DualSenseY.3.3v.zip
- SHA256 0a0811dda75710e4be5f57710ba378b24edf8a413254e891a5acf2958c125fa0
Overview
overview
6Static
static
3DualSenseY.exe
windows7-x64
1DualSenseY.exe
windows10-2004-x64
1DualSenseY.exe
windows7-x64
1DualSenseY.exe
windows10-2004-x64
6HidSharp.dll
windows7-x64
1HidSharp.dll
windows10-2004-x64
1Microsoft....ns.dll
windows7-x64
1Microsoft....ns.dll
windows10-2004-x64
1Microsoft....ns.dll
windows7-x64
1Microsoft....ns.dll
windows10-2004-x64
1Microsoft....ET.dll
windows7-x64
1Microsoft....ET.dll
windows10-2004-x64
1NAudio.Asio.dll
windows7-x64
1NAudio.Asio.dll
windows10-2004-x64
1NAudio.Core.dll
windows7-x64
1NAudio.Core.dll
windows10-2004-x64
1NAudio.Midi.dll
windows7-x64
1NAudio.Midi.dll
windows10-2004-x64
1NAudio.Wasapi.dll
windows7-x64
1NAudio.Wasapi.dll
windows10-2004-x64
1NAudio.WinForms.dll
windows7-x64
1NAudio.WinForms.dll
windows10-2004-x64
1NAudio.WinMM.dll
windows7-x64
1NAudio.WinMM.dll
windows10-2004-x64
1NAudio.dll
windows7-x64
1NAudio.dll
windows10-2004-x64
1Nefarius.D...de.dll
windows7-x64
1Nefarius.D...de.dll
windows10-2004-x64
1Nefarius.U...nt.dll
windows7-x64
1Nefarius.U...nt.dll
windows10-2004-x64
1Nefarius.V...nt.dll
windows7-x64
1Nefarius.V...nt.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DualSenseY.exe
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
DualSenseY.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
DualSenseY.exe
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
DualSenseY.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
HidSharp.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
HidSharp.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Microsoft.Extensions.Logging.Abstractions.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Microsoft.Windows.SDK.NET.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Microsoft.Windows.SDK.NET.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
NAudio.Asio.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
NAudio.Asio.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
NAudio.Core.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
NAudio.Core.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
NAudio.Midi.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
NAudio.Midi.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
NAudio.Wasapi.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
NAudio.Wasapi.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
NAudio.WinForms.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
NAudio.WinForms.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
NAudio.WinMM.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
NAudio.WinMM.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
NAudio.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
NAudio.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Nefarius.Drivers.HidHide.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Nefarius.Drivers.HidHide.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Nefarius.Utilities.DeviceManagement.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Nefarius.Utilities.DeviceManagement.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Nefarius.ViGEm.Client.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Nefarius.ViGEm.Client.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target DualSenseY.3.3v.zip
