DiscordMulty.rar
- SHA256 46e1081372a9209e9bb11225ecfdcd3d3824a51a568c03763e2c689c4ef3928f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DiscordMulty.rar
Resource
win7-20240705-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DiscordMulty.rar
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target DiscordMulty.rar
- Size 3.7MB
- Sample240802-wege2stdjp
- SHA256 46e1081372a9209e9bb11225ecfdcd3d3824a51a568c03763e2c689c4ef3928f
- MD5 981187d8addde5cbf8186db39a5eb885
- SHA1 18acf273a86e61b17c6df24ad988182e80541c6a
- SHA512 32606af10a762a7bbb2bbd08def5808dc3817abca24eaee8348cab28c14afd1413339a9ec2adbea75cd242de3d3ae49e3e2cb02ceb782d745013614dbd1ef3ce
- SSDEEP 49152:Er8nNFEfeAMLxtndQpcR0EyB4afsHnckkTeql5c4rdFLacfgiL0WaLKYmpldw7:/kOVtgcROFU8k0N59rdMVvWKxSdw7
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 16 IoCs
Checks for missing Authenticode signature.
resource unpack001/DiscordMulty/Colorful.Console.dll unpack001/DiscordMulty/DRouter.exe unpack001/DiscordMulty/lib/Anarchy.dll unpack001/DiscordMulty/lib/DSharpPlus.CommandsNext.dll unpack001/DiscordMulty/lib/DSharpPlus.Interactivity.dll unpack001/DiscordMulty/lib/DSharpPlus.dll unpack001/DiscordMulty/lib/Discord.REQ.dll unpack001/DiscordMulty/lib/Figgle.dll unpack001/DiscordMulty/lib/Leaf.xNet.dll unpack001/DiscordMulty/lib/Polly.dll unpack001/DiscordMulty/lib/ThreadSafeRandom.dll unpack001/DiscordMulty/lib/discord-webhook-client.dll unpack001/DiscordMulty/lib/notifique-me.dll unpack001/DiscordMulty/lib/webhttp.pif unpack001/DiscordMulty/lib/websocket-sharp.dll unpack001/DiscordMulty/lib/websocket4.pif
File Explorer
-
DiscordMulty.rar.rar 3.7MB
-
DiscordMulty/Colorful.Console.dll.dll 88KB
-
DiscordMulty/DRouter.exe.exe 1.9MB
-
DiscordMulty/DRouter.exe.config979B
-
DiscordMulty/lib/Anarchy.dll.dll 529KB
-
DiscordMulty/lib/DRouter.pdb107KB
-
DiscordMulty/lib/DSharpPlus.CommandsNext.dll.dll 75KB
-
DiscordMulty/lib/DSharpPlus.CommandsNext.xml.xml 62KB
-
DiscordMulty/lib/DSharpPlus.Interactivity.dll.dll 45KB
-
DiscordMulty/lib/DSharpPlus.Interactivity.xml.xml 149B
-
DiscordMulty/lib/DSharpPlus.dll.dll 583KB
-
DiscordMulty/lib/DSharpPlus.xml.xml 316KB
-
DiscordMulty/lib/Discord.REQ.dll.dll 73KB
-
DiscordMulty/lib/Figgle.dll.dll 473KB
-
DiscordMulty/lib/Figgle.xml.xml 4KB
-
DiscordMulty/lib/Leaf.xNet.dll.dll 129KB
-
DiscordMulty/lib/Leaf.xNet.xml.js .xml 276KB
-
DiscordMulty/lib/Microsoft.Bcl.AsyncInterfaces.dll.dll 20KB
-
DiscordMulty/lib/Microsoft.Bcl.AsyncInterfaces.xml.xml 17KB
-
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 43KB
-
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.xml73KB
-
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.dll.dll 74KB
-
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.xml12KB
-
DiscordMulty/lib/Newtonsoft.Json.dll.dll 683KB
-
DiscordMulty/lib/Newtonsoft.Json.xml.xml 691KB
-
DiscordMulty/lib/Polly.dll.dll 262KB
-
DiscordMulty/lib/Polly.pdb73KB
-
DiscordMulty/lib/Polly.xml.xml 958KB
-
DiscordMulty/lib/System.Collections.Immutable.dll.dll 238KB
-
DiscordMulty/lib/System.Collections.Immutable.xml.xml 760KB
-
DiscordMulty/lib/System.Interactive.Async.dll.dll 202KB
-
DiscordMulty/lib/System.Interactive.Async.xml.xml 149B
-
DiscordMulty/lib/System.Linq.Async.dll.dll 1019KB
-
DiscordMulty/lib/System.Linq.Async.xml.xml 12KB
-
DiscordMulty/lib/System.Net.Http.Formatting.dll.dll 174KB
-
DiscordMulty/lib/System.Net.Http.Formatting.xml188KB
-
DiscordMulty/lib/System.Runtime.CompilerServices.Unsafe.dll.dll 16KB
-
DiscordMulty/lib/System.Runtime.CompilerServices.Unsafe.xml13KB
-
DiscordMulty/lib/System.Threading.Tasks.Extensions.dll.dll 25KB
-
DiscordMulty/lib/System.Threading.Tasks.Extensions.xml9KB
-
DiscordMulty/lib/ThreadSafeRandom.dll.dll 5KB
-
DiscordMulty/lib/discord-webhook-client.dll.dll 62KB
-
DiscordMulty/lib/notifique-me.dll.dll 19KB
-
DiscordMulty/lib/webhttp.pif.exe 96KB
-
DiscordMulty/lib/websocket-sharp.dll.dll 248KB
-
DiscordMulty/lib/websocket4.pif.exe 1.2MB
-
DiscordMulty/translations/qt_ca.qm170KB
-
DiscordMulty/translations/qt_cs.qm154KB
-
DiscordMulty/translations/qt_de.qm168KB
-
DiscordMulty/translations/qt_en.qm23B
-
DiscordMulty/translations/qt_fi.qm156KB
-
DiscordMulty/translations/qt_fr.qm162KB
-
DiscordMulty/translations/qt_he.qm135KB
-
DiscordMulty/translations/qt_hu.qm88KB
-
DiscordMulty/translations/qt_it.qm150KB
-
DiscordMulty/translations/qt_ja.qm126KB
-
DiscordMulty/translations/qt_ko.qm121KB
-
DiscordMulty/translations/qt_lv.qm149KB
-
DiscordMulty/translations/qt_ru.qm155KB
-
DiscordMulty/translations/qt_sk.qm122KB
-
DiscordMulty/translations/qt_uk.qm154KB
DiscordMulty/Colorful.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6de7e078e24afa66b699c6eaf93988ff44dda8bd062fc11351978ddc5b601899
- MD5 513887befab1824441ab836a1de051e1
- SHA1 737acdf101b06d4f7528a17a361120898dcbd98d
