgpPLcYchZrl9p27LO
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.Internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d534d6650838317e25695ad15aff82a27fe7aa6f7d6932872f7219ea9557f14
- MD5 93cbecb93b241f9f5448f041e2e58b95
- SHA1 37bea45d94100f2814b7ee50a6a8bec27917f084
- SHA512 8f93639426220d1ede7c01295c67192a4291489d98b4c717354f042c18654794737a06cab8e8b15cc90ca4e4d645888d0563088c63664563b952be3482a88d1c
- SSDEEP 768:BBDiPmnZdIfuw1qBHz/iThx/BQ5YTVKD8WdWgC+1Bg8C+4znE:BwPm5w6OL/yCTxWd3C+BC+mE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn.Internal\obj\Release\net5.0-windows\dnSpy.Roslyn.Internal.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.Internal.pdb
- SHA256 1847b868853d3dc5f4ad6d5aeb08c7f2a6ca8e05be04976079e891eb47bf81d7
- MD5 7de1d23692d54aacfeaa933b5ce0f059
- SHA1 9f1814ab59d014129d22fc765d54077420321352
- SHA512 5bc8199625d74532d3010d8f01946aacb92028524747df585cd6ed16c46f9a159747c461b4f38ba11cd714b07e06110afd209404e234796efc6a684fe989b91b
- SSDEEP 384:lascl76YGRzn75IMjBtlQlhav4rZ0k/98roW8QZS+EZ5vLMNdapH2fCcI+H3hts2:lasclgRzKMNVDSBNLUHZupWpvW9M
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.VisualBasic.EditorFeatures.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e48e5a2f4259ae50a11dcdf505bebb85039f21e9ddd59e04c018a0185177547
- MD5 4888512720ec76d7a7a516659bed77df
- SHA1 325551eafdaee9b889390b24fdd6d9327d820917
- SHA512 19d1ad5c47ea9799db85a17b1d622faa6ea91a30c6148e06ec05b10e56f3d27bf69b70ba556fadef6d568be8f645ea07ef1a3e2912fefa8eb7db04c0786cc6c3
- SSDEEP 96:2bNUY537U3QOIk3qdSTnaNf7l60uBZkSmxtiCYa7R8npuK7VItX1wumzIH8BQ8B0:2bNU23bSGNf7l6l4IVIFwumzIHNj0vT
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn.VisualBasic.EditorFeatures\obj\Release\net5.0-windows\dnSpy.Roslyn.VisualBasic.EditorFeatures.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.VisualBasic.EditorFeatures.pdb
- SHA256 ae50096ae35ee98daccae30e6a1a69a40286ffb201038c6ae70587382fb53df2
- MD5 fdc71e92b29d328a57de3e677b677b87
- SHA1 cd13392e72e4863cedf113250c42e4d3b4f79894
- SHA512 b92657ba960fd4833fd9fdb101da66d86fecb366e5c2d077e7c6ac2492c968e49c08b4193314dc65e6a934293b7c76631e6c035a97ef585d0a91087b1225ef4d
- SSDEEP 384:aFpTMcyCu3vuRlQlhav4srZ0k/98roWA8QZ1kbPW7nXZ55LM/YcU6apH2fCcI+HF:aJuvc/1kbgpPLcYchZrl9P9
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.VisualBasic.Internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d993cc3ea3ca58726d67e93d2b317856ce18edc562855719f8e25bf19cfc43b0
- MD5 284c6392f85c2dc5cca29b2f674569d0
- SHA1 5f25633f0e1f36dbca502f5fcfdd4073e6296387
- SHA512 a69921c003b6bd5aa84fe98485b3f1be32fd1351ccfb2b55e1e924a3b21a0b25508723275004f560076bc90b1af750843a8588c6eb3967ba41ef13850a8c863d
- SSDEEP 384:ePxa05QJUJKq5+Ep+CcnsZI0qrkK+BResuRsXaIkQQ/xc9lYYTJGRN7r1DRlzFJ3:epahJjQ+C3edr38Xa55XyGocpFzy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn.VisualBasic.Internal\obj\Release\net5.0-windows\dnSpy.Roslyn.VisualBasic.Internal.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.VisualBasic.Internal.pdb
- SHA256 dee88794412b4501272ee358dc0d1027ccae4fc1d8b719f48d1a70edb1f484f0
- MD5 9525cf9bd149f8536d9e67cd864a76aa
- SHA1 581bdc5c1971259bd17329752974cf6c3b0211d1
- SHA512 399a4390574923734155ab5d9c3d2cff80d36167e60e95ab02462308ec5de377839529e7953ceb87316a1ed0fe237eaad99f09260a722f8f0091af4346a7d6db
- SSDEEP 384:xzR47/k5mFpTiWtlQlhav4rZ0k/98roW8QZS+EZ5vLMNdapH2fCcI+H3htsxihiL:xzRO/8WVDSBNLUHZubrP
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56191939435f4a232b17a8deb189467275ddd9ecb74fcd116f00f0ae0a2e76a3
- MD5 3fe2234fe1c2501e54c036e67c2f3d90
- SHA1 841f92a9f29a69cb1c482016e92eee57403ba478
- SHA512 bb3940a323eaad32c8ff75b71473627304d6d86fcc8a7b148152c0b68191f0f80d120cab0a25b1e46ce5a3e1fe83645d5a2a306cce34c3c5c469918b86f04572
- SSDEEP 6144:2R6kSCwvV5YPystxLRmRjfyw6WYoN2GzXm4BdAJKzMsU:5kBLrwJN2OXmyzbU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
363614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\Roslyn\dnSpy.Roslyn\obj\Release\net5.0-windows\dnSpy.Roslyn.pdb
mscoree
_CorDllMain
Name
.text
Size
347KB
Virtual Size
347KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Roslyn.pdb
- SHA256 4115bb998ba008aa110863aeea120e2469a5cd72fccf3edd346dd6a6978d876b
- MD5 8969c45d7977f33ca436d48c8eef5c57
- SHA1 8145d40ea72914be45feea23fd6e17ebde775b5e
- SHA512 299cde4cd790728ae603256d4b72cbf655758fd64a037a60b0daf0715f4bd68a5b3079c09779764b1e999cc60c807f2a88630d190934d98f5b037a280415d8bd
- SSDEEP 3072:arH4Zv5I/PmPml8Rm4xgvALe9JT1QeXuJygnsgO/k:arw5RVxgoyvucZgO/k
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Roslyn.xml
- SHA256 ee8d91ecf6b23aedf2f4f2fe29fbe638559f40c4d970ae71d9f360598a2cdf13
- MD5 da26bab606eebd4ea7f4f7a7ffb53d59
- SHA1 492e6dd10781933e34bfef1155a7b2b0759d1f62
- SHA512 2608b8aae251426745bba97a6e2108be47d39b0bf0a665c8fa96153ef4ab68fd627297330e42fdfbd7e4c9796d7317f41e34c73b1d4bcc2bedb94c61727236c4
- SSDEEP 384:CRl8p5EKnBmdoSvF9dyTXkXw7Fx9K4cULWD9EcG+ERIl2:CRl8pQQrHF/cvD9EcG+Hw
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Scripting.Roslyn.x.deps.json
- SHA256 83527df1573683ddbaa418d92673d697089cd40ee52d4bee8a9a3bdde7f74e67
- MD5 0d7528e912232bcb636d9a837f226fb9
- SHA1 fc1311fd20ac26730f723930a6871713cf94ab05
- SHA512 e6fc59c481258d29ad1c55b2d8830549a7e9a4413965c639fc5005ddddbcfcbe8e33fb589bec045235509f234114df1b56031e7cc2f3afc5e6b6a1f148253711
- SSDEEP 3072:YasiMsAXu+e6u1Y7AFnQznuAtUMklcu7kRWsZyq13TYsecbliUMBHwRF3nlPqxyE:YpQ
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.Scripting.Roslyn.x.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 92fe6f6cc67b84a512e11f453f9b91b1baf1ac24273b5dbebbabee4f675f3747
- MD5 d41c3528f927aeca19d08bb65e5198fa
- SHA1 d9e0ea4ba5cbfaa77d6cfc72ea453f2bb6652815
- SHA512 f30b69e274166ce880c585d47234d0ed806b46db1777ca8486cae0c8d24e8118b21ac1263fd3761508760a421889b33fc81add36bd18d4fc4dcac57c5d8a661d
- SSDEEP 1536:WFqWQc50tEmUfJpb6KUlftQfeKVQsnVsi693x:WFqWJxmURpVbVQsnSi0B
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\dnSpy\dnSpy\Extensions\dnSpy.Scripting.Roslyn\obj\Release\net5.0-windows\win-x86\dnSpy.Scripting.Roslyn.x.pdb
mscoree
_CorDllMain
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.Scripting.Roslyn.x.pdb
- SHA256 1266482d5d5c38e527f23ab5457ae043eded833b77ccafd53275c4b61be4306f
- MD5 099d253989389efb16558d5ade97af73
- SHA1 7f24bfff236438ed5019e54b6fab451c19d9cbe2
- SHA512 3c2f51ee5792c8c014db64e304ee0be53e18f1ecae35a5b45de401d819742563c19b386055bf98e1741894e15dd5a1f232f7b2113f3f26d998a2fae15810edb6
- SSDEEP 768:3hbgQSFPguvc/1kbgpPLcYchZrl9YnyDjnFLE:xbI4uvwZpPLlc/rl9YyDjFLE
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.deps.json
- SHA256 8be71d9e9c86ade76e8c938349c0d8a3a7261bc0cd42bcf4539c052a17e2f572
- MD5 f7097ba79caf67216ca6396612b5b103
- SHA1 e789974773f1b71833fa235ad8ef9f840fc8a61e
- SHA512 608e5d89483d6a496580ef4c91e7bec301d1e24f209721c87b67d8ebbc6fa2d1aecdddfd0e15f5cf529d813aac0b1b71e6ca716b83815c3e8bd9b1562c23da8d
- SSDEEP 3072:V7bDMsAXu+g1Y7RQznuAtUFklcu7Q4t1Y9fLNJDRgSPvxUNgblbZYSw5HjHY:VzD4
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5c5a4f7e178046ab14282d5c3baf025365e6d1b5225d65c78aa6b5b16ab014a1
- MD5 5213d9619ca9011f09ed3d0d65b48166
- SHA1 54110aa555a2c74f589909fc464ba265bafa8928
- SHA512 22b1100617a6a027db4e781898fe63942b9a1075b40f55ac91783db082ff6264da65f115b5711a0af73b133fab281ef176689ca58e26a2fb89fcb07894074d43
- SSDEEP 49152:fj5pFt9cM1iOnCwWtVzxNc4RbKosXWXT3gX/24uS4D2:fj5nPCwWE4Kx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3570430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\dnSpy\dnSpy\dnSpy\dnSpy\obj\Release\net5.0-windows\win-x86\dnSpy.pdb
mscoree
_CorExeMain
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/dnSpy.pdb
- SHA256 694b1a5d6a3f366eb3fd51bce5bbf4a3bd33913f0aeff13fd44bf1137dcce5fe
- MD5 5c8025c13065562871d9eda52bf19bc1
- SHA1 43b2f0fd9af750b19db10e44d20c0c29e614920d
- SHA512 3d3c92ec55d466eeb038368c4c8c6b2451626c799a189b003ed5d0f5401659904f8ed8f560567f96981ce1664b17abdabd7d3444e9fa3cf2df8e0337c4be7836
- SSDEEP 12288:GrDZS1ogthx5uUxLl0KzTTWbyvT7yZGZGbUxL7PpcgqG2Om7:qwoWuJKzvIyvT7yZGZGbUxvpcgl2D7
- MD5 SHA1 SHA512 SSDEEP
bin/dnSpy.runtimeconfig.json
- SHA256 d73d166ed2c36560e74ccd1067673bc17c881d570e09394ddd5ef0ffd3d9e8a4
- MD5 c0bbae9a92c0004f0e48a1303834a4f1
- SHA1 6254cc2e4595c272c88200a569ced499f82fb531
- SHA512 29a0025944bc65b708909a18e8d42723de52b5bf9fb191ab7936090f51edc4430791f341229f204e875d0673b046bc71e73842babc72312e19eb9c9019549272
- MD5 SHA1 SHA512
bin/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 962332e8c8cb459fb2f7dacec5d7a618cc53b1b49bc1740156398c89742f43fd
- MD5 4d0b771879de85137ee7e5f0d4bb4b16
- SHA1 fc32cccd0cd5c3ebd968bcdf48e32a7ea25e9bd7
- SHA512 bae39862ea07ebc5c9aa07a7333a880471baf4bf52eebedc03536e45584887eecc1075e0c0171229a54900ab93a66db9f666aa631c160912f538666da8c9e980
- SSDEEP 24576:0eTHIbE7MJp9VuObrLhR4r9gBLKzcWQSv7fwlwhe:U1JoQJR4rm6k
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1151870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\dnlib\dnlib\src\obj\Release\netstandard2.0\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 298e83ba4ca4e31d906514053b93030f0edd8e4dcb795cbfff0bd3f0a2e4392d
- MD5 01211bf32d258dd643732d3c83d43cfb
- SHA1 f53d9ab1d97667292a3616f0c42a3ec547b5a784
- SHA512 daf9443808b5f517fd795131e439362224ab698ef717934fddf83017c358a41a1498c5d0e4baf44d4c05d0bc882ae7f3b74a0575015cbea3ea9d8d7e98f62c10
- SSDEEP 96:fzdyjB7kiJgfoYl3Rgt2VJCl1ZPCa8E6n+:fzdyjB7kjf/q80NBn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c35e814d755585c623fea2f2fe9e052723944ff85e2e5bd94ab824202b8ebb4f
- MD5 704032fa7a86f81c3f78c832b3c87985
- SHA1 08ae4e084a9a3d0b2c1b6b96196f8bcaf985aa0f
- SHA512 5802fa5614738e2969546d6d53dac324001e2111ac6f2bf493b0c561d25e2883f6bffebec8619c833bb31f63ed953b1e88f842cd75ace6ea63108726a71b3a6f
- SSDEEP 768:EEy2T7+qbnABv47lywpr+c6Bp+92e568r0YDyPvao0qauj9bNaNnt:nHdnAAxpr+c6Bp+X568Q/HabD8iNnt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5a2bc67179a0709cf5721012ec6248d80150b598edb53ad105a73248ec7cc0c
- MD5 990330f99b05aa82a6744bb996fe72ab
- SHA1 3e7e244668183c0df7828f604a00e72896cd577a
- SHA512 1590da442fe7818c1e1aec8e5a0b94e099f124ccaf1815653cdf45279dcbfdaa1ac2fd5ff8767e917afae055acb8c8cbb7f36a3f331f554839e5900b79825a1d
- SSDEEP 96:Vx558nLdEmwqmDl+ZlIW8kCjSd+SdctSdSZSd/Sd:X5wh5TmDMZlv62dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea917ee66aae8917b41309999f9323fbb70c6263cb51b5bf00cc395edbb89e57
- MD5 c5693986d36536dbd48adb53c8c1e05b
- SHA1 6909a8dc6df586eb4b10d1cb3761eae03ffc290b
- SHA512 cbb0add5350c76d9ee9a8e827c7973981cc3248ab06ee94c7bc804d628a16db85cc8a0518a48b506ca3013245e1d296b070552e6183036432e27af58b7bd2281
- SSDEEP 192:+m6O72tnWi1X1Aw6tFYf0Q60QHQHQ+8pFCrnWR:+m6ltX6t1Q6rww+8P3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a70f427a3116bbe86e798c68040a892a73f41d621c24d883e21fa065c0074d75
- MD5 edd2b9293987c706e0eaaaa8fba1c174
- SHA1 9e5b78bfdfe87899103f6bf16144b5849ba13e1c
- SHA512 61b8e22f474fe551ea87442deb9b3a97a1b21cd6051949bb24e0b169b457acd17609a98c0177e48a4459b12dcde947e2621a9273460b229d5f76082e3a973de4
- SSDEEP 96:1KeKx9uzcSOMQ5+Uy/45l72au8kitHPJJsy:1Kpx9n1+7A592lTU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c634525e40af091370089923e8a7082c44d313c8c0a7f897d6b04313a5a7b1a
- MD5 759665f7a46b1494348eb56528aad355
- SHA1 5eee7adc64db74bcb1d337347d1694cc8a0f01a1
- SHA512 2e4adfb6ebb6a4db0c844538efe7359700fc9eceb93193c9c1a3d828957815dfcf7f88ef057ece29dc265f7f316aff8da1d9db317721dc93541a78a57f8be363
- SSDEEP 96:/LWpmzK2s/sHDelfePsurCwSqv9sspHjYHXIIO53I57Z+l72+u8H5TJPHJso:TWfoO7M92Vgl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e577458e6ac767b6805b551ac0d9ba866b4000416b73e63447fb9e64dadecc5
- MD5 83052e62ea13cb09d29672eb3ad98150
- SHA1 e5c69baea50f27dad374401ad81927cdda8a10bd
- SHA512 6006a968a87a41e5355107777fa20fbb757b33414ba2853fff7c7fc1970debc5d1087967a1c7ac793f353b1cf4b3cfaef6806b0a1706b6fd2be73bec23a7d1ba
- SSDEEP 96:E80i+6tOKdYZdHfFbxijtjBBFvx8a999swydKua+zVjbVbvD12G+sVxzINqblwNg:E80iRtY/xiZvx8aFUhOsrzIN+SeBcY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff8f61b2cede3a883923e44ab87af77a4bdde3435744a71549f480a9c4297ecb
- MD5 9869878dd1c10ed9e64814b64d48e7bf
- SHA1 370cc1ffa58cfb2cee847ff82d273872e1f9fe22
- SHA512 dfd36786be0019ff3321f172f5ab704317638f9151413017bf2cebd3df8a0cdaeffd2fc8e7e61cd76c35a0523231082e2c8ab1e6eb6b1fb6ae8168013cca1413
- SSDEEP 192:8KUGTLaGEMEoEjzuyIJyJeUPw0HNP4/Ncq:8KUy2GEMDCq7JqeEHMf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5bb7f59caad7d0e59444b5461e3a8e22e47a87b076d9f0390ad4bc46184389e3
- MD5 45a7f4ba2d0e5afa4357ec150970881f
- SHA1 ea0363c75828fd82c7fed76ac7dbc7ae1bd68f15
- SHA512 585a29cb8479ec27d471b7306629d91ac76ef30fd49f21e4ae2efe5470745eb65bd926f3650303a531c1261d635e3a1dfd3641ca950f655d1ed2b6d216752c4c
- SSDEEP 96:N2osFq6WQ/XFE7BgsvWsvWfVdVICTHUFilB5u8djehv:BsBv+llavI2HUFiv8ij0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d567fc6d48deeb42c0055d2c65824ea5af6033e01aa00dbc6f93502cb2b220d3
- MD5 226eaa1d948b85f3d001eac2a8dc7c20
- SHA1 bdb525aa312d9cad204b6ebe1d4aa763a85ed470
- SHA512 37d7eff8133d85a0310bb70c4705ab191f6160956cf121c335c81db8c1714a3926489ad43779bd3aaa1bb6fbd160fb4e8b1d54b2784951e300ca7f7b54fadeea
- SSDEEP 768:cDAe5Yc1cDsnvSjXn7n7nInnII1kV0nK2JXn6Vu6mIAJNrrKAU9KJrxMry57tXPV:0jTl6i/+FAU9KJtMry5Njhi4L1x
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e63d9724a1cb1c5f5246dc0d46d1dd7b89217799c377cb8314f0c4fbe48dd90f
- MD5 3c2cdf83aa774a99663f033595f65bc5
- SHA1 e57b09d30a4087d408f92359a64a6a5c31101c38
- SHA512 494f5cd5a2343b76df03dc994f05759ebb51e288c2cef383a71fd97c0d3c85b2acd1e3c2554af06f1e05916c17ab35e68913505f190d3d87e2802aaa391a2070
- SSDEEP 96:+u2ZT7MqC7yXckC6FETtFQ7d6FAIhi9/TRXNBBnYuPTLKlaH6OIUdxloxY8ic:To8qCQC6ECYFAIU9/ThNBBnbDHNxq+0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f80bbdf92ce67ea4864af0c59063baabdeb4897d08ad2b6eedc64b10f6e2eff4
- MD5 0060889c2d1485b22eaf3304d85f7ac0
- SHA1 ebdefa294197d636e08af6165c7c05beab9761b5
- SHA512 2acb64867884b9e09b28b3a3af7fdc06814fb63a73548e8abf92fc61a564d9f0af035c86d6a8cdd705b716cb8f18c90d2a0a80ad6d3cadd17df6fddd1b89bb81
- SSDEEP 48:65tXbHOGKlGtyUvya2Alsl1CPSfDqDT8khFybW4EiZbTLliH4Be7:aLuGKlGDKaVilIPA+8HS4n4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a991a9139a503c6bd3269029d0d78a1599bf52d53dac655d5c7417a28da95b47
- MD5 4c4339551e889d626ef8bb8b53f122c3
- SHA1 2d5bfdf0d5bcf8decffabd72045416e6cbe48b1f
- SHA512 00f4220b31bf8211784ce8a5ca85780e014905240df27e6d01ebb81f912d3ff8d7a2e95fa8550b82722c59e536552bcf8896182a70701fe6a8f413830828afc9
- SSDEEP 96:wxzyETlGPOUvaA6OURRVZT+F9wVrKfqxMA832lAPCu8FJaPgk:wxzvpGmAcNW9wdKAMA832iNAXk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e9ff63100b2243b0e621d6984775444c362ac969f7c93c69683408de53910a5
- MD5 a4440ea5c0f2e47eae243721925c874f
- SHA1 0a55902acb8dac985eca3561040eaebb597ce2ef
- SHA512 ce6ae2f5dc14201337bab666a11c416be47fd729a86a5084a747c718ea96b5972e3783d6d70afc48582496e9bf86e4c961fd8151ee05f6ed58d03a6abfb4b9da
- SSDEEP 96:97EWHwCu+tvLYVdHg3QCN6KUkzZOogWlsc+88vn8U:97EWjYHgQkYogW+7Nl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d4a8c6d23513c63a2e668eec19a84422c5035058d927cd22d586e88812c182e7
- MD5 e15f3623cb7a40f694a249007d0af135
- SHA1 50a863721d6380a9f4d3eb6a8347ed3187ba0dc5
- SHA512 1f38001c92979d8b94b1d6425df05dcc5f8e74db829a0ca2649664d54974fc031f44af763918cc9a2bae65af59ceff0b69a1c97bf744d733d8a8c80e1e063bf6
- SSDEEP 96:F6VXdCA4Xe2dSimsElxuF2UUsDEgQzMaNGOt7k4XXilIPiC8mR/kHvY:F6Voe2HExuF2oHQzMa1t5SaPBb/kg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es-ES/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18b8d7def644c91aa15ae989a1e71546459039dceb2ac25b8e5cb23a5a622717
- MD5 f50450e6e611be6841638329f0de6db2
- SHA1 250e5e8ab4f02eb92d92f2a66a879d4b5b6fa876
- SHA512 f14cfa1d25ec60bf11ffea6306fa7dabf6d59fb269b699ed19a1f4326fbfc4c3c4365a32a01949f385b34c5e5f0387584bc24324f0a8711414c3d8c4c20e3e68
- SSDEEP 1536:WD1G/Odw/GQKVeN6r8rEr+V1VnV8oelhYIAO4CBoUGJuiEIjBRGVTLyFOb9hJQi8:WD1G/Oe/GQKVeN6r8rEr+V1VnV8oelhe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c510196496e709f9d012415a5b28d91c947b06d616050f8168382cd5d80ba198
- MD5 c22108e2367e43f0d5733297c3f74e8d
- SHA1 2a6f65462e59920d565942bfca79e36b3a1fd009
- SHA512 29f066e648f2ddf4e04a8e4442ad596c6a22256e3110dd9d05d097193c80a552fdfbf444953390eb8531099ee102f2c95af80df3239516d46eaf8bedcb9488e6
- SSDEEP 768:W8bAeX66Yx0gsEXbulw39NA1Dj30cf/PdStLS8QOi:9AD6Yx0gsE+wtNA1DjEcf/lStL1QN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5a:d4:23:68:0b:25:e4:32:63:ed:98:1b:99:03:c5:30:f3:fa:10:92:88:d3:ff:5e:79:cd:2c:62:5f:5b:a1:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
25030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e2af5bf522e3cf81624678fafe95f27bce1d3656f192354b389fa2bf4327f7b1
- MD5 6ed43fcf3ae63946c910cb5de45a325e
- SHA1 d82a6928d3665e437670fb429147fa9a317ef75c
- SHA512 8aebea3b3140c41c77f7bfb62667cf348a48537640bc87ec79852271f581b9a35f9735ee9c36b9879e8326624e067ccfe6078c4b2a347743bfcb5a83d3387915
- SSDEEP 192:QEbM154j63NCILWkGuIJ+WGgWzSoyWvLgVWQ4yW3bJSdqnajKJW/EN:TM15pWkQQWcS/0LgNdl//EN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9c:e5:44:c0:19:ed:ae:25:59:ca:ac:81:91:b7:30:be:63:d1:2d:ec:d3:d1:23:41:35:24:e5:61:ba:15:4e:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 20f45233bfe480e446661d1bbc34845b3cbc00d4653d1c06f6e65d167ed45774
- MD5 3701ae94f41372ba3353bc8f510e9ab4
- SHA1 5e602c536b6a9b0d134cca4dd2566bb8ab51a180
- SHA512 06860884746cbe33684f3a92a9076d267834c20ee7fbd72b0f0681ee900faf3172ea1a4077b29dcb2d6046a48f9e99cf99a16acc808986e8210795223cf5e173
- SSDEEP 192:Jax2Unc1LyLCuO1gQW3G8mJEWGIWzSoyWvLgVWQ4OWysoZuo1nqnajBaiRta1s:w2+c1++u0dW3YKWMS/0LgioZZl9d7a1s
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c6:b5:bc:50:bd:46:20:64:49:1b:45:9f:5e:d1:1a:fb:a1:9e:57:30:f4:88:bf:b8:c7:8a:fe:2e:59:ba:fb:03
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4cc069340287932f7d2e3226c4646a9a3f933eec214f6b52526660b7f812262
- MD5 829ae1485b18c6b629528e898c6bd6db
- SHA1 f4f3073a359fdd32a300de353f9c25b7b28a7c98
- SHA512 8c35d3c5fc43e3f00ed95e47d35bf26e530eaba248d1e1247690f75537a74b85dbe45539a0c2986f6f58b4c2088b2713e18925cf53ca9a4e72ffc640406e50c2
- SSDEEP 6144:9pC9SI9cSArMiolAWgT+vE1Q++m+ak8tfiY:9p5ubY
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
21:30:63:e0:71:cf:ce:02:9f:32:0d:6a:ea:85:3e:49:75:dc:50:78:2f:82:f3:d5:8c:67:f4:9b:1c:47:a0:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
278442
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
264KB
Virtual Size
263KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9594641c8825134aba719172072bf3077798dfa53c4e2988fa053d4634c347d1
- MD5 c699033991e0ac8bc6ad88512bdb4818
- SHA1 3c0d1f5589ed93cd7ccd21acbc395924d4349202
- SHA512 7f7cd65617b4f58bb922743e08f65c3b402b5576535210becbb2b537df055c31ca25e9bb1cfff4feeda62ecdf285fd3a5c6ee1e079ceb79e6b75b7918abc254b
- SSDEEP 768:3z3Z3HEnxdyFdzYYHoeIKFvVYmZQGBKaFZpxvS+tTk7rLS8LLGgp:rhxqgUE7ZFvxvS+Fk7rL1Lf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
84:0a:8d:04:20:f4:76:d2:d9:92:21:6f:6c:05:92:2a:7e:70:71:ef:f9:0f:21:91:ef:5f:8c:75:90:e4:90:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
67354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9963be1ab6fcd84c225733b8fc3b68f5b0ec167abbd824c34dc1092793a2e129
- MD5 2131f31af7aaef61c751873ce5e365b9
- SHA1 324a554a34c15812af6b5b03bb1a3603087a5b70
- SHA512 9d591db465ade37f74149cc1bc52bf5509b476afe9b3ba2861be1c30b447eb33e4c173a663abec626297d9b9f6e0eca7ee5ec2df56ef1095f36ab25f72874c98
- SSDEEP 384:rW8KF76/nByRyWP4eWXS/0Lg2VInOTTXZltO:rpT/ByR0XS89anOw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6e:12:a1:81:b6:fc:ef:85:7e:62:00:07:1e:49:9e:77:6d:a4:4c:c6:61:bd:f6:4c:9b:8f:bb:91:aa:90:04:87
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
13054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 390c70f4209484f5e14ea288062a5a58ca4724d4c2e74b99da4bd5e1d90ac80b
- MD5 ed2f4bf1e8b2f5353ed446f41e42c340
- SHA1 c33ac0bf234f873fa06074888dd5694b7fff8ca5
- SHA512 5e392ec5a751de1228d8ca9a180e45caf5e3169db4f40d7e590a7eede48e4e2b2e26ac935f43040ede23efa39ad39f27ea7523a19fde67d448d050fc1198e625
- SSDEEP 3072:oMQHLbIXiV3vJJV5BnDpIHr8xe/BFMP0honacv6J:oMQHHIXmnf1sJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
68:c2:28:8d:6b:6f:86:69:fc:2f:a2:57:52:9e:ca:1e:fe:fd:be:dd:0a:24:0c:cb:9c:19:06:3f:51:1c:6d:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
98514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bdc1fd481ac99ad6f42c96480230c32f854c5dcc99da5ac90e3d8f511192f1aa
- MD5 b314288a27544cbf0c27b6a48a6bba6f
- SHA1 cbd8c090b66fd22315bb387a69eda45043cf0b81
- SHA512 f8527ccfb9182a60ec2781293b6b56d44d6921a31125c75c66405417f53509d8b64a503a5ea4995e29dd701af160291655be0ea5c48ca26155631c2a57b36b99
- SSDEEP 384:G4nFvFLokhgW5f3srgHgUCbQoSDlY/QS0g/BAZJCa0WOmEGJAWmWS/0LgU66llrC:ThOmMQqIrsBAyIbS8Fb2h
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
10:02:03:c4:a4:15:3d:c9:6e:d5:78:e0:d3:e0:58:e5:16:c0:69:54:68:99:ae:20:f9:fc:20:20:b2:ca:77:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dc934ded2ed11f4822613ab4bf2d7100030c9bcff742f7803883b8a29ea40b37
- MD5 e86a512df6e6296f296f17d025a491b9
- SHA1 6006f3b7c0f8256d400c237aab2d16b6c670452a
- SHA512 0615236b678c7d25c765bbe812654bdfe628abac24f2d299a5966cf11a4d2a8bb137f0609ef77f6160bb9880f1e8926b429856e32bd9d70937efd55fb47ebabc
- SSDEEP 3072:moBbsg8xN1CBBaE5GfBhyxeiSvcviDjVes4V4dyUyWCt/dru2CUU7jk2m5LL11w9:Fy7xffLyxeiSvcviDjVRvMSP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
10:2f:db:cb:ad:92:e1:61:e5:aa:36:2e:90:41:3f:0c:90:a8:83:ad:c8:7a:ab:68:a4:99:c4:8e:9e:67:ba:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
296790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
282KB
Virtual Size
281KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8fbebc265779359a2d783ce777e75e8c1f916113648822c11338be79dc4bd94b
- MD5 fefcbbb76b580961408beca1ac81b5b1
- SHA1 63733f27cdb4510c55f0075065329e3825934197
- SHA512 04d7706f9139a94ef795beb4d4eb1d22ce6ef194fed77cb384c35b25b6accf6817b273dd89c6828de2ecdcb02c08c015ddbffb658462c38c6fef83a42994d93c
- SSDEEP 384:HV/+gK+z+BqoI7dPNab+rgijr9iRssuM/vM0eWxuxvcml7IBWRkmB/F8i5PZ2VKa:p+LXBc4LRfe1Igf2VKcWS8c4nBQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f6:f0:52:b4:04:3b:9c:77:80:bd:02:6a:06:d9:6c:62:9e:c6:06:3a:71:bb:51:43:1a:aa:2b:23:7d:9e:27:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30322
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 24e3dc5b2744513139c654702bf582c80cccbb0ae9829978e1802f6fb5bc1c6c
- MD5 58910023673f183c7b03db4ceaf15334
- SHA1 f553c300b04ed23ec120aa9a1f0f47b736036ad1
- SHA512 8338d480c12c4fb888ba4f2e469467cc05bee96917b0fa2093de8069caece65e97c8fe99a5bfca86088548b5776c488434f59183ed7ffdd90dde4df1d4be0a4b
- SSDEEP 384:lP17Mw0uFRk2+F/8vvbTT9vvOTLWGRVRQvKBsuWVY9WAS/0LgtolC8Al:z7Mw0uLVS2po/KvKBs+nS8i
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5a:31:dc:0e:a1:18:a9:28:5b:0c:db:e4:86:ec:17:c4:ee:bd:c2:ec:ba:1a:9b:c4:1e:bb:96:16:0e:9d:36:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c2b439d8ba233892e14e10d03d932dcc44185769de05979dfc10e074072c5a3d
- MD5 e479787043ba4341b4c9f060358270bf
- SHA1 9d6d646c6b643783f2029a3045d5e1cdf0075747
- SHA512 3089d4cd9befe7449985a30d82b1c4bf74956dfbd3ec5cd65b6e3efd8fd5904d1334b874605244b653a0477ee89eff8e4f6063e07ca117fcdb3a132aca444b64
- SSDEEP 384:HyLyXSXRaRmILXdXxahTKQuCb32DXlhpiYwqcjtaWYHqhQ5W82idHRN75u1IlGsd:HyLPIUTROHMDqcpQ5QJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6b:86:58:fd:ff:5a:e3:3d:96:9e:67:bc:92:37:91:18:9e:cb:3f:76:c3:0a:c5:a4:9e:31:9d:0f:49:d5:53:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a93eb871c85e0c27cd1e46fba05b858d86cf6ffe054224a485c1252960999936
- MD5 35c54cd705dbc5dec71613434509e6e7
- SHA1 251d3b2dafd23bbe50c2de4dff0a979e07d43c22
- SHA512 05809b900a9c825e3457739c4c0256a85803fb3f1ada729246dec521d3e52532067984b592256f5f35ce9db24889c6fb9bb5f9ea7c236b3f9e5e185c0db9c281
- SSDEEP 384:HdHyXVyB6maba4ax7Cyp2ctnJzP1WZl1ufy3WlRew42Ktkl9A21SVX:9HyXVg6mUax79nzPA1ufy8Rem4X
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
91:18:de:db:f7:e8:38:02:fe:19:00:6a:82:c7:19:e1:1e:8e:36:2d:7c:37:c6:e0:8b:20:41:64:f8:bc:6b:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15fd856735118889f8518601d4bf16b495972f2650a17ae06c90158094a9f642
- MD5 b6dbfbfb1c7ccf240d7c5ee2e58ceabc
- SHA1 2fb4d09e4cea11c71b8f2be465605287aa3925d7
- SHA512 8b71dd6a46ebe60a993d272ebc6049165c5ad18a131ff7df60ceaf0ddf93f5ca981c9d5200d9e3ef9ca4472adc5560a3b4968ff50d5adaade21e996b4ca19df4
- SSDEEP 192:6TWm88fyxls5h7zMrW78WebtuVaVWQ4CWxeqnajnp+MVQ/c4u:wWv8fYlsD7wrWYZOeldBQkf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
93:81:3d:11:d3:21:86:b3:51:83:29:47:79:8f:63:88:68:13:c5:78:7d:1b:64:56:ad:bb:69:59:74:cf:03:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 135decb86b02c38dccb654ab68702eb84112551c3b4c539d9ae3994c91f79663
- MD5 37d89d4752e98568a3cda2eb68c733b8
- SHA1 5d50c2c8650e75bc3c9e6d23fa0a8d12952b1d89
- SHA512 81cb37d8a75137bcb7acef68a07c42186028a0b0bb3b219eb24fb45b96fa11064cd34cc57ace9eabe2ec2114da5951b39dd2544aa5272d1a2badf0afe2d0a9d9
- SSDEEP 3072:R1iib72xH/2tAL02lOhqPZdkcszrLP1H:R1iA2xf2tAL02lOhqPbkcs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2f:e8:02:30:6c:c7:08:17:b8:c3:bd:52:ce:03:0b:77:86:a9:65:de:50:73:41:ee:f9:ac:58:e2:c6:aa:85:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
105090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6cff43ccaeb0380123b89ae831b27f5832b6b06b6c8842d3b91786f40815db55
- MD5 4973a4a47781c93a2d5cec7a72fce62a
- SHA1 8050b0f275a67f1527ef59205da76a5eb29e3c17
- SHA512 d41cadee01019605ae4e4c12bad97865088d8f1ede79fd790c77140047ea1a8768f62f08776140b130f1da69668dfdc0a4f8ccac74726f2e6f8c1916f8f61603
- SSDEEP 3072:rZyOPnY+nF7eILDlMJBoWB0nih8objeL8LQQArEb6FsvoArNFsCeDNsx:r4uih8objeL8f/bloUB
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:78:2c:ac:0c:49:da:53:6e:be:8c:25:95:c8:67:7e:e3:41:9c:3f:62:72:46:06:29:c1:f6:90:2d:e1:64:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
198610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
186KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1c6704807f315dd91cd9f4702fb78b85433c58d933af5417e54e1d797b048a07
- MD5 474bd81abe0cf260dd0237be81ab2c72
- SHA1 186264ee92173425369fadbd710503f01ce5e8cf
- SHA512 0951083ee28e5d0f07ef5e218d7aaa3fd0c110098cee4a9aa424d409a254bfd32600fa9a172cddc6d1a52d4040f1df5470351fc8531b303498852e178d3211ae
- SSDEEP 768:q1W5M39t/Km+ku/uCaXiHpNhX6JgH8t4HVxjwtgkgrv1YXCmU/QSDfoeJ:wqM39t/KSXiHpNhX6JI8t4HVxjwtgNr/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
10:45:64:dd:5f:fc:f7:88:ad:57:db:cf:df:3d:07:ba:5f:e7:fd:42:aa:8b:39:b0:e2:48:f9:b6:65:4d:88:a5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
40550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0eb5e70bfed8bcde30d13d6c2e06a29f606b68efb4c42b9f298da45e7bef2b95
- MD5 582c4b1b999e07c7570cb0ef613aaf49
- SHA1 17bb41dd19d5e77dfb3a5234ed41a6cfd44f3a7c
- SHA512 26baa0141853606a0eda8bc2afb033e785a217062ba64358a1709a4682085c1e59e5b87704afadfacb638d9d79eba93f6d490b3778a3fb70a69c1224cab64698
- SSDEEP 768:kTrDN4Ne0KwlXSpLioFOPl2iQnYuMjvDSaR2y4ObZgji/WdrYYz3tdhW1acyZDEu:0DN4Ne0KwltARYYz3syZDEK/G4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:44:b3:95:ce:f2:7a:32:7d:98:56:ad:25:cf:f8:32:35:80:4e:73:7b:4d:5a:a9:75:56:c7:2c:1d:34:01:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
34542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fa465b242a7537b64941a88761848681cb2ccaee1161d48a8c8d68bdd9a35bef
- MD5 bf1cf12d81d7861af99ffb54af95f009
- SHA1 1958cf33b4ed27fe0d91fb2028910d5b18001400
- SHA512 e582bb265646d1c8f03316cb58f2b2a027a1dfed48c0140201e7c4f4cfc36d5ae5dc79e9d53bf08d5ec7d20e87c255ee08e1cdb0423a6ba6d5eae190be8ac33b
- SSDEEP 384:dhE09s8kLiTWKzAWdHRN7tToiFWSlGs4jC:bGLQ8st0HPBC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
be:24:49:03:95:42:66:25:b0:53:f0:1f:6c:56:11:93:f6:19:9e:63:b6:e1:d3:13:7f:7c:2e:9f:f0:47:71:0d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25878bb2c0c50a6b9e443e9391d65a4bdbc1fa3c9a46b9393c1bea1a01a3231f
- MD5 b5dd2d99d909fcdbd22435d4740ac8fb
- SHA1 97670a07871d7f9a7c5e079403e9e1f2d1251203
- SHA512 e19d837dc1220f256dce751ab706bac11ed65c1e199b247b0068d27d56fa6d0ac0014eeeb89d12f5dde7b28db077f8ba48e1dd34196246fc14b76081b9e3f524
- SSDEEP 3072:LaR9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyfbYlmaDglETAHZf7xx43kZ8GF9sGd:LI9sGfp3OKvg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7a:33:80:7d:1c:c4:a1:70:22:bc:c5:e7:9e:13:f2:9d:97:19:a6:a0:fb:8d:da:55:a5:7f:ea:8d:79:91:4c:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
132462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab1e8f747e0d903f065db52c0861066d3545428d94ec3df7f1ff6a8508fccbaa
- MD5 c02c73fdb3a86212268633f9636741b1
- SHA1 21e610c3939cc6f1c183311f5ebe568c94d7cb50
- SHA512 faf6e25607cc551ccdccca079179b1b127bd26bafead532cd5b2d28693d98bda5433b3832e3bf459ea0fee9fe13b04a8f950de1ed962a6c8a492e9e7c15983cb
- SSDEEP 192:pZrSoAWviW82n3W4GD5dHnhWgN7aQWQVT/gqnajKsdztNh:frS1WviW82nedHRN771IlGsd5H
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1e:f7:4c:a3:06:04:36:bf:b1:6b:10:ae:37:21:69:4f:e5:5b:00:94:bf:da:8d:50:42:cd:ae:c7:15:22:46:cf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96052aa94bcf02875757bc59a09a15ca09189001d018015c05846ef7abcf2939
- MD5 f1bdee3177c7d541a88c9dafc0d12ad7
- SHA1 913912f1a011e70677355dc9473cfff4c172f960
- SHA512 7ed33f151f2a8e09eba6abbb2d16728e9696e63c83452cbc5860ffb771754bbc03935d99f26232c1516e51cbb26c64594f4fbeee8c9dd6531aa162c72c291c2e
- SSDEEP 6144:U2WDUXm5vMYspLQQqxXrL0/UMeXMA7e1U/f:U2WDEgMn1U/f
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1f:bd:57:da:8a:2c:d0:8e:0c:65:d1:9a:06:fa:43:52:9f:67:43:81:49:f5:c4:bf:41:c3:10:67:a2:85:6b:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
352378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
336KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c420ca069354e288e626d660bba2a85f28bc3a54a2883487aaa1f5e7d9a4e11
- MD5 9df34b3d533de117292234eab066bf74
- SHA1 77135443d7400022e2094261db172b7901b1c6fd
- SHA512 93fa5c269b08d7ef0f0172a9af808d33f8609ba2d778b13b75aa5bd5c00b3e75159d982cbf89ca7c83d4d2c2a0f01b6f29e9ec654ab66e56b1ba6994e244b77b
- SSDEEP 192:t4oIlK6V1BKZfhzwRFFslhBW+vsW4GD5dHnhWgN7aQWoVT/gqnajKsdz1:O9X6yRcRW+vPdHRN7D1IlGsdz1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c8:e1:ba:78:75:f8:d2:3c:5a:76:66:d9:43:85:3f:a9:24:24:96:7b:73:06:34:5c:28:10:1b:1e:04:e8:8c:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0ab394ed379c5fd735f985954812a78d9fdb476d48896615f0b01b0c375a1afe
- MD5 5623f419430ee63c9650785ffedf4726
- SHA1 9395e92b8024317f21b80f51bad26ae9133bdb4f
- SHA512 ebc019f1f4bf2bf63183f9d596a58965dbe65a11d24c20e54517ae2ba70d8dc786f5fbb18e68b1530dd8025302337cc59e38580c1e054d46a513f65d6308b010
- SSDEEP 1536:SljlRGaKic94N4FfC5YWMvmUPaacjohSN8qgp02Mj:Sljl58a
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
13:d2:c7:fd:c8:39:37:55:5f:74:09:0f:c5:4c:eb:96:8c:a7:5c:7d:1e:92:67:4d:e4:fb:3c:94:4a:a9:1f:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
61094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e38c3b7e7a867d12ee8c0d92f30ab1ffe5b88c40607163f3968e49fdef4aed1e
- MD5 7042c4be6ca56aba589cbd215f93f910
- SHA1 5407c2d515185cdfd0498e183f876e315e937fa5
- SHA512 2d3cdebd6580677082a78ee68df6d74e37d9d2bc4f2108147958ab445d034360278c03f2bf31269a3cb4133fbdff32e501509b37cfc1b8f149deb74f45597ff6
- SSDEEP 384:oCbfH03Jl+28mqJl/WSFPmdHRN7IfwuAzXulGswD:oCbH03L+2gJrUVzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0c:06:32:ae:d2:bb:56:81:ef:85:b1:c8:30:7a:7c:6b:7b:df:1a:f4:2e:a2:2d:54:fa:2f:f2:54:38:4e:bb:e5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a1624baab453f5467d5eae8e1eba7fdbe3cbd75852f22ae89d1dc00fd10785d2
- MD5 d6fe628d3321e9f8d024f653687455d5
- SHA1 a25a9d75c3183c9f8c6b9bad7d7f05870ccd703f
- SHA512 f26da4a4be39dd867e572cb750eb947551e55575076f6a9eaddc16829401bc43c35309f3be08da8e1c21e08d4e643897db6160029044cfb96b5baec0fce78ceb
- SSDEEP 384:5uxD4SCqDWGVg+Wl4gddHRN7aP+CcWlGsS6MxLs:MxD4SCqDWDF1awF1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cd:b2:fe:d5:05:f8:3e:e2:82:cc:6b:ab:ce:48:56:cc:53:6d:d2:39:c7:cb:fd:df:32:ac:46:f5:f6:25:5c:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
16014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4cf7004cf5b3befb4fd6254f237ba1d183a98c5d9db8a4cb65fc3a3e67621664
- MD5 e8a6337f47734030462bc11fe14268f9
- SHA1 10dcd57fa57b98156842b783192680afdafcc659
- SHA512 f00005b66dd969ecec23e23a009ea25075eb6f654a62af4179ce9e5d402ff47a23d85b100b7027e0fe50f56146b864aeecf9974fd57c832f0704a792065008a8
