agenttesla | GathPortableSetup29[.]5[.]3l[.]exe[.]v

resource	yara_rule
static1/unpack001/HPSupportSolutionsFramework-13.0.1.131.exe	family_agenttesla

resource	yara_rule
static1/unpack001/Coolex.dll	net_reactor

resource
unpack001/$PLUGINSDIR/INetC.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/Coolex.dll
unpack001/HPSupportSolutionsFramework-13.0.1.131.exe

GathPortableSetup29.5.3l.exe.v

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 534baf68b23474fd41c2320b64ccc61ba0a2cda9cf7539dcaac1cadfb61ddb76
MD5 7f6a6ef2c51ffa3ffd4aa5cac09d74a5
SHA1 984fee23b14fa4e53d9cab8ab0aa289a9c3bb44f
SHA512 12474e2b448555a48c3de61661f91cbe47372b0862684eb0d5c252c8973032c0775bac58c682c494ed6e6e3e51861389c1c904befd6b3bd6417ede87171ff66a
SSDEEP 3145728:qAH2SALB1KcYt3TIQt6syau0o1kYn6LlPNc8cGb:fWSgDYt/8syauz1hn6LMwb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

01:fd:df:5b:28:d5:a5:40:06:a3:5e:f4:2d:59:32:2d:2e:e1:12:7e:9e:28:0e:cb:bd:fd:13:0c:30:82:2b:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370102MA3NHYDYX4,CN=Shandong Yunlu Information Technology Co.\, Ltd.,O=Shandong Yunlu Information Technology Co.\, Ltd.,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 4, 2024

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

SERIALNUMBER=91370102MA3NHYDYX4,CN=Shandong Yunlu Information Technology Co.\, Ltd.,O=Shandong Yunlu Information Technology Co.\, Ltd.,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

33:25:2e:4f:89:65:17:8e:c4:d3:52:89:24:7a:42:7f

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 26, 2024 - Jul 26, 2025

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 7, 2023 - Dec 9, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

13596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/INetC.dll

IMPHASH 163fdad7b5f915e3a0ca7ad1d08b4ff8
SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
MD5 40d7eca32b2f4d29db98715dd45bfac5
SHA1 124df3f617f562e46095776454e1c0c7bb791cc7
SHA512 5fd4f516ce23fb7e705e150d5c1c93fc7133694ba495fb73101674a528883a013a34ab258083aa7ce6072973b067a605158316a4c9159c1b4d765761f91c513d
SSDEEP 384:pjj9e9dE95XD+iTx58Y5oMM3O9MEoLr1VcQZ/ZwcSyekMRlZ4L4:dAvE90GuY2tO93oLrJRM7Z4E
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcpyW CreateThread LocalAlloc lstrcpynW SleepEx MulDiv GetModuleHandleW GetTickCount ReadFile CreateFileA CreateFileW GetFileSize lstrcmpiW lstrcatW LoadLibraryA lstrcmpW lstrlenA MultiByteToWideChar WriteFile lstrlenW CloseHandle GetLastError DeleteFileW GetProcAddress WideCharToMultiByte LocalFree TerminateThread GlobalAlloc GlobalFree SetFilePointer WaitForSingleObject

user32

wsprintfA FindWindowExW GetWindowLongW IsWindow CreateDialogParamW ShowWindow GetParent DispatchMessageW LoadIconW KillTimer PostMessageW IsDialogMessageW SetWindowPos SetWindowTextW GetMessageW SendDlgItemMessageW TranslateMessage EnableWindow RedrawWindow UpdateWindow GetWindowRect SendMessageW SetTimer SetWindowLongW wsprintfW SetDlgItemTextW GetDlgItem IsWindowVisible MessageBoxW GetClientRect DestroyWindow SystemParametersInfoW GetWindowTextW

comctl32

ord17

wininet

HttpSendRequestExW InternetErrorDlg InternetWriteFile HttpSendRequestW InternetSetFilePointer HttpAddRequestHeadersA FtpCreateDirectoryW InternetCrackUrlW FtpOpenFileW InternetSetOptionW InternetOpenW InternetGetLastResponseInfoW HttpEndRequestW InternetReadFile HttpAddRequestHeadersW HttpQueryInfoW InternetCloseHandle InternetConnectW InternetQueryOptionW HttpOpenRequestW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 85f08eb0cbec010ecbc287fa68321173
SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
MD5 d1eefb07abc2577dfb92eb2e95a975e4
SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryW GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile GetPrivateProfileIntW SetFilePointer MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW GetPrivateProfileStringW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree WriteFile GlobalAlloc

user32

PtInRect LoadCursorW GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard GetClientRect SetWindowRgn LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW SetCursor DrawTextW GetWindowLongW DrawFocusRect CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW MapWindowPoints

gdi32

SetTextColor CreateCompatibleDC GetObjectW GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderW SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

$PLUGINSDIR/modern-wizard.bmp

SHA256 c1a051c6393d33fa4c1b2292e4296890a2729d7efbbbc6023816c113a3e22037
MD5 7b806595eae92bda77900766e5687c8f
SHA1 660eddc968550aeaaeacf8d8fff8bb3c51a3203b
SHA512 b5eab86ff2a5104031d4780316585bccfb55dc6674d9a9c8e34cbd32de652b00af02898183ef26d6ebfc919043254fc82c684867a860272b4978c4836e875f19
SSDEEP 96:aYMOND2FhejE1Wk3h3k4ZSn/8Pl9DcYh9jLDEOKDZ9Ch9o9l9u9X9e929H9k9vIC:aYMOND2zejEnpNOUVkn7v40
MD5 SHA1 SHA512 SSDEEP

Accessibility.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 929ea150ad45b7c7dd5427461fbec44d43b67c08081f59b42b6abf570feae271
MD5 fb554f9fe0b91f135d26ac6459cfd6f2
SHA1 b1269a2c28bded872b14fe70b69484631ef3a65d
SHA512 8dffde6cddfc59ec380111fd36048126559e1f1e080c081ca0d09021bb23d6888e93e1659c7b3a8fa46f76602b03cf3e638ec1a80fba79e51648dcb32362e10c
SSDEEP 384:qBmy0h6gSGRaOcHitWG/W65kHRN7lI+R9zJKBd:7SNOcHOUOi9zEBd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3d:b3:03:35:20:15:d9:fc:46:6f:49:67:85:20:31:22:00:7d:db:ef:9a:b2:64:29:26:cd:a1:b2:f6:de:58:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

16142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Coolex.dll

SHA256 c3713f9104b664abe8712c35436c1bb02319017b6c8c7d27fce95b9cf54e1bed
MD5 13034953bfef0f62b56f8da9c0241f05
SHA1 dc285a3549675369b0bd63b1490eedcdc3fa620c
SHA512 3b6b18685737acf20279f2d26b5d89f852958a46ce33214863b65a86fdc380a287ea2814afc7e9d06e366cd76eaf6a1328e3fda08ed21b19fbae088ec6d278da
SSDEEP 6144:8WG0YFxMEm0ip2amaatclQaRHU03jg9rT77HU03jg9rTV:83ZMH042tkR003UpX7003Upp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

.NET Reactor proctector

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Coolex.pdb

D3DCompiler_47_cor3.dll

IMPHASH 8235041cfd6fffb926142c2c78013446
SHA256 b23e7b820ed5c6ea7dcd77817e2cd79f1cec9561d457172287ee634a8bd658c3
MD5 03a60a6652caf4f49ea5912ce4e1b33c
SHA1 a0d949d4af7b1048dc55e39d1d1260a1e0660c4f
SHA512 6711d40d171ea200c92d062226a69f33eb41e9232d74291ef6f0202de73cf4dc54fbdd769104d2bb3e89dc2d81f2f2f3479e4258a5d6a54c545e56b07746b4c4
SSDEEP 49152:xCZnRO4XyM53Rkq4ypQqdoRpmrgBVYvkaRwv/ZD0/WYLDltog/RfznLeHTRhFRNI:YG2QCS6HHzog/pznA7T6VP
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

80:5d:c5:12:35:5e:e1:23:cc:cd:fc:86:0b:c4:64:6d:59:c0:f9:e1:ad:8e:a3:f6:ea:5f:b1:cf:f9:7e:07:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

10

Entry point

2702512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D3DCompiler_47.pdb

kernel32

WriteFile FreeLibrary Sleep TlsAlloc TlsSetValue HeapDestroy TlsGetValue TlsFree GetFullPathNameW GetFullPathNameA GetEnvironmentVariableA VirtualFree VirtualAlloc GetSystemInfo GetProcAddress LoadLibraryExW SetLastError RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId GetStdHandle GetFileType GetStartupInfoW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleW GetModuleHandleExW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx GetStringTypeW ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RaiseException FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetModuleFileNameW ReadConsoleW HeapSize HeapReAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwindEx InterlockedFlushSList EncodePointer InitializeCriticalSectionEx RtlPcToFileHeader LocalAlloc LocalFree GetFileSizeEx GetLastError CreateFileW HeapFree GetProcessHeap UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetFileAttributesW SetFileAttributesW DeleteFileW SetEndOfFile DeviceIoControl MapViewOfFileEx CreateFileMappingA ExpandEnvironmentStringsW HeapAlloc OutputDebugStringA CloseHandle LeaveCriticalSection EnterCriticalSection lstrcmpiA HeapCreate GetModuleFileNameA CreateFileA DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetDriveTypeW GetCurrentDirectoryW SetEvent ResetEvent WaitForSingleObjectEx CreateEventW MultiByteToWideChar SetStdHandle DisableThreadLibraryCalls

advapi32

CryptDestroyHash CryptAcquireContextW RegQueryValueExA RegEnumKeyExA RegOpenKeyExA CryptGetHashParam CryptCreateHash CryptHashData RegQueryValueExW RegOpenKeyExW RegCloseKey CryptReleaseContext

rpcrt4

UuidCreate

DirectWriteForwarder.dll

SHA256 778936b5baf157c3a040955bc637936952e7b68c5aff83536d4b613ed9691cde
MD5 69044c681ea1eedca54d13ed97e1452a
SHA1 f4fbb066afa38be160fc4462994b2cdb67af5cca
SHA512 4aed9e46d1670e6b85254bf905e4bcc53e3fa9d7e1b29d434c86ee42feb90a992e80057ad476ee4561389368ed8308e9f9548012d85dec26dcda9dc2ecb766d8
SSDEEP 6144:PQd8G8WEjiXSMYhtsOljgEk+hY8rY2JQT296UKf12fzfOqpo0EVbn95n3i1+wZ:P5G8WEjiX/Yvh0E9rY2NDJO0Cbn9d3S5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c0:e7:db:5f:05:14:d4:83:a1:e0:51:e6:e6:54:43:5e:47:0e:d0:02:f0:72:16:2d:9f:b9:6f:12:31:36:d6:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DirectWriteForwarder.ni.pdb D:\a\_work\1\s\artifacts\bin\DirectWriteForwarder\x64\Release\net8.0\DirectWriteForwarder.pdb

HPSupportSolutionsFramework-13.0.1.131.exe

IMPHASH ba4cda85ba69bfb46fc6e61210d29dde
SHA256 14dd09292763f926d46c49431fa4f7ba57655095470b16c5e9b0edf60354b30b
MD5 feeffa482dd84836437df11dbd8ed0ba
SHA1 28f4ba7c93fdfe0dfeb75b7b5bfba8eeb9de0bc9
SHA512 bee44f04e7f4a2beca5dbf12ce7692128e97aa49c34c51715dcb746e6eba1fc71bd5babf67988e8c23a27b5b1880f21ad7f4eef82d222d9a88da5d0b6ce2aed3
SSDEEP 1572864:Nw7SbroCw8KNHQETBC/fiW++dyTeHR8lcPRFRMA+QwaxX+svd:NMSbWJ9YfiWxPnX+sl
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

AgentTesla payload
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5041456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x86.Release\Corehost.Static\singlefilehost.pdb

kernel32

RaiseException FreeLibrary RaiseFailFastException GetExitCodeProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter AddVectoredExceptionHandler MultiByteToWideChar GetTickCount GetCurrentProcessId FlushInstructionCache QueryPerformanceFrequency QueryPerformanceCounter InterlockedPushEntrySList InterlockedFlushSList InitializeSListHead GetTickCount64 DuplicateHandle QueueUserAPC WaitForSingleObjectEx SetThreadPriority GetThreadPriority ResumeThread GetCurrentThreadId TlsAlloc GetCurrentThread CreateThread GetModuleHandleW WaitForMultipleObjectsEx SignalObjectAndWait SetThreadStackGuarantee VirtualQuery WriteFile GetStdHandle GetConsoleOutputCP MapViewOfFileEx UnmapViewOfFile GetStringTypeExW SetEvent GetCurrentProcessorNumber GlobalMemoryStatusEx CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatus InterlockedPopEntrySList GetCurrentProcessorNumberEx ExitProcess Sleep CreateMemoryResourceNotification GetProcessAffinityMask SetThreadIdealProcessorEx GetThreadIdealProcessorEx GetLargePageMinimum VirtualUnlock ResetWriteWatch GetWriteWatch GetLogicalProcessorInformation SetThreadGroupAffinity SetThreadAffinityMask IsProcessInJob QueryInformationJobObject K32GetProcessMemoryInfo VirtualAlloc VirtualFree VirtualProtect SleepEx SwitchToThread CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolTimer ReadFile GetFileSize GetEnvironmentVariableW SetEnvironmentVariableW CreateEventW ResetEvent CreateSemaphoreExW ReleaseSemaphore CreateMutexW ReleaseMutex GetThreadContext WaitForSingleObject SetThreadContext GetEnabledXStateFeatures InitializeContext CopyContext SetXStateFeaturesMask WerRegisterRuntimeExceptionModule GetSystemDefaultLCID GetUserDefaultLCID OutputDebugStringA RtlUnwind HeapAlloc HeapFree GetProcessHeap HeapCreate HeapDestroy GetEnvironmentStringsW FreeEnvironmentStringsW FormatMessageW GetACP LCMapStringEx LocalFree VerSetConditionMask VerifyVersionInfoW IsWow64Process QueryThreadCycleTime VirtualAllocExNuma GetNumaProcessorNodeEx GetNumaHighestNodeNumber GetSystemTimes GetSystemTimeAsFileTime GetModuleFileNameW CreateProcessW GetCPInfo LoadLibraryExW CreateFileW GetFileAttributesExW GetTempPathW GetCurrentDirectoryW GetFullPathNameW LoadLibraryExA OpenEventW ExitThread HeapReAlloc CreateNamedPipeA WaitForMultipleObjects DisconnectNamedPipe CreateFileA CancelIoEx GetOverlappedResult ConnectNamedPipe FlushFileBuffers SetFilePointer CreateFileMappingW MapViewOfFile GetActiveProcessorGroupCount GetSystemTime SetConsoleCtrlHandler GetLocaleInfoEx GetUserDefaultLocaleName LoadLibraryW CreateDirectoryW RemoveDirectoryW GetFileSizeEx FindFirstFileExW FindNextFileW FindClose LoadLibraryA EncodePointer GetEnvironmentVariableA DecodePointer ReleaseSRWLockExclusive CloseHandle TlsSetValue TlsGetValue GetSystemInfo GetCurrentProcess ReadProcessMemory OutputDebugStringW IsDebuggerPresent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetCommandLineW GetProcAddress GetModuleHandleExW SetErrorMode FlushProcessWriteBuffers SetLastError DebugBreak GetLastError SuspendThread WideCharToMultiByte InitializeCriticalSectionEx GetStringTypeW GetExitCodeThread TryAcquireSRWLockExclusive TlsFree InitializeCriticalSectionAndSpinCount AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsProcessorFeaturePresent CreateFileMappingA

advapi32

RegGetValueW SetKernelObjectSecurity GetSidSubAuthorityCount GetSidSubAuthority GetTokenInformation DeregisterEventSource ReportEventW RegisterEventSourceW RegQueryValueExW RegOpenKeyExW RegCloseKey EventRegister AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW SetThreadToken RevertToSelf OpenThreadToken EventWriteTransfer EventWrite

ole32

CoWaitForMultipleHandles CoRegisterInitializeSpy CoInitializeEx CoCreateGuid CoTaskMemAlloc CoTaskMemFree CoReleaseMarshalData CoUninitialize CLSIDFromProgID CoGetMarshalSizeMax CoMarshalInterface CoUnmarshalInterface CoGetObjectContext CoGetContextToken CoGetClassObject CoCreateFreeThreadedMarshaler CreateStreamOnHGlobal IIDFromString CoRevokeInitializeSpy StringFromGUID2

oleaut32

SafeArrayGetDim SafeArrayGetLBound SafeArrayDestroy QueryPathOfRegTypeLi LoadTypeLibEx SafeArrayGetVartype VariantChangeType VariantChangeTypeEx VariantClear VariantInit VarCyFromDec SafeArrayAllocDescriptorEx SysAllocStringLen SafeArraySetRecordInfo SafeArrayAllocData SafeArrayGetElemsize SysStringByteLen SysAllocStringByteLen SafeArrayCreateVector SafeArrayPutElement LoadRegTypeLi CreateErrorInfo SysStringLen SetErrorInfo GetErrorInfo SysFreeString GetRecordInfoFromTypeInfo SysAllocString

user32

MessageBoxW LoadStringW

shell32

ShellExecuteW

api-ms-win-crt-string-l1-1-0

_wcsnicmp strlen wcscpy_s _strdup wcsncpy_s _wcsicmp strcmp strcat_s strncpy_s isspace strtok_s strcpy_s _strnicmp isalpha strcspn wcsncmp isdigit toupper wcsnlen _stricmp iswspace strncat_s isupper wcsncat_s wcstok_s _wcsdup tolower towlower islower wcscat_s towupper __strncnt strnlen strncmp iswascii iswupper

api-ms-win-crt-stdio-l1-1-0

fopen _flushall __stdio_common_vswprintf __stdio_common_vfwprintf fputws fputwc _get_stream_buffer_pointers _fseeki64 fread fsetpos _set_fmode ungetc fgetpos fgetc fputc _wfsopen fputs __p__commode __stdio_common_vsnprintf_s __stdio_common_vsscanf __stdio_common_vsnwprintf_s fgets setvbuf fflush _setmode __acrt_iob_func _dup _fileno ftell fseek _wfopen fclose __stdio_common_vfprintf __stdio_common_vsprintf_s fwrite

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _beginthreadex _register_thread_local_exe_atexit_callback _controlfp_s _c_exit _invalid_parameter_noinfo _errno _wcserror_s __p___wargv __p___argc _exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv terminate _set_app_type _seh_filter_exe _cexit _crt_atexit abort exit _initialize_onexit_table _register_onexit_function

api-ms-win-crt-convert-l1-1-0

_ltow_s wcstoul strtoul atol _wtoi atoi strtoull _itow_s _wcstoui64

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode malloc realloc free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

_CIsinh __libm_sse2_acos _CIfmod _CIcosh _CIatan2 _copysign modf _dclass __libm_sse2_asin __libm_sse2_atan __libm_sse2_atan2 __libm_sse2_cos __libm_sse2_exp __libm_sse2_log __libm_sse2_log10 __libm_sse2_pow __libm_sse2_sin __libm_sse2_tan _libm_sse2_acos_precise _libm_sse2_asin_precise log2 atanh acosh cbrt asinh asinhf atanhf cbrtf acoshf log2f _libm_sse2_atan_precise _libm_sse2_cos_precise _libm_sse2_exp_precise _libm_sse2_log10_precise _libm_sse2_log_precise _isnan _libm_sse2_pow_precise _libm_sse2_sin_precise _CItanh _libm_sse2_sqrt_precise _libm_sse2_tan_precise _fdopen ceil floor trunc truncf ilogb ilogbf _finite fma frexp fmaf _ldclass __setusermatherr

api-ms-win-crt-time-l1-1-0

_time64 wcsftime _gmtime64_s

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

__pctype_func ___mb_cur_max_func setlocale _unlock_locales ___lc_locale_name_func ___lc_codepage_func localeconv _lock_locales _configthreadlocale

api-ms-win-crt-filesystem-l1-1-0

_wrename _lock_file _unlock_file _wremove

Name

.text

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.CLR_UEF

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

255KB

Virtual Size

254KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Microsoft.CSharp.dll

SHA256 df495f74456ad5ae30a5bac440b4d3808fa2d13c377cce1afc0146b8319ded6e
MD5 8e7612cc8019d952a93d9b777e71b802
SHA1 d973dfb790614e9a5e7c3ce8b421c085d11937ed
SHA512 3a818940d3c6f5da11bc86c974a54323ae2a1ad876613790ffe68aa5b674c54e5de0c133614236f45a89de86a5547cae4f8e6f2c97d7874221b2b1a285e14355
SSDEEP 24576:XUpXJ0Hy8Ext+9whtbSa0wHVu9yH1sCzwUD/zD:EpXiHyN++tbLzHVu9yHXPjH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

02:c3:78:d8:50:7e:b3:44:87:0e:a6:7b:cd:78:3d:de:af:fb:c7:4c:5a:a0:07:fc:6e:bc:9e:07:f7:54:68:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.CSharp.ni.pdb D:\a\_work\1\s\artifacts\obj\Microsoft.CSharp\Release\net8.0-windows\Microsoft.CSharp.pdb

Microsoft.DiaSymReader.Native.amd64.dll

IMPHASH bffa8501aec5c29321d36de57d4de8be
SHA256 76d0da51c2ed6ce4de34f0f703af564cbefd54766572a36b5a45494a88479e0b
MD5 804b9539f7be4ece92993dc95c8486f5
SHA1 ec3ca8f8d3cd2f68f676ad831f3f736d9c64895c
SHA512 146c3b2a0416ac19b29a281e3fc3a9c4c5d6bdfc45444c2619f8f91beb0bdd615b26d5bd73f0537a4158f81b5eb3b9b4605b3e2000425f38eeeb94aa8b1a49f2
SSDEEP 24576:qz0s9kT3H8I0bo5rjwjnbRCJMy37DjZ3IrVynoT/RUqtMAIEohkGXTwImgP:qYs9m3H5rjQn1CiAnZ3yV+oTZQEoTTH
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

PE Signature issue

Digest

c8:82:3e:a0:58:c9:a3:5b:24:e4:72:aa:89:c8:28:d2:1c:a1:f9:c4:e6:dd:b0:2d:28:52:58:e2:d0:35:00:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

6

Entry point

163376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\\binaries\amd64ret\bin\amd64\Microsoft.DiaSymReader.Native.amd64.pdb

kernel32

GetLastError FreeLibrary InitializeCriticalSectionEx GetNativeSystemInfo DisableThreadLibraryCalls LocalAlloc GetCurrentThreadId Sleep LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwindEx InterlockedFlushSList SetLastError EncodePointer RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW RtlPcToFileHeader ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW CreateFileW CloseHandle WriteConsoleW LocalFree FormatMessageW GetEnvironmentVariableW GetTickCount GetSystemInfo UnmapViewOfFile GetFileSize CreateFileMappingW MapViewOfFile GetFileAttributesW SetFileAttributesW VirtualAlloc VirtualFree DeleteFileW SetEndOfFile DeviceIoControl MapViewOfFileEx CreateFileMappingA InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared ExpandEnvironmentStringsW GetFullPathNameW VirtualProtect VirtualQuery LoadLibraryExA GetDriveTypeW GetCurrentDirectoryW TryEnterCriticalSection CreateThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CloseThreadpoolWork

ole32

CoTaskMemAlloc CoTaskMemFree

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

295KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Microsoft.VisualBasic.Core.dll

SHA256 34271825351d9871583dead758b44676ef2bac56c4b7ac7124fadb087ea44f6e
MD5 3a037c21af5742650933cebf0521f3d6
SHA1 8b22127c4feb185c5d02d83b5f1fe3815821036c
SHA512 3451bd4b3053d3834f07fc1d0d6a691fdadab2b7290d1ad21b48e9f319249aac89455b1caea463beb4b2910b90b7f8a518221b2f3b0e3863beca3104030c8ee3
SSDEEP 24576:qFMvfAlbPZy4jHHa2frxkxRecGSIsRv3i6hFqQX:qFMvolTvHHa2DqT3i4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6f:75:a5:d0:e8:0c:88:35:fa:e4:76:a9:e1:f3:0f:69:6b:4b:61:a9:fe:ac:1e:92:45:2f:e0:9c:4b:dc:31:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.VisualBasic.Core.ni.pdb D:\a\_work\1\s\artifacts\obj\Microsoft.VisualBasic.Core\Release\net8.0-windows\Microsoft.VisualBasic.Core.pdb

Microsoft.VisualBasic.Forms.dll

SHA256 62878ad85c315f06a00f7f1f543bba3f411838e80fb7bfe4d6f6ec935930efdc
MD5 79fe89013356423a12f52fb8a09a54c7
SHA1 3e5fda4b2c8d3b41c9b88404a01a2b8dcfd06ebe
SHA512 3a3d927a7944b40fcc6990c94574eb42b1e7fcbbd29f405d0dc5471c63549c63f7b7c61a3d17c2fd33cfc21c4bab0492e6532b6542cb4d24e10bd9dd0bb249d3
SSDEEP 6144:K6IA96ZdbZRjEtB5dzAbxbDme2NUIPOzQI:f9MbYZdGpgUwOcI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d4:6e:d1:29:a2:9a:86:1f:f3:d9:9f:c2:2b:14:60:08:f3:2a:d6:88:b1:29:da:68:83:a5:38:83:88:57:df:87

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.VisualBasic.Forms.ni.pdb /_/artifacts/obj/Microsoft.VisualBasic.Forms/Release/net8.0/Microsoft.VisualBasic.Forms.pdb

Microsoft.VisualBasic.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9d20ca17355838ff3d2f3c89fbaf7c705bd01d297d1eb589489a84f6430da894
MD5 e5ce0f3a5d15d8b6693724c40197a9fe
SHA1 2e0b6bfdbb5c185ca71fe1d5b5f0eab18d568471
SHA512 3b87f295c1d914dc1ae95798e2ee1fcef40dc0ab1688ec247d4c2c777c253912980ecc8bfba11f0327a9d8bda9c1c36752de9ba936cba902ccb4cbfa7e82a26d
SSDEEP 384:+2gfnShxL2GlzxWmHr9QdWTTb2HRN7AxR9zr75:+5n6lZlzX/iA79zh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

bb:f4:74:11:30:3b:ea:f7:8b:c5:c4:a4:59:8f:ac:d3:e3:97:3d:7b:59:80:a7:26:72:52:60:cd:63:97:d5:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

14190

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.VisualBasic.Facade/Release/net8.0/Microsoft.VisualBasic.pdb

Microsoft.Win32.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f1b40565e5c4c41da810aee5b7d2272a0906e88f796812435aa5ed712bcac40c
MD5 300c95ff95b52e8a02fec6bfcfa58225
SHA1 b646f89fcd463ad5c19889b4fea40540568b780c
SHA512 9bfe0eb6eea98b2d35aa42986a273ec82424143965e173b32bb4b7e5537580a027940a6952a45fc54f0b665e871deb2a95651106c2f24c7de3b3d3cd2dec7e89
SSDEEP 192:Vi0pAxFWh/pWYuWXebPpUNTQHnhWgN7agWlnfEl+X01k9z3AE1a9Fb4hk6gn:ViMeFWh/pWYTb2HRN7cY+R9zF1aLchkv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:80:b8:09:33:43:6a:f3:d4:08:3e:a1:a8:9f:d8:99:86:79:d4:46:4b:7c:e0:c1:ce:01:fe:e3:b7:a1:28:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\Microsoft.Win32.Primitives\Release\net8.0\Microsoft.Win32.Primitives.pdb

Microsoft.Win32.Registry.AccessControl.dll

SHA256 9ee0d84655655e39ede6d23aed940c98a3a8eb6270d878b252ea1720f750cead
MD5 8ed7b1aa897a85bd5619220f28be88ef
SHA1 539839a6fc00d462340d569fff8f42b06010df8f
SHA512 2caacc3f8b5084effeac526873365697f72e242fbaa71a94fe5e739dbfe5dd35a85ad618d31d2ddc65d648c3f2f5ad436d14f9d4bcaa813e88e4bf1643e3a196
SSDEEP 384:FWFPrWFVHFcKRKbUWTb2HRN7Jr+Hj+R9zjj2X:M6FvRKbH/iwHji9zY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7e:b0:c4:d5:d7:6d:02:58:b1:7b:08:35:5d:09:60:63:87:52:af:b0:7a:35:d8:ca:d6:1f:d1:69:53:83:76:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.Win32.Registry.AccessControl.ni.pdb /_/artifacts/obj/Microsoft.Win32.Registry.AccessControl/Release/net8.0-windows/Microsoft.Win32.Registry.AccessControl.pdb

Microsoft.Win32.Registry.dll

SHA256 e1c83bc80e79863e80cfaca350291ae5bdf942c59f39e812770039bdaa660ac9
MD5 b69cd4e54d44e1d73ebe2c1a492dff43
SHA1 44739e4f0a64cd1dce73afddae1e27c20e663757
SHA512 9aaf53d69401175f35f079b031806266ec419170205a0291f38986a4b1cc39704f1e081ff18d178b0fb9d9b5eaceca60384e7e1fa2eeaaab88b2e157a1f8e667
SSDEEP 3072:5vauwrxjsbG4TJ6UJSvEVcULVi8AiC1HLP:AQ64t6UJSvEVzIlb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

54:4b:c6:a8:02:f5:8b:89:f3:91:b0:b6:32:40:41:c5:68:ca:71:39:97:69:ee:67:1e:75:d5:04:7e:9a:31:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.Win32.Registry.ni.pdb D:\a\_work\1\s\artifacts\obj\Microsoft.Win32.Registry\Release\net8.0-windows\Microsoft.Win32.Registry.pdb

Microsoft.Win32.SystemEvents.dll

SHA256 c81a58bd27c74f91e26245c530c4cadc5425a1a1586886c6a5631eef9d81fde2
MD5 089edcaae873c9371b2dc9a4399f62b9
SHA1 441686e76986ecf295e50e80a78dc093dc9f9a02
SHA512 6b88f9264fdbbb0585efa21940fc888c593862ebb3bd305890294f64b37a81967a8ab2fbba30aa3f5db2994c25c57929df1644e269be898b77c77d4c0181f943
SSDEEP 1536:BF0vV+d5uN62jM2HHdKCqN/4IGrtsD3jvSD7Tir+zr:Bav8d8N5jpH0QIGrYjW7l3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

74:12:04:bd:04:8b:eb:5a:06:a2:88:6a:9c:fe:90:94:e1:30:cc:9b:26:ae:d4:5d:b1:86:d2:d7:2c:ce:ab:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Microsoft.Win32.SystemEvents.ni.pdb /_/artifacts/obj/Microsoft.Win32.SystemEvents/Release/net8.0-windows/Microsoft.Win32.SystemEvents.pdb

PenImc_cor3.dll

IMPHASH 4093c03428ffebcedcb974ab93290ca8
SHA256 f95b51b5bee746ea3430a277f0473f42e4e22fc12b8dbfc719346cee579b80ff
MD5 362e037c4be1cb28fac25612e9be029d
SHA1 4a11ab39dbd0dba5480f54324c58f8294b19ce5f
SHA512 945b6cc6cba7742323b6cc023eb78b227180bf8a0f8c134871948410b48d9399ae68f52ef80e18945fb018508f92ae6da9584c75c6f12fe06f6e86fdea4611d6
SSDEEP 3072:OzAUq2kMBlUb8BQLBzDUw7aaHSuEmUgPuoATZ+AiRvYY4ZmoJ:OzHkMTvmLtDUw2huEmd2LbYvi
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

PE Signature issue

Digest

4f:91:01:6d:3a:cc:e4:37:1e:b2:37:ac:a0:5f:ce:cf:27:95:b5:36:aa:72:bc:36:39:e2:4c:76:aa:2c:3a:78

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

6

Entry point

78352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\bin\PenImc\x64\Release\PenImc_cor3.pdb

kernel32

SetThreadLocale DeleteCriticalSection RaiseException DecodePointer EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx WaitForSingleObject ReleaseMutex InitializeCriticalSection CreateEventW GetCurrentProcessId OpenEventW OpenMutexW OpenFileMappingW MapViewOfFile UnmapViewOfFile SetEvent LocalFree SignalObjectAndWait IsWow64Process GetCurrentProcess OutputDebugStringW GetThreadLocale CreateThread QueueUserAPC SetWaitableTimer CancelWaitableTimer CreateActCtxW ActivateActCtx VerSetConditionMask LoadLibraryW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsDebuggerPresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext RtlPcToFileHeader InterlockedFlushSList CreateMutexW CloseHandle GetModuleFileNameW LoadLibraryExW FindResourceW LoadResource SizeofResource MultiByteToWideChar GetLastError lstrcmpiW GetModuleHandleW GetProcAddress FreeLibrary CreateWaitableTimerW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx RtlLookupFunctionEntry GetCurrentThreadId

user32

GetWindow GetWindowRect CallNextHookEx SetWindowsHookExW EqualRect GetParent GetWindowThreadProcessId CharNextW PeekMessageW MsgWaitForMultipleObjectsEx IsWindow UnhookWindowsHookEx GetSystemMetrics MonitorFromWindow GetMonitorInfoW GetDesktopWindow

advapi32

ConvertSidToStringSidW FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW

shell32

ShellExecuteExW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoLockObjectExternal StringFromGUID2 CoCreateInstance CoGetApartmentType

oleaut32

UnRegisterTypeLi VarUI4FromStr LoadTypeLi SysFreeString RegisterTypeLi SysStringLen SysAllocString

api-ms-win-crt-string-l1-1-0

strcpy_s wcscpy_s wcscat_s wcsncmp wcsncpy_s

api-ms-win-crt-heap-l1-1-0

malloc calloc free realloc _recalloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _invalid_parameter_noinfo abort terminate _initterm _initterm_e _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _errno _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

rpcrt4

NdrCStdStubBuffer_Release CStdStubBuffer_Connect NdrDllCanUnloadNow CStdStubBuffer_IsIIDSupported IUnknown_QueryInterface_Proxy CStdStubBuffer_Disconnect NdrDllGetClassObject NdrDllRegisterProxy CStdStubBuffer_DebugServerRelease NdrOleAllocate CStdStubBuffer_QueryInterface CStdStubBuffer_CountRefs CStdStubBuffer_DebugServerQueryInterface IUnknown_Release_Proxy CStdStubBuffer_AddRef NdrOleFree NdrDllUnregisterProxy IUnknown_AddRef_Proxy CStdStubBuffer_Invoke

