DS4Windows_3.3.3_x64.7z
- SHA256 2cb81e24f1789deb60b2aed6aac31a70b96a1adba2f6835c7c1c03b47b5c0c27
Overview
overview
6Static
static
3DS4Windows...ild.js
windows7-x64
3DS4Windows...ild.js
windows10-2004-x64
3DS4Windows...x.html
windows7-x64
1DS4Windows...x.html
windows10-2004-x64
1DS4Windows...er.exe
windows7-x64
1DS4Windows...er.exe
windows10-2004-x64
6DS4Windows...ws.exe
windows7-x64
1DS4Windows...ws.exe
windows10-2004-x64
1DS4Windows...ws.exe
windows7-x64
1DS4Windows...ws.exe
windows10-2004-x64
6DS4Windows...it.dll
windows7-x64
1DS4Windows...it.dll
windows10-2004-x64
1DS4Windows...ll.dll
windows7-x64
1DS4Windows...ll.dll
windows10-2004-x64
1DS4Windows...er.dll
windows7-x64
1DS4Windows...er.dll
windows10-2004-x64
1DS4Windows...pf.dll
windows7-x64
1DS4Windows...pf.dll
windows10-2004-x64
1DS4Windows...on.dll
windows7-x64
1DS4Windows...on.dll
windows10-2004-x64
1DS4Windows...ss.dll
windows7-x64
1DS4Windows...ss.dll
windows10-2004-x64
1DS4Windows...it.dll
windows7-x64
1DS4Windows...it.dll
windows10-2004-x64
1DS4Windows...es.dll
windows7-x64
1DS4Windows...es.dll
windows10-2004-x64
1DS4Windows...es.dll
windows7-x64
1DS4Windows...es.dll
windows10-2004-x64
1DS4Windows...es.dll
windows7-x64
1DS4Windows...es.dll
windows10-2004-x64
1DS4Windows...es.dll
windows7-x64
1DS4Windows...es.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DS4Windows/BezierCurveEditor/build.js
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
DS4Windows/BezierCurveEditor/build.js
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
DS4Windows/BezierCurveEditor/index.html
Resource
win7-20240508-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
DS4Windows/BezierCurveEditor/index.html
Resource
win10v2004-20240426-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
DS4Windows/DS4Updater.exe
Resource
win7-20240215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
DS4Windows/DS4Updater.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
DS4Windows/DS4Windows.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
DS4Windows/DS4Windows.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
DS4Windows/DS4Windows.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
DS4Windows/DS4Windows.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral11
Sample
DS4Windows/DotNetProjects.Wpf.Extended.Toolkit.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
DS4Windows/DotNetProjects.Wpf.Extended.Toolkit.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
DS4Windows/FakerInputDll.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
DS4Windows/FakerInputDll.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
DS4Windows/FakerInputWrapper.dll
Resource
win7-20240419-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
DS4Windows/FakerInputWrapper.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
DS4Windows/H.NotifyIcon.Wpf.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
DS4Windows/H.NotifyIcon.Wpf.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
DS4Windows/H.NotifyIcon.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
DS4Windows/H.NotifyIcon.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
DS4Windows/HttpProgress.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
DS4Windows/HttpProgress.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
DS4Windows/ICSharpCode.AvalonEdit.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
DS4Windows/ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
DS4Windows/Lang/ar/DS4Windows.resources.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
DS4Windows/Lang/ar/DS4Windows.resources.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
DS4Windows/Lang/cs/DS4Windows.resources.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
DS4Windows/Lang/cs/DS4Windows.resources.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
DS4Windows/Lang/de/DS4Windows.resources.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
DS4Windows/Lang/de/DS4Windows.resources.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
DS4Windows/Lang/de/Microsoft.Win32.TaskScheduler.resources.dll
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
DS4Windows/Lang/de/Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target DS4Windows_3.3.3_x64.7z
- Size 2.6MB
- Sample240603-qae4jagg43
- SHA256 2cb81e24f1789deb60b2aed6aac31a70b96a1adba2f6835c7c1c03b47b5c0c27
- MD5 5f07abfef193e170dd558ef43409ad32
- SHA1 6d720bb8ea84993b66de276ee6b483dad6cd5acb
- SHA512 312ec3f0c7a1bdf55be90bd909db085619077ad861961349b3be9a6af262485d846d765cb6596749b0d3f4a80bb99f55401cc4e4efd7c68301c82bb38161bde9
- SSDEEP 49152:YkeCUBFqz+KFvwmBEcp0eIdYZulhrYGdFlQebM86d6Urpc8CGSQO1vZcDtlyw0cT:YxCYFq+KFvw91brYG6egfdL14uO1x8t5
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 54 IoCs
Checks for missing Authenticode signature.
resource unpack001/DS4Windows/DS4Updater.exe unpack001/DS4Windows/DS4Windows.dll unpack001/DS4Windows/DS4Windows.exe unpack001/DS4Windows/DotNetProjects.Wpf.Extended.Toolkit.dll unpack001/DS4Windows/FakerInputDll.dll unpack001/DS4Windows/FakerInputWrapper.dll unpack001/DS4Windows/H.NotifyIcon.Wpf.dll unpack001/DS4Windows/H.NotifyIcon.dll unpack001/DS4Windows/HttpProgress.dll unpack001/DS4Windows/ICSharpCode.AvalonEdit.dll unpack001/DS4Windows/Lang/ar/DS4Windows.resources.dll unpack001/DS4Windows/Lang/cs/DS4Windows.resources.dll unpack001/DS4Windows/Lang/de/DS4Windows.resources.dll unpack001/DS4Windows/Lang/de/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/Lang/el/DS4Windows.resources.dll unpack001/DS4Windows/Lang/es/DS4Windows.resources.dll unpack001/DS4Windows/Lang/es/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/Lang/fi/DS4Windows.resources.dll unpack001/DS4Windows/Lang/fr/DS4Windows.resources.dll unpack001/DS4Windows/Lang/fr/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/Lang/he/DS4Windows.resources.dll unpack001/DS4Windows/Lang/hu-HU/DS4Windows.resources.dll unpack001/DS4Windows/Lang/it/DS4Windows.resources.dll unpack001/DS4Windows/Lang/it/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/Lang/ja/DS4Windows.resources.dll