Release.zip
- SHA256 ff0593ebf0842e4e36449b50d3debfa321152ae3169eb24be52afb5772495577
Overview
overview
8Static
static
3BetterFold...er.dll
windows10-2004-x64
1CeleryApp.exe
windows10-2004-x64
1CeleryIn.dll
windows10-2004-x64
1CeleryInject.exe
windows10-2004-x64
8Costura.dll
windows10-2004-x64
1Dragablz.dll
windows10-2004-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...ns.dll
windows10-2004-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....pf.dll
windows10-2004-x64
1Microsoft....rs.dll
windows10-2004-x64
1System.Dia...ce.dll
windows10-2004-x64
1bin/Monaco/index.html
windows10-2004-x64
3bin/Monaco...ain.js
windows10-2004-x64
3bin/Monaco...tes.js
windows10-2004-x64
3bin/Monaco...ase.js
windows10-2004-x64
3bin/Monaco...ses.js
windows10-2004-x64
3bin/Monaco...del.js
windows10-2004-x64
3bin/Monaco...num.js
windows10-2004-x64
3bin/Monaco...tem.js
windows10-2004-x64
3bin/Monaco...ums.js
windows10-2004-x64
3bin/Monaco...nce.js
windows10-2004-x64
3bin/Monaco...del.js
windows10-2004-x64
3bin/Monaco...nal.js
windows10-2004-x64
3bin/Monaco...der.js
windows10-2004-x64
3bin/Monaco...ace.js
windows10-2004-x64
3bin/Monaco...rnl.js
windows10-2004-x64
3bin/Monaco...ons.js
windows10-2004-x64
3bin/Monaco...als.js
windows10-2004-x64
3bin/Monaco...rds.js
windows10-2004-x64
3bin/Monaco...ing.js
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BetterFolderBrowser.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CeleryApp.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
CeleryIn.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
CeleryInject.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
23 signatures
150 seconds
Behavioral task
behavioral5
Sample
Costura.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Dragablz.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
MaterialDesignColors.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
MaterialDesignExtensions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
System.Diagnostics.DiagnosticSource.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
bin/Monaco/index.html
Resource
win10v2004-20240802-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral15
Sample
bin/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/base.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/functions.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/globals.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/keywords.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Release.zip
- Size 9.1MB
- Sample240809-abhm2swglc
- SHA256 ff0593ebf0842e4e36449b50d3debfa321152ae3169eb24be52afb5772495577
- MD5 dc4065302945db51dece3631e8f1132c
- SHA1 84cdaa6eb661eac4ae0782209ebb09c3ac938b5e
- SHA512 e787e4e91ff7e7f56d29fd147d91457ac163cdb0651b37b7d870dbb4784fdd325b538fed448bbac049f76a06e54af53798cd00607c332cec2611df7270d2e3d9
- SSDEEP 196608:Jy/QEcnNVmUhiF5sBio1UOQi9dq9ogl8fRRfV1WUpOjkDk:n1M5sb6ekSglMRRt1WUpOjCk
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/BetterFolderBrowser.dll unpack001/CeleryApp.exe unpack001/CeleryIn.bin unpack001/CeleryInject.exe unpack001/Costura.dll unpack001/Dragablz.dll unpack001/MaterialDesignColors.dll unpack001/MaterialDesignExtensions.dll
File Explorer
-
Release.zip.zip 9.1MB
-
BetterFolderBrowser.dll.dll 12KB
-
CeleryApp.exe.exe 8.8MB
-
CeleryIn.bin.dll 44KB
-
CeleryInject.exe.exe 5.0MB
-
CeleryLauncher.runtimeconfig.json372B
-
CeleryLogo.ico4KB
-
CeleryLogo.png.png 14KB
-
CeleryScript.bin218KB
-
Costura.dll.dll 4KB
-
Dragablz.dll.dll 233KB
-
MaterialDesignColors.dll.dll 295KB
-
MaterialDesignExtensions.dll.dll 349KB
-
Microsoft.Web.WebView2.Core.dll.dll 445KB
-
Microsoft.Web.WebView2.WinForms.dll.dll 37KB
-
Microsoft.Web.WebView2.Wpf.dll.dll 43KB
-
Microsoft.Xaml.Behaviors.dll.dll 141KB
-
System.Diagnostics.DiagnosticSource.dll.dll 34KB
-
bin/Monaco/index.html.js 13KB
-
bin/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf69KB
-
bin/Monaco/vs/base/worker/workerMain.js.js 174KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes.js.js 2KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/base.js521B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes.js33KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js11KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js594B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js777KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js16KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js7KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js6KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js12KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js24KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/functions.js10KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/globals.js854B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/keywords.js428B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Krnl.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js11KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/math.js12KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/table.js5KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/task.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/modules-table.js5KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/modules.js516B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DataModelServices.js47KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DrawingTypes.js4KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/params/InstanceClasses.js72KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/snippets.js1KB