- Size 7.7MB
- Sample240812-bvrwhayfjp
- SHA256 0a0811dda75710e4be5f57710ba378b24edf8a413254e891a5acf2958c125fa0
- MD5 a2d13b5cf804a10f0b14cdaa3fed03b7
- SHA1 7fe78037d0dcc66bcc1ded6f2531f0b0246ce92e
- SHA512 ee7c2ca49f3ca53d7d4a6cafb49f626a7b055a6f226f535970a7dd66abcd8abccc751549ddd9adcb74f9fc04af40537965c7ad500ccae72fd779b80ab32f9dfd
- SSDEEP 196608:lIOajqChRG41snZiIBRlLzt12hogjLVWsJ7cb0:Ba22RG4inZPPztH6QsF80
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/DualSenseY.dll unpack001/DualSenseY.exe unpack001/NAudio.Asio.dll unpack001/NAudio.Core.dll unpack001/NAudio.Midi.dll unpack001/NAudio.Wasapi.dll unpack001/NAudio.WinForms.dll unpack001/NAudio.WinMM.dll unpack001/NAudio.dll unpack001/Nefarius.Drivers.HidHide.dll unpack001/Nefarius.Utilities.DeviceManagement.dll unpack001/Nefarius.ViGEm.Client.dll unpack001/Nefarius.Vicius.Abstractions.dll unpack001/Wujek Dualsense API.dll
File Explorer
-
DualSenseY.3.3v.zip.zip 7.7MB
-
DualSenseY.deps.json14KB
-
DualSenseY.dll.exe 664KB
-
DualSenseY.exe.exe 268KB
-
DualSenseY.pdb39KB
-
DualSenseY.runtimeconfig.json458B
-
HidSharp.dll.dll 230KB
-
Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 62KB
-
Microsoft.Extensions.Logging.Abstractions.dll.dll 63KB
-
Microsoft.Windows.SDK.NET.dll.dll 21.7MB
-
NAudio.Asio.dll.dll 33KB
-
NAudio.Core.dll.dll 183KB
-
NAudio.Midi.dll.dll 45KB
-
NAudio.Wasapi.dll.dll 163KB
-
NAudio.WinForms.dll.dll 33KB
-
NAudio.WinMM.dll.dll 56KB
-
NAudio.dll.dll 7KB
-
Nefarius.Drivers.HidHide.dll.dll 202KB
-
Nefarius.Utilities.DeviceManagement.dll.dll 288KB
-
Nefarius.ViGEm.Client.dll.dll 283KB
-
Nefarius.Vicius.Abstractions.dll.dll 19KB
-
Newtonsoft.Json.dll.dll 695KB
-
WinRT.Runtime.dll.dll 389KB
-
Wujek Dualsense API.dll.dll 25KB
-
audiotest.wav939KB
DualSenseY.deps.json
- SHA256 2ccbf57c7538c562fe48f32d563b9072754d3f92b3f889eed23ffa4b3af54ce8
- MD5 22aa00fd793b9c7aa3f95452ecc99921
- SHA1 bb83d6fa4a7e675456e901ea2fa1390bfb17ff48
- SHA512 d374f36c4730c18ef02d1ba7811e6d7efb31b5dbcd126dd8db97c3d33ad7267a453ac019678513d6b5e830f5703b804843468938919e4dca337545e7c277a0b2
- SSDEEP 192:CWf80/lVvPFGDmD8lD8j+E8ev3Ry3GlVZl6W2Zfrzdv8BzI8d6zjEr:CWf1HKmDoDghz9lB6FZXdAIXz4r
- MD5 SHA1 SHA512 SSDEEP
DualSenseY.dll
- SHA256 7d4028b758118bc879f08782ba8724b0bb96dad58c59f641277139386a8eee17
- MD5 a30c547646948bc74c62e3172b93d911
- SHA1 ae69fddd31566707155720b85ceb64f4282cea02
- SHA512 f65aff8487c82e52050ad438f6bed1b48314548093ac37d814ac5497f78becb4d5a5b39f7f468ece86d16949fd127dd2dedba35feb8596f63e9a0ffbd5159a41
- SSDEEP 12288:SAlcnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJAAueUE6GkIAiyvrnbT:SAlcnAAAAAAAAAAAAAAAAAAAAAAAAAAa
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Igor\source\repos\WujekFoliarz\DualSenseY\DualsenseY\obj\x64\Release\net8.0-windows10.0.22621.0\DualSenseY.pdb
Name
.text
Size
534KB
Virtual Size
533KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DualSenseY.exe
- IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
- SHA256 c5a1ab9ffafb29d9378d80e83fbc155a74c259a30c8b2e6be16324cdd3e53394
- MD5 83e0f5f0de5a099c0fac637029a8655d