- SHA512 35b63292badf4d79375f32c60ae2993b5f3315203cf790bceba0df69bb222a83b5cb1ff55cea30c48345a59b04c17d037580dd7bcd8c5075334f8bdedf640454
- SSDEEP 1536:3J1J4aE966w/2DtgNpWFbCagAHM9KTC/bu:3C796R/ObCagAs9KTgS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96594
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/DRouter.exe
- IMPHASH 5877688b4859ffd051f6be3b8e0cd533
- SHA256 a881c67a5ad97fed46616a1c219a4c70fffcbe3ec1f0c900747e2ba75131b143
- MD5 4d978f4a830f374b5867f1ae53b08ffc
- SHA1 827b301d630a037a6559acc3b63612fded885767
- SHA512 f9339c421b5a8ee85358d0a4384ef3d203cb68572152f02c9610c4c371091d5c5caed5fde3a3c379ef3feaa2c86cc123e09596fb8862816ea60ae2d78d6a6091
- SSDEEP 3072:gq6+ouCpk2mpcWJ0r+QNTBfqcm2GvaDE:gldk1cWQRNTBS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcrt
memset
wcsncmp
memmove
wcsncpy
wcsstr
_wcsnicmp
_wcsdup
free
_wcsicmp
wcslen
wcscpy
wcscmp
memcpy
tolower
wcscat
malloc
kernel32
GetModuleHandleW
HeapCreate
GetStdHandle
HeapDestroy
ExitProcess
WriteFile
GetTempFileNameW
LoadLibraryExW
EnumResourceTypesW
FreeLibrary
RemoveDirectoryW
GetExitCodeProcess
EnumResourceNamesW
GetCommandLineW
LoadResource
SizeofResource
FreeResource
FindResourceW
GetNativeSystemInfo
GetShortPathNameW
GetWindowsDirectoryW
GetSystemDirectoryW
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
TerminateThread
CreateThread
Sleep
GetProcAddress
GetVersionExW
WideCharToMultiByte
HeapAlloc
HeapFree
LoadLibraryW
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
HeapSize
MultiByteToWideChar
CreateDirectoryW
SetFileAttributesW
GetTempPathW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateFileW
SetFilePointer
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
HeapReAlloc
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
GetLastError
SetLastError
UnregisterWait
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
user32
CharUpperW
CharLowerW
MessageBoxW
DefWindowProcW
DestroyWindow
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
UnregisterClassW
LoadIconW
LoadCursorW
RegisterClassExW
IsWindowEnabled
EnableWindow
GetSystemMetrics
CreateWindowExW
SetWindowLongW
SendMessageW
SetFocus
CreateAcceleratorTableW
SetForegroundWindow
BringWindowToTop
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DestroyAcceleratorTable
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
SetWindowPos
gdi32
GetStockObject
comctl32
InitCommonControlsEx
shell32
ShellExecuteExW
SHGetFolderLocation
SHGetPathFromIDListW
winmm
timeBeginPeriod
ole32
CoInitialize
CoTaskMemFree
shlwapi
PathAddBackslashW
PathRenameExtensionW
PathQuoteSpacesW
PathRemoveArgsW
PathRemoveBackslashW
Name
.code
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DiscordMulty/DRouter.exe.config
- SHA256 30332794b815169dd8db2fa07e6543ea370d1eb3c8ddac6d831e6ce0c3ebba2f
- MD5 33942ff38680119f98d6efb60426f16c
- SHA1 9a63b71687f0c071178688bedbae18ddbae0dbc6
- SHA512 095da5ffca44a3d91292bcb7b48d9c83fc3cef47e5ae4bafc5b32ff9c01c327479fd9e000f9b73a86db06929539b8e2afcfe0be025bd71da26822387c0061b77
- MD5 SHA1 SHA512
DiscordMulty/lib/Anarchy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 560bbd5b4fd7fca4991ed0bf251883d6d9d1023f59cc1ce364923737b96afcf1
- MD5 8725518ff670fda909532c65e9824844
- SHA1 92cfacf2ff7d0a746064584d920ab4069bc8d2b2
- SHA512 7244bfa09f8fff4f9a73306b1bb13c1751fb973cd163c0848c8fea116bea59f1da7575a5251a4a39b91699c5cac3b2cafd27982c8c3447a6e1587d355068b776
- SSDEEP 6144:P2Tx1CON752DK3NSJXbCxl+Ij9+V+YviOaAgahp5gRNXT/NUdAMVYrTkTVrPV4:23+LdB+zOpd2Nb2IkQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
548246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\edhbu\source\repos\Anarchy\Anarchy\obj\Debug\Anarchy.pdb
mscoree
_CorDllMain
Name
.text
Size
527KB
Virtual Size
527KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/DRouter.pdb
- SHA256 a3c237199d7010828e4f546ee80d008eb1780d1c4dd9dfb72ca34b4ef49ba6d9
- MD5 199c2217e5f82cf6ea8139a81d461d96
- SHA1 b814128ae2a7e3eaaf0e3375068c94f542f74bc8
- SHA512 b0c8e4b32faff3ac2693dfa8e3c9b3d2ac95f2aceb5646946a60502e874e7d1d14e0efd4b48ca158560f7a1777ba8256e9e4decbb6d56b61e49e39b2a9890179
- SSDEEP 768:B2lflqI82mZO2b9gSt8zAWDesq1m9kFnSeqBpidGtnHp9ADgKRsg8I82mZO2t9qn:T9KzX9kFnSeqbHiSgu9qmg
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/DSharpPlus.CommandsNext.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c86b413716da6dd0a50348a2bd0166b686e6e61361fe16e8396ff92490e592d5
- MD5 430949bd7700acf32219c4fa4e40557e
- SHA1 f7cfa7f941fc00d204623f7396362f90c6eda262
- SHA512 18ae9b1813b44ccf7644cf21cf4ff157e5e999354f9fc5716ba28300751babff610e5bfccdd1e1deeef0fcb62370bd1bce64e6969b644a3a7200fa870d3c853b
- SSDEEP 1536:Exeas5/d0n9HhCuY13Yx3Fllya7d4lQy2J0r4cJYY:EY5/sK13YxTlBd4libcJYY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82178
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
N:\Git\DSharpPlus\DSharpPlus.CommandsNext\obj\Release\net47\DSharpPlus.CommandsNext.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/DSharpPlus.CommandsNext.xml