-
bin/Monaco/vs/basic-languages/lua/lua.js.js 24KB
-
bin/Monaco/vs/basic-languages/lua/snippets.js12KB
-
bin/Monaco/vs/basic-languages/monaco.contribution.js.js 28KB
-
bin/Monaco/vs/editor/editor.main.css68KB
-
bin/Monaco/vs/editor/editor.main.js.js 2.4MB
-
bin/Monaco/vs/editor/editor.main.nls.de.js76KB
-
bin/Monaco/vs/editor/editor.main.nls.es.js76KB
-
bin/Monaco/vs/editor/editor.main.nls.fr.js83KB
-
bin/Monaco/vs/editor/editor.main.nls.it.js78KB
-
bin/Monaco/vs/editor/editor.main.nls.ja.js157KB
-
bin/Monaco/vs/editor/editor.main.nls.js61KB
-
bin/Monaco/vs/editor/editor.main.nls.ko.js130KB
-
bin/Monaco/vs/editor/editor.main.nls.ru.js325KB
-
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js100KB
-
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js102KB
-
bin/Monaco/vs/loader.js.js 31KB
-
runtimes/win-arm64/native/WebView2Loader.dll132KB
-
runtimes/win-x64/native/WebView2Loader.dll.dll 156KB
-
runtimes/win-x86/native/WebView2Loader.dll.dll 112KB
-
settings65B
BetterFolderBrowser.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5334c9c4eb567a89e4644df868d7fb6e242a3ea422b2ce9283843970ec756372
- MD5 fff67e7d52b58a11d456a1d5cd2ba294
- SHA1 6dea84a0a060c39c93b1e3f404270c039d3dbfdd
- SHA512 fc8cc5fbc624559e03e70c48bd4e6e4595b1784fdf2c258b33ddb3410bdd93dcf26f3b5db4e4d0d8f133e8df93fe95ab93a703efa92a0a4133f57f48ebd6ea74
- SSDEEP 192:2ZPVABalnP/VYkWdcHIp3RgzK/RGLHdnKuWGIBC0p++kVX805N9:2ABk1W4Ip3ez4RoF2+bR805N9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\VitalRay\source\repos\libraries\BetterFolderBrowser\BetterFolderBrowser\obj\Debug\BetterFolderBrowser.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CeleryApp.exe
- SHA256 6a25cc6c05e54ca56e8b51d2b2bd8b9a17a96ecb1d1f6d4442d36378dc809ed1
- MD5 74c366b46a85acac6c83e9671e64dda7
- SHA1 dc9a7b4cc7511b701401aa86e0106d3495e3a0fe
- SHA512 e0df64a74c3c9e1c36f5957d346d961cc92741b1803e05d41454dde4371a0e9420f9e79163bed9fe2d8b588b9da6f2faaa08003ca50be37a6425a8320acd15cb
- SSDEEP 98304:wEgLIRfyC7egWJ3iJzdjf4fwraOWcD9XdMPABIw/t6KHDicVwzUs7:wEguhegD4fJOWs9XNBZ16M2cuU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Javan\source\repos\CeleryApp\CeleryApp\CeleryApp\obj\x64\Release\CeleryApp.pdb
Name
.text
Size
8.7MB
Virtual Size
8.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
CeleryIn.bin
- IMPHASH 57127fa98e84d836ff1e07fcec0c9958
- SHA256 eab4356a735f604b31f493f2c9f0f98448ebc2671825e348145609fed6e927e4
- MD5 2682352886b9de7763dd637ff940ef97
- SHA1 6df1516ed9f1084bd0e7b217996353afa3babb98
- SHA512 0799a9d1126b444992638bb16e62726d7d49753d74845114f0076fb5d1e7159c83d0f7e62a1a80a9b034a59529ef73b0fd7acfdccc754cc9c3cfd1984ae4ec3c
- SSDEEP 384:rVdzew6q0MEe7Tc8cZO1D9WDPAULcRUSoTYVJa51xoVMmA2QdwB5bh1r:5YiXFcZkRcZJTYVJanUNA2jj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
34624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcessHeaps
HeapWalk
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
api-ms-win-crt-string-l1-1-0
strlen
tolower
api-ms-win-crt-convert-l1-1-0
_ui64toa_s
_itoa
_gcvt_s
_itoa_s
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_onexit_table
celerycmd
icallback
init
test
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31935,
count=12, id=261, version=31935,
count=7, id=260, version=31935,
count=3, id=259, version=31935,
count=3, id=257, version=30795,
count=41, id=1, productName=Unmarked objects,
count=8, id=261, version=32217,
count=1, id=256, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
CeleryInject.exe
- IMPHASH 314d948163c00dd9f09575a84339c9a6
- SHA256 c5448339124931a267dc09f9ccf41878ef64e0e9a2553a220b2cb950a7aa8f56
- MD5 6b11846ac7d1cdfc7bdfb9e27210ac7f
- SHA1 ec2056b1a47b60a30ffd16313c07bc7e8e28bf64
- SHA512 dbb516ed47772151d5c3b3147a419f9157a22f9f6853c9a77db4713f06f7d02eed2295a9c522721ca3d5b256972089dfb76d62d5b42bbc271fef9d22bae76264
- SSDEEP 49152:3esFEyhNi5PyeVuOvW/eDGjyYl2g53PaiTs9dnNdnndn+dnc81u:uzVP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3289492
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Javan\Desktop\Projects\Release\CeleryInject.pdb
kernel32
ResumeThread
GetThreadContext
OpenProcess
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcmpiW
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
SetConsoleTitleA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
K32EnumProcesses
K32EnumProcessModules
K32GetModuleBaseNameW
K32GetModuleFileNameExW
K32QueryWorkingSetEx
GetCurrentProcess
SuspendThread
VirtualProtect
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualQueryEx
Process32FirstW
Process32NextW
FindClose
GetLocaleInfoEx
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetThreadPriority
OpenThread
GetCurrentProcessId
GetLastError
CloseHandle
GetTempPathW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
lstrlenA
LocalFree
Sleep
EnterCriticalSection
WideCharToMultiByte
CreateFileW
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
FormatMessageA
user32
mouse_event
MapVirtualKeyA
keybd_event
EmptyClipboard
CloseClipboard
SetCursorPos
GetCursorPos
FindWindowW
GetWindowRect
GetClipboardData
SetClipboardData
OpenClipboard
GetForegroundWindow
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_S3AEAPEA_S@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_SDU_Mbstatet@@@std@@MEAA@XZ
?out@?$codecvt@_UDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_U1AEAPEB_UPEAD3AEAPEAD@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_UDU_Mbstatet@@@std@@MEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?rdstate@ios_base@std@@QEBAHXZ
