ZoomInstallerFull[.]exe

resource	yara_rule
static1/unpack001/Zoom.dll	net_reactor

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/Zoom.dll
unpack001/Zoom.exe

ZoomInstallerFull.exe

IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
SHA256 ab8e39e178ce83b48ee9863cc2dc58bba5b45ed5d54431efb878221904e9a796
MD5 ba6a3615a1780e5c1bc05c02a505e40b
SHA1 ce0ca3608dbc6730750a443c138870a7882c1859
SHA512 7ad2f9d9d5eb7ead5bf8e2e52b348b756caf1a1754e2bb9cf2f49a30093f6280767055a7906e996b4ee92a7c034769686eb062037deceb616789fa524b96ff3a
SSDEEP 786432:sndETNQLqskf7BmvVgMopLl4UMzI2IIj2dQYgs7EOaZYn7sUmPkX85NPYI7qTCzH:sdEpQLqsQB0o1OU+ucSPgyaYn7sUmPI0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4e:c8:0d:0b:d8:0c:96:fd:b1:20:91:bd:db:7e:ce:54:f7:e1:1e:91:5e:38:87:a6:d3:b4:f2:8d:9e:df:67:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91310115MA1H8Y2K79,CN=Pinkou (SH) Culture Communication Co.\, Ltd.,O=Pinkou (SH) Culture Communication Co.\, Ltd.,L=Shanghai,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 1, 0001

Subject

SERIALNUMBER=91310115MA1H8Y2K79,CN=Pinkou (SH) Culture Communication Co.\, Ltd.,O=Pinkou (SH) Culture Communication Co.\, Ltd.,L=Shanghai,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

7a:2a:5d:02:96:45:3b:1d:8f:ff:99:eb:0e:59:d3:44

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 12, 2024 - Mar 11, 2025

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 26, 2019 - Mar 22, 2034

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 85f08eb0cbec010ecbc287fa68321173
SHA256 b2091205e225fc07daf1101218c64ce62a4690cacac9c3d0644d12e93e4c213c
MD5 d095b082b7c5ba4665d40d9c5042af6d
SHA1 2220277304af105ca6c56219f56f04e894b28d27
SHA512 61fb5cf84028437d8a63d0fda53d9fe0f521d8fe04e96853a5b7a22050c4c4fb5528ff0cdbb3ae6bc74a5033563fc417fc7537e4778227c9fd6633ae844c47d9
SSDEEP 192:EyGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTr11929WtshLAzgSrX8:EyNt+4t7uJalUnGesY7Lt8nCr/Yosa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryW GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile GetPrivateProfileIntW SetFilePointer MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW GetPrivateProfileStringW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree WriteFile GlobalAlloc

user32

PtInRect LoadCursorW GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard GetClientRect SetWindowRgn LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW SetCursor DrawTextW GetWindowLongW DrawFocusRect CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW MapWindowPoints

gdi32

SetTextColor CreateCompatibleDC GetObjectW GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderW SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
MD5 50016010fb0d8db2bc4cd258ceb43be5
SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

Accessibility.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 929ea150ad45b7c7dd5427461fbec44d43b67c08081f59b42b6abf570feae271
MD5 fb554f9fe0b91f135d26ac6459cfd6f2
SHA1 b1269a2c28bded872b14fe70b69484631ef3a65d
SHA512 8dffde6cddfc59ec380111fd36048126559e1f1e080c081ca0d09021bb23d6888e93e1659c7b3a8fa46f76602b03cf3e638ec1a80fba79e51648dcb32362e10c
SSDEEP 384:qBmy0h6gSGRaOcHitWG/W65kHRN7lI+R9zJKBd:7SNOcHOUOi9zEBd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3d:b3:03:35:20:15:d9:fc:46:6f:49:67:85:20:31:22:00:7d:db:ef:9a:b2:64:29:26:cd:a1:b2:f6:de:58:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D3DCompiler_47_cor3.dll

IMPHASH 8235041cfd6fffb926142c2c78013446
SHA256 b23e7b820ed5c6ea7dcd77817e2cd79f1cec9561d457172287ee634a8bd658c3
MD5 03a60a6652caf4f49ea5912ce4e1b33c
SHA1 a0d949d4af7b1048dc55e39d1d1260a1e0660c4f
SHA512 6711d40d171ea200c92d062226a69f33eb41e9232d74291ef6f0202de73cf4dc54fbdd769104d2bb3e89dc2d81f2f2f3479e4258a5d6a54c545e56b07746b4c4
SSDEEP 49152:xCZnRO4XyM53Rkq4ypQqdoRpmrgBVYvkaRwv/ZD0/WYLDltog/RfznLeHTRhFRNI:YG2QCS6HHzog/pznA7T6VP
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

80:5d:c5:12:35:5e:e1:23:cc:cd:fc:86:0b:c4:64:6d:59:c0:f9:e1:ad:8e:a3:f6:ea:5f:b1:cf:f9:7e:07:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

10

Entry point

2702512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D3DCompiler_47.pdb

kernel32

WriteFile FreeLibrary Sleep TlsAlloc TlsSetValue HeapDestroy TlsGetValue TlsFree GetFullPathNameW GetFullPathNameA GetEnvironmentVariableA VirtualFree VirtualAlloc GetSystemInfo GetProcAddress LoadLibraryExW SetLastError RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId GetStdHandle GetFileType GetStartupInfoW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleW GetModuleHandleExW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx GetStringTypeW ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RaiseException FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetModuleFileNameW ReadConsoleW HeapSize HeapReAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwindEx InterlockedFlushSList EncodePointer InitializeCriticalSectionEx RtlPcToFileHeader LocalAlloc LocalFree GetFileSizeEx GetLastError CreateFileW HeapFree GetProcessHeap UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetFileAttributesW SetFileAttributesW DeleteFileW SetEndOfFile DeviceIoControl MapViewOfFileEx CreateFileMappingA ExpandEnvironmentStringsW HeapAlloc OutputDebugStringA CloseHandle LeaveCriticalSection EnterCriticalSection lstrcmpiA HeapCreate GetModuleFileNameA CreateFileA DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetDriveTypeW GetCurrentDirectoryW SetEvent ResetEvent WaitForSingleObjectEx CreateEventW MultiByteToWideChar SetStdHandle DisableThreadLibraryCalls

advapi32

CryptDestroyHash CryptAcquireContextW RegQueryValueExA RegEnumKeyExA RegOpenKeyExA CryptGetHashParam CryptCreateHash CryptHashData RegQueryValueExW RegOpenKeyExW RegCloseKey CryptReleaseContext

rpcrt4

UuidCreate

DirectWriteForwarder.dll

SHA256 778936b5baf157c3a040955bc637936952e7b68c5aff83536d4b613ed9691cde
MD5 69044c681ea1eedca54d13ed97e1452a
SHA1 f4fbb066afa38be160fc4462994b2cdb67af5cca
SHA512 4aed9e46d1670e6b85254bf905e4bcc53e3fa9d7e1b29d434c86ee42feb90a992e80057ad476ee4561389368ed8308e9f9548012d85dec26dcda9dc2ecb766d8
SSDEEP 6144:PQd8G8WEjiXSMYhtsOljgEk+hY8rY2JQT296UKf12fzfOqpo0EVbn95n3i1+wZ:P5G8WEjiX/Yvh0E9rY2NDJO0Cbn9d3S5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c0:e7:db:5f:05:14:d4:83:a1:e0:51:e6:e6:54:43:5e:47:0e:d0:02:f0:72:16:2d:9f:b9:6f:12:31:36:d6:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DirectWriteForwarder.ni.pdb D:\a\_work\1\s\artifacts\bin\DirectWriteForwarder\x64\Release\net8.0\DirectWriteForwarder.pdb

Microsoft.CSharp.dll

SHA256 df495f74456ad5ae30a5bac440b4d3808fa2d13c377cce1afc0146b8319ded6e
MD5 8e7612cc8019d952a93d9b777e71b802
SHA1 d973dfb790614e9a5e7c3ce8b421c085d11937ed
SHA512 3a818940d3c6f5da11bc86c974a54323ae2a1ad876613790ffe68aa5b674c54e5de0c133614236f45a89de86a5547cae4f8e6f2c97d7874221b2b1a285e14355
SSDEEP 24576:XUpXJ0Hy8Ext+9whtbSa0wHVu9yH1sCzwUD/zD:EpXiHyN++tbLzHVu9yHXPjH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

02:c3:78:d8:50:7e:b3:44:87:0e:a6:7b:cd:78:3d:de:af:fb:c7:4c:5a:a0:07:fc:6e:bc:9e:07:f7:54:68:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.CSharp.ni.pdb D:\a\_work\1\s\artifacts\obj\Microsoft.CSharp\Release\net8.0-windows\Microsoft.CSharp.pdb

Microsoft.DiaSymReader.Native.amd64.dll

IMPHASH bffa8501aec5c29321d36de57d4de8be
SHA256 76d0da51c2ed6ce4de34f0f703af564cbefd54766572a36b5a45494a88479e0b
MD5 804b9539f7be4ece92993dc95c8486f5
SHA1 ec3ca8f8d3cd2f68f676ad831f3f736d9c64895c
SHA512 146c3b2a0416ac19b29a281e3fc3a9c4c5d6bdfc45444c2619f8f91beb0bdd615b26d5bd73f0537a4158f81b5eb3b9b4605b3e2000425f38eeeb94aa8b1a49f2
SSDEEP 24576:qz0s9kT3H8I0bo5rjwjnbRCJMy37DjZ3IrVynoT/RUqtMAIEohkGXTwImgP:qYs9m3H5rjQn1CiAnZ3yV+oTZQEoTTH
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

PE Signature issue

Digest

c8:82:3e:a0:58:c9:a3:5b:24:e4:72:aa:89:c8:28:d2:1c:a1:f9:c4:e6:dd:b0:2d:28:52:58:e2:d0:35:00:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

163376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\\binaries\amd64ret\bin\amd64\Microsoft.DiaSymReader.Native.amd64.pdb

kernel32

GetLastError FreeLibrary InitializeCriticalSectionEx GetNativeSystemInfo DisableThreadLibraryCalls LocalAlloc GetCurrentThreadId Sleep LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwindEx InterlockedFlushSList SetLastError EncodePointer RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW RtlPcToFileHeader ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW CreateFileW CloseHandle WriteConsoleW LocalFree FormatMessageW GetEnvironmentVariableW GetTickCount GetSystemInfo UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetFileAttributesW SetFileAttributesW VirtualAlloc VirtualFree DeleteFileW SetEndOfFile DeviceIoControl MapViewOfFileEx CreateFileMappingA InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared ExpandEnvironmentStringsW GetFullPathNameW VirtualProtect VirtualQuery LoadLibraryExA GetDriveTypeW GetCurrentDirectoryW TryEnterCriticalSection CreateThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CloseThreadpoolWork

ole32

CoTaskMemAlloc CoTaskMemFree

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

295KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Microsoft.VisualBasic.Core.dll

SHA256 34271825351d9871583dead758b44676ef2bac56c4b7ac7124fadb087ea44f6e
MD5 3a037c21af5742650933cebf0521f3d6
SHA1 8b22127c4feb185c5d02d83b5f1fe3815821036c
SHA512 3451bd4b3053d3834f07fc1d0d6a691fdadab2b7290d1ad21b48e9f319249aac89455b1caea463beb4b2910b90b7f8a518221b2f3b0e3863beca3104030c8ee3
SSDEEP 24576:qFMvfAlbPZy4jHHa2frxkxRecGSIsRv3i6hFqQX:qFMvolTvHHa2DqT3i4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6f:75:a5:d0:e8:0c:88:35:fa:e4:76:a9:e1:f3:0f:69:6b:4b:61:a9:fe:ac:1e:92:45:2f:e0:9c:4b:dc:31:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.VisualBasic.Core.ni.pdb D:\a\_work\1\s\artifacts\obj\Microsoft.VisualBasic.Core\Release\net8.0-windows\Microsoft.VisualBasic.Core.pdb

Microsoft.VisualBasic.Forms.dll

SHA256 62878ad85c315f06a00f7f1f543bba3f411838e80fb7bfe4d6f6ec935930efdc
MD5 79fe89013356423a12f52fb8a09a54c7
SHA1 3e5fda4b2c8d3b41c9b88404a01a2b8dcfd06ebe
SHA512 3a3d927a7944b40fcc6990c94574eb42b1e7fcbbd29f405d0dc5471c63549c63f7b7c61a3d17c2fd33cfc21c4bab0492e6532b6542cb4d24e10bd9dd0bb249d3
SSDEEP 6144:K6IA96ZdbZRjEtB5dzAbxbDme2NUIPOzQI:f9MbYZdGpgUwOcI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d4:6e:d1:29:a2:9a:86:1f:f3:d9:9f:c2:2b:14:60:08:f3:2a:d6:88:b1:29:da:68:83:a5:38:83:88:57:df:87

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.VisualBasic.Forms.ni.pdb /_/artifacts/obj/Microsoft.VisualBasic.Forms/Release/net8.0/Microsoft.VisualBasic.Forms.pdb

Microsoft.VisualBasic.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9d20ca17355838ff3d2f3c89fbaf7c705bd01d297d1eb589489a84f6430da894
MD5 e5ce0f3a5d15d8b6693724c40197a9fe
SHA1 2e0b6bfdbb5c185ca71fe1d5b5f0eab18d568471
SHA512 3b87f295c1d914dc1ae95798e2ee1fcef40dc0ab1688ec247d4c2c777c253912980ecc8bfba11f0327a9d8bda9c1c36752de9ba936cba902ccb4cbfa7e82a26d
SSDEEP 384:+2gfnShxL2GlzxWmHr9QdWTTb2HRN7AxR9zr75:+5n6lZlzX/iA79zh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bb:f4:74:11:30:3b:ea:f7:8b:c5:c4:a4:59:8f:ac:d3:e3:97:3d:7b:59:80:a7:26:72:52:60:cd:63:97:d5:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14190

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.VisualBasic.Facade/Release/net8.0/Microsoft.VisualBasic.pdb

Microsoft.Win32.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f1b40565e5c4c41da810aee5b7d2272a0906e88f796812435aa5ed712bcac40c
MD5 300c95ff95b52e8a02fec6bfcfa58225
SHA1 b646f89fcd463ad5c19889b4fea40540568b780c
SHA512 9bfe0eb6eea98b2d35aa42986a273ec82424143965e173b32bb4b7e5537580a027940a6952a45fc54f0b665e871deb2a95651106c2f24c7de3b3d3cd2dec7e89
SSDEEP 192:Vi0pAxFWh/pWYuWXebPpUNTQHnhWgN7agWlnfEl+X01k9z3AE1a9Fb4hk6gn:ViMeFWh/pWYTb2HRN7cY+R9zF1aLchkv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:80:b8:09:33:43:6a:f3:d4:08:3e:a1:a8:9f:d8:99:86:79:d4:46:4b:7c:e0:c1:ce:01:fe:e3:b7:a1:28:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\Microsoft.Win32.Primitives\Release\net8.0\Microsoft.Win32.Primitives.pdb

Microsoft.Win32.Registry.AccessControl.dll

SHA256 9ee0d84655655e39ede6d23aed940c98a3a8eb6270d878b252ea1720f750cead
MD5 8ed7b1aa897a85bd5619220f28be88ef
SHA1 539839a6fc00d462340d569fff8f42b06010df8f
SHA512 2caacc3f8b5084effeac526873365697f72e242fbaa71a94fe5e739dbfe5dd35a85ad618d31d2ddc65d648c3f2f5ad436d14f9d4bcaa813e88e4bf1643e3a196
SSDEEP 384:FWFPrWFVHFcKRKbUWTb2HRN7Jr+Hj+R9zjj2X:M6FvRKbH/iwHji9zY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7e:b0:c4:d5:d7:6d:02:58:b1:7b:08:35:5d:09:60:63:87:52:af:b0:7a:35:d8:ca:d6:1f:d1:69:53:83:76:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.Win32.Registry.AccessControl.ni.pdb /_/artifacts/obj/Microsoft.Win32.Registry.AccessControl/Release/net8.0-windows/Microsoft.Win32.Registry.AccessControl.pdb

Microsoft.Win32.Registry.dll

SHA256 e1c83bc80e79863e80cfaca350291ae5bdf942c59f39e812770039bdaa660ac9
MD5 b69cd4e54d44e1d73ebe2c1a492dff43
SHA1 44739e4f0a64cd1dce73afddae1e27c20e663757
SHA512 9aaf53d69401175f35f079b031806266ec419170205a0291f38986a4b1cc39704f1e081ff18d178b0fb9d9b5eaceca60384e7e1fa2eeaaab88b2e157a1f8e667
SSDEEP 3072:5vauwrxjsbG4TJ6UJSvEVcULVi8AiC1HLP:AQ64t6UJSvEVzIlb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

54:4b:c6:a8:02:f5:8b:89:f3:91:b0:b6:32:40:41:c5:68:ca:71:39:97:69:ee:67:1e:75:d5:04:7e:9a:31:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.Win32.Registry.ni.pdb D:\a\_work\1\s\artifacts\obj\Microsoft.Win32.Registry\Release\net8.0-windows\Microsoft.Win32.Registry.pdb

Microsoft.Win32.SystemEvents.dll

SHA256 c81a58bd27c74f91e26245c530c4cadc5425a1a1586886c6a5631eef9d81fde2
MD5 089edcaae873c9371b2dc9a4399f62b9
SHA1 441686e76986ecf295e50e80a78dc093dc9f9a02
SHA512 6b88f9264fdbbb0585efa21940fc888c593862ebb3bd305890294f64b37a81967a8ab2fbba30aa3f5db2994c25c57929df1644e269be898b77c77d4c0181f943
SSDEEP 1536:BF0vV+d5uN62jM2HHdKCqN/4IGrtsD3jvSD7Tir+zr:Bav8d8N5jpH0QIGrYjW7l3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

74:12:04:bd:04:8b:eb:5a:06:a2:88:6a:9c:fe:90:94:e1:30:cc:9b:26:ae:d4:5d:b1:86:d2:d7:2c:ce:ab:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.Win32.SystemEvents.ni.pdb /_/artifacts/obj/Microsoft.Win32.SystemEvents/Release/net8.0-windows/Microsoft.Win32.SystemEvents.pdb

PenImc_cor3.dll

IMPHASH 4093c03428ffebcedcb974ab93290ca8
SHA256 f95b51b5bee746ea3430a277f0473f42e4e22fc12b8dbfc719346cee579b80ff
MD5 362e037c4be1cb28fac25612e9be029d
SHA1 4a11ab39dbd0dba5480f54324c58f8294b19ce5f
SHA512 945b6cc6cba7742323b6cc023eb78b227180bf8a0f8c134871948410b48d9399ae68f52ef80e18945fb018508f92ae6da9584c75c6f12fe06f6e86fdea4611d6
SSDEEP 3072:OzAUq2kMBlUb8BQLBzDUw7aaHSuEmUgPuoATZ+AiRvYY4ZmoJ:OzHkMTvmLtDUw2huEmd2LbYvi
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

PE Signature issue

Digest

4f:91:01:6d:3a:cc:e4:37:1e:b2:37:ac:a0:5f:ce:cf:27:95:b5:36:aa:72:bc:36:39:e2:4c:76:aa:2c:3a:78

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

78352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\bin\PenImc\x64\Release\PenImc_cor3.pdb

kernel32

SetThreadLocale DeleteCriticalSection RaiseException DecodePointer EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx WaitForSingleObject ReleaseMutex InitializeCriticalSection CreateEventW GetCurrentProcessId OpenEventW OpenMutexW OpenFileMappingW MapViewOfFile UnmapViewOfFile SetEvent LocalFree SignalObjectAndWait IsWow64Process GetCurrentProcess OutputDebugStringW GetThreadLocale CreateThread QueueUserAPC SetWaitableTimer CancelWaitableTimer CreateActCtxW ActivateActCtx VerSetConditionMask LoadLibraryW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsDebuggerPresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext RtlPcToFileHeader InterlockedFlushSList CreateMutexW CloseHandle GetModuleFileNameW LoadLibraryExW FindResourceW LoadResource SizeofResource MultiByteToWideChar GetLastError lstrcmpiW GetModuleHandleW GetProcAddress FreeLibrary CreateWaitableTimerW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx RtlLookupFunctionEntry GetCurrentThreadId

user32

GetWindow GetWindowRect CallNextHookEx SetWindowsHookExW EqualRect GetParent GetWindowThreadProcessId CharNextW PeekMessageW MsgWaitForMultipleObjectsEx IsWindow UnhookWindowsHookEx GetSystemMetrics MonitorFromWindow GetMonitorInfoW GetDesktopWindow

advapi32

ConvertSidToStringSidW FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW

shell32

ShellExecuteExW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoLockObjectExternal StringFromGUID2 CoCreateInstance CoGetApartmentType

oleaut32

UnRegisterTypeLi VarUI4FromStr LoadTypeLi SysFreeString RegisterTypeLi SysStringLen SysAllocString

api-ms-win-crt-string-l1-1-0

strcpy_s wcscpy_s wcscat_s wcsncmp wcsncpy_s

api-ms-win-crt-heap-l1-1-0

malloc calloc free realloc _recalloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _invalid_parameter_noinfo abort terminate _initterm _initterm_e _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _errno _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

rpcrt4

NdrCStdStubBuffer_Release CStdStubBuffer_Connect NdrDllCanUnloadNow CStdStubBuffer_IsIIDSupported IUnknown_QueryInterface_Proxy CStdStubBuffer_Disconnect NdrDllGetClassObject NdrDllRegisterProxy CStdStubBuffer_DebugServerRelease NdrOleAllocate CStdStubBuffer_QueryInterface CStdStubBuffer_CountRefs CStdStubBuffer_DebugServerQueryInterface IUnknown_Release_Proxy CStdStubBuffer_AddRef NdrOleFree NdrDllUnregisterProxy IUnknown_AddRef_Proxy CStdStubBuffer_Invoke

Name

.text

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

512B

Virtual Size

197B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

PresentationCore.dll

SHA256 0c4fe5ce21bfb23509f3193a32baa41418495d17566c8001a6089366f02c997f
MD5 54a9ea4491aeee137812644020edf11c
SHA1 0f37d038a55de37f21ac7766445db834a4c4be9d
SHA512 4f0fe93075a1624d8ce943587f9e9279dbbd0ef555e16a5f959dc4cfc186a4efcf0606d9b787b0d051d589e16265130fce7e3af48188a77ae1751473e555b39b
SSDEEP 98304:cydX7XPKirgh87l92RB9ZlssbECcj538M/YbaHvskr:cCj7H2T9Z+sACcj538M/5Hv1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

bb:29:75:fc:82:60:83:5d:57:2f:1e:52:0c:7e:8b:12:3e:f6:2c:2e:a8:11:4d:07:cf:9a:bc:13:f7:99:04:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationCore.ni.pdb /_/artifacts/obj/PresentationCore/x64/Release/net8.0/PresentationCore.pdb

PresentationFramework-SystemCore.dll

SHA256 bcf0a82ed887754a9f757370bf640b2958ba4224540cc212a7beaa6ec69a3ad2
MD5 e068ab2203ec174d6beff4d3aeaceff6
SHA1 7e97708718523b2763db3a8d565b80e1ea2fabcc
SHA512 12ebf2ced7088dee33f6186731c34b7100df7f112c9b248a043f1d56947ccab32e95fe39eb89d74d781c33219edf219766a1f17ddec754c460ea4aaa8be24160
SSDEEP 384:v9WOL+8J5jfHlx8uQ7YADw7j7UnPYT5kHRN7DUR9zOA:7yejfHlx8uQ7g7j7Ac9zl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

76:0a:bb:95:1c:f6:ca:0c:44:09:4f:ef:9a:62:6f:73:b7:98:6c:93:62:4d:df:5d:4c:57:7f:cb:5c:8b:20:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemCore.ni.pdb /_/artifacts/obj/PresentationFramework-SystemCore/x64/Release/net8.0/PresentationFramework-SystemCore.pdb

PresentationFramework-SystemData.dll

SHA256 44fea2ffd9539324fb152448aace4069a16c0659f88e880426cb0d294257c0b0
MD5 df27fdb4821fcec67409f8339897ffa0
SHA1 6fe1f3cec9118ef2f32d0c26848b56db2e9e1262
SHA512 da9a2e63c5d3c61c10f6bcec211d6c16e5d465e4acbdd77b84c935414cb880ded26b37e19d514b655db194781c020dfd05db5132a6a7ca6daf60c38a9f29dfa0
SSDEEP 384:W99We7U38mYOqmMUIKRxo5kasgThHDTb2HRN7hL7/sWAR9zgP4:I8AHcgtj/il4L9zh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6c:0e:2d:61:02:4b:7d:99:46:8b:07:1a:a6:d2:e6:82:6d:aa:3e:0d:d1:51:45:8e:de:7f:4c:49:37:f4:34:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemData.ni.pdb /_/artifacts/obj/PresentationFramework-SystemData/x64/Release/net8.0/PresentationFramework-SystemData.pdb

PresentationFramework-SystemDrawing.dll

SHA256 64f6604fe859028f49340916e233f13482d3db1bc00db40115e1e682962cdd21
MD5 dc9732ad3060a97783634d74f0346993
SHA1 4c4e4980d6c8a4ad85ebf65c59e862de3701b067
SHA512 35e2528b160f457d47d6a260d6961881ebc856c44954d2ccd48be6ddf163ac3f72d9d5927ef9df3d088398cbcb3953d4dd0de3ce850adafa476615e7c7514d18
SSDEEP 384:0adWvS3Xsvy48q9kCcr6K9mN9xAhPS5kHRN74NNPR9zulJW:QcXsaEHoPTM9zk4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c5:0a:ad:04:09:5e:f3:40:64:aa:41:5a:c3:1c:bc:12:d4:78:77:17:07:1c:1b:61:32:62:1a:8a:3c:89:01:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemDrawing.ni.pdb /_/artifacts/obj/PresentationFramework-SystemDrawing/x64/Release/net8.0/PresentationFramework-SystemDrawing.pdb

PresentationFramework-SystemXml.dll

SHA256 b11df1284dd69b60277ad7c649c0a1391853c30d1633eb7bc66815b5b57cb0cb
MD5 e5e01a112a8fe6926515e2dc9bcf8f76
SHA1 1d2080a026e708f0ac581547f79bc92ecc932bd4
SHA512 bdd4fa8c7c17d1353fde6bbcd8d9bf7e47e3b3736e324b122d3d044bd4de847768476684af0452999171d8ae3db753718a97eec0e17d580a2e6d3b3992740fd9
SSDEEP 384:7dW7u+AEtRPrLfOx+GtH6fDo6YL4CFkTb2HRN7SW1KcYR9zd3eC5I:yTXPrSKk6m41/ib1Kn9zkCy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ae:8c:19:1f:90:65:a8:0e:00:28:cf:f0:12:1d:1a:43:73:c3:c8:6f:96:f9:7e:df:3d:81:c5:c6:46:db:d9:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemXml.ni.pdb /_/artifacts/obj/PresentationFramework-SystemXml/x64/Release/net8.0/PresentationFramework-SystemXml.pdb

PresentationFramework-SystemXmlLinq.dll

SHA256 e9e261830c076dec42f01374921501ef3a83fcc79a474b4da6ad0249c9777be0
MD5 f46145c2eefaf9236ef55bb891f2549f
SHA1 aeb4f62f51aedc382b65919a433348032e230509
SHA512 73c2378a29f3e5ef2e058caa209f235b5077a1133cf16b5ff9f78c03b69455aed2b7cf58399517351dae4b8262abcf768617bdc1a04312be14cc7988e3d050d4
SSDEEP 384:ldWvyiIyBk0HulEDk8hPTb2HRN7fO+Hj+R9zjjeh:kuyBVRDk0/if5Hji9zG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

03:4f:d7:d8:9e:8c:68:a9:fd:c9:36:46:6b:88:52:58:78:66:07:14:bc:18:46:fa:b6:47:c7:ef:b3:cd:6c:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemXmlLinq.ni.pdb /_/artifacts/obj/PresentationFramework-SystemXmlLinq/x64/Release/net8.0/PresentationFramework-SystemXmlLinq.pdb

PresentationFramework.Aero.dll

SHA256 24b81eee5b918fd6b0fb2ad88dbf1cc694f908b28acabc47d5f01a634804f7ac
MD5 956da05fa28aec596b2e01d8215fdcc8
SHA1 d94cfcc50d162b7109d970431e43ce4962025999
SHA512 d74da48cfa9b6614c7d11c640506bbdf87721dee92073292b43537be030abfecc873fa67575ff297bf486129bcce8d15005ab79d92d2a204c5faa5b36eccd86d
SSDEEP 6144:Q98rwxxnoe9afYia26hCI9kiadVkVPtfOlu:Qhzn19uzaFhCI9kiMkP1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

91:82:eb:20:be:1b:30:d7:60:d1:b3:80:aa:87:c2:4c:5d:9b:59:f6:e7:e9:53:4b:38:44:fd:2c:dd:e2:de:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Aero.ni.pdb /_/artifacts/obj/PresentationFramework.Aero/x64/Release/net8.0/PresentationFramework.Aero.pdb

PresentationFramework.Aero2.dll

SHA256 e86faa34363508fc253f2a7e1261c4603cae57d5e91f663761a946efe11b538a
MD5 b4d3c2885f8a61e7dd73bef12f958c8a
SHA1 4290d770add71dba12bf8d1f05adb5dbc3e18111
SHA512 b31a16ca71d228caf7bc30137bfed0eb7ea54d50ee85cb96272e2582d034ff3dd10ee7da6a06699f9b604721038fe613f1445ce31dd595d2d8ec72f37186c00e
SSDEEP 6144:F5fP7nVEPFm3kW5kTgraU9kioEBDPVPtfUUr:FxP7net7kkTgraU9kiLDPPR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

26:0e:d1:7f:a1:21:53:e2:78:b7:a3:ac:5e:42:e1:5a:3b:ec:58:6c:11:91:49:56:f6:40:e4:38:f8:ac:cc:b8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Aero2.ni.pdb /_/artifacts/obj/PresentationFramework.Aero2/x64/Release/net8.0/PresentationFramework.Aero2.pdb

PresentationFramework.AeroLite.dll

SHA256 c646fe54a9e2ee2349bdc25a3d3be095728b1d6bfa9743dc80829115b8169535
MD5 8bc611a7167eee966c126c294bfc4a42
SHA1 387c1f1c4283fc895c7408308bfafe4c5104fb6d
SHA512 3e2f900667fcb01b7a8b78915a8dd1f9c835ef9c3e441b1e548b1257fc3e7e3f3c62f33e5c376e0e998424d79bd89e52b0937354e49d1777ef8ebaafc86021c8
SSDEEP 3072:UU05HdISwFhxxtKriVWOFm7Y9Eq/2StV3feKu:r0JdINHdEq/ttV3i
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9e:9e:c0:12:fe:bd:bb:16:27:12:0d:02:46:bb:99:e9:86:0b:84:7a:e6:f7:7e:32:f3:5a:50:74:58:24:57:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.AeroLite.ni.pdb /_/artifacts/obj/PresentationFramework.AeroLite/x64/Release/net8.0/PresentationFramework.AeroLite.pdb

PresentationFramework.Classic.dll

SHA256 f7dde4e6dc549e4cf4e884b2bc850ba9fac3c17971a729a249a3faaa6807fa31
MD5 d094624d02409e8e3cff95c8b8df8f27
SHA1 5b889a894c61d08778c24ae2a290f9cfc2c79819
SHA512 ec2ee1cc713eddd8db644ef2c26cbf7c3224ef48fc3d336963107a58407656e80ffc507f52f261e13b6cb2296c03ce903c35a453c76da171176bb62c8ac2b17d
SSDEEP 3072:dqHyX7U01FlqnpoHiD3r6E+w3os53UG4N14dBhcA:gSLU0PonpWTw4s53DI4n5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b0:17:1e:03:77:c4:d8:40:fa:4e:3e:68:7a:bd:a7:de:f1:d3:29:82:13:d7:ae:be:05:77:bc:3b:8e:2d:54:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Classic.ni.pdb /_/artifacts/obj/PresentationFramework.Classic/x64/Release/net8.0/PresentationFramework.Classic.pdb

PresentationFramework.Luna.dll

SHA256 04d6231f385ea8bd69dd0736e734c82130c812ba43a29ec887579737b220a8c2
MD5 c1806c9b2ff527c5e1e45d5f2e5ace7c
SHA1 66557c21c512826146a8141e6b76d2dd9f1cc37f
SHA512 0f5ddcba338ff9e9f71bcfdf7303e16658660070e22659091e8a2c48dcb6723432acfdc68eb3a01e9769952d223ccdcd45b44af7a04c5e88be4cc1f6ae570039
SSDEEP 6144:kCx84tTzfaM1AgqQB7miOKyg1puryFj7SPgqfd77U4PQpUejSa9NLOQx+d:kUT7aMaSzOKy2r7SPN0UKS6Owy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

20:3d:87:6b:98:02:24:3a:91:cc:b1:f4:2d:c9:00:b5:5a:51:f5:97:cd:70:26:6d:4f:bc:df:44:e3:2b:19:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Luna.ni.pdb /_/artifacts/obj/PresentationFramework.Luna/x64/Release/net8.0/PresentationFramework.Luna.pdb

PresentationFramework.Royale.dll

SHA256 6ca46b29be2be63f2601778c29f6a409c2e38b6f6ee5c861b4169ac4c5b4d3a9
MD5 9ff70e0d720298a54f8e6ef0d150bcc7
SHA1 99aead2cbcacc039e4979142ca94134702852b58
SHA512 5453b8048bc7150fb3e93d4121bcd810409a96c259c6557c5d10cfe9511b9b908a6d220046dd68a3dcf21febac7d8b481d12cdd188e270dced0529e9f410341e
SSDEEP 3072:ZB3+s+BvvfIPvH96Xcfb81vFdqjdaiFH7NgiAeYnFm4v7OdOcU1U76ccO:D1wInd6Xcfg9UjYrLv7fUOcZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d5:a6:ef:d3:46:b0:b3:48:a3:53:ab:8d:0f:8b:2a:b2:dc:1a:e2:70:9c:21:e9:0a:2b:ae:db:a9:d4:54:18:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Royale.ni.pdb /_/artifacts/obj/PresentationFramework.Royale/x64/Release/net8.0/PresentationFramework.Royale.pdb

PresentationFramework.dll

SHA256 ee16fa6feb06c981fcf32f21ca90bfd4d9f365d0e67ad9b3bbee6336cbf12e1c
MD5 ba6e68ef1f1265572d2a3fc021337f84
SHA1 ce444a26099be1e0ae0b711681a96a8f5e8b8d20
SHA512 e00af2bdb786909cbbd690cb8922e16065f21cf31a2b64c7046ac0097593d5344035b1cdb46e3cd58183851eb4fc08ac7b39dbd252b3f6f05dbe52ad8d927172
SSDEEP 196608:mCMisQjg71DbFZPrmlwBdlc27RkwsnNRAU/y:mCM4jEDbFZPrmlw/lc2tgeUK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

51:46:7a:10:16:6e:03:41:14:58:6c:2f:72:a0:e6:b0:1d:82:3c:a8:35:6d:fc:81:c5:f9:9b:23:6e:f0:27:85

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.ni.pdb /_/artifacts/obj/PresentationFramework/x64/Release/net8.0/PresentationFramework.pdb

PresentationNative_cor3.dll

IMPHASH a09c9abadde79aec9926dc99ee900a1a
SHA256 6d5910c0a0a4e3ee8863e4dadc73662d28ae9bfcda4a52960e26c1237386851a
MD5 274761a595f86982214221b5685b3218
SHA1 b908013028cb07fb799de2e48b6492404add6069
SHA512 3f9cf3d8e428619b798374f2e2a6ef9cf4213428277a74306978552772aae1a4a9ae7247c2dc893c0054d480dda871bbd74b0bc4afd65b0f584958d501ed8867
SSDEEP 24576:hS6Z8wCW4XArBKSyuvy/VKg0v7E7lITY7vYUNli1sR/HD0MEWhuoNajzuIWMMMQg:h18wCbArBK3H0v7wITcQUNlf/HDtuog1
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

d7:15:f6:32:3f:6f:c4:bf:ab:59:c5:d8:98:90:78:fd:8f:f4:e3:e3:6c:09:c2:d3:67:7a:8f:13:10:bd:1c:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

5648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\bin\PresentationNative\x64\Release\PresentationNative_cor3.pdb

kernel32

UnhandledExceptionFilter GetCurrentThread GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetUnhandledExceptionFilter TerminateThread GetProcAddress VerSetConditionMask FreeLibrary GetProcessHeap HeapAlloc HeapFree HeapReAlloc OutputDebugStringW DeleteCriticalSection DisableThreadLibraryCalls LoadLibraryW InitializeCriticalSection InitializeCriticalSectionEx GlobalDeleteAtom DebugBreak OutputDebugStringA IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter LeaveCriticalSection EnterCriticalSection InterlockedFlushSList LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RaiseException EncodePointer SetLastError GetLastError

ntdll

RtlLookupFunctionEntry DbgPrompt RtlPcToFileHeader RtlUnwindEx DbgPrintEx RtlCaptureContext DbgBreakPoint RtlVirtualUnwind NtQuerySystemInformation

api-ms-win-crt-runtime-l1-1-0

terminate abort _cexit _crt_atexit _execute_onexit_table _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-heap-l1-1-0

free calloc malloc

api-ms-win-crt-string-l1-1-0

strcpy_s iswpunct wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

user32

GetAncestor FindWindowExW SetWindowLongPtrW SetWindowLongW SetScrollPos SetFocus MapWindowPoints GetWindowTextLengthW GetWindowTextW GetWindowLongPtrW GetWindowLongW GetWindow GetKeyboardLayoutList GetParent GetMenuBarInfo EnableWindow

gdi32

GetTextExtentPoint32W

ole32

CoTaskMemFree CoCreateInstance

oleaut32

SysAllocString VariantInit VariantChangeType VariantClear

CreateDocContext CreateInstalledObjectsInfo CreateTextAnalysisSink CreateTextAnalysisSource DestroyDocContext DestroyInstalledObjectsInfo EnableWindowWrapper FindWindowExWrapper FsAddFigureObstacle FsClearUpdateInfoInPage FsClearUpdateInfoInSubpage FsClearUpdateInfoInSubtrack FsClearUpdateInfoInTableSrv FsCommitFilledRectangle FsCompareSubpages FsCompareSubtrack FsCompareTableSrv FsCreateDocContext FsCreateDummyFootnoteRejector FsCreatePageBottomless FsCreatePageFinite FsCreateSubpageBottomless FsCreateSubpageFinite FsDestroyDocContext FsDestroyFootnoteRejector FsDestroyPage FsDestroyPageBreakRecord FsDestroySubpage FsDestroySubpageBreakRecord FsDestroySubtrack FsDestroySubtrackBreakRecord FsDestroyTableSrv FsDestroyTableSrvBreakRecord FsDuplicateGeometry FsDuplicatePageBreakRecord FsDuplicateSubpageBreakRecord FsDuplicateSubtrackBreakRecord FsDuplicateTableSrvBreakRecord FsFAllFootnotesAllowed FsFFootnoteAllowed FsFormatSubtrackBottomless FsFormatSubtrackFinite FsFormatTableSrvBottomless FsFormatTableSrvFinite FsGetClientHandle FsGetColumnRectangle FsGetEmptySpaces FsGetFigureObstacleData FsGetFloaterFsimethods FsGetIntervals FsGetMaxNumberEmptySpaces FsGetMaxNumberIntervals FsGetNextTick FsGetNumberSubpageFootnotes FsGetNumberSubtrackFootnotes FsGetPageRectangle FsGetShiftOffset FsGetSubpageColumnBalancingInfo FsGetSubpageFootnoteInfo FsGetSubtrackColumnBalancingInfo FsGetSubtrackFootnoteInfo FsGetTableObjFsimethods FsGetTableSrvColumnBalancingInfo FsGetTableSrvFootnoteInfo FsGetTableSrvNumberFootnotes FsJustifySubpage FsQueryAttachedObjectList FsQueryCompositeColumnDetails FsQueryCompositeColumnFootnoteList FsQueryDcpLineVariantsFromCachedTextPara FsQueryEndnoteColumnDetails FsQueryFigureObjectDetails FsQueryFloaterDetails FsQueryFootnoteColumnDetails FsQueryFootnoteColumnTrackList FsQueryHeightDefinedColumnSpanAreaList FsQueryLineCompositeElementList FsQueryLineListComposite FsQueryLineListSingle FsQueryPageDetails FsQueryPageFootnoteColumnList FsQueryPageSectionList FsQuerySectionBasicColumnList FsQuerySectionCompositeColumnList FsQuerySectionDetails FsQuerySectionEndnoteColumnList FsQuerySegmentDefinedColumnSpanAreaList FsQuerySubpageBasicColumnList FsQuerySubpageDetails FsQuerySubpageHeightDefinedColumnSpanAreaList FsQuerySubpageSegmentDefinedColumnSpanAreaList FsQuerySubtrackDetails FsQuerySubtrackParaList FsQueryTableObjCellList FsQueryTableObjDetails FsQueryTableObjFigureCountWord FsQueryTableObjFigureListWord FsQueryTableObjRowDetails FsQueryTableObjRowList FsQueryTableObjTableProperDetails FsQueryTableSrvCellList FsQueryTableSrvRowDetails FsQueryTableSrvRowList FsQueryTableSrvTableDetails FsQueryTextDetails FsQueryTrackDetails FsQueryTrackParaList FsRegisterFloatObstacle FsReleaseGeometry FsResolveOverlap FsRestoreGeometry FsShiftSubtrackVertical FsSynchronizeBottomlessSubtrack FsTransferDisplayInfoSubpage FsTransferDisplayInfoSubtrack FsTransferDisplayInfoTableSrv FsTransformBbox FsTransformPoint FsTransformRectangle FsTransformVector FsUpdateBottomlessPage FsUpdateBottomlessSubpage FsUpdateBottomlessSubtrack FsUpdateBottomlessTableSrv FsUpdateFinitePage GetAncestorWrapper GetFloaterHandlerInfo GetKeyboardLayoutListWrapper GetMenuBarInfoWrapper GetNumberSubstitutionList GetParentWrapper GetScriptAnalysisList GetTableObjHandlerInfo GetTextExtentPoint32Wrapper GetWindowLongPtrWrapper GetWindowLongWrapper GetWindowTextLengthWrapper GetWindowTextWrapper GetWindowWrapper GlobalDeleteAtomWrapper IsPrintPackageTargetSupported IsStartXpsPrintJobSupported IsWindows10OrGreater IsWindows10RS1OrGreater IsWindows10RS2OrGreater IsWindows10RS3OrGreater IsWindows10RS4OrGreater IsWindows10RS5OrGreater IsWindows10TH1OrGreater IsWindows10TH2OrGreater IsWindows7OrGreater IsWindows7SP1OrGreater IsWindows8OrGreater IsWindows8Point1OrGreater IsWindowsServer IsWindowsVistaOrGreater IsWindowsVistaSP1OrGreater IsWindowsVistaSP2OrGreater IsWindowsXPOrGreater IsWindowsXPSP1OrGreater IsWindowsXPSP2OrGreater IsWindowsXPSP3OrGreater LateBoundStartXpsPrintJob LoAcquireBreakRecord LoAcquirePenaltyModule LoCloneBreakRecord LoCreateBreaks LoCreateContext LoCreateLine LoCreateParaBreakingSession LoDestroyContext LoDisplayLine LoDisposeBreakRecord LoDisposeLine LoDisposeParaBreakingSession LoDisposePenaltyModule LoEnumLine LoGetEscString LoGetPenaltyModuleInternalHandle LoQueryLineCpPpoint LoQueryLinePointPcp LoRelievePenaltyResource LoSetBreaking LoSetDoc LoSetTabs LocbkGetObjectHandlerInfo MILGetClassificationTables MapWindowPointsWrapper NlCreateHyphenator NlDestroyHyphenator NlGetClassObject NlHyphenate NlLoad NlUnload PrintToPackageTarget SetFocusWrapper SetScrollPosWrapper SetWindowLongPtrWrapper SetWindowLongWrapper

Name

.text

Size

947KB

Virtual Size

946KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

195KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

PresentationUI.dll

SHA256 ee9e588dd3a3902f2f864c8dd7cb5fcab7c9fe3513af2b16f3a04c0d32eb306c
MD5 a8c64156aae90700e637b4d37e4744f8
SHA1 97c6aff2c92268f6dfe55a03e4c3867ef2506e23
SHA512 fb1c22b8307d58fe261ffa7eb1573e0631e2d3ae8e5e92220ff66712548710435e175730623e8e2baf39010a28dd9d80b16d54b867928fdd94d37244d0b83143
SSDEEP 12288:3HDpeJwwGlyTcnsQfoVGd3HyG+lfpaZxu7YJszbxho/tn7JAqkFU1j:3leFGlyXQfoVGd3HglxOiyothoVKjFUJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

69:6d:42:33:25:52:88:b2:7e:5d:fc:a6:5d:22:45:4b:95:18:8e:11:0c:cf:52:2f:38:ef:e0:ab:c1:81:67:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationUI.ni.pdb /_/artifacts/obj/PresentationUI/x64/Release/net8.0/PresentationUI.pdb

ReachFramework.dll

SHA256 fcba0de6e41d7185ccae2cfcfaccd958d292c2d46bfa4e3a6a890a1125927786
MD5 45141c686f0155c1639abb4b56475d74
SHA1 bda83a234e5f55ba752a3e176d49895eef259450
SHA512 1c0931eb684e823008f6917b90e6c334d2f364c5b4f537191d5577e08b7aec3bf95b7adc8ef0a731722afc7cb09fed8f03fe492e087071677baa2e9dad796959
SSDEEP 24576:1lD8ahVapeI9cA8sLkDo5fNxlcVTIDDCPBNNfMqRyc2F/:1lJhVe9c3sgDoZNxCTIDOvNf2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

11:b8:54:8f:74:e5:c6:2e:6f:46:b0:5d:8b:a3:ef:36:4d:50:24:dc:60:ac:40:e2:00:29:df:0b:a7:55:5c:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ReachFramework.ni.pdb /_/artifacts/obj/ReachFramework/x64/Release/net8.0/ReachFramework.pdb

System.AppContext.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9330d86e385ba4b57df1f7fc632a54c995ba0a5ba5d1aacef8636170175afc44
MD5 fa6e0a7fd3678a68bf33eb42707f22e0
SHA1 8a0341be2b97dfb25633d8f966b29c5f072f25dc
SHA512 71d777d2343f9c2d1364cc4542e5346018f01df9a1558c198ac8a9b0d448bdc731bbe4abe9eafdf5a252e04f47614adb61d0cd2928d878fbc8069e8d1886f706
SSDEEP 192:xYjLxA5LWY7WlsuWXebPpUNTQHnhWgN7acWP6d9ZnAOVX01k9z3A+vEDPL:xkFuWY7WWTb2HRN72631AqR9zdvwj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

23:47:32:40:39:c3:e8:17:e0:b1:58:c2:32:f6:3c:c4:5f:69:26:8d:71:02:86:63:2c:22:b9:11:9d:05:8c:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.AppContext/Release/net8.0-windows/System.AppContext.pdb

System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 690ef287a0331844cc83fad41417992b5bf65590cdf803377802dd94a05cc0df
MD5 0ee3421b5e820a5eb84aa26fc69409d1
SHA1 7d7af7d3d87b33e3f65a3cdfa84bb073e0b91eb1
SHA512 27442ddc8eb876f76aeaf4d80f479d05dab6817657f50699527b163e855561812f48f4a11d5fc84c148d5f928cfc91476686eeb479580e2fe1f71a85980bffb9
SSDEEP 192:z8lEywWN2WSuWXebPpUNTQHnhWgN7agW+5E17weX01k9z3AIiajs:zCqWN2WSTb2HRN7Va1nR9zZiag
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6d:88:14:f5:c9:70:88:f1:5a:a3:e8:d9:6c:e4:1c:3f:45:5e:17:d8:94:13:b4:2b:6f:74:46:3f:65:a7:09:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Buffers/Release/net8.0-windows/System.Buffers.pdb

System.CodeDom.dll

SHA256 bef3d38262ac88973c75991d5bc0780451218411605dd4105005fdb8457de47e
MD5 423510911e34708b110a174a81973979
SHA1 e356c7bc609d4f88f1eecbadf0f4e361dba7f990
SHA512 cde9c8503e87e3886e3825c017997f4e15159bb45701471d406cf5dca3d7581ab215374e36d421c5275835be104decb419f1f706274932863c32080d34332ea1
SSDEEP 12288:NCh9uyP6PdVVoOOT8K+1xHVCwX3XozH+OS7W:95nXQH+OSa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

57:9f:26:00:d0:6e:26:99:59:06:4e:a5:b0:ef:a7:c2:b7:a2:ee:a4:b8:0e:71:a1:79:0e:a6:34:e3:65:5f:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.CodeDom.ni.pdb /_/artifacts/obj/System.CodeDom/Release/net8.0/System.CodeDom.pdb

System.Collections.Concurrent.dll

SHA256 483130bfd1e57a0cbfd8a4f3c6e2353ac3f246276f9476c83cca1cadbc47ef47
MD5 38d21e067d7673194a84cced59066ac8
SHA1 e64362176f714b23603f3a67f1e741f12e35a832
SHA512 3fa6f78ff0cb527a8e82261549f24a8609d005821ac5c5e7257670dffd55472a134af3ef78d73779758303ae5a90728181cd4caebc871c5cfa4c309141201baf
SSDEEP 6144:2iRqH6Vc0J5xC4esICA2t6FeehhyO2lbkMzl:2is6Vc0J5xlepxhD2lbb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6d:d2:65:3d:71:56:3b:9f:62:68:c7:c6:2a:2e:f1:9a:27:df:bd:28:a8:47:4a:2d:55:d2:f1:94:a6:dc:78:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.Concurrent.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.Concurrent\Release\net8.0\System.Collections.Concurrent.pdb

System.Collections.Immutable.dll

SHA256 91f93971c94fd0e3765f2e5faa0b358ea15de21171d195dee7ca6e5905d347ba
MD5 df8236641aca7412f02f7625a939d61d
SHA1 93fb7b8d1c48065629d8fcf2236124dcabe361e8
SHA512 afe817f7f20f85efd98eb46dfc0a7d00c1e514a0e8de47aa1c3a501972439405f157e1e3df2f3e61977d069a93df8ee3092e5ae62015b00dfd04a609f29e9e7e
SSDEEP 12288:YoYT9CIM2PC7hLp2qkJp73BOIl7fcPPWk50T9YLVgy8KtVvfJltyDM3:E9CEPC7hLpGOor8V8KnRlty43
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

0f:15:d0:17:ea:86:31:44:df:23:f7:c3:9a:8f:d0:cf:99:be:df:35:aa:2f:0f:2e:5b:27:16:52:9d:5c:0f:de

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.Immutable.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.Immutable\Release\net8.0\System.Collections.Immutable.pdb

System.Collections.NonGeneric.dll

SHA256 5dd2ce348f35b191de8216880c1868cc135b4752d1e4154e55781f0c71150991
MD5 fd2c4f590b3ac6db7fbef0d98884bd0c
SHA1 de4b191f78b2dc8108c3295d90795c643fbc03f7
SHA512 ba9aa00e9339ad958f1f4bcb59624204f7b8c37822aa96afb99341c23ec291be4dbae47825070086acd0221c45a3fabbdfd3728af9a869d82ec9972214fea33a
SSDEEP 1536:MfktJ1UcLrxBLPwLGVhgHXVrMZ1EkDWtBrixAzZW:Mfk9vzw3GZxDBAU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d2:cd:c7:86:57:99:7f:02:7b:8e:53:46:1c:a0:b5:ba:65:f3:d2:a5:53:d1:cf:30:e5:1d:df:9b:3d:23:56:b2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.NonGeneric.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.NonGeneric\Release\net8.0\System.Collections.NonGeneric.pdb

System.Collections.Specialized.dll

SHA256 0cbabb81eae22f4c07c6c846054d207ae3f25da15649eb7fa29e4e2cecd24db4
MD5 cc26e9e30ffab763a1e54c0ef3713382
SHA1 c3be6646b7a4576ebd7729dbf4dccbd1fc159d51
SHA512 c8e57fb70cfa7667f9a5484c99eedd0bf34004ee26e9642e99a6b90624caa804af571d8aaafa7e9b121550af58205f8ed197b4ddb928210d394ff0b4c1897149
SSDEEP 1536:zytht+6ABaq3+e7H0V620VCTBUsqEfO8ocgL50+d0Tfri7E9zTK:zyQ6AsuH0EHafO8ocgLa+OD+E9vK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:a7:2c:a4:39:23:d2:90:c2:13:d6:cf:15:cf:b5:46:11:54:19:b9:a5:0b:1e:05:4b:f6:54:d7:98:79:84:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.Specialized.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.Specialized\Release\net8.0\System.Collections.Specialized.pdb

System.Collections.dll

SHA256 9193aaef3ea8f19408f88c25fcaf5880e7836d1c35028d7e4077f6090b083541
MD5 92063926c04f2e4bf5b5fde16542831d
SHA1 e7be34eaff2d3d8796911d21f1fdbb93bf231dec
SHA512 e855ee37980d1da2d143ee39133b05fff81937e529cffe74433e73088549daabd3abadbf05f3765bf3ffffd50313f0ed966efec0eb244d7363241affd73cc29f
SSDEEP 6144:rTiKoXLjWvcp1Y5eRWAbQW0ryS1woJl3YNM:fTCjWEzceMiD0rGMVYNM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b6:5c:6c:c6:8f:28:c8:6e:1e:a6:e5:69:8c:cc:14:4c:1c:03:20:5f:fa:b2:1a:b4:40:63:b6:fd:2f:ff:8a:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections\Release\net8.0\System.Collections.pdb

System.ComponentModel.Annotations.dll

SHA256 87be4f5269bc8f333b05b6dbdb22aa63760fd99ec3bff1a7659c792a0870ce61
MD5 a941186e3fce8b39cfdcd6436268d8ca
SHA1 9b605bc37cfed30957afb9de865d063972ccae47
SHA512 7351d5a898905808d3145b39a7bb7e55572fa998f6c2b18d8d2cbc33c011d324d8996a1341a16db777d876e39acd69ffd28c7662cfb54a36a25dcef7b6f94034
SSDEEP 3072:f7S/bT6pVfkVy28FjFHzdCLoWOizZspHmMWParD5/oE5bF6dN/AZUJ5Q:eH6IVDCj29OpHzWParw/AGDQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f8:e4:a4:6b:b7:82:05:c2:fe:50:8e:fe:a0:4e:18:d3:8e:46:3f:32:b0:f6:8b:c0:02:28:7f:d1:3b:be:c3:5f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.Annotations.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Annotations\Release\net8.0\System.ComponentModel.Annotations.pdb

System.ComponentModel.DataAnnotations.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 55fc20b450b928f8dad5db2370cba5ed2f95c103b78879a9d100af3375948edf
MD5 e20acbf0eff2325cb84eca7cdd6edb87
SHA1 904dfc9c03c2266b681abe55e6d3dcd1502f9a99
SHA512 ee71ad8eebcd46ed9baeac99e7bf686fb1feda7d4d109d0dd1533e2570ce5cc7c3551b21543e40078e19eaa0182f919b3c3d6bcc428c5d3ae6ac0baad7978cb1
SSDEEP 384:OpmblJeIeGXxSolw5WMXW2BTb2HRN7WgU0hR9zrg:OLxhDB/iWgD9z8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:e1:c1:60:86:64:7b:b2:72:27:2d:66:ce:ed:a5:2f:e2:86:c7:28:53:7f:6a:d5:60:e0:ca:28:9f:de:0e:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ComponentModel.DataAnnotations/Release/net8.0-windows/System.ComponentModel.DataAnnotations.pdb

System.ComponentModel.EventBasedAsync.dll

SHA256 4c97d7bc0742faaa52ba86018b040aac44ddfc88a5835f9e6a659e03b4558999
MD5 333639248121fb67d18323613a8203ea
SHA1 0cee5f7d46596239b833b3b30dccde27b0136959
SHA512 714fcb7299abcb26100b5f4103834c11c58f535ee9853fca2bcb22f43a3d1e7608d6ccae2dcc93d1687a4f1c8b521afe683d537f70f858681e62fff2d79c4acb
SSDEEP 384:kWMwW9TY/udWBj/D3OLIiQfpK1sL9wkS89KJMfCvDXxO88+aEZ4jIwVKBvHN4LiQ:ambUQk6BdY88IVMH76/ikL9zRiJu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2f:b3:a3:83:11:5e:c9:cf:81:1f:56:bf:9d:22:bb:13:c5:07:b5:29:68:a4:f3:9c:ab:a9:ce:61:04:f4:32:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.EventBasedAsync.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.EventBasedAsync\Release\net8.0\System.ComponentModel.EventBasedAsync.pdb

System.ComponentModel.Primitives.dll

SHA256 133ec34432ab8fa4f63ade636193864b6a62a089a0c98d746f5532c8a52f437b
MD5 1c59c00ab0850af4b4d2bafd6be47db3
SHA1 4c6185b2f42987e25a5fdf2aa30cf4150de25d5b
SHA512 8425c02c4afb274e862e4ed5dd1c766ebfa1bcf5bf59018d86238014a52603331a8b7c1e233f5a1f22171e90132ddd585db0d2561ff2cd287d703397afdff4b1
SSDEEP 1536:464czT4uhNTqp6e/kqbvD2ols4/b3tKigz+:4a4MT86jqLD2om4/wq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

32:a4:82:9f:42:bf:94:ac:13:4f:ff:13:8f:ff:7c:89:20:c0:d7:ba:e3:96:7d:53:e6:8b:b0:cd:ed:ee:4b:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Primitives\Release\net8.0\System.ComponentModel.Primitives.pdb

System.ComponentModel.TypeConverter.dll

SHA256 88129c110d748f7c8ef8a923f68cd26d39e0505b49bf5cc10cbd23b92f1a00a3
MD5 f6f78df8a3ef64639ac0cb7de24ed66b
SHA1 384422c0ceb6bb6870c4f7d9074e9c78d33e4c0c
SHA512 ed63f75e3477196b5308c42f259c0294a29ef5edf6eb0df4f8268be3f0495b9cfd8ca3467bc1574db142571c368940468bb84d14c26aaccacd6eee66ddd98403
SSDEEP 12288:t4norLVEFhHbZCalEAlo5hvup3WdofW6vKWMpBiXxD4PzF1zIeHeVAVS1:yorCFhHbEuEAlo5hvuyl6vpMpBimP5W7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4f:73:74:c4:df:f8:c6:fa:fa:2e:2e:eb:a8:18:8c:7f:fa:cb:18:98:c5:eb:c5:82:b3:9f:5f:26:2d:5b:d4:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.TypeConverter.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.TypeConverter\Release\net8.0\System.ComponentModel.TypeConverter.pdb

System.ComponentModel.dll

SHA256 f3cf7c20f19a55a2f960c6a8a9e3e9cdb9c9bf100f2322b3883ed306b18c8f94
MD5 b5e52d6555a3011264bf800e3870ffe2
SHA1 c6e8107dd1716d1724a2dfd13c1d6ae250198e8a
SHA512 14e33755ce03871e6ab9ccf4b80a17b483786d67cbaeaa6217a07a1c792f45c46dbc5a24b3501ab14b77bfa5bec8b96c466cc803f06dcb4f7b78315bce23a4be
SSDEEP 384:cWc1WqUqPK+q0QM2Tb2HRN7lt5KlO8R9ztgbaWD:Smd/in6OQ9zm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d5:d8:ab:94:ae:e7:17:7a:61:68:fe:c0:4c:43:3b:3d:53:b9:3d:50:8b:91:4e:11:3b:c8:f9:e6:d0:dc:97:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel\Release\net8.0\System.ComponentModel.pdb