- SSDEEP 192:PE3Z3rsWHFBWQdIW4GD5dHnhWgN7aQWF4r+YVqnajKsa9UG:GlI+TWQdbdHRN744fVlGsa9U
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
77:0d:f9:89:da:ef:c6:f1:6d:10:3d:de:88:3a:95:ba:d9:70:02:44:7d:95:4b:41:90:5b:97:09:af:88:8c:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10258
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e21ff82d11a8c446a62092ae49a759507e8eb53cccd6a657bae7208e99a3d5d8
- MD5 adf292e591e301498002a54bb28ad3d1
- SHA1 882a5643ffbcbbbd75c504117956a7f3ac4fa5bf
- SHA512 499cf54dc78c329cd1eeba88a6190fe9ac5483c450557ea5deb3ef2b6993cb7cb2a872bb867fdc813a19bdd86f544251d15a6e90e50c3698e3a516481cace091
- SSDEEP 192:vCQ1LEcM4zQWLZRBJymW4GD5dHnhWgN7ayvWV1Zk9gTFqnajT+VGNxv:aQ1f0WD61dHRN7y/hl3+VG/v
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b1:3e:d2:2c:ab:f2:c6:f8:e7:8a:0a:0e:c3:b7:a0:f8:45:e6:db:44:d4:ef:fa:5c:85:f8:0c:cc:76:a3:e6:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13586
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f18da24b579ae78fa4714fd797846a162c3821632778d418b36c05ccae1a5043
- MD5 2dfb472331e73389c25d9266a4f0946e
- SHA1 63cfd16c11b0c13ba2cd1f8a437cb4bfc90add80
- SHA512 d8ac19581740a37eb86d59925b99c2c869fc3463c8777d1128ada89d113fd92a21d040d54f3895ea53d5aa5173959d77860bed16fe15a9b6254012974fe8be9a
- SSDEEP 1536:2D1dSUEgf8HshlaoTHTPC1YUU4e7DPYPWsoJo7fi8k/nvwM25KOlLG9Mw5qhuRaF:2iUEgf8Hshvsy+StplT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
77:d3:6c:bd:fe:52:4d:7c:c8:8f:83:d3:56:66:83:2f:b8:3d:ef:4e:f0:3f:28:c4:38:1f:be:c9:45:45:6e:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
84886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/es/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7a49821c99549a48a1f3d0ad44db95212532462f9a77a049146d5a9360f6ebf
- MD5 04b0aecc3c9ccec9fac8eee35e1bc160
- SHA1 14e7fcfb77265d7171f35837e355bd52a03e4dc0
- SHA512 49e9000c957af34aec44d0a87be41a981c87ace62b4c5aec54d5b2c95fbdb9e3824ff4c3aaefe2b67a4c273b154aa6c260bff7a48656c4c12ad2763e792d9f19
- SSDEEP 384:2KVLFLHkEWWeHRGkakW9QAdHRN7uu1IlGsd2:jZHkRtHRGhPTuQJh
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c7:10:8d:6f:4c:17:e8:8b:eb:40:f0:4a:8a:a8:db:01:69:8b:31:95:57:03:79:24:a3:f8:a7:5e:4b:5e:12:2d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cfd000704aa679d13817b05f50b7d1e0caf1066dc2ce193625f1954bdf13e01a
- MD5 848bf6234307ba658d1e9aed3beb4268
- SHA1 11a1f50a5ad3feba56390d00872da0414421f906
- SHA512 7b396f35c1f7a703b5de3dace199f0295e341b146c09a875ac9faec7fced1ad451e039df58ff4798921ca12ab38e565e9721da32a61ca6c99192c71a95f31999
- SSDEEP 96:AB7kiJCzSi34aLLwVFCorp6Cl1ZPcW6n+:AB7kNx3FSRND
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3fef088a8f6ada4067606a6e574309e32fa7b93303756c37886cf2fe6cd9b244
- MD5 f4dc2ed5c0ee135d83fc8bbeecb5144d
- SHA1 092f612ba85b2542e7fcca8f653b5b6b05cc795d
- SHA512 9d9faeb3e66a0fc22006406675dd1d8850e7a9aeda82df0b8fcfb4acfc5c31375f941febe40239a213ebc9775573428375097618f0ef12279799edabeac80254
- SSDEEP 1536:KHdnArSSbNsTBAG6AeVtTMjzQJLggbZvK0Zy0dVMrAsz/IvqM:K6rSSbNsTBA7AeVtTjbHy0durA+/S3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab68a2212f3581109fbd448fb5c8528fb2ce1fbf0eaed6ad64f1c82dcfea1ce9
- MD5 8b29b36d414a2d53e8b647c095974e66
- SHA1 82f8a0afcead2de903889c3878066c12bd47c1c9
- SHA512 dbef25234ef05ea15ff501c448f0e72ecbb1705cb0ca095ec507b7dc754da3f3702047e374040bc1ff2a6ecbe99a1d60f55e9cb594725556cbedfd380ab67e7a
- SSDEEP 96:VM5W5G53dEPwW23l+ZlRjSd+SdctSdSZSd/Sd:ukIjwdQMZlR2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0ec4415f0c730fdd22029e327baa877b9d05da143241e1827d269e03f598c6c
- MD5 edc2f86dfd5ff57876c21d5c0ab5f78b
- SHA1 674dd2eb364699ec36c5b0f11c3beaf592ea98c2
- SHA512 2e87c0141ce4159523cfaf930434c3addccfc52960be4e8eaf2d013813f0720bcc1220619e3a6605d50fa60cf2bb541a880494b94549fa8a212c2fcb41480c25
- SSDEEP 192:K16O7OsC7ar8b5ejn5IXBLOvqggPJmI2F4HWR:G6NsIgyJOiXmICL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf684ea58726342a194d8df35b60df14f0c134835a323011996c470273899cac
- MD5 b6a7f317f1c69c5ab2764d69bcf3126b
- SHA1 ce10fc4f1a92baaa85349e43a3870c746817be04
- SHA512 00dcfd34b3e60dceca544450b7b107917df239b6e8b5f33841089ac5322657e1714a871b9fd7f76ebf959ed0bace70f0584422645e15d7bf4f2b573523d57aa7
- SSDEEP 96:t0qx9xhgjPthBQZRBo4pSKEYl72nRZtHPJJsy:5x9nShkzEY92nRb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8310e21f6a40f41c274cafd40c07ce8e7b78cfa16a5e7f31e2ced0736001114
- MD5 d235a69e01b3992b58da5d416a500b53
- SHA1 2f79b85ea37094622e054822044da63aa7c22ed7
- SHA512 466ebfe3fffbe4470e5290baf6b352e9334c798d19157792d4600070b8accb88f93708083d90996ebbffe677590a0c309b324333462b1e99c15702be4542e3a8
- SSDEEP 96:6lGEpmzKyU/JBMeAHu+KDplGbaDK0pN6viObv0vIiXl72/2TJPHJso:6QE0iObsP92/y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dbe1f9f128db97e96feffd169b4486510b466d537f08657af00edb02e851c07c
- MD5 5e0b098aae9c6f4e201b6671bffe618e
- SHA1 ac0a8abb4125483987e4105c3237eccfe56cb26b
- SHA512 4171a943443d8635d7b45ff8a0fe939a002d40af40470648cd239d164972ce3e0266f958b27da742a521c10532a37a2e5755fe44c3e22790999b7016d8667fb2
- SSDEEP 192:vdRtVfwwhr/cN4CRJ8Cl3Lpe/X4oAOrxpvDqQp1/ShUi:vdjdwwhr0N1RJ8Cl3NhQp1Kn
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f814a100f7e37a97606b36aff7a0dc88c1e731ebc52074b475c6c3959c5597c
- MD5 46100c1015c46e9e6a6152571dbc4650
- SHA1 dced3e39455ea06015737de149bcd772779bdeae
- SHA512 4edb72d83cfb08019e74b05034c7ed11671bbb91195cfddf1f23b729aeb46daf079c2db4b7597cb90f8946507859ee06ce45cc68abbb59f62f4441b3e34d980a
- SSDEEP 192:O2iUGTLaOhX4p4UmFaWIBraHP1UIVnEYFbHfx6xz4/os:OdUy2OhX+fmFUB2HPOS+qr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f1552fa49a028c49db7b79639f67cae0c825469f21d50f0131e50b13c22e9bf
- MD5 68703c0272689d178863b35855be6307
- SHA1 bb345d84f35feb0ff7214cd615de3b3cc2ba4c66
- SHA512 eb04f197dd53e2110ed5fac520ebf34c23c0490a1ae5aaaf8411ef8f6f645dc57892da293e3aba4789a028161744c8cdd631a614edfa7119e246d2f6211a9f89
- SSDEEP 96:1t2sFqiuQAU0oupRWkvWuvWOxzsDEMFc7/u4mSylBuwdehv:1t2sRARtlXLxUEH7/fmSyvzd0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f346295b47ad228621c23df900324b289b78126650ada9890c95e31ea0d4aedf
- MD5 0917145d4f153c53426345869356ef24
- SHA1 a4ff131931c7169c03c228daf3d60f2d59946b2c
- SHA512 68fa76d28bd13d7d4e5c1d6e5b567728d1eb450bb4f6fc822926acd3f286ac01ebd1d47718a5352a2495babd9327703a498b56f228dc86a775f4b96d969f3914
- SSDEEP 768:8DAe5Yc1bDrnPSPZn0nYnIXnIKxUtvcNPV7y88+ttZwSLM11WVIYRaMvIJu7kV7O:UjTNaCN96YRaMv0uAV7RKm3cVk9QNXVb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 edf2c609b028bd06c828752ba6e646c727052336fac8cce3cba84341e257a251
- MD5 c56d567e63f32db7755bd60f99af4f66
- SHA1 ae699d17ff6687dbf855dfb47e2eaa793ac126f5
- SHA512 fd115483052f29ed245f0cd4e3d018befd78c2ffa7e9345fc39edcd387c67761138f86c4f9d5600b8fb44b610869aabdb9a054bd893a05dd1e11b8b67203807e
- SSDEEP 192:Q7nbo8q0DX6OuecbQl9Hn4wyl5qyqntxF1SqK1:Sb5qiJ4vgyqtFxw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91aec47d4bcfdbe2b24398e4858601c71cca3e5375d0952112420226f9ad7911
- MD5 e883f5baa47330888baf4d2bc37a67ab
- SHA1 6e4be68e2ba60a1c7eefbaa9801dc8894691d6e3
- SHA512 8e3dc310b8b8954243c8fdfa6df1fdafc19f0cb6d595c554e97c097b24c4cce95b668a6f8231284c4563280628d287354361742b9fdfbe8e603257836944b523
- SSDEEP 48:68THOGKlG0eUlPozl1CPpfADIFybWEEiZbTLliH4Be7:tuGKlGyKlIPESEn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6bf9b5c27819030a734ae123bee1aaf27c1ed12c2d226358aaa1a5fc001791b0
- MD5 19f112b35f3b829f8a2fbdac638c982d
- SHA1 e2190f175d878d3bc0ddfbe25e34737197eb07a6
- SHA512 a2e749d34d1c5b07ea3b05923b097b0991e1a45aae56e58bdae1aec34feb30cfd1984d4be33541a44fab0206c821d1dda254e67476c1e2293232f8311c557f37
- SSDEEP 96:ghLxzyZLlGP+vvAC//ZiR++C5hRPhoH9eXojGfbV/dxVrVO9+SnYjlAPHlIaPg:ALxzaRG5l+95nKHkjid8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb9c71f493f2fb44b11a08b8493dfabdc4340f6ad860b37e93f354ac96b46ebe
- MD5 675a7925a4b0af267bf667184a82bf5a
- SHA1 7cdd92a8780350f3de7402628b8029f9e55409dc
- SHA512 635e3a4754fa5840f0d725071d7a4cb9fc76a17038c40e7d4fd5d75cc24cb572b000edca37810671fff7af61d0287b048d684d305ea929dad877cc7af5dab092
- SSDEEP 96:gEVdWGu+QcNNWjW8VhNHPMd6wkX46RzT9t6mEuw9ls8Mwn8U:gEVdxQjjWcOTkIUFtzS9+dA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9147267351d88d1c0ff980fb42289e89b67d299a14f93d26a04a64c2216092a2
- MD5 9410d156fea2aba240d585e975c9f0c9
- SHA1 1807d24198e1bc6c1c4351c8b36a5a451322e7b3
- SHA512 418f9edb5d4475bfc7ddb7962f2ef59ddb138148803fca31652aebd3c3cac93ad5d73c70a640e807647bf2612624f148d15130a77abb80b1c48f12d64203af74
- SSDEEP 96:Li0AXdCA42MgD3BCqzGAFvwCEyG4Ig+BCRT2menuwrTebwXcYX4+lIPyT/GHvY:AZMgrSoVEyfIdMRWnuUeb+I+aPyT/Gg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fa/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9dc030847daa52aab7afff645333f70dee5a6e0303880422e457c5e2f5c95e1a
- MD5 48ff9ef2da3c29f45717a625602d5793
- SHA1 aa1d97d20aca7c7e65eff12a3871849b13222cde
- SHA512 da500190ac5d26b8d6a3dace47c1e876b8333aac2b71f487c9a800c8df3c969a4958d3fa0d41baad66f1b1e259ac0cce684c71e09955fc0fe54966af5041a210
- SSDEEP 1536:N1G/OdCPQUTeetPrarvrDV+V3V5or6heIWYhDB/UTTysD42+5/lnZUwDmaJpCiiW:N1G/OsPQUTeetPrarvrDV+V3V5or6heK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 354f94772f97f356c230746bed2561606daba65cec4d53a0f0e2335d26effa88
- MD5 8436f8bb8ed73ada25a85d1e5f337cee
- SHA1 d8a320dc7495215c8c6a01e111062c8d094f0bc8
- SHA512 ad90f060b2ed9780e85c425dc3bf9c45ce404d4483ec41da0f686eff0ccc789d2afcfff21790c2759042beeb5320f4444e5b8f3f95abb97ac45720727c33032f
- SSDEEP 384:IkpebAeVBNPSJUAVd7er2lC7sK+mASfVylT9sTVApgTTxZrtkWi9BWFYZWRS/0Lx:l8bAeRQeA4wOTmErtDi9XmS8q2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
23:e6:ac:b2:cb:1c:a3:57:1a:37:46:b2:d8:a5:fb:f1:8e:be:b9:94:1b:bf:fd:d8:cd:ff:c2:c0:93:13:03:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
25094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e627c9bdc6b0f371c1a90235617b4926f130897b83811a62b25fef1465e5d495
- MD5 f575b6add9cffd644f5e3f4ff3870220
- SHA1 4b1e475969a26a63fb50397184d38bddf048b385
- SHA512 d98b96473e1fcb00a65c4d7cd194ffc27f03dfde506608ab6b9f4ea2c0c97005e79c892b55c4675d2cc4b66b21c20c9d27b0f6d73eec48568e16df9c6b413d39
- SSDEEP 192:fbhle/Yh979RhWkGuIJ+WG7sWzSoyWvLgVWQ4+WXZIJoinEqnaj3tb7o:lle/YhNNWkQQW2FS/0LgWZ6pElpbM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:b5:a8:81:3e:71:78:6d:3f:61:f8:c7:20:d9:a3:5d:8d:1d:07:89:44:bb:21:9e:c2:de:3d:37:0b:56:7f:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e8ddc920ae9eba365e26329b608186c1cb9101e9d59dbd8bf0e5759dc3548bb3
- MD5 b80346d753d27e766793cf0bfd554fc9
- SHA1 fb71872646ac01bfb2293f195fb78be343af010c
- SHA512 129e61dde83a5cd647692115ac43def7916b40b4074eaa62eea69dde8f21dd069c679bfe6ffd2aae1b8ca199e0f097c2f1042287d286fff67fe5e2028de06aa0
- SSDEEP 192:mtMlmcMMUekEkTW3G8mJEWG/WzSoyWvLgVWQ4yW/G8RkvzSEqnajV18Wvzj:+umcMIkEoW3YKWVS/0Lg+G82zlx13j
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f4:e4:dc:ca:54:96:e6:30:02:25:a7:be:f0:fe:cd:4c:3d:70:71:b1:c4:ab:20:07:e9:d8:72:22:7c:52:8e:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9dab5a3e9f25fdba3f0e6db45ba36afe7214789c5ad8a17b72908bc1c2ac03ac
- MD5 44a79b0ccd7beba57ffd38fc21af5701
- SHA1 0670451bcfeeb9fd04b979e4d90b75aacea45242
- SHA512 f7e5be4929c9e3f408ec910455995b377d9ce112a023c759aba20ef6365888eae69389592dc073a4f68b51c3072c20d3c6f4aba2d89ea54b694a31760a85bf53
- SSDEEP 6144:GpCgU1dFM6X/GUxuowO0+ThDrFT+LtvVbn1ZloVmjMZjjmQ0MhGqxkq1bR3hxTHo:GpyZ/GUxuowO0+9DrFT+LtvVbn1ZloVI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
11:1c:49:74:9a:ac:70:2d:14:dc:dd:b9:f6:ed:45:3d:54:5b:eb:19:12:eb:08:e4:f4:09:a3:37:c4:cc:1f:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
284518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
270KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 62454b377a42431368e2674dbd1e650956045f3267eeafecf5289b64a8ef5d9c
- MD5 4b677123969112a899b48d94e26b3dac
- SHA1 e980f003a56e4bb9bc899c0daa26409be6674f89
- SHA512 bd43633b288756126dab34ff699a425be983411d6da599a2681b225103448e197deea2271c0f10d889fec62f92d96db6854440c85eaf529ac12f6684d8e8a3a3
- SSDEEP 768:63Z3iDyd3dFPVoj+P9rcSMQC4lJVPy9RQAsANKB+RCkS8sSg:MhhFDmSk4lARQhb5k1sb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
57:62:fa:a6:de:52:f0:87:1b:6c:95:df:cf:a4:dd:e8:c4:c3:ad:d0:01:9c:93:70:92:c8:fc:a2:fb:75:cb:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
68598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a07eff06eed44c49f7a7fc37a4fc85ed625e867fbeaec4e693292a9709c15ec0
- MD5 7169e43fef270c07761164100271d56c
- SHA1 6232daa09f0ebbdbb9f9f9e5e153a6d4a93bb062
- SHA512 b2976d423a2f540b5d4b128e077ca0529ed682cb1b10f1e0de29e77dc36fd25a8f9b727975685939267425180fa60f517b355cca23b89624f8f27c6b6d5c03a1
- SSDEEP 384:dip33F9/2rVN16WP4eWPS/0LgGn4LbBlojsSz2:dilj25cPS8pnSbIq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b0:1b:8a:49:65:2e:c8:c8:a9:3f:b7:62:5e:23:f7:9d:34:12:af:e5:57:51:e5:f3:39:41:c1:a2:0d:77:e3:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
13186
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de0c41e98058ec87670550c628bad2ca789a95dbefa2f1619c35d5319a515350
- MD5 0d0fa7b894e6856c9385ca8704e42d99
- SHA1 6d79618680b7d4c588b0319e4ca8aa451b25af28
- SHA512 72d2e40632b3fb4642b8734f7810eff476bd110e8bb0192aa5500f96287fc4b20349806501e63cb15cf4933e247705e954c7917b7b5181eafa69915e43a65fe9
- SSDEEP 1536:3vqr0AnSWgGQP6bvESnE/js8iFkfmJklifn1bV:fqr0AnSWgGQCjEIE5fmJklKnj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
16:6b:6d:86:41:1e:71:ee:38:d4:d1:18:1d:27:70:38:7f:9c:27:12:0a:82:93:f8:83:8b:93:a4:ab:2a:60:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
99106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15cfa3a6ebe7a22074e81d3c4a6cc1336b2e83206095e88d218157f00926defe
- MD5 bbd5acb8513b299ef54087eb040b9d12
- SHA1 a329bdbfb3583cc18d1ae3f415628ea804392cbe
- SHA512 21c625162037a4de663729040bff8d57a22f6508c5709ed0c0fec4324b8b38a824c6d98a578822ef3ab8877f8e3281232569fb9204bb1129cba6222f85eede00
- SSDEEP 384:o4dFtFuUPlgypyLStgZgjW8W2SBzYqQOMgfV4gJEBlGUyb7jj/WOmEGJAWmkS/0U:D7z9NuSlXAV49oUy//whS8cwU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
75:b8:d2:c8:21:a7:da:2c:42:73:c7:30:6e:18:ba:7f:99:cd:9e:6d:65:8f:dd:10:7d:82:3d:e7:68:22:44:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eedf9022f95168ff09671edf73742ab467669ccc8480442bbd3fdc741ef086c1
- MD5 40078cb55abf8d5d8463e0cc9baf4da1
- SHA1 7926b2a3bb8e34f4f961795784ee44e7b4019913
- SHA512 9c8c6aac0ec8327b88d286a8e9c5cdb733000a2ea94415651fb246f94e1e6043960f0ae256790e62700f5c3891ced8d17a876e4037fff49b1d643df2f0bc21b1
- SSDEEP 6144:RygFIYW5lggOuH+nb/g87lHaT+9ZC+UTqJCXrychrb7GwHub20wPV1cDbnmpRR2L:R37lHaT+9ZC+UTqJCXRrb7GwHubTwN1u
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9e:6a:5a:a7:09:eb:2d:b2:f4:75:84:a0:88:b6:0e:4c:88:bf:a5:fc:5c:3a:9e:1d:45:50:d1:59:d1:71:7a:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
303450
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
288KB
Virtual Size
288KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c54cfc0a54f801fbcfaa8e69e5714f31a7de6151a8505d9991f382575217013
- MD5 0311baf0e52e162969a17e4e214d4ea9
- SHA1 5b46ca6e25a17fdf449eae46486110c7253402ff
- SHA512 e84961171117ffaf4c1ebad0f46c49b4ee1f308162b8a3759b9e43a3ae6d860e0dd9d6e1f87940f2e8585bd7c6e7f91d7545b3a2f5b06cf43c8faef222366576
- SSDEEP 384:sVR/+gK++oBTqeEbFVjQvPoodFu9Gl8rWoDsKjhh3xUxogl2YPed8KDzMIx/OzvN:8+L2BMVEu/hMXXa0itZS8hqL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
48:d6:1a:6c:e7:60:b1:4c:c4:31:32:cb:9e:17:d7:5c:48:a3:3a:34:a1:ca:e7:62:be:86:dd:63:45:71:98:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c27ead0322853a388b053c073c97e3965cb4091ff8410dd3cd88c2aa0ed072e6
- MD5 89ee5828d853a5b2eaf98bdb6881eac8
- SHA1 72e085bfd5eff04e4c0ef7421450c6085f05cb7d
- SHA512 25d7a8d4ffeeb1fce0140a72eafec51064a76fdb4c7c860a4d92272ac7e7c77d2bd85dc0780e5bb4d2af4dc003663130e216bec88f48cfa32f40afc37c8f77fc
- SSDEEP 384:wQ17Mw1Q+dHhACnzSJdLrC2upD+XEP7m5NWC/POD/ZAlk5FWVQWVY9W7S/0Lg8qB:j7Mw1Q+ZZncrCNLa5K/Zr5FWVsUS8e
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
52:4f:cd:69:24:e9:8f:23:d8:f2:8b:c9:9d:93:47:26:38:f9:3a:b4:3e:b1:ae:a3:eb:6b:a5:1d:eb:1b:b4:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
31166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d44cad00e27b0bd7053b6c3de2c4786e12166947fc118bd4e5b2cdcb1793f43b
- MD5 19e7ad69ef4d3aa8899d87816e698d3d
- SHA1 9995f753aca26431f0527eac78946795b5c3c28a
- SHA512 6ae39e11b66bf07bbfa0870030d0c83e4096676803f34b1fe6e08816b95b2edb752891e24b6577d046cf3d824deceee732460dfaf6315342f49e02cf0545dedf
- SSDEEP 384:diBEXSXRaRmIZXdXxaSiG7eQu0a27bVhr1FEhr5aWYHqhQ5W82/dHRN7LwuAzXue:UB5IzvB1LJFERhVmzrD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b4:f1:e1:19:f1:3f:8f:97:c2:0a:32:59:39:4f:35:ab:01:65:5b:ce:e9:fb:6f:9d:9f:99:d8:7b:c4:a8:bf:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea7ba5e51bd6aff65e4d6ff0a204e5d2e298321113f32159f5988846112d9352
- MD5 d4ac7b0be742c5d3241ef15c613fe07a
- SHA1 f1d1601d3e76829bfda5791c923eddb4504b3eb1
- SHA512 a9ecc52f6735f486caf3855b5854b732dc600eb9908cb35dd1ef6ea84e167a89b5954267ccf3e885f42c45e9679296135387a4a3c473e3a4eb75d53203beab87
- SSDEEP 384:2dDhfZrmOab3EFTIOTocYWpqhiRtn8P1WZl1ufy3WlRcwktyTpl9WjecR:uDhfZrmZFHcYWUu+PA1ufy8RcLeG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:9e:a9:b6:93:a3:e0:64:75:95:11:54:5d:f7:85:63:a3:d5:b2:24:44:a2:5b:d4:17:90:1b:89:d2:94:6a:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
20174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7fb191aa44cdc34ca1d7bfd37298cd9f46556769de5af1728680821f1445caf0
- MD5 0d32568481f191da5293381ba6ca3c95
- SHA1 b80a78ae94e91695b5024218b45457e1f0b864e9
- SHA512 435cd737c13640e422a3ad5b96891f79e56cf6b691a2a039b2b49b685d317a32daca0d80debbb3d7dcf97c19ab0d15f91948543a14288c01de9154ef3f990cf8
- SSDEEP 192:ayoWgAJ88fpxls5hnzMrWw8WebtuVaVWQ4+WczqnajqgYWgEsWF3F:ayoWRa8fzlsDnwrW/ZPzlxBgER3F
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7d:d1:bc:d7:f2:5b:9a:40:67:f6:d2:6c:55:8b:45:a6:54:0b:fa:40:17:2c:fc:c8:78:95:b2:fb:6b:d9:ca:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 62afc050d0e547a59204fe29c70018695b720a2e119cc3d3fdacfdc0c60d37a6
- MD5 6ab89f2a19b274c471cefbdb1fe6fc17
- SHA1 3048720ce821e719d59bfe03c9fc9552d4b3d8cf
- SHA512 cb7d1a7cb7ef4303e491e98fd5b391eb98983619f4a68109077e7a11b5c4d368843f3a2229321590587e48f61953c807f85892e4f663396526dc59f87d127eb9
- SSDEEP 1536:u61jOFSVCiSArfEhGcqBPcv7CPqoVzkoSKd12CcxEzW0+IJ/r0:F1iFSVCiSArfEhGcqBPcvWZ2C5xBJQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
01:5a:82:18:c9:b3:42:d6:68:5f:56:c0:97:cf:77:1f:8a:3b:3d:b7:15:b5:fd:d5:ca:97:a7:79:74:17:fb:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
108102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7d680a938763d9e49843252add75181cd1dcd178a566c327fdaa9fe53c9e39cb
- MD5 96007509e948f3c8747cc2d7cf831753
- SHA1 2c2f3292e9ec56e7ca70c21bf8a08f51f5ff52c2
- SHA512 fb32ecc149b2a7f3e257545d7e0cdd50a2a821aa9c0a485a3b63460341a8bb7ac91053e7695e97f86fa74948e5e3c8b2ae9422316fb200bd3ae1c47f8591d956
- SSDEEP 6144:zZa9TYjFbY2EkZaeaEkxJfOAOdRlKhpBo04a:zBYVEkxJfOAOHlKhpBoXa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
78:12:8e:bc:2e:44:dd:ad:d6:4f:96:4f:ff:20:99:25:2d:1a:73:08:07:ff:22:70:f7:68:ff:14:d6:46:df:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
202286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
190KB
Virtual Size
189KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a24f768fa8a959241a5dfe751ae425f3a2d9800714db42d7f357cdda27080b2
- MD5 e853c035d6679d10e6dd1f6cb0f76da4
- SHA1 a07c2937011dbb54eba0c0211902a4772ee7ec59
- SHA512 fbbc5bf7f62bd9d4b20664951accb2ee1aa59f5df17f41acea67d851f476f0983b2250808146229490da75db5145850e87ee2858bda21db2c70317bf673f8db1
- SSDEEP 768:2+pAJgb7ifXRaQqM+PFb97Zsr4OaYFJsd4gSZLnJ6w2s3C9M9qPiDdSb2YJ:H2Jgb7ihqxFo4OaYFJsd4BZLnJ6fs3Cv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8f:8a:af:31:b7:c1:2f:2f:3f:06:83:cc:e9:70:d5:19:ce:7c:c7:51:59:cc:c7:77:3e:50:14:cb:37:1e:ed:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
41886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 935fc3a125d3de64b299ab2093626201863ddfc761a6e4d81f880009290b0710
- MD5 fed00f42c876ab237d53c94b2ddbc328
- SHA1 fd6fbf0186636123f586989d342817468dfdde8c
- SHA512 015041c2a77df4aa214c340a236f65a65af267ea85280fa2c21262c2f7052e2b978ccc3d633e43c141cfb4b7488fdaa6dcae7daf832eeef99774f3d139b659c0
- SSDEEP 768:HqpgsqCekJO+Ym5hLgEPH2UpYsMoj4KYwqxxSOHpVCNDJuLwt3YHZts0/rshznpw:ugsqCekJO+1Ym3Y5tspSgcO3XWn+0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
04:3c:7d:09:32:ca:13:07:1a:f9:71:d1:92:d4:46:09:18:21:62:68:c6:12:12:01:ca:8a:78:9e:12:1a:33:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
35162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8624baacdf41d18012d7f160c8e4dcd753492441c3fb5e04b35bdafbb719e46f
- MD5 349ea17321cc6ed4b8699d5b1d0049c5
- SHA1 76c3f83256d341da6f2a2be4eb745bc900e24de8
- SHA512 d1f607985c789358886536a3dacd005d1074b796e9d187c54e450d63b34e1094348c1b7c4217dcc0988e376fce0a5cfbc2608a2bddfa76023fca33ab75dfd054
- SSDEEP 192:IuvRzIP99ceEsEYE1/UlWKzkW4GD5dHnhWgN7aQWSmU4h008Cw7qnajKsiJ4:bhg6jAWKzHdHRN75h4h0uw7lGsiJ4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1d:5c:23:ba:ff:e5:92:33:3e:34:b0:5e:cc:a1:cd:63:9e:f4:7c:0c:11:45:2e:e6:d1:c1:09:db:22:e7:f0:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca346d69b34da114c593dd22bb2fb4043d17d2069d7065795648457ea7ec1b2d
- MD5 8c2300851a91392fc9e096d9c32b88b4
- SHA1 15a20f88ca092279c6a293cd1653fad9bb814919
- SHA512 ff815305d56912a34c3e294c17439402ec8c435272f3980fc993621734c335fd1197f8c2a0fdf80a51a7ec016f1270f1d33844cea86ebe0ff8ca6aa6c2cddc08
- SSDEEP 3072:DR9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yhCfAcGtexgVyUL+5pEbY1jGxWjPqL:mWjPPZAYtbXNs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0e:d1:ab:65:72:a7:25:30:ab:27:35:55:de:bf:e4:3e:13:19:50:63:75:a1:fb:7a:94:5c:4b:e7:46:d3:71:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
132978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
122KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6dfffc57c4027b4754bbc02676edd3d0f7c84d7423a0c49db2fd7b288c3677ea
- MD5 31bb7530dc34469e70f4de8df3ae79c3
- SHA1 84453e5a53a63549af693a9654a3f7ccc983575c
- SHA512 3c7f598c8e67077d129d4ce61a36c47785c56c43a9a34e481b4af48324be7bd35a0719be217e44fc3683dce31ff06daf3b6aebc841c26174863b368a03fb75f7
- SSDEEP 192:MP/xGWviW82eW4GD5dHnhWgN7aQWPVyN008Cw7qnajKsV9DIi:AJGWviW82tdHRN7hN0uw7lGsV9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1c:0e:09:5c:43:4f:e0:d4:9f:cf:ff:44:60:61:12:9b:2e:3b:3d:1f:26:3a:69:b2:04:c4:26:f4:39:cf:71:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d29385c8ff9f905c05974175bbe76509cac84846625cff39b020f9a905e47e0
- MD5 10fa4fba455e756ae7629237c3e41738
- SHA1 dfe588ddc2fdcde790e04cd820fad179d6a45c8b
- SHA512 aadb15e9e06bbf80bc860c299fffc3b86ce08df3fba31c449e0acbfbd11462b3c639b205099d685319b17d1b45e2be7fc916b46e3e0cabaec796731c7fc3feb1
- SSDEEP 6144:42WVoFtRW7+oilHFIufoRTscxSUTefClTrbSFZOt8rn+h9wUBMUG+4:42WVi0lTfS7Otun+hKU+UG+4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
50:b3:c2:3d:a7:0b:00:d2:1f:93:66:0f:44:29:ff:4f:ab:9d:a8:5b:d2:6d:39:ea:de:1b:ba:c4:9e:48:f4:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
358610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
342KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0786d456368fd5df607f625b89dd6e4c49e2903453d485f2160696d93a0a8db6
- MD5 0373bb6a598fdd3404662eb5c456681a
- SHA1 255d9d0e56414ae95f43efec26bd8a5f1d45412b
- SHA512 a31d9877658c73002666f799d0febce4dbab8976d1e262c6064915730c82b2346a8d75cefbcee92323b0150fefab07c878e6b53c906b3a1695e8789e878d9e24
- SSDEEP 192:uqbotv2NfZG2CEuABW+voW4GD5dHnhWgN7aQW/owuD8PEqXAfqnajKswDP:L3ZNW+v7dHRN7uowuAzXulGswD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2f:a3:b9:19:bc:68:b6:7b:9c:57:ba:2e:9d:19:06:05:f5:ba:24:cd:18:92:b1:71:0a:45:1f:bc:13:ae:2e:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e469a61e22971428eb019e3fd4beb27da729745861fdf919c18c5887a2abb805
- MD5 178c4b5a351edae3fcd518e47cced9fd
- SHA1 7af8794dadf1408011d34b72d0ead7fcd2c2eef6
- SHA512 0ab10fa003fb97f8d6f9482a9d88bafcefdf8842093659be0546d1158fd735c9057ec78ba663300e52ea4ad014cff4ba4c5e5fe1463b476f6504b1ad054e70f0
- SSDEEP 768:i7oOCK7e48Rva+O3yc01mDfOjBH+oLX1l1/qC2Od1pRCki/2iWHX1IEjL3+:Glj8bjk21l1yC2p1eXP+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e2:4a:34:ea:49:a0:d9:20:e7:c5:3b:bf:08:e4:38:3a:84:89:54:57:11:08:37:50:ec:c5:35:fb:f8:48:14:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
62522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb90287787ca7bc64be43e91f3f63e5f9d67e1cff4b86133c8621f5afe26c686
- MD5 a4675e256f6a471f55238e0938b31249
- SHA1 fd20b93d88238494eaaafca6a035409ff1204837
- SHA512 30e584abfb3a1600919a4cc854d5069c5bf47eb8c2d31e957673507ebcc8bb257224ba33f03e3091e9758cb773b61ac31c831dc7395efa1190e0fbebe314e163
- SSDEEP 384:MdyfwP3cgks1u161ZmWSFP5dHRN7opMfVlGsa9U2:MmwP3rks1u161ZWnopTH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ca:4a:66:11:cb:0c:09:2b:ad:f7:82:91:41:0f:e8:8b:23:1b:36:9a:ba:b0:e4:e1:4f:e2:0b:ee:89:fb:0e:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
15062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4bf10e1ff8628cfd046aa9db9f46ac4b144dba45af3c001dd98c7e62e357176b
- MD5 f79e03d842fa2c113d6ce8454653885c
- SHA1 18bcdcb66fc0e26b38a1314589e9f3bb7388bddc
- SHA512 576b7c962326418a21bf1137246d20ee2e720b65bdc3b2a74d729d8ff0547db546aa7d0f24d96aa7e9f858b63975b4d52a89a9279ac99718b62d8cb00d2f13cc
- SSDEEP 192:7B/Ay2qc+krZyw0NV4WTm5pRQR0R2RR1ED0Wl4xW4GD5dHnhWgN7aQWp5D7Diqn:xJ+Zyw6I5/Eo4hWl4MdHRN7k5GlGse
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
88:fa:09:59:e9:61:09:93:bb:5d:35:a7:c1:40:e5:2d:cb:4b:89:b3:c0:3f:52:bb:c7:c6:20:86:4b:7f:93:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
16226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b6cf4934fc93c20530a53e9103107fc5ba8b0c146c1b90e371bad9c54e8f9f55
- MD5 988a49941c6303b7a854442bda78c5df
- SHA1 d7d48706f325fa254274e4d440ad5b90995eba0c
- SHA512 77f8c7a6829077a1cfe073f89391a20655b0e9963c627e2164b8e5b3df594f43af97d70ff834e697eb66ef81cdc3a6ba5b465e2cd3ca2ff7d909a91c3a14b06b
- SSDEEP 192:bIR4353rKWrF3WQd1W4GD5dHnhWgN7aQWkoIVFWSqnajKs4s:0aF265WQdgdHRN7/oiFWSlGs4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
00:6d:95:fe:a1:f9:64:09:24:8f:e1:b4:15:68:7b:fc:32:bc:df:69:9b:08:12:2d:10:57:55:af:79:23:19:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f4ee317b667615c040342334d6fd7f7b0eb5dc126bef01f4ad2af469034f98aa
- MD5 a51f443753b008fa0d3d57c2e340da46
- SHA1 a8df85d0e8cf0f0925c152c4e0b31b8fde693ede
- SHA512 ccc78d3c096ee29693e666b09df1be6e4c9eb9f4e50a04ff9c42a2ef887ae6b68c94c281a1c2887ac19d809383f45f44d099bed107c5a5990d6943c95b27301a
- SSDEEP 384:gWYfeDRPDYOABWD6GdHRN7tN6P+CcWlGsS6Mx:bY2DSybtN6wF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
46:dc:fe:2f:8b:14:cf:6d:0b:26:22:ca:b5:7b:3e:a3:14:0f:5c:d8:0f:4a:58:45:8d:db:26:3e:49:49:d5:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 189789d7b890a6066a47b4eec1b3b99a8b1cde4a4d2f043fbaf6e3a9b79c08cc
- MD5 7c0235f20099e2d3d6d8664195c95a35
- SHA1 d3dc9c34fd159cc9cd8a3968e7a86693749da788
- SHA512 5df02ab12a34ab81f4dea12fd9ccf2dd7c4b1a635ccbae48966616e407717c04026e1e4cba00cd294453151c2f21772794a1af139a475519f8306f7cd0d3ffe8
- SSDEEP 1536:CD1915SaOoaHCCURoRawCDsgWFtXp6wwykCTGsLxLwzu2FqwKCPX+vdkitXzxg:C/SaOoaHCCUwBasLxS0d
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
02:6f:b0:e7:43:d5:9a:65:b7:d1:95:dc:74:02:2e:8e:59:dd:46:3f:64:c5:7b:51:d2:b3:28:42:45:27:12:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
85850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b2415af9dab2b27e241069f483bbd9533955b84d05630fa5fdb7659d20f3566
- MD5 1b056ef47b4c110ef5ffb73dcba240a4
- SHA1 979de296bc9cf784383e7e492fb1350dbdfd6ee5
- SHA512 b6d1b243199483c168dab04855f7e749256e0b6cb2b00eee1f323c3b674c9a8c45ae406b4db6b0bdcef86ada38a4b81975037feccdf5e97b7252674c06b1ffb6
- SSDEEP 384:S8LFLHSsWDYZW9QvdHRN7iOipJAlGsps:/ZHSJDYgwE3
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:1a:f3:ad:dd:1b:4f:24:00:e0:75:0c:f0:48:05:02:a1:be:64:0a:9b:be:03:78:5e:57:59:82:4a:0f:7a:74
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 424a1443cfc97ba6c260ec187f2a173882405b9b0b3ebc921b81e06680bd06fb
- MD5 69696e4a5eab4cd0c16c5af3defaca4a
- SHA1 f83f4fcf16fc15673f4adf89506fac37d0b47adb
- SHA512 c385534315e859263481629360dc6558b76d139d8aa646ced54cf754769b617a98d800d660297d4ac4e2a750de698f6c839e10b647142ee9249b2a492f7126da
- SSDEEP 48:6D2waHh7kiMIz/QGcq3cpBDtlflSEmlAnZePmOX5cbC/ktiCcvDvrA7MFCl1LJnL:5B7kiJmpd5X/oWuvrEMFCl1ZPlY6n+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7229978dc4baa41a0354da585fd6dd99487e53527bebd5ac64174f1e7b1e0f18
- MD5 a1dc729ae639eb39e8a5d4e277fe66bd
- SHA1 2e9639e4384d56d9400c62ad3a6cb7a73a2af790
- SHA512 67a0b6edac568772071b4b992d3dcddf5ff6a098bb80bad85356daa3afa177e9a03c75d367559ba8f391b0c22a4fa98b6e911699fc6dae565a4fda401cb6b2c2
- SSDEEP 768:KEy2T7+qbnABlYG+tCAvLxSB2l2ii27/ryE6xQXOEAEtLsTjpyIA8gMnDg9:5HdnAgsAvLxSB2lD7/ueXOEbIWMi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f4b59f4e26c08e65b73aea6b197b160e0736951f4d3cd7567f97f7d2aa321c6a
- MD5 e25fbbcb5243508e4eeaa5e37a5c0320
- SHA1 f5c37941418db6db6eb522f1478d7dac2e49d267
- SHA512 b437737162f93e13c4faf744ca60a57007ff28099f12121b62ee55144291cc46034f443507ad13780719a914ba36681ee9b2c27b1bbd325f64f4823bd3a5bcf9
- SSDEEP 96:VxI5o9dETwkCptbQogl+ZlIjSd+SdctSdSZSd/Sd:4+ncMptb+MZlI2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f9b8c2adcd96454c9fa3040c5c406906deb5a15f706ab3e2e0cdb9cc64485dd
- MD5 32f81b27990efaa08b3b38f54f820c61
- SHA1 5c9da9a7a86220967126cbdb6be4afc06299937c
- SHA512 3dfa00870558244a67d6c841882b741391cb93e03e0c60cc561d220e4639852826c4d3438bc705b09f0811bbdd02e4b90d1d4396c7162245e97c2d7edfe0d0a2
- SSDEEP 192:u6O7+VWUDxwuPspebRrtwr50f5niSeo2FloWR:u6FVzCebxs50Bn6oCr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 20fee69363abea9f1ef28dfcc2ab7a61e6b1e30e48149185522c2765cf3e5dc4
- MD5 e5c775ea4809ddefacf9d28ea2834b83
- SHA1 8df8262747aa16d24fb28293f201b9b33b9b7d1a
- SHA512 9b3f9b8ae96a104b0d6e09655383dab875eaab0594d41c9f274760c0b18ea51075a60fd10555b902b6648ef3f02762e930d7fa0fa17c6b4d103efa32686d91ef
- SSDEEP 96:AOx9wdb3XYhCTZL3Wh0fHrl72zOtHPJJsy:AOx9uY69fL92zQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d44b8d9fa639d7a799c7811c49b9e7a141cd98b686609f8bc5e33ebfed6853a
- MD5 9a58ae5973a839861fc7a1b1ab633619
- SHA1 165cd87580ab37aee7c2655e7d2b93306c8066aa
- SHA512 b26a516db7c5e83de82ff314c38c3cf68e4213f022c2c5a5d50588a5b3ea60c23e0172c2b09c07f99660f5590e13485ab3a948ea8c0e66c57010b18fe28581fc
- SSDEEP 96:c/pmzKuX/taneo+thuAPy6JXqz3U9QhA91I3XkO/krWOJyvGsdYgg3/XvJ52l72W:yu91I3X7HvGRggPXvG92u9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4c49fda96fb4a4c05e35f62c4df49aec6fc9fd8f9ef1bb5595285fc9092bc71
- MD5 9cc4b242ca041e1e6c25a4af5f524cdc
- SHA1 cb51f92e32af339913437367e43a9b8e8769d013
- SHA512 609181b4cb2e0a5ab5c1d51d2f969c5806191a413738a9b42b21f8354ae60a3f05e9656121b88ee47b0025e27d1af78937c5046aced20da5e45aae930733abac
- SSDEEP 192:HiRt/0LbI1GynTyz94VGZFBqyJIKQTSoUk:Cj/0LbSGynTu9cGZmyJIK36
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 601781ab8841175143699b0cb074a313c897b2081617f9c1df617b8bc3bcba66
- MD5 7a9d4c9347dc481a58f014abb6ad9fae
- SHA1 3ef65f46be7d9c19edf2abb1fc2bfa2b12ac9059
- SHA512 0ab404a72523cc4ad948c4c1c0e2bbe022797f461bd23114f0e8e225c97a686f02ea35e1e79b8bc5488836d27ea99203d6d6a6bb33ec2612d9d4695cce555af5
- SSDEEP 96:PUGTL94oXpmmZIQNpg92FF3Il1BFVUIov+DFaidjJ44BNllm/rSyIHlk:PUGTLaSpdIQNp3F3IlxVUxo34il4/e6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df5db7a25288792ca61478e9ba7d87063412602fbf3815f9f311f081bfa80da3
- MD5 084be258cf8e817c038be64859830558
- SHA1 20dded85ef204dc86b86d11d5f328b4150b741d1
- SHA512 28e03d8d3d6b35cea2235cecaff2175f751fc09f1b1334378591d7d212537482e1e46641daf73327f71c687fc77ebed365c2e87e890074661ab837c84c6f7dbd
- SSDEEP 96:zmysFqi1pQ7coFfdOEvWzvWlIHRxjELlBj3ehv:zmysSgYrmJHR+vj30
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2fcafd9ce395c2769f17edaf03a9ff5a286c7807376087e700d3ccdc7f5b5fe
- MD5 2ac6f83298a8844abb0a18086b2b8d9a
- SHA1 057dcf9346ec75f3ce75a598f4ea55fe2761ea14
- SHA512 e9a5610b483bfc45e37417bf9704c5ca56d375441585c257b6eb9820deeaaa3a4417ce554094af7a5d752dc32dd32ddb4f0cf5a3e7951977a2ab7166eb218e8c
- SSDEEP 768:xDAe5Yc1wDfnbS85n7nwnI2nIZH3sn7oGvwDI2M7C+bZSaDIpnCiUtX/t69DvrNn:1jTCw748BIpn5UtX/t6934Q/EC1l
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17f47ddbb862799c9480d74f688531aaff5c077eae370efad18516027ff0fcda