Name

.text

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

512B

Virtual Size

197B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

PresentationCore.dll

SHA256 0c4fe5ce21bfb23509f3193a32baa41418495d17566c8001a6089366f02c997f
MD5 54a9ea4491aeee137812644020edf11c
SHA1 0f37d038a55de37f21ac7766445db834a4c4be9d
SHA512 4f0fe93075a1624d8ce943587f9e9279dbbd0ef555e16a5f959dc4cfc186a4efcf0606d9b787b0d051d589e16265130fce7e3af48188a77ae1751473e555b39b
SSDEEP 98304:cydX7XPKirgh87l92RB9ZlssbECcj538M/YbaHvskr:cCj7H2T9Z+sACcj538M/5Hv1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

bb:29:75:fc:82:60:83:5d:57:2f:1e:52:0c:7e:8b:12:3e:f6:2c:2e:a8:11:4d:07:cf:9a:bc:13:f7:99:04:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationCore.ni.pdb /_/artifacts/obj/PresentationCore/x64/Release/net8.0/PresentationCore.pdb

PresentationFramework-SystemCore.dll

SHA256 bcf0a82ed887754a9f757370bf640b2958ba4224540cc212a7beaa6ec69a3ad2
MD5 e068ab2203ec174d6beff4d3aeaceff6
SHA1 7e97708718523b2763db3a8d565b80e1ea2fabcc
SHA512 12ebf2ced7088dee33f6186731c34b7100df7f112c9b248a043f1d56947ccab32e95fe39eb89d74d781c33219edf219766a1f17ddec754c460ea4aaa8be24160
SSDEEP 384:v9WOL+8J5jfHlx8uQ7YADw7j7UnPYT5kHRN7DUR9zOA:7yejfHlx8uQ7g7j7Ac9zl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

76:0a:bb:95:1c:f6:ca:0c:44:09:4f:ef:9a:62:6f:73:b7:98:6c:93:62:4d:df:5d:4c:57:7f:cb:5c:8b:20:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemCore.ni.pdb /_/artifacts/obj/PresentationFramework-SystemCore/x64/Release/net8.0/PresentationFramework-SystemCore.pdb

PresentationFramework-SystemData.dll

SHA256 44fea2ffd9539324fb152448aace4069a16c0659f88e880426cb0d294257c0b0
MD5 df27fdb4821fcec67409f8339897ffa0
SHA1 6fe1f3cec9118ef2f32d0c26848b56db2e9e1262
SHA512 da9a2e63c5d3c61c10f6bcec211d6c16e5d465e4acbdd77b84c935414cb880ded26b37e19d514b655db194781c020dfd05db5132a6a7ca6daf60c38a9f29dfa0
SSDEEP 384:W99We7U38mYOqmMUIKRxo5kasgThHDTb2HRN7hL7/sWAR9zgP4:I8AHcgtj/il4L9zh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6c:0e:2d:61:02:4b:7d:99:46:8b:07:1a:a6:d2:e6:82:6d:aa:3e:0d:d1:51:45:8e:de:7f:4c:49:37:f4:34:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemData.ni.pdb /_/artifacts/obj/PresentationFramework-SystemData/x64/Release/net8.0/PresentationFramework-SystemData.pdb

PresentationFramework-SystemDrawing.dll

SHA256 64f6604fe859028f49340916e233f13482d3db1bc00db40115e1e682962cdd21
MD5 dc9732ad3060a97783634d74f0346993
SHA1 4c4e4980d6c8a4ad85ebf65c59e862de3701b067
SHA512 35e2528b160f457d47d6a260d6961881ebc856c44954d2ccd48be6ddf163ac3f72d9d5927ef9df3d088398cbcb3953d4dd0de3ce850adafa476615e7c7514d18
SSDEEP 384:0adWvS3Xsvy48q9kCcr6K9mN9xAhPS5kHRN74NNPR9zulJW:QcXsaEHoPTM9zk4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c5:0a:ad:04:09:5e:f3:40:64:aa:41:5a:c3:1c:bc:12:d4:78:77:17:07:1c:1b:61:32:62:1a:8a:3c:89:01:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemDrawing.ni.pdb /_/artifacts/obj/PresentationFramework-SystemDrawing/x64/Release/net8.0/PresentationFramework-SystemDrawing.pdb

PresentationFramework-SystemXml.dll

SHA256 b11df1284dd69b60277ad7c649c0a1391853c30d1633eb7bc66815b5b57cb0cb
MD5 e5e01a112a8fe6926515e2dc9bcf8f76
SHA1 1d2080a026e708f0ac581547f79bc92ecc932bd4
SHA512 bdd4fa8c7c17d1353fde6bbcd8d9bf7e47e3b3736e324b122d3d044bd4de847768476684af0452999171d8ae3db753718a97eec0e17d580a2e6d3b3992740fd9
SSDEEP 384:7dW7u+AEtRPrLfOx+GtH6fDo6YL4CFkTb2HRN7SW1KcYR9zd3eC5I:yTXPrSKk6m41/ib1Kn9zkCy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ae:8c:19:1f:90:65:a8:0e:00:28:cf:f0:12:1d:1a:43:73:c3:c8:6f:96:f9:7e:df:3d:81:c5:c6:46:db:d9:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemXml.ni.pdb /_/artifacts/obj/PresentationFramework-SystemXml/x64/Release/net8.0/PresentationFramework-SystemXml.pdb

PresentationFramework-SystemXmlLinq.dll

SHA256 e9e261830c076dec42f01374921501ef3a83fcc79a474b4da6ad0249c9777be0
MD5 f46145c2eefaf9236ef55bb891f2549f
SHA1 aeb4f62f51aedc382b65919a433348032e230509
SHA512 73c2378a29f3e5ef2e058caa209f235b5077a1133cf16b5ff9f78c03b69455aed2b7cf58399517351dae4b8262abcf768617bdc1a04312be14cc7988e3d050d4
SSDEEP 384:ldWvyiIyBk0HulEDk8hPTb2HRN7fO+Hj+R9zjjeh:kuyBVRDk0/if5Hji9zG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

03:4f:d7:d8:9e:8c:68:a9:fd:c9:36:46:6b:88:52:58:78:66:07:14:bc:18:46:fa:b6:47:c7:ef:b3:cd:6c:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework-SystemXmlLinq.ni.pdb /_/artifacts/obj/PresentationFramework-SystemXmlLinq/x64/Release/net8.0/PresentationFramework-SystemXmlLinq.pdb

PresentationFramework.Aero.dll

SHA256 24b81eee5b918fd6b0fb2ad88dbf1cc694f908b28acabc47d5f01a634804f7ac
MD5 956da05fa28aec596b2e01d8215fdcc8
SHA1 d94cfcc50d162b7109d970431e43ce4962025999
SHA512 d74da48cfa9b6614c7d11c640506bbdf87721dee92073292b43537be030abfecc873fa67575ff297bf486129bcce8d15005ab79d92d2a204c5faa5b36eccd86d
SSDEEP 6144:Q98rwxxnoe9afYia26hCI9kiadVkVPtfOlu:Qhzn19uzaFhCI9kiMkP1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

91:82:eb:20:be:1b:30:d7:60:d1:b3:80:aa:87:c2:4c:5d:9b:59:f6:e7:e9:53:4b:38:44:fd:2c:dd:e2:de:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Aero.ni.pdb /_/artifacts/obj/PresentationFramework.Aero/x64/Release/net8.0/PresentationFramework.Aero.pdb

PresentationFramework.Aero2.dll

SHA256 e86faa34363508fc253f2a7e1261c4603cae57d5e91f663761a946efe11b538a
MD5 b4d3c2885f8a61e7dd73bef12f958c8a
SHA1 4290d770add71dba12bf8d1f05adb5dbc3e18111
SHA512 b31a16ca71d228caf7bc30137bfed0eb7ea54d50ee85cb96272e2582d034ff3dd10ee7da6a06699f9b604721038fe613f1445ce31dd595d2d8ec72f37186c00e
SSDEEP 6144:F5fP7nVEPFm3kW5kTgraU9kioEBDPVPtfUUr:FxP7net7kkTgraU9kiLDPPR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

26:0e:d1:7f:a1:21:53:e2:78:b7:a3:ac:5e:42:e1:5a:3b:ec:58:6c:11:91:49:56:f6:40:e4:38:f8:ac:cc:b8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Aero2.ni.pdb /_/artifacts/obj/PresentationFramework.Aero2/x64/Release/net8.0/PresentationFramework.Aero2.pdb

PresentationFramework.AeroLite.dll

SHA256 c646fe54a9e2ee2349bdc25a3d3be095728b1d6bfa9743dc80829115b8169535
MD5 8bc611a7167eee966c126c294bfc4a42
SHA1 387c1f1c4283fc895c7408308bfafe4c5104fb6d
SHA512 3e2f900667fcb01b7a8b78915a8dd1f9c835ef9c3e441b1e548b1257fc3e7e3f3c62f33e5c376e0e998424d79bd89e52b0937354e49d1777ef8ebaafc86021c8
SSDEEP 3072:UU05HdISwFhxxtKriVWOFm7Y9Eq/2StV3feKu:r0JdINHdEq/ttV3i
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9e:9e:c0:12:fe:bd:bb:16:27:12:0d:02:46:bb:99:e9:86:0b:84:7a:e6:f7:7e:32:f3:5a:50:74:58:24:57:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.AeroLite.ni.pdb /_/artifacts/obj/PresentationFramework.AeroLite/x64/Release/net8.0/PresentationFramework.AeroLite.pdb

PresentationFramework.Classic.dll

SHA256 f7dde4e6dc549e4cf4e884b2bc850ba9fac3c17971a729a249a3faaa6807fa31
MD5 d094624d02409e8e3cff95c8b8df8f27
SHA1 5b889a894c61d08778c24ae2a290f9cfc2c79819
SHA512 ec2ee1cc713eddd8db644ef2c26cbf7c3224ef48fc3d336963107a58407656e80ffc507f52f261e13b6cb2296c03ce903c35a453c76da171176bb62c8ac2b17d
SSDEEP 3072:dqHyX7U01FlqnpoHiD3r6E+w3os53UG4N14dBhcA:gSLU0PonpWTw4s53DI4n5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b0:17:1e:03:77:c4:d8:40:fa:4e:3e:68:7a:bd:a7:de:f1:d3:29:82:13:d7:ae:be:05:77:bc:3b:8e:2d:54:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Classic.ni.pdb /_/artifacts/obj/PresentationFramework.Classic/x64/Release/net8.0/PresentationFramework.Classic.pdb

PresentationFramework.Luna.dll

SHA256 04d6231f385ea8bd69dd0736e734c82130c812ba43a29ec887579737b220a8c2
MD5 c1806c9b2ff527c5e1e45d5f2e5ace7c
SHA1 66557c21c512826146a8141e6b76d2dd9f1cc37f
SHA512 0f5ddcba338ff9e9f71bcfdf7303e16658660070e22659091e8a2c48dcb6723432acfdc68eb3a01e9769952d223ccdcd45b44af7a04c5e88be4cc1f6ae570039
SSDEEP 6144:kCx84tTzfaM1AgqQB7miOKyg1puryFj7SPgqfd77U4PQpUejSa9NLOQx+d:kUT7aMaSzOKy2r7SPN0UKS6Owy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

20:3d:87:6b:98:02:24:3a:91:cc:b1:f4:2d:c9:00:b5:5a:51:f5:97:cd:70:26:6d:4f:bc:df:44:e3:2b:19:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Luna.ni.pdb /_/artifacts/obj/PresentationFramework.Luna/x64/Release/net8.0/PresentationFramework.Luna.pdb

PresentationFramework.Royale.dll

SHA256 6ca46b29be2be63f2601778c29f6a409c2e38b6f6ee5c861b4169ac4c5b4d3a9
MD5 9ff70e0d720298a54f8e6ef0d150bcc7
SHA1 99aead2cbcacc039e4979142ca94134702852b58
SHA512 5453b8048bc7150fb3e93d4121bcd810409a96c259c6557c5d10cfe9511b9b908a6d220046dd68a3dcf21febac7d8b481d12cdd188e270dced0529e9f410341e
SSDEEP 3072:ZB3+s+BvvfIPvH96Xcfb81vFdqjdaiFH7NgiAeYnFm4v7OdOcU1U76ccO:D1wInd6Xcfg9UjYrLv7fUOcZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d5:a6:ef:d3:46:b0:b3:48:a3:53:ab:8d:0f:8b:2a:b2:dc:1a:e2:70:9c:21:e9:0a:2b:ae:db:a9:d4:54:18:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.Royale.ni.pdb /_/artifacts/obj/PresentationFramework.Royale/x64/Release/net8.0/PresentationFramework.Royale.pdb

PresentationFramework.dll

SHA256 ee16fa6feb06c981fcf32f21ca90bfd4d9f365d0e67ad9b3bbee6336cbf12e1c
MD5 ba6e68ef1f1265572d2a3fc021337f84
SHA1 ce444a26099be1e0ae0b711681a96a8f5e8b8d20
SHA512 e00af2bdb786909cbbd690cb8922e16065f21cf31a2b64c7046ac0097593d5344035b1cdb46e3cd58183851eb4fc08ac7b39dbd252b3f6f05dbe52ad8d927172
SSDEEP 196608:mCMisQjg71DbFZPrmlwBdlc27RkwsnNRAU/y:mCM4jEDbFZPrmlw/lc2tgeUK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

51:46:7a:10:16:6e:03:41:14:58:6c:2f:72:a0:e6:b0:1d:82:3c:a8:35:6d:fc:81:c5:f9:9b:23:6e:f0:27:85

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationFramework.ni.pdb /_/artifacts/obj/PresentationFramework/x64/Release/net8.0/PresentationFramework.pdb

PresentationNative_cor3.dll

IMPHASH a09c9abadde79aec9926dc99ee900a1a
SHA256 6d5910c0a0a4e3ee8863e4dadc73662d28ae9bfcda4a52960e26c1237386851a
MD5 274761a595f86982214221b5685b3218
SHA1 b908013028cb07fb799de2e48b6492404add6069
SHA512 3f9cf3d8e428619b798374f2e2a6ef9cf4213428277a74306978552772aae1a4a9ae7247c2dc893c0054d480dda871bbd74b0bc4afd65b0f584958d501ed8867
SSDEEP 24576:hS6Z8wCW4XArBKSyuvy/VKg0v7E7lITY7vYUNli1sR/HD0MEWhuoNajzuIWMMMQg:h18wCbArBK3H0v7wITcQUNlf/HDtuog1
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

d7:15:f6:32:3f:6f:c4:bf:ab:59:c5:d8:98:90:78:fd:8f:f4:e3:e3:6c:09:c2:d3:67:7a:8f:13:10:bd:1c:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

6

Entry point

5648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\bin\PresentationNative\x64\Release\PresentationNative_cor3.pdb

kernel32

UnhandledExceptionFilter GetCurrentThread GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetUnhandledExceptionFilter TerminateThread GetProcAddress VerSetConditionMask FreeLibrary GetProcessHeap HeapAlloc HeapFree HeapReAlloc OutputDebugStringW DeleteCriticalSection DisableThreadLibraryCalls LoadLibraryW InitializeCriticalSection InitializeCriticalSectionEx GlobalDeleteAtom DebugBreak OutputDebugStringA IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter LeaveCriticalSection EnterCriticalSection InterlockedFlushSList LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RaiseException EncodePointer SetLastError GetLastError

ntdll

RtlLookupFunctionEntry DbgPrompt RtlPcToFileHeader RtlUnwindEx DbgPrintEx RtlCaptureContext DbgBreakPoint RtlVirtualUnwind NtQuerySystemInformation

api-ms-win-crt-runtime-l1-1-0

terminate abort _cexit _crt_atexit _execute_onexit_table _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function

api-ms-win-crt-heap-l1-1-0

free calloc malloc

api-ms-win-crt-string-l1-1-0

strcpy_s iswpunct wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

user32

GetAncestor FindWindowExW SetWindowLongPtrW SetWindowLongW SetScrollPos SetFocus MapWindowPoints GetWindowTextLengthW GetWindowTextW GetWindowLongPtrW GetWindowLongW GetWindow GetKeyboardLayoutList GetParent GetMenuBarInfo EnableWindow

gdi32

GetTextExtentPoint32W

ole32

CoTaskMemFree CoCreateInstance

oleaut32

SysAllocString VariantInit VariantChangeType VariantClear

CreateDocContext CreateInstalledObjectsInfo CreateTextAnalysisSink CreateTextAnalysisSource DestroyDocContext DestroyInstalledObjectsInfo EnableWindowWrapper FindWindowExWrapper FsAddFigureObstacle FsClearUpdateInfoInPage FsClearUpdateInfoInSubpage FsClearUpdateInfoInSubtrack FsClearUpdateInfoInTableSrv FsCommitFilledRectangle FsCompareSubpages FsCompareSubtrack FsCompareTableSrv FsCreateDocContext FsCreateDummyFootnoteRejector FsCreatePageBottomless FsCreatePageFinite FsCreateSubpageBottomless FsCreateSubpageFinite FsDestroyDocContext FsDestroyFootnoteRejector FsDestroyPage FsDestroyPageBreakRecord FsDestroySubpage FsDestroySubpageBreakRecord FsDestroySubtrack FsDestroySubtrackBreakRecord FsDestroyTableSrv FsDestroyTableSrvBreakRecord FsDuplicateGeometry FsDuplicatePageBreakRecord FsDuplicateSubpageBreakRecord FsDuplicateSubtrackBreakRecord FsDuplicateTableSrvBreakRecord FsFAllFootnotesAllowed FsFFootnoteAllowed FsFormatSubtrackBottomless FsFormatSubtrackFinite FsFormatTableSrvBottomless FsFormatTableSrvFinite FsGetClientHandle FsGetColumnRectangle FsGetEmptySpaces FsGetFigureObstacleData FsGetFloaterFsimethods FsGetIntervals FsGetMaxNumberEmptySpaces FsGetMaxNumberIntervals FsGetNextTick FsGetNumberSubpageFootnotes FsGetNumberSubtrackFootnotes FsGetPageRectangle FsGetShiftOffset FsGetSubpageColumnBalancingInfo FsGetSubpageFootnoteInfo FsGetSubtrackColumnBalancingInfo FsGetSubtrackFootnoteInfo FsGetTableObjFsimethods FsGetTableSrvColumnBalancingInfo FsGetTableSrvFootnoteInfo FsGetTableSrvNumberFootnotes FsJustifySubpage FsQueryAttachedObjectList FsQueryCompositeColumnDetails FsQueryCompositeColumnFootnoteList FsQueryDcpLineVariantsFromCachedTextPara FsQueryEndnoteColumnDetails FsQueryFigureObjectDetails FsQueryFloaterDetails FsQueryFootnoteColumnDetails FsQueryFootnoteColumnTrackList FsQueryHeightDefinedColumnSpanAreaList FsQueryLineCompositeElementList FsQueryLineListComposite FsQueryLineListSingle FsQueryPageDetails FsQueryPageFootnoteColumnList FsQueryPageSectionList FsQuerySectionBasicColumnList FsQuerySectionCompositeColumnList FsQuerySectionDetails FsQuerySectionEndnoteColumnList FsQuerySegmentDefinedColumnSpanAreaList FsQuerySubpageBasicColumnList FsQuerySubpageDetails FsQuerySubpageHeightDefinedColumnSpanAreaList FsQuerySubpageSegmentDefinedColumnSpanAreaList FsQuerySubtrackDetails FsQuerySubtrackParaList FsQueryTableObjCellList FsQueryTableObjDetails FsQueryTableObjFigureCountWord FsQueryTableObjFigureListWord FsQueryTableObjRowDetails FsQueryTableObjRowList FsQueryTableObjTableProperDetails FsQueryTableSrvCellList FsQueryTableSrvRowDetails FsQueryTableSrvRowList FsQueryTableSrvTableDetails FsQueryTextDetails FsQueryTrackDetails FsQueryTrackParaList FsRegisterFloatObstacle FsReleaseGeometry FsResolveOverlap FsRestoreGeometry FsShiftSubtrackVertical FsSynchronizeBottomlessSubtrack FsTransferDisplayInfoSubpage FsTransferDisplayInfoSubtrack FsTransferDisplayInfoTableSrv FsTransformBbox FsTransformPoint FsTransformRectangle FsTransformVector FsUpdateBottomlessPage FsUpdateBottomlessSubpage FsUpdateBottomlessSubtrack FsUpdateBottomlessTableSrv FsUpdateFinitePage GetAncestorWrapper GetFloaterHandlerInfo GetKeyboardLayoutListWrapper GetMenuBarInfoWrapper GetNumberSubstitutionList GetParentWrapper GetScriptAnalysisList GetTableObjHandlerInfo GetTextExtentPoint32Wrapper GetWindowLongPtrWrapper GetWindowLongWrapper GetWindowTextLengthWrapper GetWindowTextWrapper GetWindowWrapper GlobalDeleteAtomWrapper IsPrintPackageTargetSupported IsStartXpsPrintJobSupported IsWindows10OrGreater IsWindows10RS1OrGreater IsWindows10RS2OrGreater IsWindows10RS3OrGreater IsWindows10RS4OrGreater IsWindows10RS5OrGreater IsWindows10TH1OrGreater IsWindows10TH2OrGreater IsWindows7OrGreater IsWindows7SP1OrGreater IsWindows8OrGreater IsWindows8Point1OrGreater IsWindowsServer IsWindowsVistaOrGreater IsWindowsVistaSP1OrGreater IsWindowsVistaSP2OrGreater IsWindowsXPOrGreater IsWindowsXPSP1OrGreater IsWindowsXPSP2OrGreater IsWindowsXPSP3OrGreater LateBoundStartXpsPrintJob LoAcquireBreakRecord LoAcquirePenaltyModule LoCloneBreakRecord LoCreateBreaks LoCreateContext LoCreateLine LoCreateParaBreakingSession LoDestroyContext LoDisplayLine LoDisposeBreakRecord LoDisposeLine LoDisposeParaBreakingSession LoDisposePenaltyModule LoEnumLine LoGetEscString LoGetPenaltyModuleInternalHandle LoQueryLineCpPpoint LoQueryLinePointPcp LoRelievePenaltyResource LoSetBreaking LoSetDoc LoSetTabs LocbkGetObjectHandlerInfo MILGetClassificationTables MapWindowPointsWrapper NlCreateHyphenator NlDestroyHyphenator NlGetClassObject NlHyphenate NlLoad NlUnload PrintToPackageTarget SetFocusWrapper SetScrollPosWrapper SetWindowLongPtrWrapper SetWindowLongWrapper

Name

.text

Size

947KB

Virtual Size

946KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

195KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

PresentationUI.dll

SHA256 ee9e588dd3a3902f2f864c8dd7cb5fcab7c9fe3513af2b16f3a04c0d32eb306c
MD5 a8c64156aae90700e637b4d37e4744f8
SHA1 97c6aff2c92268f6dfe55a03e4c3867ef2506e23
SHA512 fb1c22b8307d58fe261ffa7eb1573e0631e2d3ae8e5e92220ff66712548710435e175730623e8e2baf39010a28dd9d80b16d54b867928fdd94d37244d0b83143
SSDEEP 12288:3HDpeJwwGlyTcnsQfoVGd3HyG+lfpaZxu7YJszbxho/tn7JAqkFU1j:3leFGlyXQfoVGd3HglxOiyothoVKjFUJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

69:6d:42:33:25:52:88:b2:7e:5d:fc:a6:5d:22:45:4b:95:18:8e:11:0c:cf:52:2f:38:ef:e0:ab:c1:81:67:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

PresentationUI.ni.pdb /_/artifacts/obj/PresentationUI/x64/Release/net8.0/PresentationUI.pdb

ReachFramework.dll

SHA256 fcba0de6e41d7185ccae2cfcfaccd958d292c2d46bfa4e3a6a890a1125927786
MD5 45141c686f0155c1639abb4b56475d74
SHA1 bda83a234e5f55ba752a3e176d49895eef259450
SHA512 1c0931eb684e823008f6917b90e6c334d2f364c5b4f537191d5577e08b7aec3bf95b7adc8ef0a731722afc7cb09fed8f03fe492e087071677baa2e9dad796959
SSDEEP 24576:1lD8ahVapeI9cA8sLkDo5fNxlcVTIDDCPBNNfMqRyc2F/:1lJhVe9c3sgDoZNxCTIDOvNf2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

11:b8:54:8f:74:e5:c6:2e:6f:46:b0:5d:8b:a3:ef:36:4d:50:24:dc:60:ac:40:e2:00:29:df:0b:a7:55:5c:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ReachFramework.ni.pdb /_/artifacts/obj/ReachFramework/x64/Release/net8.0/ReachFramework.pdb

System.AppContext.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9330d86e385ba4b57df1f7fc632a54c995ba0a5ba5d1aacef8636170175afc44
MD5 fa6e0a7fd3678a68bf33eb42707f22e0
SHA1 8a0341be2b97dfb25633d8f966b29c5f072f25dc
SHA512 71d777d2343f9c2d1364cc4542e5346018f01df9a1558c198ac8a9b0d448bdc731bbe4abe9eafdf5a252e04f47614adb61d0cd2928d878fbc8069e8d1886f706
SSDEEP 192:xYjLxA5LWY7WlsuWXebPpUNTQHnhWgN7acWP6d9ZnAOVX01k9z3A+vEDPL:xkFuWY7WWTb2HRN72631AqR9zdvwj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

23:47:32:40:39:c3:e8:17:e0:b1:58:c2:32:f6:3c:c4:5f:69:26:8d:71:02:86:63:2c:22:b9:11:9d:05:8c:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.AppContext/Release/net8.0-windows/System.AppContext.pdb

System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 690ef287a0331844cc83fad41417992b5bf65590cdf803377802dd94a05cc0df
MD5 0ee3421b5e820a5eb84aa26fc69409d1
SHA1 7d7af7d3d87b33e3f65a3cdfa84bb073e0b91eb1
SHA512 27442ddc8eb876f76aeaf4d80f479d05dab6817657f50699527b163e855561812f48f4a11d5fc84c148d5f928cfc91476686eeb479580e2fe1f71a85980bffb9
SSDEEP 192:z8lEywWN2WSuWXebPpUNTQHnhWgN7agW+5E17weX01k9z3AIiajs:zCqWN2WSTb2HRN7Va1nR9zZiag
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6d:88:14:f5:c9:70:88:f1:5a:a3:e8:d9:6c:e4:1c:3f:45:5e:17:d8:94:13:b4:2b:6f:74:46:3f:65:a7:09:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Buffers/Release/net8.0-windows/System.Buffers.pdb

System.CodeDom.dll

SHA256 bef3d38262ac88973c75991d5bc0780451218411605dd4105005fdb8457de47e
MD5 423510911e34708b110a174a81973979
SHA1 e356c7bc609d4f88f1eecbadf0f4e361dba7f990
SHA512 cde9c8503e87e3886e3825c017997f4e15159bb45701471d406cf5dca3d7581ab215374e36d421c5275835be104decb419f1f706274932863c32080d34332ea1
SSDEEP 12288:NCh9uyP6PdVVoOOT8K+1xHVCwX3XozH+OS7W:95nXQH+OSa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

57:9f:26:00:d0:6e:26:99:59:06:4e:a5:b0:ef:a7:c2:b7:a2:ee:a4:b8:0e:71:a1:79:0e:a6:34:e3:65:5f:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.CodeDom.ni.pdb /_/artifacts/obj/System.CodeDom/Release/net8.0/System.CodeDom.pdb

System.Collections.Concurrent.dll

SHA256 483130bfd1e57a0cbfd8a4f3c6e2353ac3f246276f9476c83cca1cadbc47ef47
MD5 38d21e067d7673194a84cced59066ac8
SHA1 e64362176f714b23603f3a67f1e741f12e35a832
SHA512 3fa6f78ff0cb527a8e82261549f24a8609d005821ac5c5e7257670dffd55472a134af3ef78d73779758303ae5a90728181cd4caebc871c5cfa4c309141201baf
SSDEEP 6144:2iRqH6Vc0J5xC4esICA2t6FeehhyO2lbkMzl:2is6Vc0J5xlepxhD2lbb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6d:d2:65:3d:71:56:3b:9f:62:68:c7:c6:2a:2e:f1:9a:27:df:bd:28:a8:47:4a:2d:55:d2:f1:94:a6:dc:78:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.Concurrent.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.Concurrent\Release\net8.0\System.Collections.Concurrent.pdb

System.Collections.Immutable.dll

SHA256 91f93971c94fd0e3765f2e5faa0b358ea15de21171d195dee7ca6e5905d347ba
MD5 df8236641aca7412f02f7625a939d61d
SHA1 93fb7b8d1c48065629d8fcf2236124dcabe361e8
SHA512 afe817f7f20f85efd98eb46dfc0a7d00c1e514a0e8de47aa1c3a501972439405f157e1e3df2f3e61977d069a93df8ee3092e5ae62015b00dfd04a609f29e9e7e
SSDEEP 12288:YoYT9CIM2PC7hLp2qkJp73BOIl7fcPPWk50T9YLVgy8KtVvfJltyDM3:E9CEPC7hLpGOor8V8KnRlty43
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

0f:15:d0:17:ea:86:31:44:df:23:f7:c3:9a:8f:d0:cf:99:be:df:35:aa:2f:0f:2e:5b:27:16:52:9d:5c:0f:de

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.Immutable.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.Immutable\Release\net8.0\System.Collections.Immutable.pdb

System.Collections.NonGeneric.dll

SHA256 5dd2ce348f35b191de8216880c1868cc135b4752d1e4154e55781f0c71150991
MD5 fd2c4f590b3ac6db7fbef0d98884bd0c
SHA1 de4b191f78b2dc8108c3295d90795c643fbc03f7
SHA512 ba9aa00e9339ad958f1f4bcb59624204f7b8c37822aa96afb99341c23ec291be4dbae47825070086acd0221c45a3fabbdfd3728af9a869d82ec9972214fea33a
SSDEEP 1536:MfktJ1UcLrxBLPwLGVhgHXVrMZ1EkDWtBrixAzZW:Mfk9vzw3GZxDBAU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d2:cd:c7:86:57:99:7f:02:7b:8e:53:46:1c:a0:b5:ba:65:f3:d2:a5:53:d1:cf:30:e5:1d:df:9b:3d:23:56:b2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.NonGeneric.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.NonGeneric\Release\net8.0\System.Collections.NonGeneric.pdb

System.Collections.Specialized.dll

SHA256 0cbabb81eae22f4c07c6c846054d207ae3f25da15649eb7fa29e4e2cecd24db4
MD5 cc26e9e30ffab763a1e54c0ef3713382
SHA1 c3be6646b7a4576ebd7729dbf4dccbd1fc159d51
SHA512 c8e57fb70cfa7667f9a5484c99eedd0bf34004ee26e9642e99a6b90624caa804af571d8aaafa7e9b121550af58205f8ed197b4ddb928210d394ff0b4c1897149
SSDEEP 1536:zytht+6ABaq3+e7H0V620VCTBUsqEfO8ocgL50+d0Tfri7E9zTK:zyQ6AsuH0EHafO8ocgLa+OD+E9vK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:a7:2c:a4:39:23:d2:90:c2:13:d6:cf:15:cf:b5:46:11:54:19:b9:a5:0b:1e:05:4b:f6:54:d7:98:79:84:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.Specialized.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections.Specialized\Release\net8.0\System.Collections.Specialized.pdb

System.Collections.dll

SHA256 9193aaef3ea8f19408f88c25fcaf5880e7836d1c35028d7e4077f6090b083541
MD5 92063926c04f2e4bf5b5fde16542831d
SHA1 e7be34eaff2d3d8796911d21f1fdbb93bf231dec
SHA512 e855ee37980d1da2d143ee39133b05fff81937e529cffe74433e73088549daabd3abadbf05f3765bf3ffffd50313f0ed966efec0eb244d7363241affd73cc29f
SSDEEP 6144:rTiKoXLjWvcp1Y5eRWAbQW0ryS1woJl3YNM:fTCjWEzceMiD0rGMVYNM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b6:5c:6c:c6:8f:28:c8:6e:1e:a6:e5:69:8c:cc:14:4c:1c:03:20:5f:fa:b2:1a:b4:40:63:b6:fd:2f:ff:8a:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Collections.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Collections\Release\net8.0\System.Collections.pdb