- SHA256 b11d46d5a06d21fee69e0f51ba6b5ae7fbf7478ae12ea5fb1cca9a7ebc6453f8
- MD5 4c50f3b79cfd2db77b17da4180c834f0
- SHA1 3d53f7ec434da0eebf73b2ffe77768948207255f
- SHA512 fc6842bc4671a1e87eb0fc87cbfb434b180c45273c9473a5dc88d8f20b61fba10f4cff53a940e046d94f3089eff5f3358a9a56c0ddf6871fce67887f61c215ca
- SSDEEP 768:/GpReTgtyIrM7TEYUfhUeOhQ+eOrDVZJstymHa+nzM8amujTD6j0jErghW+rBo/J:oGTD6oI
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/DSharpPlus.Interactivity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b145b8baa88c1858e32be81ac439cc6852baff784a520345623abaf70f310e7c
- MD5 c71a72037e9e3864409cf7c11a8e0dae
- SHA1 11db0dc975f2e2f7c3c2340efeb690206efd6524
- SHA512 fd59ff5036c51493152c4700ed49c98c6633614b4b3aa91c44b9be3dafc6ec1eafd133b535b262245d5bc464b7482088a5d4c312389f5c3aa9df018287f15b44
- SSDEEP 768:gCLDM0WU1QLLbN+B4dJRxBN/SkYA9x1T2CPiSBUxczMsZv1JzLS1SZu0:rD/ELbgQDS3GTZO+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
N:\Git\DSharpPlus\DSharpPlus.Interactivity\obj\Release\net47\DSharpPlus.Interactivity.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/DSharpPlus.Interactivity.xml
- SHA256 67ffa4def024e8fa53039eee075808e60b34a813774565b5de805c099e96be66
- MD5 3dd73e93919b7c4061db454e7ca11ace
- SHA1 2127297471f62d994a11485995dd11b21031d63d
- SHA512 adb31f0542aa31230d02e92f07016d6a42377b422efc605b4689959a4ead0ff273395beaec17bf354131b99a4a3bd30b82166f102f81a9753db833b09faf2082
- MD5 SHA1 SHA512
DiscordMulty/lib/DSharpPlus.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff7127e0d535b02a768f9722852327608e9a6509ad0a767f071c876f3ac66be6
- MD5 6af3eac8e21dca74885ef66a63645b5c
- SHA1 c869c5a45e5e28740727321d909278ae8d17895f
- SHA512 d2f150e772519a50cb44bcd356c7d93421aa511cde1cd011957ae1fdd33fbd1085a91837eec696f3c08bb2886605ffc43b143904d1ca8162ce1d49d1841e3678
- SSDEEP 6144:K075oJI9epDhnRplRdUwPbe9RDpDDDAgDDk5uXvnA3QNV2q:K07B9e51fPqpDDDAgDD7cQ3r
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
602538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
N:\Git\DSharpPlus\DSharpPlus\obj\Release\net47\DSharpPlus.pdb
mscoree
_CorDllMain
Name
.text
Size
580KB
Virtual Size
580KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/DSharpPlus.xml
- SHA256 26eb61caf4541917f7e11652e2dad52d9e23d4c658565f349157ee87a3f0da46
- MD5 60dd93d4d04688cc23627476434fd534
- SHA1 527409e37ad9a6e56055d1f247e39e19f4f4a602
- SHA512 c2b8ca3afbd791b582ba952ffc2c3b9524b4f09f5192c28d4566adecb64d8c0a721afefb8ae9120243f7dd3bc9444e4ccbe7cef1bce1b1f2ca3575598fd92a30
- SSDEEP 3072:8A4+R+43jF4ivnMHpGzjZ0iNv5rbbSaGYGCnF3N5HjwbBeoCE0Jy3M2H9p14WBo8:8AIFeU
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Discord.REQ.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 61cc7051cd1585a15fe544662d17b50b846fdc0cd21c4eb569649c87687cd45e
- MD5 954db55a18c2e6e01b45668a84418346
- SHA1 d61f6d6139d14290ef6fac35496fcf474887c653
- SHA512 03d6b2f6f6716fdf208145b8a83f04e9bec841d5cbfd8239084296870819e3edac7b8cae25d7d1345bfac18ec4de182871e1f5410a0e3753d5478a5285077f42
- SSDEEP 1536:o4qITAvwWjVxjwYUIUXvir8nh5YKalYGMNpdcZp6XwTO5HVP8GRKhiy6:nAvwWjVx8YUIQRyKalYGMNcj6XwTO5Hj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
80730
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\RYZEN\Desktop\Discordreq\Discord.REQ\obj\Debug\Discord.REQ.pdb
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Figgle.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ba6a8965961f80013100f0aa804565edfec035b141cc4484a60b658a1b858dd9
- MD5 7c89d3e9baf0648fb767a70e0eacc35c
- SHA1 6558308ec9d4be79b001c03030401c0e3c9701bc
- SHA512 00b62dea3d4b4dd60ef307121acf1357e418b3de69b85b8ccb0f74dbb28c357a8dd410020ef325dba5c8bab8c2eac41234686a8e4fdee24063734f3f860ee7d2
- SSDEEP 12288:dwnZ6NqfPaM8r3dFxDxXrxgRX7Jb5oc3Z:SnWqfPaTBDJxgnbJ3Z
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
490402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Figgle/obj/Release/net45/Figgle.pdb
mscoree
_CorDllMain
Name
.text
Size
471KB
Virtual Size
470KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Figgle.xml
- SHA256 5c8fd408076521cf853da48a72f49890e1ccfaef196e84d6c0ab442ab1b28738
- MD5 f2d7cb8e6f3e53384cbf7bdae702aabb
- SHA1 d53d775aaddb9f57c09e4b38481a8e4470e52d12
- SHA512 8b44d4471f37212b7a2b0b78a58809ca7cb1d0b79062de2eb5279c3907f1c6ff11db855956796eef2081794a4c82cf3576ecc4061ef74e3af807b6d121a4799a
- SSDEEP 48:0DMly0xlqCPycDcfQ20SHd0KBUQEZGUtaWLTfa2yGhV4yRar/kqNd+qGa7u:0IlyYlD1caGBUQEZGUtahiheyyv+qbK
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Leaf.xNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de9aea105f31f3541cbc5c460b0160d0689a2872d80748ca1456e6e223f0a4aa
- MD5 ea87f37e78fb9af4bf805f6e958f68f4
- SHA1 89662fed195d7b9d65ab7ba8605a3cd953f2b06a
- SHA512 c56bd03142258c6dcb712d1352d2548a055fbb726ee200949d847cb2d23d9c52442b1435be0df0bf355701a2c1a3c47cd05b96972501f457d2d401501d33d83a