?fail@ios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEAPEA_W0PEAH001@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Xbad_function_call@std@@YAXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Throw_Cpp_error@std@@YAXH@Z
msvcp140_codecvt_ids
?id@?$codecvt@_UDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A
urlmon
URLOpenBlockingStreamA
ws2_32
htons
connect
closesocket
inet_addr
recv
WSACleanup
WSAStartup
gethostbyname
gethostbyaddr
socket
send
ntdll
NtQueryInformationProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
shlwapi
StrCmpW
PathRemoveFileSpecW
vcruntime140
memset
__current_exception_context
__current_exception
__C_specific_handler
strchr
_purecall
memcmp
strstr
memmove
memchr
_CxxThrowException
__std_exception_destroy
memcpy
__std_exception_copy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_c_exit
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_errno
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
exit
system
__p___argv
_beginthreadex
_register_thread_local_exe_atexit_callback
api-ms-win-crt-string-l1-1-0
strncmp
tolower
isalpha
isalnum
strncpy
toupper
iscntrl
isgraph
ispunct
isxdigit
isdigit
islower
isupper
strpbrk
strncat
isspace
strspn
strnlen
strcspn
api-ms-win-crt-heap-l1-1-0
_callnewh
realloc
_aligned_free
_set_new_mode
malloc
free
_aligned_malloc
api-ms-win-crt-stdio-l1-1-0
fclose
fputwc
_get_stream_buffer_pointers
fflush
fgetc
__stdio_common_vsnprintf_s
fgetpos
_set_fmode
fputc
fread
fsetpos
_fseeki64
fwrite
setvbuf
__p__commode
__stdio_common_vfwprintf
__acrt_iob_func
ungetc
__stdio_common_vfprintf
_wfopen
__stdio_common_vsprintf
ungetwc
__stdio_common_vsprintf_s
fgetwc
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-convert-l1-1-0
strtoul
strtoull
atoi
strtod
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wrmdir
_wmkdir
_wstat64
_lock_file
_waccess_s
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_localtime64_s
_time64
strftime
_difftime64
clock
api-ms-win-crt-math-l1-1-0
fmod
log
log10
log2
pow
sin
sinh
sqrt
tan
cosh
atan2
atan
frexp
modf
cos
floorf
asin
acos
round
_dclass
ldexp
exp
tanh
floor
_dsign
ceil
ceilf
__setusermatherr
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
106KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
241KB
Virtual Size
241KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=253, version=31935,
count=10, id=260, version=31935,
count=4, id=259, version=31935,
count=36, id=261, version=31935,
count=8, id=257, version=31935,
count=1, id=262, version=30795,
count=19, id=257, version=30795,
count=508, id=1, productName=Unmarked objects,
count=135, id=261, version=32217,
count=52, id=260, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
CeleryLauncher.runtimeconfig.json
- SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
- MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
- SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
- SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998
- MD5 SHA1 SHA512
CeleryLogo.ico
- SHA256 eabe2efbb4f11ff62c0fd16f8aa5e932a52d8f0603226b8b8320e00335bda70b
- MD5 3246befa41923904f2963da9b19c2dd7
- SHA1 fdfec504286148eb258e87298df30fac0e1cb606
- SHA512 7e234fb730c67e233cac775feb793376fcd9a9548025867ffbf9420398fccc72287bc39162cdacfba6b43613fa54695a1c0b8a14b45f6a381959d3e4cb728185
- SSDEEP 48:4MR4sNF78zZHhU2fjhzoivJxBx9thQPvsFwz10C6u4N2y+AIXanZ2xuxh+7P:HmM8/WijFtYaQ0juXj/y56P
- MD5 SHA1 SHA512 SSDEEP
CeleryLogo.png
- SHA256 bdaaba382b0884c9e3416fd5d0d3d6024e3a8f8ecc89e218aa36bc914ebe9114
- MD5 bac9347d28295cb29b8be12e770fadec
- SHA1 b2c6c46fea41e95e983dde4c4a215ea9ed2f447c
- SHA512 2726fe9f8d6b406aac086ac0c38c613413d648f0501fcaf14a9d97d8804e0089ac38f7c53b5077c287ddcd71043c4b2fb9fd8266c27bb0b51bccdcf7f9e495fc
- SSDEEP 384:Z44yCiwSneFfrIOKB2nFg7+c52PkjTtKsDgtE8NIHRAe:x6Cf/KUF45PjEsS6ye
- MD5 SHA1 SHA512 SSDEEP
CeleryScript.bin
- SHA256 77aff735ccce303e0f5f1a38d8336785b67e330ace99e582d0dbdbe96ccd3e18
- MD5 ec0c743eeba2d92454ad10329733310c
- SHA1 910fba6b4d291f55ee3ee7c58fd77f5707e26956
- SHA512 34c630c03a09212b83ce39a2530402213e0cf7b6aa4e396dfe698055ce5a4b5379ba6fc399abf0f2972ae6cac7ef0402eeeaffcd4529989e2c535dece7d1839a
- SSDEEP 1536:LIwV7Al+RN0OzMa7Ja015BDEDD/p3sPH/tUZN7RFw7SQi6DU8S+RpS/P1a+pBg6s:0wODDR3sP1GN7RFw73Scwda+pB1dK
- MD5 SHA1 SHA512 SSDEEP
Costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\CI_WS\Ws\198629\Source\Costura_Fody\src\Costura\obj\Release\netstandard1.0\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Dragablz.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c5724efe19f5945143626a8270c9c3a188d4886eeaca083c57c742a985c7338
- MD5 5a9583a7bed76b2e94091f9b74716f68
- SHA1 60552dc4ed629b32a7c0e7b31406a21829bdc38e
- SHA512 8ab70fd60a27a80e43a270a401e8772833ad0a11ade1ea13483b37b1a02dbb70679bbe200fceca632ee1ba8df66a95a51a2fe65671eb3ae596682d3e1ee1c0d5
- SSDEEP 6144:fTuK/5J3BPYcKHJv8ahfgfkMMafGfCfDf2fE:fKKhP+Dhfgf7fGfCfDf2f
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
245122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdb
mscoree
_CorDllMain
Name
.text
Size
231KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MaterialDesignColors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1966082c8efa5ecddac7fd8b3e3b86a63599602d18bdff17e7c366d49603aaf0
- MD5 d2207fccbdd6caa91c43776559ce401f
- SHA1 4f78f282a238b21ad1f995f154d624865d08a38a
- SHA512 d4984e3a6d82e7ebe11c2f7ea07092e60ef1396849921c6c0a463dd9b38836c5f6799e79f932bddc62b89d7a9896b5e5ba931c3c8cbfedff51076a41796a8c0e
