quasar | SeroXen 2[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

SeroXen 2.rar
Size

105.9MB
MD5

6877d37ca1eda7059a4581f9c6e78218
SHA1

832668dd888815f6ee5c132e2134505c4588e52d
SHA256

c8697c9f1e3277665190261bbd4b8a0a17dec967ac47e089a6d5dd901d840423
SHA512

999b8c98ef7c7d345e9cae133e0e1a7c25b82df049153a58dcfb26633453286c945c0fd02733291a9c6d0b457a975f0ffc2b71bf266a848d4cae040186053964
SSDEEP

3145728:HEcnJDkV2YPFq7KnJtKzJe+2goIo9rZlR5CPQ:x5kvqefKzroIWlRIQ

Score

10^/10

quasar agenttesla

Malware Config

Extracted

Family

quasar

Attributes

reconnect_delay
5000

Signatures

AgentTesla payload 10 IoCs

resource	yara_rule
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll	family_agenttesla
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll	family_agenttesla

Agenttesla family
agenttesla
Quasar family
quasar

Quasar payload 5 IoCs

resource	yara_rule
sample	family_quasar
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Client.exe	family_quasar
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/client.bin	family_quasar
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.exe	family_quasar
static1/unpack001/SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.exe	family_quasar

Unsigned PE 58 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Client.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Mono.Cecil.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Mono.Nat.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Quasar.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/Vestris.ResourceLib.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Bin/Release/client.bin
unpack001/SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.Tests.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/Client.Tests.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Debug/TempPE/Properties.Resources.Designer.cs.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/TempPE/Properties.Resources.Designer.cs.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/Phantom(r77 MOD) Rootkit Removal Tool.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/netclassicweaver/Costura.Fody.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/netstandardweaver/Costura.Fody.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Fody.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/FodyCommon.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/FodyHelpers.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/FodyIsolated.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.Pdb.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.Rocks.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Fody.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/FodyCommon.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/FodyHelpers.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/FodyIsolated.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.Pdb.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.Rocks.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/dnlib.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/$Build/RemovalTool.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Debug/RemovalTool.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Debug/EncryptFile.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Release/EncryptFile.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/EncryptFile.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/EncryptFile.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Release/Payload.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Mono.Cecil.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Mono.Nat.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Quasar.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Server.Tests.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Vestris.ResourceLib.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Build/$77-Example.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/bin/Release/BuildTask.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/BuildTask.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/bin/Release/Example.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/FASM.EXE
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Shit to Bind/$sxr-mshta.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/Server.Tests.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server/lib/Mono.Cecil.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server/lib/Mono.Nat.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server/lib/Vestris.ResourceLib.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
unpack001/SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/Quasar.exe
unpack001/SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/TempPE/Properties.Resources.Designer.cs.dll

Files

SeroXen 2.rar
.rar

Password: @Thx<3
SeroXen 2/Quasar-1.3.0.0/.gitattributes
SeroXen 2/Quasar-1.3.0.0/.gitignore
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/FileContentIndex/084f8e83-fd9a-42cb-b0fb-e2ff2bb25c06.vsidx
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/FileContentIndex/576e7c66-d45e-46f8-ada7-ec3ee0a3f940.vsidx
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/FileContentIndex/da058e26-7acc-4317-927f-5bcaa41f274f.vsidx
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/FileContentIndex/e76f0373-60e4-4008-a029-28cba3f47c62.vsidx
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/FileContentIndex/efc5bb5a-f372-43d9-afd4-874a0e5890a4.vsidx
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/v17/.suo
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/v17/Browse.VC.db
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/v17/DocumentLayout.json
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/v17/Solution.VC.db
SeroXen 2/Quasar-1.3.0.0/.vs/QuasarRAT/v17/fileList.bin
SeroXen 2/Quasar-1.3.0.0/Bin/Andrew-MEGALARP-PACK.rar
.rar

Password: @Thx<3
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Client.exe
.exe windows:4 windows x86 arch:x86

Password: @Thx<3

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Client.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

Actual PE Digest

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Max\Desktop\lib\cecil-master\obj\net_4_0_Release\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Mono.Nat.dll
.dll windows:4 windows x86 arch:x86

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Quasar.exe
.exe windows:4 windows x86 arch:x86

Password: @Thx<3

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Quasar.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Release.rar
.rar

Password: @Thx<3
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Script.py
SeroXen 2/Quasar-1.3.0.0/Bin/Release/Vestris.ResourceLib.dll
.dll windows:4 windows x86 arch:x86