unpack001/DS4Windows/Lang/ms/DS4Windows.resources.dll unpack001/DS4Windows/Lang/nl/DS4Windows.resources.dll unpack001/DS4Windows/Lang/pl/DS4Windows.resources.dll unpack001/DS4Windows/Lang/pl/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/Lang/pt-BR/DS4Windows.resources.dll unpack001/DS4Windows/Lang/pt/DS4Windows.resources.dll unpack001/DS4Windows/Lang/ru/DS4Windows.resources.dll unpack001/DS4Windows/Lang/ru/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/Lang/se/DS4Windows.resources.dll unpack001/DS4Windows/Lang/tr/DS4Windows.resources.dll unpack001/DS4Windows/Lang/uk-UA/DS4Windows.resources.dll unpack001/DS4Windows/Lang/vi/DS4Windows.resources.dll unpack001/DS4Windows/Lang/zh-Hans/DS4Windows.resources.dll unpack001/DS4Windows/Lang/zh-Hant/DS4Windows.resources.dll unpack001/DS4Windows/Lang/zh-Hant/Microsoft.Win32.TaskScheduler.resources.dll unpack001/DS4Windows/MdXaml.Plugins.dll unpack001/DS4Windows/MdXaml.dll unpack001/DS4Windows/Microsoft.Win32.TaskScheduler.dll unpack001/DS4Windows/NLog.dll unpack001/DS4Windows/Nefarius.ViGEm.Client.dll unpack001/DS4Windows/Ookii.Dialogs.Wpf.dll unpack001/DS4Windows/SharpOSC.dll unpack001/DS4Windows/Tools/XInputChecker/SharpDX.XInput.dll unpack001/DS4Windows/Tools/XInputChecker/SharpDX.dll unpack001/DS4Windows/Tools/XInputChecker/XInputChecker.dll unpack001/DS4Windows/Tools/XInputChecker/XInputChecker.exe unpack001/DS4Windows/WPFLocalizeExtension.dll unpack001/DS4Windows/WpfScreenHelper.dll unpack001/DS4Windows/XAMLMarkupExtensions.dll
File Explorer
-
DS4Windows_3.3.3_x64.7z.7z 2.6MB
-
DS4Windows/BezierCurveEditor/build.js.js 431KB
-
DS4Windows/BezierCurveEditor/index.html.html 193B
-
DS4Windows/DS4Updater.exe.exe 807KB
-
DS4Windows/DS4Windows.deps.json16KB
-
DS4Windows/DS4Windows.dll.exe 4.0MB
-
DS4Windows/DS4Windows.exe.exe 546KB
-
DS4Windows/DS4Windows.runtimeconfig.json549B
-
DS4Windows/DotNetProjects.Wpf.Extended.Toolkit.dll.dll 1.1MB
-
DS4Windows/FakerInputDll.dll.dll 14KB
-
DS4Windows/FakerInputWrapper.dll.dll 10KB
-
DS4Windows/H.NotifyIcon.Wpf.dll.dll 107KB
-
DS4Windows/H.NotifyIcon.dll.dll 331KB
-
DS4Windows/HttpProgress.dll.dll 13KB
-
DS4Windows/ICSharpCode.AvalonEdit.dll.dll 602KB
-
DS4Windows/Lang/ar/DS4Windows.resources.dll.dll 11KB
-
DS4Windows/Lang/cs/DS4Windows.resources.dll.dll 11KB
-
DS4Windows/Lang/de/DS4Windows.resources.dll.dll 19KB
-
DS4Windows/Lang/de/Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
DS4Windows/Lang/el/DS4Windows.resources.dll.dll 34KB
-
DS4Windows/Lang/es/DS4Windows.resources.dll.dll 10KB
-
DS4Windows/Lang/es/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
DS4Windows/Lang/fi/DS4Windows.resources.dll.dll 22KB
-
DS4Windows/Lang/fr/DS4Windows.resources.dll.dll 24KB
-
DS4Windows/Lang/fr/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
DS4Windows/Lang/he/DS4Windows.resources.dll.dll 11KB
-
DS4Windows/Lang/hu-HU/DS4Windows.resources.dll.dll 10KB
-
DS4Windows/Lang/it/DS4Windows.resources.dll.dll 21KB
-
DS4Windows/Lang/it/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
DS4Windows/Lang/ja/DS4Windows.resources.dll.dll 19KB
-
DS4Windows/Lang/ms/DS4Windows.resources.dll.dll 24KB
-
DS4Windows/Lang/nl/DS4Windows.resources.dll.dll 38KB
-
DS4Windows/Lang/pl/DS4Windows.resources.dll.dll 10KB
-
DS4Windows/Lang/pl/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
DS4Windows/Lang/pt-BR/DS4Windows.resources.dll.dll 10KB
-
DS4Windows/Lang/pt/DS4Windows.resources.dll.dll 11KB
-
DS4Windows/Lang/ru/DS4Windows.resources.dll.dll 795KB
-
DS4Windows/Lang/ru/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
DS4Windows/Lang/se/DS4Windows.resources.dll.dll 16KB
-
DS4Windows/Lang/tr/DS4Windows.resources.dll.dll 25KB
-
DS4Windows/Lang/uk-UA/DS4Windows.resources.dll.dll 11KB
-
DS4Windows/Lang/vi/DS4Windows.resources.dll.dll 23KB
-
DS4Windows/Lang/zh-Hans/DS4Windows.resources.dll.dll 47KB
-
DS4Windows/Lang/zh-Hant/DS4Windows.resources.dll.dll 16KB
-
DS4Windows/Lang/zh-Hant/Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
DS4Windows/MdXaml.Plugins.dll.dll 8KB
-
DS4Windows/MdXaml.dll.dll 123KB
-
DS4Windows/Microsoft.Win32.TaskScheduler.dll.dll 329KB
-
DS4Windows/NLog.config812B
-
DS4Windows/NLog.dll.dll 817KB
-
DS4Windows/Nefarius.ViGEm.Client.dll.dll 208KB
-
DS4Windows/Ookii.Dialogs.Wpf.dll.dll 103KB
-
DS4Windows/SharpOSC.dll.dll 19KB
-
DS4Windows/System.Management.dll.dll 72KB
-
DS4Windows/Tools/XInputChecker/SharpDX.XInput.dll.dll 13KB
-
DS4Windows/Tools/XInputChecker/SharpDX.dll.dll 269KB
-
DS4Windows/Tools/XInputChecker/XInputChecker.deps.json53KB
-
DS4Windows/Tools/XInputChecker/XInputChecker.dll.exe 38KB
-
DS4Windows/Tools/XInputChecker/XInputChecker.exe.exe 157KB
-
DS4Windows/Tools/XInputChecker/XInputChecker.runtimeconfig.json491B
-
DS4Windows/WPFLocalizeExtension.dll.dll 88KB
-
DS4Windows/WpfScreenHelper.dll.dll 17KB
-
DS4Windows/XAMLMarkupExtensions.dll.dll 36KB
-
DS4Windows/runtimes/win/lib/net7.0/System.Management.dll.dll 288KB
DS4Windows/BezierCurveEditor/build.js
- SHA256 fce907cf01187e1ca0afb91341fb6d793a97d359918278a759ad03ab4dd71348
- MD5 61b6490d371c57d566ae713880f3ab40
- SHA1 36c2071e549545f02deb5500c296f343d88b08f8
- SHA512 b6c5b64ad02e85087d2ea71938ad1e1cafeba13184e3ed3eca31a3da47bcdf8e58fed3dae50917a797f7d0bed89a12d391fbcfe0246c264e82bb581866f36953
- SSDEEP 12288:9eTeocrhC4KAl6QhcrlsM0q8btBFWW5Ovyf6Bv+JWcwxXAc6EHmSZGlYBDdyNdyI:IqWcwxXAIG6RdyNdyFmL5NyiBDpgnU
- MD5 SHA1 SHA512 SSDEEP
DS4Windows/BezierCurveEditor/index.html
- SHA256 fbd5e846237145aaa4b1d5275eaf95013a31d41e9cdaaad032d583245de54a7e
- MD5 b7f3e0aec1e9905b2706285819ad8627
- SHA1 c86d0c917ef8b6e1ee25d034fad53b0b9f6ba5c4
- SHA512 036375d1801c4b85c8454a874267cef9dc49bd7aa73a49e308584fca8cd188857ba625f1033149f0a9aa395c5ccb78d1f1abc73e2b85339a6c5895d46759a080
- MD5 SHA1 SHA512
DS4Windows/DS4Updater.exe
- IMPHASH 5c16479801aac25e19e4d3e71f54842d
- SHA256 622c770e622daf9e08c06e203c982613ec9cc2cf73e0efee68461b7a2e7646a5
- MD5 e86b6ba53ca8462baeaee561ae187e9f
- SHA1 b2a8e9be51c24ba9c75b6b97ed8db660ad3c6ff8
- SHA512 7152909f8444d360d1d1471dafad1791109965690c0405aba0152ce80514420504132ebbfa233f13632a948fdba38020bc21ede4ad248390e7057931731eaa55