- SSDEEP 1536:1r1In+fq1fDfDemxD0EsXpGX0EOAyzU7fKoVxbzQXT:B1WB1PerAjOAL7fKoVxb2T
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
307850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignColors.Wpf\obj\Release\net462\MaterialDesignColors.pdb
mscoree
_CorDllMain
Name
.text
Size
293KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MaterialDesignExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5b93560fa74b9a05959aae5116da59495d36782d2e17e45f0efcc06ad36ed6a
- MD5 6da7ae89f1eac96f143dc5200031d8b8
- SHA1 d9dc3936bc9a288a727cb2295c3d05899adcc9c8
- SHA512 3929f7092a5acb5ae3333e7e0a9ac2a403b78c8c8ad35a17ece25e6688a61a0f7e4b701691b02ad2941c6e15d2262c6f8ae76413af93dc92aa422e1738147e94
- SSDEEP 6144:OM2EyV6zxDNFOzaFkpXeRk7ecDfE0MHOZB0zSvo1UvEGK262:nGVcxHOzxpuRk7emfE0MHOZB0zSvo1UJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
362382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\GitRepositories\MaterialDesignExtensions\MaterialDesignExtensions\obj\Release\net45\MaterialDesignExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
346KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c2441011ec290b3408391f32072379f677ab3fa4507c4304167cd82fad6593c1
- MD5 c4b4a5f4f28d47239eb4e37cb3cc8046
- SHA1 ed86941cf065f91758d536d8e13cc2542cc38922
- SHA512 440ee33d5a830d9c59d96367f2a43d4a4113f6fe0924a691e682a2e9251a8615e52177dcb9af225dba538a8a3893ac85be79e9c1aa687034e3da6c95191dc645
- SSDEEP 12288:EB7Md7DkbrB3kPo+iKvRFNLe1+imQ9pRFZNIEJdIElxPrEIvLcglxMwCepM1STUH:EeFP7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1f:1f:17:de:d7:95:c6:e3:08:fd:e0:1a:bb:77:cf:e8:6c:71:9c:9c:62:31:6d:77:97:3e:25:c9:fa:17:26:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
451826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
433KB
Virtual Size
433KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c9eeff2dd13109f41447a92763d31aaa07369c58a570c18bbb851824a77da98a
- MD5 e6f424ee6036ee7d58283780b705be8c
- SHA1 c17fc397711fb2e0c400007620c76e70c956dd9c
- SHA512 1d255265115a4a2238a21e3ade35101babcbf9d5de58521365666b9564681119c4b7f20ed6a6c16fb6120ab19106fa40f25421da938b7fee7b8a5e7758f2c22f
- SSDEEP 768:ejIHFTA42CL9tcZDgcEST3p4Jjrjh2jJFSgyauYv1JKia5/Zi/WGQKVu6bL7RSOX:AIS3C5tcZDgcEST3p4JjrjaJFSgyau0H
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
59:b3:1e:c6:dd:6e:ad:bf:1a:7d:64:d2:5d:36:bc:61:e3:69:f3:e1:ae:8d:14:9f:35:31:d8:71:2e:1f:cd:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
33338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15bcd610a80632ef59d911a8447b11127cdeafbf147c844f1b740735efdf338a
- MD5 0241e0a42b292e0c9b585470c613ec78
- SHA1 74e4ab7e37bff177a394617923baddfcf087c0e1
- SHA512 bd083301c6f93a1852c76686797919787f439c65ea11d430701257fa4d3791a4eff892b6ceea1c534d832bfbc0b0ecca3f671e3a9c50f34089f919e3756882f0
- SSDEEP 768:k2TI5VoCjJ4Jd7U2zkQ+Z8cDP/ryEH0yBy4JjrD1h2jVh3URGvkz7FKKa5/Bi/xm:VE5tjJ4Y2zf+Z8cDP/ryEH0yBy4JjrDC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
46:c3:c1:88:64:a8:85:3c:f4:fd:38:e5:3b:98:53:16:ce:3b:3e:bb:43:01:12:1a:fc:da:5b:55:2b:a7:85:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
39998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Xaml.Behaviors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b864da9d88414877cea9b1a016146265a5fb9d0e12f4dbb1dccc0cc998119a54
- MD5 ec5a1abee150abe698689211b07cd1ec
- SHA1 affc3cb47da8fe76986d271cdc3e7ea345cc04e5
- SHA512 a2b55b4ffc3f11546ed8d3457e98b986c089e25229bd687da35d45d63e4860722e8b13826d3a3daa1be843cf3a4ae3da4cf9b6fdcb5d1a4948648537e683789f
- SSDEEP 3072:UAyazS96IT0O6gAf+LwCMe1u051dXcr9/soMEs5r/j9:tyhYIT0O65cwCMyE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
02:f6:ad:1a:99:d8:c9:42:80:8f:cc:44:ff:d9:72:82:6f:4d:5c:df:3a:cb:db:82:b0:aa:c6:8f:6d:b7:ee:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
141614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net45\Microsoft.Xaml.Behaviors.pdb
mscoree
_CorDllMain
Name
.text
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.DiagnosticSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d6:fb:4d:67:72:14:08:d2:75:46:a0:06:cb:be:f9:d3:5f:db:20:bd:97:db:cd:de:3c:cd:a0:78:2f:b1:93:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
PE Signature issue
Digest
bc:c6:7a:ba:4c:c6:19:72:95:75:c0:52:c5:b2:9c:4b:5f:0f:69:2e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c9:64:4d:16:db:1a:7d:b3:15:00:00:00:00:00:c9
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
24690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Diagnostics.DiagnosticSource\System.Diagnostics.DiagnosticSource.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Monaco/index.html
- SHA256 3818906ed429acd27aabad7ec8771893d60658ea31b8d0c92418b96de8ee94e6
- MD5 8132342ce4b039603cbb3b1a32ab859b
- SHA1 66c46050a6e5b08758c00455ae26a6c66e94ce4c
- SHA512 44d93118187e703af1fc1627de7e97c39072e666c9086b1b4c00a7eadce1913c84dc97e8f80e2b514154ef66b23baddbfd71a2faa250735ddf4d2bc12709cef4
- SSDEEP 192:oL3bXRggAbYm/9mv2Oxr09VpDwFgBsK7u24FzTkcmc/VT+9taAc4dReigXN:2RggAbYmbD9V9wFgBs+SFN
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf
- SHA256 4946e7465803ccab735800d9236f188c2200d28b395e77727e9aa0baa443b87a
- MD5 a1cef3d530e1adb0f52b2f62994a2aca
- SHA1 074579894ad91265941fbce44d2b41c863797cf6
- SHA512 423656417849bddd0f7bf01138d9de54b334fc0ca64f28c5d679f66e38f5bc3c601a0faa166734cde4c2ec1e56983c36ceabdb3265c414fc40a7ee3798ede52d
- SSDEEP 1536:ex5Ez/D8G5dlHwkP/7BzekxVL7/b/SS0/hczE00phJgZExGk:ex5Ez/D84HwKxemVHbKSm+zEXHJMrk
