AutoClickerv3.2.0.zip
- SHA256 43eb23c5036aaaa93d076cc01d09ccc932df41369001835a91f8a9251d31727c
Overview
overview
3Static
static
3AutoClickerv3.2.0.zip
windows10-2004-x64
1AutoClicke...config
windows10-2004-x64
3AutoClicke...er.pdb
windows10-2004-x64
3AutoClicke...es.xml
windows10-2004-x64
1AutoClicke...sm.xml
windows10-2004-x64
1AutoClicke...on.ico
windows10-2004-x64
3AutoClicke...ng.ico
windows10-2004-x64
3AutoClicke...s.json
windows10-2004-x64
3AutoClicke...le.dll
windows10-2004-x64
1AutoClicke...le.xml
windows10-2004-x64
1AutoClicke...le.dll
windows10-2004-x64
1AutoClicke...le.pdb
windows10-2004-x64
3AutoClicke...le.xml
windows10-2004-x64
1AutoClicke...og.dll
windows10-2004-x64
1AutoClicke...og.xml
windows10-2004-x64
1AutoClicke...rs.dll
windows10-2004-x64
1AutoClicke...rs.xml
windows10-2004-x64
1AutoClicke...ry.dll
windows10-2004-x64
1AutoClicke...ry.xml
windows10-2004-x64
1AutoClicke...rs.dll
windows10-2004-x64
1AutoClicke...rs.xml
windows10-2004-x64
1AutoClicke...fe.dll
windows10-2004-x64
1AutoClicke...fe.xml
windows10-2004-x64
1AutoClicke...eb.dll
windows10-2004-x64
1AutoClicke...eb.xml
windows10-2004-x64
1AutoClicke...on.dll
windows10-2004-x64
1AutoClicke...on.xml
windows10-2004-x64
1AutoClicke...ns.dll
windows10-2004-x64
1AutoClicke...ns.xml
windows10-2004-x64
1AutoClicke...le.dll
windows10-2004-x64
1AutoClicke...le.xml
windows10-2004-x64
1AutoClicke...ty.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AutoClickerv3.2.0.zip
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
AutoClickerv3.2.0/AutoClicker.exe.config
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
AutoClickerv3.2.0/AutoClicker.pdb
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
AutoClickerv3.2.0/Microsoft.Bcl.AsyncInterfaces.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
AutoClickerv3.2.0/Microsoft.Practices.Prism.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
AutoClickerv3.2.0/Resources/Icons/icon.ico
Resource
win10v2004-20240611-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
AutoClickerv3.2.0/Resources/Icons/icon_running.ico
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
AutoClickerv3.2.0/Resources/keyMappings.json
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
AutoClickerv3.2.0/Serilog.Sinks.Console.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
AutoClickerv3.2.0/Serilog.Sinks.Console.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
AutoClickerv3.2.0/Serilog.Sinks.File.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
AutoClickerv3.2.0/Serilog.Sinks.File.pdb
Resource
win10v2004-20240611-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
AutoClickerv3.2.0/Serilog.Sinks.File.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
AutoClickerv3.2.0/Serilog.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
AutoClickerv3.2.0/Serilog.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
AutoClickerv3.2.0/System.Buffers.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
AutoClickerv3.2.0/System.Buffers.xml