- SHA1 9bb11df51d3df34210f66ac52d1d6b8b0a1e54c2
- SHA512 3346ffb8e8667a83ad30412ad27fd75db98ab325e9593ff07f78c3a279a42fdd1cbb7b35afa39afe502e463f3b11ff82df41ad8880014878ed9e4a04f981e19b
- SSDEEP 6144:piS4ompB9S3BZi0a1G78IVAcjctSmnqz59gDGq:pyB0aI78IVTgqz5C7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
70496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
abort
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___argc
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fputwc
__p__commode
_set_fmode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
toupper
_wcsdup
wcsncmp
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
api-ms-win-crt-locale-l1-1-0
setlocale
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=12, id=260, version=33218,
count=18, id=259, version=33218,
count=86, id=261, version=33218,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=201, id=1, productName=Unmarked objects,
count=10, id=265, version=33523,
count=1, id=258, version=33523,
DualSenseY.pdb
- SHA256 f96438ac4f617664dc3b078a066bd7c5ebe1b039fbc34055b44c48f7e6f9b39f
- MD5 07fae8ca266dc9181366448885da71d2
- SHA1 09b1c4ef8b857b18935c67c123967416e02666c8
- SHA512 7277403e87dc4950a4d7bbd7d71dee2111a10860ea484fe2e5974c4fdd4cfccf1ad7b24d12373c4d1e4af87eafdf72537f3ee949c937fc847a0d560ffe67d4b1
- SSDEEP 768:Uz2LjeVBjukZK4pCY1rYpOOCZC4sl9EQkHAqTxXMS7rXNdYKV:Uz+qDU+NfZ89EQkHA6MSvjD
- MD5 SHA1 SHA512 SSDEEP
DualSenseY.runtimeconfig.json
- SHA256 c71152bf25e40d647b2440c5b39be157a3d356106be9d5b678ab97bb87b4e782
- MD5 07b9a30265ca4e69c7016a1b6e3ffc27
- SHA1 3a4af82a2695b1423aedd8b60a5c86793c011b02
- SHA512 efd582f8edcdba5ef48d02eee5f73d83ff35071af99b49e08e0213928568d728d0856e3b903bfcccb9237f786846cf94da83139f99e9bee86287aff2071c3f1c
- MD5 SHA1 SHA512
HidSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 61eb2e22a5620d789a23d389f1af9d38faff4d85f46adedbc28fb22cfec61bf9
- MD5 c5e3f63adbd63da7e97675748a1af866
- SHA1 3b9d5d2ecaf89d53f762048c9ab942250f1a2cad
- SHA512 16dcd61b83032a3fd47cb36a400ea4d7910179a9735e66aad9b463daaf2626586756b8ca2e0aa34c5508e29f89e3bd78366ad60c5bb08e053e35dcf03d0a9d7c
- SSDEEP 3072:a0dmxS02174WbpfMRBKMTKsLzzQ6jxt9ovjX59TdDxtHbIg2biTz9Kaj9i1yfU43:4QECMDjQox8TZ62nBGM
- MD5 SHA1 SHA512 SSDEEP
Digest
3c:bb:b8:a3:cd:b8:a3:52:80:f0:31:ab:ca:c1:17:ab:81:7f:d5:c7:c6:31:a6:b6:cb:a7:88:63:11:9e:7a:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Illusory Studios LLC,O=Illusory Studios LLC,POSTALCODE=44281,STREET=341 Akron Road,L=Wadsworth,ST=OH,C=US
Chains
May 4, 2019
CN=Illusory Studios LLC,O=Illusory Studios LLC,POSTALCODE=44281,STREET=341 Akron Road,L=Wadsworth,ST=OH,C=US
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Digest
95:cd:4c:3f:45:7a:67:39:20:e6:94:d1:b3:6b:4b:20:fa:55:db:bd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Illusory Studios LLC,O=Illusory Studios LLC,POSTALCODE=44281,STREET=341 Akron Road,L=Wadsworth,ST=OH,C=US
Chains
May 4, 2019
CN=Illusory Studios LLC,O=Illusory Studios LLC,POSTALCODE=44281,STREET=341 Akron Road,L=Wadsworth,ST=OH,C=US
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=Illusory Studios LLC,O=Illusory Studios LLC,POSTALCODE=44281,STREET=341 Akron Road,L=Wadsworth,ST=OH,C=US