- SSDEEP 3072:gE3OJDHIfFLlL3pPiqhcLS/oZhttaMBM2cid:gHWZxJiqO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
138110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Leaf.xNet.xml
- SHA256 52631a555c91918bf0922474667dc6bb3576f1eaece34480ae8addabcc7d0f08
- MD5 b033607c30c9e7a25ba3e478b0a00e18
- SHA1 f5d51a5a92be9f5dc7b355ce08f6476d57017bb9
- SHA512 44f6641e785ed352fb0b68b82a745a58e59de03513314baaa2b1be3ae2162655747ffb9590ddff4a081df85a325b30670c1351e6f0b238e8eac5fba6e8808d12
- SSDEEP 6144:qad+PiKgyxxE15ywFLOpXDKwEwXAwTeBufMJ3fMVd4PMvMP35M93P:qaoPiKgy+ywFLOt+X+AceB6w3fkd4Ps7
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 075ce79e84041137c78885b3738c1b5a03547d0ae2a79916e844196a9d0ec1db
- MD5 1ee251645b8a54a116d6d06c83a2bd85
- SHA1 5dbf1534ffbff016cc45559eb5eff3dc4252a522
- SHA512 9f67fd0566eac2da4253d08697daab427e4e85780615d940f086a88424dcbb0563abae7e4824088e64ef7024c1bb3bbf324f2d07bc7ba55f79e4af3c9ea88e97
- SSDEEP 384:69P2wZOXm7YJVHTe+0VJI0vrdaVemxO/f7vWeq/WIdHRN7bg30uw7lGsV9W+:u2zmYrHCV9cIL6TbtCSW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2e:cd:4e:28:19:f8:63:82:e2:a7:f6:b1:74:ac:ab:f9:2c:f1:e4:ac:d6:1e:f4:48:7a:70:73:3a:a3:7c:24:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17346
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/net461-Release/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Microsoft.Bcl.AsyncInterfaces.xml
- SHA256 ca53d9b1bbea04c30db4186b015b7c57dce7c5ecdf1cfac9e4afe9ffcf6910f0
- MD5 0737b770ba5d854d4887a8f4d9c8de04
- SHA1 40a8a356d807d71c102c91d68ad1a0ad6e3fdda6
- SHA512 39a48874d547f714922f4864d3a34c842ac0898b09040796a9046182c093e3ca70f1d20f5d616721129e8d7f6a1f1fdeb3c8277c6bb2eb53b6dc8ea5966003c7
- SSDEEP 384:XgOpngSae6jWuTPP/xM2fB8qnmltJ5XZzRzgqW81Fu3DRmfCh7sE+siDBQsFaIs7:0FQa+TDm
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 200aba7859ecfb045d43a8e2bf9abce4c929507364b7714388f59affe708fb06
- MD5 7a9b8793552ce40160a6d273b22f807e
- SHA1 1c302ea0a44f517b97af19252140ec710d5d3bfb
- SHA512 7d5ea03d5815a6f5705875fe6c2d2179c6ee5468d6b19423f04c8982e64226e656bfd7ccaf7a5756c7046d2e6d2c3504190ba642e02bc197d48dad9320fd6bd5
- SSDEEP 768:gQnUmCQ0dQ8d2TN7uxgoXvM4s8w0woFY9SP8:MmC3dQ88Tk+8vM2fBO9I8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
de:1b:a4:fc:28:a2:4e:db:03:2a:96:26:38:30:60:cc:cf:c9:e2:39:c0:e9:df:d3:75:0b:65:36:65:ac:c1:07
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
40790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/net461-Release/Microsoft.Extensions.DependencyInjection.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.Abstractions.xml
- SHA256 974bf11ed06f1c80c4a04095f6287e5f32c23d58fba05df10fe14126a2f043dc
- MD5 c554f7501991b5747634cdbbbdfc580f
- SHA1 724154dc48fa2d45c7c0912fc8056c172d57069f
- SHA512 9051eb45c64d69c42eae2caf14dd90a4d0a8f799b026d9a5c94f705e39d7c03071d69fe2f6f704328e0e0ab1766d365ca6c94246f915c7e81d2f68b057646e5e
- SSDEEP 1536:m1Kv3k4MhLhUJKoGTnHmQUp71V1a1YHR8nH+8r151N1N1uHqM8HHE8n1f101QHzi:m1Kv3k4MhLhUJKoGTnHmQUp71V1a1YHB
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c85cf85783322abea6532c10f63f7dd6745398ff875486ab869ee542ee731fea
- MD5 43976c7dd59919e767527398d3fd7e01
- SHA1 b7913d30630356b814da0533f126d75e64594849
- SHA512 dd643dff991338dc85a0dcf36b1a14271986f11cd810b64a1924c1752f141c296cd33e932d66aace26a04ff4168710a44507f95f54c96e00eaedce70d42b67b3
- SSDEEP 1536:cNOvcLxIFcvKln7wrSWp+1utn7Q3lFkmidDGwlF0TCOjzrT:cD1Is4mSWp+18Q3lFkm4ETCW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c5:52:b8:cc:47:09:2b:24:27:ba:bf:32:65:b7:08:c1:a5:46:b2:6f:5e:46:28:8a:9c:17:81:a6:e3:09:b3:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
72202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/net461-Release/Microsoft.Extensions.DependencyInjection.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Microsoft.Extensions.DependencyInjection.xml
- SHA256 65180283904121ba65edadcbd1b9944b712e089b2d329e102c61303cb6fd277f
- MD5 79bd59951c0b4d240a55bf80dfc5356c
- SHA1 42fdf01d17b03e239c7d06cbc2d993686472100c
- SHA512 511e049b21a11e883eb781097aa312f3ba496e94f22f8af16b2b9f3a13aacb8b617db8f7c2bb85bdd58014a9cd9f1f49269b5c66fb98d7a0f6d4bab36b007674
- SSDEEP 192:hhhf7Cmn/kdqHXTMKvrqYFn+IlnltGc8lH/B1y8FgyRqHsLxL5LEqId7M2mSkSMC:L9tvrqYFn+I1PGc8hB1bFgyUHZyhM
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- MD5 SHA1 SHA512 SSDEEP
Digest
8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
696798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
673KB
Virtual Size
673KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Newtonsoft.Json.xml
- SHA256 e3c9cb0cbf4b3be20b6030f3a4872edd81e042048d2d19732eac3eeb9779dc0b
- MD5 ad1a946cdbe4fc83907cf558fb80a37f
- SHA1 9b6ab559cccce89e989259e356c55be6e370f1db
- SHA512 3bbbd262f3fc669bb0709963788ccca67e17fe28828ff72ca32f1d6d410a3cf76950d126feb39f204163eb5b43b07f54bc1dd4df7f4132933dbb61c054e9c1e0