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
AutoClickerv3.2.0/System.Memory.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
AutoClickerv3.2.0/System.Memory.xml
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
AutoClickerv3.2.0/System.Numerics.Vectors.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
AutoClickerv3.2.0/System.Numerics.Vectors.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
AutoClickerv3.2.0/System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
AutoClickerv3.2.0/System.Runtime.CompilerServices.Unsafe.xml
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
AutoClickerv3.2.0/System.Text.Encodings.Web.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
AutoClickerv3.2.0/System.Text.Encodings.Web.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
AutoClickerv3.2.0/System.Text.Json.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
AutoClickerv3.2.0/System.Text.Json.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
AutoClickerv3.2.0/System.Threading.Tasks.Extensions.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
AutoClickerv3.2.0/System.Threading.Tasks.Extensions.xml
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
AutoClickerv3.2.0/System.ValueTuple.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
AutoClickerv3.2.0/System.ValueTuple.xml
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
AutoClickerv3.2.0/System.Windows.Interactivity.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target AutoClickerv3.2.0.zip
- Size 646KB
- Sample240612-xe3hyswapd
- SHA256 43eb23c5036aaaa93d076cc01d09ccc932df41369001835a91f8a9251d31727c
- MD5 c62ddb38f13e5fceed8fcf2cfa5607c9
- SHA1 af63cfe01be4bd8168e3c2c65bf4ea4a8e02ac98
- SHA512 dfb05511feede5fc526dbe27659c92ecd09872ba8bbe00f56e93190bd03f2a41a18cf47a193344c948368f5b5a8d818cebc9613442fc1284ffd27a045b51a128
- SSDEEP 12288:BDmCunSRUKCMPVkAcOZSUm8qJhIdbfRofh3J4/5pBwHi66B1gk:rRDCck9OMUIu7a1AXNN1gk
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/AutoClickerv3.2.0/AutoClicker.exe unpack001/AutoClickerv3.2.0/CommonServiceLocator.dll unpack001/AutoClickerv3.2.0/Serilog.Sinks.Console.dll unpack001/AutoClickerv3.2.0/Serilog.Sinks.File.dll unpack001/AutoClickerv3.2.0/Serilog.dll unpack001/AutoClickerv3.2.0/System.Windows.Interactivity.dll
File Explorer
-
AutoClickerv3.2.0.zip.zip 646KB
-
AutoClickerv3.2.0/AutoClicker.exe.exe 151KB
-
AutoClickerv3.2.0/AutoClicker.exe.config565B
-
AutoClickerv3.2.0/AutoClicker.pdb103KB
-
AutoClickerv3.2.0/CommonServiceLocator.dll.dll 9KB
-
AutoClickerv3.2.0/Microsoft.Bcl.AsyncInterfaces.dll.dll 20KB
-
AutoClickerv3.2.0/Microsoft.Bcl.AsyncInterfaces.xml.xml 17KB
-
AutoClickerv3.2.0/Microsoft.Practices.Prism.dll.dll 149KB
-
AutoClickerv3.2.0/Microsoft.Practices.Prism.xml.xml 380KB
-
AutoClickerv3.2.0/Resources/Icons/icon.ico66KB
-
AutoClickerv3.2.0/Resources/Icons/icon_running.ico66KB
-
AutoClickerv3.2.0/Resources/keyMappings.json13KB
-
AutoClickerv3.2.0/Serilog.Sinks.Console.dll.dll 35KB
-