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/client.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Bin/Release/h
SeroXen 2/Quasar-1.3.0.0/Bin/Release/log.txt
SeroXen 2/Quasar-1.3.0.0/Bin/Release/readme.md
SeroXen 2/Quasar-1.3.0.0/CHANGELOG.md
SeroXen 2/Quasar-1.3.0.0/CONTRIBUTING.md
SeroXen 2/Quasar-1.3.0.0/Client.Tests/.vs/Client.Tests.csproj.dtbcache.json
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.Tests.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Client.Tests\obj\x86\Release\Client.Tests.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.Tests.pdb
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Bin/Release/Client.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Client.Tests.csproj
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Core/Compression/JpgCompression.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Core/Compression/SafeQuickLZ.Tests.cs
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Core/Encryption/AES.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Core/Encryption/SHA256.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Core/Helper/FileHelper.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Core/Packet/Packet.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client.Tests/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Debug/Client.Tests.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/Client.Tests.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/Client.Tests.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/Client.Tests.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/Client.Tests.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Client.Tests\obj\x86\Release\Client.Tests.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Client.Tests/obj/x86/Release/Client.Tests.pdb
SeroXen 2/Quasar-1.3.0.0/Client/.vs/Client.csproj.dtbcache.json
SeroXen 2/Quasar-1.3.0.0/Client/Client.csproj
SeroXen 2/Quasar-1.3.0.0/Client/Config/Settings.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/CameraControlProperty.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/FilterInfo.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/FilterInfoCollection.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IAMCameraControl.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IAMCrossbar.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IAMStreamConfig.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IAMVideoControl.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IBaseFilter.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/ICaptureGraphBuilder2.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/ICreateDevEnum.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IEnumFilters.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IEnumPins.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IFilterGraph.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IFilterGraph2.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IGraphBuilder.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IMediaControl.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IMediaEventEx.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IPin.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IPropertyBag.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/IReferenceClock.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/ISampleGrabber.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/ISampleGrabberCB.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/ISpecifyPropertyPages.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/Structures.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/Uuids.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Internals/Win32.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/PhysicalConnectorType.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/Uuids.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/VideoCapabilities.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/VideoCaptureDevice.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video.DirectShow/VideoInput.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video/IVideoSource.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/AForge/Video/VideoEvents.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/CommandHandler.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/ConnectionHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/FileHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/MiscHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/RegistryHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/SurveillanceHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/SystemHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/TCPConnectionsHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Commands/WebcamHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Compression/JpgCompression.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Compression/SafeQuickLZ.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Cryptography/AES.cs
.ps1
SeroXen 2/Quasar-1.3.0.0/Client/Core/Cryptography/SHA256.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Data/ClientData.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Data/GeoInformation.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Data/Host.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Data/RecoveredAccount.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Extensions/RegistryKeyExtensions.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Extensions/SocketExtensions.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/CryptographyHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/DevicesHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/FileHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/FormatHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/GeoLocationHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/HostHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/KeyloggerHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/MutexHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/NativeMethodsHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/PlatformHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/RegistryKeyHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/ScreenHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/SystemHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Helper/WindowsAccountHelper.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Installation/ClientInstaller.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Installation/ClientUninstaller.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Installation/ClientUpdater.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Installation/Startup.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Hook.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/HotKeys/HotKeyArgs.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/HotKeys/HotKeySet.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/HotKeys/HotKeySetCollection.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/HotKeys/HotKeySetsListener.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/HotKeys/ReadMe.txt
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/IKeyboardEvents.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/IKeyboardMouseEvents.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/IMouseEvents.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/AppEventFacade.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/AppKeyListener.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/AppMouseListener.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/BaseListener.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/ButtonSet.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/Callback.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/EventFacade.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/GlobalEventFacade.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/GlobalKeyListener.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/GlobalMouseListener.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/KeyListener.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/KeyboardState.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/MouseListener.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/Implementation/Subscribe.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/KeyEventArgsExt.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/KeyPressEventArgsExt.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/MouseEventExtArgs.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/AppMouseStruct.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/CallbackData.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/HookHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/HookIds.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/HookNativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/HookProcedure.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/HookProcedureHandle.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/HookResult.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/KeyboardHookStruct.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/KeyboardNativeMethods.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/Messages.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/MouseNativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/MouseStruct.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/Point.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/MouseKeyHook/WinApi/ThreadNativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/CodeGenContext.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/Helpers.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/ITypeSerializer.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/Primitives.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/Serializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/TypeSerializers/ArraySerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/TypeSerializers/DictionarySerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/TypeSerializers/EnumSerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/TypeSerializers/GenericSerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/TypeSerializers/ObjectSerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/NetSerializer/TypeSerializers/PrimitivesSerializer.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Networking/Client.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Networking/QuasarClient.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/DoDownloadFileResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/DoShellExecuteResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetAuthenticationResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetChangeRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetConnectionsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetCreateRegistryKeyResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetCreateRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetDeleteRegistryKeyResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetDeleteRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetDesktopResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetDirectoryResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetDrivesResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetKeyloggerLogsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetMonitorsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetPasswordsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetProcessesResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetRegistryKeysResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetRenameRegistryKeyResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetRenameRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetStartupItemsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetSystemInfoResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetWebcamResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/GetWebcamsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/SetStatus.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/SetStatusFileManager.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ClientPackets/SetUserStatus.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/IPacket.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/PacketHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/PacketRegistery.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoAskElevate.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoChangeRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoClientDisconnect.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoClientReconnect.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoClientUninstall.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoClientUpdate.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoCloseConnection.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoCreateRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoCreateRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoDeleteRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoDeleteRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoDownloadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoDownloadFile.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoDownloadFileCancel.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoKeyboardEvent.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoLoadRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoMouseEvent.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoPathDelete.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoPathRename.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoProcessKill.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoProcessStart.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoRenameRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoRenameRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoShellExecute.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoShowMessageBox.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoShutdownAction.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoStartupItemAdd.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoStartupItemRemove.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoUploadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoUploadFile.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoVisitWebsite.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/DoWebcamStop.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetAuthentication.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetConnections.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetDesktop.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetDirectory.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetDrives.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetKeyloggerLogs.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetMonitors.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetPasswords.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetProcesses.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetStartupItems.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetSystemInfo.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetWebcam.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/GetWebcams.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Packets/ServerPackets/SetAuthenticationSuccess.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Browsers/Chrome.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Browsers/Firefox.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Browsers/InternetExplorer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Browsers/Opera.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Browsers/Yandex.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/FtpClients/FileZilla.cs
.ps1
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/FtpClients/WinSCP.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Utilities/Chromium.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Utilities/JsonUtil.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Recovery/Utilities/SQLiteHandler.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Registry/RegSeekerMatch.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Registry/RegValueData.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Registry/RegistryEditor.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Registry/RegistrySeeker.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/ReverseProxy/Packets/ReverseProxyConnect.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/ReverseProxy/Packets/ReverseProxyConnectResponse.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/ReverseProxy/Packets/ReverseProxyData.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/ReverseProxy/Packets/ReverseProxyDisconnect.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/ReverseProxy/ReverseProxyClient.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/ReverseProxy/ReverseProxyCommandHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Utilities/FileSplit.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Utilities/HostsManager.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Utilities/Keylogger.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Utilities/NativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Client/Core/Utilities/Shell.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Core/Utilities/UnsafeStreamCodec.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Enums/MouseAction.cs
SeroXen 2/Quasar-1.3.0.0/Client/Enums/PathType.cs
SeroXen 2/Quasar-1.3.0.0/Client/Enums/ShutdownAction.cs
SeroXen 2/Quasar-1.3.0.0/Client/Enums/UserStatus.cs
SeroXen 2/Quasar-1.3.0.0/Client/Program.cs
.js
SeroXen 2/Quasar-1.3.0.0/Client/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Client/Properties/Resources.Designer.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Client/Properties/Resources.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Client/Properties/Settings.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Client/Properties/Settings.settings
SeroXen 2/Quasar-1.3.0.0/Client/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Client/app.manifest
SeroXen 2/Quasar-1.3.0.0/Client/images/information.png
.png
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Debug/.NETFramework,Version=v4.0,Profile=Client.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Debug/Client.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Debug/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.csproj.GenerateResource.cache
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Client/obj/x86/Release/xClient.Properties.Resources.resources
SeroXen 2/Quasar-1.3.0.0/LICENSE.md
SeroXen 2/Quasar-1.3.0.0/QuasarRAT.sln
SeroXen 2/Quasar-1.3.0.0/README.md
SeroXen 2/Quasar-1.3.0.0/Server.Tests/.vs/Server.Tests.csproj.dtbcache.json
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/1.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/2.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/3.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/4.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/5.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/6.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Extras/Phantom(r77 MOD) Rootkit Removal Tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ajay0\OneDrive\Desktop\SeroXen-Removal-Tool-main\SeroXen Removal Tool\obj\Release\SeroXen_Removal_Tool.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/README.md
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/Newtonsoft.Json.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/Resources/BStub.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/Resources/Stub.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/System.Diagnostics.DiagnosticSource.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/System.ValueTuple.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/bin/settings.json
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Release/dnlib.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/Costura.Fody.5.7.0.nupkg
.nupkg
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/build/Costura.Fody.props
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/build/Costura.Fody.targets
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/icon.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/lib/netstandard1.0/Costura.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/lib/netstandard1.0/Costura.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/netclassicweaver/Costura.Fody.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Costura.Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/netclassicweaver/Costura.Fody.xcf
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/netstandardweaver/Costura.Fody.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Costura.Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.Fody.5.7.0/netstandardweaver/Costura.Fody.xcf
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Costura.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\CI_WS\Ws\198629\Source\Costura_Fody\src\Costura\obj\Release\netstandard1.0\Costura.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/Fody.6.6.2.nupkg
.nupkg
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/License.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/build/Fody.targets
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Fody.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/FodyCommon.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/FodyHelpers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyHelpers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/FodyIsolated.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyIsolated.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.Pdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\Fody\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.Pdb.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.Rocks.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\Fody\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.Rocks.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\Fody\cecil\obj\Release\net40\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netclassictask/Mono.Cecil.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Fody.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Fody.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/FodyCommon.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/FodyHelpers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyHelpers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/FodyIsolated.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

FodyIsolated.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.Pdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\Fody\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.Pdb.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.Rocks.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\Fody\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.Rocks.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\Fody\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Fody.6.6.2/netstandardtask/Mono.Cecil.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Microsoft.Win32.Primitives.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:e6:b9:41:3c:a3:55:9b:02:73:88:0d:10:32:5d:ee:7b:3e:bc:9f:49:d1:a6:4b:83:2c:e1:aa:3d:06:1a:56
Signer

Actual PE Digest

79:e6:b9:41:3c:a3:55:9b:02:73:88:0d:10:32:5d:ee:7b:3e:bc:9f:49:d1:a6:4b:83:2c:e1:aa:3d:06:1a:56

Digest Algorithm

sha256

PE Digest Matches

true

78:ae:20:47:88:89:68:17:c0:8f:d0:e2:8f:c4:01:0d:ad:78:c7:9b
Signer

Actual PE Digest

78:ae:20:47:88:89:68:17:c0:8f:d0:e2:8f:c4:01:0d:ad:78:c7:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/Microsoft.Win32.Primitives/net46\Microsoft.Win32.Primitives.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Signer