Serial Number
d7:45:3e:43:64:2a:b7:a6:c6:82:33:c3:b0:90:5a:09
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2018 - Aug 12, 2021
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Illusory Studios LLC,O=Illusory Studios LLC,POSTALCODE=44281,STREET=341 Akron Road,L=Wadsworth,ST=OH,C=US
Serial Number
d7:45:3e:43:64:2a:b7:a6:c6:82:33:c3:b0:90:5a:09
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2018 - Aug 12, 2021
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
4
Entry point
227966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Code\src\oss\hidsharp\hid\HidSharp\obj\Release\netstandard2.0\HidSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
215KB
Virtual Size
214KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e594bffd358313910cf45acce035d2ebc129fea8591de8ba40c3ba7e458b26b
- MD5 111e8cb3d3453e58b8802842396dd901
- SHA1 3938d02b0803a5016a955a6662c8557b3416e3e1
- SHA512 7531a1347c844383105fc67ead62542f9b9f72c1ac1cb3806990f82b2f2e8d48f83c378d0246132e9d495e2f38f45e65b33102ca83767eec37d0183352fc7270
- SSDEEP 1536:sCYbKF0XEQqb7Uo5hGrrd0i0A7Hf6dbW9yfUazz:YXp0pk/6dK9y7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
18:d8:da:51:67:41:05:65:15:b9:17:3c:fa:05:ef:74:b9:e4:c6:5b:9a:94:1f:60:87:f9:41:48:1d:28:fa:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
58410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/Release/net8.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.Logging.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0dce32c03f338e04a42bde3a364b45f22388a876979793098ba973048163d609
- MD5 3a8a05c325944ba97efa2198b3e49622
- SHA1 da688aad5f37e1a117de89f5fc09cf4d571d57a5
- SHA512 86cbeaa8f7a913851944c78a63d02866da831294f7a436aadbd53a48046fcb37f0753d1df8607055e3755befce73cf228f8309bf38bc54d1b4748eaed24b98b5
- SSDEEP 768:uz7ouSrbVozuvi53ReiJd/zk6cuAJU/JJZIAJF/tkJJQiS42hsmc1P+L/ib4XC4u:tuoVozugRhTWAJFmQFc1PYigC4dezJv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a8:cf:ce:7b:9c:05:d2:75:49:d6:61:37:7f:2a:86:8e:f3:29:99:ce:ea:ea:10:d6:69:e7:9c:24:6b:3d:f5:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
59546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/Release/net8.0/Microsoft.Extensions.Logging.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Windows.SDK.NET.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c067f73eb975b4c32bdb72ccd3de336ebd51174d7dd253514c9f24cb3368bd82
- MD5 d6cdb495256001b172c0a34d0cee05e6
- SHA1 4db1ad3809f2615d7e985dbf9661a20a97bbcd17
- SHA512 24c56c3b1fd94b9775392974b17bc1b0bb1c600bbae75adae9a9ff8f3a7b5b4a73129e9a10ba5ff76cd6eb2ad33133bf2eea537a74254df5f11a7ea30c3f5e85
- SSDEEP 98304:D+fNW4VioFqWwyxckT0W2FvKkuDnHnlTbmUbym0WRP1HjI+d434a25isWb:SfNW4Vio0pyxckArikUnHnpbuQtjf4tJ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ad:52:b5:44:d0:84:3c:ff:8a:14:a2:8f:e2:d3:ed:30:9d:04:a4:92:38:4d:8f:8a:5c:c4:a9:31:9c:b3:69:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
22739966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\NetSDKSln\obj\Release\net6.0\IIDOptimizer\Microsoft.Windows.SDK.NET.pdb
mscoree
_CorDllMain
Name
.text
Size
21.7MB
Virtual Size