AutoClickerv3.2.0/Serilog.Sinks.Console.xml.xml 16KB
-
AutoClickerv3.2.0/Serilog.Sinks.File.dll.dll 32KB
-
AutoClickerv3.2.0/Serilog.Sinks.File.pdb10KB
-
AutoClickerv3.2.0/Serilog.Sinks.File.xml.xml 42KB
-
AutoClickerv3.2.0/Serilog.dll.dll 123KB
-
AutoClickerv3.2.0/Serilog.xml.xml 283KB
-
AutoClickerv3.2.0/System.Buffers.dll.dll 20KB
-
AutoClickerv3.2.0/System.Buffers.xml3KB
-
AutoClickerv3.2.0/System.Memory.dll.dll 137KB
-
AutoClickerv3.2.0/System.Memory.xml13KB
-
AutoClickerv3.2.0/System.Numerics.Vectors.dll.dll 113KB
-
AutoClickerv3.2.0/System.Numerics.Vectors.xml179KB
-
AutoClickerv3.2.0/System.Runtime.CompilerServices.Unsafe.dll.dll 16KB
-
AutoClickerv3.2.0/System.Runtime.CompilerServices.Unsafe.xml17KB
-
AutoClickerv3.2.0/System.Text.Encodings.Web.dll.dll 66KB
-
AutoClickerv3.2.0/System.Text.Encodings.Web.xml61KB
-
AutoClickerv3.2.0/System.Text.Json.dll.dll 347KB
-
AutoClickerv3.2.0/System.Text.Json.xml238KB
-
AutoClickerv3.2.0/System.Threading.Tasks.Extensions.dll.dll 25KB
-
AutoClickerv3.2.0/System.Threading.Tasks.Extensions.xml9KB
-
AutoClickerv3.2.0/System.ValueTuple.dll.dll 24KB
-
AutoClickerv3.2.0/System.ValueTuple.xml.xml 142B
-
AutoClickerv3.2.0/System.Windows.Interactivity.dll.dll 39KB
AutoClickerv3.2.0/AutoClicker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a8ce190c42d78e56920810c2d2534cdb90f22817d63cad7cef475c77e7b3f126
- MD5 44423f2b193470bb5d7388b093453fd1
- SHA1 63bef98805eda8aed304f6fd61e924bea0deea89
- SHA512 9ac04a834644303a9eb6494417ad073b8a839e10a1df2b16a09cfa0291dcd23b49ce6b7d8ee59ce48a00b0e260ce39a209255e38c44e28c57a647016a8334dc3
- SSDEEP 768:23LdWiH1FPPPjOuvq/MzBKV99f+7tSobPIYOO8CZgxQ+SWR2WXAdKYx4GYMc8b8T:vc3lv4H+kVC6xrqzDg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Repositories\AutoClicker\AutoClicker\obj\Debug\AutoClicker.pdb
mscoree
_CorExeMain
Name
.text
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/AutoClicker.exe.config
- SHA256 a52a88fea8cbfc4465bfa4d520879c29c5f2366502db608f490b42a45658ee52
- MD5 ccf2419187b9583166f17a82971d6ec5
- SHA1 3bebb957e0544d7e745823cb4d2b3b9fffad8440
- SHA512 843ef6024919683fbc71bdfc6910863eeb0d4fc0afe2c103a7f525e60ef2c7503b096074ff3ea4e0e32ad44def3d438e129f4958bb1ed147c759cd12a1ace1eb
- MD5 SHA1 SHA512
AutoClickerv3.2.0/AutoClicker.pdb
- SHA256 8a8d49257f00a0e168b3ef3337ff86bedb8dbed4bafb0c6cd763c426b8dba1ad
- MD5 f6b8f197e5a6b70d91c40de8ea0e4745
- SHA1 fbd827a4d5ddf812dd8f5af2563b2cdc68171e2e
- SHA512 cb36a5b815e412a8315b31bd76fc72c7d1bd1fcdbc7cc66cdc8bb864c1fa15e9daa1c8d61a698a173e4c6d32d16eb2c7de1813386fceb082b4649a12eff52609
- SSDEEP 768:aHepyt7/UwOuypuGf8UsfxxRUtqcsQSB4K1XtFnH0q5OQPqOL6v0LuIX9FXRhCCE:AvxUqLNOvqPKCHTe
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/CommonServiceLocator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8951f1b70412949c6ac5f5a73441e689d954522ee199f17f56c97d3c90908afd
- MD5 e5f3b59ab9fd9157857d69b3d9611d0b
- SHA1 057db8a55c224569a192f24c88f7cf0af02dd9bd
- SHA512 425261a0f0487a8b7f2c99ca41adb4535c90a561792076a67c9fad7dd9faa30989a64d59e4b281aefe5943bae0b19b5b381b6a7e9ed265836a726292d8edc623