Actual PE Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.AppContext.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:65:d8:08:6b:f8:60:69:53:d1:57:bc:30:df:d5:7c:db:2c:5d:38:2e:56:fd:63:37:c3:fc:85:21:d4:5e:86
Signer

Actual PE Digest

84:65:d8:08:6b:f8:60:69:53:d1:57:bc:30:df:d5:7c:db:2c:5d:38:2e:56:fd:63:37:c3:fc:85:21:d4:5e:86

Digest Algorithm

sha256

PE Digest Matches

true

33:02:63:07:f4:38:5a:36:44:d6:23:2b:84:82:9a:9d:68:5d:c8:d0
Signer

Actual PE Digest

33:02:63:07:f4:38:5a:36:44:d6:23:2b:84:82:9a:9d:68:5d:c8:d0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.AppContext/net463\System.AppContext.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Diagnostics.DiagnosticSource.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cc:cb:b8:13:eb:5d:72:2d:45:00:00:00:00:00:cc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:fd:91:16:f5:70:ee:83:1a:3b:c6:45:c0:92:68:3f:c0:ac:bc:7e:e4:8d:0a:84:a3:13:89:50:0b:ce:66:ea
Signer

Actual PE Digest

2e:fd:91:16:f5:70:ee:83:1a:3b:c6:45:c0:92:68:3f:c0:ac:bc:7e:e4:8d:0a:84:a3:13:89:50:0b:ce:66:ea

Digest Algorithm

sha256

PE Digest Matches

true

1a:a2:21:ac:7b:62:61:02:67:59:a1:1d:35:b6:12:a2:33:8d:57:c5
Signer

Actual PE Digest

1a:a2:21:ac:7b:62:61:02:67:59:a1:1d:35:b6:12:a2:33:8d:57:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Diagnostics.DiagnosticSource\netstandard1.1\System.Diagnostics.DiagnosticSource.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Diagnostics.Tracing.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

81:ec:39:b3:d2:95:b3:23:47:4e:07:a4:2e:1a:24:63:6b:f7:a0:f2:ce:66:61:45:77:47:05:76:09:e6:4e:51
Signer

Actual PE Digest

81:ec:39:b3:d2:95:b3:23:47:4e:07:a4:2e:1a:24:63:6b:f7:a0:f2:ce:66:61:45:77:47:05:76:09:e6:4e:51

Digest Algorithm

sha256

PE Digest Matches

true

8b:19:a6:1f:e1:79:97:e2:69:d4:9b:4c:86:5b:ef:af:a7:6e:cd:ef
Signer

Actual PE Digest

8b:19:a6:1f:e1:79:97:e2:69:d4:9b:4c:86:5b:ef:af:a7:6e:cd:ef

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Diagnostics.Tracing/net462\System.Diagnostics.Tracing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Globalization.Calendars.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:9e:d1:10:b9:35:2b:63:4c:87:32:19:7d:68:b6:37:10:cc:39:cc:96:c0:71:c7:f3:bc:14:e8:06:87:80:8d
Signer

Actual PE Digest

e6:9e:d1:10:b9:35:2b:63:4c:87:32:19:7d:68:b6:37:10:cc:39:cc:96:c0:71:c7:f3:bc:14:e8:06:87:80:8d

Digest Algorithm

sha256

PE Digest Matches

true

d2:e7:09:8a:bc:02:e1:17:9a:c7:65:7c:e7:f6:4c:19:f0:fe:aa:3d
Signer

Actual PE Digest

d2:e7:09:8a:bc:02:e1:17:9a:c7:65:7c:e7:f6:4c:19:f0:fe:aa:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Globalization.Calendars/net46\System.Globalization.Calendars.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.IO.Compression.ZipFile.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Signer

Actual PE Digest

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77

Digest Algorithm

sha256

PE Digest Matches

true

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Signer

Actual PE Digest

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.Compression.ZipFile/net46\System.IO.Compression.ZipFile.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.IO.Compression.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:a7:b0:36:3d:52:e4:36:b0:25:a6:d9:b0:09:06:f8:84:76:f1:ba:ee:ad:df:87:dc:8b:19:38:0b:aa:6b:65
Signer

Actual PE Digest

a5:a7:b0:36:3d:52:e4:36:b0:25:a6:d9:b0:09:06:f8:84:76:f1:ba:ee:ad:df:87:dc:8b:19:38:0b:aa:6b:65

Digest Algorithm

sha256

PE Digest Matches

true

8f:5d:f3:b7:ed:4e:6c:e4:c3:5d:36:90:b3:bf:25:91:27:fc:d3:1a
Signer

Actual PE Digest

8f:5d:f3:b7:ed:4e:6c:e4:c3:5d:36:90:b3:bf:25:91:27:fc:d3:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/Windows_NT.AnyCPU.Release/System.IO.Compression/net46\System.IO.Compression.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.IO.FileSystem.Primitives.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:e3:30:2f:14:9c:22:6c:30:3c:54:d8:5d:f2:bf:2f:c4:d5:cc:81:22:31:0c:e4:81:05:82:1b:03:87:16:f3
Signer

Actual PE Digest

a6:e3:30:2f:14:9c:22:6c:30:3c:54:d8:5d:f2:bf:2f:c4:d5:cc:81:22:31:0c:e4:81:05:82:1b:03:87:16:f3

Digest Algorithm

sha256

PE Digest Matches

true

08:45:03:f1:6e:a5:b9:c5:49:da:3a:fb:59:9a:39:00:cd:a5:b4:d4
Signer

Actual PE Digest

08:45:03:f1:6e:a5:b9:c5:49:da:3a:fb:59:9a:39:00:cd:a5:b4:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.FileSystem.Primitives/net46\System.IO.FileSystem.Primitives.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.IO.FileSystem.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:af:4d:7c:c1:ee:92:03:43:8d:f0:f3:6c:bd:de:aa:ca:a9:cf:b6:9f:6d:00:0f:49:e8:de:e9:7f:7b:5c:4d
Signer

Actual PE Digest

a9:af:4d:7c:c1:ee:92:03:43:8d:f0:f3:6c:bd:de:aa:ca:a9:cf:b6:9f:6d:00:0f:49:e8:de:e9:7f:7b:5c:4d

Digest Algorithm

sha256

PE Digest Matches

true

d2:9d:19:50:3d:20:8f:ec:9d:80:8b:ad:c1:a7:84:55:c1:af:90:58
Signer

Actual PE Digest

d2:9d:19:50:3d:20:8f:ec:9d:80:8b:ad:c1:a7:84:55:c1:af:90:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.FileSystem/net46\System.IO.FileSystem.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.IO.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:22:0e:26:b4:a8:cb:e7:5b:60:a5:c7:c0:0f:8b:fe:78:11:de:ab:10:6e:fb:80:db:48:12:fc:69:9c:a6:9b
Signer

Actual PE Digest

a1:22:0e:26:b4:a8:cb:e7:5b:60:a5:c7:c0:0f:8b:fe:78:11:de:ab:10:6e:fb:80:db:48:12:fc:69:9c:a6:9b

Digest Algorithm

sha256

PE Digest Matches

true

7a:d6:c4:f2:08:a1:9d:00:84:62:92:90:2b:1d:65:40:b1:46:59:0a
Signer

Actual PE Digest

7a:d6:c4:f2:08:a1:9d:00:84:62:92:90:2b:1d:65:40:b1:46:59:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO/net462\System.IO.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Linq.Expressions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:63:e1:26:63:9a:40:d6:a8:ad:38:53:71:ef:b1:1a:29:0a:43:dc:4e:64:21:04:a8:d7:9f:f1:01:ee:96:9d
Signer