System.ComponentModel.Annotations.dll

SHA256 87be4f5269bc8f333b05b6dbdb22aa63760fd99ec3bff1a7659c792a0870ce61
MD5 a941186e3fce8b39cfdcd6436268d8ca
SHA1 9b605bc37cfed30957afb9de865d063972ccae47
SHA512 7351d5a898905808d3145b39a7bb7e55572fa998f6c2b18d8d2cbc33c011d324d8996a1341a16db777d876e39acd69ffd28c7662cfb54a36a25dcef7b6f94034
SSDEEP 3072:f7S/bT6pVfkVy28FjFHzdCLoWOizZspHmMWParD5/oE5bF6dN/AZUJ5Q:eH6IVDCj29OpHzWParw/AGDQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f8:e4:a4:6b:b7:82:05:c2:fe:50:8e:fe:a0:4e:18:d3:8e:46:3f:32:b0:f6:8b:c0:02:28:7f:d1:3b:be:c3:5f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.Annotations.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Annotations\Release\net8.0\System.ComponentModel.Annotations.pdb

System.ComponentModel.DataAnnotations.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 55fc20b450b928f8dad5db2370cba5ed2f95c103b78879a9d100af3375948edf
MD5 e20acbf0eff2325cb84eca7cdd6edb87
SHA1 904dfc9c03c2266b681abe55e6d3dcd1502f9a99
SHA512 ee71ad8eebcd46ed9baeac99e7bf686fb1feda7d4d109d0dd1533e2570ce5cc7c3551b21543e40078e19eaa0182f919b3c3d6bcc428c5d3ae6ac0baad7978cb1
SSDEEP 384:OpmblJeIeGXxSolw5WMXW2BTb2HRN7WgU0hR9zrg:OLxhDB/iWgD9z8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:e1:c1:60:86:64:7b:b2:72:27:2d:66:ce:ed:a5:2f:e2:86:c7:28:53:7f:6a:d5:60:e0:ca:28:9f:de:0e:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ComponentModel.DataAnnotations/Release/net8.0-windows/System.ComponentModel.DataAnnotations.pdb

System.ComponentModel.EventBasedAsync.dll

SHA256 4c97d7bc0742faaa52ba86018b040aac44ddfc88a5835f9e6a659e03b4558999
MD5 333639248121fb67d18323613a8203ea
SHA1 0cee5f7d46596239b833b3b30dccde27b0136959
SHA512 714fcb7299abcb26100b5f4103834c11c58f535ee9853fca2bcb22f43a3d1e7608d6ccae2dcc93d1687a4f1c8b521afe683d537f70f858681e62fff2d79c4acb
SSDEEP 384:kWMwW9TY/udWBj/D3OLIiQfpK1sL9wkS89KJMfCvDXxO88+aEZ4jIwVKBvHN4LiQ:ambUQk6BdY88IVMH76/ikL9zRiJu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2f:b3:a3:83:11:5e:c9:cf:81:1f:56:bf:9d:22:bb:13:c5:07:b5:29:68:a4:f3:9c:ab:a9:ce:61:04:f4:32:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.EventBasedAsync.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.EventBasedAsync\Release\net8.0\System.ComponentModel.EventBasedAsync.pdb

System.ComponentModel.Primitives.dll

SHA256 133ec34432ab8fa4f63ade636193864b6a62a089a0c98d746f5532c8a52f437b
MD5 1c59c00ab0850af4b4d2bafd6be47db3
SHA1 4c6185b2f42987e25a5fdf2aa30cf4150de25d5b
SHA512 8425c02c4afb274e862e4ed5dd1c766ebfa1bcf5bf59018d86238014a52603331a8b7c1e233f5a1f22171e90132ddd585db0d2561ff2cd287d703397afdff4b1
SSDEEP 1536:464czT4uhNTqp6e/kqbvD2ols4/b3tKigz+:4a4MT86jqLD2om4/wq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

32:a4:82:9f:42:bf:94:ac:13:4f:ff:13:8f:ff:7c:89:20:c0:d7:ba:e3:96:7d:53:e6:8b:b0:cd:ed:ee:4b:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Primitives\Release\net8.0\System.ComponentModel.Primitives.pdb

System.ComponentModel.TypeConverter.dll

SHA256 88129c110d748f7c8ef8a923f68cd26d39e0505b49bf5cc10cbd23b92f1a00a3
MD5 f6f78df8a3ef64639ac0cb7de24ed66b
SHA1 384422c0ceb6bb6870c4f7d9074e9c78d33e4c0c
SHA512 ed63f75e3477196b5308c42f259c0294a29ef5edf6eb0df4f8268be3f0495b9cfd8ca3467bc1574db142571c368940468bb84d14c26aaccacd6eee66ddd98403
SSDEEP 12288:t4norLVEFhHbZCalEAlo5hvup3WdofW6vKWMpBiXxD4PzF1zIeHeVAVS1:yorCFhHbEuEAlo5hvuyl6vpMpBimP5W7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4f:73:74:c4:df:f8:c6:fa:fa:2e:2e:eb:a8:18:8c:7f:fa:cb:18:98:c5:eb:c5:82:b3:9f:5f:26:2d:5b:d4:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.TypeConverter.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel.TypeConverter\Release\net8.0\System.ComponentModel.TypeConverter.pdb

System.ComponentModel.dll

SHA256 f3cf7c20f19a55a2f960c6a8a9e3e9cdb9c9bf100f2322b3883ed306b18c8f94
MD5 b5e52d6555a3011264bf800e3870ffe2
SHA1 c6e8107dd1716d1724a2dfd13c1d6ae250198e8a
SHA512 14e33755ce03871e6ab9ccf4b80a17b483786d67cbaeaa6217a07a1c792f45c46dbc5a24b3501ab14b77bfa5bec8b96c466cc803f06dcb4f7b78315bce23a4be
SSDEEP 384:cWc1WqUqPK+q0QM2Tb2HRN7lt5KlO8R9ztgbaWD:Smd/in6OQ9zm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d5:d8:ab:94:ae:e7:17:7a:61:68:fe:c0:4c:43:3b:3d:53:b9:3d:50:8b:91:4e:11:3b:c8:f9:e6:d0:dc:97:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ComponentModel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ComponentModel\Release\net8.0\System.ComponentModel.pdb

System.Configuration.ConfigurationManager.dll

SHA256 3207736195a0fa7bf04c183fb90e3b12f5601fe3ba1a8304e611b43b6650ef75
MD5 9a7555bbdae64a0a489ccc9a11749d50
SHA1 e0ec621aeac19b01ca58d9952178dcf90c0daf83
SHA512 c2e2da893d93e639a488afa3ab559c557f6fde245f64cc2f56a31e6f5c9cbd614411b85bc9290fb177df2e142eae5dc50c37c741d5a57dcfa7b032f0d18543da
SSDEEP 12288:E8r0pc/CfOsdV0Z8oApKK1sPTdokGH5OTNWLOdN2F4yOh4MyS/5vmXHAB/GEjxwI:2G/Ho4y4ySgy/GiPaIP16u9R396u
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c0:92:83:7c:15:0d:94:74:dc:97:bf:fc:65:37:47:8f:82:f2:50:15:40:44:0f:a0:49:f1:dd:5c:06:80:b3:df

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Configuration.ConfigurationManager.ni.pdb /_/artifacts/obj/System.Configuration.ConfigurationManager/Release/net8.0/System.Configuration.ConfigurationManager.pdb

System.Configuration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 000f40712b72cda4d840d55de95e9110ef32cf109bae4cd17a029feafa45788a
MD5 5e074252ef7238a66234356f12c74471
SHA1 3d21d7d84ca6cd2ef311d2aa2e2c5a8b10e00992
SHA512 ed5cb57742098fef5d1efc59623ee3ed9aad5122fec9d3d186b385d8a33a14f3508ebddc2347e7ca43811eb8fee5fcd62ad6b8f8e297f9359d7a928c4c971f78
SSDEEP 384:pMXTSv/fUNRvGZYdf3zyP/web+3HNWTNWvTb2HRN79NVUR9zDrb:oQbh6/i9w9zHb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

dd:89:58:70:4e:e4:69:e3:ff:77:d5:70:69:e0:5d:64:6b:6a:f6:30:52:7c:78:d8:6c:03:91:b1:fa:a0:2d:b9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

14454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Configuration/Release/net8.0-windows/System.Configuration.pdb

System.Console.dll

SHA256 a09981216f1eb9796ac5cf9fe883b9eefca8a4d5d5b390f704deb605c25e8c8c
MD5 ec7473793dec6b5d4a5157673ed39526
SHA1 71533195d4344fd3f123680d356513cf7fef8693
SHA512 cf0df6c844d76d449caa8a4463c87d72e531fd99dfca916a7435f391dcb53d623045e2b3c9f3f0f98539385123845758e27673eed88677983ffe2c4e57e7461d
SSDEEP 3072:CoeeEmXxzdfV6Y11+RmeV9viGxARZvY52ZwUIR1BB12z:se1XbfV6fB9Nx2ZvyeViBa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

92:01:ce:b0:ef:70:3a:36:45:2c:35:99:51:4e:b7:07:7d:67:6a:cf:17:9c:a6:b0:ef:6e:26:e7:7c:54:ac:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Console.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Console\Release\net8.0-windows\System.Console.pdb

System.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8a30961efd9f7cf8f848d215d161f4367c2331187350ae430d0c7d9160105bcd
MD5 572adf4a7d506a009e064c9244b7deb8
SHA1 7ace65e4e6953018a164d0b04ea7d8639126bb18
SHA512 f5f329c5cf905a3c4b66f17295ad562ce07aecb82192131c5492f761418276249be5f4344de22a5956836ce32e0afae7f1c4ca590bcc4809b6b307c3579db5ac
SSDEEP 384:OoS9H4Ay0l9Jr3OzFPhoact/iKMePLexkrW1rU1ZXtAdE3W+2W4c5kHRN79kNNPI:O/9H4Ay0l9Jr34FPhoact/iKMePLAxim
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

11:58:27:66:a6:0d:98:16:3a:63:07:06:15:3e:96:c9:4a:7c:f3:d0:f9:32:66:fb:c9:0c:a8:43:f9:fa:9f:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

18630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Core/Release/net8.0-windows/System.Core.pdb

System.Data.Common.dll

SHA256 f589a8a65f63d9a1b724d02a0f6f034da73bedf3299254dcccf8933df0fb5ead
MD5 eb7ddce89af66fa5f63fe4f5f047f259
SHA1 767cf0e5144f899cecf444e63259d784be3fa9db
SHA512 24ea83a5b10cdd2da0e1cfee4d20f5a83756cb72d190485b2bd865d08207ce001ae533150d4523336a9ec080d8cbe4cea3e28bb639d4853f6526a8607e119e8f
SSDEEP 49152:HI1lMhAeW3V/XeH/8rl4GrCBStAZTxyiNe7bfslaf/p80QqcsG5hBh+EX1bCM:o1Oh3fE4g7bfslaf/p80QqcsXEp5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

57:a8:3f:cc:ce:13:2a:11:31:24:05:89:d4:18:09:fe:5f:d7:8d:91:ad:f9:0e:be:d6:cf:08:57:1b:1c:e9:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Data.Common.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Data.Common\Release\net8.0\System.Data.Common.pdb

System.Data.DataSetExtensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aab6cdb61e85c65fcb0c6e79892cc4ed15224fbd3c2e122c98261d505d4960bc
MD5 96214da14b99f0cd913fe09d13d2df39
SHA1 ea2753f9d9d746101bbb90a9d617b72146a2d692
SHA512 c31d24ac21d6d8ff937467263bfbfc583e8d1d27ec71d865ad9cbc9e8c5cb26dcee841a4e61cb07a9e9ab4acc255ffb89606b1d097f9f8f7372754ebc369cea2
SSDEEP 192:lmoBF/PHVWE7WycuWXebPpUNTQHnhWgN7agWd2ngqtVVwX01k9z3A41p4Mp:8ov1WE7WycTb2HRN7WkVwR9zP1/p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

87:be:4e:a0:68:5a:f6:d9:7f:a5:05:a4:58:e9:56:d0:4a:c5:5d:41:8d:e5:17:07:ea:21:fc:34:1d:67:8a:00

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.DataSetExtensions/Release/net8.0-windows/System.Data.DataSetExtensions.pdb

System.Data.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 80d6011ab896e48452d0842d49072a23ebb2a50d57a7a99d1e6cf7f1684afe97
MD5 208884e480efdc6c4256e9c0c98bd55b
SHA1 1c04853a8c5acb37c608ec1824f62550dee26839
SHA512 35ec99ede81e76b89bc2b16f319a0a305eaf4b7c539fb36d900e4b82cdd0bf48abe003bb23c08e0d95148509f3a84b72939a79873ded90d47bc2a08cf8bd162b
SSDEEP 384:XMAAaFiTCmM82SuxDJQ/W+FWkTb2HRN7V5DNR9zqt9+aHi:cpaFiTCm0DJQ59/iL9zjaC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f1:ae:9e:dd:99:c7:f3:ec:aa:4d:10:5f:03:c0:1c:81:c3:9f:a6:17:68:af:fd:09:cc:11:4c:18:91:60:c8:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

20466

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data/Release/net8.0-windows/System.Data.pdb

System.Design.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 79c08ec9dd36d31da5aa6f038cce721827541e4ae568124ca429a3fee5edf1a4
MD5 048acacc7ab553c8b736c5cfb951fabc
SHA1 997d0ddc1b4a42c84393d55b3e6dcb7ee74cf1b0
SHA512 be37a0d345d9b9e8ec17afa45e625cac1d19fbe4f1531246211ced6c4f635e76fee3616c36a1fd5d6c9f5477be2ac6792e325b520cca7268143c5b0eebe2cbdc
SSDEEP 384:ZkuzLRrw/cSmWtGA+bE+WOHWT5kHRN72HR9z3oq:ZkunRrwPtGA+QuF2x9zYq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ef:6e:75:66:e5:db:84:98:e2:4e:b1:49:f4:0e:de:35:5f:33:90:96:0a:a6:25:f2:28:ee:b8:9c:c8:4c:8e:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

17334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Design.Facade/Release/net8.0/System.Design.pdb

System.Diagnostics.Contracts.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7386471664aae8a26dd0179a259da3aae08d32ec1d2121af81801293ad44f570
MD5 ea3afb3384ba1588f760a39fa36ab693
SHA1 f35708ee0f2adff401fcb468af7a4d15b3563376
SHA512 929c0b8411175de0a13985ac8a8ec4b874ef454801da7441a8817e65b7bdd4267f96491f386c66dca29190a4282165d50ce2a3593c0e5dea784f83327b994340
SSDEEP 192:AaLRZtxihW72WR3WT56Os1HnhWgN7agWfSf4Kp13s5yX01k9z3Agrf8/6:AatRiW72W05kHRN7vA2cYR9zPrf8S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

49:de:09:5e:b1:5b:9d:00:a2:75:17:45:3b:09:08:cc:2e:21:03:93:7d:ff:f6:1f:43:8a:5c:e1:cd:5d:36:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Contracts\Release\net8.0\System.Diagnostics.Contracts.pdb

System.Diagnostics.Debug.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8c424b3ade60f123801cfb80f0682775b71ad422f84cb5d74fc48947364574c5
MD5 7d8e0c638821d9a7d739e36b9b239682
SHA1 b478744d6df1a0b6fc1308b0ba087ea649779916
SHA512 460bd4bbbb35037eb318e326fbfcd537737c3c878efb6bafb8a48770c5bafb2cad7d13dee43d370d1d5cf2418157474c9c06f12e84292c34adab8648244223e8
SSDEEP 384:f+JFWPmWiTb2HRN7unODMyDR9zGVcEkS2:f+JC6/iuq9zlVS2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

23:88:36:a5:4b:b6:5a:b9:cb:d8:ec:8f:15:55:63:5b:de:7f:68:95:62:dd:d5:94:83:3c:3b:14:06:1b:e9:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.Debug/Release/net8.0-windows/System.Diagnostics.Debug.pdb

System.Diagnostics.DiagnosticSource.dll

SHA256 f4879b60d9536b1b10c4b56599ad593df2347b9f0c342872538931f229957ef6
MD5 2b7a8d92b9eff68d92222e84e931e658
SHA1 e01cb48bf56332080d116b5cd71ccd2b10e04a05
SHA512 abfc28555a1acb30c251c18293ecfbbce193205a075ae726877cc8538a334ba8d773f1dc568230b1b3e0e98505007511ddcf33a1bf1ca878f98affc8ba84c896
SSDEEP 6144:iOTx8fqT+GHIwS494j/yZ8+Kaw//tvjE/Z981bQ6mpDLIsK3h:DTkC+GHnS4m/M8+Spjm81bQ6mhIsKR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

01:40:d0:8b:b2:87:85:d1:f5:6b:66:68:bc:82:5f:05:65:9b:42:36:d2:77:ad:22:8d:a6:84:c0:5c:91:cd:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.DiagnosticSource.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.DiagnosticSource\Release\net8.0\System.Diagnostics.DiagnosticSource.pdb

System.Diagnostics.EventLog.Messages.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 68f73ab17fb7f4aff3d35ef6db0e9d5b0fa0151111cb3d03992e23bc29d6c40a
MD5 7a44c33341844dbe9c6fa526af88e80a
SHA1 0acabd100f61a2f8b3c5e68a270599ad54eb8a39
SHA512 b81d63b345c193c6def17372311447d305ae167b2c4d1c2fdb0344d1e1ef5ff4f9d52599ffd862b2480825b308178737df7e5e48c31e712339f009e92b6eaf57
SSDEEP 192:8qirVlWQX3WT56Os1HnhWgN7acWf53p13s5yX01k9z3Agrf8mNVf0nj:8BriQ+5kHRN76HcYR9zPrf8mrf0nj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4a:1d:03:b2:ff:3e:20:38:df:93:54:25:9a:fb:cc:d8:b8:af:08:27:ac:12:d4:1a:15:54:8f:ca:d9:b6:11:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.EventLog.Messages/Release/netstandard2.0/System.Diagnostics.EventLog.Messages.pdb

System.Diagnostics.EventLog.dll

SHA256 ffd420fe1cb1501afbd796aa00119001be0002e51a9a540e0eb2ed8725fc0fbd
MD5 bae88cdf4e8b622f1417f13f5e4e7164
SHA1 de695858b180a8df6fa60f5422a8630eccfc150d
SHA512 ba4c637bfec28003687af307e9e4bc3be06de4d6c8bc10d87cfb38f9c31557ebde27dc8df782922edf01f76afa88009913e00afa2df64fa0b0a8473920d140e2
SSDEEP 6144:N4ADjMRbbRUjJSsj8xlOG5iGD7x/e96YC9FRWkaGidWukVTYt:N4US4VQ4atYwFaWuWS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2d:e1:9e:47:6f:f3:6b:e1:fd:13:4c:25:ba:04:4b:5e:fe:44:90:7d:ba:59:b6:70:51:b2:bd:ea:bb:0c:d4:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.EventLog.ni.pdb /_/artifacts/obj/System.Diagnostics.EventLog/Release/net8.0-windows/System.Diagnostics.EventLog.pdb

System.Diagnostics.FileVersionInfo.dll

SHA256 92ae8401342fd8484e749c65a7726a0f5bff69346ad4e96026bfa063ff567b8b
MD5 1daf75cc369569182bbdb664eb8cb4c7
SHA1 ec0ff43694f0027a469d31221b591bff2ef29d69
SHA512 9d0ee9b59354f721136a1631e46d395b763f755b212e44daea5c62a91b4c5edfd218587c8aa56db27f7efc7b9678c59ea822964f279a7837aa5e12f46be4e79b
SSDEEP 768:QmSWwsP/QEBuk3bqUghjhi6KPivxbzY17tM7Ao50t9PA9zC:QVWwsP/QEBuk3bqUghjA6KPipb017tMy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

22:1f:13:16:5b:e8:40:b7:d5:f9:26:bd:7a:72:2c:f5:55:e9:15:7b:aa:b6:b3:93:86:8c:53:47:c8:8f:77:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.FileVersionInfo.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.FileVersionInfo\Release\net8.0-windows\System.Diagnostics.FileVersionInfo.pdb

System.Diagnostics.PerformanceCounter.dll

SHA256 a471289fa1f588cb758b6f4ea5b21e7067a21554819d1632acb19d0c183bdf78
MD5 9e7cd586b5b1a8666bb4fc9776a6ce3e
SHA1 846a5f7e616042e3ab3c85cbe59e7da2b2b501c3
SHA512 9d654ea414e73fe1ffe6ef92f2ec404359400b510a907a5c4473e8d6bc34074e9438ee42611484f483100d7923402748d220fec108a86f6724f28960c324c805
SSDEEP 3072:XnmrHruDKok5rX7seuQHpuNQXtdgma7SbkBr0QUM5Qxz3hFOJpoe3kaUbDeRMq7Z:UHr+KJ5r7sEw0gmeJhknb6b7CBjJO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5c:d5:3f:b1:2e:0b:4b:5e:fe:48:0b:fc:10:c7:34:df:b1:a2:9d:de:fd:6a:59:83:41:0d:d2:5e:dc:51:64:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.PerformanceCounter.ni.pdb /_/artifacts/obj/System.Diagnostics.PerformanceCounter/Release/net8.0-windows/System.Diagnostics.PerformanceCounter.pdb

System.Diagnostics.Process.dll

SHA256 d504f7d521979a3b0385f57dd4c503c70dd492c2799f017dd42afbf3626884ea
MD5 504b0d1e837fc3a528131cd8a5c22b9e
SHA1 09e38d047f61ce3ecc04cdaa69c4804ad4d60d57
SHA512 dff2e5cb94a4926c12e47118476f8d8d1a2c78c23ddca3733a8fa829457a90d510d56fb3c7e22aeb155f07a7dd7a922a510b327a1e1f8594cf0057f6f1187837
SSDEEP 6144:Or8etGxezZeEyVKzexZeyIdyi3E9jb3b41PlmFHBZTdvQjJ7X:OQetGxKywy7e1dNakF7X
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e2:7f:c6:5d:41:63:c5:28:52:6b:17:fd:28:6c:d5:cd:f4:0b:73:3b:ef:7f:44:50:67:f1:19:8e:be:8d:5a:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.Process.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Process\Release\net8.0-windows\System.Diagnostics.Process.pdb

System.Diagnostics.StackTrace.dll

SHA256 318eb3af0fda576d8094404185690b9570d576ea56e85c47251769c09de8035c
MD5 70c0d0120a96a30c980414f44bfe9d5e
SHA1 ad158543ae92c9b47e6290bab86b4cb5511b7029
SHA512 42e9e048668b491a7fce4d5da6a2690f386c9d4d847b7ce0b2c70f743f615dc9917eafa5cc3d94f4e5803abe65d892c4f89d88ce8531b7d3c2b8c536d7d224da
SSDEEP 768:VDASgPYUGf+DUn+zff8vkeY4mPFnMZDn9zT8WXi:VDgPYUGGDUn+wcj4mJMZD9zTZXi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d3:c5:3f:e4:e1:fa:17:49:04:7b:72:ff:42:48:78:c1:7d:e9:20:94:a4:05:48:25:47:68:bd:2b:f9:f4:d4:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.StackTrace.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.StackTrace\Release\net8.0\System.Diagnostics.StackTrace.pdb

System.Diagnostics.TextWriterTraceListener.dll

SHA256 634b5c196c028229f54b68a0cbd66238497ec3bbdc501bad55fc377a4c685027
MD5 b0812fdd6d120899f4c17f63faf024ec
SHA1 8f421d8ab261a34a7f05c8ce22b9da71919d25d8
SHA512 9fa77cf42e24d2fe4b426067048c1611d6ad98937fc5f4d55b50b7dff3cf654e8530877aa9638ac8e919af417635e39a65536e3e72edc3236b32d749abea2216
SSDEEP 768:7TtHMffsP530gKsq0/5LX5Ta68Wmj5vmIZmTiWeEFalTF31mf7YiNRsOSkk4NPJF:7TGM7Q0AvPF8NXiizln
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9d:b6:81:17:14:46:53:c3:02:f6:6f:77:ce:e1:51:ca:8f:cd:b0:29:a9:0f:40:83:eb:f1:c4:49:48:0b:c1:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.TextWriterTraceListener.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.TextWriterTraceListener\Release\net8.0\System.Diagnostics.TextWriterTraceListener.pdb

System.Diagnostics.Tools.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 55c8490d2461c35d9afb5819ddd390adf473cfbc117f06eb115101d3af1dce1a
MD5 f98d980227d772ef2123bfde98b4b09e
SHA1 c9989690160514d87e30801c2aeb9432a0c20fb1
SHA512 e018a8acf79fe5a33de616b03f44c931d7e74cc8d429b11d07826ed59b4b8ea5445e012094c1ed067761598f4deec771bda14dbbdbadecbf455a4a0fc5191ec5
SSDEEP 384:6zC1AxWvUWYTb2HRN73bLp5DNR9zqt94gp:TZK/i3vP9zNW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

cb:71:d0:53:61:1e:41:4e:fb:03:16:d8:08:18:c8:e6:07:24:d5:cc:77:2e:ed:2f:d4:29:65:2b:f1:1f:a6:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.Tools/Release/net8.0-windows/System.Diagnostics.Tools.pdb

System.Diagnostics.TraceSource.dll

SHA256 22365ee4e3ba3c991d495e41f92e29bf6ddb38a48c44f55651271b80ee62b6d1
MD5 fe6a4b96e144131788108c8396a849eb
SHA1 40e6e5d03cfe036645ae854d5a2262faec6bed32
SHA512 61644c0e970dd6a6ff697b110bf99962931dd94deda5a966ea0fded3d23cba7433b802656295e04f1a95421774ea3c838f0a642d26b5e46ae6c05becb52eb7f1
SSDEEP 3072:qIAnvuCBgWS5Cf0dpwQn60x7cftbg90eI1LTXsMqB5:cBgYf6aQn60x7cftbgRorAn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

25:5c:ea:83:81:92:66:0b:88:25:8a:a3:a0:cb:ce:28:6b:18:f1:e2:39:75:84:97:a2:16:8e:dd:44:4e:51:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Diagnostics.TraceSource.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Diagnostics.TraceSource\Release\net8.0\System.Diagnostics.TraceSource.pdb

System.Diagnostics.Tracing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 65bb861d19fecb89199aadc1d90afd1bb788f5bb8f981a5abb7c5b782bd6b21a
MD5 e8b7bdcf7c87e63e11b1469f740ae103
SHA1 108de96859dd6d5bf9b84517f5c6b6ca7578f955
SHA512 63786559398f31219ab9d1d4c98f6d9729d7b8d63971e46e76484ebefa44c0a869a9e2b24c113f5394694103070b9a921e12d0d827601a2ce634170f0e13ea8d
SSDEEP 192:ZJ6DDj+y3xwtiWZDWzY3WT56Os1HnhWgN7agWfFxZNKd2kQX01k9z3AOd0YNs9:C+yhwwWZDWzV5kHRN7UzNNPR9zbKYNs9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ce:31:f4:5b:39:03:eb:33:50:35:a4:c8:0f:4a:81:07:bc:9c:db:70:a1:97:1c:ee:31:29:96:24:01:ca:75:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Tracing\Release\net8.0\System.Diagnostics.Tracing.pdb

System.DirectoryServices.dll

SHA256 89868bd5c97d45e07fff3b9e148465c16d09ccd343fcf1c86ad4366211c33098
MD5 2323217179ed11e052830086b9c85bc4
SHA1 7ca0649fadebd7ebe9884783f6bcd63345d670fc
SHA512 739a5fcb7be4db56179cb8c2e5f3aeb970c311412e9e7a8cb3f1d694f6d396190add9a46b489bfe28b4106697f53c10a5f9f05888e4c4e6cc989e419b5203884
SSDEEP 12288:zfqmTyjXDrrPrqOpsFYwcXvSs6j/nBFsAtvrZogoL3UHk9/lzHJDq3cc3w9fMBsW:OoiTzqJywcX6sQ/BdjSNBHJm3PwS6W
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

3b:e6:8b:6c:64:c4:dc:47:50:36:24:62:24:60:5b:0c:4f:de:94:f5:83:36:0c:8f:ce:a9:07:a9:8d:39:48:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.DirectoryServices.ni.pdb /_/artifacts/obj/System.DirectoryServices/Release/net8.0-windows/System.DirectoryServices.pdb

System.Drawing.Common.dll

SHA256 75b1e772a4355145364121af00e5b5cf06c7212aa53d662fdc996bc11e8092a9
MD5 e4715322db624dc52947a42ac67757ab
SHA1 ba0b0850142ecc3910927d6f2e5781b896d7d442
SHA512 3c86d44eb209a3a1f2001968a2b139e532a0513fd2decff04aa1bf8b30b6202c70fc0e7ac8b22ace563023671259cd74cf65062132e7f1b97d3580621686b05a
SSDEEP 24576:hSLUw0XksqJ9SmSdQ8JWagBBvGydXkOJxP1qwRJt6e:MLWXy9SHdQ8JcBvxdXkOJT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9f:26:eb:9f:43:d1:a6:a9:2a:4c:53:38:37:ff:01:02:ce:19:26:23:5f:9f:5e:14:01:ba:b3:bb:6c:87:fe:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Drawing.Common.ni.pdb /_/artifacts/obj/System.Drawing.Common/Release/net8.0/System.Drawing.Common.pdb

System.Drawing.Design.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6799b6664679945290ce04682244ad97e0f140b77ab849786344a96aea35ee80
MD5 04a712256c04c1ab9f09b829346ac13c
SHA1 34a4f54776f1d6fb4304d97401c56a989045f0f9
SHA512 281d41c357962743c7c58f38b710834d42559327fdcae4c8f6c01c459a131e65a7d99c1b27bd01864301df63afbd563419e2096db9c64467ecacb6b349ee3e37
SSDEEP 384:q7s1MZIDXWGBWG5kHRN7xvLSC+Hj+R9ztZDG:UWpqZLaHji9z/G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

4b:1d:4d:52:c0:5a:b4:53:f8:54:cc:43:e1:f9:f8:d2:e7:79:a0:6a:42:5c:28:f6:11:d6:d6:43:19:5a:ad:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Drawing.Design.Facade/Release/net8.0/System.Drawing.Design.pdb

System.Drawing.Primitives.dll

SHA256 cbe9fbb1d1e4850460854474ffd8c01ddcc756dcb33a86d1674c0cb2e2a0b026
MD5 b5ca10a41cc865048491f617678722a9
SHA1 afe171d9d676b78983b802e18ef8e00927073c64
SHA512 2afdce56b7eec6deb82f8b2d5ec3029b5a0ee1e8bbf2e0ff9a0a5310bf265ddcdf63660546b4dbcc3c5fb0cba3cbb94f2408fe5cb4d14dbe0e74aba6dd5a2192
SSDEEP 3072:+KG57N4yeP4Sy2vmH00N6no5WLCI+7oRcPw:E57z6mp3FoP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

63:4b:bc:6b:be:be:98:d4:95:03:4b:f5:23:38:44:0e:a8:df:d1:24:5a:db:12:f7:c2:a7:e1:17:76:e8:e1:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Drawing.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Drawing.Primitives\Release\net8.0-windows\System.Drawing.Primitives.pdb

System.Drawing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 97868f8a8a3c3cf1301e70dc37833dceea110574c7b7e035b81027d959aa4ea1
MD5 51a3cf9e642c0efb1181cc0c4d8a3af0
SHA1 274fe1fbd476e123b01ffbb4bb34bfe15dfe34f4
SHA512 08435da4cebed2a4fb83804d87f60fc8cc8f834772c2a52f78cdaccbf48fc2577c1fa401c8c6130f0967fa16f6757cd58474fd69237dcac082573794a4c5e14e
SSDEEP 384:ElkzkXBQ+RGP7RYpYOOT/4G07NBFWLtWQTb2HRN738ksWAR9zgX2i0Zb:m2Tkeh/i38DL9zRi0x
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8b:ef:17:4b:2f:e6:3f:e9:48:4d:3d:ef:76:b9:98:8e:53:b6:a9:40:2e:ee:27:00:1c:55:fa:a5:7c:ad:62:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

16550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Drawing.Facade/Release/net8.0/System.Drawing.pdb

System.Dynamic.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 21dd7e13657079dc77d68931d5f839bbc0eb8bfd29346cf37b5ced12c7e5be3b
MD5 3e671048499137373bbaf56f5456a853
SHA1 8277441c0556fd85b76c158a36d2b708eb9d3032
SHA512 33f12046cfc46a509f992a940d273cdcf59fb3867f4ec836ad5b4016346b171ab87e0496804e752c6aba87afb5a810c00c6b16589bd8e86fd39aa4c72e05a6f7
SSDEEP 192:mE7TXZxAdGLSwMWVCWUuWXebPpUNTQHnhWgN7acWb9BEhwXBwUoX01k9z3AurHNr:mmTzoGmwMWVCWUTb2HRN7pAUR9zDmeGm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

01:ea:8a:08:d4:70:39:8c:68:57:c7:cf:36:79:56:5c:4d:2b:bc:41:1d:e9:e6:65:2f:74:39:84:2f:a5:6b:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Dynamic.Runtime/Release/net8.0-windows/System.Dynamic.Runtime.pdb

System.Formats.Asn1.dll

SHA256 953c70b6845d6eca66658195352d4049da6a1620d7b7efa2f3447573fa610e25
MD5 5a6306a2e3f13c0912d06c80f503c04e
SHA1 10be849b9b5867bb876c5aae89aa59fa2f75bbcf
SHA512 b2225e68ff0513e91288d76ed808841382edbf64b9c4fdb38f66f6cddaa0ae397532292046fc011a8355db00d8847a228da01263df55d94f83f8ddcece10c90a
SSDEEP 3072:OHfNARrQOdDIgcJ21V7H4kbxMroUzVBzwndzKeeAxNXhrig+uG4krZAuZAVV/mSf:421JH4kbxozVBOZKRAxNXh5VYYG0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c4:e2:19:2c:dc:ed:79:87:8e:b1:be:96:03:7e:65:c7:df:07:6f:0d:58:94:e6:36:83:08:a3:fc:ac:b3:0b:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Formats.Asn1.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Formats.Asn1\Release\net8.0\System.Formats.Asn1.pdb