- SSDEEP 192:RVtbOf3jdnqSoG4MUzGRxHjgiqyOwFRc/giW:RVtaf3jP4MUzOxHjgiqPYiW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\commonservicelocator\src\obj\Release\net48\CommonServiceLocator.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 075ce79e84041137c78885b3738c1b5a03547d0ae2a79916e844196a9d0ec1db
- MD5 1ee251645b8a54a116d6d06c83a2bd85
- SHA1 5dbf1534ffbff016cc45559eb5eff3dc4252a522
- SHA512 9f67fd0566eac2da4253d08697daab427e4e85780615d940f086a88424dcbb0563abae7e4824088e64ef7024c1bb3bbf324f2d07bc7ba55f79e4af3c9ea88e97
- SSDEEP 384:69P2wZOXm7YJVHTe+0VJI0vrdaVemxO/f7vWeq/WIdHRN7bg30uw7lGsV9W+:u2zmYrHCV9cIL6TbtCSW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2e:cd:4e:28:19:f8:63:82:e2:a7:f6:b1:74:ac:ab:f9:2c:f1:e4:ac:d6:1e:f4:48:7a:70:73:3a:a3:7c:24:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17346
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/net461-Release/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/Microsoft.Bcl.AsyncInterfaces.xml
- SHA256 ca53d9b1bbea04c30db4186b015b7c57dce7c5ecdf1cfac9e4afe9ffcf6910f0
- MD5 0737b770ba5d854d4887a8f4d9c8de04
- SHA1 40a8a356d807d71c102c91d68ad1a0ad6e3fdda6
- SHA512 39a48874d547f714922f4864d3a34c842ac0898b09040796a9046182c093e3ca70f1d20f5d616721129e8d7f6a1f1fdeb3c8277c6bb2eb53b6dc8ea5966003c7
- SSDEEP 384:XgOpngSae6jWuTPP/xM2fB8qnmltJ5XZzRzgqW81Fu3DRmfCh7sE+siDBQsFaIs7:0FQa+TDm
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Microsoft.Practices.Prism.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e4ef152246eb9d1ebf58c2bb93ea038232afa0c1df03b6d3a9e398620938759
- MD5 1488c726a98f80c3ddc6a1d00a8d0b8b
- SHA1 824ad1174e5c2fc5c68b04e68c39c35e1bf4e812
- SHA512 904c2abfe632021bc66ea638694baeb4e173486e7080cae36444bb4a1e15e7f5f58132c96429837b77fffad2154eee4e773829a65002c670cad0a7afcbb839ce
- SSDEEP 3072:qu0soBU/+xoVLg1B217f0w08hwU0I6hsKuMt+PA84Hz:qu1Vc1E7f0rUl8s0t+nQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:cf:aa:79:38:92:bc:e4:b1:6a:91:79:8f:50:53:75:8b:29:5e:5f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 14, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 25, 2006 - Jan 25, 2017
Minor OS version
0
Major OS version
4
Entry point
151550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\prj\PrismNew\Prism4\WorkingDir\PrismLibraryBuild\PrismLibrary\Desktop\Prism\obj\Release\Microsoft.Practices.Prism.pdb
mscoree
_CorDllMain
Name
.text
Size
140KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/Microsoft.Practices.Prism.xml
- SHA256 e82f59726374b3acfa05b038c882b087f4a3cc91b5f2cc4ca3a5a8b0d0b60ba0
- MD5 65014c44702ca43a739bfe9688a84831
- SHA1 c076f7c17bb076be64d833fe1b4c306b4e9a05ba
- SHA512 052234fd9cd6f82359f669660ed338248c13afa08378247a2d879a964c13f83e0b5a155c0dad78ca4b155d5ea4efce013804cc82aed15df109326d21f366b437
- SSDEEP 3072:iiquJ1JLaJhnNCu9SikZPoZKHjApiqDtAbG56w2CEw:iE1JLaJhnNCuAikUiqDtV56w2C
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Resources/Icons/icon.ico