Actual PE Digest

06:63:e1:26:63:9a:40:d6:a8:ad:38:53:71:ef:b1:1a:29:0a:43:dc:4e:64:21:04:a8:d7:9f:f1:01:ee:96:9d

Digest Algorithm

sha256

PE Digest Matches

true

70:9a:b7:61:8f:ab:cc:b1:6a:b5:eb:64:dc:25:e7:5d:76:2b:7c:d6
Signer

Actual PE Digest

70:9a:b7:61:8f:ab:cc:b1:6a:b5:eb:64:dc:25:e7:5d:76:2b:7c:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Linq.Expressions/net463\System.Linq.Expressions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Linq.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:cc:ef:3d:55:f8:92:65:24:ea:34:3e:ed:dd:47:ac:03:1d:c5:73:ef:d5:b1:f0:e3:db:1f:a5:74:8c:eb:46
Signer

Actual PE Digest

ab:cc:ef:3d:55:f8:92:65:24:ea:34:3e:ed:dd:47:ac:03:1d:c5:73:ef:d5:b1:f0:e3:db:1f:a5:74:8c:eb:46

Digest Algorithm

sha256

PE Digest Matches

true

d7:0d:8e:90:38:97:b2:b3:06:af:49:4a:8c:2d:85:1c:1f:c2:fe:ec
Signer

Actual PE Digest

d7:0d:8e:90:38:97:b2:b3:06:af:49:4a:8c:2d:85:1c:1f:c2:fe:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Linq/net463\System.Linq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Net.Sockets.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:64:e2:7d:ba:7e:ce:68:8f:d9:23:3c:7c:47:35:f5:8c:3f:17:a1:64:41:ab:4e:17:0a:0f:32:8c:f4:2e:6e
Signer

Actual PE Digest

fb:64:e2:7d:ba:7e:ce:68:8f:d9:23:3c:7c:47:35:f5:8c:3f:17:a1:64:41:ab:4e:17:0a:0f:32:8c:f4:2e:6e

Digest Algorithm

sha256

PE Digest Matches

true

59:b9:9d:aa:98:3f:9d:54:5f:4b:ed:03:4e:03:12:a6:67:3f:ef:70
Signer

Actual PE Digest

59:b9:9d:aa:98:3f:9d:54:5f:4b:ed:03:4e:03:12:a6:67:3f:ef:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Net.Sockets/net46\System.Net.Sockets.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Reflection.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:6b:3e:a2:5d:68:b0:12:78:0b:bd:16:8a:75:6e:68:07:f6:6c:2e:a6:08:37:7e:a6:77:ee:74:a5:42:52:96
Signer

Actual PE Digest

46:6b:3e:a2:5d:68:b0:12:78:0b:bd:16:8a:75:6e:68:07:f6:6c:2e:a6:08:37:7e:a6:77:ee:74:a5:42:52:96

Digest Algorithm

sha256

PE Digest Matches

true

64:f1:ef:d9:a2:15:af:53:f2:b6:43:51:86:5b:7c:14:2d:52:c9:a0
Signer

Actual PE Digest

64:f1:ef:d9:a2:15:af:53:f2:b6:43:51:86:5b:7c:14:2d:52:c9:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Reflection/net462\System.Reflection.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Runtime.InteropServices.RuntimeInformation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:db:74:2f:88:32:73:ab:f9:54:bf:23:c7:95:38:b8:ec:aa:28:fd:f2:85:57:f2:b9:b4:98:f1:5d:1d:a3:59
Signer

Actual PE Digest

05:db:74:2f:88:32:73:ab:f9:54:bf:23:c7:95:38:b8:ec:aa:28:fd:f2:85:57:f2:b9:b4:98:f1:5d:1d:a3:59

Digest Algorithm

sha256

PE Digest Matches

true

56:92:ab:b2:b2:ea:e2:5f:1d:7d:b4:40:b3:91:8f:25:ff:d3:35:1d
Signer

Actual PE Digest

56:92:ab:b2:b2:ea:e2:5f:1d:7d:b4:40:b3:91:8f:25:ff:d3:35:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin\obj\Windows_NT.AnyCPU.Release\System.Runtime.InteropServices.RuntimeInformation\net45\System.Runtime.InteropServices.RuntimeInformation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Runtime.InteropServices.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:cf:17:02:ca:8c:29:f2:6e:18:8d:2a:88:46:fa:58:a8:60:3b:12:e0:d0:9c:ac:b5:2e:68:ae:95:fe:de:37
Signer

Actual PE Digest

75:cf:17:02:ca:8c:29:f2:6e:18:8d:2a:88:46:fa:58:a8:60:3b:12:e0:d0:9c:ac:b5:2e:68:ae:95:fe:de:37

Digest Algorithm

sha256

PE Digest Matches

true

6f:de:8d:cb:ac:a9:c2:c3:8a:b9:62:c4:4d:1c:91:9d:f4:c7:53:d0
Signer

Actual PE Digest

6f:de:8d:cb:ac:a9:c2:c3:8a:b9:62:c4:4d:1c:91:9d:f4:c7:53:d0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Runtime.InteropServices/net463\System.Runtime.InteropServices.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Security.Cryptography.Encoding.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5d:c7:27:fe:ae:11:ee:f9:e8:13:89:07:05:58:50:5b:cd:bc:10:ea:02:3a:60:4b:3b:45:46:28:a7:8a:4e:78
Signer

Actual PE Digest

5d:c7:27:fe:ae:11:ee:f9:e8:13:89:07:05:58:50:5b:cd:bc:10:ea:02:3a:60:4b:3b:45:46:28:a7:8a:4e:78

Digest Algorithm

sha256

PE Digest Matches

true

bc:e7:dc:08:18:1c:3a:87:bf:7e:3d:66:64:60:7e:24:33:ac:f3:fd
Signer

Actual PE Digest

bc:e7:dc:08:18:1c:3a:87:bf:7e:3d:66:64:60:7e:24:33:ac:f3:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/Windows_NT.AnyCPU.Release/System.Security.Cryptography.Encoding/net46\System.Security.Cryptography.Encoding.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.Security.Cryptography.Primitives.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:9f:00:6b:8a:d0:7f:c5:6f:21:8b:48:80:5c:6b:f8:4a:ee:89:89:32:bd:35:75:74:3b:20:61:aa:38:47:8c
Signer

Actual PE Digest

6e:9f:00:6b:8a:d0:7f:c5:6f:21:8b:48:80:5c:6b:f8:4a:ee:89:89:32:bd:35:75:74:3b:20:61:aa:38:47:8c

Digest Algorithm

sha256

PE Digest Matches

true

1d:74:b2:f1:29:c8:08:eb:99:2d:d5:f5:61:0d:48:4b:7e:c1:57:a3
Signer

Actual PE Digest

1d:74:b2:f1:29:c8:08:eb:99:2d:d5:f5:61:0d:48:4b:7e:c1:57:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Security.Cryptography.Primitives/net46\System.Security.Cryptography.Primitives.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/System.ValueTuple.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16
Signer

Actual PE Digest

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16

Digest Algorithm

sha256

PE Digest Matches

true

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0
Signer

Actual PE Digest

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ValueTuple\netstandard1.0\System.ValueTuple.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/DLLs/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/obj/Release/net45/dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom.sln
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/App.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/CodeGen/FileGen.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/CodeGen/StubGen.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/CodeMod/Obfuscator.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/FodyWeavers.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/FodyWeavers.xsd
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Misc/Settings.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Misc/Utils.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Phantom.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/PhantomMain.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/PhantomMain.cs
.ps1
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/PhantomMain.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Program.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Properties/Resources.Designer.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Properties/Resources.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Properties/Settings.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Properties/Settings.settings
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Resources/BStub.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/Resources/Stub.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/packages.config
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/scaryghost.ico
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Crypter/PhantomPrivate-main/Source/Phantom/scaryghost.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/$Build/RemovalTool.exe
.exe windows:6 windows x86 arch:x86