- MD5 a0fc873142bba74f8ebd9d4661785cac
- SHA1 611bab2f1edb7df1d916ffb8a79262412bf14e07
- SHA512 5dfb0d138bf5664d3397f799192c551bc239b03dfe123f225dfd6795143207560d7e6e9eb9ac37bb9a429bdb0d01bb646317a9ca50982643bfd0765d2110c909
- SSDEEP 192:0o8qs2uPs6yuDoYu+9/OsTpyq9NOtsiDqKd:05qQngsTgsys5s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2bd55b101628946d0b20b80cd8ab776c4070b71204bd0ddbf046917ff712435b
- MD5 fe8de5c36cd16364374c432280a064fb
- SHA1 bc3db61ac30eefaada56c5865261da749e92155a
- SHA512 d03e603bcba2a927b5212741d02fec90110d89989f952a1652c274708633f8890c9b38f3968c84e7515063a618aa9db4f8e69cd90c66c3e95818ff6c908db8c5
- SSDEEP 48:6BCjdF5HOGKlGmjUZ8tl1CPpf5DbpFybWUEiZbTLliH4Be7:3f5uGKlGVAlIPz6SUn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 431df78c41270a583da69b3f37cde7a98b333931e44d3d315f3991c3c48d1e10
- MD5 0b3f5f78a3dbb9354d0b9ff703402131
- SHA1 1f1dc3f6fd8f7ae365bae13b38222269529fe83b
- SHA512 c04413656dbe7873fd49f5153e7ddec9bb064a23aa9d8d492a9f124c9ca1621a570627d7e57876272cd017ce269bf25dfda677059359239de00aa30346d12c52
- SSDEEP 96:7CVxzyWIlGP1vEwAHyOR+m9A8+eRnGVjD5OslAPnbFaPgU:OVxzxYGiHyOs8NRGVn0sifbj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f2402647fdb0e90768ef0ac35124685be4115101877ba4d986c5dde0c5c37ad
- MD5 88fb55e1d11fda015cbef3638d89b7bb
- SHA1 e1e8b2fe0bb9c382f8fbbebd9c7a81cd197f1f80
- SHA512 9ead7e324e0c90cbabe81d2fc64ad157330ff127bf342905c499fe8f6155de366cfe535cdc62409deee1dd4070c2efdbfc3a3b4e891a1f340459e313835e7a18
- SSDEEP 96:3qExLCu+qKK3HMIE6NNxCv0NDM4pysoYfvb1Jlsvzn8U:3qExGCHMtv0NJyAff+v5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 378b76a2b04b00a07e7d4369f09f15387b13ea8c8191bff7baa654154454e957
- MD5 38bae19a33598bcfb66282c8814b7d79
- SHA1 5b2a5d1e886adc1c12159dbc6313c95240586239
- SHA512 cb4b0abaf0415dc9e880b1b159c92b7ceb782db5a080bf85b3e42356e525afddc92be9aa71b50be6faa07400e7916926bf42bdfa9afb0100a82780eb96e39846
- SSDEEP 96:Mrm2nu2iXdCA4iRNgdt5ur38CohKlVv60eTufA0WXORlIP5z/9HvY:YmuZihRGdxrhKlVvgTuo0wORaP5z/9g
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/fr/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e0dcac65d7141361b23c51c01c96cd6bfb9e72830b95bcd40d0ab276d6f18540
- MD5 1239f9c59eee73427175b39593d7aec2
- SHA1 765af14772cd87b2087485780a60525060e3d0ce
- SHA512 3ebd2875c5fa845c8afa0665a5560051d454bb4ebdec0a3c97e6047dfd454f1ba7e5f585cfd11d99fdb18353d88d599110f7e61bfcd879bffe23452fde26ccdd
- SSDEEP 1536:/1G/OdU1yuTGeP9r0rkrjVXVrVao3WhtIRfofB5UN2h3e+pwS6wAIJ2Ld6P2ggrE:/1G/Om1yuTGeP9r0rkrjVXVrVao3WhtP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hostfxr.dll
- IMPHASH 03cad07d3c5182e7c86e136aa250631d
- SHA256 fcf198db8f15c3f3d500b7d3c4a3582fe5f3494b02fe773b974b1d65274289f3
- MD5 b106c19b77ea09a4e0c4cbdd37fc1d74
- SHA1 81991d5bb96d4a5b404e581b96d8058a7f4d20ed
- SHA512 d3a93309337be24c59c62cc69b4aba8d2c9184f5c905a86591873e60b1ee53db9bd4b737fc67ed39b3f7201ba12cf16f894389724cabbd1ffeb9292e8bbc683c
- SSDEEP 6144:ah2JC8jioOyiodQK80zeE7wI7/1dBm3fx6MaCjCStoUuVvB6yWr0Qs1dAu7U+5L:ah2Q8jioORodQKISwIzBmp6RzStoUuVT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
63:df:01:52:e8:ff:b3:21:95:77:77:14:57:ad:eb:f4:08:2d:22:67:b1:13:2e:fb:6a:d8:d1:9b:f4:99:be:36
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
135360
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\win-x86.Release\corehost\cli\fxr\standalone\Release\hostfxr.pdb
kernel32
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
CreateFileW
MultiByteToWideChar
FindFirstFileExW
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
GetFileSizeEx
GetLastError
OutputDebugStringW
RaiseException
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
Sleep
CreateTimerQueue
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
TryEnterCriticalSection
GetCurrentThreadId
GetStringTypeW
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
EncodePointer
DecodePointer
LCMapStringW
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-heap-l1-1-0
free
realloc
malloc
_callnewh
calloc
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_execute_onexit_table
_errno
_initterm_e
_register_onexit_function
_initterm
_cexit
_seh_filter_dll
_configure_narrow_argv
terminate
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_wcserror
abort
api-ms-win-crt-stdio-l1-1-0
fgetpos
fwrite
__acrt_iob_func
fsetpos
fflush
fputwc
fread
_fseeki64
_get_stream_buffer_pointers
fputws
_wfsopen
fseek
__stdio_common_vfwprintf
__stdio_common_vswprintf
fputc
__stdio_common_vsprintf_s
_wfopen
setvbuf
fgetc
ungetc
fclose
api-ms-win-crt-string-l1-1-0
strcpy_s
__strncnt
wcsnlen
towlower
strcspn
islower
_wcsdup
isupper
_wcsicmp
_wcsnicmp
wcsncmp
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
setlocale
__pctype_func
___lc_codepage_func
_lock_locales
_unlock_locales
localeconv
___lc_locale_name_func
api-ms-win-crt-math-l1-1-0
_CIsqrt
_CIexp
frexp
ceil
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
wcsftime
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
hostfxr_close
hostfxr_get_available_sdks
hostfxr_get_native_search_directories
hostfxr_get_runtime_delegate
hostfxr_get_runtime_properties
hostfxr_get_runtime_property_value
hostfxr_initialize_for_dotnet_command_line
hostfxr_initialize_for_runtime_config
hostfxr_main
hostfxr_main_bundle_startupinfo
hostfxr_main_startupinfo
hostfxr_resolve_sdk
hostfxr_resolve_sdk2
hostfxr_run_app
hostfxr_set_error_writer
hostfxr_set_runtime_property_value
Name
.text
Size
256KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=260, version=28920,
count=20, id=259, version=28920,
count=135, id=261, version=28920,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=27412,
count=201, id=1, productName=Unmarked objects,
count=28, id=265, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/hostpolicy.dll
- IMPHASH e7cbe793d3941027e08128573b8b5946
- SHA256 30581b893bfaf0d0aaba0f4ebe9303425d34b4c03b2a494dbeef2f18aeb1b5e0
- MD5 d5b36fea86bb8eb0ded938283b41486f
- SHA1 7ac2b915389f9369ae5912229fc0ccd82a7c8c5e
- SHA512 3bf4c6dad439e00c12e649ecb88ce0fe36773d739e7fb695007eea40039edb54582e2bbaacaa919b2cd97ff0aaca0fa601500d02bf1c9f5a7bc915760e4225b3
- SSDEEP 6144:3gR5zF8BrB7Dh7j7RA/nuIlviiAPxGxc0FHBMequHd33/D+udePoZrOOIgG7ooqn:YbarB7D1j7a/hKiAgc0blF337+udePoL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1b:67:b2:05:fd:a7:44:25:85:22:e6:68:7d:50:b0:43:04:ac:97:38:2c:72:29:2a:7f:dc:46:4e:20:24:02:8f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
141040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\win-x86.Release\corehost\cli\hostpolicy\standalone\Release\hostpolicy.pdb
kernel32
OutputDebugStringW
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
GetCurrentProcessId
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
Sleep
RemoveDirectoryW
MultiByteToWideChar
CreateDirectoryW
RaiseException
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetEvent
LCMapStringW
DecodePointer
EncodePointer
GetTickCount
GetCurrentThreadId
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
TryEnterCriticalSection
GetStringTypeW
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_errno
_wcserror
_cexit
_initterm
_initterm_e
_seh_filter_dll
_initialize_narrow_environment
terminate
_beginthreadex
_invalid_parameter_noinfo_noreturn
abort
api-ms-win-crt-string-l1-1-0
_wcsicmp
strcpy_s
__strncnt
_wcsnicmp
wcsncmp
towlower
wcsnlen
islower
_wcsdup
isupper
strcspn
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
realloc
free
malloc
api-ms-win-crt-stdio-l1-1-0
fgetc
__stdio_common_vsprintf_s
fclose
fwrite
fputc
ungetc
__stdio_common_vswprintf
_wfopen
__acrt_iob_func
_wfsopen
fseek
fsetpos
fflush
fputwc
fputws
__stdio_common_vfwprintf
fread
setvbuf
_fseeki64
fgetpos
_get_stream_buffer_pointers
api-ms-win-crt-locale-l1-1-0
_unlock_locales
setlocale
_lock_locales
__pctype_func
___lc_locale_name_func
localeconv
___mb_cur_max_func
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
ceil
_CIsqrt
frexp
_CIexp
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wrename
_lock_file
_wremove
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64
_time64
corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
Name
.text
Size
261KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
87KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=260, version=28920,
count=20, id=259, version=28920,
count=137, id=261, version=28920,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=27412,
count=208, id=1, productName=Unmarked objects,
count=29, id=265, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/hu/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9f4b9235388dd38e7385df2157e45c407e44e0a5dc154399443b90562e343ca4
- MD5 690d63b219a5f0c9d7b1389cf3825b68
- SHA1 be9a76c0aa6b80716147574a04de9b676d0644a7
- SHA512 788e757e403340411107e9c95f3e68f35fe79c794c9806325d2a06eb0713db787ba58913ae89fb3fa177421519c612a49ee83b466c584c6912551aad1a510d94
- SSDEEP 96:62Z/B7kiJ12/i75mehleqMRrVCl1ZPG56n+:62Z/B7k62/fk5MRr4Ne
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab0ca2523611c572477c4185ea2634b8ac8edddd3f8449a313f57cb5cc380d68
- MD5 7fc9c43208c9970d8300eca44a261481
- SHA1 a875eede377911b8299f1ff93c0449ccf790fab0
- SHA512 93c36e21e7539dfe5601f5f8a74578353107a55bdd721415360dbb34aac56cf9a6ba3e6addf2c810f4f295d635790e20784744cc8dd76bed96fdd15779e46e71
- SSDEEP 1536:sHdnA6uwda3eOAUEBkk45ccPrKuz0oUkvwOml+E0qAcyoVTIZvG0uIEavoRdyosW:s61wa3eOAUEBkP5c+Ku8PLZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c78299e8356e64b2853352fa013b81d1c34092cb661decc512bb17607e84439f
- MD5 a78319ca26aa84fb791c65f5984ec247
- SHA1 6a4944096ac97002b5934f8292bc6d61d19ac7e4
- SHA512 d617b5175f37c74bfd65b6e4a9b34bc8ce556e4335442bf71ebc8a61c82e0bce32e8dcdce1835f89fd1baeac2d3edddc0e2b86f3a001640b515d5157822b9f97
- SSDEEP 96:VNEO5xTdE4w6lwN/l+ZlIgyjSd+SdctSdSZSd/Sd:79zZjlSN/MZly2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7a7c04a2e30fa5500aa56312e418087d469474706c96fb21d0f17baa6753d64
- MD5 0b1247fe05a4e59d266e6d6982ef3b5d
- SHA1 274dfa19625a431cbaa664d893bed10e46dbd07d
- SHA512 b52f7af25884397da57ecb4b015107ec25e43297e12af73cb0ebcd462c901b3fc1dfa624f4c08d14cb2c3bf1fbb10eb1e4a87fd9c34304694a7669ad6743c087
- SSDEEP 192:HTFQ6O7vJo9UGVRckwBJ1NAyZS0oI7kljn2FqfWR:xQ6QJSRwBJ1NAykfI7kpnCx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5f1328499602642c72006f4bb23882cd6433b4dafb3cfdd888878040cb2108e
- MD5 5af298932d9d9297b004008cbf4161c3
- SHA1 192adb3b96930277a7503ead93db1f044a0efe7e
- SHA512 dbedee91013b37e76f1912dae7e1650f33b7e1bbe7c585083aebb94761b632e18eb2b89c88334efab6155ba1fbec6e86c1bdefbce1dd1cfd650eea27afd3870a
- SSDEEP 96:asx9uGCZ9Ehb8irJ5SEGCDl722x2utHPJJsy:9x9W6HoI9202w
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9920b09941ea6e77e69a01bd494ed2dd2994e938aa65b3c3be1ad579ade947d4
- MD5 913c95bcb9b78952f5b60e2b4f9b1def
- SHA1 cb057c06bea2203f06cba6bdc1470895e3ddb250
- SHA512 95962250dfbb2c933637e0a8b82e21912a2a7d6dbc9aa3bf0fc5d10296f4bae6b47a4b67c0486086bc7613b0d02d178eda852fe241bbaa09360526c34796e9c1
- SSDEEP 96:BwepmzKK/x/VcaemqftMir7uISFwEETb+WylrOv7lNtp/IwGl72igFTJPHJso:BweLCtWRN3IwG92xZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22c280f7b82845599ef847f6b16dd3bf58f2cde1ec2a6248625b5b9e69ef3f0b
- MD5 c6e6cc02deb0268b58f5f31d331f7b02
- SHA1 9e803ae37698b022f978adb859a2acad45ffae3c
- SHA512 78af5a9fd53de5d8b4a88e20f1baba79859327f0d82374b1bb05856c1f0a651e7f0264fd906bcfdb41ae1392260623d9b9acf559cb403309c6d95a7ef9fdcd01
- SSDEEP 192:52iRtdRUurF/X3bED73atHdQ7c2//S7Yo:fjdRUurF/X3bED73anPb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f4d6ab1859658f7581d194ddcfe0e026ad45b647e7cf37066403a2628afd0e70
- MD5 dd2dad454016dd599b606c6afae98daf
- SHA1 bba3b273ea33091ee626d33af85d3a199acc6008
- SHA512 44f56868ebea7777857da053e3a7b9fa0a7b72343bb82d19825decf74dd89225bdc6fa2f845cea173d2fbcc9f35e56e2c9a20ad8be2e315d3c64c8b56fb425dd
- SSDEEP 96:7VgUGTL94o8ZiGCHWPFprxYI/BFVHuv/v05kOAc/wKdLTWCilm/r+sClk:BgUGTLatZaHWPFYI7VAXgccoGg4/j3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 55b4514fe9212ed0aa22c41609fcceeaa609407c9c5bed236c1a1845dfec5ff1
- MD5 87a97299d4a93f9780c6ec8f5962c591
- SHA1 d076f61db99cb9bc1ab1530de6a43466d93a6326
- SHA512 5a16422fdb5f463ca83f11547f66c6d82bb0c41eba93f0d2cd067126ae8fd67a6b6a9d1f67efd62351ee7a73de9da9e6bf20c7f308eaaab7bbcfea00fca07197
- SSDEEP 96:77ssFqEyQIyHMThnG73vWJvWGTxaJe1lB1mfehv:74sP3gSg5N1vwf0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 07f7538a23cc0bfdfa516787b8f1d9527c7a4baf4d80ad2893c7e0b02c3b245f
- MD5 abd8013b9416754b6364be27622dab4c
- SHA1 a0a7bd043f282eedf1ec5751345742162f624007
- SHA512 c4d8645571e7dd3b3eddc61e0b42a9fb640f4f346a8b1c721ce3c5399209f8d89bd2a3759509adaf1fe0e3afe1f4b102737dbfc2fcf292be3049ec16a16a01fc
- SSDEEP 768:pDAe5Yc1qD4nrSADnqn/nIFnI6aMzNqB0vBMvWNK5KMfBdYBQx8Ofe6x+soF6B7e:NjTsYR83CBQx8Ofe6xoFIxnCke1T
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9831cfff04f22446b1c092de062e9a5f5b358e538d6b2cf2fb2a6c3c3d22c905
- MD5 5578711c948ba409d4ee34af85911f14
- SHA1 87c4225e5d6cbeda916801cb7a8da751298e68cb
- SHA512 e9f47bca48cb0817060a9b012d8ac621a1f030a46b22baa35c0dd25e70703e8040f36bd8ca51f82648310bc36aec7946a29daa3bf0dfbd4314cdf58e4cd6fe57
- SSDEEP 192:OKo8qND5v6DA7iRDR9N+4NDFGHQcEqKa:95qp6LzDFGH3jv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6485365012755376d5d45774d14e0339264296e431f4ca15520822bafce1a52d
- MD5 6bc6d29c35e3b92c34ec3f18c7442332
- SHA1 e15f9cc736021d24a2e7a01b3a490419051ff067
- SHA512 9f236ca3e2f0583d5e482c521103c500d02dbe7c896716be8f61b50b385930a6d775530636100b7fc0084e9566e3246eb95c54c88734d774ce999a773cedd858
- SSDEEP 48:6XHlYHOGKlGqHUnHgzl1CPpfijDrFybW8EiZbTLliH4Be7:MYuGKlGdHalIPQAS8n4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d69c72d9fddd338d7205d1bccf42fb7b86343974314e03d00c1bf1871fb8e6a
- MD5 541c1ead18e3822f9a1f9282faf5d305
- SHA1 8082cf08c8a107493df377b5e98f10a43ff6c647
- SHA512 20c7905e4f2153de40dead1c62c77223959d3a0c9631720cd1f4de8f6fcaf8b0ae077ddc5df25a8001256956b3445523f876f07f7589b065557bda8ae12c39ec
- SSDEEP 192:yhxzicGKQbPVPtEvtHtVhsuTKpA64T5tkiFzD:yhxzicGbbtPtEHtVhsuTKpAfT5t7F/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d6e6aadf29593a3ee34ae86f1b68a78b52540b25e6259322507bd035cbf5336
- MD5 bed7e1bca0a25d9c39e77c442a04f5ea
- SHA1 55cc4ccb6b3aa85928911c2371f5ebfa8aa8ccba
- SHA512 770ab6807e37d4ffa92ced2900a956bbfb5f54f697c55ed5a3bf4f20c6e3cd374df5b5654cff592d454d69922c8841c1a9233893c9dfc2f384273616878ebca8
- SSDEEP 96:4EEivdQu++X6MwMTAEvZhNZjofum9FRmFm7Xrwls8Lnn8U:5Eiv2lMUcER9iFm7XM+eN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71b93c2273c2378dd0b2cf795f749f8b0013bc31b434d2566763052d76f4a373
- MD5 946fc17751a6962bc3ff29f2c0e56a7f
- SHA1 dd39880c4e84d3296c4fec225f1507d6b0c5b34f
- SHA512 d900ef55171794216fc37b16adc62026288e943f8b3b5fbbbd967ad2d7c930b8611275e5b6777132c7f63eb59042c85dd38d1c2ad46b76d7416065a7a9da593d
- SSDEEP 96:EXdCA4pnHz3NciHDJyvu7WEf+GYwI6szo/vH0Vv21+CXcW4cbFlIPaY/EHvY:EGnHz9DJyG7ksH0VAn7xaPn/Eg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/hu/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2200220e9cb37684beb9883e85ce303fec4174e6e972ad3b78879be45eada7c0
- MD5 ea044e3554ae9daf19f5e154c5e3f0d5
- SHA1 fc6229d115087607424e13ed81cd60306cb434eb
- SHA512 0c43871775e69c880428c9bceeec74b4242c26a48b5ea4f6fc08c2940f811437df1deb1754af806f7860cc14eb9d92c5b7c2f9873aaa40ed7637153a51636221
- SSDEEP 1536:31G/OdSIn1IyeYfrEryrtVSV2Veowwh3I+p3DBXUXqT5A7V08XVB3fq5SKRMTcVl:31G/O0In1IyeYfrEryrtVSV2Veowwh3L
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a26b7f07d9d3cec5c3f9ffc43febf76756b7d0ff3f180bec1db7ddd10fbaa2b7
- MD5 cd12efb99d4aff24d7c07ab2145bfdb6
- SHA1 f95285a9e5594bba7183a8f665eba40cac088570
- SHA512 6c0fdd7f65d15e48e4a715b371762c28b9f7a4632c268caba1bb932bd0e679408d8b64e50875d1c274d33b647dcd04db7fce6cf73b758418203e74461b2f79a6
- SSDEEP 768:g8bAebJa6KwYoKE/bO4sdkxpN3/Ml0Z+IS8pBz:DA2KwYoKE/bO4sEEl0Z+I1pBz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a8:b9:ea:3d:68:7b:7f:7a:b4:5c:90:aa:06:cc:0b:13:4b:74:86:b7:bb:73:ca:b0:e8:ba:97:e9:99:27:71:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
25006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 98236418b9cadd3f7ed63d41a0e6b3e2e62e762b8db7de14d12dafafbc70695c
- MD5 4d372d3b34b31808483070af590ac2b5
- SHA1 df7fb63023a5911ec7c93ca4635b42339eeb12cc
- SHA512 fcb1fefbf4f849fb6a243d1f64f4532c1048f417e5deb1fc046a2a19c3e99a48dd0ef537e9735a8266536a389ea7a143f696af49e3f453b0e0d0db64b2185010
- SSDEEP 192:e8bM1l5RPIgr+nWkGuIJ+WGJWzSoyWvLgVWQ4+WQcinEqnaj3tbS:VM1l5RPIhnWkQQWzS/0LgnElpbS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ce:e6:44:17:c1:19:6d:49:25:ed:cd:8d:6e:47:21:77:b0:20:92:ad:53:97:81:39:63:78:de:9e:2f:c1:46:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9dcc8f0cdc034d3a3986113b9035db7cee80fb158aa4dd303531a4a1d0401572
- MD5 f2e951cef9bc1b83b65d6145626603cf
- SHA1 a0cb8113f9a58a80287953665e6ed7ebbc89c6fb
- SHA512 eaae97eaa55b77650766dcc99aef7eec6c217cb7c9c7ef27518ad637e6698f2318e087eb89953d5497512d4455728a3c8fdfb14ee98e03b68b6ab80835320b3a
- SSDEEP 192:VHxZbc9Y6zbXlDqHW3G8mJEWGxWzSoyWvLgVWQ4OWUgZuo1nqnajBaiRtN:VRZbc9fbVSW3YKWbS/0LgVgZZl9d7N
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bc:01:3a:36:80:65:37:39:06:49:60:e7:e9:a9:b4:b1:38:79:05:fe:2a:d4:49:c2:aa:ab:b1:cc:2f:19:77:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e7a9c7d9b5322bc408df4336367130ba2442c4cbbea195be28b9d343ca5992a
- MD5 abd885103d699e293470c69d19fef458
- SHA1 93c9b5503807ec0248027d95bb4bc9cd1b99a2f5
- SHA512 60e744e48cd96a3bc723d41423f91a263c65547eab4f31f8d88fef145bcc5a97e2418c6c0b73170f5cf975ddb1d93f0c3dfdb00d0cf1c7c0cedc2570c8150a4e
- SSDEEP 6144:opCOZ8GGpOIOGJWUUwabHzrcM8pWb0KxdU64I12yi8IuztFE2plFJr2rezEK9:opHanPvjWb0KrU6n2sE2t9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
63:db:7b:30:ba:4f:4f:93:61:d4:b2:3d:46:26:2c:fc:5b:e5:df:5c:39:0a:61:f3:89:ab:77:ef:3d:6b:80:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
283046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
268KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f2336b155d686f88a9a1f761aa75f07317aff591588d2f30bc2b02c01638795f
- MD5 ba509e7e993f138f5183bebb099e19f5
- SHA1 ad0f3520a132dbb78905578b932b9c02547c9ce9
- SHA512 cd12fd2587c3d48028287b79d03546aa18b4efe64fc5fa0cd63d7f8214927b0e89d08a9df96bff496b38ae58d6084b3d139a5150055b2ce20d6e30b5a0ab71de
- SSDEEP 1536:6h11A1mt+R2SUk/WxhukXt0YjNqFNlX1CPvvVZ0NH26VVdhX9A2kp4216J:ETAVR2SUk/WxhukXt0YjNqFNlX12vvrW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d9:7b:17:f0:0d:83:d4:ad:05:05:63:2b:05:54:7d:9a:07:95:8e:7e:91:63:87:09:12:71:c9:22:47:57:01:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
67422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3808c931eff144bbf240640f2b06f0e1333812dfdfd26f9c3e7821698ce0c9e1
- MD5 11f6d7ba6c401c957fbd193891768a00
- SHA1 4148ac0ae3516924f4da27d17450794362fe4ba5
- SHA512 087f6ec7020152573010c58bc1a456e2d785511c90c0291607286d2d0c3bb3c571c67f5ab28306a473d333fc782a18e8ec6f26ab1b898307c4b87f49e5bedf07
- SSDEEP 384:oZJo0Fckvq+1hBQEwJWP4eW1S/0LgQJCdl//mim+:ojRvfBQ11S8hCZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
19:75:3f:fd:08:68:75:22:9d:21:d6:a0:43:6b:8a:ad:8f:86:0d:38:a1:10:f3:05:bb:bf:91:b3:6b:1e:f4:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
13106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 424a2b36646eff397b6429d8c8d719c18039e9dbc9a599f95e567666e9d03d49
- MD5 e5a0193dff413cb3aa5072578053eb48
- SHA1 accdbd99a97eca845c95b9a9c48ec4d870d5aa04
- SHA512 4f9803fb006dd236c34930e8d49ef0ea478690c3759fcfbf071b7d9427885eaf4e700e2f35e7e4d833d31c5058d7cec9463abad78b4e9022c1f7831ef981fc37
- SSDEEP 1536:3WYVWkN+rGyNKO28Fr1M7p+0WHCTObgdEIVL3lxGGd9c1d:GYVWkUrGyNKO28FK7p+tCTObuEobH9c/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
35:0a:ac:78:41:70:ef:84:2c:de:6f:37:e4:36:12:0d:4e:16:ce:32:73:d8:70:03:54:e4:db:b0:76:6e:9e:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
98090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 805797e363df184155dffec5cc9649d2bc55646c3839530cc02e1528329a38fd
- MD5 bf4682b73e4e7d488c357e428c6c30e0
- SHA1 482c67f08c23458f45daec04cba9455a95cbc161
- SHA512 dc5f91a3bb813ec8ac651c0b63a6c1b8cb7570fd02627130bead197d04235396f96569bf4bee63c3c3c07a2f99c618ca2687986a1729d9dd9cc0a23427b27ebb
- SSDEEP 384:Z4nF7FD0pvgJGdZ/Dg2gdkuBDSdHYwQEdgcnQJDuJwsB4gFvdtJwNm3WOmEGJAW6:stapNhafkPnjJwOthbJOmo2S8NT/h
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
db:24:10:a4:32:74:16:65:ad:2c:f0:c6:6b:ca:0c:95:54:e9:99:94:b5:29:de:1b:f7:1c:da:40:4d:f3:c3:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f56912cef2a6a36c60b9c15eb56a68fd919168d7a310c192f14d0c34dbbfe67c
- MD5 252c5459a8525686ec7ae3f22aa5e7df
- SHA1 4908b5e84ef6bc829116a4e01a0bd05b681ba745
- SHA512 cee4b555e841eb6b7528d3edad376666e1fd735006b13054a6ee4b337320618f98e7d2d6c0494b395ff02b5884a80b5065a0f2961aa91fc4a56c0d7451203743
- SSDEEP 6144:ByFDnUcnitx0znqg7ONIXYi91HSpqz/1qvk984A8o6EcFziu8xQjhI:BHIEvxQdI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
25:5e:68:24:9d:99:74:bd:08:7d:18:be:7b:76:aa:51:96:a0:98:ad:5c:21:60:ef:37:1d:a0:54:c5:28:d0:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
301058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
286KB
Virtual Size
286KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4cf0cb99ec0eca9c531b8c12c0080b2fd3b2d1a1fd792e3ac2bdbe47599df33
- MD5 b184cf51d73cd995ac617219483f7621
- SHA1 807d06cba6b38e759e891a7a72ddce9502325278
- SHA512 3ac938fb7e7a62e495770feaa0f0da4c724a6b36c93e2b2daa690981254a50d1042f429da28187dd7b5b5bfeb46d3a7fe582b57d4421728be8416bbf8438c8c0
- SSDEEP 384:m0b/+gK+8grnkiWAQBQUr0qFJ69qwvUtHFP1PxxhxZLGdvZBGdmi88PBcyzpWaAK:r+La+y0DPUZBGthzWFS8gSrw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
81:54:42:6d:d1:3d:17:f8:18:c4:ef:af:41:c3:6d:78:22:08:c6:dd:cd:2c:2e:9a:89:74:c6:76:68:10:7b:8f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1f84734bd51c1f76588680341a62908c38d3ca7ae1744f7abf95283452e5079f
- MD5 d800e1ca45d9de5d79cd8d37f210fe88
- SHA1 46cbc82299a1c2b1607676c278c358ac12ead592
- SHA512 695c774b69f2778ad03a078e3531c8a24c4ad980f4c9cc8b2cb58cd5de0dbb18e6213ed48093540bb8832c31b3a48ae1085058ece67b7830e434d6abb5eca261
- SSDEEP 384:nM17MwlDPgkbKsaxSyK0oRm4XOrTqqULc6r8NuEAszlg2uuBWVY9W2S/0Lgxqdl5:W7MwlDMBKhqULc6r8NuJszNZRS8b5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7a:56:4a:e5:bb:0d:b8:2b:99:32:63:1b:f7:df:a5:24:89:ba:10:49:fd:51:18:e8:28:21:ef:0a:04:5b:c8:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
31126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2aaddad08a03de9bb766801b51ba094bf067ab7b9287a46d83b73d662be2c90d
- MD5 a25236d59977e0d0e312b1d3595dd6c7
- SHA1 2da81b30959562fa47b8a819758c6c26c705ad85
- SHA512 f2b62a5dc9822d1b8716923bbf659212116c31ac90c3ffdfeda1266ef9b1c7cb68987bcbaf9d2f000d4788cbbd3d64496d7358d9035d6b186eec86eb3e9f0dde
- SSDEEP 384:txygEXSXRaRmI7FXdXxa+yTQuvB2NCMhS4Yl4kaWYHqhQ5W82KdHRN7zpJAlGsp:Dyg5I77yUnzvY5I93
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
33:e2:16:8d:21:64:c6:4d:cd:9d:3c:bb:b2:62:c6:47:cf:7f:ce:54:dd:b3:87:80:76:23:62:4b:da:cc:bb:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75f76601e932183582fa08fb5cd57c5b9c79c9db0282969043e6194034daef8b
- MD5 509097f13f342c687cfd0e1a47688a69
- SHA1 7f1d583eb9587c517d457245740a4f34f79e9de0
- SHA512 e30af6ed8bbc5bca61bff9d9252e3d6f2ea751ac392761f39afb336201a1e64f53f7079824caf6659ec1c93940d8fe2b3c1adcdb5a3aad70180000d5ad850841
- SSDEEP 384:fdq/Z20V0ffB2w/q++tnlP1WZl1ufy3WlR3wtp9fl92s:1eZ20V0fd/ejPA1ufy8R3Kb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
28:45:a8:53:de:a0:82:c6:f6:8a:a9:af:69:58:49:1d:0a:c2:5d:df:11:00:eb:f8:4c:6c:dd:76:2a:ec:4f:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0b126bb712f9511174b665fc67d70df4bb650c6a52b5ffdecff0d62e63af61b9
- MD5 7c70342670655e3027edb1136ea496f9
- SHA1 0babf3d0ea3a521f0446a905746b6ce02868ece3
- SHA512 94ee6f4c907c0806cea62014557e83ef41206c67a028706a9732d5fb1bebc7c2d3e84bef4aacc07785b099beb58207d9838c48a7cf7af6abb63660a27b546159
- SSDEEP 192:acWsMs88fYxls5hQzMrWv8WebtuVaVWQ4CWS4oVqnaj87X/fACXD4eRE:acWhB8f2lsDQwrWkZ54YldK2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:b5:68:b0:22:ed:c6:2f:77:c8:18:e2:d8:b8:5a:dd:86:91:b1:bd:d3:a5:32:4b:d6:5f:78:e0:a1:4e:3c:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f1597b72fe1aa4d7d654a5d204d69cdbcceac6468d95877f1a43beda35ea4dfc
- MD5 c01ad30654caf4bcb0f9d9b88c136251
- SHA1 3b2c55e1d73d0050bcdae29a169e35129569fd26
- SHA512 348516b4ca920c83cb0dc1a92e4eb2fc3a1d0695870a4a7470fad29802445f783de4129c0a74937cf2b05cab2dabeb33f1683dd598c24ef1fcd7924edcc2cfec
- SSDEEP 1536:H61jOp/Ka1wwDIn9DXR9zwKpP/GPnOGaFZ2NU+:a1ip/Ka1wwDIn9DXR9zwKpPKO12v
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:03:c7:7f:3c:c7:c6:0c:69:44:ed:aa:0c:cf:73:c5:83:a9:12:f4:12:25:94:cb:bb:3c:9a:06:2d:2f:be:39
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
106510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
96KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 402ec2a12bfe718cb2a7299351fec2061fe121bd3536ef086ebba60f1f1eee05
- MD5 bf096f43ad158270dfca4b107ddf7438
- SHA1 93b52f52826cb3b70c3bb15af716a4e3cd82b29e
- SHA512 6dd3ba17b3640927a68e874182a249cf356ebf9fe07dc9067ea0ff88fbbf3730c4663314be4390fe2257e5b29b0a6bad14369d3f8a272496fbf348d361a243f3
- SSDEEP 3072:MZdDPC3NXwS3IA2Z8byV8MofYBeiQZjxHUnCPBbBqvvYLhftO6Jfervx+E1fpOOv:M93BeiQZjxHUKHq2ftO6JfeEE1fV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f4:bb:fe:5c:11:c8:63:97:9d:55:2e:7e:8a:78:5a:5a:4b:1d:99:92:81:bf:99:71:50:81:01:71:1c:25:73:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
201094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2952f4d1839d69190fc94af7fc33531ceea89eecec6e52d92e85d837f8949b63
- MD5 c1907504313bd10df13251f1415ebee7
- SHA1 b673a22b21a6b925b567dc29b3c8136d0ea16715
- SHA512 bba0df82ccc0356c9e8859d5077df1ca8352fc6022fa48db381d18fa2e865c0736191bd8ce354b70e148538dd9157080e2878c0f64a742280b3baf75a3fcd3c0
- SSDEEP 768:lqrqpot8AHYYfivj5HVANtSEZo/gd/t2OCdTIBkpmTGFnQL4JX1w:eqpot85LFVANtSEZo/u/t2OCdTIBkpmb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
63:aa:b2:56:e5:7a:53:6b:63:3d:df:ee:4a:85:fd:37:45:0d:e9:8a:98:eb:a6:6d:df:cd:d3:b4:41:4b:38:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
40622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c9c4c00ca3e36c8fe1339919ec1a7258dc4b5a828fcb7f95729c29cf30e2a4d
- MD5 f528a47b087a95c8aefc5fbeed7c3f2d
- SHA1 9807322e1839ce819021888803d841f570fc0c00
- SHA512 e226224dbce3e795e0371771fddde3977c96346d28edfeceadeac6ceac1e84a2e62e25c95b6afb4d62fa6c9f5ab7f1b82f772a90ebee8f25d021064b2f063d04
- SSDEEP 768:pZ/33OL9ecIZSmd9O3a7Pp2Ifgn9HjFmLH1nKZpOdnwwtw1ZhbBUmSucK3xC:z33OL9ecIZSyMVcixC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cb:00:4c:a8:1c:15:f2:69:05:05:1c:21:6a:a8:a7:7f:ea:fb:8f:4f:01:cf:00:5d:db:47:25:f2:ef:c1:11:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
34562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3906280cca4de118daa260abc56439778527be653a48ac8ef3f19f09620d7678
- MD5 5dd92dc2054dc265744d941c40c8292a
- SHA1 e24e511cebd5eac436b8aa6ab30d357a18910827
- SHA512 d3418be944918a70b7f4a95578f0ede02d41bcc3d6f887ddba5422e2d64d0237ea0d2272b95d8b74031308089a3f68aea1f991f879f181315363b9dd23f42444
- SSDEEP 192:sNRzFpd7QfUA/EsE+1T0WKzjW4GD5dHnhWgN7aQWZY7joIVFWSqnajKs4sS:6hFryUQT0WKz6dHRN7guoiFWSlGs4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
11:4e:ed:fa:7e:56:20:13:06:bb:cd:0a:d4:43:62:69:de:ad:d5:63:53:d8:86:c3:a1:25:27:ee:20:36:2b:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36660c619cb5b592ce8466bd02820030527e0820f80155176c5852a9d7281627
- MD5 429d635ca19c573ffe98040fba48b1ed
- SHA1 a014f6378918731b30151237a9e583abc9c4af3a
- SHA512 9ee0260aa36ca9bb76748107b472283bab6a324290b406df885574fe06e8f64c6c0b90303fabe2ab6746522cb1833802983e6f7c34e1b4c5de7b7bc3841f0a8b
- SSDEEP 3072:uxR9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyfbYlma8HgbaJeQEwR1yli/h+JsjVj:uosjVHJ57imr3/j7Tkh9nduj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
18:1f:40:ab:fe:46:be:57:c5:c8:0b:dd:ce:e0:99:f4:91:fd:f0:f7:b2:ae:d4:6f:37:d0:27:c7:8e:8d:33:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
133154
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d2466aa953365c36f17f9581122a5b7f05b195f0fae868613356b4b1c093020
- MD5 0f2176463eabef43ba6342d29264d414
- SHA1 3206a4e3a3f0c1b539f3263b5c46136cdadc6bba
- SHA512 19fe31fe2809e9f9893a895d935bef8bc5cb2b35c42db08525611d28086c7b13c9d7df07df99e54ebb169d539dc9994ce59c1e36e184715e2c5eb678c38f8cd0
- SSDEEP 192:i2eRWviW82M3W4GD5dHnhWgN7aQW4euwuD8PEqXAfqnajKswV:beRWviW82BdHRN7SuwuAzXulGswV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e4:21:1e:e3:b3:b5:81:f1:9a:e6:fc:87:f5:73:2e:5e:52:a7:a6:b7:81:f2:90:c0:6f:54:3f:c3:24:57:f8:7e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6554e5cb289b6dc512a9d1d3f6bb2366439204c2cdb639c8cb433ab470afa4d
- MD5 ba94d6218a719e0058fb4f3b36ab7179
- SHA1 c977908c1e2fcb1f815f9d39ea3baaf6ea647d38
- SHA512 a1d296e93dc5fd90ce5e4d63f48721c1629c4d24e63668ac1411b82c8c6f4888b971c276a974ec022e35bc72bb7e252884cc12b269782dfb03799921cc87171b
- SSDEEP 6144:S2WPkAF5dewM5vqnHARF38N29p0vA/ogkYhyGXNyo1fifrFWKDlOh:S2WPL4pZf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6d:82:11:d5:9c:18:be:a0:3e:64:16:4b:5d:4f:e4:37:9a:d3:ea:91:d6:14:04:ff:b8:1c:a5:5a:97:9b:d2:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
354498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
338KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d3386131a848cda4a44b94de6a3634a3775656d9113f60853e18c606b1725bb3
- MD5 82c8c6cda429e872d76a404dca328388
- SHA1 b5b4fa23252a10dc5d7b0ac9de276ab6634752cb
- SHA512 072e4fac310e0420d0acbc9b115c9101a46118ef0434b806c882840b7ac765e501a9054ac8a51d5700af693a7ef1752650829dbacd2371ceacfd42037cab3def
- SSDEEP 192:J4bpDHENThixfErGaW+vEW4GD5dHnhWgN7aQW565jubsE4eAqnajKspcRw:yWtFrGaW+vndHRN7MwupJAlGspI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
50:73:7c:92:19:a1:82:de:3d:c0:1f:ae:0a:50:8e:ee:73:83:fd:7c:bb:f1:7d:df:65:2b:b3:11:b1:93:93:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc0f22d2346bbabbb3cfd3c1c3dc69203ca33a6b139fd28b7edbc12dcd637043
- MD5 478082b764663a7e97130ef35acb9997
- SHA1 1f04610fc905b2a62ea4c78ecdbf298ccff95667
- SHA512 0223de524b399391c2ebec8cec6213bb18c7461249ed06ce4d97b6ca0efd3ee44e838845a0041522d759f3f8a56821865161aed5defd657088d3e4e20a5a95b0
- SSDEEP 768:YoOCK7e4KPxo2AobAiCKn+g5HFTKnVic/TmnlNiNdXGwF:KljKj+WKV5TNXGw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bb:3d:14:28:32:f4:b2:f9:35:50:ba:ac:36:d7:b0:11:43:39:03:5a:8f:c4:fe:69:90:b4:36:a3:74:84:49:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
61426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eee36e0d9dafc12e088b40e5971eaa6b1e555d61e006898c72408cf78da4d6ff
- MD5 e67c7c743138e543222192243bbbd17f
- SHA1 21ac8a6a320fa87dc65299ee116fbf68705eac1a
- SHA512 cb0b5cd8b53ff58f0aae41e1e734b9e234360078a3df5a3a6d32074fa4a8d7762af22e9f7554cb51a95707079206de6caba96a71a0691eedd6c3f9fbbfce26fd
- SSDEEP 384:WCKfkY3wuysj1XBOxWSFPGdHRN7fpJAlGsp:WCYkY3tysj1xO3kR3
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
24:16:a1:1a:47:ae:3c:c7:89:7a:1d:b6:c2:92:17:bf:3a:42:81:2f:71:35:e6:19:91:4a:93:2a:d6:14:65:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
15078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b95eccae59e1a96653f23fcbe16de6cc6a89e2b8e548f4bf96e012b331f017cc
- MD5 359067a2710a23cc8d1b2b55971c4f24
- SHA1 8247b3d1618fb5efab72d15af8ce1a274f0472d9
- SHA512 b1c6229f39d0ec5bde6bdeb3d68dd7312640118c03b3989b6221f001b3c24101852866e22d6d9b43a47f68e5450459202b19fe8e471a9eb8dfed6bae3327508e
- SSDEEP 384:hXhFYm5+RlBgyElWl4LdHRN7AdQ3klGsWO:ZhFn5+Rlp7AP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:a8:25:c9:4c:9c:ca:67:47:23:25:4e:1f:cb:99:d0:24:cb:f0:7b:e0:24:15:f3:8d:92:bb:3a:e5:62:27:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
16130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5552b4e3cfca26505bcfb94aa9fa48121fc2f0a83da423a24dcca53d677be31a
- MD5 225d1409c6775ded4609f8bb58a960f7
- SHA1 ed2896181f2efd9177f6958ea14bf2746f67fb1a
- SHA512 145da5d60a54776cb20f753cdf31ba1ae28de91c656b96b041e1b4cb50e5f8dfbc2d2b317312b602853641a4b96a9422d81759041553f0d7cd3b2afdef452852
- SSDEEP 384:elV2iWQdPdHRN7a5fP+CcWlGsS6MxxsO:oDPcwF3s
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
19:53:73:b6:2d:6a:3a:d9:a8:1f:15:95:bb:3a:dc:4c:89:07:dd:3c:d3:e5:78:1c:a0:00:9c:24:8b:b6:63:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c177ab82a41ae41aa049085c102ac50b8acebd97a89be1f60df718ef5fdf8b9e
- MD5 d5a9ba50f81b676c3ff23b5c3f06c379
- SHA1 32b15f15c60209946989ecc49c1d9d25abfe1b77