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/base/worker/workerMain.js
- SHA256 19b566655d73370a820a7d6fffe7af03dba3af4997016c0983be5bd188603ec2
- MD5 9ce9e46b6d66d8b2dbcabba577cad2ed
- SHA1 397b0e9e7b2bee37a8444e84bb9788a0bdcb023e
- SHA512 f322ea669fa81397066edef062721ae3dd515b3d61c4ad7bef0db0eb3a53f056da298fd4f761bd3e5d613e6f5803a7c35ed056085ac3b97e06c7bfd47fffad49
- SSDEEP 1536:mi5eQeCEwCP1m9JXKmA1xKzyOQJf9X2K7eM9bWXsUK5QSkSoIMQwr+ZjtQYyeTMO:mHTdkKmA1yyOQJl2K7ns6dZ/RVaNzY
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes.js
- SHA256 1fbe4337327ef99c9caba74678cfff28652606fd667dbca34f12e809738010d9
- MD5 eb6fde8de905af68c855a2506c8a8204
- SHA1 32b172578f398151be79f78bdeb15eeff4a83020
- SHA512 6e95ecdfbabf20c2e717006ea00fa92d79e577cf262460cef7f3db7bb4fa87585bed99b6a1bd1d865c5e5184044b0244aa0823580c9444b1f2ff013057f54235
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/base.js
- SHA256 9a6c60193eb2dda7c2682bf9c7ff7e01b0f6000d70881583f0055782c8b2c619
- MD5 29e50887a6f1c445e0f63bed73eefb83
- SHA1 b8e006b9ad14bb6012497e164d9a4f926e2d568d
- SHA512 16cc7fd8b5641d347a6a9e8542a6ab29d71a432dfb2f72dae05b21b274d92208ec7c5a9ad1ba313658f3a68aebd9edc3d0bcbf07a03d0f16eae95568f175dbf4
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/classes.js
- SHA256 75418233aff9a1401f6c467f8ca20999803436bc1ebb463123d1fb94dcff1f38
- MD5 fabe9b3ec7774eb374f18709ab41c8c0
- SHA1 de6c19413ef008000357bccea90faf0d23ccf605
- SHA512 d7b4a9dbfab0ec55e27b2ded86066b37ebea7d50b3b6b28f44c996f8280463176f1107c6bf15a52fb700f88ac3e0e7b87fb8a50664da9b31fc0e89a38d2055e9
- SSDEEP 768:EDVdzN+yYumzw/Wx5nYCH0e2zBsGMPv3lHhj4MyjKG9jn9/j7NFvHR0hT/YEkd3M:H6/W3YCUpqUDW
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
- SHA256 ce2e06aaa97355c4f68a0793c41d4e068b3e1a225f5376d9dd3f4016e0441c7a
- MD5 287b74a1ea581434cca8f9009f1489f2
- SHA1 877544929146171e416cc8fb33b0e7e49845df3d
- SHA512 4cd7b324ccde3fbca94ab948c4d831655125d6d4e2b237291b8e68f172cb375002c7ccdc49c3cfcf4ab6b7d65850d1a40bcc3f9979498eec697bae43dec7b54f
- SSDEEP 192:AJCfeXBM5iG6zUMmY7QMlr4qLYFQjG6AcE103aNd9xZAqGQ2qFARewPxHFTX0:9feXB2iG6zUMmY7QM54qLYFQjG6AcE1X
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
- SHA256 9bd9c85c5d1f476e663889ab2008f83b323c8d794abb0df35d43091c689ef64d
- MD5 4d0ec8edaec389b1eba92c1d18676f09
- SHA1 6eafd8ed47700b9a2ff1e10dd7468e50fab1bf6d
- SHA512 d4c7655d7db8d4f7d4bb2d0add36bef916caf291b2855785685a3e812279369848ce081ac6fb5cc869fb827653a4a1f874273af17bee67987e3c3a441ad368e8
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
- SHA256 f7ada012dcc309b7c1cd272d1a81657b0ddb3d51521e682116522099285d525e
- MD5 09bbad4c05be7ab76cc3c5ef4fa9ddc0
- SHA1 a38cb372349a2420619e2fb629f0912500dc1064
- SHA512 40b753d8e97ba46be9fe4241dbe892bdeb62c902ea088d68ee7ea5ce0506d51b16f7105355a6b5360363c80d98b0f644b7a7ea2b4262210f24870368a2629c44
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
- SHA256 799c0657b0ab027c3ec0794e8934bed4a4a8e7f063dcae47783a7f32fbeda25c
- MD5 b1e41317d3ffe843032f5eb6f74806a9
- SHA1 506f617da8d8093ed58cfda68e0d60e1aa2ed08d
- SHA512 fb538a73935fd41b9f2ba9f6ddcdfe066f6f672d5dfe682dad301cae3392a93405fd35ee61126e9889e14f71c51e11cdecb4e20d213ba91b34801ec5b89ce02a
- SSDEEP 6144:0XUmTfyptLD/yxnbDh+hIAKVwhWppLTl+ExT3dsX34hAhbAhQ9qhjLmWhXXu:wVyx
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
- SHA256 807dd6d35bf5fffcd4de4aa4ed1800716223a6fe014077f23f2f652ac86d2a31
- MD5 430fa91891107d6f1f3c3392dde9ff4d
- SHA1 5d42ebec7a7c3f5e5b7eb074c38572345e33c1c1
- SHA512 22011409e428216a619ca085ce8e034dc6bc3a8f9de27fb4f2e3dd6b8aa8cc7aa3b02508af816137f646ca1fa96e083a832e68bd8c8b016bfd7a3674d532a875
- SSDEEP 384:pFcCsgQgj6bPo2nv5CYR8/+qvPNEzH+AK6/NBA8K/tQsdz6FKRjrDcWYUeih+hrA:pFcCXQgj6bPo2nv5CYR8/+qvPNEzH+Ak
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
- SHA256 17b72f11f227d6261e44b0bf49d6cdc4ed88cef93c68384ba73f7550d9614d99
- MD5 6cf31f5ac3af68e878bf565c9ed6404c
- SHA1 afaa8bf2c9326ebe8658566fe6296a075d49e23c
- SHA512 0fff9572888be7dfcb792c53b006a6f4b8328d6522b971f5cb8fe9b0ce17ba9f82b6ae0a78d56cf585121a9a62772e70b03227074bb4683a52617f46c52202d2
- SSDEEP 96:AqiyuRkcbZjRZ7AiQnRztu6W6cEY4Ef+YepYk6JY3g6RtqYnFNYlyecYqzGRpYSY:AJye3VNZ7/QRvcKEe9fg6zSyz2585
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
- SHA256 660f088e8da6e3c7c16ff4df184a92fe96c2b2ffb8c3b3411f30b68d93723dba
- MD5 c41248fefc16d5e096019eace4e8ec90
- SHA1 e22931bf5fefeb7a5fc4ce7770283328e588241a
- SHA512 98f6a1367b4be1da50d1a257e726b9c1a66ae22cb8e2d1439b1dd0b4ba4d5a7e22340b165b489911d0a8603fb5c827c7ae43d89daf10dde34352a21304265a4d
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
- SHA256 60a9fa2721d16f3162f5701b7ada27de313794b97047cc7bba25f82859e4c75e
- MD5 1b0977e0af22c275e5f7df15de461932
- SHA1 2fe9b8a3910fbf4187247dea7402baa402764210
- SHA512 8aceee740df28fdd7e28abb3b42617eca70b33756f5b414366019fead5f94f716f3fde34e3600642a6c12b7ae5904b1700332a1a3a5c20c3f5f4d609652384b6
- SSDEEP 192:AJDF/h+8NpUG1mQqJfL/3x78ONlzN1eFqT:MFJ+EpB1ifL/JNoFy
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
- SHA256 251d21959744760aa1e79274b7a9fad433fd42b2d3fb4783f56f0b070d06cf8e
- MD5 b965d0ffcb61fec7f70f4f28a44e9982
- SHA1 2a4c47087318178698368ff06fef670155bdfc53
- SHA512 9da1ea797cbaba01c92dc7a68a586ceed6048565de1b8e40074a76666a8ac1df910a91c547abd5a2f8882686ed5d2cf1079cb47d626eaaf478da74b037d06af6
- SSDEEP 384:XQazTbBakPYkrvL9Li9ZV7+RSC1LQS7FihmJVPMp1TQElbvvQeTRmvhQ:XQazTbBakPhrvL9Li9ZViRp1LQS7Fihx
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js