- SHA256 e186ab8fec275ee81701bb161f4ef34c69f69419936c43505b5dcda6d4b9a248
- MD5 a78008e9c55fcb98c9adf7e1263d8464
- SHA1 46fa36020c1c70bf3649f66b92ce09e8d9a112b7
- SHA512 2bef99dce4e8fde4f7e044c94577099e7e7d7bfba04e6886363fe5f23040fa07eac9698f9cf88258358d60075cb14954f1d6948c9bbf2e6b9d93cc44bcd52c48
- SSDEEP 96:ndD8is8lmn78G276E85Z2zUH8lIE8lwp28z88lcz8m:h8b8H8X81Y8z8n8m
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Resources/Icons/icon_running.ico
- SHA256 6a05921b9f60a78f928b95382dd3005c8c3217851c43090e12965415299d0ebb
- MD5 4f1487da2dd64f4313c3520b80ac81da
- SHA1 1217a1adf889220292b8a924ce6f71cb3bb98b17
- SHA512 3e03722ade53ced6a92c7f80b04a31bd33a493de0e0ce1ea12d00a6913c2127c81fbc13b802815282a251e070d014d2027240567dac7289c9ab3a756805d3aae
- SSDEEP 96:iiIitw4Y+OFNjLoWGIlTL2FPEN+YswsfTnnI9Q:64w4LeM+/y0Q
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Resources/keyMappings.json
- SHA256 0d3e3c266198d8f68460ec522d2d3915f487afde3dbbf72a052157b2e13374da
- MD5 9086691d3237737d380505930380e319
- SHA1 705d51d6a5059b42fa859ca996db63f5205a403b
- SHA512 4ea13554cbb0813df7c398bad1f1a3a8c31dc57cb9ec801ffa386775f1158acd1f62b03721f03e98bee7f5ea5e36a7808db678181abdfb8be83ed4f125fa355c
- SSDEEP 48:PsH5U/s9uR/s+g4/sQe/sWn/sLNn/sVgf/sUk/sPa/s7X/s5vaj/sWw/sHyZ/slp:5GNnQIxwJ3iEfcVopXrv7ECbhX
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Serilog.Sinks.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5be08ce2fb67a7937669cb878134b2832c725ef8f07de7577c150efaad5d1a2
- MD5 f526bdf426addec5f78065eb870d9058
- SHA1 71062e45cc998965e3d0a5b34661e44f30f96938
- SHA512 e00ab343ccb7e5d7d2cf6228c028e89d956b2ee4c3b230d2846a9e73e3b9ca57085bb11746e7ffab50f99a19207e3dfdb96915eca67c1d3585d338724f7988a4
- SSDEEP 384:ULeNXtBLFiEzbsTnF4HBhSoP9xc0So6vY3d+G8ic2g2223TXLd/KU2S/+fy1anrP:WeNXtB/SoeK7XB/KSp3uXEZK2ZT+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\serilog-sinks-console\src\Serilog.Sinks.Console\obj\Release\net45\Serilog.Sinks.Console.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/Serilog.Sinks.Console.xml
- SHA256 fc7cb577061feeb6a06c24207b0ba1d5f5cfd6abd4f8d15cdcf54469067f13de
- MD5 ebe0a1e5f2373700ef7057643c50b52f
- SHA1 c89bf980c47eed5d954a4d8b2612d22109f4c555
- SHA512 3c5b0d5c97220c43c4be24546b51befdc0e3315f1c3b3ff1c16e39068fe3e09fe311909741e365e3c7ba23c004d1fe9d0deb55917bfd317ca7850b709a6d44d0
- SSDEEP 384:lrqH3zEY2IbFbmYJP9d5nXPpUcbVDLiDRAAhce3AsVmxXD4XCWOBvuCJj3E+8ygJ:wRdPxgLJx
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Serilog.Sinks.File.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b70dc2eeceb1963f9c3690c1cc8ffa793b280e903fa9a31780e6a7bb0bdfcf9
- MD5 c25357a7950dcfc7f85ee9d593cb1a24
- SHA1 6a533712852465ab3c11b5c76004312d6482f07f
- SHA512 30ca628b17b2a51bd9974fe1380caf728e7826c2bb552e4bc5ac15be8f819e908fc1744932db23734fec64e0f2c758372d8c49d019407efdfb076133c6df70c6
- SSDEEP 768:0E4c3g4vuh+t/j7zAJ0eBHdDaXRrbNoihV0gZ:2ktt/Hk2eCXR9/p