- SHA512 7aad9f7bf10f0f4c439d42e638aec0afa152ea0ebacfc0cc85dee7951faf16787d020f6592224fe7bbdf3d99fe086a82a8d54a1ca63fbca2c9a1cdcda0abc811
- SSDEEP 192:DaEC5i02h6/8gtWLZRBJy4W4GD5dHnhWgN7aQWbYqCE0qnajKs0:eEC5K6/PWD6rdHRN7QBClGs0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
59:82:ef:dc:34:97:23:8b:22:f3:6c:68:99:88:46:7a:9a:de:61:f8:a1:8d:7b:47:99:a9:26:3a:7b:6b:74:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f3f151e5e6ae88a8edc1008df4f78f1f2240d2d8fbc913daa322e14aefef92a8
- MD5 c730caea8decd4d5419850b66fe323dc
- SHA1 6cd4b3c9d3901c7546f1de43179ff85b93d08c23
- SHA512 d96bff11e70a341ab3c09b873868c1c4466896a64cef1a17b1fc6f164c4f9ee552e309aa1608d12620d139d0a6bd6dd2dbf2bd605c3c3212108ccf6c8b510509
- SSDEEP 768:KD1hWHnvE4wqbni3VM6qAbNkb5PKjpfYsjhkeW5nZfOKDIwr1QGRayW2Wl4ul4:KD18vHwqbwBqAbBdQsj8uwrCeW264G4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
08:95:a3:57:a6:f0:5a:85:00:ec:b4:36:49:fc:87:86:34:6c:7a:69:54:e1:4f:ca:5d:84:54:c1:0f:30:cc:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
86618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ce5fd49ba7adb5c6a4d8d19fc766c529187278bd774ab2fc84a02c9aa1fa050d
- MD5 d864b0672376d6dccb8f475979a518c0
- SHA1 b8bafeb2415146922518b8d180b5139cb03427d0
- SHA512 dda9230e70f1634e44d73b618b6f5ad5be02f6ae6354d8e6be82db1f33f0f1b0d81e675cadca2eb679eb0dc855c14fc140848139a46fd6801781db342e2bcd02
- SSDEEP 384:KaKuLFLHBMWBURW9QldHRN7eC4P+CcWlGsS6MxW0:ZZHBpBU4OeCMwFk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
76:ad:41:32:bd:0d:07:39:4b:d9:27:0a:e9:d8:1e:7d:ab:0a:ac:50:96:da:05:7c:c9:97:10:13:4e:82:a5:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11018
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3609d2813f59bf93d7427eb1ee8b2b102fcf5afaae94e915dd9e26adcfd9cfa1
- MD5 b61da962498e0c464319d705005f42dd
- SHA1 9b32bdb317fe7a2d36995b7bacc6cff783673558
- SHA512 7cd41c3e7c8945e5e40dd1c42a191504aae7399c2dad678ae61f82b332a0fe63304494c79a24ab8af7b43efae87109c05fc98da0f67638ad8a694df98e04f57b
- SSDEEP 48:6CSHBJdHh7kiMIO2QC5q3c3uRlGlkmRlwRgKeGSwPxryzlatiC4WIQDd0R303+RZ:oB7kiJ+AD8RA/a802n9JCl1ZPF6n+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f04635b5641841027851814e4ccc1f1ee15cc3fdc087439a2c38ee41860158b
- MD5 13f4c090a847b605454e0613c43e47f8
- SHA1 48841f777cd016ce2c6b0facc61dfac0e26c7901
- SHA512 f3e2afffc38fcb1dced515af9252ff307f995379b353e33076ccfed39c42ce38f9f84e9dd7322d804dbbf2fbd9538d6440fa0247000d3f4a62a9fae80937ec17
- SSDEEP 1536:kHdnAd6LH7So77JBf8uy2nj4HcffVhh5g3tZ+stwqgC40knUxOIUHUBlXtkSsFQw:k6WH7So77JBf8j2nj4Hcfdhh5g3tZ+sS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6cce0223e8981c53fbbc0d255ab330db047c5518bfd6d8be9c07205f7ef607b2
- MD5 2984ed6077bb9f8fff6a7eb01bd2cfd6
- SHA1 c4445367449cb77afdbfe815fdffe22e3a613805
- SHA512 3170a7bd224edc934693db4293e843ab231d0fe760869c5aeec5c96188e04b1006bbc43ec43ca28d81117ba6588d8046862d8e497cbe5e6c134d5e5daefee04d
- SSDEEP 96:Vm71jSv5tCdEfiwagS7Iol+ZlCjSd+SdctSdSZSd/Sd:ApjY3sMirgSkoMZlC2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b738d17b1ab183075d6cd279a56db0f105e01d8c9f7ae9b235f1480b4f436b3
- MD5 dd5f7596fc45f99036cfad4cea8f66fe
- SHA1 ae8ca312e54ed02816b85b2dc8bc9566dc904adf
- SHA512 6410144cafd9838e8ae098ba7afa174f41ffbd2ac689fd3fbb00c20839db56a833d4541b33a39203e2b8a30f9880c1fafbe420b6b081fed3cbb3f86d315fe106
- SSDEEP 192:1f6O7xqGZBRv4RP4bMKNHzrvfz2FWCWR:1f6WqV4YKpvbCw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4cb45a38102c633bd52d50d31ff73e487228312f765c2f32fc970208701b8e63
- MD5 218c6f83ad980a611109ed400e7b594e
- SHA1 cee76d336a840bea88f5aba58df6ac830583f49f
- SHA512 7a5dd8d0375dee2f8bc800ff416103c01ca68f0f54b9423e706ba9d49dea41ac79ba9edf577c949a873880a3de6fe7eb88461024a8d4c12fddb3b698cae4b47c
- SSDEEP 48:6rtxeVfHGISrspDDjkc2mHW2R975AOPx/60h/bvKXwsxYl1LZ2hcFTWcsjBHldJL:Lx9f975AOPx/xJsal72hsitHPJJsy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 83242cbc7b4f6f88d8267a4b502ce15314a56b687db0e1f81f3e84b0ae5e087d
- MD5 0294b4c877de834a4e5d243366cc92c7
- SHA1 ff304434ea4bedccf5f8d60892fb4760c492bfc5
- SHA512 28cd7f07f493a6d5b39b518f0b437946c9177f3802e2ec30ea28cbf0258cf8ee375ba16502bf27bbf4065327cb5a3e1ccf47ecc179325187236498b534286de4
- SSDEEP 96:GpmzKQY/xNsem0FF/DpOl0b4hOJZUMma/RzTL2Dl72yrlTJPHJso:G5I92I5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 946a20ad7d70e1c25f63a904640c4156ce74b3398a550462305bdac0531aa258
- MD5 0c3cd82a560428d0d68b893b196ed5ca
- SHA1 e8dd3ef1303a36f3043c53fad0f546e8c81e28ae
- SHA512 e2e076bf11e601e8aa8085f101a2717918ace7e33eb96a83c32e2909d108c33bc4a165521445e66e7347a4467e57c4402944367a4d312057ac49fb8be70bfc46
- SSDEEP 96:arIGti+6tOKdYySy5ub8ldttyBFEkL998jm1IjU9FzV1uVbvE10g909kaMw8DRMi:arIGtiRt8YEM8EkjjF4xO1RMBSZmw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 39c24a0567bf46a44d53d305700d73b3f9a264feb050e92482af451322ab1cc7
- MD5 3ec83172234cfcbc1c2cf5ece4487bbd
- SHA1 bee1ccddb89653e20ba4f8af3f5994cc7f60a5de
- SHA512 34c4803cee6096ad23b959cd416abd0b5ccb4856097f2aa3057227715054a84cb33b9db8a8fe14cf812a9f0f0812c6d4e8ba1d6d55e66168de19df8f2ad02bdf
- SSDEEP 96:a9pUGTL94oqvV8MbE541F2CNI3BFQl+WvieZN/ZD1yaDHlm/r967lk:CpUGTLaPvGEE54zNIjQsYxv34/oO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c91907753f2e1299381659a7b5c6f0df53e01432b76ae65b3e1f0de6d915a61d
- MD5 7c46fd3b5957578dbf4bfd931e304aeb
- SHA1 0d296375a25af6ab4537dbb01352deb815f2c288
- SHA512 677f3c6b7db6cfbddccfe57d1cee18e4565e5fe44945cba2b895dbabe3e1bcb957fb86b57dd4deb6840c9ef08bab411c91f16461996ddeb1a5684dd1322b7410
- SSDEEP 96:HvsFqpwQbkBbw9BQvWYvWzkgAgT2ieSVwalBE4ehv:Hvsk4YK5ekgAASavE40
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f6797338667805b5019a9afa08eae03735c9df84916b2b73e8ba899f0c40f9ce
- MD5 55b7e519d1a5cdab14e6548b78e3b6f1
- SHA1 96f45796ceb0557b1c54f0f0032d5f40d283aa5a
- SHA512 4e2941eb3ae6f2d6e52246451886d9514572885a6c2bda3969b7f8d20ffd5b0332109e02f58826697d4957b78c6cb8797fe3d5819233822e5772a01c3fad520e
- SSDEEP 768:ocHDAe5Yc1j2DknVSL2n1nPnI7nI2mudDvuPtB5TiNdX7eHapP9lYahDmVw3EtR3:oujTjUdiPtBYnNhDmVw3EtR/QyzNBgHc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 67c4bf9b846aa573af3ea23c18391f0beb691d24324c65df082e0ed9d1bd2a00
- MD5 7f27db9f7a438044737538c825f205fd
- SHA1 6a9fecc83c5a7a271a983c9608c2f69f6a2d0513
- SHA512 bebef401dc5dd6d5f67d6e04d81e021c26588c4ee2d5ae9fcd157bc2bc4e450baea41554c3689e5dfc8661b4119f3834526bee936af1e500f46426bb725b7bd9
- SSDEEP 192:7o8qsFj6Yf1rikq9aFq2sJYPLd5BQaeSfqKR:75qXmq2sJYPLd5SDA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3b883083cf71d05f2acce64350707e5fe78a637bfca38dd64f5ef94837c4a9b
- MD5 4e79f52479f553aed37b6e0e8edbbe32
- SHA1 6fefea1024bfef9527938b4d7d6d30127fe8f528
- SHA512 3cdda9500e6f190eff206491d49e2ddccb777fa7c01dbf973fcb957cb730365beaf2586e81d2646ce1fd60e307c6025b690537be3a0752c34021111063de4734
- SSDEEP 48:6ymECHOGKlGmMU8xhVYEl1CPpfoDDvFybWsEiZbTLliH4Be7:1CuGKlGCuDYElIPEUSsn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 53e59aa907ae57b4c6ad431ab5c86d4b72ca27bf65a9fb10e9c12f9bbdafc3c8
- MD5 48048bd89356ab41d12f15ad8692ad5b
- SHA1 8269552df34ab7d52bc199cc204f4a7d51dfa313
- SHA512 cf539d89b8ef392a87f6b40fb5bdaf70214a91a41b71c2c9b972b1abb2bc319f6d0d0fc5f92b1165044807acf1b832503ddebd6ca917dce70859e1b161cf250e
- SSDEEP 96:LZ+xzyYnlGPtveDVAbPdPUq+EMVXZuaXnPB1H1SlAPsVaPg:LYxzHlGZ+qbMVXZuafBB1SiEz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a29637c30d020ecc73c160cddcad77a776e4c9d6550bd02534f5aa3fea8aba0
- MD5 0fe139eaf15a556b0fe9239f43f55f75
- SHA1 0b658373d56c2d4bde6c2af8b93053fda57d47b4
- SHA512 67de26707e113e5230b9c9ec7ed981bdc99662987b4da76f428a8d941dabb1bde237f43ce1ca65c6643e2e7f2e8f000cccb309ab72f6769af8892ee041ff222c
- SSDEEP 96:CMdUEWg4u+cCypvis212VNrIKgGX/vfe82qEaUWlsTvTn8U:XdUEWpCviWZgOHWPaR+TvZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 77b71b945b77411df954ae8704052c2f38838cf94d606a51caf132bf9e7685ef
- MD5 8d67dfadddf3e6e49b846acfce5e78ed
- SHA1 909d853118922bec324634d09696209afeb111cd
- SHA512 f4e6699c33a7e023e33939a5c1ffd8cbd756fae981a6ba412ea88114c99f02bbf13b863cf2f5cdb330882fdd029c3816548fe629b785166746896226343fd548
- SSDEEP 96:RiP/YXdCA4WLKW9BC1O3bEo2JLx/NK8sKLyT+fSX2dXcrplIPS/wHvY:rZmMdEfLxF9eoQaPS/wg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/it/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d3fb4bf7eef1a47fa0c72e7eb08861dbf945002fd417290e0728e012f958cdb
- MD5 98cf097e2a9515bd9901113cbac890a8
- SHA1 e3a2b83c1c98d2bff5d68b33b519c5cd971b9097
- SHA512 1415093c990585af88c8bea6507e78e27bc9ff646221a93a2c9b4924800a3057f22e8c738a45de1d63252101ea6c652b524ba4ab6c0a60e63a0640f3b5d530a3
- SSDEEP 1536:K1G/OdD06noiAexOr5rpr2VRV3V0okuhaIEaZoBdU1m0q2YDFBc/vyAHSgeP/gLM:K1G/Ou6noiAexOr5rpr2VRV3V0okuha3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/mscordaccore.dll
- IMPHASH 7a13ef19d67958b32c3e9be49957d68a
- SHA256 02111bdd542dfc081fc9212d81eb0171f8e83257cd7f87c39627a1d3b4d940a0
- MD5 44a3cb65300c5841c5a0136b47249e15
- SHA1 d64586daa621428185e2af4a7ad15db75c92cb16
- SHA512 284c1dbd5a82dc529a7c037038378a1fa47cb2e097abcd899ec375be10dbd196c393ce6652a904f627684c1ba24daf92a410dd8dddd8663c542de9945b268e82
- SSDEEP 24576:pldqCt/WSMhi2lYexPSn+VRUsEl9aBWCtQkLLBR/KCYk4JcOqn++QYMhw0NOe5aG:plbt/WfxanjN5cDkYMhJNOe5aG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f7:7c:91:82:b6:49:83:47:21:f5:aa:c7:b5:6a:9c:d2:c8:29:8f:f9:e1:8a:71:63:ad:56:5d:e2:16:d4:e1:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
1
Major OS version
6
Entry point
654096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\mscordac\Release\mscordaccore.pdb
kernel32
GetCurrentProcess
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
HeapAlloc
HeapFree
GetProcessHeap
HeapDestroy
GetACP
LCMapStringEx
IsDBCSLeadByte
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
DebugBreak
GetProcessAffinityMask
SwitchToThread
ReadProcessMemory
SetLastError
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
LoadLibraryExW
CreateFileW
GetModuleFileNameW
GetEnvironmentVariableW
GetFullPathNameW
OutputDebugStringW
IsDebuggerPresent
RaiseFailFastException
CloseHandle
FreeLibrary
GetSystemInfo
GetProcAddress
GetModuleHandleW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
MultiByteToWideChar
DeleteCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
InitializeCriticalSectionAndSpinCount
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ole32
CoTaskMemFree
CoCreateGuid
IIDFromString
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
_wcslwr_s
strnlen
wcsncpy_s
strcmp
strcpy_s
strlen
strncmp
wcscat_s
strncpy_s
wcsncmp
strncat_s
wcsncat_s
wcscpy_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_invalid_parameter_noinfo
abort
_initterm
_errno
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
api-ms-win-crt-stdio-l1-1-0
_flushall
_putws
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
api-ms-win-crt-convert-l1-1-0
wcstoul
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
726KB
Virtual Size
726KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=34, id=261, version=28920,
count=18, id=260, version=28920,
count=16, id=259, version=28920,
count=4, id=260, version=27412,
count=11, id=257, version=27412,
count=181, id=1, productName=Unmarked objects,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=193, id=265, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/mscordaccore_x86_x86_5.0.20.51904.dll
- IMPHASH 7a13ef19d67958b32c3e9be49957d68a
- SHA256 be0df323b423ce50d870378b7ec34e3d46bd5f6f12bdb69c273e2a9037a57e15
- MD5 96304edfa38520ae2d5c3db914a4f29a
- SHA1 d241089ecb93dc6cb970bb377f15788cad460a30
- SHA512 ed08e9a993cf8b01dd7b0e6d0fdd06a61d6c57de1485858277248ff60bfa6877717b96d16318bae2689337d28c0b27061c241519549fb137040e00975884a455
- SSDEEP 24576:bldqCt/WSMhi2lYexPSn+VRUsEl9aBWCtQkLLBR/KCYk4JcOqn++QYMhw0NOe5aK:blbt/WfxanjN5cDkYMhJNOe5aGV
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f7:7c:91:82:b6:49:83:47:21:f5:aa:c7:b5:6a:9c:d2:c8:29:8f:f9:e1:8a:71:63:ad:56:5d:e2:16:d4:e1:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
654096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\mscordac\Release\mscordaccore.pdb
kernel32
GetCurrentProcess
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
HeapAlloc
HeapFree
GetProcessHeap
HeapDestroy
GetACP
LCMapStringEx
IsDBCSLeadByte
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
DebugBreak
GetProcessAffinityMask
SwitchToThread
ReadProcessMemory
SetLastError
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
LoadLibraryExW
CreateFileW
GetModuleFileNameW
GetEnvironmentVariableW
GetFullPathNameW
OutputDebugStringW
IsDebuggerPresent
RaiseFailFastException
CloseHandle
FreeLibrary
GetSystemInfo
GetProcAddress
GetModuleHandleW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
MultiByteToWideChar
DeleteCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
InitializeCriticalSectionAndSpinCount
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ole32
CoTaskMemFree
CoCreateGuid
IIDFromString
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
_wcslwr_s
strnlen
wcsncpy_s
strcmp
strcpy_s
strlen
strncmp
wcscat_s
strncpy_s
wcsncmp
strncat_s
wcsncat_s
wcscpy_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_invalid_parameter_noinfo
abort
_initterm
_errno
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
api-ms-win-crt-stdio-l1-1-0
_flushall
_putws
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
api-ms-win-crt-convert-l1-1-0
wcstoul
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
726KB
Virtual Size
726KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=34, id=261, version=28920,
count=18, id=260, version=28920,
count=16, id=259, version=28920,
count=4, id=260, version=27412,
count=11, id=257, version=27412,
count=181, id=1, productName=Unmarked objects,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=193, id=265, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/mscordbi.dll
- IMPHASH 73ff144089c10f6f12b1bb431a433911
- SHA256 8cf710046c1ef25aed61586ce272ab1033dae6e443286ece61d80d00063bfa55
- MD5 eafc081c73fb2f70b662089c19e4f95d
- SHA1 7f91db5fd01a80984b65a5b8d806a4ea8216dc94
- SHA512 af41f0d893a7b05527f744ecd929a83210e9e7883a2cd7e0abeb6baebfea228a2d81955c051127c25964d339781d725165ad1e561b17d68f6ee0731fded44a3a
- SSDEEP 12288:6/klQs/xrcVy6QmgyFI1EgYRmQaPYJudAK79/P1XjQwxcvVQD5EZu0y/LtdZr8:2kOixrJwgXHmHaAJuSaZPN6DQ/RdZr8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f9:fe:ec:a4:02:cc:cc:7f:3f:a8:69:8e:c8:49:50:df:40:e3:8f:98:48:5f:49:7e:3c:fa:13:6e:d2:25:b2:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
636224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\mscordbi\Release\mscordbi.pdb
kernel32
UnmapViewOfFile
MultiByteToWideChar
GetFileSize
CreateFileMappingW
MapViewOfFile
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
GetProcAddress
WaitForMultipleObjectsEx
CreateEventW
SetEvent
ResetEvent
GetCurrentThreadId
FlushInstructionCache
OpenThread
SuspendThread
ResumeThread
DuplicateHandle
CreateThread
TerminateProcess
GetThreadContext
SetThreadContext
ContinueDebugEvent
FreeLibrary
VirtualQueryEx
GetModuleHandleW
Sleep
DebugActiveProcess
DebugActiveProcessStop
WaitForDebugEvent
OpenProcess
IsWow64Process
ReadProcessMemory
WriteProcessMemory
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
SetLastError
LoadLibraryExW
GetFileAttributesExW
CreateFileW
GetModuleFileNameW
GetEnvironmentVariableW
GetFullPathNameW
SleepEx
VirtualAlloc
VirtualFree
GetSystemTimeAsFileTime
RaiseException
GetSystemInfo
IsDebuggerPresent
DebugBreak
SwitchToThread
GetCurrentThread
GetACP
LCMapStringEx
IsDBCSLeadByte
FormatMessageW
LocalFree
CreateProcessW
SetFilePointer
ReleaseSemaphore
FlushFileBuffers
GetCurrentProcessId
CloseHandle
GetLastError
WaitForSingleObject
WriteFile
ReadFile
WaitForSingleObjectEx
CreateSemaphoreExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
SetThreadToken
RevertToSelf
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
ole32
CreateStreamOnHGlobal
IIDFromString
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SetErrorInfo
VariantInit
CreateErrorInfo
user32
LoadStringW
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnwprintf_s
__acrt_iob_func
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
api-ms-win-crt-filesystem-l1-1-0
_wmakepath_s
_wsplitpath_s
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
api-ms-win-crt-string-l1-1-0
strncmp
_wcsicmp
wcscat_s
wcscpy_s
wcsnlen
strncpy_s
wcsncmp
wcsncat_s
wcsncpy_s
strcpy_s
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
_errno
abort
_cexit
_execute_onexit_table
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
api-ms-win-crt-convert-l1-1-0
wcstoul
CoreCLRCreateCordbObject
CoreCLRCreateCordbObjectEx
CreateCordbObject
DllGetClassObjectInternal
OpenVirtualProcess
OpenVirtualProcess2
OpenVirtualProcessImpl
OpenVirtualProcessImpl2
Name
.text
Size
721KB
Virtual Size
720KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=261, version=28920,
count=16, id=260, version=28920,
count=14, id=259, version=28920,
count=4, id=260, version=27412,
count=11, id=257, version=27412,
count=209, id=1, productName=Unmarked objects,
count=123, id=265, version=29111,
count=1, id=256, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/mscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f1fefb476ca5dd10a254e6a415c17ee916db36af930cdcb169848410cdc48498
- MD5 621c0c395426423f52b7b644f024f6ea
- SHA1 b8a8c55b541cc7a347b8a870363dd96951dafac3
- SHA512 d125394d64ebe929748883ac0828eadf20098a294971f80cab7c535c324ecd26d7126d607efa4c6bca2e3c77455f04570522eafbc769e8e870b86322fa260f1e
- SSDEEP 768:THAl9c5QjPRFpN1s+9G5e4HN4gr/lD1Qa7KCltieE/Nnw:THAlOQrrNG5e4t4gr/91DK3eE/N
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
37:eb:48:5a:84:87:d6:16:47:2d:17:a5:40:39:7f:84:f5:5f:47:31:81:34:c7:ff:a7:89:bd:ba:a0:22:75:23
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
53286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/manual.mscorlib/net5.0-Release/mscorlib.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/mscorrc.dll
- SHA256 1e8e6ed376f86ed1df9c559945892cac1456bc04ea8e04c2194c5bd41534ff59
- MD5 3c074d900b8f6e773761046d876cb681
- SHA1 c3a99ad2d138759d97b693602e4dc72c0fe2b4be
- SHA512 1267a64209440c97c16af0b6138a2c763a891d3afe26710dca65a40bac649e5f26df623d1d350686f03b678f2fc062e711bbdd3ceb94c51062029b67b82a379c
- SSDEEP 1536:d3OeZys10CHvh7x8Sj0lZBJCCk7nw5ymvZ4MgSZctpoEXXQnt9:d+eZrqSolZBvGn7oUS4Sc6
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fa:87:e0:24:c8:6b:28:bc:59:9b:41:f1:69:3e:a2:72:00:52:04:e1:bc:4f:b7:5f:c5:f4:11:43:fa:14:59:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\obj\coreclr\Windows_NT.x86.Release\src\dlls\mscorrc\Release\mscorrc.pdb
Name
.rdata
Size
512B
Virtual Size
320B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
129KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
bin/netstandard.dll
- SHA256 89e927dfedb268c74e96e9a5016fe201f57344f4b80a145ca7bc24776f2fff40
- MD5 94f395ad732ac095583cab60a17ef73f
- SHA1 f8ae51901cadbf8b31fc5c7aa467e1658e7394f5
- SHA512 dfcb6afa246fa2358da5047e86de0925bdd4e70a368c8901240008a05a12acfe280f67aea561e6ad47f2564ff33f0784b2fa8f72fb2c8d0d9e39b37e60853bdd
- SSDEEP 1536:b3Yo5V4bgDHsPdBpwSJ5l3Akcg9QnGSIKGN4rx9W9OkBsTIAxkvdFgqXcuEvsQzr:b3Ys4bgDU9TKnGSiqrrWDBecFXcuEn
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
43:36:d9:55:29:02:1c:49:dd:0a:59:9f:d8:52:87:9e:e1:9a:e6:a4:62:aa:70:69:4a:16:33:f9:e7:a8:d8:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
netstandard.ni.pdb
/_/artifacts/obj/netstandard/net5.0-Release/netstandard.pdb
Name
.data
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d279d3dc06ff75781f3b0796d54a9c4004e54534d6b9f1b4ff9b23beca177864
- MD5 928eba5a5295e5ef234dd7c3b09c1c29
- SHA1 6c9146ffb2c0ef0a3198a768822ab38fca3ec682
- SHA512 c25991785a81848aebb23d0d72e7f48ca31d031e97a63c5b444d972efa134dbaa34763973036ceac74ff8eb7a1c4a57e4999758a93d9e94f04327b9bae5c50ce
- SSDEEP 768:Xi8bAeihTt7v6qspn1dfe99dgohJlfz9S8oLbmv:XxARTt7v6qspn1dfe99dgohnfz91os
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
91:90:a4:b0:d2:ca:5b:aa:bd:98:6b:1a:10:9f:9f:3c:cc:5b:bc:15:cf:22:6a:e5:73:1d:79:d9:75:1b:a3:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
24798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 45a920cc1da9da2a3f6b3ab94d8233491d9769486e213482cec518b4d289db9d
- MD5 c92983a2dd16a153e294b615f97e74cb
- SHA1 faf8c70c0bdc23729b725932f4900fef2d0151eb
- SHA512 efe4fbea2305cec9b1ff23c6a6a7e3e4d9bb42e789732485b33e1b214756450d086263ac01b202fd7962fff12c687bb4304d5d38c42b195aa77914fca774d788
- SSDEEP 192:q4c0DuDxTDltcmgWWkGuIJ+WGQWzSoyWvLgVWQ4+W4ZtpwBqnajxqq:FK9CWWkQQWcS/0Lgnqlwq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:0b:92:05:e7:32:fb:bd:25:38:6a:2b:44:7b:dd:7b:8b:eb:34:58:7a:f1:15:69:ae:a3:4e:21:ca:a9:69:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 370409274d7b3592894a384160cb2df93399cd16a55407f0123cb2305f7e4c88
- MD5 592cb823d0b951a9596b197100ae50bf
- SHA1 fbc0c3be10f187059cb00e6ffe159ef6f588aeb5
- SHA512 0e8df47552a328655764c2ace083558211c61c4b14be41c6905b7f52fca4a769c0f1bd27236b684d81c705cb7e955935af9072cfc1204dcd097c78917bf46ce2
- SSDEEP 192:G0DchWmq7rW3G8mJEWGZWzSoyWvLgVWQ4OWLs/MZuo1nqnajBaiRtHHb:xDchkXW3YKW/S/0Lgys/MZZl9d7nb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ff:4e:1b:c9:eb:08:e9:f8:0a:d9:69:39:79:66:8d:ff:f9:70:82:0b:2f:8f:fb:6a:b8:d2:2a:0e:dd:16:41:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a5157967047671d49c3b1b3d33b8c8a630e64239cea225a078b346af990940e
- MD5 bc9d81ca40d705b7bfb025c91d811019
- SHA1 5b7e759640eae0219cbfef3c2f469d0f4f539f2b
- SHA512 6a9813f7be0e772932bcdebe28c659078b4dea14af3115703b02eea50fe7831c8ad29bfb02e732a859d7dacdf67e2a6c8fb802c48b00ffd0483907ab735962f7
- SSDEEP 3072:4pOlk/3khgg1V6YjmcTsmgvKhRwllDueSGyXPrjZfYCTfVMEVvMGcQNmqBQf+iD8:4pCQePrjZ12Gr0f/1fGId/t+yAZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a1:18:7d:96:f2:31:39:0f:57:52:e8:01:b6:f6:92:56:a3:d7:da:ef:f0:5d:ae:8a:79:50:19:3a:c6:69:2d:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
274642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
260KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22ea724a698c7d8dc1612f67923a22b86a57ab9cafa4aadd183b88768b130b99
- MD5 84a733614ccc2f88a93003d50d080bce
- SHA1 d0dc055d394d802a12ff62bd3f770426e75fdc48
- SHA512 bd8cfd4bf605a925db243ed7dd31f2c3e1e2223c2a6a9f3dffca795aae341f2fabd1a900858d95dd3f2a0b84ac69189cbc06c55dbc1a33795b3eca5902a8e264
- SSDEEP 768:N3Z3IyLsYiWGAHvfpCMfRwTAlfXNS7LlZfK6++9IWAew3S8Ks6G:Nhem3VuAlPU7ZZfK6+EIWnw3156G
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
88:40:f9:6b:a2:d8:04:f8:5d:c0:a4:e9:56:82:dc:e2:49:d6:b6:14:dd:7a:46:b6:17:47:0b:39:9f:de:48:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
66490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 65364155923e5bb70785b37762177c163d9682a9de5c47d0f02ab44a9d6aba77
- MD5 20f46e3ae7d753bd5e9b5fc6c0c839bc
- SHA1 ad8659bcd08610a7eef4f37119da3883d8e53d4a
- SHA512 a2af0a87bbc0316ae345d4afe8ab8c0e6d188169b08f2a7b3a157d240b52ee552ef892ef895cf2a4d8d75034f08f453770c1bccb1da0a84a883109e3747187fa
- SSDEEP 192:krfs6wYiMfUbtJcUjWPG4SJQWG9WzSoyWvLgVWQ4+WWEwk7jjT6iBTqnaj5Wbk:Ak6FiMfwz9WP4eWTS/0LgswkTTXZltWo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a7:87:c7:8e:49:6d:14:b9:11:dd:e8:8a:55:4a:fd:9c:fa:7a:59:2a:2f:f5:94:0a:54:99:b3:91:52:17:3a:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
13014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac4d2196727982a63bffcbd4c4743132f96604d4d8cb18ab45d982075f88ceb9
- MD5 efebdbcfcb464c685c8ad74eea48b6a6
- SHA1 097d799828ea7c17d650f2018b2166b544f67a44
- SHA512 d08b713e0ba1a75b76d8ebcd8c17b05a0d32c2a33f63946acbf1b2e7a2d36f161458e8350d2117dd52a841a7538820753647b1fac497d62b47a23ad2ed322854
- SSDEEP 3072:cCBcI/gpmZhrtKOFog+qTcqadJvS80CSC0l+d7c:cCBB/g4ntL6d7c
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7e:df:63:62:83:39:c9:21:4b:52:88:12:11:5b:d9:f2:db:69:23:3e:e2:76:bf:ab:bc:56:50:ae:95:e4:9f:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
97802
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9a14c9f383ee95a555c41a21f8eee1d34bc1c0bfb1da1e6e6908c0bf60afd98c
- MD5 42f28f804fc14a933a2873a815bbfc33
- SHA1 fe411c983b8ef99fa810626aefa477b0eb8ddf9b
- SHA512 e3dc52d83d70d8b9c1eb3724ef07e619bcaeef4ce6181487da5ed72b07d9d22dfeb1dc8a71acc03f310f0dc0a15cd489cec3e6d01b71c8b273906adcaacfce53
- SSDEEP 384:Wl4kFeFKjgigWVnzYLg0ggzF3iS2RYGQ1HguHMQc4Ek1+WOmEGJAWm9S/0Lgvql4:SEgB0jDZNlEk17QS8C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
13:88:dc:39:fa:55:2f:f8:61:8c:33:51:06:c6:2d:ce:5f:b3:2d:af:cd:e6:54:29:1c:45:50:79:47:3c:9d:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ed48f7dd667ca80d688d70ba200544127187b47ea890d722b5585b3685fd8d03
- MD5 27ddfd7d2b5a629e9ed938b4ae5dd69d
- SHA1 55f89f4c7236050b346878e9e9d06a8ac6d74252
- SHA512 1e8fe46a72cefb5df4cda88f562d31bc8f9cbb6e807db9333d1990da53afca3a5065fe164aafc4f6037ed7cdd3097d32b065ae5f958136376d25e8d96a781db2
- SSDEEP 3072:CoBbsg3hPCY4alcGrG2rk7/Y7qi0T+BSQeF634A4B1p1q4oHJEJ+mausklk9ySC8:5yshPj1rk7A7qi0T+BSQeF6+p1k+j4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
bd:00:05:e1:33:15:50:af:34:38:ff:4a:8e:86:37:49:71:02:2a:18:43:87:3a:45:55:99:4f:53:81:52:89:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
291270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2aafb9d5cbeb419da41c6dc53b2558df28718b30d4b3b3d3badfcb42753cd267
- MD5 a5c5291baec87489b91e671a9a2fdf23
- SHA1 2974959ebac29af02a55e40d7c85abec6eb3fb15
- SHA512 4e262db745f22e16d2efec1a8a685171c95d202075fab6fae31e9279ff814b3ef25dac971b4e2972328e8447a62a8a656d68a9290e0878cf647a3edbeae6819d
- SSDEEP 384:41O/+gK+FTXFns6ipu9iTlETn149y1CZPAAnJOEux/xKYkP4XpP2bck1H0WaAqWd:41c+LuUsgKAYErupPeLFS8vqjA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dd:fd:3b:74:df:2d:4f:d0:a7:07:00:77:e6:82:4e:17:a2:7b:03:c6:fe:d6:dc:94:62:51:52:f3:63:08:d1:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 728b0f5bf47ab0e3c6fe583a7d73a5ad2f3ead8d39f90e06d4a8a75d31e3de09
- MD5 4d8b36d6d605bb9f1e0874a8ac939f4e
- SHA1 15bbed37996ef3025c99226bca4f447c9f627a0f
- SHA512 a41614fd75ec4b89b295fcf1aecb7ffadc14f355f9434b789a5945697797048398c35d7982ef1e284e2437ada222a90793acec676e6de95c6fc81dc146ebb2ee
- SSDEEP 384:G17MwEcBKEKjo6CYfeCjiW+pSOakuQKWVY9W5S/0LghkBElpbEW:U7MwrB4oYeYm1a5QKKS8S0yp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c7:81:a2:29:8c:6e:f1:40:46:73:5d:51:27:d1:a3:ae:b9:74:f4:44:a1:ac:69:ad:44:02:ba:40:e3:9f:dc:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eb08a6ea7b87129e1781467e1762b7f5c3c2d4303eaf82fd92a41f8a60f113a9
- MD5 806bf8cfe8708fc8de95fd1655d4875a
- SHA1 0d4fa3f3cf80aa34e6dba115c768337227664b23
- SHA512 536d02fa47787af7af961658d02025b753ce5a01177492b3cf26d59b34e3fbbfde814dcae54880de5ab5ddc51acdebbd4fe9972634bced7199f97381d802f57b
- SSDEEP 384:DH1XSXRaRmIDXdXxahKOQu7l2135hwdVjJaWYHqhQ5W82RdHRN7+A/hl3s9SGW:DHSIcK9zBuln+A/v
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ea:6f:87:d2:d7:ef:df:b0:79:fe:64:4b:36:42:3c:4d:fa:28:c4:41:8d:ee:bd:b8:8e:55:21:1b:7f:0b:b0:a9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e0786f7181e50a4f2023792d14726b57d075b96a459a3e67c0c0e49cdb7af54c
- MD5 c009421c4d352146bb9726566db65d3b
- SHA1 d59cd477d718d4809dfbedae5962866408dfea7f
- SHA512 e62961ca20ce62fc73aa7e28802555984a529b7ff378d224959457007de3e0a4522a78ff0391929e013ff85b9bd1788064fe0e4f0bce1e79fa18c3ea8693d000
- SSDEEP 384:5dXpwLYSvWZNLfPNdSBzuetnxP1WZl1ufy3WlRfwtqb7lNeiI:nXpwLzvISBznfPA1ufy8RfcZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b4:c0:87:d7:39:dc:78:8b:b7:12:c9:2c:e3:82:66:4e:97:e2:7d:c4:00:98:5c:84:9b:68:a7:19:2f:12:fd:4f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c1dc1c4cf9e8aa9fdd798ff84f7b21e14fae0489cb47e87342b4478883862229
- MD5 7b536cff8581d2bb9cb8368778e8703b
- SHA1 93cbd8fb6acbeb297739617a7d92a989b8589b2f
- SHA512 cf51157420507d6f52f6046044ad71331bcae5d76dbe7b9da20114557db03fbf517d52307f3112c6579ae59b9107e179d7cbfff82d89483eb21ba495427a44d9
- SSDEEP 192:kTXWaQ9i8jfXxls5hm1zMrWD8WebtuVaVWQ4CW92kqnaj6Q8vwSERsiS:EXW/rjfBlsDm1wrWwZ6zl78oSniS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
01:3b:88:3f:fb:18:76:27:f8:12:ef:b4:62:ec:b5:6e:57:82:c5:4c:7b:09:8f:d8:46:85:25:6f:1d:35:35:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 041d6065de438a5da8e642adf49d43120ebb9fdc0ecc9ddd1d83ed10b1757f9e
- MD5 177cb6e7f0875d7867b068ce5f546645
- SHA1 d3669c936f59d4a6e4079bffa5a778d280110bcb
- SHA512 b223137cbb4bd7ab0be03a50692584b569d7cdfc13735d96b11eebbfe740c9aaf8f87ec9d7559712f85b612690f1c37057d23816875ec9c56152e6edacd67608
- SSDEEP 3072:c1ivAS9EpFuskUsqNedbZkWOW/nmHPCFTTH2P:c1ioS98FuskUsqNeJZkWxQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9b:c6:4c:a9:9f:b3:26:dd:73:e8:c2:e3:e9:c2:4a:e3:c2:00:73:0a:6f:14:13:93:1c:b5:d3:87:5c:38:6b:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
104746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
94KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5242c14319528ef8dac77642146760f6646e828030cde830b63cc2365319517
- MD5 5378663771bcb56826b43d95e8da4b91
- SHA1 39f22b2d1a84c5e2b0281c6c25ff8ca7988c2c66
- SHA512 455622ef8f457111621bf09771ac28743268d6e75eb90af75324a659e9425ae76df66b32d539e80416b3b392bf0ef012cdf0a82f27324598b965e6388dde2600
- SSDEEP 3072:pZgxPDDCjk3SIqF4S1C7gHXKqai4mqwPC7D0I9kxqRxj7MHGoaYMu5RPT/Ib0Uk:pj6qai4mqwPC0IQ4j72H7wb7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
12:14:11:d5:e5:17:63:23:24:89:6a:fd:91:46:98:ba:f2:cc:d1:2f:7a:ab:05:ca:62:6b:04:51:7f:f4:39:a9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
198090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
185KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e5f15f523d00ff80fc3b5c604388f1dfb15bc2975c974c86f793dc020ba8661a
- MD5 8df207215abbbbe45ed505ae255c475a
- SHA1 5247585df595c398a014e48c730105269349e33d
- SHA512 1b12355582a7e392617e7b54b142e79a8050dbbc1720beec48a6f6dad4d0502ecdefd89fe4b3bbd431f170428bf48ae0d10976641c8320c350d2b30bb0ad45dc
- SSDEEP 768:xOQxugWQGm2fLSbH/HnvF7Gca9gzIz3H3+a7vQ0/ZrfVUX/l6PSlf3wePslQ6:wQxugW2fHnvF7Gca9gIz3H3+a7vpZrff
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
68:6c:47:f0:66:4d:3e:7e:90:91:db:ac:6b:1b:4f:b9:f6:c6:d1:24:49:c2:42:41:93:80:9a:39:b2:cf:99:19
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
40678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c187591fbbca53e2e675010871b7e902869c4b2e7aa09d77da91b6ca473674d8
- MD5 0cfff1796732e79a5c0d003637b539ca
- SHA1 ea204487d4b3853cbabe0aed6e1ac99970086b36
- SHA512 2f02b19639564d120d7f4eb7ee050c5d1f6ae6a65754b399302364d103983c362096dec91c919e76a29005664f68b40e079dd0ac31fc200d6f2263d7d42a260f
- SSDEEP 768:AT8SL4emhmZ0eEfYVuPe2ZZj1UkjeBentRDNO0ZGlbcKtAh2kmSMabAOpT0lic8a:C8SL4emhmZXaQf83w
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cd:f3:47:6b:d8:f7:c4:cb:29:43:51:84:3d:43:e4:7b:90:13:5a:ea:a8:cc:e3:f8:32:43:6d:59:83:ed:95:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
33810
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b044727413b05b378a9e4d9dad14760da4add46f5fd5e9f002e686332af57d4a
- MD5 fa6d60d904fe7a55733953580278538d
- SHA1 a8bfec4816ccc2a7cb52a72b9a83e4f4aef82553
- SHA512 0ef6d843da0d6123b0a9ff6bb6f641c488bb92be5178c14d30015ea7c5185f169c01539095818280cdf98d0b971febe0dcb86963913374bf37a4ceafef9b710f
- SSDEEP 192:+/dRzOGJZEGEsEC1WVF1WKzhW4GD5dHnhWgN7aQWxP1Q2SkqnajKsWOa9:UhvJZHWHWKzcdHRN7c1Q3klGsWOM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0c:02:8d:6c:06:b8:be:2b:2a:18:12:c3:f1:ad:d9:53:5f:dc:e4:a7:15:71:3b:22:bd:0b:0a:8e:27:b0:f9:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d28ccba740c2651ba0286cba4d96ac272d5b96adaeba34d3423ea5d36ade887
- MD5 8c850007b31ebcd8e3bef87375390d55
- SHA1 c396a73b6e3b7494f06f9cdb763fc26dd3aab071
- SHA512 c2a27934cb19473d87ac21676a50f1c4584f76322c95231be108f1f39284bf26d8f2c83450a661d8ed62572f9eee5c3289e0cb533a730b52d45f97a778175306
- SSDEEP 3072:9R9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yI7Ixf9GLqBdasIVDBvQBasuauRUyR:SuRn+T6uDv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f1:8f:db:16:71:17:af:3d:aa:ea:53:b5:94:ee:25:33:20:d4:f4:70:37:b3:ac:03:d7:3a:07:71:6c:21:bc:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
131974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7498fe7d0766c2bc8d5bc223598ad1eebc8f1a4478d770b03161c845e6120f80
- MD5 759739fc1debc0893c43bca74016a60a
- SHA1 e9feb2f44411db4f950834908e8ae52efa7ee435
- SHA512 9b9db3bb227e5277180304247ee8680ede21ddecd87b19c946b92354356c31a5a5cca474e57019fe57c1d238808efccbcb0eeaeb5f162e6bdd85dd7d0006e7b0
- SSDEEP 192:ZYkLWviW826W4GD5dHnhWgN7aQWPBtOQophFKqnajKsN:KkLWviW82JdHRN7QJXlGsN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