- SHA256 f0a206f25ddb30f7b3935e5f21d9bf50bcba3fcf891041be0c40e31d71e53e5a
- MD5 2d8fdd6e889dd22ab3f48239e3ef4e0b
- SHA1 d9a64914d84b6238489421b8af3f85f7c3e2b254
- SHA512 dd5c6bd2fbe55e566ce099e9d5a3b60e5836e2414e9cf36ce8e1755d398385aa04e6c3a7e439ab32794da06dc3773325d65c01d87d8cffb2bff4033bdd222e6a
- SSDEEP 768:47d4ogTbvgoeqYOhGE1AmsX8jYrEMGot1bdtvR+RXTJ70aEmpZpY5rJt7HG+svFs:PsxpzBBQZf69T
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/functions.js
- SHA256 269c81ad08e8302bbd3bfc1463e2a4d5c263a20894536a913501bb36df26a196
- MD5 3f841145388311a85d830c615614eab3
- SHA1 61af50d8d6f9728507bca4c3e13e14f5f64f108d
- SHA512 22be56298a92a4cbdd01ae7ce4c9dfb5a276fc287e22e4720e4e2adb5af7d2dc30127154f5eb4f50d0826ee4094a9e093e64cbe21b9956dcce0421ac19423647
- SSDEEP 192:AJ3deBFp8Nweb2RvsYTvOZOEGOzeHUuQvZ3Okp5TrrEFfgRVpauiOQGIPLO08:IdeBFp8yebgvsYTGAEJzeHUuQvZ+kp5L
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/globals.js
- SHA256 334af46a755d6e0262aeadb767dba63e312ad2c0505158323d9c0e6d0728c370
- MD5 354cee337dbaf64533755dddbd0459f3
- SHA1 97839f4d82cd15be561829dbdc4461ac5947b5dd
- SHA512 7212b222657ac90b7ca92568ef04de7f3969147b10945a087555633afa5d1d26adb4d1bca8c4991440d188b84f920057bed6b731edbb46f32a84382eaa577845
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/keywords.js
- SHA256 3f4ae1c666488bb398eae05c6ef9fdcf2e6c126f9b2510e6eee43a8d64d21325
- MD5 5176733f9ca5189ac3e39247a7121f9a
- SHA1 708db91150b2b968b9f70995c65d02405a5a036a
- SHA512 f2d14011392f752291b8d489120389b5ca12c553b18459945c5147f1a94f5f58882e1b4f79f030c05d8bb4cb189d38b113152ed8bce4df3e430c09a7382ed206
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
- SHA256 611aeca1bdc19d0cd5fd440ebf5b07a9894ff44230e7f8cf8db832b895a6d834
- MD5 f4c544ffa5cdbf5b0b978a5977c35cfd
- SHA1 0e27a3d67232c4e2ef836a4260acc434e77a8b47
- SHA512 a84aa78fa060f23a3f0ed8f12ab7585f45c0624aa3e684d7ca7f84785154f0c0b50527d5c389995c4131c994b67041089cd8a98609695b685a18f84f3efce022
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Krnl.js
- SHA256 039bc35b76e7137d2af8e34bcc35adc70d3c949099edd198f9987676f6b0c9e5
- MD5 31adee645af94b08a85f39aa5ab85dfb
- SHA1 0a44bbe4baefc547e76fba1847191b7e1f2c9a26
- SHA512 ec22c29d0f73b836901d7d708c90a5ceadedd6624a46bf0c850c031342c4cbf134c1c0450eabfb2c02a1c4d9d68931403aec1eeff234d0902fa0644cb7aadb61
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js
- SHA256 1601f42e5d9bd8257e6b4fe6857f19113023cd2ebdfcbec34a2458e3c6b28c4d
- MD5 b7e8ab61e201df8981fa7938738afeea
- SHA1 cbe2d942b8e1444f356aeb09a1fba7e374c9c169
- SHA512 f2dd1d09332996dd81c05929fc949515c290b055b38938155b5f49bd45d3e2ecbc3829226a40f6cdc6004ab163b750c6c59abd6c771a3dd22700f46aabbab46b
- SSDEEP 192:AJm5O9mLKnKsgvAKOnzKTfh+gKQy2NyL72+LKTKLbdcK2KIKD2+EHKyzc6U+j6tm:Z5O9mLKnKsmAKYzKTfh+gKQy2NyLq+L0
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/math.js
- SHA256 619973aa7da2c2bc8a34b121245bf083c3e90b1b9cca9d8961dd2d07885f7588
- MD5 c9be95e59dd86ab7706a36b86cb09508
- SHA1 f9434690df19efe3aa07702348641c95995094bf
- SHA512 be1f9f05fcf9b3ed991bea1883809f92b1431c2346ca43834f47e5ab8fcee7ce83785edca6db51699864ed4d3d3016e552d232d75a4dab43d2e8a274700599f8
- SSDEEP 384:S4ZscscHaA5rF6i9fx6EAu4usvo0z2/OtnJiUhSkNmajHxtk:S4Zsc7HaA5rFZfx6E74usvos2/OtnJix
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/table.js
- SHA256 a0667c2236748bb1fe38a9e874332bd573b54fd6f9dfed46d7f6e0296141b056
- MD5 0efc2ec2b5741c67d8586a0de839fd09
- SHA1 fcbc6cecff7dcf017a09ffcad3614999c2f41c5a
- SHA512 57c6420f5d23c67ab5901dc7aece9118105481ebfdc2c290e4565f38efc0760091ab8d6b38c8034237ece76300e5111757135392ddd5dd4791b2bb5ecfaa21be
- SSDEEP 96:AqiuKPqgYHgbCMEYlrBaoY1yiwYXhN8hYFsx2YTVTY7A9Yl/ay/YC4EYmmWdrGni:AJ3ZCEBNYhyxxTVgA4rP4PgrGZNpo
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/task.js
- SHA256 6368fd477fd1979301475990cfc2e7444b57c7f58691d1aa433f7463d8f2e0a0
- MD5 7145942d6ac814db089050fcf4665813
- SHA1 82a5351d3e1ca47d25c09b84b187f4a2a8fdda58
- SHA512 eab376da62ab95166d90aa1c7d70932c6a27f39bb4c1e5cf670efd3ed089a7c2be8bfbabd8d99deb9eb8041eb79fac0b32667b99b281009ea73a9f394ee0182d
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/modules-table.js
- SHA256 0ac3dcbaef38a2e3fc08e9358ec14602b4147188b11a08099461ea37fa410d4f
- MD5 570a07b4dceb824d0131d3d19e6a774b
- SHA1 cd89cc1f960908c88a1673ac144bae617d344e5e
- SHA512 5a0d58dc721142dd4c6fa703eacfbb2eda13951f1b8d501f7b17612048d65b215b4a10c34943b9e35151af1a6c0784580ffdfd09ad7cd9e60b4c823c143dd718
- SSDEEP 96:AqicKuBgvhPFfMUvNCiQIvthbwvKs38Jv7tQuveCbvmxFvf05FHvRtUvADtdrGvE:AJUwfSitDsszQnCyxezJtbfrGp6sg
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/modules.js
- SHA256 efa8feba293a8a6ca2af2eb9fec2b17bfbbf84428a7a1c80e2a36584b6a0212c
- MD5 f50fefe4e3974f1457f96f5a33ea0906
- SHA1 e3f33cbcca36349f114714b3b3a4269d6bc6af0a
- SHA512 49d9070932bc92d511462cb365669ab662abbcf01561fc2a5f005a52fd1a627a3e8191b7e0639fd28776a024a126449dba78b3c6242fc6f51dc0a06f6d7b067b
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DataModelServices.js
- SHA256 2f06d60e90c8a526f12ef0e450f77beaefda0225b79eec62b66950da28c856b3
- MD5 f9099d16ded8fb819dc0d27d078eab07
- SHA1 175b3d3f9502642d6cd153c24a5f4968b77d3550
- SHA512 a2332a87969edc8f967693b9486cad8ff28f2b761b42a06d0140d050e245b0605418df44c4e416b0e9f9b7e268fb7b75b52f1b8c5863460c934e16ff8afffafa
- SSDEEP 768:MQ0ImE5gYuucKA9oqY3oUwmsdgoOaoR0bUCwTY9oBWWU30yOjypc4r8VImCnELC3:oXtebf7MJ
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DrawingTypes.js