System.Formats.Tar.dll

SHA256 ff4eb1e941bede553d21daf127481a4c55ad482feed0b9ef65a8c298ae863ef4
MD5 4fb797ffa301e155166bd7c40ce149e7
SHA1 235fc96a219b3a2874918fe677cf2927b88b4723
SHA512 59b3f1a358cbb0596a25ea22e260d093ff5657f3b7c8bba98dcd82e335feedd43047d609f8289de0a97fd2fb6601fd03072a37a7c703bd63ea6e5db1f00dfb67
SSDEEP 3072:+oRgkJLdnAwE5vTlzVaYq0OMBFK0qkir5tKgz8FK3MEIS3PYPpAe8yq/xv642ucP:5ukJLN5E5vpzrC0oKPpU/epx8NfqgT0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:2a:b7:f0:90:02:01:95:23:89:1b:4a:9b:c8:f1:ba:d4:ef:c2:db:67:18:6e:e4:b6:cd:56:fb:e4:78:fc:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Formats.Tar.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Formats.Tar\Release\net8.0-windows\System.Formats.Tar.pdb

System.Globalization.Calendars.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 823707eb40666e9fb1cc14dd0f9e1be11655629eec42d038d9d82557b533db18
MD5 8aeb91999376b75b8fd639c053044ece
SHA1 333ee6acff393e02243e3207e3c882ebeca479e0
SHA512 63e36abf03406b6ba957703916608163c57bf7fc0ccdeb0eb9f37ba7b44c8dd73a8eaad8e77fad03f368707779c0aa745e454a228e5171735cb3b63076d01cfc
SSDEEP 384:Sy5VURqXWDRq8Rqm0Rq7Wps5kHRN7hnPhmNNPR9zbKTG:N5VOqKq2qmuqYphPhC9zQG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

32:c4:f6:63:bc:0d:d5:0a:ac:ff:2b:cf:cf:76:2f:5e:96:59:5f:51:50:57:9c:6d:f8:73:40:80:cb:61:d4:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Globalization.Calendars/Release/net8.0-windows/System.Globalization.Calendars.pdb

System.Globalization.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a298b7db9e2e1a6e10b939f788b58a31f1d00d4024edd2d4946e0e9caa098901
MD5 69d61148785e5c919844e3adece18758
SHA1 aa68fc47e87178c9d5c124fa0e91b475f6e86cc2
SHA512 8d843a397ee26ed535dc9fecda872f1725d154d2cd1167142b8b294095f824fabae973d06951b7b7336e48e25c3ba226bd73e88ca2bcc46954475125840f20cf
SSDEEP 192:vUxAFRPWYRHRp0RjWouWXebPpUNTQHnhWgN7acWUcbFBwUoX01k9z3AurHNBexT:aYRPWYRHRp0RjWoTb2HRN7DIFUR9zD4T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:c9:c1:fd:29:7a:aa:3a:6b:08:28:bf:48:82:31:0b:01:d8:c2:74:4c:1e:0e:c3:1e:2e:53:3e:15:09:f4:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Globalization.Extensions/Release/net8.0-windows/System.Globalization.Extensions.pdb

System.Globalization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8491b2edda06fa86f390df8689b7fe35acecc11f024f520a587035ee80251480
MD5 74837cde4461f6acd412678261ca9484
SHA1 de07fcc0cdfebd050d9c25cda99f53d54374395a
SHA512 7acab6e736c8b8422b8d3adab2aa529043c292f74b0c4920f5a09f0c0b342c2bf19aa4d1d6852caa82d3f57e384bd3e87695452a37e6058afbdc1669cb4b6800
SSDEEP 384:+jR6RLWdRCRA0RHW9Tb2HRN7Fr8NNPR9zbKh/:+jy0wAuO/iC9zs/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

be:f1:d1:70:e3:03:a0:47:9a:a3:d0:08:d2:4d:27:9e:94:3a:2f:9e:78:6f:55:c7:66:20:50:62:83:39:81:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Globalization/Release/net8.0-windows/System.Globalization.pdb

System.IO.Compression.Brotli.dll

SHA256 51bc8800f8579a14d1edf0f650c9a5d828ef9d96532d7dd304a4394fa9cfd641
MD5 4cde4fcd6f41f0d6d400c1d66f391538
SHA1 7c4a13f37c8d20fbe60c5b612107bd0242b68e26
SHA512 d7b444ec7f230c3104fdd98c60af9de998a85e622e0c8ce3471a3809d9ba8bb368d7827800fb177ac97f0ce3feb3ad2292a77d41b8c36bc99b2df1263feb8735
SSDEEP 768:IgjNvVL0AXiAExEQACL3jNNdx0xGocoA49wbnDuYS3K0Mk5eUb6/i19zF1W:IuZVAYnubACL3jlO9wbn6fK05pGiHzFM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8b:f4:9b:be:b4:47:92:c1:8e:f6:d7:e1:b3:87:fc:5d:c2:27:bd:b6:d6:9e:6a:dc:b5:c3:67:a9:f9:c5:e5:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Compression.Brotli.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Compression.Brotli\Release\net8.0-windows\System.IO.Compression.Brotli.pdb

System.IO.Compression.FileSystem.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 66d983bf3b49349014250c9b5a2536cdbf59f7a3914ec1842014767d207a6f01
MD5 141725a095c984f4bb53009ad1b8271d
SHA1 9bdf952f93818206b828a8a3a2e56c8a191faf29
SHA512 6016665dac4906fca60008990f0bf9da7460d92adf7c5c8c3e67d6715222cfceb2ce6b384b8f68ed99009daf2e63c443266aed1c9aa62de1719b886c480850d3
SSDEEP 192:mEtfwuxWXmWwuWXebPpUNTQHnhWgN7agWJ4WjepVWnSX01k9z3AYngHDEQr:mSfBWXmWwTb2HRN704WjezWSR9z1gIQr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

76:d1:cb:21:9e:b7:a9:d7:54:76:69:fb:8c:81:2d:0d:0a:12:c1:4a:88:16:30:16:dd:92:0a:0e:2b:f4:c4:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.Compression.FileSystem/Release/net8.0-windows/System.IO.Compression.FileSystem.pdb

System.IO.Compression.Native.dll

IMPHASH d985b2ab046cf5c89d2c6cf278c35fc1
SHA256 1d58d2b17d468651e17870876029dbd3f68d6ba74b18a75f148581eaddc9c1b1
MD5 68deb864299c12cd26aea44c39aa665b
SHA1 03613118a674e115c23b3eae354805e9e41bb34c
SHA512 4ad6b2c38338469de0f0247152f773f6886ea5396aca5cbc178dc2e894aeccc1296fd02ffec1d1a266bc548a490a8afc5ba383087bd89567957980472318ccad
SSDEEP 12288:BQ7xQygu02IeTximj/pxJnbAHhlyZ8OXTw05nmZfRTFAQ:BV7puZJbAPlAmZfRv
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

26:91:72:23:01:f7:af:eb:10:57:93:1e:f6:42:dd:fd:87:4b:7c:c6:ec:d6:69:58:21:ac:06:6a:89:d0:8e:16

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

316672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\native\net8.0-windows-Release-x64\System.IO.Compression.Native\System.IO.Compression.Native.pdb

Name

.text

Size

313KB

Virtual Size

313KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

473KB

Virtual Size

473KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

468B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

System.IO.Compression.ZipFile.dll

SHA256 01162018b643ae45e232ef063be2fdf4b92306eda4ac9c8ef6688ba5f55163ec
MD5 63d337523fc02f443b9e163bc41f24de
SHA1 0c5c9773494951a19a5617e3905d713b68773d00
SHA512 310766e1319ee845bddd4d872cbeae722632e27a58dec150f1b0da3c479f8aca8120b5a95347529dcec9cbfe7c8387c5a0b6d7ed021fff6bc74f3f81e6cd86b0
SSDEEP 1536:OPL0/+NlZ4jNSWqs6sQSvv3XvPHrPiv+zEU6:OPL0W2jdiSvv3XvPHrdgr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e5:2b:5f:42:3f:dd:b7:71:c6:e5:79:96:da:f4:ce:7c:87:d4:ca:4a:36:94:79:84:5a:d4:74:3b:5a:22:f6:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Compression.ZipFile.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Compression.ZipFile\Release\net8.0-windows\System.IO.Compression.ZipFile.pdb

System.IO.Compression.dll

SHA256 3f5083bf4404c5969557e6c19a5b87d7db5bef2ee10fd86d775b6a96b357232a
MD5 e11feb9fb874d60b76c2ad7a5fef7ac8
SHA1 e7622bad558fd695442b3ecfeea8f706601c0310
SHA512 dd3e75b0a86ee2240ebf37d728f467b11fd4a25e4b7fdbc8f4c5b4180bcd0e8c1a1695f5cb72133da428f791cb922699cc3a325e05c44bd7931c141b07504587
SSDEEP 3072:6C1XO2TF424mNDF39wIEUizDYj0RlNikmWrj9z1wSnhj3zRG/ADP3NbC++xOMXNc:N1XFbfzucYMzWFqqdDDvA/XNM8Fm7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

03:82:c8:a7:ef:bd:a3:97:61:be:a0:f5:bd:62:7b:90:40:54:d8:cb:38:67:da:6a:ec:b8:69:2f:ce:79:e1:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Compression.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Compression\Release\net8.0-windows\System.IO.Compression.pdb

System.IO.FileSystem.AccessControl.dll

SHA256 d8b0a7f59f2b1ddf04d2eeb10aa835fa4232c030c223435ef36fc133ac5ca4aa
MD5 cfaeeeb96754eb9b3f5fd58b875b6bb3
SHA1 04a75ff8f9134e73062134a91483376b899e8ef7
SHA512 835dd5c0ca0eeb30ebf9d806c9162516a3858ffcddd3f0ead77eba63a982b121e26877813672fa0f2957688c062e47b94215a8c9c8e14e3f60c98bc2324fb538
SSDEEP 1536:5ZjAlMgPQsOjasBPicEzfQHlgWO6CAvpYJGK9yKz3HvzDH:5ZkGMQsOvFWx7dgu3PPH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d1:84:43:20:9d:c7:a0:c7:b4:ff:f9:33:f7:91:7f:f2:57:a3:8e:41:6e:e0:57:40:4a:55:78:5a:fc:5b:49:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.FileSystem.AccessControl.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.AccessControl\Release\net8.0-windows\System.IO.FileSystem.AccessControl.pdb

System.IO.FileSystem.DriveInfo.dll

SHA256 0c525ce669039824dbb08ec42b92ef4d0ee610a3396e7bb9954315f12cf072a0
MD5 0570659632a8971a62c48060d9e8262c
SHA1 627253cef98e127db701f5afd5a7a9365f4b2930
SHA512 70c2b7e302cee8dbd470623ac406f7a1aae1dc2c2d6a6069c0d98698313dbc5ad0aacc4f8cdb9dff643b574254ea48250a7ab6c2048142995e3bd4034dfbaa32
SSDEEP 768:fwsLf/OEEmdsk4n2w1o91PC3YWvt/iqJt9z1U:fwmOEvsk4t1o91a3HvViszO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c2:ce:38:c8:13:ea:de:f4:94:b8:36:26:ea:bc:67:9a:3e:bf:5a:66:b4:60:e8:8d:84:e9:d5:d8:f4:2e:b8:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.FileSystem.DriveInfo.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.DriveInfo\Release\net8.0-windows\System.IO.FileSystem.DriveInfo.pdb

System.IO.FileSystem.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 091f423b223706b5f7ec212b26c73e20903c23c94983a097c97c3006cfe56e34
MD5 f2d1cfaf1e2d377ff93b340d940aa924
SHA1 f1af62c8d35ee8f8a7de9724405fa06acac0bef6
SHA512 75f9fdbf6881d0f1efa89eb2ee17b09e10ae06019bf5d8adbc31bf075be30b3afa0cb35b2c4474f87aae678196257f90a57f6fd9285fe1b7811b73f63a688862
SSDEEP 192:Gz1lYfxAE80WqqWouWXebPpUNTQHnhWgN7agW8ZNKd2kQX01k9z3AOd0TB:G1ME0WqqWoTb2HRN7JNNPR9zbKTB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e1:b9:26:79:df:f1:05:36:2b:c5:5c:46:4c:57:3a:aa:ba:15:03:18:a7:e5:d5:3e:03:f0:d3:d6:cd:63:c7:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.FileSystem.Primitives/Release/net8.0-windows/System.IO.FileSystem.Primitives.pdb

System.IO.FileSystem.Watcher.dll

SHA256 5c35136269f3d458dcbdf930b47e57069af2b8aab079b742b58cbf9738d46784
MD5 6f9a9be93986dd7987273563511c7ddb
SHA1 d0146df1017c7f22f2d1dcb69f229796de5bdbac
SHA512 69b1588e8e8ead7aafff18b864a62f204108966241c5c05a2053d42ce5f4c91098f8db57f8034fd78f7b64483e1d8285c3770c95ac449d4ca885cdd00f4788bb
SSDEEP 1536:pFQv1C2wUQIOT9sJu0Z4sqpEECHr4GBo333333333333AQ3Hkkk33kLHjSrIigzs:pWdVw5Ihu0Z4jphor4G633333333333u
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8d:3c:28:22:59:06:c5:2e:f1:ea:06:6b:7c:6a:c8:91:b9:66:52:d1:34:49:00:29:04:4a:21:b7:07:10:65:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.FileSystem.Watcher.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.Watcher\Release\net8.0-windows\System.IO.FileSystem.Watcher.pdb

System.IO.FileSystem.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7bd41c6b12b73e6e90476f2d56db8581664abe07e7ab9bf2917bb254ed1d75ad
MD5 35e27f4c681085a4b096826ee8ea4f53
SHA1 cf3ea4304e5558c8fdd4422e4d72509cd91ea719
SHA512 1f9e6519ff29524e57cb0b3576ab118014293aade8f30027ef44b1f29a8e9a54e7bcb3b288a92dba996053b16016807d93fa9f44f2c43666ddc6425ddd7ae4b9
SSDEEP 192:qWKRH8lxAbqWD2W4uWXebPpUNTQHnhWgN7agWxTZUZD2X01k9z3A6vY5IaN1:fKRHq1WD2W4Tb2HRN7ETJR9zXvY5vN1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

47:bb:51:57:d6:e4:ae:f2:2f:7e:1d:ed:cc:2c:89:9d:46:e2:72:54:42:0d:2d:a5:df:42:ec:8c:5b:d1:61:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.FileSystem/Release/net8.0-windows/System.IO.FileSystem.pdb

System.IO.IsolatedStorage.dll

SHA256 37fdef675eaa6ff1eebd4c35bbdd46ec4aba5b95d88f95931c2713791b6ba6eb
MD5 83e6975d91c6a4ff540c3292ec9f26de
SHA1 045e247c0bc44447eee1aa98299063074a8351bd
SHA512 cf31c21879fcc0d25cb88b165538c7ca287b2b25ea594a3f76abb72d428b8c3626662537015beff28be4dcc6d9282505a6cc583d8a66d7028846987944609aae
SSDEEP 1536:Tb/hJcqh6YKb3SjZwEgGv7+S+lXxjvHGiMzb:TDncqhTM3SjZwEgGD+S+lXxLe3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d9:fc:4e:7c:49:4b:c9:e8:20:0a:a7:38:10:97:d0:bf:ff:54:24:aa:8d:06:00:20:23:83:96:6e:91:dc:39:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.IsolatedStorage.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.IsolatedStorage\Release\net8.0-windows\System.IO.IsolatedStorage.pdb

System.IO.MemoryMappedFiles.dll

SHA256 c31e84b0db1c53999159c05d0edd115f5cf5204653d37744a6659e07b2d936a2
MD5 348e61e8baf5ef7556ead0162ffb2482
SHA1 2a1f568c75a446f9a676f9b5d5c54f08e9c3362a
SHA512 6129d90a0fd64a315c2af5501272fef8c595c689ea203e02b30b090257bcf69f0e57fe73b18e1d1bc4d89eb06241b32c12f1ee453f2de70da17966ddc2161a81
SSDEEP 1536:FLPx5ebzMbA6UMq1jq7Zb8GuOFXEe/c459RkA65msAhoBze:FDxeCA6E6b8GuS/35kAmc0K
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6d:33:2d:a4:b4:a4:ab:b5:7a:44:89:88:77:33:c9:49:1e:7c:63:ad:1d:e3:77:fa:25:3c:98:e3:70:cf:12:0f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.MemoryMappedFiles.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.MemoryMappedFiles\Release\net8.0-windows\System.IO.MemoryMappedFiles.pdb

System.IO.Packaging.dll

SHA256 de3251d2ea21171e5775b3c84586feec6f2bab276ec41b680685c0cbe04e9282
MD5 de2998b030adefb68af2148b7432db7a
SHA1 f5017bfb4cd9d534d83d5ca7ee7f68901f20d34b
SHA512 44f662315748b445d3b203435640f6fcf97b4ede14bfece312afe76915fd1d951a3c126d9a502366b8ca84bff1285be2615073c87c3cea9ad26f94016fe49eb5
SSDEEP 3072:4+kB0K5eRJEyDW3tH1KmUc13zndwEDDOz4hJk6/8oFyS63ZUyhmgLHY2/Yb/bmN9:c0K5yiyMtVqyLDDOz4UdHLtADmr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

9e:02:95:54:3d:80:16:1b:67:66:c9:91:07:50:a2:5e:21:1d:9d:73:47:01:99:d6:1a:ed:b7:2d:20:0b:a9:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Packaging.ni.pdb /_/artifacts/obj/System.IO.Packaging/Release/net8.0/System.IO.Packaging.pdb

System.IO.Pipes.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b950bed12290fbe373509cc6fded3207f0a91fdb339b17f3defb0df9e4e628e8
MD5 cfcf5d2540ae171c98eae6c37001436f
SHA1 748164b10fdbf9dd98319221ddf42d8dca5fc15c
SHA512 c5d7b4018a65daec3fc7ac361d4819d215aa0d4ccd857e97623e2103115a43e1dc7cf9c8508ff8abc23bf60bad3f1d73c6013658cd465f993c2e2703072affdd
SSDEEP 384:yhejWUPW9Tb2HRN7kVE+cYR9zPrf8NlB3:yErC/iqJn9zT83B3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

62:c8:2e:46:79:4f:f3:cf:4c:84:3b:2e:64:f4:29:2e:82:0b:00:87:e7:1f:da:e9:c2:f4:f2:99:be:04:64:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.IO.Pipes.AccessControl\Release\net8.0-windows\System.IO.Pipes.AccessControl.pdb

System.IO.Pipes.dll

SHA256 00f85acfbb192f540f8c7db6fb007e87a2db6a585f362cec1ea41c0ef3aa8731
MD5 71b8fab9e80e87aaec621ab2db7889a4
SHA1 077e75ad228e3e5df2b4b42cae5a64d4c237c553
SHA512 ed95ea82b076c7aa9359d070b18ecb08207ecc405d602631be5c6ba80f7e78515bd137dcb8bd2b853c63dddfed1759fc7829347bf55bd76e784f91ba56ab6097
SSDEEP 3072:AYXaVzbWW95iEPxwTw8pLtx108B8Yvqzi8r9JxahU:LqVzPCEPxP8pLTmr9zai
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d2:24:77:0f:2c:c2:d0:e1:09:16:6f:c1:c1:c5:d4:df:f8:9c:02:d9:07:72:96:08:48:48:08:f7:99:2e:41:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.IO.Pipes.ni.pdb D:\a\_work\1\s\artifacts\obj\System.IO.Pipes\Release\net8.0-windows\System.IO.Pipes.pdb

System.IO.UnmanagedMemoryStream.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbd4f652153e4b3d8c8f30caff2becfd9f0ae917270d7fdf75729d651cd4cd7a
MD5 c27c77b697c7baf4beb46a81cbf7e81f
SHA1 8a71425c1d67374d93abd782dfaf5fd41ba0c545
SHA512 29bcf1d1029fd8d79e42e611b6c0be8884a1be2a97c83889f6a7acb2370aa94d1e2c3a5b181e419d3bdf5c71f33b122f8c0b5dff6530b4f57ade641f4aa4d875
SSDEEP 192:/WzlewrxAE2IBXW6+WOuWXebPpUNTQHnhWgN7agWmKMuk17weX01k9z3AIiaXAl:+cwlF2I9W6+WOTb2HRN7Ck1nR9zZiaXs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

61:b5:a8:a0:bb:01:ab:5e:ad:cf:89:1d:2e:df:b8:e7:16:18:28:a4:af:46:8a:9d:72:bc:e1:69:0c:28:f2:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.UnmanagedMemoryStream/Release/net8.0-windows/System.IO.UnmanagedMemoryStream.pdb

System.IO.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 83edad54181162350cafafe2c6874d79e7d68427c4b61ed07fe7ec231ab3c9cd
MD5 3ab9d8196f1c072f8dcbb1b5785ea171
SHA1 ec43a419b9d33acf83b0bb8276167896d073ab04
SHA512 7cf5c78a5be8ced39876be9030c6fa03cd134415c4320c16c8a89249edc8e41dfe4f66ed47fe143329953c04903bf901f76bc07421c1129d9aa9dab206a96bc8
SSDEEP 384:Jxq83wYWwbWrTb2HRN7yql31AqR9zdv1pc:Cdyk/iy+r9z7+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1a:ac:ce:50:55:2d:65:c1:81:ef:8c:20:dc:68:18:23:48:20:42:80:ec:10:9c:aa:26:84:1f:0c:f1:d9:68:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO/Release/net8.0-windows/System.IO.pdb

System.Linq.Expressions.dll

SHA256 1bc5508930b8e8e40bd4914ff168b1c000cc359862d84ea77eeaca5adf41a1bb
MD5 4a29751ce7c80a1033a97c91521d4ab7
SHA1 0a10566d6636f8ce7e42a368eb540334e3137c41
SHA512 fb42777dfe960be0de5ed7032abea240ab344c4ae4662ca79d6d605796fd69995e161119d971f7029d43a3946c2a0f6de41af92bcd0068c4f1eae8b3210e3145
SSDEEP 49152:DxBVNvCZVOtaMj3hDJqmpVBwVYCvWfxPDwsu4jclFZ39StekS4U8D:1MqnH9q8kkS4U8D
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5a:55:b7:a6:fa:e4:18:32:cc:f1:7b:8a:ab:52:0a:b2:b0:91:cf:f3:6c:8e:e9:d8:bb:ba:e6:f7:9d:bf:4c:8f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.Expressions.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq.Expressions\Release\net8.0\System.Linq.Expressions.pdb

System.Linq.Parallel.dll

SHA256 52f2446a013510a55a97ac0084ff93c79a6c9a47e6e2bd9db16b1a2d30e0b252
MD5 122c9b393a9e9cd1470a4646cb1e4067
SHA1 4f3bb0f560a2f3af3e887d3adfcaf6e9a33d5813
SHA512 ab2e4ba07926a3ce50f3b32897086171f2a6a4d12bc76f9d73656384beddb624482a4a40c54a319069ed52c7faba8b64e1104f9048b64a92236d0589c1a91217
SSDEEP 12288:2jxab7Nx0IKplPwgArwGrl7pyWE27bfc+yygYVBK1G00eBcMIbNcP:2jxabcTppo7pyWRUygYVw40ZBcnu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

3a:9f:96:e5:a6:4f:0a:f0:ab:bd:ef:62:66:cd:04:6e:0e:23:23:e8:43:45:f6:10:02:0d:85:de:af:8f:b5:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.Parallel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq.Parallel\Release\net8.0\System.Linq.Parallel.pdb

System.Linq.Queryable.dll

SHA256 c5da223a04eb8ff8d2c359f94c1e5f9d192896f2b777b1b2d19a4fd31c46e7c7
MD5 3beee5809b4cd09d7776dadea22f5712
SHA1 94fd65a90770b33b878c94e7b6b2bfbbcc0b33bf
SHA512 a8a77cb022703d1cd6ed269f1050aebf2fee1622f8ae089a4ce50286abf0c2e426c4224419764ca8bf9fd13de403808c38ae7b7ed9c09ed6f3a9cc9d1d731c82
SSDEEP 3072:PdHadoc5Sm5pHhQ5Di5Wc7fwwC9JKetL3aM/4K:VHadosDpByi5WGfwwC9D3aa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c9:70:6f:6d:60:58:5d:3f:bf:da:94:11:f9:32:2b:66:35:a6:92:45:99:21:29:17:e2:5c:dc:04:d3:e4:5d:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.Queryable.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq.Queryable\Release\net8.0\System.Linq.Queryable.pdb

System.Linq.dll

SHA256 460498a87793a6cdf71f78d27569c677de355c1c0097b214e9e30131d2032b57
MD5 137a8706c8506fb08f7fcc7cd7f6460e
SHA1 dd944f8cf8126342b6cd3aa1619c609fb334b573
SHA512 0d3573c1f3a218bbd6cfd352059198b43662eec6a5c146f4b66b0cdf94d4ed5d88241cc204f344b9f10ed89e782638833b3c46c2d59a00d8960fde4bed0b9b40
SSDEEP 6144:7pcMUY+HE4VSkn9hjKTKVuEHtSw53HVbS/2/VuufbFHJMDNqH/YzdhShN3sTcDSM:FrF+fVSkn9hOYuEHt/h5puEvssf/J
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e8:bf:3d:93:cc:be:71:9a:cf:1f:96:68:2d:5a:e9:d1:38:11:a5:76:b4:fd:e7:05:15:e8:ef:4e:44:75:1f:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Linq.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Linq\Release\net8.0\System.Linq.pdb

System.Management.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b2d6e7e991dc9ef154b29f4966f04fd8ed4ebb2c1d1242ea1d5f3e90f8ae5143
MD5 e1422b4c04b923dcfe00a55290dc18a6
SHA1 0609ecde6bc8a87f88bc32b98d19800ff19529b6
SHA512 297f54fceeb0cde17745323e7c41fea830a376fe9c3cf92a692c48199c0a05f1533a3045fd9c6d21352d084aa9ccec7b6cf630c7df49b52ed4025ae156509a7c
SSDEEP 6144:9q4+FutZbJcMFEG3LbPhmlmsUwHdYhJkXUXewcn:j+FutZbJcMFEG3/KmFwHdKIUXmn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

49:77:8d:dc:15:13:5f:8d:f7:74:af:cd:a0:90:66:08:03:f3:bf:ee:4b:1b:24:2b:69:b4:8c:4e:9f:11:64:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

306366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Management/Release/net8.0-windows/System.Management.pdb

System.Memory.dll

SHA256 3af25e0c81c1462d0db86f55c4e5fd8c048c70685f9a566d29d499bc46935fb4
MD5 7e999da530c21a292cec8a642127b8c8
SHA1 6585d0260ae98bab2ad1eaba0f9cfe8ebb8a0b3f
SHA512 a18b6649b5c2f9f96bf639863df9faad436759200a64f91fb2d955f33c71ce4b2d5798be982f692a247ac864d8acb63fb731b31c06333e5c7d9a9c895ecd6451
SSDEEP 3072:QrL1dLrEU0+t+wvqnvwZuIBo7MB696RoYdUCBuqmwfBtTihdFx:C1b+w4IBo7PGUCBukBu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

de:5b:c0:a9:92:2a:92:43:da:33:93:e5:e4:48:80:1f:a9:40:ab:c2:87:2d:b8:c4:41:87:20:bd:95:bd:1e:1d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Memory.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Memory\Release\net8.0\System.Memory.pdb

System.Net.Http.Json.dll

SHA256 6dbe34a0d385c95c33b76f61d4d56d681fd38f86974719a2e9692e15ed3c5b23
MD5 11d0c4fb829317557177c317a63fadfa
SHA1 1eef5661fe47a44046ab725904c9ac0bf9447bec
SHA512 8bba76cc9efad2464baf9824c15fe0c6c059358f33e492485ad5d5f9848aef2a63d20eb6620776b4d6c140e05c5bce1a50319b02c8a6c980d3edd73ef85ee104
SSDEEP 3072:9W4aZ3kbjQhH0jOyZRRY4beE/SZkXRp7c0C9vc:FaibjQhYOy3GZkBqY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7f:75:bd:3f:d6:26:25:66:fc:2d:7c:79:27:b3:99:37:dd:35:91:09:c2:10:99:fa:a4:b3:26:b6:8a:71:7d:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Http.Json.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Http.Json\Release\net8.0\System.Net.Http.Json.pdb

System.Net.Http.dll

SHA256 d909375d9c3a44655bca69fdd39575a7521d5127ce56057e2e575fd8ae977c90
MD5 aef5def9034d9117fce2e2bfee7e751c
SHA1 22e76ad7f1aa71bda7639a692e2c87b8d2603950
SHA512 450f6f63aab81a86263f24f5bfeca5ed141d461438774b90ea1afd2ca4e76a2c71047686e0e0dfed6cfae847647ca26fb7f50f8b711d5f723aa3243071d8afb5
SSDEEP 24576:tAxp0DJNBGra9wf4dHUzsh4Iy6d6Y4+h6ev:mxp0DJNBGraGQ1aEDnv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d9:53:02:ba:12:64:46:74:24:36:2f:bd:64:c1:c4:c6:2b:ba:87:4c:90:90:97:0e:62:bc:22:a6:6f:13:49:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Http.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Http\Release\net8.0-windows\System.Net.Http.pdb

System.Net.HttpListener.dll

SHA256 8ebe75a67d336f1f3e94a4655ef6399960ea910d2c869bd15c9695e96217527e
MD5 cbbcc0bb7a8c9314a1768b5053a2dda5
SHA1 e73c3f64ba252c3a26c6c61e08067d757bef71fa
SHA512 bec7cfcdcd7099fd61195f18eb2ab025aea788122fcf3d39697c136d4432157c103c4da7b7eac046c3be81177d0e52c5ced6d2cf1cb58a7ce7cb222d109037d5
SSDEEP 6144:zDmIFBDqppU1u6wCMxdIvKlBOgiyB5lc7fkDNRd2B/47LhNw2EWZgCgG9qikXOGe:2eipU1u6LEBZB5cxyVNCWZgAQOSbK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

98:13:20:ba:13:86:26:45:69:d6:14:b5:d3:2f:5f:13:f7:51:79:f4:d6:37:0e:d6:12:f7:32:3d:14:8d:89:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.HttpListener.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.HttpListener\Release\net8.0-windows\System.Net.HttpListener.pdb

System.Net.Mail.dll

SHA256 2ad0721973f9f5aea0c4d67c12b2eca1544c785f7fc81baa49f9458652a6aaea
MD5 b011f437344425588e2fc98b71d5135b
SHA1 030db605d9405ff270ac9f50218f74040e79ccad
SHA512 e642a8501a510ac0646bd6d712723e13ba4dea2ce1e01907d392b82a8d31666ae46a3c5c10a164d22510b4e6bbb831165fde67d9e0fc4f6f4888ed2a052fdcb1
SSDEEP 6144:I1OH1ZIkkGnQkWIPOQCwWXX1z4O1ViVpxwdSYbmqRSkrJ8kk5gZQNwMOy9:+JSPEl78xQSkFQNBR9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8c:99:32:d6:7d:81:2c:8e:42:6b:f0:5f:dd:91:a5:05:ca:bd:b6:4b:ed:28:01:f6:a3:30:30:96:c3:8d:3c:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Mail.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Mail\Release\net8.0-windows\System.Net.Mail.pdb

System.Net.NameResolution.dll

SHA256 9b16cce6b7fca7b56922eb996a2bccae9399ba2c04ca9a96230d0a1f9631b99d
MD5 38bd26a6d20e432495cfed8bc31dcafb
SHA1 2d00da3cb5bb88af21abd3fecf7aa0c95db5f39e
SHA512 0135a6243e8b198886eec1594c00b693b536d4d7087f9c4f605c048608a2fc48257ce9e9b156bdb4af70980f02f6a68ca016e405574e463c36d8658294a48b0a
SSDEEP 1536:4J0bN4P8FpcEeTlIkOYRKdRRyZDFHuWFRnm281iK9zTZ:4y08FSEs1Rgn2DfFRm/z9vZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

52:ed:22:92:b7:a3:65:c9:9a:81:e3:ed:b7:80:d4:8f:30:ee:26:a3:32:53:ae:36:a5:92:35:f9:44:86:d8:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.NameResolution.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.NameResolution\Release\net8.0-windows\System.Net.NameResolution.pdb

System.Net.NetworkInformation.dll

SHA256 9b001e79bf20028ef6fdea3f8c3abf5bf282f2489f71f787e3091e8740f7f576
MD5 4ceab0af3a58f0ff52f1d0ae547dec2d
SHA1 aa4263788593ba49afed67c4a039602c63bc8033
SHA512 7e8837a9883c95cb41c17da57fad014549e72f430ad976b7798e45e43218793a684a233bc12c3d8bfc20551ef42c3f9ec2192e3fba97a1556ebd62877a4c0933
SSDEEP 3072:XZmr7ofEvzlXRs0M7VRtqbqSNge6gU/sLVXyVMnvArw7i:W7oUlB18RQb0dEWv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4d:de:86:f6:73:0b:91:74:d2:ab:22:44:94:7f:84:5e:6e:00:46:02:68:47:b3:74:43:1e:62:79:cd:a0:2c:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.NetworkInformation.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.NetworkInformation\Release\net8.0-windows\System.Net.NetworkInformation.pdb