79:b3:42:f6:29:0e:c2:e8:58:27:44:eb:55:f1:1c:ef:d1:89:28:e7:b4:e2:69:e3:a8:78:24:7d:ab:88:1f:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ef7db12cf786a2f2a42c3d91ffa10836bdee88a0f75283f8c59823931feec2d2
- MD5 686bf63c821553ab5bc44ad6915487da
- SHA1 b56fca4f9b51a0a524c7d2d01c37a57494129fea
- SHA512 c90e54c242a2e929da0020f1d0c60f7fdab3f7b4af6e775df5bf4a9228a44c1f56baa5bbe4fff7b153eef660a47133818f9bd920484d7913c45a6b01a736a328
- SSDEEP 6144:S2WCkW/xA/c4Q+K3xY/nYVbaK0G121dQn0NJf/wfe:S2WCV0pN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:c0:5f:37:57:78:35:de:f4:74:b3:3d:34:84:3f:d3:fe:39:39:88:e6:4e:66:5b:9f:b6:19:29:10:8e:da:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
345398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
329KB
Virtual Size
329KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b91cbff5adc41da3ada0d535bb25325024aef95a75d3f55ec618132b33226f28
- MD5 8a46f809c1335176070c433d81c6a8d9
- SHA1 0453b94150f7abbc66f606a92eaddc60b14a5c5c
- SHA512 4d52b0b1c0f2b6a555eca681176c50da424fc90872af8e62a24a894aef70b24579a753eeb76d402f42db09c4413d2f9d2a9ce284fcddae35a96fe5cc84ebaabc
- SSDEEP 192:6JIWx+/yRDnsHZ9pW+vuW4GD5dHnhWgN7acWiKbt6bsE4eAqnajKspIs:x+4TpW+vddHRN7uMpJAlGsp3
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1b:c0:9e:47:8b:04:5e:7e:b5:34:37:30:cc:5a:0f:2d:5f:45:23:83:8d:24:96:85:14:93:bb:52:9d:ad:5e:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cadba5aa6a47404cb750242f333ab695e54e471d323bbd657df7358a7b64a444
- MD5 f7afd80d34c6e830e7f11834b7d05ba5
- SHA1 76c8a48a232373da6133588119c0973742bdc726
- SHA512 544ee70919bd762754eae2b677bb6ec12a60ada9f903796c9a272bc849a991da7bdebe6b735fea2a3aea02a28ba40179d10ad67cc69601037e33f5f7227b521c
- SSDEEP 768:AoOCK7e4k+HYdRWsswJ9Jh07N0O5ikuHy+doFiJ:yljk+zd5kydFiJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
53:81:a7:ef:01:24:54:1a:a1:d6:54:7a:3d:0e:90:61:1b:4d:8b:2d:28:0b:56:21:90:c0:f0:39:fc:5a:8a:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
60778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dceddd9ef7dec68f2be27aa855cffce385457c965eb96d1733509398bb32ffb6
- MD5 6359df0d158b44982c4927e9c2374a67
- SHA1 56f09a428a389899121544bfd08237fea9e877e9
- SHA512 8d0f774d73e069a8ac29c004cc190135d0d2ed61e680e9a2588f6fa158009db9c889b27209e7247a10042be42aefc7f8e08549b4b76c121f6f8a8ddc19ada3cd
- SSDEEP 384:eFfH3353XfsVgn1WSFPrdHRN7cuP+CcWlGsS6MxdVm:elH33JkVGx/wF0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
57:8e:a6:87:3c:dc:ae:51:64:db:0f:fc:d3:51:fa:22:21:9a:cf:24:01:a8:78:5e:9f:d0:d7:71:86:ad:6f:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ed50853b902ad1ca30de71e2d2d3c9e16d00e8f8a0b7730a02a2ba614308a6a5
- MD5 f362f3b66505eedd42034d75ac8a6f1c
- SHA1 e91a5ed8d7a4e2dbf248819e8b7e7a7e22afcdb1
- SHA512 1493753efb870a44551eb704108d63c3461bd49ba0a431853c950d6930f0b4f30317fa0ba6670477f436016c9edeb6b00c0dd9d2634a9e684dd655e8fc3d4f06
- SSDEEP 192:jmVHSZc+oujdHR8wYNyNU+S2PfcV5PWl4RW4GD5dHnhWgN7aQWFfvOQophFKqnaF:FX8tNC13yRWl4sdHRN7AvJXlGsN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b7:95:74:c4:b3:51:06:9c:62:b0:3e:f6:ca:70:c6:6a:7b:f1:55:32:f7:e8:b2:a5:4b:7d:33:e7:e7:87:03:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
15994
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95910e2422ee025ef468ace76303825e262e7a6b2f564e485db6252ac77a1314
- MD5 9692c0f75341624cd85c30187a67dde2
- SHA1 09610c1720c9150c2668f1e9c9316b3f9719feaa
- SHA512 2a40fa84c32c4f9e544e68bde759dba7cd85d5962fde200c2343d6063c751dd77de2d9e2ce75c1be8a1024a62bea02809492b54c63e41eb64ffa23c5e6a7758e
- SSDEEP 192:/QAj3+M3qWC6WQdoW4GD5dHnhWgN7aQWFyP+CjAWqnajKsSLeMxIJ:DrJqj6WQd7dHRN7syP+CcWlGsS6MxIJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b7:12:13:e1:4f:a8:c3:45:f1:a6:88:55:f0:15:b0:08:ad:15:6e:97:ab:40:4a:81:14:a8:74:c9:f9:bb:44:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10266
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bfffba604ad72ef3ba118d5ab079c0ee923b37714195c7ba059eb86f717bd25d
- MD5 585b195992199c9dc0182a319de484a5
- SHA1 6d5b0f987aa14b80d37f956e511fd9dd3ef7ed9d
- SHA512 337bfb2345b1a0ce86c919d35145f0bf5c11bb777888340b523b71422a3d26d01de6cb2bf2efc4f0138d8810a17fb9b3bcc0b8d4e6647effe4d909541d9c277b
- SSDEEP 192:guXKea/99f+ZGO6xWLZRBJybW4GD5dHnhWgN7aQWrPUOYqCE0qnajKs0O:BKX/9tO6xWD6SdHRN7APUOBClGs0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:81:1d:64:26:5b:1b:ff:7c:46:51:39:4a:45:7d:12:94:c2:97:d1:0b:1f:af:9a:c4:ce:e6:df:92:81:7f:d4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 712bbe4e8fe7fa2ab88b5d58aa848a931a4905a9aac2274baf1e1f5150a6ac82
- MD5 7b67f844755dffeff924a3d4266bdf87
- SHA1 20021f74d92d0cbf7af82784f37086fcd5ddc89d
- SHA512 a2258c0f8772dbe9d84b589a81993569e78e60979bd3085aa649ee5b099ba932735efedefd666576272470e1f67f265e2afe7140673fd6b24f323f1fd842df5d
- SSDEEP 1536:BD1bd18G2dZbF/aHTgbQjWVwvmVeQDn1J:B98G2dZbF/ikU+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
51:bc:a9:9c:70:59:4d:20:d5:52:55:df:b9:33:68:7b:7b:07:d8:52:90:4d:74:e2:e6:2c:71:2e:ab:b7:72:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
84434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56ad67f2d80319489cd9234db7ab12ce511f05fc32f56d2ade845ef64374529f
- MD5 12a7dd10e8f9e10251d80a8579633149
- SHA1 788c700da1f3ec78d7f96bbcbac86a4491484045
- SHA512 e0ba6d156e8c701b274ae897f8f351c4683b51fdfc2cff8ab0e587df1a1f403056548fded869c1b627f00a3262cfa77895e2dd381ea643c817449deb91af980f
- SSDEEP 192:sUL4OLrKWGcKW9QFW4GD5dHnhWgN7aQWWN008Cw7qnajKsip:1L4OLrKWGTW9QQdHRN7rN0uw7lGsip
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
10:37:c6:15:e4:d4:21:db:29:5d:83:8c:1d:f3:f6:70:f9:b5:af:9b:ff:c2:73:c8:c1:1c:a3:5d:9f:3a:00:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cf341dfdb6f30db2d22096349b99c220e68aee71312a1afa8013e466b205006e
- MD5 834cb65fa3bc265483f2e10e22882a8c
- SHA1 d5eb846ccacaff68ace50e22e51030524c690c04
- SHA512 75f89e929e4304ac4404d36eba4ea93ea6dfff6561c6083f2fe9b2ac00e09ecce58fd0a8f5656e6f2e9b9b05b61032f8b5a648db8c03c52bbc75ea2f4e9763b1
- SSDEEP 96:5fxpjB7kiJuOejwi/QeO3ddCCl1ZPg6n+:ZjB7kxOg/1ODNy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 23a3fa247b8f326083b57d762c58bbfd50f8527cafebc076c31b0b341455baff
- MD5 4c563b98029775e9ada41a4da53274fb
- SHA1 c92ff55897d7283fc0e383ad52166f7128368413
- SHA512 6692c8f6c8b61e29820366c66e54326fe789480d1551b471f5a9770fb8a23dea2e8e11f8ea71434609606f663ee42ed62ec0e486b5c0417f53c3eca678da2b80
- SSDEEP 1536:NHdnAf4WeJlgGBcSZTT/hnc0IPPec+zsj:N6wWeJlgGBcSZTjhNIeBzsj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d99c145969459e43fcf8393fe0b07e07d1ad216c02024931adff2e09d366df8
- MD5 aaf97d38c88124c928664fae47607162
- SHA1 b7d97acb33d42ffdbecfb3ce02cfc01f2b75c7a9
- SHA512 446d5fdb2c0127c6f9ca6f3b1c3a3107cce9826ae9abe602435558ed772fc9f8d8427f13e47e19974a490bb060b574973050ade04ba7ce3570629e6e4406c19d
- SSDEEP 96:S3FV5ZWdEbwmFz0l+ZlEkjSd+SdctSdSZSd/Sd:0zAgQMZlN2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ddded1f51c666768d712d3fdcca8dc43f34f23052999d246646b66133822f720
- MD5 fec51bce814a79bc38037eb10085fc60
- SHA1 0482be5f0a218cda79a313318c69c71564c3c480
- SHA512 c4c21a933be90cf160aedf58f2b004b59f1660b0ff285956ab19c0e142b8d0e8ae798b02b8b9aaaba9e49f77e2a5eeea98c7e3f2c7eb8b981356f5f500a13ac7
- SSDEEP 96:KOP6OUdgjecZHcHh9THVwHl0blBkyxUNvrrJvCUj3SjJZHu4Px/a8pYon5AKjjll:/6O7i+MhhVwHl0B/V5thaIY6AkFbCWR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 896f21252320e3133feace5b5236bbef7f3862cdff2d4decdc277da5a8564a07
- MD5 85adb126fb8f62798dfef0fa34c34b97
- SHA1 048ff09887252c4c62ae64b56315e0725e4335d8
- SHA512 f2600be3468b54c941ca0b462c707c1de4134bc27340ecaec504a76a7700644a95cbd51eefac94fb26e7029cc544db489be4cb0b30ba7e2e210b552ebb45dc2e
- SSDEEP 96:WYx9ULyjEq+q8LGYRq34Iil72GGtHPJJsy:WYx9ULemGYKW92G4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1013ab11fc6fe2ac004e98bd673d3b4af38b2444dfdb2ef1ff6c7e0414818c27
- MD5 83fb30a3a06c29319031e52c4336fdfa
- SHA1 324c380a5a4f2470a96b7cd3b5c7627f02e3ebe6
- SHA512 a27b7eb316ca7c88d165de652a515380283149c3a035d65db7c42bca44790ccc9f563791a23485acec7d7b1a05ba6f98be066d9ed099b5df0db98faceebf446a
- SSDEEP 96:ZxMRpmzKQQ/IpbMe2RuN3gfZ4hfF+3DsV9V7n0kzOcw651wWPJdFCl72jVTJPHJj:rOq1bol61C92jJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cea85979bb246fbe259181ba0cc562a8aed3d2b37994457341241bdf08d3c387
- MD5 a966051210e08a4d489af0dd4a2af188
- SHA1 e851cd2709682516ccf9fe3f6ddf382bf68fa698
- SHA512 6ee53c7a214234368703dcc115aba56630619301acf221bb3664622602b9ad4a7b98f07003885df30e3d1dce6ebf0c5919ea95d0b68e59567c54aa3fba60756d
- SSDEEP 96:MqBciqei+6tOKdYa1V+cbSawtJZBFQIcc99HnO+3d+6zVcWVbvs1ok7IRJldhLw5:MqIeiRtfAKKzQlOXFikRJlfcxi5SeLU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e80be22eef7936a7be3658743597d2e58f7e22fde1c637af1365bdaef739ecc7
- MD5 2d9f3983956c1408e59b3912e1f69c3b
- SHA1 0d66c8bce5bb5a538733e2bc0d0a9a7470ec2256
- SHA512 19e4847cec855173be137aba674296d32888040659b0c4331f9d50e0409c3ceb0e13bfedfad87e9ac2c566521813d63cdcb757168d5685c1cc5030be9757b00b
- SSDEEP 96:qZIPUGTL94ozF1fOe75z5mJxHx4IHBFB2ZvmLh7Fvn6yhTolm/r+RXlk:uSUGTLaGFIe75z8Z4ITBEq/zTo4/qq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 acf34e5a36654e125a2eda5c599ce213f8927006b5e435f823ff56e1dfff944e
- MD5 f11fe0373a80bf2a572a6e775b6b2e79
- SHA1 ade3e8a41269f922fb1b34ef915e68df01a46dd9
- SHA512 431c562f40e7443099b67185c2ea43764e91eaa8e1d39952c741c83b9496e1daa0ad52cda0ebdd5139f62b64878a9ffd177755a069a1bab3da5d218d8d636c2a
- SSDEEP 96:esFqpvQVGMLRCYvW7vWOUtXjMzcLaclBLoehv:es74cP+iXwcvLo0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2396544b454ad16c376193b92f4204bc62110dce8b622a2082218d80c88cc0b2
- MD5 a669b9618ff9634edfc20f8a325a8079
- SHA1 0e92d899d726db1c955492577b7d0e2c7caf72b6
- SHA512 731372e17db33d52a669e5e03eb69ccbd80dab14320075dccf88ab9e1b377fd9f8d9fbd766cbbaf4efc672c17a4b1e1f8009bffa41fd0b395daf8fc8229aec83
- SSDEEP 768:rDAe5Yc14SDlnASJ0nsn4nIGnIF35Xch09Pj+tWhIY9IuvOLF9dIeF/j1mes+GVc:XjT4KKHGQF9dIehj1mOv873ZGvG18
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 98543cd584a815f735dc6546d65892460e78cd2729c5087bab8b464a07e2cc6b
- MD5 e3deed57b0745c55189b712f8640c377
- SHA1 0bf60ac757ff187b0bca31a5db9996ea141c9e07
- SHA512 7ff60b4a1de3a02094887b0490b2dad6fe52e28cffb6066753178771a7b6a7e1c6588b48a99d6e66674ff39de1fdb2ca8bbcedf02687ddb9938f4171d9888506
- SSDEEP 96:za8E2ZT7Mq2BUEOEy176lE1+Lxh0sjMFi908et9wGsFrmXGdDMBGY/loVc:uXo8q2m76l8g2sjMo908IwGk/6/qK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7338e5eaea016c493d75e4235968d680c21fd56d61c365277042e796d15dc1fb
- MD5 acc2c2305b459db4258a22bbdc50577a
- SHA1 26a0d6a0d3da60fa10ac961aa26770bd8a1f987a
- SHA512 2741e5339b768f8816fb15b0665effe8f58e7cf679b1d8261a5f180d75be90219c5374a0ac5c43ee719c358ffecf6e1062c76805bea6824f71a0c98081ef8e0d
- SSDEEP 48:6MiG5SHOGKlGtyUiQlulsl1CPSfmDdmFybW8EiZbTLliH4Be7:oG5SuGKlGDDwilIPBpS8n4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5a00334d93384f346258fb807d2220d962c01bcf46e4e9733f1003caa977d10
- MD5 e0e6295272d10a8ea2820d4ea93a1bac
- SHA1 27943d8d2ccec453fd2caf6bb4ef378c08ab6efd
- SHA512 014818fb0402174e132b07b530f7ddcb6898e83f6ef24e551612677bf66376e4da5d40de8332e6abd473d7f89bf5700a83cbedfd00f23202acb7ddd041bdabc0
- SSDEEP 96:mHExzynblGPnvxcWAfh1Cpy+O+wgFRFV2HrylAP/5raPgk:1xzMBGB0DkJOXgFRFVWryinPk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c486cb9521cce114c30a075058bb12bdb2719e8dadb6ef3fa910e61f71ae2d60
- MD5 6ffc20966999904c08daca2ff474b4dc
- SHA1 ad80d505c007ebbf99bb20b4f49a55e546c578f6
- SHA512 57a490ee5cc23e6c9be62c7dc34db805e095580c2a43a0905841a73aedb203cc0ea216953155a80d87efdca9357c0d292f859129a6d036f9aa713872c64ff1b2
- SSDEEP 96:NExKh+u+XUuGWzljnNSxSKBGGdynaYlsYLn8U:NExqOqWznKBGGdIX+YB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e894bfd4216f55efa67d5276dd17b4e310df1cb23589d495c72f983157be2f2
- MD5 0764fc988af1aa0bc41fc9ea418392d8
- SHA1 8406d453f1512212ae7df1d176fd96cc9c1bd6b7
- SHA512 62a934030da8cd489f18e67263656c998f91245201dbfdd442f960fe75883c81c1fd148dc8b77bbbfb5772764f4a8c6df33ecf3ded1f69e500ff07f0a676a386
- SSDEEP 96:AnXdCA4isW9nh+3H4oDA07cUvafjQENCsXcMUFilIPzp/sHvY:AnhsQh4xAEcUvafjv5hUUaPzp/sg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-BR/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ec4682150a306b8b17df60438f0de95b3b423205a59e701af8410e2e5f5c6a53
- MD5 703e3c6d855e3849a2fa120f9a188aaf
- SHA1 324571ac5cc144797aa80c78dee5192e250cf5d0
- SHA512 3231b4cefb368095b10fc2c683411fbc3087557bdf1f172b800d34b23ee211ce0106aa84de30f6508f0052c23bd602aca835675949c316f89857cd455874d945
- SSDEEP 1536:M1G/Od8+R20PeXzrRrFr4VdVPVVokphLImbZuBdU+pymDCtkJrE2kA2pGA+vD7xt:M1G/Oa+R20PeXzrRrFr4VdVPVVokphLG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a35fcf8bb9162285afb22302f00af30190c91d29934646a416096861af6ed7bd
- MD5 3ddc7e1906329fe2b8233140b39bc86b
- SHA1 553c813d84bf65314daad4f64aef37d98a118199
- SHA512 a34ecd6b40f84b9a972309ae99522c00935e00e23e6aba49e88ee52e3de7dbf6c832f1e612967a5cfd408a7fcba22b72fe85dbbaae94a16dc5d2c06bd548c08f
- SSDEEP 96:reB7kiJuOQr9wSj+SeD3u405Cl1ZPy6n+:reB7kxOIM7D4ENM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 05df7ece5eab4c3048629a13b4785cabcfadad8e2686359a5cc16888920c7613
- MD5 dedf6cef8394ec1ffc2fa04f916a8f0e
- SHA1 f604d882c20cf68cbc2d6710a1daff30854138fd
- SHA512 bae495cfde29738580850d3a7b588f4c9b9a4eaafec0149851348d6af0bd43b62ebd6f93ba3bf488f6b4772357c78d747453b0022a0f37f631cd57696b55acb9
- SSDEEP 768:A9Ey2T7+qbnAB23CQxIszvSnqT6BnilsDur65CvIXawOnWswr6jL6F5aV/:tHdnAveIsLSnqT6BnilsDoQXjok5aV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 62ae0313a92ab0c0054b8ce0dc1068026db495f178e6c5ba4f554f8341854ce1
- MD5 7ef4fd519c1caf6d6b257131b2cbba0a
- SHA1 772d3b7ade1970753686d3c675018ba3ffbd14b7
- SHA512 1d46de67bd990e1848f86989df70ec8b767a64e4b1f5d3f968fddba735684d19a8ba44063fb566820b274bf00ad1f0382c4c2703acf2b8ac1a25d1d9a46c3663
- SSDEEP 96:SBws5ZWdEbwmFz0l+ZltkjSd+SdctSdSZSd/Sd:6zAgQMZl+2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14639f7023085002e7ca8a26394add0def134323d2587177fe15d5c7898462a0
- MD5 41fa16c9e0a122398166d2a721a078ee
- SHA1 d6e6767176f68ddd4e32f5817385fdf42eec72ad
- SHA512 a90e3bea6d5236aba897dac36ee2e45dd6177f710344fc8fb61312edef7f9f73fdd2e34e1c2d7f92cfa50a6792cd919183322eb0ec343944b6392d5c00032aaf
- SSDEEP 192:bv6O7gJd8HL+gpv8VnfoZ4YUQRacLFgiWR:bv63J2mnfLPkaom
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5e8eb0dd25bf3869b0ae361d8076554608640f81b2ee2787606b876cc79cf751
- MD5 eadfaeeee7715477f6a4a843dede168a
- SHA1 83ca97646bd1962078e35f8321976c7acf88134e
- SHA512 de0f5c8d85c174a52917d7a47a0413d68b44472be6873138b068b5132c1b03b22bdac033c17c410c220f0797f7bc0f59385078df0a76d62df02566b3aef3974a
- SSDEEP 96:IjJDx92XXj+Wg8Ls8YozpYl72xutHPJJsy:GJDx9QLs8YEpY92xw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c94fe888fb058f1a0d3e4e93120f96cc56692d4e4215ebf8d5184c00f0e2793e
- MD5 42b224d0a5005a486913617314be4a31
- SHA1 4ab350ca2efc106548124cbb5e231a316ea027c3
- SHA512 7d9611452d8e59506dcd0f7d476018444835653fe751b3d63a1cbd005c061ced257a667113d7489be36cec41bd1689f8611f77cf02dcc5ade7eaa1f567d692ba
- SSDEEP 96:npmzKQQ/IzeePCJz87dUGy7eJTi2R6oi7nFVCFOcw651CPKPJ403fl72FVTJPHJj:nzbzvl67v92FJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 87ac9dbc75c5c6014a74716aae67d90ca4ff9aee00265ed7cd72b0b0b4f6a3c3
- MD5 aadd9b73abfb9e64523f83da62bff290
- SHA1 80c9d07c1607fa974f218dc93493d434e07eb58a
- SHA512 a0cf3ea152cd5f07f9794401b065b7148019abe2b47e429434ef35fac432b379cc09a06547a1b5d13649e9cd856b08f8bae3e802aadf0b4ea399ca44fa6c7d24
- SSDEEP 96:URPi+6tOKdYi73j2A3bIQA7tTvBFMMf99qseIeOCGnPjzVygVbv71+V9eJ9mJXhe:CiRtDjrIHfMM/fesJR4Jx7xYkGSKA8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f62ac529aa61862f84657d001c18aadb91d6b32d91c77764d5d89124689562b1
- MD5 5fea27d348fce14706462b2c54f42beb
- SHA1 45f56b7df17eb27049aff6197467e4b0dd7d57b6
- SHA512 70e87c122a252a5d031b398ce22ec46e8229a744368cb22a55ca22df45bf81d62a78974ef2796d0fee8c13c7d08ec7e4aeb0cc05650aaa60bb77fd9ae344e1c1
- SSDEEP 96:lUGTL94ozFxAMzUFHHYwvGIHBFPX/vOQWpoQ6yhkNSlm/rHrlk:lUGTLaGFlUFH/GITPnmkc4/ze
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9fa885b91d0718d7240572b6e3ff8b5221c26d655450f83f5aa641f14bde5531
- MD5 03816865398524ea6e22b48882e4e7e7
- SHA1 bc2f8290f6a6e871f96e7dd1278829ee46b30c92
- SHA512 3e1d3f6bc811b06fa53daffeab8a48ba19f129beb000d2199c0e200c5b94e202a21ab13ec11dc140352f52bff49f972217692c3f9ecbff0437e3a18abace727b
- SSDEEP 96:YsFqIY4QNK1dgBlcvWxvWZMUtXjogXjT4ZJlBqtDvehv:YswUoCYAlXRX8Jvq9v0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 288ba970b51ce8d8dba573f4c4668b2174eb05d12d6a00eec31f421cb305351d
- MD5 3d6d97102527b80460f82029e2c0bcea
- SHA1 a4e58f9a32d58b4a184c4f64de1e9de5167db92e
- SHA512 e4c265e42407b647b45d4b73755d6a68b45cffc86b298e0dfa04c78c962582f54aceb71568e85145b2e4e089bc4c3f37e8dedeebacee813ec485416ad7160997
- SSDEEP 768:SrDAe5Yc1gDLnSSohnBnjnIRnIN3ZR24/DD8pVNFof9ZrIu2qm0iRcxACltaCv0k:cjTvJ//2YXJiRcxACLaCMDmDK3Zti38i
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fed9031150d4650b58a1eab54e242a12b819b024e74734db52dbe078aa7ddf81
- MD5 809276e997f5c5676a3f98fc4d513385
- SHA1 cd3db401ffe5240c3db29a8a1647eed0dd101bf2
- SHA512 78714e873ede8831b1aef46c54c9dbd77a5c1588f1cba7bd0de4ec54c7643ad66ce5b2271f22b5b2f7ff51a23393132886569bfe658898e6b429cd2a5c6b9499
- SSDEEP 96:zY2ZT7MqN2XuFl36j0At4a50KNCREi9Jgxaq0/g07XGqDA2Zugloifc:Mo8qNf36I4OKNCRr9JmaDNggqiE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 144358010ad50301c51ba08ed3c37856b2064c620bbf3dbff0ff372d2e9297e8
- MD5 646248b71974673e17f0d5bccbbbf843
- SHA1 2fc3aa08c1091985b2bdf3cbbdb455a6672ba89f
- SHA512 11949b1cfd32b8c8bc7eb59cb4d30ea56bd15f56678b239dd45581d7ed090023779269344ee98b3987d4dc44390496870ce15f0f727fe5f17b8080ab6573d998
- SSDEEP 48:6nnQKMdHOGKlGtyUiQFulsl1CPSfSD4FybW8EiZbTLliH4Be7:wGduGKlGDDQilIPTS8n4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d3917efb4d8b99aef35b498e244c8f69116c05342fddedbffc8f3b4d7648dbef
- MD5 f30a3694326f1e56673b404b105e1d1f
- SHA1 a1687853e9312b72c36d770c3d67e6bdd0b59528
- SHA512 263100aa8028c6012cdcd2a5291013d5a2c7e59f696816e98a5a81da258feed6019fd16c069c2b6b960462fe77d64770394095fad0c8974d0a3793c951d6672e
- SSDEEP 96:WjxzyZJlGPtvmA5gI3Tnb8+eqfwOjJUClAPo3BaPg:GxzKrG9L3n8NQwOjJ/iQ/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0cb2bfca28bf706aa5ac92d8a05932adeede86f8e212fddf5ce75a399dde51f9
- MD5 5a3fa0debdbbffab050e45a7e22f5646
- SHA1 3897126a6fc458b5b59eca42e6a627866d3989c0
- SHA512 d71a0da600059179d466242fe96240fdce0b1343d834324da408d48e39384b4107e278aed773d140765605744f8304cdea7457969fb78b16b65d80233b86d37f
- SSDEEP 96:BExfau+cUJrB3dRNZBNQpjWdB+AgWIelskWn8U:BExCc+33QQdBPd+k+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d057fcd3fa42c45b2ccb6148b86b3106e17fe436cff3ebc99a55795cffb2ee0
- MD5 579e4fb36ded2fa9222ae11951418914
- SHA1 9f0977928ad98f93fce1e7e8631fa52f3f16b0f6
- SHA512 ac5af6d8e66d79ec12b4d6775eae6de6a5cb0bcbdad3eaf670a1e4f6a669452d5a1b140937073d98b0bc6bb6ebe518d4dfb384effc066b2723b9f85d38d1c686
- SSDEEP 96:v0rXdCA4XzMOx0owPt2P6EV9JeylKiU9R0HSilIPg/8HvY:v0rozXIFs6EV9JegdUr0raPg/8g
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/pt-PT/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b01bf315f334c23d4a372de6c6e8b713f6f194c0807478aa8c95c055585594c7
- MD5 3ec82a6ca08ff2813bed151c2cd4f5d6
- SHA1 e9d405f0abc2e0b1395d7423230622b41f6c0337
- SHA512 0888ce6175c7f13d5bd539930976c77d375fffc90e2e4e5a639a3dc253a674cb376a13c672b87686384b351090c52f6dfb5e8f45d6075900f7cfd7963ef992d3
- SSDEEP 1536:k1G/OdSZNEhDae03rornriVzV1VsoV/hFIUtP7B+UpyN4Pb2Q/CbdIA2gTN0x3X:k1G/O6NEhDae03rornriVzV1VsoV/hFi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 331cb492751458642cb83745e72194a9b78a80e20ef941d75eead564bc706b64
- MD5 88132a1dcec90d2b31070f346151ab0e
- SHA1 7473be913785624282bbd69c311268ea211c9ce8
- SHA512 595e39694939bb74387c74aa14ab020ab65f8ecc9e5cbc1988c9cf20f8798fe3767f5d37dbcc12ec795597fad40dd5036ca919b3de00c21e1c3cbf600a1216ff
- SSDEEP 384:GkpebAe3rBIhuwGQACV9Ns86NJlEEEjVUlTJ5Z+VDpnf7wuqkGyhKZAZyyy87cS9:r8bAeapEOWjZ+ZiujEZzyxcShDS8SbTs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6c:84:1e:7d:41:d4:01:79:e2:90:fd:7e:23:92:82:48:eb:68:54:21:29:f9:84:11:70:51:a6:7e:ba:f5:71:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
28158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 570b4b35c8ff625b766936c6513e9940d8d46dfd270da87ca7784efa70c6fc30
- MD5 cf409577382fdab3abc8f478ec6bed11
- SHA1 37bfdbd295b24c9c2a1d0be8f835e5b6746a28cd
- SHA512 58660a60adfa6866c081f0573679379e5dfd23cde101b8d1afd3440e453d804200aad5f3457fa2a226de2cc184c9d616c71f02861ac8085cc8cb739e6e3004ae
- SSDEEP 384:dM1lr2d++b1WkQQW8S/0LgYZsTTXZltfiQ:i1l+bgGS8pshR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
03:6a:e3:24:ff:cd:8a:11:d7:10:a0:c4:9b:b9:b6:f6:e1:c8:a6:f9:fc:47:1b:e8:ee:71:f3:ff:b6:da:1c:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
12334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 09ef00ffcb5a072999094f61738ee223b6ef40ee832fd4ab0c0afd79dd5fa43d
- MD5 a992191fc8a6310fcbcd61764eb89c18
- SHA1 0939354f25df12765e01154076752bff71bb3720
- SHA512 199cb23252c084e1970438dd8e5317cd964cb38d8d6f60b415bdbf56a4b3cbd0c4922a63598b9727f542adb5e8a1d1b101fb91611ed51e60ebbe7b67536ce8e7
- SSDEEP 192:fxZxxcXSn7MklRtZaIW3G8mJEWGDWzSoyWvLgVWQ4WWR8sg5plUMxqnaj997VrKm:5Z3cXyZxW3YKWhS/0Lg08sIldlZ97pKm
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
95:4e:c6:af:5a:e5:76:3b:54:99:bb:e3:92:10:db:1a:dd:0a:95:95:a3:66:9d:36:14:df:7b:93:58:f9:cd:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1adfbecdf3216e8761618582581e5a1e71a648f94eeee2e2f5d50fc0190ec29d
- MD5 014ba80885d09a76d0b8122f211bab80
- SHA1 d828bc3da7c96010df6106e1e7dd4cdd5190d507
- SHA512 44c8ca8a46debee56f85a3c701a3d9453807499d366435730977d49dc8680fc2400e3d4c18962b73eb65e493d458d009b82347dca1aa41e2672687198ce84df6
- SSDEEP 6144:7pCxaYn7yeik+sCfW+PD1xUT3h6pi09tdJ8GtWuflAw:7pmik+sCfW+PD1xUT3h6pi09tdJ8GtWq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
42:b5:b6:ab:13:6d:64:a9:7c:32:cb:d0:9b:27:d1:5b:e0:59:7e:01:a5:47:a1:5a:aa:03:87:1d:fe:c2:27:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
376654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
360KB
Virtual Size
359KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb629a938172a0f763f6cac7ac69510ae22af44d3de17999d72aabab219fe99c
- MD5 e3a92ffe65cf2aa4937ace3e46ce3627
- SHA1 0c4b306bc8bdf6b0f7f4bb9e6fbae16815d61a19
- SHA512 f58ee7e5e6ca682559ebab17fad790f11fd2bb6d0d216b9a3126680bdc5555429575b1f41c53c2a296201ecf69794788db27a3ba688624f0d8723b789381cc40
- SSDEEP 1536:WhN04QydNtTJBYHEbs/CTvXUYuhnF19jn:AN04FdNtTJBYHEbs/CTvEYupFP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
92:f7:a9:64:77:10:da:9a:12:55:de:cb:98:ef:32:ce:4c:9a:b3:c9:07:46:4b:79:01:b4:7e:b1:d0:22:0c:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
80574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ccb44f959e0b954cc029844d75893216734ff781fe8e7e01837b384aa08e903
- MD5 0bce6a31c18fe354e40880b37c6e9c6c
- SHA1 db3720a0998299e5a129b8266c63b0cf1340b956
- SHA512 461f035f00caad72b521f023f6ff3530eb25f09d8f01cf0a7224cf504dced3c7016a678673cb649f70f2691074914bfd246f2d284089df0491d2d44239d16f15
- SSDEEP 384:9cnjeFdz/ocam0eekuNWP4eWvS/0LgcyQolC8RO:9UI/XaYSvS8Ge
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c2:3f:b1:7f:76:20:42:54:76:2f:cc:fe:78:59:02:a7:c2:ea:d7:13:08:64:37:11:41:d2:08:cf:03:46:44:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
14154
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 341d4b3f1945778c27bb6fac97d1484d7a8367080d78a8c9e0aa908f1a887eab
- MD5 8ff22c794f325f98cd1297b22ab6865a
- SHA1 0e1a3cc8979c21d4e758f2f0c3ee967f56797ff5
- SHA512 c0e36b6bf955b0d31e2b1f3244d600d7872c6e205f36cab2a9bb687a10854b05cd964a4b19cc6e43139960f21eed47512db77b9c9b276951228c1023ffb0638a
- SSDEEP 768:9UzUg8RK3n2HU0WzMKK46PLPyeuaIRPTko5c+/3mciItDR2fSRar3j5CVsLbc8n9:9tM+wDmyNgMvt4+zQXNmCuyI84+1D
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6c:3c:e0:9f:60:53:e0:e4:39:7c:ae:7d:01:4f:51:24:0d:25:97:74:bd:47:ef:e7:53:7d:09:ad:73:0d:0e:ce
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
117426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
107KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 549d7d69a75f8efdecd87b2ea1d11fd698f82955274108d44d87cd394a1cbadb
- MD5 3dca47b23af925229c256fb5cf0f8504
- SHA1 9c1ff1206128a5eec0a5257a69ba03eef375ff04
- SHA512 b1fd94b0ed5ee9ffbe5f1870ccc279ad7211be223fe7c477c611e36d9f0a05aada0b26aebf8cd7e5c72a2fb732aa607cd617486d4ee7a1510b76202f56344efa
- SSDEEP 384:E4IF6FP5Sqg1nOAorGgtgcuqIDSyRYlQ5cg+G8Xe+U/zXbG8eWOmEGJAWm/S/0Lx:egPXeJutie51Xe+U/zXbG8OS8Ud+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a7:29:ba:9e:4e:f9:51:d6:85:06:3e:b6:6c:c2:65:b1:d5:12:92:4a:73:8c:38:52:a0:78:40:75:b3:58:b4:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
21822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fa401ef91e18087da8ec4238d9875b7432d32edbcf6f46a3723bbe36c5af495f
- MD5 b6994f7e0674a2bab87e3a917f25ced2
- SHA1 3b3ed11af67e70f6eff1e84915deb400b1e6a157
- SHA512 a3ce56f22448be1419ca2fe7caca9189b2bf3344ff8710cf21edbc891baa1656d480d2ed7cf9a87cd0fba0ac04243de2cc1b151810a9018b26371cc6c8924bb9
- SSDEEP 6144:ZyN3bGPTsi5KcJCXeAGtKM9/xSN8K6lqiCk1MlBwAwoPjDVjWn+71ifVFwaKo6+G:ZdPTlxSN8K6lqiCk1MlBwAwoPjDVjWnY
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ef:26:b8:fe:62:b8:bc:84:a1:ce:83:db:76:ff:f5:cc:bb:7b:e9:cd:ad:ff:7f:23:b9:22:89:35:af:1b:2b:64
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
390098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
373KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1eb7727f2c4582dd6ce5c849dc593ab7a2a2b663466fb2fd42b8297ac433bb33
- MD5 0ca64e7e04080c38c94d926289d761e9
- SHA1 708409c05930c6daba5022c1824099f576f14e88
- SHA512 cf4f6bc56a55cb91ec545b7e5779cf9ab8324039b10b69392728ebe90c0ef7e5d85ddd8d4ee551599b6b5d382119f9b53b1c458997f6215793987be8b599a4ce
- SSDEEP 384:C0q/+gK+k6K/igeYbXlhQNtS4zh9YyCbK92hpkQxfxT6C/1Pt3RjMpEQEEUypOA6:8+Lmeb1hu6kulhjMpEQjj3RA9tS8zR1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c6:51:97:10:e8:74:4d:01:aa:2d:15:a4:6a:cd:df:9f:ef:4a:44:b3:d4:dd:eb:09:bd:39:1b:ed:51:f8:0a:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
34478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 677b0a9b30c7d15122d1dfc4a4d923b3d9a9e77a22ca96fb7a2e8e052ae94398
- MD5 0a0f56e1e1b87d67f2b851bde83245b2
- SHA1 2dbc4990a9c2825549aa29b199cb5c1507fc8172
- SHA512 d7f585a35240d74bdb959f55f6f100c5b3b2805d9214e352aebb417076c808c7c78516dfa5d7cc9980cd5d4cc47354cff6de5133b88a21cbcd49041992d4200f
- SSDEEP 384:917MwUvGgq483YxwCajTGPeljwcEKtmyWL+pE/qmnngnQM2RqCZ49WVY9W1S/0LZ:P7MwUvhbxZPPcEMCLLerQ4DOS8Abzi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
31:3d:f1:87:62:73:89:9c:f7:25:9a:fc:06:0e:73:54:47:ba:95:5f:1d:97:4c:44:8b:f1:2a:20:3a:a4:dd:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
37214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72a57920fa3e50ec636bb7c2b8059d50e3b63bc08a61def87d7c5f9aa2a9670a
- MD5 24e9c5118c98360b46a78259dd338e1e
- SHA1 32526187252a17852c92d2e49a1171e3cc8b756b
- SHA512 b5bf7a073037c9c74fc883e498dd7ed44ff0312fe88509cb595a6d26a5a18e3d32fd4fcfca82bdbe4d7fe6aececec8e6a88e22c5bc7c899504f1fe100b531978
- SSDEEP 384:hydHvXSXRaROgMCXdXxaur1Qu7xd2Vmuh1C7f0ZWBxMaWYHqhQ5W820dHRN7gOoH:hydHsgrrOtZ1kf0S4awHPv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d5:e4:34:7d:44:4c:6a:5a:24:80:c2:02:82:6d:a2:7d:5e:e2:6a:5f:e6:11:c7:65:ec:8f:f7:67:01:fd:0c:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
21798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e694d831be320a955bef0dd7a146366f7df83ca638761873a6049a6cadb8217a
- MD5 0c8283e8077e5c711c6df905d9979be1
- SHA1 3e4e3ee73231e8b720819f09ed7070466c5a09d0
- SHA512 13ce43172a1678a21f06b825d93828c6f5b150b407c3725a69d14cc57b6a8befd1ac79ce80846a9950b4ce01d54306a4652d051ce23b90ab5aec34bd701fb661
- SSDEEP 384:1Ld24qTNiiO03B5fC4jsglwtnLP1WZl1ufy3WlRGwZwal9WS:1x24qTNi2Bpsh1PA1ufy8RGg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:6f:53:4f:ba:2c:d0:e6:3a:71:f7:e8:c3:4b:e1:d6:ef:89:dc:cf:3f:48:09:43:34:53:bf:12:b0:af:23:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
22478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 defcb23d09bcc8799f3803409180357213ea9cab8ffad0398590f8ef264bc9b2
- MD5 691a08b191e46e6f3e6e1af691c957f1
- SHA1 7d0f366fb6adef06080a442cae1e8cfcf3989d10
- SHA512 67dcb8aaef06f5ec8d1f3d0eef6b6709cc8ca760f8b092bf82c8bc45a9ace706b704919e50cbc477c1f64944926264388eb890df3383ee247c7c3cda39613f66
- SSDEEP 192:TvPWxa88fV+xls5hTqVzMrWi8WebtuVaVWQ4+WOOUqnajqgYWgEsWRr:TvPWxT8fulsDTqVwrWtZBlxBgE9r
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8d:0d:bb:6f:8e:ad:99:88:07:58:47:bb:9d:2d:48:06:71:6d:97:65:e1:99:c0:79:74:28:dc:a2:0a:ee:08:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 51aeca3ad52e04ffe16666de4f4787172da4b0be8e1b55df08c017a0a6cc5435
- MD5 febd827c819f9270086c0bca722fb517
- SHA1 d830c6ab92fbcd14fe8857ee5e983c36675fac93
- SHA512 cc410745deb71993f747bbad6688a9e8ebeeae9c85b5596e1d290035771d04383d916b8ae3ce0ced122e282855a3bde1f5e096d4c7b4f89e911df9687739b61d
- SSDEEP 3072:X1iM7DcD1Bi6shPHbyZHOS3cigkfxiHXA3YGFOrrJ+4+2MEm2GahiKzEsLqjYL82:X1iqDchBi6shPHbyZuS3cigkfxiHXA3+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e9:d2:15:0c:07:27:22:35:f2:28:e1:4b:88:bb:70:48:14:05:4b:4c:62:58:b3:4c:c0:fb:69:4e:16:be:39:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
133374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 84529e034fbe4ba10309fc35fc138e554fe5925118407f0a41825f10e36423b3
- MD5 53cea008238e3c8e64a3f3d1830928af
- SHA1 f97b121516cadea521aebcdaf6f0b87db15fe76e
- SHA512 69635321b7155f328a16fca68e0079d4764c2b22515becb61d1d490465890f5295680a811dba7ceac1186453c2eb5939b170afaf97c0f4ed5881966d1e2dda09
- SSDEEP 6144:/n3eXGESoVFIp8P7opW7mezPxn3AheTLhycfzemusLsOhBJUkr9Gew3:/38Ic7mezPxn3AheTLhycf6musLsOhBe
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9e:20:24:cc:50:98:91:23:88:75:e3:1c:dc:97:c2:dc:6f:b1:e6:38:10:99:d8:53:9d:67:51:1d:33:b8:d1:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
253302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
239KB
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7c3819ef51d95518b290d25271fa124edd7b9d6f9d08169784fbf1af4646dd79
- MD5 a30701f460ca1545361357c6fb473065
- SHA1 aac2153d96e1baf8b7897a26e127f6556d4d7eb5
- SHA512 6ec72200049236bee5d26b0da0b4f485c92c5f7bb1df10c7e6e6137f87b495cc5e3d5eda7ee486c4c59476f3d1cc23bc61dc53743187696f58e167294f7bec4e
- SSDEEP 1536:UYWNABq2zPkpp60MTBI9qHmYlTEd4po10sFyRnoDMg6vdQ3:xpEd4po10sFyRoDMg6vd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:0b:80:51:4c:f4:66:aa:59:cb:02:08:63:af:79:0f:65:2e:64:b7:0d:36:fb:30:b4:3f:c6:52:3d:bc:ba:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
49422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ef44b446c7e1cf578fd8d021a9a26e19b9294f432cc3ed3548ef4bb867f54f1
- MD5 192aa78dd0f1d992f7c081902c0b7999
- SHA1 6cd2b3333dc9067e72446d8cc36a98509e40276d
- SHA512 f8249c2f19df545252c709afc8fa01261c5d6c6b8d1f579ede8f753dd0de5ef91a1df7541cb6ef5db8edd3d5e63fc6e3402b0542f2044a7ba6c8529cf7edef9a
- SSDEEP 768:sU4Zo9be9NhkmnytF61PN2bi3rEHjUGPTtL+BOwbym6KY05CGlshBVaFk9ytLHyg:mZo9be9NhkkG05CGlrtLHyKJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
72:fb:74:c3:e4:ab:b2:61:d8:4b:d0:e0:5b:ee:07:07:1e:17:c5:52:27:cf:76:ed:cd:f3:bb:4e:18:b6:6a:99
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
39410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c248444b8b8a5d5379ad052ded1ef920217ebaf210386b4fb2ba232ae193036d
- MD5 0d295500c1debee57789be608c917dd1
- SHA1 2f0c2f685d433bfd3c0fcaf2abdca764f3be16fa
- SHA512 1ca86d96d074045dd68c15ed17b6a7bb0ca71af57e8d2ab92c251e6d6d147f22baa3603ff05b3fbfe22fdc56eee179ab375fe70920d83bbb53ea190dd6988b0b
- SSDEEP 192:VqQsRzZpZv0GRCoGG3HE5EZ1ZO+KWKzhW4GD5dHnhWgN7acWzWNQ2SkqnajKsWOx:KhZ7DsVWKzcdHRN7bQ3klGsWOx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e8:ab:ea:44:f2:d4:ae:27:15:01:0b:20:3f:c7:59:cb:b3:3a:66:4f:cb:72:70:87:1d:e6:76:3d:73:94:07:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 286e6d905e1a5b12738e615056546bbc92e7aaf4addf52ddfdc708a7c5a15bdb
- MD5 d3020a071bc3b4aea60ae161be072aeb
- SHA1 dacf33ccb6bc2d284741100eeccce55b36138d16
- SHA512 ebd2ba7ec0b9204ec036a335358a56ae5e60d2b41e7578e5ea5f00bb0734616524cb2cd67a5667dfc0ba3761602a6d7c2a7d41fc3654e5318ff73e4c022600a7
- SSDEEP 3072:cQR9MtbGzbtyHZ/I11DKdwWorcP4IVCKZuXsI7Ixfzw10DAH9Os5pk74V/eaiHEy:caiHEPsV5s8cDQd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