- SSDEEP 3072:xefQZKfOC31VwyY9egNtfNjJvjmqqF7Hb/LMm5MtD9ma5voSfAm+AAAAAWAAAAAk:xDewyY9egLRePYm5KckfAr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_exit
__p___argc
__p___wargv
_c_exit
_errno
_register_thread_local_exe_atexit_callback
exit
_configure_wide_argv
abort
_initterm_e
_initterm
_initialize_wide_environment
_get_initial_wide_environment
terminate
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
__p__commode
setvbuf
__stdio_common_vswprintf
_set_fmode
__stdio_common_vfwprintf
fflush
__stdio_common_vsnwprintf_s
_wfsopen
fputws
fputwc
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
malloc
calloc
_callnewh
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
toupper
wcsnlen
_wcsdup
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
_configthreadlocale
setlocale
_unlock_locales
_lock_locales
__pctype_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=32533,
count=10, id=259, version=32533,
count=86, id=261, version=32533,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=209, id=1, productName=Unmarked objects,
count=10, id=265, version=32824,
count=1, id=258, version=32824,
DS4Windows/DS4Windows.deps.json
- SHA256 39915d00fbfb5cfb9cb6efe36c26a620bccb2bc1fb3675f8bf7931a9c2ca5180
- MD5 a2a3bbf0765877ce03b5e3a3414d604a
- SHA1 c9dc04e997d095bd5a8179cde9df0e5aa837cf9f
- SHA512 b41356b81b2a25adf255c7db314fbdd5c834bc62fe6076d9ef73c0ceebf72a01cdec1a6ee35d4d9b9f4227855eb7d53c85525c05a54280f1e0cdd5599b1e907d
- SSDEEP 192:C2b180yrFyqBV3QkiBSd3SGW8W8vaAPeJXHYmTuSTHByS448b:CsaEWV3QrBSwphydPCT5DBymS
- MD5 SHA1 SHA512 SSDEEP
DS4Windows/DS4Windows.dll
- SHA256 d89c4d3d0f45187283a2d71ff22623d0f871d59a34754065a81ea98c7a6e1fda
- MD5 12ef7ab3e301423c7cd6ed95b52360de
- SHA1 17d9373706f568caef8ed8e5fb20c8c28117d171
- SHA512 00117fe6de672857250de26d88d6230d11b0f0d396b913efa42a5fa90e1272159847cec6c666a42b4ad34888776d6d891d7cfece6c10eb38b3a740083d2b57c8
- SSDEEP 49152:vatQm91jfyQOO6dukFM4yGbmhevOCMM43KC9uYdPJzD4Ht3JzDubzwc:vatn1m8uYJzkHhJzSbz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
410KB
Virtual Size
409KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/DS4Windows.exe
- IMPHASH 5c16479801aac25e19e4d3e71f54842d
- SHA256 ccacb1f4c5b2f24c5a61bf09c10bfe44fb9d46af8b993c1f5bf01dc1b3733a65
- MD5 e196e463c0e550d0f49748008fbb27b9
- SHA1 221960368ae1e190f90cf0b7d51199c3d94a6558
- SHA512 dfa3f83930a6eec958cc69b8978a009dda6a9050b026cf399c5e1cd07f787c515ed497202c7341878032ac89b2f57d8d219bcf824dc622dcd40fa2f530b49cae
- SSDEEP 6144:jDewyY9egLRePYm58DKYPbz0YM+SS5hjS8kfdjS0gNsNHZBuh:j6wZePMJzm1S3O8iNS0YQHbe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_exit
__p___argc
__p___wargv
_c_exit
_errno
_register_thread_local_exe_atexit_callback
exit
_configure_wide_argv
abort
_initterm_e
_initterm
_initialize_wide_environment
_get_initial_wide_environment
terminate
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
__p__commode
setvbuf
__stdio_common_vswprintf
_set_fmode
__stdio_common_vfwprintf
fflush
__stdio_common_vsnwprintf_s
_wfsopen
fputws
fputwc
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
malloc
calloc
_callnewh
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
toupper
wcsnlen
_wcsdup
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
_configthreadlocale
setlocale
_unlock_locales
_lock_locales
__pctype_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
410KB
Virtual Size
409KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=32533,
count=10, id=259, version=32533,
count=86, id=261, version=32533,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=209, id=1, productName=Unmarked objects,
count=10, id=265, version=32824,
count=1, id=258, version=32824,
DS4Windows/DS4Windows.runtimeconfig.json
- SHA256 37b4fbb913a102f13063829f827a5030168a2ba4cdf88593aee1ca266309fc58
- MD5 d2e7aa8f1b739e4896f676105034aa3d
- SHA1 6d002fad5216f78c2abfcef8597bb985995621fb
- SHA512 599067b3efed5d9cd8ccaaa33b2fdd76308df23696584b291dcf14764b2c2a06cc660800cfafbcc4020d1b6c8192e88cfbc54592d32a01d081e1bf7617c1cd25
- MD5 SHA1 SHA512
DS4Windows/DotNetProjects.Wpf.Extended.Toolkit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8038eeaa3483c1a751f04f5acd1cbe5d01c772f9049d04e3bf0d07d04f5723bf
- MD5 8983f161391ab632b9d2aea51a69c4ce
- SHA1 d1cba0b5310e7e12e67532c6ac299624d2a8e7f9
- SHA512 1bbb924a992008848c9ab6811795591e3be6174eea95136e0470e32c025223fde3a453d5bb06ef469779ed4204f101c4348d90944a03fa47138481c028c42c4f
- SSDEEP 24576:eNT2tSXxytYVB/70FAKluHz6I2uP+LvUaLz3bb4lvYlvx92V08XxjaRdV8WHvG6a:eJx+U/70FAKluHz67Bv3Lz34lvYlvgVp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1202874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\wpfextendedtoolkit\Src\Xceed.Wpf.Toolkit\obj\Release\net6.0-windows\DotNetProjects.Wpf.Extended.Toolkit.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/FakerInputDll.dll
- IMPHASH 5c586f91bf69597f26c41a19dbaac763
- SHA256 7e3d67a3e6b4ef2aba039a3b1e079acde3ad95e0286a87623949ad74607d1a50
- MD5 7c87a11e5c2bbd4e2414c568ea4f4360
- SHA1 c67a1108118994de1cebfc7149aefada4b2db416
- SHA512 f826b4c8caa89aa27489de32ac426a7f76971c9bfe797a679cea20514e79aad6d35d17d0226ad54b19f13be3b104b77afa178d3ebf70aad66c6361b5cd37a01d
- SSDEEP 192:F+vcSldLwhPcoJFYMV2n9ywc5I9uUcAcqy8:06JgMAn5yIpcgv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
7004
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
hid
HidD_GetPreparsedData
HidD_GetAttributes
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetHidGuid
setupapi
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
kernel32
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
CloseHandle
GetLastError
CreateFileW
WriteFile
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
vcruntime140
__std_type_info_destroy_list
memcpy
memset
__C_specific_handler
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_execute_onexit_table
_initialize_narrow_environment
fakerinput_alloc
fakerinput_connect
fakerinput_disconnect
fakerinput_free
fakerinput_update_absolute_mouse
fakerinput_update_keyboard
fakerinput_update_keyboard_enhanced
fakerinput_update_relative_mouse