21.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.Asio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d803671990dafcfedda2883f4c7811c6de9d830596433ec48af5a114c7128ec
- MD5 883e5153b0d9ac447015c23446c2d31a
- SHA1 4f13ebd4923b0411417a029ab89b6d7a02bd88c5
- SHA512 711082327542d5d56b93d69c5650d752f52e68e192e409e903666a5f2c31f98a8336c6ae9823dea53257e0fe7aa9775d74b4c116aeaf5b3ca20a709adf46c75c
- SSDEEP 384:j9hsa/6sN0KYB/aIDP9b4xkofM5zHJUg7HnUeE8rtCumaf7c76+Ghjq8D2yBb4Gw:j9h/8NZDPKGcM5zHJweE4Yb6ttD3BbK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Asio\obj\Release\netstandard2.0\NAudio.Asio.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 171fe65c30b2ac757e8047dc69bf5bd772d1eca920a2f086f127e06b4a10559d
- MD5 bc0a96668c76a6b382d3e7f9dd5bc5ea
- SHA1 cffb0f104264f04604a44e5965e534304c2b647f
- SHA512 1c6079fd42d1147fb26b75d9bacd23f1340543fc6daaacc3ac3dbbeeebd1d3e24604c9fd49fc432991dc632a5a370164b3b178864366a4db366527dd85a0e5d8
- SSDEEP 3072:mIJAvGxxPwkHFkpKRdYq2oETRBrRK+7VROY1kquSwsM+S7wl:DAGx9wkHFkCCTRBtfVR7m9U
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
190962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Core\obj\Release\netstandard2.0\NAudio.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.Midi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 426a5546f69be5683f8152f0ab1ee9f531bf41b3bbbaa9766ec963a25fef9bff
- MD5 4ab6718c9c90f208f8850d947972b8ab
- SHA1 a5ebb0fa0ef611399069ed3ecf12ff45bab6607a
- SHA512 a598291203c40ed70d0570d9c21b7acada58c094dac4f354addb0d04570deb61729848ba0418a18c5ac6944603d7f6dfbeb8f6b497d986d7366129515b447287
- SSDEEP 768:jwWDUSfzw3fpAU/rEC9iLAOQKKdMsMNjxhJU1Vyae9iWvmYRMUQ6LUqu5/EAS7B7:jwWDUuzwiU/gC9GAO7KdMsMNd3me9lvX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Midi\obj\Release\netstandard2.0\NAudio.Midi.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.Wasapi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5739f09678a761057669744fd9d1a740062c6bc81de1cf83ade2941cbdb7129c
- MD5 77139686699ccddbc4bb96e5d0d2b499
- SHA1 08050fe150577578cd601e3ef374c75ea31b88ba
- SHA512 998b938070154ab48befe4ae0a477cbb98aa1ae335faca69760520fcee0296098f505c5ec0fd33a037b4d0d44a8c805313d5d8421f6b63227291a0e530aea246
- SSDEEP 3072:frfbQ2pEzV4ulBy8R3L7nDzkku9SMLKASPIzj7FDEfsH2nEs:frfb0Fzt/kXiIf8y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
173242
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Wasapi\obj\Release\netstandard2.0\NAudio.Wasapi.pdb
mscoree
_CorDllMain
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d401d592dac89bef697ec86d502bbd14f59ee56fb23f9dd789cd1dd589d5eb8e
- MD5 602daf03ff42b5458f7370d5afff0b2d
- SHA1 ecd5bfbdf580d2ca24cc6a582318277b96dd8116
- SHA512 fb1bc40b83e11b785ea91b94f250ba71cfd3bf636d4c41d54d3acda1a18d31b237bad39ff2c5e71501edf87ffe2e953673ee5385287e781a0123e69fe5a216cd
- SSDEEP 768:iNMJ4j7TupqLRpDaf1VCPRyb4DmHsRlT+Xee:UuiRpUMEb4DmH1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39882
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.WinForms\obj\Release\netcoreapp3.1\NAudio.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.WinMM.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf0528fbcc844872734eec0b72c176409f4928e7cc12d379d06cb4e0469ebc99
- MD5 627c00235a3b9cc98474d6f734c3fe7c
- SHA1 f7bfb35abb9e237f4d565be0cdc0861244fb0473