System.Configuration.ConfigurationManager.dll

SHA256 3207736195a0fa7bf04c183fb90e3b12f5601fe3ba1a8304e611b43b6650ef75
MD5 9a7555bbdae64a0a489ccc9a11749d50
SHA1 e0ec621aeac19b01ca58d9952178dcf90c0daf83
SHA512 c2e2da893d93e639a488afa3ab559c557f6fde245f64cc2f56a31e6f5c9cbd614411b85bc9290fb177df2e142eae5dc50c37c741d5a57dcfa7b032f0d18543da
SSDEEP 12288:E8r0pc/CfOsdV0Z8oApKK1sPTdokGH5OTNWLOdN2F4yOh4MyS/5vmXHAB/GEjxwI:2G/Ho4y4ySgy/GiPaIP16u9R396u
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c0:92:83:7c:15:0d:94:74:dc:97:bf:fc:65:37:47:8f:82:f2:50:15:40:44:0f:a0:49:f1:dd:5c:06:80:b3:df

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Configuration.ConfigurationManager.ni.pdb /_/artifacts/obj/System.Configuration.ConfigurationManager/Release/net8.0/System.Configuration.ConfigurationManager.pdb

System.Configuration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 000f40712b72cda4d840d55de95e9110ef32cf109bae4cd17a029feafa45788a
MD5 5e074252ef7238a66234356f12c74471
SHA1 3d21d7d84ca6cd2ef311d2aa2e2c5a8b10e00992
SHA512 ed5cb57742098fef5d1efc59623ee3ed9aad5122fec9d3d186b385d8a33a14f3508ebddc2347e7ca43811eb8fee5fcd62ad6b8f8e297f9359d7a928c4c971f78
SSDEEP 384:pMXTSv/fUNRvGZYdf3zyP/web+3HNWTNWvTb2HRN79NVUR9zDrb:oQbh6/i9w9zHb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

dd:89:58:70:4e:e4:69:e3:ff:77:d5:70:69:e0:5d:64:6b:6a:f6:30:52:7c:78:d8:6c:03:91:b1:fa:a0:2d:b9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Configuration/Release/net8.0-windows/System.Configuration.pdb

System.Console.dll

SHA256 a09981216f1eb9796ac5cf9fe883b9eefca8a4d5d5b390f704deb605c25e8c8c
MD5 ec7473793dec6b5d4a5157673ed39526
SHA1 71533195d4344fd3f123680d356513cf7fef8693
SHA512 cf0df6c844d76d449caa8a4463c87d72e531fd99dfca916a7435f391dcb53d623045e2b3c9f3f0f98539385123845758e27673eed88677983ffe2c4e57e7461d
SSDEEP 3072:CoeeEmXxzdfV6Y11+RmeV9viGxARZvY52ZwUIR1BB12z:se1XbfV6fB9Nx2ZvyeViBa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

92:01:ce:b0:ef:70:3a:36:45:2c:35:99:51:4e:b7:07:7d:67:6a:cf:17:9c:a6:b0:ef:6e:26:e7:7c:54:ac:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Console.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Console\Release\net8.0-windows\System.Console.pdb

System.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8a30961efd9f7cf8f848d215d161f4367c2331187350ae430d0c7d9160105bcd
MD5 572adf4a7d506a009e064c9244b7deb8
SHA1 7ace65e4e6953018a164d0b04ea7d8639126bb18
SHA512 f5f329c5cf905a3c4b66f17295ad562ce07aecb82192131c5492f761418276249be5f4344de22a5956836ce32e0afae7f1c4ca590bcc4809b6b307c3579db5ac
SSDEEP 384:OoS9H4Ay0l9Jr3OzFPhoact/iKMePLexkrW1rU1ZXtAdE3W+2W4c5kHRN79kNNPI:O/9H4Ay0l9Jr34FPhoact/iKMePLAxim
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

11:58:27:66:a6:0d:98:16:3a:63:07:06:15:3e:96:c9:4a:7c:f3:d0:f9:32:66:fb:c9:0c:a8:43:f9:fa:9f:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

18630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Core/Release/net8.0-windows/System.Core.pdb

System.Data.Common.dll

SHA256 f589a8a65f63d9a1b724d02a0f6f034da73bedf3299254dcccf8933df0fb5ead
MD5 eb7ddce89af66fa5f63fe4f5f047f259
SHA1 767cf0e5144f899cecf444e63259d784be3fa9db
SHA512 24ea83a5b10cdd2da0e1cfee4d20f5a83756cb72d190485b2bd865d08207ce001ae533150d4523336a9ec080d8cbe4cea3e28bb639d4853f6526a8607e119e8f
SSDEEP 49152:HI1lMhAeW3V/XeH/8rl4GrCBStAZTxyiNe7bfslaf/p80QqcsG5hBh+EX1bCM:o1Oh3fE4g7bfslaf/p80QqcsXEp5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

57:a8:3f:cc:ce:13:2a:11:31:24:05:89:d4:18:09:fe:5f:d7:8d:91:ad:f9:0e:be:d6:cf:08:57:1b:1c:e9:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Data.Common.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Data.Common\Release\net8.0\System.Data.Common.pdb

System.Data.DataSetExtensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aab6cdb61e85c65fcb0c6e79892cc4ed15224fbd3c2e122c98261d505d4960bc
MD5 96214da14b99f0cd913fe09d13d2df39
SHA1 ea2753f9d9d746101bbb90a9d617b72146a2d692
SHA512 c31d24ac21d6d8ff937467263bfbfc583e8d1d27ec71d865ad9cbc9e8c5cb26dcee841a4e61cb07a9e9ab4acc255ffb89606b1d097f9f8f7372754ebc369cea2
SSDEEP 192:lmoBF/PHVWE7WycuWXebPpUNTQHnhWgN7agWd2ngqtVVwX01k9z3A41p4Mp:8ov1WE7WycTb2HRN7WkVwR9zP1/p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

87:be:4e:a0:68:5a:f6:d9:7f:a5:05:a4:58:e9:56:d0:4a:c5:5d:41:8d:e5:17:07:ea:21:fc:34:1d:67:8a:00

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.DataSetExtensions/Release/net8.0-windows/System.Data.DataSetExtensions.pdb

System.Data.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 80d6011ab896e48452d0842d49072a23ebb2a50d57a7a99d1e6cf7f1684afe97
MD5 208884e480efdc6c4256e9c0c98bd55b
SHA1 1c04853a8c5acb37c608ec1824f62550dee26839
SHA512 35ec99ede81e76b89bc2b16f319a0a305eaf4b7c539fb36d900e4b82cdd0bf48abe003bb23c08e0d95148509f3a84b72939a79873ded90d47bc2a08cf8bd162b
SSDEEP 384:XMAAaFiTCmM82SuxDJQ/W+FWkTb2HRN7V5DNR9zqt9+aHi:cpaFiTCm0DJQ59/iL9zjaC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f1:ae:9e:dd:99:c7:f3:ec:aa:4d:10:5f:03:c0:1c:81:c3:9f:a6:17:68:af:fd:09:cc:11:4c:18:91:60:c8:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20466

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data/Release/net8.0-windows/System.Data.pdb

System.Design.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79c08ec9dd36d31da5aa6f038cce721827541e4ae568124ca429a3fee5edf1a4
MD5 048acacc7ab553c8b736c5cfb951fabc
SHA1 997d0ddc1b4a42c84393d55b3e6dcb7ee74cf1b0
SHA512 be37a0d345d9b9e8ec17afa45e625cac1d19fbe4f1531246211ced6c4f635e76fee3616c36a1fd5d6c9f5477be2ac6792e325b520cca7268143c5b0eebe2cbdc
SSDEEP 384:ZkuzLRrw/cSmWtGA+bE+WOHWT5kHRN72HR9z3oq:ZkunRrwPtGA+QuF2x9zYq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ef:6e:75:66:e5:db:84:98:e2:4e:b1:49:f4:0e:de:35:5f:33:90:96:0a:a6:25:f2:28:ee:b8:9c:c8:4c:8e:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

17334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Design.Facade/Release/net8.0/System.Design.pdb

System.Diagnostics.Contracts.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7386471664aae8a26dd0179a259da3aae08d32ec1d2121af81801293ad44f570
MD5 ea3afb3384ba1588f760a39fa36ab693
SHA1 f35708ee0f2adff401fcb468af7a4d15b3563376
SHA512 929c0b8411175de0a13985ac8a8ec4b874ef454801da7441a8817e65b7bdd4267f96491f386c66dca29190a4282165d50ce2a3593c0e5dea784f83327b994340
SSDEEP 192:AaLRZtxihW72WR3WT56Os1HnhWgN7agWfSf4Kp13s5yX01k9z3Agrf8/6:AatRiW72W05kHRN7vA2cYR9zPrf8S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

49:de:09:5e:b1:5b:9d:00:a2:75:17:45:3b:09:08:cc:2e:21:03:93:7d:ff:f6:1f:43:8a:5c:e1:cd:5d:36:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Contracts\Release\net8.0\System.Diagnostics.Contracts.pdb

System.Diagnostics.Debug.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8c424b3ade60f123801cfb80f0682775b71ad422f84cb5d74fc48947364574c5
MD5 7d8e0c638821d9a7d739e36b9b239682
SHA1 b478744d6df1a0b6fc1308b0ba087ea649779916
SHA512 460bd4bbbb35037eb318e326fbfcd537737c3c878efb6bafb8a48770c5bafb2cad7d13dee43d370d1d5cf2418157474c9c06f12e84292c34adab8648244223e8
SSDEEP 384:f+JFWPmWiTb2HRN7unODMyDR9zGVcEkS2:f+JC6/iuq9zlVS2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

23:88:36:a5:4b:b6:5a:b9:cb:d8:ec:8f:15:55:63:5b:de:7f:68:95:62:dd:d5:94:83:3c:3b:14:06:1b:e9:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.Debug/Release/net8.0-windows/System.Diagnostics.Debug.pdb

System.Diagnostics.DiagnosticSource.dll

SHA256 f4879b60d9536b1b10c4b56599ad593df2347b9f0c342872538931f229957ef6
MD5 2b7a8d92b9eff68d92222e84e931e658
SHA1 e01cb48bf56332080d116b5cd71ccd2b10e04a05
SHA512 abfc28555a1acb30c251c18293ecfbbce193205a075ae726877cc8538a334ba8d773f1dc568230b1b3e0e98505007511ddcf33a1bf1ca878f98affc8ba84c896
SSDEEP 6144:iOTx8fqT+GHIwS494j/yZ8+Kaw//tvjE/Z981bQ6mpDLIsK3h:DTkC+GHnS4m/M8+Spjm81bQ6mhIsKR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

01:40:d0:8b:b2:87:85:d1:f5:6b:66:68:bc:82:5f:05:65:9b:42:36:d2:77:ad:22:8d:a6:84:c0:5c:91:cd:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.DiagnosticSource.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.DiagnosticSource\Release\net8.0\System.Diagnostics.DiagnosticSource.pdb

System.Diagnostics.EventLog.Messages.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 68f73ab17fb7f4aff3d35ef6db0e9d5b0fa0151111cb3d03992e23bc29d6c40a
MD5 7a44c33341844dbe9c6fa526af88e80a
SHA1 0acabd100f61a2f8b3c5e68a270599ad54eb8a39
SHA512 b81d63b345c193c6def17372311447d305ae167b2c4d1c2fdb0344d1e1ef5ff4f9d52599ffd862b2480825b308178737df7e5e48c31e712339f009e92b6eaf57
SSDEEP 192:8qirVlWQX3WT56Os1HnhWgN7acWf53p13s5yX01k9z3Agrf8mNVf0nj:8BriQ+5kHRN76HcYR9zPrf8mrf0nj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4a:1d:03:b2:ff:3e:20:38:df:93:54:25:9a:fb:cc:d8:b8:af:08:27:ac:12:d4:1a:15:54:8f:ca:d9:b6:11:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.EventLog.Messages/Release/netstandard2.0/System.Diagnostics.EventLog.Messages.pdb

System.Diagnostics.EventLog.dll

SHA256 ffd420fe1cb1501afbd796aa00119001be0002e51a9a540e0eb2ed8725fc0fbd
MD5 bae88cdf4e8b622f1417f13f5e4e7164
SHA1 de695858b180a8df6fa60f5422a8630eccfc150d
SHA512 ba4c637bfec28003687af307e9e4bc3be06de4d6c8bc10d87cfb38f9c31557ebde27dc8df782922edf01f76afa88009913e00afa2df64fa0b0a8473920d140e2
SSDEEP 6144:N4ADjMRbbRUjJSsj8xlOG5iGD7x/e96YC9FRWkaGidWukVTYt:N4US4VQ4atYwFaWuWS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2d:e1:9e:47:6f:f3:6b:e1:fd:13:4c:25:ba:04:4b:5e:fe:44:90:7d:ba:59:b6:70:51:b2:bd:ea:bb:0c:d4:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.EventLog.ni.pdb /_/artifacts/obj/System.Diagnostics.EventLog/Release/net8.0-windows/System.Diagnostics.EventLog.pdb

System.Diagnostics.FileVersionInfo.dll

SHA256 92ae8401342fd8484e749c65a7726a0f5bff69346ad4e96026bfa063ff567b8b
MD5 1daf75cc369569182bbdb664eb8cb4c7
SHA1 ec0ff43694f0027a469d31221b591bff2ef29d69
SHA512 9d0ee9b59354f721136a1631e46d395b763f755b212e44daea5c62a91b4c5edfd218587c8aa56db27f7efc7b9678c59ea822964f279a7837aa5e12f46be4e79b
SSDEEP 768:QmSWwsP/QEBuk3bqUghjhi6KPivxbzY17tM7Ao50t9PA9zC:QVWwsP/QEBuk3bqUghjA6KPipb017tMy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

22:1f:13:16:5b:e8:40:b7:d5:f9:26:bd:7a:72:2c:f5:55:e9:15:7b:aa:b6:b3:93:86:8c:53:47:c8:8f:77:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.FileVersionInfo.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.FileVersionInfo\Release\net8.0-windows\System.Diagnostics.FileVersionInfo.pdb

System.Diagnostics.PerformanceCounter.dll

SHA256 a471289fa1f588cb758b6f4ea5b21e7067a21554819d1632acb19d0c183bdf78
MD5 9e7cd586b5b1a8666bb4fc9776a6ce3e
SHA1 846a5f7e616042e3ab3c85cbe59e7da2b2b501c3
SHA512 9d654ea414e73fe1ffe6ef92f2ec404359400b510a907a5c4473e8d6bc34074e9438ee42611484f483100d7923402748d220fec108a86f6724f28960c324c805
SSDEEP 3072:XnmrHruDKok5rX7seuQHpuNQXtdgma7SbkBr0QUM5Qxz3hFOJpoe3kaUbDeRMq7Z:UHr+KJ5r7sEw0gmeJhknb6b7CBjJO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5c:d5:3f:b1:2e:0b:4b:5e:fe:48:0b:fc:10:c7:34:df:b1:a2:9d:de:fd:6a:59:83:41:0d:d2:5e:dc:51:64:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.PerformanceCounter.ni.pdb /_/artifacts/obj/System.Diagnostics.PerformanceCounter/Release/net8.0-windows/System.Diagnostics.PerformanceCounter.pdb

System.Diagnostics.Process.dll

SHA256 d504f7d521979a3b0385f57dd4c503c70dd492c2799f017dd42afbf3626884ea
MD5 504b0d1e837fc3a528131cd8a5c22b9e
SHA1 09e38d047f61ce3ecc04cdaa69c4804ad4d60d57
SHA512 dff2e5cb94a4926c12e47118476f8d8d1a2c78c23ddca3733a8fa829457a90d510d56fb3c7e22aeb155f07a7dd7a922a510b327a1e1f8594cf0057f6f1187837
SSDEEP 6144:Or8etGxezZeEyVKzexZeyIdyi3E9jb3b41PlmFHBZTdvQjJ7X:OQetGxKywy7e1dNakF7X
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e2:7f:c6:5d:41:63:c5:28:52:6b:17:fd:28:6c:d5:cd:f4:0b:73:3b:ef:7f:44:50:67:f1:19:8e:be:8d:5a:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.Process.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Process\Release\net8.0-windows\System.Diagnostics.Process.pdb

System.Diagnostics.StackTrace.dll

SHA256 318eb3af0fda576d8094404185690b9570d576ea56e85c47251769c09de8035c
MD5 70c0d0120a96a30c980414f44bfe9d5e
SHA1 ad158543ae92c9b47e6290bab86b4cb5511b7029
SHA512 42e9e048668b491a7fce4d5da6a2690f386c9d4d847b7ce0b2c70f743f615dc9917eafa5cc3d94f4e5803abe65d892c4f89d88ce8531b7d3c2b8c536d7d224da
SSDEEP 768:VDASgPYUGf+DUn+zff8vkeY4mPFnMZDn9zT8WXi:VDgPYUGGDUn+wcj4mJMZD9zTZXi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d3:c5:3f:e4:e1:fa:17:49:04:7b:72:ff:42:48:78:c1:7d:e9:20:94:a4:05:48:25:47:68:bd:2b:f9:f4:d4:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.StackTrace.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.StackTrace\Release\net8.0\System.Diagnostics.StackTrace.pdb

System.Diagnostics.TextWriterTraceListener.dll

SHA256 634b5c196c028229f54b68a0cbd66238497ec3bbdc501bad55fc377a4c685027
MD5 b0812fdd6d120899f4c17f63faf024ec
SHA1 8f421d8ab261a34a7f05c8ce22b9da71919d25d8
SHA512 9fa77cf42e24d2fe4b426067048c1611d6ad98937fc5f4d55b50b7dff3cf654e8530877aa9638ac8e919af417635e39a65536e3e72edc3236b32d749abea2216
SSDEEP 768:7TtHMffsP530gKsq0/5LX5Ta68Wmj5vmIZmTiWeEFalTF31mf7YiNRsOSkk4NPJF:7TGM7Q0AvPF8NXiizln
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9d:b6:81:17:14:46:53:c3:02:f6:6f:77:ce:e1:51:ca:8f:cd:b0:29:a9:0f:40:83:eb:f1:c4:49:48:0b:c1:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.TextWriterTraceListener.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.TextWriterTraceListener\Release\net8.0\System.Diagnostics.TextWriterTraceListener.pdb

System.Diagnostics.Tools.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 55c8490d2461c35d9afb5819ddd390adf473cfbc117f06eb115101d3af1dce1a
MD5 f98d980227d772ef2123bfde98b4b09e
SHA1 c9989690160514d87e30801c2aeb9432a0c20fb1
SHA512 e018a8acf79fe5a33de616b03f44c931d7e74cc8d429b11d07826ed59b4b8ea5445e012094c1ed067761598f4deec771bda14dbbdbadecbf455a4a0fc5191ec5
SSDEEP 384:6zC1AxWvUWYTb2HRN73bLp5DNR9zqt94gp:TZK/i3vP9zNW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

cb:71:d0:53:61:1e:41:4e:fb:03:16:d8:08:18:c8:e6:07:24:d5:cc:77:2e:ed:2f:d4:29:65:2b:f1:1f:a6:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.Tools/Release/net8.0-windows/System.Diagnostics.Tools.pdb

System.Diagnostics.TraceSource.dll

SHA256 22365ee4e3ba3c991d495e41f92e29bf6ddb38a48c44f55651271b80ee62b6d1
MD5 fe6a4b96e144131788108c8396a849eb
SHA1 40e6e5d03cfe036645ae854d5a2262faec6bed32
SHA512 61644c0e970dd6a6ff697b110bf99962931dd94deda5a966ea0fded3d23cba7433b802656295e04f1a95421774ea3c838f0a642d26b5e46ae6c05becb52eb7f1
SSDEEP 3072:qIAnvuCBgWS5Cf0dpwQn60x7cftbg90eI1LTXsMqB5:cBgYf6aQn60x7cftbgRorAn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

25:5c:ea:83:81:92:66:0b:88:25:8a:a3:a0:cb:ce:28:6b:18:f1:e2:39:75:84:97:a2:16:8e:dd:44:4e:51:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.TraceSource.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.TraceSource\Release\net8.0\System.Diagnostics.TraceSource.pdb

System.Diagnostics.Tracing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 65bb861d19fecb89199aadc1d90afd1bb788f5bb8f981a5abb7c5b782bd6b21a
MD5 e8b7bdcf7c87e63e11b1469f740ae103
SHA1 108de96859dd6d5bf9b84517f5c6b6ca7578f955
SHA512 63786559398f31219ab9d1d4c98f6d9729d7b8d63971e46e76484ebefa44c0a869a9e2b24c113f5394694103070b9a921e12d0d827601a2ce634170f0e13ea8d
SSDEEP 192:ZJ6DDj+y3xwtiWZDWzY3WT56Os1HnhWgN7agWfFxZNKd2kQX01k9z3AOd0YNs9:C+yhwwWZDWzV5kHRN7UzNNPR9zbKYNs9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ce:31:f4:5b:39:03:eb:33:50:35:a4:c8:0f:4a:81:07:bc:9c:db:70:a1:97:1c:ee:31:29:96:24:01:ca:75:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Tracing\Release\net8.0\System.Diagnostics.Tracing.pdb

System.DirectoryServices.dll

SHA256 89868bd5c97d45e07fff3b9e148465c16d09ccd343fcf1c86ad4366211c33098
MD5 2323217179ed11e052830086b9c85bc4
SHA1 7ca0649fadebd7ebe9884783f6bcd63345d670fc
SHA512 739a5fcb7be4db56179cb8c2e5f3aeb970c311412e9e7a8cb3f1d694f6d396190add9a46b489bfe28b4106697f53c10a5f9f05888e4c4e6cc989e419b5203884
SSDEEP 12288:zfqmTyjXDrrPrqOpsFYwcXvSs6j/nBFsAtvrZogoL3UHk9/lzHJDq3cc3w9fMBsW:OoiTzqJywcX6sQ/BdjSNBHJm3PwS6W
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

3b:e6:8b:6c:64:c4:dc:47:50:36:24:62:24:60:5b:0c:4f:de:94:f5:83:36:0c:8f:ce:a9:07:a9:8d:39:48:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.DirectoryServices.ni.pdb /_/artifacts/obj/System.DirectoryServices/Release/net8.0-windows/System.DirectoryServices.pdb

System.Drawing.Common.dll

SHA256 75b1e772a4355145364121af00e5b5cf06c7212aa53d662fdc996bc11e8092a9
MD5 e4715322db624dc52947a42ac67757ab
SHA1 ba0b0850142ecc3910927d6f2e5781b896d7d442
SHA512 3c86d44eb209a3a1f2001968a2b139e532a0513fd2decff04aa1bf8b30b6202c70fc0e7ac8b22ace563023671259cd74cf65062132e7f1b97d3580621686b05a
SSDEEP 24576:hSLUw0XksqJ9SmSdQ8JWagBBvGydXkOJxP1qwRJt6e:MLWXy9SHdQ8JcBvxdXkOJT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9f:26:eb:9f:43:d1:a6:a9:2a:4c:53:38:37:ff:01:02:ce:19:26:23:5f:9f:5e:14:01:ba:b3:bb:6c:87:fe:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Drawing.Common.ni.pdb /_/artifacts/obj/System.Drawing.Common/Release/net8.0/System.Drawing.Common.pdb

System.Drawing.Design.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6799b6664679945290ce04682244ad97e0f140b77ab849786344a96aea35ee80
MD5 04a712256c04c1ab9f09b829346ac13c
SHA1 34a4f54776f1d6fb4304d97401c56a989045f0f9
SHA512 281d41c357962743c7c58f38b710834d42559327fdcae4c8f6c01c459a131e65a7d99c1b27bd01864301df63afbd563419e2096db9c64467ecacb6b349ee3e37
SSDEEP 384:q7s1MZIDXWGBWG5kHRN7xvLSC+Hj+R9ztZDG:UWpqZLaHji9z/G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4b:1d:4d:52:c0:5a:b4:53:f8:54:cc:43:e1:f9:f8:d2:e7:79:a0:6a:42:5c:28:f6:11:d6:d6:43:19:5a:ad:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Drawing.Design.Facade/Release/net8.0/System.Drawing.Design.pdb

System.Drawing.Primitives.dll

SHA256 cbe9fbb1d1e4850460854474ffd8c01ddcc756dcb33a86d1674c0cb2e2a0b026
MD5 b5ca10a41cc865048491f617678722a9
SHA1 afe171d9d676b78983b802e18ef8e00927073c64
SHA512 2afdce56b7eec6deb82f8b2d5ec3029b5a0ee1e8bbf2e0ff9a0a5310bf265ddcdf63660546b4dbcc3c5fb0cba3cbb94f2408fe5cb4d14dbe0e74aba6dd5a2192
SSDEEP 3072:+KG57N4yeP4Sy2vmH00N6no5WLCI+7oRcPw:E57z6mp3FoP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

63:4b:bc:6b:be:be:98:d4:95:03:4b:f5:23:38:44:0e:a8:df:d1:24:5a:db:12:f7:c2:a7:e1:17:76:e8:e1:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Drawing.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Drawing.Primitives\Release\net8.0-windows\System.Drawing.Primitives.pdb

System.Drawing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 97868f8a8a3c3cf1301e70dc37833dceea110574c7b7e035b81027d959aa4ea1
MD5 51a3cf9e642c0efb1181cc0c4d8a3af0
SHA1 274fe1fbd476e123b01ffbb4bb34bfe15dfe34f4
SHA512 08435da4cebed2a4fb83804d87f60fc8cc8f834772c2a52f78cdaccbf48fc2577c1fa401c8c6130f0967fa16f6757cd58474fd69237dcac082573794a4c5e14e
SSDEEP 384:ElkzkXBQ+RGP7RYpYOOT/4G07NBFWLtWQTb2HRN738ksWAR9zgX2i0Zb:m2Tkeh/i38DL9zRi0x
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8b:ef:17:4b:2f:e6:3f:e9:48:4d:3d:ef:76:b9:98:8e:53:b6:a9:40:2e:ee:27:00:1c:55:fa:a5:7c:ad:62:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Drawing.Facade/Release/net8.0/System.Drawing.pdb

System.Dynamic.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 21dd7e13657079dc77d68931d5f839bbc0eb8bfd29346cf37b5ced12c7e5be3b
MD5 3e671048499137373bbaf56f5456a853
SHA1 8277441c0556fd85b76c158a36d2b708eb9d3032
SHA512 33f12046cfc46a509f992a940d273cdcf59fb3867f4ec836ad5b4016346b171ab87e0496804e752c6aba87afb5a810c00c6b16589bd8e86fd39aa4c72e05a6f7
SSDEEP 192:mE7TXZxAdGLSwMWVCWUuWXebPpUNTQHnhWgN7acWb9BEhwXBwUoX01k9z3AurHNr:mmTzoGmwMWVCWUTb2HRN7pAUR9zDmeGm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

01:ea:8a:08:d4:70:39:8c:68:57:c7:cf:36:79:56:5c:4d:2b:bc:41:1d:e9:e6:65:2f:74:39:84:2f:a5:6b:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Dynamic.Runtime/Release/net8.0-windows/System.Dynamic.Runtime.pdb

System.Formats.Asn1.dll

SHA256 953c70b6845d6eca66658195352d4049da6a1620d7b7efa2f3447573fa610e25
MD5 5a6306a2e3f13c0912d06c80f503c04e
SHA1 10be849b9b5867bb876c5aae89aa59fa2f75bbcf
SHA512 b2225e68ff0513e91288d76ed808841382edbf64b9c4fdb38f66f6cddaa0ae397532292046fc011a8355db00d8847a228da01263df55d94f83f8ddcece10c90a
SSDEEP 3072:OHfNARrQOdDIgcJ21V7H4kbxMroUzVBzwndzKeeAxNXhrig+uG4krZAuZAVV/mSf:421JH4kbxozVBOZKRAxNXh5VYYG0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c4:e2:19:2c:dc:ed:79:87:8e:b1:be:96:03:7e:65:c7:df:07:6f:0d:58:94:e6:36:83:08:a3:fc:ac:b3:0b:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Formats.Asn1.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Formats.Asn1\Release\net8.0\System.Formats.Asn1.pdb

System.Formats.Tar.dll

SHA256 ff4eb1e941bede553d21daf127481a4c55ad482feed0b9ef65a8c298ae863ef4
MD5 4fb797ffa301e155166bd7c40ce149e7
SHA1 235fc96a219b3a2874918fe677cf2927b88b4723
SHA512 59b3f1a358cbb0596a25ea22e260d093ff5657f3b7c8bba98dcd82e335feedd43047d609f8289de0a97fd2fb6601fd03072a37a7c703bd63ea6e5db1f00dfb67
SSDEEP 3072:+oRgkJLdnAwE5vTlzVaYq0OMBFK0qkir5tKgz8FK3MEIS3PYPpAe8yq/xv642ucP:5ukJLN5E5vpzrC0oKPpU/epx8NfqgT0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:2a:b7:f0:90:02:01:95:23:89:1b:4a:9b:c8:f1:ba:d4:ef:c2:db:67:18:6e:e4:b6:cd:56:fb:e4:78:fc:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Formats.Tar.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Formats.Tar\Release\net8.0-windows\System.Formats.Tar.pdb

System.Globalization.Calendars.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 823707eb40666e9fb1cc14dd0f9e1be11655629eec42d038d9d82557b533db18
MD5 8aeb91999376b75b8fd639c053044ece
SHA1 333ee6acff393e02243e3207e3c882ebeca479e0
SHA512 63e36abf03406b6ba957703916608163c57bf7fc0ccdeb0eb9f37ba7b44c8dd73a8eaad8e77fad03f368707779c0aa745e454a228e5171735cb3b63076d01cfc
SSDEEP 384:Sy5VURqXWDRq8Rqm0Rq7Wps5kHRN7hnPhmNNPR9zbKTG:N5VOqKq2qmuqYphPhC9zQG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

32:c4:f6:63:bc:0d:d5:0a:ac:ff:2b:cf:cf:76:2f:5e:96:59:5f:51:50:57:9c:6d:f8:73:40:80:cb:61:d4:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Globalization.Calendars/Release/net8.0-windows/System.Globalization.Calendars.pdb

System.Globalization.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a298b7db9e2e1a6e10b939f788b58a31f1d00d4024edd2d4946e0e9caa098901
MD5 69d61148785e5c919844e3adece18758
SHA1 aa68fc47e87178c9d5c124fa0e91b475f6e86cc2
SHA512 8d843a397ee26ed535dc9fecda872f1725d154d2cd1167142b8b294095f824fabae973d06951b7b7336e48e25c3ba226bd73e88ca2bcc46954475125840f20cf
SSDEEP 192:vUxAFRPWYRHRp0RjWouWXebPpUNTQHnhWgN7acWUcbFBwUoX01k9z3AurHNBexT:aYRPWYRHRp0RjWoTb2HRN7DIFUR9zD4T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:c9:c1:fd:29:7a:aa:3a:6b:08:28:bf:48:82:31:0b:01:d8:c2:74:4c:1e:0e:c3:1e:2e:53:3e:15:09:f4:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Globalization.Extensions/Release/net8.0-windows/System.Globalization.Extensions.pdb

System.Globalization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8491b2edda06fa86f390df8689b7fe35acecc11f024f520a587035ee80251480
MD5 74837cde4461f6acd412678261ca9484
SHA1 de07fcc0cdfebd050d9c25cda99f53d54374395a
SHA512 7acab6e736c8b8422b8d3adab2aa529043c292f74b0c4920f5a09f0c0b342c2bf19aa4d1d6852caa82d3f57e384bd3e87695452a37e6058afbdc1669cb4b6800
SSDEEP 384:+jR6RLWdRCRA0RHW9Tb2HRN7Fr8NNPR9zbKh/:+jy0wAuO/iC9zs/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

be:f1:d1:70:e3:03:a0:47:9a:a3:d0:08:d2:4d:27:9e:94:3a:2f:9e:78:6f:55:c7:66:20:50:62:83:39:81:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Globalization/Release/net8.0-windows/System.Globalization.pdb

System.IO.Compression.Brotli.dll

SHA256 51bc8800f8579a14d1edf0f650c9a5d828ef9d96532d7dd304a4394fa9cfd641
MD5 4cde4fcd6f41f0d6d400c1d66f391538
SHA1 7c4a13f37c8d20fbe60c5b612107bd0242b68e26
SHA512 d7b444ec7f230c3104fdd98c60af9de998a85e622e0c8ce3471a3809d9ba8bb368d7827800fb177ac97f0ce3feb3ad2292a77d41b8c36bc99b2df1263feb8735
SSDEEP 768:IgjNvVL0AXiAExEQACL3jNNdx0xGocoA49wbnDuYS3K0Mk5eUb6/i19zF1W:IuZVAYnubACL3jlO9wbn6fK05pGiHzFM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8b:f4:9b:be:b4:47:92:c1:8e:f6:d7:e1:b3:87:fc:5d:c2:27:bd:b6:d6:9e:6a:dc:b5:c3:67:a9:f9:c5:e5:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Compression.Brotli.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Compression.Brotli\Release\net8.0-windows\System.IO.Compression.Brotli.pdb

System.IO.Compression.FileSystem.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 66d983bf3b49349014250c9b5a2536cdbf59f7a3914ec1842014767d207a6f01
MD5 141725a095c984f4bb53009ad1b8271d
SHA1 9bdf952f93818206b828a8a3a2e56c8a191faf29
SHA512 6016665dac4906fca60008990f0bf9da7460d92adf7c5c8c3e67d6715222cfceb2ce6b384b8f68ed99009daf2e63c443266aed1c9aa62de1719b886c480850d3
SSDEEP 192:mEtfwuxWXmWwuWXebPpUNTQHnhWgN7agWJ4WjepVWnSX01k9z3AYngHDEQr:mSfBWXmWwTb2HRN704WjezWSR9z1gIQr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

76:d1:cb:21:9e:b7:a9:d7:54:76:69:fb:8c:81:2d:0d:0a:12:c1:4a:88:16:30:16:dd:92:0a:0e:2b:f4:c4:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.Compression.FileSystem/Release/net8.0-windows/System.IO.Compression.FileSystem.pdb

System.IO.Compression.Native.dll

IMPHASH d985b2ab046cf5c89d2c6cf278c35fc1
SHA256 1d58d2b17d468651e17870876029dbd3f68d6ba74b18a75f148581eaddc9c1b1
MD5 68deb864299c12cd26aea44c39aa665b
SHA1 03613118a674e115c23b3eae354805e9e41bb34c
SHA512 4ad6b2c38338469de0f0247152f773f6886ea5396aca5cbc178dc2e894aeccc1296fd02ffec1d1a266bc548a490a8afc5ba383087bd89567957980472318ccad
SSDEEP 12288:BQ7xQygu02IeTximj/pxJnbAHhlyZ8OXTw05nmZfRTFAQ:BV7puZJbAPlAmZfRv
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

26:91:72:23:01:f7:af:eb:10:57:93:1e:f6:42:dd:fd:87:4b:7c:c6:ec:d6:69:58:21:ac:06:6a:89:d0:8e:16

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

316672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\native\net8.0-windows-Release-x64\System.IO.Compression.Native\System.IO.Compression.Native.pdb

Name

.text

Size

313KB

Virtual Size

313KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

473KB

Virtual Size

473KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

468B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

System.IO.Compression.ZipFile.dll

SHA256 01162018b643ae45e232ef063be2fdf4b92306eda4ac9c8ef6688ba5f55163ec
MD5 63d337523fc02f443b9e163bc41f24de
SHA1 0c5c9773494951a19a5617e3905d713b68773d00
SHA512 310766e1319ee845bddd4d872cbeae722632e27a58dec150f1b0da3c479f8aca8120b5a95347529dcec9cbfe7c8387c5a0b6d7ed021fff6bc74f3f81e6cd86b0
SSDEEP 1536:OPL0/+NlZ4jNSWqs6sQSvv3XvPHrPiv+zEU6:OPL0W2jdiSvv3XvPHrdgr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e5:2b:5f:42:3f:dd:b7:71:c6:e5:79:96:da:f4:ce:7c:87:d4:ca:4a:36:94:79:84:5a:d4:74:3b:5a:22:f6:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Compression.ZipFile.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Compression.ZipFile\Release\net8.0-windows\System.IO.Compression.ZipFile.pdb

System.IO.Compression.dll

SHA256 3f5083bf4404c5969557e6c19a5b87d7db5bef2ee10fd86d775b6a96b357232a
MD5 e11feb9fb874d60b76c2ad7a5fef7ac8
SHA1 e7622bad558fd695442b3ecfeea8f706601c0310
SHA512 dd3e75b0a86ee2240ebf37d728f467b11fd4a25e4b7fdbc8f4c5b4180bcd0e8c1a1695f5cb72133da428f791cb922699cc3a325e05c44bd7931c141b07504587
SSDEEP 3072:6C1XO2TF424mNDF39wIEUizDYj0RlNikmWrj9z1wSnhj3zRG/ADP3NbC++xOMXNc:N1XFbfzucYMzWFqqdDDvA/XNM8Fm7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

03:82:c8:a7:ef:bd:a3:97:61:be:a0:f5:bd:62:7b:90:40:54:d8:cb:38:67:da:6a:ec:b8:69:2f:ce:79:e1:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Compression.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Compression\Release\net8.0-windows\System.IO.Compression.pdb

System.IO.FileSystem.AccessControl.dll

SHA256 d8b0a7f59f2b1ddf04d2eeb10aa835fa4232c030c223435ef36fc133ac5ca4aa
MD5 cfaeeeb96754eb9b3f5fd58b875b6bb3
SHA1 04a75ff8f9134e73062134a91483376b899e8ef7
SHA512 835dd5c0ca0eeb30ebf9d806c9162516a3858ffcddd3f0ead77eba63a982b121e26877813672fa0f2957688c062e47b94215a8c9c8e14e3f60c98bc2324fb538
SSDEEP 1536:5ZjAlMgPQsOjasBPicEzfQHlgWO6CAvpYJGK9yKz3HvzDH:5ZkGMQsOvFWx7dgu3PPH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d1:84:43:20:9d:c7:a0:c7:b4:ff:f9:33:f7:91:7f:f2:57:a3:8e:41:6e:e0:57:40:4a:55:78:5a:fc:5b:49:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.FileSystem.AccessControl.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.AccessControl\Release\net8.0-windows\System.IO.FileSystem.AccessControl.pdb

System.IO.FileSystem.DriveInfo.dll

SHA256 0c525ce669039824dbb08ec42b92ef4d0ee610a3396e7bb9954315f12cf072a0
MD5 0570659632a8971a62c48060d9e8262c
SHA1 627253cef98e127db701f5afd5a7a9365f4b2930
SHA512 70c2b7e302cee8dbd470623ac406f7a1aae1dc2c2d6a6069c0d98698313dbc5ad0aacc4f8cdb9dff643b574254ea48250a7ab6c2048142995e3bd4034dfbaa32
SSDEEP 768:fwsLf/OEEmdsk4n2w1o91PC3YWvt/iqJt9z1U:fwmOEvsk4t1o91a3HvViszO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c2:ce:38:c8:13:ea:de:f4:94:b8:36:26:ea:bc:67:9a:3e:bf:5a:66:b4:60:e8:8d:84:e9:d5:d8:f4:2e:b8:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.FileSystem.DriveInfo.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.DriveInfo\Release\net8.0-windows\System.IO.FileSystem.DriveInfo.pdb

System.IO.FileSystem.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 091f423b223706b5f7ec212b26c73e20903c23c94983a097c97c3006cfe56e34
MD5 f2d1cfaf1e2d377ff93b340d940aa924
SHA1 f1af62c8d35ee8f8a7de9724405fa06acac0bef6
SHA512 75f9fdbf6881d0f1efa89eb2ee17b09e10ae06019bf5d8adbc31bf075be30b3afa0cb35b2c4474f87aae678196257f90a57f6fd9285fe1b7811b73f63a688862
SSDEEP 192:Gz1lYfxAE80WqqWouWXebPpUNTQHnhWgN7agW8ZNKd2kQX01k9z3AOd0TB:G1ME0WqqWoTb2HRN7JNNPR9zbKTB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e1:b9:26:79:df:f1:05:36:2b:c5:5c:46:4c:57:3a:aa:ba:15:03:18:a7:e5:d5:3e:03:f0:d3:d6:cd:63:c7:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.FileSystem.Primitives/Release/net8.0-windows/System.IO.FileSystem.Primitives.pdb

System.IO.FileSystem.Watcher.dll

SHA256 5c35136269f3d458dcbdf930b47e57069af2b8aab079b742b58cbf9738d46784
MD5 6f9a9be93986dd7987273563511c7ddb
SHA1 d0146df1017c7f22f2d1dcb69f229796de5bdbac
SHA512 69b1588e8e8ead7aafff18b864a62f204108966241c5c05a2053d42ce5f4c91098f8db57f8034fd78f7b64483e1d8285c3770c95ac449d4ca885cdd00f4788bb
SSDEEP 1536:pFQv1C2wUQIOT9sJu0Z4sqpEECHr4GBo333333333333AQ3Hkkk33kLHjSrIigzs:pWdVw5Ihu0Z4jphor4G633333333333u
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8d:3c:28:22:59:06:c5:2e:f1:ea:06:6b:7c:6a:c8:91:b9:66:52:d1:34:49:00:29:04:4a:21:b7:07:10:65:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.FileSystem.Watcher.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.Watcher\Release\net8.0-windows\System.IO.FileSystem.Watcher.pdb

System.IO.FileSystem.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7bd41c6b12b73e6e90476f2d56db8581664abe07e7ab9bf2917bb254ed1d75ad
MD5 35e27f4c681085a4b096826ee8ea4f53
SHA1 cf3ea4304e5558c8fdd4422e4d72509cd91ea719
SHA512 1f9e6519ff29524e57cb0b3576ab118014293aade8f30027ef44b1f29a8e9a54e7bcb3b288a92dba996053b16016807d93fa9f44f2c43666ddc6425ddd7ae4b9
SSDEEP 192:qWKRH8lxAbqWD2W4uWXebPpUNTQHnhWgN7agWxTZUZD2X01k9z3A6vY5IaN1:fKRHq1WD2W4Tb2HRN7ETJR9zXvY5vN1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

47:bb:51:57:d6:e4:ae:f2:2f:7e:1d:ed:cc:2c:89:9d:46:e2:72:54:42:0d:2d:a5:df:42:ec:8c:5b:d1:61:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.FileSystem/Release/net8.0-windows/System.IO.FileSystem.pdb

System.IO.IsolatedStorage.dll

SHA256 37fdef675eaa6ff1eebd4c35bbdd46ec4aba5b95d88f95931c2713791b6ba6eb
MD5 83e6975d91c6a4ff540c3292ec9f26de
SHA1 045e247c0bc44447eee1aa98299063074a8351bd
SHA512 cf31c21879fcc0d25cb88b165538c7ca287b2b25ea594a3f76abb72d428b8c3626662537015beff28be4dcc6d9282505a6cc583d8a66d7028846987944609aae
SSDEEP 1536:Tb/hJcqh6YKb3SjZwEgGv7+S+lXxjvHGiMzb:TDncqhTM3SjZwEgGD+S+lXxLe3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d9:fc:4e:7c:49:4b:c9:e8:20:0a:a7:38:10:97:d0:bf:ff:54:24:aa:8d:06:00:20:23:83:96:6e:91:dc:39:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.IsolatedStorage.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.IsolatedStorage\Release\net8.0-windows\System.IO.IsolatedStorage.pdb

System.IO.MemoryMappedFiles.dll

SHA256 c31e84b0db1c53999159c05d0edd115f5cf5204653d37744a6659e07b2d936a2
MD5 348e61e8baf5ef7556ead0162ffb2482
SHA1 2a1f568c75a446f9a676f9b5d5c54f08e9c3362a
SHA512 6129d90a0fd64a315c2af5501272fef8c595c689ea203e02b30b090257bcf69f0e57fe73b18e1d1bc4d89eb06241b32c12f1ee453f2de70da17966ddc2161a81
SSDEEP 1536:FLPx5ebzMbA6UMq1jq7Zb8GuOFXEe/c459RkA65msAhoBze:FDxeCA6E6b8GuS/35kAmc0K
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6d:33:2d:a4:b4:a4:ab:b5:7a:44:89:88:77:33:c9:49:1e:7c:63:ad:1d:e3:77:fa:25:3c:98:e3:70:cf:12:0f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.MemoryMappedFiles.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.MemoryMappedFiles\Release\net8.0-windows\System.IO.MemoryMappedFiles.pdb

System.IO.Packaging.dll

SHA256 de3251d2ea21171e5775b3c84586feec6f2bab276ec41b680685c0cbe04e9282
MD5 de2998b030adefb68af2148b7432db7a
SHA1 f5017bfb4cd9d534d83d5ca7ee7f68901f20d34b
SHA512 44f662315748b445d3b203435640f6fcf97b4ede14bfece312afe76915fd1d951a3c126d9a502366b8ca84bff1285be2615073c87c3cea9ad26f94016fe49eb5
SSDEEP 3072:4+kB0K5eRJEyDW3tH1KmUc13zndwEDDOz4hJk6/8oFyS63ZUyhmgLHY2/Yb/bmN9:c0K5yiyMtVqyLDDOz4UdHLtADmr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9e:02:95:54:3d:80:16:1b:67:66:c9:91:07:50:a2:5e:21:1d:9d:73:47:01:99:d6:1a:ed:b7:2d:20:0b:a9:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Packaging.ni.pdb /_/artifacts/obj/System.IO.Packaging/Release/net8.0/System.IO.Packaging.pdb

System.IO.Pipes.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b950bed12290fbe373509cc6fded3207f0a91fdb339b17f3defb0df9e4e628e8
MD5 cfcf5d2540ae171c98eae6c37001436f
SHA1 748164b10fdbf9dd98319221ddf42d8dca5fc15c
SHA512 c5d7b4018a65daec3fc7ac361d4819d215aa0d4ccd857e97623e2103115a43e1dc7cf9c8508ff8abc23bf60bad3f1d73c6013658cd465f993c2e2703072affdd
SSDEEP 384:yhejWUPW9Tb2HRN7kVE+cYR9zPrf8NlB3:yErC/iqJn9zT83B3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

62:c8:2e:46:79:4f:f3:cf:4c:84:3b:2e:64:f4:29:2e:82:0b:00:87:e7:1f:da:e9:c2:f4:f2:99:be:04:64:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.IO.Pipes.AccessControl\Release\net8.0-windows\System.IO.Pipes.AccessControl.pdb

System.IO.Pipes.dll

SHA256 00f85acfbb192f540f8c7db6fb007e87a2db6a585f362cec1ea41c0ef3aa8731
MD5 71b8fab9e80e87aaec621ab2db7889a4
SHA1 077e75ad228e3e5df2b4b42cae5a64d4c237c553
SHA512 ed95ea82b076c7aa9359d070b18ecb08207ecc405d602631be5c6ba80f7e78515bd137dcb8bd2b853c63dddfed1759fc7829347bf55bd76e784f91ba56ab6097
SSDEEP 3072:AYXaVzbWW95iEPxwTw8pLtx108B8Yvqzi8r9JxahU:LqVzPCEPxP8pLTmr9zai
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d2:24:77:0f:2c:c2:d0:e1:09:16:6f:c1:c1:c5:d4:df:f8:9c:02:d9:07:72:96:08:48:48:08:f7:99:2e:41:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Pipes.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Pipes\Release\net8.0-windows\System.IO.Pipes.pdb

System.IO.UnmanagedMemoryStream.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbd4f652153e4b3d8c8f30caff2becfd9f0ae917270d7fdf75729d651cd4cd7a
MD5 c27c77b697c7baf4beb46a81cbf7e81f
SHA1 8a71425c1d67374d93abd782dfaf5fd41ba0c545
SHA512 29bcf1d1029fd8d79e42e611b6c0be8884a1be2a97c83889f6a7acb2370aa94d1e2c3a5b181e419d3bdf5c71f33b122f8c0b5dff6530b4f57ade641f4aa4d875
SSDEEP 192:/WzlewrxAE2IBXW6+WOuWXebPpUNTQHnhWgN7agWmKMuk17weX01k9z3AIiaXAl:+cwlF2I9W6+WOTb2HRN7Ck1nR9zZiaXs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

61:b5:a8:a0:bb:01:ab:5e:ad:cf:89:1d:2e:df:b8:e7:16:18:28:a4:af:46:8a:9d:72:bc:e1:69:0c:28:f2:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.UnmanagedMemoryStream/Release/net8.0-windows/System.IO.UnmanagedMemoryStream.pdb

System.IO.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 83edad54181162350cafafe2c6874d79e7d68427c4b61ed07fe7ec231ab3c9cd
MD5 3ab9d8196f1c072f8dcbb1b5785ea171
SHA1 ec43a419b9d33acf83b0bb8276167896d073ab04
SHA512 7cf5c78a5be8ced39876be9030c6fa03cd134415c4320c16c8a89249edc8e41dfe4f66ed47fe143329953c04903bf901f76bc07421c1129d9aa9dab206a96bc8
SSDEEP 384:Jxq83wYWwbWrTb2HRN7yql31AqR9zdv1pc:Cdyk/iy+r9z7+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:ac:ce:50:55:2d:65:c1:81:ef:8c:20:dc:68:18:23:48:20:42:80:ec:10:9c:aa:26:84:1f:0c:f1:d9:68:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO/Release/net8.0-windows/System.IO.pdb

System.Linq.Expressions.dll

SHA256 1bc5508930b8e8e40bd4914ff168b1c000cc359862d84ea77eeaca5adf41a1bb
MD5 4a29751ce7c80a1033a97c91521d4ab7
SHA1 0a10566d6636f8ce7e42a368eb540334e3137c41
SHA512 fb42777dfe960be0de5ed7032abea240ab344c4ae4662ca79d6d605796fd69995e161119d971f7029d43a3946c2a0f6de41af92bcd0068c4f1eae8b3210e3145
SSDEEP 49152:DxBVNvCZVOtaMj3hDJqmpVBwVYCvWfxPDwsu4jclFZ39StekS4U8D:1MqnH9q8kkS4U8D
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5a:55:b7:a6:fa:e4:18:32:cc:f1:7b:8a:ab:52:0a:b2:b0:91:cf:f3:6c:8e:e9:d8:bb:ba:e6:f7:9d:bf:4c:8f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.Expressions.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq.Expressions\Release\net8.0\System.Linq.Expressions.pdb

System.Linq.Parallel.dll

SHA256 52f2446a013510a55a97ac0084ff93c79a6c9a47e6e2bd9db16b1a2d30e0b252
MD5 122c9b393a9e9cd1470a4646cb1e4067
SHA1 4f3bb0f560a2f3af3e887d3adfcaf6e9a33d5813
SHA512 ab2e4ba07926a3ce50f3b32897086171f2a6a4d12bc76f9d73656384beddb624482a4a40c54a319069ed52c7faba8b64e1104f9048b64a92236d0589c1a91217
SSDEEP 12288:2jxab7Nx0IKplPwgArwGrl7pyWE27bfc+yygYVBK1G00eBcMIbNcP:2jxabcTppo7pyWRUygYVw40ZBcnu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

3a:9f:96:e5:a6:4f:0a:f0:ab:bd:ef:62:66:cd:04:6e:0e:23:23:e8:43:45:f6:10:02:0d:85:de:af:8f:b5:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.Parallel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq.Parallel\Release\net8.0\System.Linq.Parallel.pdb

System.Linq.Queryable.dll

SHA256 c5da223a04eb8ff8d2c359f94c1e5f9d192896f2b777b1b2d19a4fd31c46e7c7
MD5 3beee5809b4cd09d7776dadea22f5712
SHA1 94fd65a90770b33b878c94e7b6b2bfbbcc0b33bf
SHA512 a8a77cb022703d1cd6ed269f1050aebf2fee1622f8ae089a4ce50286abf0c2e426c4224419764ca8bf9fd13de403808c38ae7b7ed9c09ed6f3a9cc9d1d731c82
SSDEEP 3072:PdHadoc5Sm5pHhQ5Di5Wc7fwwC9JKetL3aM/4K:VHadosDpByi5WGfwwC9D3aa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c9:70:6f:6d:60:58:5d:3f:bf:da:94:11:f9:32:2b:66:35:a6:92:45:99:21:29:17:e2:5c:dc:04:d3:e4:5d:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.Queryable.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq.Queryable\Release\net8.0\System.Linq.Queryable.pdb

System.Linq.dll

SHA256 460498a87793a6cdf71f78d27569c677de355c1c0097b214e9e30131d2032b57
MD5 137a8706c8506fb08f7fcc7cd7f6460e
SHA1 dd944f8cf8126342b6cd3aa1619c609fb334b573
SHA512 0d3573c1f3a218bbd6cfd352059198b43662eec6a5c146f4b66b0cdf94d4ed5d88241cc204f344b9f10ed89e782638833b3c46c2d59a00d8960fde4bed0b9b40
SSDEEP 6144:7pcMUY+HE4VSkn9hjKTKVuEHtSw53HVbS/2/VuufbFHJMDNqH/YzdhShN3sTcDSM:FrF+fVSkn9hOYuEHt/h5puEvssf/J
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e8:bf:3d:93:cc:be:71:9a:cf:1f:96:68:2d:5a:e9:d1:38:11:a5:76:b4:fd:e7:05:15:e8:ef:4e:44:75:1f:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq\Release\net8.0\System.Linq.pdb

System.Management.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b2d6e7e991dc9ef154b29f4966f04fd8ed4ebb2c1d1242ea1d5f3e90f8ae5143
MD5 e1422b4c04b923dcfe00a55290dc18a6
SHA1 0609ecde6bc8a87f88bc32b98d19800ff19529b6
SHA512 297f54fceeb0cde17745323e7c41fea830a376fe9c3cf92a692c48199c0a05f1533a3045fd9c6d21352d084aa9ccec7b6cf630c7df49b52ed4025ae156509a7c
SSDEEP 6144:9q4+FutZbJcMFEG3LbPhmlmsUwHdYhJkXUXewcn:j+FutZbJcMFEG3/KmFwHdKIUXmn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

49:77:8d:dc:15:13:5f:8d:f7:74:af:cd:a0:90:66:08:03:f3:bf:ee:4b:1b:24:2b:69:b4:8c:4e:9f:11:64:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

306366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Management/Release/net8.0-windows/System.Management.pdb

System.Memory.dll

SHA256 3af25e0c81c1462d0db86f55c4e5fd8c048c70685f9a566d29d499bc46935fb4
MD5 7e999da530c21a292cec8a642127b8c8
SHA1 6585d0260ae98bab2ad1eaba0f9cfe8ebb8a0b3f
SHA512 a18b6649b5c2f9f96bf639863df9faad436759200a64f91fb2d955f33c71ce4b2d5798be982f692a247ac864d8acb63fb731b31c06333e5c7d9a9c895ecd6451
SSDEEP 3072:QrL1dLrEU0+t+wvqnvwZuIBo7MB696RoYdUCBuqmwfBtTihdFx:C1b+w4IBo7PGUCBukBu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

de:5b:c0:a9:92:2a:92:43:da:33:93:e5:e4:48:80:1f:a9:40:ab:c2:87:2d:b8:c4:41:87:20:bd:95:bd:1e:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Memory.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Memory\Release\net8.0\System.Memory.pdb

System.Net.Http.Json.dll

SHA256 6dbe34a0d385c95c33b76f61d4d56d681fd38f86974719a2e9692e15ed3c5b23
MD5 11d0c4fb829317557177c317a63fadfa
SHA1 1eef5661fe47a44046ab725904c9ac0bf9447bec
SHA512 8bba76cc9efad2464baf9824c15fe0c6c059358f33e492485ad5d5f9848aef2a63d20eb6620776b4d6c140e05c5bce1a50319b02c8a6c980d3edd73ef85ee104
SSDEEP 3072:9W4aZ3kbjQhH0jOyZRRY4beE/SZkXRp7c0C9vc:FaibjQhYOy3GZkBqY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7f:75:bd:3f:d6:26:25:66:fc:2d:7c:79:27:b3:99:37:dd:35:91:09:c2:10:99:fa:a4:b3:26:b6:8a:71:7d:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Http.Json.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Http.Json\Release\net8.0\System.Net.Http.Json.pdb

System.Net.Http.dll

SHA256 d909375d9c3a44655bca69fdd39575a7521d5127ce56057e2e575fd8ae977c90
MD5 aef5def9034d9117fce2e2bfee7e751c
SHA1 22e76ad7f1aa71bda7639a692e2c87b8d2603950
SHA512 450f6f63aab81a86263f24f5bfeca5ed141d461438774b90ea1afd2ca4e76a2c71047686e0e0dfed6cfae847647ca26fb7f50f8b711d5f723aa3243071d8afb5
SSDEEP 24576:tAxp0DJNBGra9wf4dHUzsh4Iy6d6Y4+h6ev:mxp0DJNBGraGQ1aEDnv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d9:53:02:ba:12:64:46:74:24:36:2f:bd:64:c1:c4:c6:2b:ba:87:4c:90:90:97:0e:62:bc:22:a6:6f:13:49:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Http.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Http\Release\net8.0-windows\System.Net.Http.pdb

System.Net.HttpListener.dll

SHA256 8ebe75a67d336f1f3e94a4655ef6399960ea910d2c869bd15c9695e96217527e
MD5 cbbcc0bb7a8c9314a1768b5053a2dda5
SHA1 e73c3f64ba252c3a26c6c61e08067d757bef71fa
SHA512 bec7cfcdcd7099fd61195f18eb2ab025aea788122fcf3d39697c136d4432157c103c4da7b7eac046c3be81177d0e52c5ced6d2cf1cb58a7ce7cb222d109037d5
SSDEEP 6144:zDmIFBDqppU1u6wCMxdIvKlBOgiyB5lc7fkDNRd2B/47LhNw2EWZgCgG9qikXOGe:2eipU1u6LEBZB5cxyVNCWZgAQOSbK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

98:13:20:ba:13:86:26:45:69:d6:14:b5:d3:2f:5f:13:f7:51:79:f4:d6:37:0e:d6:12:f7:32:3d:14:8d:89:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.HttpListener.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.HttpListener\Release\net8.0-windows\System.Net.HttpListener.pdb

System.Net.Mail.dll

SHA256 2ad0721973f9f5aea0c4d67c12b2eca1544c785f7fc81baa49f9458652a6aaea
MD5 b011f437344425588e2fc98b71d5135b
SHA1 030db605d9405ff270ac9f50218f74040e79ccad
SHA512 e642a8501a510ac0646bd6d712723e13ba4dea2ce1e01907d392b82a8d31666ae46a3c5c10a164d22510b4e6bbb831165fde67d9e0fc4f6f4888ed2a052fdcb1
SSDEEP 6144:I1OH1ZIkkGnQkWIPOQCwWXX1z4O1ViVpxwdSYbmqRSkrJ8kk5gZQNwMOy9:+JSPEl78xQSkFQNBR9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8c:99:32:d6:7d:81:2c:8e:42:6b:f0:5f:dd:91:a5:05:ca:bd:b6:4b:ed:28:01:f6:a3:30:30:96:c3:8d:3c:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Mail.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Mail\Release\net8.0-windows\System.Net.Mail.pdb

System.Net.NameResolution.dll

SHA256 9b16cce6b7fca7b56922eb996a2bccae9399ba2c04ca9a96230d0a1f9631b99d
MD5 38bd26a6d20e432495cfed8bc31dcafb
SHA1 2d00da3cb5bb88af21abd3fecf7aa0c95db5f39e
SHA512 0135a6243e8b198886eec1594c00b693b536d4d7087f9c4f605c048608a2fc48257ce9e9b156bdb4af70980f02f6a68ca016e405574e463c36d8658294a48b0a
SSDEEP 1536:4J0bN4P8FpcEeTlIkOYRKdRRyZDFHuWFRnm281iK9zTZ:4y08FSEs1Rgn2DfFRm/z9vZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

52:ed:22:92:b7:a3:65:c9:9a:81:e3:ed:b7:80:d4:8f:30:ee:26:a3:32:53:ae:36:a5:92:35:f9:44:86:d8:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.NameResolution.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.NameResolution\Release\net8.0-windows\System.Net.NameResolution.pdb