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33030,
count=11, id=261, version=33030,
count=8, id=260, version=33030,
count=3, id=259, version=33030,
count=7, id=257, version=30795,
count=52, id=1, productName=Unmarked objects,
count=3, id=265, version=33133,
count=1, id=256, version=33133,
count=1, id=255, version=33133,
count=1, id=258, version=33133,
DS4Windows/FakerInputWrapper.dll
- SHA256 4792671766a575394d3402a9365af9908af94e812ec1969bfe4975c0ab4f5430
- MD5 25989ccc74dcf12a2216c196d8c94b9b
- SHA1 ae0693dfa6da746c952f2f0140c33ca9e321368d
- SHA512 23ebcad4e9eb948c70a557c815fd31af188808ec5ce1c301a912f4bdc6acc7352941514bef801b249fdf6384aa60f120b0b4c27b1929d42fc70c85a3328e4614
- SSDEEP 192:4VwjZiJ1OhXNgCBViwTYrXx5ic2XGIlabgU3K5shX4vJAyT:fiJALxgXx722Ilg7a52IBvT
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/H.NotifyIcon.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 65bf44ba535e1efd5ba38c6f0ccec5756d1dcdbcf458d22b436eb7502f19f73d
- MD5 be2a9028bc37629428f8b36d58fc4723
- SHA1 b4bab6b42a51000ddbc672e8b83233d4ec30a612
- SHA512 8ca62e90934900f1c4a863fe7449fe363523ed95d430fed24ca8c99cd7400b6edb07d60f72acebb29956495818046fafbdd039edd550caca80c1e5300c685232
- SSDEEP 3072:FMO55R0jszmJtf68LlPHbS+em1lShoG0:FMmeJjVHlh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
114562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H.NotifyIcon.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/H.NotifyIcon.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2afe988b67f36aba97cab8fdafc522df13c4399fc3a9d3dd521f38d25bf0461d
- MD5 a44681119866a16fd9a3461a839559a8
- SHA1 a8ebb0b0dfe0559cd35225d2257f58b50aca1540
- SHA512 5212746fe3fbd62a2342ec16938d07b94ba8acee83f6aa29a90ae7e11d7634a4ec8d64b377e6ba983979ac0a4586bc675d758930f2bb5f725a52092f5c5eaa63
- SSDEEP 6144:jlTZBDxeagx5aAzicZg9B5lvBgAHZDx8akE2D9/BCN:jHbg66pZI3unEQ9J
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
344762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H.NotifyIcon.pdb
mscoree
_CorDllMain
Name
.text
Size
329KB
Virtual Size
328KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/HttpProgress.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6c28242c760db5713f12a292a87c470e39e42aef8663d02af8e72a3658b97ba
- MD5 e97fb25cb7d477d5c3116f3add7c060e
- SHA1 a764ff39dd41f97f0a4d224acec348d75eef337a
- SHA512 6c1580d60755fc2f89403138ac082ab7b57d215cb20493f092502d30fb5604340cc016aa5c72300bfc22d3e4add0b12d487f3bcf213044d41c6c13e9b1dfbcaf
- SSDEEP 384:D4DXA5xR0vFPNBJYEk7tpwkjRdmTBHeu5unsEga:D0e0dN7YEkPPmUuDG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\SAMSA\source\repos\HttpProgress\HttpProgress\obj\Release\netstandard2.0\HttpProgress.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/ICSharpCode.AvalonEdit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2417e116ed23b3cb7ded9759bdf7dbdcfae0f7d58d71b1dd5e264f5510d3eea1
- MD5 7ca104c3e98d3cbd162fdef84edd3b8f
- SHA1 d33e18462f8fefc374fb2ce286d2e176bf414bab
- SHA512 23aaf202b7e50e5b621bbbf720214f2732ab4013dc34c12f0cc9dcca51c0afdcb0f1a696c425449767c49aafa4e834b8e4ee03c0fe48664d37a3b3ba07a3f4c8
- SSDEEP 6144:TkAkAepj9cKU7RrHLF+UpC5Heq4h2Eoj51+8isj3V+oCiTfWAqjot:fs9Hh48GL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
622458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\GitWorkspace\AvalonEdit\ICSharpCode.AvalonEdit\obj\Release\netcoreapp3.0\ICSharpCode.AvalonEdit.pdb
mscoree
_CorDllMain
Name
.text
Size
600KB
Virtual Size
599KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/ar/DS4Windows.resources.dll
- SHA256 7c7b59283f43107cb7094fa534db00ec4a2dd350dde7b04cc14555bd4474e26c
- MD5 a9b68e0c6a30fd6a12c6c2b463cb9711
- SHA1 8cbde9092db0e443f6353ad3e0afd4d0f66f87c9
- SHA512 729188d89dea2f351b04214094b25b4743f4dfb3c4ab183af1eb33791f1c31c8d5803898ad07e44e606324fbe1c9c4a8bf52d9f01b34801181871f272cc606ea
- SSDEEP 192:ku+KU6KRsQK+n3E28i8jffmjE0xu0l3NAx33ZeHCZADacvcrVWr6w:ku+KUUQKw3oujEoBqx3pWocvcE6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/cs/DS4Windows.resources.dll
- SHA256 756e770c9544c8c2635bd0da6099e079f31ca76e8eca17240048ae9f1a1f12cc
- MD5 07f0ee3755b7ee84d14fee452cc2ca3b
- SHA1 98e0b7d15202b5cf8f845fe66ffc6b2ce63bbe8a
- SHA512 417d3dbc3daee2d3818d268e349c22472d97f276b59555210f4e21aaf909e01efa8025e72ccf120223d3c0b83f95f1e383a0ad6efd0d1ed3388c90b5de458967
- SSDEEP 192:NW++aXn5HmUIgixETvqnIevHA5q5BauZADftJH/fODv57ZSRGHrqw:NW+F5GUvixqAHA5q5Bcf7Hsgeq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/de/DS4Windows.resources.dll
- SHA256 b85914d3db0aa76b04871b6a893c4a79d5aad328d8587e0e90e8fa40ef1d4fb2
- MD5 cf84bf5a4834ce4dabe93a299148c71e
- SHA1 7c930cba7a748166bd90ed9131aa609c7ad28db3
- SHA512 5771377125f456892f8f4af2689b9362da5f9c833d5f977a3003bb9ad8a778250addb10b4601bf88fdf5d35e2fbfef6da95ff1d8313705a2c74ee7d5df1f146b
- SSDEEP 384:mO+s9iYci+uk51zvsMSnCuXbcWCbhFI/AAxcWau6:HiYci+uk51zMCuXbYbhy/AAxcWaH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/de/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58258bd7b852491b22887a49efa74a2ddf99f162374f1efc7a3c137615fd4a88
- MD5 19f3a97f752fd9d5ca2d0f396ff83a3f
- SHA1 ecd4c1f368d963e4a557d17996eff0bb4db2a70a
- SHA512 c1ef88053e9255171ac035ee27cd1fe676fa30696aae7a2740409428633c9a52c7b7fbc35979e736f2e8bc20d19474f946b2d909d65cb9a0f0d73a5911814112
- SSDEEP 192:ZiWWNv/jzSENtqcadVl8PandjJUf7ZJSqSi/ufPt1S5rxg0XWr:U1Nvb5adVl8P2djJMZJSGu3S5rxg0XWr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/el/DS4Windows.resources.dll
- SHA256 9623ceca0a9fc8b37a1524517c9baffd480f6aac0eaca7bce0a66c10b2667eec
- MD5 2a8b2787a7f1ea973a381cd74e24aa09
- SHA1 6adc71b953593c58c487eb6e512073942223a004
- SHA512 ea1e2a27831222cd5ad01b0f8fbfee364857d8be022b8e9b4febc7bf24fd8a2c948812ec2403374b6447d25772fefb1b002f067d84115659314e2d245cba9d48
- SSDEEP 384:FC+3rqvYRW6h+MzDKqP/Zy1m67AgMMQCmnoUwI+pa9+nLCKvGnlZUzq:VOYg6hPKqP/Zy4aQCmoi9yLCKUsO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/es/DS4Windows.resources.dll
- SHA256 dea05a23469a91b8d88f3ae576a51c3713e5813be7d340c671b8c399e0ef5cae
- MD5 373a1e357ab1840419b742b54b5b2271
- SHA1 dbd53c0e6925fbe52cab0ea5720278fe83538bb0