- SHA512 3ada363575cb774d99ecae8773dbab244f65d4e059da610345ddd2e69c9cb11adc320b296422a5346621a026709681f83c9a1919d39fdc46a80f35a8b4cd0b25
- SSDEEP 768:kQFu51JOtZiWr3CJBTNgUEXahPrDVSve+u1tlMgGd8GbpDrXa8Rcer+7Vls:kQ8zrWr3CJZNGahP9Sv1u1tlufpDu1s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.WinMM\obj\Release\netstandard2.0\NAudio.WinMM.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NAudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9a897778fd0dcc2c9605e7e3740967fe36d209024c1c984da283ac74d04866a0
- MD5 06df314ef8a9a4e2aa92b5adb1878bcb
- SHA1 9034ebb8b8fa324ed07ccfaf33b3b101b50e3096
- SHA512 7465d1e5f3d7fbc6d01f2d8d223ffef7c4e4faf0eaee94d64abeca2ed4134a46d638e8ea9502a0b67e77f1367eee7c5f593193d4ecf880ffbc79d1804bc06b51
- SSDEEP 96:V8QcCYkcJ08WjUDQ+liyKrJldqnb+AAVUhko2MrrRG0xwKDSd2V:Vpi08Rs+lwDqnb+AzSo2MrlWKDSm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio\obj\Release\netstandard2.0\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Nefarius.Drivers.HidHide.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 03bf1cb0ba7ad5f0cfc7fa08d7ed41ddea442f4934a880daea6cea01f653259a
- MD5 092d2008d76eddd9317849321b6a38db
- SHA1 32014e4f01ff57c0711b96eb26e7dd3deb17d4fa
- SHA512 5c5692a3741928aced15c6362c83600062c4c6d306062fc3b219870adac9497d3c2ec3ae5e7c4df65f16fc38ee73694a21b20cc41f7933f8d0135a2db59b5fdf
- SSDEEP 3072:eYdksrwS/+sihsnKKsUv9M522Kwfx7D39BWPerJ23dcYMOa:eYdkAKsKKL039B/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
212250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/runner/work/Nefarius.Drivers.HidHide/Nefarius.Drivers.HidHide/src/obj/Release/net8-windows/Nefarius.Drivers.HidHide.pdb
mscoree
_CorDllMain
Name
.text
Size
199KB
Virtual Size
199KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Nefarius.Utilities.DeviceManagement.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54c68ece8470806e6259b8a8ae15d2467dd94090c307f16625914f8eedf38772
- MD5 873632c9fe9a875aecdc1b67bd8ad722
- SHA1 8e621a904965861929cb71451c410493956c5961
- SHA512 3b22f8fdcc724df5ec805bce4347ac866a2a6449879c92f911108eadb8c28df35990f47d2947c04ce4c71204c96c89341e0a712f9badf8fbaab2054fe39064e8
- SSDEEP 3072:NaFbrxvUiZAAKCf57GUXHcU2Is7bv9nQQ2KwfxhaI9B/KNkwvGoqav1cjEEiOAOQ:5AJhF8U+7bxI9B8vl71Pk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
300654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/runner/work/Nefarius.Utilities.DeviceManagement/Nefarius.Utilities.DeviceManagement/src/obj/Release/netstandard2.0/Nefarius.Utilities.DeviceManagement.pdb
mscoree
_CorDllMain
Name
.text
Size
286KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Nefarius.ViGEm.Client.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4458301000b732d115521e99f9936f4edb70d6ceb3036ef158715e0e6b8902e0
- MD5 cd6e2c54babf3f104333909eed3aa641
- SHA1 ee98b56b75903152081d6e51236a73ec19232c31
- SHA512 a7e59c03c3993f0d01ddedcee0180da0ea43963b7ef5533e9c984c99b380668b008dc22e02424b06bc696448c03ce61974545fe69bb67d372cb60ab365fbabbf
- SSDEEP 6144:So6FZuGMzoE20Ut1/3NB906aBo21+k67o:T6nWzT20S/3Nnbqo21+nk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
295870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\projects\vigem-net\ViGEmClient\obj\Release\Nefarius.ViGEm.Client.pdb