System.Net.NetworkInformation.dll

SHA256 9b001e79bf20028ef6fdea3f8c3abf5bf282f2489f71f787e3091e8740f7f576
MD5 4ceab0af3a58f0ff52f1d0ae547dec2d
SHA1 aa4263788593ba49afed67c4a039602c63bc8033
SHA512 7e8837a9883c95cb41c17da57fad014549e72f430ad976b7798e45e43218793a684a233bc12c3d8bfc20551ef42c3f9ec2192e3fba97a1556ebd62877a4c0933
SSDEEP 3072:XZmr7ofEvzlXRs0M7VRtqbqSNge6gU/sLVXyVMnvArw7i:W7oUlB18RQb0dEWv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4d:de:86:f6:73:0b:91:74:d2:ab:22:44:94:7f:84:5e:6e:00:46:02:68:47:b3:74:43:1e:62:79:cd:a0:2c:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.NetworkInformation.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.NetworkInformation\Release\net8.0-windows\System.Net.NetworkInformation.pdb

System.Net.Ping.dll

SHA256 5c16cdb11c5f10215e5f68a95bb650aea242fda291fc797112fba9a2b724eca5
MD5 bdd7246c374ae5fa4242846e83e69128
SHA1 5fc70f35c90783b2c34efa1411a92dd647d5e40f
SHA512 a0d9c14064b0372b9d846b16d8639199037076f6751971833244a7c41ba1934b33511550b560d51a1d02304a1c0c1c257cfdf0e0d36a8954bec4761833abd9ef
SSDEEP 1536:y7w0ypg9T0OwwSz0wc9hswiXjUYwlFbWE/gJR7SANNJsZPrh6NwIiKzyfO:ysNg9T0OZSm9hswMoYcNW3JR7SGfWzhe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

cd:60:b5:18:b6:12:09:3c:b9:e1:d8:43:3a:9a:7b:b0:ad:0a:7e:c0:d6:20:bf:ec:e2:08:09:79:20:d5:25:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Ping.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Ping\Release\net8.0-windows\System.Net.Ping.pdb

System.Net.Primitives.dll

SHA256 4902ca891eb7bd09304cfc42994f5eb4e254fed203b2e25e8f43fe1cf68de8f1
MD5 709e0d6e55fe17cf2bd05aa410735d6b
SHA1 d029c31bca9e74612f53171a898c2fe0588fdd45
SHA512 8d7d644c90f0586dc8173b22babfc1c7bcb9e98903046e9c3aaa03c65f88aad2c6d36f484c7962bb812b7f2b3c10fc1e4604532e866f64dc53c5e7bbad8c7afa
SSDEEP 3072:LmS6psgfgxAzwg7J9WwtKuzeQjuDRVx006uJQ+Y6MFotfW3loV2ODOANr:76SgoxAzP2wjeQaDRVx04RJNtu6V2Ojx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

24:bb:af:bb:50:db:a3:1a:78:92:32:9b:1c:53:d1:55:ab:5d:f6:4e:fe:29:33:4c:90:95:66:40:6e:60:62:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Primitives\Release\net8.0-windows\System.Net.Primitives.pdb

System.Net.Quic.dll

SHA256 5df95c4b8c90d11d2f90176fe07f9ea37158f24e12e8ee0aaed3ef30f8fc1024
MD5 b753bf63641e9241a32158b094a97d54
SHA1 f5f9c66034b641fc117d73bb9f23dbd91f8a3c59
SHA512 14a03f4ed85200520925d1c3a6fd68929b551e7c48f94b276d8cab112ce9226986dc75a43bf44b245a3d9f9b7cd68cdf687d4570af3810b04be1095a606e46ca
SSDEEP 6144:WWBs3qJTEy+Yd5+BgpEuaGBHqH2xM8rSqFY2FiSi:xsUEy+Yd5Qgp9xBRMpqFlFm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4e:e5:86:7b:2f:cf:7b:d2:bb:44:37:72:a9:69:45:31:bf:89:ee:b3:bc:52:eb:37:dd:74:81:0d:95:c8:05:1c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Quic.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Quic\Release\net8.0-windows\System.Net.Quic.pdb

System.Net.Requests.dll

SHA256 d879455299214afbb55d4f9f943b674c1d149aea02a7ec01610987e3b762d69b
MD5 dcfd6c7aaaeb16296eaba29050e754b8
SHA1 2a47cea4ef8feb902cdded24af07d485ac173ab6
SHA512 f762764b3e2d775c98eb505cac7c3be0eb281085883bfd2adc91e68df67c8bf22873f303ef4a1483d8a67c371af6fd33c669c9313f97dbf31118c8768e6b80f2
SSDEEP 6144:dcpGo/grKEBWSOTmRVE4XtMe15Er0ug3IDqdDpHk+fvQSSZKv:dcpGuEB9OaRVE42ei0SmHoSSZ4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

bd:5e:61:9a:bc:8e:89:f2:26:3c:13:32:7f:26:9c:15:e5:a1:22:51:e9:35:d6:97:e9:fd:16:e4:16:86:62:65

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Requests.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Requests\Release\net8.0-windows\System.Net.Requests.pdb

System.Net.Security.dll

SHA256 3f355d86fb290a5ee90c7f32921e3c96d9fdc095c6af77c0296d0af228f818ad
MD5 9147839a7ee0679a409dccdd74addbce
SHA1 b1ac4576ee4b37d6bb0ac38c7118e851accd8aee
SHA512 16a7a0c3b935aad89a6066cd54b6894a7f0ea365d717c2d3b7792ec990e56473a37c2e37e9b6b6bf8a91805c125948b33822fa7657c42d01e727c8dff84397b8
SSDEEP 12288:jR0oBsL138jvCBCauI23RL3AjImeBSHh20E963KI4umLCre2:jRc16CBNuI2EeBN6aIzyEH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e4:f6:98:12:92:20:2b:6e:a5:a6:b0:0a:cd:d6:52:53:2b:13:71:a3:45:40:5d:a8:0f:f7:e5:ac:f3:08:e4:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Security.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Security\Release\net8.0-windows\System.Net.Security.pdb

System.Net.ServicePoint.dll

SHA256 3f3d1f0eb29c7936a655102f0b17e139d282eb1a25d941e56a00c524ea2f5db1
MD5 d65eddc3c70088740b9c841693928ea6
SHA1 350304ac177e981dcd4e7fde3e54a0c9b418d5da
SHA512 bc1ae9da89a7737bf4437ece52dcd395adbb311211d65c1590fb6763b834a34c5e3959577210e9dda1ca4d419a16622861d4949b09494b56fe1a9f5e68d2ba82
SSDEEP 768:kIyP3HyrbKzc/Y7FzqVroiILW3/iH9zU8:kIyP3HyrbKs6FzqGiDidz5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:b2:b1:8b:2c:ac:c3:1c:23:30:1c:9b:64:8f:8a:14:ab:d0:95:9f:92:fc:20:78:cf:16:18:93:cb:c5:e4:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.ServicePoint.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.ServicePoint\Release\net8.0\System.Net.ServicePoint.pdb

System.Net.Sockets.dll

SHA256 8dd477766b9a4ced2fde553f2ae64e053e57456a429f3863e0dc5e30de4103e7
MD5 0e4752382537cfdc44bf8f812e0f5056
SHA1 e7d2c4dd841813be7b120656184070dcd7277494
SHA512 38d35f463ab9dd6d0041863ab4cfb81a46d1f4811f0eb90d5c499dc9e902d4f6bee807e251cdb72e361891ff11b986f8208e720aed8550d607cb51133427eae8
SSDEEP 12288:45PWcNxTdiT13ipmysM3AwTPTuf1Pjl5+:4lWcjYBSpmS3X3utblQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6b:e0:f0:9a:16:fc:2a:50:56:af:bd:1f:bb:5c:fb:30:67:46:99:67:af:58:bf:e8:9e:ee:17:62:4a:ab:2e:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Sockets.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Sockets\Release\net8.0-windows\System.Net.Sockets.pdb

System.Net.WebClient.dll

SHA256 0e2633248b9a89eabe8d0b58e2524e180e6d9d60790638812323d9d97dbedf53
MD5 90c4bfb2d7efaaaf1b2e6cc40f95fd1d
SHA1 3e06d4a25f7b346b8329771ed7cad3e4a0907fc6
SHA512 37f4f471642ec5bf3d86af4dfda199d1da16e514b2d336604c26268057afd8a083a36341a85f757f49c5096e5d263cb01b4864b14d69bfe99e479ab25baadfe4
SSDEEP 3072:JBKYQC7LzKlZIJ55jPp3OBp4Y3ykJ9rivVYGqss9vX:qI7yvIJP8pYYGBg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

45:91:84:2e:af:1c:1c:22:73:23:90:f8:6c:db:f9:92:13:8f:88:32:9d:ea:24:67:26:e2:80:a0:4e:e8:31:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebClient.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebClient\Release\net8.0\System.Net.WebClient.pdb

System.Net.WebHeaderCollection.dll

SHA256 9a433cefd55469e35cc10de49795f999178cd72b899ed6c807e4aabd80d97a68
MD5 de3cbafa80ecbe4cb3edfc554a46c702
SHA1 7e1e952fa437eac31ae68fd001f5f52fb599a015
SHA512 cf45012e25c95c3bdbb0a64e515d8edfddaddaa48bc812ee22a8ae3937736938e218e149bbdd457a612daae21ed9fd6a71cec7a3168c84c6492e2d4e28675980
SSDEEP 1536:d2Dwjiss+/40Yx82s88krahmqOwA83qJKAFE6WHKV6q6G22N7XK6RH4wqYXYsYSG:d2DMisVzYx82s88krahmqOwA83qJKAF8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b4:61:9a:50:a4:60:7d:a4:3a:3c:57:30:0c:0b:aa:a8:12:26:29:68:86:c8:93:34:36:35:b3:2d:e8:89:20:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebHeaderCollection.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebHeaderCollection\Release\net8.0\System.Net.WebHeaderCollection.pdb

System.Net.WebProxy.dll

SHA256 30263f349f1d31bfcf9bb66622327b9fd1c0dc0cdfe61e3c7f4f381e291f5588
MD5 007eee473377e877b896b3ca6728b7f7
SHA1 05a80eadc6b1b59f23557cac410285cb3a73a4d9
SHA512 7be1fbacc47618a895f1ebcd9939977a8b0305046112a585e70d0eafb9bb01ce080065362709873315d2c2fcf5fef1b0764c67646dd9c320415c38e440c9d8be
SSDEEP 384:83WWwW4JtK5akEvofGJgSW5DmsEbO0Ks0+bCLv+CT+LfyOMEi066gaiTviTb2HRP:8JKJW8eTaKv+gO/o6jiT6/iwz1R9zZLo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

1f:97:48:b3:bd:cb:7c:07:24:18:e1:59:c6:76:7c:73:51:64:f9:6a:2c:1b:ba:25:94:6f:b9:2b:17:c7:13:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebProxy.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebProxy\Release\net8.0\System.Net.WebProxy.pdb

System.Net.WebSockets.Client.dll

SHA256 f370af0d4e7139a39f34ea8658983654f7261890ce87605556ecc4751ed8e37c
MD5 afb31d2c07f923c3510a20e2920b8ff5
SHA1 ca45eacc534776ec323503aff33bb9bebdae68cb
SHA512 e45728211ce047e3fc82e7cd683b216971027c773a42d092da29f50c296db388e45fadde61b92c962308200f0d3f681ce80ad53de7346b6c09fcc8fe9a9daa6e
SSDEEP 1536:zj4Xlu9IUeDrstO3SgLXFU6+iBQO7beLLEQrFqiPzL:zj4XlDlstcU6+G37beLLEAFhf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5c:92:d9:6a:36:80:92:89:e7:22:72:98:f8:36:0f:65:3d:20:e4:16:a5:b1:10:71:5f:ff:e9:84:71:a6:76:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebSockets.Client.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets.Client\Release\net8.0\System.Net.WebSockets.Client.pdb

System.Net.WebSockets.dll

SHA256 36547da06bc59a97eb061758dba2fca0e7623aa99832a10860df2b028e84ef3d
MD5 da73c3453dc82d24b49149a5e9f20b89
SHA1 2759574da64e0f685a4e7f94add94c830747a7b4
SHA512 e22f01f41bf8b62c29d508471a48372ce564e00f088bece8ff4f655738ba1d8bab72ea7d72f3e5521ebc7faa99d9aa1a8ac3d88489c83f447fb68b2c16eb1506
SSDEEP 3072:t66pJtSquLyCK1QfRCctVyR3IUQeu0IeW+YwomEAawNYLbkbmvhkdk2I8mz31oMX:1pPfXYQzIeW+5oEmvhCj7mzFpX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

80:ff:95:ab:8d:98:3a:a3:ce:02:65:09:14:94:52:8c:bd:6c:98:70:46:75:69:fd:19:10:13:75:49:88:fc:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebSockets.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets\Release\net8.0-windows\System.Net.WebSockets.pdb

System.Net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b2dab5ba3d118a3acc6d6dece5e7cfe07bddf8aad3d69a8fa17608ec09eeb0b8
MD5 45f3040444b935349befcd1a5c3cd699
SHA1 e0fe347acaf71bdef7549aad7a13c2d77217a022
SHA512 f1d600f0a2b04cc5254d6112baea30783a4cd7fbe94f9fc0f7e4a05ae07b50af50a06c3501e77d0c3f7b4bcc9f1c7a92b4149c559c81f36b07a69772ca4b33cc
SSDEEP 192:xhpbcrkpKZyS3kCxAsrCWbVaWw/uWXebPpUNTQHnhWgN7agWwPSMe17weX01k9zn:e313bLmWbVaWETb2HRN7n6z1nR9zZial
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0a:1e:ff:a9:6e:e9:b5:49:73:a9:8d:25:fe:35:0c:7b:ff:85:e6:e0:98:0b:55:18:03:48:05:89:3c:18:1f:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12570

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Net/Release/net8.0-windows/System.Net.pdb

System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2466f7df763b191a6b4a536eae1016394d81e175fc53cefe56b8ce27459412af
MD5 b7adf99da15738c602df256e8a1aac4a
SHA1 ff98005dfcf40f876b618a599f227397f36915df
SHA512 8eb34d00f8149d688bd5efe2ffdc834f669fa8c30d4c265814647de78a55502805104ccc3682010b246d26d805004b188ab19ad59fc2e866103bbe191e2225ad
SSDEEP 192:7NC498iNxpWiBWruWXebPpUNTQHnhWgN7akWHkZD2X01k9z3A6wtY5dBEOW:M49jpWiBWrTb2HRN7cR9zXwtY3eOW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b7:01:88:4c:d4:a0:d5:2f:45:cb:ec:81:bd:d9:3b:6a:4b:d4:89:d2:4d:68:83:9f:1a:8f:9f:66:fb:9c:f6:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Numerics.Vectors\Release\net8.0\System.Numerics.Vectors.pdb

System.Numerics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0a21e822762d22093b81ca65d10ac23b7b88376b04a920ee7ba25b1131ef8d1f
MD5 34a024608adc2e21e104fe9e7517b2e7
SHA1 6fb0b9bc958c9ec87a571b0ab28b3c6e8cfc49f5
SHA512 ce857ddefcd38b47c393bcd66088ab16489447a90634bf7ab10298d7330397fa5540caa784fa8ab8a01824458b5e8d8afb2d2cd95088d51af4e27d054128864c
SSDEEP 192:uF7xahbDpW6NWTuWXebPpUNTQHnhWgN7agWApl+tZNKd2kQX01k9z3AOd0KXRC:E1yDpW6NWTTb2HRN7IvNNPR9zbKKC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

78:91:a1:72:79:26:5d:8e:07:a7:c9:c8:b5:12:0f:ea:52:a4:8c:fa:3e:e6:3f:89:6a:22:07:2d:54:78:1f:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Numerics/Release/net8.0-windows/System.Numerics.pdb

System.ObjectModel.dll

SHA256 146fe8fe2832b7132f175aa49e8aeed0bec968cdbcf8c345464b83765f16894f
MD5 aa782e3725e34d6dde6f4474e182b139
SHA1 149b6159f89679d329db75f2ccba5d78826adf17
SHA512 97780da2dc58cd27ae8501f6d9f5415f4d31f2bbb240b99d81b1d94e8348dbf324cbba2d80a2d26573c859b55c7415cddf50886785cec8c252c0ef4a8f70cd16
SSDEEP 1536:t3GEo0SQAGLgRCGfNaQSszWrHGP3VriKzrT:t1o0O6hQNgpHGPlpz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

12:b3:e2:14:90:f1:6c:47:5c:b7:c9:ee:f1:50:bc:e3:5d:5c:47:7d:28:e8:44:e3:af:76:c6:75:fc:85:f6:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ObjectModel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ObjectModel\Release\net8.0\System.ObjectModel.pdb

System.Printing.dll

SHA256 63236213fcdfa93ee1f87d96bdde12d035d4b8f1fd128ec197105ad55455cc8f
MD5 b25d6601de9e2ed1c035f7732d1aa320
SHA1 667b53299ae9c7dcdc3198956afde420ad198c17
SHA512 55c4a92ab5e296a89a704d8bb6eb0a71bb2c1d817bfe3567d0e9452dd6d4d3532e14b1ee3bc8f3e2ee506c4a22394301e77174e939318c0e090f967d48366c65
SSDEEP 12288:Zp0Y3hLDgY4c6RqvXsmzrfLjsKbAEYkL6o2Soy6x0ZKz4XMOKl:hhx4b8v8mzrjjbFopKxXMH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

de:9a:3b:bc:5b:7c:6a:c0:65:f9:7e:77:f1:78:16:3b:29:66:c7:69:96:1a:4a:ff:cc:1c:f7:db:52:24:17:3c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Printing.ni.pdb D:\a\_work\1\s\artifacts\bin\System.Printing\x64\Release\net8.0\System.Printing.pdb

System.Private.CoreLib.dll

SHA256 ba7e61a00e7a4634b5c5a79b83126f75580ceec235c613000c3efbc01826cad0
MD5 805cf170e27dd31219a6b873c17dce88
SHA1 ac90fa4690a8b54b6248dcb4c41a2c9a74547667
SHA512 fa946aae906b66cb5570155a1c77340f2b6d4efb9be16068da03a8f1c5b5f37ad847d65cd1416017db19375dc6a72670300da4c766e6d9bb1a00374f492bd866
SSDEEP 98304:a6hbjqh3fAh7Wn8v4CDC0QUQWvkOB1zworQsh1xx4sTV+T:jU9+7Wn8xC0QURkOB1M8QshGsTVK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

89:c0:f1:01:6e:77:03:cd:7c:eb:45:ac:a8:0a:d4:bd:31:7d:1c:36:f7:7b:1e:7d:54:e0:6a:79:81:80:23:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.CoreLib.ni.pdb D:\a\_work\1\s\artifacts\obj\coreclr\System.Private.CoreLib\x64\Release\System.Private.CoreLib.pdb

System.Private.DataContractSerialization.dll

SHA256 c51d9ba56cd22cfcaed04151490d41c8010d5c4b50c27ccc092f46519503019d
MD5 e2e614887c60ee3c62dadf2e3802af4f
SHA1 9c0fb6ea1a80f68121ec4074f8d8cdc24d738a07
SHA512 00a6acbc36562c9333af0b1cc9db9f20b3447e2c5007e8fdd4ca6803f0164b4557bddb55f2b7c476b21f4775f418c4aa824649e138a2c2159ae5853c25300488
SSDEEP 49152:qrBe1kqlNadqMiuuTBa6AJ19xOouLsr2DLRvyEejEN:qrB8AUwjEN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a4:87:cc:dc:40:3f:f0:36:69:96:05:86:c1:a4:2d:4e:55:31:4d:01:76:aa:9a:58:0c:bc:28:4f:13:df:e7:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.DataContractSerialization.ni.pdb /_/artifacts/obj/System.Private.DataContractSerialization/Release/net8.0/System.Private.DataContractSerialization.pdb

System.Private.Uri.dll

SHA256 a0504959a752fcefad6c790120f20d00a20dce109f0d80d16b2e071b468f4a57
MD5 62f0582a9640bf29d710494fe7a4d641
SHA1 2cbe7b7f78fe8208362bbe654b511c98b438c84b
SHA512 2ab859e29178d5b33a3bf3e4980e356a4f051db20a49a325ec2819af9b9ae0dd96f7c9ca35555341c1ae5ed0d552664b133022c8af86a5d5bcddf246f0c5cc91
SSDEEP 6144:AvEAtZfInBsy5xxuv1MG3ThMeVmtGH6ANpHyuet:ArnYxu9MG3GamtGH68pHXi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f4:42:77:50:3a:ba:87:0b:bf:d1:19:65:6b:58:ff:f6:28:94:fc:dd:02:90:01:3b:45:07:d9:f3:85:9c:34:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.Uri.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Private.Uri\Release\net8.0\System.Private.Uri.pdb

System.Private.Xml.Linq.dll

SHA256 0b63cebb991d1911a607993ea5b4639f34a2b0b381a73973542db2d3591e9f90
MD5 60ed8b2bffc748d6a2a1fed8fa923368
SHA1 be411429b9a649a495124558c5e5d95a83525d58
SHA512 b0a4ac2aa96d827258bb30f098512741ad3f93585e05ceae0255e15cd8dc9ab8048788902c1eb32a813e9c69c8a923200a716b4e00f579c22a0b425665e575f8
SSDEEP 12288:RB4u5QpjGcWeI02RrmBHrxFxskCxxvM0ksSY+jiiQjqo+c9ukM/lr1MCsY/b/Upl:tjskufb/6n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

76:88:92:98:6f:1d:49:49:09:5b:b1:c8:f6:5d:1a:3c:f9:c8:b0:7c:99:8a:37:e7:12:f8:d5:c8:c1:8f:58:b9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.Xml.Linq.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Private.Xml.Linq\Release\net8.0\System.Private.Xml.Linq.pdb

System.Private.Xml.dll

SHA256 834e304221e742a831be5c5178892258e689eae35b730172e74161af2785aab9
MD5 46aebfbd6d7e74d4d558da62d7600d25
SHA1 9c1cd44ab8b5e283967427e91cbddddfc0c2bf5a
SHA512 9c4499d174a988cc3830aafcc42f79defff37b16198f49cf5d2dc86f88809fcb44e0c300351f813d46addf9998f64448c50213f1721c6a307aad21c205db1524
SSDEEP 49152:onM5xWhkw8hllFc4uyv0zy+YPyoJry30cfFIa9mYMJPG5W3tvy+4XRHwL2NOAzso:on0m8NwA1ufFeAQLRhYw2t50xqcFK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c7:69:31:e6:7c:50:62:1a:b7:33:b0:14:20:0c:05:2e:e8:70:fe:bf:cd:97:1d:67:79:2e:ce:57:97:32:85:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.Xml.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Private.Xml\Release\net8.0-windows\System.Private.Xml.pdb

System.Reflection.DispatchProxy.dll

SHA256 58d17e148885cca19cfba9335f08f2b70c46b333fe7fcd4aa769ef22c80344f8
MD5 b188734745ecdf05c7557073710fb283
SHA1 98c2a89d50112b65e981254392ec25306acc1acc
SHA512 a58b1021509f4f095ea440c59b2c4adbf1f39e3ad0ef88014c6aa0380e18ae46b9b7e4a79ddd040739197ba354d9112b1cb5e93bda35925e223429a09a0002f6
SSDEEP 1536:Cj2ZUaMzwZ2eNv+zWMuSxRcHJRZYoqtxJmWi7+zj:CqDMzwZ2eNv+LxRcKNtlP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

49:c6:9a:2a:05:9a:2e:aa:ed:68:cf:a8:e8:0b:62:dd:36:09:b4:39:e9:74:b6:4c:13:2b:32:80:3b:77:11:5f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.DispatchProxy.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.DispatchProxy\Release\net8.0\System.Reflection.DispatchProxy.pdb

System.Reflection.Emit.ILGeneration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 879b6c4221cb2bf24b79abca0709b2919904d8685fff5a69220fe6c2425d4112
MD5 0332c7e8e9a330080d6f0fb6c9b17b3f
SHA1 f168f25ccade467fe0efaac6ad2a09c1f2cb783b
SHA512 c3c4026d41f4e7832bf94e921fd6937918001fa98c52c5a8c115b5d538ad348425e290d93187af4779424b8142aca9b8bbfb6c5a1493ff2be655a2637b454512
SSDEEP 192:FW7x5WGUWnWzG3WT56Os1HnhWgN7acWfXCqG8Xp13s5yX01k9z3Agrf8uWdQ:MV5WGUWWzH5kHRN7UcYR9zPrf8lO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0e:bc:9e:4e:75:8d:f3:5e:a8:ae:4a:26:2e:15:3d:97:b7:1c:12:c7:89:8b:1d:85:a7:43:37:14:bd:5f:52:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit.ILGeneration\Release\net8.0\System.Reflection.Emit.ILGeneration.pdb

System.Reflection.Emit.Lightweight.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0518f171d45803ce07a79b27eb65e5d3277b711d15c8d2fd5964e044167db49f
MD5 23120034a510d234c79711940d1b809d
SHA1 1b1cb29537a8b78279909a794159fc4c70174430
SHA512 99af585ef71ff917d4c77f46b189cc14d1cd4efe9b35e6c33d0eef8112158574c8fb417801cf5207e412f7254de1a8cd789e208e17f01cd19ebafb7b133afd2a
SSDEEP 192:9maHxlmYWrVJWXluWXebPpUNTQHnhWgN7acWJ1KBwUoX01k9z3AurHNB9R0p7:TlmYWrVJWXlTb2HRN7w1KUR9zDS7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

47:f0:d4:b9:84:45:be:1f:62:e8:f8:d3:62:1f:df:66:1d:bb:8a:3b:e4:2e:82:85:91:3f:35:9c:ad:03:7d:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit.Lightweight\Release\net8.0\System.Reflection.Emit.Lightweight.pdb

System.Reflection.Emit.dll

SHA256 ffb6875e3cdca828dec3e77b5605ff7ba62237ef194125b1b7baf2dad3440e7f
MD5 97a7e23add643f4f533a6ac947249c56
SHA1 df20789d81e649203ed0ca290028b84e2c7f98b4
SHA512 ce6e7534bdd8c7d9352fb4ce9799c590c84be16d0b0b67e5750fc302ae893e2b4a0f8b212ee24cc3aafe2e9ccf02aaa625092780e0747be034a91dae7b7333c1
SSDEEP 3072:5o54a2I4SSYbKatKLd0sVkrcv0QBR7G7R:9QDSS+esu5Vd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c1:a8:d9:b3:ac:f8:58:28:4e:a4:95:81:f0:13:ca:64:75:da:76:21:1f:23:3b:fd:ce:f6:c1:5f:8f:a2:9e:fe

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.Emit.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit\Release\net8.0\System.Reflection.Emit.pdb

System.Reflection.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b36cea647d3878a65d3a8a9b67a6e0b1c5d0c1e917cdbe8292a6c03516299630
MD5 cfdd295029f5011f3982b772e1d0a624
SHA1 c61c80807b8df031781717454c2967c94eff6442
SHA512 aa63f2691ee1c71e3a0e2c21df46a5425b62ae1e39f408156beb28770d95dd8ebf5039e066dc05305375bc811b17b3233d2745af71f6053e2cd2974133eee1b6
SSDEEP 192:rj8XzyhxAXW7WWCuWXebPpUNTQHnhWgN7acWvn+p13s5yX01k9z3Agrf8NEoAuY:rYDyr8W7WWCTb2HRN7oCcYR9zPrf8NAL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0d:58:09:90:59:8e:59:3b:40:a0:38:17:60:91:2e:24:e4:f6:8d:40:ed:40:b5:ab:09:48:b3:ca:e3:d5:23:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Reflection.Extensions/Release/net8.0-windows/System.Reflection.Extensions.pdb

System.Reflection.Metadata.dll

SHA256 76431a93ec79dc8e4065b13631fbe80f4f50ad5d4bb58bc7d05c8059f06f4883
MD5 875bef0340276600bdf69c9f1b3f2dc8
SHA1 985d2c85fb3c5db12a405092464c71745668e3ed
SHA512 0e56d177b0ab2607e6f59e6f4f8c3efa0b9c76a5ed1fc5a5adb3747ad652514babb5b397d1fbc9a70a66d90a7841ad1020da58026500be21a62e7367a916c5e7
SSDEEP 24576:3m0B8V3X3yR6UROcOWmT/ilzmGWFbqWCgX:3m0B8V3X3yRJYP9GWZDX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

af:d4:ca:dd:2a:9e:a6:ba:5c:53:7b:63:f2:4c:a8:5d:86:db:04:5f:e6:23:a1:70:9b:a1:e2:ae:13:f8:9b:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.Metadata.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.Metadata\Release\net8.0\System.Reflection.Metadata.pdb

System.Reflection.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7769658065897653651107e0138f6bb7515932886374ba11833176a931411d7
MD5 579b0fcf2dfe1a1250a0ad29ed54b1f8
SHA1 2157ad05803ec234606bf7e547bf644021b4f6fe
SHA512 2666a0ac8591905af580afb25163485d773896d38de5f6a04b571103a821d7221d0e60ccee7752740e3465015b6bbea306e5fc9634e4c6c46b2d0c9d8da4c9c6
SSDEEP 192:4//C3xqWL+WauWXebPpUNTQHnhWgN7acW+PBwUoX01k9z3AurHNBPdkJ:iWqWL+WaTb2HRN75UR9zD1kJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

58:46:0c:ce:16:8b:52:0d:88:26:eb:04:f9:2c:5d:45:1f:dd:05:5d:03:fe:0f:c0:62:aa:d8:e4:37:cf:ed:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Reflection.Primitives\Release\net8.0\System.Reflection.Primitives.pdb

System.Reflection.TypeExtensions.dll

SHA256 0e4fb580b585eeee5b5320355db8c4272c50d7bb020a78732ea00b27d893beff
MD5 cdb9345e660eb8f1f2af43ecd036ead0
SHA1 14a1f4ff60a3349aefdbeba93748a702f9be378e
SHA512 8473c1e42aef319d933019c39ac4954de09e0822b81b5cee3ba0e3904c859027e0d576b96ad970e4e843e8c37dba49c4b9292e9319d9dab5add091b154bd7e95
SSDEEP 384:xWneWmx1Yc9PuTNtyVQ0a+SKcD9t9jRhTb2HRN7DZUR9zD2h:eAGc9WTUY+jcBb/iD29zw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

90:95:ff:36:8c:62:c9:2a:30:3f:2f:60:48:57:5d:b6:69:43:de:0c:df:1e:3c:3f:45:43:49:e4:22:06:6f:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.TypeExtensions.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.TypeExtensions\Release\net8.0\System.Reflection.TypeExtensions.pdb

System.Reflection.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 76c4618ad413a58601a1ea8277f76e41123e70d3bf55ec2102ac11f992fe07aa
MD5 3b1fa07415ed72d06b2732c4fe4fffa6
SHA1 63bc0946e4bd8c20ba001e96009e1ef2799e9068
SHA512 44687c4423240d17c433990d39f03b4e5d41f07a71c836e8a1148bc0ca434c3253b97ecdb626c2ca1ebf611e90615b58a73a8674b3294d31215bab10cd6a74c1
SSDEEP 192:1eCkHQKBhxAmWoCWAuWXebPpUNTQHnhWgN7agWGxhjepVWnSX01k9z3AYngEg5T:1jSrxWoCWATb2HRN7hrjezWSR9z1gd5T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2e:e5:85:6a:fd:d0:ca:f1:55:2a:cb:ff:71:54:48:54:34:ad:2f:ac:fd:49:cc:ec:2a:68:d6:f9:1c:6c:63:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Reflection/Release/net8.0-windows/System.Reflection.pdb

System.Resources.Extensions.dll

SHA256 104c19772d7bdcedb3cdf9db26c96fd480055c0a9178bbae013cc81b8875b7ac
MD5 9c0adb8a9be0bb7cb2c68bf21624e13b
SHA1 dfafe10e447b9bf3ba6bac1bd47dd6247f494dbd
SHA512 b769af41c67aafcaa071a453298938b829ddb6753b57badfff186695c36157dde22c70f17f38d5dcb6a73b5de664bf4759f4084190378e70f45e4015d3961693
SSDEEP 3072:Qe4+LlocCEKu623YIBbLQ1M+6yREGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGR:S+LlOEz93Leex4EGGGGGGGGGGGGGGGGQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

09:61:58:b3:6b:0c:e8:ac:70:a9:ff:39:1a:82:38:e7:14:b2:59:43:34:0f:64:e6:d7:c0:ad:21:3f:7c:a0:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Resources.Extensions.ni.pdb /_/artifacts/obj/System.Resources.Extensions/Release/net8.0/System.Resources.Extensions.pdb

System.Resources.Reader.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 044bd598f1f94f8711374b5994d73bc6dd794ea2ee6793e64545c78234b21909
MD5 29837fd636470e6880af58cc72d2fc97
SHA1 716bb15eb509959448f427906c1bd2f9bd71f826
SHA512 fae840eda55d86a06e0a23f81cdbe83b9b29a88f050d5f9e23bfd75e324cdc95fd62767670e4e81113458a0bb6ae7767e97b0a68466a471662837a2cace8fd39
SSDEEP 192:ZhDUxAZ0WS3WOCuWXebPpUNTQHnhWgN7agWxTnfBwUoX01k9z3AurHNB1Jseo3:Cc0WS3WOCTb2HRN7QTfUR9zDY53
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:8f:cf:d1:1f:bd:c2:a1:0f:53:d5:c0:cc:8e:d1:42:88:b6:45:ee:a8:91:4b:36:23:67:88:68:e7:52:bb:2c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Resources.Reader/Release/net8.0-windows/System.Resources.Reader.pdb

System.Resources.ResourceManager.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b8c0ea60cf2a246f9d2f33a9e91f68cecfd27733ba635da52883c926ec6cb8c1
MD5 86da82315b4019495dfb9010d075358b
SHA1 43be784a95b9d28775933bcb9bf80305f609de58
SHA512 4df6559efc762a521d4e25f6201d73a599f8db58e54a0f8966053fc904fd4d57b95eb675a7f74ce6e373da81e3c870d0a07baa8356a5a51ef0e2f7ca1509509b
SSDEEP 192:R2tbFxADSWXzWGj3WT56Os1HnhWgN7agWfIw+pSZNKd2kQX01k9z3AOd0NUWG4f+:RGvESWXzWGi5kHRN7q0KNNPR9zbKNY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:09:9e:3f:39:ab:fa:35:dd:2a:4d:fe:11:f1:16:8b:c8:b9:12:be:9a:d3:90:78:2e:e2:47:82:22:78:87:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Resources.ResourceManager/Release/net8.0-windows/System.Resources.ResourceManager.pdb

System.Resources.Writer.dll

SHA256 2a26bbf0d67733d1172b9de12815355e87378d068a6254b18208499d59664465
MD5 6664c41fe2fd8241d58ef8757256aab7
SHA1 b9c4350723b11d6ed963eb07c26b209d3b98982f
SHA512 acb9c0e327c302c90e4ad7b6c90de0d6a2183d7df617a654480410b2fe95016cb258c8e810ab31ce7113df5169cae22b531e8a94773d0671cf84fac96a6e8fae
SSDEEP 768:4rK32Xbfi171RsnV93p2/3L04If/inwp9zpH+W1:4uGrf871q952z09inwLzE4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

20:c8:7b:05:0a:73:e4:a3:c0:76:2d:32:eb:e4:85:46:90:fe:d4:b2:4b:ee:95:9e:b9:9e:06:a9:70:e9:27:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Resources.Writer.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Resources.Writer\Release\net8.0\System.Resources.Writer.pdb

System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 00dbf150d516499def50b7d89b9c301abfb41b6f411cdc7b6910ef23910a4b71
MD5 a055ea1aabdf03cd8e631bea473dc0d0
SHA1 c1dee4fc598a9940bee0c4a60960bbfd5f490877
SHA512 8aad700decf72753e66c383ed47b2884683eb670173ebd23dc7fbbf9e1a7e48be43891a671af114ba54c740e76f2b239d1db978acfd4c8b888e6f35ac19d43df
SSDEEP 192:C9xAu4NHuW12W/uWXebPpUNTQHnhWgN7acWXNaDrwLobDX01k9z3A5VWEZOlvO:GioW12W/Tb2HRN7ENaDMyDR9zGVWESvO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

08:35:49:1c:a6:a5:bf:61:f8:f5:d7:0c:26:53:f8:c5:7f:e2:1c:b8:0a:36:50:fb:c6:b2:9b:4d:13:33:43:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.CompilerServices.Unsafe/Release/net8.0-windows/System.Runtime.CompilerServices.Unsafe.pdb

System.Runtime.CompilerServices.VisualC.dll

SHA256 ab66ab297c2fe53bd991cb21086f5ae94d5fe6693545388f49da1c5f095421ed
MD5 1e283c67bf09ee973043faed22195111
SHA1 57d76b78f1c53c272f8e45769d8d86825ab0c9a0
SHA512 3bb87f3dd69596abca09f8150ba78f194c1b143a83a8e261614511050815249ec8d8499bfde3c4de5327006a56061dc462712354a30221e920651fedd09a3940
SSDEEP 384:ZWiLWrO5oR9Vl+Tb2HRN7dg131AqR9zdvMx:b4z9O/ieVr9zm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

81:ee:08:82:7e:98:59:dc:7d:bd:f5:ad:65:1a:86:5a:44:67:d2:ab:86:e5:8b:d1:b6:9e:8e:35:67:8a:c1:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.CompilerServices.VisualC.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.VisualC\Release\net8.0\System.Runtime.CompilerServices.VisualC.pdb

System.Runtime.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a925c3fc617a41b040770f9f8d5d7305ac68f2894c1cff8caba79eeab4ec9741
MD5 a50f9099553aae450b6cf85ab565e4fe
SHA1 893d7a9136a7a2f288763dc50c6723240199de82
SHA512 1979d4b8d4f1f639e099d4198dc3954618f5c9cffd21c771789854a53aaa5aaa4ada0b07bb244ed042ed1a0db01b2aad994b04a876b676658edaa0a82bee74d3
SSDEEP 384:aRSj5rt9x+6YhWwNWETb2HRN7cyVwR9zP1M2:aUj1tfYFt/ic79zR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f5:62:51:93:6a:51:0e:53:48:75:2c:81:83:23:86:e1:88:62:eb:ef:f9:7b:51:93:33:7c:96:5f:9d:2f:46:a9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12850

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Extensions/Release/net8.0-windows/System.Runtime.Extensions.pdb

System.Runtime.Handles.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 05e1e149bfa283a815735cbb7ed64c82b954ebcea08b30e467b0906f2cbd4590
MD5 897123bf0fdc4de15d88a3de635cebd5
SHA1 c67128ae9e3e866857eec33e4c95eaa7285fa93a
SHA512 c90039f7c4d7f7d6f8ce2ccf68cfe146de4214e5d8f401a2c35b07f17fe20abdca32e0e86d9ccd3da1d99716c4acdebceb1200764d09c234ebfe5e8496c7af86
SSDEEP 384:40fCoZjRIIWlmWoLTb2HRN7jjezWSR9z1gQ:JKoZaAL/i/q9zS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5c:8f:79:43:11:83:af:d2:33:fd:c1:ac:02:6b:a5:b2:e2:03:41:41:ee:31:0f:d0:43:7e:43:7a:7c:75:ec:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Handles/Release/net8.0-windows/System.Runtime.Handles.pdb

System.Runtime.InteropServices.JavaScript.dll

SHA256 10c228a2d707017f9a2223f53c45f7f4f944413943f81e4d6a0f4e705c607971
MD5 400b703e647b6e00136c6ad46931c412
SHA1 a91cee622478c68c4fdabeceae28a45b73632992
SHA512 533868538f03f5476162a6a02ceaffb99adc6a554cc30bae3818b83089d22f843cced93fdadddf000dd79f98ac44905acc48d59158e25bcccf32906448a7cd93
SSDEEP 768:XExGMiFMwIIDRptGdwWxroe+MH18h+k710b52j/iDr9zYzYu:XEwMiFMwIIDR3GwWxUezVrkCbEiDBzYt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

03:be:ac:fc:66:cd:82:dc:74:3f:8f:82:16:20:d1:b5:a6:a6:b2:86:6d:67:4f:9e:ee:14:d3:1c:c3:c7:69:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.InteropServices.JavaScript.ni.pdb /_/artifacts/obj/System.Runtime.InteropServices.JavaScript/Release/net8.0/System.Runtime.InteropServices.JavaScript.pdb

System.Runtime.InteropServices.RuntimeInformation.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f8844ff48645c87a3e89a3fdf45744d8c56560f781331b8c29ea1f74a6b469e4
MD5 c5c22c69472340cdb6430c2245d37b7b
SHA1 6bac1108d0eb7a29016c9bc9263dd9659e7428f8
SHA512 a7a3e9259c1366436c1dba98d0968d4c42cc268bc60500776b3045b118ceb085fb83a83aa243c9039cd4e01031f8acdde5592077eb5dcb4c55aed27fba0c1def
SSDEEP 192:v7e1edxA9WoUWf33WT56Os1HnhWgN7agWfChoVd5ZNKd2kQX01k9z3AOd0Ol:vCUn2WoUWfe5kHRN7zhINNPR9zbKOl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8c:8b:a0:0e:44:52:a5:75:6a:bb:90:25:8c:d2:f4:51:0f:58:81:a1:69:2d:db:26:a3:b6:6d:a5:85:6c:4a:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.InteropServices.RuntimeInformation/Release/net8.0-windows/System.Runtime.InteropServices.RuntimeInformation.pdb

System.Runtime.InteropServices.dll

SHA256 756de3f5f2e07b478ac046a0ac976b992ef6bc653a1be2bb1e28524a4ff8d67d
MD5 49c86e36b713e2b7daeb7547cede45fb
SHA1 75fe38864362226d2cce32b2c25432b1fd18ba37
SHA512 a9bd42b626158c540be04f8d392620daba544a55b7438d6caefe93b9df10ec2219f28959c4e0d706a86b92008275de94dfdf19de730787cdacf46d99fc45e3a9
SSDEEP 1536:NcryyBJoyoyGXe5CtLey6+67NrpnSPM+l5+KkmV8KSHycz5:NJySO5CtihdSPM+r9kmWdHd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

60:7b:c1:e4:7e:e8:e1:93:e5:94:3b:3e:93:47:c8:d4:09:34:8e:d1:2e:d4:54:4f:d9:72:1e:f2:a2:fb:87:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.InteropServices.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.InteropServices\Release\net8.0\System.Runtime.InteropServices.pdb

System.Runtime.Intrinsics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9b099bddf07a320ca7469b510e1f4e75b832d2943fec67cdd0b7f86cc82df10b
MD5 d4049100ee188f29afefaa071df4a75f
SHA1 870da8b7f36bda7a884b38eeab97f0866576be23
SHA512 020d9f0ab51c389f269095809c027c25bfe6f302d01e573700110baf8674b8f51bff6af532b9079a24e997026f401614e1952c93951dd4f84380a1147580fad4
SSDEEP 192:qZYQZrDknWgLWkWk3WT56Os1HnhWgN7acWfKBwUoX01k9z3AurHNBoqY:qqA3mWgLWR55kHRN7PUR9zD2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

14:3d:86:f0:4b:39:1b:8e:05:ad:ee:3e:37:53:cb:1e:dc:3c:a7:d7:e0:26:32:e6:4c:23:f5:88:43:d3:01:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Intrinsics\Release\net8.0\System.Runtime.Intrinsics.pdb

System.Runtime.Loader.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 74c28217bd8e552b2da262625a5397d37ddbcd7311927f04755baff630c1a2f5
MD5 db6a9d1c0bad50e0b7280e824d779bef
SHA1 576e303188cdd3edf8cd4565ba8b895e039aa183
SHA512 96efb41cc9184cab7b4dadab312d46421e02a0ce3b409859c32c96cf03e2f41e86517586e8fef6f67f4d98e519e41b4ab48611e26b9885e0460e86504b28776c
SSDEEP 384:bnJlyxW8GWiTb2HRN7tIDMyDR9zGVzIEq:bnJly5q/it49zhd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2c:35:a0:33:e5:51:64:7b:3c:44:96:2b:d3:31:b0:dc:a0:e6:15:af:18:aa:65:9b:64:19:1c:c4:d1:c6:6f:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Loader\Release\net8.0\System.Runtime.Loader.pdb

System.Runtime.Numerics.dll

SHA256 c0c6517acd412088f9fa410dade8817b816e0c38eb856a48c008d4124369560d
MD5 ea5dcbd6e353c362760bf1e27d5a855a
SHA1 429076d24f656d942311bd6de42d0c63038e7f4d
SHA512 7310af413a16de6eb45b72e5b98e2adfc93a308809de56418d0226d70450b9733d7be717cdb32b08ff5be0c5dfd5a7b55b13f71ba55599fdb8cf45d89fac7c39
SSDEEP 6144:oX7UgK2UfFr61EFM8Sx/mPue+GQV5ODGt9dXIKc2C:oX7STfFr61KcUsV5OSt9dXUT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ba:9d:da:92:7b:e7:ea:93:a9:de:01:5d:6f:83:98:a8:3e:b0:08:df:d2:7c:4b:93:ca:ee:fa:f1:c1:be:99:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.Numerics.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.Numerics\Release\net8.0\System.Runtime.Numerics.pdb

System.Runtime.Serialization.Formatters.dll

SHA256 c7004200a63c8942303679e1c7b77bcdaff516b7fcdb2c0b85b12115933d1b10
MD5 2150028537b3487b6fdc6aae970492d1
SHA1 9978285ec2e62783e066dbf3d0176351cc125ba3
SHA512 1f6e17ad44fa38e6a7ac443fa5016fb853f134a39442c1b3972a42c7e74decf33833a8da3a6d58a8a092b04436ab1158b76700f110f95d32d4dc8da99366bbb4
SSDEEP 6144:kVw42z700KWeVw+06LKEcnJHWBftO2IP1Ss9CH0zll:ow4W70z506LDcnVWBfkz9S0zP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2c:af:c9:64:f4:fb:65:ac:3c:ef:b2:af:b3:49:b9:7d:0b:8e:17:f2:2e:28:cc:8c:45:dd:50:e7:01:7d:4c:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.Serialization.Formatters.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Formatters\Release\net8.0\System.Runtime.Serialization.Formatters.pdb

System.Runtime.Serialization.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8afeec62e6edecd8fc1908ef0cb7bd91f6514826621010510d54a4535e776e9a
MD5 27e3e81a4ca283d4242fbbe0a1bdc663
SHA1 10052a8957d0de0f5194ca0979914a74d68e9741
SHA512 c80db2ac78d3e2ee9f2c3389f0a1e8f00baf82da431875bf6d27c2fb7e986000c681315c7668e674b43403bfbe9bbc60ced4722f712bf2eb7f7750ec68224025
SSDEEP 192:8TBOg4xSRVWbCdB5WxhKuWXebPpUNTQHnhWgN7acWCCqBwUoX01k9z3AurHNB7vH:8TBK+VWbCdB5WXKTb2HRN7FUR9zDr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b5:f7:49:33:5b:51:52:ad:f0:bc:e9:bc:86:22:a8:0a:ee:df:1f:f5:0e:39:4d:98:df:d6:41:06:2e:4b:13:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Json\Release\net8.0\System.Runtime.Serialization.Json.pdb

System.Runtime.Serialization.Primitives.dll

SHA256 2a30cbf5dde707b4d360ae56b9ca214603e0fcc643aadc408f373ce275ab761a
MD5 3eb993c944362b319a5d7693513d88e2
SHA1 3fc79140c63447f26d9a95059d51f0e5c0202b04
SHA512 e48eb9e4b1206a5449fd56da2c65ad6e6b0bc6d46f0f6fde45b789a8485d00418661990956428e6648260eb4e5c91851b7ed1a1053d30a3fc5a7c65fa68117ae
SSDEEP 384:oHWFOJBrWlMHkh2HE0ue4q+k+arsXwR9pnUkO2akIGt6HHDEax10JhXrTb2HRN7U:oqOJBkEDsy9pnseXj/iNbYi9zraWU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

72:4a:62:73:bb:37:cf:70:33:59:64:53:4a:e5:80:d1:91:70:ba:23:79:06:f4:12:d6:22:54:ea:2d:4d:14:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.Serialization.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Primitives\Release\net8.0\System.Runtime.Serialization.Primitives.pdb

System.Runtime.Serialization.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 84b02510a56caf396163fed522ad8db6c54222b492f577a8fe18334fb507cb6a
MD5 315bf523eeb4b3dc67c164750c3dd3a3
SHA1 d32138cc8dcbc2408ab19227ab439c43a2cc4164
SHA512 810070e08e90b57fbf923468cd65896a1ab08dbf3d084c8ad6c3525e10b3843bbbd785dfe41c8a3525ac1b2050ca2f537d9287eceac51cd771758058afb45cd7
SSDEEP 384:akrZI8NQeMWs2BBgW8Tb2HRN7AY+R9zF1aQw8:akrZI8NQei2BBG/iAYi9zraN8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

11:d4:04:5c:5e:7c:70:79:14:a1:a6:39:63:62:95:be:10:aa:1c:b5:e5:88:dc:e1:a5:ac:99:1f:1a:9b:88:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Xml\Release\net8.0\System.Runtime.Serialization.Xml.pdb

System.Runtime.Serialization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 06edc02b3413150ce4a19e4cef5264d114b218aa774e8a2c78aa631da785bd60
MD5 1177cccbbad1e97f1bf37fc5f7ccd177
SHA1 f887521d4c7f86ea5d51a390e41a99f20b074a36
SHA512 4a3c47c2a7bc35056286b4d4902df95bc14c9ce5d0e5656046dd5a4ccd3daac8f7f7b7697f70ad848e76622dfe6392385b083c07ef14e61d19f6b086d1c2a9a8
SSDEEP 384:U6X52tNCj8NqhLWgr4BHWpM5kHRN7vTNNPR9zbKG:3XUtNCj8NqhPr4B0Jh9zT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:8a:6f:87:7c:20:70:e5:99:66:20:28:84:cc:23:35:a7:26:57:0d:ea:75:ff:9d:a7:af:b3:fe:bd:4a:21:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Serialization/Release/net8.0-windows/System.Runtime.Serialization.pdb

System.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1fc86ada2ec543a85b8a06a9470a7b5aaa91eb03cfe497a32cd52a1e043ea100
MD5 53501b2f33c210123a1a08a977d16b25
SHA1 354e358d7cf2a655e80c4e4a645733c3db0e7e4d
SHA512 9ef3b47ddd275de9dfb5ded34a69a74af2689ebcb34911f0e4ffef9e2faf409e2395c7730bce364b5668b2b3b3e05a7b5998586563fb15e22c223859b2e77796
SSDEEP 768:e+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoDL1:iB/LuYdy50b4b7RSHr1nidzU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a2:0b:8c:e7:2e:55:30:49:0a:a5:e7:54:59:02:35:88:a3:d9:ac:d7:01:77:3d:50:b0:fa:65:43:22:1a:8e:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

38894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime\Release\net8.0\System.Runtime.pdb

System.Security.AccessControl.dll

SHA256 03f6754c0b61dc5c021f86e264885a23b0f78e86720b9e87a78a6f4e2a49c6b1
MD5 d72cb2eccccfea191198b02fc44f6fef
SHA1 ac232d0eb0b624af593817774c7477ee3a7b0c3f
SHA512 019e063edf86c355faa1cd66f897fb594af063ae75e3bdbc6cbd5cfae5ecd7d617e92fdfe705ccc25ed6df71c8954f8ac1a93c3a5c81496e5307974b27949e08
SSDEEP 3072:MBMLDgwbcl9Ff6amcmMw+GQraV8/6Xe9QF+wVkjoZktAautGA/+PXHz:Bgwbcl9hLmM/GQE9pWfT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f2:ca:d4:8d:04:80:81:69:18:89:5d:88:b3:06:58:e4:74:7b:d9:e6:62:f6:36:5e:13:5b:26:c4:0b:b5:05:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.AccessControl.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.AccessControl\Release\net8.0-windows\System.Security.AccessControl.pdb

System.Security.Claims.dll

SHA256 841214267e1fdc2dc03cd639496550d8e2f10dd11835bab49f0c97f113f884a8
MD5 b14c5183cb8383e8b6c8a84a43635f3f
SHA1 112ae56fb863113aa427d76abf0e65486074a259
SHA512 381facf8cc645d26af5aac146d7ddc17cb9075bf681deaa2e49c7ddf3ab3bd0cbd0f9cc37747754c6a44ea44908e8dd641450b3e6ba1af1a878639be41f64287
SSDEEP 1536:tr076mOOm6n1kM0X+bX5STuDQ76O/UUxOQwQ7rzUU3q2bP6JLrSj7nieXBzRP:tYUV61kMK+bJSTuIXQXSXJB9P
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

3f:a2:9d:c4:1b:5a:72:50:fe:7f:47:b4:b4:27:33:ad:26:db:b3:00:6f:f6:a7:b0:29:fa:f3:b5:5c:b3:c3:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Claims.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.Claims\Release\net8.0\System.Security.Claims.pdb

System.Security.Cryptography.Algorithms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c99c6b384655e1af4ae5161fe9d54d95828ae17b18b884b0a99258f1c45aa388
MD5 8f3b379221c31a9c5a39e31e136d0fda
SHA1 e57e8efe5609b27e8c180a04a16fbe1a82f5557d
SHA512 377f4e611a7cf2d5035f4622c590572031a476dd111598168acea1844aaa425c0fe012c763fbc16290c7b32c6c7df7b2563c88227e3dbc5d2bd02250c9d368d9
SSDEEP 192:yV6aEqCyxAxjpWiBWquWXebPpUNTQHnhWgN7acWjd9ZnAOVX01k9z3A+vEvRLY:ysVqVC1WiBWqTb2HRN7k31AqR9zdvAR0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f9:f4:30:ec:e5:24:aa:8f:f3:37:ef:8a:25:0e:f6:fd:2b:96:13:b4:f6:5a:55:c6:bb:e5:73:86:7e:71:f6:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Algorithms/Release/net8.0-windows/System.Security.Cryptography.Algorithms.pdb

System.Security.Cryptography.Cng.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bc40aaf5f15dae506523948029e164709cc73a39fa7831572276a4de75561931
MD5 501c1a58eb5423d8840fbb0245f6388e
SHA1 0c82a46b138ba9cc6f720a65265268f947857008
SHA512 8fe3fca1f9909a3b19b785b7da09dbf4386f64aa6d1c1cfb8f51dbdc2d9c6396889dd9d58f301c21907e3349e2fdec7df862be362762df880f6e6d40f0def531
SSDEEP 192:eVJAxNaH2xA4uWHfWduWXebPpUNTQHnhWgN7acWr4BwUoX01k9z3AurHNBZc5/e:0FH8sWHfWdTb2HRN7pUR9zDpco
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3b:b0:69:d0:11:8f:db:cf:1b:66:f6:05:84:62:a1:5b:31:f2:a4:dc:54:e6:99:9b:f4:23:42:b4:e4:97:7e:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Cng/Release/net8.0-windows/System.Security.Cryptography.Cng.pdb

System.Security.Cryptography.Csp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 16bc1f72938d96deca5ce031a29a43552385674c83f07e4f91d387f5f01b8d0a
MD5 c7f55dbc6f5090194c5907054779e982
SHA1 efa17e697b8cfd607c728608a3926eda7cd88238
SHA512 ae0164273b04afdec2257ae30126a8b44d80ee52725009cc917d28d09fcfb19dfbbb3a817423e98af36f773015768fed9964331d992ad1830f6797b854c0c355
SSDEEP 192:qkbUikV/AvcaTAFCwxAFUWntWouWXebPpUNTQHnhWgN7akWpSongqtVVwX01k9zC:ZbUvYUWntWoTb2HRN7aVwR9zP1NO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ad:1e:2b:35:a8:be:dd:75:1a:6e:23:a0:15:50:fc:25:20:b6:cb:a1:f6:5c:7f:3f:fd:c3:b0:ac:3e:e6:14:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Csp/Release/net8.0-windows/System.Security.Cryptography.Csp.pdb

System.Security.Cryptography.Encoding.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 441969fc823cd5af288cbef10eb213267e57eb5f6e80292b3b76c3839566c334
MD5 a250b008424d0b2a1998a6099dd9ac41
SHA1 0d593204a4e6cd68ce1154079307c423f5ef1acb
SHA512 e056e2e0245ab9aefdbe7acb266e30ca4d2368e28a21d0a5b1ba4e28eacd1eb3ac03b106c075e8db56f9c455a7fb0bb9ec497995c56235c40c289d6e04e973eb
SSDEEP 192:drhZy8V1zosxAtJjtWsWWKV3WT56Os1HnhWgN7agWfGZNKd2kQX01k9z3AOd0eZX:5zo6WjtWsWWKg5kHRN7TNNPR9zbKaX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

60:d7:d2:0f:07:ee:3d:59:62:03:f5:61:76:81:b1:f7:11:a7:a5:fb:94:10:34:d8:12:fc:1f:a3:89:d7:a5:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Encoding/Release/net8.0-windows/System.Security.Cryptography.Encoding.pdb

System.Security.Cryptography.OpenSsl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c07132f6ab018cbee5503fa1ff87570de60214b664d3396017fef7af38223671
MD5 f918fe83612cd8b3b4c667a2cdcdf0ca
SHA1 8ef5b2ad018dee13b8abc7f0f8fe45d1c13c908a
SHA512 849bf48637084b130f1702ddcc62c1b5714c83f626a9a0f15e5dc2db4260995357a167b8a770ae0bd827025eef7f5ed84fb7e86abe4b44396c00e0f7273b342d
SSDEEP 192:JLeIxAulFA9WAvijRW/p3WT56Os1HnhWgN7agWfEKOZNKd2kQX01k9z3AOd0Jjh:Jx5o9WAvijRW/c5kHRN7gGNNPR9zbK5h
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

19:cf:0b:a3:91:77:97:ad:13:12:37:4d:1b:c1:af:c1:7b:7d:d1:72:4c:d5:fc:68:34:4a:ca:ca:4b:84:15:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.OpenSsl/Release/net8.0-windows/System.Security.Cryptography.OpenSsl.pdb

System.Security.Cryptography.Pkcs.dll

SHA256 367ef0aa84d51ee81b71ba6ceaf9970a0552e4a93de11b0ba9d5e828c03a7eaf
MD5 6f117f0916d5d2945bfcf0e04c96d9ff
SHA1 4a772c5a65b49ee4673ce03a272344c76d1d87f2
SHA512 fcf3da3d94072fab47bc568722dea6f5924e9fcf3916e37952bb9170c979f2974dcb27d42f1fc038ab50dfe8c75ae37c4c60fb9670e6d9bdbf0bdca896186d60
SSDEEP 12288:UTAW4w6GLGIUxhVE85wm6G2WgVdn/8uEJh5UOS+oxVcJtxF7VWq2tEHh1nZ:qPLI4minUueQxVitxF7VWq2tEB1Z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

40:d0:f5:3c:59:4e:db:92:5b:b3:dc:6f:72:9c:b3:92:d4:d9:ed:64:0b:69:86:20:73:50:d4:d8:e1:ab:2b:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.Pkcs.ni.pdb /_/artifacts/obj/System.Security.Cryptography.Pkcs/Release/net8.0-windows/System.Security.Cryptography.Pkcs.pdb

System.Security.Cryptography.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6703e8d35df4b6389f43df88cc35fc3b3823fb3a7f04e5eb540b0af39f5fa622
MD5 777ac34f9d89c6e4753b7a7b3be4ca29
SHA1 27e4bd1bfd7c9d9b0b19f3d6008582b44c156443
SHA512 a791fa27b37c67ace72956680c662eb68f053fa8c8f4205f6ed78ecb2748d27d9010a8de94669d0ee33a8fca885380f8e6cfad9f475b07f60d34cdcb02d57439
SSDEEP 192:96k3FcxACxWi3WIuWXebPpUNTQHnhWgN7agWPEmngqtVVwX01k9z3A41pqi5OK8C:cIAZWi3WITb2HRN7sVwR9zP1fg1m1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6b:fd:ba:2c:d7:2f:90:d6:b6:96:b7:1b:e9:ac:f0:7e:25:d8:f3:97:9a:d8:77:c0:10:38:60:75:59:de:cc:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Primitives/Release/net8.0-windows/System.Security.Cryptography.Primitives.pdb