45b92ea2c4afa068f11d2957f557af0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\Debug\RemovalTool.pdb

Imports

kernel32

SetEnvironmentVariableW
LoadLibraryA
GetProcAddress
SetStdHandle
ReadConsoleW
FreeLibrary
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LocalFree
GetLocaleInfoEx
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
WriteFile
GetCurrentThread
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
HeapQueryInformation
GetFileSizeEx
SetFilePointerEx
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA

Sections

.textbss
Size: - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.gitignore
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/FileContentIndex/eec40079-47e3-45f3-8185-cf00f2883d56.vsidx
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/v17/.suo
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/v17/Browse.VC.db
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/v17/DocumentLayout.json
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/v17/Solution.VC.db
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/v17/ipch/AutoPCH/d60f750d01b1df28/PAYLOAD.ipch
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/.vs/LivingOffTheLand/v17/ipch/AutoPCH/f6da65b2a588a26e/PAYLOAD.ipch
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Debug/Payload.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Debug/RemovalTool.exe
.exe windows:6 windows x86 arch:x86

45b92ea2c4afa068f11d2957f557af0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\Debug\RemovalTool.pdb

Imports

kernel32

SetEnvironmentVariableW
LoadLibraryA
GetProcAddress
SetStdHandle
ReadConsoleW
FreeLibrary
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LocalFree
GetLocaleInfoEx
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
WriteFile
GetCurrentThread
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
HeapQueryInformation
GetFileSizeEx
SetFilePointerEx
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA

Sections

.textbss
Size: - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Debug/RemovalTool.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/.vs/EncryptFile.csproj.dtbcache.json
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/EncryptFile.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/EncryptFile.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Debug/EncryptFile.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\EncryptFile\obj\x86\Debug\EncryptFile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Debug/EncryptFile.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Debug/EncryptFile.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Release/EncryptFile.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\EncryptFile\obj\x86\Release\EncryptFile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Release/EncryptFile.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/bin/Release/EncryptFile.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/EncryptFile.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/EncryptFile.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/EncryptFile.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/EncryptFile.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\EncryptFile\obj\x86\Debug\EncryptFile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Debug/EncryptFile.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/EncryptFile.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/EncryptFile.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/EncryptFile.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/EncryptFile.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\EncryptFile\obj\x86\Release\EncryptFile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/EncryptFile/obj/x86/Release/EncryptFile.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Global/NativeRegistry.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/.vs/Injector.csproj.dtbcache.json
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/Injector.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/Injector.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/Properties/Resources.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/Resources/Payload.exe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/RunPE.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/Injector.Properties.Resources.resources
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/Injector.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/Injector.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/Injector.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Debug/Injector.csproj.GenerateResource.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Release/Injector.Properties.Resources.resources
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Release/Injector.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Release/Injector.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Release/Injector.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Injector/obj/x86/Release/Injector.csproj.GenerateResource.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LICENSE.md
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand.sln
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/LivingOffTheLand.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/rc.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/rc.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/LivingOffTheLand.tlog/rc.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/vc143.idb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Debug/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/LivingOffTheLand.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/LivingOffTheLand.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/LivingOffTheLand.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/LivingOffTheLand.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/rc.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/rc.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/LivingOffTheLand.tlog/rc.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/Resource.rc
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/LivingOffTheLand/resource.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.exe.embed.manifest
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.exe.embed.manifest.res
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.ilk
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/Payload.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/rc.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/rc.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload.tlog/rc.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/Payload_manifest.rc
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/vc143.idb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Debug/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Payload.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Payload.exe.manifest
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Payload.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Payload.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Payload.vcxproj.user
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/Payload.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/Payload.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Payload/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/README.md
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Release/Payload.exe
.exe windows:6 windows x86 arch:x86

e0577281f1c151e0f7e43e24b8dfcfdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\Release\Payload.pdb

Imports

user32

MessageBoxA

kernel32

FindClose
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
CloseHandle
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
WriteConsoleW

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Release/Payload.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/Release/RemovalTool.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.exe.embed.manifest
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.exe.embed.manifest.res
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.ilk
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/RemovalTool.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/rc.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/rc.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool.tlog/rc.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/RemovalTool_manifest.rc
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/vc143.idb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Debug/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/RemovalTool.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/RemovalTool.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/RemovalTool.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/RemovalTool.exe.manifest
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/RemovalTool.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/LOTL/living-off-the-land-master/RemovalTool/RemovalTool.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