- SHA256 12d1a59f76c3608cd3fdbecb04c5ab72902e7a9b75ae40eda196d3d129f54301
- MD5 b585bc0a29aa91042126d74ceeeed7d2
- SHA1 8a758132b6f6853a63cc4af8f133392ccfc8464a
- SHA512 49fb90a83d25ef6b3edd8ffc342a884d61cd3c45b114f34e3969697ddbf8f831864f6f04b6ad49ff418587663e74a1946eb416746fb0697aa2a6329be740eac5
- SSDEEP 96:vmUqiAOR8XlAKYZwxX2LSuYD2TvXBSoY2EPuXuKKYBgZXpKYZy/5XtBmzQY20/+0:vmUJAOm1AlyYS7wRSsEWeK1qZdSdBmzx
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/params/InstanceClasses.js
- SHA256 ea34d9e29984c31632c97210a20db208c33e42776194786f2de827c2997f5623
- MD5 c4dece2fc34dfe766d3a6f7acc983cb9
- SHA1 1e3ad38c7780a50cfda5fa985ff58b83a3b54aa2
- SHA512 7647c23cd9edaa5bb4fa0ad60d749ed4bdaf0186539eea098247c5fc8bed7ec8493ecaf40079c7d48f68cdf6c8b400ed0af34e77b386de2af69b9017115b10e3
- SSDEEP 768:CMgzQgTkgBEgn4gyygHkgKkgZsgnMg0Ug+Igoegc8gb8gG4gAQg2wgKkgp8gBsgy:r3joaQTWy5Tq
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/autocompletes/snippets.js
- SHA256 9b8838acacd8610567b65dbb65981586cb4e23ba1ab8623bc285dda454b813b9
- MD5 309e194818904be8d5cd8f824eea0849
- SHA1 27854c536a3c2a2bf99364a5971bb0e0b9269d78
- SHA512 403e44e99ca35d0ee2c908e9e926ba1c93c7938f9134cf4722940143d1e665a796e359013682a4223d5087b38ffb07f4f00a8986f13377d1e13cfd93946d717d
- MD5 SHA1 SHA512
bin/Monaco/vs/basic-languages/lua/lua.js
- SHA256 e5a18ba57542748e7ad026cffad053bb6dfdbc2bf0304db823ceadf20008c431
- MD5 51d8500a9a01ee3e066e3ca3f15a251a
- SHA1 cdec3a155480275a4d1781acf509ea800fbb2477
- SHA512 0a421cb5c2f4f2adc68b091ab9a67191b7e6cb19b12a1499d5ca7f493fc118a2ff68d66c0bac92667ae482ba188265314be14cf13bc94e21e4362b62060d7363
- SSDEEP 768:FXkAlD94XFDOvvEEMhOIb5EMhtnUEW1rEmAAtWUnWTEOIiY6Unw5t9JTC:dkuD94VDOvvEEMhOIb5EMhtnUEW1rEmV
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/lua/snippets.js
- SHA256 943ce614749f67dffe97b2afb88f3c76fd91545c4100a0e649d45e9fc9b98a03
- MD5 89930ae7aaf2478333dbc14e4c93d8b9
- SHA1 10b2fbd6703f3ab213dc386a3380b67722ca84cb
- SHA512 10b23981e8b8144e8e184aecd0995a6b96ce6e5df8ee8658c376d850884aba75914ce29e3d1ef76fa22eccda07aed313f78edf922b6a2f32d3fccdd5de34d0b6
- SSDEEP 384:IJEyCxCeOq51h9iH/G08mBsI1y7QFo8PRugvsziH9E0gJM7FFvS/S5E8E/ufg+8/:IWyCxC3I78fd86pQ7QFo8PRugvsziH9S
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/basic-languages/monaco.contribution.js
- SHA256 42e79ec54895ee725c4f793b79fc5ca3c997a0193645060233277e524a7a34a4
- MD5 3161b5db765e3bb316c23a5e32871f82
- SHA1 a96b95d4c63186d7243fd4e32ed4566a613afd4a
- SHA512 ae9d181d2908261376f6afd2282e134bc38fc2f5a896337bc41fd7f06460c74b67b66b726dc39d53f743a7e8c99fc4c8911c1e9902f8db4bcb9dfd85ab9072a4
- SSDEEP 192:hhrM409fKYTxXTUTSTBjTYT9NlTOTgTQTCT/TUTjTNTbTnTxTTT7YAHTwTbTFsTw:hynJYA41wpuzVniHQ
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.css
- SHA256 85b305d49bae83ae9fb7d5d1c84d93989e3dc252db38a7dc07b7d349902a89ce
- MD5 deb0a19013648d19143c4e9981c87f02
- SHA1 0f4f223bae72cbec3f87be273223c11e0a6672e5
- SHA512 456380613f3c73abe04b90f2fb5aa436bccdeb63e206cc63f6301bca85b241b363955d8fb574687c1182cd0a4efc82a9391961b99985f4a8b9483b42ccbeeb42
- SSDEEP 1536:8M3/S2lRD4PfPuPjPAPdjNZBmBkHE0akfPZP/PyM:J8NZBmBkHE0akP
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.js
- SHA256 f9ffe3e01f9bf58ab25b37da98eaf5e80f6e37f9347e663bf249d3a6190a28ca
- MD5 d9723831dc0cce5974cb423729e38e5c
- SHA1 a8298c1064526017bf0121795051323dc9ce322f
- SHA512 0e8b6ed339bb44068ca3dede1699d827717382e3c4782e5f53ec941c4986410f0b858bceb643c898e6392ab639649266fb27f5d1ded0bd0d3401d2749aacddf6
- SSDEEP 49152:F5T6aBj6hpnDeB0eXoBB1f5dd5LeZhtic2LLsz+nK9zTGcqS9o7KpSXxKVqeY0XJ:MsF
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.de.js
- SHA256 217aad6fe9cc93483f3423bd790c1d840b1aba274439b7c8ec34b5d14811eed7
- MD5 3442df530f13346a214fe2f322cb033d
- SHA1 27d3787aecc0fe9720da1ea7f17c51ba95b98fa4
- SHA512 5f5d26adf313f588480abbbfcb7509e0fed0b52908420a4548adcc1a358c00f366c34529e0ecb10cd9cc64316dcffc7fed93794e07ea3e9171a94f68f58316f6
- SSDEEP 1536:rSrGPsnVxWQ2AhURY5pF7Plzyhvv09/yy37AhkWIIiWjzQo3X3Z5qYYokE9pMpOR:rQtHTPlAv6WjzQo3XD
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.es.js
- SHA256 656dc966b4ab36a0d7846217a2434394810357cef5cd3bc8877fab4637c81f53
- MD5 6909aeb1b135c2e7cebfd010ce361337
- SHA1 dcf9c5146c89c0fdfa70e7db0c23cd7047b3b0e0
- SHA512 137c528923ddb5d852a9784b521a57da32932e034c1c8a23b2f5932336b9e076febe5a8c67d50b8062b7faabee5031a1e567db5708b7cb1ab87bc468f59fd9ba
- SSDEEP 1536:tS3YhxH3zNFqZdQM3Zyxgc3PtjGHhCv0qUfOBHTBuVF:t73Kpr6GBCvTUfOBHTBuH
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.fr.js
- SHA256 9b7c1a14b3960b99b678df79ef50713d8b2a61b53a3e40533cf7007653e4f3b8
- MD5 be07ebb97a18651d640b01f71d56ce1e
- SHA1 97aa9ceec575aff5f9d04dcb939785074516a560
- SHA512 bd12807c96dfe43045e853ff47ac7d3c28350309ddbe646945de9ed31b480687233b11fb22515086df90b7346b8759ce658fbcedd17ab47f602b728915018de9
- SSDEEP 1536:3501img/YZbtAW6kyGL7TBP+PkjCpjn634W:35eihYZmW6kyGL52PtpjnO4W
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.it.js
- SHA256 5080d040135141347236deabe17e3bb3136eee2db6f5b0bd172bd43ee5ea1cf3
- MD5 2edddc05f7e353a4a762ebc369c2d5da
- SHA1 48da773df82f07050367a9a3315950b34e213d07
- SHA512 c83089e9a04b04c3c32571846aa799650214cafdedc3e538bd5b53e46ca663befcc25c76432261f19492d8bf147cc3873a0919a1ea4d292cae08bbff8eb917dc
- SSDEEP 1536:8Gy/XDfnwyS5y1tpeq2F91J1qn4tmdy3SPZ:8Gy/XDwyS52tpeq2F91J1qn4tmdy2
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.ja.js
- SHA256 89c71964ce3a43359e7479e18456d25891698e770dcd2c371c4aa273dfedcbaf
- MD5 6fb600ddd7248a6615fbf70f7a8259b1