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\serilog-sinks-file\src\Serilog.Sinks.File\obj\Release\net45\Serilog.Sinks.File.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/Serilog.Sinks.File.pdb
- SHA256 0ae6be9b8d7ba5b2d7ad09c9a0c2439671d6d419211199a86c3c6722e9fa6cf9
- MD5 f1af59548261be14dd1a0d5a10cadec0
- SHA1 411c5eb1b529aec73f6a246ab965c25248701e14
- SHA512 c2c12d8137774788c447c5bf735d8d090414e42a925eb5590a3aede7aa50d528323120a2d636602774b51ca54aae4044e218154eb29b6fc52468a9f6fa142067
- SSDEEP 192:gB4d7haGWdGXY5JKhX9FdoMD1ATVVaCRd2Ahg48Z0aZTojArYEwhKlZ2KYDRr1Ak:gQ78ndTJKvFq+kVoCRddhuZMUMEw0Heh
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Serilog.Sinks.File.xml
- SHA256 5337a07c7aa7dd901a330c893c7d1b6f101ab3706b7aab8cc3eaf4e5c236d9f7
- MD5 28d966ede9c3c25cf49e1f20d9aa6847
- SHA1 b154321576f50bf8c0e27e940da030842b580d8e
- SHA512 05ddd35f4f4a75e2b0fb50bd5e26fe9f6df993e629c735df9c8247554570eb122ca6a48e0659380cf00d0180be3133ea28d6fad4e29ba4e9be0ab2d9a0901f75
- SSDEEP 768:TJXdJamCJaIfJyqJKP3VT2uixgJgXOUB0nKfRx8DhSn:DV4
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/Serilog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a26a473af5eb7a00196e275c86d773f36e1d4caef566f97f1df7e07e20b1670
- MD5 0aa45a8a1cd24cd2b589e4aad925f35d
- SHA1 0dc29954c4c2ffea4c33af0e56ce84158849b81e
- SHA512 7a865b16633c09bdecda34fdf15c62db4f04f2fb8db0abf57563aea51de67daf9eca0c08f053f551937a0c3c7987a53de2454ecb13139a193291633df7262981
- SSDEEP 3072:XfwtSQoXux2ogH8I/eXXXXXPXXXXXHXXXXXTaXXXXX14N0QXVsABFkNfM+HFukRb:PwtSQoXux2M3XXXXXPXXXXXHXXXXX2Xh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
131618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Serilog/obj/Release/net46/Serilog.pdb
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/Serilog.xml
- SHA256 c8f6500c2cd3d89e43a91d7c6e71c9480550be1f3f2b79874cfee6231d81b996
- MD5 9286aa30eb743a001d67b100236e9011
- SHA1 a476d5424129c7e40ec815a911313a71b92fe840
- SHA512 6671bcf8010f2c42135830af5b577188b62c53c2c303b07a5416d797fb07ad703ecbe0f864cfd94d174d198d437ae1b2f21b8091faad53b93261ccce870b6e64
- SSDEEP 1536:iFOZzPSApaPVdO2FRP7QuNzlP3MpxbY1Qfw:iFOZzPSApqbMpxbYSfw
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Buffers.xml
- SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
- MD5 1c55860dd93297a6ea2fad2974834c3a
- SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
- SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
- MD5 SHA1 SHA512
AutoClickerv3.2.0/System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e76318e8b06692abf7dab1169d27d15557f7f0a34d36af6463eff0fe21213c7
- MD5 6fb95a357a3f7e88ade5c1629e2801f8
- SHA1 19bf79600b716523b5317b9a7b68760ae5d55741
- SHA512 293d8c709bc68d2c980a0df423741ce06d05ff757077e63986d34cb6459f9623a024d12ef35a280f50d3d516d98abe193213b9ca71bfde2a9fe8753b1a6de2f0
- SSDEEP 3072:IUGrszKKLBFa9DvrJGeesIf3afNs2AldfI:jBFd3/aFs2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
db:b0:3b:7a:83:84:ef:83:06:3f:da:91:51:13:f8:7d:32:fc:46:43:1c:0f:b6:cd:f7:db:87:4b:17:93:f7:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