System.Security.Cryptography.ProtectedData.dll

SHA256 24591f803e638805ad9dbf1a2396116c6cbbf1fa41bde94766eefe30d8eb95b1
MD5 337d1ba2341b82cb6690ef4b54b13610
SHA1 c66d1192fee824278c1f9855dd5c070dc349bd0c
SHA512 16bba6b26d7599c877dbab3d6f097be0a122c387622980b962129716ca1d018b21b1152047baa408d1a206deff05b756ab74cb1ab969c548c0bd2c42efef8b3d
SSDEEP 768:Gb/j5pDvcs7AGiv8x7FKI+ptTD9UYg7kPn2eJL/i519z4XCl:GjjrDvNcXvUFG75UYV2eZiZz4Xa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5a:38:bf:77:ff:0b:ec:27:f5:1b:ad:bb:e0:a9:29:2f:08:4a:b9:50:d2:d0:33:e1:cc:39:4a:d4:8e:12:a3:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.ProtectedData.ni.pdb /_/artifacts/obj/System.Security.Cryptography.ProtectedData/Release/net8.0/System.Security.Cryptography.ProtectedData.pdb

System.Security.Cryptography.X509Certificates.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9884c8a2fa0b77f6e09ca66cb761d01d38f653e75d65622b54f0e2ad823d31b8
MD5 575b41795f1e1636ca2304244eb12fc4
SHA1 9530f0a8d5d3add3150fe1ceb7a20665257a26ab
SHA512 69fbb6a483d03e8a3ad217a26849048fb3ca1eeca33b8e346709534638b6a0c7d6dfce23f4863c80f6841a5061f1aac0bdb173185db37b63e188760a5f40f51b
SSDEEP 384:GHDAocvMkWUfW+Tb2HRN7WSrjezWSR9z1g+Zcp:oDAoyMyp/iWSHq9zS+Zcp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9e:33:22:72:0b:5b:18:ba:cf:f4:c7:b8:ce:d7:47:62:cf:de:e5:41:22:03:32:0a:11:86:40:33:87:26:2b:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.X509Certificates/Release/net8.0-windows/System.Security.Cryptography.X509Certificates.pdb

System.Security.Cryptography.Xml.dll

SHA256 96f00150f91d1c9fafbded91141fe3a743afde13ac5158d26ca4fdbed0aa4f04
MD5 2b6dc8a1092cf5d0986e41bd348fa664
SHA1 8436aa9e6720c9697b98dc4a2d84aa2900ceb84b
SHA512 f630abe9d454ecf705b3c0e29c9f1994abd7986dd5303f70b22423632ca0b3efede31aa0bade4522b2fa6528d052cc2798842a2987517eb01fa730ab0d999a7b
SSDEEP 6144:rNQx9fh3BKRpC0e5rwU7xJve38hVhIjnpad/f1xwoqv/HGAGZuEHd8bO50Da8EL2:rNc3BKDwwIThWnpadfA28Hr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ed:ca:46:a2:0c:c4:a9:b5:3a:d0:03:0e:79:df:4b:c3:eb:f7:94:ab:13:82:ab:03:07:0d:e1:43:4f:12:e4:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.Xml.ni.pdb /_/artifacts/obj/System.Security.Cryptography.Xml/Release/net8.0/System.Security.Cryptography.Xml.pdb

System.Security.Cryptography.dll

SHA256 4582f67764410785714a30fa05ffaaad78fe1bc8d4689889a43c2af825b2002e
MD5 75f18d3666eb009dd86fab998bb98710
SHA1 b273f135e289d528c0cfffad5613a272437b1f77
SHA512 9e110e87e00f42c228729e649903ad649b962ae28900d486ee8f96c47acca094dbace608f9504745abf7e69597cdef3c6b544b5194703882a0a7f27b011fa8d5
SSDEEP 24576:ncK/0BGjtl6olBg7TKiS3I85RJxNSQxgx8rzZDK8IxmGGAVFy9tYB7mCm/5B:cDilBT3P5RpSRkzZm8IxmGGewPKCCmRB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f0:e1:99:c6:39:a9:ba:6e:fc:46:4d:9f:79:30:aa:d4:f3:96:dc:3e:98:a1:41:7c:22:44:1e:f9:da:93:48:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography\Release\net8.0-windows\System.Security.Cryptography.pdb

System.Security.Permissions.dll

SHA256 171246fc44b85060fd6ff4b0e0a82481e188e232ec78951ac61a23bdd970f957
MD5 ab6fc5c86e2c6a659fcb3c9f60cf8b0f
SHA1 1f383f8d15053a45fa3f9cabf9d69e796faa343b
SHA512 bb9ba178b09f098f5af913816306599deb2b6ccbc388f0bb3a208cf37936dd9fbfd40e4d5067affab42dcad235a50c469b2496837c2726fd0a3c828ab785365c
SSDEEP 3072:VYN1d2/ZAzaoZdXEooSgEooVEooYEooeylVXBIggesgEf+py:6Q/+zlpEooSgEooVEooYEooe6Xagg7gQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b8:cd:82:80:e8:81:01:b3:ef:58:50:79:26:f9:22:dd:c8:7b:34:de:d4:5b:31:51:27:c6:1c:e4:4b:ed:44:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Permissions.ni.pdb /_/artifacts/obj/System.Security.Permissions/Release/net8.0/System.Security.Permissions.pdb

System.Security.Principal.Windows.dll

SHA256 0426f0c5e24142ddbffc6261653cd34d930d5c2f10eb7b4a54799cdc9c37f398
MD5 c13eb4065adcab1c65811780aaa2ffc1
SHA1 fd978a20a08197a87cad876d2986d08611a8188e
SHA512 39e6365b2d9e914cffb7eef700039c76daa43d3838b3ee98d66922f293531f013d4a5d23b20dcab92bb436c4c4754a6d73c1a5529a8a04130dee50c952858289
SSDEEP 3072:X3w4vqFaKKMzBviWoJYrnOsmJi1r1u2TOK1u081yZ5:RMaKtliWoYrOsmJ2u2rQBG5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a4:8c:4d:77:05:9e:ab:21:e5:4d:97:61:87:83:55:c2:d0:c7:8e:fb:e5:21:a0:f1:55:19:10:38:5c:a4:bc:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Principal.Windows.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.Principal.Windows\Release\net8.0-windows\System.Security.Principal.Windows.pdb

System.Security.Principal.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bd3ef0e439b844ac7fc13c53ed8af3bfa338e4766782fbf8ca757225982c4fe5
MD5 99e2a1601f67fee9263e6d6172454079
SHA1 95281ab6802070903f4af8020314dcfb7a57791c
SHA512 6c4e338751e3697dedd385b3a73ca9c34f199803be79bb028f839d3087f6ad1e7510abf0a1effaa222c04ab9db897f289bc5972b71b51e26c4c568ec46743ce3
SSDEEP 192:7B0LKxA43jWVOfW+BuWXebPpUNTQHnhWgN7agWNjp13s5yX01k9z3Agrf8HT6fOl:GLQxWQfW+BTb2HRN7GcYR9zPrf8HWfk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

7c:ba:86:c4:60:6f:f7:76:bf:8a:f9:43:cb:92:cd:8f:ab:a8:97:ef:82:92:e1:44:43:67:56:26:69:3c:e1:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Principal/Release/net8.0-windows/System.Security.Principal.pdb

System.Security.SecureString.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dd54d698b5901b33180134b74f5552df42a9a5821a808c998d0f1047d5716e3e
MD5 a66dc42aa80fc17222f8d75c06dda610
SHA1 47644edd34a03f5f810a17cf10adaf98f0079cc8
SHA512 a15a4fcdf8bdf9bf3ac45ea973ab04dc056755df5e5462b7dbcf1ec6a25ebf1938519c972eb23d447ec012ec8265861b725c7030eee9a7ecac808f5395918cad
SSDEEP 192:rFM1oxxAbeqWr3WCWm3WT56Os1HnhWgN7acWfp6CEeuBwUoX01k9z3AurHNBAIFP:rI6OeqWr3WHn5kHRN7MdEzUR9zDQCP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a8:29:7b:5d:52:b6:b8:30:b6:0a:e9:0c:46:92:2c:a2:a8:14:a9:d0:5a:f3:38:82:8a:a1:81:cd:14:ce:8d:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.SecureString/Release/net8.0-windows/System.Security.SecureString.pdb

System.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 243f7857bd872bedbeb94032b774716dcde68ee5ddcb7ea54c3c39efc468b217
MD5 acaa9bf1114dc394e9c2fa295b351a30
SHA1 d6faa401bc0057241d85673a71b28b366852c937
SHA512 19351893f7e1291cdbea653d723147c0e1947fa138b5d3156aa065dbbd6853d293e77a2a7d76746172293a7b42d610c8164b286820c7cbdcfa758bb93bd1aeda
SSDEEP 384:O1X8IjR9b3WqDWUTb2HRN77c/NNPR9zbK2:O1sIj/btj/i7g9z1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f9:35:b5:a1:82:4c:30:ba:e6:94:9a:63:57:d3:14:79:cf:4c:c6:89:ab:f0:25:24:c0:94:48:a5:79:77:4d:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security/Release/net8.0-windows/System.Security.pdb

System.ServiceModel.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 eb9cc29fa1dd016adcd32d5676ae15b9dbd3269c6efdeac5bbd2e8512f264330
MD5 4009a7a096d0bf86ba9118e176d99f8d
SHA1 1da9f2bedc59b35348c8cb71ada9f3064656a7b4
SHA512 e7c48362f32f39cd578269b1a2d45d7e95174035e519c3aed8aa7e2bc3397010ed7ad8d1e662bde472fb571677dc6d7eaae17bd3cf385ecc4497d3412b967962
SSDEEP 192:xnCpC79WS5WbuWXebPpUNTQHnhWgN7akWzmA7H+BEg7X01k9z3AQmyXX:ws9WS5WbTb2HRN7PR9zrmIX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ae:80:8f:1e:a5:35:ba:8c:0a:71:e1:ff:7f:bd:45:8f:ea:a9:84:e1:6b:7a:2a:97:99:24:f1:ca:bd:77:22:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Web/Release/net8.0-windows/System.ServiceModel.Web.pdb

System.ServiceProcess.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 11cfda0ae5aca9583b1180c8d02ba625b1f6f3f2d5e0a7a5ee4c080214ef84e6
MD5 5d16087dd5c6a4e5c86c21feafa08fc7
SHA1 393253e2f3b4a96a412cdea11bbebe336660ac85
SHA512 45778feba0f7937ff35fb46e4f98b9e71a7f3a780346077de960a54ed53593533d22a8b7667519b04dd2f1422871947165a975b1f828b24fd0742a2e1eba538f
SSDEEP 192:kN8RxAlpWnclpFWEW4r3WT56Os1HnhWgN7acWfSsp13s5yX01k9z3Agrf8U/s:GaApWnclpFWx465kHRN7GcYR9zPrf89
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

96:c6:c1:55:21:f7:da:dd:c3:a9:59:05:64:0b:1c:19:cf:90:8a:ac:af:70:a3:58:d1:8d:96:25:c3:8c:96:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceProcess/Release/net8.0-windows/System.ServiceProcess.pdb

System.Text.Encoding.CodePages.dll

SHA256 15c2d5d37cec6b089211fa64f31df3731f153b4b0cd06c7019c2e86ca1aa5780
MD5 a43ec0309c25db71e32b526edd6346fa
SHA1 e6aff64d8c73a532f86ad711ea30d4146ed3df55
SHA512 7432013a855d9826fb25b8067da35e6732d4cd12d3740628f9462f9f83b7c1c8708f0adb756eedc57765507e1c0272ec705376fa71bff227d3bb6aabb60fc12c
SSDEEP 12288:/f7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPwYDIgTCo3:/D9km6k/IwRYbiBeKGCPY7mo3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

24:37:62:54:25:11:c3:61:56:82:cf:5c:b1:ad:1f:2e:6f:83:9c:91:6f:4d:49:36:63:89:78:c0:3a:d5:c0:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.Encoding.CodePages.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.CodePages\Release\net8.0-windows\System.Text.Encoding.CodePages.pdb

System.Text.Encoding.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dc1371559c661a4584423f2564cf4291479ca2719794fa72fbba90852f5bbd84
MD5 a3254446eff420f2aa40d8897459f456
SHA1 1db48f672157e1905149cd7e5f50afe711a380d7
SHA512 b62376755457a495da7adfb4d1cdfe060555ec315035d11cc506d1f6e9138d9249eadd9724b6363fab7b804efce8ebc2bb2b4136a28020b0542aedf526928ab8
SSDEEP 192:jmXhpTISx8WKJWSh3WT56Os1HnhWgN7agWffNGsZNKd2kQX01k9z3AOd0r4M:SxH8WKJWSk5kHRN7yNNPR9zbKr4M
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

7c:48:2e:d9:cb:2b:2b:98:b3:d3:cc:5a:49:0a:5a:11:00:75:37:3d:1d:b9:c3:cd:6e:04:11:e4:fa:4b:bf:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.Extensions\Release\net8.0\System.Text.Encoding.Extensions.pdb

System.Text.Encoding.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d86b703046c30c7c629f8d3020f9a1ffcb051e36ad657bdc8cd02acaa80a217a
MD5 696e389670263c62fa664c7996c92157
SHA1 cd4182e5e0a15921b47d35ecc329a80685607cb6
SHA512 937f7a3970d2ae999661d2fb3dae1b5ea6064844ffd61d5e5bd4dbf081c35496ded9ce113d2f4b23fc3f75b10b896f48c4e1c99525e1adb893c601da7194cd71
SSDEEP 192:wzRLxA1WzNWRuWXebPpUNTQHnhWgN7agWPv0ngqtVVwX01k9z3A41pzxYOX:YeWzNWRTb2HRN7oeVwR9zP1nYOX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3e:69:be:3c:ac:c9:93:46:4e:f8:2b:f2:ef:b6:0f:fa:42:42:c1:b1:ff:43:0b:4c:80:db:10:da:a0:34:73:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encoding/Release/net8.0-windows/System.Text.Encoding.pdb

System.Text.Encodings.Web.dll

SHA256 2cec6b53723d21b172d83255c315cfb36b40730abe2d891a850bcca64c883daa
MD5 abb38725078b6e6a6c45fc16dec21c0c
SHA1 a87944bf25ae0000112dbf14316daea3495575ff
SHA512 285e75c0aeada8fa98b0d1a089bb07e9d12bd3325ea46c4296709228972c9bdfe1ae400320065eb33eb4b6cb1c6ed1333a452bb8f509ebed2fca3fdddb60d8a2
SSDEEP 1536:+/TpN37y5m3IaT3cjKZD3lhjdPTp8K76+Z7AOGOGdyANX+MCmliUOiV9zl:+/TpQw3I+WKPZ5N77dLgRNuMdiUFR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c1:fa:be:d4:42:e7:3a:f9:3f:d3:00:c5:fd:19:ae:ed:98:b8:b5:82:8f:7c:c3:d8:27:88:96:b6:6a:ec:5a:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.Encodings.Web.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net8.0\System.Text.Encodings.Web.pdb

System.Text.Json.dll

SHA256 7b6bb3be1521f4f2f4cf480bfbc1d2200248daebc7fcca7d727ad86938cdffd3
MD5 fa97f9173b503b5c4be4188539386de0
SHA1 08c2390406f56b261aebb9efa897f3ac8cdc95e9
SHA512 82a1eaa17ec81eb83285e7ab96c45812bfa7e3972d2d5d90f30715e0e7d65ec624dfecb27816d58b48712d00242482dc6a6e4c8e136e3787e49b75c870742bbb
SSDEEP 24576:V23MqgntrtDSAfOw1+iJi6LRwRctSQsMM87OCTQ2:0mDSAfOw1+iJiKwOty87e2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4f:82:d1:26:b9:9b:9a:3e:84:89:6d:72:d0:65:91:36:a9:a2:a2:05:8b:c2:fe:b4:58:7a:a0:3a:31:8a:bc:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.Json.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.Json\Release\net8.0\System.Text.Json.pdb

System.Text.RegularExpressions.dll

SHA256 f11ebb0a64c1ad11c1dcb5cdbee13e553caa2b92d44678ef5764b020428885e3
MD5 35e31d21a249bc3e8b504d1c9f2c249b
SHA1 1c60cb657ab590c54d5052ad0e8446ecebbac1d8
SHA512 56963da4b1b64d99e7e26b21ec7b394b7104c827be4386d69df758e0d47d5b51f907e71ccf53348ad59c3985c9fdd5dec9f050f1c599c45136bfab5761ab1a05
SSDEEP 24576:PLlx7htKpROhEC1inDiw67tANehjGQBrm:XhsROhECaiwhehjzBy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

40:9c:f9:98:c6:ef:e9:e2:5b:23:cb:96:cc:68:4a:d5:78:99:6e:f8:84:af:be:25:c7:95:8d:6d:c4:9d:60:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.RegularExpressions.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.RegularExpressions\Release\net8.0\System.Text.RegularExpressions.pdb

System.Threading.AccessControl.dll

SHA256 c4a1a0b74e5af9818fa62b8ef34ac19880815d1704fe33211f5e923cc7eca779
MD5 14c3e944b391fcaac3faa37da5bf93d9
SHA1 4ade5adcc028ba2c286fedc5a906abe4f9d20c50
SHA512 4dc351cd39c20905a189cb5e53fe848c6cd4c5679049cfcfbc2ccc32c2051d100fb725026cab8e944bca9ef2d00b1eff8e653599b15164af274d65a01e96ab18
SSDEEP 1536:+En1LAhibIy9NVY3+X7/6TIvG/cWysb1vfNAUc+zp:+En1LAYIANVn7/bG0ovmsl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b0:03:aa:6a:b5:c3:40:de:cb:8a:33:33:d1:b5:cf:5e:3b:c8:5b:c3:50:b7:8e:30:1d:02:04:3b:e0:cf:da:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.AccessControl.ni.pdb /_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

System.Threading.Channels.dll

SHA256 65f6e9fff46c456cd7c2b3ae468b099c1226df691cdc42dc561d37fc5756d7d8
MD5 545fa9c71025eeb2e16221b4f92cbde8
SHA1 107684750090a7ca41954ddc2012512bb82a1c6f
SHA512 31dbcb34db03147a15f3df557267aed71d91d303c1acdc2d640ec23e221a58b8db87a556318a278c8566603fdb197fc80ab3d3b10b8225b76b02f27eb60f91a8
SSDEEP 1536:6W3tFFkPLTx14o8XyEDdoY/7Vp0lJQxWoioIO3VdTev/9zT5Y:6W3tFFkrxSyEDdoEVpC6xricOn9ve
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

85:2f:09:78:53:47:5b:32:0f:7d:64:40:2c:fc:61:ca:73:2a:32:03:c8:06:22:cf:e1:30:4e:25:1b:98:67:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.Channels.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading.Channels\Release\net8.0\System.Threading.Channels.pdb

System.Threading.Overlapped.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 04ad3c00933aa8999179d76160db0a83b75296c9b5c6b427a6f1f1fc2bae4046
MD5 2c448b38d7828e51ba001f94b748c71b
SHA1 08fb63fc366a09dda33822330fed7f63478e4d75
SHA512 20bfcd395b65c4a3e18d24fe31e76494771611355f67e92b95dfb358953917b27b86a74bc9a7a9604ef784477f862b852f0a948652993559f2014beffe396d54
SSDEEP 384:UHYCHFcHjH8HzWeHWsGTb2HRN7WKs31AqR9zdv+:GvtG/iWDr9zY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2a:75:85:a0:f7:ff:f8:de:65:b5:63:61:58:b9:44:02:89:1a:04:ac:a2:29:5a:98:ba:c9:26:f5:a7:23:70:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Threading.Overlapped\Release\net8.0\System.Threading.Overlapped.pdb

System.Threading.Tasks.Dataflow.dll

SHA256 4023e9f8860fee2de0c7992d27773a0f00f119e7bdb83591ae400fa3537a9a33
MD5 ed75cc4239f9531e87bf7c692f9bfd8f
SHA1 4472bc476a7460bd9b72182a5518f7315742ee45
SHA512 ba789758e6075cc8bf380c2e96cf13d73c9dee64e687cdd7b83a4241d2938062b9039ea3c9aa82a161a50c5eab6ef821d46eab655db233bbe61548b3d036c82b
SSDEEP 12288:VSjAH/39H4HzsQ/p4JeFRrUe5v3qFawDXglL+:GY/hmTMwRrUe5v6FaEXglL+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

74:d5:0c:5c:98:a1:da:d0:51:a7:d0:c1:f8:86:53:ca:43:28:eb:3f:e1:fd:d3:7e:8d:ec:54:b9:2a:52:56:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.Tasks.Dataflow.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Dataflow\Release\net8.0\System.Threading.Tasks.Dataflow.pdb

System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dadafe2413202d5eb8f1467cb0668864e863f0c8b95e3a3b74f79d406ef21dfa
MD5 dfb22abd885c2e2a7d943631af0e4ce9
SHA1 1e5b43b514c0af349e805d38895420f6e54328fb
SHA512 8e1a149093ee2fac1c9a49a668efb2bc7247405a40029ec8ae530fa55bc5732b76c37203b5ce6236a60ecc58d2634905b98469a080de17e31348e0e3b23cec0d
SSDEEP 384:hCVI05B091ncmkGfLWIXWdF5kHRN7nycYR9zPrf8cw:sVDMrhnyn9zT8cw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

68:4d:d1:94:11:cf:a6:92:c6:f2:01:03:19:37:d6:c1:f9:f1:fb:83:c8:f8:84:4d:7b:d4:ed:d9:ea:1f:22:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Tasks.Extensions/Release/net8.0-windows/System.Threading.Tasks.Extensions.pdb

System.Threading.Tasks.Parallel.dll

SHA256 6f4479499551bdfc84ea86c6062c4c1ebbb1d34d2953daa1a6d3f192c24757a7
MD5 8dcd41cd46e1485b163d5c11dd1c57bd
SHA1 52852762136ed312afc8fea1c8b910d04e2793ed
SHA512 db0d3b3c1365435213158511a3e81262c00e001de2bdf7e063b3aa4211999d0feafa05250ce6478f7859f3ab8417e908fb930be3497339d95f2b194bab352baf
SSDEEP 3072:yaIk4o2YRcez4drhYnS+5+nkwkg9zE8rFrIwU2:r1Oez4Vhnkf8rFn9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

0a:a5:2c:2f:0f:8d:5b:ff:71:43:7c:84:0a:f1:d6:87:0a:f4:4a:16:3e:ca:a0:bf:30:ba:01:30:96:a7:6e:6e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.Tasks.Parallel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Parallel\Release\net8.0\System.Threading.Tasks.Parallel.pdb

System.Threading.Tasks.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b889524f51ce94edd57870b8e75e905733f2b6834214a419c222a0376f7ef396
MD5 35d0863632a089c231565feaf2d2920b
SHA1 6321b981e0990f6b9c0937d9b1608927a52010cb
SHA512 16ef0e457bb564a0a4232a01774e317064d4623f14454dd8bba3709652402b3c2408cd54fe51334c68d4f61a0620329eca7da2cfa1b649e7383b4ac23461ee90
SSDEEP 384:7af4fk3CBjoql979WVzWWTb2HRN7j5DNR9zqt9BPYnTG:7af4B9ovl/iF9z4PYnK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

56:67:56:65:75:bd:91:36:74:82:54:92:20:d6:7f:0a:28:1c:08:41:56:c6:b6:e3:95:9b:0c:81:98:49:d2:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Tasks/Release/net8.0-windows/System.Threading.Tasks.pdb

System.Threading.Thread.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 84c9a95609878542f00fe7da658f62d1a6943a43e6346af80d26bcff069a4dbd
MD5 72d839e793c4f3200d4c5a6d4aa28d20
SHA1 fbc25dd97b031a6faddd7e33bc500719e8eead19
SHA512 a414cd9d7cf6a04709f3bdbef0295349b845a8301171ed6394e97b9993f35816383b958736c814f91c359a783cca86ee04802856486d4b4e0ab90a45da39db1d
SSDEEP 192:ZyAzp0frz4dEp18x008lWS7WduWXebPpUNTQHnhWgN7acWS1KBwUoX01k9z3AurZ:NKjz2Ey008lWS7WdTb2HRN76UR9zD0s
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b8:f7:75:19:41:40:81:6c:ce:5e:08:c6:64:0d:5c:31:47:3c:15:6e:65:9e:61:84:c6:4c:27:6d:c5:8e:06:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Threading.Thread\Release\net8.0\System.Threading.Thread.pdb

System.Threading.ThreadPool.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b7724c6910369dfabd8945cceaad13a91737dd08fa542ad8b276f5a6ea678018
MD5 41eb95b17d76fc321d2edce418146d8c
SHA1 384b7c8f24d8e3e71806e9aef7bbdc041d246bed
SHA512 c363f5e4889f6cb8b843d7690d5c9598dcfbe4c64af757596fdca8e99752b2ccf80cd59300e9e4c98745695781588342471941648fc77ecf523c55673515a581
SSDEEP 384:pQ92BcWuHWOvWzTb2HRN7I31AqR9zdv0wi:pB8k/iAr9zan
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

02:c2:19:af:28:5c:f4:ef:b8:f0:cb:6b:6d:53:13:63:48:46:84:eb:d8:20:96:d7:66:0f:c5:ee:e0:de:d5:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Threading.ThreadPool\Release\net8.0\System.Threading.ThreadPool.pdb

System.Threading.Timer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 812ae7d7e2c42f9573c2cecc315614db4c3b2268640fd3f76226bea1989b4a7a
MD5 ed33b221cd42f884c35684b78494fe5a
SHA1 bfe208d925e198c34e2387691625f3b2953d9d28
SHA512 d5620d0313de9d6fe0c0d856be61ba9c52485c4c91082a91aaa057246bdd9de53503996715ae42f8e0b8895954a70412ea21a6e8288fdb817282ef27bec05d39
SSDEEP 384:uF6goqKTS3MWVCWjTb2HRN7m1jezWSR9z1gK0g:UoEn/ieq9zSK/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

33:68:d2:90:08:16:d9:08:c4:e8:8d:ff:c5:77:ef:b8:81:a8:ac:2a:ed:23:82:64:17:14:cb:e5:ed:c3:e9:87

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Timer/Release/net8.0-windows/System.Threading.Timer.pdb

System.Threading.dll

SHA256 e8d1f5c422ee0ba3b235b22028ab92dc77c1ff9774edc0b940cad7224a30ba7d
MD5 32aa6e809d0ddb57806c6c23b584440e
SHA1 6bd651b9456f88a28f7054af475031afe52b7b64
SHA512 fe43b3d6ed5c37d59a44636d3c7522a88d83e6ec074bf69d3cbb6e5454fdd8f0523ea10fdf6fd452cbd0e2fc159cf9d03dfad6b30e80e400e7f1773b5a2e8632
SSDEEP 1536:Fe3goICPL8SGeJM+4L23Z8j06EHkwd63iGRmMkKCRinzb:F0go9PL7KyZ8j06EHkwd6LRxHC+/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a8:6b:a0:48:f1:b7:ee:c1:a7:ea:46:f4:4f:3a:1d:59:bb:1d:25:36:39:0a:c3:ea:5b:01:00:7c:83:4c:91:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading\Release\net8.0\System.Threading.pdb

System.Transactions.Local.dll

SHA256 90233742e19aa01be976ac8943ceafa5ba428511d95ae6c74a5de161fcffde79
MD5 3c8ae8652819c1a068c39a2d17ddd3f1
SHA1 33716bbbf7448b1c8f28a8973beed6b69f1d7dd9
SHA512 2fa8544decfed939dbaf3fee6479e011a7a4acf7bff73f08a926bf821a66f35358f9ad40cdd904c8c5df44dcccde5fcb318f3e39adfc8114fca61e2d90531291
SSDEEP 12288:q/JxQVRjDNb8Bi8j87gnzV9faZ8jsxzaf:q/riRA6mzbj86
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7f:f2:07:05:f8:26:52:85:1c:74:01:a4:bb:9c:40:75:bd:aa:5e:a1:05:ed:19:4f:38:6d:85:b8:c7:54:f9:16

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Transactions.Local.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Transactions.Local\Release\net8.0-windows\System.Transactions.Local.pdb

System.Transactions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 26ac9c0f58c73d08631206e7f9d1ad4267f99a2b70cbf306e9030b2776af2d71
MD5 245a8e4e8c131830bb67ea883d888060
SHA1 42b88c5e28f2934f86f759dd9ea18a66741e889c
SHA512 bd092826058dabac5f806f3aa5a057666e6a9af7c78069e94467cc778ba65fb0c8b1ac1e7dbe78979bff859cd0c543e5ed8bc7714a658204aacd75a25e41795c
SSDEEP 192:VamABcDhlNH43RhJsWWiWiWTb3WT56Os1HnhWgN7acWfXqhp13s5yX01k9z3Agrz:Vfw3RoWWiWnG5kHRN7GqcYR9zPrf8Wf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d3:f2:73:f4:2c:f1:96:93:d4:a9:e9:da:67:5c:07:11:ba:d6:4b:53:a6:d4:1c:da:b8:2f:58:79:2c:fa:37:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Transactions/Release/net8.0-windows/System.Transactions.pdb

System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 826a9d3cdee694dac9f5c82293380f8e37a5ffe38568e0b34293414282b97ab3
MD5 44842a41be250cfeb7c4c062b093c87c
SHA1 9b4059bdf571b36af2100fccf174040a1d0552c1
SHA512 8a79618220a613ff7a91489639a41e16238bd5d0a1189b7da8d685db66dbf1b26962fb2b061580292bfd438ef63d0ed97bae54788209fa5b4bc205927fbdf97c
SSDEEP 384:bwh6eVWoGW4Tb2HRN7xnDMyDR9zGVREerp:bs6eBg/iP9zsRt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e4:fd:e2:f5:09:68:34:07:53:e1:51:28:3c:28:1f:18:61:84:ee:75:44:83:ef:4d:8f:db:03:f7:08:a2:7e:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ValueTuple/Release/net8.0-windows/System.ValueTuple.pdb

System.Web.HttpUtility.dll

SHA256 702133aa1e5c057d57752ba89ef0937260678aa2b9762c5b810ff990f5449fd5
MD5 8a4e4b23c997af2055cbd94252d2f4ec
SHA1 82f1c620dcaac585d3a726b35c3615f4cb5cb091
SHA512 cee1fc44a1f901e44c869db1d0c9f879b27952bfe20c861636dd62f139f8164fbcc7de8c02b2b54cc70849e4ea7b82de77027eb66de2b44d39bfd7e75176ed8a
SSDEEP 1536:lwQdGA98odbfSkdDVXXYomm7WAvCIm2Pzo:W0qUNoheWO/8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ab:70:17:1e:ae:69:d6:e6:32:03:6f:cf:81:d1:86:26:ae:39:04:0d:7d:d0:3d:67:de:cf:81:6c:66:3f:21:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Web.HttpUtility.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Web.HttpUtility\Release\net8.0\System.Web.HttpUtility.pdb

System.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 46276ee3bdd22fa9a39c3fbfd2682487949fd7465792a35c4ea9e5cb8ccbeea7
MD5 30b713e347dbf430c40f442c89c62fe5
SHA1 a2c206f1b3b649194b65c77ef6fabb6def72ae55
SHA512 50417e7e578b58eee440727dc2ec93054048ff722c91d3575790e78c6e84e77fe424da77ece93b0b72fa8b7598ae7186e7c427e65d67ddf3915ed4b285ea47d4
SSDEEP 192:TGvxAsDWio9WGuWXebPpUNTQHnhWgN7acW9oDrwLobDX01k9z3A5VDEZZXmk:qLDWio9WGTb2HRN7vDMyDR9zGVDEyk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1c:83:8d:3d:60:30:69:7b:d9:ae:3f:00:63:67:2a:c5:b6:da:6a:ae:e6:07:60:11:49:1f:1d:2c:70:b8:90:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Web/Release/net8.0-windows/System.Web.pdb

System.Windows.Controls.Ribbon.dll

SHA256 64ca024c59f02780279f9ed8d6bdf787262b8ea875239cd33303a71b3d9a7781
MD5 5f4c6d61d55cd5d7f145bb042263182b
SHA1 101d997c2cb22e608edfaac738dec0be94154569
SHA512 0b3def0ba36c69f1267ad8c9151468ce135765a7800895cbbb9f08bd98e449fd1f121de14f20ed0ba78e9377e50a4ccfb08fcb59d73a5e29d1c7aaf8ff9146a2
SSDEEP 24576:5KZ1FlRYS616HJ6HH4hjH6cw8EGjt/NBtsQC:elyS616HJ6HYtH1EsNUX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d2:6a:b4:ab:c3:3c:59:f8:e4:92:ae:7f:c9:e7:e7:c0:58:94:a2:90:d6:c3:19:b1:58:6c:84:9c:0e:34:b2:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Controls.Ribbon.ni.pdb /_/artifacts/obj/System.Windows.Controls.Ribbon/x64/Release/net8.0/System.Windows.Controls.Ribbon.pdb

System.Windows.Extensions.dll

SHA256 44fe71e8321491127ab8528e471d3ad23536b2186e93d3ff0a6eaa49f7f125c6
MD5 97adc916e02411184dca8a5c0092d47a
SHA1 94f186765e9cec87c67c2a300e0683ed3b583376
SHA512 f909069988a8e0eeab2e7c232c0960885aa487ceac6c241888b34580b59e919ca855d06a8dc5bc5ff49e0108f7dc75c221aae01ffbdd4b5b29dac8e92a6ee8a1
SSDEEP 1536:3qkrGkOsQ5VPeMW7o0TMAP43x/ofsTac3L5rgdYq+X7zVFvTb9TjpzEi3Bzf:3r3QnPjW7o4MAegfs+G5QYfzjjzTB7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5e:c6:07:b7:2a:7c:2a:46:3f:85:08:96:a4:53:bf:0d:3e:31:8b:f6:0f:2b:92:64:0e:f5:91:ee:41:27:b4:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Extensions.ni.pdb /_/artifacts/obj/System.Windows.Extensions/Release/net8.0-windows/System.Windows.Extensions.pdb

System.Windows.Forms.Design.Editors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 502a8c15962058b98ab8b624a3ae46f976f836600635c352581caf41fafed880
MD5 e3e3aa4e34475c39cd4bd268bd7006ea
SHA1 9a1975e95c4587e3f8915c53a394848384db13e3
SHA512 d31197466c44780f0fb098614b9d097cbd7d0585b6cf1ebc601b796eb4c3011188e8b8476eefe7833b3797afdb764c328f0e86a87ac56d4bb7dfd5290912444c
SSDEEP 192:Wg8jn7TxCGfW8BWE1uWXebPpUNTQHnhWgN7aIWJumZB6KjFQTb8o+X01k9z3AO7m:Whjn7NCYW8BWoTb2HRN75mZXI+R9zJKL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b6:b7:65:9f:4b:17:f3:e0:1b:bc:b0:5d:38:d6:0c:64:ed:7b:97:cd:35:c8:c0:15:74:49:c9:23:d2:15:ab:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Windows.Forms.Design.Editors.Facade3x/Release/net8.0/System.Windows.Forms.Design.Editors.pdb

System.Windows.Forms.Design.dll

SHA256 a095fa729e9fe879cc5f304df74741e6a87b2c501ebac6a921790ee76203cd98
MD5 817c94143a3e979c51606c79e0d98d46
SHA1 3d9c55a36a40d0d44ea494449b1dbe118800459e
SHA512 6a60bc26f3c50f137cb61c2be4e248c9d3486a0582d09ea533844420369724d9cfe15850ab6a3e1bced9db8eb6961d41e59a907a88cca246e139823f4a0ec85b
SSDEEP 49152:iCIgNxAi2kCmNHD/QtugTotf6tPkxfWOIKJu4BOjHhb3fc+fdCTvRRh5F:lIgH2kzktgM53cZF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8c:6d:f8:5a:14:0c:fc:09:16:c9:98:e5:44:74:b6:bf:4e:b5:34:6f:1b:f6:1e:f1:2f:2b:2c:40:50:83:4d:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.Design.ni.pdb /_/artifacts/obj/System.Windows.Forms.Design/Release/net8.0/System.Windows.Forms.Design.pdb

System.Windows.Forms.Primitives.dll

SHA256 5794a3996a0b4ab9cb13f3de0f87d50462615a7d0eb1d243d9324a682c1b58cb
MD5 8129c2d72bcba8b50576e7c43e558832
SHA1 f4892f78d2496f3a2e1fa2380ff68fbeb62e2dca
SHA512 40fafbf9590d2b2c8f487f44708e9e97ddce03b1487be5c7cb3d4c92bdb7100a98aebada379f63003f0dd9d447ee2b0b9dfa0b057320ac05f7f77b31c5ffa97d
SSDEEP 24576:s2sBCPf0yFn5Q20y9/vysyyLnEq94je4UsAcz/uIICH/PLvlvKJdnUL2wLIlcq7V:F0wnBWyLnaECH/PLvlvKJhdy2n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d1:12:d4:8b:1d:80:43:7a:8b:2a:9a:ae:f8:b8:33:25:20:fb:2c:37:bd:dc:47:04:70:a4:10:98:9a:e8:9d:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.Primitives.ni.pdb /_/artifacts/obj/System.Windows.Forms.Primitives/Release/net8.0/System.Windows.Forms.Primitives.pdb

System.Windows.Forms.dll

SHA256 efc52dbbef5202d9ff424d7adc6e2249b66450a5fd5414891776fc617b00123e
MD5 a51632facb386d55cc3bc1f0822e4222
SHA1 59144c26183277304933fd8bb5da7d363fcc11fa
SHA512 2a8d8e2ee8168e6f79476616385320f463ebc161c7393db2b18a7d35ca0111c5100b83954c5eabfe32b12cac3dbfdc514271dde4cc4468dd26235eb7020d9c14
SSDEEP 98304:CBhWbjRl6ekYcO8xHaNH2AM4mBC4mR7/5Q8ap:CBh0RQekhOeHaNWAM4mzmR7p0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

14:a9:87:95:b5:9c:79:d7:be:09:03:d0:c2:43:9d:5c:5c:3f:e5:64:68:58:fd:3b:76:f3:f2:3a:1e:ce:81:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.ni.pdb /_/artifacts/obj/System.Windows.Forms/Release/net8.0/System.Windows.Forms.pdb

System.Windows.Input.Manipulations.dll

SHA256 30b59b21c5120c31473a9cf7740be2bdc47c6da12c9bc05b353f482f20840d7b
MD5 de192c57163da78bbe3e4e9e46598f17
SHA1 e86aef970dfa6af1bc23ba49eb5457cb59a267f2
SHA512 93273bb026ec563c0c7cb427268614e0e21274275052e6342b218feaf22c7068b558510c354f0e5508df8afb194265e2d09fb26e0f4ee3dcbf3bae79fea5256f
SSDEEP 3072:KJ30Ede4qZvCWulEyJ5qLFKkurH/6VCThZ:030EdO6WutKFRurf64TH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a1:1d:8f:91:15:66:22:a1:09:0f:d6:e7:3d:4d:24:21:5c:49:b2:2d:87:3e:23:9f:79:e7:6d:ff:81:fe:81:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Input.Manipulations.ni.pdb /_/artifacts/obj/System.Windows.Input.Manipulations/x64/Release/net8.0/System.Windows.Input.Manipulations.pdb

System.Windows.Presentation.dll

SHA256 5e43d964b301344aca8986ffa55732c5791613dbf9a8777c1b265382cdaebf63
MD5 a70f23a3e102560c1e1d919cafbbe16a
SHA1 68832f104042d7bee72bccd0a49c0da853ecc0ab
SHA512 11f83a37c6c7fe3ac1262f61ca9d0afa5af4df8d911428cf9a87cdbf91bb648b1c155c997fdbb39ca4316a0fe07ce0ebb106a84711e7a9ac866c2ba07dd8d466
SSDEEP 384:/dWX6KAE/j9b9wZVjXXHTO5kHRN7B6zaHeR9z9FQbi:aH/FqHzXC9zei
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7a:fc:40:cd:67:e4:eb:52:90:48:06:14:c7:b7:5e:83:c9:bc:9e:1d:5c:dc:8d:1f:f3:80:ef:41:09:a3:88:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Presentation.ni.pdb /_/artifacts/obj/System.Windows.Presentation/x64/Release/net8.0/System.Windows.Presentation.pdb

System.Windows.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fc870a03d1c37043d4f285064f37fe3ec1859138aaace7800e093b72df52be67
MD5 1d4ad62b4fb6f760a4054b265be65fff
SHA1 b7320d2b1d75a55f6c54af9f4c811116cabaab6a
SHA512 017f2672f869ddcf589e9c9631fb89847b88ac21c6f29ec540281d4df20bedbfbec2035a6b723fbba3cab0cd873fff03a47ee4d026191033ece6a961958310e3
SSDEEP 192:3U+aHtqxAyWdSW1uWXebPpUNTQHnhWgN7acWdBp13s5yX01k9z3Agrf8cL:3aHtw1WdSW1Tb2HRN7qcYR9zPrf8q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

55:00:d1:de:dd:9e:54:6c:7b:80:38:55:2e:8b:82:92:64:9d:32:b1:8d:3b:0a:d2:ee:00:12:e9:01:da:38:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Windows/Release/net8.0-windows/System.Windows.pdb

System.Xaml.dll

SHA256 a2d69329007c93d8354fb72867f92478af746d4639956b09db5f15a0f2d7dc75
MD5 71549f9598b138bc7b5570fbbf3b685d
SHA1 a61c42ca905caff59e5eae3181abda5e9b2da294
SHA512 8ad32ea93beebc7750d5fd7b20b43b2ecd6f43a09a7f3e1299cfa29332a914186dd6973e715ea69da7563bb73ce40bccd08e67e5b0ea57bdc6bce409100c4ac1
SSDEEP 24576:mVzLf0UsSQ1CNkPV/LU8N+I67R0tUDuVVCQ/iYVI+:U0UsSQ1CNWLTerQxP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5e:bc:a7:41:14:ff:c7:47:19:ce:0e:65:77:39:e7:ea:47:f2:80:79:96:1b:6c:f8:c5:97:f5:25:b3:7b:8d:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Xaml.ni.pdb /_/artifacts/obj/System.Xaml/x64/Release/net8.0/System.Xaml.pdb

System.Xml.Linq.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6be99c4fca54754c5e1f7578727fb9b96d5a912bcbafb9193371ee09a3cd024d
MD5 7fee294531ffcd200227cdee5cd5f760
SHA1 f69977acb52f8317eb3292a708073c3001959056
SHA512 b8d7527d62a2646e2457e2357f7f8d519b92001107bfba8a065e847c2e09865e0d48846b98e9fd1d8a36df61912a8bdd2b664b001513dcd890ce591492ede8eb
SSDEEP 192:Hvjc1t/HqSIWK4W503WT56Os1HnhWgN7agWf81ZNKd2kQX01k9z3AOd08xKuo:apoWK4W5p5kHRN7zNNPR9zbKNx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

65:1d:f2:1e:4d:6a:27:c1:11:70:f0:06:96:a5:d3:2e:61:73:16:2b:65:82:dc:37:cb:ba:1e:c9:a3:72:56:ee

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml.Linq/Release/net8.0-windows/System.Xml.Linq.pdb

System.Xml.ReaderWriter.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a2a5b71515b5c4f5768679123aae92938914b7daa8ba0c2a34d84be086c69352
MD5 bd1a0ca34c7eba18172d0135bf2b0b88
SHA1 aa4461a766b2d5824afbce7df00a7fbf67702238
SHA512 3b5c8448a1916c315da328149435dfbc12bdbfadbe9f83f8f32230f96151c6d6eaf38749279a04fe8c37de444247eec32b937b4ecb3e5eeb2930c272848db8b2
SSDEEP 384:g1G5qkxK67ex4FCqFWiAWeV5kHRN72cYR9zPrf82J:+6LVf12n9zT80
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

46:f4:92:9a:13:46:06:da:02:c4:3a:2f:9a:1d:a7:54:15:fc:ac:30:9c:01:32:80:79:1e:96:31:90:92:7d:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

17102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.ReaderWriter\Release\net8.0\System.Xml.ReaderWriter.pdb

System.Xml.Serialization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 43ebc4e1e8619910fdb452b0e3d68a9256d160b83df2ad8b74df9a3c40bfc960
MD5 a30bd786d437f2c506d86bfe80241278
SHA1 24ac98f47f85e74f1098fa348b24e03498149bfc
SHA512 7592ef1cfda6a2e5782d8d6e107ffb0d177126020fce2b00676b06db2d8f91242672ab42afa52a16b92ea7ac50d63ee73a4c4cb3d7802176431956cc7fbfaf93
SSDEEP 192:UIV8lW55LW7IEqHWLkuWXebPpUNTQHnhWgN7acW6rHBwUoX01k9z3AurHNBSvaBD:U0hLW7IEqHWLkTb2HRN7tHUR9zDClW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a3:5d:53:87:f9:12:e4:94:13:62:04:10:f3:ec:c0:0f:07:32:96:46:89:bc:eb:f5:30:66:6b:61:e4:bb:83:f4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml.Serialization/Release/net8.0-windows/System.Xml.Serialization.pdb

System.Xml.XDocument.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 32c6adcd41fec6a477b35a4311f8f6dae029eee5a823ddf6bb421ac118e0e8cf
MD5 8fea3ef942b366df71bdd150b3fb665b
SHA1 b00bffdfed9398ab0529cf649a11b46ebe62dcd3
SHA512 34724cd1ad2d249845dfb46d4bbc6c0f48bcfec5d882338500349ed9784fd7be15f1efede86dc0d7f61386ed9fb4074f9e27b976f21da30b16a43abedc430a42
SSDEEP 192:VAmvx6WTdWIWR3WT56Os1HnhWgN7acWfnBwUoX01k9z3AurHNBeL:VAW6WTdWV05kHRN7uUR9zDuL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

31:3e:b2:17:f9:2c:c1:c0:47:96:9d:cb:f2:32:d1:59:62:09:0a:1e:a9:a0:6c:8e:d3:f8:42:45:d7:79:d9:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.XDocument\Release\net8.0\System.Xml.XDocument.pdb

System.Xml.XPath.XDocument.dll

SHA256 3ea1e5ad16db9d8c742dd9582ce533f84d9132cf0e26f67d199df85fe68fbb9e
MD5 93ad072e7d1f707257e1c3b50f3eb4b5
SHA1 0dc9b9355de5726334941a8833f081d74d9cb07a
SHA512 f51dd43f07e0ee9b891641b54ded81df4e92f7c03d1bf0fde8cf9c12b1603377c9650f7e33db6f56672d80f6097736470cb90f7317cca1ebfe0ed6e785924fdf
SSDEEP 192:LWJeWudpoUVNhHxNY7iuWXebPpUNTQHnhWgN7agWwRWngqtVVwX01k9z3A41pU/Q:LWJeWudpoIRi7iTb2HRN7J6VwR9zP1s+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2a:9c:93:eb:b9:ff:2a:27:74:9f:48:57:f0:d6:10:98:c3:49:6b:ca:73:23:59:10:d1:49:40:74:81:44:f1:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Xml.XPath.XDocument.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Xml.XPath.XDocument\Release\net8.0\System.Xml.XPath.XDocument.pdb

System.Xml.XPath.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 062689bd8f6603b39534e5b11945e293dbc4f24ddd17695eb5021edf8d465768
MD5 8fe7208bc2f07042ddf8f3029bf92808
SHA1 9f90bde09521e09391ea68a11efb280cffa74ce4
SHA512 3cd3712d55219164331bb80afc8cbe8ac99ca910807b9efb773525b84cfd263a119585f916ad8560e6eb6bd3dd130248e9847e8bbb321eb4b02d6b311de6a469
SSDEEP 192:2exiADxYJWXvWyA3WT56Os1HnhWgN7agWfkOZNKd2kQX01k9z3AOd0M3:2exiAdCWXvWyt5kHRN76NNPR9zbKq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

24:45:8c:51:1a:3f:98:4c:33:fb:4e:fb:f9:2e:54:9c:5d:5f:81:d1:1f:0f:47:83:e6:a6:ce:f6:f9:a6:b9:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.XPath\Release\net8.0\System.Xml.XPath.pdb

System.Xml.XmlDocument.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 70f9d31348e2f0645246cb5440a450a0969da5c1916649edd62a54501c37dbec
MD5 22f3ca85b32a674ffa2318ea41ab92d3
SHA1 6c5c8b131d13506a79666cc3eb64c9355ceafc76
SHA512 962a16a39c2fb0222ce00c81a12d3effa1dc0b826e0b03807d7e6de3a93bf2453c40b04b76c138821b5a5da0dfcda9197847af00ab521090a3fe6e69efeaf0ac
SSDEEP 192:3YDxl1xAdM414WAenPUWtj3WT56Os1HnhWgN7agWft87ZNKd2kQX01k9z3AOd0Ky:yT/opiWVsWti5kHRN7cgNNPR9zbK5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a8:c6:28:4d:e2:50:0d:79:24:c1:9f:90:3d:84:7f:a5:9b:a8:4c:a8:ec:94:14:da:53:6a:7a:d7:ad:f5:3f:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml.XmlDocument/Release/net8.0-windows/System.Xml.XmlDocument.pdb

System.Xml.XmlSerializer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f9471691885290307e52da578bfc3f10751b53f38e5ceca6f634f3aee7ee7dc8
MD5 253cf49e95b21044c845081dbcb8f413
SHA1 8d02eab1aac4ecf663cc2e2d62585515dc49bb12
SHA512 5a5ff7d6fcf64047b2c9c20ca35800a5179e351663a60c6cc8ed8a2ae94ce052509a043df9a27fcf65f668f43e23adb5bb749fb2eb32cc171a397cf76d08ce02
SSDEEP 384:s3tw36WfvW41Tb2HRN7MmfDMyDR9zGVOE1A16Y:s3tw3Tp1/ivl9zvd6Y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3a:42:b9:0a:2a:1b:67:86:a7:66:c6:aa:c0:90:4d:4c:57:b3:fc:b3:78:28:e3:fc:f7:8d:4f:1a:42:c3:36:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.XmlSerializer\Release\net8.0\System.Xml.XmlSerializer.pdb

System.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6f0b811090bd863e1151e9bb9470a9a112dfed8b9261406c5b862e5e8b35aea0
MD5 2e75f746a437c3e23c0fdf4883c6bbdf
SHA1 3b1570b187ea85281cd09af870c24b525b43c8b4
SHA512 f190cca4717c9fc91dcb25cc1719c3484bf144bbbed217ac76e490d5b0fcfd9bf049b4e14ec94f3fc10b494e88bd96fe597668f00f95b8261519355c2fc95994
SSDEEP 384:H5bIeq5ufyw8bcB8yGN2WdjsWLs5kHRN7S4y8cYR9zPrf88:H5bIeWvN3R1n9zT88
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ff:30:ae:64:50:0b:94:90:70:08:78:bc:99:ed:a5:b5:af:a5:95:b3:2c:9f:f5:bd:a6:f3:94:3f:ef:4c:2b:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

18734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml/Release/net8.0-windows/System.Xml.pdb

System.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7cffafe00fec9c5909feb90126aaa04c62fe6a84e6255571fecbcb718c8b7fa8
MD5 0ea315168189dcdcadb8b131e84a29e5
SHA1 0df38e764ee84124990892122f61d15f03d30080
SHA512 830c535ad531246c319ac18b06c0d8013de34b38d789c68662196cb6969ddb88ae757a142f9441ebd1038f49f530d46904aa7961698e596ac27f895b0acd8bb5
SSDEEP 768:UclKhT46UA2Zi5wRNH5JVb0U502zq1TntuJObY9z1R:9u6Zi5i5jzCkJcQzP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

PE Signature issue

Digest

b2:06:c6:78:47:aa:45:b1:43:2f:5c:1f:55:79:86:3f:e5:83:d0:af:3a:d0:ec:0c:d4:0e:d1:38:a5:0d:af:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

45526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System/Release/net8.0-windows/System.pdb

UIAutomationClient.dll

SHA256 9fcd4fd4de5d7580362f8e1d5727de8670fae84903351e9e6cb47152a04bf04b
MD5 b597e5777c0b00062c91878848dd332f
SHA1 a3965f4a4b9eef0a8d547e1e9141c73dda946dd8
SHA512 0b03f4910380e0a37e200050902c771797b1d7d7bcc4438ba62ecd364fe81a8aceae979849014e0111807f3e07ca1c2fe565e5e8355da85aff4003cc80397c6d
SSDEEP 6144:g0W6MfcE+sAhHzOl5+wKutXoq+ZxbytOgE08AT1VFeg2E9541XSHovYvZKVC0Lz:g0W6Q+Z0adNywgt8+JVLHovjH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c3:66:62:98:f0:9a:7e:00:f1:b5:47:04:14:4a:0b:80:b9:16:5d:98:7b:c1:22:f3:54:9d:a0:b5:8d:47:8d:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationClient.ni.pdb /_/artifacts/obj/UIAutomationClient/x64/Release/net8.0/UIAutomationClient.pdb

UIAutomationClientSideProviders.dll

SHA256 b1fbae4185673b05c77b1f4d72a7f67befec57f24a6a75daaae9809ccbab368e
MD5 850edcba9ccdc2999c8955e3e4f79d29
SHA1 645cd58a90c1f67f1ca78ef22284a2b18cbca423
SHA512 aa912d7c22331c3e0e4bdb7c209c52d0f6e5ac774d23a611e789f94459ecad4d412ba719b28dc64bc7c58415934717eb0467eb812920a8343a2ed0a240ac1ec4
SSDEEP 12288:gbZidyK1v/zdsOgGlRVYvbiQ3Do2ZGq4IaYYl:c091bgu6iQzo2ZGFIY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4c:b4:03:dd:5f:67:48:99:9c:5b:f7:67:13:ba:f0:3c:78:bb:a5:f5:d5:bb:39:e2:3c:36:29:3a:4f:68:12:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationClientSideProviders.ni.pdb /_/artifacts/obj/UIAutomationClientSideProviders/x64/Release/net8.0/UIAutomationClientSideProviders.pdb

UIAutomationProvider.dll

SHA256 ba64a86f66e566bd030150296422c3de4ed377ef5e263863ba671b7b1ae15e20
MD5 1d1461b3d46ef8004d8b793c85baeb56
SHA1 7b7661a62560604426f9cbc92409d82a8b931eae
SHA512 9f17b6605017b41a3be832957e2e796218037b13c6204d23363a4fac63ea48558e96ee616d5d1c7b6bf72a6771de7fb950bc3d9ad51cd20aa4f4b97b11867a68
SSDEEP 384:w9WCvx1VI1zlLMtyDsfoG6uHOIaX2QDBBtaMaycXJe5LxmI2liZWZsQIjDZBv0gQ:oO1zlIyJ5oQDBB24x642oOc049zo3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

07:41:89:12:01:b2:b2:bd:ab:b0:ca:4c:d1:c6:9b:bb:c4:fc:8f:60:b5:6a:47:25:ae:9a:d4:9b:ab:57:67:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationProvider.ni.pdb /_/artifacts/obj/UIAutomationProvider/x64/Release/net8.0/UIAutomationProvider.pdb

UIAutomationTypes.dll

SHA256 be6f0ffbb22a393dbf323164f966fb0f59f0dcc6854693b30a8fee5c14965d27
MD5 a9b4e716178073335d3be91f3ed0f289
SHA1 398f49637197bdeb179d1c50346265d13c33f65d
SHA512 cbaba556c115b8619b3f9505322b4915a8a254253674e1e39cefd61751ed5a2e884937fae942b90b528599402f24bb22e5c421c2535eeb4bb6f703a8cc0aeffb
SSDEEP 6144:18QFxKEDyI62rBKKEjXP4Ppcpys8+LYhr1Ua:1LFxKhIVoyy0mLYca
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

74:2c:ca:63:b6:42:ba:d2:05:a1:c4:15:7a:1f:35:69:52:c6:b2:8b:af:4f:55:49:2e:3a:e3:71:6b:97:43:68

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationTypes.ni.pdb /_/artifacts/obj/UIAutomationTypes/x64/Release/net8.0/UIAutomationTypes.pdb

WindowsBase.dll

SHA256 547d3eb605f84dd7e52f09d419048e74876e8e60711dba99405f6a02aaae91b1
MD5 78d1d0dc45729591823c95694949f914
SHA1 c01b1a12204120f3fe33aaee2690ad9f02888127
SHA512 5176ac1b6a9fab967852e737f784cf0e6cd832541a7fe017969252165fb6977fc1d2c8fb71b9c8db2bbb943c6c60136de5819cb556b6bcfc04fe57d99618d9c9
SSDEEP 49152:UMhWEZ/JKSAkeacG7kLw36P6AFHNo0GTCiUVGG2hFGYWB45gkxl:zSLh6AzGTCiUVGG2hFGYn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b7:ce:7a:c3:05:62:0f:45:4b:38:3e:79:f6:66:d5:78:b9:c0:7c:5d:fa:23:4e:9b:43:bb:0f:40:53:1d:24:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WindowsBase.ni.pdb /_/artifacts/obj/WindowsBase/x64/Release/net8.0/WindowsBase.pdb

WindowsFormsIntegration.dll

SHA256 4cbfbc987b23b4bb8e8ebbb7cfaef4595b42e31a3828f6a2301975bd82b8a96c
MD5 27f43dc6c0e0109676eb1be4507210b1
SHA1 f1441bee67ae6b8459f13b58332fafb68eeb1902
SHA512 15b189455094c365169f7e8ae5641786497bcb80c0f28caf9d47ecc43b75a75563bbd0e267fc29784e4acabe5089be0f8b779e72f501bef101e8565bba8a4e26
SSDEEP 3072:5ojc7J7Lnt3fPsUkfvttCqZlPCmU82d4WIBpIUG2pQBd5eVJm495kCl5qf0B9iKm:97rt3fPsUkfvHvPU8yipG2xkI+51lGc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b2:96:a5:aa:71:70:d7:9b:a0:b1:60:8e:e7:c2:c5:89:68:00:06:d1:ea:5a:37:38:ec:6b:6b:91:07:6f:72:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WindowsFormsIntegration.ni.pdb /_/artifacts/obj/WindowsFormsIntegration/x64/Release/net8.0/WindowsFormsIntegration.pdb

Zoom.dll

SHA256 171dbf634e43510888848067266c4b6a54c60e56940fe28f1229ef0ce1aa7847
MD5 90623b8160d287ab381279b38b6d5232
SHA1 7d582a9aa04d21d43aa15f41d2b9f20a268cc5f8
SHA512 1068c6157e5353215eb401c47acd9bbad2a49b2cda2c6902f1577e4f8bac95ff9f3c81bbb07e79ab6be4b86f43db6a3a85f4a4a63734e2bb572348d3d8e1696f
SSDEEP 3072:aJaOLhShy0LiDJdJcMJW8ymKOu69cIzjARFdnGeU2Ut26oz:6aOFShy0LiDJ3jJW1mKODGJdGeLUm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

.NET Reactor proctector

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Zoom.pdb

Zoom.exe

IMPHASH 5c16479801aac25e19e4d3e71f54842d
SHA256 719569fae056176d52dd35bc34e6f56bfdac7b9ed3a63c1129eee77b1510d7ef
MD5 4b1f48b539772d30537e7dd3d355109c
SHA1 27bb2f9662951af5b393dd13a6965325a8abc02e
SHA512 5d73b01380549e4ab529f2adce2c95342a7d5db163809ae11b21abb2f6248026d233569f87870173a3a478230c7ac06eb9ac1d5a01cdf79429cd3bb0c1484f56
SSDEEP 3072:EefQZKfOC31VwyY9egNtfNjJvjmqqF7Hb/LMm5M6DY26oz:EDewyY9egLRePYm59t
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

72528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _initialize_onexit_table _crt_atexit _cexit _seh_filter_exe _set_app_type _exit __p___argc __p___wargv _c_exit _errno _register_thread_local_exe_atexit_callback exit _configure_wide_argv abort _initterm_e _initterm _initialize_wide_environment _get_initial_wide_environment terminate _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