42:2b:e9:cd:aa:ac:8d:26:4f:38:b8:49:34:53:8c:a2:c9:af:44:d5:de:d5:a9:ad:b7:ee:11:6c:c4:68:54:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
142954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
132KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 781406c25c106361f90fc4abe0629680b5c08c45e5bd8ee710e25f812d49e644
- MD5 8c0515ff85b44c394236a8d254bf2757
- SHA1 ce1f2f38022f33366d4bc4df16291c3a69aed8cb
- SHA512 e3c264c77b39279fd0d3800bc950f9ad76c5e30246fceb3445a719d66d874e0d5db37318b65a346b76341b84bd24b5f3d4d742cacb6e653b2f7a6edf1bc81d50
- SSDEEP 192:6sasmise6iWviW82kW4GD5dHnhWgN7aQWt3NWe008Cw7qnajKsV9f:FyiUiWviW82HdHRN7UNp0uw7lGsV9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3d:c8:dd:be:08:4e:b9:34:33:b6:e4:f0:85:30:58:5d:e3:4e:36:95:7f:f5:b8:9d:dc:86:0d:72:6a:5e:56:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b8d2c2d0234fa63fdbe286ba8293aa7d78a2d729ad33f95e2c36419901d1a85
- MD5 58f6c835a8635c1059fc97069d36394e
- SHA1 108d3423490e9a3df7c5238a62b4bb5c2e8ed639
- SHA512 23cdb49ba907c94b68d269c739fb5bf5c126eeb1be68e86c088ee982f7b5bc2563ea7a71524881798c6609723f93fa19599ccede8f4ec0acaad166854521a253
- SSDEEP 12288:U2W9ZMl2QYjGkSxNaBuh5QHiYxIrAAr2r67aYasqiD/xVHc1N1lvqx1Rp0KrktVD:Y9mlu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ec:ac:e2:1d:d8:ab:37:4c:92:9d:d8:3b:d2:c0:26:2e:66:b3:bb:fd:ff:03:cb:b4:f6:53:a2:00:40:4f:79:6d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
460082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
441KB
Virtual Size
441KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7498b4520514ecb6b4b0457c1912354b350de63d445d096601f1b212c405a1a4
- MD5 a5e0cdbfdc705990c271fa90e7a565a0
- SHA1 354e2cdb353b3bd2a2a4078afa96cda5644e39f3
- SHA512 6a39a6b2e6958a845223f7b85a5ae0e2ea2929dade36c465edf696256458d0bc17e23cfb977a683b582cedf855564f15917a1aa6d910b3907762a990223cb8d4
- SSDEEP 192:U4bpDAsqqT5mt3pasMH497s88l5NW+vvW4GD5dHnhWgN7aQWsh4yVT/gqnajKsd:/GYVZHon4W+vWdHRN7j1IlGsd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9e:91:22:d9:48:d1:20:82:b2:ed:6b:a6:2c:4e:1d:fa:e4:c8:d1:6c:0f:46:68:f9:6b:83:dd:6b:f1:49:a3:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
12094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 317c32f1021019aa3c2944305f833528b23517a31919f9fc124d48f6a1eeb6ed
- MD5 7f1090f7a0d188fdd634460a924c9ac7
- SHA1 b9d26ad2e61aa979665cec45482a3ade8a40a6a0
- SHA512 5479200213d534e7a3b404d55d87c28b386f74420f133dc555eef00efe9047ddd2267396c6c37757d12202a2d706144d1ed4946846db11773d0d3711adc7d366
- SSDEEP 1536:Wlj3MzOilWWWuJlcqGHUQGgMhEo/qcREa:Wlj3MzOilWWWueqGHU5gMhD/qcR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
77:32:40:d9:04:cb:dd:b5:03:8d:31:6d:b9:98:4f:0a:ae:9d:31:3d:73:9a:9e:3a:75:68:61:98:2f:cf:c9:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
80018
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58b7d0411c68f23e19b077f18ea69b5b0ebb9427cd6199702d50ea670b1080a7
- MD5 d78bf28b4368cbc69ff281139edc75c2
- SHA1 6c7a84ec505bee36e6b99beff67534ff4bfdfdfe
- SHA512 6b9e5d0ad468ed9b3a365fc996d95ca04b1b14e066d93ab0815c88bfaaa4bf92c64815b27bddedb7fd80e47c6d61d3b8301029580b28b6472052c38d1804eb61
- SSDEEP 192:EshEwyxGjkDXYog32hHYjZPGdJ1BnLCYvgWSFPRW4GD5dHnhWgN7aQWdYqCE0qnd:Jyflg32hKPy2RWSFPsdHRN7iBClGs0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cd:5e:f1:53:b9:5e:bd:7d:00:9c:08:d8:62:b3:dd:83:85:d7:ba:9a:fa:6d:5b:c0:d8:d9:07:94:0b:d6:3e:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
16446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0937de9c885394e4d290ad0e4ebedca953cd2f9af69caf927bcb273a284c02b2
- MD5 9b7c3190f0d68e0bb14c45439d736d70
- SHA1 4f2eef29dbab369ccb4c64398096d4ac54aa8d6f
- SHA512 cc2838e55ba3c3502da67fe1f1db6eb30caa8cea1044d43f8f69842db6633f029a0efedd3e54d3e2c1e4a27944a2f1fd12a2468b6350d9c732c3eadc183cb1ef
- SSDEEP 384:0nvQOSFJ5KagyWl4XdHRN7U3P+CcWlGsS6MxC:qaFJkagBkU/wF0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ce:41:aa:36:cd:41:6a:55:6c:cc:e8:67:ed:ab:e3:97:5b:38:3c:70:90:4b:c7:f8:5a:47:f3:7f:39:d0:5e:9f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9787ef1870d74fad049b0049c77eca0c2c784a1f4e090d3ca972822f07c18e84
- MD5 9dfeeaf9b78964528cf9a8360bd3ba8d
- SHA1 560dc865b64da4c1eb639ac0c54b31b16a0076ea
- SHA512 bc53426519e26147d0befbcbf2954c9526b471d9944be3d2ac22eb4d26cb34161ecb5e04b2d1a4dd3c73d7a33abc3f69d8b9a61fcd802831c47dd5a1eec2552d
- SSDEEP 192:D73Z3rQ1W+v8WQd8W4GD5dHnhWgN7a4WRvix/r1Zk9gTFqnajT+4GNj1O:vlIHv8WQd/dHRN7pt/hl3+4G11O
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ac:07:47:b0:27:b2:e1:e9:bd:e0:76:b7:59:7e:78:81:dd:dc:85:e2:b0:ea:07:63:83:73:62:9a:e0:67:e5:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7d2db23a921d9dac8f64c56c798d8193a1ac7f75b90a05783d811644512e9fb5
- MD5 1c88913e3dd434b87c35fca1ded37f5c
- SHA1 b9761420347298efe4e7ee5d03927e55e9033e1c
- SHA512 7b6a99471a755d6ca21c50572d05f1fa7e8d953645e17157d25e24e876b4460ef77591f0e1db2830d4e633b5845924e3c7f91a537f1da7a56c2b30fa39971c4a
- SSDEEP 192:yLqRYB+qCZ6kiWLZRBJyhW4GD5dHnhWgN7aQWYYP+CjAWqnajKsSLeMx8:/RYAZ6kiWD6cdHRN7YP+CcWlGsS6Mx8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1b:0f:71:d3:e6:ab:c5:fe:a9:c5:11:59:55:71:69:c2:f7:42:f9:0e:f7:e7:5d:c4:fd:b1:d6:63:05:34:f5:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6aa07cc906098fa49b1b99f34f102ccc1b3203ff1bbcad1cc35d7492091e0131
- MD5 5e66e6bdfd957a212b59c96bb308e269
- SHA1 e6688330f1e64c587627dce8bdd847a565cf850c
- SHA512 5bb327ff171b204433edeea026080fc3fafd40094f8540ed564827e56918b31f219190770ba9f19075ed5769d0858d9ea4986fc14f902aa48e022df9cf083b93
- SSDEEP 3072:dMMX46evuMSNKWwIdNAjfWICLt+Zrv96kdohwk+k+:pXrmSNKWwIbqfWICLI9Vtdo+t
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b5:7f:4e:4f:27:84:c6:15:7c:f8:58:5f:be:23:4a:f9:50:7b:d7:38:de:5c:e7:e3:05:2c:55:46:77:71:50:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
107010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91f4cdf44cc27925e6cbe2f5d77b3cb51bf098fc0a1417a4285a1c15aba0e802
- MD5 d95b041fe2ae594e0126ba938114d26a
- SHA1 2eb2469b9dba4f7ca0389c5306ae917f2de817b0
- SHA512 f9bad006d1666adf38cfd71ce198fdaca377d851accceebeb4d33cca20bc3b6461751b2ec5c4b4a78893c370b9dfa8d1201a5db3af56ef0dca827a80254f319a
- SSDEEP 384:XKuLFLHuPWjofW9Q3dHRN78Q3klGsWOvl:PZHuujNUr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f2:f8:16:82:a2:23:6c:38:ae:58:a1:72:62:fb:1c:c1:79:a0:9d:78:17:2c:83:fc:1f:3f:5c:f4:d1:dc:98:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11506
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 faed547d11a939decbbc5862b5b6fdefa93185445ed93bccd3bce228477da65e
- MD5 b761569f8cc18ad8130362e2b6c8de4c
- SHA1 5af0cbeca6bb6204aa182e0822184c5e661fe946
- SHA512 07fcb28199299563883bbf0e54258dcdd0ea0f6ecf4f87daa9656d6b543dd72153a05842da469d0a7cdfe46475ec0b1923e5db19446ff3553c76cf51cba1e6c8
- SSDEEP 96:yMXXB7kiJkepUmAIUcV55Qf0bnCl1ZPL426n+:yMB7kbesIBV55QMuNT4I
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 404976c195381c357db162947695385bea34227e51a0b894ada02d54068d0ccb
- MD5 8531fe8fe02b10c060936379df9b5511
- SHA1 42d5c5b1b03d6dbec25011897cfcb9a59c11866d
- SHA512 1cf47e28d8757251078638239f4e3bad44ac7e258912aa21492899f9397b0b0a450172c95e1149ea05deb2a2cbf561737083f7bc00c46b7551a056cc316b39a3
- SSDEEP 1536:a5HdnAp5XO57F6BlAsZB1ZWoIoah9vQK65WPN:c6pxO57F6BlxZB1ZP5ah94K65W1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
78174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c769d966433209d3e3b29d57d567978c2b346c8bca340f2bb86c65fc74a05874
- MD5 10aea23b3ecc7e1b12f84569652edaea
- SHA1 a689660c45aa9e646297fede3fb19da4eba23c91
- SHA512 d027bb19b4e21ffc104bfb329777e653ea9f78bfe34232da8239627722afacce8d1ee9fc32c2936605a7e110f302dc29bb617e4cc3633be2060ea9af0a5e552e
- SSDEEP 96:nG5rYdEEwOYsl+ZlZejSd+SdctSdSZSd/Sd:G1+jhYsMZlZe2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e783576c5b0fc4c9f2408b0f123bf5a5d3b5e12e51864ab76a37f7f126a83a2a
- MD5 30419fabfe686990b2f81d6ec991a40c
- SHA1 74628f886c070e07ec701b93bbaf7dfc689400f1
- SHA512 42142a70e21b4e2db808aa4208e829363feefa2c35ff3cc50785dfbc14f6921e9c9773207e70729dd667adde0173dd6db183ccde3f56a50d296461e4e4c65aad
- SSDEEP 192:k8O6O7dbkkO7J05+YzVZp87oZd6Z7uQ2Fem1WR5:k8O6yQUVZp87V7uQCY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2881763aba334388b126047579721b2b2d0a384faaafc6aa94c1c3aee375ea6
- MD5 45bf03b71bca32f62877cfbfe99de4f1
- SHA1 b89a8822ca151457d2a85808dd2fc560c3ea0ad4
- SHA512 17fa1f99171aaca5c1924224b87f0cfd226b42abe48f58c22c76f591c575690e5b9628c9c04fd89f03ef70dbb2f9aedf43c887cd870eaffddbc2faaeac66e122
- SSDEEP 96:vCPx9FpnX6GsZcfdHfRu+Mrl72H8ItHPJJsy:vcx9zmqdHfRu392H82
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b23a9643c452978becfaabe05b435cdf17c25a45220697177057f3ffdd5e17e4
- MD5 7cda2dd418e425aa7e489cd77ddce5c9
- SHA1 d67fc28f170f1e0c6cb70214cc4039d52beb40c9
- SHA512 1e89a61a9b428b1a04e874f3e4bd0a5c48e76fc802785efdb7441eda3e56e54f4198662ba267f363518152fc563089b4db2ed11cb4d325e8bcdf11c2a112223c
- SSDEEP 96:9bpmzKgZ/eFx4eGEy5IbZPzj9I2FrhOEXgMZV4M2MTM732IUK9IOM3v5yQGstM4G:VTvLwfi5Qsz1JuoF92bm89
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a69f8b57c61ca58e34f25bcfb9b5cea2a8e0f28d047cdc7792e8cce977d6afcc
- MD5 f5bba435b8f88a1abb94442710c11cd7
- SHA1 ae8a7b56b99f0d236debdf712ac36233ba029044
- SHA512 77f0b1f029b6e80a5f26eaed07f1c9e7418ba0f45991e9c902c090fea2de1a696b3df63b9fac153b95e0e915e9825e8920e43b0c4143e6fc50a66798b9e1d36f
- SSDEEP 192:vRtHluZWfPtv1LhMseCmYVmGeVWnCBtSZeVI:vjHluqPtv1LhM8m8zlj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82ce93005b30403d89e5ab00c28923bd53b340d13e03d4a7ea8c7970dbc2f340
- MD5 487c993bd55bcdd0971830eb3babf474
- SHA1 c380a5775f7e0cc4b6d789a83eedacb0ff4ef0f6
- SHA512 01c7eee0b3ed83f36d773c4e4bdf91384cf6522c8fb1ab94092e0f233c6d0685ef7c525130b58998fd4f77589ff2d4f5a140e50172f6fa8bfa3ae38d1420140b
- SSDEEP 192:9UGTLaUej6zy3PI280YjEmpBDV34/3uR:9Uy2Uejuy3w2tena8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0275692cc47591ceb17a1969ef4de9e576c901b2680a7fca800603ec7f53d550
- MD5 354ca6290d7eca5cf74009786a12f052
- SHA1 d9cdd3b6f582b08414eda3ca454a5f79a38010f0
- SHA512 17eef5d8384b649e6a0f82e1fa4c3c032cc1144b58870a886184488d9f1c02d714b34abadb5f8405c1340adaeee5344095a060a4c51a286921077a5220a13287
- SSDEEP 96:F7sFq8UQr/MESCVDUGTvWMvW80K7QFdJAHlB8zdehv:tsFjJHtJLxv8zd0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 73b8b1178507e6598f36400c24e37d51052015f023051f5a82f07d92aa9f8375
- MD5 1fd63ec24844ec45dddc863df0c66966
- SHA1 62398815762cd5af8aec29f909a399f194dfeb09
- SHA512 829ff1d1cd02472f7574876e7d68c574341f7e409c770c4bc97cb2ef5caee87a65adfa6cd8538fec495b7c1e63468badc1a34314a718a7440e0e1b1222b96ef2
- SSDEEP 768:0DAe5Yc1BDanGSFTnPnInICnIhAd6dvEhVxO0yCvueZFAdnNflFE4fSN3yO7I+JQ:MjTj+v+jZUlFE4fAyO8+JHnuPE12
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e13fe47c8ffce578d5ab65564acfdfc6822387f46822ebed0d202a7cbe5a862d
- MD5 f1de23e72f00bb04dc356b42a61dc79e
- SHA1 e387495cf9f5fa987c72c8ff72b040b6c6c9bd37
- SHA512 48bf21d5a58fc7188f7b2b62a3ca17763e47b183b0a5e5d1ecb0310f316be6b0e8e4833c306101ddbe64be12e766f60dcba0b9964798cad0041b3fbac9be8bf2
- SSDEEP 192:yo8qYfd6p8g3Rhvh9dFcXwXQhiDJRAtqKpe:y5qTf5cAAhiDXhV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee96a1c884b9082857cc93e08bb96fa3253140cbfed36e5971e20c0e57d1d420
- MD5 9c2499bcf5e88f5ffb5898558d2efb9c
- SHA1 2eae0f0a31994d33e0d978092d81b97db9aeed12
- SHA512 7d11e2a79108b16688b3d09c0ad258e85eba47a437ea064ed0ff7015cb94a84c8b2662921815e65bce9b1020677b796509a5ed771ba4520cc559828ca0bc0934
- SSDEEP 48:6rVH1THOGKlGeJUesWml1CPpfYDE5FybWcEiZbTLliH4Be7:yTuGKlGzumlIPZKScn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e846a5a6932092722c73d369d664d4943781068a6183bed2ca32ecb4000d3417
- MD5 f2fea3ff057d30a87009faeb32f049e1
- SHA1 79bfd8bd028e86c27989271ccb8e65726d6566da
- SHA512 8403eff6fef06f4584704611712fd7e4cfeeb8ed1875b3e8a23b3db82360a2852f8d1073c0caeb2bca345187e15b5fb37e7a7cb7bcaa332434bcb6020546ab9a
- SSDEEP 96:L/ZxzykplGPXGvqAO+1ePu+pkUrWvhEXHLCwIWalAPTnXaPg:VxzbLGu2uGkw8hkZIWai7nJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2ead8d633fe869b1c8bb48e60242b656bdef1d3eedc6ce62b9b0f6f9ce02c2a
- MD5 039979a1ecf6d79796749fabba867010
- SHA1 1467314a7f8bc2a74b610a963bf18935bf6bcece
- SHA512 6b9ba3fca24ed9ba08d8ff7a9219beebe9749e5a81c90761b6fe9065f8524642d8abbf396d9aa68457a7d5f1dff331531ef73c56dcfde59ca8e3dc3673c5d74d
- SSDEEP 96:p4fsEEEgM6u+90+0qX9ljOcdNscxATGWUwdz1f1gIyeXEcWteZy4+lJls9AOn8U:p4kEEd7FXfjV4GWUwdz1fHpkRJ+9Am
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e15f504bf05a35af2e799d475982cbb7b29fdf01613effa6db0441100d3581cf
- MD5 ac6a6c515f624863fa0aab4541040c44
- SHA1 d85bd80ff1c80e28d02b91bb13a7d59610d4a3f5
- SHA512 97c320019ba32637428396ba69eb0be028adb664f8d1c6825ca130dceac85ed0da585812c2e6d669d13fa13d4e7b5237296704b9b4a7f69b6bf0a40f29b0fe65
- SSDEEP 192:WmGNfuHMGlMVLRTB5k3/vcqXP41xb+vaPP926/Xg:WmGNolMNRTw3/vcqerPg4g
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ru/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 590c235d1a86b650a5de19edb693b98f6e79eedc4cdc019d1b3356e8bbef318e
- MD5 2118e8fd26ced0b6fb15f7a698e55984
- SHA1 6a667613b7ec5b95b14561ac1c71f71aaf7192e5
- SHA512 cfbb146a479e7200f7d5f07171ab91c95d8051bd44bba1241029c9ea6f8506525be7fecb9e916a1e6a5f8a54cc56ed22d6420158c72361f3201923e482ea63e8
- SSDEEP 1536:j1G/OddXn0BA9eWtrWrLr0VfVAVcooChhI5DwKBFU4KqQpOqmOoWunD3BjloM0wx:j1G/Onn0BA9eWtrWrLr0VfVAVcooChhm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
69102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.CSharp.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f2d6355a6342326be621b89376f5c045d0e8ac9091f2ac5059c6ecb95a7d5c2b
- MD5 e386d20e48942ee0cbe837e26b06f8bd
- SHA1 5f52a52d22b1a07b327df13fca23ee8019878d21
- SHA512 3096c2fcdd68c7146b4801161c5804babcb1f44c34a963ff2139dd174d5614fd1592b0ef5b1d3a4b8afcde77da5e143f2dd00a3dbfdc67993716033a8f756dd8
- SSDEEP 384:NkpebAeG7Q1+RUGkzxZ+finWSA+RqUZV3YVulTiHwyVopewFuAYta247FirsEUWL:C8bAeSyHTQUZo86wyqr6miuRS8J0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9f:0d:c4:95:b3:e0:23:dd:f9:15:b7:7a:4b:c4:08:cf:f7:52:51:f6:c4:69:a3:e6:37:12:07:76:bb:6e:6f:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
24558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.CSharp.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a051b5648b09617889eba944f68288ebff49e7260fabcb157e57bd44efaab54
- MD5 1e70ee9ba6a84d2beda1fed44da5db78
- SHA1 2696a85a6c33b6b51ab77d2c6e45e792f97f060c
- SHA512 ddeb83c9e470fcf4a7635bbb41634516cd03737e70c99b53ee191d8736a15486a4fe687bb5d82ed6361a442fb5633f6dad65e58a6b0a80acc3aaa5e64f167bca
- SSDEEP 192:IkhM1FdKGqliuAoWkGuIJ+WGwmWzSoyWvLgVWQ4+WW7jjT6iBTqnaj5Wf71nqbu:xM1F3kAoWkQQWxfS/0Lg/TTXZltq1Uu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
04:b8:e4:19:7a:03:d9:08:dd:b7:19:54:27:46:ed:65:ec:1f:01:cb:fa:2d:f4:f6:30:9b:5c:2f:77:12:18:7e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.CSharp.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f1e59e65f4a4ad95cb5062ed21c5893d155ed5f56b458a9918d56f00db027c84
- MD5 461715fc45e60e4c2176a15ddd63d009
- SHA1 030be939b3c4420634a7b2bce90411243a96884e
- SHA512 38ef40df8faf3890a73b6d255479e22fcf61ad42cd64cd3f1604d79b2f8a5eb234c2e71a7f14bdf55fdf922ec4e3dc10255d60cfd08b9a26c41dfab34f2958c4
- SSDEEP 192:DtRjcLop8pQxoRfW3G8mJEWGgWzSoyWvLgVWQ4yWSzeD+RkvzSEqnajV18Wg:BRjcLMoRfW3YKWQS/0LgHzg+2zlx1k
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:6c:15:6e:f2:db:ee:26:b1:38:1e:ab:d6:c0:7c:78:50:6d:fc:be:00:81:be:9e:12:e0:57:c2:0e:10:9f:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
11446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.CSharp.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b5a09078755c1f2bcbb212fcb6e1485dc8edcc13f395c97449061d68fce096b
- MD5 1ef35c2fc6a82e0d95a98dc0b6b6173c
- SHA1 fdc44263759c7929cf27d118b5b5b81097aa74f7
- SHA512 870cbb0c497144aaef759dc3d18346a3fd555bfcd5f608cf05fa3bda77bc5fd437ed1fc18ffc90f197916ed0b3ad501d3c3574c5b08737471a2e779e99dd8693
- SSDEEP 6144:DpCAr/x9SLAwHI03rjkmt8PTZ7h+oMhD7PGZM8ane1:DpAVQUG7ae1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
06:f5:cd:4b:4b:99:6f:fb:c5:b3:19:de:2b:24:64:e6:6c:96:78:0f:e1:50:29:4c:2c:a1:11:19:53:26:1d:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
270566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
256KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8330babcd30a5b1cbad6f8dfbb637f1c37100023024a62c9450b847afa673f02
- MD5 fca249add6018d3b8038d2210d67bd24
- SHA1 dfb99e7c343ca13d529b1cb982ca65af787eada7
- SHA512 50883d3ce212d5a42dd9e41691a9fdb6d6dba0ba896efff55f2dfbce51802c0801993be66a55d44c181c84ef7ff32ef7ff249cc83c69f44c852a3b7b357fdf99
- SSDEEP 768:x3Z3fhHjhTtpzXkYRMebsI0Ec/pNHIO6N03Ma5QS0S84TAU:pht71XBNfBcRNvs03Ma5J014b
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
da:10:79:35:7b:dd:49:ec:47:17:b7:a2:e9:18:dc:3d:35:69:d7:79:4a:6c:01:92:69:32:13:47:56:12:1a:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
67318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.Scripting.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 326d952d82fa9c061111cc12ffb1e3e05b6defed3798b201ef14b58884337647
- MD5 eed09e5bf55bb85e6949be4c493f65c0
- SHA1 33c4e8a0926c69a261495acf70869903f97157b9
- SHA512 42fab9049e5298c0b5126cbf78479e802e7ed880459ed6167066f40c70af5383d558b8d1ef598a616d0cb3edc49cde56bd17e3db3239c02634c4eb9f4e85016d
- SSDEEP 384:cPIsFXe+uIR+NB4RnGo+NWP4eWtS/0LgYxDElpbc:cAJ+lWhtS8RDyc
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1c:01:50:c2:3c:7b:0e:40:8a:34:f0:00:18:83:60:38:9b:b9:ae:31:99:08:c9:3e:61:cd:63:ba:24:1a:9d:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
12930
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.VisualBasic.Features.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3042d145499fa8ba972a2867a09439d357951d725e69a512d262ad3f78d9014f
- MD5 1dcfbec511b7659f78cc77947ac2f1f0
- SHA1 cbd2e56a934664a3b675c268ea5cef0b4ccb70d6
- SHA512 5e538ee57093cd6d310d31e7cd8d2e25d603619a0b6523965a972e9c3b3d65d78b89e9f01b2a2781edb479d7e02b4d51f45818f5b92186336f3cf009f4c9a4b1
- SSDEEP 768:MfUz0gHqB4CyK9m/nzMCbCJZ0Adgejao5uUwODqTC3VcXIrDz2fk4PLhN5pdf/zh:IC3On/kppQq7gaEL0ouKrKj9N1z
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2a:8d:02:6d:87:28:90:3f:27:05:ae:9a:2a:dd:89:d0:56:7f:61:37:6c:b1:6a:32:db:41:a6:26:41:11:7b:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
97514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.VisualBasic.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da244399edcb5bde6256c1fb52e127146ca428a154db1c276c24808b375f5538
- MD5 a9bcb251e52b454849d7f48bbdf6db84
- SHA1 6dbe58a3a48dff960c3619b57fa6ee24155957dc
- SHA512 adc68c50b8da7576c8f2232990e11a76de4e79b97b492cd1725d61ef780a8c70a0e9c8c94088dcffff6dea608d0e235a570942e3f2cc96e14b6f355efd0605c7
- SSDEEP 384:w4kFvFvAqZguUiMO5gDg1Zx+BSotYzQzagjlj26UWOmEGJAWmBXS/0LgwnLbBloR:+h6YNUWkeIP8S8TLbCiC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f4:5b:1a:e4:3d:ed:d5:29:e1:ac:53:40:c9:2e:ae:7f:96:81:8e:80:d7:ec:d8:54:a0:3d:fb:7b:eb:7b:a2:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.VisualBasic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ba7b3db0f48bfc01128d919804435cc12dc57a1148764d7afae0663363abbc7d
- MD5 bf4b8fd4c345d342072369ac7b018af2
- SHA1 0f96dd061fc5a959bf34025a53a9a1c76ef1764e
- SHA512 c7bcf7e6f7978c5bab1b36769d9e14dd37828e6d83e1dfa31b1d20203e45fa9492bc8b1ff116a9f5321a349108db226c4df89cfee560ee6c281626842ae1853c
- SSDEEP 6144:zyUozI2C1/4D5JdmQQi+n3sJZyYb2oe0zI5RLvDutez97NCc3M:z4Hb2LjD3Cc3M
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c5:68:98:d7:0e:77:95:a7:cd:8c:8e:82:e4:ea:38:d1:48:78:08:6c:87:1f:1b:28:2c:55:94:10:6a:ac:75:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
286778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
272KB
Virtual Size
272KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.Workspaces.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49ff394d31ad59c1d250151b08c4ad609a4534a7814d51570e88d959b168368f
- MD5 b30a371a13ebdb3bf5a190367830688e
- SHA1 b40c2a507575d01d8f8a858511c89890d5dc17fb
- SHA512 1e557425800875b3717797c22070602f330dde7247fc7463b2d733d6feecc0277f85e7849f05710d86db67dd9c99385dfa127d32f9a0010e4e0d240c3760a581
- SSDEEP 384:2e/+gK+qjYf7qCQiYVuu01ls91GzB5wYFCLd1oxZxOrRNPdUKP1EqqAAwGr41KgI:R+LVZFZ4o1piKEqqJ36S8tAp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
69:3d:89:06:b5:63:56:73:29:06:29:7b:94:34:a7:ed:2b:f5:65:48:f8:91:28:51:9c:30:50:c0:aa:00:9e:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
29726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.CodeAnalysis.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 779779dfa9e0cfc3b7736c6f9d126e9e3e4611b5162412babaa50d1a667ee020
- MD5 2798dd53c8d978ce77498d5a95a0688c
- SHA1 8e5914bf34dbdc83491a9d0c836858506328b7b4
- SHA512 a6696fd6ecae14e5fdb0bdf0574a158e778c6fc87b6cc3873bc686e9c183276beddcb935161dbae45199b5ea61d40fa17efe2567f372b6f0eaa2772c8b4127ef
- SSDEEP 384:t17Mw9znUOYtxXkxumRZV83mTEc2xC6AVTeP0YBKRChn1hTFNsqGa+WVY9WzS/0h:/7Mw9znYJmRXETxC6cewC9TF9OcS85yk
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e9:6e:51:45:26:38:b7:fb:59:67:06:69:43:b4:47:47:d1:57:07:de:bb:31:41:b3:33:74:77:cb:08:2d:12:49
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:38:91:cb:4c:c7:11:fd:cd:05:00:00:00:00:02:38
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Aug 8, 2019
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
30206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.VisualBasic.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3d05dbfd438885968da803e17c183688b87fe201b8d7e6cb4b4e34270965fc3
- MD5 cc1d43597c66435487f9581096bd689d
- SHA1 193a0b60d256386a1dcf6dcfd7e90fbbfdd7ff4d
- SHA512 35e7a128a86d15d03c932a8e9d985f160a08a3baf639d7349949f0f49f12af3de856c66fce28423cfd5ef0ed251910c7361d2cb8a1ea00d3ab2b843102b84225
- SSDEEP 384:jy7WXSXRaRmIaXdXxaR04Qujyv2Xjmhk/4NGaWYHqhQ5W82ldHRN7swuAzXulGs3:jy7jI70XMK8Dhzr
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
81:1b:99:2c:60:9a:8f:23:ce:9f:aa:c8:3c:a4:a3:4f:c7:f8:8f:fd:1f:13:d3:c1:92:05:44:9b:7c:29:83:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
20446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.VisualStudio.Composition.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 92f74a6b60815d6c53b66f7f9626dd7e9fff222d60fb4f44b5d625f898a7c2d2
- MD5 260111ff25ee72416a783a6a4433d422
- SHA1 5921c0f8c0cfbcc4cbf9647b67d685df1f243b90
- SHA512 21902bbbc40186c146a7c95797ec9335b4872acf7189b24d6095e378618bf69ced58910404f52c43b8c558046bf405974028dd5b9541b68d52296f6bb69a538f
- SSDEEP 384:8dXqrZReMB2zcYOhtnNP1WZl1ufy3WlR2wwaol9tY5Gx:kXqrZReMsM7PA1ufy8R2HjmGx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c0:46:e7:80:bf:92:3c:2b:2a:53:48:65:66:e3:c1:43:38:07:5d:2a:a8:e6:f0:60:ca:54:15:f9:b4:17:fe:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:7c:9a:ce:7d:90:5e:d2:b7:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
19758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/Microsoft.VisualStudio.Validation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 843863e835fe7bed1d24cccb2a2c6c7afc72cb42ce56886e183ad2f02f500661
- MD5 44c01a6b804d5016056de50372970be3
- SHA1 821fdb3b7dc499ffb2bcd8b49323f86138d09934
- SHA512 fd5b420ffc5afa8587c21de765127dcad89630c1b7654b17782f6921af23d781e7f65f81d0bdec4cc23524265042f72b62674ca0dcdbb2483b35231e7fa4d3c5
- SSDEEP 192:OWzhl88fUxls5hLzMrWcL8WebtuVaVWQ4+WI5JLqnajqgYWgEsWIrQ:OWzo8fClsDLwrWcIZNjLlxBgEMrQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
90:fc:4d:01:28:a3:66:84:9d:08:90:3a:93:1f:81:6a:e8:b8:48:ad:d0:65:b5:26:10:c9:6a:f9:13:28:2e:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:e7:c6:62:c9:46:f4:a9:7f:00:00:00:00:01:4f
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 17, 2016 - Feb 17, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
4
Entry point
10462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/PresentationCore.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5c760da63c47b3bf3668ff58891f10b90856184218d54786d738c799dd66d923
- MD5 a5ed2b0031e7334a0565afb6d8af7987
- SHA1 a1785e2993f004833a7447e675d63dca266f3d73
- SHA512 840a49fe415d862a56805a8c88dd3280bb3c6e4f999888b2bde02343119ca9ef88e946e2bc105801c2eab0ffc947be15bbeb8d002946156cd72a5ee341acc69c
- SSDEEP 3072:Li1i461iIdNG56nnZgzoC8pe8bdmM7CKwoKJI:21in1ioNG56nnZgzoCmesp7rw
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
32:d3:8d:7f:4f:bb:9c:27:fa:a4:a7:88:e4:a4:ac:ec:45:a1:e6:1f:1a:84:03:8a:10:8e:c9:72:88:78:44:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
102542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/PresentationFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e093e0ead0137e4f564f18f3df31eeb4b50c40ea3bf828e66ba673e6d2f6c5e8
- MD5 6249c40109af7597b82044e8db11d2c8
- SHA1 aa611c4c50f18759d3b5077032bde9d40ed228cf
- SHA512 82586243051150fc9b4a5945de375337f875ba3146deac700fab714d5cc3f33d27db9dbac3251777bdf576e65698395a1da05eda693d72a12cde80fca1bc86ba
- SSDEEP 3072:ysCZ6PPOABqfZnI3n9K97Q/qCgDwmpjNghwtXKf1j0wPSV+Xybvn7q9f7D/hzwze:ysCZjDwmpjNghwtcxPSCy/KDD/hzwvWU
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fa:6a:d0:38:98:f4:3f:7a:32:4c:f3:0c:aa:8a:eb:01:c1:3d:f8:35:d1:82:8c:9a:28:be:0f:68:8a:a3:6a:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
191438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
179KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/PresentationUI.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22fd82d17deb1adf8d7c79a6de638c771e124715fe9e47fa3d06e4b379266e18
- MD5 6cdfc23d9f9cae20eb5910728966c7e2
- SHA1 6e07cee5bb481ed40a52101015e1719f38eb8c23
- SHA512 38741468385b178f41f9feef5ec7a00f050cf9df292ce54ede4a81e05dc6039dd914d0cc9a0a4eec04d80aaa1e1f3acb6c7ccc7d4c6c3c494b0fb8983bdd016c
- SSDEEP 768:9/aiExFCKwFlMQGTrMeY25zn1rg+8qet9dTaiBuQ2vpXdIC13dV4K:5aiExFrMeY25zn1r58qet9dTaiBuzvpR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:94:44:84:d4:6f:7b:ef:fc:0c:df:91:14:b2:67:26:da:6d:e3:e1:38:31:fc:63:0d:f2:7c:53:e8:44:aa:3f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
39726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/ReachFramework.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2a9a080df673b3e54a23b04edf18f66d4aced42e046da8380001b430c8f446e7
- MD5 00eed549b6a2af9709803cc3802c1ceb
- SHA1 61855f457da7526670ce712c80a0eae29a1c605b
- SHA512 9a40b4eb1d86676defbd9c8953bac5b2b612fdefb52f9428bd374b4425cae408c27f3f51d543d118dd16e6587a3bcb48800e0cf44e6460a4834ad823d0fd97c9
- SSDEEP 768:Qgwqonge1WfeM12BssVPj2s38amEjcR+wHufpOS1C7pmFlih4NMJsqAFGXGDU7Pq:Dwqonge1WfeVrSsqvjjK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
71:be:f8:bc:35:6c:88:53:e4:51:b3:2f:4f:78:7f:1c:c5:b4:2f:2d:5c:72:aa:08:59:4c:68:5b:dc:dd:74:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
33770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/System.Windows.Controls.Ribbon.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46c73c86feaf13e7d95b71574a552a20f37ce06c859c9f0aa8d5cf3fbb1f6f57
- MD5 1b412950b5021a60a30f012d9a711d0d
- SHA1 0d27cac3fec80aae2ca4359b1e77b58dd1a9c716
- SHA512 93e00e5773378f26ae2c785147e39cb305113d592193cd64266d022abb492a076882b953f817a5eb704b9484e795bca7fc19850e26f059221d57561b88540f28
- SSDEEP 192:woRzCdM92EYE+11BFLjTWKzaW4GD5dHnhWgN7aQWkToIVFWSqnajKs4sY:Xh0M96/FLjTWKzpdHRN7XToiFWSlGs4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9e:e1:92:32:98:03:39:69:8e:e5:a2:8e:b5:ce:0b:23:f0:7c:2a:ca:dd:07:3c:ff:c2:56:d6:ad:da:2c:e8:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/System.Windows.Forms.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e49eb4761eae38fdc69a87956446cca72c9c6c43948fe9a7787c9b5785b42169
- MD5 321d235adbee71201b326f5229858998
- SHA1 5018a8844d3510fc06cf55c97a73bc6763255b91
- SHA512 e364653d5b6409fb076af3c4cfb9acfec454f10981502cde9ff151bed301b2a282ad695098a87491b4141cfbae3726d14c55eba2c7940231ef59c7188a673222
- SSDEEP 3072:pUR9MtbGzbtyHZ/I11DKdwWorcP4IVCKZuXsn8ZCelODipOJ7OfvNZuXw2Giz5hz:pTz5hQt7imrQgF7vJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
59:42:21:c4:81:33:0c:73:1c:d1:18:f5:01:b3:da:9e:b2:44:3f:e4:14:d1:ac:a6:af:ee:08:71:64:b5:ab:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
131498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
120KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/System.Windows.Forms.Primitives.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a314fd17f5c2993ecd590db4c479d04cf46bd90e0d3f714857004407c20cef9c
- MD5 e9a7d379cceec051638c4001cb0b9dd4
- SHA1 4fbe30504951460226654f9efc948f26af4707bf
- SHA512 e121f2268d7c7449c77f740f6629fba949674e503be08dc57b67e32804169d43f1449518f3bb8183dfb348afea27e711c25b99a383ced165df51a5d9d72925a2
- SSDEEP 192:SPwphAWWviW828W4GD5dHnhWgN7acWv6iz9bsE4eAqnajKspZZ:GwpKWWviW82/dHRN7A6iz9pJAlGspv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b4:ca:9b:57:4a:0b:f4:06:61:d6:d1:7f:d7:2b:e8:f6:f2:8d:75:09:a6:5e:80:2d:65:58:04:2a:1f:9b:43:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 432cca40b74a9b28c67b39d1f529d1b0873ba1a0de6bc133a68d353a0f8bd02c
- MD5 b1e9d4f0b73a29679e6200703650eb26
- SHA1 2544019ebd251df09b20e65d2c76d6470181b5e6
- SHA512 fb695822ce303445947e91a2d14cceb566c2ffa7dbee8ea2df7a0910c9d7b6f91c76adc42df424c67b00a08694c66d6ab98d8743353096a1051a010448cdd6c9
- SSDEEP 6144:U2WY0ZaM+VHLGAjrJovA1r9bOWj1f15EjBGuL/iWqzt5g9LX0OLLS1gEWDCg0:U2WY8edSmQJ0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
27:21:bd:7d:87:3f:84:47:62:b1:39:5e:7d:d7:18:58:60:65:14:40:2c:40:a7:45:89:dd:53:8b:88:b1:86:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
347602
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
331KB
Virtual Size
331KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/System.Windows.Input.Manipulations.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f2fda23277801e3d359e429378a4d477f74cc16b099a69c8e540df2f84ceafd
- MD5 e496c1fad164484e6c23bedda3d5e54f
- SHA1 78a8771e760fad37f6d4f067a1c3d2460b85ff4f
- SHA512 4e7eaf4f45e93952a1d5b16c6248553431e68da8df014828c2451874ddb2cd687d5b07ebad40172726fa73772acb795f581a626677f28348b652053da93fa7b1
- SSDEEP 192:4qumzTun5wukG+SBUeW+vhW4GD5dHnhWgN7aQWPibsE4eAqnajKspChK:5RyiyBLW+vcdHRN7aipJAlGsp8K
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6a:37:8c:2c:a2:7c:db:c6:7c:a3:3f:a9:29:64:f2:08:22:29:ad:e0:5e:ff:0b:6c:c6:45:e1:c9:f9:43:0d:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/System.Xaml.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf6eeccafefedf36e0d1a1a1487b69f8404cb3359b4d66f18dec069a28fa1a7f
- MD5 bc798c3070d58dccee953d7afe786f6b
- SHA1 ce290733f8f997fb899f37095c8a17621601e731
- SHA512 b2d95189db973e5396429c08f653fbff96982290cde4c4e5bd6530a94291096258ba77a69f75040733f72f604eae5ab412413c6dd28f2cdf33e2a55dd064acbf
- SSDEEP 768:2SoOCK7e4zOJhcy8rtkyLHpXiCoNShlqB49QjRwgywcyj+5G:vljzn7mGqB4aiFbyjuG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
61:71:01:0d:65:6d:58:ce:95:fd:5c:f6:61:b3:77:95:97:67:68:81:d0:2b:ad:6f:98:96:56:19:c3:b3:c1:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
60410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/UIAutomationClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22fb6431b5043e10cad997da534ec03077bbbef427f6a44a0e82c61d422d5d29
- MD5 869a39ae5a2f836fd80d3b41c9440cdc
- SHA1 98ba183a1e7878a9306c2ff2cc22131580189049
- SHA512 9f58c14bcae5d7e17c786fa067a395a827bc4de2dc5a955da5cd6ea8c37ba5bf57dbdf28e16596a898f55662957463ab22875a740f622e7f486cb3cd28d686df
- SSDEEP 384:fTf6X3FbjowB5xWSFPedHRN7A8GlGse3:r6X35j7cAK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9c:fc:84:9c:21:4c:73:4b:2b:98:38:2b:99:32:fd:47:6c:43:76:20:c4:0e:33:c6:4e:1f:5d:29:19:74:bf:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
14854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/UIAutomationClientSideProviders.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25584b96ea9203eaa5d79e6341f77e89b248e9bed7cca834eb7077d58c3c57b3
- MD5 48a59552a0c3470fe9ffd559a4d61378
- SHA1 4619699c15b1e4d0f90405102df4c933810173d2
- SHA512 67123897e49017f52872db882d2cc16009bebc355f03fae89a73b915ed7d1107439a849813e55d9cfb9ec9fa8fbf27e6fbe8e6f0f055f7878c93aba19e889641
- SSDEEP 192:Elwh2Z+c+koyV35znQxjWl4XW4GD5dHnhWgN7ayvWWW71Zk9gTFqnajT+hGNUiZ/:p+3+xjWl4+dHRN79W7/hl3+hG+iZ/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
19:dd:53:1e:8e:84:b7:a4:39:9a:ac:6a:b1:d6:5a:03:4f:f9:e6:3d:8a:66:19:46:5b:8c:3f:74:65:b6:71:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
15986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/UIAutomationProvider.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ae16682d51295cb5e6a242ebd21f8229715b8e6afc1b7ae219bbeb809067389e