System.Net.Ping.dll

SHA256 5c16cdb11c5f10215e5f68a95bb650aea242fda291fc797112fba9a2b724eca5
MD5 bdd7246c374ae5fa4242846e83e69128
SHA1 5fc70f35c90783b2c34efa1411a92dd647d5e40f
SHA512 a0d9c14064b0372b9d846b16d8639199037076f6751971833244a7c41ba1934b33511550b560d51a1d02304a1c0c1c257cfdf0e0d36a8954bec4761833abd9ef
SSDEEP 1536:y7w0ypg9T0OwwSz0wc9hswiXjUYwlFbWE/gJR7SANNJsZPrh6NwIiKzyfO:ysNg9T0OZSm9hswMoYcNW3JR7SGfWzhe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

cd:60:b5:18:b6:12:09:3c:b9:e1:d8:43:3a:9a:7b:b0:ad:0a:7e:c0:d6:20:bf:ec:e2:08:09:79:20:d5:25:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Ping.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Ping\Release\net8.0-windows\System.Net.Ping.pdb

System.Net.Primitives.dll

SHA256 4902ca891eb7bd09304cfc42994f5eb4e254fed203b2e25e8f43fe1cf68de8f1
MD5 709e0d6e55fe17cf2bd05aa410735d6b
SHA1 d029c31bca9e74612f53171a898c2fe0588fdd45
SHA512 8d7d644c90f0586dc8173b22babfc1c7bcb9e98903046e9c3aaa03c65f88aad2c6d36f484c7962bb812b7f2b3c10fc1e4604532e866f64dc53c5e7bbad8c7afa
SSDEEP 3072:LmS6psgfgxAzwg7J9WwtKuzeQjuDRVx006uJQ+Y6MFotfW3loV2ODOANr:76SgoxAzP2wjeQaDRVx04RJNtu6V2Ojx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

24:bb:af:bb:50:db:a3:1a:78:92:32:9b:1c:53:d1:55:ab:5d:f6:4e:fe:29:33:4c:90:95:66:40:6e:60:62:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Primitives\Release\net8.0-windows\System.Net.Primitives.pdb

System.Net.Quic.dll

SHA256 5df95c4b8c90d11d2f90176fe07f9ea37158f24e12e8ee0aaed3ef30f8fc1024
MD5 b753bf63641e9241a32158b094a97d54
SHA1 f5f9c66034b641fc117d73bb9f23dbd91f8a3c59
SHA512 14a03f4ed85200520925d1c3a6fd68929b551e7c48f94b276d8cab112ce9226986dc75a43bf44b245a3d9f9b7cd68cdf687d4570af3810b04be1095a606e46ca
SSDEEP 6144:WWBs3qJTEy+Yd5+BgpEuaGBHqH2xM8rSqFY2FiSi:xsUEy+Yd5Qgp9xBRMpqFlFm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4e:e5:86:7b:2f:cf:7b:d2:bb:44:37:72:a9:69:45:31:bf:89:ee:b3:bc:52:eb:37:dd:74:81:0d:95:c8:05:1c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Quic.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Quic\Release\net8.0-windows\System.Net.Quic.pdb

System.Net.Requests.dll

SHA256 d879455299214afbb55d4f9f943b674c1d149aea02a7ec01610987e3b762d69b
MD5 dcfd6c7aaaeb16296eaba29050e754b8
SHA1 2a47cea4ef8feb902cdded24af07d485ac173ab6
SHA512 f762764b3e2d775c98eb505cac7c3be0eb281085883bfd2adc91e68df67c8bf22873f303ef4a1483d8a67c371af6fd33c669c9313f97dbf31118c8768e6b80f2
SSDEEP 6144:dcpGo/grKEBWSOTmRVE4XtMe15Er0ug3IDqdDpHk+fvQSSZKv:dcpGuEB9OaRVE42ei0SmHoSSZ4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

bd:5e:61:9a:bc:8e:89:f2:26:3c:13:32:7f:26:9c:15:e5:a1:22:51:e9:35:d6:97:e9:fd:16:e4:16:86:62:65

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Requests.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Requests\Release\net8.0-windows\System.Net.Requests.pdb

System.Net.Security.dll

SHA256 3f355d86fb290a5ee90c7f32921e3c96d9fdc095c6af77c0296d0af228f818ad
MD5 9147839a7ee0679a409dccdd74addbce
SHA1 b1ac4576ee4b37d6bb0ac38c7118e851accd8aee
SHA512 16a7a0c3b935aad89a6066cd54b6894a7f0ea365d717c2d3b7792ec990e56473a37c2e37e9b6b6bf8a91805c125948b33822fa7657c42d01e727c8dff84397b8
SSDEEP 12288:jR0oBsL138jvCBCauI23RL3AjImeBSHh20E963KI4umLCre2:jRc16CBNuI2EeBN6aIzyEH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

e4:f6:98:12:92:20:2b:6e:a5:a6:b0:0a:cd:d6:52:53:2b:13:71:a3:45:40:5d:a8:0f:f7:e5:ac:f3:08:e4:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Security.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Security\Release\net8.0-windows\System.Net.Security.pdb

System.Net.ServicePoint.dll

SHA256 3f3d1f0eb29c7936a655102f0b17e139d282eb1a25d941e56a00c524ea2f5db1
MD5 d65eddc3c70088740b9c841693928ea6
SHA1 350304ac177e981dcd4e7fde3e54a0c9b418d5da
SHA512 bc1ae9da89a7737bf4437ece52dcd395adbb311211d65c1590fb6763b834a34c5e3959577210e9dda1ca4d419a16622861d4949b09494b56fe1a9f5e68d2ba82
SSDEEP 768:kIyP3HyrbKzc/Y7FzqVroiILW3/iH9zU8:kIyP3HyrbKs6FzqGiDidz5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a9:b2:b1:8b:2c:ac:c3:1c:23:30:1c:9b:64:8f:8a:14:ab:d0:95:9f:92:fc:20:78:cf:16:18:93:cb:c5:e4:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.ServicePoint.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.ServicePoint\Release\net8.0\System.Net.ServicePoint.pdb

System.Net.Sockets.dll

SHA256 8dd477766b9a4ced2fde553f2ae64e053e57456a429f3863e0dc5e30de4103e7
MD5 0e4752382537cfdc44bf8f812e0f5056
SHA1 e7d2c4dd841813be7b120656184070dcd7277494
SHA512 38d35f463ab9dd6d0041863ab4cfb81a46d1f4811f0eb90d5c499dc9e902d4f6bee807e251cdb72e361891ff11b986f8208e720aed8550d607cb51133427eae8
SSDEEP 12288:45PWcNxTdiT13ipmysM3AwTPTuf1Pjl5+:4lWcjYBSpmS3X3utblQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

6b:e0:f0:9a:16:fc:2a:50:56:af:bd:1f:bb:5c:fb:30:67:46:99:67:af:58:bf:e8:9e:ee:17:62:4a:ab:2e:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.Sockets.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.Sockets\Release\net8.0-windows\System.Net.Sockets.pdb

System.Net.WebClient.dll

SHA256 0e2633248b9a89eabe8d0b58e2524e180e6d9d60790638812323d9d97dbedf53
MD5 90c4bfb2d7efaaaf1b2e6cc40f95fd1d
SHA1 3e06d4a25f7b346b8329771ed7cad3e4a0907fc6
SHA512 37f4f471642ec5bf3d86af4dfda199d1da16e514b2d336604c26268057afd8a083a36341a85f757f49c5096e5d263cb01b4864b14d69bfe99e479ab25baadfe4
SSDEEP 3072:JBKYQC7LzKlZIJ55jPp3OBp4Y3ykJ9rivVYGqss9vX:qI7yvIJP8pYYGBg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

45:91:84:2e:af:1c:1c:22:73:23:90:f8:6c:db:f9:92:13:8f:88:32:9d:ea:24:67:26:e2:80:a0:4e:e8:31:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebClient.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebClient\Release\net8.0\System.Net.WebClient.pdb

System.Net.WebHeaderCollection.dll

SHA256 9a433cefd55469e35cc10de49795f999178cd72b899ed6c807e4aabd80d97a68
MD5 de3cbafa80ecbe4cb3edfc554a46c702
SHA1 7e1e952fa437eac31ae68fd001f5f52fb599a015
SHA512 cf45012e25c95c3bdbb0a64e515d8edfddaddaa48bc812ee22a8ae3937736938e218e149bbdd457a612daae21ed9fd6a71cec7a3168c84c6492e2d4e28675980
SSDEEP 1536:d2Dwjiss+/40Yx82s88krahmqOwA83qJKAFE6WHKV6q6G22N7XK6RH4wqYXYsYSG:d2DMisVzYx82s88krahmqOwA83qJKAF8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b4:61:9a:50:a4:60:7d:a4:3a:3c:57:30:0c:0b:aa:a8:12:26:29:68:86:c8:93:34:36:35:b3:2d:e8:89:20:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebHeaderCollection.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebHeaderCollection\Release\net8.0\System.Net.WebHeaderCollection.pdb

System.Net.WebProxy.dll

SHA256 30263f349f1d31bfcf9bb66622327b9fd1c0dc0cdfe61e3c7f4f381e291f5588
MD5 007eee473377e877b896b3ca6728b7f7
SHA1 05a80eadc6b1b59f23557cac410285cb3a73a4d9
SHA512 7be1fbacc47618a895f1ebcd9939977a8b0305046112a585e70d0eafb9bb01ce080065362709873315d2c2fcf5fef1b0764c67646dd9c320415c38e440c9d8be
SSDEEP 384:83WWwW4JtK5akEvofGJgSW5DmsEbO0Ks0+bCLv+CT+LfyOMEi066gaiTviTb2HRP:8JKJW8eTaKv+gO/o6jiT6/iwz1R9zZLo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

1f:97:48:b3:bd:cb:7c:07:24:18:e1:59:c6:76:7c:73:51:64:f9:6a:2c:1b:ba:25:94:6f:b9:2b:17:c7:13:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebProxy.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebProxy\Release\net8.0\System.Net.WebProxy.pdb

System.Net.WebSockets.Client.dll

SHA256 f370af0d4e7139a39f34ea8658983654f7261890ce87605556ecc4751ed8e37c
MD5 afb31d2c07f923c3510a20e2920b8ff5
SHA1 ca45eacc534776ec323503aff33bb9bebdae68cb
SHA512 e45728211ce047e3fc82e7cd683b216971027c773a42d092da29f50c296db388e45fadde61b92c962308200f0d3f681ce80ad53de7346b6c09fcc8fe9a9daa6e
SSDEEP 1536:zj4Xlu9IUeDrstO3SgLXFU6+iBQO7beLLEQrFqiPzL:zj4XlDlstcU6+G37beLLEAFhf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5c:92:d9:6a:36:80:92:89:e7:22:72:98:f8:36:0f:65:3d:20:e4:16:a5:b1:10:71:5f:ff:e9:84:71:a6:76:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebSockets.Client.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets.Client\Release\net8.0\System.Net.WebSockets.Client.pdb

System.Net.WebSockets.dll

SHA256 36547da06bc59a97eb061758dba2fca0e7623aa99832a10860df2b028e84ef3d
MD5 da73c3453dc82d24b49149a5e9f20b89
SHA1 2759574da64e0f685a4e7f94add94c830747a7b4
SHA512 e22f01f41bf8b62c29d508471a48372ce564e00f088bece8ff4f655738ba1d8bab72ea7d72f3e5521ebc7faa99d9aa1a8ac3d88489c83f447fb68b2c16eb1506
SSDEEP 3072:t66pJtSquLyCK1QfRCctVyR3IUQeu0IeW+YwomEAawNYLbkbmvhkdk2I8mz31oMX:1pPfXYQzIeW+5oEmvhCj7mzFpX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

80:ff:95:ab:8d:98:3a:a3:ce:02:65:09:14:94:52:8c:bd:6c:98:70:46:75:69:fd:19:10:13:75:49:88:fc:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Net.WebSockets.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets\Release\net8.0-windows\System.Net.WebSockets.pdb

System.Net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b2dab5ba3d118a3acc6d6dece5e7cfe07bddf8aad3d69a8fa17608ec09eeb0b8
MD5 45f3040444b935349befcd1a5c3cd699
SHA1 e0fe347acaf71bdef7549aad7a13c2d77217a022
SHA512 f1d600f0a2b04cc5254d6112baea30783a4cd7fbe94f9fc0f7e4a05ae07b50af50a06c3501e77d0c3f7b4bcc9f1c7a92b4149c559c81f36b07a69772ca4b33cc
SSDEEP 192:xhpbcrkpKZyS3kCxAsrCWbVaWw/uWXebPpUNTQHnhWgN7agWwPSMe17weX01k9zn:e313bLmWbVaWETb2HRN7n6z1nR9zZial
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0a:1e:ff:a9:6e:e9:b5:49:73:a9:8d:25:fe:35:0c:7b:ff:85:e6:e0:98:0b:55:18:03:48:05:89:3c:18:1f:8b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12570

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Net/Release/net8.0-windows/System.Net.pdb

System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2466f7df763b191a6b4a536eae1016394d81e175fc53cefe56b8ce27459412af
MD5 b7adf99da15738c602df256e8a1aac4a
SHA1 ff98005dfcf40f876b618a599f227397f36915df
SHA512 8eb34d00f8149d688bd5efe2ffdc834f669fa8c30d4c265814647de78a55502805104ccc3682010b246d26d805004b188ab19ad59fc2e866103bbe191e2225ad
SSDEEP 192:7NC498iNxpWiBWruWXebPpUNTQHnhWgN7akWHkZD2X01k9z3A6wtY5dBEOW:M49jpWiBWrTb2HRN7cR9zXwtY3eOW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b7:01:88:4c:d4:a0:d5:2f:45:cb:ec:81:bd:d9:3b:6a:4b:d4:89:d2:4d:68:83:9f:1a:8f:9f:66:fb:9c:f6:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Numerics.Vectors\Release\net8.0\System.Numerics.Vectors.pdb

System.Numerics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0a21e822762d22093b81ca65d10ac23b7b88376b04a920ee7ba25b1131ef8d1f
MD5 34a024608adc2e21e104fe9e7517b2e7
SHA1 6fb0b9bc958c9ec87a571b0ab28b3c6e8cfc49f5
SHA512 ce857ddefcd38b47c393bcd66088ab16489447a90634bf7ab10298d7330397fa5540caa784fa8ab8a01824458b5e8d8afb2d2cd95088d51af4e27d054128864c
SSDEEP 192:uF7xahbDpW6NWTuWXebPpUNTQHnhWgN7agWApl+tZNKd2kQX01k9z3AOd0KXRC:E1yDpW6NWTTb2HRN7IvNNPR9zbKKC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

78:91:a1:72:79:26:5d:8e:07:a7:c9:c8:b5:12:0f:ea:52:a4:8c:fa:3e:e6:3f:89:6a:22:07:2d:54:78:1f:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Numerics/Release/net8.0-windows/System.Numerics.pdb

System.ObjectModel.dll

SHA256 146fe8fe2832b7132f175aa49e8aeed0bec968cdbcf8c345464b83765f16894f
MD5 aa782e3725e34d6dde6f4474e182b139
SHA1 149b6159f89679d329db75f2ccba5d78826adf17
SHA512 97780da2dc58cd27ae8501f6d9f5415f4d31f2bbb240b99d81b1d94e8348dbf324cbba2d80a2d26573c859b55c7415cddf50886785cec8c252c0ef4a8f70cd16
SSDEEP 1536:t3GEo0SQAGLgRCGfNaQSszWrHGP3VriKzrT:t1o0O6hQNgpHGPlpz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

12:b3:e2:14:90:f1:6c:47:5c:b7:c9:ee:f1:50:bc:e3:5d:5c:47:7d:28:e8:44:e3:af:76:c6:75:fc:85:f6:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.ObjectModel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.ObjectModel\Release\net8.0\System.ObjectModel.pdb

System.Printing.dll

SHA256 63236213fcdfa93ee1f87d96bdde12d035d4b8f1fd128ec197105ad55455cc8f
MD5 b25d6601de9e2ed1c035f7732d1aa320
SHA1 667b53299ae9c7dcdc3198956afde420ad198c17
SHA512 55c4a92ab5e296a89a704d8bb6eb0a71bb2c1d817bfe3567d0e9452dd6d4d3532e14b1ee3bc8f3e2ee506c4a22394301e77174e939318c0e090f967d48366c65
SSDEEP 12288:Zp0Y3hLDgY4c6RqvXsmzrfLjsKbAEYkL6o2Soy6x0ZKz4XMOKl:hhx4b8v8mzrjjbFopKxXMH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

de:9a:3b:bc:5b:7c:6a:c0:65:f9:7e:77:f1:78:16:3b:29:66:c7:69:96:1a:4a:ff:cc:1c:f7:db:52:24:17:3c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Printing.ni.pdb D:\a\_work\1\s\artifacts\bin\System.Printing\x64\Release\net8.0\System.Printing.pdb

System.Private.CoreLib.dll

SHA256 ba7e61a00e7a4634b5c5a79b83126f75580ceec235c613000c3efbc01826cad0
MD5 805cf170e27dd31219a6b873c17dce88
SHA1 ac90fa4690a8b54b6248dcb4c41a2c9a74547667
SHA512 fa946aae906b66cb5570155a1c77340f2b6d4efb9be16068da03a8f1c5b5f37ad847d65cd1416017db19375dc6a72670300da4c766e6d9bb1a00374f492bd866
SSDEEP 98304:a6hbjqh3fAh7Wn8v4CDC0QUQWvkOB1zworQsh1xx4sTV+T:jU9+7Wn8xC0QURkOB1M8QshGsTVK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

89:c0:f1:01:6e:77:03:cd:7c:eb:45:ac:a8:0a:d4:bd:31:7d:1c:36:f7:7b:1e:7d:54:e0:6a:79:81:80:23:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.CoreLib.ni.pdb D:\a\_work\1\s\artifacts\obj\coreclr\System.Private.CoreLib\x64\Release\System.Private.CoreLib.pdb

System.Private.DataContractSerialization.dll

SHA256 c51d9ba56cd22cfcaed04151490d41c8010d5c4b50c27ccc092f46519503019d
MD5 e2e614887c60ee3c62dadf2e3802af4f
SHA1 9c0fb6ea1a80f68121ec4074f8d8cdc24d738a07
SHA512 00a6acbc36562c9333af0b1cc9db9f20b3447e2c5007e8fdd4ca6803f0164b4557bddb55f2b7c476b21f4775f418c4aa824649e138a2c2159ae5853c25300488
SSDEEP 49152:qrBe1kqlNadqMiuuTBa6AJ19xOouLsr2DLRvyEejEN:qrB8AUwjEN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a4:87:cc:dc:40:3f:f0:36:69:96:05:86:c1:a4:2d:4e:55:31:4d:01:76:aa:9a:58:0c:bc:28:4f:13:df:e7:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.DataContractSerialization.ni.pdb /_/artifacts/obj/System.Private.DataContractSerialization/Release/net8.0/System.Private.DataContractSerialization.pdb

System.Private.Uri.dll

SHA256 a0504959a752fcefad6c790120f20d00a20dce109f0d80d16b2e071b468f4a57
MD5 62f0582a9640bf29d710494fe7a4d641
SHA1 2cbe7b7f78fe8208362bbe654b511c98b438c84b
SHA512 2ab859e29178d5b33a3bf3e4980e356a4f051db20a49a325ec2819af9b9ae0dd96f7c9ca35555341c1ae5ed0d552664b133022c8af86a5d5bcddf246f0c5cc91
SSDEEP 6144:AvEAtZfInBsy5xxuv1MG3ThMeVmtGH6ANpHyuet:ArnYxu9MG3GamtGH68pHXi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f4:42:77:50:3a:ba:87:0b:bf:d1:19:65:6b:58:ff:f6:28:94:fc:dd:02:90:01:3b:45:07:d9:f3:85:9c:34:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.Uri.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Private.Uri\Release\net8.0\System.Private.Uri.pdb

System.Private.Xml.Linq.dll

SHA256 0b63cebb991d1911a607993ea5b4639f34a2b0b381a73973542db2d3591e9f90
MD5 60ed8b2bffc748d6a2a1fed8fa923368
SHA1 be411429b9a649a495124558c5e5d95a83525d58
SHA512 b0a4ac2aa96d827258bb30f098512741ad3f93585e05ceae0255e15cd8dc9ab8048788902c1eb32a813e9c69c8a923200a716b4e00f579c22a0b425665e575f8
SSDEEP 12288:RB4u5QpjGcWeI02RrmBHrxFxskCxxvM0ksSY+jiiQjqo+c9ukM/lr1MCsY/b/Upl:tjskufb/6n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

76:88:92:98:6f:1d:49:49:09:5b:b1:c8:f6:5d:1a:3c:f9:c8:b0:7c:99:8a:37:e7:12:f8:d5:c8:c1:8f:58:b9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.Xml.Linq.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Private.Xml.Linq\Release\net8.0\System.Private.Xml.Linq.pdb

System.Private.Xml.dll

SHA256 834e304221e742a831be5c5178892258e689eae35b730172e74161af2785aab9
MD5 46aebfbd6d7e74d4d558da62d7600d25
SHA1 9c1cd44ab8b5e283967427e91cbddddfc0c2bf5a
SHA512 9c4499d174a988cc3830aafcc42f79defff37b16198f49cf5d2dc86f88809fcb44e0c300351f813d46addf9998f64448c50213f1721c6a307aad21c205db1524
SSDEEP 49152:onM5xWhkw8hllFc4uyv0zy+YPyoJry30cfFIa9mYMJPG5W3tvy+4XRHwL2NOAzso:on0m8NwA1ufFeAQLRhYw2t50xqcFK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c7:69:31:e6:7c:50:62:1a:b7:33:b0:14:20:0c:05:2e:e8:70:fe:bf:cd:97:1d:67:79:2e:ce:57:97:32:85:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Private.Xml.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Private.Xml\Release\net8.0-windows\System.Private.Xml.pdb

System.Reflection.DispatchProxy.dll

SHA256 58d17e148885cca19cfba9335f08f2b70c46b333fe7fcd4aa769ef22c80344f8
MD5 b188734745ecdf05c7557073710fb283
SHA1 98c2a89d50112b65e981254392ec25306acc1acc
SHA512 a58b1021509f4f095ea440c59b2c4adbf1f39e3ad0ef88014c6aa0380e18ae46b9b7e4a79ddd040739197ba354d9112b1cb5e93bda35925e223429a09a0002f6
SSDEEP 1536:Cj2ZUaMzwZ2eNv+zWMuSxRcHJRZYoqtxJmWi7+zj:CqDMzwZ2eNv+LxRcKNtlP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

49:c6:9a:2a:05:9a:2e:aa:ed:68:cf:a8:e8:0b:62:dd:36:09:b4:39:e9:74:b6:4c:13:2b:32:80:3b:77:11:5f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.DispatchProxy.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.DispatchProxy\Release\net8.0\System.Reflection.DispatchProxy.pdb

System.Reflection.Emit.ILGeneration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 879b6c4221cb2bf24b79abca0709b2919904d8685fff5a69220fe6c2425d4112
MD5 0332c7e8e9a330080d6f0fb6c9b17b3f
SHA1 f168f25ccade467fe0efaac6ad2a09c1f2cb783b
SHA512 c3c4026d41f4e7832bf94e921fd6937918001fa98c52c5a8c115b5d538ad348425e290d93187af4779424b8142aca9b8bbfb6c5a1493ff2be655a2637b454512
SSDEEP 192:FW7x5WGUWnWzG3WT56Os1HnhWgN7acWfXCqG8Xp13s5yX01k9z3Agrf8uWdQ:MV5WGUWWzH5kHRN7UcYR9zPrf8lO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0e:bc:9e:4e:75:8d:f3:5e:a8:ae:4a:26:2e:15:3d:97:b7:1c:12:c7:89:8b:1d:85:a7:43:37:14:bd:5f:52:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit.ILGeneration\Release\net8.0\System.Reflection.Emit.ILGeneration.pdb

System.Reflection.Emit.Lightweight.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0518f171d45803ce07a79b27eb65e5d3277b711d15c8d2fd5964e044167db49f
MD5 23120034a510d234c79711940d1b809d
SHA1 1b1cb29537a8b78279909a794159fc4c70174430
SHA512 99af585ef71ff917d4c77f46b189cc14d1cd4efe9b35e6c33d0eef8112158574c8fb417801cf5207e412f7254de1a8cd789e208e17f01cd19ebafb7b133afd2a
SSDEEP 192:9maHxlmYWrVJWXluWXebPpUNTQHnhWgN7acWJ1KBwUoX01k9z3AurHNB9R0p7:TlmYWrVJWXlTb2HRN7w1KUR9zDS7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

47:f0:d4:b9:84:45:be:1f:62:e8:f8:d3:62:1f:df:66:1d:bb:8a:3b:e4:2e:82:85:91:3f:35:9c:ad:03:7d:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit.Lightweight\Release\net8.0\System.Reflection.Emit.Lightweight.pdb

System.Reflection.Emit.dll

SHA256 ffb6875e3cdca828dec3e77b5605ff7ba62237ef194125b1b7baf2dad3440e7f
MD5 97a7e23add643f4f533a6ac947249c56
SHA1 df20789d81e649203ed0ca290028b84e2c7f98b4
SHA512 ce6e7534bdd8c7d9352fb4ce9799c590c84be16d0b0b67e5750fc302ae893e2b4a0f8b212ee24cc3aafe2e9ccf02aaa625092780e0747be034a91dae7b7333c1
SSDEEP 3072:5o54a2I4SSYbKatKLd0sVkrcv0QBR7G7R:9QDSS+esu5Vd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c1:a8:d9:b3:ac:f8:58:28:4e:a4:95:81:f0:13:ca:64:75:da:76:21:1f:23:3b:fd:ce:f6:c1:5f:8f:a2:9e:fe

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.Emit.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit\Release\net8.0\System.Reflection.Emit.pdb

System.Reflection.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b36cea647d3878a65d3a8a9b67a6e0b1c5d0c1e917cdbe8292a6c03516299630
MD5 cfdd295029f5011f3982b772e1d0a624
SHA1 c61c80807b8df031781717454c2967c94eff6442
SHA512 aa63f2691ee1c71e3a0e2c21df46a5425b62ae1e39f408156beb28770d95dd8ebf5039e066dc05305375bc811b17b3233d2745af71f6053e2cd2974133eee1b6
SSDEEP 192:rj8XzyhxAXW7WWCuWXebPpUNTQHnhWgN7acWvn+p13s5yX01k9z3Agrf8NEoAuY:rYDyr8W7WWCTb2HRN7oCcYR9zPrf8NAL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

0d:58:09:90:59:8e:59:3b:40:a0:38:17:60:91:2e:24:e4:f6:8d:40:ed:40:b5:ab:09:48:b3:ca:e3:d5:23:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Reflection.Extensions/Release/net8.0-windows/System.Reflection.Extensions.pdb

System.Reflection.Metadata.dll

SHA256 76431a93ec79dc8e4065b13631fbe80f4f50ad5d4bb58bc7d05c8059f06f4883
MD5 875bef0340276600bdf69c9f1b3f2dc8
SHA1 985d2c85fb3c5db12a405092464c71745668e3ed
SHA512 0e56d177b0ab2607e6f59e6f4f8c3efa0b9c76a5ed1fc5a5adb3747ad652514babb5b397d1fbc9a70a66d90a7841ad1020da58026500be21a62e7367a916c5e7
SSDEEP 24576:3m0B8V3X3yR6UROcOWmT/ilzmGWFbqWCgX:3m0B8V3X3yRJYP9GWZDX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

af:d4:ca:dd:2a:9e:a6:ba:5c:53:7b:63:f2:4c:a8:5d:86:db:04:5f:e6:23:a1:70:9b:a1:e2:ae:13:f8:9b:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.Metadata.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.Metadata\Release\net8.0\System.Reflection.Metadata.pdb

System.Reflection.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7769658065897653651107e0138f6bb7515932886374ba11833176a931411d7
MD5 579b0fcf2dfe1a1250a0ad29ed54b1f8
SHA1 2157ad05803ec234606bf7e547bf644021b4f6fe
SHA512 2666a0ac8591905af580afb25163485d773896d38de5f6a04b571103a821d7221d0e60ccee7752740e3465015b6bbea306e5fc9634e4c6c46b2d0c9d8da4c9c6
SSDEEP 192:4//C3xqWL+WauWXebPpUNTQHnhWgN7acW+PBwUoX01k9z3AurHNBPdkJ:iWqWL+WaTb2HRN75UR9zD1kJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

58:46:0c:ce:16:8b:52:0d:88:26:eb:04:f9:2c:5d:45:1f:dd:05:5d:03:fe:0f:c0:62:aa:d8:e4:37:cf:ed:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Reflection.Primitives\Release\net8.0\System.Reflection.Primitives.pdb

System.Reflection.TypeExtensions.dll

SHA256 0e4fb580b585eeee5b5320355db8c4272c50d7bb020a78732ea00b27d893beff
MD5 cdb9345e660eb8f1f2af43ecd036ead0
SHA1 14a1f4ff60a3349aefdbeba93748a702f9be378e
SHA512 8473c1e42aef319d933019c39ac4954de09e0822b81b5cee3ba0e3904c859027e0d576b96ad970e4e843e8c37dba49c4b9292e9319d9dab5add091b154bd7e95
SSDEEP 384:xWneWmx1Yc9PuTNtyVQ0a+SKcD9t9jRhTb2HRN7DZUR9zD2h:eAGc9WTUY+jcBb/iD29zw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

90:95:ff:36:8c:62:c9:2a:30:3f:2f:60:48:57:5d:b6:69:43:de:0c:df:1e:3c:3f:45:43:49:e4:22:06:6f:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Reflection.TypeExtensions.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Reflection.TypeExtensions\Release\net8.0\System.Reflection.TypeExtensions.pdb

System.Reflection.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 76c4618ad413a58601a1ea8277f76e41123e70d3bf55ec2102ac11f992fe07aa
MD5 3b1fa07415ed72d06b2732c4fe4fffa6
SHA1 63bc0946e4bd8c20ba001e96009e1ef2799e9068
SHA512 44687c4423240d17c433990d39f03b4e5d41f07a71c836e8a1148bc0ca434c3253b97ecdb626c2ca1ebf611e90615b58a73a8674b3294d31215bab10cd6a74c1
SSDEEP 192:1eCkHQKBhxAmWoCWAuWXebPpUNTQHnhWgN7agWGxhjepVWnSX01k9z3AYngEg5T:1jSrxWoCWATb2HRN7hrjezWSR9z1gd5T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2e:e5:85:6a:fd:d0:ca:f1:55:2a:cb:ff:71:54:48:54:34:ad:2f:ac:fd:49:cc:ec:2a:68:d6:f9:1c:6c:63:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Reflection/Release/net8.0-windows/System.Reflection.pdb

System.Resources.Extensions.dll

SHA256 104c19772d7bdcedb3cdf9db26c96fd480055c0a9178bbae013cc81b8875b7ac
MD5 9c0adb8a9be0bb7cb2c68bf21624e13b
SHA1 dfafe10e447b9bf3ba6bac1bd47dd6247f494dbd
SHA512 b769af41c67aafcaa071a453298938b829ddb6753b57badfff186695c36157dde22c70f17f38d5dcb6a73b5de664bf4759f4084190378e70f45e4015d3961693
SSDEEP 3072:Qe4+LlocCEKu623YIBbLQ1M+6yREGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGR:S+LlOEz93Leex4EGGGGGGGGGGGGGGGGQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

09:61:58:b3:6b:0c:e8:ac:70:a9:ff:39:1a:82:38:e7:14:b2:59:43:34:0f:64:e6:d7:c0:ad:21:3f:7c:a0:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Resources.Extensions.ni.pdb /_/artifacts/obj/System.Resources.Extensions/Release/net8.0/System.Resources.Extensions.pdb

System.Resources.Reader.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 044bd598f1f94f8711374b5994d73bc6dd794ea2ee6793e64545c78234b21909
MD5 29837fd636470e6880af58cc72d2fc97
SHA1 716bb15eb509959448f427906c1bd2f9bd71f826
SHA512 fae840eda55d86a06e0a23f81cdbe83b9b29a88f050d5f9e23bfd75e324cdc95fd62767670e4e81113458a0bb6ae7767e97b0a68466a471662837a2cace8fd39
SSDEEP 192:ZhDUxAZ0WS3WOCuWXebPpUNTQHnhWgN7agWxTnfBwUoX01k9z3AurHNB1Jseo3:Cc0WS3WOCTb2HRN7QTfUR9zDY53
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:8f:cf:d1:1f:bd:c2:a1:0f:53:d5:c0:cc:8e:d1:42:88:b6:45:ee:a8:91:4b:36:23:67:88:68:e7:52:bb:2c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Resources.Reader/Release/net8.0-windows/System.Resources.Reader.pdb

System.Resources.ResourceManager.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b8c0ea60cf2a246f9d2f33a9e91f68cecfd27733ba635da52883c926ec6cb8c1
MD5 86da82315b4019495dfb9010d075358b
SHA1 43be784a95b9d28775933bcb9bf80305f609de58
SHA512 4df6559efc762a521d4e25f6201d73a599f8db58e54a0f8966053fc904fd4d57b95eb675a7f74ce6e373da81e3c870d0a07baa8356a5a51ef0e2f7ca1509509b
SSDEEP 192:R2tbFxADSWXzWGj3WT56Os1HnhWgN7agWfIw+pSZNKd2kQX01k9z3AOd0NUWG4f+:RGvESWXzWGi5kHRN7q0KNNPR9zbKNY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