__p__commode setvbuf __stdio_common_vswprintf _set_fmode __stdio_common_vfwprintf fflush __stdio_common_vsnwprintf_s _wfsopen fputws fputwc __acrt_iob_func

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc calloc _callnewh

api-ms-win-crt-string-l1-1-0

strcpy_s wcsncmp toupper wcsnlen _wcsdup

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s wcsftime _time64

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func ___lc_codepage_func ___lc_locale_name_func _configthreadlocale setlocale _unlock_locales _lock_locales __pctype_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

Name

.text

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

clretwrc.dll

SHA256 3221c558f2fe3ece84b0ca9cec27ab62d3518858d3afc49226ff79e7b7d42e0a
MD5 c12f1651e61edef832c290cdc3ccbdfb
SHA1 a329fb8e9feacad28120a1c16dafb9469ceb4317
SHA512 1e6863e95434f60d591899d2a981892030406057b62d2fc19bac5f2e954f987eabc65f87d164495d8f77f761bec9c9ff332c5ef2fd8385bf64215e96c4210609
SSDEEP 3072:J99XK6chFa5y9sh33X+QIa7rGgtfqYZdzZ:Fq0FfqYZdt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

00:9c:20:5b:d9:20:e9:4a:02:23:9b:8c:23:77:cf:9e:39:1c:a0:b8:32:84:0b:80:e2:7c:bf:e1:65:ce:e4:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\clretwrc\clretwrc.pdb

clrgc.dll

IMPHASH 1b58a12b22481a73b70459ac1dd7c5be
SHA256 dcd41cbd6dfa262bbd00ad3afaaf93ee5fc185c58a9dfb97ca1975aa367f9f2a
MD5 107332498bbd353c98eaaede29cd0f02
SHA1 81232df967bcb16c073ea69a7405ac7b67613f8a
SHA512 1c2d6ef3c0e63d376a95de2403fee395c22d8d783f2956a8cc164514a51d85f5a768f0977939a490d1358cafe268703c374cf789056b8094d68d6ae237f98150
SSDEEP 6144:zASNUjAma1XYwwgbL+08M9Lm5e8oMKVz6m/iIF9iZkFFMFVge5HX8l/G/QqjgDud:0Smjba1XYwsMA5gMsPQkFgLZX8lyXjg8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

39:c8:15:4e:d8:a1:a9:3f:a2:66:0a:aa:b8:62:5f:07:ac:23:a6:ae:a0:2b:b9:5c:e1:3a:9d:46:bf:9d:80:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

562128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\gc\clrgc.pdb

kernel32

RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlCaptureContext GetEnabledXStateFeatures InterlockedFlushSList GetProcessGroupAffinity DebugBreak SleepEx GlobalMemoryStatusEx SetThreadGroupAffinity SwitchToThread ResetEvent GetSystemInfo CloseHandle QueryPerformanceFrequency GetCurrentThread GetLogicalProcessorInformation SetEvent K32GetProcessMemoryInfo GetCurrentThreadId GetLogicalProcessorInformationEx GetTickCount64 CreateEventW IsProcessInJob WaitForSingleObject GetLargePageMinimum FlushProcessWriteBuffers InitializeCriticalSection SetThreadPriority GetNumaHighestNodeNumber SetThreadAffinityMask SetThreadIdealProcessorEx QueryInformationJobObject GetCurrentProcessorNumberEx VirtualFree GetThreadIdealProcessorEx VirtualAlloc GetProcessAffinityMask VirtualAllocExNuma GetNumaProcessorNodeEx VirtualUnlock

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-runtime-l1-1-0

_initterm abort terminate _cexit _seh_filter_dll _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _initterm_e

api-ms-win-crt-heap-l1-1-0

calloc _callnewh free malloc

api-ms-win-crt-string-l1-1-0

wcsncmp strcpy_s

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

Name

.text

Size

565KB

Virtual Size

565KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

776B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

clrjit.dll

IMPHASH 3f9720bbb0670cc703d4d9b5a9d80407
SHA256 0759c8129bc761fe039e1cacb92c643606591cb8149a2ed33ee16babc9768dcb
MD5 8b81a3f0521b10e9de59507fe8efd685
SHA1 0516ff331e09fbd88817d265ff9dd0b647f31acb
SHA512 ea11c04b92a76957dcebe9667bef1881fc9afa0f8c1547e23ada8125aa9e40d36e0efaf5749da346ba40c66da439cbd15bf98453e1f8dab4fe1efd5618fdc176
SSDEEP 49152:1qIj/5IWQEyvBdl6oG452IhUz2IyUT/7Qnm9Ioj4zH:1nvQE4vF9hUz2Iy47am9Psb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

34:a5:90:cb:24:1f:d3:f5:78:10:58:d7:7a:d2:fe:34:a0:b9:b3:af:59:9b:bb:65:8a:fe:49:1e:b3:68:28:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

1055072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\jit\clrjit.pdb

kernel32

RaiseException DebugBreak OutputDebugStringA WideCharToMultiByte QueryPerformanceFrequency QueryPerformanceCounter DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree QueryThreadCycleTime GetCurrentThread GetLastError GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeLibrary SetLastError LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeSListHead IsDebuggerPresent RtlUnwindEx InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress RtlPcToFileHeader

api-ms-win-crt-math-l1-1-0

powf pow logf log2f _fdopen log2 log10f log10 tanhf log fmodf fmod floorf _copysign _copysignf _isnanf acosh asinh atanh cbrt sqrtf acoshf asinhf sinf cbrtf truncf ilogb ilogbf _finite floor sinh sinhf expf exp coshf cosh cosf tan cos ceilf ceil atanf atan2f atan2 atan asinf asin acosf acos sin atanhf tanf tanh _isnan sqrt trunc

api-ms-win-crt-stdio-l1-1-0

fclose __stdio_common_vsprintf_s fseek ftell fflush __stdio_common_vfprintf _fileno __acrt_iob_func _wfopen _dup _setmode setvbuf

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-runtime-l1-1-0

abort terminate _cexit _errno _seh_filter_dll _initterm _initterm_e _invalid_parameter_noinfo _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-string-l1-1-0

strnlen strncmp strcmp wcsncmp strcpy_s _stricmp

api-ms-win-crt-heap-l1-1-0

free malloc calloc

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

226KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

coreclr.dll

IMPHASH 2737d9922001d87d319ab7906903520e
SHA256 871949a2ec19c183ccdacdea54c7b3e43c590eaf445e1b58817ee1cb3ce366d5
MD5 9369162a572d150dca56c7ebcbb19285
SHA1 81ce4faeecbd9ba219411a6e61d3510aa90d971d
SHA512 1eb5eb2d90e3dd38023a3ae461f717837ce50c2f9fc5e882b0593ab81dae1748bdbb7b9b0c832451dfe3c1529f5e1894a451365b8c872a8c0a185b521dbcd16b
SSDEEP 98304:ck26vFhYIhiu8qgX43I1eZ8J8xgecGByojq:auBQqIsZ+8xg/GU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

89:72:da:66:fc:2d:10:96:fc:5c:a4:0d:10:d9:9f:03:53:1f:72:31:00:7f:f1:53:e8:a2:3c:39:42:4e:47:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

1430144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscoree\coreclr\coreclr.pdb

kernel32

WaitForSingleObject RaiseException FreeLibrary SetErrorMode RaiseFailFastException GetExitCodeProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter AddVectoredExceptionHandler RemoveVectoredExceptionHandler MultiByteToWideChar GetTickCount FlushInstructionCache QueryPerformanceFrequency QueryPerformanceCounter RtlLookupFunctionEntry LocateXStateFeature RtlDeleteFunctionTable InterlockedPushEntrySList InterlockedFlushSList InitializeSListHead GetTickCount64 DuplicateHandle QueueUserAPC WaitForSingleObjectEx SetThreadPriority GetThreadPriority GetCurrentThreadId TlsAlloc GetCurrentThread GetCurrentProcessId CreateThread GetModuleHandleW WaitForMultipleObjectsEx SignalObjectAndWait RtlCaptureContext SetThreadStackGuarantee VirtualQuery WriteFile GetStdHandle GetConsoleOutputCP MapViewOfFileEx UnmapViewOfFile GetStringTypeExW InterlockedPopEntrySList ExitProcess Sleep CreateMemoryResourceNotification VirtualAlloc VirtualFree VirtualProtect SleepEx SwitchToThread SuspendThread ResumeThread InitializeContext SetXStateFeaturesMask RtlRestoreContext CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolTimer ReadFile GetFileSize GetEnvironmentVariableW SetEnvironmentVariableW CreateEventW SetEvent ResetEvent GetThreadContext SetThreadContext GetEnabledXStateFeatures CopyContext WerRegisterRuntimeExceptionModule RtlInstallFunctionTableCallback GetSystemDefaultLCID GetUserDefaultLCID RtlUnwind HeapAlloc HeapFree GetProcessHeap HeapCreate HeapDestroy GetEnvironmentStringsW FreeEnvironmentStringsW TlsSetValue CreateSemaphoreExW ReleaseSemaphore GetACP LCMapStringEx LocalFree VerSetConditionMask VerifyVersionInfoW GetLogicalProcessorInformationEx SetThreadGroupAffinity GetThreadGroupAffinity GetProcessGroupAffinity GetCurrentProcessorNumberEx GetProcessAffinityMask QueryInformationJobObject CreateFileMappingW GetSystemTimeAsFileTime GetModuleFileNameW CreateProcessW GetCPInfo LoadLibraryExW CreateFileW GetFileAttributesExW GetFullPathNameW LoadLibraryExA OpenEventW ReleaseMutex ExitThread CreateMutexW HeapReAlloc CreateNamedPipeA WaitForMultipleObjects DisconnectNamedPipe CreateFileA CancelIoEx GetOverlappedResult ConnectNamedPipe FlushFileBuffers SetFilePointer MapViewOfFile GetActiveProcessorGroupCount GetSystemTime SetConsoleCtrlHandler GetLocaleInfoEx GetUserDefaultLocaleName RtlAddFunctionTable LoadLibraryW CreateFileMappingA GetNumaHighestNodeNumber SetThreadAffinityMask SetThreadIdealProcessorEx GetThreadIdealProcessorEx VirtualAllocExNuma GetNumaProcessorNodeEx VirtualUnlock GetLargePageMinimum IsProcessInJob K32GetProcessMemoryInfo GetLogicalProcessorInformation GlobalMemoryStatusEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlVirtualUnwind IsProcessorFeaturePresent RtlUnwindEx EncodePointer InitializeCriticalSectionAndSpinCount TlsFree RtlPcToFileHeader CloseHandle TlsGetValue GetSystemInfo GetCurrentProcess OutputDebugStringW IsDebuggerPresent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte GetCommandLineW GetProcAddress GetModuleHandleExW SetThreadErrorMode FlushProcessWriteBuffers SetLastError DebugBreak GetLastError FormatMessageW

advapi32

RegisterEventSourceW AdjustTokenPrivileges SetKernelObjectSecurity GetSidSubAuthorityCount GetSidSubAuthority GetTokenInformation OpenProcessToken DeregisterEventSource ReportEventW RegQueryValueExW RegOpenKeyExW RegCloseKey EventRegister SetThreadToken RevertToSelf OpenThreadToken EventWriteTransfer EventWrite LookupPrivilegeValueW

ole32

CoCreateFreeThreadedMarshaler CoRevokeInitializeSpy CoGetContextToken CoGetObjectContext CoUnmarshalInterface CoGetClassObject CreateStreamOnHGlobal CoGetMarshalSizeMax CLSIDFromProgID CoReleaseMarshalData CoTaskMemFree CoTaskMemAlloc CoCreateGuid CoInitializeEx CoRegisterInitializeSpy CoWaitForMultipleHandles CoUninitialize CoMarshalInterface

oleaut32

SafeArrayAllocData SafeArraySetRecordInfo GetRecordInfoFromTypeInfo SafeArrayAllocDescriptorEx VarCyFromDec VariantInit VariantClear VariantChangeTypeEx VariantChangeType SafeArrayGetVartype LoadTypeLibEx QueryPathOfRegTypeLi CreateErrorInfo LoadRegTypeLi SafeArrayPutElement SafeArrayCreateVector SysAllocStringByteLen SysStringByteLen SysFreeString GetErrorInfo SetErrorInfo SysStringLen SysAllocString SysAllocStringLen SafeArrayGetDim SafeArrayGetLBound SafeArrayDestroy SafeArrayGetElemsize

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

_strnicmp strtok_s isspace strncpy _strdup iswupper towlower isalpha isdigit wcstok_s strnlen wcsncmp iswascii towupper strncpy_s strcat_s strcpy_s _wcsicmp wcsncpy_s wcsnlen wcscpy_s strlen _wcsnicmp strcmp _stricmp wcscat_s strncat_s wcsncat_s strncmp iswspace wcscmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s fgets fputs _wfopen fclose _flushall __stdio_common_vsnprintf_s __stdio_common_vfprintf __stdio_common_vsprintf_s __acrt_iob_func fflush __stdio_common_vsscanf fopen fwrite

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo _initialize_narrow_environment _errno abort _controlfp_s terminate _configure_narrow_argv _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit _initterm _initterm_e _seh_filter_dll

api-ms-win-crt-convert-l1-1-0

_ltow_s _wtoi atol _atoi64 _itow_s strtoull wcstoul _wcstoui64 strtoul

api-ms-win-crt-heap-l1-1-0

malloc realloc free calloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

pow cosh cosf cos ceilf ceil atanf atan2f atan2 atan asinf asin acosf acos powf logf exp sin expf log2f log2 floor tanhf log10f tanh tanf log10 fmaf log tan fmodf sinf acoshf cbrtf sinh modff modf _finite _isnan _copysign atanhf asinhf asinh cbrt acosh atanh fmod sqrt coshf sinhf fma

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

getenv

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.CLR_UEF

Size

512B

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

794KB

Virtual Size

793KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

180KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Section

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

createdump.exe

IMPHASH 7c21ee9d89b5f22d2f7582448b21a30f
SHA256 2c80484244598751462ce140768b970d8d5513ed919ee0b9257e48afdb73a6ea
MD5 da1aa2aa5fb66d00aa0b99c0c5dca64b
SHA1 4f9f09c47c62a63863f0f93f41a92e008cd1f0c6
SHA512 531230c1997f65ffe317f161b9ded76de98795bb0261647f3b067c687e6eb2a881fb53d6098536e8e8995569cdd78939961aa666a2ef36676ee0fab088708974
SSDEEP 768:ZrU+DEH1c0NCo4gq7qGO38wNh5EnXoS8YeHDh53ET44OAud79zR5:hhOcJgq+8u59FKJnCRzR5
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

e7:44:5f:18:27:86:fb:3d:1f:fb:df:97:14:32:19:17:56:5d:b6:fa:ab:e9:5f:3f:b2:04:51:74:a8:5c:8a:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

12000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\debug\createdump\createdump.pdb

kernel32

GetTempPathA QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcess OpenProcess GetLastError CreateFileA CloseHandle K32GetModuleBaseNameA LocalFree FormatMessageA InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx LoadLibraryExW GetModuleHandleW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetProcAddress GetCurrentProcessId FreeLibrary IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter TlsGetValue TlsSetValue TlsFree TlsAlloc

dbghelp

MiniDumpWriteDump

ws2_32

gethostname WSAGetLastError WSAStartup

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry NtQueryInformationProcess RtlCaptureContext

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fflush fclose __stdio_common_vfprintf __stdio_common_vsnprintf_s fopen __p__commode _set_fmode

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function __p___argv _c_exit terminate _initialize_onexit_table __p___argc _set_app_type _seh_filter_exe _register_thread_local_exe_atexit_callback _cexit _configure_narrow_argv _exit exit _invalid_parameter_noinfo_noreturn strerror _errno _initterm_e _initterm _get_initial_narrow_environment _crt_atexit _initialize_narrow_environment abort

api-ms-win-crt-string-l1-1-0

strcpy_s strcat_s wcsncmp strcmp

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

calloc free _callnewh malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

372B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cs/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fd06b20ce6931b21f9d0a49115e69d2936b5ba373b7c407e9a7e5c0d8b27dd05
MD5 67c4ef90b6e5e32c9babe0a363e72d25
SHA1 c1726e7e4d9cb4e0541257116d13dccd2eac1265
SHA512 945567048b52c66445ba5fe9c3630062b4405a5b2f9973e3283eafe08ff173aaee0a7fccbd9ce8d95c0fb52940d4da7c489c966949d5f3783c483692ebbf4c14
SSDEEP 384:ny1oXSXRaRgGYXdXxa3HNDQuEFX2h3DhT3HvCNsz4aWYHwhQ5W05kHRN7Mroh6zA:ny1TG7tEpsX76ysRM83C9zkf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

68:8a:0a:b3:34:b7:2a:ea:3a:92:5b:96:ce:30:09:6f:fa:a9:d7:bf:99:b0:35:7a:a4:4a:a1:3c:51:6b:6f:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1d2616eeda6e5de6b0a9056c66738cbcdefd2d5d519474f4147d81034e146e3f
MD5 b0de7fb72b394697b39c0603c3b4613d
SHA1 ba9862ee08ec7e97e14db48768a5757e2a06ddd2
SHA512 40eb594ced2bd56dabab1821c95608054ad5eb54ff7cacae8c9f1e4c81892aa3dd363e246cbbc2b36fbdbeeb742ed08d700a42d787fa6219b655b44a8af62777
SSDEEP 1536:N61jOiudK2xPuV2NQWy0G10HrGPr+vbCh1gGfWlkoJYDRuXhzUes:Q1iZdK2xPuV2NQWy0G10PqvaYDR8hYd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c4:94:a0:d8:74:3e:ae:b2:ea:e3:62:c5:b0:e7:57:0d:fb:fc:4a:07:cf:dd:4e:f3:1e:3a:48:d4:03:65:0b:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

103506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0264e04475fd4595328e674de65d3f4dcfb6206520abfaf1a662e171f9ba87b8
MD5 7d3ef3ca8d5083b303be838c4c00b4b6
SHA1 7e7bb668f08e76d73b8693d4d6783f0bdc309720
SHA512 68a68ac869e2a64c56f924b0aa3886f57bce6b28cd6dfd148dcfc92c7ba126b37266b8fa73d11ac401f3fe8bb81bd66812c7e04d7c6e520f6d4d59a21b6b74db
SSDEEP 3072:sGvHPmNMzn4KIr62w7irW9gmOlkOVujaCv+2d5sHwyZ7YgXtSwv0T8Oo/W:sGtROlkOVujaCv+IXyYgaf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1d:b5:51:7c:a1:a0:43:f9:2d:2b:0f:02:ee:65:6a:df:0f:12:25:68:7b:64:f6:60:b2:b4:22:4e:50:11:38:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

191986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f0a19b0a93d18d8650748423e0208216a9232828c62c2a3659f7a12a3cf2eb6a
MD5 22feff411f5eed1bbe9c66536c244cb8
SHA1 93fa0da607416b9268e075ee7faae032f6aec31e
SHA512 648d2a8616973ab2d798540da39960268e42891ade7b7c875317668e5454c18717be5329e9da661b4ad3d6799f7914c73d47b0af752726fedc5509c6009f5160
SSDEEP 768:cM+UU5rEkDGt95ZHI7Q+COorA23FgdAbyJsZTd7miF4NORagVLA9OYLf/ii49zag:RU5rEkfk+COorA23FuAbyJsZTd7mEaQR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e8:96:47:48:72:c6:a9:47:c2:a5:af:1c:ec:c8:2a:12:a6:46:51:d2:7b:02:a5:cd:96:fe:2b:ba:4a:cd:01:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

40502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bac57c73da334c24d38b7b36647fc5bdd168546b0635cbe287f19df7ecd74543
MD5 a09c0990b5200402391edd4791509ce4
SHA1 b3aeef22bf6399aaf39e3ce840085b760a0c727d
SHA512 9132a04c11035f4f4368cf4a3787ecc3b53be18be2a442a359a75ebcb9740147fa6046ea8b9721ee6d17f3a3d242dcf6a6c9844c1ef81e2806ef70989c7106ea
SSDEEP 768:x8SzmZ9ewDSc2PpTzggPY2hn3sK3jjRsODMhlOLYIfUVrRGKUPGm4hFf7YrL0/iN:ZzmZ9ewDScDycWUilzP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2a:a3:1a:69:ad:af:51:ed:38:da:3c:c8:9d:cf:13:53:f1:f3:3e:27:61:b0:c4:20:c3:f4:15:c8:02:8f:c3:e4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

33854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dc8589be0e99b04c262c4b747fd8c6f3a4d4d2346181ffe62a9f03b34c8885ab
MD5 da14b77bdef9c309ce67ce2bba686660
SHA1 a0bbd948548f933a06f8f5c1e1c019fb7611b7e4
SHA512 bb6ddf5e26a616751680eabdb0b91bb1f632364e04853eb29ddba84696d5db6e667c82331d858c98c5c99b5d726e3afbd46ed7ecafeb5601166134aeb1479fcb
SSDEEP 192:SoRzQ+7n8yzrEoEW1InAtWV8G3WT56Os1HnhWgN7aIWfurew6IVnKaQwP7yX01kf:Fh5hzn/tWV8H5kHRN7Ow6zaHeR9zPmQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e2:80:d3:ef:db:c9:4e:a9:6f:56:5e:d2:5d:51:4c:84:a5:1d:11:7b:7c:d1:f3:64:32:b6:7b:39:df:40:45:3d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 80ff0e1a53125ba0c77f5375c25ee2c14a1a73c335bc0d32f1a78511fb437b6d
MD5 f8fcde73038c058be4ea3dacb288c1fb
SHA1 59a9ff8213a3a693803ec8a3363b8ff74d187416
SHA512 cd94828dd111b64b9446102eb1b265718bb37c07cbeaea0756015accf2714116f4e96d8cc4bc73fb3dd03c356b276d8d73e35209265bc1a1511372c1b352bf20
SSDEEP 3072:xgR9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yn8ZCeLo98bB2Y3eRhwvMhAUlEL3/:xnEL3eAVR6+v3QC6kx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c0:39:aa:46:03:d4:5a:f5:62:50:23:e6:3e:98:f7:89:2f:ba:d1:9f:cc:72:77:4c:a7:d9:3f:38:8e:d9:31:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

144362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8595c5689685ee274842f587f4944b7888084ac1cc76c473bc4a13df6b8bc2b8
MD5 372db213250b36cad67069e2437a14d2
SHA1 929e63bbfb5517df73c60ba5452eb179417be505
SHA512 2c02a3e36caf87f0fc81a1cf73edd1c1adeb415ab52b2b3dc808edebb554dfc5fa4e668b2c7c93b87fc9190c63546cd420c3e666b03cdeea5c47e0f4a81c5cc3
SSDEEP 192:7i6tQccV+WNiWBuWXebPpUNTQHnhWgN7aIW6rqKQTb8o+X01k9z3AO7mhC38:e6lPWNiWBTb2HRN7TrqKI+R9zJKT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6f:50:9c:ff:c9:c6:db:90:a1:12:04:f9:96:b2:1e:f8:b3:29:c7:d2:0f:78:e7:0c:9e:a2:4f:d1:08:e7:a2:17

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11110

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2975cb06cf3d9f4491c48aaf8958c601ba56f0dcd1805318c03d6330c0a1e743
MD5 7be669e51038fb70869fae3ed4755e85
SHA1 e7d0fbe907ba74cc1df9854d97d1516bce9b842c
SHA512 e2f1f5d12f7a56281b685f1a17181e225dc75288bc958ca5daf56853da8c31d28d4a91d6a0eaac916221a9b244049a84b7651fb2431a1966feb2f83c90796b2a
SSDEEP 6144:mqcG8hubU1YaA7qJILgdTskBfw9IgcPixGAc5gPRXlHY5ItiVTSqVH:mqcGagqA+gPRXlHY2cH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

80:3f:ab:6e:74:a4:2d:f2:ab:31:75:13:23:e0:35:84:1e:07:57:d8:35:95:23:fe:13:1f:8f:75:0a:5f:e0:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

360814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b65722d8185ff9a26a9f3ad5d930b4f98236026054fc7308aa79910aabc1ddd1
MD5 35f98e68e1f0c8129176dbce46382198
SHA1 8c8d9d8ea9d6e6f6e83ec9eecc72af5abc61e40f
SHA512 6f7301ea6a8a95bc4a89d7526b9036a8aaadde5529cbd8e651fc18b26093160479db53b2f0e2ef69eda1612c975f811afe4583de60edd76c66d4850b388fa2bc
SSDEEP 192:w44IbEN+tJ4EjCH99ojwQWpgg8uWXebPpUNTQHnhWgN7a8WBIXwYKKWDKHjj3SX3:DGmGywQWpgg8Tb2HRN7C+Hj+R9ztYBHc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

02:ab:06:5f:51:14:0e:2d:45:1b:bc:96:e8:96:fb:d2:23:20:f5:79:ac:91:6c:11:7d:17:b8:62:97:23:a3:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 57c79a8517834919c0dcf1eda284273e6c272ae2fa9b00f295443274870180cf
MD5 d0b5c7af40f0d3eaa7a3842124558ff1
SHA1 b3dedd83c7a493642573beb55affa045a65d8481
SHA512 c8d0542975ede4eab4fb633dc318a29f4a60d35d7942a468bee34cf4c26e8a67cceaa25cc1550fa8889cae5a8cea12668180c504af5e80ea50d136c861f70788
SSDEEP 768:ZZOv6KEoT/pba9wcfRm+enfF/gD/F4oGiYspNqHMK/xExeCh4o6N2+tVx0Vqi0jk:mv6KjfFC/4i3p6xV8w9/QDWiwza
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e6:23:4f:60:e9:f3:d7:4a:b1:44:3f:e3:20:1c:a7:42:ca:37:e5:a3:e0:f1:73:33:10:54:8f:69:a8:8d:50:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

60022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a49ead6536320171e5319b68d201795fd72b75e25951e09d76bbc9f3409df13f
MD5 b146836e7d4096dd367d647816c56c72
SHA1 74bb55bb0bfa5db1216d996ca1d3b3271de09c43
SHA512 e1fd2a613515f6b1cbea7af04db2eb3d15cc6f6eea2c704deb45c9d74b5314b1d9e0586336d8683c3191d8ff51cc0ab9935cba6a66a4ac854579358401685f61
SSDEEP 384:NM3fl/3YTo9rbJTTHWWwJI4tWSKAzTb2HRN7q/VwR9z1Pa18u:NMPl/3c0TbWWfv4/iL9zZa18u
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d2:31:67:ad:ad:44:5a:18:ca:b4:33:dd:39:b5:81:8b:5a:7f:10:ad:3f:57:90:2e:60:d4:e4:eb:d5:26:59:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5dbb9951ffc276b4c4939a4f6c809bcb88ac5992b491ac7609ea684162735272
MD5 e94b3232308940c3e9bb143b76a393d5
SHA1 1346f96bdf324dc8b1c97b79ec6cd3040a1d79ae
SHA512 411313b49031e95102c514b68d3010e95e6ce94a08f7f5b9677eb3cb9c7b3dad46bd7bf8096e9c9e072f1b8c8ebf3a2ca03a823f2e753f7e2062340204df8344
SSDEEP 384:4NAMEXIoYk1fkvFAwgqtWKXO5kHRN7XG5sWAR9zgX2isPR:QAMExYk1fkNAgX2OL9zRig
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

24:9a:42:67:a6:33:d7:1c:a2:71:c8:f4:2e:5d:d3:53:97:9f:f5:6e:c8:a6:63:8a:c9:fa:91:1f:83:11:87:d3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3fbdeeb5349de1db8d03dc17e7d52ec0e47bae775c839ccd58734b7639b0d94c
MD5 25b9d57d23cd7b835773af91e93e5a20
SHA1 e5466d9f8edefcc95210d185a0a2307307fc171d
SHA512 048eb01fce082f17f325db8e7910fec034ad383a5a795fd329d6d45a736d7944bc371c0dd20ededa61c3cbe93271e693bc4db3551425d6896a6123efb44e0485
SSDEEP 192:jF3Z3rfWPFItWb+5uWXebPpUNTQHnhWgN7acWQ8hBwUoX01k9z3AurHNBgam:FlbWmtWb+5Tb2HRN7UhUR9zDwz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d1:ba:02:cc:99:c6:ea:fa:8c:fc:48:70:3e:7b:ab:93:fb:d2:3f:19:21:a1:a4:2b:58:2d:cf:a9:55:b2:31:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d79ebf0b65ae4964a6c95b81a0564111de4f3a2825844b70e997d95f5e072ebb
MD5 9f4a42d214799ccea0058b1a14f3d93a
SHA1 2daa27c9bb117c74a74c03baf1a9451b56e9060a
SHA512 9caa6f54a7f190b3be1a5a2ef2fddbcaa120dce1a26f29f32e07c2697a9519424a113c14025ea82cb25b0af9848453625bf0636fc3830c538b15468653224663
SSDEEP 384:OBHqQrFhEptWIBYTb2HRN7Ur/vUR9zD0g:6HLEvS/iYI9zX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

96:34:6f:0a:f5:e5:6c:f9:3f:b8:9f:bd:61:89:7b:4f:69:a0:b6:0e:b2:45:f0:1a:74:98:9a:fc:d2:35:fa:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 906f89c860ed36031d26d1848f9ac4431cbf737301f081c59b7ee98ef2ac66b0
MD5 6725066d944face473138823b606993d
SHA1 1686f52ca0804ce6ee1486850c03668bc715019c
SHA512 b1936075be110e16c9eaa25900b6030edc5541ec8c33a7a338bab8d568a451248a62f4163eb27d1827fef18a30e803c3ce780cf4fe1a6aa4b0e64fdc12dd4d62
SSDEEP 1536:zV+D7XRp8VMkHsY6kmnmmUIaRQoZk6OeEPPdVYFWPAiPzr:zw7XRp8VMkpmUOLdPsk/f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:10:41:db:ec:2d:79:ae:b3:cc:d0:d6:a2:5d:df:88:0f:06:bf:04:5a:ee:3a:ab:d5:3b:7d:ed:b0:dd:9f:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

81878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cs/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 33dbf793c5eb1bd90b0fac73440745437b9b263ee5033e3f77f1ec20c52f4dea
MD5 374d9e78ac844369cdf4e01f602de6a6
SHA1 48e8e889b31942aa026e994400cd1a8494a3a775
SHA512 2629d6d2f7d3431a75a9764493aaa70f5b4af48c53f836380e998fdd8c9ae4131d516c995b8162d70e5b57a701eee9ce7d73b66c6b238c2793e1ada9c61fc457
SSDEEP 384:RKuLFLH/aW2DvtWSfjTb2HRN7sR9zrpy3:hZH/f2r7/ig9zw3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

90:db:2f:9b:59:1e:ef:b4:a8:9e:91:c0:63:5c:f5:c9:0c:ab:3c:2c:f4:91:df:e4:73:97:45:f4:f8:10:f7:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b3da3d81da2d7c6b62c95ef0cf9bb7e5b7cebfc21a2b8534ae31caf91c39bc40
MD5 77cefc71e3ac02e6215cb37f38e789a3
SHA1 0376028c435c01ffa7b69e5ff81daa4b60d67c7f
SHA512 eaa7d91e33dd0f7294d6398f8953cc84173cdefeb8da655c481bd76983ae052a126bbb59372beaef1add5150c3e5e3a0d08d053f44b9ba6f93127495d07a05b2
SSDEEP 384:a7XSXRaRmIPXdXxa9G/Quw22zdXhY//QxpsJpuJaWYHwhQ5WtTb2HRN73itsWAR0:agIOGIR3o/oe89/ilL9zRiB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2d:34:0b:cd:76:1c:88:af:01:30:b9:5c:54:ef:de:7c:cf:b1:f3:c9:89:39:9c:b6:10:22:60:96:94:17:6b:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 77ad96d0490ed939549742c3c2f75f0ca6c87b55d0f068792eb3671aff31a83e
MD5 d67e49077e2e97f74bfe5daabb11edae
SHA1 d74faa7a06b704d28f57d5756d40c177570cc44a
SHA512 9f0c7e358f028fc703cb04342fb4a3f91ea660a68279960ca407d8125c143c11185f6b5d09733de85d45b2e027e212dbe083b9fd5424ee4466a257aa7abe3bb7
SSDEEP 3072:G1iIo6VUKnxiKRShGqpHG9MTyzYbiEnaFEghf8:G1iJ6VhxiDhGqpHG9MOzYbiEaF/m
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6b:fd:bd:1d:c4:61:e2:7a:22:f8:40:96:87:ba:76:17:f2:0e:56:aa:0f:ee:71:35:53:7e:22:5c:c2:40:51:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

109158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dee93c01ab87f2cf64ec00ac5334bad857966f5437bf19e7552aeadc2ad300e3
MD5 3b647cf9a645fe8c44331dab041c5092
SHA1 eb008e74cd2bcd8d7781681d2d1c904635a7ef8a
SHA512 fafce5659a08d1474e8467e51e823e8c2ba8e03f48fe319087268408b000e969846dc938330cdf4fc6ee9179098db15016d188a63d60a29c15f3ff7f477dc31c
SSDEEP 3072:KGTpPMKCjcKNI3DPzjPZTBS6fZquXuWq780znJGNEfPPk53W/pm7eLgArcT0gL:KGFhquXuWq780dGyk53W/pgegLL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e6:b6:bb:60:a4:c5:52:ec:a2:31:3d:1b:87:ba:46:5d:9f:93:57:a3:7a:aa:c0:9b:c0:7f:e9:2d:c2:0d:aa:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

208534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 19ecaad5b4658a23a9df20dd03b313dbffc45addcaf107251d70e7b616f443e6
MD5 7514a5aa3e0bfe61f75d374409df3847
SHA1 d6d0d8e946ea7deb7ca56eacb43d9cee747d6387
SHA512 962eb2bdff117ed2a89cde3205189630e823854c818f7a614f1477bf8ad3302baddfbe2f8320d59c28e250d2cd392e890508ed421e50d71da39e1b5a9a53db86
SSDEEP 768:Fp4ICj0Yq+OlNxbf49Re1sqwa3DsFDOgvOeX0e+W7goew5BmPm3hOnWhW9pnGUWA:n4ICj0YGvsqwa3DsFDOEOeX0e+W7goef
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

14:7c:ec:ba:e3:c1:fb:96:4d:b1:f1:09:02:e0:59:61:0b:59:ac:ac:cc:38:92:8f:73:ac:08:7d:2a:36:3a:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

42030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a517465bd9a6718f987c88cb413ffb133992037d13987cb84ad355c07ecc9df8
MD5 ad1c45bc0598627626d622b00b84b7d8
SHA1 71d86a4644848f4ae636d5214dfbf47e0ad46c90
SHA512 c98240971626e736a11f5d43760a803713357e638ab37fa4e4d7f843bc93b5b8c9a4a16b2bb0affbc4ffd7d66dae67c64ae8aaca4614512ef0a89b6a1e11c286
SSDEEP 768:+O/ENueEDeiW9c/Fb5P+2Hi45s7j5fF9zw1EOb4mjpbjlhewSRACReCI3bEbn9zO:l/ENueEDeiKnACReCI3bEb9zTi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ad:8c:7d:ee:c1:5b:34:77:8d:a2:24:71:c7:89:35:ec:dd:c7:e2:3f:a1:d0:a9:cf:7d:48:d0:d6:71:1f:7e:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

34714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b9a048bf64df592712e580983aa809e140379bd7f60221a6f4f16c125539b131
MD5 b36b5771ad4c27d58726f6b741c95ef9
SHA1 e5a4551f27d671af96c56ba522085c5c2ee45b9b
SHA512 68eac667a1b6576d1b9c0e6af0db1e56df9ee0f853ada99d271111a51fa6954ae1b2e5231d3d9e49d97423c870b8f7000fd444affacc01194ac8dc5a63969050
SSDEEP 384:0Ahihsp15tWV8mTb2HRN7tJ1sWAR9zgX2iCf:dqs0d/itJSL9zRiCf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

12:e0:a2:09:b6:40:9d:57:14:ca:87:b9:08:94:92:94:3c:88:a9:af:87:ca:ed:bc:6e:88:4e:96:1b:65:25:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad6d8d0cdf38d969c3d560d0eb2aeb1b1dacd717ca9c9e2c3808fbd236b26291
MD5 7fe93dc533431281fbcf011ce3d4de93
SHA1 b68fbf9a36d26250e1838584959e3eb92bd7607b
SHA512 3023be8a84a26d756ea16726f8ba3140876409f2c7c3cc4562d473333d138904af85cf69ade0c2cd398a3dd5050eb905d474cf65d60007c438fb2b9684439348
SSDEEP 3072:3R9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyf6pu39kP4TCTEWFy5VuJ27/A0NwMe/:xNwMeyXv4GvcItcX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

40:ba:6d:af:de:03:0a:b9:aa:3e:4d:d7:7d:df:d7:49:f0:e1:ce:35:fb:95:3d:71:31:ac:5e:97:df:dd:78:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

144862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f7befc2cf9d1344086e05a5f2e9384cab11241ea2c9a06eba36573caf784215
MD5 9de535b5fcdf909a40079911176807a0
SHA1 b00cda9eb81cdbcc855e2a0ecd6c2d59704a1dd5
SHA512 dce0ed4bca705a6df74c9d1947e63a98c9f69190542a45be0472fa75daa54f5c268c48f7bac1005a69cfc0f0e93ddfed265b6767f404837cb32d97b47676ea02
SSDEEP 192:Sws4V6JAzsLcWNiWBuWXebPpUNTQHnhWgN7a8WGkQYKKWDKHjj3SX01k9z3A8Fgm:2e62sLcWNiWBTb2HRN71L+Hj+R9ztgep
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6f:ce:52:6f:2f:57:f9:c5:be:59:80:24:d1:17:fb:9a:c6:7e:94:3e:6a:77:37:a7:18:c5:b5:6b:d6:dd:7b:1a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4003a8260e990d6697c93c8e598cff1d0086b4f20e3d523be90ab6d21eb189b1
MD5 e1d38d03081af66501ebc7277e120606
SHA1 01f421f6812670c62a74a8ee2ea587b94c1d97ab
SHA512 e8fc055d8c2ea719602d492c9c71964992115a7c058290f65b2eae2a551fbf94bd36b14e01f55da1c2c67fb872ba8f887e2ec1dfca66fe33c34d00b26074b173
SSDEEP 6144:4qcg8mwTHMV8FqnLA0bMw3VJ8Iw11CKyOCRBTJ9Qzfv9+k/Pc1NY6y:4qcgvwQ4fv9ft
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

00:d8:9d:0c:99:ed:8f:de:06:aa:8a:67:94:b7:8b:86:c9:71:b1:cb:d6:e4:3a:28:d7:f4:21:6f:65:ce:f1:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

368774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 58d049d4983840c5a574ce449a0a64ea3e3df26fa1bf734a26fdf0e14faf95df
MD5 92d572be57e60ceee73a7fbc54bed78f
SHA1 b7c913aa9940b5c2936190bfaba975931bfcbfd8
SHA512 e5548bbb53777e60a2763a54ebe52508089e198bb9de3b88cbbd25422b0a7c13114988f1b1f4abee4ebca77a379cff53324a0ab6610979a34cf1aaf3b07d4759
SSDEEP 192:34ISM+oC5zDKxg59pG/tHnA0QWpgJ3WT56Os1HnhWgN7aIWf5hK4H+BEg7X01k9X:uoe/9pWtHA0QWpg85kHRN744fR9zrAo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

50:fd:f3:ea:50:50:8a:93:26:d9:a4:88:bf:93:bc:21:dc:5b:81:03:ed:33:0c:28:dc:02:94:70:b7:ce:27:ee

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cdd779f4170ca7588bbaf7bb5cdeacf7adbb1850e6d690f87d34e3486a83f914
MD5 dfe642e2d807438b56aae05d4230ed6c
SHA1 352ec345a62e29534d22f980a063b0c06428dcbe
SHA512 fdd8ebc87bf19e71dbcf834edfa72625041c05650a9d7739d542759be83816d5ce695d705a9ac701cf2057763c819d670712516b2cce3d063b2838b3ec07b6dc
SSDEEP 768:pVZOvnCTW5li8Al/ENwaypP+0wdMBmXAQbzm33rOIBG1QmNu0B/ifeL9zRit:kvnkRJoMKzGGbu0BifehzUt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6d:9a:fd:d2:94:7f:28:b6:e8:4c:82:9e:d6:9f:8e:2f:55:51:8d:46:94:a9:39:40:4f:bb:c6:90:0c:e7:45:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

63810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e4c4785a5087a736614bd776c69c66ab8848c36261f97b0f3c2ead8b921caf0f
MD5 fc8e917c9d74c1c246730cf36629198d
SHA1 d756985f2e05b6273a9075affbb8e9d1bf360cb7
SHA512 bd29143435b6b2b890bd4bfe3f261e01518733168827179242e32576e26fa1445628c4d0ea601ac3fae8e4b57f8cfd664e6a8f178e93eeaef695d43b236e83b5
SSDEEP 384:RfSv3yPYTz3rdWDaDtWSKA2Y5kHRN7Z4cYR9zPrf8sFg:JSv3K4ARJZ4n9zT8s2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:10:64:03:13:26:2a:6a:56:9f:32:0e:d9:99:af:74:76:73:d9:33:17:8a:94:9d:19:6c:b8:7c:7d:8e:c7:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 056fe08100fcd9be5d3b20bef0e0fb58dd764de0b31ec333a636133be156cce5
MD5 40d804b67969fb80acbc15f4effd1901
SHA1 f6ad67d0be2b909535f413d334feddfc57b22460
SHA512 c5ac791096c63e1685a67357a7d9196a6d9161b5361e6109db61b256aaddac218898140f8bffe6d5537df20b5bd8bc659cb2df6fe5d8f2901b0ef95d1fe90b32
SSDEEP 384:5o950+sQCfLtWKX+5kHRN76PR00R9zoTLWTA51:W950+sQinW049zoH/51
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

da:e2:3f:b6:e1:84:94:1a:3d:d4:ea:99:f6:18:af:ca:20:0b:80:eb:e2:94:9f:d3:91:71:59:7a:c9:e8:10:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4028f563dbe2b5243748be85feef64c5938f8ddbfc77ede2bc06b06d4fecf9fe
MD5 c2c96492a7230915e6236b5aebaacbcf
SHA1 246b270e4f7ca1be974739d5e09f63be1913ed4a
SHA512 5de06eaac6ed239d11e19ae37b6a953ee98112ef7ffd32a121201c5768d5184d9cce92d7b760ab119e4c2eb643691f6c786180f434873d7960ba2cc2e1da22dd
SSDEEP 192:ZIg043+o35WtatWb+YuWXebPpUNTQHnhWgN7acWQQd9ZnAOVX01k9z3A+vEPF:J0ab5EatWb+YTb2HRN7831AqR9zdv6F
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2b:00:45:83:78:e2:1b:76:3d:c7:7f:32:96:ca:c6:a6:fa:ea:b6:c4:b8:0e:ff:1a:cf:4e:d4:25:69:2e:ed:4d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 765d3d83d44b0963c96582a696ae2ec2b0c52cefdb3a88abc1aeb962e4c68f78
MD5 ecb7775f9e9dbcf42aca8d13361b00f3
SHA1 9b30cea79115a0631eee88bb0725c5517442f813
SHA512 bddac4ba47f0983f4dc13e2af35625a17d47986ddf6ef7dc0876ed5515d1ec720a96f14b875d76af2d4ca142f9bbb0fed885edde6e3d431f86f6b6c0d8013f68
SSDEEP 384:/aJGPI2G9tWIBjtT5kHRN7xncYR9zPrf8zI8:CJyWCxnn9zT8R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

84:2a:5a:fb:35:15:84:24:fb:e5:64:f0:4e:76:0e:29:9d:05:fa:ab:40:e8:a7:10:50:8d:98:14:5e:5c:2e:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17cfca1875965e34817e6e2fbb803c95ddfcf29f43dc981e7c3dfde4c5e629f5
MD5 dc51dfa588723d462eb02d21c24709c3
SHA1 8fe0544780c952e0d31c9911bbd2d9a9a37cbdf0
SHA512 72c4dc92fe3c0a50f0acf8fa213cd95a14b4b61ca3d3eacf6aaa0ef5030319ba1b02018fc74311dc2c9ba0e2f6896c49ea5bbc60080d4af0b042834b89a41d03
SSDEEP 1536:hV+IQyqG21gh81PrZMWHT6NS1/fGxTEhmJEJGn4yjzwq:hUyqG21gh81zpWNS1/ffhmCgnRjUq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f2:6f:80:0e:2e:7e:25:03:c8:52:4c:2a:ee:60:c0:d7:7a:1b:20:cc:58:14:ed:41:b6:fb:f0:37:45:81:76:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

86386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

de/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 621a960aea4c2bd74deec6b811241ea929d0e4b1d336be9f52047a5283844aa0
MD5 9365025c8d7c2e14a667fd6f93e898e6
SHA1 06a6eb633575f003d91f6b1d9351dfde17c6a581
SHA512 8a9e07fbd80a4d414d83eb76ecefce4ef73f85f99ecde0bdb9d3c87e259ea426d19193cee4b75383f17542d1477b67ac3ffc9c6deb222462d4a84946312cb19b
SSDEEP 384:yL4yLBAWsrstWSfwTb2HRN76haDMyDR9zGVlEK:u4uBNsrUo/i6c9z09
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d9:78:4d:7f:ac:f0:be:0f:0b:a2:c7:2d:a6:ab:96:bb:af:52:99:fd:8d:bf:ae:08:9e:bb:8f:9d:ec:a1:c0:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 823c9432534b9b397e8b8ccef56bd421a9af056804888e0d85fa26ce0cc9d7ee
MD5 cf8fc7b00cbbdd54391922c9dc7ad16d
SHA1 bc337ceced90db3ba65d47f78820b3cdda6b4f99
SHA512 29403a2153250c2b56c3309ff49b2e1612e3f186bd3a1a52713f58d82cdfbeeb883087cf61950a404d227de835b64148341219ba2365ea73336fa07166c4a8df
SSDEEP 384:HyiPXSXRaRmILXdXxahTKQuCb32DXlhpiYwqcjdaWYHwhQ5WkTb2HRN7KpesWARC:Hyi0IUTROHMDqc7U/iKTL9zRiyG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a1:b8:e0:6b:9b:e7:f5:40:31:cd:a6:b3:f7:69:24:65:a1:1c:dd:ad:2d:80:69:f8:96:94:8f:4c:23:37:94:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aaefb7f6f5cd9c8d8eeb3bdf7cbcb571f2e10703cfe4b0a9604f623020bb7159
MD5 f5b2cff6acc6ab8992d08f9ccb8e4f2c
SHA1 39a15c4dc76bd9b899fcd40456ff86ede0041ad8
SHA512 187895c8fad07b22f9081a4806f00bd9eef29686c773b5c73613f1cb72687ff9acf8fa356ffad7154d3cd7f2aa6fd8b0f8ec2864507ec66131e4ad85d32dba18
SSDEEP 3072:31iib72xbO3kpvTCHmleZVcsqxLPPIhYL:31iA2xq3kpvTCHmlWVcsXqL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f0:e5:e3:61:b9:d7:f9:dd:30:fb:71:ec:67:1c:8d:ba:3e:39:54:dc:31:4a:ee:4b:4b:bb:f2:6b:2c:f0:f8:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

105098

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f1ff20c20796b0ea5b31bb4bbcec6884f94f04cf34b26f7e6d08fad4cb86a0f6
MD5 23fb9ef29d8c2671415aee3cb08546ab
SHA1 7bd31b1eb35efe32b1adfbf010800b945e0312bd
SHA512 7c0e903067cc7714f593d10550b50953ab81be4ed645788316dd0d8d398a548963631e986e1e6883753638fcf1b78229d5ba280faf361fb77900a4e6b7544bd9
SSDEEP 3072:jG2OPnY+nF7eILDlMJBoWB0nih8obxI0abS1I06iDnpI2zjZNFxCeDNsd1A+6b:jGSuih8obxI0abp4Du2z9EQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

05:5d:81:ab:aa:16:3d:ed:93:c4:be:a0:5c:cf:62:8b:01:d9:92:56:8c:5e:9f:43:51:28:ff:8a:63:f6:d4:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

198186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3aa97f9734bc9cf5de9a2ce8288d4784ba51e293cee122a398a04ed9764ca497
MD5 8049f5e7d26e26c56232a12c36087031
SHA1 578a600ab05888d5095da9a9219b1ebc7fe40127
SHA512 2588d372c70ec88ec629bcd56a49b50447708eb7bf7a94b8148da8ef7c3936c551cbd62954348c1c7f1eeba1eca1748f759a2659d7af50c6487c1c1a1da6b993
SSDEEP 768:v75M39t/Km+ku/uCaXiHpNhX6JgH8t4HVxjwtgkgrv1YXCmU/QSDMs/i8Yi9zraL:VM39t/KSXiHpNhX6JI8t4HVxjwtgNrxo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ee:4d:f0:77:6e:c9:dc:c8:cc:43:99:a0:83:88:e5:18:7d:89:0b:c1:d0:76:0a:98:c9:92:75:3a:a2:90:ef:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

40550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1bf9ffd8b97f450643d08aa0832ef6c71208cb22f7a87f1644b054a4ddd5e17f
MD5 7a4274feb925d21d19c0d9290f19c423
SHA1 82884d9417954565c8e95b24119b810a2b599c37
SHA512 260ec0eebfb91632dd87974cc1bfaa090c846dfdd3d008633a0d9695c6d942f57b887232ca1f83d3b486f3bc554de339debac9e6f5ea19b6ec5e46d9b69a4b6a
SSDEEP 768:ILurDN4Ne0KwlXSpLioFOPl2iQnYuMjvDSaR2y4ObZgji/WdrYYz3tdhW1acyZDP:QwDN4Ne0KwltARYYz3syZDEDRir9zT3x
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

db:9b:be:b1:db:d7:cf:ea:c8:41:37:bd:93:d0:89:c7:9d:a7:10:f4:db:61:20:1e:82:61:70:2b:8c:b6:56:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

34542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6e8ae45d5b94d417d4b0f9a1fb966cbfda6b4985bbb7bd42f085e6f0bf06f896
MD5 e01b4121e03e5e49e48851512c8c2834
SHA1 a4ce1fa5626663130c847a6eb559635c981e9e27
SHA512 8ace921c772a773000d61a370dddcedff36c5d826d92a1f468aeead43465855eb12f7cd29e07d8c8369b666b1cd811694ccb280b09238cb470fb25f5ae5ea5b9
SSDEEP 384:QhEZhxs80Li7tWV8KTb2HRN7qXwUR9zDykqKU:YcGLnx/iWF9z2NR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

cc:1f:13:d7:9d:80:10:02:f8:a5:84:2d:40:2b:90:2a:9b:21:e7:49:9b:d6:29:67:bb:af:f0:87:8b:10:7e:64

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13638

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4766a42fc11fa75d55a33a34403bbba3cbb604fdac0962c632de3612191723f4
MD5 5b4a06e630304ffec9b65cc3225aef9a
SHA1 15f587eb8119d56999779a4c75b187eb45fdeb0c
SHA512 85aca4c28abc663b166faa31c8040c4f4554da037350ec7f2e5127d5682a93960666196fed62d7e25461dcfe6bac4b3794301358aec46b76d78a780d2c393372
SSDEEP 3072:x/R9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyfbYlmaDglETAHZf7xx43kZQGG9sFC:xI9sFfp3OKvlv4Ecqa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

01:d5:96:b5:35:48:19:76:01:67:2e:7a:c6:7e:d8:1a:0c:bf:ea:a3:8a:7f:1a:0f:42:25:90:98:50:cf:84:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

144482

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cd07ce304a6d28d647d5514999948f19377e21355026c5430564a47d20c11049
MD5 734f9ea9ac528689e138506f9da30ddb
SHA1 bc2f798e68c702e35de8f52d9cef8acac5f7529b
SHA512 8ac4119f81fe3b311b970e6862911e0c5bf40498e21eca2c3cd298eaf1c4422a0b5194bf5f538e789e37072b56a917bfd44a7f3fe8b79ccbe81eda78ea04e470
SSDEEP 384:g6rEu8JiWNiW+Tb2HRN7999xIsWAR9zgX2iefm:NEu8JJq/i99/PL9zRiefm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e6:e4:60:1d:28:08:ee:c6:7b:38:cd:0c:2a:53:fb:1c:42:70:2b:af:4c:f9:d6:36:90:24:a4:0d:74:4f:1f:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a84dbb50dfeda148ff832c76cedf102e99f704c8fac058eb6d78caffa60b51d7
MD5 f73fdf7200669a731b71086bb8b260d0
SHA1 4ab2e29be0abb22f339775efb9c0ae99b9944d29
SHA512 1483203407604c58c2f1008c91da89543dc1469419335515693db086fd62e1e37d0cf412f16fbb85f56a0d408c2f2db93fffb2809440f6ae2f66d58789f2715e
SSDEEP 6144:Xqc6JhnyTIlbElSf+8CihqMytQCiaXioMZ1Ut4qa:Xqc6M1iui11Utda
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

13:bd:e2:35:f7:38:e7:93:66:8c:04:af:bb:54:c9:55:c0:40:3f:fd:7a:7c:ff:3c:9c:7e:67:f0:9f:c7:b3:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

361270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0d386af409adf9f2367da0ccf82f74350396c82cc477f61251e82538018fb08f
MD5 59937f3bcabd99a537da27ecf46fc305
SHA1 1ad3fb0b25dfb8e692e21aef3626cb45077175c2
SHA512 87bb49734027bf63b648e2adca0b5934aeb4ac90e96dc44248069287e8fd6975817c93cb9b07de3b0bc8cf9cd52e513552dc984ae2edfbea2c04c472f1cfe8f0
SSDEEP 384:BfX6yR9QWpgJMTb2HRN75sWAR9zgX2ivWx:9sM/iOL9zRivWx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bc:c1:8c:3e:e4:72:35:68:c9:9d:7e:ed:9a:65:78:67:52:bf:fb:11:b3:c3:df:da:14:8e:83:3a:c5:a0:3e:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bff74b12547b677aa8998cb0678c3d7e53f9c5015e7683f95f7b33bc5406aabc
MD5 e18dffa9a8e496aa1d0e4edbcfe84745
SHA1 21253ea0356e5981e43c188d6b5bbbb7a9455ba1
SHA512 aecc161ac3089154a5cfeef4b34692298a25cbbea25e02517761190aec552b3c69fc812435c3b49cf1bfde3e02e791a69b7c09ad6704fcfbc4715a57c4a9e7ee
SSDEEP 1536:fvqyFvGaKic94N4FfC5YWMvmGyaacjohSN8qgpT0oez0:fvqyg8Rpew
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f4:8d:7e:99:e8:f3:4c:ef:30:5f:62:9d:58:5d:dc:41:1b:ae:1a:32:bd:d3:95:f3:07:d7:d7:92:a3:48:53:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

60950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3696a6008228f56c23e3e6f9872eb7b09e567f06e85b13ae436bbf14f2029db7
MD5 53c9867653c2f1acd9115d310599295d
SHA1 c742e28f3efa0b7459857e6662a914cd621bb521
SHA512 1f53e8c67ddfc73ed9a7888b74f422c182887aecf80342d2244e16eed5f33f7abc90d638112eba5f16bacf06fa8d58cd311dadf0fa952f458c58af8165dcfcf3
SSDEEP 384:p83fH03Jl+28mqJlLtWSKAxTb2HRN75F31AqR9zdvr6:p8PH03L+2gJuO/i5lr9z4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e6:5e:86:01:3b:d6:a6:e5:40:a1:39:3f:6f:e6:f7:1e:02:80:db:8a:a9:aa:34:6f:2f:95:f7:db:b6:c6:87:56

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14942

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 86915366b7bc19b2754b892d72247aa7975beeb5f62560d4a747f290adf71bf7
MD5 828eb9d0486eab787c01385d20821bc0
SHA1 8eab02ab1f7ab68abf17ece2f9c8e95a4d2d0ea1
SHA512 1602e94d9affea7a8f3f478d538984404101080856fdc477256d72abdd1e56e86a8928423e9bc522354080a880182c236254c3eef0e7a7cd40bec6561448621b
SSDEEP 384:KuxD4SCqDWGVgDgtWKXBC5kHRN7/8nNNPR9zbKtF:HxD4SCqDWD8RD/819zq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

32:1a:a1:f7:e0:cd:df:52:6c:17:ad:30:2b:c7:96:20:7a:08:87:a0:cf:6c:08:6e:b1:f5:ed:fb:79:86:cf:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab3f525cdaa8d557f9f89cb72cd774cc43b5dccc227fc9e86681d29e31b4c89c
MD5 a6943e5556346d9ee5f6638ead3ed0c4
SHA1 bd761951faacaabc7c12f9cd5a3767171c38cd0f
SHA512 2cad4503718a65828c1f6049a1fd31a48a337b3545dd48560b3e9c5649f7e705dbb8853456163fa572cc95a6a3620ebd3704800c151ae0beb119e01ea96dfe67
SSDEEP 192:8E3Z3rBWHFRtWb+9uWXebPpUNTQHnhWgN7acWLe+KNQlO8X01k9z3A9Nw0:flV+/tWb+9Tb2HRN7l+KKlO8R9zmNw0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

27:3e:a7:84:16:a6:ec:13:22:24:9d:de:47:88:de:28:e7:a8:01:cd:34:2a:af:ee:40:fe:15:cb:d2:c8:b0:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8fa0996ac012897aae2bd5efdbc2c8eed4d84e23bc30fecbee764c4a6dc4846b
MD5 47fb1c6a73579c1870c056a37fb2fc40
SHA1 3660f3ee260501082e36ff572a8ab59c2f2d0fda
SHA512 e8074c9542b893528c7ef868fcdfc91dec08dcd6cf086cded6834c4b5e56fa6f4743eb2b2796bae64498e0c02a97280028f2a34f45e5147c235715d4427ced8b
SSDEEP 192:3ISQ1LEcM4dBPdtWLWRBJpPuWXebPpUNTQHnhWgN7a8WB1Tt/YKKWDKHjj3SX01o:ZQ1fLdtWIBPTb2HRN7KPL+Hj+R9ztNT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e4:a3:96:7a:c3:28:8c:2a:9b:e3:b2:a8:ff:67:ad:13:56:50:13:6d:5c:bd:0f:75:97:b7:19:55:bb:0b:ff:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1cbc54ff4a71c0cd91b242c2b15afc429c656f929d4bfb6b5e9f1d89a863e913
MD5 2d5dcbdbe5824b03de0b733d0ea5797c
SHA1 6347684afdaeedb66371d8fa940f3450927b26b1
SHA512 98c6142caf8c8b29b5cfe3b54b78484cbf6cc6644bf2b7aaa185fe81bd32c036d69405d52ed5d5cac017d5cffeb423bd7fc585c839f2c49a3074eb196866dedf
SSDEEP 1536:0V+gSUEHSvBIZaoTHTPC1YUU4e7DPYPWsoJo7fi8k/WvwM25KOlLG9Mw56huRaG4:0mUEHSvBysy+dtplvFgS6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

18:99:8b:bf:e3:be:76:e7:d3:cd:d6:f1:e8:1e:9e:c4:b2:54:fb:81:6b:4a:39:8e:a1:db:3d:eb:47:1d:2c:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

84734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

es/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ae5ce3f5a976fe342cc171647e106116e053077ece87826ded0ac0e02a06c1bc
MD5 583469bd1e8bf9af70c80d28d7b0e888
SHA1 c12c0c15006fab31b036876044722e8ab8972e32
SHA512 c35f9a15021e429befed9080af3b26069bc20579f798031c6e5aa2330cf0caf34221eed4b4a6442d1fe796a68a2f517c9c00ee9b8a8cce8fcb4e9b5bc511f464
SSDEEP 384:VKlLFLHZEWWeHRGkUxtWSfLTb2HRN7UR9zrdy:GZHZRtHRGDD/iY9z4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