- SHA512 74853e6984799453d4a395df4f253985d6d7f5217fdacdf6a2c003d9879d63e3e66a9c0567b7e3f83763b792dd7b4ef53bd3273cf746c721a01e2220be270a08
- SSDEEP 192:lu+KU6HYqmFtoE0rCOR43XsoGFCGF5/HlJih/fAD56zVnGCrKw:lu+KUbqqtoM38rF9FxDk9jK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/es/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 daf21e7923658f10ee34be1bebce68872cc24930474bb275b570f99ff9cd8023
- MD5 cdeab974eb43d77f6bade325b13aaf73
- SHA1 8dd4fd2090347cdf4890804192d6fd6b07054334
- SHA512 831ee77fa644a929c159b2e05a5d397ddd89c6da588781ecde93efe41890650c78ab7a9eda08686f9bd9b6d32cb546202b8aa16c89321a86f71132b2bbf12e16
- SSDEEP 192:XWWNv/jzSEStoC1vxx6hUltfxx+BE00cUnAPH115rxg0XWr:X1NvbGVxx6hUltfxgE00cLH5rxg0XWr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/fi/DS4Windows.resources.dll
- SHA256 eea8c117e01e1d9c63170c622f5f817f98615b3af193c790ea9891e2a97a61aa
- MD5 90e175d2a564611f8fa2b92f93598daf
- SHA1 a5280d7faee6452eae08e4a334f0def18a922f7a
- SHA512 83a36ab15239da0cd6a9a76961fb3cd0d6541535a9417b765ead736012b604f84feaf797fd79a34d189f1bb8f174bdae59d4f7d76fc7ca32786da5e0966d82fe
- SSDEEP 384:V4+UPnnrbZPX12sdbXuam0b2qk3wxXMxX6FipWj/SGDkmfZ9DF2JC/a:c/hv12sdbXuU2qTFioj/jSH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/fr/DS4Windows.resources.dll
- SHA256 d9f134c4fb0459bf8b5521ff7b20ce1e6836194eaed384d2f93945b3d909e084
- MD5 76aabce0f9ae5b4fc540ce9638796af0
- SHA1 8acefa6b9fbf99bbfe584b85af6c7ba116d664d1
- SHA512 e06398f3e939a57c9d41e76bc192ec04ed5021f45f92f17d4c2cc29a2f0e12e75829a1d2d527e9ca13aee1f5d606c2e1252395cd2b65125937e1595fa02bd989
- SSDEEP 384:pA+UPyhsNN5ChFg+9J9oSEWLqmgSjRHG0m1UbChCFP3JMNdC9+aAa:06hsr5Cha+jEWLqgRHZNK9e
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/fr/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 76ba09fba83201d690729ff48c65eece1fd835bdf920870b4dbc2e6c74ae9ba5
- MD5 c6d5a977c7451a82704ac03519f0c694
- SHA1 7ce180b13ed32c1c5b024ce585c4950e65f12809
- SHA512 f84adbf5da3525c4cee4eecdc8c51e1e43ab4e5fc918a5909ea1fb461fa4eeded7f40f7cadc9fefbee402d1a0cfe2a7cb2939345da56dbaeddc421558fd7e3a2
- SSDEEP 192:VWWNv/jzSEYtPpmKJiDjgmlRFI0HYZDKz/VP61g5rxg0XWr:V1NvbdKJiDjgmlRi0HYZDMX5rxg0XWr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/he/DS4Windows.resources.dll
- SHA256 402a5de1643c31cc1f919fbab6d2281f65a4e9bfa51edcc8ddbf1f955eed480c
- MD5 a8b12242993bbb4759dfaccf9c9dfabf
- SHA1 acc3ba20d961ff5afa7de75478c24b47a838d9b1
- SHA512 570c50d74e176527151933962b0b4c0fa9fea216d03a2e939786a2fc5d00894d958c035bcee625d1181eeb416205e8dab622609688d7bc1ac2d17c733f2379dc
- SSDEEP 192:Bu+KU6gI6eiz+E6FOrmEVouoBLeq/4nLPWj9Jraw:Bu+KUY6d+7EVwByqrba
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/hu-HU/DS4Windows.resources.dll
- SHA256 943df0aa8dc1867250c8763a94a209e4ea95036e835dfd5e86d821798fe4ffb5
- MD5 b553fda88b5a3340a9e26ed78bcd8459
- SHA1 dd1747a1cb50cd48570ba22239457278c29ddeee
- SHA512 f10b8db624416e925eacdcb094bab609b84f139442d8a8e3ca58d07fb31614a7a087d65484373393f6552c19f184863f805aa70d9c6c5f06bb2d919480981ab4
- SSDEEP 192:1u+KU6NqG+3vtEYyyZ4RUH173fEIxADNJiu/RIDQa2ur1y1raw:1u+KUrG4vtkR2VsbV7a2u0a
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/it/DS4Windows.resources.dll
- SHA256 649a10355a7f03700a9e0fa790f678b1f9a94ea79475671ddd4c69dd7e8e11f5
- MD5 2292e95dcd3e7ea8a60bdf081969c0aa
- SHA1 78e0fc86a3545d55fdf8d948d609f662a6ef88c4
- SHA512 4e60728941bc88a9cc37f5759471cd74379a7869867b68ea6b0cc7f611eef4fa8cc75e45bcf4a48ee009a484d6e288685b2cf727f1eca89acc8db14a04c81947
- SSDEEP 384:+K+cQdeuKoUN3wBVeq5rEcSbe7tebs7FGQGI1vNq:idTKoUNgJ5rEcF3jS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/it/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d760a6dad79a35aa9283c00ac50b6276efc31e681620bb56a393af41d619c6e2
- MD5 bad880518a5d6ac9ef9719589ec6ed9e
- SHA1 b953350ebba7abdde803d3a2f259a0bc35770af3
- SHA512 194b038e4d5b810a50a42b36117be47f2ef6831654db2aee7fa2029afe35d7259ab110de5e03961c0aa9650ae9ae241f376950f9c5f5d28bf6ef360343cad587
- SSDEEP 192:l9iWWNv/jzSE5tyT1TNgr1nJIhZAf/07mPY1q5rxg0XWr:G1NvbGTNgr1nJI3+07M/5rxg0XWr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/ja/DS4Windows.resources.dll
- SHA256 c528caf8bc4d7fc8b7122649e12239ec721ae56d02a1a3577474acfbf2cd1cdd
- MD5 47d8d1bc70a78cd465cd386794e08291
- SHA1 0ac98da2d512bd9a2fa4e4ed092336f6f3531d59
- SHA512 195ebd10a2622656d01ea543e4596352c7bb454ace355e3c0dc07118cc687ed921a8d987ff5f807ed0e2016b259c927d09ed120520cc388d8d02eaddd737d690
- SSDEEP 384:x43uo0WY0hfQChW+FRVdDL8yz1Vfwf33j+W5T07ma:Itvvh4C3RVpL1z1VYf33jrTuP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/ms/DS4Windows.resources.dll
- SHA256 3aa59b20da26fc8cb2df67405529bd79b5d24c6d0c76e41201164ecf4cebb34c
- MD5 9b3fdaba699b3b73dc7c26ad964cde10
- SHA1 9f1ac7fea5c8addef261590dfa73050d21d69174
- SHA512 b7a9e97362d40420c25e0eb1c202b455bcc99ef61e044268ffe0f9ef16429f1ecfb22e922edfcb0949399c4f743f85ea48b9f31c2a978899536dd8c3b21136a2
- SSDEEP 384:au+3IeRUGOGuF2uuDvHUpOINmI1bnjILTsVuR/k/43deSOBXQYYRadR6:Leh02uSvHcOomEV85USOhQYOadI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/nl/DS4Windows.resources.dll
- SHA256 4696b40e2c1a140fa081347fb20f72a1f8815a0bfad40ef499df06a8d915154c
- MD5 25b0cfbce4ca49d8a407ebca1f2e534b
- SHA1 e82d43e3fa7cae4eaa15a7d6e97352201bb25d76
- SHA512 d9fb7269975d19a04ac772590135ea178eab55a53e91d63bf2b6d45d3e3c810a25267fcae82486243b486f5e8a0cde803b710abbdb456231acc309905195b6e5
- SSDEEP 768:eCuQZaLBZbSa6zyYeOooOni0RCAhn32Pi:nZaLBZbSa6zy7OooOni0RxF326
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/pl/DS4Windows.resources.dll
- SHA256 71ff3fb0ec38de57033177a7b9b8f62669b249ffbbcdc9113e8a16df23fc0fac
- MD5 f8e8d989882282f656c4c85af197cf44
- SHA1 7f08a5e6bdd37ea70982fe2b46131630c27925bb
- SHA512 e478528fd5047207b0969f1043b04cc1310fdb1a44ecf6e0746e0bf2420dd0cd274ba61277bbb7179a9cbd19c882ccb669a13157764b8aba0bf3c69b2029d1d9
- SSDEEP 192:qv+TRU6wKsDt5hEnNaw2BT6EKZSnWBEqhFxey/1XqLraw:qv+FU2sJ5hvBTMPV16a
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/pl/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff97649021c7e0240bd0211ef52ed1cf2b63e20c2663c894e13d16dc8622cc3a
- MD5 8cd586e15f1d08e9e50d421202842570