48:09:9e:3f:39:ab:fa:35:dd:2a:4d:fe:11:f1:16:8b:c8:b9:12:be:9a:d3:90:78:2e:e2:47:82:22:78:87:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Resources.ResourceManager/Release/net8.0-windows/System.Resources.ResourceManager.pdb

System.Resources.Writer.dll

SHA256 2a26bbf0d67733d1172b9de12815355e87378d068a6254b18208499d59664465
MD5 6664c41fe2fd8241d58ef8757256aab7
SHA1 b9c4350723b11d6ed963eb07c26b209d3b98982f
SHA512 acb9c0e327c302c90e4ad7b6c90de0d6a2183d7df617a654480410b2fe95016cb258c8e810ab31ce7113df5169cae22b531e8a94773d0671cf84fac96a6e8fae
SSDEEP 768:4rK32Xbfi171RsnV93p2/3L04If/inwp9zpH+W1:4uGrf871q952z09inwLzE4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

20:c8:7b:05:0a:73:e4:a3:c0:76:2d:32:eb:e4:85:46:90:fe:d4:b2:4b:ee:95:9e:b9:9e:06:a9:70:e9:27:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Resources.Writer.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Resources.Writer\Release\net8.0\System.Resources.Writer.pdb

System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 00dbf150d516499def50b7d89b9c301abfb41b6f411cdc7b6910ef23910a4b71
MD5 a055ea1aabdf03cd8e631bea473dc0d0
SHA1 c1dee4fc598a9940bee0c4a60960bbfd5f490877
SHA512 8aad700decf72753e66c383ed47b2884683eb670173ebd23dc7fbbf9e1a7e48be43891a671af114ba54c740e76f2b239d1db978acfd4c8b888e6f35ac19d43df
SSDEEP 192:C9xAu4NHuW12W/uWXebPpUNTQHnhWgN7acWXNaDrwLobDX01k9z3A5VWEZOlvO:GioW12W/Tb2HRN7ENaDMyDR9zGVWESvO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

08:35:49:1c:a6:a5:bf:61:f8:f5:d7:0c:26:53:f8:c5:7f:e2:1c:b8:0a:36:50:fb:c6:b2:9b:4d:13:33:43:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.CompilerServices.Unsafe/Release/net8.0-windows/System.Runtime.CompilerServices.Unsafe.pdb

System.Runtime.CompilerServices.VisualC.dll

SHA256 ab66ab297c2fe53bd991cb21086f5ae94d5fe6693545388f49da1c5f095421ed
MD5 1e283c67bf09ee973043faed22195111
SHA1 57d76b78f1c53c272f8e45769d8d86825ab0c9a0
SHA512 3bb87f3dd69596abca09f8150ba78f194c1b143a83a8e261614511050815249ec8d8499bfde3c4de5327006a56061dc462712354a30221e920651fedd09a3940
SSDEEP 384:ZWiLWrO5oR9Vl+Tb2HRN7dg131AqR9zdvMx:b4z9O/ieVr9zm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

81:ee:08:82:7e:98:59:dc:7d:bd:f5:ad:65:1a:86:5a:44:67:d2:ab:86:e5:8b:d1:b6:9e:8e:35:67:8a:c1:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.CompilerServices.VisualC.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.VisualC\Release\net8.0\System.Runtime.CompilerServices.VisualC.pdb

System.Runtime.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a925c3fc617a41b040770f9f8d5d7305ac68f2894c1cff8caba79eeab4ec9741
MD5 a50f9099553aae450b6cf85ab565e4fe
SHA1 893d7a9136a7a2f288763dc50c6723240199de82
SHA512 1979d4b8d4f1f639e099d4198dc3954618f5c9cffd21c771789854a53aaa5aaa4ada0b07bb244ed042ed1a0db01b2aad994b04a876b676658edaa0a82bee74d3
SSDEEP 384:aRSj5rt9x+6YhWwNWETb2HRN7cyVwR9zP1M2:aUj1tfYFt/ic79zR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f5:62:51:93:6a:51:0e:53:48:75:2c:81:83:23:86:e1:88:62:eb:ef:f9:7b:51:93:33:7c:96:5f:9d:2f:46:a9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12850

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Extensions/Release/net8.0-windows/System.Runtime.Extensions.pdb

System.Runtime.Handles.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 05e1e149bfa283a815735cbb7ed64c82b954ebcea08b30e467b0906f2cbd4590
MD5 897123bf0fdc4de15d88a3de635cebd5
SHA1 c67128ae9e3e866857eec33e4c95eaa7285fa93a
SHA512 c90039f7c4d7f7d6f8ce2ccf68cfe146de4214e5d8f401a2c35b07f17fe20abdca32e0e86d9ccd3da1d99716c4acdebceb1200764d09c234ebfe5e8496c7af86
SSDEEP 384:40fCoZjRIIWlmWoLTb2HRN7jjezWSR9z1gQ:JKoZaAL/i/q9zS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5c:8f:79:43:11:83:af:d2:33:fd:c1:ac:02:6b:a5:b2:e2:03:41:41:ee:31:0f:d0:43:7e:43:7a:7c:75:ec:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Handles/Release/net8.0-windows/System.Runtime.Handles.pdb

System.Runtime.InteropServices.JavaScript.dll

SHA256 10c228a2d707017f9a2223f53c45f7f4f944413943f81e4d6a0f4e705c607971
MD5 400b703e647b6e00136c6ad46931c412
SHA1 a91cee622478c68c4fdabeceae28a45b73632992
SHA512 533868538f03f5476162a6a02ceaffb99adc6a554cc30bae3818b83089d22f843cced93fdadddf000dd79f98ac44905acc48d59158e25bcccf32906448a7cd93
SSDEEP 768:XExGMiFMwIIDRptGdwWxroe+MH18h+k710b52j/iDr9zYzYu:XEwMiFMwIIDR3GwWxUezVrkCbEiDBzYt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

03:be:ac:fc:66:cd:82:dc:74:3f:8f:82:16:20:d1:b5:a6:a6:b2:86:6d:67:4f:9e:ee:14:d3:1c:c3:c7:69:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.InteropServices.JavaScript.ni.pdb /_/artifacts/obj/System.Runtime.InteropServices.JavaScript/Release/net8.0/System.Runtime.InteropServices.JavaScript.pdb

System.Runtime.InteropServices.RuntimeInformation.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f8844ff48645c87a3e89a3fdf45744d8c56560f781331b8c29ea1f74a6b469e4
MD5 c5c22c69472340cdb6430c2245d37b7b
SHA1 6bac1108d0eb7a29016c9bc9263dd9659e7428f8
SHA512 a7a3e9259c1366436c1dba98d0968d4c42cc268bc60500776b3045b118ceb085fb83a83aa243c9039cd4e01031f8acdde5592077eb5dcb4c55aed27fba0c1def
SSDEEP 192:v7e1edxA9WoUWf33WT56Os1HnhWgN7agWfChoVd5ZNKd2kQX01k9z3AOd0Ol:vCUn2WoUWfe5kHRN7zhINNPR9zbKOl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

8c:8b:a0:0e:44:52:a5:75:6a:bb:90:25:8c:d2:f4:51:0f:58:81:a1:69:2d:db:26:a3:b6:6d:a5:85:6c:4a:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.InteropServices.RuntimeInformation/Release/net8.0-windows/System.Runtime.InteropServices.RuntimeInformation.pdb

System.Runtime.InteropServices.dll

SHA256 756de3f5f2e07b478ac046a0ac976b992ef6bc653a1be2bb1e28524a4ff8d67d
MD5 49c86e36b713e2b7daeb7547cede45fb
SHA1 75fe38864362226d2cce32b2c25432b1fd18ba37
SHA512 a9bd42b626158c540be04f8d392620daba544a55b7438d6caefe93b9df10ec2219f28959c4e0d706a86b92008275de94dfdf19de730787cdacf46d99fc45e3a9
SSDEEP 1536:NcryyBJoyoyGXe5CtLey6+67NrpnSPM+l5+KkmV8KSHycz5:NJySO5CtihdSPM+r9kmWdHd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

60:7b:c1:e4:7e:e8:e1:93:e5:94:3b:3e:93:47:c8:d4:09:34:8e:d1:2e:d4:54:4f:d9:72:1e:f2:a2:fb:87:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.InteropServices.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.InteropServices\Release\net8.0\System.Runtime.InteropServices.pdb

System.Runtime.Intrinsics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9b099bddf07a320ca7469b510e1f4e75b832d2943fec67cdd0b7f86cc82df10b
MD5 d4049100ee188f29afefaa071df4a75f
SHA1 870da8b7f36bda7a884b38eeab97f0866576be23
SHA512 020d9f0ab51c389f269095809c027c25bfe6f302d01e573700110baf8674b8f51bff6af532b9079a24e997026f401614e1952c93951dd4f84380a1147580fad4
SSDEEP 192:qZYQZrDknWgLWkWk3WT56Os1HnhWgN7acWfKBwUoX01k9z3AurHNBoqY:qqA3mWgLWR55kHRN7PUR9zD2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

14:3d:86:f0:4b:39:1b:8e:05:ad:ee:3e:37:53:cb:1e:dc:3c:a7:d7:e0:26:32:e6:4c:23:f5:88:43:d3:01:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Intrinsics\Release\net8.0\System.Runtime.Intrinsics.pdb

System.Runtime.Loader.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 74c28217bd8e552b2da262625a5397d37ddbcd7311927f04755baff630c1a2f5
MD5 db6a9d1c0bad50e0b7280e824d779bef
SHA1 576e303188cdd3edf8cd4565ba8b895e039aa183
SHA512 96efb41cc9184cab7b4dadab312d46421e02a0ce3b409859c32c96cf03e2f41e86517586e8fef6f67f4d98e519e41b4ab48611e26b9885e0460e86504b28776c
SSDEEP 384:bnJlyxW8GWiTb2HRN7tIDMyDR9zGVzIEq:bnJly5q/it49zhd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2c:35:a0:33:e5:51:64:7b:3c:44:96:2b:d3:31:b0:dc:a0:e6:15:af:18:aa:65:9b:64:19:1c:c4:d1:c6:6f:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Loader\Release\net8.0\System.Runtime.Loader.pdb

System.Runtime.Numerics.dll

SHA256 c0c6517acd412088f9fa410dade8817b816e0c38eb856a48c008d4124369560d
MD5 ea5dcbd6e353c362760bf1e27d5a855a
SHA1 429076d24f656d942311bd6de42d0c63038e7f4d
SHA512 7310af413a16de6eb45b72e5b98e2adfc93a308809de56418d0226d70450b9733d7be717cdb32b08ff5be0c5dfd5a7b55b13f71ba55599fdb8cf45d89fac7c39
SSDEEP 6144:oX7UgK2UfFr61EFM8Sx/mPue+GQV5ODGt9dXIKc2C:oX7STfFr61KcUsV5OSt9dXUT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ba:9d:da:92:7b:e7:ea:93:a9:de:01:5d:6f:83:98:a8:3e:b0:08:df:d2:7c:4b:93:ca:ee:fa:f1:c1:be:99:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.Numerics.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.Numerics\Release\net8.0\System.Runtime.Numerics.pdb

System.Runtime.Serialization.Formatters.dll

SHA256 c7004200a63c8942303679e1c7b77bcdaff516b7fcdb2c0b85b12115933d1b10
MD5 2150028537b3487b6fdc6aae970492d1
SHA1 9978285ec2e62783e066dbf3d0176351cc125ba3
SHA512 1f6e17ad44fa38e6a7ac443fa5016fb853f134a39442c1b3972a42c7e74decf33833a8da3a6d58a8a092b04436ab1158b76700f110f95d32d4dc8da99366bbb4
SSDEEP 6144:kVw42z700KWeVw+06LKEcnJHWBftO2IP1Ss9CH0zll:ow4W70z506LDcnVWBfkz9S0zP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2c:af:c9:64:f4:fb:65:ac:3c:ef:b2:af:b3:49:b9:7d:0b:8e:17:f2:2e:28:cc:8c:45:dd:50:e7:01:7d:4c:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.Serialization.Formatters.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Formatters\Release\net8.0\System.Runtime.Serialization.Formatters.pdb

System.Runtime.Serialization.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8afeec62e6edecd8fc1908ef0cb7bd91f6514826621010510d54a4535e776e9a
MD5 27e3e81a4ca283d4242fbbe0a1bdc663
SHA1 10052a8957d0de0f5194ca0979914a74d68e9741
SHA512 c80db2ac78d3e2ee9f2c3389f0a1e8f00baf82da431875bf6d27c2fb7e986000c681315c7668e674b43403bfbe9bbc60ced4722f712bf2eb7f7750ec68224025
SSDEEP 192:8TBOg4xSRVWbCdB5WxhKuWXebPpUNTQHnhWgN7acWCCqBwUoX01k9z3AurHNB7vH:8TBK+VWbCdB5WXKTb2HRN7FUR9zDr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b5:f7:49:33:5b:51:52:ad:f0:bc:e9:bc:86:22:a8:0a:ee:df:1f:f5:0e:39:4d:98:df:d6:41:06:2e:4b:13:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Json\Release\net8.0\System.Runtime.Serialization.Json.pdb

System.Runtime.Serialization.Primitives.dll

SHA256 2a30cbf5dde707b4d360ae56b9ca214603e0fcc643aadc408f373ce275ab761a
MD5 3eb993c944362b319a5d7693513d88e2
SHA1 3fc79140c63447f26d9a95059d51f0e5c0202b04
SHA512 e48eb9e4b1206a5449fd56da2c65ad6e6b0bc6d46f0f6fde45b789a8485d00418661990956428e6648260eb4e5c91851b7ed1a1053d30a3fc5a7c65fa68117ae
SSDEEP 384:oHWFOJBrWlMHkh2HE0ue4q+k+arsXwR9pnUkO2akIGt6HHDEax10JhXrTb2HRN7U:oqOJBkEDsy9pnseXj/iNbYi9zraWU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

72:4a:62:73:bb:37:cf:70:33:59:64:53:4a:e5:80:d1:91:70:ba:23:79:06:f4:12:d6:22:54:ea:2d:4d:14:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Runtime.Serialization.Primitives.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Primitives\Release\net8.0\System.Runtime.Serialization.Primitives.pdb

System.Runtime.Serialization.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 84b02510a56caf396163fed522ad8db6c54222b492f577a8fe18334fb507cb6a
MD5 315bf523eeb4b3dc67c164750c3dd3a3
SHA1 d32138cc8dcbc2408ab19227ab439c43a2cc4164
SHA512 810070e08e90b57fbf923468cd65896a1ab08dbf3d084c8ad6c3525e10b3843bbbd785dfe41c8a3525ac1b2050ca2f537d9287eceac51cd771758058afb45cd7
SSDEEP 384:akrZI8NQeMWs2BBgW8Tb2HRN7AY+R9zF1aQw8:akrZI8NQei2BBG/iAYi9zraN8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

11:d4:04:5c:5e:7c:70:79:14:a1:a6:39:63:62:95:be:10:aa:1c:b5:e5:88:dc:e1:a5:ac:99:1f:1a:9b:88:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Xml\Release\net8.0\System.Runtime.Serialization.Xml.pdb

System.Runtime.Serialization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 06edc02b3413150ce4a19e4cef5264d114b218aa774e8a2c78aa631da785bd60
MD5 1177cccbbad1e97f1bf37fc5f7ccd177
SHA1 f887521d4c7f86ea5d51a390e41a99f20b074a36
SHA512 4a3c47c2a7bc35056286b4d4902df95bc14c9ce5d0e5656046dd5a4ccd3daac8f7f7b7697f70ad848e76622dfe6392385b083c07ef14e61d19f6b086d1c2a9a8
SSDEEP 384:U6X52tNCj8NqhLWgr4BHWpM5kHRN7vTNNPR9zbKG:3XUtNCj8NqhPr4B0Jh9zT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

98:8a:6f:87:7c:20:70:e5:99:66:20:28:84:cc:23:35:a7:26:57:0d:ea:75:ff:9d:a7:af:b3:fe:bd:4a:21:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Serialization/Release/net8.0-windows/System.Runtime.Serialization.pdb

System.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1fc86ada2ec543a85b8a06a9470a7b5aaa91eb03cfe497a32cd52a1e043ea100
MD5 53501b2f33c210123a1a08a977d16b25
SHA1 354e358d7cf2a655e80c4e4a645733c3db0e7e4d
SHA512 9ef3b47ddd275de9dfb5ded34a69a74af2689ebcb34911f0e4ffef9e2faf409e2395c7730bce364b5668b2b3b3e05a7b5998586563fb15e22c223859b2e77796
SSDEEP 768:e+1fsSED2vCeDQvRzXB3gWql6375IVxedktN7xPBhwsR/JG39QRoNvsh2JcfoDL1:iB/LuYdy50b4b7RSHr1nidzU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a2:0b:8c:e7:2e:55:30:49:0a:a5:e7:54:59:02:35:88:a3:d9:ac:d7:01:77:3d:50:b0:fa:65:43:22:1a:8e:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

38894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime\Release\net8.0\System.Runtime.pdb

System.Security.AccessControl.dll

SHA256 03f6754c0b61dc5c021f86e264885a23b0f78e86720b9e87a78a6f4e2a49c6b1
MD5 d72cb2eccccfea191198b02fc44f6fef
SHA1 ac232d0eb0b624af593817774c7477ee3a7b0c3f
SHA512 019e063edf86c355faa1cd66f897fb594af063ae75e3bdbc6cbd5cfae5ecd7d617e92fdfe705ccc25ed6df71c8954f8ac1a93c3a5c81496e5307974b27949e08
SSDEEP 3072:MBMLDgwbcl9Ff6amcmMw+GQraV8/6Xe9QF+wVkjoZktAautGA/+PXHz:Bgwbcl9hLmM/GQE9pWfT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f2:ca:d4:8d:04:80:81:69:18:89:5d:88:b3:06:58:e4:74:7b:d9:e6:62:f6:36:5e:13:5b:26:c4:0b:b5:05:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.AccessControl.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.AccessControl\Release\net8.0-windows\System.Security.AccessControl.pdb

System.Security.Claims.dll

SHA256 841214267e1fdc2dc03cd639496550d8e2f10dd11835bab49f0c97f113f884a8
MD5 b14c5183cb8383e8b6c8a84a43635f3f
SHA1 112ae56fb863113aa427d76abf0e65486074a259
SHA512 381facf8cc645d26af5aac146d7ddc17cb9075bf681deaa2e49c7ddf3ab3bd0cbd0f9cc37747754c6a44ea44908e8dd641450b3e6ba1af1a878639be41f64287
SSDEEP 1536:tr076mOOm6n1kM0X+bX5STuDQ76O/UUxOQwQ7rzUU3q2bP6JLrSj7nieXBzRP:tYUV61kMK+bJSTuIXQXSXJB9P
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

3f:a2:9d:c4:1b:5a:72:50:fe:7f:47:b4:b4:27:33:ad:26:db:b3:00:6f:f6:a7:b0:29:fa:f3:b5:5c:b3:c3:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Claims.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.Claims\Release\net8.0\System.Security.Claims.pdb

System.Security.Cryptography.Algorithms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c99c6b384655e1af4ae5161fe9d54d95828ae17b18b884b0a99258f1c45aa388
MD5 8f3b379221c31a9c5a39e31e136d0fda
SHA1 e57e8efe5609b27e8c180a04a16fbe1a82f5557d
SHA512 377f4e611a7cf2d5035f4622c590572031a476dd111598168acea1844aaa425c0fe012c763fbc16290c7b32c6c7df7b2563c88227e3dbc5d2bd02250c9d368d9
SSDEEP 192:yV6aEqCyxAxjpWiBWquWXebPpUNTQHnhWgN7acWjd9ZnAOVX01k9z3A+vEvRLY:ysVqVC1WiBWqTb2HRN7k31AqR9zdvAR0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f9:f4:30:ec:e5:24:aa:8f:f3:37:ef:8a:25:0e:f6:fd:2b:96:13:b4:f6:5a:55:c6:bb:e5:73:86:7e:71:f6:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Algorithms/Release/net8.0-windows/System.Security.Cryptography.Algorithms.pdb

System.Security.Cryptography.Cng.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bc40aaf5f15dae506523948029e164709cc73a39fa7831572276a4de75561931
MD5 501c1a58eb5423d8840fbb0245f6388e
SHA1 0c82a46b138ba9cc6f720a65265268f947857008
SHA512 8fe3fca1f9909a3b19b785b7da09dbf4386f64aa6d1c1cfb8f51dbdc2d9c6396889dd9d58f301c21907e3349e2fdec7df862be362762df880f6e6d40f0def531
SSDEEP 192:eVJAxNaH2xA4uWHfWduWXebPpUNTQHnhWgN7acWr4BwUoX01k9z3AurHNBZc5/e:0FH8sWHfWdTb2HRN7pUR9zDpco
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3b:b0:69:d0:11:8f:db:cf:1b:66:f6:05:84:62:a1:5b:31:f2:a4:dc:54:e6:99:9b:f4:23:42:b4:e4:97:7e:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Cng/Release/net8.0-windows/System.Security.Cryptography.Cng.pdb

System.Security.Cryptography.Csp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 16bc1f72938d96deca5ce031a29a43552385674c83f07e4f91d387f5f01b8d0a
MD5 c7f55dbc6f5090194c5907054779e982
SHA1 efa17e697b8cfd607c728608a3926eda7cd88238
SHA512 ae0164273b04afdec2257ae30126a8b44d80ee52725009cc917d28d09fcfb19dfbbb3a817423e98af36f773015768fed9964331d992ad1830f6797b854c0c355
SSDEEP 192:qkbUikV/AvcaTAFCwxAFUWntWouWXebPpUNTQHnhWgN7akWpSongqtVVwX01k9zC:ZbUvYUWntWoTb2HRN7aVwR9zP1NO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ad:1e:2b:35:a8:be:dd:75:1a:6e:23:a0:15:50:fc:25:20:b6:cb:a1:f6:5c:7f:3f:fd:c3:b0:ac:3e:e6:14:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Csp/Release/net8.0-windows/System.Security.Cryptography.Csp.pdb

System.Security.Cryptography.Encoding.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 441969fc823cd5af288cbef10eb213267e57eb5f6e80292b3b76c3839566c334
MD5 a250b008424d0b2a1998a6099dd9ac41
SHA1 0d593204a4e6cd68ce1154079307c423f5ef1acb
SHA512 e056e2e0245ab9aefdbe7acb266e30ca4d2368e28a21d0a5b1ba4e28eacd1eb3ac03b106c075e8db56f9c455a7fb0bb9ec497995c56235c40c289d6e04e973eb
SSDEEP 192:drhZy8V1zosxAtJjtWsWWKV3WT56Os1HnhWgN7agWfGZNKd2kQX01k9z3AOd0eZX:5zo6WjtWsWWKg5kHRN7TNNPR9zbKaX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

60:d7:d2:0f:07:ee:3d:59:62:03:f5:61:76:81:b1:f7:11:a7:a5:fb:94:10:34:d8:12:fc:1f:a3:89:d7:a5:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Encoding/Release/net8.0-windows/System.Security.Cryptography.Encoding.pdb

System.Security.Cryptography.OpenSsl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c07132f6ab018cbee5503fa1ff87570de60214b664d3396017fef7af38223671
MD5 f918fe83612cd8b3b4c667a2cdcdf0ca
SHA1 8ef5b2ad018dee13b8abc7f0f8fe45d1c13c908a
SHA512 849bf48637084b130f1702ddcc62c1b5714c83f626a9a0f15e5dc2db4260995357a167b8a770ae0bd827025eef7f5ed84fb7e86abe4b44396c00e0f7273b342d
SSDEEP 192:JLeIxAulFA9WAvijRW/p3WT56Os1HnhWgN7agWfEKOZNKd2kQX01k9z3AOd0Jjh:Jx5o9WAvijRW/c5kHRN7gGNNPR9zbK5h
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

19:cf:0b:a3:91:77:97:ad:13:12:37:4d:1b:c1:af:c1:7b:7d:d1:72:4c:d5:fc:68:34:4a:ca:ca:4b:84:15:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.OpenSsl/Release/net8.0-windows/System.Security.Cryptography.OpenSsl.pdb

System.Security.Cryptography.Pkcs.dll

SHA256 367ef0aa84d51ee81b71ba6ceaf9970a0552e4a93de11b0ba9d5e828c03a7eaf
MD5 6f117f0916d5d2945bfcf0e04c96d9ff
SHA1 4a772c5a65b49ee4673ce03a272344c76d1d87f2
SHA512 fcf3da3d94072fab47bc568722dea6f5924e9fcf3916e37952bb9170c979f2974dcb27d42f1fc038ab50dfe8c75ae37c4c60fb9670e6d9bdbf0bdca896186d60
SSDEEP 12288:UTAW4w6GLGIUxhVE85wm6G2WgVdn/8uEJh5UOS+oxVcJtxF7VWq2tEHh1nZ:qPLI4minUueQxVitxF7VWq2tEB1Z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

40:d0:f5:3c:59:4e:db:92:5b:b3:dc:6f:72:9c:b3:92:d4:d9:ed:64:0b:69:86:20:73:50:d4:d8:e1:ab:2b:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.Pkcs.ni.pdb /_/artifacts/obj/System.Security.Cryptography.Pkcs/Release/net8.0-windows/System.Security.Cryptography.Pkcs.pdb

System.Security.Cryptography.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6703e8d35df4b6389f43df88cc35fc3b3823fb3a7f04e5eb540b0af39f5fa622
MD5 777ac34f9d89c6e4753b7a7b3be4ca29
SHA1 27e4bd1bfd7c9d9b0b19f3d6008582b44c156443
SHA512 a791fa27b37c67ace72956680c662eb68f053fa8c8f4205f6ed78ecb2748d27d9010a8de94669d0ee33a8fca885380f8e6cfad9f475b07f60d34cdcb02d57439
SSDEEP 192:96k3FcxACxWi3WIuWXebPpUNTQHnhWgN7agWPEmngqtVVwX01k9z3A41pqi5OK8C:cIAZWi3WITb2HRN7sVwR9zP1fg1m1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6b:fd:ba:2c:d7:2f:90:d6:b6:96:b7:1b:e9:ac:f0:7e:25:d8:f3:97:9a:d8:77:c0:10:38:60:75:59:de:cc:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Primitives/Release/net8.0-windows/System.Security.Cryptography.Primitives.pdb

System.Security.Cryptography.ProtectedData.dll

SHA256 24591f803e638805ad9dbf1a2396116c6cbbf1fa41bde94766eefe30d8eb95b1
MD5 337d1ba2341b82cb6690ef4b54b13610
SHA1 c66d1192fee824278c1f9855dd5c070dc349bd0c
SHA512 16bba6b26d7599c877dbab3d6f097be0a122c387622980b962129716ca1d018b21b1152047baa408d1a206deff05b756ab74cb1ab969c548c0bd2c42efef8b3d
SSDEEP 768:Gb/j5pDvcs7AGiv8x7FKI+ptTD9UYg7kPn2eJL/i519z4XCl:GjjrDvNcXvUFG75UYV2eZiZz4Xa
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5a:38:bf:77:ff:0b:ec:27:f5:1b:ad:bb:e0:a9:29:2f:08:4a:b9:50:d2:d0:33:e1:cc:39:4a:d4:8e:12:a3:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.ProtectedData.ni.pdb /_/artifacts/obj/System.Security.Cryptography.ProtectedData/Release/net8.0/System.Security.Cryptography.ProtectedData.pdb

System.Security.Cryptography.X509Certificates.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9884c8a2fa0b77f6e09ca66cb761d01d38f653e75d65622b54f0e2ad823d31b8
MD5 575b41795f1e1636ca2304244eb12fc4
SHA1 9530f0a8d5d3add3150fe1ceb7a20665257a26ab
SHA512 69fbb6a483d03e8a3ad217a26849048fb3ca1eeca33b8e346709534638b6a0c7d6dfce23f4863c80f6841a5061f1aac0bdb173185db37b63e188760a5f40f51b
SSDEEP 384:GHDAocvMkWUfW+Tb2HRN7WSrjezWSR9z1g+Zcp:oDAoyMyp/iWSHq9zS+Zcp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

9e:33:22:72:0b:5b:18:ba:cf:f4:c7:b8:ce:d7:47:62:cf:de:e5:41:22:03:32:0a:11:86:40:33:87:26:2b:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

12230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.X509Certificates/Release/net8.0-windows/System.Security.Cryptography.X509Certificates.pdb

System.Security.Cryptography.Xml.dll

SHA256 96f00150f91d1c9fafbded91141fe3a743afde13ac5158d26ca4fdbed0aa4f04
MD5 2b6dc8a1092cf5d0986e41bd348fa664
SHA1 8436aa9e6720c9697b98dc4a2d84aa2900ceb84b
SHA512 f630abe9d454ecf705b3c0e29c9f1994abd7986dd5303f70b22423632ca0b3efede31aa0bade4522b2fa6528d052cc2798842a2987517eb01fa730ab0d999a7b
SSDEEP 6144:rNQx9fh3BKRpC0e5rwU7xJve38hVhIjnpad/f1xwoqv/HGAGZuEHd8bO50Da8EL2:rNc3BKDwwIThWnpadfA28Hr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ed:ca:46:a2:0c:c4:a9:b5:3a:d0:03:0e:79:df:4b:c3:eb:f7:94:ab:13:82:ab:03:07:0d:e1:43:4f:12:e4:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.Xml.ni.pdb /_/artifacts/obj/System.Security.Cryptography.Xml/Release/net8.0/System.Security.Cryptography.Xml.pdb

System.Security.Cryptography.dll

SHA256 4582f67764410785714a30fa05ffaaad78fe1bc8d4689889a43c2af825b2002e
MD5 75f18d3666eb009dd86fab998bb98710
SHA1 b273f135e289d528c0cfffad5613a272437b1f77
SHA512 9e110e87e00f42c228729e649903ad649b962ae28900d486ee8f96c47acca094dbace608f9504745abf7e69597cdef3c6b544b5194703882a0a7f27b011fa8d5
SSDEEP 24576:ncK/0BGjtl6olBg7TKiS3I85RJxNSQxgx8rzZDK8IxmGGAVFy9tYB7mCm/5B:cDilBT3P5RpSRkzZm8IxmGGewPKCCmRB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

f0:e1:99:c6:39:a9:ba:6e:fc:46:4d:9f:79:30:aa:d4:f3:96:dc:3e:98:a1:41:7c:22:44:1e:f9:da:93:48:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Cryptography.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography\Release\net8.0-windows\System.Security.Cryptography.pdb

System.Security.Permissions.dll

SHA256 171246fc44b85060fd6ff4b0e0a82481e188e232ec78951ac61a23bdd970f957
MD5 ab6fc5c86e2c6a659fcb3c9f60cf8b0f
SHA1 1f383f8d15053a45fa3f9cabf9d69e796faa343b
SHA512 bb9ba178b09f098f5af913816306599deb2b6ccbc388f0bb3a208cf37936dd9fbfd40e4d5067affab42dcad235a50c469b2496837c2726fd0a3c828ab785365c
SSDEEP 3072:VYN1d2/ZAzaoZdXEooSgEooVEooYEooeylVXBIggesgEf+py:6Q/+zlpEooSgEooVEooYEooe6Xagg7gQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b8:cd:82:80:e8:81:01:b3:ef:58:50:79:26:f9:22:dd:c8:7b:34:de:d4:5b:31:51:27:c6:1c:e4:4b:ed:44:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Permissions.ni.pdb /_/artifacts/obj/System.Security.Permissions/Release/net8.0/System.Security.Permissions.pdb

System.Security.Principal.Windows.dll

SHA256 0426f0c5e24142ddbffc6261653cd34d930d5c2f10eb7b4a54799cdc9c37f398
MD5 c13eb4065adcab1c65811780aaa2ffc1
SHA1 fd978a20a08197a87cad876d2986d08611a8188e
SHA512 39e6365b2d9e914cffb7eef700039c76daa43d3838b3ee98d66922f293531f013d4a5d23b20dcab92bb436c4c4754a6d73c1a5529a8a04130dee50c952858289
SSDEEP 3072:X3w4vqFaKKMzBviWoJYrnOsmJi1r1u2TOK1u081yZ5:RMaKtliWoYrOsmJ2u2rQBG5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a4:8c:4d:77:05:9e:ab:21:e5:4d:97:61:87:83:55:c2:d0:c7:8e:fb:e5:21:a0:f1:55:19:10:38:5c:a4:bc:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Security.Principal.Windows.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Security.Principal.Windows\Release\net8.0-windows\System.Security.Principal.Windows.pdb

System.Security.Principal.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bd3ef0e439b844ac7fc13c53ed8af3bfa338e4766782fbf8ca757225982c4fe5
MD5 99e2a1601f67fee9263e6d6172454079
SHA1 95281ab6802070903f4af8020314dcfb7a57791c
SHA512 6c4e338751e3697dedd385b3a73ca9c34f199803be79bb028f839d3087f6ad1e7510abf0a1effaa222c04ab9db897f289bc5972b71b51e26c4c568ec46743ce3
SSDEEP 192:7B0LKxA43jWVOfW+BuWXebPpUNTQHnhWgN7agWNjp13s5yX01k9z3Agrf8HT6fOl:GLQxWQfW+BTb2HRN7GcYR9zPrf8HWfk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