136106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Memory.xml
- SHA256 d5714c96607eb1a9d0f90f57ca194d8a9c3ede0656a1d1f461e78b209f054813
- MD5 add19745a43b2515280ce24671863114
- SHA1 cf44e6557fde93288ff2567a002a69279965caba
- SHA512 8d7e564fa61411b5c28f29b07855dd112687edcb39b991803c7c7de67b6894b309102ac9b52409b56b7bb5c9101eb4cdfb21fcfbf5d835e4a153e188cb97cc87
- SSDEEP 192:19SSrAVfjSE0wxiMiLiLiXdCjticiciAiJiziPNjNei5i9zhi+ipOUTJ:1gbXKKXppPmcPi6LmJ
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
PE Signature issue
Digest
12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
103866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Numerics.Vectors.xml
- SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
- MD5 95dd29ca17b63843ad787d3bc9c8c933
- SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
- SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
- SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3cadcb6b8a7335141c7c357a1d77af1ff49b59b872df494f5025580191d1c0d5
- MD5 9a341540899dcc5630886f2d921be78f
- SHA1 bab44612721c3dc91ac3d9dfca7c961a3a511508
- SHA512 066984c83de975df03eee1c2b5150c6b9b2e852d9caf90cfd956e9f0f7bd5a956b96ea961b26f7cd14c089bc8a27f868b225167020c5eb6318f66e58113efa37
- SSDEEP 192:erLXx0hyLsbb3rxVj7WU2WLTYoW4GD5dHnhWgN7acWlbAkWD7DiqnajKs3WoHpZ:Ih06sbbVVPWU2WPY7dHRN77RGlGs3jJZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5d:cb:7e:a5:69:25:4f:af:a8:12:26:de:6b:e9:9e:73:3e:09:68:df:fb:5d:fe:9e:c2:d5:81:e1:60:48:4c:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
13198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Runtime.CompilerServices.Unsafe.xml
- SHA256 a22e09986a09839dc697f13d76aaded6008001f3632986acaebc29f8ef489b82
- MD5 aa2cb9ba14481a623ee20f821cf5d180
- SHA1 8b27d2b07845a94aa7741093e8a4d6d2e7b768df
- SHA512 3e9e3118fa34ee04e3f9c3e9737493fefb5aabb42bd0114285aec948c57a60235979baffa1ee7baae9ae87d81c551acd3c6a416bbd2cfd4c9f68766745ed65ec
- SSDEEP 384:Y/uXudyvB0fmkcdZKyQe1EyriJriurs8rs1VwFaFDJOeOiKFIxRkj1r:Y/AEwafmkcdZbQe1EyriJriurs8rs1Vm
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 edf13ebf2d45152e26a16b947cd953aeb7a42602fa48e53fd7673934e5acea30
- MD5 e8cdacfd2ef2f4b3d1a8e6d59b6e3027
- SHA1 9a85d938d8430a73255a65ea002a7709c81a4cf3
- SHA512 ee1005270305b614236d68e427263b4b4528ad3842057670fad061867286815577ec7d3ed8176e6683d723f9f592abcbf28d24935ce8a34571ab7f1720e2ffc5
- SSDEEP 1536:czy/zOmekrEZa8frFpd3hQi/+sBzFLknqPO:TzOmekwZa8zdR+sBpSYO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6d:89:a3:77:6f:51:0b:1b:b7:3f:4d:bd:d4:d3:2e:21:5c:7f:97:12:07:8e:4a:20:4c:28:33:5b:d4:ce:b1:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
55858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Encodings.Web/net461-Release/System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Text.Encodings.Web.xml
- SHA256 0772b7895a1fea1d3bbee2ed2f5200ef4f9eb38b22c3d00b5405325be9d8a7cd
- MD5 acc8af8d28dc65488d1c49defd8ea153
- SHA1 1eece92a2f2e40de4afb43f7a5caec9a3b384b87