- SHA1 9b7398d8487c193901cdbf2c2165902ce2a0fb8f
- SHA512 8d82eef2faf4f6d3c919adb5a4543d4260c7f37158e3a7bb689e0a3c8ec6321ae09db50431b38ddbdc3f2678bc0ca8a5d7e4ce7c2cb79b8bd6de1da5ece0f365
- SSDEEP 192:QWWNv/jzSEYtq2dE1cxy8ON0Qsk96sPqX1V5rxg0XWr:Q1NvbaG1cxy8ONHskdq35rxg0XWr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/pt-BR/DS4Windows.resources.dll
- SHA256 d0a278809c621fd214ac0fbea0096ae270fc33a4f8b6b76845b02baa98fb6877
- MD5 b6ddd921a4e387b7f77424bfafe28030
- SHA1 e805f8f0e7bcbf538b0690488ce8865781faa6ac
- SHA512 4bb66ac984fd7168efe15a40050fa359ea55f2e17abd730be76e69b444a572aa5f31243122dfc15a653c29fd2d638837fb5597b876f00588249e3868b154d435
- SSDEEP 192:+qu+KU6jJSS24beENjOBmVz6SupsQuJGd1oaDY1IurKw:+qu+KUPSlekVzCs9UoaDYK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/pt/DS4Windows.resources.dll
- SHA256 5d61ef9b491d267396a30aa5852c3b091bce0d56daf65ab15807f4d8edb3a8da
- MD5 c2c7d5b5de9f61bacc2c9e22db7f3732
- SHA1 6170c1ab726f84698f43690df64e9a0b5370ef35
- SHA512 79920db76593487dc6ce7456d85d05da9fbf91cbf0b2b4fb1575d7cc221fae9628ef677ff731730cf6c646cc006e3a216ce12d30c4f6e4aab1ecace330926961
- SSDEEP 192:E6C++rdJ06efYEA4hxe8YSuOL8roOVdPi6iYcCyrqw:DC+Go6QYB8P8roOVoq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/ru/DS4Windows.resources.dll
- SHA256 8a033917c065ddeb96c7fc417f1a00f60b63bba3a6e3dd73fa4edc6b7918be4d
- MD5 4fba205648064c0594a2444768eeead1
- SHA1 61f77205e8fd05f1a0373b2018a37529e1d0392a
- SHA512 764ad9a3219ff5b5b43521951f65c4b664b49ce7c533f7cfd1980f8fc66d53c91e6805ce64afc8230f438088b75806610987e187c4659fba0b27be4dd852c343
- SSDEEP 6144:rAAdRVKYPbz0YM+eANluxSyyNrQh+uvzaVCtZ8dwezI2s:sAdRVJzmwNluxSHrs+uv5Z8dFzI2s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
793KB
Virtual Size
792KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/ru/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4bb25b212e8deadda89e5ac589453b31b7ae6097210d3b7453a790375ed63f9b
- MD5 38e68beee1b1693d9c5b39a97620fa1e
- SHA1 1590bef59022f0da275b2a62127a5ef0fdea3111
- SHA512 cad11cdd5c91a998c7f30508abe94f2d00cdcf8bdcc60cff3572a93d8167831ec46fd776d32a2e66f3dfaf3188938f43a8b9956b55ea4fe7211639920357cb98
- SSDEEP 192:6WWNv/jzSEfthb7O9JKggIOrCPPzm394in3fwB/CZPl/1O5rxg0XWr:61NvbH7O9JKgglrCPChnYVC5+5rxg0Xq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Lang/se/DS4Windows.resources.dll
- SHA256 1842d35c69422010126c38366629b2611a3f68d6031441b661cfd99ea22b9af6
- MD5 95c19884c1ac45668d20cb978aff4918
- SHA1 503e2106886f8f8838bfd536bb97f7faaef14785
- SHA512 04e4d83b555f891cc3feec1dbc733ddd89fde7939a0598d84efe0bd7b40c3beff8fc694cc6022cc462ca0b8b58593f38154a399ab731869baeea21b8114ed01a
- SSDEEP 384:XX+sQAF7JDMetBoTwuDkf72Ktz3c6v3aOtK:JF7JDMeIwBznPvqx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/tr/DS4Windows.resources.dll
- SHA256 ad1f833341ee960107553de33eaa64e6d761e18817102fd9330b30d90ee757c8
- MD5 acd788532ab980ad2425a95dee10db23
- SHA1 349c462358129eaaa87ca831427a632b0ae66827
- SHA512 d2b2b739779138169fc6f089da8f7ef0138034f95876254fe17276d431a06a8deef8e493220a80f53000b9070fb1057f6a63e44ae5d30051c27b4cea8cf4ab97
- SSDEEP 768:Ieh2oJOrNFF9YnUBCP6xeQNUtRnlE/LQws1:V2oJOrXF9EUBCS6tRnlI8r1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/uk-UA/DS4Windows.resources.dll
- SHA256 bfe830c4d3a4e4ec22fffd3bce858ec7d0721a2220def11c65d3037559ee0563
- MD5 59af7cff48b36a75d0502f19b6c172b0
- SHA1 7039116b6db73315e4af0ace55275bab616d91c2
- SHA512 fc7dc3d9b7abff9bf40a048d8a892bc72ed1d8a6e7ea1527ba9b74e212b192260789fb8909b33b464282510b152c1bc27dc4e58a0dfbe14e6bf52b70c0195df3
- SSDEEP 192:vu+KU6LtcbyLeE64mI6G6F0ulADpJi6C/fVD5SEX1GnGraw:vu+KUGc+LeK6F+3sS3ia
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/vi/DS4Windows.resources.dll
- SHA256 ef1c04f034925a4232e3016a019d34adafb218915da38c1661a5d43f1a6e3878
- MD5 22db060f4f2829c1c536505f3686a6f0
- SHA1 2a07033a3b1fb5e9d2a96bef65f244703ab38e5b
- SHA512 128c06694d3fabfb84e9129d7fe5b76b0e9f454ee36746df4f76477e7d39649862f8b569033e6a424077cb9290fd60e1cf72fe393d99f0000344ec49308750d2
- SSDEEP 384:rA+UPKgLj18AX0XkB9uUe5M//YsnkgJ92zVLMLrH88DY2Szuc6:WigLj18ARsXVgTUQM8DY2au5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/zh-Hans/DS4Windows.resources.dll
- SHA256 2ba0ca8c58e530d8af678b792cdb20535b5b1d9a70f8b9d6936441bc3222052f
- MD5 2fa6fbf2345009470412996fae9afac9
- SHA1 56700838740ef8db80d6e0ef7e34edb87f42da23
- SHA512 7b298eee41effd2f71c3486e53211354e7e1270f5ed46edbaa2642190c8a854e9c8286453d68593a871c282d2213f3f0ff140eb00820fd671b67f800b3340b60
- SSDEEP 768:iv0+ajaQmq4PEy0kzU4JSu8cFhOAMA+VbfvV8E3I6yoOxPRXUhimz2ESU1b5zip8:iM+ajaQmlPV0kgxcFhOAMAQb3V8E3I6j
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/zh-Hant/DS4Windows.resources.dll
- SHA256 5114894a0034482ad678576ce9d939034fbe397d90d29f8d425394117689e6fa
- MD5 a75b4cd0cd7fa6a7bfd8806c3ec4a04b
- SHA1 a3bcf550fc979828a297f27afb71ce85586a394b
- SHA512 b79118eaec76ee446c94bfd1fd46d641aac49467bb7b4d34446f7c469dcfe8053fb6a3340e591e7ff51d331660a52dc3b137f08697cfb707ea72a51bd79e514b
- SSDEEP 384:EX+sQlsaCsNr0+A4YKmShuWidkP5zaQK:vsaCsC4YKzxiiz0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Lang/zh-Hant/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c7dfc9c3f931c19d502e5be2adacf71da4721705f72531bb93ac6b1423fdf65c
- MD5 367090557d5597a09728b6d264e1f190
- SHA1 d54394a36de1b07c58cab6e24c9a52f4968ab4f3
- SHA512 b923bde529da23ab2ba52d68e76d602d6ad5373b801f4028927622a3ccb08a43a860a7b400f87490e593bd8b9182aa15dd4d0da5defb97b4eed194fef294b37a
- SSDEEP 192:7WWNv/jzSEhtimYtEq40uI7Sr2fqmxkNeo7R7L7c7xM757odHK9nPov1f5rxg0Xq:71NvbOtEq40uYSatEdHwWloA9PS5rxgJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/MdXaml.Plugins.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f79a5fc2f49cde6041546f712e387cfb98c28f2ae828d2da5c4f83544aaf33ae
- MD5 764571ef7701efe91ab8db6973dd17b9
- SHA1 8cc1a2650bec8fbfb3b627673e078fbb01a1fa19
- SHA512 0bdbba66ffe053c2893cd5f5cd2cc9bd12eafa939e7d0c6563f6212ca790cdec752c3b57132612261ff3b1183200a9cc6512a68debd428448c2eb9b5f82a7b71