7c:ba:86:c4:60:6f:f7:76:bf:8a:f9:43:cb:92:cd:8f:ab:a8:97:ef:82:92:e1:44:43:67:56:26:69:3c:e1:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Principal/Release/net8.0-windows/System.Security.Principal.pdb

System.Security.SecureString.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dd54d698b5901b33180134b74f5552df42a9a5821a808c998d0f1047d5716e3e
MD5 a66dc42aa80fc17222f8d75c06dda610
SHA1 47644edd34a03f5f810a17cf10adaf98f0079cc8
SHA512 a15a4fcdf8bdf9bf3ac45ea973ab04dc056755df5e5462b7dbcf1ec6a25ebf1938519c972eb23d447ec012ec8265861b725c7030eee9a7ecac808f5395918cad
SSDEEP 192:rFM1oxxAbeqWr3WCWm3WT56Os1HnhWgN7acWfp6CEeuBwUoX01k9z3AurHNBAIFP:rI6OeqWr3WHn5kHRN7MdEzUR9zDQCP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a8:29:7b:5d:52:b6:b8:30:b6:0a:e9:0c:46:92:2c:a2:a8:14:a9:d0:5a:f3:38:82:8a:a1:81:cd:14:ce:8d:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.SecureString/Release/net8.0-windows/System.Security.SecureString.pdb

System.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 243f7857bd872bedbeb94032b774716dcde68ee5ddcb7ea54c3c39efc468b217
MD5 acaa9bf1114dc394e9c2fa295b351a30
SHA1 d6faa401bc0057241d85673a71b28b366852c937
SHA512 19351893f7e1291cdbea653d723147c0e1947fa138b5d3156aa065dbbd6853d293e77a2a7d76746172293a7b42d610c8164b286820c7cbdcfa758bb93bd1aeda
SSDEEP 384:O1X8IjR9b3WqDWUTb2HRN77c/NNPR9zbK2:O1sIj/btj/i7g9z1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f9:35:b5:a1:82:4c:30:ba:e6:94:9a:63:57:d3:14:79:cf:4c:c6:89:ab:f0:25:24:c0:94:48:a5:79:77:4d:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

13310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security/Release/net8.0-windows/System.Security.pdb

System.ServiceModel.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 eb9cc29fa1dd016adcd32d5676ae15b9dbd3269c6efdeac5bbd2e8512f264330
MD5 4009a7a096d0bf86ba9118e176d99f8d
SHA1 1da9f2bedc59b35348c8cb71ada9f3064656a7b4
SHA512 e7c48362f32f39cd578269b1a2d45d7e95174035e519c3aed8aa7e2bc3397010ed7ad8d1e662bde472fb571677dc6d7eaae17bd3cf385ecc4497d3412b967962
SSDEEP 192:xnCpC79WS5WbuWXebPpUNTQHnhWgN7akWzmA7H+BEg7X01k9z3AQmyXX:ws9WS5WbTb2HRN7PR9zrmIX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ae:80:8f:1e:a5:35:ba:8c:0a:71:e1:ff:7f:bd:45:8f:ea:a9:84:e1:6b:7a:2a:97:99:24:f1:ca:bd:77:22:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Web/Release/net8.0-windows/System.ServiceModel.Web.pdb

System.ServiceProcess.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 11cfda0ae5aca9583b1180c8d02ba625b1f6f3f2d5e0a7a5ee4c080214ef84e6
MD5 5d16087dd5c6a4e5c86c21feafa08fc7
SHA1 393253e2f3b4a96a412cdea11bbebe336660ac85
SHA512 45778feba0f7937ff35fb46e4f98b9e71a7f3a780346077de960a54ed53593533d22a8b7667519b04dd2f1422871947165a975b1f828b24fd0742a2e1eba538f
SSDEEP 192:kN8RxAlpWnclpFWEW4r3WT56Os1HnhWgN7acWfSsp13s5yX01k9z3Agrf8U/s:GaApWnclpFWx465kHRN7GcYR9zPrf89
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

96:c6:c1:55:21:f7:da:dd:c3:a9:59:05:64:0b:1c:19:cf:90:8a:ac:af:70:a3:58:d1:8d:96:25:c3:8c:96:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceProcess/Release/net8.0-windows/System.ServiceProcess.pdb

System.Text.Encoding.CodePages.dll

SHA256 15c2d5d37cec6b089211fa64f31df3731f153b4b0cd06c7019c2e86ca1aa5780
MD5 a43ec0309c25db71e32b526edd6346fa
SHA1 e6aff64d8c73a532f86ad711ea30d4146ed3df55
SHA512 7432013a855d9826fb25b8067da35e6732d4cd12d3740628f9462f9f83b7c1c8708f0adb756eedc57765507e1c0272ec705376fa71bff227d3bb6aabb60fc12c
SSDEEP 12288:/f7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPwYDIgTCo3:/D9km6k/IwRYbiBeKGCPY7mo3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

24:37:62:54:25:11:c3:61:56:82:cf:5c:b1:ad:1f:2e:6f:83:9c:91:6f:4d:49:36:63:89:78:c0:3a:d5:c0:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.Encoding.CodePages.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.CodePages\Release\net8.0-windows\System.Text.Encoding.CodePages.pdb

System.Text.Encoding.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dc1371559c661a4584423f2564cf4291479ca2719794fa72fbba90852f5bbd84
MD5 a3254446eff420f2aa40d8897459f456
SHA1 1db48f672157e1905149cd7e5f50afe711a380d7
SHA512 b62376755457a495da7adfb4d1cdfe060555ec315035d11cc506d1f6e9138d9249eadd9724b6363fab7b804efce8ebc2bb2b4136a28020b0542aedf526928ab8
SSDEEP 192:jmXhpTISx8WKJWSh3WT56Os1HnhWgN7agWffNGsZNKd2kQX01k9z3AOd0r4M:SxH8WKJWSk5kHRN7yNNPR9zbKr4M
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

7c:48:2e:d9:cb:2b:2b:98:b3:d3:cc:5a:49:0a:5a:11:00:75:37:3d:1d:b9:c3:cd:6e:04:11:e4:fa:4b:bf:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.Extensions\Release\net8.0\System.Text.Encoding.Extensions.pdb

System.Text.Encoding.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d86b703046c30c7c629f8d3020f9a1ffcb051e36ad657bdc8cd02acaa80a217a
MD5 696e389670263c62fa664c7996c92157
SHA1 cd4182e5e0a15921b47d35ecc329a80685607cb6
SHA512 937f7a3970d2ae999661d2fb3dae1b5ea6064844ffd61d5e5bd4dbf081c35496ded9ce113d2f4b23fc3f75b10b896f48c4e1c99525e1adb893c601da7194cd71
SSDEEP 192:wzRLxA1WzNWRuWXebPpUNTQHnhWgN7agWPv0ngqtVVwX01k9z3A41pzxYOX:YeWzNWRTb2HRN7oeVwR9zP1nYOX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3e:69:be:3c:ac:c9:93:46:4e:f8:2b:f2:ef:b6:0f:fa:42:42:c1:b1:ff:43:0b:4c:80:db:10:da:a0:34:73:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encoding/Release/net8.0-windows/System.Text.Encoding.pdb

System.Text.Encodings.Web.dll

SHA256 2cec6b53723d21b172d83255c315cfb36b40730abe2d891a850bcca64c883daa
MD5 abb38725078b6e6a6c45fc16dec21c0c
SHA1 a87944bf25ae0000112dbf14316daea3495575ff
SHA512 285e75c0aeada8fa98b0d1a089bb07e9d12bd3325ea46c4296709228972c9bdfe1ae400320065eb33eb4b6cb1c6ed1333a452bb8f509ebed2fca3fdddb60d8a2
SSDEEP 1536:+/TpN37y5m3IaT3cjKZD3lhjdPTp8K76+Z7AOGOGdyANX+MCmliUOiV9zl:+/TpQw3I+WKPZ5N77dLgRNuMdiUFR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c1:fa:be:d4:42:e7:3a:f9:3f:d3:00:c5:fd:19:ae:ed:98:b8:b5:82:8f:7c:c3:d8:27:88:96:b6:6a:ec:5a:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.Encodings.Web.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net8.0\System.Text.Encodings.Web.pdb

System.Text.Json.dll

SHA256 7b6bb3be1521f4f2f4cf480bfbc1d2200248daebc7fcca7d727ad86938cdffd3
MD5 fa97f9173b503b5c4be4188539386de0
SHA1 08c2390406f56b261aebb9efa897f3ac8cdc95e9
SHA512 82a1eaa17ec81eb83285e7ab96c45812bfa7e3972d2d5d90f30715e0e7d65ec624dfecb27816d58b48712d00242482dc6a6e4c8e136e3787e49b75c870742bbb
SSDEEP 24576:V23MqgntrtDSAfOw1+iJi6LRwRctSQsMM87OCTQ2:0mDSAfOw1+iJiKwOty87e2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4f:82:d1:26:b9:9b:9a:3e:84:89:6d:72:d0:65:91:36:a9:a2:a2:05:8b:c2:fe:b4:58:7a:a0:3a:31:8a:bc:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.Json.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.Json\Release\net8.0\System.Text.Json.pdb

System.Text.RegularExpressions.dll

SHA256 f11ebb0a64c1ad11c1dcb5cdbee13e553caa2b92d44678ef5764b020428885e3
MD5 35e31d21a249bc3e8b504d1c9f2c249b
SHA1 1c60cb657ab590c54d5052ad0e8446ecebbac1d8
SHA512 56963da4b1b64d99e7e26b21ec7b394b7104c827be4386d69df758e0d47d5b51f907e71ccf53348ad59c3985c9fdd5dec9f050f1c599c45136bfab5761ab1a05
SSDEEP 24576:PLlx7htKpROhEC1inDiw67tANehjGQBrm:XhsROhECaiwhehjzBy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

40:9c:f9:98:c6:ef:e9:e2:5b:23:cb:96:cc:68:4a:d5:78:99:6e:f8:84:af:be:25:c7:95:8d:6d:c4:9d:60:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Text.RegularExpressions.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Text.RegularExpressions\Release\net8.0\System.Text.RegularExpressions.pdb

System.Threading.AccessControl.dll

SHA256 c4a1a0b74e5af9818fa62b8ef34ac19880815d1704fe33211f5e923cc7eca779
MD5 14c3e944b391fcaac3faa37da5bf93d9
SHA1 4ade5adcc028ba2c286fedc5a906abe4f9d20c50
SHA512 4dc351cd39c20905a189cb5e53fe848c6cd4c5679049cfcfbc2ccc32c2051d100fb725026cab8e944bca9ef2d00b1eff8e653599b15164af274d65a01e96ab18
SSDEEP 1536:+En1LAhibIy9NVY3+X7/6TIvG/cWysb1vfNAUc+zp:+En1LAYIANVn7/bG0ovmsl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b0:03:aa:6a:b5:c3:40:de:cb:8a:33:33:d1:b5:cf:5e:3b:c8:5b:c3:50:b7:8e:30:1d:02:04:3b:e0:cf:da:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.AccessControl.ni.pdb /_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

System.Threading.Channels.dll

SHA256 65f6e9fff46c456cd7c2b3ae468b099c1226df691cdc42dc561d37fc5756d7d8
MD5 545fa9c71025eeb2e16221b4f92cbde8
SHA1 107684750090a7ca41954ddc2012512bb82a1c6f
SHA512 31dbcb34db03147a15f3df557267aed71d91d303c1acdc2d640ec23e221a58b8db87a556318a278c8566603fdb197fc80ab3d3b10b8225b76b02f27eb60f91a8
SSDEEP 1536:6W3tFFkPLTx14o8XyEDdoY/7Vp0lJQxWoioIO3VdTev/9zT5Y:6W3tFFkrxSyEDdoEVpC6xricOn9ve
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

85:2f:09:78:53:47:5b:32:0f:7d:64:40:2c:fc:61:ca:73:2a:32:03:c8:06:22:cf:e1:30:4e:25:1b:98:67:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.Channels.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading.Channels\Release\net8.0\System.Threading.Channels.pdb

System.Threading.Overlapped.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 04ad3c00933aa8999179d76160db0a83b75296c9b5c6b427a6f1f1fc2bae4046
MD5 2c448b38d7828e51ba001f94b748c71b
SHA1 08fb63fc366a09dda33822330fed7f63478e4d75
SHA512 20bfcd395b65c4a3e18d24fe31e76494771611355f67e92b95dfb358953917b27b86a74bc9a7a9604ef784477f862b852f0a948652993559f2014beffe396d54
SSDEEP 384:UHYCHFcHjH8HzWeHWsGTb2HRN7WKs31AqR9zdv+:GvtG/iWDr9zY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

2a:75:85:a0:f7:ff:f8:de:65:b5:63:61:58:b9:44:02:89:1a:04:ac:a2:29:5a:98:ba:c9:26:f5:a7:23:70:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Threading.Overlapped\Release\net8.0\System.Threading.Overlapped.pdb

System.Threading.Tasks.Dataflow.dll

SHA256 4023e9f8860fee2de0c7992d27773a0f00f119e7bdb83591ae400fa3537a9a33
MD5 ed75cc4239f9531e87bf7c692f9bfd8f
SHA1 4472bc476a7460bd9b72182a5518f7315742ee45
SHA512 ba789758e6075cc8bf380c2e96cf13d73c9dee64e687cdd7b83a4241d2938062b9039ea3c9aa82a161a50c5eab6ef821d46eab655db233bbe61548b3d036c82b
SSDEEP 12288:VSjAH/39H4HzsQ/p4JeFRrUe5v3qFawDXglL+:GY/hmTMwRrUe5v6FaEXglL+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

74:d5:0c:5c:98:a1:da:d0:51:a7:d0:c1:f8:86:53:ca:43:28:eb:3f:e1:fd:d3:7e:8d:ec:54:b9:2a:52:56:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.Tasks.Dataflow.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Dataflow\Release\net8.0\System.Threading.Tasks.Dataflow.pdb

System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dadafe2413202d5eb8f1467cb0668864e863f0c8b95e3a3b74f79d406ef21dfa
MD5 dfb22abd885c2e2a7d943631af0e4ce9
SHA1 1e5b43b514c0af349e805d38895420f6e54328fb
SHA512 8e1a149093ee2fac1c9a49a668efb2bc7247405a40029ec8ae530fa55bc5732b76c37203b5ce6236a60ecc58d2634905b98469a080de17e31348e0e3b23cec0d
SSDEEP 384:hCVI05B091ncmkGfLWIXWdF5kHRN7nycYR9zPrf8cw:sVDMrhnyn9zT8cw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

68:4d:d1:94:11:cf:a6:92:c6:f2:01:03:19:37:d6:c1:f9:f1:fb:83:c8:f8:84:4d:7b:d4:ed:d9:ea:1f:22:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Tasks.Extensions/Release/net8.0-windows/System.Threading.Tasks.Extensions.pdb

System.Threading.Tasks.Parallel.dll

SHA256 6f4479499551bdfc84ea86c6062c4c1ebbb1d34d2953daa1a6d3f192c24757a7
MD5 8dcd41cd46e1485b163d5c11dd1c57bd
SHA1 52852762136ed312afc8fea1c8b910d04e2793ed
SHA512 db0d3b3c1365435213158511a3e81262c00e001de2bdf7e063b3aa4211999d0feafa05250ce6478f7859f3ab8417e908fb930be3497339d95f2b194bab352baf
SSDEEP 3072:yaIk4o2YRcez4drhYnS+5+nkwkg9zE8rFrIwU2:r1Oez4Vhnkf8rFn9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

0a:a5:2c:2f:0f:8d:5b:ff:71:43:7c:84:0a:f1:d6:87:0a:f4:4a:16:3e:ca:a0:bf:30:ba:01:30:96:a7:6e:6e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.Tasks.Parallel.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Parallel\Release\net8.0\System.Threading.Tasks.Parallel.pdb

System.Threading.Tasks.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b889524f51ce94edd57870b8e75e905733f2b6834214a419c222a0376f7ef396
MD5 35d0863632a089c231565feaf2d2920b
SHA1 6321b981e0990f6b9c0937d9b1608927a52010cb
SHA512 16ef0e457bb564a0a4232a01774e317064d4623f14454dd8bba3709652402b3c2408cd54fe51334c68d4f61a0620329eca7da2cfa1b649e7383b4ac23461ee90
SSDEEP 384:7af4fk3CBjoql979WVzWWTb2HRN7j5DNR9zqt9BPYnTG:7af4B9ovl/iF9z4PYnK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

56:67:56:65:75:bd:91:36:74:82:54:92:20:d6:7f:0a:28:1c:08:41:56:c6:b6:e3:95:9b:0c:81:98:49:d2:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Tasks/Release/net8.0-windows/System.Threading.Tasks.pdb

System.Threading.Thread.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 84c9a95609878542f00fe7da658f62d1a6943a43e6346af80d26bcff069a4dbd
MD5 72d839e793c4f3200d4c5a6d4aa28d20
SHA1 fbc25dd97b031a6faddd7e33bc500719e8eead19
SHA512 a414cd9d7cf6a04709f3bdbef0295349b845a8301171ed6394e97b9993f35816383b958736c814f91c359a783cca86ee04802856486d4b4e0ab90a45da39db1d
SSDEEP 192:ZyAzp0frz4dEp18x008lWS7WduWXebPpUNTQHnhWgN7acWS1KBwUoX01k9z3AurZ:NKjz2Ey008lWS7WdTb2HRN76UR9zD0s
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b8:f7:75:19:41:40:81:6c:ce:5e:08:c6:64:0d:5c:31:47:3c:15:6e:65:9e:61:84:c6:4c:27:6d:c5:8e:06:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Threading.Thread\Release\net8.0\System.Threading.Thread.pdb

System.Threading.ThreadPool.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b7724c6910369dfabd8945cceaad13a91737dd08fa542ad8b276f5a6ea678018
MD5 41eb95b17d76fc321d2edce418146d8c
SHA1 384b7c8f24d8e3e71806e9aef7bbdc041d246bed
SHA512 c363f5e4889f6cb8b843d7690d5c9598dcfbe4c64af757596fdca8e99752b2ccf80cd59300e9e4c98745695781588342471941648fc77ecf523c55673515a581
SSDEEP 384:pQ92BcWuHWOvWzTb2HRN7I31AqR9zdv0wi:pB8k/iAr9zan
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

02:c2:19:af:28:5c:f4:ef:b8:f0:cb:6b:6d:53:13:63:48:46:84:eb:d8:20:96:d7:66:0f:c5:ee:e0:de:d5:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Threading.ThreadPool\Release\net8.0\System.Threading.ThreadPool.pdb

System.Threading.Timer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 812ae7d7e2c42f9573c2cecc315614db4c3b2268640fd3f76226bea1989b4a7a
MD5 ed33b221cd42f884c35684b78494fe5a
SHA1 bfe208d925e198c34e2387691625f3b2953d9d28
SHA512 d5620d0313de9d6fe0c0d856be61ba9c52485c4c91082a91aaa057246bdd9de53503996715ae42f8e0b8895954a70412ea21a6e8288fdb817282ef27bec05d39
SSDEEP 384:uF6goqKTS3MWVCWjTb2HRN7m1jezWSR9z1gK0g:UoEn/ieq9zSK/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

33:68:d2:90:08:16:d9:08:c4:e8:8d:ff:c5:77:ef:b8:81:a8:ac:2a:ed:23:82:64:17:14:cb:e5:ed:c3:e9:87

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Timer/Release/net8.0-windows/System.Threading.Timer.pdb

System.Threading.dll

SHA256 e8d1f5c422ee0ba3b235b22028ab92dc77c1ff9774edc0b940cad7224a30ba7d
MD5 32aa6e809d0ddb57806c6c23b584440e
SHA1 6bd651b9456f88a28f7054af475031afe52b7b64
SHA512 fe43b3d6ed5c37d59a44636d3c7522a88d83e6ec074bf69d3cbb6e5454fdd8f0523ea10fdf6fd452cbd0e2fc159cf9d03dfad6b30e80e400e7f1773b5a2e8632
SSDEEP 1536:Fe3goICPL8SGeJM+4L23Z8j06EHkwd63iGRmMkKCRinzb:F0go9PL7KyZ8j06EHkwd6LRxHC+/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a8:6b:a0:48:f1:b7:ee:c1:a7:ea:46:f4:4f:3a:1d:59:bb:1d:25:36:39:0a:c3:ea:5b:01:00:7c:83:4c:91:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Threading.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Threading\Release\net8.0\System.Threading.pdb

System.Transactions.Local.dll

SHA256 90233742e19aa01be976ac8943ceafa5ba428511d95ae6c74a5de161fcffde79
MD5 3c8ae8652819c1a068c39a2d17ddd3f1
SHA1 33716bbbf7448b1c8f28a8973beed6b69f1d7dd9
SHA512 2fa8544decfed939dbaf3fee6479e011a7a4acf7bff73f08a926bf821a66f35358f9ad40cdd904c8c5df44dcccde5fcb318f3e39adfc8114fca61e2d90531291
SSDEEP 12288:q/JxQVRjDNb8Bi8j87gnzV9faZ8jsxzaf:q/riRA6mzbj86
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7f:f2:07:05:f8:26:52:85:1c:74:01:a4:bb:9c:40:75:bd:aa:5e:a1:05:ed:19:4f:38:6d:85:b8:c7:54:f9:16

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Transactions.Local.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Transactions.Local\Release\net8.0-windows\System.Transactions.Local.pdb

System.Transactions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 26ac9c0f58c73d08631206e7f9d1ad4267f99a2b70cbf306e9030b2776af2d71
MD5 245a8e4e8c131830bb67ea883d888060
SHA1 42b88c5e28f2934f86f759dd9ea18a66741e889c
SHA512 bd092826058dabac5f806f3aa5a057666e6a9af7c78069e94467cc778ba65fb0c8b1ac1e7dbe78979bff859cd0c543e5ed8bc7714a658204aacd75a25e41795c
SSDEEP 192:VamABcDhlNH43RhJsWWiWiWTb3WT56Os1HnhWgN7acWfXqhp13s5yX01k9z3Agrz:Vfw3RoWWiWnG5kHRN7GqcYR9zPrf8Wf
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

d3:f2:73:f4:2c:f1:96:93:d4:a9:e9:da:67:5c:07:11:ba:d6:4b:53:a6:d4:1c:da:b8:2f:58:79:2c:fa:37:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Transactions/Release/net8.0-windows/System.Transactions.pdb

System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 826a9d3cdee694dac9f5c82293380f8e37a5ffe38568e0b34293414282b97ab3
MD5 44842a41be250cfeb7c4c062b093c87c
SHA1 9b4059bdf571b36af2100fccf174040a1d0552c1
SHA512 8a79618220a613ff7a91489639a41e16238bd5d0a1189b7da8d685db66dbf1b26962fb2b061580292bfd438ef63d0ed97bae54788209fa5b4bc205927fbdf97c
SSDEEP 384:bwh6eVWoGW4Tb2HRN7xnDMyDR9zGVREerp:bs6eBg/iP9zsRt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e4:fd:e2:f5:09:68:34:07:53:e1:51:28:3c:28:1f:18:61:84:ee:75:44:83:ef:4d:8f:db:03:f7:08:a2:7e:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ValueTuple/Release/net8.0-windows/System.ValueTuple.pdb

System.Web.HttpUtility.dll

SHA256 702133aa1e5c057d57752ba89ef0937260678aa2b9762c5b810ff990f5449fd5
MD5 8a4e4b23c997af2055cbd94252d2f4ec
SHA1 82f1c620dcaac585d3a726b35c3615f4cb5cb091
SHA512 cee1fc44a1f901e44c869db1d0c9f879b27952bfe20c861636dd62f139f8164fbcc7de8c02b2b54cc70849e4ea7b82de77027eb66de2b44d39bfd7e75176ed8a
SSDEEP 1536:lwQdGA98odbfSkdDVXXYomm7WAvCIm2Pzo:W0qUNoheWO/8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

ab:70:17:1e:ae:69:d6:e6:32:03:6f:cf:81:d1:86:26:ae:39:04:0d:7d:d0:3d:67:de:cf:81:6c:66:3f:21:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Web.HttpUtility.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Web.HttpUtility\Release\net8.0\System.Web.HttpUtility.pdb

System.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 46276ee3bdd22fa9a39c3fbfd2682487949fd7465792a35c4ea9e5cb8ccbeea7
MD5 30b713e347dbf430c40f442c89c62fe5
SHA1 a2c206f1b3b649194b65c77ef6fabb6def72ae55
SHA512 50417e7e578b58eee440727dc2ec93054048ff722c91d3575790e78c6e84e77fe424da77ece93b0b72fa8b7598ae7186e7c427e65d67ddf3915ed4b285ea47d4
SSDEEP 192:TGvxAsDWio9WGuWXebPpUNTQHnhWgN7acW9oDrwLobDX01k9z3A5VDEZZXmk:qLDWio9WGTb2HRN7vDMyDR9zGVDEyk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

1c:83:8d:3d:60:30:69:7b:d9:ae:3f:00:63:67:2a:c5:b6:da:6a:ae:e6:07:60:11:49:1f:1d:2c:70:b8:90:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Web/Release/net8.0-windows/System.Web.pdb

System.Windows.Controls.Ribbon.dll

SHA256 64ca024c59f02780279f9ed8d6bdf787262b8ea875239cd33303a71b3d9a7781
MD5 5f4c6d61d55cd5d7f145bb042263182b
SHA1 101d997c2cb22e608edfaac738dec0be94154569
SHA512 0b3def0ba36c69f1267ad8c9151468ce135765a7800895cbbb9f08bd98e449fd1f121de14f20ed0ba78e9377e50a4ccfb08fcb59d73a5e29d1c7aaf8ff9146a2
SSDEEP 24576:5KZ1FlRYS616HJ6HH4hjH6cw8EGjt/NBtsQC:elyS616HJ6HYtH1EsNUX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d2:6a:b4:ab:c3:3c:59:f8:e4:92:ae:7f:c9:e7:e7:c0:58:94:a2:90:d6:c3:19:b1:58:6c:84:9c:0e:34:b2:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Controls.Ribbon.ni.pdb /_/artifacts/obj/System.Windows.Controls.Ribbon/x64/Release/net8.0/System.Windows.Controls.Ribbon.pdb

System.Windows.Extensions.dll

SHA256 44fe71e8321491127ab8528e471d3ad23536b2186e93d3ff0a6eaa49f7f125c6
MD5 97adc916e02411184dca8a5c0092d47a
SHA1 94f186765e9cec87c67c2a300e0683ed3b583376
SHA512 f909069988a8e0eeab2e7c232c0960885aa487ceac6c241888b34580b59e919ca855d06a8dc5bc5ff49e0108f7dc75c221aae01ffbdd4b5b29dac8e92a6ee8a1
SSDEEP 1536:3qkrGkOsQ5VPeMW7o0TMAP43x/ofsTac3L5rgdYq+X7zVFvTb9TjpzEi3Bzf:3r3QnPjW7o4MAegfs+G5QYfzjjzTB7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5e:c6:07:b7:2a:7c:2a:46:3f:85:08:96:a4:53:bf:0d:3e:31:8b:f6:0f:2b:92:64:0e:f5:91:ee:41:27:b4:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Extensions.ni.pdb /_/artifacts/obj/System.Windows.Extensions/Release/net8.0-windows/System.Windows.Extensions.pdb

System.Windows.Forms.Design.Editors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 502a8c15962058b98ab8b624a3ae46f976f836600635c352581caf41fafed880
MD5 e3e3aa4e34475c39cd4bd268bd7006ea
SHA1 9a1975e95c4587e3f8915c53a394848384db13e3
SHA512 d31197466c44780f0fb098614b9d097cbd7d0585b6cf1ebc601b796eb4c3011188e8b8476eefe7833b3797afdb764c328f0e86a87ac56d4bb7dfd5290912444c
SSDEEP 192:Wg8jn7TxCGfW8BWE1uWXebPpUNTQHnhWgN7aIWJumZB6KjFQTb8o+X01k9z3AO7m:Whjn7NCYW8BWoTb2HRN75mZXI+R9zJKL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b6:b7:65:9f:4b:17:f3:e0:1b:bc:b0:5d:38:d6:0c:64:ed:7b:97:cd:35:c8:c0:15:74:49:c9:23:d2:15:ab:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Windows.Forms.Design.Editors.Facade3x/Release/net8.0/System.Windows.Forms.Design.Editors.pdb

System.Windows.Forms.Design.dll

SHA256 a095fa729e9fe879cc5f304df74741e6a87b2c501ebac6a921790ee76203cd98
MD5 817c94143a3e979c51606c79e0d98d46
SHA1 3d9c55a36a40d0d44ea494449b1dbe118800459e
SHA512 6a60bc26f3c50f137cb61c2be4e248c9d3486a0582d09ea533844420369724d9cfe15850ab6a3e1bced9db8eb6961d41e59a907a88cca246e139823f4a0ec85b
SSDEEP 49152:iCIgNxAi2kCmNHD/QtugTotf6tPkxfWOIKJu4BOjHhb3fc+fdCTvRRh5F:lIgH2kzktgM53cZF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

8c:6d:f8:5a:14:0c:fc:09:16:c9:98:e5:44:74:b6:bf:4e:b5:34:6f:1b:f6:1e:f1:2f:2b:2c:40:50:83:4d:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.Design.ni.pdb /_/artifacts/obj/System.Windows.Forms.Design/Release/net8.0/System.Windows.Forms.Design.pdb

System.Windows.Forms.Primitives.dll

SHA256 5794a3996a0b4ab9cb13f3de0f87d50462615a7d0eb1d243d9324a682c1b58cb
MD5 8129c2d72bcba8b50576e7c43e558832
SHA1 f4892f78d2496f3a2e1fa2380ff68fbeb62e2dca
SHA512 40fafbf9590d2b2c8f487f44708e9e97ddce03b1487be5c7cb3d4c92bdb7100a98aebada379f63003f0dd9d447ee2b0b9dfa0b057320ac05f7f77b31c5ffa97d
SSDEEP 24576:s2sBCPf0yFn5Q20y9/vysyyLnEq94je4UsAcz/uIICH/PLvlvKJdnUL2wLIlcq7V:F0wnBWyLnaECH/PLvlvKJhdy2n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

d1:12:d4:8b:1d:80:43:7a:8b:2a:9a:ae:f8:b8:33:25:20:fb:2c:37:bd:dc:47:04:70:a4:10:98:9a:e8:9d:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.Primitives.ni.pdb /_/artifacts/obj/System.Windows.Forms.Primitives/Release/net8.0/System.Windows.Forms.Primitives.pdb

System.Windows.Forms.dll

SHA256 efc52dbbef5202d9ff424d7adc6e2249b66450a5fd5414891776fc617b00123e
MD5 a51632facb386d55cc3bc1f0822e4222
SHA1 59144c26183277304933fd8bb5da7d363fcc11fa
SHA512 2a8d8e2ee8168e6f79476616385320f463ebc161c7393db2b18a7d35ca0111c5100b83954c5eabfe32b12cac3dbfdc514271dde4cc4468dd26235eb7020d9c14
SSDEEP 98304:CBhWbjRl6ekYcO8xHaNH2AM4mBC4mR7/5Q8ap:CBh0RQekhOeHaNWAM4mzmR7p0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

14:a9:87:95:b5:9c:79:d7:be:09:03:d0:c2:43:9d:5c:5c:3f:e5:64:68:58:fd:3b:76:f3:f2:3a:1e:ce:81:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.ni.pdb /_/artifacts/obj/System.Windows.Forms/Release/net8.0/System.Windows.Forms.pdb

System.Windows.Input.Manipulations.dll

SHA256 30b59b21c5120c31473a9cf7740be2bdc47c6da12c9bc05b353f482f20840d7b
MD5 de192c57163da78bbe3e4e9e46598f17
SHA1 e86aef970dfa6af1bc23ba49eb5457cb59a267f2
SHA512 93273bb026ec563c0c7cb427268614e0e21274275052e6342b218feaf22c7068b558510c354f0e5508df8afb194265e2d09fb26e0f4ee3dcbf3bae79fea5256f
SSDEEP 3072:KJ30Ede4qZvCWulEyJ5qLFKkurH/6VCThZ:030EdO6WutKFRurf64TH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

a1:1d:8f:91:15:66:22:a1:09:0f:d6:e7:3d:4d:24:21:5c:49:b2:2d:87:3e:23:9f:79:e7:6d:ff:81:fe:81:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Input.Manipulations.ni.pdb /_/artifacts/obj/System.Windows.Input.Manipulations/x64/Release/net8.0/System.Windows.Input.Manipulations.pdb

System.Windows.Presentation.dll

SHA256 5e43d964b301344aca8986ffa55732c5791613dbf9a8777c1b265382cdaebf63
MD5 a70f23a3e102560c1e1d919cafbbe16a
SHA1 68832f104042d7bee72bccd0a49c0da853ecc0ab
SHA512 11f83a37c6c7fe3ac1262f61ca9d0afa5af4df8d911428cf9a87cdbf91bb648b1c155c997fdbb39ca4316a0fe07ce0ebb106a84711e7a9ac866c2ba07dd8d466
SSDEEP 384:/dWX6KAE/j9b9wZVjXXHTO5kHRN7B6zaHeR9z9FQbi:aH/FqHzXC9zei
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

7a:fc:40:cd:67:e4:eb:52:90:48:06:14:c7:b7:5e:83:c9:bc:9e:1d:5c:dc:8d:1f:f3:80:ef:41:09:a3:88:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Windows.Presentation.ni.pdb /_/artifacts/obj/System.Windows.Presentation/x64/Release/net8.0/System.Windows.Presentation.pdb