39:db:73:54:95:1c:a5:a4:9b:74:29:78:64:7c:cf:20:4e:d8:ec:ac:b6:ee:7e:67:74:fa:57:df:c6:b1:47:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0f1123736391b4eb19558c9ba2cbf48f54a7c8814f243b05781231c7497a4418
MD5 2927bd5c51506d0fdacfd54050e49094
SHA1 fe5ff90ec977bae44d2f0a6a55b5ce6c86666cb7
SHA512 6a21a5d0f4021829f896121eea28984953647a71d8592e289227159b2bedc3751f85d32581dc0a80f457fe2397d15e01862c28dd5335bbee879f27f5a1a8029d
SSDEEP 384:m7SxXSXRaRmIZXdXxaSiG7eQu0a27bVhr1FEhrsaWYHwhQ5WDTb2HRN7TC+Hj+RR:cSuIzvB1LJFER0z/iTlHji9zPj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

42:5b:a3:2e:f7:c7:a1:d7:26:c1:0a:6d:13:cc:e0:fb:ef:01:41:c7:60:ff:2b:2e:db:4f:c6:15:cd:18:3e:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 928b51dc7f2a968f9be90db3c2452d430506f3b7c0e639e5294f778cb67d6a3e
MD5 21a7060bd3fed338fae314d79c667d05
SHA1 8f101f6da11d8a21efa811152b506462eb5d01ab
SHA512 006f41753453218337cd249ba4de15c7bc96e33f7c1aa53f8f99b7edbb5da829eed3c15454aa54cba3bd2a5d84f57750f6a538d76c28fdd771727eee1fcdf984
SSDEEP 3072:P1iFSVCiFy5rxLqHHWdWUZ2CZHBpwghYS:P1i8VCCy5rxLqHHWdNZ2C9BfqS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

89:7e:5f:be:c0:ad:8b:1f:15:89:ed:63:44:64:20:51:47:61:5b:4f:76:5d:f4:1f:5b:54:28:a4:8b:5e:af:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

108126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5f3be9c4f3dd68ff6abbf4e1350288e6668a2148b9b385993b55aad1368433a5
MD5 e8246acc32e12398641eb6e427bca8ed
SHA1 9d657878b603a263085455a2ad5e1e1442f05789
SHA512 c7709ee56fa0cb66b9a17bf8d4113c3dc4cf0b974b70f31fb068ad283c405b54e758734de9a9592e9414f836ae91abea68a4fd9820190b3d36925ba719186f17
SSDEEP 6144:qGja9TYjFeVizlo8Ng7TEkxJ5OAOdRlLhpBo0caz:qG+VPnEkxJ5OAOHlLhpBoDaz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e2:12:59:06:24:43:44:de:40:3c:e2:54:97:d6:6c:43:bd:06:ad:b6:ef:3d:75:71:d4:12:e4:58:8c:9b:52:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

201918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f4dd9933fbf3a01bd57051a0f0babc226df289badabb8dba603780dab7cbd4dd
MD5 4106ffaf95fc09b29c4b091afa3da346
SHA1 caf84666c22b2ddb3ad3dfd0eab8fbf94af685d9
SHA512 bce7bdef2e7adf50ae5cb862e869f0c22a7c9e5096964376e0ee6e7445de48807ff132e6feba307e29097c715e35bde8c8478913260cd925ff531c07098292db
SSDEEP 768:B+pAJgb7iRNnCU0ZPx7LZ7m8cqj3ufSgIPZxXYJmR4D89qPiDdJn/il9zh:I2Jgb7ik/m8cqj3ufSrPZxXYJmR4D6/6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:02:54:bf:e0:2b:6b:f6:58:f9:0d:43:38:39:32:bd:7a:6b:96:25:cb:ce:3e:15:20:c5:df:31:9b:11:93:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

41886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 54ebab6d74aa2458e500d5fce19b2ca0cfe4d0313128139e3b7fd52496bf4f7d
MD5 6666d80af3269d48216381136d339c76
SHA1 1e4920460e894d7b83b8464ddd95342483c4b325
SHA512 abd737830a8305719bc9644f19568f409893ec8d3bae426d78b2855562c6b25689eb044ff78918f66b9e9254ac88fe691b2ec0b1e460294444b39520ad1d2a10
SSDEEP 768:4NpgsqCekJO+Ym5hLgEPH2UpYsMoj4KYwqxxSOHpVCNDJuLwt3YHZts0/rshznpJ:WgsqCekJO+1Ym3Y5tspSgcO3XqniP+zk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8d:f5:05:59:93:92:42:a7:79:72:d9:20:e6:0c:a5:dd:56:f1:41:93:ce:59:b3:6d:7c:4c:aa:c1:8e:b7:ff:86

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

35162

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 de464a8559345907bfe3ac12a09373ca04d746f837e748fe7a5ac27032231ac5
MD5 b0892d782bcf8bb55c16a0183d54030e
SHA1 b435ef6eaf20668f20587754d3c00514e2ef540f
SHA512 867df9e07d30ea9bbc17959bd4d76fc30faf0b8fd1b72f30ee516f75255c082183443acb32c5969bf5d4fd8fddab61b43f79bcaa6f8f3ca894fafa478869f06b
SSDEEP 192:pvvRzIP99cLEsEYE1/UftWV8quWXebPpUNTQHnhWgN7aIWOdCQTb8o+X01k9z3AW:thg6wwtWV8qTb2HRN75CI+R9zJKnA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d3:d7:96:be:aa:63:30:17:dd:f2:99:09:a0:26:39:e4:42:65:af:f8:7c:73:71:79:8f:36:98:c4:94:3e:3e:71

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1746ad3086883ea6b8a9f9b9e2c4499cf793389aa4f57c1078cda7f914a8cac1
MD5 49dd7db1de0aa815a8acea84c3713e14
SHA1 774cc52cb52892df537269c2c9b07b5727f610b7
SHA512 14f41afd57edf82428afef92077cb5797f382d98bd26609a129a36c0cf47cf2486b5b44b8722e17c625ec08c2437ba0f78eaee872a98cb01b4d46f067e482c5f
SSDEEP 3072:DR9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yhCfAcGtexgaNPKKjBHIpC4GdWKfqD:LWKfPZAYt1vDECg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

df:c7:cf:09:ae:12:7c:3d:43:b2:57:c4:11:34:6d:22:f3:ad:e2:0e:af:6e:b1:83:21:2e:33:12:e5:64:0d:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

145374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 007dd319f973fe38c44af2ba22567ef94277a2946c1cdee205fca3358af001f4
MD5 12fc035057ead5668dab4435ada6a164
SHA1 cbcab7d57a000104ea35c7ac11686c5e664f2a6f
SHA512 1312ac34e6e816efa46083165d365a24cd88d44de5c4d5a490a4b4f0c287347799f2edb7258e61e382cd11c131aa881b38e80a2fe8c20a4e997328c282189f39
SSDEEP 192:MP/k6zhQLNv+LWNiW29H3WT56Os1HnhWgN7a8WfaxZmp8TKjX01k9z3AbXLaiTos:As60Nv2WNiWeO5kHRN7ZxsWAR9zgX2id
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d2:66:88:68:29:81:87:48:5c:dc:f1:4f:44:33:f1:cd:3f:89:93:11:7a:30:60:24:bf:2a:36:88:fb:82:29:d3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 de9f9ebf746134c0b31803fb6ad2b326d323010d61bd9726363a568eac306af5
MD5 172508e711139f6ff083682f3bdbd63c
SHA1 c86a20ae34424d868c3ea9322e739d52049ea773
SHA512 c96892a1ee823a8e622bd7cdcaaab835c4281354b03494e85432fa518dbccdde7f2558db58e927dfa95a4e2b209dc60951ae200421a1c4fa8270f91098071ff9
SSDEEP 6144:tqcPiurmC0Boo10ET1JufIpfR03Zu6tTOnSLgO/c2m+hi+fBMcGMO+:tqcPihOtT+SEO/pm+hJf+cGMO+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

39:16:44:15:8c:f4:21:47:8e:21:33:ac:ea:5c:21:5d:d8:3c:70:84:26:e6:ec:f8:02:06:b8:4d:28:02:52:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

367710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8fc04e48620d1a9acf575bc06e9eae80565abf9cbe95592482c76627677ddbdd
MD5 a0b052beade7a49eb0f96f6225ede014
SHA1 be9666c2ffba8a295bdcb6105c32c39502458367
SHA512 4797f2d0db8d679b3d02939345b9e49481f664e4d89e4a986dd34a616ca94e74fb3e8b8c187e6a8010b7c2a344ca7f341a5dad33b37966fc899fb98de2ec9728
SSDEEP 192:lq7oty2NfZG2CEunQWpgwuWXebPpUNTQHnhWgN7a8Wz9pYKKWDKHjj3SX01k9z3J:k6ZcQWpgwTb2HRN7sv+Hj+R9ztQTs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

94:59:d9:57:b5:e5:12:f1:42:70:b2:03:1a:aa:7f:6c:67:66:8a:c1:df:ce:1a:7a:28:f3:f9:db:a4:70:b0:df

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b37defd0bd00469ae472facb77917cdc6451bccc054885015a61d3845b583874
MD5 35c0669cec8de5b89a93589da30b5ae6
SHA1 4ba3aeaa1be99aba9cf804169621094926c4ad3a
SHA512 bacf696b3dc2a7205a0930456ee623f01cc1d03bd13f5ee7757898c26f95a5cdb914edadd42b47d991d6618bf186adfa66ed2f97194b92e3c3e2201042c7b1ea
SSDEEP 768:07ZOvnRva+O3yc01mDJw5snyPIX1l1/qC2Od1pRQXi/YiWGh6/iw9zZo:1vnX5+yC1l1yC0SbHhyi4z6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e1:ab:0a:3d:f5:7a:7f:e4:0e:75:0c:a0:91:84:9e:3f:eb:96:15:d8:80:07:1f:41:12:a1:5c:19:65:ee:52:42

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

62370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f78ea8e1bb2eaa3a3a28a37dc13577cd706adb6d9252ff537cf7bfad70b0214b
MD5 8850c4bf24a69e8b8cca12565cd6318d
SHA1 d4c31117ac759e7f850c69b18909cc15a9dc92e4
SHA512 bbbf22971f373fab25af1394031041de3a8621828103171813493106975be9bac9b20b5972503a3dc337897a47b41e9fca7a1530da93627d5686ffcf58ae7556
SSDEEP 384:JX6fwP3cgks1u161ZrtWSKAVW5kHRN71CB2UR9zDYc:JYwP3rks1u161ZkaQH9z8c
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1b:8f:86:85:61:ac:fd:bb:6d:1b:bb:a0:5a:f1:eb:f5:f5:e7:f4:4f:0c:3d:8c:9a:16:7b:6f:aa:f7:df:ec:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7be43f1630150d9502c62d6fc75fdbd8b5007b47f67627f08895666856e13735
MD5 c73043d22d6e4b30cf15e4c07a8aad30
SHA1 73458919ed29a741b0e080880595e00a051a2f0b
SHA512 4b4b64b71b87d1a5c7547accbd4e84a1b03958f581cd57c7d5ec840654c5fdef8bc762e30d16c09b1a75373ea0a8323cd16a5519ecf3e54fcec7714be2218bc1
SSDEEP 384:3+Zyw6I5/Eo4hxtWKXuTb2HRN79sdsWAR9zgX2iZRx:OZyw68IBe/iSqL9zRiZL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5f:5f:ed:ee:a9:00:a8:4a:ce:a9:f2:7e:b8:49:c7:df:34:90:db:1d:7f:bd:a8:16:cb:09:10:82:77:dc:a7:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 584f6bdc1ccf080f0650d222a1f07aade6dffe31cf18028f50169a66eaf7f5bc
MD5 554588965d13656c3459dcf9da9a0831
SHA1 5080fcd283a278d7d7142f145d2506f06aa6b674
SHA512 20cf084a31fdfaca48719705d9a99f0e9089daca74a87d1d5d2bb70170e255c9f3ecde6822d47e6d9029801395d5afcba7e5110438c78d5d8b358982fb663b9f
SSDEEP 192:LIRg353rqWrttWb+quWXebPpUNTQHnhWgN7aIWg6oW+QTb8o+X01k9z3AO7mh/0g:EiF26ttWb+qTb2HRN7WoTI+R9zJKFGa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

00:fc:36:01:1a:92:42:c9:a2:a2:4f:a8:4a:f0:46:5f:b5:50:ae:85:6d:82:3e:d1:cf:3e:60:f5:35:6f:bc:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c2fc01ca00501781080c1bd556f16cd8773c10f66700e0de4d1bf0cf003420f4
MD5 be32db1a15ba31e7eb368743aa19184e
SHA1 c01d7fb915966433e867be883cd10085df20feaf
SHA512 0de20fb5fda3a4264e82acc712360061b44681edcb6dfcad9b708d653477edbaf7d964328c6b5339a2781ed49db58384a1579166ff90077560277a39f2ff0f6f
SSDEEP 384:QWYfeDRPDYOctWIBBTb2HRN7BkUR9zDGV+:rY2Dkf/iBx9zr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ea:68:df:34:33:4c:7f:17:d3:bb:3f:92:a5:6e:b4:4a:06:b1:ba:1e:21:5d:c1:d8:c5:74:92:d9:59:76:1d:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a28faff2d059d1da945d1446f07a5587dddd53f6ab851b901a4b47d34129c659
MD5 d18a99be7024ccb903143e0140c17ae8
SHA1 af4a126f43f4cfbf79a44b6e0d9fc1a428327626
SHA512 93aec3d4da110ffd4e47e147c783001ecd7ebf47d5b160afd6c420df22bb12636a7050c58fcf7c9aa1dd4fad83f2b43b1cb0d2aa04c05f581b97f8cc58dc94b9
SSDEEP 1536:HV+Q15SaOTM/TwAYsoRawCDsgWFtXp6wwykCTMsLxLwzu2FawKCPX+vdkitXWriI:HrSaOTM/TwAYZBIsLxSkgfrn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6c:78:77:69:08:11:3c:11:14:eb:4c:19:6a:2d:f4:db:12:9a:6a:fd:8e:be:38:d9:89:32:1b:88:8b:52:83:85

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

85714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

fr/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8796f3336739fc45451cbd97109fbcc28d7ff1966f0e3f864790b617838bf249
MD5 466846009c9fa754c42978cb7c7a7aa9
SHA1 febffb414aadd3c1c1e8a88ef1b8884eaea66c83
SHA512 213505433bb00cde1e540c73ffe69fda53f4d02c8fb5bf3f1a71656938f15fdeff327790563867e8f274719531c538ef7598270fec88e825e34d53eef0f56276
SSDEEP 384:JMLFLHQsWDYKHtWSfDTb2HRN7bNNPR9zbKBv:qZHQJDYK3L/iB9zW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d9:19:6f:39:6a:80:07:ee:95:59:a0:bf:d3:b3:27:00:3b:cd:96:83:4f:77:39:9a:27:d3:e0:a4:ad:4c:23:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

hostfxr.dll

IMPHASH 97b171c5480357488fd3c6422ce7fbe6
SHA256 5aa15c6119b971742a7f824609739198a3c7c499370ed8b8df5a5942f69d9303
MD5 16532d13721ba4eac3ca60c29eefb16d
SHA1 f058d96f8e93b5291c07afdc1d891a8cc3edc9a0
SHA512 9da30d469b4faed86a4bc62617b309f34e6bda66a3021b4a27d197d4bcb361f859c1a7c0aa2d16f0867ad93524b62a5f4e5ae5cf082da47fece87fc3d32ab100
SSDEEP 6144:mJSnB665PFUabPsPtt7Zi+sQsVjHjox3rRjqqT:UQn9wPv3s7uzRT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

47:dd:a9:77:8b:97:c0:bc:c2:01:55:9e:64:8d:c9:30:1e:69:5d:48:38:d0:85:7a:0e:93:6a:9d:c4:40:d2:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

212560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\fxr\standalone\hostfxr.pdb

kernel32

EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW FindClose CreateFileW MultiByteToWideChar FindFirstFileExW GetFileAttributesExW LoadLibraryA CloseHandle GetCurrentDirectoryW GetProcAddress DeleteCriticalSection GetModuleHandleW WideCharToMultiByte CreateFileMappingW MapViewOfFile IsWow64Process LoadLibraryExW UnmapViewOfFile FreeLibrary GetFileSizeEx GetLastError OutputDebugStringW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetSystemTimeAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW SwitchToThread QueryPerformanceCounter InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx

advapi32

RegOpenKeyExW RegGetValueW RegCloseKey

api-ms-win-crt-heap-l1-1-0

calloc realloc free _callnewh malloc

api-ms-win-crt-runtime-l1-1-0

_errno _initterm_e _initterm _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _invalid_parameter_noinfo_noreturn _wcserror_s abort terminate

api-ms-win-crt-string-l1-1-0

tolower toupper __strncnt _wcsnicmp islower _wcsdup isupper _wcsicmp wcsncmp strcpy_s

api-ms-win-crt-stdio-l1-1-0

fputwc fflush __acrt_iob_func fputc fclose fseek fgetc _wfsopen fwrite fgetpos __stdio_common_vfwprintf fread ungetc fsetpos __stdio_common_vsnwprintf_s __stdio_common_vswprintf _fseeki64 setvbuf _get_stream_buffer_pointers fputws

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_time64 _gmtime64_s wcsftime

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

__pctype_func setlocale _unlock_locales _lock_locales ___lc_codepage_func ___lc_locale_name_func

api-ms-win-crt-math-l1-1-0

ceilf

Name

.text

Size

232KB

Virtual Size

231KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

hostpolicy.dll

IMPHASH eb6a791d118615cf2b2bce01bf552135
SHA256 02c8dbe7bf1999352fc561cb35b51c6a88c881a4223c478c91768fdaf8e47b62
MD5 a7e9ed205cf16318d90734d184f220d0
SHA1 10de2d33e05728e409e254441e864590b77e9637
SHA512 3ecbaf20946e27d924a38c5a2bf11bac7b678b8c4ebf6f436c923ea935982500e97f91d0e934b7fd6b1fc2a2fd34e7d7b31dbbe91314a218724b3b2fd64c4052
SSDEEP 6144:BRSvqNX1/ouYUwPN5CYuDEIEkII3k7GtRk81LRHBeubWo:ByqNX1/oucuDEtkNxRvYqb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

74:f3:c1:4a:bc:b1:da:5d:17:26:cf:45:5b:25:82:01:d5:2d:2e:52:22:41:43:0d:4d:2a:d0:f9:18:4f:1e:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

256144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\hostpolicy\standalone\hostpolicy.pdb

kernel32

OutputDebugStringW GetFileSizeEx FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetTempPathW FindClose CreateFileW GetCurrentProcessId GetLastError GetFileAttributesExW LoadLibraryA CloseHandle GetCurrentDirectoryW GetProcAddress DeleteCriticalSection GetModuleHandleW WideCharToMultiByte CreateFileMappingW MapViewOfFile IsWow64Process LoadLibraryExW UnmapViewOfFile FreeLibrary Sleep RemoveDirectoryW MultiByteToWideChar CreateDirectoryW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetSystemTimeAsFileTime LCMapStringEx DecodePointer EncodePointer GetCurrentThreadId WaitForSingleObjectEx SwitchToThread GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetStringTypeW InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW QueryPerformanceCounter InitializeCriticalSectionEx

advapi32

RegOpenKeyExW RegGetValueW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _initterm_e _register_onexit_function _wcserror_s _initterm abort _cexit _invalid_parameter_noinfo_noreturn _beginthreadex terminate _initialize_narrow_environment _errno _execute_onexit_table _initialize_onexit_table _configure_narrow_argv _crt_atexit

api-ms-win-crt-string-l1-1-0

strcpy_s __strncnt wcsnlen wcsncmp _wcsnicmp islower tolower _wcsdup isupper strcmp strcspn _wcsicmp

api-ms-win-crt-heap-l1-1-0

malloc realloc free _callnewh calloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s fseek _wfsopen fclose __stdio_common_vsnwprintf_s fwrite __acrt_iob_func fflush fputwc fputws __stdio_common_vfwprintf __stdio_common_vswprintf _get_stream_buffer_pointers setvbuf _fseeki64 fread fsetpos fputc ungetc fgetpos fgetc

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func localeconv setlocale _lock_locales _unlock_locales ___mb_cur_max_func __pctype_func ___lc_locale_name_func

api-ms-win-crt-math-l1-1-0

frexp ceilf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _wremove _wrename _lock_file

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s wcsftime _time64

Name

.text

Size

275KB

Virtual Size

274KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

it/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ea2de4e2f0cccca14fb8e3d537c61178f37ebcb5e5bdbafb86d9bef8768e135d
MD5 c5504c97f1c40adac252134ecbc1cfe7
SHA1 bb0ef66ddbdccab9f56eda8eb96bf638c082cfeb
SHA512 6e34ca453e4287986ccc4ea46ebffb0536b90cc348edb4293967b03ea38857aecd4942a76f53b0977efcce5d6d083b63e12b9681df5ac6dfc35782c2a988441d
SSDEEP 384:yyjxXSXRaRmI7FXdXxa+yTQuvB2NCMhS4Yl4EaWYHwhQ5W85kHRN7SUK+R9zoc:yyjuI77yUnzvYzpSxi9zP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f0:00:36:79:97:17:c2:a9:4e:0a:bb:32:bd:c2:46:97:36:de:96:d1:a3:6d:9d:28:bd:0c:6c:49:e1:4b:10:e4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2aa8dba4bb8fab7b3e1910794f4a2ab13df9c9ca8a66c02f040db6494a3c9c45
MD5 ac7ed2138088c687ee64627e1ffd0aaa
SHA1 f78013f468cb57f96a5f738acc847be5da742c52
SHA512 91172437b6116ef6b5f5f61dec2ac63916c8086423a193be333174d5ca131afd4a616d877ccbbc6bc82f519f00328006b4ed614f6d38638b78bae5d5717f36e1
SSDEEP 1536:A61jOkdyNdHtmD8xFzZVmPlsQ09PngqaDZkTiGz7Gef:H1ikdyNdHtmAxFzZVmPlsQkgjkxPf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

70:27:2e:1d:2c:d0:04:4e:21:ae:48:d7:ce:62:d3:c2:2f:75:61:af:3f:3b:87:02:4f:b2:c4:2a:77:b0:b8:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

106486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fdddd628e7eaa64ac1ea9ebd363863806d49e5b54f6e44a39ea8af405b4503f1
MD5 7f8652cbd0d680213a3771ce0c0c4bf0
SHA1 cc1cff25affeb937092145dbc073dbfa521bacce
SHA512 a05e3e2cbee5b035cb5487efe07bfaab14581e102fa07a8d3a47c27b803f8db15afaa4676d674c0dc38a000392704b4755e8c2ba627c8e7c16ef0dbfb7a4a0c1
SSDEEP 3072:4GpCPEAgU+pzmIr1ERg9wRK6kwFvJwYZsOAm2YqlmgLqPi2ZX46JhMrX+E1fbmzf:4GppLwFvJwYZsO6YcHLiX46JhMKE1fLA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f4:f3:07:0a:fb:04:ae:ec:5c:53:9b:2c:1a:7c:26:11:d8:0e:d2:f9:20:a2:8c:86:02:a2:82:61:93:2b:5c:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

200726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dbb46ec608f207999bb1f72c3a836b75431bdf217a314cd4d16f8530c238fdc4
MD5 be11f93033718418404f76388308268e
SHA1 092456991a453fca35d45051a96c4d5839e0c6af
SHA512 3b903f8b32ef218cbfbc22cdd3916b457b81fa647730427620c7d8115121349d618630a8a14d802edb6a50788780573a6e8a74fb096d58cb18bb4ab60f8863c7
SSDEEP 768:yJQwjC3+TmwA//4Ag2nXBvxEBJWI1EjgpTZSi+RD7Ng9PTGFVQL4DYwV9zQQ:uZjC3+T0FX9xEBJWI1EjyTZSi+RHNg9o
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c5:37:2a:92:bc:b4:c7:67:74:01:31:79:ac:27:73:32:14:1d:f4:13:17:92:d0:ce:49:f8:80:d6:4b:3c:7f:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

40622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 58c460a7aad9a0bfbff97b96a397b5691c5471c6b4d8545b9e20ebcbc8dc927f
MD5 3270b8ec7805c66f1eb25b5c92243e3f
SHA1 db32de4e2fe7cb8ae59f0d55c055a5add78b3544
SHA512 52b914f2bf399f12d2d6dda4eccdb99c7072e11fb9f0ebf4487674c3ce52f9fbe1e772a9693b69f3e9c242dbe3ac5461338b88133f71d2d926c47d0cec236567
SSDEEP 768:qc/33OL9ecIZSmd9O3a7Pp2Ifgn9HjFmLH1nKZpOdnwwtw1ZhbBUmSsb/i5a9z4s:v33OL9ecIZSyMfriwz4X8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e5:57:89:7b:13:16:33:67:b5:2a:0d:c7:64:b9:8a:b7:2e:a5:25:a3:50:e6:d9:05:52:16:7a:b6:57:d8:0d:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

34562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b52c67228458a8485b6ffa034ac2f1bf1831064bd53541a7e296ee3fa77bb4de
MD5 206d31a6dd5fd074e39e0f6e7a2ef49c
SHA1 37187a3876ee1a66af4fb34f2526378babd4eadb
SHA512 9b50a873eab1e33ef53f74b448a6722d212f3688bb991a06c51c3e9a9243f726ba992703560e7052acd332b610d689449fde778a9ed74c4c82d1ff99c06951cb
SSDEEP 384:vdUhFryUeTstWV8gTb2HRN74jezWSR9z1gd:vdsFWUeDH/imq9zSd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0b:37:77:9e:53:33:fa:6e:2d:99:2e:55:16:48:9f:6a:de:75:32:b4:4d:69:6a:6c:10:78:3a:fb:48:33:3a:86

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 acda22f7e752d0113b241a04a59fccd26064621dcd76aaaeb4dbd553fd21d9e8
MD5 fd6cf76ff9b7cb5cd8348480cff035cd
SHA1 be87a7ebd17b2a8d7faa083f84101ec502e0bf7a
SHA512 5d574a727b36c071a395853dabd19433e9606b44ee162afd82c8648d80d438bc0fd7ee65151302db8ca3daa88394e76ceb6cda47d9bf8785d94b3743f22bea6d
SSDEEP 3072:sBR9MtbGzbtyHZ/I11DKdwWorcP4IVCnEpyfbYlma8HgbaJeQEwR1yli/L+JsjVO:sesjVHJ57imrjv3TFut1Xmq1Ckkindu8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4c:03:06:40:59:de:a8:3e:16:51:b6:26:85:97:29:f7:f8:1c:f3:31:35:18:2d:c6:66:c6:62:b2:90:e4:f2:60

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

145598

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ea9cbfc4302db5861d854e0b726c120ead498ca2774db80c4462fa9414a50479
MD5 dc533355e127887d856a7e91e38998a2
SHA1 c219e3b3fb57f26ff01f80221ea02447747d3ad1
SHA512 c90c1453607e8586a05ffb7498f43581fecff622720819dcfdde064537e64e4a517a931f6e8dda13ae90d9a5617a59ecba13cc4667973d6f48c0c679c165b4dc
SSDEEP 192:Rt6vfHVUxWNiWMhuWXebPpUNTQHnhWgN7aIWZLTBEQTb8o+X01k9z3AO7mhymo:T61eWNiWMhTb2HRN7COI+R9zJKRo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

35:f8:63:9d:7d:c0:ff:0f:fa:33:67:10:c8:d0:f0:93:d6:a7:7a:3f:5a:3c:4d:2d:89:39:56:16:40:b9:af:a9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11146

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3302e6020795b115a4a832318e2033d8f26c6bc57954471c2b791bdd1d7d65c0
MD5 8644696bfbd5a9f939e30773eb84cb5d
SHA1 7b13c235d9f68e631e5440b6ddad49e0f6fd5d99
SHA512 4cf12791c34c326c81c34887a2677e002163dd8de1faf65e09543c470162f090daab3751275b65bd9e2ba532cd65a4f981094bc0001794b47bfb9413c7d728ce
SSDEEP 6144:fqcWJ7Q5hvyfHhvDluIWQlaMdfotRvvA/+gklCyGXuy3fjXEz4uKXlk1qQ:fqcW5QcLQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:f0:c7:5d:7e:3a:90:fd:36:43:fc:b2:db:8a:3f:4b:1a:77:c1:73:59:66:2f:d5:a4:92:af:4c:79:94:0e:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

363686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f6352f749040c51c2d5a53eff436557efc2419dcb6070db023f5d500caabf4aa
MD5 39c7acc94683bd5873e42051f732c77e
SHA1 a351bfe28e215e2118ba94db6bc1808232332a35
SHA512 b33df45c7b220e70bad7e764de461d49289867097ca2733db770e9bc46d4638b89412fd77b22e941caa3e32a8fcc6a78534033141080bd0eb5c7a21ba5ef0903
SSDEEP 384:2ltFrGUOQWpg+Tb2HRN7wosWAR9zgX2iR:Px/iWL9zRiR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8f:39:39:a4:a7:fb:3d:10:f4:02:ce:96:b1:d7:90:67:d4:1e:30:50:0d:d2:87:65:4f:46:84:ca:0d:ee:8f:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7ee978633ff76a31bf03ab08e911d85751634b595f40d6fd7c22785c9ba3a352
MD5 4e5c96d6ee32a241e1d8d95d0c76b6d6
SHA1 40878da41fb7a5c2baf5e83f7d2b4d967fa70a46
SHA512 07908ef26522f8f98deb593f91cac492514cba5c26a208d888f5f86833b055fecf19ffba4859a8d433ea90da281c688f686ca54b0ae3c8d3514ed712f30966ae
SSDEEP 768:FZOv9RzqPthDd4EqfEJ2HnXTKnVic/f7in5Nix0N/i9I9zB+:6v9sUjKV5f761iqzw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

05:a1:7c:ba:aa:3a:e2:68:5a:9c:af:ef:32:3b:27:30:83:34:3a:4d:41:21:2b:74:5e:4e:68:15:61:25:ee:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

61322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 12a37edae655e8f3c7e925ececf9c63dede6185ce562a2835508d3e28536db35
MD5 2893198ba59f64c41bd1de5c0b85c877
SHA1 bfa36d8bd7b0f6c75de8bbb1b93b3ee422b79a2c
SHA512 4e4e3d782015dbaf91479144ee6e9b194a356673de0ad6f21ed098cc3040d1af4a074a1101c53879f65ee1b1555b5ad7d6ea6ef582be50696d4d6827c16ec1b5
SSDEEP 384:GdpfiG3QULQsz1X6tWSKAp5kHRN7MOR02oI+R9zJK8:GdBiG3DLQsz1JbDi2ji9zE8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

20:7c:7d:dc:17:cb:cd:9f:5e:bf:ba:00:b2:cb:58:d8:c8:ac:41:ec:2e:c5:b2:30:49:99:fe:a1:84:27:b5:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 56e45f91f6d18314db8c94553b7d4839da614eb550b67166bce56c7979365c5a
MD5 d029afd0d371f36542560a1090540000
SHA1 2cce0127ba7af436dd2ea142192a07e8a1e8187a
SHA512 f2c87721364249870964afb22cf5449b40b341aee4380d68a3f6a7600f0589cb2872bf49bbb5db2ffa187472132b7f0eb0e888fa67de677cb834ed9ec7a723ce
SSDEEP 384:oXhFYm5+RlBgyEdtWKX3Tb2HRN70I+R9zJKNg:khFn5+Rlp6H/iXi9zENg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:d4:52:56:0f:5a:fe:aa:a1:4b:fe:e9:43:8b:14:fa:11:06:98:16:3e:a7:bf:08:eb:56:c9:0f:6e:e3:cc:fe

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fdde9ac799ad10eb921a9acc673354e677db5197939f856d5b842730a661a7bd
MD5 17dcf00aef79a0c3e7d3023f3cfd6cff
SHA1 f31387da4cc433afbddc21ecc36950bec8981b6b
SHA512 32574a347f7f8654efd1e2ab0d0b5ed7f0587ee51612d5ef54ab05393eb8ee6a1d1fb758147c5687444d963235ef10a74cc2051e3543f555a2fe5133d43a3184
SSDEEP 192:Wz3Z3rJWv6WtWb+CuWXebPpUNTQHnhWgN7acWjO56CqRqNX01k9z3AdCsXVl:slV25tWb+CTb2HRN7r5DNR9z7MVl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6d:23:a3:af:dd:81:ef:72:ca:5d:d0:8e:fe:fa:4d:a6:87:41:2a:4c:3e:7a:96:27:fa:99:48:67:bf:c9:0a:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c461ee8aa35d62351ca925c0c25e4d6c02068692369b23795702161bb28e02b7
MD5 f3d7b024984a18e6b363d2bc20059efd
SHA1 825fc13024c168415aa209e58a2014fd38ab10ce
SHA512 94142450e9e70de4fa0c7742488025ca7ab8f126e172959baf58ef800df0ffc69aba942052384548fcc43f533cbd3ab763eeaeec8fd5a38bb05aa03974fe853e
SSDEEP 384:4QC5K6/MhtWIBPTb2HRN79jezWSR9z1gHuf:4/5l/Mnt/idq9zSOf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

10:11:10:0e:9e:17:48:65:52:14:22:9e:ca:73:ef:59:7e:90:86:97:ab:31:87:d4:13:82:9d:f0:81:03:1f:0a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 92f82449d03c1af0bd852a067cdbe773fd3bd218cf53c076f9803c65195f5a36
MD5 9d7f6d56036fc321f5ca239b250a316a
SHA1 8d57e75a7fe0d4be604925d81b886a3afe79c13e
SHA512 64a0f9fea75d7ff52ea996b60a5ef4762921b29772dbf6d60c405d63b1ed1d634207aa44c4286c9895a621eadfefc2fa79df38353bb9278122c34fb73d657569
SSDEEP 1536:4V+RvHwqbxJvlDaTuQsj8YwrCeW2EUWezvrBQ:4EQqtJvlDMu229Be7NQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

25:6d:cd:ab:8d:43:c1:5c:dd:20:72:dc:94:47:b2:7a:58:bb:bd:a4:7b:7e:c3:30:c7:90:d1:75:03:aa:bb:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

86466

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

it/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3936faacec556455ca606a133f8e59ca75cbf915871203fcf5a6bd5ce2c137c8
MD5 b1fc8c94a4b28ced966b886c79ce089c
SHA1 9c71ed45f683c1274e1b956ea8a6450d98ef7845
SHA512 3901592e9399936abb8a755bfa1170029f7662f2b7b8a20eb6b6f5e283c7b339d621bb2a3d62a71b0cd86e62131731cb9023b40c1ccb069efb0d815dc6e75749
SSDEEP 384:sKWLFLHYMWB5tWSfTTb2HRN7PcrUI+R9zJKNXoe:SZHYpBhb/iPcr3i9zENT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c7:a2:fa:dd:51:86:7b:41:2a:d0:71:6b:81:69:7d:97:4b:5d:f7:09:bb:aa:a1:ff:be:ff:88:6b:0a:50:7a:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4e689b5628e55508c198f7c20313e8c8eab42e7f773045497651e7b61fe4dfb2
MD5 9ca1491e3b9ac0c36d2691c08c3dac69
SHA1 57020fd918d3083002696dd0d1b31eda5170adb0
SHA512 6e866bd7fe29eef555b58c481eb75d9fb9b510047c2d52b8dd02ead1ff556f9913c96a5c063008f467515417ddeacd1569383440f53be09fd7130f9b0ad4d5cf
SSDEEP 384:/ZXSXRaRmITXdXxaDgdQuHC2/bN/hsMS88faWYHwhQ5WMTb2HRN7gW+Hj+R9ztPW:/WIKg2CvZzS8/iWHji9zAYK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0a:57:d5:9c:a2:dc:6a:54:fe:49:2c:48:ee:bd:47:90:a2:f5:e7:fa:3e:e0:e4:2d:ce:2b:6c:08:6f:10:98:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

21338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d925c4a095a02f5550b72b35108e84c163f646433ab9d46f1087d5fda757f861
MD5 b09ddb1a76f0daa9bf83956b596c901a
SHA1 70bed911093323d424a382302a6747ab2b9a0d73
SHA512 62500f6da8f4a3da279fa793106dfc9386f6afe9b82b16db30e0327732cc51d2c029df497451229a51c785d7671495233d0b162fb12ffb13c6fa76287e4fccdd
SSDEEP 3072:c1iq8ongWu9CKc3Hdo3NL5PWa/juTEcgw:c1iTonDu9CKc3Hdo3N7buTow
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f3:84:9a:0d:85:89:4a:a0:54:63:97:06:7f:1d:86:5a:1b:29:94:95:20:93:e1:a0:61:2c:c5:2e:0c:63:36:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

117606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d054aae0818f5be8551d49cf13dd842969993aece7f5a83680f491297cfbbd6
MD5 2b83f97ba380c873f6cf39bd1bde1e53
SHA1 572e91c34ce204d43874babf1a36093f46e03fc3
SHA512 703f9dbc3da98dacd0055762eb6a40c1286b1e823b4226c69ece52074824ec1d93ee8595a71e2ffa3068f4644bab04de51d95f01487eae250ba4f9b4740205df
SSDEEP 6144:bGZIvpI6LXVa4yNn7F6u7Ma7cI09DfOop:bGX4Tja7ADfOw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

75:d4:ec:c9:dc:e4:6a:64:4f:81:fb:f9:e3:92:2c:5d:5f:d2:6f:7b:fe:0e:74:93:a2:b9:00:4b:0d:d1:b1:bf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

221286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9e16c3001d37c80ff2985de99ac0c62f0a265a8f6ad9e31ed945717f96b2fe02
MD5 789b14ee268782b36f399682653dbc8b
SHA1 5dab6669d190038991d142081e0d8d589df08233
SHA512 1a33eaadd08ee568f9132052682c82ae9eb5b8ce951d3c90b8c7c43099b1c9726f5ad062ca7210c93b5f893008469955e4728ddcbfc68d9e2873031d57522d8f
SSDEEP 1536:pkcX2TzfJJv7dq9umYxE627qGIdsHoWSi2zT:IGIdsh0P
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c0:da:fb:da:65:21:f0:3f:3b:44:75:81:03:61:c3:4d:fe:e4:c3:13:8a:af:c8:9e:0a:d5:cd:07:48:da:bf:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

44478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b963b53e445c6ee57563f746af1e1eb28ac923c98b8742798f076b1302014c27
MD5 365f78639ba81a3acd591ce2c21d4e2c
SHA1 20c08b204b8aa699c49e753718b2dad9643c0122
SHA512 c8666f1e4b5d967d6a7558d6ea6d58eff04ab1e6ba3bbfb1443b730cfb4850f9349d8c86a27d7914068861879de925b3677de7a43908a8be0e3a5c852430299f
SSDEEP 768:Xy33n4eb43ixJFkPlRPq2Z8VZHOj0mncTcjxOfjbTNe/L+hsgP+jN3yG2OAAC9ze:C33n4eb43i9SLfl2DAeze
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c9:01:de:e7:cc:bb:3b:3b:e6:13:07:16:b6:15:cc:7e:28:e9:77:d9:88:e3:81:a9:80:6a:af:0a:79:fb:c3:3c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

37042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 472c50813f4d310b9a4c00d4beed73fd98d72e6ba7d077f0cd3fca758237b8b3
MD5 6b927d88825ac7539b8eaaf9dcb630be
SHA1 ab90fcd7308d145b72cc905e7c4ba9c85848bacb
SHA512 a54b848913ea9dbb39fe634d800be92c1ea19528f4a70c5d4f3657b5feb39b983e9a39867a4848d92653713112757c8ed8bacab70e68653c8e2b654b211e741a
SSDEEP 384:uWhWfOxtWV8hTb2HRN7Bo6tI+R9zJKMd2SUS:J6/q/iBo5i9zEMd2DS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

66:1f:41:49:c1:c3:0f:24:d2:8f:73:e5:0f:e0:b4:a9:5f:c5:6b:35:00:3e:90:9f:69:e8:32:1d:8d:4a:1f:ee

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e8abc4802219a923d21e8819ec73bb92b1c2a1ce033ff093ad75d4203fc90a8e
MD5 74b0ddf3d127a942d6535a2aeb472ca2
SHA1 3a70bc530dba1ce50f84406266cc4222d25430fc
SHA512 502f881430855cacdcb3ad0333891d74832efb62418921c2868181a8a07cf0313686c222f7ea604d2c82c9503561288f8b5db9d83d22cb18d92f23f4547db44a
SSDEEP 3072:NR9MtbGzbtyHZ/I11DKdwWorcP4IVCUncl6ShW/lxyH+VcbOruHtVy7sykHtC+sG:jtC+spMcz5vlFtxwEM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

86:f4:99:48:06:1a:15:b2:b8:75:70:9a:b3:97:4a:2c:8d:d7:8a:c9:86:d1:b2:3e:ec:50:50:0b:77:21:7d:1a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

150734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 19d8fa63796a2aa53ac2d081fe0a432fb1aad3cc315a793b05e18e6f6a914355
MD5 6174662ac15a8b2d956d7b46d9392148
SHA1 5e4aabe6c2c977837fbc14647cb03713d5ca8728
SHA512 bb30e65ecdd5c93afd20a1e26bb9e3e30341728295120b96f3e0e79c78ccffd077eace16ceed6c0f50e602585843b344cb2536428ecead5244b775f54c38835c
SSDEEP 192:ks4D6MJaAWNiWO3WT56Os1HnhWgN7aIWftMHQTb8o+X01k9z3AO7mhlla/Klc:P46WWNiWf5kHRN7/HI+R9zJKlc/cc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4f:ab:58:56:2d:f1:99:87:25:5f:67:b0:c6:79:c8:cd:c6:52:1e:ec:38:4f:f0:9e:3a:bc:2a:89:15:ec:92:bc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 de314ee328acfe3ee3214aef10562bbe4e51bf3e404f0bf691a6f7337316c9dd
MD5 f744429c2ec49154eb1f4530809a597d
SHA1 ec885112da10a6489a5a34411dc5fe6a356ccc58
SHA512 4de3a32b8894c75a81518d3c1558dcb9f77fc72b69be008adf9d30dd7ee27775b92cb9a1a03d9f3516638290835bf260ca5a48aaf64ced4d2482440ab3911bc1
SSDEEP 6144:iqcfdF0Dxx/T7UjnPjKjmO9H01veYyPznEIQFfDxD:iqcVHinjQFfDl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4a:e1:a4:51:51:f4:ee:1f:af:1d:f4:02:b8:96:cc:fd:ff:90:17:d3:db:1d:41:31:6b:a0:b2:bd:40:b7:ba:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

403982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a1193a3b26b7b641bef0458fbf166d5f3dc72d58f77386df4bedf5e8fe26010f
MD5 2df2c9787af7b9f6bb1574a79e8d05a3
SHA1 043ba3c01887b0d56ad3146138b5e56877015b53
SHA512 0635b709429d757b1d4e0740f97cea3fdec6f34bdc27e670e56b79c7d87fd93773189e86233cac441f0222d8483eaeaf6974480e18d63de3a9e25ddef6b49b46
SSDEEP 192:RCguIQ5bxleKCxAIctQWpgtWH3WT56Os1HnhWgN7acWfnSp13s5yX01k9z3Agrfd:EZTx3QWpgMO5kHRN7KecYR9zPrf8bPo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

44:52:33:38:40:70:0d:4c:ae:de:f0:c1:67:4f:68:4e:bf:5c:39:94:2a:02:39:f7:38:1f:ce:79:e8:cb:8d:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1f2dff86b9387a401490b03d9109171801a789a57d1e1bd1bd5683ae036217c2
MD5 1a51168055be458e886900282c4e32df
SHA1 0400d6b20fd4f8c4e302284f2b5409909363ba4d
SHA512 ae650fed316c76e9747fef8e0dda45bb02d80f6a8fdd31664e3522d6c0f295e5e88a80b3253aced0b8c4c435f381f5dc921d6388f91ff939856a01e00be71d61
SSDEEP 768:sZOvHaPm7miIFkK1qiQq5lqMJpFg+PgDX0wJG64J6/ia9zDDU:vvHPlug+Pg70cGLJyiGzDDU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b6:77:69:27:94:3d:5c:87:6c:7e:d3:05:00:ff:42:ee:a5:14:11:02:4b:83:e2:ab:87:26:1b:5d:05:fa:2a:2c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

69442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4ae4b0c10d74e6955ed60b66c17428215b4f6b6d884ddedab3bc197ddd2f1191
MD5 f1df43bd89c2345f3228dd1bb984ac8b
SHA1 608f77cb715d451f3f043d3ee3699e95bf9dc961
SHA512 254f4ad9458c0a078b85e8174dfba91510bf39f7963d759b8a6697ced28394c9c3d3448cb373cbc6578d282540997b1c83d92d56a683db93f8a81ff277689828
SSDEEP 384:79fyg3QMTCeH+wtWSKA/Tb2HRN7eNNPR9zbKU7:pyg3vuC+Hc/iK9z/7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

42:6d:ef:ba:d3:07:ac:5f:5c:7d:d5:14:30:d4:20:39:9f:96:3e:af:66:53:3a:33:47:7a:15:7d:ac:11:3a:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 23c63bf6d8e9420c33468ea8f8d3095ae2e6d3617cf66bda37365f0149b943de
MD5 8acea71f1bf7d93cb707cd3ec12e9e55
SHA1 ecb2466d800d0835bc087549c78f5a9bd637960c
SHA512 05be9ddb44c3c4c3b6a9da9a6420a81fd76021f5917c6483eed1e619b9eb96385e363031b10a1b7a04e8cde82607c54eeb7949603d699e6444e8a59c739a54a5
SSDEEP 384:eJ3Oci4RytatWKXWTb2HRN7rcEnR9zV6Ks13s:Q+ciPt6m/iAER9zVt9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a4:12:a5:66:2f:37:91:d8:5e:ee:f4:f5:3f:01:1c:bb:93:92:73:40:ae:d2:70:d4:aa:11:4f:85:84:47:b5:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 514b5ba90b3e8c62bd89cff803eceda43f503eb177769ad10ca6bbe42c60b656
MD5 0e0a12a2933dca774393a83fa18ab030
SHA1 ecf7f2da70af7797143e5891dbed82e36b42c825
SHA512 79ab758761631e9bc8539c56a7f275805980088aac6e28201740dac4d3ef832e96703f06ad9fa8334656d6a912b74b48a81ffea98b4d8bf19bd58e385b8a0ac6
SSDEEP 192:Hg0S3+23ZWT5tWb+UuWXebPpUNTQHnhWgN7aIW92H+BEg7X01k9z3AQCXDU0:A0oFZy5tWb+UTb2HRN7GR9zrCzj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

18:4f:62:ef:ed:a2:a6:c5:da:23:70:35:06:31:e4:2d:2f:6a:aa:23:bc:59:a4:45:85:26:49:80:5a:fa:0d:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ac6dddd89d396935369ed3b6bb04b1d93c7419800f90bd2920d9fb0f0c751c4b
MD5 07241804cbfd6b310dc04296cdccef22
SHA1 d18158f0739fa1b1369d7118703ea696cfc88f71
SHA512 8bdeb5817e887553073c6c60740413698afa04f7aa02ba1e8101b7480e60c3569d6be15c1a005066054474ebc678326b52873fcd24b0200668dc7a75bb969379
SSDEEP 192:iHWo7grBqpGStWLWRBJpvuWXebPpUNTQHnhWgN7acWyOXE7weX01k9z3AU6KR:KWocktWIBvTb2HRN75OXEnR9zV6KR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

71:05:e1:6e:66:fc:6e:7a:46:a7:65:a9:94:84:62:eb:5d:08:bf:57:5d:b0:93:b2:02:39:98:86:48:f2:15:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 63b187e40371a01052c137fdeb187a16d96273b936a32038674d033deaec3e01
MD5 64a1a823e7b2902bc0b79cbd874a5704
SHA1 e0ba4b9fecd09b1ac6d4c5628bc50c540a177333
SHA512 e3f2ca2b9166248afcf151c9cf7a6570649bf4b150d30ba6e210127574543d38786150ee7b1bf38f25ca6dc8ab66dd8c259c36f14d792a80547c4fc37a379118
SSDEEP 1536:4V+nlH/Aczf7ZoDtpcy6t3eCQ1sJxWiZzM:4slH/Aczf7oijKQxvg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f6:b8:27:a1:c3:23:80:55:b3:70:19:ae:66:4e:ef:48:bb:f0:53:8d:e2:e2:bb:1b:0b:3b:7c:ce:86:7d:33:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

94410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ja/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 225695e3d53087180010d2cb8bd8bf1d095dc7e7b5eed5d7c57b588162dec803
MD5 0ecdc851c12437d5fc32e1fb029458f2
SHA1 babbc54522554008014edea76dafd3c95ea59e57
SHA512 5ef939579892d9e191a1686e5eb1901d47e71fe61b65731102bbdbefcc69774e370e356b57895769f8125ccd6ba412453fd20f0c9f6e5c7e02dd0ef170d2d6f2
SSDEEP 192:4qL40LUAWWPPtWSfuuWXebPpUNTQHnhWgN7aIWaH+BEg7X01k9z3AQck:FL40LHWWPPtWSfuTb2HRN7IR9zrck
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f2:e3:dc:3c:34:75:13:3f:7a:00:93:79:cb:49:43:b7:4d:bf:2d:6b:11:45:08:f8:84:c9:60:99:54:9e:35:42

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 346899017cbf51bdebfe9421fc18938e2a958f617dc1f89ac069cb32a48cee77
MD5 ee4ae71e1b6ef2fdc1104537936017dc
SHA1 14c234030dc1d57121d7549aebaedf1754c58725
SHA512 29c3e86ba4f157d57e9b30372edbc89a8aa78053dcd5b1c20adc800595939b904671c070b75e15119de8b1e5c00fa287e25db3c68526970cba808a0c272e006a
SSDEEP 384:gXA1KXSXRaRmIHXdXxaWnNQufc92wOZhloWTVYxaWYHwhQ5W25kHRN734R9zrDQ:gXA1HItnm6nrqWTVYrv09zY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

69:fe:95:fa:82:51:35:13:0d:88:5d:ad:88:2f:51:81:1b:66:0f:a8:2d:a1:5b:1c:12:5e:88:f7:3f:d7:54:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20842

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8bf0e8d1450da552dc1b665823cb9ecfcc403d897aa28b5ae3fdf18e63580dc4
MD5 45ee08115749361943a7b28d98ae5f8d
SHA1 cd3ba7941e88b244f29785deb73a115a529ce45b
SHA512 b1485590bfbe715304d1cdb163a14d1cf4bc7653029dc2eef66463936f5007a236d6cf243952cf27f98acee85e5c5cfaf42c23323b7814aa02f735320ab56b43
SSDEEP 3072:N1iiMPQlRNGtKAsTqBfLfgckqpVHNYSL5nImvNWwSTLp/nfpxbRkvFiF:N1ivPQXNGtKAsTqBfLLkqpVHNYSL5n7S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

06:a0:09:c1:11:5e:ac:61:6c:1e:85:75:48:6d:9c:b9:47:e1:77:0a:69:26:8f:91:1f:2a:4c:ad:21:16:cb:06

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

109502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2aaf2822fafd58ba5c103f7ee1d7a73a409aec51e387e077fcca46fa920686d8
MD5 b6438cedf8277c225cea3622a95eda06
SHA1 ff5ff5ccacb7ce3c0cba0d5025fb949430008709
SHA512 e08369806f544350ed1e31255098ade4b45569438f41b18e8f44d0b0b8ff29afacc236709f784067381cebe6090d94c644cbcd310750af8dcb3224830f862f93
SSDEEP 6144:zG/XtUQDKdUvMPd1/tDQrswuCGjmqEuGbMq4k/YS3CuREcGFSbpF8yiSosN5QWu4:zGnvaSGjmqEuGbMq4k/YS3CuREcGFSbV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b4:71:ad:15:e1:cf:71:5f:d8:0b:47:b1:28:5c:d2:0a:0a:f8:bb:1b:ee:47:bf:35:07:40:62:c6:10:03:31:68

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

206342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 13e531d2e5e2b2768f4afd42f75999d5fd2c268ec59fe6a65e1f14da72b762f1
MD5 441ccdfdb64bf4a9b2794dc7e77f326c
SHA1 f8b4df0abcbc1f1e826ed28caa418c67eb6b415c
SHA512 93ab47342a1d0fa446559b5a4e0d37976475f97307db93ed167891b9e64e8d30c787dc057396bd68ae88ad5127ca59d95847a6ab634d1e7548f9af9f5f49dcfb
SSDEEP 768:AIBRV2DtGZcxaQ2TR6zQWFK4/W1ZgG7Asq+h8FhhYAuSoXU6oHmxx9ziB:ZBRV2DGtMzQWFK4/W1Zx7Asq+2FhhmwX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a7:4c:4b:28:4f:f8:2a:82:c3:64:45:5b:5a:7a:1c:8f:7a:41:e6:71:aa:30:61:c0:66:c7:cf:08:45:5c:33:e4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

41078

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a18f9521f7f6352868b5ba94cbf3bf6c7ee7ba008ee3b61421c09da8850cd5fe
MD5 7f4f0cb641f3366a5966bfaa6d1503cd
SHA1 1c3dec50d8243aa3923c1b5306bc32dbf5828115
SHA512 4b965b0bebf652eb92ff962394bc9e0585b1156d574d88175466e669a8f2e6aed8393364a371a0c0bb8a09b29b69ecacfc45871bc755bd4ca778978b26c13ad5
SSDEEP 768:M5JShuaekc+o52KBCwsPN2CMRUw6cjzrcrrEcJOCm2NRJ0jn7X2sh+9NzZ6YAkoB:OShuaekc+ogb4njWTxaezA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d8:39:4d:2f:55:fc:42:af:ee:85:ac:df:57:4e:15:9e:40:57:52:3c:cf:3b:d2:49:28:93:34:dd:99:dc:68:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

35386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 75a9b8c7611c54fe9e671879ca2a723d4e063332aca58cf788fe2f8465acd5b6
MD5 c159406c5757d7abe7b6b2e321396f01
SHA1 6e223a2772760bf8bbd8857d6162f71ca1496163
SHA512 95d7c5e547f8d75dadb5b30cc813cf76ef1ec55999bff6989268e3fb859b41db67b17f8c93a34b26a0c49b78d17d399112eeac07b1ceafcb3bc49753d65b2cf7
SSDEEP 384:gheYEyXtWV8IN5kHRN7FoNNPR9zbKTN3T:o8yEhMG9zKBT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

13:21:02:1e:ba:c2:fc:ee:84:03:61:56:08:e1:d9:6e:54:4e:54:7f:ad:9d:ba:4f:f9:19:f1:f0:0b:df:f3:96

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fa88b4297be08d781dd4d9013d4215155516b62a52112ef6234fa4ef4a61bd2d
MD5 ee18a9c153275d68eaf29b31d7df8440
SHA1 80103745035c72c0a8f60b947b135f7823364899
SHA512 fd0c841758ba51f6bb62a5c08d48deabc40f4eb119c7db67ab3b75cb193c0fe72ea627834bc2ee4deb2b46b195d6d240b7de562fcb47c94ddc2a41b11b7eb76f
SSDEEP 3072:aR9MtbGzbtyHZ/I11DKdwWorcP4IVCLAFmbTwNOi74NsLGB41svN5O3Qsu3tvzYh:otvzY0chFuNvufcarFpBmuo2BEIX0y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1d:8b:64:65:3a:99:7e:c2:45:97:4f:3b:70:d4:eb:a7:db:6f:ec:10:9b:98:8d:57:f3:69:a1:55:2a:65:f2:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

146414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7b81edd343e901930df2c83a0b3217c063646f6aee74fd5583330256c0d041d
MD5 6e0d215b190f57168cc6c8e95d95b7fd
SHA1 d5e4a248343d37be9b80908da029d0e61dbede1f
SHA512 ddafdda38aa807a0f622b59551897fd12c53960908f7c9ba0876866987aa6eccbc0bd8a6a71e5ab8224a26c4170d32c16aa884f17cd015014982f00d4fc7e423
SSDEEP 192:EoP/j6bts2aRWNiWOi3WT56Os1HnhWgN7a8WfBSYKKWDKHjj3SX01k9z3A8FcGyn:vb6e2QWNiWw5kHRN7n+Hj+R9ztcjn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:b2:56:a6:0a:b4:33:0a:39:a3:36:7e:28:5b:15:59:f1:4f:14:3e:18:cc:20:26:90:80:05:a4:ea:28:d6:cb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 03f99639b3247c489dcbd78a821f30110b708dc9a6bf5842dd836157448207e7
MD5 ea54147a2d2a58c5a73dea8d8d2099bd
SHA1 b266221c07fce6773348b050a5975d56b7bc4e61
SHA512 04792f479f5e6b24eaed2d9b9b75bdcd453fdf11860b575e6189f96cf639e0c817bc49d4f0a79ef2f5d5322e93e0e681d16bd05ceb242e36d94003864779e223
SSDEEP 6144:rqcpheNyuT6v/PVfYu5i/wpMOOXY/m7iNUu1RWVBtKEUqA/fmOit+DBiKw6BtBGw:rqcLpNUuP8tKoA/JiKfw6BtBGxqe6vOO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

79:a8:26:93:e8:27:2f:c9:bc:1d:97:13:2f:76:a0:14:45:86:39:c1:8d:0f:78:f6:e6:0b:0f:64:9a:dd:aa:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

366006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d4075a6cd4d90178ed7b788664c6670b08de6c0048c64e9afd236efd26688c36
MD5 356b7d890c20f321ea27b805e2d4c6cd
SHA1 f28106375f8feea424dd19795ee11a851f76882c
SHA512 2c7817463890630a039ab57d8d24fec8f24e4937053ffafc54011eccf1e950f8a129ea376b02a24573fcbdc3ea6a5b7ab751c27b6bea5f87427056b22e3237a2
SSDEEP 192:QSq7+vckew3Oc8IUU1AQWpgz3WT56Os1HnhWgN7aIWf1U6Oh+kSobX01k9z3AjI5:EOe+AUCQWpgS5kHRN73tK+R9zovlU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

09:26:70:75:e8:c7:87:2b:5c:a7:fd:a0:59:64:c6:37:86:5b:73:d4:07:4e:47:87:d6:d8:6d:48:4a:3f:72:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 51a2e8b6e6c8430648d8d4b59275f663c627cd36db9a92be01ff2c518ab0fecf
MD5 0713992904fc095655be56c919112380
SHA1 0c6368eaa46241dbe102c687135255f22cdf4446
SHA512 9eaf3a3491214bb5902f1701891ad20f218a0420cd0f617ae6a81c3e2e43da4ab3e99bbc5c41913a03fe95644c0b9048a5d3cb05cda1c79e2233973c6eac26ca
SSDEEP 1536:PvEq2X2M8qMQRQsMpbYSlHPGpQVPQh9MlE0i7Mz3:PvEwM8ppbYSJeQJQhKlEkD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1d:e5:3e:1c:3d:d5:cb:52:82:04:90:b4:f2:4c:98:85:b8:6b:22:f6:5e:98:07:4e:5d:2e:92:93:82:d3:d6:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

64626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 448e4d3d109e46f0050f91766a26b64950810b2fef35e0c30e65fd796084b87d
MD5 9fc1f7cdd6ec9743dac0b05a024fbd52
SHA1 1301046b3ee9f2a9052d5735ff23ea0d7fd17ecf
SHA512 37cd6c45e7f0022fe483f2ad320e1e2ce3e2adfdf127048692ff205594288c959cf84f11d7407b0307982db199d6452fea179bd645edd364a60da55abd1b54fd
SSDEEP 384:s7fsi3FncDD8nLi7tWSKAETb2HRN7ssWAR9zgX2i+E8R:Ssi3mD67/ibL9zRi+E8R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

df:ba:71:63:e7:1b:81:37:5b:ae:23:61:3e:2e:07:71:09:94:05:36:6e:b1:ef:ae:83:b6:17:3c:3e:02:0a:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5b803d1a942fe3033cfebd2a82d0b1036eaffae200ffac48264496673b4353e6
MD5 cac077d9aa8445f6e3e2d0f5cd03558f
SHA1 cde2aacd3b19de83ce21416f0dba62b6be298542
SHA512 781bbe239d3cee39adebc37a0ff97a4c1b5b311f4cdfc649c652c5d2ecf9d0c0e4b5b43387aa6045730c9bcfd27ec9e90c76b2a12ed8d5a5d72c543d925eacc7
SSDEEP 192:rxdSP/c+TgW4aKMfe+tVCFKb/3YAtWKXwWj3WT56Os1HnhWgN7acWffVyBwUoX0L:CYW4+GtWjtWKX9i5kHRN7uMUR9zD8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6c:cc:12:81:33:2a:25:d2:31:a3:cb:f0:7c:a1:18:03:ae:16:55:05:f5:b5:33:02:4c:98:5a:77:54:93:b2:89