- SSDEEP 192:1/d34EfBANlPJ4Za67WIq0J4KjCHFj73X2V:P4EJClPJ4ZayHq0yKjCN73X2V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\MdXaml\artifacts\obj\MdXaml.Plugins\Release\net5.0-windows\MdXaml.Plugins.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/MdXaml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cc06db72d3108b379927bf91ae778909b0fa0781c1b40824d0a07f35b69d175d
- MD5 b5cdcf10ce45741ece1c387d10055989
- SHA1 78ad7a88d86e750dd10b5fc2b9e8938c01596005
- SHA512 a4d450de6645521f43217eb2dbb2e917411af893367814c0c6912c6400a2255cb98c30075ac6526ca1eebf19be80a041244b26d3fd5dec33eb8e536e9939334b
- SSDEEP 3072:3P88FghOduoaijGV15gmNRCWL4lTK5qftW:f8NOduGj+RtLyK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
132042
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\MdXaml\artifacts\obj\MdXaml\Release\net5.0-windows\MdXaml.pdb
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Microsoft.Win32.TaskScheduler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3ef8d978dfb0a2611436de1872ef76abbb0f3ab1368bcd2bcd0bb584dbf9d60d
- MD5 f991dca7413cb6a9e28ed527205655b5
- SHA1 d9e6ef1e9295ae6ee48daaba10b214bff9a6cb74
- SHA512 036e0ed4df4bec37dcb9e549bd829dc988c6cfff74af75a988347065e61e3b010bc2a3874b3a2550428d6a34e71f087c195bb1e854f908355942bf7e1403b7df
- SSDEEP 6144:s/MJkc67TmIylYH8w6NFtjVpX18BxWbCIi:s/kkc67JMppdeIbu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
341934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net6.0-windows\Microsoft.Win32.TaskScheduler.pdb
mscoree
_CorDllMain
Name
.text
Size
326KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/NLog.config
- SHA256 0b09c52503e6949bbed09181e5bae9506752b64bc1cd9e571e1bcc51a5e34e5b
- MD5 11896215efa8bcec73387ef26ab68619
- SHA1 276a76702b80f85da7d5e18afa0a48a8af1b75cd
- SHA512 6f80e74a559497563f67e9844cfc27531a934ad93674856f4eb4931b40f5bb3d3d10ad4b5cfd8e9eda9c14d858582eb343eaa7131212dff2247e1235c992639e
- MD5 SHA1 SHA512
DS4Windows/NLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d1fa8afdb365d0e921f9dad343a3ffdc9b7beebb2eaf366de09dbdbbf4257423
- MD5 d530d8481f6df12b200839723c70ad6f
- SHA1 ff2c2ab7866b1c97186bc4de124d6bc682096c99
- SHA512 49554c594b82edb3e2350e996d8771062eba6e3ed03f1e2fc6a50fc89ba5bc914baafc01a7a266161dffe7d1a65e4ce0df1bbb9990c2675c53cc71954d4e82a3
- SSDEEP 24576:2NfTnnnvnrP73xsciU1iVrUR4ndguriMGRAYmDo:EfTnnnvnrP73xsUuriLmDo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
827674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/NLog/obj/Release/netstandard2.0/NLog.pdb
mscoree
_CorDllMain
Name
.text
Size
800KB
Virtual Size
800KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Nefarius.ViGEm.Client.dll
- SHA256 8486b3126ce49ddd77456d7beb2d5be98ba77db699dbfff1e6fe1cd9dc8a7c02
- MD5 816e2195f1dfae52d9df622d84bc2795
- SHA1 d5a74d061a75b53f89bd3187d118889c3bb163ea
- SHA512 685d6c3a9d3f47eb1003c8fd614f1c58938b49d23b354b729a779f4142d696d8eff254bb5465ba602578b6920f7fcb64ba318fbc0b8695fbb2f34593876112ba
- SSDEEP 3072:Fprshh0vWF7S5RnX6B0E7EiDASQKwwpJ1UtADKZBoTpanY0qVbnr2ZW:frs/0+JSPX6Bx9kDKwycZRnYe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
206KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Ookii.Dialogs.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0b849a11ae23e36d70a0dc1d7a1e9be244855c28dabfd50553ddb34448aa2da8
- MD5 8b9618ca8a33bc141daf1cafa9e4101b
- SHA1 a01b2a55b799210ef3e82ac56091bef46f948f7d
- SHA512 d466aff8f3adaf6f18d4e521fa25605f879eb065441617888b13542cb30602ef3f1b804befb0a2714729f46d9614525f59eb8384421fda63cbb548514c83cc40
- SSDEEP 1536:7ToBF+aPNGVuhMNw+LOp5B6Uor0pB/XjTVJIaweogtS5MKLh8sm6b0HAl:7TeF+dyMQmMxXjTVHc5/kA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
111574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\ookii-dialogs-wpf\ookii-dialogs-wpf\src\Ookii.Dialogs.Wpf\obj\Release\net6.0-windows\Ookii.Dialogs.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/SharpOSC.dll
- SHA256 6419a701ce8ef5baad072ff14c232a3557525bf8bb4e3fd6ded09b2d3f22f07e
- MD5 7172055ae13d1571b9a516523e18af66
- SHA1 1d74d3fafdb425e19be24711245cc0f374d1480f
- SHA512 736b67440dae8707fd9737b5659f83ca199d3ce2164f4d420cc2510e4cf4cdf73058dd043d59337535ec7e4748d5a8a2442a337cd829cb06596b97674a42806a
- SSDEEP 384:edCFLqY6aCo3ZozVIyvPvEdlp29bFYd7mz9mqhFz5MqIy4+:NLcXo3Zo/Edlcgd7mZmqHdMfyN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\ryoch\source\repos\SharpOSC\SharpOSC\obj\x64\Release\net8.0\SharpOSC.pdb
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/System.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36056b240f488b7da63720585d84f93183cf7bd05da68d5340151ebdd85e4d88
- MD5 276550f496b54483a66607af10d72168
- SHA1 f8ee012bbb29e11ae0a8166a34a715dfefb88905
- SHA512 67fc264c66a2c8574df4f88510a8d32a0eb7f7daa311a7b135e209d9cfcdb6c84554e340d5e8b91d0fe462267742d77058b4b9c4b782a85a2b924b8a4d2a628f
- SSDEEP 768:wrEP45HksbMU3se5c/0b/9OOV1BCUkioV0lG7H0CrkiSLJKdbYW6ofZOOPO9zK:gbz5wugOV1zk1Q4HxrxS9ycWvf0OizK
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
81:88:a6:30:2c:9f:a5:95:6e:d9:c8:e6:f5:f8:b9:7c:da:c5:1c:6b:ab:b4:a9:55:42:cf:a3:3b:76:67:bd:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
68690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Management/Release/net7.0/System.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Tools/XInputChecker/SharpDX.XInput.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 350195201205840b38aee094bcead4c78b1661f3570a7caa5c36b86ce6d03ff3
- MD5 b16aaf6fa2e6432e0c342a166e98a372
- SHA1 27cc51549ba116d51865ab71177b10a278a1c692
- SHA512 58ccc2bd6502b25e7973721d9e4051d8250a9882f47170f4f43c096ee550f483b9fbce4c690a35294425e559456a48054c3a541ef234894efeca8b1dfa74fc1b
- SSDEEP 192:TqgXfBgFL9ssWdkVrguQg7klOjWVAyLt0y5RoID1sgPpffk6bZ3RkiuZM:TqGBcL3CjlGWp2y5RQefk6ONZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SharpDX.XInput.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Tools/XInputChecker/SharpDX.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 518d45a5aaec84cb37e83ee2cf58c503ab6a25febb8c48b53316340c967e84bd
- MD5 6c00b8be8fb6ff838c79c9de405db1f5
- SHA1 faf1f8f0d2d56eb2377063906432cce29d9f1839
- SHA512 e092aaa1bac82337bda113cb88a4990a9615c9cad8757af650caf1a327ada6ed83e4c6cf2b77073c028d986554b82ad16bc3e1e7a8b4466324201d8daa425ec5