- MD5 d48130bc9bf7803a8a030cee6a873341
- SHA1 db8b19fd9259b206bb7eae724bc2b6e2e5d360f6
- SHA512 cf578c97d0301df5998d39657129f29ac09cc709ee04404f33e7e12c89cade9ee757a4f39e046beae8edfb94cc623499cf84d509128a56335672a2223e3634f2
- SSDEEP 192:aN3n3rHWjiWQdNCW4GD5dHnhWgN7aQWklVVT/gqnajKsd:O37CiWQdfdHRN7Zn1IlGsd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
aa:04:0b:8a:a3:7f:bb:70:82:f4:2c:87:13:f1:54:7a:09:7d:ab:66:81:1e:ee:77:66:70:35:09:30:24:ec:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/UIAutomationTypes.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 87bd6b40692e42344f357e391389b62c0d20fc5b2d4af6fa31ac6cec162ef3f1
- MD5 4b0a7dc1baad9de9157599cdec866c4e
- SHA1 a79596b156893997b82c600f366062b721a5d539
- SHA512 581a765b4b584e4acd7718ba981dbba2696bc388d1e23ca7aa7295ac81c6d3076768b9c73093399ae5db68cfccf9b9a5ce345b6c6f8714d1db5bcf1b7648bda3
- SSDEEP 192:tWZGDSBVeytAWLZRBJy9W4GD5dHnhWgN7aQWPS008Cw7qnajKsiomJ:QZGDpxWD6odHRN710uw7lGsi7J
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
94:08:18:e6:7b:ec:7e:ba:d0:5d:cc:6e:10:14:c6:f0:50:d4:75:d2:1a:f8:2d:06:1e:65:cf:4b:36:da:9d:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/WindowsBase.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6014994e8f558f3626aec11bab16331a3fad734fa0c04290f18092b55373f335
- MD5 e3f6970ce746786deaa21a3c233a275e
- SHA1 bb2aec26d3c42025d414990c6dceba28461ed43c
- SHA512 4f66b55ec439ed266bb793cd1e1ca06ea6fe81e71ad3cda8f6a839cbcc4a053f5b3e08a086d8bc0fc0d93e00a44a332f9af9c7481b1c66855b9e1daacbe3ecaa
- SSDEEP 1536:XD1tTzijdUQ5ZscbIcvw+XRBoMz3TsJF0FhVHtAdtLszrU:X/ejdUQ5ZscE+zzjsJFyHtAdt4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5f:d3:d5:e7:be:4f:e4:3a:f4:43:ec:ae:b1:1b:0e:a1:7c:14:cd:cd:39:ab:60:7c:7e:01:71:de:c9:a1:e1:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
80402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/WindowsFormsIntegration.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb6e64b9cf109566cb6fbeb6b1d5392fba6398f855f119318084a33375a138f4
- MD5 a61a4124f37e6a54abb95bc2dd1b4776
- SHA1 ef151ed5578dcee2c02db9ec509af7dc9e4cf515
- SHA512 de069cfe9407cab0e7382dbefad06e2e1a050407c734e0a3ae53a223fb61d650d3a1baac769309543ffd14bbe8d39d485aaef0cc9eddf72fcb001e7f698445da
- SSDEEP 384:YKeLHLH5IW4zSoW9Q9dHRN79xfVlGsa9ja:OrH5l4IC949a
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ad:22:f4:d6:cd:fb:76:c1:16:2a:c8:44:a4:95:a2:52:97:1a:40:94:52:5a:17:58:88:86:a5:91:ce:db:c1:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
10946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f465a3bf5444d907ac7c3aebbb01e3c4838912d5cc67db16c5ad3ba109720abf
- MD5 183fb10356a4ca5b495aa8929ff7fa16
- SHA1 b7f83530a89cc538374edca36326d45ad90db44f
- SHA512 3fbe84fd5fdaf76108e85316452dc11ac4c9abb57d0ac4c8cbc7bfbd1f402829f17116f9ccd59bc4a3bd4b43f9e5a7d69f658d5c7ac0f9e577027f05119beb3b
- SSDEEP 96:OfPzB7kiJVTXysovK+l9CBvTCl1ZPH6n+:OfLB7keT4vK+l9CBv2Nb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 09765e2da07ac749fe81c7a4aa9f1c1699e6bed494037589889d871ef425124e
- MD5 e4020b62411b0133b94c6a6de44326d7
- SHA1 49c2f4c91e775f3d845018c98f2c2325bcaa93cc
- SHA512 a30ab581b383900edc655c1597427ee82668f56e01da7ac0912926032b0a8691bb8df12dfb1a43b3fbfc26c6f033be732a690b2079af8cf9896b883349639d1e
- SSDEEP 1536:AHdnADKFZjKS4Bdiw9II5QgLSIdVkUXyORUPobmpT:A62FZjKS4Bdiw9IEXSIdVkUXyORUPoC1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b18a9a5cdac7475ad69050054423831b3acf00e7e60af1f84ff4716672307cde
- MD5 68da04711b423fa9bf17bbea70cda328
- SHA1 4e17b575f887e26bacaa9e3f6d44b9219b9e61c2
- SHA512 7697ae2532db45e50ed328b10cad205396381b9e96bf381085e23e54ef02063ca04416c2101a88e8c2cee858a159312bb5108a76c527938f922e29bc61116137
- SSDEEP 96:SSY5/BdE6wfK0LlTml+ZlRjSd+SdctSdSZSd/Sd:BYBLBX0EMZlR2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b95f3081f972159ac699d2b5acd7a36530a3c7a2795a14d8a98653ec1a9a8123
- MD5 4a57da8cb836290c6a8253c9ab094cd9
- SHA1 5e8dc3d432491010d970db7e596be9f179a85b33
- SHA512 35f339e494e892718e99dadeaf303c07903b41da5f6a965b821cf9d8619f8f7031a9366960f2a582cbbb1944e5b58e5cf0cc537e34900bb581ae4b879194ed38
- SSDEEP 192:P6O7XxNbchfhorv3MwmyJIHTfXszsDoKY/K2F1OWR:P6AxRv3Qym4l0Cp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f4e5e492f97a89391e0cd25fdf409c74fbdb64480fae94b50a75c008af588490
- MD5 c07776840b1c653a3467813b47bfc599
- SHA1 6d5ca3cfbb5930be7838ef44c227709f1ca57c28
- SHA512 34e3629d67617fb6ad966bb426abf60fe1128e6a739eab2562333bc43b791d8ebd873ebe5bab1d6222d8865203ef63b249198b07b9ab2070a54e94e2b1ac5095
- SSDEEP 96:nbTqx9TV2HMs1zBImrk2tM1ll72k6tHPJJsy:bTqx9MtImrk2tM1l92k8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 02ee440c80fc7ce426e342cfb19133b8704558684341ca23b76829c5af1a2ddf
- MD5 919be88e6af1cdb5d1ae4068270a42bd
- SHA1 2f8a7c058b2e6ec5194f124afe6b31293cb9450f
- SHA512 29157dc6d2227bee7ea7a2f673c8af214b9ee64365b090883348581624cafb0f70d8f437bcd55410d47763bc73f80f21e0c56ae0fc9a5deb147bdef09fc21954
- SSDEEP 96:JnlsypmzKKS/Q/Qe2RwUWqMceeeLjmcpqC5+wFDG4SEDSqgISEsGOwZl724kTJP9:PFUnpFmGJZ924o
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da3e319a8dd47baa54ea0fb0c7048a67aab25d56ffde84695f0cca07d5e171e1
- MD5 53a0b3f05779c7a41c761997f374f19e
- SHA1 3285b349ddc09a58ce666600ab25c289573c063b
- SHA512 a8369792c309000bf163e623d36141c2d060c967a76ef5458eafe3cdaa2e701e67ae0f183cb37b6fa348fe51119747285670682111b8816d6f90494cc1fb125c
- SSDEEP 96:XQi+6tOKdYQlDpZb/iGt10aBFeRQh99wUF0zBNMzVa1VbvX910BulX9SlwGbzS+U:AiRtRN1bneOR9y7lX0SGbU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ceb96409cab199ac696365e50f2bdea0500dc475b36c903bad8c2b8a29aac00d
- MD5 bf508a2dfe5726cd6b61f63ac17d3000
- SHA1 afe45fae46020b4e240909fdb395da77d80607c4
- SHA512 1ba3359a64c3a3bcd4923c9cb22f1a158cffa76e54db33f64ba94a7d558cf3fa6dd869a83a13b1802734fbc0c5246bd32d5b1e845c33867ecedc70386cc1c58a
- SSDEEP 192:mUGTLaFHdmStbR+IzeuaGao8ZaVhj5/W4/G2:mUy2FHdmwbRXzxaGyZWfD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 904e6b760ec277bfc1ea1b11eeafa9315bd83d622b4f61b0f61574c407527d1c
- MD5 cced8a86133a886e3bbe0cb1dbce2508
- SHA1 8de5ac7c45376581e03c4ecb2f1a3a5edbb4fae8
- SHA512 9b411d96e27a677b5f921ac133699eafcda8b4413140f9f3b4339ed436708fd5f8021e62be2cf58ccfe1b25fe945b135927308e6a7e32224031de6970841cd05
- SSDEEP 96:Cae9vsFqerQoepoVqf5cvWpvWhctXVw2BtLM4VlBFjehv:CPvssz20qA3tjfM4VvFj0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e32c32cfef3985922e6debf573db5a7b199681c1414fe53abccced1bc526c012
- MD5 be566527d4fbb514112c6f968d02732f
- SHA1 08eac08f5e56b608cee691ede31b9a8eb6744e47
- SHA512 b0706f5f4f39b96695192e4ee9995af23f28791741d043cd7697ab7c3260ff5ee170f222f4028ce29d09054aa8c127e7800306e696c78b94a2c3ec0632d61253
- SSDEEP 768:qhdDAe5Yc1ZDInbSfdnrn5nI6nIp7wT583HKzgd+UtkYVJCfYB0sKkTCPiYneiXt:qvjTi48TTEYB0sKUCKYzfy9KRuzY1V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 44999cc9e5edbe0a95409d3422d1f9ecdd4655ebf53f11774965b62ce9a03b86
- MD5 c35ad5896309d4c463eec98491bcd989
- SHA1 a23fbb2ea1344e939cc4fbc3dedf6f5ecd490490
- SHA512 35e0b6ed0c64ff76dc62a3dac93d9df53ceb6cf4abcd2d98fe9e80aafa0571a23b8b8299bbd835000675e64277ec17dfa66f09376c16d08dacdbb8d268d8c547
- SSDEEP 192:9hto8qo9u6FK7EjnQ9mXBxkYJt4f6UWM2kqKe:9j5qxeHL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ae99def01af3131b5d77ecdaa8a2649dc4a4495a2e775ec7977340e461e5039c
- MD5 06eafd6ad3ea190f53e37e35dd9317d4
- SHA1 db438bc067aed0b233fb000fc11443b51fc2d95c
- SHA512 1ae7c62f6d948477b5a06b19c7bd20104440b1fd411772ca7e11a3ffd80fc439a85042f59189aef94bd75ec5e7a630e16657ab06073cb9e3120dcbb84a43aed8
- SSDEEP 48:6KtsMHOGKlGthUj8rl1CPpfbDwJFybWQEiZbTLliH4Be7:NTuGKlG4orlIPTSQn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7968f0c1dfda1ba80d67746e4ef84ee3877ea4bae41c846924dc55fbdaf4b81
- MD5 81591cc1774dc9e1afba95904227b064
- SHA1 0d6fb2fb84e4183c49cf2ef132a62383be434bea
- SHA512 c42729781cd11044cfbc910a4e4f169aa9ff1a73ec7523a5f2ba9a2697d94e1746e3a09c5d1cdd651a103d977a5b307a8f7952d616138553232f1e1527cb29cc
- SSDEEP 96:8qxzy7dlGPvvQACHHQrMVj+TnV56pdcN+25qUqU/Rhgo157lAP9ZaPg:8qxz8nGN1kjcnV5EdcE25PPp9157i1n
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 aadeeb940729bf6a9320d158c87c37ff9a42a020c1abfccc601effe6f9e8c3e1
- MD5 542acf434be12f1532a5921e8f478921
- SHA1 7bd23e6cec645d260bb9904d7f9d00ec77dd105b
- SHA512 33982a4067c4f793cbe01ebef94f01d6b2ae8db4934c0b7dd07a65cc95c6734ab51670d41f2248462c1e48bc51d435e4469738957939cc666cbaebc1bf683fd7
- SSDEEP 96:SgOEivCPu+VG2IblAKAMNkB5klIvFy46+DJgfKW/MgRlsc5Xn8U:SfEiviVElA9klId1DCKWP+c59
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e941778d74091bbbd77e98d4da27a6be3701ecfb46158744c0b28479379b7855
- MD5 db73c8f2de6c3ef73e2a8380e281ad23
- SHA1 1fafec1c963899b08e74f24706d0475d49a04ec7
- SHA512 905e14d5d7ab187458918c65f150425df49be623591b9cb24ccc4b5a0ccf924017b1013d01f71b1f2eace72f37784773e56efd9a21ddabda6a4261b93c36568d
- SSDEEP 96:h7h8XdCA4gLKS6+T9KvMTdJFWQ+9OVNtz0ztcglJgXQVruyQzlIP3L/EHvY:dh8/mUtvS9OVgthieiyQzaPb/Eg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/tr/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72f91c59b05a789dfab69ff834f4fc32fdc97f21d9f6615f4be9aabd48dd041f
- MD5 62cd08da24f93c97991530fd0d3e8f92
- SHA1 2f663b90b723f70087e688e097057d1e30c54fae
- SHA512 d6646a04d3694535869af4ae48a51b65d1c3b2c8a07c78b07b4bdd14465fa5ebe826da619342dd1ddc1361da30e2297281f78e660554e4bb2fd1e905ce05589b
- SSDEEP 1536:w1G/OdjOO3dtepAr8rar2VJVFV6oWdhmIXRPkBPUpj+ywzOVW9ZYXXhLD0c8bBTV:w1G/OFOO3dtepAr8rar2VJVFV6oWdhmL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/ucrtbase.dll
- IMPHASH ea37cb467ea2adb2b776c1c8c105007c
- SHA256 3cac979f82a0508b24da2a63d2654b89883cc11062b77b3c2d6fdce7e74c5db7
- MD5 26b7a7657e4b9658a1dc94439d35dd96
- SHA1 6b2df3b21b3edab21918e8c0181c2f6638187743
- SHA512 d90855210e7e7db7334471b3d81bd8e8916c5fc98647083d567e1a1741b9c18b26e5ec397579bc19f76a15ea440c82fe0d9e36f4cc90ccae3e57b11a4c00dd39
- SSDEEP 24576:HWidEhqcKIqMOKgf4GokSnxqZbCU3lYU+6ozo+mSY+mcvIZPoy4PmcLloi:2idEhqFBMiExqZiY4o+mSpmcZT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b9:c2:54:e6:71:6a:c6:a1:38:05:f4:1d:69:1f:51:69:43:c9:49:0a:48:0a:f7:4a:f9:76:bd:84:ab:73:5c:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
176496
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ucrtbase.pdb
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetErrorMode
SetLastError
GetLastError
RaiseException
api-ms-win-core-heap-l1-1-0
HeapReAlloc
HeapCompact
HeapSize
HeapWalk
HeapValidate
HeapAlloc
GetProcessHeap
HeapQueryInformation
HeapFree
api-ms-win-core-processthreads-l1-1-0
GetStartupInfoW
GetCurrentProcess
TerminateProcess
TlsAlloc
GetCurrentThread
GetCurrentThreadId
TlsGetValue
ExitProcess
CreateThread
CreateProcessW
GetExitCodeProcess
TlsSetValue
ResumeThread
TlsFree
ExitThread
GetCurrentProcessId
api-ms-win-core-libraryloader-l1-1-0
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
FreeLibraryAndExitThread
GetProcAddress
FreeLibrary
GetModuleHandleW
api-ms-win-core-synch-l1-1-0
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
LeaveCriticalSection
api-ms-win-core-debug-l1-1-0
OutputDebugStringW
IsDebuggerPresent
api-ms-win-core-processenvironment-l1-1-0
SetCurrentDirectoryW
FreeEnvironmentStringsW
GetStdHandle
GetCurrentDirectoryW
GetEnvironmentStringsW
GetCommandLineA
SetEnvironmentVariableW
GetCommandLineW
SetStdHandle
api-ms-win-core-file-l1-1-0
GetFileSizeEx
SetFilePointerEx
CreateFileW
GetFileType
FindClose
FindNextFileW
FindFirstFileExW
GetFullPathNameW
GetDriveTypeW
GetFileInformationByHandle
GetFileAttributesExW
SetFileAttributesW
GetDiskFreeSpaceW
GetLogicalDrives
CreateDirectoryW
SetFileTime
RemoveDirectoryW
LockFileEx
UnlockFileEx
FlushFileBuffers
SetEndOfFile
DeleteFileW
WriteFile
ReadFile
api-ms-win-core-string-l1-1-0
GetStringTypeW
WideCharToMultiByte
CompareStringW
MultiByteToWideChar
api-ms-win-core-localization-l1-2-0
LCMapStringW
EnumSystemLocalesW
IsValidLocale
GetACP
GetCPInfo
GetUserDefaultLCID
GetOEMCP
GetLocaleInfoW
IsValidCodePage
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-sysinfo-l1-1-0
SetLocalTime
GetSystemInfo
GetLocalTime
GetSystemTimeAsFileTime
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-console-l1-1-0
GetConsoleMode
SetConsoleCtrlHandler
WriteConsoleW
GetConsoleCP
SetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
ReadConsoleW
ReadConsoleInputW
PeekConsoleInputA
api-ms-win-core-handle-l1-1-0
CloseHandle
DuplicateHandle
api-ms-win-core-file-l1-2-0
GetTempPathW
api-ms-win-core-namedpipe-l1-1-0
PeekNamedPipe
CreatePipe
api-ms-win-core-timezone-l1-1-0
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
api-ms-win-core-file-l2-1-0
MoveFileExW
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
api-ms-win-core-memory-l1-1-0
VirtualProtect
VirtualQuery
VirtualAlloc
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
Beep
api-ms-win-core-rtlsupport-l1-1-0
RtlUnwind
api-ms-win-core-interlocked-l1-1-0
InterlockedPushEntrySList
InterlockedFlushSList
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_Cbuild
_Cmulcc
_Cmulcr
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_Exit
_FCbuild
_FCmulcc
_FCmulcr
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_IsExceptionObjectToBeDestroyed
_LCbuild
_LCmulcc
_LCmulcr
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__acrt_iob_func
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
__control87_2
__current_exception
__current_exception_context
__daylight
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__doserrno
__dstbias
__fpe_flt_rounds
__fpecode
__initialize_lconv_for_unsigned_char
__intrinsic_abnormal_termination
__intrinsic_setjmp
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__commode
__p__environ
__p__fmode
__p__mbcasemap
__p__mbctype
__p__pgmptr
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__processing_throw
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__setusermatherr
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__strncnt
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__wcserror
__wcserror_s
__wcsncnt
_abs64
_access
_access_s
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_base
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_configthreadlocale
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cputs
_cputws
_creat
_create_locale
_crt_at_quick_exit
_crt_atexit
_crt_debugger_hook
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_d_int
_dclass
_dexp
_difftime32
_difftime64
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_eof
_errno
_except1
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execute_onexit_table
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flushall
_fpclass
_fpieee_flt
_fpreset
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_base
_free_locale
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwrite_nolock
_gcvt
_gcvt_s
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_osfhandle
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_stream_buffer_pointers
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_timezone
_get_tzname
_get_unexpected
_get_wide_winmain_command_line
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwc_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapchk
_heapmin
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_is_exception_typeof
_isalnum_l
_isalpha_l
_isatty
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_itoa
_itoa_s
_itow
_itow_s
_j0
_j1
_jn
_kbhit
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_lfind
_lfind_s
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_loaddll
_local_unwind2
_local_unwind4
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_lock_file
_lock_locales
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lsearch_s
_lseek
_lseeki64
_ltoa
_ltoa_s
_ltow
_ltow_s
_makepath
_makepath_s
_malloc_base
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsdup
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l
_memccpy
_memicmp
_memicmp_l
_mkdir
_mkgmtime32
_mkgmtime64
_mktemp
_mktemp_s
_mktime32
_mktime64
_msize
_nextafter
_o__CIacos
_o__CIasin
_o__CIatan
_o__CIatan2
_o__CIcos
_o__CIcosh
_o__CIexp
_o__CIfmod
_o__CIlog
_o__CIlog10
_o__CIpow
_o__CIsin
_o__CIsinh
_o__CIsqrt
_o__CItan
_o__CItanh
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__Strftime
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__Wcsftime
_o____lc_codepage_func
_o____lc_collate_cp_func
_o____lc_locale_name_func
_o____mb_cur_max_func
_o___acrt_iob_func
_o___conio_common_vcprintf
_o___conio_common_vcprintf_p
_o___conio_common_vcprintf_s
_o___conio_common_vcscanf
_o___conio_common_vcwprintf
_o___conio_common_vcwprintf_p
_o___conio_common_vcwprintf_s
_o___conio_common_vcwscanf
_o___daylight
_o___dstbias
_o___fpe_flt_rounds
_o___libm_sse2_acos
_o___libm_sse2_acosf
_o___libm_sse2_asin
_o___libm_sse2_asinf
_o___libm_sse2_atan
_o___libm_sse2_atan2
_o___libm_sse2_atanf
_o___libm_sse2_cos
_o___libm_sse2_cosf
_o___libm_sse2_exp
_o___libm_sse2_expf
_o___libm_sse2_log
_o___libm_sse2_log10
_o___libm_sse2_log10f
_o___libm_sse2_logf
_o___libm_sse2_pow
_o___libm_sse2_powf
_o___libm_sse2_sin
_o___libm_sse2_sinf
_o___libm_sse2_tan
_o___libm_sse2_tanf
_o___p___argc
_o___p___argv
_o___p___wargv
_o___p__acmdln
_o___p__commode
_o___p__environ
_o___p__fmode
_o___p__mbcasemap
_o___p__mbctype
_o___p__pgmptr
_o___p__wcmdln
_o___p__wenviron
_o___p__wpgmptr
_o___pctype_func
_o___pwctype_func
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___std_type_info_name
_o___stdio_common_vfprintf
_o___stdio_common_vfprintf_p
_o___stdio_common_vfprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfwprintf
_o___stdio_common_vfwprintf_p
_o___stdio_common_vfwprintf_s
_o___stdio_common_vfwscanf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsprintf_p
_o___stdio_common_vsprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vswprintf
_o___stdio_common_vswprintf_p
_o___stdio_common_vswprintf_s
_o___stdio_common_vswscanf
_o___timezone
_o___tzname
_o___wcserror
_o__access
_o__access_s
_o__aligned_free
_o__aligned_malloc
_o__aligned_msize
_o__aligned_offset_malloc
_o__aligned_offset_realloc
_o__aligned_offset_recalloc
_o__aligned_realloc
_o__aligned_recalloc
_o__atodbl
_o__atodbl_l
_o__atof_l
_o__atoflt
_o__atoflt_l
_o__atoi64
_o__atoi64_l
_o__atoi_l
_o__atol_l
_o__atoldbl
_o__atoldbl_l
_o__atoll_l
_o__beep
_o__beginthread
_o__beginthreadex
_o__cabs
_o__callnewh
_o__calloc_base
_o__cexit
_o__cgets
_o__cgets_s
_o__cgetws
_o__cgetws_s
_o__chdir
_o__chdrive
_o__chmod
_o__chsize
_o__chsize_s
_o__close
_o__commit
_o__configthreadlocale
_o__configure_narrow_argv
_o__configure_wide_argv
_o__controlfp_s
_o__cputs
_o__cputws
_o__creat
_o__create_locale
_o__crt_atexit
_o__ctime32_s
_o__ctime64_s
_o__cwait
_o__d_int
_o__dclass
_o__difftime32
_o__difftime64
_o__dlog
_o__dnorm
_o__dpcomp
_o__dpoly
_o__dscale
_o__dsign
_o__dsin
_o__dtest
_o__dunscale
_o__dup
_o__dup2
_o__dupenv_s
_o__ecvt
_o__ecvt_s
_o__endthread
_o__endthreadex
_o__eof
_o__errno
_o__except1
_o__execute_onexit_table
_o__execv
_o__execve
_o__execvp
_o__execvpe
_o__exit
_o__expand
_o__fclose_nolock
_o__fcloseall
_o__fcvt
_o__fcvt_s
_o__fd_int
_o__fdclass
_o__fdexp
_o__fdlog
_o__fdopen
_o__fdpcomp
_o__fdpoly
_o__fdscale
_o__fdsign
_o__fdsin
_o__fflush_nolock
_o__fgetc_nolock
_o__fgetchar
_o__fgetwc_nolock
_o__fgetwchar
_o__filelength
_o__filelengthi64
_o__fileno
_o__findclose
_o__findfirst32
_o__findfirst32i64
_o__findfirst64
_o__findfirst64i32
_o__findnext32
_o__findnext32i64
_o__findnext64
_o__findnext64i32
_o__flushall
_o__fpclass
_o__fputc_nolock
_o__fputchar
_o__fputwc_nolock
_o__fputwchar
_o__fread_nolock
_o__fread_nolock_s
_o__free_base
_o__free_locale
_o__fseek_nolock
_o__fseeki64
_o__fseeki64_nolock
_o__fsopen
_o__fstat32
_o__fstat32i64
_o__fstat64
_o__fstat64i32
_o__ftell_nolock
_o__ftelli64
_o__ftelli64_nolock
_o__ftime32
_o__ftime32_s
_o__ftime64
_o__ftime64_s
_o__fullpath
_o__futime32
_o__futime64
_o__fwrite_nolock
_o__gcvt
_o__gcvt_s
_o__get_daylight
_o__get_doserrno
_o__get_dstbias
_o__get_errno
_o__get_fmode
_o__get_heap_handle
_o__get_initial_narrow_environment
_o__get_initial_wide_environment
_o__get_invalid_parameter_handler
_o__get_narrow_winmain_command_line
_o__get_osfhandle
_o__get_pgmptr
_o__get_stream_buffer_pointers
_o__get_terminate
_o__get_thread_local_invalid_parameter_handler
_o__get_timezone
_o__get_tzname
_o__get_wide_winmain_command_line
_o__get_wpgmptr
_o__getc_nolock
_o__getch
_o__getch_nolock
_o__getche
_o__getche_nolock
_o__getcwd
_o__getdcwd
_o__getdiskfree
_o__getdllprocaddr
_o__getdrive
_o__getdrives
_o__getmbcp
_o__getsystime
_o__getw
_o__getwc_nolock
_o__getwch
_o__getwch_nolock
_o__getwche
_o__getwche_nolock
_o__getws
_o__getws_s
_o__gmtime32
_o__gmtime32_s
_o__gmtime64
_o__gmtime64_s
_o__heapchk
_o__heapmin
_o__hypot
_o__hypotf
_o__i64toa
_o__i64toa_s
_o__i64tow
_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__isatty
_o__isctype
_o__isctype_l
_o__isleadbyte_l
_o__ismbbalnum
_o__ismbbalnum_l
_o__ismbbalpha
_o__ismbbalpha_l
_o__ismbbblank
_o__ismbbblank_l
_o__ismbbgraph
_o__ismbbgraph_l
_o__ismbbkalnum
_o__ismbbkalnum_l
_o__ismbbkana
_o__ismbbkana_l
_o__ismbbkprint
_o__ismbbkprint_l
_o__ismbbkpunct
_o__ismbbkpunct_l
_o__ismbblead
_o__ismbblead_l
_o__ismbbprint
_o__ismbbprint_l
_o__ismbbpunct
_o__ismbbpunct_l
_o__ismbbtrail
_o__ismbbtrail_l
_o__ismbcalnum
_o__ismbcalnum_l
_o__ismbcalpha
_o__ismbcalpha_l
_o__ismbcblank
_o__ismbcblank_l
_o__ismbcdigit
_o__ismbcdigit_l
_o__ismbcgraph
_o__ismbcgraph_l
_o__ismbchira
_o__ismbchira_l
_o__ismbckata
_o__ismbckata_l
_o__ismbcl0
_o__ismbcl0_l
_o__ismbcl1
_o__ismbcl1_l
_o__ismbcl2
_o__ismbcl2_l
_o__ismbclegal
_o__ismbclegal_l
_o__ismbclower
_o__ismbclower_l
_o__ismbcprint
_o__ismbcprint_l
_o__ismbcpunct
_o__ismbcpunct_l
_o__ismbcspace
_o__ismbcspace_l
_o__ismbcsymbol
_o__ismbcsymbol_l
_o__ismbcupper
_o__ismbcupper_l
_o__ismbslead
_o__ismbslead_l
_o__ismbstrail
_o__ismbstrail_l
_o__iswctype_l
_o__itoa
_o__itoa_s
_o__itow
_o__itow_s
_o__j0
_o__j1
_o__jn
_o__kbhit
_o__ld_int
_o__ldclass
_o__ldexp
_o__ldlog
_o__ldpcomp
_o__ldpoly
_o__ldscale
_o__ldsign
_o__ldsin
_o__ldtest
_o__ldunscale
_o__lfind
_o__lfind_s
_o__libm_sse2_acos_precise
_o__libm_sse2_asin_precise
_o__libm_sse2_atan_precise
_o__libm_sse2_cos_precise
_o__libm_sse2_exp_precise
_o__libm_sse2_log10_precise
_o__libm_sse2_log_precise
_o__libm_sse2_pow_precise
_o__libm_sse2_sin_precise
_o__libm_sse2_sqrt_precise
_o__libm_sse2_tan_precise
_o__loaddll
_o__localtime32
_o__localtime32_s
_o__localtime64
_o__localtime64_s
_o__lock_file
_o__locking
_o__logb
_o__lsearch
_o__lsearch_s
_o__lseek
_o__lseeki64
_o__ltoa
_o__ltoa_s
_o__ltow
_o__ltow_s
_o__makepath
_o__makepath_s
_o__malloc_base
_o__mbbtombc
_o__mbbtombc_l
_o__mbbtype
_o__mbbtype_l
_o__mbccpy
_o__mbccpy_l
_o__mbccpy_s
_o__mbccpy_s_l
_o__mbcjistojms
_o__mbcjistojms_l
_o__mbcjmstojis
_o__mbcjmstojis_l
_o__mbclen
_o__mbclen_l
_o__mbctohira
_o__mbctohira_l
_o__mbctokata
_o__mbctokata_l
_o__mbctolower
_o__mbctolower_l
_o__mbctombb
_o__mbctombb_l
_o__mbctoupper
_o__mbctoupper_l
_o__mblen_l
_o__mbsbtype
_o__mbsbtype_l
_o__mbscat_s
_o__mbscat_s_l
_o__mbschr
_o__mbschr_l
_o__mbscmp
_o__mbscmp_l
_o__mbscoll
_o__mbscoll_l
_o__mbscpy_s
_o__mbscpy_s_l
_o__mbscspn
_o__mbscspn_l
_o__mbsdec
_o__mbsdec_l
_o__mbsicmp
_o__mbsicmp_l
_o__mbsicoll
_o__mbsicoll_l
_o__mbsinc
_o__mbsinc_l
_o__mbslen
_o__mbslen_l
_o__mbslwr
_o__mbslwr_l
_o__mbslwr_s
_o__mbslwr_s_l
_o__mbsnbcat
_o__mbsnbcat_l
_o__mbsnbcat_s
_o__mbsnbcat_s_l
_o__mbsnbcmp
_o__mbsnbcmp_l
_o__mbsnbcnt
_o__mbsnbcnt_l
_o__mbsnbcoll
_o__mbsnbcoll_l
_o__mbsnbcpy
_o__mbsnbcpy_l
_o__mbsnbcpy_s
_o__mbsnbcpy_s_l
_o__mbsnbicmp
_o__mbsnbicmp_l
_o__mbsnbicoll
_o__mbsnbicoll_l
_o__mbsnbset
_o__mbsnbset_l
_o__mbsnbset_s
_o__mbsnbset_s_l
_o__mbsncat
_o__mbsncat_l
_o__mbsncat_s
_o__mbsncat_s_l
_o__mbsnccnt
_o__mbsnccnt_l
_o__mbsncmp
_o__mbsncmp_l
_o__mbsncoll
_o__mbsncoll_l
_o__mbsncpy
_o__mbsncpy_l
_o__mbsncpy_s
_o__mbsncpy_s_l
_o__mbsnextc
_o__mbsnextc_l
_o__mbsnicmp
_o__mbsnicmp_l
_o__mbsnicoll
_o__mbsnicoll_l
_o__mbsninc
_o__mbsninc_l
_o__mbsnlen
_o__mbsnlen_l
_o__mbsnset
_o__mbsnset_l
_o__mbsnset_s
_o__mbsnset_s_l
_o__mbspbrk
_o__mbspbrk_l
_o__mbsrchr
_o__mbsrchr_l
_o__mbsrev
_o__mbsrev_l
_o__mbsset
_o__mbsset_l
_o__mbsset_s
_o__mbsset_s_l
_o__mbsspn
_o__mbsspn_l
_o__mbsspnp
_o__mbsspnp_l
_o__mbsstr
_o__mbsstr_l
_o__mbstok
_o__mbstok_l
_o__mbstok_s
_o__mbstok_s_l
_o__mbstowcs_l
_o__mbstowcs_s_l
_o__mbstrlen
_o__mbstrlen_l
_o__mbstrnlen
_o__mbstrnlen_l
_o__mbsupr
_o__mbsupr_l
_o__mbsupr_s
_o__mbsupr_s_l
_o__mbtowc_l
_o__memicmp
_o__memicmp_l
_o__mkdir
_o__mkgmtime32
_o__mkgmtime64
_o__mktemp
_o__mktemp_s
_o__mktime32
_o__mktime64
_o__msize
_o__nextafter
_o__open_osfhandle
_o__pclose
_o__pipe
_o__popen
_o__purecall
_o__putc_nolock
_o__putch
_o__putch_nolock
_o__putenv
_o__putenv_s
_o__putw
_o__putwc_nolock
_o__putwch
_o__putwch_nolock
_o__putws
_o__read
_o__realloc_base
_o__recalloc
_o__register_onexit_function
_o__resetstkoflw
_o__rmdir
_o__rmtmp
_o__scalb
_o__searchenv
_o__searchenv_s
_o__seh_filter_dll
_o__seh_filter_exe
_o__set_abort_behavior
_o__set_app_type
_o__set_doserrno
_o__set_errno
_o__set_fmode
_o__set_invalid_parameter_handler
_o__set_new_handler
_o__set_new_mode
_o__set_thread_local_invalid_parameter_handler
_o__seterrormode
_o__setmbcp
_o__setmode
_o__setsystime
_o__sleep
_o__sopen
_o__sopen_dispatch
_o__sopen_s
_o__spawnv
_o__spawnve
_o__spawnvp
_o__spawnvpe
_o__splitpath
_o__splitpath_s
_o__stat32
_o__stat32i64
_o__stat64
_o__stat64i32
_o__strcoll_l
_o__strdate
_o__strdate_s
_o__strdup
_o__strerror
_o__strerror_s
_o__strftime_l
_o__stricmp
_o__stricmp_l
_o__stricoll
_o__stricoll_l
_o__strlwr
_o__strlwr_l
_o__strlwr_s
_o__strlwr_s_l
_o__strncoll
_o__strncoll_l
_o__strnicmp
_o__strnicmp_l
_o__strnicoll
_o__strnicoll_l
_o__strnset_s
_o__strset_s
_o__strtime
_o__strtime_s
_o__strtod_l
_o__strtof_l
_o__strtoi64
_o__strtoi64_l
_o__strtol_l
_o__strtold_l
_o__strtoll_l
_o__strtoui64
_o__strtoui64_l
_o__strtoul_l
_o__strtoull_l
_o__strupr
_o__strupr_l
_o__strupr_s
_o__strupr_s_l
_o__strxfrm_l
_o__swab
_o__tell
_o__telli64
_o__timespec32_get
_o__timespec64_get
_o__tolower
_o__tolower_l
_o__toupper
_o__toupper_l
_o__towlower_l
_o__towupper_l
_o__tzset
_o__ui64toa
_o__ui64toa_s
_o__ui64tow
_o__ui64tow_s
_o__ultoa
_o__ultoa_s
_o__ultow
_o__ultow_s
_o__umask
_o__umask_s
_o__ungetc_nolock
_o__ungetch
_o__ungetch_nolock
_o__ungetwc_nolock
_o__ungetwch
_o__ungetwch_nolock
_o__unlink
_o__unloaddll
_o__unlock_file
_o__utime32
_o__utime64
_o__waccess
_o__waccess_s
_o__wasctime
_o__wasctime_s
_o__wchdir
_o__wchmod
_o__wcreat
_o__wcreate_locale
_o__wcscoll_l
_o__wcsdup
_o__wcserror
_o__wcserror_s
_o__wcsftime_l
_o__wcsicmp
_o__wcsicmp_l
_o__wcsicoll
_o__wcsicoll_l
_o__wcslwr
_o__wcslwr_l
_o__wcslwr_s
_o__wcslwr_s_l
_o__wcsncoll
_o__wcsncoll_l
_o__wcsnicmp
_o__wcsnicmp_l
_o__wcsnicoll
_o__wcsnicoll_l
_o__wcsnset
_o__wcsnset_s
_o__wcsset
_o__wcsset_s
_o__wcstod_l
_o__wcstof_l
_o__wcstoi64
_o__wcstoi64_l
_o__wcstol_l
_o__wcstold_l
_o__wcstoll_l
_o__wcstombs_l
_o__wcstombs_s_l
_o__wcstoui64
_o__wcstoui64_l
_o__wcstoul_l
_o__wcstoull_l
_o__wcsupr
_o__wcsupr_l
_o__wcsupr_s
_o__wcsupr_s_l
_o__wcsxfrm_l
_o__wctime32
_o__wctime32_s
_o__wctime64
_o__wctime64_s
_o__wctomb_l
_o__wctomb_s_l
_o__wdupenv_s
_o__wexecv
_o__wexecve
_o__wexecvp
_o__wexecvpe
_o__wfdopen
_o__wfindfirst32
_o__wfindfirst32i64
_o__wfindfirst64
_o__wfindfirst64i32
_o__wfindnext32
_o__wfindnext32i64
_o__wfindnext64
_o__wfindnext64i32
_o__wfopen
_o__wfopen_s
_o__wfreopen
_o__wfreopen_s
_o__wfsopen
_o__wfullpath
_o__wgetcwd
_o__wgetdcwd
_o__wgetenv
_o__wgetenv_s
_o__wmakepath
_o__wmakepath_s
_o__wmkdir
_o__wmktemp
_o__wmktemp_s
_o__wperror
_o__wpopen
_o__wputenv
_o__wputenv_s
_o__wremove
_o__wrename
_o__write
_o__wrmdir
_o__wsearchenv
_o__wsearchenv_s
_o__wsetlocale
_o__wsopen_dispatch
_o__wsopen_s
_o__wspawnv
_o__wspawnve
_o__wspawnvp
_o__wspawnvpe
_o__wsplitpath
_o__wsplitpath_s
_o__wstat32
_o__wstat32i64
_o__wstat64
_o__wstat64i32
_o__wstrdate
_o__wstrdate_s
_o__wstrtime
_o__wstrtime_s
_o__wsystem
_o__wtmpnam_s
_o__wtof
_o__wtof_l
_o__wtoi
_o__wtoi64
_o__wtoi64_l
_o__wtoi_l
_o__wtol
_o__wtol_l
_o__wtoll
_o__wtoll_l
_o__wunlink
_o__wutime32
_o__wutime64
_o__y0
_o__y1
_o__yn
_o_abort
_o_acos
_o_acosh
_o_acoshf
_o_acoshl
_o_asctime
_o_asctime_s
_o_asin
_o_asinh
_o_asinhf
_o_asinhl
_o_atan
_o_atan2
_o_atanh
_o_atanhf
_o_atanhl
_o_atof
_o_atoi
_o_atol
_o_atoll
_o_bsearch
_o_bsearch_s
_o_btowc
_o_calloc
_o_cbrt
_o_cbrtf
_o_ceil
_o_clearerr
_o_clearerr_s
_o_cos
_o_cosh
_o_erf
_o_erfc
_o_erfcf
_o_erfcl
_o_erff
_o_erfl
_o_exit
_o_exp
_o_exp2
_o_exp2f
_o_exp2l
_o_fabs
_o_fclose
_o_feof
_o_ferror
_o_fflush
_o_fgetc
_o_fgetpos
_o_fgets
_o_fgetwc
_o_fgetws
_o_floor
_o_fma
_o_fmaf
_o_fmal
_o_fmod
_o_fopen
_o_fopen_s
_o_fputc
_o_fputs
_o_fputwc
_o_fputws
_o_fread
_o_fread_s
_o_free
_o_freopen
_o_freopen_s
_o_frexp
_o_fseek
_o_fsetpos
_o_ftell
_o_fwrite
_o_getc
_o_getchar
_o_getenv
_o_getenv_s
_o_gets
_o_gets_s
_o_getwc
_o_getwchar
_o_hypot
_o_is_wctype
_o_isalnum
_o_isalpha
_o_isblank
_o_iscntrl
_o_isdigit
_o_isgraph
_o_isleadbyte
_o_islower
_o_isprint
_o_ispunct
_o_isspace
_o_isupper
_o_iswalnum
_o_iswalpha
_o_iswascii
_o_iswblank
_o_iswcntrl
_o_iswctype
_o_iswdigit
_o_iswgraph
_o_iswlower
_o_iswprint
_o_iswpunct
_o_iswspace
_o_iswupper
_o_iswxdigit
_o_isxdigit
_o_ldexp
_o_lgamma
_o_lgammaf
_o_lgammal
_o_llrint
_o_llrintf
_o_llrintl
_o_llround
_o_llroundf
_o_llroundl
_o_localeconv
_o_log
_o_log10
_o_log1p
_o_log1pf
_o_log1pl
_o_log2
_o_log2f
_o_log2l
_o_logb
_o_logbf
_o_logbl
_o_lrint
_o_lrintf
_o_lrintl
_o_lround
_o_lroundf
_o_lroundl
_o_malloc
_o_mblen
_o_mbrlen
_o_mbrtoc16
_o_mbrtoc32
_o_mbrtowc
_o_mbsrtowcs
_o_mbsrtowcs_s
_o_mbstowcs
_o_mbstowcs_s
_o_mbtowc
_o_memcpy_s
_o_memset
_o_modf
_o_nan
_o_nanf
_o_nanl
_o_nearbyint
_o_nearbyintf
_o_nearbyintl
_o_nextafter
_o_nextafterf
_o_nextafterl
_o_nexttoward
_o_nexttowardf
_o_nexttowardl
_o_pow
_o_powf
_o_putc
_o_putchar
_o_puts
_o_putwc
_o_putwchar
_o_qsort
_o_qsort_s
_o_raise
_o_rand
_o_rand_s
_o_realloc
_o_remainder
_o_remainderf
_o_remainderl
_o_remove
_o_remquo
_o_remquof
_o_remquol
_o_rename
_o_rewind
_o_rint
_o_rintf
_o_rintl
_o_round
_o_roundf
_o_roundl
_o_scalbln
_o_scalblnf
_o_scalblnl
_o_scalbn
_o_scalbnf
_o_scalbnl
_o_set_terminate
_o_setbuf
_o_setlocale
_o_setvbuf
_o_sin
_o_sinh
_o_sqrt
_o_srand
_o_strcat_s
_o_strcoll
_o_strcpy_s
_o_strerror
_o_strerror_s
_o_strftime
_o_strncat_s
_o_strncpy_s
_o_strtod
_o_strtof
_o_strtok
_o_strtok_s
_o_strtol
_o_strtold
_o_strtoll
_o_strtoul
_o_strtoull
_o_system
_o_tan
_o_tanh
_o_terminate
_o_tgamma
_o_tgammaf
_o_tgammal
_o_tmpfile_s
_o_tmpnam_s
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_ungetc
_o_ungetwc
_o_wcrtomb
_o_wcrtomb_s
_o_wcscat_s
_o_wcscoll
_o_wcscpy
_o_wcscpy_s
_o_wcsftime
_o_wcsncat_s
_o_wcsncpy_s
_o_wcsrtombs
_o_wcsrtombs_s
_o_wcstod
_o_wcstof
_o_wcstok
_o_wcstok_s
_o_wcstol
_o_wcstold
_o_wcstoll
_o_wcstombs
_o_wcstombs_s
_o_wcstoul
_o_wcstoull
_o_wctob
_o_wctomb
_o_wctomb_s
_o_wmemcpy_s
_o_wmemmove_s
_open
_open_osfhandle
_pclose
_pipe
_popen
_purecall
_putc_nolock
_putch
_putch_nolock
_putenv
_putenv_s
_putw
_putwc_nolock
_putwch
_putwch_nolock
_putws
_query_app_type
_query_new_handler
_query_new_mode
_read
_realloc_base
_recalloc
_register_onexit_function
_register_thread_local_exe_atexit_callback
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotl64
_rotr
_rotr64
_scalb
_searchenv
_searchenv_s
_seh_filter_dll
_seh_filter_exe
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_SSE2_enable
_set_abort_behavior
_set_app_type
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_fmode
_set_invalid_parameter_handler
_set_new_handler
_set_new_mode
_set_printf_count_output
_set_purecall_handler
_set_se_translator
_set_thread_local_invalid_parameter_handler
_seterrormode
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_sopen
_sopen_dispatch
_sopen_s
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_statusfp
_statusfp2
_strcoll_l
_strdate
_strdate_s
_strdup
_strerror
_strerror_s
_strftime_l
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strtime
_strtime_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_swab
_tell
_telli64
_tempnam
_time32
_time64
_timespec32_get
_timespec64_get
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_tzset
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_umask
_umask_s
_ungetc_nolock
_ungetch
_ungetch_nolock
_ungetwc_nolock
_ungetwch
_ungetwch_nolock
_unlink
_unloaddll
_unlock_file
_unlock_locales
_utime32
_utime64
_waccess