- SSDEEP 6144:XqqUmk/RikFaG0rH3jGHdl0/IBHNpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DUn
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Polly.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12e15418fd0004426ec4280ad31d269ef926b91d58153eea740ce90d6725574a
- MD5 b33a87495e57b6ee55bf9668a943b465
- SHA1 d7864c77b5356bb23a72c56af2efd2ac47478c5a
- SHA512 c97b305aee8b9f4f7b782b9868f1650b1e56f22b5bb8584f65bc6a310f764c16c9148fe8966a9d3267d5c1f1f9d476f895ca459f1743657dc4541d7a9d6d893e
- SSDEEP 3072:081atC3DkYDfflmPS2h5AQO6wSZqDpPeFx:0zcgYD1kp5AQOzSZqVG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
274158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\polly\src\Polly\obj\Release\net472\Polly.pdb
mscoree
_CorDllMain
Name
.text
Size
260KB
Virtual Size
259KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/Polly.pdb
- SHA256 494de9bc773aa7ed9d0d4b20ef64f67b1218c5ec14dcebbb65a99dca0b70bb5d
- MD5 e55dafbec861207533be7212939bae9e
- SHA1 dc295c803ea98e7a689e0b271de8c2fb608e3cb2
- SHA512 9aebcd2550df6bbe3c9c31003bcbfe9eb7ec396823febdb2dcef825d43974bad430e5f604b8996686ff2e3251c0dc714105c0c1177a9e707f511d5e8e00fb1f8
- SSDEEP 768:QzHpII0hfbVEyXSS+sUv5Wv9vd2l/An2iqO45CoZUd6zHyUqukdCfj+bLk0ut:QzJIdVEyiSWvoFvd6A2W47UKjquLyL9e
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/Polly.xml
- SHA256 4bc37cd4b6801dfff34c48db8c5b63804c8f7955d7a71431c5eba1b01b377a53
- MD5 c41532036d89054858f35555db9d639e
- SHA1 55b332c9dde7b8e01828c23e676a117da7fb5431
- SHA512 a2bc6ea14e4295286c0ec32655718f19fc10c3dbcc1affd6fcbf240a648e587a6cb4149d070f0a6f4b8a50ac5290e94f679bc6300c097c170656d9778a4ce275
- SSDEEP 1536:Yv+HGZw+XfxjpCIk2qw0TanUp+NQq/kTQZLI6ty0Z8a2LFw/FUNFItsYlIvo3Vb1:d0BPMhW27pRFof1uv1KsA1
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8e9ce5d4db1897a939e60860154617300b0dfa4c4d3e10341f21af0de4bbfd5
- MD5 aad3b7c5828e16b4c8071e5ad64b3f7d
- SHA1 a9049b07b9f5c9f4c3da4d4568781ba58564b896
- SHA512 5eb044397db450090c41b20b99385c085f5e08d4983bf2bb34f2bf026f6df747b37839ab309846ad1fc1b76519ef77deb28ce4831f8140c9dcdd8fb1700690fb
- SSDEEP 3072:u80xOpWDN5GznPbTl1kCaHa5OcQ60YEQiZVAaI5SBdGO36m2biZkYAoNliuqxEN1:u85ltaHaIcaCiQ55K7aiZ3AM4ER
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
00:cf:2c:ae:fc:fe:fe:84:33:2d:46:7f:fc:49:4a:06:37:45:82:46:4b:71:6a:82:48:24:8b:4e:1a:33:ff:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
PE Signature issue
Digest
27:65:e1:9e:a2:10:7f:36:c6:f5:ef:04:26:4e:78:39:02:72:da:e2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 19, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
170194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\118\s\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\System.Collections.Immutable.pdb
mscoree
_CorDllMain
Name
.text
Size
158KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/System.Collections.Immutable.xml
- SHA256 72a5651d000ebc2378dbca227967b95a07c9960f8e8c5110ed1dfd83c0db98a4
- MD5 fdfabc69e99e873330f92b87d7bed402
- SHA1 bc1a89483cff449f73f8c8a5332f2dd0fca9d53c
- SHA512 3ff3a16d6cbc374e0767b1b170441e645d30dbb59ad4fbe282c5ccced70724671cd95ac62ed0f1dd6171c227a70b490c1485430aed4184062e1b1ba72362c6ad
- SSDEEP 12288:hhpOAxFR0aZzFW4eMOamaREcoUWs2I/wWx:t
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/System.Interactive.Async.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 30745f077a2370f0695a1e182850b7e1e756d7c8dc708f3be2ddf4e364187d6f
- MD5 dc8ef87098c7d9558bb37d286e845d37
- SHA1 f825c24e9d87333612ed22da77b64555a338e2ec
- SHA512 7ede988f59464e24c6ef9932926c45c5178f013029439f722c0a2c409cba45c8cfc00e5b7d95df8d633a38e22faf445a1730ca93bc2832875b03912b4040c95b
- SSDEEP 3072:cZavR4Kcdd0pH24zQLae8b3w3RdY7Obp8LGfYKssY:6avICHnzQ+e2wh8D
- MD5 SHA1 SHA512 SSDEEP
Digest
0f:a2:2d:27:89:f2:fc:89:2a:ef:7f:d5:42:dd:3a:c0:4f:3b:ea:3f:13:af:d1:d3:05:88:74:8e:40:0c:b2:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Sep 25, 2019
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2018 - Jun 8, 2021
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
204410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Interactive.Async.pdb
mscoree
_CorDllMain
Name
.text
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/System.Interactive.Async.xml
- SHA256 92a20c31ecc9692fbe7eab29eb0424067accb57e461e6e2845b239e81f87611f
- MD5 98bbb5b468bfead95bde8a517284acbf
- SHA1 7c95307f911e6691645eeca2091b6aeeb7f6fddf
- SHA512 169b465e1abf323ecdcb2aa1a0c25104204ccb84369b1b6dc6c517e17f1e75eac0d9a4e241de22699fa32de85c83f414da90bb2f2407cac0d48b7b4b58226d18
- MD5 SHA1 SHA512
DiscordMulty/lib/System.Linq.Async.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cceed131e5b15deec882c87c07fa4928ec88c137818a2ad5f578841c73306635
- MD5 41fc82043ef953cd7b21984c7292caba
- SHA1 5d4327e4245dc9b1eff5478bc4f26b0505efb220
- SHA512 c1d6b6d010c8ef02ed19c1592826bf2315e72a0de3d80d69285c48ccf27b09fd1c4f6f2c8db97c2dd0e34dd31eee0af5317aada3366c764d0eaecfcaa9621378