- SHA1 47af0949467d6d16ee38dabfc8da40736a759b6d
- SHA512 23b6daf755f924164ecd3daf30a07a90d04d06b1561e05c82b244897e253bb9321ff9ff4afce5d855626e8076c9c1668e7b5e5133479ad36c55e08ab0010b877
- SSDEEP 3072:u5hKeqYF/HZmcLfPqq2y+qe9uiOowffWuTFAwCHES+g66vb:u5hKet7owBJAwCHES+g6C
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.js
- SHA256 5d225bedcf756f8f4b89576f2e1f9bf3a2196cacae88a99492b653ac00571a62
- MD5 0c72cae1f023116b3c4473788f17a1db
- SHA1 201ac72f0e90bdfe7b58fb2309c05bcf06659c35
- SHA512 6ed6d2e8c87d62153f4a1999daa512479351b7ac2f07e82f118c7af432993992d679e2d4929c6723200b00ba3018d82acc95173fa15d38a3732951dfdcbef645
- SSDEEP 768:m8Zn/0UwoJT/Qq4Pl0ZrJvv+WuYKqk3VeebHa3g10v0gMS:m8ZLLpuYKqk3VeebWMS
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.ko.js
- SHA256 8dff673ceb0dcb5c4ab812caaf7dd5f275f787a0df6305104c635062c692f1dc
- MD5 80a13e1606f2739b561b11b22c660eb5
- SHA1 b6ba4cfe633c02114d700db1a4d987e8544067ff
- SHA512 589448f3abf36b19b3c80b00bde94d0d2b06e98762847f6d77b90edae1c4ecc81b8ddc1fa5b247e512bf8d85e55cfb0fee02d3292f47d5441b4f1098a2565964
- SSDEEP 768:P/SDJJxzxOjp7fxQbEGgnjQaWaWKFcTqKYjl4CbTBNq0caAktPREL6qfFQrPE+eC:P/S1XpEGgjmaWNqku62
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.ru.js
- SHA256 6d66cea2afb2db2ce4a9dd69afc992d27cafb87a4774afd056504be69ea6b910
- MD5 55758fd0a149eb64f88b696a3aa28438
- SHA1 d95567a199d880ebdbfd6ee1715fc3d1796c7474
- SHA512 102b39aa6acf0becc7636c2db43fe5fedab0faf6850cff9ebd5215cdd61c630495ac0db242654849c0b5d91023dbb0c2fac170a2401e948a36d47f3e94b397ef
- SSDEEP 384:hS8XFGk0d+Hkx1arSOG8+kPKQK1yHFx6n10vHDez:0Vd365PKx10vyz
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
- SHA256 32fb2dc839e58028ea4962f45fb6be774e74f2d526546d705d816b5b01aadb58
- MD5 2976b84e043f5d36760e1714bb664c12
- SHA1 6333fc72cecbadbe2df1259c4dda38ca76afb566
- SHA512 d20506a544b6036f353e65ab8ff7ae35d9d9abb169d6659ffff800d15c57d29324eea2d2f34ee2cb2b197ada95f6fe2e761e1b86c18612b812d513aba42d740b
- SSDEEP 3072:asO2S8LZbbr+OTko0wbT6U17POFoGL+D/Ju63Ka1dHGdG5KBGuHv9QeleX:asNS8LZbbrv0wbT6U17POqGL+D/Ju63p
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
- SHA256 659efbd4e50609b5c17d6c13c588d3e69c6378688204c264f7d37c606f07bf53
- MD5 8151145974946eb5332827d53fe28fc0
- SHA1 51d7a355d6e458338d4cad5b6c01f2dd0ce8af20
- SHA512 9d8c6b9a58c42dc71ffdec4ad382febee3494590808c203950e01e4557a2047296a61cb2a854bd7b254d139e4c945dbb33dbe482752adef96ff4ed5335b372c6
- SSDEEP 3072:0mWmqaax9kO+x7jEtIDKIu7Q2DFJln6Hn/X7TgFcuo3pSjyV8i1gwJEsS1fq14q5:0Pmqaax9kO+x7jEtIDKIu7Q2DFJln6H3
- MD5 SHA1 SHA512 SSDEEP
bin/Monaco/vs/loader.js
- SHA256 d423befdd508b4540874b3dee8fd559fb7a0e56a29d7ca774eaed0df784bc2f1
- MD5 1f4fb062c471465ac8a71e7c7de863bf
- SHA1 2882b45fb948339c82c9f672ca38a063bd98b930
- SHA512 5913c5a0ec50021c93910bdbb65338256dea4339866c010f328c819d29c415056943f0875f9ff0b120924ba9ed4af91d7d23d0b0aeb5cec0638823463a3b007f
- SSDEEP 768:MFvC2l3lndKLa2wE7n0UvEUwtBSOjIiOGagWDrKdF6eCGiVajW4g83:Kz3lnGbF5KBn
- MD5 SHA1 SHA512 SSDEEP
runtimes/win-arm64/native/WebView2Loader.dll
- SHA256 02db1c3c3f5606769393199136148679b2334d16d5afb7ed4ef4654d7316edf4
- MD5 6945039d194214317f9bbdc40c57ef8c
- SHA1 15d08817c393deff51d4ce44741e5a6984783e2b
- SHA512 a300aa9698523bca861bbb1c00f9b256c97baa50510650165edd4c845c37a27ab1c687ae7f52a13eaebde8212fb159f07a505dc22f1bb315bc5e4eb8756da14e
- SSDEEP 3072:1MASjt+Wsz3AGsMj+y5TWhEtNEOKbmCj6:kt+Ws3iEt6OK6D
- MD5 SHA1 SHA512 SSDEEP
runtimes/win-x64/native/WebView2Loader.dll
- IMPHASH aaa8a1994a594e4746a652eda600aebf
- SHA256 1b23ff90ac64223bcb21b14a107079c7bb4ad0697ed841a0c0485c7d0fe0a175
- MD5 b1cc3d7d194abc6908801cd0334a6c70
- SHA1 5f3c72eafab090095a08f17f026415cbfefa8349
- SHA512 ed351fe2efe92df52ba79f4239297ea20f8f4a061c413d81f35b29bc8b5db95500c4f5a631439a0abc1d5753b616297fa69aa04ee96f807f78cc0c3f69d9c85d
- SSDEEP 3072:qKLKQDEW3JHtcGNd/SzCzkYLSq9hX4qSd/8SALTUYrEtnWldxP2HK:NTBt9Nd/9d18qSGEtmx
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fc:d9:ff:45:ce:dd:69:40:84:14:bf:7f:56:d8:a9:e6:e1:d5:19:c6:85:7f:f6:8b:4f:c9:9d:e0:d9:a2:36:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
2
Major OS version
5
Entry point
18032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb
kernel32
CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Name
.text
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
140B
Characteristics
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
runtimes/win-x86/native/WebView2Loader.dll
- IMPHASH 608537c42a46a95b31cc1ef01ab6eeb0
- SHA256 fc14dc275026daba48c4014a0de0f4e228043fa899c9ae0308f6ea2c239af1f1
- MD5 d0b3cc3feef9a483b63d180ccdc1992a
- SHA1 812388ee2b1bca8946203979c3f4c427aef22c1f
- SHA512 2185b810fd90d812035543efbadd684c12f835e7dcfb949324daa5954950674aea621280a8f408e17deae8f01b2c19b6dce64238f2843e30a1dfcb8e449a980a
- SSDEEP 3072:nsaDUh9T2dO9O3ed9zJ11Xx3QKHwsTPOEt+AlL0F3Hd:nsp9T2dO4o91MEt7h839
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
45:ea:c3:64:d8:92:9a:17:5f:f3:f5:15:b8:a6:cf:c1:bd:32:2c:b9:a9:7c:66:6e:e2:ff:3a:a7:65:3d:4b:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
5
Entry point
16368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb
kernel32
CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
settings
- SHA256 a6d3d93074267c7c701f92ac0899710228ce9f323ced8780432c6c25aae832c0
- MD5 086bb083756e230b9451741a2b977636
- SHA1 3dac45c483668977b5884d3588865215703a1925
- SHA512 695937fc323bb64f9576f5d77db45a68e0d0839a629720fc61f878d79a3db9a70d772ba0e0e3aafea7200e38f445d3b54ea0ff392489768074dead9fae359cba
- MD5 SHA1 SHA512