_waccess_s
_wasctime
_wasctime_s
_wassert
_wchdir
_wchmod
_wcreat
_wcreate_locale
_wcscoll_l
_wcsdup
_wcserror
_wcserror_s
_wcsftime_l
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wctomb_l
_wctomb_s_l
_wctype
_wdupenv_s
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wfdopen
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wfullpath
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wmakepath
_wmakepath_s
_wmkdir
_wmktemp
_wmktemp_s
_wopen
_wperror
_wpopen
_wputenv
_wputenv_s
_wremove
_wrename
_write
_wrmdir
_wsearchenv
_wsearchenv_s
_wsetlocale
_wsopen
_wsopen_dispatch
_wsopen_s
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wsystem
_wtempnam
_wtmpnam
_wtmpnam_s
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
_wunlink
_wutime32
_wutime64
_y0
_y1
_yn
abort
abs
acos
acosh
acoshf
acoshl
asctime
asctime_s
asin
asinh
asinhf
asinhl
atan
atan2
atanh
atanhf
atanhl
atof
atoi
atol
atoll
bsearch
bsearch_s
btowc
c16rtomb
c32rtomb
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
calloc
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
cexp
cexpf
cexpl
cimag
cimagf
cimagl
clearerr
clearerr_s
clock
clog
clog10
clog10f
clog10l
clogf
clogl
conj
conjf
conjl
copysign
copysignf
copysignl
cos
cosh
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
div
erf
erfc
erfcf
erfcl
erff
erfl
exit
exp
exp2
exp2f
exp2l
expm1
expm1f
expm1l
fabs
fclose
fdim
fdimf
fdiml
feclearexcept
fegetenv
fegetexceptflag
fegetround
feholdexcept
feof
ferror
fesetenv
fesetexceptflag
fesetround
fetestexcept
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
floor
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmin
fminf
fminl
fmod
fopen
fopen_s
fputc
fputs
fputwc
fputws
fread
fread_s
free
freopen
freopen_s
frexp
fseek
fsetpos
ftell
fwrite
getc
getchar
getenv
getenv_s
gets
gets_s
getwc
getwchar
hypot
ilogb
ilogbf
ilogbl
imaxabs
imaxdiv
is_wctype
isalnum
isalpha
isblank
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswblank
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
labs
ldexp
ldiv
lgamma
lgammaf
lgammal
llabs
lldiv
llrint
llrintf
llrintl
llround
llroundf
llroundl
localeconv
log
log10
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
longjmp
lrint
lrintf
lrintl
lround
lroundf
lroundl
malloc
mblen
mbrlen
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
memchr
memcmp
memcpy
memcpy_s
memmove
memmove_s
memset
modf
nan
nanf
nanl
nearbyint
nearbyintf
nearbyintl
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
norm
normf
norml
perror
pow
powf
putc
putchar
puts
putwc
putwchar
qsort
qsort_s
quick_exit
raise
rand
rand_s
realloc
remainder
remainderf
remainderl
remove
remquo
remquof
remquol
rename
rewind
rint
rintf
rintl
round
roundf
roundl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
set_terminate
set_unexpected
setbuf
setlocale
setvbuf
signal
sin
sinh
sqrt
srand
strcat
strcat_s
strchr
strcmp
strcoll
strcpy
strcpy_s
strcspn
strerror
strerror_s
strftime
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strrchr
strspn
strstr
strtod
strtof
strtoimax
strtok
strtok_s
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
strxfrm
system
tan
tanh
terminate
tgamma
tgammaf
tgammal
tmpfile
tmpfile_s
tmpnam
tmpnam_s
tolower
toupper
towctrans
towlower
towupper
trunc
truncf
truncl
unexpected
ungetc
ungetwc
wcrtomb
wcrtomb_s
wcscat
wcscat_s
wcschr
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcsftime
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsrchr
wcsrtombs
wcsrtombs_s
wcsspn
wcsstr
wcstod
wcstof
wcstoimax
wcstok
wcstok_s
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wcsxfrm
wctob
wctomb
wctomb_s
wctrans
wctype
wmemcpy_s
wmemmove_s
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=51, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=131, id=1, productName=Unmarked objects,
count=1, id=253, version=27412,
count=1, id=256, version=27412,
count=110, id=259, version=27412,
count=93, id=261, version=27412,
count=619, id=270, version=27412,
count=21, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
bin/uk/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96518116704ce74ea24a11215ecd214b4ec84cedb7798a233225e5ae379ba13f
- MD5 e070ee67879e377541e3772f15942564
- SHA1 4e44ed28a350e9d2ca348c908f5e10df546afa12
- SHA512 62bd208c4e685e56f49687fd7bb6e8d525fb2cb9205d03751ad9b92ed62e74f70e02dc34cf75fb9d7f3493e32230323ff42bf60ad8e337ea6799e5b31feb0b6f
- SSDEEP 96:pB7kiJLOPyGLBuJTXlzcim2wWCl1ZPy6n+:pB7k4OaFlCioNs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25a73082fbc9730df840010ea77b319dc56dac0c9f9fb7a73d2fdaba3107260a
- MD5 6c14c889cfeccf363193bbfe8b5a665b
- SHA1 9d23bebc6d351c9ad8ff599b4f82405098124727
- SHA512 1b464db5357577ff5c5d5720b0276150eff0b338fd9427cca43e7288486d3a06ecf4b10d716524db3f2225b3448552c68739526c95ecda4e3843bc74f2e40073
- SSDEEP 768:g4Ey2T7+qbnABYh/ftE43+JFBMlNjsYHYMSO1L6FzC:wHdnAuq43+JFBMlNjsYHYMzL68
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 596549b96abc6d5350a43030123709064753ab613aef0a6201cdb94aa68641df
- MD5 a9861f9ce61af7f9bdf848fb45161f40
- SHA1 60653b5886fc1926f64fbed26e6e4c5a1eee0b5f
- SHA512 a243680d20e2ed8deca2bf6e2e2b26442b525a37f7fc7f3d56cc47d6e5af8ecfd5fed9b3c5846b82a77a6e777d27e1dadc74e37228b2c4af2be70e41cb33b0bf
- SSDEEP 96:U56audEwYw6sR4Tl+ZlQjSd+SdctSdSZSd/Sd:UQaIQlsRAMZlQ2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c6c8c13f5eecbc3cfb43a15231a3aa78d6cdf3a1692039c8d80693c58f7bf13e
- MD5 c3c823554f7cc85546b667329bad0f3c
- SHA1 7cb25547748d550885b62a75d0312e34d9e850b5
- SHA512 e527bf594e1164b3e360e9a96477352f14ecb6527fe98d5d9f35064fdf842d5c837426c14e48bd1e2b85a86481e58630ee509ce9ad2b2c1c45904b41b49cbef7
- SSDEEP 192:ISA6O7agZ7hhfao6sg/ZCOesB45R68m2FYK8WR:S6gZ7g/ZR6mCYO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c529f84e79e075358ffaf4cf06d98bf64b14e0a91c05b5ea19e6d7c6ca154f29
- MD5 62a45fd759f8edf68e854ce3367bc0d6
- SHA1 13159eb53df46ef946d56f8cd3cd73c4bec76d00
- SHA512 9a77729738122bee1f4aa943197362157c7cfc5679ccf5a48c3aab79a7887f614575074cd940b7568d3359a42ff58e210b63956db7872661a11a1a0f381ad953
- SSDEEP 96:Tz+x9fQfSkN1/VFTpg1MjFybVBwMl72kYAtHPJJsy:X+x9oSkxJpg1MhE+M92kYe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fd6870b573f852e59bccde80942575157d565c66013ac730cdf061136b7740bd
- MD5 d0c865f484c34c9c3de209f48f267a8d
- SHA1 149c6539bc43ce83cb2486bc837fca9299913f80
- SHA512 7106e7da78dc620a753f8e847f4f84ad832a88034a0728d5e925bd6fc584986eead1b28b8f3369a99a2ee7e923f58ca552f42ea175d16f9f05e6e943e1bb9db3
- SSDEEP 96:uIt0LzpmzKRA/kKMeQcrqfr5XQQIQJzf0yVqr/fXxij2r2jv0fvEexSt7f/NEeDi:oz5mfS0XDLaKq92RH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5abeda6b446c1b569a91040786a2cbd7548f019111c7440948187ca9359981d4
- MD5 0428e9c763d38eb52c78d4404a09a95d
- SHA1 28b768218ba47f4ec098278ba51050ee5fd4ba53
- SHA512 311f01ab2b10bef5257748ae80da075604ce38bde1092bbf72e916dece0de915d400f644a96939bfc3e45e1fc915e22b26db560db415a286143900871e812e91
- SSDEEP 192:OwRtTf/ajtT4zt2FdU/j8jJXq+hfk8tqLVoVuNUSYcX:XjTfijtT4zt2FdU7GJXq+hdtEZp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c90ffa8f43bde73cc97028ff55b4760c555f5e7f3ee88ac1ffb8aae4084ee4fb
- MD5 a2a8eb524024457fd5f3ea3f09e030bd
- SHA1 66affeb5b410c87c381c8541b4e4636aab174f14
- SHA512 605a694f36dbb399c90a67e97f78d060c4552c9f97ab418b1a6a6373caa75756907b55009a751eaf0bebaefe9c98565715f514404463df66508f66489fc97235
- SSDEEP 192:yUGTLa+YxcpzYUPIZRVG5oojpmzNQwVeN4/Lt:yUy2+YOdYUwZPGqigasJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6f5eda392c17d73cf38a76d60c1b48c691ffc4ec856e093866692cea60b0212f
- MD5 a763999cdc7d0c2ebda691cb23b9244a
- SHA1 347550270c1a8a184c0ece2f6cbbf61219c8f76f
- SHA512 aed6f3c6205c5744c8c335bfe1ceb45b6a9ad8a3246f52a3b723c87a6edd40df59690b5d14251c70f3f504dd848f3c7cffb47d7b779549d10090e688cb7f5a8f
- SSDEEP 96:sqIsFqUEQuf5ybDRsvWrvWCwPBma57/nLye9SlBqJehv:fIsdo0DWyS17D9SvqJ0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d315477a034a15164243ca0c95a80c747866ed44bc5e8dc0a6946a03e153b6f6
- MD5 536092f0ba4ab6baec9cb669949c5bea
- SHA1 bf21331a33e6f94fd5536db4b494b73e85f65c47
- SHA512 7d8ec043c69346e0d1fcee37ebf6b309e28b6a14e39018545271943393ceaa86ef005c719f7304d0dee91f0609e966ff71442b20f74a7838c9b507c1b49bba3d
- SSDEEP 768:zDAe5Yc1ODZnzSYCnUndnIjnIjszF1280LcmkkcdnRzsxwXHKjGk9uzff6XxvIAs:/jTvZ/Z93lA9uzff6XxvIYci1y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c6c587730de06756fcfb9a510b337d4f02e5e48966926b69caab15c8d907244e
- MD5 27ad398e827c66749baa2cb8032005c5
- SHA1 aa8ef4f36d182922f1a998a7505df54facc03c97
- SHA512 3c30e536c0e664fec1ff9032da5beab152db543b156843c29d86363b04d4c0fa9246682af003028444918471f94933c32b8a92476b461ad6783eb53d14cf0ed1
- SSDEEP 96:Z2ZT7Mq0ss6DBX6cNAo7PNrWAOGi9yWP4+FtZycvpS7B85SV6doloKuc:Zo8q0+X6AdFrWAOl9yktoMc+CqKR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d91ada076337f82130d848cb09768af666679c9859b8baa8b0b3272e26d41f89
- MD5 f22243f4fcedfc9d1c26fdc6941f58a5
- SHA1 5cf8d219eecbd5338f8911fda54b80ffa6f175f3
- SHA512 79ebaea929fe36dd05ca0b9ddd552d99c23c5a7294f54a771ea30f630101b8865afeca9dbfe807bff308d59f38b7f078c098a03dbc8339305c1210d3e50d4de7
- SSDEEP 48:6WKuHOGKlGqFUU2AWMl1CPpf6qDqFybWcEiZbTLliH4Be7:6uuGKlGrVslIPZScn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5127f8fa55875801de7cadb0cec849f9bd0d26f555bc014c44b6c3e9e6a3d0a
- MD5 271738793f8870a88a554d09923dac37
- SHA1 dba8c74480f3f7382d7c28f85d7ad3078b6abad0
- SHA512 5cdf0d8a6f433175a986f824f6712464c54fe2ad73573e42ece42a461c73e4c56c1e4789a63119bea262fc25d6331990fc542651ce9fd85217aa6aa24cefb101
- SSDEEP 96:nnKxzyGZlGPYv9Agg5BoUoa+nF2dMae6e7zPc4ciNlAP5DaPg:KxzFbGRgxakFAMae6e7zPcN6ihl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c91e9c36bd54055a9552e168ea4306d96958b187e015810ca6f985ff01e65f74
- MD5 e18b96e51a200ca1e6c0ccd3f79dd38e
- SHA1 8707101c7b05c10263ca38422d6f36814945d00d
- SHA512 de051c2195ddbe5f714e0be7a451f7dafdad7a260456df6d4c7b5fcbd94ada1b70dc84588b8a4c2500c57068f2e8c064eed8aa0131d6f86efa2a007a5fbcaf93
- SSDEEP 96:1x6iEivXD0u+1u2Xj7N1q9N/BWn4eYkf1O46wZL4tNTrlsrxn8U:GiEivEvj7NRqkZGLP+r3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7d0122e04a00cbde2c59dc1c07f6d6ef55c6077aef4d04309b267fde9c651839
- MD5 277f59ad0d633842cb9fd4a93b2c3ad2
- SHA1 28dfe4be73561dd37e0e07831eba01bf7cdb0409
- SHA512 a14556ac6e5db49021c5e32a4427c89ba1e970ed6b8067f38b14daab3437222775092f8bec2e8397ea8ba38283fa6ce9af8f8a468678fadc1cc29fff74b4b7f4
- SSDEEP 192:LIGN8DqE+43RDMzc7layuPaP6t1CX8NJnwc2aPz/Hg:LIGNJE+aRUc7laywc6WazNPzg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/uk/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f3b7507b750bfb231cb1b5c8d4c8096f18b010d57acb31d944b1b470c55495b
- MD5 9fb59600913a41023fae0cc87b35ed8d
- SHA1 f8489d06ae21ac73ca711314b6b34134e68c3b03
- SHA512 17bf09242c462707e90699b07d137d358efce9e731ddfbd33a57d9c2f72d5f7fbdff65e14145143c8209f9fcd5d5aa132630becc0a5867f83523191c506a824b
- SSDEEP 1536:J1G/OdPZG3vSen/rDrfrGV2VAVPog6hqImF4iB3UQRdBhFuhYF7jHKxX8I8WaYGW:J1G/OdZG3vSen/rDrfrGV2VAVPog6hqK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/vcruntime140_cor3.dll
- IMPHASH b06d4116da69a513992d529f84731e6f
- SHA256 7c2cddc1e4e0284fbbc55e3094927a29d247f648e5ee5bae1e1e2a7183779ad8
- MD5 c4f45055b8704eb8c6da870095cd5e59
- SHA1 ad9700c9054492260783123c6c28ad574030fd1c
- SHA512 d3c53b24378f3c5a66722c12788d6412a5c8c730bcba2c7a3438c36db82443e95063732eda5daadc2c7bce47d705c1a933886140588f72a1e822b779150b52eb
- SSDEEP 1536:rgTqURG2vo0RwvI7sjBH+cOKXc36r23SEecbiyA2ZgL:rdURhvZ6vIQVrPyrecbiyAjL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8d:13:1b:27:b5:44:e0:07:7c:42:3a:c9:29:83:ea:81:8a:35:eb:b1:4c:cc:97:dc:1b:e4:c2:b3:aa:ed:55:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
58832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\agent\_work\10\s\\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb
api-ms-win-crt-runtime-l1-1-0
terminate
abort
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
wcsncmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
api-ms-win-crt-convert-l1-1-0
atol
kernel32
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
FreeLibrary
RtlUnwind
VirtualQuery
EncodePointer
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsFree
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=239, version=40116,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=40, id=1, productName=Unmarked objects,
count=19, id=259, version=29118,
count=21, id=260, version=29118,
count=28, id=261, version=29118,
count=1, id=256, version=29118,
count=1, id=255, version=29118,
count=1, id=258, version=29118,
bin/wpfgfx_cor3.dll
- IMPHASH 70f1a0d363621abff560ec43176fc514
- SHA256 b6971ef4d0588c755308c7576e1ac47ef22c04b0592b1c868be9232d71606bd2
- MD5 5d5bb2b475001cacdabe0adb055a7d26
- SHA1 6e84ff1c78b7618f7016a3bd6af65e2d031b60c1
- SHA512 74d1bb16bf6fb7fbe494cf037a112f0e72ba8007fabaef265370f3703563b98cc9839d952f579cedc8465fb081de1dae2264aed051204bf3033185416236a629
- SSDEEP 24576:tSfuCj1MbKcN3uvsPDY60a1SETXI5k2dvOJJ59ti8LqiB0x1iFQE9wrUZSpHbw7+:8fuCxMbKcN3jjptJJ5s/1iFCrUEENVa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
53:c5:53:d1:23:93:08:07:5b:2a:76:03:f2:76:dd:1d:33:9f:d9:5d:70:44:bf:16:a5:3d:7d:ff:95:bc:80:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
336016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\workspace\_work\1\s\artifacts\bin\wpfgfx\Win32\Release\wpfgfx_cor3.pdb
kernel32
GetCurrentThreadId
ResetEvent
TryEnterCriticalSection
MulDiv
QueryPerformanceCounter
Sleep
FindResourceW
LoadResource
LockResource
GlobalUnlock
QueryPerformanceFrequency
InitializeSListHead
InterlockedPushEntrySList
QueryDepthSList
InterlockedFlushSList
SleepEx
RtlCaptureStackBackTrace
IsDebuggerPresent
ExitProcess
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
TerminateThread
GetCurrentThread
GetCurrentProcessId
SetThreadPriority
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
CreateEventW
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
WaitForMultipleObjects
SizeofResource
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
VirtualFree
VirtualAlloc
VerSetConditionMask
VirtualQuery
VirtualProtect
CloseHandle
WaitForSingleObject
SetEvent
LoadLibraryExW
FindClose
FindFirstFileW
GetSystemDirectoryW
SystemTimeToFileTime
LoadLibraryA
LoadLibraryExA
DebugBreak
GetModuleFileNameW
FreeLibrary
CreateThread
GetVersionExW
OutputDebugStringW
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetLastError
GetSystemInfo
GetTickCount
SwitchToThread
LocalFree
FormatMessageA
GetSystemTimeAsFileTime
WaitForSingleObjectEx
RaiseException
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
GetLastError
TlsAlloc
EncodePointer
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
UnregisterWaitEx
CreateTimerQueue
DisableThreadLibraryCalls
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibraryAndExitThread
GetModuleHandleW
GetProcAddress
DeleteTimerQueueTimer
GetModuleHandleA
advapi32
UnregisterTraceGuids
RegQueryValueExW
RegCloseKey
AllocateLocallyUniqueId
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage
TraceEvent
RegOpenKeyExW
user32
EnumDisplayDevicesW
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
EnumDisplaySettingsW
GetWindowLongW
ClientToScreen
GetClientRect
GetParent
InvalidateRect
ReleaseDC
GetDC
GetWindowDC
ScreenToClient
UpdateLayeredWindow
IsWindow
PeekMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
EqualRect
GetDesktopWindow
OffsetRect
MonitorFromWindow
SetLayeredWindowAttributes
WindowFromDC
GetWindowRect
RegisterWindowMessageW
PostMessageW
IntersectRect
IsRectEmpty
SetRect
GetGuiResources
gdi32
SetLayout
CreateCompatibleDC
OffsetRgn
GetRandomRgn
GetSystemPaletteEntries
GetDIBits
CreateCompatibleBitmap
RealizePalette
CreatePalette
GetRgnBox
SetRectRgn
CreateRectRgn
GetRegionData
RectInRegion
CombineRgn
CreateRectRgnIndirect
SelectObject
CreateDIBSection
DeleteObject
CreateICW
GetDeviceCaps
DeleteDC
BitBlt
SelectPalette
ole32
CoCreateInstance
CoTaskMemAlloc
PropVariantCopy
PropVariantClear
CoUninitialize
CoInitialize
CoTaskMemFree
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
d3dcompiler_47_cor3
D3DCompile
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
abort
terminate
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm_e
_initterm
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-math-l1-1-0
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_isnan
_libm_sse2_sin_precise
modf
_CIfmod
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_libm_sse2_log_precise
_finite
_CIatan2
floor
_copysign
_CIexp
_CIsqrt
nextafterf
_libm_sse2_pow_precise
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vswprintf
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
api-ms-win-crt-string-l1-1-0
wcsncmp
strcpy_s
ntdll
RtlFindClearBitsAndSet
RtlSetBits
DbgPrintEx
RtlInitializeBitMap
RtlUnwind
RtlInterlockedFlushSList
DbgPrompt
RtlClearBits
NtQuerySystemInformation
DbgBreakPoint
api-ms-win-crt-utility-l1-1-0
qsort
GetNextPerfElementId
IWICColorContext_GetExifColorSpace_Proxy
IWICColorContext_GetProfileBytes_Proxy
IWICColorContext_GetType_Proxy
InteropDeviceBitmap_AddDirtyRect
InteropDeviceBitmap_Create
InteropDeviceBitmap_Detach
InteropDeviceBitmap_GetAsSoftwareBitmap
MIL3DCalcProjected2DBounds
MILAddRef
MILCreateEventProxy
MILCreateFactory
MILCreateStreamFromStreamDescriptor
MILFactoryCreateBitmapRenderTarget
MILFactoryCreateMediaPlayer
MILFactoryCreateSWRenderTargetForBitmap
MILIStreamWrite
MILLoadResource
MILMediaCanPause
MILMediaClose
MILMediaGetBufferingProgress
MILMediaGetDownloadProgress
MILMediaGetMediaLength
MILMediaGetNaturalHeight
MILMediaGetNaturalWidth
MILMediaGetPosition
MILMediaHasAudio
MILMediaHasVideo
MILMediaIsBuffering
MILMediaNeedUIFrameUpdate
MILMediaOpen
MILMediaProcessExitHandler
MILMediaSetBalance
MILMediaSetIsScrubbingEnabled
MILMediaSetPosition
MILMediaSetRate
MILMediaSetVolume
MILMediaShutdown
MILMediaStop
MILQueryInterface
MILRelease
MILRenderTargetBitmapClear
MILRenderTargetBitmapGetBitmap
MILSwDoubleBufferedBitmapAddDirtyRect
MILSwDoubleBufferedBitmapCreate
MILSwDoubleBufferedBitmapGetBackBuffer
MILSwDoubleBufferedBitmapProtectBackBuffer
MILUpdateSystemParametersInfo
MilChannel_AppendCommandData
MilChannel_BeginCommand
MilChannel_CloseBatch
MilChannel_CommitChannel
MilChannel_EndCommand
MilChannel_GetMarshalType
MilChannel_SetNotificationWindow
MilChannel_SetReceiveBroadcastMessages
MilCompositionEngine_DeinitializePartitionManager
MilCompositionEngine_EnterCompositionEngineLock
MilCompositionEngine_ExitCompositionEngineLock
MilCompositionEngine_GetComposedEventId
MilCompositionEngine_InitializePartitionManager
MilCompositionEngine_UpdateSchedulerSettings
MilComposition_PeekNextMessage
MilComposition_SyncFlush
MilComposition_WaitForNextMessage
MilConnection_CreateChannel
MilConnection_DestroyChannel
MilContent_AttachToHwnd
MilContent_DetachFromHwnd
MilGlyphRun_GetGlyphOutline
MilGlyphRun_ReleasePathGeometryData
MilPlayer_Create
MilPlayer_Process
MilResource_CreateCWICWrapperBitmap
MilResource_CreateOrAddRefOnChannel
MilResource_DuplicateHandle
MilResource_GetRefCountOnChannel
MilResource_ReleaseOnChannel
MilResource_SendCommand
MilResource_SendCommandBitmapSource
MilResource_SendCommandMedia
MilUtility_ArcToBezier
MilUtility_CopyPixelBuffer
MilUtility_GeometryGetArea
MilUtility_GetPointAtLengthFraction
MilUtility_GetTileBrushMapping
MilUtility_PathGeometryBounds
MilUtility_PathGeometryCombine
MilUtility_PathGeometryFlatten
MilUtility_PathGeometryHitTest
MilUtility_PathGeometryHitTestPathGeometry
MilUtility_PathGeometryOutline
MilUtility_PathGeometryWiden
MilUtility_PolygonBounds
MilUtility_PolygonHitTest
MilVersionCheck
MilVisualTarget_AttachToHwnd
MilVisualTarget_DetachFromHwnd
RenderOptions_ForceSoftwareRenderingModeForProcess
RenderOptions_IsSoftwareRenderingForcedForProcess
SetMilPerfInstrumentationFlags
WgxConnection_Create
WgxConnection_Disconnect
WgxConnection_SameThreadPresent
WgxConnection_ShouldForceSoftwareForGraphicsStreamClient
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
235KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=263, version=27412,
count=1, id=261, version=27412,
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=101, id=261, version=29118,
count=14, id=260, version=29118,
count=19, id=259, version=29118,
count=7, id=260, version=27412,
count=17, id=257, version=27412,
count=252, id=1, productName=Unmarked objects,
count=423, id=265, version=29304,
count=1, id=256, version=29304,
count=1, id=255, version=29304,
count=3, id=151,
count=1, id=258, version=29304,
bin/zh-CN/dnSpy.Analyzer.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8d21b434e4a1d24185302d48e244fbf5c1fb25a3afc28c55a1f5c04a87c59a34
- MD5 4c0f1fa79d4f3158a5197a4636eaec2c
- SHA1 bdc81c74d5f9443849d2d6e1e1ddab45357c91e8
- SHA512 234987a352883c312c179563f47fdcd8172ac040226edccc34e6ae7d27e639daaa3bc8cbc46b2e9c80137a780b1ffddd0127f7e2c5f122cde0860ac5331889fb
- SSDEEP 48:61G+HmrHh7kiMI5EQBLq3cj6fl/l2wlYRH3eP4q7u18atiCizok4qNFMgA3Cl1LM:kHmrB7kiJA9ujTmZ4q1A3Cl1ZPl6n+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.AsmEditor.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da5888343e9459a4aa143da08e307206390d7c1c2a84d47f13c32173f9a47ea5
- MD5 9a00cdc2027b0c0fb70921d0cc5ffd28
- SHA1 d1883b804c519140ee5ce6a77d0ca62e07f89f22
- SHA512 926687df0e2b104ea09438c230f3ff5c9c980ba0e15d0dd6e35661aa5b80ed32360d32700fd63739cf96bf67444a99967e029d1f372123fbfd19274a056fb221
- SSDEEP 768:yEy2T7+qbnABNYoYww7MSXFBQl/OykUMlkFeCminYUXlisHdgJ9K:xHdnAE77MSXFBQl/NkUcEeIHt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.BamlDecompiler.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37b3463f06fc95b2970a652233c2dd9b4810dc2b309373fa37528a651db023c2
- MD5 352f58d3513cd4cd0fa524549a65cc22
- SHA1 a68b8c639efd205dd7b5cb74c21d4fcd99e6e890
- SHA512 64b7318e1dd1bf90e531067b777ff8d01a72b47c2e1307fe64416309083867ea4bfc66161372b6f66cab3bf4f9dc79337ea8bfc881e283dc7a5f9adab10ffc76
- SSDEEP 96:ShsZK5xIdETwzel+Zl+EjSd+SdctSdSZSd/Sd:P0rOcXMZlz2dDdRdSsd6d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Console.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58f289b6ec920a7137f667075f6207f1d66ae7a2672356a6d008beaa9821127d
- MD5 d7b731686c328aa1f9b3aa7bd5235e0d
- SHA1 c10a10e568f5a395727ac677e201986ed443a11a
- SHA512 28ea23ef6b96ec75c2345ace78f4ad62fed65b51b4cac2be59bcfa0aa86225cbac20cef97cb06af45bb21c65dd43c930ab67da84dde4f6b2bf1231b02f535ea1
- SSDEEP 192:ev6O7GrPJoNjNgvskLWWPI4vCA4UHbFFZWR:w65rPSkZAAn5K
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Contracts.DnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0e7863d28921004c253f7979edf28777519bea1047c6128574986ae24272b9c
- MD5 5a8e125ec0d2a57221d65aa12c70cbaf
- SHA1 a2d0174704bf7cfe2b27b07eabc73b9c6611b1d6
- SHA512 5489ff48475413a2f92873b43b93091606ca4efb87c4f29a7729fd89708cb323557f339185fff5fa961ec10481f189f76976f9255054be161ff5d4532e6b8784
- SSDEEP 96:Rx9uLFz9sI0I0oqBaN9lIAvl72iGtHPJJsy:Rx9iLUoqBaNoAv92i4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Contracts.Logic.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d491347e2124fc4e07b5a2b4a55da7bf64ba4544136e748e024d415e7f19ac16
- MD5 da941a94d796c95ec6b792a559c07de7
- SHA1 70e8cdc701eb6f75ed4a3f9ed0db739246311d26
- SHA512 70c2b53b4b3129000a537b6758a6c1e7a75814c751e00eddbbd788b14e7a8e5baf9bde4d8b45a28269e55ddeaff8d6b2339ef4edd9fd0403ce02086b9672cf0b
- SSDEEP 96:KYpmzKOrW/osVWeyizYwsQtdmLZvmYGKbUJJSNVNGihNGwfl72CA7TJPHJso:KY9e/zVd92hH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Debugger.DotNet.CorDebug.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ed015f0f535c97ae11eeb4bd229453b5a541b95ad242c64f4255ad669a6c5a10
- MD5 c979c32d3b3452c2eb950da42494e285
- SHA1 2d7f1a140847be3eccf441c524868dffb729f10e
- SHA512 7399551495fd9eb62d2fc0cc78aa40753b0e119b8c7b55a599f3a64c69f8605e1fd4bf208426e9f23b127aef768d04ff9d9923534f736e541832af8662188026
- SSDEEP 96:FqtI+6tOKdYzEhiRrbArpAtjNBFjf599Dup+xJcr1zVydEVbv531P7hmcurcU9bF:zRt7YPAIVjfZcyq5WcebFDFSt2L
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Debugger.DotNet.Mono.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69f17aac14793bc40ee5c5571dbbebc1438aabdb968b40bee5f916e459e274be
- MD5 2c0fdb38c8624718202760a2bd4d4022
- SHA1 59795578a9dcb92dd2afb774fd8f94985d40d46a
- SHA512 846cd330d786fd818119768bd2ab993ce0bb996e0c2abdf6ecdcadc794f65d4c3a2b1d3747b1fab06b0a57b1f4ad9d1ebdb63d3288a8415c5bc71b0b05c11fde
- SSDEEP 96:zfP9UGTL94oGGtJoCh22zPQyIDBFnNuvHV7j0VxnK7jYtpChK7klm/rO3Alk:7lUGTLazGkCh2zyI3naZK+oZo4/Sh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Debugger.DotNet.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f4f3010c34e1a257214f8d76c6fe1bab9ca4ae6f28d228b772785d9b2c3ef600
- MD5 c16cf8c755c8e3ce6e44ed236d1c2b38
- SHA1 b138b35cedf0f122e72d894c5a97eff1b2162815
- SHA512 ecb7222ed6b61a125177add58fb75949190d502c0c27b539b6251f5d07016b148eb7dee3213ac1a10012acf4485b03035a13fe9747d6736c51aa7721ead7721e
- SSDEEP 96:ocasFqCE6QpV1MURA8vWuvWfmMEPclUhyElBESehv:DasGLJXTeOPclGvES0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Debugger.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0be965b7224f5fff610c82ac4fdc52059a6575890cbb84674f43d472fff00b4
- MD5 89e334fe3772c591e45f37b9219ce51f
- SHA1 1cdf2dd0cb91bfe355e0f682f1ebbaa2291ba174
- SHA512 9f8b3331c4f8ab9bdd478067aaf6c1df390188f795b157c21d6ef503446579baa47950e97ae6fc8e024e959ebf603e654564ac9f53053eb51cbf53545b5054ed
- SSDEEP 768:RDAe5Yc1ND4nASncn9ndnIgnIcID6fjOXoM9S21LYEa+G8ASoLzHyM5rfOgETXJe:VjTe++t68ASoLzHyM5r6XeYVv18
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Decompiler.ILSpy.Core.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 11c21e200d09e17ec8d32a5cd30883a4e3e07895c382e083c6d26d8438ecdd88
- MD5 070da904ef24a0d89ec354b4e04ff981
- SHA1 258e2adee44ba5efabc79509e15b45e89c8c3b74
- SHA512 2dd3178e1e6236ef89dc6f634356a68ccfdf0202bd17a83e7c82fad2950d589e0c8434e6c847a1a7b52ff867a9316e49e5f209afc1b35cb147dda1b40759db70
- SSDEEP 96:hJ/2ZT7Mq8gbEYV63E6OlWnRMRDj92i9N1NDlXJbw3flFXsf5lo2c:r/o8q8UmE6mU+Dj919NbDBJ83f7S5qJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Decompiler.ILSpy.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c17fd9926997ce6d6e1da0c83dd72a703d09d2876837c3888085193a7b4e4b1b
- MD5 d7f6e5a52dfcc871a5287476a01ba80d
- SHA1 48cbe5f56a8b2734f10377ec82eb332e280c8aa8
- SHA512 14a6ac2df07059be48c0c953b5ff0b86a9bdaaac4ff7baf7dd086c615403b63c31130ad3576594bf6f3d1b228c56b0f5afa6d3677fe3ec83fed72ba755729844
- SSDEEP 48:6az5mDHOGKlGmjUMXnlsl1CPSfNDKFybWsEiZbTLliH4Be7:touGKlGVsilIPmSsn4Y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Decompiler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b25d12a1cf3219667d5d5643dc0f0b8a189e2dbda3d96e140d39f897d2ba3fb4
- MD5 b7aaeda5ac5cb388fa7db450eef0dab1
- SHA1 5d6049626137cfdf52d7d6aa73c09d9e5a99536f
- SHA512 f61ad9711ff73665995245289b6baeb2db9f7cc382bd60fd3b9bacef348d41eda4326b356200f3dc291a7755da8d9cee0cb08661c821125eb867afa247b58928
- SSDEEP 96:M8xzyYUalGPyveRAymndiqv+JKizwaYI/FTBlAP0LmaPg:M8xzfDGXmrfv6KiMadtTBiQe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Roslyn.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 752bc99116a2358bfc2e98a5ec562d05092f51259088f5ac09dd24c94b224e56
- MD5 e830ed92311d0f5bb673aaa860bd81c9
- SHA1 6d169fb021bc055eb4efe40bd650047906822d45
- SHA512 62d7f13cdd78be6fe2646644f3b40aa96ff0fb89fb1c6239f3e17992481041e1a6efad48afbba9cc2388ff672736381290500ffe1105734fe47b292d4633c1b7
- SSDEEP 96:bOEVfJXyu+No4UB4uJmN2jF0WkM7iCR9fQlsxpln8U:bOEVRXiUB4oVkM7ikfQ+xp7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.Scripting.Roslyn.x.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 62c12fcc0dd1b2293b8f8ce089e526470a1a5cdfa5bce7a03a65580fc1cd2b9a
- MD5 eab3ce70f87ff28657999e304d729357
- SHA1 e14585d062b2a89254849480ca6079fb1487f1cc
- SHA512 713eee061ead755bc2ba9daedacae5346e3ec648316a4a80b007a7a50a111a8222003d7f8a27ca0d63d5c7746379d080d5aa1bb13ea493da51e24e44d6f7ce55
- SSDEEP 96:j8sXdCA4TBlcYO/g3cCiIP6jSwjO7EeiSCXcOGpsiilIP68z/PHvY:IsoBzWpIP6GYe6apsbaP6U/Pg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/zh-CN/dnSpy.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 04b351d775a86cc57b532992719dabc564759268a0cd7c8fa57036c6731b8bb5
- MD5 95acb578a2c1c3660d43aefdc41e2967
- SHA1 ea942bd37357ebcdc4c60685c274cb3ea24f41d6
- SHA512 04c4e3bbc9dec88bbcc9b7d009473fc92f5343779f4c6a5453020489357d7a4d54304d726359b0a06041c4305c4280300a3951ad19b5bca036e5499259692582
- SSDEEP 1536:M1G/OdGz60C6ebxrgrJrYVcVZVQovphLICzYGB2Umqo0Ssx0+384fVyjXWIIVtuF:M1G/Ooz60C6ebxrgrJrYVcVZVQovphLG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
dnSpy.Console.exe
- IMPHASH e3f0c6f49dc92a0de8b1a1437edf5338
- SHA256 3b2742b8abccc68e8edee94f6b85365b146e2b1e38335ffa6a85da301602b5e3
- MD5 d497dd46af328466cb46d199520006cf
- SHA1 50b72dc6cde1da74484f1f23b2930919bbfe4c22
- SHA512 d085a3c07cbd46de4d2e68e7f0846074be539094e884cf5f7e5ecde3bc960b87d3cc50a0351d8324204db28da2f96d60537d629bec2dde65675774e8b92fa3ca
- SSDEEP 3072:KQO5vHUuE3XUYxYj6/ha0PiRl1GmKLUyyMKvO5eT:pOhjCUKi6pa0aNjkKB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
48736
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\workspace\_work\1\s\artifacts\obj\win-x86.Release\corehost\cli\apphost\standalone\Release\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
RaiseException
RtlUnwind
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
EncodePointer
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_cexit
_seh_filter_exe
_controlfp_s
_set_app_type
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_errno
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_crt_atexit
_exit
_configure_wide_argv
abort
exit
__p___argc
__p___wargv
_c_exit
terminate
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
setvbuf
_set_fmode
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
fflush
fputws
fputwc
__acrt_iob_func
__p__commode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
_callnewh
calloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
_wcsdup
wcsnlen
wcsncmp
strcspn
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-locale-l1-1-0
localeconv
__pctype_func
___mb_cur_max_func
_unlock_locales
_lock_locales
setlocale
___lc_locale_name_func
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
wcsftime
_time64
_gmtime64
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=260, version=28920,
count=14, id=259, version=28920,
count=78, id=261, version=28920,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=27412,
count=161, id=1, productName=Unmarked objects,
count=10, id=265, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
dnSpy.exe
- IMPHASH e3f0c6f49dc92a0de8b1a1437edf5338
- SHA256 937de02ba7a3522404b82fa09acece6a3063c40df760ba4fc6a3344083d5eb12
- MD5 6e2e86e49d9f0faa7107f00d4d856a86
- SHA1 0cb7e7d7482f7316a93dfb490df749517d7a06c2
- SHA512 468e5f2d70b41dc829a415fe4a6a5c22bc962526d6e0928fe78c2d33c6a6eddd0b5ba6cefaa7457ca242b14c40f7c9750412802dd16ee155b3b33a74b42976bc
- SSDEEP 3072:fQO5vHUuE3XUYxYj6/ha0PiRl1GmKLUyyMKAqVweT:4OhjCUKi6pa0aNjkNM7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
48736
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\workspace\_work\1\s\artifacts\obj\win-x86.Release\corehost\cli\apphost\standalone\Release\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
RaiseException
RtlUnwind
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
EncodePointer
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_cexit
_seh_filter_exe
_controlfp_s
_set_app_type
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_errno
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_crt_atexit
_exit
_configure_wide_argv
abort
exit
__p___argc
__p___wargv
_c_exit
terminate
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
setvbuf
_set_fmode
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
fflush
fputws
fputwc
__acrt_iob_func
__p__commode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
_callnewh
calloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
_wcsdup
wcsnlen
wcsncmp
strcspn
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-locale-l1-1-0
localeconv
__pctype_func
___mb_cur_max_func
_unlock_locales
_lock_locales
setlocale
___lc_locale_name_func
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
wcsftime
_time64
_gmtime64
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=260, version=28920,
count=14, id=259, version=28920,
count=78, id=261, version=28920,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=27412,
count=161, id=1, productName=Unmarked objects,
count=10, id=265, version=29111,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,