- SSDEEP 12288:FBUQeHkMGklHbi8uS7nubW/03l3e6S7+O82XXtdrmjVfO:rSSS046Bp3k
- MD5 SHA1 SHA512 SSDEEP
Digest
b4:d9:df:da:84:7a:77:a9:72:03:cc:69:65:86:6b:f4:da:2e:32:0d:6f:a0:bd:ce:f2:bd:71:80:2e:2f:02:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Sep 25, 2019
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2018 - Jun 8, 2021
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
1041430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Linq.Async.pdb
mscoree
_CorDllMain
Name
.text
Size
1009KB
Virtual Size
1009KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/System.Linq.Async.xml
- SHA256 5736b76a3a1b47beea01b80eeacf316c92fbdc7a3736c2b358d388860657c76c
- MD5 df3f263e7a3d05f168608f1ee7945301
- SHA1 2119b4c081134302e838aab7cf0b930200f908d8
- SHA512 d7cdac10996fb38797b750a6e83ada5c0a5bcf92c4fb1f2f9bfd550993ea2156837957bf5c7a7a9bd9ec17a88f5d3298c25e8a4bbced397c5c3eeabfafed2ba7
- SSDEEP 384:VpWdr0VSDvC7B5zuL0yFukPOemQ4t+owteIyxVyd8yPigMiSpng9OVSJdZh5Zy/Z:VlSC8OemQ4t+owteICJBgPhuQE
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/System.Net.Http.Formatting.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b58adc6e23b24cd6615b35e848a002bda053a26d48f9ddafacfc8098e97c49c
- MD5 b676d5e9828d6010339743f236f54ec4
- SHA1 0dff461be2e04ebf6da5f4f2d3eb639cc2e0a8b5
- SHA512 cca0ed47b391b12f44716db1921314e7dcbf2a9f6b0916c78642b4aa814825c570569b103a7f5e298e9c02dbae22e7cb905f08f80f94ad6dcb69fe09085cd8a8
- SSDEEP 3072:BXWun8Jw8fCk/Dvf5eso7DpGbG8pwp2xuRLYs8ZS:BXWu8Jw4L/D3UVVGbGbMS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
50:f7:ba:6f:12:20:c7:5e:88:33:d9:bd:f4:e2:34:26:9a:b1:46:f4:59:52:31:5b:5e:c4:07:b0:0b:ac:b8:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Jul 26, 2019
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
174998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\BuildAgent\work\8f8721ff33b44e63\Tooling\obj\Release\System.Net.Http.Formatting\System.Net.Http.Formatting.pdb
mscoree
_CorDllMain
Name
.text
Size
163KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/System.Net.Http.Formatting.xml
- SHA256 116e0326645eba25c5d946cad87fb5f2c9121a29df63e4d268bf1c110b9256d5
- MD5 635bf4ecdf799fc0d380a5c1f9209e9b
- SHA1 3cfcda05e7cec193c2c48f185f8ae261614a0ea7
- SHA512 5608e5f6bc0e8f172afefd65e22d6dff8d23fbe29c36b0e174a579c24353a96ca698bdd1f52c016559f59fe84cb94b7fe70fb89716633379246dfd494c00bd81
- SSDEEP 3072:2ZplittDQmDJHp31Pwc8D6lt3vkpdskwgkGFuuo05bj:2ZplittDQmDJHp31Pwc8yvkpdskwgkGt
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66409f670315afe8610f17a4d3a1ee52d72b6a46c544cec97544e8385f90ad74
- MD5 da04a75ddc22118ed24e0b53e474805a
- SHA1 2d68c648a6a6371b6046e6c3af09128230e0ad32
- SHA512 26af01ca25e921465f477a0e1499edc9e0ac26c23908e5e9b97d3afd60f3308bfbf2c8ca89ea21878454cd88a1cddd2f2f0172a6e1e87ef33c56cd7a8d16e9c8
- SSDEEP 192:LGLxTyHvc4ROgcxAdWXYWJeaPtWsI9A9GaHnhWgN7aJeWw0fnCsqnajt:LgGLROZAdWXYW8aPcyHRN7WEqn1lx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
10:84:6c:5c:c9:e6:39:56:a6:5f:23:06:01:58:8b:e1:ae:37:c4:fe:71:62:f4:b5:f7:ae:87:52:ec:0c:f4:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
12894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/System.Runtime.CompilerServices.Unsafe.xml
- SHA256 63e32ebb4b26c25f65ddf26b5fa9d7147a9c8b45df355db90ac706afec980036
- MD5 26cd9e7e8a62bb97cace4e4ac16987a0
- SHA1 e705414be72b4866bc3ad02b9529656014c63cb1
- SHA512 aef9cf14e85d954e86b7c9a3ab35398de0e1ee97a6ce383f82bce789dcb2355c8ab781007f88b2d5e8f94d2e4cf940319fe0bf746e937f600f8425ca885973cd
- SSDEEP 384:1/uXuAB8fmAc26yQew6griJriurt8rtTpkE+EDJOgOha/MU:1/A3WfmAc2rQew6griJriurt8rtTpkEX
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/System.Threading.Tasks.Extensions.xml
- SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
- MD5 c89e735fcf37e76e4c3d7903d2111c04
- SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
- SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
- SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/lib/ThreadSafeRandom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bfed4263b06dcebcafe6125cdc0c4d1b81872a950ce2a82b30e7c97d2c0c727d
- MD5 65719fdc03f05e1eb564bcfc180a7454
- SHA1 a0be5c76b0d698187975250ac5e24fd7a482641c
- SHA512 700b3c760e65bec94a76ed70395b99d2af29d9b8062f1190412acc370feb425a7190edc94abaf9e770cafc4a8a61e3ac9ce6031c9fe8f70f32895ae1801f7cc9
- SSDEEP 48:6W+ly1oGkDqoHstVZ4enMVJ+pfz2SUFCC2YLyLi8pvg4yzBilvbSq5Gm:AyjkFstWJ+Vz2++yoQY6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\code\github\mcbits\ThreadSafeRandom\src\ThreadSafeRandom\obj\Release\netstandard2.0\ThreadSafeRandom.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/discord-webhook-client.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 73602f3b4e923cccde0d4553c59c7ec31121e7375476af7f472b711d705102a3
- MD5 089e91ec825b0fb7483b509626fe4298
- SHA1 e0d327e422e7c9ed02c290e2e4e3397f8e318f28