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16074

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bd76a79e05f2fa23409697a66ee00c397cfe49c49bf95b88e970c8cfe75763ac
MD5 dd62483d3a5f428816a8fb977fa03c1a
SHA1 14a29393361cee6a93e4d0d727d2ddf8c9fd6368
SHA512 bc31f3b91aa73cbc6ab28f19f52eb0402b255cdc6ffbb4d8ec63a0eec3a071b0398f0cc05ac66ed81f45290c62c5bb244b952a3746ab72529dfec244c1a9378f
SSDEEP 192:KRO3E339W+jctWb+GuWXebPpUNTQHnhWgN7agWHyZNKd2kQX01k9z3AOd0vrBp:mM49HotWb+GTb2HRN7PNNPR9zbKvVp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c9:7e:7a:94:62:ba:df:99:18:01:32:78:81:e0:02:b3:7b:fc:ce:9b:f5:29:82:e9:8c:d3:66:1b:8b:60:cc:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 15a44f05d73f478757cd3678991c3b373d0e6c24a399bfe2bdd65d9f63f992c3
MD5 e2d8223dd85ee679375199368b39cbbe
SHA1 b1126c4051072f6dc1fed4333661ea506e53dcb5
SHA512 1df37d2378471e9fcf21ae9002977ef3c42d21b0a1c8a4aaedd068809637289b78365bad421fb3d14efa0c911de13e38262796fc7703972909a5d922862b176f
SSDEEP 192:FCHryLODk8G1/gtWLWRBJphXj3WT56Os1HnhWgN7a8WfeR2Zmp8TKjX01k9z3Abo:YyLX/gtWIBxi5kHRN7isWAR9zgX2i98
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bc:da:ea:c2:81:19:c5:c7:d6:95:ef:6f:fe:ea:50:18:b7:21:38:aa:f1:35:40:17:44:4e:02:f4:09:0f:b8:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 389daefe131cbccd62a3ee3b242c5f09a9d8b1e78176ae95278581dec604ac61
MD5 aeeccf9651365a7e3ce469fefb600297
SHA1 6a4c59d449f5f0e6ded1a542ce776f5d22aeb4b3
SHA512 30bafa0cb0070a8b1f69576f14059f0b2e43d6e59523cd5f657047a97c6e10511a9b95be002aa94ad637868eb72e1addc65cc305fbf25f498e4bea9e6080991e
SSDEEP 1536:LV+ZNwyCo6sqGChDMpUwTO+R//40mPsEM/oVEiVwhzUT:LGPCotqGChDIUU9UVChYT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f6:a1:11:70:fd:ff:f7:42:a2:c3:4c:df:97:54:24:1f:73:d5:d5:64:dd:df:b4:4f:71:d3:48:98:aa:ca:22:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

87282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ko/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9c79e240ce49eb924674d74aff6ded53ca8848a3d8531c2f276df2dd70c5c86f
MD5 dea0123a5ecaf85fd8d8bfe41a8b40d9
SHA1 94c503d1ccfa7d4f06b21c5a154c7fce6b6da10e
SHA512 372814ec5bd4a38bfc631d09a11f709d2009f8d006ab202c7f9c037a64c00d004bb33e627994e206e92e81ec864ae8e9c8631a0a06186ef358b730e9f7ff3071
SSDEEP 384:9MLPLHsiWwMtWSf+95kHRN7Xt2NNPR9zbKW:uDHsXw0m8dy9zr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

27:45:2e:8a:c9:b5:aa:fd:21:77:66:ae:4d:66:d8:1f:17:50:cd:17:f1:32:9b:6e:3a:1c:44:23:09:95:9d:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

mscordaccore.dll

IMPHASH e9ad42acf7f24caf6b1dc6bdbd5dff55
SHA256 2fd45d09dacef910ac80012595fc84878ce55d20e6c18fab1f1f4afc6657c6de
MD5 e60059e509fd043eb301ae4b74ab67dc
SHA1 642b80e1582f63364e487d9aceb493bce0071f34
SHA512 81edeb70cb9e02f08f4c317415b4a14ee3c1d2bc805ec4603cbc4099f282b6457a70bae714bb69ccd86f3eb3d1bce73db9838b6e564c51d89071d6f75ca77c4a
SSDEEP 24576:tgRLeUJL5PGxHa+DW/vQhPKlPB94dbhaoIaLBg7kN5s:pE9PGxovQhPKlPBCRhaoI4QE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

83:2c:8b:88:36:2b:0e:90:cd:3a:cc:d0:6c:ba:ee:35:e1:1b:26:fb:49:73:2c:97:91:33:38:df:be:6b:03:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

912384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb

kernel32

HeapAlloc GetProcessHeap ReadProcessMemory CloseHandle DebugBreak GetCurrentProcess FlushInstructionCache SetFilePointer FreeLibrary CreateFileMappingW MapViewOfFile UnmapViewOfFile FlushFileBuffers WriteFile ReadFile GetACP LCMapStringEx FormatMessageW LocalFree HeapDestroy SleepEx VirtualAlloc VirtualFree RaiseException GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemInfo GetSystemTimeAsFileTime GetProcAddress GetLogicalProcessorInformationEx GetThreadGroupAffinity GetProcessGroupAffinity GetCurrentThread SwitchToThread GetProcessAffinityMask QueryInformationJobObject SetLastError TerminateProcess CreateSemaphoreExW CreateEventW WaitForSingleObjectEx SetEvent ReleaseSemaphore GetEnvironmentVariableW LoadLibraryExW CreateFileW GetFullPathNameW WakeAllConditionVariable GetThreadId GetProcessIdOfThread LeaveCriticalSection EnterCriticalSection GetEnvironmentVariableA WideCharToMultiByte GetLastError MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW

ole32

CoCreateGuid CoTaskMemFree

oleaut32

SetErrorInfo CreateErrorInfo

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s wcsncpy_s strnlen strncat_s strncpy_s strcmp strcpy_s strlen wcsncmp wcsncat_s strncmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _cexit abort _initialize_onexit_table _errno _initterm_e _seh_filter_dll terminate _invalid_parameter_noinfo _initterm _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s __stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc free calloc _callnewh

api-ms-win-crt-convert-l1-1-0

wcstoul

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscordaccore_amd64_amd64_8.0.23.53103.dll

IMPHASH e9ad42acf7f24caf6b1dc6bdbd5dff55
SHA256 2fd45d09dacef910ac80012595fc84878ce55d20e6c18fab1f1f4afc6657c6de
MD5 e60059e509fd043eb301ae4b74ab67dc
SHA1 642b80e1582f63364e487d9aceb493bce0071f34
SHA512 81edeb70cb9e02f08f4c317415b4a14ee3c1d2bc805ec4603cbc4099f282b6457a70bae714bb69ccd86f3eb3d1bce73db9838b6e564c51d89071d6f75ca77c4a
SSDEEP 24576:tgRLeUJL5PGxHa+DW/vQhPKlPB94dbhaoIaLBg7kN5s:pE9PGxovQhPKlPBCRhaoI4QE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

83:2c:8b:88:36:2b:0e:90:cd:3a:cc:d0:6c:ba:ee:35:e1:1b:26:fb:49:73:2c:97:91:33:38:df:be:6b:03:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

912384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb

kernel32

HeapAlloc GetProcessHeap ReadProcessMemory CloseHandle DebugBreak GetCurrentProcess FlushInstructionCache SetFilePointer FreeLibrary CreateFileMappingW MapViewOfFile UnmapViewOfFile FlushFileBuffers WriteFile ReadFile GetACP LCMapStringEx FormatMessageW LocalFree HeapDestroy SleepEx VirtualAlloc VirtualFree RaiseException GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemInfo GetSystemTimeAsFileTime GetProcAddress GetLogicalProcessorInformationEx GetThreadGroupAffinity GetProcessGroupAffinity GetCurrentThread SwitchToThread GetProcessAffinityMask QueryInformationJobObject SetLastError TerminateProcess CreateSemaphoreExW CreateEventW WaitForSingleObjectEx SetEvent ReleaseSemaphore GetEnvironmentVariableW LoadLibraryExW CreateFileW GetFullPathNameW WakeAllConditionVariable GetThreadId GetProcessIdOfThread LeaveCriticalSection EnterCriticalSection GetEnvironmentVariableA WideCharToMultiByte GetLastError MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW

ole32

CoCreateGuid CoTaskMemFree

oleaut32

SetErrorInfo CreateErrorInfo

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s wcsncpy_s strnlen strncat_s strncpy_s strcmp strcpy_s strlen wcsncmp wcsncat_s strncmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _cexit abort _initialize_onexit_table _errno _initterm_e _seh_filter_dll terminate _invalid_parameter_noinfo _initterm _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s __stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc free calloc _callnewh

api-ms-win-crt-convert-l1-1-0

wcstoul

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscordbi.dll

IMPHASH bca145fa0b13e1a6b3a46239f2fffc6f
SHA256 7a738557e33b24bff2e71ac286d772ff6583d8c6d2be8ac6bcbab6cc70084be3
MD5 45733961423b9252cec41c05b2a4204b
SHA1 5a953db230595c8c258823c2f724262ee23626fe
SHA512 4632ffeaa2e6351dc59fc661a32ded4a77c166eedaa30966b0b151e526b6fcf715d69ddf6a03e1f2f9a76db46fc8c27b8c4a6ceaa39625dd0e6078db49a8d93b
SSDEEP 24576:QPpk5fyU2S7cdJuUtvNpkhxBupJzGUtoF6rJ:Ipk5ffYIUUxBupJzGwoFSJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

80:23:20:2c:13:86:06:45:24:71:67:42:17:10:63:97:5e:e1:38:45:57:8d:55:30:d0:a9:83:b8:bc:35:54:5b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

796928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordbi\mscordbi.pdb

kernel32

GetCurrentProcessId FlushFileBuffers CreateFileW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte LoadLibraryExW GetProcAddress WaitForMultipleObjectsEx SetEvent ResetEvent GetCurrentThreadId FlushInstructionCache OpenThread SuspendThread ResumeThread CreateThread InitializeContext CopyContext SetThreadContext TerminateProcess GetThreadContext ContinueDebugEvent FreeLibrary VirtualQueryEx GetModuleHandleW GetFileSize CreateFileMappingW MapViewOfFile UnmapViewOfFile Sleep DebugActiveProcess DebugActiveProcessStop WaitForDebugEvent OpenProcess IsWow64Process ReadProcessMemory WriteProcessMemory HeapAlloc HeapFree QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime HeapCreate GetProcessHeap DebugBreak VirtualQuery RaiseException SetLastError GetACP LCMapStringEx MultiByteToWideChar FormatMessageW LocalFree GetSystemInfo GetModuleFileNameW GetEnvironmentVariableW GetFileAttributesExW GetFullPathNameW GetCurrentThread SwitchToThread CreateProcessW SleepEx VirtualAlloc VirtualFree CreateSemaphoreExW WaitForSingleObjectEx ReleaseSemaphore SetFilePointer RtlPcToFileHeader CloseHandle GetLastError CreateEventW DuplicateHandle WaitForSingleObject WriteFile GetCurrentProcess ReadFile TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer InterlockedFlushSList RtlUnwindEx IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

advapi32

GetSidSubAuthorityCount GetSidSubAuthority GetTokenInformation SetThreadToken RevertToSelf OpenThreadToken RegQueryValueExW RegOpenKeyExW RegCloseKey AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW

ole32

CoTaskMemAlloc CoTaskMemFree CoCreateGuid

oleaut32

CreateErrorInfo SetErrorInfo VariantInit

user32

LoadStringW

api-ms-win-crt-heap-l1-1-0

malloc calloc free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s _wcsicmp wcsnlen wcsncmp wcsncat_s wcsncpy_s strncmp strncpy_s strcpy_s strcmp

api-ms-win-crt-runtime-l1-1-0

terminate _seh_filter_dll _configure_narrow_argv _initterm_e _invalid_parameter_noinfo _initialize_onexit_table _execute_onexit_table _cexit abort _initialize_narrow_environment _errno _initterm

api-ms-win-crt-convert-l1-1-0

wcstoul

Name

.text

Size

955KB

Virtual Size

954KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

193KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscorlib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5549c1966243a6b7f0479d47d1180598427e2a84b6cddaaefa488a7c6350f655
MD5 07de1de90d9ab29b703e988a7e86a405
SHA1 58eaf68280782103140033860d8750fc91bd5337
SHA512 b9558598d7fbfc208cd3a3b788dbe7516745f0bc3c157355a427afb35ed2778762dfafe4df9d538f8f911fea6730a5e0d1b4d78730f521c4814b6edb98fe2d43
SSDEEP 768:Ot51EDMpCUoqFY66Gw17oqZn/TEHmyrchswz6EEZcYf5o4ba2yGlG1QeY48lCi2c:OtFcC3ZcYf5o4bZyGc1A4c20iimz4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c6:45:26:46:68:20:37:a7:65:20:05:84:0c:17:c5:4c:67:dc:ef:6d:3f:7b:4e:6c:53:6f:e4:58:e8:2e:7c:93

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

54722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/mscorlib/Release/net8.0-windows/mscorlib.pdb

mscorrc.dll

SHA256 23a433398be5135222ee14bb1de6334e7b22bad1a38664a83f1cf19dfbddd960
MD5 53e03d5e3bffa02fbc7fb1420ac8e858
SHA1 36c44c9ff39815aa167f341c286c5cd1514f771f
SHA512 f6aca16b90f6b4efa413dc9a8f1d05e83c1e3791b2cb988f9bce69d5272a0077c1edcae4111a494d166b5e3ab4e25956dead4e93ee1e43417c2b7bb082292170
SSDEEP 1536:uIEw91YWvh7xR+l5dZU49N9SqignwJ5cvBMgSIctpoECy6itYlzSU:uIE4al5dZU4dSqHns2SpSkWmU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

04:94:a8:1b:d7:80:7c:b8:8e:1d:5d:82:c8:16:9c:8f:49:6f:7e:be:d5:6e:84:e9:9b:b2:1a:3c:26:0f:75:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

1

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscorrc\mscorrc.pdb

msquic.dll

IMPHASH 635f2d7a258f33ccdd9ff608508ac52e
SHA256 714803871932e91a6dce57597169e32f3b31507a494e7dd62d08a0a5cd78c622
MD5 ac3a293aeea9b3c6422bdb818fecb8bd
SHA1 a7ae76487acfb08b4900a008d341351e08b3add7
SHA512 aaeb2f55958ffb8ce5cf18645f560bcc1869f70a8dd940a348fb5a9b982e33e8e87c1f90754b19962fe122a51431c5b6dcc859fed54ca2dda7bf227430203137
SSDEEP 6144:jNIDqF11gk3JT3yxKsGS9gYUAmNJtYk9MoNsHQ6GNhJfzN2BxVEyQT9u3epLlVs+:jODS1R3JTqGaos6SHQxNDLN2KeepL3D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

fd:dc:e8:e5:f5:6b:c7:59:6c:88:14:17:3f:48:ed:8e:65:60:4d:c2:9a:2a:f3:15:3d:eb:63:2b:f5:ca:1d:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

149760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\__w\1\s\artifacts\bin\windows\x64_Release_schannel\msquic.pdb

winmm

timeGetDevCaps

secur32

SetCredentialsAttributesW FreeContextBuffer QuerySecurityContextToken AcceptSecurityContext DeleteSecurityContext FreeCredentialsHandle QueryContextAttributesW AcquireCredentialsHandleW InitializeSecurityContextW

kernel32

AcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared InterlockedPushEntrySList ReleaseSRWLockExclusive QueryDepthSList WaitForSingleObject CloseHandle CreateEventA GetCurrentThreadId SetEvent ResetEvent SetThreadPriority GetLastError CreateThread SetThreadIdealProcessor SetThreadGroupAffinity HeapCreate HeapFree QueryPerformanceCounter MultiByteToWideChar GetLogicalProcessorInformationEx GetSystemTimeAsFileTime QueryPerformanceFrequency HeapAlloc GetModuleHandleW InitializeSRWLock GlobalMemoryStatusEx DeleteCriticalSection CloseThreadpoolWait WaitForThreadpoolWaitCallbacks CreateThreadpoolWait SetThreadpoolWait GetActiveProcessorCount GetMaximumProcessorCount InitializeCriticalSection LoadLibraryExW TlsFree RtlCaptureContext TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList LeaveCriticalSection GetSystemTimeAdjustment VirtualFree VirtualAlloc GetCurrentProcessId IsDebuggerPresent EnterCriticalSection InterlockedPopEntrySList GetCurrentProcessorNumberEx HeapDestroy IsProcessorFeaturePresent PostQueuedCompletionStatus TerminateProcess InitializeSListHead LoadLibraryA GetCurrentProcess GetProcAddress FreeLibrary SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlUnwindEx CreateIoCompletionPort RtlLookupFunctionEntry SetFileCompletionNotificationModes GetQueuedCompletionStatusEx TlsSetValue Sleep

advapi32

EventUnregister EventWriteTransfer RegOpenKeyExA RegQueryValueExA RegCloseKey RegNotifyChangeKeyValue EventRegister

iphlpapi

SetCurrentThreadCompartmentId GetCurrentThreadCompartmentId

bcrypt

BCryptEncrypt BCryptDecrypt BCryptOpenAlgorithmProvider BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptSetProperty BCryptCreateHash BCryptGenerateSymmetricKey BCryptGenRandom BCryptDestroyKey

ws2_32

WSARecv getsockopt connect setsockopt WSAGetLastError socket getsockname WSAStartup WSASocketW shutdown WSASend closesocket WSAIoctl bind FreeAddrInfoW WSACleanup GetAddrInfoW htonl

crypt32

CertFreeCertificateChain CertCloseStore CertDuplicateCertificateContext CertFindCertificateInStore CertOpenStore CertGetCertificateContextProperty CertEnumCertificatesInStore CertAddCertificateLinkToStore CertSaveStore CertGetCertificateChain CertGetNameStringA CertFreeCertificateContext

sspicli

QueryContextAttributesExW

ntdll

NtSetInformationThread RtlNtStatusToDosError RtlInitUnicodeString

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcscmp _strnicmp wcsncmp strnlen

api-ms-win-crt-convert-l1-1-0

mbstowcs_s

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _execute_onexit_table _initialize_onexit_table _configure_narrow_argv abort _cexit _seh_filter_dll _initterm_e terminate _initterm

api-ms-win-crt-heap-l1-1-0

calloc free

Name

.text

Size

299KB

Virtual Size

299KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

netstandard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 63bd1cbf7ff3d940d5d270775a08034e4225954651a8ad70bda9fbef17b6edcf
MD5 4e6c7143e7487f0be5fe22532a2e9ef5
SHA1 bb1c40559dbd12853e2c48eb121a320bb24f969e
SHA512 6ddeeb0c30f80b4eb3dc5aa5d9234f8b13a254ab4a22897a62ce0f6a51dbcefb8eba7af8fc5904220fdf4f53d8d443ef501bd9d93a9af12c562d2c7083ca712f
SSDEEP 1536:DYsYXj0p2NYq5V4bgDHsPdIpuSE5L3Ukcz9wOiiMXzlD:EMkYe4bgDUAxCOGXZD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

04:70:5b:11:61:03:68:f6:81:01:bd:56:df:bd:3c:ab:57:b6:e0:2f:12:30:83:90:75:3c:01:c5:82:d3:50:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

95886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/netstandard/Release/net8.0-windows/netstandard.pdb

pl/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b78db913f55732f26ba8e2d1e105cb9ab4ccd94192d46b50dd425e353faa7a0c
MD5 745a1236755a9570bacd8ad66688983f
SHA1 5aaac35b2895ed08d76103e8114a57bf95a6782a
SHA512 67ad1bd7cf5fdb007133387eec624a6788f2c2529320d34adf1cc1ece896318ff87355a894871d4b0b7e09245e413a7d849b10e92df8ed56b435ab86d3389e81
SSDEEP 384:MWXSXRaRmI6XdXxaFhHQuOX2gyKh7Bed1aWYHwhQ5WNTb2HRN7NbI+Hj+R9ztjva:MjIHhw0iAXd/iBXHji9zhva
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3c:16:0d:fe:80:d9:19:1d:6d:23:2c:a4:83:fd:01:2a:06:19:d6:6a:08:0a:38:5e:7c:79:8d:ff:d5:90:01:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1e3b9579c6c52a9b90a153634e730d75468d87bb9a77025560bb16a3ce8dd6a6
MD5 89152df4690d8a5a29d0be959bd66a00
SHA1 bb51df6662f6c406ecccff217159bd5c9bb467d7
SHA512 f21929b18790fcaf22d8a69284c33c31d698a819fc086c8d8b67c37c185f714ef4a97f550d37af380abfd8426619e6260e1d04dd60e9ae5a5840b07e6e19e081
SSDEEP 3072:LV1irnusDdkxyBRXhbKmdnDAQMZwQEjkE:B1irusDQyBRXhbKmdnMrZwQEN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f0:3f:11:89:40:a2:47:e1:46:a9:c7:ba:eb:e8:31:0f:af:ad:49:78:d3:33:4a:25:b8:fa:33:4b:c0:7e:2b:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

108494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bff2ffd22ccb232f32758ddf49bd08b59821da6f702977225da224a9b2d24e8f
MD5 2293fc713e9928123d443b940932f130
SHA1 64c4cbddaf25c2eac4bf0e63ebe2c241eed81189
SHA512 8ab0520d7361cb7aa234f0b0ef27f1c1bd601a8f20900fa18371e40a5542d595971b06be6fdbc8bd6f1f0c4329063cb83abd35de7ddfc0fba52040c29b8f4ce0
SSDEEP 3072:5GnHP/j1dCXWIRvcpwCjz3DWeOgPxeZTUV11LxrX0G3l5oPQ+u4sItmosXy2LuNo:5Gb5OgPxeZT811CosujoN2KNKB9jz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

93:e1:bd:44:82:82:5c:88:ef:b3:cd:ee:2b:63:3e:9f:64:be:34:eb:aa:61:48:f5:31:4d:f5:bc:55:51:78:d3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

204494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8f0d4594201a85b195f03d8b80dda0474250d83745aea82a12181b6404bee463
MD5 86b523b5c052a7bbbb97b5ae9956ee0c
SHA1 544a4e4f03bc01aab6a203a4ebd25763d01df8a2
SHA512 973c711a364aac2095fae850600e05375c855620993da049be22f410b67f23ff30b7a96386d3dfdaf19013692fa375f6aa80aacd3a020d1b767472eefd899288
SSDEEP 768:hexIgxhW7mPK63Mxj0HubXqbNGmiylgaD2nBqW0Tr9XL9nG+0WMDW/iU6EL9zRiS:UxIgxhWGKnvbXqbNGmiyltD2nBqW0Tr5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ef:f0:29:67:3e:a9:8f:25:c2:7f:0d:cf:6f:73:f9:a7:e6:db:ee:d7:d9:71:c8:cb:74:fc:93:29:27:28:6c:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

41166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0d99dd83062a04a2923429f082fe056f476212b0f68971406eb87889662e0508
MD5 4bfc2f07e058d49b8f7a47c121e179cc
SHA1 a28086c5049faac59d5bef5c2acc8dcbd4018555
SHA512 506d352b8720eeb1c5e0d277b2251661a560a291c47d493439208391688de503dc9e58850e63b06d03919a81f430993104d88a8d722399af3a35056c91482c01
SSDEEP 768:oQP1lvkeXf5gNwXfhFwePQ2IMSrRujl3lt/4//ODMGJW9I6h/upcy5NNL7X4j0as:n1lvkeXf5gBx6NZr+0al+z9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f4:b5:2d:24:55:c0:27:8b:23:80:be:c7:60:9c:0d:01:01:11:b5:a2:fe:02:76:3e:72:11:ca:d8:dc:4f:c6:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

35002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e2404afeacdf9ca3a8f9c6d2f8e0e77e4649a7992cccb4eb79cc182ab1d6c7e1
MD5 aa9357b78ea1875850c2eb8ae5ec1abe
SHA1 8bb91ad4c86908b4f891a22850b31ef0d845be43
SHA512 aace254e6268a022a72c25ceb5ba558ad3e3af2bace86e695b3811ee6023013527af0d2c44b5dad93196f76f4bf8c9d439e0fdf52927eebed1e9bda0f28a8d5f
SSDEEP 384:aAhB7SAhE36tWV8Oy5kHRN7UsWAR9zgX2i/Q:NxFE3FNzL9zRi/Q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3d:e6:57:d3:ec:34:44:92:ee:e6:5f:01:2f:0a:f1:0a:81:01:0d:5e:a1:90:cf:82:10:a6:81:ed:1f:a5:23:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 22b4bc2125d68de6672b598835fd729b185a5ff119daffd3613264424a4f595d
MD5 5c0322af2637d72d63457354d6b0a9b1
SHA1 6f8f87f497a2a7bbfd6eb3997c795a2eb3d1d821
SHA512 92c8ff8d7716f2e257761b2143f515280e442136d4699c2e6963ae160e47f05d668e899837b7d6536139d0325073262cb1ded5b16e42d4793f52207962dcda3b
SSDEEP 3072:BR9MtbGzbtyHZ/I11DKdwWorcP4IVCQrQhubYlmaelG5YUzVTFpFWROTNpWJu7S4:v7SzJOTzsAvbBrSRg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a8:24:8f:9a:03:f3:a7:64:75:21:08:12:24:17:71:86:50:12:ad:09:23:fa:73:41:6f:54:fc:69:90:a5:80:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

144214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c392217cab61187b5c16066608c9dc135cf9a4632ab2e80edb1a9fb6362d5d8e
MD5 c42197ebc6057c91928dce75d2dc96ac
SHA1 928f42afd350eddab6a70cb5bb8b79c73a28944d
SHA512 18a46fcb76d1ba544e92067b482d808aed664ed270432df001a8e45635562ad7aab6df1c90838917ce98986a00c740bb3fe0c063756aa048e07c3dc70eac4be0
SSDEEP 384:J2A6US6bLhWNiW0Tb2HRN7giI+R9zJK0Xj:J/S6bLIg/igFi9zE0T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

11:75:d1:24:35:ae:d2:f3:95:e3:87:3a:3a:08:18:aa:52:b0:db:91:1b:c1:ce:ef:e7:cb:e8:36:f9:66:e7:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11098

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 57dbd2b17e36e74c3ea22a887070886fe84072a325268513e047fd44c91bbcb7
MD5 51207e5369570d7355d16c680b244e86
SHA1 e29f9020da81579fa72daa02cec1913ee47474b0
SHA512 09d777ed842be0e23e42de7621e8a992768350211ea857b8d920a560c5abae13699498cc4c737ad9bcebea6685ea7e83722a1df2b40e4c2f76fe8d1eeb4e9260
SSDEEP 6144:8qchiU3/4XXhZXmAyoCagWE9XitnnIuScW907WKG:8qcheg9Sq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c3:7f:2b:95:59:89:42:b7:61:8b:00:7d:c8:ed:db:ce:2d:49:59:30:21:2d:ed:8e:af:41:fd:f3:1a:f4:15:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

361454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 21cfbb5900f7e718a4d5cbb81403589ef69eea6e8da4d7e829445948bb41b3f4
MD5 13e1f7977d8937b8cfb9983ae6ea618a
SHA1 c977c9faaedd438715faa7a62beeac9fcaed8bee
SHA512 9325d6db45f4bb1524860fe89fed151503f32d22290fda67aed6c8e7d99b895381f6afc774fe8ce7bb433610dd759f4d344f848331e99ade6f00a80ef6f9c3bf
SSDEEP 192:xgKchXHc7E768M+4T8/hrQWpg3uWXebPpUNTQHnhWgN7aIWmPDUH+BEg7X01k9zG:kWNw/hrQWpg3Tb2HRN7ZR9zrqp7F
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

59:2f:26:cc:4d:69:7c:7f:1b:62:da:b3:93:c6:a1:89:03:60:94:56:ad:94:cd:5f:54:c6:41:69:ef:bb:ce:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11638

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fd001f5396c448289feb3eb44a09a6424582126108b8feab4a4ce9c0f2ce7650
MD5 f9843a0cdba7c32c4af5f5481ab0b8eb
SHA1 8b01da6ccbe38092ede8b4ffc2b7a58012110ab1
SHA512 99855247294f8e4b49897a52fac27e005679f51c13d3bec6203c6553ad646dacfbb4958d09e845da199bb6cf076fae3d267a36e8b081179141395141f3d386a8
SSDEEP 768:TiZOv9Nd0tyOJ1232W1fXmd1F4M2zt192dlI5QOu7HC4laevHi/iMs9Hji9zLS:dv9h5TM2R+l85w9la+6iMs5+zLS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5e:9b:ac:81:a4:b5:0b:ac:b5:ff:53:43:14:63:80:ab:78:cb:8b:4c:f6:ca:10:33:74:5a:93:01:b8:36:86:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

64746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5689889eb58306d9d7b129b00efce8abbbe7539153664304a9618359c30ed10e
MD5 53b8ad1ef8e734143d46a6bd4b7cf22b
SHA1 f048eff601ddaa0c2593deed008bbba2238cb354
SHA512 4aa88821a80aca5a2413305053d27bc62a89330c1b49cde468b5e758d7273d6d71c5b87204fc0fb3c1c0189480d45f8b1530026454ac46055de8ef799a0d7c73
SSDEEP 384:E5fSY3abpo4+3tWSKAKTb2HRN71+Hj+R9ztdLx:ASY3epo4X9/iQHji9zbLx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b5:8c:55:25:65:dd:56:73:c5:c3:3d:0c:62:ca:48:63:52:61:a6:05:bb:68:0b:43:b7:a5:f2:60:ef:7d:8e:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ee95cf6d2ef80552d5ed88bddd792484e1a6ee8f892db88b820a8b0172f22073
MD5 13a4a3e2a7f0865e5321ee3da1032760
SHA1 05e92c6c32b59b6ac57de7dc80edcd532a429e57
SHA512 9837b0a6206c3c60a1d59526d579eba8c911a9ffff3ebbf4d4fa896c77fa6b32c5f16a05bf1b406e20dcb199b8a6c6f9d32e6a16bbc34f9b35c4c1a88faf23a8
SSDEEP 384:7BJgYTXXbVQlhatWKX1cTb2HRN7hR9zrY:4YTXXtFc/iL9zc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4e:a6:d4:00:a9:90:8d:c8:ec:10:45:34:c2:9e:b4:27:52:48:39:9a:dd:28:43:03:b8:b6:d8:b3:81:77:93:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16106

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0c98195d2caad40e3089b52f8e1fc54220620d44fd63d1c4040b19aa955c6de1
MD5 8300618a82479998204c24b50622b305
SHA1 2c4d6c0aeb1dc5ff80c106d044eb831ab3bd8704
SHA512 d772c6d0e4dd847a9e244078c49d05cef60e441f78e37cedf7cf3232c3d1cd659d4768d2ef3e5b5573c72b3a187183d95c3a412e85fa6365a578a36a01ecd5f4
SSDEEP 192:DVuKY3ih3ucRWvctWb+bhuWXebPpUNTQHnhWgN7acWzK+AngqtVVwX01k9z3AaS1:D0K6Mz2ctWb+NTb2HRN7SZSVwR9z1PC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

91:72:05:18:9a:a3:62:69:b3:85:73:5b:30:df:32:0b:6e:eb:7a:a9:45:dd:6f:1c:83:17:3b:52:db:36:0c:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 09ec3a1acb37e116294fc1269f4dcd88d7080f901497b67d9de0f2cbdae8215a
MD5 243913ddd5962531f5708202d417024a
SHA1 59814aa497d8b9e14c478e7eda9ae485be808c59
SHA512 e259069e2356fb00a60257ac9973de2df6978ad33404630c59c3f253dbab0f7642310fd109801b6ddf18427a21a838da32a230031c1b0676fdc16a32dcc0c61b
SSDEEP 192:yOp7GhO2nPd2boutWLWRBJp5i3WT56Os1HnhWgN7a8WfDUqEYKKWDKHjj3SX01kA:nghAboutWIB95kHRN7Y8+Hj+R9ztT5ez
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:98:91:e5:28:da:9c:d5:0b:ee:4f:1a:3e:96:a5:4a:de:8d:33:0a:72:28:84:67:fb:7d:90:81:7c:f8:bc:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3e3908d4a3dcd9ba7659da009eaeaba7f0dae297aea8c3c8f2765a579bf0e7c
MD5 569add9e2a81fd20bf6a99780bc1430f
SHA1 0a49159ce53d2baeba15410055c213df3d016ec3
SHA512 c0da495bb5621e5c0c5e88ff5cae49f1b9359a36c73ac541ac98fd71ce01a6841ebc40a80fa5982d04242f6709852b6da92214012bbebda0c3d94e3648a114ab
SSDEEP 1536:FV+Qph3IrI/WoAg8EExNWAJo/mEX3M1AmGwCxMqsdaNk84SKCq2aq8iKzz0:FBh3IrI/hOLo/mj0aqmzY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ec:7d:67:fe:0a:f3:7a:76:5a:ad:07:91:38:10:16:32:ca:6d:71:ff:44:00:2c:9c:1b:46:b4:b0:9d:88:2f:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

85522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pl/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7da86e38a260ed098c4be97ac6f38244042752996460b141a801c145b1932eb0
MD5 e565c6aeeb50802d85bfe59b8422bfe0
SHA1 7c4e19a2fe6b7e9f4dca17a3badc5d39678dc70b
SHA512 ecd71218ffd8aa4c8f2df15b3b67be924d82052890cf7a4004d5d4a6c275a648d59bb3d308ad0de64073745310f0ae8f8e58e866f8f8632c85f6c8ab6c654bb9
SSDEEP 384:zYL8NLrrWF0utWSfJTb2HRN7gV1d5sWAR9zgX2igRZS:zM8xr6F0mB/igoL9zRignS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

93:e6:d3:f6:46:cf:8c:79:ce:5c:af:6f:15:28:1f:9b:ae:20:c1:07:bb:ea:b2:15:68:81:3f:da:55:4f:78:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11082

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6dc19d029e6884e1fe0481134479f204d70d180819afd5b78b43936500333101
MD5 dfa30b7a5cecf942aabe27667d64b510
SHA1 a36250af6f52bb3e47b343d163c6cd4118ad958a
SHA512 39a384e1d112d390cedc1baa9c6a098589c90bedaa8331b46a2aa5b1fc527c624b0cb1122a2acd039f396a45490a28291e9515e65b98bd30c291093e0fe87799
SSDEEP 384:TUjAXSXRaRmIDXdXxahKOQu7l2135hwdVjTaWYHwhQ5WhTb2HRN7PR9zr0W:TUjVIcK9zBuFR/iJ9z4W
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c3:4a:9a:f5:f5:9e:e0:9a:c8:8f:0f:0a:d8:cd:87:3a:bc:c1:5d:74:88:71:47:44:00:5a:30:b7:0b:38:62:41

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 549c02d219416b31d47dd28b3636e6b5d048c51688f63cd2bd9c031e8795f6ba
MD5 5f0db059969a14b20c09ffc8fb6f03d4
SHA1 d5adf9d029eb8e4a376200681d5a820294528802
SHA512 e79deffd08386c486eeca352cc437214e9d5bf0a2ddf130ebc78b2e5e82af00963e450ac4c1d32af29d7f0591c4584005919822aecd3bbfb8a71bf7706e06b37
SSDEEP 3072:91ivAS9ES8/rYIAB5CFiZkWOW/nmHPCkTTH2SxM:91ioS9T8/rYIAB5CwZkWxvH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f6:2c:82:0c:aa:e6:ad:6f:ae:82:b1:2a:73:fd:82:dd:5e:95:d1:7c:ea:d7:ad:3f:97:6e:66:58:90:6c:6c:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

104746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 98a8c95b15081a576fa60b74b00222a2ea766a6d624d86831e5a30f08430ab71
MD5 67d4884778dc0822ed3539fec9739132
SHA1 66e13795a2a239670d16f12af795159af9497ff7
SHA512 29e19c24a51fec9bee0b498966ee8ce782c8c14b60fc6e412a0def3115b14f6e7977aa7ece96cc858589b4b71048de2f16cd6a5d9bc911f1b368e6163e9e844b
SSDEEP 3072:UGExPDDCjk3SIqF4S1C7gHXKqai4mRyJs4Ao/B1SNDhcsmsGoaYMuuR4T/Ib0Uis:UGV6qai4mRyJs4FmNHms22wb7SrW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

57:d4:c3:05:66:1f:83:2b:30:8c:6f:af:06:7b:ae:79:d0:c4:17:ac:21:d5:6c:37:2e:6e:01:d8:20:78:44:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

197634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1892b077d0896763c8db9894830c8310fd537f945cdde988df408a2d2ac4c518
MD5 8e401e042e6dec29a9885b75b12287de
SHA1 7a7e37c3dc673986e9253fc723af31581e42bbfe
SHA512 51c3edb27de7d8d79b49f5c03eb36eb502ca9d6dba5bfe35afdf1c10f6537005789df3268475be9d63160d0e4618773fe84354fb145b40175660c5a5d3d6649c
SSDEEP 768:xOQxugWQGm2q+z4tVdWIG8KFH9+gURCeKMY2smVt/ZrfVUX/l6PSlo3wmFy/iv9E:wQxugWMPdWIG8KFH9+/RCeKMY2smVNZ2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

97:b4:a9:5b:a2:59:de:8a:83:b4:3f:42:39:64:41:84:10:66:50:02:90:6b:ad:82:ba:02:ca:37:ef:c1:60:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

40686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f17d8a479e7dddaefe5b2b6914b880abbef38ca96eaa5a3051d3a9ee124912f3
MD5 f897e3bd5d2c4c2ef9aa08ec2811f2ab
SHA1 5576beb0b04567cd5dce7c53b2b7b88ebc3b79ef
SHA512 7ddd1073f930062a0d5da87528b880d1404e6976c5bbbcb0b61a04f07f6c28e34bdb145f5f29e0217649e39ebaf69e69e212cb81cde18ddcbd3aff200dc89a5a
SSDEEP 768:MT8SL4emhmZ0eEfYVuPe2ZZj1UkjeBentRDNO0ZGlbcKtAh2kmSMabAOpT0liBLY:28SL4emhmZXaQW7iGzAH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f5:17:f7:18:f5:2c:0d:6b:4a:e5:99:2e:18:68:dd:8f:9a:f5:78:03:28:bf:93:ba:79:5c:68:d0:36:07:e9:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

33810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4043e976aa03210afd649c0ebc057a68fab62b82948c60408a2cbc3f2720196d
MD5 e01ce51887f663b6a47e6dd8774f1e44
SHA1 c203e53c2b1f80852cce58a0058e7e4bdf56338c
SHA512 192922bd4f780706042ba9a8195e5e665e947323bb8bc29d1960b9d853249243a06fae8449e6e8a5073c4a4293d2eb7f4712e3d6288367b20b6dd549c7fccf70
SSDEEP 192:7dRzhcFZEgEsEC1WVWtWV8MuWXebPpUNTQHnhWgN7aIWQ9rM+H+BEg7X01k9z3A0:5hiFZLWWtWV8MTb2HRN7l9rMpR9zrFmy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

10:38:d3:01:d7:2f:d0:96:6b:d5:0d:0c:14:f4:ea:5a:27:8a:22:6b:6b:d6:62:67:5b:b3:3b:d1:21:35:aa:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7949ab7f77c822a6a3924281dd73ebe2306ed3f041afeb4b4a2b94084ed66e9
MD5 32cecf4fa625a32d2e3e4c4a5caa49bb
SHA1 f832dd923ec9a5f35eb4572744243cfad8c81f42
SHA512 1d3c896c94546b061895cd4094c109a934e62cc50af2f952ba2d7b7d94299c120e61d1bb5ceea3c16b5b1f9c1421cd469cbe27082a5ce213a10f81aaccca101c
SSDEEP 3072:uR9MtbGzbtyHZ/I11DKdwWorcP4IVCcPU9yI7Ixf9GLqBCVHBnpFWROTbuauRUyG:wuRn+T6uDfvgKOli
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:59:d9:d2:98:32:f8:bb:13:98:9e:13:3b:7e:8d:b2:31:b5:8b:13:9c:68:18:c7:58:4b:8b:0d:fd:c0:10:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

144030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d45788728759fca625bfcd4d2c02b6d6fab9efec0f8ef7cd613657b407a9ad43
MD5 ae3f42b47232020972e34d6ec0052250
SHA1 e6e3d4d88f66986a36f989d28c1d0d30ac144e87
SHA512 4ec651d8ee935b67a15200c234e614048d309b8d1d31f141cfbdcca015142523aa5f0abaa50173b6919bed38281dd643b94320ad4b6f06c55ec53b76bed0f80a
SSDEEP 192:kY+6UIvAQFvAWNiWSIguWXebPpUNTQHnhWgN7awWSVYKKWDKHjj3SX01k9z3A8FV:d+69AWNiWkTb2HRN7PR+Hj+R9ztxgK2I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

cd:cf:1d:62:b7:bc:49:2f:68:11:c5:0c:68:03:0f:c6:54:0d:93:28:0d:8f:0a:dc:c1:f4:3c:1a:08:8f:84:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11110

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6ee696b008a5477d4bc4e2369551b9c3c628e3ed2a477c9bfdc8cf8ada6a5203
MD5 74a39a68c8d12d6d45a9f8f1863c28c1
SHA1 e2c7c20bf7a34e12a88651a364584143fe4df4ac
SHA512 8d3b801ab4e4b1f02400e9e5e451549c2ac5ee032dc6e04ffab25abdaee0ce944295848953aeb97f6ea8707ea0f920c45b28441770fca492bfd565af3ad65338
SSDEEP 6144:cqcMjVuxSGSTwdkQAqAUo6nJ9lK02tBPFNS2/Ph/8:cqcMsAZ6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c1:f1:79:ed:4d:45:87:df:6f:8d:1c:e4:b0:c5:db:58:00:b3:d5:2c:1a:07:65:47:b7:f9:5d:14:1f:07:a6:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

354218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ee65d690ad9f99e47a133784304e82a873c842f1d7116d81e965d6241854ef29
MD5 1e9a1cefa2c2675b95e5f49046271bbc
SHA1 4b31a65a58a1314ff9ed292bd15ad1faf2b9f9c4
SHA512 9431abb636d4b59d72d5f60c74f49d543836e4e5548543fd1505c32078fee5df533ca1ff25a117f1dca036ce44bfad1378fe04838d9d00711f532ea999425b55
SSDEEP 192:sI9IWw+/yRDnsHZ9xFQWpg10uWXebPpUNTQHnhWgN7akWnmQTb8o+X01k9z3AO7c:se+4TnQWpgyTb2HRN70mI+R9zJKWA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

30:51:f1:30:44:ed:42:08:52:3d:4f:d2:c2:40:0e:cb:6a:fe:ec:a3:25:14:d8:81:1a:c2:85:36:5a:eb:63:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bc8620fc03754b3c3685195c7352a5974aeba74370216b35439ed9aad98dea9e
MD5 c10257b48e8e95358a29a4256ce19dc6
SHA1 f2c1972eb5af85158cef96b25e3669f5d08dbb15
SHA512 0870a60c764fb3e3c11a4c7dcc3202db181caaf5226d9b4bec196477fbc6ace5aa42c674bc165dfa43354c89b1bfafcd764591a66d8eb07d1013848242eb05f9
SSDEEP 768:nZOvn+HYdRWsswJ9JgZaZN0gF9ekuHy+eOT/iAV9zB:ovn+CJF94yyDi8zB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ca:bc:ba:af:99:16:fa:fa:e3:b2:8a:f4:11:63:65:c6:c3:53:60:e0:30:42:9f:ef:31:20:3e:8e:ab:6d:fa:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

60642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a880b44f2dbb43ffa30b00bb2ffeee89952edb3eeb1a416c3e94f9db579db902
MD5 4cd7934c9261540087f9727032139565
SHA1 0dc1c9416e256fa3567358205858217bb251f728
SHA512 a8ef5a9f5acf993ee6dc4dd1d45ea526e6a21fe869ea713a72d314d767d995446c3aa4b65e7034da8bd6c4fe4a385505d25afeecb4bda68258279f60f95031e6
SSDEEP 384:THfH3353XfsVgNtWSKAUTb2HRN79NI+R9zJKJd:T/H33JkVH3/i92i9zEJd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:af:30:f9:f3:09:90:eb:6d:a2:72:40:f2:e4:0b:d7:02:91:05:19:50:31:71:51:5a:30:8a:9d:b2:08:93:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1b3ff05d62ff9857a21f0509fc008a297b9fd788d2d3db279c281555bf0c437b
MD5 2ec4dd7f2281b31e739301b4ed2de0e8
SHA1 95e9232bee94aff2c5b31ded383c7c4c1c8454e1
SHA512 eb2d0dd55fa4b1664774d8bf776c62947bdf473938fe9ea7c1033ac6c0e0ffb59d43e91860c3a17faa7f1160c2fc357dc24e53353e791e41a3be5b3d6b638fa7
SSDEEP 192:b5aVHmZc+oujdHR8wYNyNU+S2PfcQ8tWKXOuWXebPpUNTQHnhWgN7aIWzeiH+BEN:bnX8tNC13b8tWKXOTb2HRN7XFR9zrY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

86:ab:c9:84:48:e1:9e:7e:8f:62:4c:ca:b3:7c:ae:37:52:3a:87:60:e5:47:6e:08:69:c2:65:d3:48:60:2c:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15994

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1ab7725805ae535162f9cb63236dede11aead8a47580289bd86fa42d78edd45c
MD5 f75931604ac165fc30824236ba7ff5e8
SHA1 28b5f9624495153ba038e0aab92172dbf3efb2a7
SHA512 706c8dc99a864a3075b3f95c1c50d2b1f1593b4129394a66dd532b02514f862a32ae3c576c96966b679f3c0077f7af8597a0331fdeff7eb963946eb8ab25f9eb
SSDEEP 384:+nJtjwvtWb+ITb2HRN7mNwn+Hj+R9ztSSN:2f1/imJHji9zESN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

60:18:13:01:24:8f:83:71:3d:d5:f9:7d:ec:0e:f8:ea:72:0e:f6:84:14:fa:0d:f6:58:b4:6d:56:7d:8f:bd:fe

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7768f78246a0a1281376fac9adfe22fd22ef5f9d1ee07025a5c3712eb56b2765
MD5 dcf8deceb4618a13fa5df8ac602abd67
SHA1 4fb3c4ff09646d4b62850a93938b351b83d1be56
SHA512 d71d244c48a13335bcd5eb4f7759a36ac08dde740df4a0fd01e6791796612fdcc51f9f9751329100b0999d39d40292150d70589a721c41f635dd087673030e88
SSDEEP 384:MAX/9tOAtWIBwTb2HRN7nsWAR9zgX2ijYg:t/73q/isL9zRiEg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

07:59:f2:5a:6e:d5:80:6f:dd:d6:9c:ae:b3:b1:b9:d9:93:04:3a:2f:2f:89:61:c6:0f:ab:8e:e7:6d:9c:65:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7a0935008514aa9880681326cb84356a608248f67d4dd0152744eb355c36fcf3
MD5 35033cff3a51eedcb958fa66cded145a
SHA1 c08fec732b0ef4268526f434b6af02f544d58bb7
SHA512 28bf14ad127fdae35ca1289959c0b0a1fc426c943775d9c0a851a888ddebb7db72b4d6a555c74456e287ca61cdbce1d700626a5dd716e634cedfa17eb4d639ec
SSDEEP 1536:jV+ud14Klnn2VATgbQjWILvmVeQXNlYz1zg:jB4Klnn2VAkgQfYhc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3c:87:41:72:bd:b2:cc:20:6b:01:37:30:60:ec:ec:a2:ed:eb:d6:ef:aa:01:9a:bd:5e:3b:3c:4a:22:3d:d3:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

84298

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

pt-BR/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4c0e3a9fececab7d8f9e4ef02e2ead733c0cd8ea283a37663bdae4036a7efa3b
MD5 f8fd28fc41a9433e8d9d58649965102a
SHA1 da42bbb1fb41bf37ffca5788a8e8769f6f36a23e
SHA512 b74b6d404408c4d1fe8209e80556bf12be3f1998a0053efe72f7c5e6104f4aec58806c61d698e0d27f6f393e701ff6de177d18ede480b8a0fafdf99a905ed1d9
SSDEEP 192:74L4OLSAKWGcetWSf9uWXebPpUNTQHnhWgN7aIWoMU+qH+BEg7X01k9z3AQAHRHY:sL4OLJKWG9tWSf9Tb2HRN7WU+tR9zrsY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

dd:5f:28:6b:d3:e9:3c:2f:f9:81:4d:41:e1:fa:04:d3:dd:2b:f2:8b:8f:ae:a5:d0:80:b5:32:ff:74:38:b7:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 75c3eff70380b3d35f50bf2a129f2b0330c12997916c3f1399da322690ebead7
MD5 a47a6fb5a2cea66b57972d8e1f3bb1d3
SHA1 2d744c699be3c64aa80fbd8839d42542b2f09412
SHA512 e1ed7124d0f0c8b0db252c960f5fc52d628e45ad7c49931c13c1e94b580fb8b52b600cb540e4c4de9e3c3c064c8a1f1725f075f8e82d1245ad1769f7b4a0ec9a
SSDEEP 384:iyHkvXSXRaROgMCXdXxaur1Qu7xd2Vmuh1C7f0ZWBxviaWYHwhQ5WaTb2HRN7XRU:iyHksgrrOtZ1kf0S8K/ih9zL+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d5:df:07:25:be:95:ce:7e:3a:de:e5:99:15:84:72:0a:11:42:e4:a5:51:ae:33:c9:a7:4b:d0:d4:d4:9d:5e:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

21786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3f7b04a3eb226ad00141a6ffa6a834452118764b54794e9a746d88c0da9fffc5
MD5 517f28a8eff50915f604423cf11c37d1
SHA1 42632376045c86c6f0bf3a1b2595e59b561af700
SHA512 fa2e7645920fe0704974c90dec61059a029b7a71c163bca7cdf7fe95c12435d431234319c9103d3a6e53a40e8eb03ec2bbb7ef76b3aa78cb32ce64ad8fa263c4
SSDEEP 3072:/1iM7DcDM2dcuzQkPE/YS3cigkfxiHXA3YGFOrrJ+4+2MEm2GahiKzEsLqjYL8tZ:/1iqDcg2dcuzQkPEwS3cigkfxiHXA3Y8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

43:b1:f1:2c:f5:9d:ba:e9:83:14:60:c1:40:8e:58:c2:aa:12:68:7b:85:27:3f:61:b3:82:65:23:c2:7f:ca:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

133390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 342deb5f3928405c7f7eb7aeafab16918cd3348108e494d34971b240d03c77ff
MD5 e8e0e7998775c5fc221686a965eba183
SHA1 af96ae76842c1e10e04d603472f0d0d729fefb05
SHA512 ce73e4a1fcb2327a02507e14b2d8070739cc588b36a655969bd0aa75a36855ba986c9910ea384c8dcd089d9f2053073abd4423412d37abec509f3c710cc2d1ae
SSDEEP 6144:fGtTvesBk9kMKjJI4ROM8x7mezPxn3Ax0TLhycfzemusLsOhBJUkr9GSw3b:fGxMyJ3g7mezPxn3Ax0TLhycf6musLs5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c3:d3:65:0a:52:81:2a:cf:32:c5:a3:25:c6:27:30:d7:d5:ff:de:4d:c3:7d:0c:5c:04:73:d1:7e:51:70:01:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

252798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bf9c295462556f15d42aaf4a0e774272e631dbcbfd2652c83361f9b57b9ef03c
MD5 3092eefeaea5ba9d403bf126b37833eb
SHA1 8e319694b92e129296c93c172df63a5ed5c17c03
SHA512 c67c096e5bd96a3e957490cd3784a151fce7fbf9653aec896d61899c11c7dc671bac3faeebf4f3d6905d0b9aee4de6c7251bf58754f4f1c15915a96fa9791230
SSDEEP 1536:fYWNABq2zPkpp60MTBI9qHmYlTEd4po10sFyRnoDMg6FfiThzUyPb:0pEd4po10sFyRoDMg6FkhYK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

88:b2:19:03:8e:9b:54:46:d7:49:ef:ac:45:72:a1:19:52:14:c7:0e:6c:10:63:d0:f2:c7:c6:6a:88:e9:99:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

49422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8e9761e7839a9907e4954789cc6e12849c7b266bc4d125cc7c80b60cd9b7355e
MD5 0a4279c3b1baa5acf5ca58d2aaa99725
SHA1 47f82c5245af6799f47c9c6102e20f2e4173be75
SHA512 7b17ecc691b8c16f9228cd6d8d4cf1f974b6777cf5112cad68fcf489cf4973f6afd4ed27bf2a9371876908129a806a16242486618bf7e2a306b6e697a0148b65
SSDEEP 768:fT4Zo9be9NhkmnytF61PN2bi3rEHjUGPTtL+BOwbym6KY05CGlshBVaFk9ytAzCY:8Zo9be9NhkkG05CGlrtAzailG+zn1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bb:69:15:be:45:f5:27:e2:1b:2d:f4:0c:4f:b0:46:f5:f4:64:ee:61:b6:b7:17:0a:9f:a0:c4:7a:56:d2:17:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

39410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d70fc58a0ffe0a5ee32621ba61d87e20324663a030ca54c1238c96c3e0cfb44d
MD5 293aefc5a0a8446dfdc20e939355a1ca
SHA1 4e25587ff669dd53db1dbc35425a9b01a2359063
SHA512 5d44822c456d9b98252e2a70065b6e0481ac827c612b39cc87cba2b39c94bc6215a812a198548bf02cb3e8edcf45b996b67a577ca323e66e466c19b842fb4dd6
SSDEEP 192:M8bAnRzZpZv0GRCoGG3nE5EZ1ZHtWV8yWl3WT56Os1HnhWgN7acWfFfT+BwUoX0P:MThZ7j5tWV83Q5kHRN7pUR9zDUB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c2:16:a6:8d:cf:39:13:13:f1:3b:d4:c6:c9:da:f1:c2:4c:ff:13:1c:f8:dc:01:a9:d1:f4:c8:19:a9:86:46:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4d871bb3dd074c81757bb3a55658b6196b5d06bd4d7c1f08dcaeb3e5eca215c6
MD5 f08ee0776dee352bfb2b8a6036869e22
SHA1 579fb8f786bde2f070211ee4687a0121932535c0
SHA512 c0a8c85acc10df0c7816ba9cc5223ebd61270b45ca07d9bd52f0541888f8f7edb12c8d134b94a36c0b545140b75ad1d0559be5bea3507cd93150998149d0404c
SSDEEP 3072:5mR9MtbGzbtyHZ/I11DKdwWorcP4IVCKZuXsI7Ixfzw10DAH9Os5pk74V/ewiHIZ:5OiHIDsV5sDvwQKFOQa68V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

68:6e:b2:9f:07:9f:50:84:4c:88:5d:9d:e7:a5:fa:99:c5:46:5f:c9:fd:2c:29:8b:ac:7e:89:af:1d:7f:b9:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

158102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5495edf9d34228b58266ad97b81b98c084b3c6528ab0c5304fb9e265849b7de2
MD5 d770e93ba3822b28715c5c1e18529c26
SHA1 f99587ef7f1daff4582d58f7b62d34116e3bd8c3
SHA512 6090e54c5d15d318f4f1caf3f705ac80e545622e28452a68e489a6aa290620b2fa69839bcfcb9595c72b96d0aa158e1af949a7ba190c95bb19d03110b9413d22
SSDEEP 384:J6bM5MWNiWDN5kHRN7dGpxsWAR9zgX2im:iM5HsdGp2L9zRim
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

04:ff:f1:63:5c:04:44:3e:3d:1b:b9:a9:e5:d1:f3:94:ce:4d:4c:35:3a:06:1b:86:17:ba:80:ab:c7:e4:30:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11402

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e118c76108a5ba0fe2e983aa69db021f438a81a7c2f505df108730eeef9ec612
MD5 31e4c0da05516cb3637c451542dabb30
SHA1 a44a80a62ceb7c269cbf7ab08491a64ba08ac3c4
SHA512 66b63d9e9dab1d7161c618fec4a53f9462db5ff77d852f3b5892f70efe91473c9e179f1c42f66bfeb6d90bdd1652215724e3e6586a5bd55fea9cbbe40f4bddbb
SSDEEP 12288:+qceQRHbornnKkAxqvBuh5QHSYxIrAAr2r6dfxaTq5D1xPHc1N1lvTx1Rp0wjFIx:iB7mW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:85:8a:12:3d:10:32:f5:69:07:33:e3:8f:d7:42:7a:49:7c:ad:1f:e3:38:1e:d8:ad:9f:4f:90:8f:10:3c:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

471934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e28c959fd82029c32296927d29cf2d70bae43fb49216efa253fbaa7a449c6006
MD5 341b74c1c7cff56f75797ef4a52d1826
SHA1 4ddc5555c9bf2af6ae9943ebfa1d0a86512e5a28
SHA512 72809676bf422e1fc692eb8ac062411ecd0901cb261a92536a5ff991722a6fdbd93a7161f5c43a16f77d4936c56eb13e6e6cb89179626b35f7ea3802a7e69fee
SSDEEP 384:1JYVZHonuQWpgSTb2HRN70Omz+Hj+R9ztTp:iZHonyp/idVHji9zxp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9d:b0:4a:7a:6d:d9:bb:2c:9d:a4:af:f4:54:c5:da:62:e4:9a:b1:47:08:fa:31:9d:46:9d:41:f7:ac:30:6d:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

12094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d51be21601f690dcfb3e431e7c6ba89516cb51352aa6dbe258eb449f95d2793c
MD5 0a856ec336251d6495634e091be39583
SHA1 945e747f9cb60137e5fdb3c1d0d755510b6eb85f
SHA512 1075948a91ba4fa0bd4e45ad0d2a49f8e0977d19ceb8e4d6953b9048af21ae0141fee5beb525787376eb13da9be7a8b13ac650026fe00f086a267a17509b54f3
SSDEEP 1536:zvgPzOilWWWuJlcqGiUQGgMhEoaqOZ56ibhzUXd:zvgPzOilWWWueqGiU5gMhDaqOvRhYt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c7:14:0a:bb:e1:45:fc:c8:1b:87:32:9e:b5:b7:e8:3f:ea:be:23:95:e0:da:e5:79:bb:6c:82:53:11:35:ed:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

79802

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a1d8a79aa04b9b9684772805271920c89b57983f63dac48a4b89d88c3d34a0d7
MD5 ccd9c8cfb1fbce308ada55ef74e4015f
SHA1 f89ba393d3e8c7be3fb77820bff09f892b27c473
SHA512 693e0b9490ea62a87ad92ba2d09419da229968fbe93d051a2b2e1e8e2f745bf11a9427ddea119edea3b5999d7969cb5411366d69312a77337687f229a6f206b7
SSDEEP 384:wWflg32hKPy2LtWSKAdTb2HRN7KgAsWAR9zgX2iNf1:wMlg38Kyy/iJ3L9zRin
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

16:48:43:d1:9f:ab:85:26:92:88:9d:d8:34:6b:e1:22:a6:5e:3f:2d:aa:d3:b2:1d:10:e4:a0:f9:89:80:cf:9a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