Actual PE Digest

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Max\Desktop\lib\cecil-master\obj\net_4_0_Release\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Mono.Nat.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Profiles/Default.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Quasar.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Quasar.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Server.Tests.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\obj\Release\Server.Tests.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Server.Tests.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/Vestris.ResourceLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Release/settings.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Build/$77-Example.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Docs/Documentation.docx
.docx office2007
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Docs/PebApiComputeHash.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Docs/Removed.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Examples/ControlPipe.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Examples/InstallShellCode.cpp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/$Examples/InstallShellCode.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.gitattributes
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.gitignore
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/FileContentIndex/89fbd85c-e9ae-4d21-b0ec-e7c31661710f.vsidx
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/.suo
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/Browse.VC.db
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/DocumentLayout.json
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/Solution.VC.db
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/ipch/AutoPCH/57de39938a1e61f2/R77CONFIG.ipch
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/ipch/AutoPCH/75487602459333bb/R77CONFIG.ipch
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/ipch/AutoPCH/a0802ea71bd98555/R77CONFIG.ipch
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/.vs/r77/v17/ipch/AutoPCH/c18ec145fe8b6cf/HELPER.ipch
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/BuildTask.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/BuildTask.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/bin/Release/BuildTask.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\Rootkit\r77-rootkit-master\BuildTask\obj\Release\BuildTask.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/bin/Release/BuildTask.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/bin/Release/BuildTask.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Debug/.NETFramework,Version=v4.7.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Debug/BuildTask.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/BuildTask.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/BuildTask.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/BuildTask.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/BuildTask.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\Rootkit\r77-rootkit-master\BuildTask\obj\Release\BuildTask.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/BuildTask/obj/Release/BuildTask.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/App.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/App.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/CpuUsage.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/Example.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/Example.ico
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/MainWindow.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/MainWindow.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/Resources/Example32.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/Resources/Help16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/Resources/Warning16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/app.manifest
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/bin/Release/Example.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/bin/Release/Example.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/.NETFramework,Version=v4.5.1.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/App.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/App.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/Example.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/Example_MarkupCompile.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/Example_MarkupCompile.i.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/Example_MarkupCompile.i.lref
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/Example_MarkupCompile.lref
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/MainWindow.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Debug/MainWindow.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/App.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/App.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/App.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example.g.resources
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example_MarkupCompile.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/Example_MarkupCompile.lref
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/MainWindow.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/MainWindow.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Example/obj/Release/MainWindow.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Global/GlobalAssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Global/R77Const.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper/Helper.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper/Helper.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper/Helper.vcxitems
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Helper32.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Helper32.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.dll.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/Helper32.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/Helper32.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper32/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/Helper64.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/Helper64.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.dll.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/Helper64.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/Helper64.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Helper64/x64/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Install.c
.ps1
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Install.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Install.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Install.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/Install.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/rc.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/rc.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/Install.tlog/rc.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/Resource.rc
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Install/resource.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/InstallShellcode.asm
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/InstallShellcode.vcxitems
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/PebApi.asm
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/PebApi.inc
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/RunPE.asm
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/bin/InstallShellcode.shellcode
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/InstallShellcode/nt.inc
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/LICENSE.md
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/README.md
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Release/Helper32.exp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Release/Helper32.lib
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Release/r77-x86.exp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Release/r77-x86.lib
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/ControlPipeListener.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/ControlPipeListener.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/ProcessListener.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/ProcessListener.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/Service.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/Service.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service/Service.vcxitems
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/ControlPipeListener.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/ProcessListener.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/Service32.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/Service32.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Service32.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service32/Service32.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/Service64.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/Service64.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/ControlPipeListener.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/ProcessListener.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/Service64.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/Service64.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Service64/x64/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/BytecodeApi.UI.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/BytecodeApi.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/FASM.EXE
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 335B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/ADVAPI32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/COMCTL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/COMDLG32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/GDI32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/KERNEL32.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/SHELL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/USER32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/API/WSOCK32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/UTF8.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1250.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1251.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1252.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1253.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1254.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1255.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1256.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1257.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN1258.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/ENCODING/WIN874.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/COMCTL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/COMCTL64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/COMDLG32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/COMDLG64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/GDI32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/GDI64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/KERNEL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/KERNEL64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/SHELL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/SHELL64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/USER32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/USER64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/EQUATES/WSOCK32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/COM32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/COM64.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/EXPORT.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/IF.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/IMPORT32.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/IMPORT64.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/MASM.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/PROC32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/PROC64.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/RESOURCE.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/MACRO/STRUCT.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/ADVAPI32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/COMCTL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/COMDLG32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/GDI32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/KERNEL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/SHELL32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/USER32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/PCOUNT/WSOCK32.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN32A.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN32AX.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN32AXP.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN32W.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN32WX.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN32WXP.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN64A.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN64AX.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN64AXP.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN64W.INC
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN64WX.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/FASM/INCLUDE/WIN64WXP.INC
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/x64/detours.lib
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/SlnBin/x86/detours.lib
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Helper.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Properties/Resources.Designer.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Properties/Resources.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Resources/Service32.exe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Resources/Service64.exe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Resources/r77-x64.dll
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Resources/r77-x86.dll
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/RunPE.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Stager.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Stager.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Stager.res
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/Unhook.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Debug/Stager.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/Stager.Properties.Resources.resources
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/Stager.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/Stager.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/Stager.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/Stager.csproj.GenerateResource.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Stager/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/App.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/App.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/ConfigSystem.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/ConfigSystemDirectory.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/ConfigSystemEntry.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/ControlCode.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/ControlPipe.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/HelperDll.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Controller/ProcessList.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/Log.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogDetailsItem.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogFileItem.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogItem.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogLinkItem.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogMessage.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogMessageType.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/Logging/LogTextItem.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Model/ProcessView.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/AboutBanner.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/AboutGitHub16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/AboutTitle.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/AboutWebsite16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/ConfigSystem16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/ConfigSystemDelete16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/ControlPipe16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/DllDetach16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/DllInject16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/DllInjected16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Error16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Example16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Exe16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/ExeUac16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Hidden16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Information16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Pdf16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Processes16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/R77Helper16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/R77Service16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Uac16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Unhidden16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Resources/Warning16.png
.png
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/TestConsole.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/TestConsole.ico
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/ViewModels/AboutPopupViewModel.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/ViewModels/ConfigSystemValueWindowViewModel.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/ViewModels/MainWindow/ConfigSystemUserControlViewModel.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/ViewModels/MainWindow/ControlPipeUserControlViewModel.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/ViewModels/MainWindow/ProcessesUserControlViewModel.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/ViewModels/MainWindowViewModel.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/AboutPopup.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/AboutPopup.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/ConfigSystemValueWindow.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/ConfigSystemValueWindow.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow/ConfigSystemUserControl.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow/ConfigSystemUserControl.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow/ControlPipeUserControl.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow/ControlPipeUserControl.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow/ProcessesUserControl.xaml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/Views/MainWindow/ProcessesUserControl.xaml.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/app.manifest
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/bin/Release/BytecodeApi.UI.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/bin/Release/BytecodeApi.xml
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/bin/Release/TestConsole.exe.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/.NETFramework,Version=v4.7.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/App.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/App.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/GeneratedInternalTypeHelper.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/GeneratedInternalTypeHelper.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/TestConsole.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/TestConsole_MarkupCompile.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/TestConsole_MarkupCompile.i.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/TestConsole_MarkupCompile.i.lref
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/TestConsole_MarkupCompile.lref
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/AboutPopup.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/AboutPopup.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/ConfigSystemValueWindow.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/ConfigSystemValueWindow.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow/ConfigSystemUserControl.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow/ConfigSystemUserControl.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow/ControlPipeUserControl.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow/ControlPipeUserControl.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow/ProcessesUserControl.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Debug/Views/MainWindow/ProcessesUserControl.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/App.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/App.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/App.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/GeneratedInternalTypeHelper.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/GeneratedInternalTypeHelper.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/TestConsole.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/TestConsole.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/TestConsole.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/TestConsole.g.resources
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/TestConsole_MarkupCompile.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/TestConsole_MarkupCompile.lref
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/AboutPopup.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/AboutPopup.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/AboutPopup.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/ConfigSystemValueWindow.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/ConfigSystemValueWindow.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/ConfigSystemValueWindow.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ConfigSystemUserControl.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ConfigSystemUserControl.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ConfigSystemUserControl.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ControlPipeUserControl.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ControlPipeUserControl.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ControlPipeUserControl.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ProcessesUserControl.baml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ProcessesUserControl.g.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/TestConsole/obj/Release/Views/MainWindow/ProcessesUserControl.g.i.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/Uninstall.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/rc.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/rc.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/Uninstall.tlog/rc.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Resource.rc
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Uninstall.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Uninstall.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/Uninstall.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall/resource.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/Uninstall64.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/Uninstall64.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/Uninstall64.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.exe.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/Uninstall64.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/Uninstall64.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/Uninstall64/x64/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/r77-x64.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/r77-x64.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/r77-x64.vcxproj.user
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/Config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/Hooks.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/ReflectiveDllMain.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/Rootkit.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.dll.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77-x64.tlog/r77-x64.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x64/x64/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/Config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/Hooks.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/ReflectiveDllMain.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/Rootkit.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/clist.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.dll.recipe
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.iobj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.ipdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.log
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/CL.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/CL.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/CL.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/Cl.items.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/link.command.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/link.read.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/link.secondary.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/link.write.1.tlog
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77-x86.tlog/r77-x86.lastbuildstate
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77config.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77process.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/r77win.obj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/Release/vc143.pdb
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/r77-x86.vcxproj
.xml
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77-x86/r77-x86.vcxproj.filters
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77.sln
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/Config.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/Config.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/Hooks.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/Hooks.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/ReflectiveDllMain.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/ReflectiveDllMain.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/Rootkit.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/Rootkit.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/detours.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/r77.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77/r77.vcxitems
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/clist.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/clist.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/ntdll.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77api.vcxitems
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77config.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77config.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77def.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77mindef.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77process.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77process.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77win.c
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/r77api/r77win.h
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/x64/Release/Helper64.exp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/x64/Release/Helper64.lib
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/x64/Release/r77-x64.exp
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Rootkit/r77-rootkit-master/x64/Release/r77-x64.lib
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Bin/Shit to Bind/$sxr-mshta.exe
.exe windows:6 windows x86 arch:x86

a38b485f7e2a67cdc3056cc6d1f75dc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\Bin\LOTL\living-off-the-land-master\Debug\Payload.pdb

Imports

user32

MessageBoxA

kernel32

HeapValidate
CreateFileW
GetCurrentThreadId
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
GetCurrentProcess
TerminateProcess
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
ReadFile
GetSystemInfo
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
HeapReAlloc
HeapSize
HeapQueryInformation
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
DecodePointer
CloseHandle
ReadConsoleW