- SHA512 c90cf49943f463dfe9f693297d08c77c9b8425f8b6f0fe847a03f60c50e3b8f0aa04878f4471649406002285dc153a844d7e2dd343aa1ab50b798a8ea61b5b84
- SSDEEP 1536:dvZ0GzS3Q9DSnjsaZY15f8q585ZnT8UX0nsETNSCuO:hZ0GiQ9enHZY15f8q585ZnT8UX0nsETH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\discord-webhook-client\discord-webhook-client\obj\Release\netstandard2.0\discord-webhook-client.pdb
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/notifique-me.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 085241958093895cf4f1da5fbc73d541b7853a8f2dc70e12a7853f3cfb4fa47d
- MD5 845db85a622e9af96ccbbc7a49873a66
- SHA1 7a5cb6a163bbe46c0a95da49b4358156ed6988c4
- SHA512 8d446610e3a05ce0c4ee2a4af02f8f3df42d18586221fe5f5def2baa730f77f200926b5976df5a5acd10cbbcc6a41fda359a14f5357635ec036db9ac94115b3d
- SSDEEP 384:8AzG4PW34hcQ4Tg9999999999999999l999999999999999999999999l999999g:8AzG4wMcQ4c9999999999999999l9994
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\notifique-me-csharp\notifique-me\obj\Release\netstandard2.0\notifique-me.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/webhttp.pif
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d85c666e927477e76b9062b9b813511e1f92834ebafd8bbe9416ecbc4d957ed7
- MD5 950ad9588fbd8382be0f0398dd955ff4
- SHA1 0ee0b67c1bed9bb3e37377e93f2551be04fed5d0
- SHA512 8c5a969c41022121a470f084a9258788303c4ca458b765253106d6d0bf623a7c4dda9197d3013abbb9607c2157a42ef03d99a581a6cebbaf78ae6c61218074f1
- SSDEEP 3072:z0e/b7UYn9HC3c87nKpbGijJjx54cHDbigB:zTbgY9yqbi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
104334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Puddy\source\repos\DRouter\DRouter\obj\Debug\DRouter.pdb
mscoree
_CorExeMain
Name
.text
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/websocket-sharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a76d36ffde540bdc6a94a72c9a7608bf914ba369bbd69910ae1ca57668998485
- MD5 2eab4fc01296ead259540f98bbe5d3b6
- SHA1 d0b9977555eae2d116d103613df8d12a318e8195
- SHA512 0294ee78a7a740b162224675d621feb0b51eaa00c1b53a7736cf29e05df644fe0907b86d04ec72748d63a7c19f5cc031438178efb747ad5ba4fc3855f0a20cc1
- SSDEEP 6144:mHcuPkucru+V1DEXxupwmfiCr8LccDX/X68zqJ8bsKxI5U:mHcumru+HEXxupwZDX/XrqJg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
259610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\edhbu\Downloads\websocket-sharp-master\websocket-sharp-master\websocket-sharp\obj\Debug\websocket-sharp.pdb
mscoree
_CorDllMain
Name
.text
Size
246KB
Virtual Size
245KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/lib/websocket4.pif
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a56af9dc1c2abc88ff5aa2cd72184aa60b6b9d99a19aabd384521dff43da6347
- MD5 0e2a690bf8caef05e041f6e302cbda99
- SHA1 cce7d1a1c39eff1fddc12d4c18219b1ccbfd59ce
- SHA512 7f13f2d9bcf7549a339df14ae85eb61b5bee0b92626f7edf700751de2ebd0d03cc14f973bf92f5f86f5dac14101c1597a3b3901ad91b98918281a196861e8010
- SSDEEP 24576:bz13KZ8CevGD1PV0iJ7HrhHtLGgZf9AoVHClpCmtrQWZrbfXQ8c50QhxpJ89b+:bz13KZ8CTD1PyiBPGgH7HClpLtrQiXBX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1242238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DiscordMulty/translations/qt_ca.qm
- SHA256 0823a46af6af55ae23c28316d62e6b3131d3b2cb8626e42e9fc4e87039ee9502
- MD5 62772a21b7e1aa17e10df024ad8e7b85
- SHA1 650bf97e89e9927a229e7fbc3dc85b436698fd3e
- SHA512 02a714336f9319fb7c490a1aa96bc99b2f60b71882f7d01990162f25d1cd2af0b219951acdc3e4c118ab36d7d40a77709b887d092b9f84baaedf16f725c48aec
- SSDEEP 3072:x1W4X299yU9dgFfzSTGjtrjI5pZeFkF20Yma7z07dmG:DWS29wfWGjtrjI5pcFkvRmG
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_cs.qm
- SHA256 6862ce2bbffe5171dcc67b046e5ae6e2e9984c3e981d64b7fbd4a1fc4763a61e
- MD5 c32e1507b5bc25e5c34c1ec0262141e1
- SHA1 a8664762afb8eb76da0ab7fd51e56a6d74894b47
- SHA512 86205854ffb30b0bc792b33d5d5a6544461ca4e2e08c1df26f1a69f41abe3e273c63857d8bdee82256f5c08494eebeab52652139282ba8ec55f715a95aba31ab
- SSDEEP 3072:hJ8tuYHaCNOaa2GjY9E8OSOQfX/RlwVcF+eNxQPNfQvQ7z3Bf:P6GjfQfXJ4d
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_de.qm
- SHA256 cd711e09012f37003af75e982e2e40df14445aca2800a3702a18612074ad660b
- MD5 91899280efb4496c8ac0a004cd1469e2
- SHA1 aa9a223cedc82f3ce8e9080bd6273062a9b56958
- SHA512 5fd1c76157a0abc7e477c26a52d3e6a037a36b31a91e0958163a3b2337214a4d018b8880ea6f763c3812a37bc08917f0d9ea947f988dfec88720146e5783f251
- SSDEEP 3072:7tsIhYtpXYj0SNsgNS55pOW2p4N29Tt1VwOdcstRe7XPYXCZPbUUYq/y5KfKdLkS:5IL5pz218NW
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_en.qm
- SHA256 307cef95dd5b36ff215055d427e1885b7fc3650c9224cf76d63056545996ff60
- MD5 4aef4415f2e976b2cc6f24b877804a57
- SHA1 2aa2d42c51f9cf024e3777f0dde4270388fd22ae
- SHA512 c75f089a95107997b0a786e7c1191e48ec7a69aefff97daf37783791d943c612b7c1b43bcc2cacdfd15e79382e0f314c88817c7dd320f8028af3420452ce3a1c
- MD5 SHA1 SHA512
DiscordMulty/translations/qt_fi.qm