- SHA512 452669aff783ac248394838083695bd6ce45cb1b41fc512c7f3c7039d49d9e40c24f51a2255bae3ac6f2e01388a54ec1f17092566ce808c70f3fc599ada9734a
- SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTwoIIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxwoIIMZxE1Cr0Md3wh7te4
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.Text.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c7435257690ac95dc03b45a236005124097f08519adf3134b1d1ece4190e64c
- MD5 38470ca21414a8827c24d8fe0438e84b
- SHA1 1c394a150c5693c69f85403f201caa501594b7ab
- SHA512 079f7320cc2f3b97a5733725d3b13dff17b595465159daabca5a166d39777100e5a2d9af2a75989dfabdb2f29eac0710e16c3bb2660621344b7a63c5dbb87ef8
- SSDEEP 3072:USOCU3QYmd1QhS1h2pCUoUJeXq7YAAEP1VIGm/0aW/49rZbpQ2M6R:Q7MQMh2pCUreatAJhrZlh
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
30:db:cf:07:e9:a5:f7:14:a9:66:da:5c:73:58:8c:96:a6:c6:9f:13:74:50:8e:c1:67:20:24:7c:e0:00:ad:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
351406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Json/net461-Release/System.Text.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
336KB
Virtual Size
335KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Text.Json.xml
- SHA256 dda6ae13aa1736b29ac98109b7334d70081dd907a7ad6890c265a552d2da03b6
- MD5 fed072426e07dbc27a1d734d99526654
- SHA1 2282862d21fdc500cf34cd20b928e8888d662fd0
- SHA512 1bb6637c06681bc44bd2599baff3998f260242a0e2bd2b11fe81d91a7857b80dcf2b3608baa09ab3676acc87a9af06baa78c9077cead8fcc50f22a55a508c08d
- SSDEEP 6144:rKgZj52PhcHibdBvYJgP4aqKiOG0GYQYEu:shcu
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.Threading.Tasks.Extensions.xml
- SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
- MD5 c89e735fcf37e76e4c3d7903d2111c04
- SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
- SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
- SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
- MD5 SHA1 SHA512 SSDEEP
AutoClickerv3.2.0/System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2024
PE Signature issue
Digest
78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
12898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AutoClickerv3.2.0/System.ValueTuple.xml
- SHA256 c37e163fa76629c196460c7b4d54e95b1a46a4c66ab7b6f3311959c8137dc5f1
- MD5 b6e60687ae5db6d011e21e6993620745
- SHA1 b117c6bbddc72e7f4b590173992ee17bfdde4be1
- SHA512 709212b6cb36f57b92a82def810f9c075a91b3e6a5fd330dcfb563d94a320783509441347d63bde97f530c6b10ce6aa769ca11f7fc39acf1b25d5c8f9dcbb389
- MD5 SHA1 SHA512
AutoClickerv3.2.0/System.Windows.Interactivity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aace8c8a330ae8429cd8cc1b6804076d3a9ffd633470f91fd36bdd25bb57876
- MD5 3ab57a33a6e3a1476695d5a6e856c06a
- SHA1 dabb4ecffd0c422a8eebff5d4ec8116a6e90d7e7
- SHA512 58dbfcf9199d72d370e2d98b8ef2713d74207a597c9494b0ecf5e4c7bf7cf60c5e85f4a92b2a1896dff63d9d5107f0d81d7dddbc7203e9e559ab7219eca0df92
- SSDEEP 768:6MazwAgR8/XJ665bKZdxuB8DCuL5enM7JxKjuMlZCZN+R0E7E:63wBccZdxuB8mQen6JxKjrlMZgR0Eo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