Sections

.textbss
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Core/Compression/SafeQuickLZ.Tests.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Core/Encryption/AES.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Core/Packet/Packet.Tests.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/Server.Tests.csproj
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Debug/Server.Tests.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/Server.Tests.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/Server.Tests.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/Server.Tests.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/Server.Tests.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\miles\OneDrive\Desktop\SeroXen 2\Quasar-1.3.0.0\Server.Tests\obj\Release\Server.Tests.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server.Tests/obj/Release/Server.Tests.pdb
SeroXen 2/Quasar-1.3.0.0/Server/.vs/Server.csproj.dtbcache.json
SeroXen 2/Quasar-1.3.0.0/Server/Controls/DotNetBarTabControl.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/ByteCollection.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/Caret.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/EditView.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/HexEditor.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/HexViewHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/IKeyMouseEventHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/HexEditor/StringViewHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/InputBox.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/Line.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/ListViewEx.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/RapidPictureBox.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Controls/RegistryTreeView.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/RegistryValueLstItem.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/WordTextBox.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Controls/WordTextBox.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Build/ClientBuilder.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Build/IconInjector.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Build/Renamer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/CommandHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/ConnectionHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/MiscHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/RegistryHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/SurveillanceHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/SystemHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Commands/TCPConnectionsHandler.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Compression/JpgCompression.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Compression/SafeQuickLZ.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Cryptography/AES.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/AutostartItem.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/BuildOptions.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/BuilderProfile.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/DownloadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/Host.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/Messagebox.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/RecoveredAccount.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/RemoteDrive.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/Settings.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/Update.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/UploadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Data/VisitWebsite.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Extensions/ListViewExtensions.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Extensions/RegistryKeyExtensions.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Extensions/SocketExtensions.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/ClipboardHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/CryptographyHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/FileHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/FormatHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/HostHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/NativeMethodsHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/PlatformHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/RemoteDesktopHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Helper/WindowHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Hook.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/HotKeys/HotKeyArgs.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/HotKeys/HotKeySet.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/HotKeys/HotKeySetCollection.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/HotKeys/HotKeySetsListener.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/HotKeys/ReadMe.txt
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/IKeyboardEvents.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/IKeyboardMouseEvents.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/IMouseEvents.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/AppEventFacade.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/AppKeyListener.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/AppMouseListener.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/BaseListener.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/ButtonSet.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/Callback.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/EventFacade.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/GlobalEventFacade.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/GlobalKeyListener.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/GlobalMouseListener.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/KeyListener.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/KeyboardState.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/MouseListener.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/Implementation/Subscribe.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/KeyEventArgsExt.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/KeyPressEventArgsExt.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/MouseEventExtArgs.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/AppMouseStruct.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/CallbackData.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/HookHelper.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/HookIds.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/HookNativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/HookProcedure.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/HookProcedureHandle.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/HookResult.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/KeyboardHookStruct.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/KeyboardNativeMethods.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/Messages.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/MouseNativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/MouseStruct.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/Point.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/MouseKeyHook/WinApi/ThreadNativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/CodeGenContext.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/Helpers.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/ITypeSerializer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/Primitives.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/Serializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/TypeSerializers/ArraySerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/TypeSerializers/DictionarySerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/TypeSerializers/EnumSerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/TypeSerializers/GenericSerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/TypeSerializers/ObjectSerializer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/NetSerializer/TypeSerializers/PrimitivesSerializer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Networking/Client.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Networking/QuasarServer.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Networking/Server.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Networking/UserState.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Networking/Utilities/PooledBufferManager.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Networking/Utilities/UPnP.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/DoDownloadFileResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/DoShellExecuteResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetAuthenticationResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetChangeRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetConnectionsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetCreateRegistryKeyResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetCreateRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetDeleteRegistryKeyResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetDeleteRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetDesktopResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetDirectoryResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetDrivesResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetKeyloggerLogsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetMonitorsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetPasswordsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetProcessesResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetRegistryKeysResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetRenameRegistryKeyResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetRenameRegistryValueResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetStartupItemsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetSystemInfoResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetWebcamResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/GetWebcamsResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/SetStatus.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/SetStatusFileManager.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ClientPackets/SetUserStatus.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/IPacket.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/PacketHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/PacketRegistery.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoAskElevate.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoChangeRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoClientDisconnect.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoClientReconnect.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoClientUninstall.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoClientUpdate.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoCloseConnection.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoCreateRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoCreateRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoDeleteRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoDeleteRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoDownloadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoDownloadFile.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoDownloadFileCancel.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoKeyboardEvent.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoLoadRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoMouseEvent.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoPathDelete.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoPathRename.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoProcessKill.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoProcessStart.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoRenameRegistryKey.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoRenameRegistryValue.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoShellExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoShowMessageBox.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoShutdownAction.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoStartupItemAdd.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoStartupItemRemove.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoUploadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoUploadFile.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoVisitWebsite.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/DoWebcamStop.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetAuthentication.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetConnections.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetDesktop.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetDirectory.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetDrives.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetKeyloggerLogs.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetMonitors.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetPasswords.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetProcesses.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetStartupItems.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetSystemInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetWebcam.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/GetWebcams.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Packets/ServerPackets/SetAuthenticationSuccess.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Registry/RegSeekerMatch.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Registry/RegValueData.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Registry/RegValueHelper.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/Packets/ReverseProxyConnect.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/Packets/ReverseProxyConnectResponse.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/Packets/ReverseProxyData.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/Packets/ReverseProxyDisconnect.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/ReverseProxyClient.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/ReverseProxyCommandHandler.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/ReverseProxy/ReverseProxyServer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/ByteConverter.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/FileSplit.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/FrameCounter.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/ListViewColumnSorter.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/NativeMethods.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/NoIpUpdater.cs
SeroXen 2/Quasar-1.3.0.0/Server/Core/Utilities/UnsafeStreamCodec.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Enums/MouseAction.cs
SeroXen 2/Quasar-1.3.0.0/Server/Enums/PathType.cs
SeroXen 2/Quasar-1.3.0.0/Server/Enums/ShutdownAction.cs
SeroXen 2/Quasar-1.3.0.0/Server/Enums/UserStatus.cs
SeroXen 2/Quasar-1.3.0.0/Server/Enums/WordType.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmAbout.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmAbout.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmAbout.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmAddToAutostart.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmAddToAutostart.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmAddToAutostart.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmBuilder.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmBuilder.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmBuilder.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmConnections.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmConnections.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmConnections.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmDownloadAndExecute.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmDownloadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmDownloadAndExecute.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmFileManager.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmFileManager.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmFileManager.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmKeylogger.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmKeylogger.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmKeylogger.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmLoading.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmLoading.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmLoading.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmLogin.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmLogin.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmLogin.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmMain.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmMain.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmMain.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmPasswordRecovery.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmPasswordRecovery.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmPasswordRecovery.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditBinary.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditBinary.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditBinary.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditMultiString.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditMultiString.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditMultiString.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditString.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditString.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditString.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditWord.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditWord.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegValueEditWord.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegistryEditor.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegistryEditor.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRegistryEditor.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteDesktop.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteDesktop.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteDesktop.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteShell.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteShell.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteShell.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteWebcam.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteWebcam.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmRemoteWebcam.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmReverseProxy.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmReverseProxy.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmReverseProxy.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmSettings.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmSettings.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmSettings.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmShowMessagebox.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmShowMessagebox.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmShowMessagebox.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmStartupManager.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmStartupManager.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmStartupManager.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmSystemInformation.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmSystemInformation.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmSystemInformation.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmTaskManager.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmTaskManager.cs
.js
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmTaskManager.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmUpdate.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmUpdate.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmUpdate.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmUploadAndExecute.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmUploadAndExecute.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmUploadAndExecute.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmVisitWebsite.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmVisitWebsite.cs
SeroXen 2/Quasar-1.3.0.0/Server/Forms/FrmVisitWebsite.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Program.cs
SeroXen 2/Quasar-1.3.0.0/Server/Properties/AssemblyInfo.cs
SeroXen 2/Quasar-1.3.0.0/Server/Properties/Resources.Designer.cs
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Properties/Resources.resx
.vbs
SeroXen 2/Quasar-1.3.0.0/Server/Properties/Settings.Designer.cs
SeroXen 2/Quasar-1.3.0.0/Server/Properties/Settings.settings
SeroXen 2/Quasar-1.3.0.0/Server/Quasar_Server.ico
SeroXen 2/Quasar-1.3.0.0/Server/Resources/actions.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/cog.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/delete.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/drive_go.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/lightning.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/monitoring.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/restart.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/shutdown.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/standby.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/textfield_rename.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/user.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Resources/website.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/Server.csproj
SeroXen 2/Quasar-1.3.0.0/Server/app.config
.xml
SeroXen 2/Quasar-1.3.0.0/Server/app.manifest
SeroXen 2/Quasar-1.3.0.0/Server/flags/ad.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ae.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/af.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ag.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ai.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/al.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/am.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/an.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ao.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ar.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/as.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/at.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/au.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/aw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ax.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/az.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ba.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bb.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bd.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/be.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bi.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bj.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bo.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/br.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bs.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bv.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/by.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/bz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ca.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/catalonia.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cd.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ch.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ci.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ck.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cl.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/co.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cs.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cv.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cx.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cy.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/cz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/de.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/dj.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/dk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/dm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/do.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/dz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ec.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ee.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/eg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/eh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/england.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/er.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/es.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/et.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/europeanunion.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fam.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fi.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fj.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fo.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/fr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ga.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gb.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gd.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ge.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gi.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gl.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gp.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gq.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gs.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/gy.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/hk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/hm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/hn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/hr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ht.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/hu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/id.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ie.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/il.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/in.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/io.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/iq.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ir.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/is.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/it.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/jm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/jo.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/jp.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ke.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ki.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/km.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kp.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ky.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/kz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/la.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lb.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/li.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ls.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/lv.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ly.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ma.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/md.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/me.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ml.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mo.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mp.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mq.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ms.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mv.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mx.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/my.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/mz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/na.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/nc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ne.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/nf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ng.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ni.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/nl.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/no.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/np.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/nr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/nu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/nz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/om.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pa.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pe.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ph.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pl.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ps.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/pw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/py.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/qa.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/re.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ro.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/rs.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ru.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/rw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sa.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sb.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/scotland.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sd.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/se.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/si.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sj.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sl.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/so.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/st.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sv.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sy.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/sz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/td.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/th.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tj.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tk.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tl.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/to.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tr.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tv.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/tz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ua.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ug.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/um.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/us.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/uy.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/uz.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/va.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/vc.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ve.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/vg.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/vi.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/vn.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/vu.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/wales.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/wf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ws.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/xy.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/ye.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/yt.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/za.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/zm.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/flags/zw.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/icons/Quasar_Server.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/application.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/application_add.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/application_delete.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/archive.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/back.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/bricks.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/broom.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/cancel.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/computer.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/copy.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/done.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/download.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/drive_go.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/eye.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/file.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/folder.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/image.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/information.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/key_go.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/keyboard_add.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/keyboard_delete.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/lightning.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/logger.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/monitor.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/mouse_add.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/mouse_delete.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/movie.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/music.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/pdf.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/refresh.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/reg_binary.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/reg_string.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/registry.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/run.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/save.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/server.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/server_add.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/server_disconnect.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/server_link.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/server_reconnect.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/server_uninstall.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/startup_programs.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/task_manager.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/terminal.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/text.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/transmit_blue.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/uac_shield.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/upload.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/webcam.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/website.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/word.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/world_go.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/images/world_link.png
.png
SeroXen 2/Quasar-1.3.0.0/Server/lib/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Max\Desktop\lib\cecil-master\obj\net_4_0_Release\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server/lib/Mono.Nat.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server/lib/Vestris.ResourceLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server/obj/Debug/.NETFramework,Version=v4.0,Profile=Client.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Debug/Server.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/DesignTimeResolveAssemblyReferences.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/Quasar.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/Server.csproj.AssemblyReference.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/Server.csproj.CoreCompileInputs.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/Server.csproj.FileListAbsolute.txt
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/Server.csproj.GenerateResource.cache
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmAbout.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmAddToAutostart.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmBuilder.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmConnections.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmDownloadAndExecute.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmFileManager.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmKeylogger.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmLoading.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmLogin.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmMain.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmPasswordRecovery.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRegValueEditBinary.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRegValueEditMultiString.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRegValueEditString.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRegValueEditWord.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRegistryEditor.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRemoteDesktop.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRemoteShell.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmRemoteWebcam.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmReverseProxy.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmSettings.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmShowMessagebox.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmStartupManager.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmSystemInformation.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmTaskManager.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmUpdate.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmUploadAndExecute.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Forms.FrmVisitWebsite.resources
SeroXen 2/Quasar-1.3.0.0/Server/obj/Release/xServer.Properties.Resources.resources
SeroXen 2/Quasar-1.3.0.0/Server/packages.config
SeroXen 2/Quasar-1.3.0.0/appveyor.yml
SeroXen 2/Quasar-1.3.0.0/build-debug.bat
SeroXen 2/Quasar-1.3.0.0/build-release.bat
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/.signature.p7s
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/Guna.UI2.WinForms.2.0.4.6.nupkg
.nupkg
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/LICENSE.txt
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/README.md
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/icon.png
.png
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:4c:4e:d1:37:8d:d5:46:2c:19:17:31:96:91:84:58:48:c3:2c:75
Signer