- SHA256 a620e2980667c6083574a7f858ca8c5b486fd760e30266072cb55e69439e8174
- MD5 92ac874c000583d87b0ffb3d7887e947
- SHA1 c6bc2cacfc9dbf4058d97476db3e3d976d75fa7d
- SHA512 ad8152ffb1a089b49227d6d794175d35281d88e1265e11631d909b5c01a5c8fc968d317760fc7840407ace6df887dbb0a611bacf3a221a5d8c3785055bfec2c3
- SSDEEP 3072:nAXGEkYSYl87LXnbgTmP05p0TfoIlBAciH5xDNCdRjA2YMlqA:nAXGWuy5piosUn2YNA
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_fr.qm
- SHA256 7d40eaa90d9094ce548a41482b496ec494396a82361d4f3d031756118ed042d2
- MD5 37f2ac5cf8ea04844351ae0bcf8420fb
- SHA1 df28a556f02e1da470df5dfaa5e47e36a7bed48e
- SHA512 debdb2ab4ce27f62888ad48bd2f2468e576bf68b19c4c08940049ad32a21fee33b2bbc8e3b9c31d3fbffb034aa802a5937008a26da703a3f316620b726b6071f
- SSDEEP 1536:zLZ1w8McowCppcPwL5pYFw+G00QsbLckCiWxvq+sjs06oFm:z91wxcowspc4L5pUw+cz39CiQ7tloFm
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_he.qm
- SHA256 d7836f59ef79314db1f4ab6b76abc283ab2b5d4942d2bc129d620e913e294153
- MD5 6f1b2e6e4e6898df7aba717c5eca7fbf
- SHA1 85ccd56dbe7fd8a27f5ede973a4ee9fa5628337c
- SHA512 97d8fb31f5b63cd225e9af68b47d4bcde26a9e42ae5cd950cd24d9ae5261ef692b7f195e1bce9dc1531653964f7036c01062d64af9b24cd26773b904da5a8121
- SSDEEP 3072:SL18FHn3iVKqr5p9ejd/zbDSLzdetY2ZISfCPS:SmXc1r5pUjdizUtYAISfCPS
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_hu.qm
- SHA256 d3c07628b68a39691b1ea9175a9cd151489cbc731a57a66c865d62167a5ec0f2
- MD5 ed4dc26eaa9ce4224010eaff7991774b
- SHA1 47e9e808fcb213bd6cce3d9366c650634649bb3b
- SHA512 8124a2930760c18ddf35131d7b20e6d6c0aca577a831a15cb63d7d417d6c6e351173939ccb8da946a3e1141029d4298f7c138b7b269e1cd9afad1b49a5bd25e8
- SSDEEP 1536:S8yg1l6WRThuJ2ibrSekfsximB3G6iaNsQNhoPb8N73UjiCvF4xYVkaaAYXGui58:SLg1l6W1huJ2ibrSekfsxJB3G6iaNsax
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_it.qm
- SHA256 59ae1b0ba84319bb0dae700b97bea3506521459928253409233491458d0dd80d
- MD5 27fd50befb67ab6a1895351458aec38b
- SHA1 117df6beb337c385b1c17ad4451f31713edf418e
- SHA512 db43359b61194d7e3e24874595f9a2916f5505c12a7049c6c42085a24bf7bfcf6d169b00f7352ec60d1a0cada7d17b01c02cd496371c813548e58080683e81b1
- SSDEEP 3072:FcDmORle3rO4BKsf0XBObVVg6EKRtuDkM:FcSaqRVbVAwM
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_ja.qm
- SHA256 f0ee03c9936b459cc9bdf184df9b7efad98d40ab7b99e89166a42e019a0ec0ea
- MD5 1c0ab06b3388e79a2206cbfd28e374a2
- SHA1 fb94c71ee606c6cf5181840b4a6122eefd93770b
- SHA512 1e90991d22b0c34e7947edbc5864f662ad01b2da7888fbe3a6e814607ea5abb6fc0b34a7ee0accede471d7442755f00fe99c4a8b029244bf034189cd00d74d07
- SSDEEP 1536:O8YYSCjKBJ26c1Z7f25pVmuLXpxfqt7FEUWNrfQje9kWI23pKXvx:ZYuKBJ01Z7u5pQuLbESUWNzAAI23pKfx
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_ko.qm
- SHA256 0572429dc3c7f4055343a3f4e28463c505df1c97211d1fb6a7430c145b62a9f2
- MD5 db5873e7ce145306a188a90f60bddc84
- SHA1 2842bd0e430c1df9297a6e5cda405cc5f6e49403
- SHA512 ebc979a67ee3e469bc5eedd4fe22b7d9d6b385f9d9ede4ec62e31cefaf7136973ef2c3444ea55ae32fa367fc1bbfa0898daf138c714c86abc11ad5429d3fe12b
- SSDEEP 1536:rfE8mQh7Fq0THs0zhA0tkJY9iNrjK1gqrd2MD0zp3TXGf0MwrcZEr2yp:rfE8m2RqL056JY9iNrjigqxtSpj2o6yp
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_lv.qm
- SHA256 257d1201da42c19c34ea0a5f0dfbba3d438fc273a7d5b5b97cd13196e963ed28
- MD5 788862615b8fb13b52e4a80a8c54b3bf
- SHA1 802bd10e82bdeec9596f31464c73df371a5894ca
- SHA512 ea2d877689ec809bcb27e12731daa51236264da10775e528fe259f35eef8e7d84c542c25153e39997a1c7faa8d849393e3ecf48ed67890a8d5fd4d2db7cdb1cf
- SSDEEP 3072:H5pmbKIhooMbGe91MrjOhmGzP6LJbWz5XIxELpU6:HObeqrjPGzeJyJLy6
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_ru.qm
- SHA256 d53ae70615ad64d5f08e2dd322462aec33a3d3765f15ff0339079424fa893aa3
- MD5 9ff2dec30e74ba0766e1811ea9b99d6f
- SHA1 6bc7a6eaad19f828535f05cc85eab8301ae673df
- SHA512 2049b1ab595ed1b75a82e1c8a88395672476c535b93568746fc86c01c3aab18bd9ad310f2b0efc96818f2755746ce493cf7172b38d8868b134cf2eb7f3460bf1
- SSDEEP 1536:PlQKS4xYac4Z7+YkGgdvRGULvKMLlxnrp5pwN/x23ZL6L/8Z2Wv27x/Hk5zrdofV:P2i3qbvRFb5pKIYZKokWrzwe
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_sk.qm
- SHA256 0144819728779d0861859f5451cd5588b2f2def611edeb77b38655d62bdbdf86
- MD5 fed9c191096819dd208e0e3e2d051170
- SHA1 996ba0a7a6c3c55ae7232bd8791d72472a85ca84
- SHA512 52978a693a1c54a7268bff1682af37811399396004b98916f8eab8bd40eb335c2c6dd6c084687840a8bf20fb6f74b481bdc453d78e6d98be47efd0f70e2dde3c
- SSDEEP 3072:CoXDuC1u/2lUBGjJirE5tsd/aev1GcfOdvhw:DucMGjH5t/m
- MD5 SHA1 SHA512 SSDEEP
DiscordMulty/translations/qt_uk.qm
- SHA256 a633805fec82639230c2ac513dd7447e2ee10089f5ea1d281d12b4ee97a504c3
- MD5 b8113667d2222f6a705d744718407fcb
- SHA1 1c950c75e3e8f5face6b09cf92c94aa493b788c5
- SHA512 9714100c83cf1dd62c4699c5d33fc9d895fcff8a9f726b3b4c7a5814fa4daae1cbb0ba5219f85b8a097ca57c5c0448d2c637379a6c4092df1358fb92b10a0020
- SSDEEP 1536:RXIdV5VdMUDPTzdAhpQgO5pFZHvJllEnhmdK4ICj/dnPJX/imfb1jhvv3BxT8up8:RGVfzDPTzaw5pXvJ8hQPdlvj3p8
- MD5 SHA1 SHA512 SSDEEP