- SSDEEP 6144:jG9J7gpDfCvbW2HHWUwQ9N/+bydXB33XbEOERabANrG:jG37gpjCjrH2UldXJbkRa6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
281166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SharpDX.pdb
mscoree
_CorDllMain
Name
.text
Size
267KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/Tools/XInputChecker/XInputChecker.deps.json
- SHA256 abd18c73ca8399ab7add72ac4862fc73c800d86b67b114483c13230a73a7a5ff
- MD5 78e8f0d355f9431f57e0724d7ee01afe
- SHA1 29775909df72fe3cef6957cf406ad35c47e67c4b
- SHA512 cd40d7d7932f0974a10f3b19f60a66ff803fe0638f92d962261c806d00b4a6f7260d82ca32461e9a018f5143521397c3857c26214db97e998c73c7bc2bf254bf
- SSDEEP 384:COYxOncu7IkYt/HtokzhO/uZkenMlXunNuRmkUfVgVL1ON2hjljtDxxAqGkyVStH:COlcu72nBQRSiL1ONeljpZKStv0hQR
- MD5 SHA1 SHA512 SSDEEP
DS4Windows/Tools/XInputChecker/XInputChecker.dll
- SHA256 6c25f0eb68023b20e37a689f895fe7c57eb8699985d98451771067d4d236a9db
- MD5 9b705ab9fe6c65f50c0d78a68b5c7630
- SHA1 9430f03234653675889a97fb485b9103881f5455
- SHA512 1745879302bf071a59daa387e83de8165e6dfdd2efd49c7184605cb8f52e1e912ee844f073db8b13cd2290b599af14231216a9fdcb6fdbd9047c59dc275178b9
- SSDEEP 768:LLTNgKC5QqKOOjUhJDf5X9BGWhAGe6GvlQtYcFmVB6K:LLXqKOw6Gvl8mVBl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DS4Windows/Tools/XInputChecker/XInputChecker.exe
- IMPHASH 5c16479801aac25e19e4d3e71f54842d
- SHA256 ac6def1a88bc14ed6f546ebeaff087110ebf82b47b41c62a4a7196cf452c2056
- MD5 dbaa035b5d914b731c636bc44cc61f22
- SHA1 50b167946c1f390e5eaac3e24fb4f17cd454f9ea
- SHA512 32928d7a2ac62c70d6ea79dc4c5a14f7a9031288ffab58f0c8c9adcc76ac698690276bde774bfd4bb6ab1ab866bd1ed58dde537d49548732b363596692fd0745
- SSDEEP 3072:BefQZKfOC31VwyY9egNtfNjJvjmqqF7Hb/LMm5MMD26Gvlq8r:BDewyY9egLRePYm5vn8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_exit
__p___argc
__p___wargv
_c_exit
_errno
_register_thread_local_exe_atexit_callback
exit
_configure_wide_argv
abort
_initterm_e
_initterm
_initialize_wide_environment
_get_initial_wide_environment
terminate
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
__p__commode
setvbuf
__stdio_common_vswprintf
_set_fmode
__stdio_common_vfwprintf
fflush
__stdio_common_vsnwprintf_s
_wfsopen
fputws
fputwc
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
malloc
calloc
_callnewh
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
toupper
wcsnlen
_wcsdup
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
_configthreadlocale
setlocale
_unlock_locales
_lock_locales
__pctype_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=32533,
count=10, id=259, version=32533,
count=86, id=261, version=32533,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=209, id=1, productName=Unmarked objects,
count=10, id=265, version=32824,
count=1, id=258, version=32824,
DS4Windows/Tools/XInputChecker/XInputChecker.runtimeconfig.json
- SHA256 8c1a6b36317dbd95550238fcad9ecb797626cadddcfb707c1de48dfc7c058228
- MD5 c4e22c63e6fbafd17fde20fc5830b27f
- SHA1 b51df07b9424af80040de1d29d401f292e899ab2
- SHA512 dbebb81d1194ea4c43abee569c636ff8ac388570cccc72ca898f9bc54bd4cb0eb1c3334a91c11d508ee02c9a4e242ea1ea6e1b7aa47266c2e0d6bdfc1b58b6cb
- MD5 SHA1 SHA512
DS4Windows/WPFLocalizeExtension.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d736877bbd768c95255945fd91f61a40f1d9d9bc3828fdd0a4c15283d3395b6
- MD5 b7be5ad601b0b488d1ed19c14d2feb55
- SHA1 06e81f0c708e45f0bd38e94c333289ca637c74e0
- SHA512 8d597a0bc091fdb5e5aa5d5d44d59b6ce7c6e03c6014c12da9e7376e07edb893569f6a1ada573268c7c93dcb029f676fa79b105e1b08b0fe89304f3ae92fa8ad
- SSDEEP 1536:/RknGT/XCnoY1AEtsp3utgC0Z0/3DRIpKY/iBPlWJjLVEdOBp:/aGGnl0pl1Z0/3lIliwVkW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\WPFLocalizeExtension\WPFLocalizeExtension\src\obj\Release\netcoreapp3.1\WPFLocalizeExtension.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/WpfScreenHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82f76dcb9d451e36132210a8c9f2896df1fd0162823e7256fba9472dff0636ac
- MD5 e07c6bc7a3e5e33a01aa8d2115f87e35
- SHA1 b9921f26e2c1cea4c4fc2b74748dd492014f43be
- SHA512 f951e8ebfa50d37d6f84113d699819b44f87fcadd1e50543cbadbff8fee268d10b4446fdfd3eb9b4658a953c54c4c4708c1b80b3bd0ddd21bddd695e6d74ec44
- SSDEEP 384:+xNoX+bsegpIKohFn5KSQ3ciJMq+VgaNiJ1hBWT:k1bMpIKIMLS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\s\GitHub\WpfScreenHelper\src\WpfScreenHelper\obj\Release\netcoreapp3.1\WpfScreenHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/XAMLMarkupExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a4ec5000147a924b032d18979b7ee9fef3c382129956c58d9828cc2515a17ce
- MD5 5dcced37c71c67061cef2ca0a6f42487
- SHA1 950531040c63d941bcaf9144dd080a3a7ebc4fd0
- SHA512 104cf87ac7803814ef57e44ba3f89eb926ced042c9b71bc31ca9ed36d0216262239beb5c2b86457046aee7c225b8ecbaf6d0e493a37eebd492b0dbeab6918e6f
- SSDEEP 768:G0SMxZw/niMQtc9ATh3Zlzh+KPU6BFVePafTeveObJKlG:VSMx9TlN+8/FVmaL+FKl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\XAMLMarkupExtensions\XAMLMarkupExtensions\src\obj\Release\netcoreapp3.1\XAMLMarkupExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DS4Windows/runtimes/win/lib/net7.0/System.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 979fee559e30cc0fc4af6f34548a225b6f08cae0a6c61d24a3e389b3f22dc9d1
- MD5 631f2191c0977d2c4e027b60bb1980d8
- SHA1 725cbea0c29bff5528f917247c58e236d1f3481e
- SHA512 2813d958a58f5b722c12777fba7f76449f59fd44be18217681e47a3665b0a87496841e95f8fef98814d4c0886e4c51d39a3f3d9f6e177012b4e1cc6bac0438d1
- SSDEEP 6144:CMbKtVL1HrbIQU+eGyk5WhFDfD3N9nEdMjM88r5AY58dY3ZEYG7bV8BZJippppdN:v0VLd4QU+fykAhFDfD3N9nEdMjM8U5A3
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9b:38:b3:d4:d8:e5:6c:16:5d:f1:85:bc:32:73:34:d3:ec:86:c9:e6:fb:54:00:f4:62:39:b6:42:37:d1:96:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 23, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:06:9c:9c:5d:25:e3:10:aa:47:00:00:00:00:03:06
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
289934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Management/Release/net7.0-windows/System.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
275KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