mscoree
_CorDllMain
Name
.text
Size
281KB
Virtual Size
280KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Nefarius.Vicius.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dfec69f5ce9c8ddecb38376d6a3333ef093f10d3023413377ab6b52cb730a5e2
- MD5 177a3efd574aa6232ef24551bd2a3a2b
- SHA1 09f4bf3ba410c83f58994a98f3b18cc611082bcf
- SHA512 32ea56316c69ec0e9f26e317429215ef1e27c5a427e5115ae4f40821684be067b0355648abedacf9f2287321aff2c350f17059783b6c5bb688cda8b56acd4cc6
- SSDEEP 384:y405//J/crbhtGz0eSemyulM3nYkENeSsm3VLi:9QkeSdyCWYZli
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/runner/work/Nefarius.Vicius.Abstractions/Nefarius.Vicius.Abstractions/src/obj/Release/netstandard2.0/Nefarius.Vicius.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
- MD5 adf3e3eecde20b7c9661e9c47106a14a
- SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
- SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
- SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
705086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
681KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WinRT.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4977a1e6dcee4c3310a68e20f2879cf39b95255e29f3fd7557781e058445cb9b
- MD5 0966745c6b954e7bbd15459756a106c6
- SHA1 f6efa62a95b4f40c84341ed58c1d3c8d5af2111d
- SHA512 ab8a07fdf72315ffaa49271faca6d0d6523b3480d53fd6f5225fdfcb41ee099e3b401872a684016ed02d347b48eae3467185b6e9dcd16994c0b7e3c562e9a047
- SSDEEP 6144:WlOYSCIkSjwAF56b5uuXzAOJPvcFVloAFJpR0krlFo/UkjYPqNHav96iTtq7CYm:WQvCZoKN/DelFo/tNHav96iTtq5m
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4e:24:f3:6e:46:fe:b0:93:67:e4:8b:a5:bd:c6:75:4e:33:82:09:af:21:05:87:c7:0a:0f:c8:b8:4f:fa:42:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
394486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\WinRT.Runtime\obj\Release\net6.0\WinRT.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
377KB
Virtual Size
377KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Wujek Dualsense API.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb636a9639a710e3e794d185e2c6d0019e9602ccef071cd2f8234e1ed6f4a0a0
- MD5 ec0abf93c82502dfd55ece94e87ce62a
- SHA1 4e2a637427716c1072d508de23f3f9768e1d3c54
- SHA512 a7b50bcaf50fab2dff6d92b6561bbb6cd94626edee897464aa4e63de18db6107218717a64625e3f781ebd4a51cfcf27239be4803bda6c67595ee5a5947cb5f0a
- SSDEEP 384:APuN4Zt+nfDstIJ3ZUpYc43FB8/Momx/0fc00PzeSaP+HkETnPh3uWg:8u/AtKiNmyfWIP+7hfg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30602
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Igor\source\repos\WujekFoliarz\Wujek-Dualsense-API\Wujek Dualsense API\obj\x64\Release\net8.0-windows10.0.22621.0\Wujek Dualsense API.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
audiotest.wav
- SHA256 632493246263e75d56a34d49779ca08dd73e04efb3e3fa848f4c4dade58be09c
- MD5 0da865fc0fd495aedf5990cbec624900
- SHA1 6a2e46c49aec52bc875ac94f8bbdd41acae56a09
- SHA512 c3de6b8edb479bb54f1427d2f9f7e896ecf3c5c8032f9c866d06d3426937862ccdb097dfb93255df40624b2ed780350b26e59bb45744e439b815e430a8dfba3d
- SSDEEP 24576:HmNsEje9TozN9mFDNM8m+XdvnvPPARvAvfskRjrtF0J6jh2h:Hm1IozN9iNM8m+t/ARvAXsWjrtO6jh
- MD5 SHA1 SHA512 SSDEEP