16446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f807e8a417f031669acb61efab40f5d279b41f70c505fa0f4185356980728124
MD5 569ea39cd32dad56dff6bd4f95109e2b
SHA1 087ab9f1e6c9c1b5fa1261244419e7221a648b7b
SHA512 e422cc65e00f10a48e0ca8f9aa3b29e867d4d2881093e0dcb2667690fc0fb3c763ad89dd1df00e4bff67bd2f23a3e0180acf0b19d5b507c0714bd768db2b01d8
SSDEEP 384:cnvQOSFJ5Kagif1tWKXITb2HRN7/R9zr/c:CaFJkagifF4/iZ9zbc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

da:19:b3:22:5a:dd:47:5e:e9:86:3f:55:73:bd:68:1d:5d:ac:a5:d1:c4:47:fd:2d:a6:6e:6c:8e:97:c7:17:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

17290

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 71db627720a1a9fb188a4b295120631a47b56b55d6a8e7e4675bfaa602cd9de3
MD5 0bd43bb3c389915ddcff806e194c101b
SHA1 4fb372c332e5052e3b485637910d41ac19e12a8c
SHA512 85b4019709a2fda22a869d7cbe316c3fe893f0e955e0305af2309c62c853ce65f9ad294e900f66c9e59a34d1f5a5908675d8b0df3ba2e0482e360b8d920bc6b2
SSDEEP 192:0z3Z3rQR7W+vuXtWb++cuWXebPpUNTQHnhWgN7aIWY2eH+BEg7X01k9z3AQHp:6lgHmXtWb+PTb2HRN7wR9zrJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a9:f8:a9:91:a9:d2:6e:ca:a9:c9:ed:9b:1d:f6:fc:89:a2:a8:cd:bd:a8:86:10:1d:d8:f1:ec:b4:ad:a3:f6:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e184faa893abf19d53855e9aea040beacaebfcb8de01d726271454f8c0a2fbe0
MD5 5c8bb2955c96d36df75326353ee145e1
SHA1 a03c1f8e1fafde3e81a31e7ce3619f9f44861abf
SHA512 84a82e15e7c498f9e6056031fb1fe24e97ee0ecd26151e849475654e6b050ea7723499d0bec5b9c4032cf2977e5c3d29f6c160c7f7f691cb40bb1f2ef958cda1
SSDEEP 384:rRYAZ6k5tWIBvTb2HRN7vd+Hj+R9ztczxF:dY4/l/iQHji9zGdF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bd:48:3b:89:af:93:e5:c4:bb:d3:b4:8c:64:88:1c:74:59:44:04:5f:a0:73:7c:cd:9a:d3:0b:88:3b:9d:6f:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 401cc01dcddb7c45407681644c0b625a9e863139bc0a9dd5021ea10d9e089fd9
MD5 e0d4ece36c56bceaca0d13e667e36881
SHA1 d84216e04b76978107a5ce66ffcb5d69a9d56371
SHA512 bd929c55b132dd7baaa68e65f670a06a001b146693c53cb353cd2a5a1d473eb1a7cf241c718f794d499920cf878e8332a6065e837ba3ca8ea429ae0ba135514f
SSDEEP 3072:0oMX4ct2+dwSNKWwIdNAjfWIbLL+Zrv96kdohw8+JIuX:eXb/wSNKWwIbqfWIbLy9VtdY+n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

64:7c:1d:39:23:5b:0b:dc:cd:16:73:15:df:12:fb:67:d5:8b:3f:3c:4f:e9:b5:7e:c5:e8:95:4f:88:1e:d1:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

106794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ru/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2b661c17aacbff8ddffc079ed1d4d5340a99120d6346a4c9cabbb3a6e7bcc234
MD5 08795fde93cec3e6b46f160e55538ad2
SHA1 7452945f8442e1d72603c3239f2deada15d8ea46
SHA512 5681aa4101131a696e8073f9645d71ab1fedc3fedcdb1abfe43f74316899270682b75cbec5b1a1e48cef9f4d6fa0458c757441b5c7de6c1942747f04e9d5f31e
SSDEEP 384:HKWLFLHfPWjA8dtWSfvH5kHRN7Y9UR9zDdO0:HZHfujA81ST9zn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

fd:31:53:b2:1b:f2:d9:d1:4e:a6:cd:4d:e9:b1:9c:8e:18:8f:dc:c8:2f:dd:03:36:ec:ea:64:71:dd:75:8b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bc0f9a4912a62f4b08dbf7b59c2fd127f2eafcd265e6fde3db135f7eded414f1
MD5 3fec16c1432d04fed1c52858069e34ff
SHA1 e8abd97dba80e0e40bdc25919f49c36ff9c59602
SHA512 c9aa0041615f93937687f20cf7717a11d29ceecc64107b37fb116e5d203f32a1b72b47cd1134c5b259230fdaf7f7ebc08bba24929df8ac77aca0fa4948b02af3
SSDEEP 384:myS7XSXRaRmIaXdXxaR04Qujyv2Xjmhk/4NNaWYHwhQ5WU5kHRN7bLfoR00R9zof:mySgI70XMKnRnM049zoH/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4d:73:3a:15:2d:be:bb:c3:90:66:45:c2:c3:6c:04:af:c2:5f:a3:5c:f0:1b:30:15:44:23:dd:af:3b:73:a2:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d18ea6261d03c8defb1bfdf89b5fa11b896987d07b3be7eaebde084a726ef3b
MD5 dafab010e764888e3cbd785fce79b2ec
SHA1 238bb9a478e4bc857b813c70d8e0f7c23212ea74
SHA512 be785a9f2ccdd76c436cf4f2527b71acba600e5ded049c303e5f470290191df00941e559b2c8c00b4f3d04540c250abadd6fcf7b41343bf8e7c5d6026f708069
SSDEEP 3072:y1i3SOpGOl+YYlSQCBniAe8XpmM7CKwoKJI2gk:y1iCOpxl+YYlSQCBnTe0p7rwMk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d4:76:b7:9c:f9:5d:0a:fa:21:6f:6c:b9:c9:92:71:91:7e:80:6a:8b:2d:69:30:6a:f4:b2:f5:9c:a6:9d:e4:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

102582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7dec3c384ec145914a8a8d24c2772f3a0368e16a98493a11eba6da6f62afa8ed
MD5 cf82523206afc8546fdba7426954b784
SHA1 7175e471447a808ac8bcfaa58c56071ea3d084da
SHA512 7b412421f6504df8892f99725433985fa9d5d3d6a7fca705e8623a7015409f6b2714976f0e84e33e556f21e632eb85ab9336bd49ae198284edd161a1b4e21580
SSDEEP 3072:mpGm8PxLC368gIIkS5Xk6v4w3H4pppKP+MbivwstCqilcktOvn7q9fWD/hzwzoD6:mpGrX4pppKP+MbbVqiHtCK+D/hzwHWpg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1e:c0:1d:84:27:9b:44:63:74:da:f3:a4:b1:68:87:60:64:c6:12:a0:66:c0:14:17:20:b9:f3:00:76:91:44:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

191038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 035dd454fffc564ed55e01797922bed2bdcceac98ce64d1546b2cf2b71a44b6e
MD5 f72aca42bab4539cfc6e292da4e893ca
SHA1 c34e29982197a7e36fb7ead40bff75f6fb04143f
SHA512 334e4d3e35bb9bf1e64edf1deba32f894cfd3c3c9a4dcc81df1de197d9e5653151bd091c3c70f9e632e7e4f7d3251fd10a67bfe97d6123dc8f0bb2a4f4882129
SSDEEP 768:L/aiExFCKwFlMQGTrMeY25zn1rg+8qet9dTaiBuQ2vpXdIC13dj5/iaHji9zQie:DaiExFrMeY25zn1r58qet9dTaiBuzvp9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

56:45:8f:03:40:6e:ae:97:e9:ae:2d:b5:a3:15:b9:99:fc:a2:66:44:c0:c5:f3:4a:be:a9:86:95:3f:21:e1:87

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

39726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8f5af65ba350fd99202ece7f00ea32d85f9ae81fb8fb2653b3d8f9bffb213246
MD5 28a8095964e535fc0834e8829be16f46
SHA1 8224487f350f75ad5c7e589706630707ca52a4f2
SHA512 51edd418a9e211145d388f07eef1e77baf3fe31b71b09884b818bae3318eaec309a2f533fea17df5558a916415d3a2eb5c750c6ac2f9cf195c8c2556401b1ac7
SSDEEP 768:mgwqonge1WfeM12BssVPj2s38amEjcR+wHufpOS1C7pmFlih4NMJsqAFGXGDU7P6:xwqonge1WfeVrSsqOBiShzU6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bf:ea:59:42:1d:79:be:43:6f:1f:ff:1a:1b:58:5f:d1:de:99:bd:34:1d:38:8b:a0:2b:55:69:01:8e:d8:82:3c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

33770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a8b359f0da3664830f9e07ae73cdac6bc40e47486540ba8a007101d4688bc620
MD5 779ac7312f42f1fa5240ec4f61534251
SHA1 2c723a0e87cc6aa4e1882b78b79203f7e9483b4f
SHA512 7498763faefca21111f1f7b7f686641ffe09ef86acd368542ac10d8161d6b619d1837f0ff3af805d4959322dd4dbe7adc3038afb9b896f85481a0cb7130c2db0
SSDEEP 384:SEhnE9+/FutWV8bH5kHRN7woNNPR9zbKWfv:ScEw7Oiwc9zb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2d:06:b2:5a:a7:cc:19:0e:10:23:8d:75:55:45:67:72:f3:51:46:54:ee:52:08:e9:00:cc:f6:02:10:aa:94:18

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 128b9bdfed7a5506724b286474beb6a69162be5754af60cb49d0fefd3926bea3
MD5 2ace787b8d036dc22090699e8ebc6bd3
SHA1 044d0e733df895d03cebe10c06cda731f3e7e424
SHA512 6ecf802763cbc6f4d6a78df3cc3a973f399d6d1ae73a6da1bca13827c0ba77b753dbcd5c4a84a61cb5ec0fe144b96da7c30e806e27bf30d63a22232987f8f187
SSDEEP 3072:0sR9MtbGzbtyHZ/I11DKdwWorcP4IVCKZuXsn8ZCelODipTEWFU5pEbY1AGMz5hV:0Wz5hQH7imrDvtPMYEmo2MP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f2:5c:5c:65:4d:77:3b:f0:29:ef:1c:0e:7d:52:8f:d9:3f:8e:cc:e1:92:96:4d:d7:5e:13:5b:1e:1d:2f:0d:b4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

143694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3dffdf21e1f956862764c48ba069fcb18ddeb56e93ae41e5eb3301c0ca08afe3
MD5 e5a798747ea20dde9aa3357640df8a50
SHA1 1264d70ca730d5471b025e2da8ed57873a79ab09
SHA512 4e88b7768b656d932549b5a19e26540b902ecea2843ddeb7981bc380b425d901fc6952b164d28097a4610662385956e81f37638f0ab3ce5697a3abff1ec6e0e7
SSDEEP 192:wPl6nJfkprWNiWT3WT56Os1HnhWgN7aIWfqXG3h+kSobX01k9z3Ajwa9W1zQr:0l6BkprWNiWy5kHRN7ZqK+R9zowBO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2b:23:4d:6b:61:a0:32:5e:dd:c8:28:7d:d0:11:31:fc:25:b7:b8:af:c4:a3:70:2e:ce:f1:3c:15:ac:3b:90:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11138

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e3d6eb85692dbf98b793e33d5abe8f0ecba639f64c53673b97f6112f1bdf3acb
MD5 4ad4199e8d2d62fce235448ef2048a4d
SHA1 b703f043980c8efaf2dedca031d0c6d85ea60dc6
SHA512 4ac096f9d97879e03c1fa37db902d96a7ea8ee4d55539e2dcfefc97e43d9be34f0614d079848be5c48f999e343e18ed37a8be310822d35d56a4607c1ca880433
SSDEEP 6144:yqcK9gZpp+osu64Sxv53cOgRd8xjdP+HjBGuL/MWaut5g9LXnOLLD19E+bsBqr:yqcKKsjxEAwdr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

96:1c:9e:33:72:09:10:b1:81:8b:c5:f1:7a:5f:47:e4:03:d7:58:34:03:b2:16:10:89:f8:67:42:1a:23:e3:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

356614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3c7509088b5a088d08621e1de6224f8c46cf4dbeecc69c000969d9651b97e83
MD5 36c6ed70182af3220983471ed9c03b83
SHA1 b671262bc02105eb6703d6ebc0ca77957e2a09e7
SHA512 8cbfcb85cf65e81f5ae28dec7288c1ab74738043f8cf7faaedc49986dd9027f94689a15ea72c016611b1b93d7894cbdb3bf1e131dc71fb2d62dc8a8e2f22bd27
SSDEEP 192:NqumzKn5wukG+SseQWpg1uWXebPpUNTQHnhWgN7aIWK2FPH+BEg7X01k9z3AQx5:sQiyseQWpg1Tb2HRN7+FgR9zrr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0b:b2:9e:41:b3:09:73:dd:2c:e3:27:94:f8:f4:14:b7:1c:18:6a:15:a4:f3:44:01:11:88:dd:3a:31:6d:3f:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 562ec637e27d0570576c6609eabb21f65c1fe3a55212dc0d6a317bc0c96ed808
MD5 a3822dac83deab182b60543fc00f41ec
SHA1 26fef64a08f5d5b51916a3cf940ecb73f7dfc8ae
SHA512 e5f129241d6c706174e706dd6b5342382b41df4caa6038a75687139db9605b5937ac57cd0b49dfae4add29ea55beb7d4e546f2a24a89ed1534f1c44ce6e8e221
SSDEEP 768:6OZOvMOJhcy8rtkyLHp87y2yoNShlqB49QjRGgywcq1btn9zT8O:6vMnmGmGqB4asFbq159zTv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c7:91:58:a7:2d:29:4b:45:b8:cf:67:63:69:0c:0a:c0:c0:81:a3:89:cd:cb:64:77:6a:01:86:6b:05:c3:b3:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

60274

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6210477d79f250f2966c8314fbe84167993979e927ba1f5e9936b18e5ddea606
MD5 15bf2318a974fc0ac3e030345d652310
SHA1 c73b2103d1c3b1a1ef036ce03475592c9bc97f3e
SHA512 b35e6d105519d174a074aaeebde490a02aa0c5a0ebc37e91872338d40e5bb18c78c142952694924d0e1d85172bebd030ecb0b3e20a7f2a32176144c0066fe07f
SSDEEP 384:Zxf6X3FbjowB5itWSKA9Tb2HRN7HK8EnR9zV6K2:j6X35jFa/iHK8ER9zVt2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

39:ab:15:ab:2f:c2:e4:d2:b3:00:a8:4f:eb:ce:8f:84:06:92:80:94:61:06:01:86:bc:c4:9b:23:7d:aa:29:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 680eca2ba49caf0a088b207de5684b1cd809619c7dd5be3c76617f4462278ebd
MD5 5b6de80912a2106580111f2ac5184b93
SHA1 8aa138993238be671b1f56a7927b127c551292ed
SHA512 d8425ffd7cb2646d450a50990a2021a980101fe7215e8536d7d80086187aa2ef0600e4f4a611eff453ce59a257b9e862a8f6770810e17124ad441c0db51a4ab2
SSDEEP 192:MYh2y+c+koyV35znQxfqtWKXi3WT56Os1HnhWgN7agWf8aAH+BEg7X01k9z3AQQv:i+3+xfqtWKXr5kHRN7HiR9zrQv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0f:92:65:9f:fd:9d:1c:0c:f7:bc:1d:a9:fd:f1:5c:d4:88:a5:78:b2:31:f1:ce:fe:5c:7e:d8:27:00:72:ed:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 66b0ca058beafba67c802d6c95da17eccdec324553fd83a03371ac83f4453ec2
MD5 0b09507cf555e42d0cf39faf03fea040
SHA1 601e09f65e5dd23dc4b041935305484db2752219
SHA512 d2fd1ebaca386b00f588249ba06c372e63aec4cf4751d0c7be5641058067c99021ad83b743022ace7d0429152dff6170a30f86612e57e83d3b10c72817b83252
SSDEEP 192:ZN3n3rbWj6XgtWb+fuWXebPpUNTQHnhWgN7aIWLTdH+BEg7X01k9z3AQVKJ0:f3nCKgtWb+fTb2HRN7WWR9zrVr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

33:5a:3d:91:b5:7e:ba:68:3d:9e:3d:4b:14:49:c4:7c:ff:e2:5c:bd:3a:95:e4:63:18:62:e8:29:37:27:cc:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d0398a169ce9eb402d4009fe1b725c18f65061bf80c86973716cb7ea2e6d3e1
MD5 665ff7e5fcf88adb48c3bc337e92e3a8
SHA1 53816fc2101911c4ac641efc540aa00e01209642
SHA512 5d416a37686e68a40378190f4ac6f8cfcbf904aa552821329b327ba2e7473187f95c912b82b7c1ff0c0a03d45884da5f3e27c2eb1c7cce3ab96dc1e9e32240cf
SSDEEP 384:jZGDpYtWIBoTb2HRN7AHJsWAR9zgX2iPnXkI9:NGF6W/iAHeL9zRiPXF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bd:f8:e1:2c:c3:f4:26:4d:54:36:1e:ab:cd:d5:62:33:74:9a:71:db:71:bf:a7:97:1d:6c:f8:b6:6a:81:33:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9e6a3db575d9bfd78b02817e653053eae81afdad59cc364c9544abc4a9397a47
MD5 05ec4c654696c8e117de27f2b4758b3d
SHA1 9225cbcc6063580df00149d17f2d24fc2cb7548b
SHA512 39496130c4057bd42318dcb469e5e29885f6819265a0da29b41983552c80502ed9f7344299244e39720107fa4004104ea9a31c9968f351a41cc167b71b09cfff
SSDEEP 1536:rV+gTzijVJGLfnnY5WNcvw+XRBoMz3TOJF0FhVHtAdGVi/GzV:rrej3GLfnnUWN+zzjOJFyHtAdGHB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e6:ed:d0:5b:83:d8:d2:c4:f0:7c:8f:7c:f3:9a:5e:34:3d:1c:b8:21:d9:c3:54:f7:8b:74:b8:ba:0a:e5:5a:38

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

80274

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

tr/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b045e8fbbefcb6b5c45608f4365c70e380462914b8eb5b51cb3566abcf3b990b
MD5 5ac53755c78b8fdf35be384337f47d31
SHA1 43149782109f6649eae58593b10d9d26354373b9
SHA512 1c551fb32754796d382796f0eaf7989aa94a6dc9e226996bd4aa461bc015c443b92e376b03ed97150808adf04b1f7d807aa89db64fdba0298196944da4cdb469
SSDEEP 384:jK2LHLH0IW4zSVRtWSfxTb2HRN7Tpc2+Hj+R9ztGa:rrH0l485/iWhHji9zMa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

da:f6:bb:6b:67:e7:3c:61:02:88:2a:2d:5d:ab:93:99:78:a8:4c:fd:17:d4:0a:31:ad:9e:e2:aa:d7:9c:1a:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

vcruntime140_cor3.dll

IMPHASH 7f07fd94e5bb907093556781cc464017
SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
MD5 be8dbe2dc77ebe7f88f910c61aec691a
SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
SSDEEP 1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

ad:55:39:9d:70:70:f4:f3:a5:2a:ec:30:c8:36:4c:bc:53:5e:94:67:76:ba:fe:fe:52:2a:4f:6f:df:53:c2:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

PE Signature issue

Digest

ad:55:39:9d:70:70:f4:f3:a5:2a:ec:30:c8:36:4c:bc:53:5e:94:67:76:ba:fe:fe:52:2a:4f:6f:df:53:c2:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

67024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

_CreateFrameInfo _CxxThrowException _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __C_specific_handler __C_specific_handler_noexcept __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __NLG_Dispatch2 __NLG_Return2 __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __intrinsic_setjmpex __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _get_purecall_handler _get_unexpected _is_exception_typeof _local_unwind _purecall _set_purecall_handler _set_se_translator longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

Name

.text

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

fothk

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

504B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

wpfgfx_cor3.dll

IMPHASH ac3b0abeae626484285b3156c68cdebc
SHA256 0a01412b64e6889ace8933dd2f559d186b693aefe31e6b084e2d435b1737af39
MD5 627ecf139beed59b4e1b26caac8f68e4
SHA1 9747fe073aed451c936a66f8ad112bbb1a8c31c8
SHA512 25bdb740039c867ce0cc1347493cf456e32d767c898a683da1306992ae77ed3605612c804c2eae483320f18f2cd0850c17226ef21e09fe07997aa47679b6030e
SSDEEP 24576:KKSNTB1zWlXh3Q6OHG9JFplC+8ydGBAq4jAmSJw+gkXd+WqWx12AAj2tUzY:eLWBhg6OHApl454jUJwudMWoA0zY
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

fa:4e:57:6d:57:e0:18:b5:da:df:83:0d:7b:14:bf:dd:19:53:b7:33:01:ec:a5:1a:b2:90:39:b2:bd:c7:70:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

6

Entry point

339904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\bin\wpfgfx\x64\Release\wpfgfx_cor3.pdb

kernel32

WaitForSingleObject CloseHandle CreateEventW CreateThread GetCurrentThreadId ResetEvent TryEnterCriticalSection MulDiv QueryPerformanceCounter Sleep FindResourceW LoadResource LockResource GlobalUnlock QueryPerformanceFrequency InitializeSListHead InterlockedPushEntrySList QueryDepthSList InterlockedFlushSList SleepEx RtlCaptureStackBackTrace IsDebuggerPresent ExitProcess GetProcessHeap HeapAlloc HeapFree HeapReAlloc TerminateThread GetCurrentThread GetCurrentProcessId SetThreadPriority LoadLibraryExW TryAcquireSRWLockExclusive GetLocaleInfoEx LocalFree FormatMessageA GetSystemTimeAsFileTime SleepConditionVariableSRW FindClose FindFirstFileW GetSystemDirectoryW SystemTimeToFileTime LoadLibraryA LoadLibraryExA DebugBreak GetModuleFileNameW FreeLibrary OutputDebugStringW LoadLibraryW LeaveCriticalSection GetVersionExW SetEvent EnterCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount GetLastError DisableThreadLibraryCalls IsProcessorFeaturePresent WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsFree TlsSetValue TlsGetValue TlsAlloc RaiseException EncodePointer VerSetConditionMask VirtualAlloc VirtualFree TerminateProcess GetCurrentProcess CreateFileMappingW MapViewOfFile UnmapViewOfFile SizeofResource GetTickCount WaitForMultipleObjects SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemInfo VirtualProtect GetModuleHandleW GetProcAddress VirtualQuery

advapi32

UnregisterTraceGuids RegQueryValueExW RegCloseKey AllocateLocallyUniqueId RegisterTraceGuidsW GetTraceEnableLevel GetTraceEnableFlags GetTraceLoggerHandle TraceMessage TraceEvent RegOpenKeyExW

ntdll

RtlClearBits RtlFindClearBitsAndSet RtlSetBits RtlInitializeBitMap DbgPrompt NtQuerySystemInformation DbgPrintEx RtlInterlockedFlushSList DbgBreakPoint RtlCaptureContext RtlUnwindEx RtlPcToFileHeader RtlLookupFunctionEntry RtlVirtualUnwind

user32

MonitorFromWindow OffsetRect GetMonitorInfoW SystemParametersInfoW EnumDisplaySettingsW ClientToScreen GetClientRect InvalidateRect GetWindowLongW WindowFromDC GetDC GetParent GetWindowDC ScreenToClient UpdateLayeredWindow IsWindow PeekMessageW TranslateMessage EqualRect DispatchMessageW SetLayeredWindowAttributes GetWindowRect EnumDisplayMonitors EnumDisplayDevicesW ReleaseDC MsgWaitForMultipleObjects GetDesktopWindow GetGuiResources RegisterWindowMessageW PostMessageW IsRectEmpty SetRect IntersectRect

gdi32

SetLayout CreateCompatibleDC CreatePalette GetRandomRgn SelectPalette GetSystemPaletteEntries GetDIBits RealizePalette OffsetRgn GetRgnBox SetRectRgn CreateRectRgn GetRegionData RectInRegion CombineRgn CreateRectRgnIndirect SelectObject CreateDIBSection DeleteObject CreateICW GetDeviceCaps DeleteDC BitBlt CreateCompatibleBitmap

ole32

CoUninitialize CoInitialize CoCreateInstance PropVariantClear PropVariantCopy CoTaskMemAlloc CoTaskMemFree

oleaut32

SysAllocString VariantInit VariantClear SysFreeString

d3dcompiler_47_cor3

D3DCompile

api-ms-win-crt-runtime-l1-1-0

abort terminate _seh_filter_dll _configure_narrow_argv _invalid_parameter_noinfo_noreturn _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _initialize_narrow_environment _cexit _initterm _initterm_e

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-math-l1-1-0

exp cosf _isnan _finite floor cos ceilf pow fmod fmodf logf _copysign atan2f modf sin sinf sqrt sqrtf nextafterf floorf tan

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

free malloc calloc

api-ms-win-crt-string-l1-1-0

strcpy_s wcsncmp

api-ms-win-crt-utility-l1-1-0

qsort

GetNextPerfElementId IWICColorContext_GetExifColorSpace_Proxy IWICColorContext_GetProfileBytes_Proxy IWICColorContext_GetType_Proxy InteropDeviceBitmap_AddDirtyRect InteropDeviceBitmap_Create InteropDeviceBitmap_Detach InteropDeviceBitmap_GetAsSoftwareBitmap MIL3DCalcProjected2DBounds MILAddRef MILCreateEventProxy MILCreateFactory MILCreateStreamFromStreamDescriptor MILFactoryCreateBitmapRenderTarget MILFactoryCreateMediaPlayer MILFactoryCreateSWRenderTargetForBitmap MILIStreamWrite MILLoadResource MILMediaCanPause MILMediaClose MILMediaGetBufferingProgress MILMediaGetDownloadProgress MILMediaGetMediaLength MILMediaGetNaturalHeight MILMediaGetNaturalWidth MILMediaGetPosition MILMediaHasAudio MILMediaHasVideo MILMediaIsBuffering MILMediaNeedUIFrameUpdate MILMediaOpen MILMediaProcessExitHandler MILMediaSetBalance MILMediaSetIsScrubbingEnabled MILMediaSetPosition MILMediaSetRate MILMediaSetVolume MILMediaShutdown MILMediaStop MILQueryInterface MILRelease MILRenderTargetBitmapClear MILRenderTargetBitmapGetBitmap MILSwDoubleBufferedBitmapAddDirtyRect MILSwDoubleBufferedBitmapCreate MILSwDoubleBufferedBitmapGetBackBuffer MILSwDoubleBufferedBitmapProtectBackBuffer MILUpdateSystemParametersInfo MilChannel_AppendCommandData MilChannel_BeginCommand MilChannel_CloseBatch MilChannel_CommitChannel MilChannel_EndCommand MilChannel_GetMarshalType MilChannel_SetNotificationWindow MilChannel_SetReceiveBroadcastMessages MilCompositionEngine_DeinitializePartitionManager MilCompositionEngine_EnterCompositionEngineLock MilCompositionEngine_ExitCompositionEngineLock MilCompositionEngine_GetComposedEventId MilCompositionEngine_InitializePartitionManager MilCompositionEngine_UpdateSchedulerSettings MilComposition_PeekNextMessage MilComposition_SyncFlush MilComposition_WaitForNextMessage MilConnection_CreateChannel MilConnection_DestroyChannel MilContent_AttachToHwnd MilContent_DetachFromHwnd MilGlyphRun_GetGlyphOutline MilGlyphRun_ReleasePathGeometryData MilPlayer_Create MilPlayer_Process MilResource_CreateCWICWrapperBitmap MilResource_CreateOrAddRefOnChannel MilResource_DuplicateHandle MilResource_GetRefCountOnChannel MilResource_ReleaseOnChannel MilResource_SendCommand MilResource_SendCommandBitmapSource MilResource_SendCommandMedia MilUtility_ArcToBezier MilUtility_CopyPixelBuffer MilUtility_GeometryGetArea MilUtility_GetPointAtLengthFraction MilUtility_GetTileBrushMapping MilUtility_PathGeometryBounds MilUtility_PathGeometryCombine MilUtility_PathGeometryFlatten MilUtility_PathGeometryHitTest MilUtility_PathGeometryHitTestPathGeometry MilUtility_PathGeometryOutline MilUtility_PathGeometryWiden MilUtility_PolygonBounds MilUtility_PolygonHitTest MilVersionCheck MilVisualTarget_AttachToHwnd MilVisualTarget_DetachFromHwnd RenderOptions_EnableHardwareAccelerationInRdp RenderOptions_ForceSoftwareRenderingModeForProcess RenderOptions_IsSoftwareRenderingForcedForProcess SetMilPerfInstrumentationFlags WgxConnection_Create WgxConnection_Disconnect WgxConnection_SameThreadPresent WgxConnection_ShouldForceSoftwareForGraphicsStreamClient

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

346KB

Virtual Size

345KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

zh-Hans/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c5b296b1565c6bd21d8efcc986c8cfe5a73ae1dcfa3ff6134d5c090ebf2b706d
MD5 f4d5cd75cb557ba9f6196758ee61ab34
SHA1 d362008733ce00d977ebdbd4d001c4acf9303d02
SHA512 284eb2b6b9aea0b407fa8473c8ce2c5194b45588a573a3e1990ada040e1211f41ef7c3a46c8630812ecbb6ba289d70f028d2eae87826463a697b34fe06fc775e
SSDEEP 384:JyIKXSXRaRmIjBXdXxaLGuQuQF2N2+hiR2/jwOVaWYHwhQ5W15kHRN7KOsWAR9zd:JyIHIjyGdsVkKwO30wL9zRi4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9d:61:1b:16:40:07:39:0b:f2:45:91:1b:53:1b:d7:73:b5:35:f6:bb:c8:80:41:10:ce:52:2c:3d:20:f1:db:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2e587858e18956145112c6d3f4902220b8327a002f2181ee9748ad1df71d8603
MD5 12fd07486a0a211c270e271c850284ef
SHA1 eb4be44d0c5f2f3adb7977ce9f967f03cb3df5e9
SHA512 d5790cb56c356b7f704d7b1ed8996c9d5a7b8853cf5ca476883e7464a7d7c4000e3c28751c09951d9f5f32779ffbb2ebc1d733f0a23f9fafa8b5b0e024d1161b
SSDEEP 3072:n1iAJUb4XHYPcbyYbrJaqgYZbXhlrfXbfOmROvnwE:n1i74X4PcbyYbrJalYlif1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

af:3e:5a:b0:17:b8:d3:e1:6d:4a:6a:31:4c:db:84:7d:c8:44:cb:d1:c6:0c:9a:11:9c:9b:1f:2a:c9:4f:13:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

95318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 06576eb8aef96f7b79eb9716a31d6b1b6246a853b5e54e790d7948dd2bc59830
MD5 46a20837920c4362be5d206f27e8aec7
SHA1 8596e9164a69df299e747b37bb2e710f481786da
SHA512 cf36aa444315dbefe2a14e77b8373cb7cf2f5d0fb42b4bc2a50d0214123d2b4d8cb35630da5f19350c1c279fc371a5dc93770c3ed84757415ce1105670f6ef8d
SSDEEP 3072:PGtQkPmMA5r+WIJSrYQoxy9OVAFR+8G7APbGqnxhjIW95pjcYsa7vjr81olgn97j:PG8yAFR+8wAPbJLT5pjBsyvM192CVh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d1:e7:9a:d5:fb:2e:e0:9f:2a:2c:10:5d:0b:8d:95:a0:7f:2c:9b:e6:ac:f8:0f:44:80:4e:3c:ac:f3:96:df:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

178462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aa454ef5be05a806d51a0f350adf6d1769a161d765a818dfefe394c20eab64c6
MD5 19783e0668a147ad36af534ed0a14193
SHA1 349fe8589570565b02876fb51fc761600a43bb10
SHA512 8aad9a1fa3148dfd926e5ffa56a1343fe2db909a7a814312464f331a52641b6296cde093e231a964ee204e75f5b2e5923e81e45a32296e6b82def4a696e1b266
SSDEEP 768:GKed0SYi7Skr+FoyNh1hn0A3Prs4vgXfMGv5YdcSsmC5YUghVOA/K/iQHji9z6O:Cd0SYiTiHn0A3Prs4vcfMGv5YdcSsmC8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d8:dc:d8:67:83:e3:c8:65:01:ad:c6:25:6a:be:de:08:e2:5b:23:7d:74:f9:2a:fb:39:f0:a6:7f:77:87:83:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

38018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b75111e46193b174a4ddc4d39a112ef8c023a5c693df6650a5f1410e0016f7ef
MD5 0c4ba0386a3c1b922dd70a78da4ce64f
SHA1 83c098de0b86bec573203bea59425605e659f42c
SHA512 ef74c6291aa6eea1a0a1800e89682e1a599a97227730bf55e7bc06dce5d04224968e713ef8e797c22d2ae52c4787f6538bde9f704b0dced7f19540e1fa63f7ea
SSDEEP 768:F/UOgMne+nvV9fWpVPKFPl27L2vRmjJAU0rXRCOD8j34GTZy0heSS15WyItgUmdp:GOgMne+nvVuI0wKKItgUmdSZ7iwGtIir
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

71:6d:87:32:7e:c4:f3:5d:76:74:1b:cd:70:32:65:bb:5d:ba:c6:c3:9a:28:8a:df:11:4e:7b:ae:bf:fa:b9:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

32158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a30c681bf7b52d6f91309fd921bf80df2ce7119c00d8a66330cb8945e48186c5
MD5 df2fc6490e58edfa221e393681ad6fda
SHA1 cbe533d79bd74154c0a42cee7bb0fa20150bc966
SHA512 0fcd8e190100be81e64850022af1ebc107f04be94132e65b531161c3b5925a31a1e7b05f0dd5e3d6f4710b4b83ffe0486f5814dfe1a08f417343a036e5749f65
SSDEEP 384:WhWu5Q36ertWV875kHRN7W++5I+R9zJKR4:iHQ36eI5WEi9zER4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

08:75:84:59:16:aa:c6:f0:8a:6e:a8:b5:cd:52:59:cc:7c:e4:a1:64:65:70:8a:72:a3:23:c2:9d:ab:13:fb:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1fd16be3c684b2a127785790e355b031eacbb4e81b7891ab621d7db01dabd504
MD5 62955b45cce45d9fd1cfcf0d946f6777
SHA1 e76accd806ebadd6051805cf034c9386bfe40e9e
SHA512 ccb0ab489f3710fa5e1ef5cf8c111d98c7a22a719e363ad31a36349b35129d00c8026bc85165f95fd223452765e941332e47e508058c2769d2f8df6706a0546d
SSDEEP 3072:b5R9MtbGzbtyHZ/I11DKdwWorcP4IVCLAFmbZanokelG5YCVHBqDBvQBaKpWmsSm:bzSXJSHea/Iv2uo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ab:63:72:b7:da:32:ee:b6:64:99:8b:eb:0d:06:e0:a2:c4:50:1e:ac:a2:2f:71:0c:7e:e3:33:a9:d6:f0:8c:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

139866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5bd79876c04b7a4b63ca0cd78edcde2e10770aa9f1ddf0c7c7132877f79d88c0
MD5 6fa9fed408ade2884a94e7c8d1a7778c
SHA1 6df1a4f1e7fc14479e4e39c0dcc3d140cf12ff7c
SHA512 56dd8ea02662d380afe46670f569a76fa3b184f7081cea80382caaed47780a4c1cc1d3f9f7c89018a19c3a39737706b18e2300f34a00cd453104491630ea10f4
SSDEEP 192:U7A6wePqOUWNiW4uWXebPpUNTQHnhWgN7aIWdSsRH+BEg7X01k9z3AQdKa:z6DqbWNiW4Tb2HRN7G8R9zr4a
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f4:e1:b7:29:39:9e:b2:67:a0:74:87:b5:c5:94:6b:77:3b:c7:91:18:f4:01:41:a5:e7:97:e9:31:63:28:86:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 86ee444b40d7e5b1bc3079b17e600998f15570860948faf0e3327b7daaf39fa8
MD5 e9bcfcbd6ff63082c1af190cfb6e000d
SHA1 e6597132638cec51a30ea169bad12ed7e78c2797
SHA512 cfdf45d9a872bb6d2314627c5eca1c47d207c8c70c1dfe661499786d106413ff1b5ae19f2a300c8b04052c3c3bb7f5eba9ffc8b19c1504277536d7afd8cef433
SSDEEP 6144:CqcUKNvHTngTvI4v18GWwPGtzwkbmNp6htBrF:CqcU9NyF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

69:ed:67:51:20:40:fa:ff:a6:64:5e:a7:dc:31:bc:ad:16:ad:98:ac:66:63:d3:6e:9c:bc:8e:14:da:a4:f9:ba

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

314786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab6c90e2050952dce7998487178901baa8f8e1415579666ab8332b6f73df3aaf
MD5 185eb76baf903123ce675848246f6433
SHA1 c412595c9b3e40365d78ecf29ead7c2818b3d292
SHA512 2fcbc6da5d780ba31a584dc65370732418644cd636722f443f0c66bebc6c56af7b3337790e4104d5af0183ee6d6a49012adfaa5516cd0d611fde698981a87e34
SSDEEP 192:Xvh5I0AY+ptHCvZJaaQWpgjhuWXebPpUNTQHnhWgN7a8WnDasZmp8TKjX01k9z31:XpBE8QWpgjhTb2HRN7ZssWAR9zgX2iiN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

37:c2:b5:ff:b5:e1:fc:2d:d2:36:9e:b9:1c:36:5c:c3:d4:a9:cd:49:d0:b3:f0:26:f3:b3:29:11:72:b5:f3:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 02badcc47cdfcf8a361bc9109024b911ef8882e0069d3a9397d66ea0189978e6
MD5 d8a8c0ef8cb33fa59c223b5646e492e7
SHA1 6c8978eec29a9e5a5e4e6fb16261df88480c655c
SHA512 0e6c81dc379912ec8ad89384d135b159e39dbcd23ae70e244d41e39b8e6d50cf1e0d0119c94ac9f29e0ae9ded3d4649506ab61faf412971b946a03182da363cc
SSDEEP 768:lZOvyTuLqN/q1SqsT+lGnTrcmc0oDSM13OQK3KG9/D+3CPQxU08ziXRmgu4O7/i9:avyXPjAmu32KfyyZmr4OLip9zTN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

37:4b:fc:55:8e:da:a7:e6:cf:5f:93:bb:b4:00:60:3c:c3:97:6e:dd:13:41:1b:d2:98:8c:91:79:ea:48:c1:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

56118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 08ad355f4e8eda849a3ace50b8c939dabb1f4669910f7837a047ac2ffd7b9c4a
MD5 cacba1037a31dc19efdb546ae0faadd5
SHA1 1ad9f3e66969294fef49ac6eb6803b04761146b3
SHA512 f802d0d9c7abb1cae13cdc4cd444188df8cdf9348073e7c2e0958289eedcaf75904b1f0b8caf7dafbc25be35458c06b0ba38e1aeb324d03784e5b0038c5b6f78
SSDEEP 384:afet3+LgiuatiF8tWSKAITb2HRN7oEnR9zV6Kbmv:Iet32g76iFrb/ioER9zVtbmv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

86:10:ff:c5:2a:40:24:93:eb:66:1b:97:0f:a8:47:45:38:e1:f9:18:22:e8:0a:c4:be:ca:c7:27:12:4b:6a:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14482

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 969b0fe234d4c281140e526041b143947c0cdb5c363568bba05b3023701f239a
MD5 1ad80ceccbf82de5c4cb84192a8047f8
SHA1 a3626848a531c5a94ba4cb618ea54ecee0c8a252
SHA512 22433e7fb5418df762b93cd44974dd60b55642bd385b2cd52c1a38073d387c153dc5ff7866efb340a9e8cf8a9f10219520d70a15b2ef6f115c11a447a2ff2438
SSDEEP 384:6sRBH3FD8YtWKXUTb2HRN7Q/uVwR9z1PPBx:JRB3Fo4k/io9zZPH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

84:bd:c7:aa:3e:c7:9c:b8:c5:e6:01:11:66:11:43:d0:ed:cb:d4:dd:b2:ae:78:d1:d4:63:e3:ba:53:eb:8c:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1b6f884d9956d737e34c41eb2013b782f5024164b11ae5006b88575947ab89c4
MD5 fea5351b7d23ece45687934c15ef8dcb
SHA1 744364cf4f0fd65e5001c33bcf3d4f6c66583f8c
SHA512 cf4fa7095bcd855e68e4243b9906598a7b7b30ff8a2717b58c0692dc3d97e118ac83350dfa8dc02c750a549307ff78717c855dad7c264577b063fb85e1715556
SSDEEP 192:zZ3Z3r6WtZF2tWb+juWXebPpUNTQHnhWgN7a8WqdvYKKWDKHjj3SX01k9z3A8FPt:5lWEitWb+jTb2HRN7bb+Hj+R9ztPiLE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

7a:06:8a:fa:26:dd:97:3f:1f:d8:9b:e9:a7:09:86:2c:bf:9a:2d:9f:29:e0:7e:33:8f:81:23:0a:66:b7:03:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f630e05a68bdf5e0bb830a7f186dd8305c9693a57016dcfec173981677e55eb
MD5 53f28aa0ee8c9e79997452f4d5cef262
SHA1 68dfeec04a411e5a0ab091dc89d65df833af3c4c
SHA512 a64e897f085e196f1b7155249bb77a0cd07e03995061c30bd37009ed46d8997edee2643331451e18724644b902a3ebb8bdf7922048ee869851650d02e8c9a645
SSDEEP 192:nOtCxS22SOB4datnztWLWRBJpcuWXebPpUNTQHnhWgN7aIWkjjH+BEg7X01k9z3t:OtCxDunztWIBcTb2HRN7/sR9zrx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

68:25:ad:6b:83:6a:ed:97:55:a2:7e:86:a0:a7:53:4a:77:b1:50:4b:f6:37:d5:6d:13:85:0f:34:26:1a:ad:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 11765e2a7b3a3b424b99b45bd59c42ca976d29ed9f792d30e9b6bbd2f1d3fc5d
MD5 3e6bb2e889a2c1fcf08ab60c40772f77
SHA1 6cf8e65bb60b547a242b6048533ceae6b36fda1b
SHA512 fa3b68bd52a1c3c60e15f68b9e3be2f576f5997e315078073d0e7a07c58fb92b284b4f28581d094a9b73cf1d14fe057a89ee922048a83e4fa2d497939cf7ac37
SSDEEP 1536:7V+wjmTJyaQ4dPG8HTnhgMHgkwbcx8ma03BMLa6Y7lxnu4VPiShzUQ:77mTJyaQ7m6kwbY8mx/6Y7lxnu4VhhYQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c0:43:8c:98:80:3c:57:c1:a0:48:07:7f:7f:69:6f:6b:5c:fc:93:68:89:c2:77:fe:b7:69:f3:2c:da:00:05:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

74158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hans/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9387b4a9e6d8340fc12668f20118636c7a05334030c21cfee8ecd39f704fd1a8
MD5 0ca4233564dc1f5044e16c67f772cfdc
SHA1 0d914bb831a10e596a5a2f868a0fef922d9e4e16
SHA512 8cab430cfba6e2e5215ee013e57c30d271a467a06e3f0bb7bdddb964c8ed2b482d6741f0bec28004fb8c99a043bfc8c63f1e50e02e1ea77b083c35dbeb835db3
SSDEEP 384:TKtLFLHfFWq0tWSfNA5kHRN7AuxIUR9zD2:EZHfcqsTbxt9zK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6d:62:12:75:87:fd:f4:3e:57:cd:ff:3c:07:89:09:13:7a:43:06:e5:d9:27:87:f1:a6:64:50:3d:d0:51:21:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/Microsoft.VisualBasic.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 19ba34c438964a1fa27d120f5e5022a20501dd97074df4776f16815707ca00db
MD5 7921979c52c5c19fec0ba986727cf025
SHA1 956e88381c7a92a15f3a59a8fe0739e95922381a
SHA512 5a5d683cb7dd94ecc40d8a36a6c1de501456f4f10d9559787ac431ca0da7a5860487fd074125954019fed1c084ba8382e3181b826c416a06d8cff093b2099ea2
SSDEEP 384:HtyzKXSXRaRmInXdXxaxtSQuTmd21K/hCiy6lVgaWYHwhQ5WOW5kHRN7FsPI+R9q:NyzHIGtZa6w2VQ+/FBi9zENd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

85:58:eb:a8:9f:17:c5:83:20:8b:73:7c:41:a0:00:39:7b:06:bb:7e:79:e0:69:9a:3c:fc:1d:df:95:9f:8a:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

20158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/PresentationCore.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6f7db3a5a8f271ff63b51d6f3726350e591d28277dbf98dccdabbd0ad733eae3
MD5 4a6ea7645cc65e855a79a5ce5dad1f6c
SHA1 beb857a7ead3ec03d4f8a08d14ac71c7f50cd428
SHA512 8507b8ac72251335d7f9c92b5ffe179c4c2a2643dad947ae898c089497b070c024e418b005c540bce3fc3ccf082a514071f7371e0881dec2251f018c1460c09a
SSDEEP 3072:+1iC/Ov6FCL+T3xdndX95KQZUpeKovUCYUeICZGJ:+1iC/TFC6T3zndX95KQeeKoleICa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

91:4b:79:11:43:99:4b:cf:03:bb:6d:c2:39:7c:43:ec:b8:f8:3a:16:d9:c5:21:e1:c9:04:2c:f8:39:28:c5:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

96478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/PresentationFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 57ea5f7e80c84d8c9bec7a952f2db92b918b297c079d63abb86336675308d2ab
MD5 87f3b904e064024bf9a3afe211f0c7e7
SHA1 29efb71e2eabbf73a51bbac2175c7fcce6602da2
SHA512 75d71e23a1c5346b91ade99ed65bdcb977823503996edece1777a7191ffd114717fff4c87f8a35b7076e991608046aaa57cffaf1162d61032d9242c6d6856d6c
SSDEEP 3072:oG4iPImK2Xq1Ig9t2VmH0zgZw1lMD8SzPY0/1CdvLUEcvOj1X5XirXqV9jPTHinX:oGNAw1lMD8SzPtevLYvOZX5SrXqV9LTi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ea:59:87:de:87:e0:43:f4:1b:76:c9:6c:50:e6:1c:f8:9d:41:1b:1c:c4:c6:2c:0e:6d:45:f0:3d:06:08:7b:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

178918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/PresentationUI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 66b8c0d12f7667579b518a520126030ec2e9458118c9dd3b35d98defc9c0dc38
MD5 ad90559b6ffe816b1e98547a9901179d
SHA1 a2f0ed53f033f32b79d54eb19c369cd5a8d95a90
SHA512 4fe824953c1b94db92231d18286979d9fb3336adf90c15d80b1b6570a4d4ef9ebc1f336c6007f64d79091ebade3887f83c351a6f3dd0714c1631055e78cfbebb
SSDEEP 768:ZgVcZTkePW2dfxp8ilbbwq0+ZEvgej6bBQDmhitdnST5hkrnKUVJMvHd06JDiLqT:+cZTkehpbbwq0+ZEvNj6bBQDmhitdnSN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

42:c0:b8:5e:96:2d:95:6e:0b:d2:ba:44:dc:16:15:9d:d3:56:ba:e0:73:b0:cf:6c:53:ee:41:9c:a5:b2:8f:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

38218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/ReachFramework.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7c1baeee1a481772c7898d6522c015ea31216bf31ade0f3c1824ad9f215f646f
MD5 34e24f8b8f7fe4b35dc26a4e414dfe5d
SHA1 3f05e1e62e5820109231c241113ad0a815d324a5
SHA512 f31baf81d9b7aa31e7718aa93464f22e64c4c53d3e79a9ae8055a5639b78a91af7f5cc165d0d0fd3dc6022edb7d7d9149f63a564f77bcd386482534c0c644cb3
SSDEEP 768:ZO7zhqHJKLeD28UoeTTYs+CPB2HNPeNGHjpJ05cKBPOc/YwmJF02RyhbgkWNsdJJ:ohqHJKLeD28xi602gJiZ+zEy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bc:0b:c0:2c:bb:95:26:d2:d5:99:8c:53:b8:9b:41:bf:ac:b0:d9:cc:c9:db:60:0b:74:9e:64:ed:b0:d2:5b:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

32390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/System.Windows.Controls.Ribbon.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8bfe62aba753a4138bc5b91416570f66eb6f5505f8945eee0058ca4313bb2494
MD5 c5a0082f3dd401aa17b7e6ca5185ffcd
SHA1 4880268e6a489d2497273585bee01be4a21e9457
SHA512 bdc73f3f76af9df440ea9f1476d093da3fb80d25ad51e628f708a8f0366b6b7f9b956bf5d3883ddfbbc89a7a633038c06ebf22c51c57d2680dc4f692487bdaaf
SSDEEP 192:r3RzCGdIQeSKEE6Ef1GW9tWV8aWs3WT56Os1HnhWgN7acWfw2BwUoX01k9z3Aurd:bhZIZP9tWV8fR5kHRN7QUR9zD9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

72:0c:de:a2:7c:ec:25:27:1b:81:a2:ab:9a:c1:cf:04:f4:15:18:a1:c9:81:e7:c8:07:a4:a0:dd:8c:47:21:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/System.Windows.Forms.Design.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dd6fa1b0abdff78318e9be81db449dc4c353bab1abdb0ae1482eb76c66dbf71c
MD5 942dfdd64719a04f23205399ab3780f4
SHA1 7442cb9a356089f1f9d612af6c292cb5ce92a45f
SHA512 dd7d4e6f0f704ec25554a7c09342ba3d6b7eed73a97ec3acb43cede8e382e29073fa8af990d8a5355971881b3f148a4bf09b79c4b1c356a56113e690fbcbcef4
SSDEEP 3072:f0R9MtbGzbtyHZ/I11DKdwWorcP4IVCLAFmbZanokelG5YCVHBqDBvQBa4pWuHTO:fjHTm4+DjcyvrrtDJJqW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5c:9d:88:9a:6a:2d:c0:b6:c5:04:28:42:34:e3:68:1f:5f:d7:16:c2:60:0c:f9:0e:89:da:df:e9:67:4a:ed:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

140266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/System.Windows.Forms.Primitives.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f4912a0d48a3044a096ef787288f61fa95ea5386dbb6116383455d1c96108b7d
MD5 e014391b89d5a7986d74e5a37069ff3e
SHA1 b3f03428b001c7efa367edebc8255fdf83ab4730
SHA512 926ef0a9233d6051b05d365dfa47aa0b02cc02c1664191100e0df82ea9716c1f817e3ac1c2793e0cd66765022dfa17ac7f82c3deca13ff690d504b331c7d23c8
SSDEEP 192:kY6jaTfDLp28WNiWSuWXebPpUNTQHnhWgN7aIW507QTb8o+X01k9z3AO7mhuFv2f:76448WNiWSTb2HRN7Y07I+R9zJKK2yK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

7b:e0:85:99:79:c9:fe:b3:18:a2:e4:4f:bf:9b:5b:73:12:db:93:98:6e:7e:76:a8:f6:21:04:05:54:88:1c:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/System.Windows.Forms.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 78fc690725f6494b53d9699491075e4c0c2175369eb2e05885c94044db9ee28c
MD5 3e20ae75548688059888fc7d2403100e
SHA1 d4b4eaa6d4412190d6374b25a88a9f36f5d565f2
SHA512 f990c45b4d17b9f7586b0a0e44f21e3569780841665afa28491b0a620fe4787495c661bc882560ca19d1ac31b5f75cac587ebb06e5de68ad2d4de69cc1dbb990
SSDEEP 6144:DqcXgNct9/qbS1kGkymEdCnVhfUcuWXPOYcZ184yU3d:DqcXInPOX3d
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2e:bf:42:61:92:4c:60:bf:75:74:26:94:e8:2b:e3:30:6e:f1:b1:1f:74:5d:1c:1c:2c:85:d9:9b:09:9a:26:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

320186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/System.Windows.Input.Manipulations.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 de8348e03095010681f8e24c7a6375c5b2acb07a4cc0b9c6907f9949a78e9baa
MD5 54cd8c4a1524d64a758ba20ece60c964
SHA1 63c074d97f9a8a76c8a9dec26d4bf75519d2390d
SHA512 40f3e08d82a731c86f195b82966f000f7bb4e5adc8172f275cefbc3134f13697a26f66741971729fd8d05cbbb902f41406264a0e0cd56c9413be16395d9cf5e2
SSDEEP 384:0K2H8XsQWpgpTb2HRN7s81r+Hj+R9zttq:U80y/isRHji9znq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5b:f4:30:52:7a:55:7e:85:d7:13:af:0d:39:20:4a:4c:fc:8b:33:65:c0:25:6c:f9:fb:00:e6:65:5d:f9:2f:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

11346

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/System.Xaml.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b8bf00a770b148526d89fe23da1e049245aff6ea04410d94e65b136a45e12ea2
MD5 f2388ae27af2c108e528c0c93ec99423
SHA1 0b3b49cde6b8434a4da505a7c4e2594834affca2
SHA512 95404f5db7ddfdaba33879314b961182e42549e017fce33ce00fb282d45a3dcf567787179668019780a1751ebab6e3b30426ab15360209d9e245069eca6a6684
SSDEEP 768:uZOvCBZdDSA78309IN83BoF96ox46RWCW45W+REUf6fUqiFAKXWJqLFulFRF/i0Y:tvCiTFxLZlf6QnFulFRNi0+zEuh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

fa:92:1e:f4:f5:85:9a:70:46:93:7e:88:bf:a4:aa:72:3b:6f:c1:5a:81:c5:88:93:c5:d3:b5:2c:00:40:07:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

55702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/UIAutomationClient.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bc5a1c83ca1b3a585c9be5bb2dc0f8c4ad30665eceacfd0fff95b4497a4ff42d
MD5 69e80619b2c89b93b2b864fedba1315a
SHA1 e140c43683512e1472fd9e2612f69944bdca4960
SHA512 59fafbab6428ac355b534a6e6202688f5ffaa6bc5119c333268951a244a7f4d5cb9378a8a4489d123338b88a5e368154247e9543a29ff40dc8f68aae301b20ff
SSDEEP 384:kfIg3BiRqxQRoQKbtWSKADTb2HRN7Rd6R9zrvlR:yIg3s8xQRpz0/in29zRR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

69:c2:6e:e9:3a:c9:54:12:63:37:b8:2d:e3:1a:1c:a0:4e:c6:d3:ee:3b:15:5e:2f:1f:a9:ae:ce:43:6f:a6:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

14458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/UIAutomationClientSideProviders.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0db53b51c48dd12b5d175fe8e29b087589925c7b427b5be317d80423ed5b4154
MD5 8ac3bef231e005aa5ac92ae93c907bf2
SHA1 b020fc45945f174371cdaf51a8c0331fe4971f12
SHA512 9bfef1782d9cc1feff8326a0b8166ae3209c6b261c643026a5255ff6eec74eea9bfd40957d6663220fe1af4d320a74e100b2ea87bd3daaeb609085922769fdfa
SSDEEP 384:lVxLm3ofUXw6HztWKX7Tb2HRN7kuZcYR9zPrf8vM:5LQnw6H7L/ik4n9zT8vM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9c:f3:30:31:c9:d5:9f:09:42:37:11:f9:5c:cd:5e:84:0c:7b:e2:cd:34:13:f1:18:fe:35:e1:a2:b1:3a:46:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

15798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/UIAutomationProvider.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 beb8f3c4d5290adf6130bcc36ea6d80d94803362a878ce6b880c93721748246e
MD5 a81fb23606dd4cd6fa99ec6b82a67d20
SHA1 75a99ff6e7bc7af736881f3903ef44a1bf59eba0
SHA512 161e8d1abaca098556a50442856e7fc6194bb61f4919682cbbd66632c4c5a0b7fc88583a505633430b1508ed377ee2675544ab696e9994e9dde94556611b8c67
SSDEEP 384:wlM6xtWb+fY5kHRN7xuWGsWAR9zgX2i+LZS:PPEwgL9zRi+Y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

83:04:2d:13:46:22:01:1d:f2:8e:71:83:2a:e7:25:7d:cf:b7:72:1a:6e:a9:a3:89:fd:1f:5f:49:59:ee:d3:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/UIAutomationTypes.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 69fa86fb1c9923c7431aa566bedad8f0895a826223f7a4b314d30e3a67928008
MD5 27a0a56de64b8b5e8af082c9db0a8278
SHA1 27fd2b2114df473000ceff315b9d04755d3a22dc
SHA512 7e9cc18ccd814d339b359d9a90ddbd91eb6a0b83a86a0dd5689a38e14ba4e68005dc7f3418e8b8696ee8f4a0698ba9b76fb0a54bf6e1baa7c075291103218c83
SSDEEP 192:dIydLKhSI8FtWLWRBJp+3WT56Os1HnhWgN7aIWf3heTdH+BEg7X01k9z3AQVzWkv:KydoAtWIBv5kHRN7qMTSR9zrVzW4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0d:da:45:69:e6:4b:4f:03:09:97:78:2a:7a:d2:30:bb:aa:f6:1e:6f:7c:5b:ca:f9:2b:da:0a:5b:d1:9b:a5:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

13366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/WindowsBase.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bade7a6254b3a8a56562d134386d9e43fde4c468951c5dcbf5757700a37aa78e
MD5 41d1faba09e64e098d360105df8b32c8
SHA1 5967b354aa8cf8aae3aceaf80fc3505705305322
SHA512 8f0a9b80f70ed790ec9a4fdb533830b8d32f8a0e6dc7d198c25a62d99fe387a6449ca7c9c0c61ac85199301785eae7741294b6c3f592801c8d008673e95d9c3b
SSDEEP 1536:9V+rk9v86u9ehnjlRJbRz59aKmVx72mLJNSdQlOZOWNsLgv3ezj:9Ok9k6u9ehj9Ir72OIsLOef
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

dd:c8:a6:2a:9e:06:b0:45:b2:14:13:d1:10:69:d6:a7:0f:c0:e3:fb:4e:45:f1:78:85:26:b4:b1:75:8a:4b:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

75318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

zh-Hant/WindowsFormsIntegration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f00420df3dac9cc0b3595bb184a159c39924ffce6934ec653c28276c58710ae7
MD5 ce0e27f23295272cfaabb738cc458c84
SHA1 70f0ac8ebb6e4350b10ac65b4e673aa9522111ef
SHA512 2f8f0243d981bc83a0d7d92d0899458949584959d847d4297cc2865feae35a68c1e343e804d52baba05375042068e4479e8ca48def375397d4f2518f37656892
SSDEEP 384:3IKtLFLHYpWiGIGtWSfBTb2HRN7dR9zrWBN:NZHYwimp/if9zi7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

33:08:5b:80:a4:44:f9:ea:91:54:60:7d:a1:c7:ee:6c:b9:a3:e7:8b:49:3f:6c:7b:3f:18:bd:f8:d1:b1:10:38

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2024

Minor OS version

0

Major OS version

4

Entry point

10918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

ZoomInstallerFull.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

Accessibility.dll

PE Signature issue

mscoree

dotnet

D3DCompiler_47_cor3.dll

PE Signature issue

kernel32

advapi32

rpcrt4

generic

DirectWriteForwarder.dll

PE Signature issue

generic

Microsoft.CSharp.dll

PE Signature issue

generic

Microsoft.DiaSymReader.Native.amd64.dll

PE Signature issue

kernel32

ole32

advapi32

generic

Microsoft.VisualBasic.Core.dll

PE Signature issue

generic

Microsoft.VisualBasic.Forms.dll

PE Signature issue

generic

Microsoft.VisualBasic.dll

PE Signature issue

mscoree

dotnet

Microsoft.Win32.Primitives.dll

PE Signature issue

mscoree

dotnet

Microsoft.Win32.Registry.AccessControl.dll

PE Signature issue

generic

Microsoft.Win32.Registry.dll

PE Signature issue

generic

Microsoft.Win32.SystemEvents.dll

PE Signature issue

generic