Actual PE Digest

04:4c:4e:d1:37:8d:d5:46:2c:19:17:31:96:91:84:58:48:c3:2c:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

36:bf:45:fa:78:df:d7:c8:c8:94:09:9c:fd:ee:f4:ba:f4:a5:5a:70
Signer

Actual PE Digest

36:bf:45:fa:78:df:d7:c8:c8:94:09:9c:fd:ee:f4:ba:f4:a5:5a:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c2:0e:55:84:9b:c5:72:cb:69:8f:68:a9:20:ff:5d:89:d2:ab:e1:f0
Signer

Actual PE Digest

c2:0e:55:84:9b:c5:72:cb:69:8f:68:a9:20:ff:5d:89:d2:ab:e1:f0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:b4:cf:f5:c2:a1:e0:36:e9:3f:b8:c2:44:a0:df:33:c2:26:10:62
Signer

Actual PE Digest

47:b4:cf:f5:c2:a1:e0:36:e9:3f:b8:c2:44:a0:df:33:c2:26:10:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

Actual PE Digest

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fc:f1:4f:80:29:85:d5:17:61:00:50:90:0b:29:ff:b3:2a:f2:5b:54
Signer

Actual PE Digest

fc:f1:4f:80:29:85:d5:17:61:00:50:90:0b:29:ff:b3:2a:f2:5b:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:ee
Signer

Actual PE Digest

5e:00:a7:1b:7e:46:57:12:de:98:da:e3:8d:91:ea:26:6d:ef:71:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeroXen 2/Quasar-1.3.0.0/packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

da:64:a2:0a:83:46:13:2a:3f:2d:3b:35:18:ee:e3:2c:51:50:99:c1
Signer

Actual PE Digest

da:64:a2:0a:83:46:13:2a:3f:2d:3b:35:18:ee:e3:2c:51:50:99:c1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

Files

Password: @Thx<3

Password: @Thx<3

Password: @Thx<3

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 258KB - Virtual size: 257KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 275KB - Virtual size: 275KB

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 512B - Virtual size: 12B

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 37KB - Virtual size: 37KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: @Thx<3

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 894KB - Virtual size: 893KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 512B - Virtual size: 12B

Password: @Thx<3

Password: @Thx<3

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

.text
Size: 258KB - Virtual size: 257KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 275KB - Virtual size: 275KB

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 37KB - Virtual size: 37KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 894KB - Virtual size: 893KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 74KB - Virtual size: 73KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 258KB - Virtual size: 257KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 258KB - Virtual size: 257KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 258KB - Virtual size: 257KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B