System.Windows.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fc870a03d1c37043d4f285064f37fe3ec1859138aaace7800e093b72df52be67
MD5 1d4ad62b4fb6f760a4054b265be65fff
SHA1 b7320d2b1d75a55f6c54af9f4c811116cabaab6a
SHA512 017f2672f869ddcf589e9c9631fb89847b88ac21c6f29ec540281d4df20bedbfbec2035a6b723fbba3cab0cd873fff03a47ee4d026191033ece6a961958310e3
SSDEEP 192:3U+aHtqxAyWdSW1uWXebPpUNTQHnhWgN7acWdBp13s5yX01k9z3Agrf8cL:3aHtw1WdSW1Tb2HRN7qcYR9zPrf8q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

55:00:d1:de:dd:9e:54:6c:7b:80:38:55:2e:8b:82:92:64:9d:32:b1:8d:3b:0a:d2:ee:00:12:e9:01:da:38:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Windows/Release/net8.0-windows/System.Windows.pdb

System.Xaml.dll

SHA256 a2d69329007c93d8354fb72867f92478af746d4639956b09db5f15a0f2d7dc75
MD5 71549f9598b138bc7b5570fbbf3b685d
SHA1 a61c42ca905caff59e5eae3181abda5e9b2da294
SHA512 8ad32ea93beebc7750d5fd7b20b43b2ecd6f43a09a7f3e1299cfa29332a914186dd6973e715ea69da7563bb73ce40bccd08e67e5b0ea57bdc6bce409100c4ac1
SSDEEP 24576:mVzLf0UsSQ1CNkPV/LU8N+I67R0tUDuVVCQ/iYVI+:U0UsSQ1CNWLTerQxP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

5e:bc:a7:41:14:ff:c7:47:19:ce:0e:65:77:39:e7:ea:47:f2:80:79:96:1b:6c:f8:c5:97:f5:25:b3:7b:8d:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Xaml.ni.pdb /_/artifacts/obj/System.Xaml/x64/Release/net8.0/System.Xaml.pdb

System.Xml.Linq.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6be99c4fca54754c5e1f7578727fb9b96d5a912bcbafb9193371ee09a3cd024d
MD5 7fee294531ffcd200227cdee5cd5f760
SHA1 f69977acb52f8317eb3292a708073c3001959056
SHA512 b8d7527d62a2646e2457e2357f7f8d519b92001107bfba8a065e847c2e09865e0d48846b98e9fd1d8a36df61912a8bdd2b664b001513dcd890ce591492ede8eb
SSDEEP 192:Hvjc1t/HqSIWK4W503WT56Os1HnhWgN7agWf81ZNKd2kQX01k9z3AOd08xKuo:apoWK4W5p5kHRN7zNNPR9zbKNx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

65:1d:f2:1e:4d:6a:27:c1:11:70:f0:06:96:a5:d3:2e:61:73:16:2b:65:82:dc:37:cb:ba:1e:c9:a3:72:56:ee

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml.Linq/Release/net8.0-windows/System.Xml.Linq.pdb

System.Xml.ReaderWriter.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a2a5b71515b5c4f5768679123aae92938914b7daa8ba0c2a34d84be086c69352
MD5 bd1a0ca34c7eba18172d0135bf2b0b88
SHA1 aa4461a766b2d5824afbce7df00a7fbf67702238
SHA512 3b5c8448a1916c315da328149435dfbc12bdbfadbe9f83f8f32230f96151c6d6eaf38749279a04fe8c37de444247eec32b937b4ecb3e5eeb2930c272848db8b2
SSDEEP 384:g1G5qkxK67ex4FCqFWiAWeV5kHRN72cYR9zPrf82J:+6LVf12n9zT80
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

46:f4:92:9a:13:46:06:da:02:c4:3a:2f:9a:1d:a7:54:15:fc:ac:30:9c:01:32:80:79:1e:96:31:90:92:7d:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

17102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.ReaderWriter\Release\net8.0\System.Xml.ReaderWriter.pdb

System.Xml.Serialization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 43ebc4e1e8619910fdb452b0e3d68a9256d160b83df2ad8b74df9a3c40bfc960
MD5 a30bd786d437f2c506d86bfe80241278
SHA1 24ac98f47f85e74f1098fa348b24e03498149bfc
SHA512 7592ef1cfda6a2e5782d8d6e107ffb0d177126020fce2b00676b06db2d8f91242672ab42afa52a16b92ea7ac50d63ee73a4c4cb3d7802176431956cc7fbfaf93
SSDEEP 192:UIV8lW55LW7IEqHWLkuWXebPpUNTQHnhWgN7acW6rHBwUoX01k9z3AurHNBSvaBD:U0hLW7IEqHWLkTb2HRN7tHUR9zDClW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a3:5d:53:87:f9:12:e4:94:13:62:04:10:f3:ec:c0:0f:07:32:96:46:89:bc:eb:f5:30:66:6b:61:e4:bb:83:f4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml.Serialization/Release/net8.0-windows/System.Xml.Serialization.pdb

System.Xml.XDocument.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 32c6adcd41fec6a477b35a4311f8f6dae029eee5a823ddf6bb421ac118e0e8cf
MD5 8fea3ef942b366df71bdd150b3fb665b
SHA1 b00bffdfed9398ab0529cf649a11b46ebe62dcd3
SHA512 34724cd1ad2d249845dfb46d4bbc6c0f48bcfec5d882338500349ed9784fd7be15f1efede86dc0d7f61386ed9fb4074f9e27b976f21da30b16a43abedc430a42
SSDEEP 192:VAmvx6WTdWIWR3WT56Os1HnhWgN7acWfnBwUoX01k9z3AurHNBeL:VAW6WTdWV05kHRN7uUR9zDuL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

31:3e:b2:17:f9:2c:c1:c0:47:96:9d:cb:f2:32:d1:59:62:09:0a:1e:a9:a0:6c:8e:d3:f8:42:45:d7:79:d9:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.XDocument\Release\net8.0\System.Xml.XDocument.pdb

System.Xml.XPath.XDocument.dll

SHA256 3ea1e5ad16db9d8c742dd9582ce533f84d9132cf0e26f67d199df85fe68fbb9e
MD5 93ad072e7d1f707257e1c3b50f3eb4b5
SHA1 0dc9b9355de5726334941a8833f081d74d9cb07a
SHA512 f51dd43f07e0ee9b891641b54ded81df4e92f7c03d1bf0fde8cf9c12b1603377c9650f7e33db6f56672d80f6097736470cb90f7317cca1ebfe0ed6e785924fdf
SSDEEP 192:LWJeWudpoUVNhHxNY7iuWXebPpUNTQHnhWgN7agWwRWngqtVVwX01k9z3A41pU/Q:LWJeWudpoIRi7iTb2HRN7J6VwR9zP1s+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

2a:9c:93:eb:b9:ff:2a:27:74:9f:48:57:f0:d6:10:98:c3:49:6b:ca:73:23:59:10:d1:49:40:74:81:44:f1:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

System.Xml.XPath.XDocument.ni.pdb D:\a\_work\1\s\artifacts\obj\System.Xml.XPath.XDocument\Release\net8.0\System.Xml.XPath.XDocument.pdb

System.Xml.XPath.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 062689bd8f6603b39534e5b11945e293dbc4f24ddd17695eb5021edf8d465768
MD5 8fe7208bc2f07042ddf8f3029bf92808
SHA1 9f90bde09521e09391ea68a11efb280cffa74ce4
SHA512 3cd3712d55219164331bb80afc8cbe8ac99ca910807b9efb773525b84cfd263a119585f916ad8560e6eb6bd3dd130248e9847e8bbb321eb4b02d6b311de6a469
SSDEEP 192:2exiADxYJWXvWyA3WT56Os1HnhWgN7agWfkOZNKd2kQX01k9z3AOd0M3:2exiAdCWXvWyt5kHRN76NNPR9zbKq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

24:45:8c:51:1a:3f:98:4c:33:fb:4e:fb:f9:2e:54:9c:5d:5f:81:d1:1f:0f:47:83:e6:a6:ce:f6:f9:a6:b9:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

10990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.XPath\Release\net8.0\System.Xml.XPath.pdb

System.Xml.XmlDocument.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 70f9d31348e2f0645246cb5440a450a0969da5c1916649edd62a54501c37dbec
MD5 22f3ca85b32a674ffa2318ea41ab92d3
SHA1 6c5c8b131d13506a79666cc3eb64c9355ceafc76
SHA512 962a16a39c2fb0222ce00c81a12d3effa1dc0b826e0b03807d7e6de3a93bf2453c40b04b76c138821b5a5da0dfcda9197847af00ab521090a3fe6e69efeaf0ac
SSDEEP 192:3YDxl1xAdM414WAenPUWtj3WT56Os1HnhWgN7agWft87ZNKd2kQX01k9z3AOd0Ky:yT/opiWVsWti5kHRN7cgNNPR9zbK5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

a8:c6:28:4d:e2:50:0d:79:24:c1:9f:90:3d:84:7f:a5:9b:a8:4c:a8:ec:94:14:da:53:6a:7a:d7:ad:f5:3f:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

11158

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml.XmlDocument/Release/net8.0-windows/System.Xml.XmlDocument.pdb

System.Xml.XmlSerializer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f9471691885290307e52da578bfc3f10751b53f38e5ceca6f634f3aee7ee7dc8
MD5 253cf49e95b21044c845081dbcb8f413
SHA1 8d02eab1aac4ecf663cc2e2d62585515dc49bb12
SHA512 5a5ff7d6fcf64047b2c9c20ca35800a5179e351663a60c6cc8ed8a2ae94ce052509a043df9a27fcf65f668f43e23adb5bb749fb2eb32cc171a397cf76d08ce02
SSDEEP 384:s3tw36WfvW41Tb2HRN7MmfDMyDR9zGVOE1A16Y:s3tw3Tp1/ivl9zvd6Y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3a:42:b9:0a:2a:1b:67:86:a7:66:c6:aa:c0:90:4d:4c:57:b3:fc:b3:78:28:e3:fc:f7:8d:4f:1a:42:c3:36:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

13134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Xml.XmlSerializer\Release\net8.0\System.Xml.XmlSerializer.pdb

System.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6f0b811090bd863e1151e9bb9470a9a112dfed8b9261406c5b862e5e8b35aea0
MD5 2e75f746a437c3e23c0fdf4883c6bbdf
SHA1 3b1570b187ea85281cd09af870c24b525b43c8b4
SHA512 f190cca4717c9fc91dcb25cc1719c3484bf144bbbed217ac76e490d5b0fcfd9bf049b4e14ec94f3fc10b494e88bd96fe597668f00f95b8261519355c2fc95994
SSDEEP 384:H5bIeq5ufyw8bcB8yGN2WdjsWLs5kHRN7S4y8cYR9zPrf88:H5bIeWvN3R1n9zT88
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

ff:30:ae:64:50:0b:94:90:70:08:78:bc:99:ed:a5:b5:af:a5:95:b3:2c:9f:f5:bd:a6:f3:94:3f:ef:4c:2b:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

18734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Xml/Release/net8.0-windows/System.Xml.pdb

System.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7cffafe00fec9c5909feb90126aaa04c62fe6a84e6255571fecbcb718c8b7fa8
MD5 0ea315168189dcdcadb8b131e84a29e5
SHA1 0df38e764ee84124990892122f61d15f03d30080
SHA512 830c535ad531246c319ac18b06c0d8013de34b38d789c68662196cb6969ddb88ae757a142f9441ebd1038f49f530d46904aa7961698e596ac27f895b0acd8bb5
SSDEEP 768:UclKhT46UA2Zi5wRNH5JVb0U502zq1TntuJObY9z1R:9u6Zi5i5jzCkJcQzP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

PE Signature issue

Digest

b2:06:c6:78:47:aa:45:b1:43:2f:5c:1f:55:79:86:3f:e5:83:d0:af:3a:d0:ec:0c:d4:0e:d1:38:a5:0d:af:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

45526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System/Release/net8.0-windows/System.pdb

UIAutomationClient.dll

SHA256 9fcd4fd4de5d7580362f8e1d5727de8670fae84903351e9e6cb47152a04bf04b
MD5 b597e5777c0b00062c91878848dd332f
SHA1 a3965f4a4b9eef0a8d547e1e9141c73dda946dd8
SHA512 0b03f4910380e0a37e200050902c771797b1d7d7bcc4438ba62ecd364fe81a8aceae979849014e0111807f3e07ca1c2fe565e5e8355da85aff4003cc80397c6d
SSDEEP 6144:g0W6MfcE+sAhHzOl5+wKutXoq+ZxbytOgE08AT1VFeg2E9541XSHovYvZKVC0Lz:g0W6Q+Z0adNywgt8+JVLHovjH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

c3:66:62:98:f0:9a:7e:00:f1:b5:47:04:14:4a:0b:80:b9:16:5d:98:7b:c1:22:f3:54:9d:a0:b5:8d:47:8d:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationClient.ni.pdb /_/artifacts/obj/UIAutomationClient/x64/Release/net8.0/UIAutomationClient.pdb

UIAutomationClientSideProviders.dll

SHA256 b1fbae4185673b05c77b1f4d72a7f67befec57f24a6a75daaae9809ccbab368e
MD5 850edcba9ccdc2999c8955e3e4f79d29
SHA1 645cd58a90c1f67f1ca78ef22284a2b18cbca423
SHA512 aa912d7c22331c3e0e4bdb7c209c52d0f6e5ac774d23a611e789f94459ecad4d412ba719b28dc64bc7c58415934717eb0467eb812920a8343a2ed0a240ac1ec4
SSDEEP 12288:gbZidyK1v/zdsOgGlRVYvbiQ3Do2ZGq4IaYYl:c091bgu6iQzo2ZGFIY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

4c:b4:03:dd:5f:67:48:99:9c:5b:f7:67:13:ba:f0:3c:78:bb:a5:f5:d5:bb:39:e2:3c:36:29:3a:4f:68:12:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationClientSideProviders.ni.pdb /_/artifacts/obj/UIAutomationClientSideProviders/x64/Release/net8.0/UIAutomationClientSideProviders.pdb

UIAutomationProvider.dll

SHA256 ba64a86f66e566bd030150296422c3de4ed377ef5e263863ba671b7b1ae15e20
MD5 1d1461b3d46ef8004d8b793c85baeb56
SHA1 7b7661a62560604426f9cbc92409d82a8b931eae
SHA512 9f17b6605017b41a3be832957e2e796218037b13c6204d23363a4fac63ea48558e96ee616d5d1c7b6bf72a6771de7fb950bc3d9ad51cd20aa4f4b97b11867a68
SSDEEP 384:w9WCvx1VI1zlLMtyDsfoG6uHOIaX2QDBBtaMaycXJe5LxmI2liZWZsQIjDZBv0gQ:oO1zlIyJ5oQDBB24x642oOc049zo3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

07:41:89:12:01:b2:b2:bd:ab:b0:ca:4c:d1:c6:9b:bb:c4:fc:8f:60:b5:6a:47:25:ae:9a:d4:9b:ab:57:67:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationProvider.ni.pdb /_/artifacts/obj/UIAutomationProvider/x64/Release/net8.0/UIAutomationProvider.pdb

UIAutomationTypes.dll

SHA256 be6f0ffbb22a393dbf323164f966fb0f59f0dcc6854693b30a8fee5c14965d27
MD5 a9b4e716178073335d3be91f3ed0f289
SHA1 398f49637197bdeb179d1c50346265d13c33f65d
SHA512 cbaba556c115b8619b3f9505322b4915a8a254253674e1e39cefd61751ed5a2e884937fae942b90b528599402f24bb22e5c421c2535eeb4bb6f703a8cc0aeffb
SSDEEP 6144:18QFxKEDyI62rBKKEjXP4Ppcpys8+LYhr1Ua:1LFxKhIVoyy0mLYca
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

74:2c:ca:63:b6:42:ba:d2:05:a1:c4:15:7a:1f:35:69:52:c6:b2:8b:af:4f:55:49:2e:3a:e3:71:6b:97:43:68

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

UIAutomationTypes.ni.pdb /_/artifacts/obj/UIAutomationTypes/x64/Release/net8.0/UIAutomationTypes.pdb

WindowsBase.dll

SHA256 547d3eb605f84dd7e52f09d419048e74876e8e60711dba99405f6a02aaae91b1
MD5 78d1d0dc45729591823c95694949f914
SHA1 c01b1a12204120f3fe33aaee2690ad9f02888127
SHA512 5176ac1b6a9fab967852e737f784cf0e6cd832541a7fe017969252165fb6977fc1d2c8fb71b9c8db2bbb943c6c60136de5819cb556b6bcfc04fe57d99618d9c9
SSDEEP 49152:UMhWEZ/JKSAkeacG7kLw36P6AFHNo0GTCiUVGG2hFGYWB45gkxl:zSLh6AzGTCiUVGG2hFGYn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b7:ce:7a:c3:05:62:0f:45:4b:38:3e:79:f6:66:d5:78:b9:c0:7c:5d:fa:23:4e:9b:43:bb:0f:40:53:1d:24:d0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WindowsBase.ni.pdb /_/artifacts/obj/WindowsBase/x64/Release/net8.0/WindowsBase.pdb

WindowsFormsIntegration.dll

SHA256 4cbfbc987b23b4bb8e8ebbb7cfaef4595b42e31a3828f6a2301975bd82b8a96c
MD5 27f43dc6c0e0109676eb1be4507210b1
SHA1 f1441bee67ae6b8459f13b58332fafb68eeb1902
SHA512 15b189455094c365169f7e8ae5641786497bcb80c0f28caf9d47ecc43b75a75563bbd0e267fc29784e4acabe5089be0f8b779e72f501bef101e8565bba8a4e26
SSDEEP 3072:5ojc7J7Lnt3fPsUkfvttCqZlPCmU82d4WIBpIUG2pQBd5eVJm495kCl5qf0B9iKm:97rt3fPsUkfvHvPU8yipG2xkI+51lGc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

b2:96:a5:aa:71:70:d7:9b:a0:b1:60:8e:e7:c2:c5:89:68:00:06:d1:ea:5a:37:38:ec:6b:6b:91:07:6f:72:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WindowsFormsIntegration.ni.pdb /_/artifacts/obj/WindowsFormsIntegration/x64/Release/net8.0/WindowsFormsIntegration.pdb

clretwrc.dll

SHA256 3221c558f2fe3ece84b0ca9cec27ab62d3518858d3afc49226ff79e7b7d42e0a
MD5 c12f1651e61edef832c290cdc3ccbdfb
SHA1 a329fb8e9feacad28120a1c16dafb9469ceb4317
SHA512 1e6863e95434f60d591899d2a981892030406057b62d2fc19bac5f2e954f987eabc65f87d164495d8f77f761bec9c9ff332c5ef2fd8385bf64215e96c4210609
SSDEEP 3072:J99XK6chFa5y9sh33X+QIa7rGgtfqYZdzZ:Fq0FfqYZdt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

00:9c:20:5b:d9:20:e9:4a:02:23:9b:8c:23:77:cf:9e:39:1c:a0:b8:32:84:0b:80:e2:7c:bf:e1:65:ce:e4:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\clretwrc\clretwrc.pdb

clrgc.dll

IMPHASH 1b58a12b22481a73b70459ac1dd7c5be
SHA256 dcd41cbd6dfa262bbd00ad3afaaf93ee5fc185c58a9dfb97ca1975aa367f9f2a
MD5 107332498bbd353c98eaaede29cd0f02
SHA1 81232df967bcb16c073ea69a7405ac7b67613f8a
SHA512 1c2d6ef3c0e63d376a95de2403fee395c22d8d783f2956a8cc164514a51d85f5a768f0977939a490d1358cafe268703c374cf789056b8094d68d6ae237f98150
SSDEEP 6144:zASNUjAma1XYwwgbL+08M9Lm5e8oMKVz6m/iIF9iZkFFMFVge5HX8l/G/QqjgDud:0Smjba1XYwsMA5gMsPQkFgLZX8lyXjg8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

39:c8:15:4e:d8:a1:a9:3f:a2:66:0a:aa:b8:62:5f:07:ac:23:a6:ae:a0:2b:b9:5c:e1:3a:9d:46:bf:9d:80:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

562128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\gc\clrgc.pdb

kernel32

RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlCaptureContext GetEnabledXStateFeatures InterlockedFlushSList GetProcessGroupAffinity DebugBreak SleepEx GlobalMemoryStatusEx SetThreadGroupAffinity SwitchToThread ResetEvent GetSystemInfo CloseHandle QueryPerformanceFrequency GetCurrentThread GetLogicalProcessorInformation SetEvent K32GetProcessMemoryInfo GetCurrentThreadId GetLogicalProcessorInformationEx GetTickCount64 CreateEventW IsProcessInJob WaitForSingleObject GetLargePageMinimum FlushProcessWriteBuffers InitializeCriticalSection SetThreadPriority GetNumaHighestNodeNumber SetThreadAffinityMask SetThreadIdealProcessorEx QueryInformationJobObject GetCurrentProcessorNumberEx VirtualFree GetThreadIdealProcessorEx VirtualAlloc GetProcessAffinityMask VirtualAllocExNuma GetNumaProcessorNodeEx VirtualUnlock

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-runtime-l1-1-0

_initterm abort terminate _cexit _seh_filter_dll _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _initterm_e

api-ms-win-crt-heap-l1-1-0

calloc _callnewh free malloc

api-ms-win-crt-string-l1-1-0

wcsncmp strcpy_s

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

Name

.text

Size

565KB

Virtual Size

565KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

776B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

clrjit.dll

IMPHASH 3f9720bbb0670cc703d4d9b5a9d80407
SHA256 0759c8129bc761fe039e1cacb92c643606591cb8149a2ed33ee16babc9768dcb
MD5 8b81a3f0521b10e9de59507fe8efd685
SHA1 0516ff331e09fbd88817d265ff9dd0b647f31acb
SHA512 ea11c04b92a76957dcebe9667bef1881fc9afa0f8c1547e23ada8125aa9e40d36e0efaf5749da346ba40c66da439cbd15bf98453e1f8dab4fe1efd5618fdc176
SSDEEP 49152:1qIj/5IWQEyvBdl6oG452IhUz2IyUT/7Qnm9Ioj4zH:1nvQE4vF9hUz2Iy47am9Psb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

34:a5:90:cb:24:1f:d3:f5:78:10:58:d7:7a:d2:fe:34:a0:b9:b3:af:59:9b:bb:65:8a:fe:49:1e:b3:68:28:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

1055072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\jit\clrjit.pdb

kernel32

RaiseException DebugBreak OutputDebugStringA WideCharToMultiByte QueryPerformanceFrequency QueryPerformanceCounter DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree QueryThreadCycleTime GetCurrentThread GetLastError GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FreeLibrary SetLastError LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeSListHead IsDebuggerPresent RtlUnwindEx InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress RtlPcToFileHeader

api-ms-win-crt-math-l1-1-0

powf pow logf log2f _fdopen log2 log10f log10 tanhf log fmodf fmod floorf _copysign _copysignf _isnanf acosh asinh atanh cbrt sqrtf acoshf asinhf sinf cbrtf truncf ilogb ilogbf _finite floor sinh sinhf expf exp coshf cosh cosf tan cos ceilf ceil atanf atan2f atan2 atan asinf asin acosf acos sin atanhf tanf tanh _isnan sqrt trunc

api-ms-win-crt-stdio-l1-1-0

fclose __stdio_common_vsprintf_s fseek ftell fflush __stdio_common_vfprintf _fileno __acrt_iob_func _wfopen _dup _setmode setvbuf

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-runtime-l1-1-0

abort terminate _cexit _errno _seh_filter_dll _initterm _initterm_e _invalid_parameter_noinfo _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-string-l1-1-0

strnlen strncmp strcmp wcsncmp strcpy_s _stricmp

api-ms-win-crt-heap-l1-1-0

free malloc calloc

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

226KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

coreclr.dll

IMPHASH 2737d9922001d87d319ab7906903520e
SHA256 871949a2ec19c183ccdacdea54c7b3e43c590eaf445e1b58817ee1cb3ce366d5
MD5 9369162a572d150dca56c7ebcbb19285
SHA1 81ce4faeecbd9ba219411a6e61d3510aa90d971d
SHA512 1eb5eb2d90e3dd38023a3ae461f717837ce50c2f9fc5e882b0593ab81dae1748bdbb7b9b0c832451dfe3c1529f5e1894a451365b8c872a8c0a185b521dbcd16b
SSDEEP 98304:ck26vFhYIhiu8qgX43I1eZ8J8xgecGByojq:auBQqIsZ+8xg/GU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

89:72:da:66:fc:2d:10:96:fc:5c:a4:0d:10:d9:9f:03:53:1f:72:31:00:7f:f1:53:e8:a2:3c:39:42:4e:47:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

1430144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscoree\coreclr\coreclr.pdb

kernel32

WaitForSingleObject RaiseException FreeLibrary SetErrorMode RaiseFailFastException GetExitCodeProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter AddVectoredExceptionHandler RemoveVectoredExceptionHandler MultiByteToWideChar GetTickCount FlushInstructionCache QueryPerformanceFrequency QueryPerformanceCounter RtlLookupFunctionEntry LocateXStateFeature RtlDeleteFunctionTable InterlockedPushEntrySList InterlockedFlushSList InitializeSListHead GetTickCount64 DuplicateHandle QueueUserAPC WaitForSingleObjectEx SetThreadPriority GetThreadPriority GetCurrentThreadId TlsAlloc GetCurrentThread GetCurrentProcessId CreateThread GetModuleHandleW WaitForMultipleObjectsEx SignalObjectAndWait RtlCaptureContext SetThreadStackGuarantee VirtualQuery WriteFile GetStdHandle GetConsoleOutputCP MapViewOfFileEx UnmapViewOfFile GetStringTypeExW InterlockedPopEntrySList ExitProcess Sleep CreateMemoryResourceNotification VirtualAlloc VirtualFree VirtualProtect SleepEx SwitchToThread SuspendThread ResumeThread InitializeContext SetXStateFeaturesMask RtlRestoreContext CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolTimer ReadFile GetFileSize GetEnvironmentVariableW SetEnvironmentVariableW CreateEventW SetEvent ResetEvent GetThreadContext SetThreadContext GetEnabledXStateFeatures CopyContext WerRegisterRuntimeExceptionModule RtlInstallFunctionTableCallback GetSystemDefaultLCID GetUserDefaultLCID RtlUnwind HeapAlloc HeapFree GetProcessHeap HeapCreate HeapDestroy GetEnvironmentStringsW FreeEnvironmentStringsW TlsSetValue CreateSemaphoreExW ReleaseSemaphore GetACP LCMapStringEx LocalFree VerSetConditionMask VerifyVersionInfoW GetLogicalProcessorInformationEx SetThreadGroupAffinity GetThreadGroupAffinity GetProcessGroupAffinity GetCurrentProcessorNumberEx GetProcessAffinityMask QueryInformationJobObject CreateFileMappingW GetSystemTimeAsFileTime GetModuleFileNameW CreateProcessW GetCPInfo LoadLibraryExW CreateFileW GetFileAttributesExW GetFullPathNameW LoadLibraryExA OpenEventW ReleaseMutex ExitThread CreateMutexW HeapReAlloc CreateNamedPipeA WaitForMultipleObjects DisconnectNamedPipe CreateFileA CancelIoEx GetOverlappedResult ConnectNamedPipe FlushFileBuffers SetFilePointer MapViewOfFile GetActiveProcessorGroupCount GetSystemTime SetConsoleCtrlHandler GetLocaleInfoEx GetUserDefaultLocaleName RtlAddFunctionTable LoadLibraryW CreateFileMappingA GetNumaHighestNodeNumber SetThreadAffinityMask SetThreadIdealProcessorEx GetThreadIdealProcessorEx VirtualAllocExNuma GetNumaProcessorNodeEx VirtualUnlock GetLargePageMinimum IsProcessInJob K32GetProcessMemoryInfo GetLogicalProcessorInformation GlobalMemoryStatusEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlVirtualUnwind IsProcessorFeaturePresent RtlUnwindEx EncodePointer InitializeCriticalSectionAndSpinCount TlsFree RtlPcToFileHeader CloseHandle TlsGetValue GetSystemInfo GetCurrentProcess OutputDebugStringW IsDebuggerPresent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte GetCommandLineW GetProcAddress GetModuleHandleExW SetThreadErrorMode FlushProcessWriteBuffers SetLastError DebugBreak GetLastError FormatMessageW

advapi32

RegisterEventSourceW AdjustTokenPrivileges SetKernelObjectSecurity GetSidSubAuthorityCount GetSidSubAuthority GetTokenInformation OpenProcessToken DeregisterEventSource ReportEventW RegQueryValueExW RegOpenKeyExW RegCloseKey EventRegister SetThreadToken RevertToSelf OpenThreadToken EventWriteTransfer EventWrite LookupPrivilegeValueW

ole32

CoCreateFreeThreadedMarshaler CoRevokeInitializeSpy CoGetContextToken CoGetObjectContext CoUnmarshalInterface CoGetClassObject CreateStreamOnHGlobal CoGetMarshalSizeMax CLSIDFromProgID CoReleaseMarshalData CoTaskMemFree CoTaskMemAlloc CoCreateGuid CoInitializeEx CoRegisterInitializeSpy CoWaitForMultipleHandles CoUninitialize CoMarshalInterface

oleaut32

SafeArrayAllocData SafeArraySetRecordInfo GetRecordInfoFromTypeInfo SafeArrayAllocDescriptorEx VarCyFromDec VariantInit VariantClear VariantChangeTypeEx VariantChangeType SafeArrayGetVartype LoadTypeLibEx QueryPathOfRegTypeLi CreateErrorInfo LoadRegTypeLi SafeArrayPutElement SafeArrayCreateVector SysAllocStringByteLen SysStringByteLen SysFreeString GetErrorInfo SetErrorInfo SysStringLen SysAllocString SysAllocStringLen SafeArrayGetDim SafeArrayGetLBound SafeArrayDestroy SafeArrayGetElemsize

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

_strnicmp strtok_s isspace strncpy _strdup iswupper towlower isalpha isdigit wcstok_s strnlen wcsncmp iswascii towupper strncpy_s strcat_s strcpy_s _wcsicmp wcsncpy_s wcsnlen wcscpy_s strlen _wcsnicmp strcmp _stricmp wcscat_s strncat_s wcsncat_s strncmp iswspace wcscmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s fgets fputs _wfopen fclose _flushall __stdio_common_vsnprintf_s __stdio_common_vfprintf __stdio_common_vsprintf_s __acrt_iob_func fflush __stdio_common_vsscanf fopen fwrite

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo _initialize_narrow_environment _errno abort _controlfp_s terminate _configure_narrow_argv _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit _initterm _initterm_e _seh_filter_dll

api-ms-win-crt-convert-l1-1-0

_ltow_s _wtoi atol _atoi64 _itow_s strtoull wcstoul _wcstoui64 strtoul

api-ms-win-crt-heap-l1-1-0

malloc realloc free calloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

pow cosh cosf cos ceilf ceil atanf atan2f atan2 atan asinf asin acosf acos powf logf exp sin expf log2f log2 floor tanhf log10f tanh tanf log10 fmaf log tan fmodf sinf acoshf cbrtf sinh modff modf _finite _isnan _copysign atanhf asinhf asinh cbrt acosh atanh fmod sqrt coshf sinhf fma

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

getenv

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.CLR_UEF

Size

512B

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

794KB

Virtual Size

793KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

180KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Section

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

hostfxr.dll

IMPHASH 97b171c5480357488fd3c6422ce7fbe6
SHA256 5aa15c6119b971742a7f824609739198a3c7c499370ed8b8df5a5942f69d9303
MD5 16532d13721ba4eac3ca60c29eefb16d
SHA1 f058d96f8e93b5291c07afdc1d891a8cc3edc9a0
SHA512 9da30d469b4faed86a4bc62617b309f34e6bda66a3021b4a27d197d4bcb361f859c1a7c0aa2d16f0867ad93524b62a5f4e5ae5cf082da47fece87fc3d32ab100
SSDEEP 6144:mJSnB665PFUabPsPtt7Zi+sQsVjHjox3rRjqqT:UQn9wPv3s7uzRT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

47:dd:a9:77:8b:97:c0:bc:c2:01:55:9e:64:8d:c9:30:1e:69:5d:48:38:d0:85:7a:0e:93:6a:9d:c4:40:d2:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

212560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\fxr\standalone\hostfxr.pdb

kernel32

EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW FindClose CreateFileW MultiByteToWideChar FindFirstFileExW GetFileAttributesExW LoadLibraryA CloseHandle GetCurrentDirectoryW GetProcAddress DeleteCriticalSection GetModuleHandleW WideCharToMultiByte CreateFileMappingW MapViewOfFile IsWow64Process LoadLibraryExW UnmapViewOfFile FreeLibrary GetFileSizeEx GetLastError OutputDebugStringW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetSystemTimeAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW SwitchToThread QueryPerformanceCounter InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx

advapi32

RegOpenKeyExW RegGetValueW RegCloseKey

api-ms-win-crt-heap-l1-1-0

calloc realloc free _callnewh malloc

api-ms-win-crt-runtime-l1-1-0

_errno _initterm_e _initterm _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _invalid_parameter_noinfo_noreturn _wcserror_s abort terminate

api-ms-win-crt-string-l1-1-0

tolower toupper __strncnt _wcsnicmp islower _wcsdup isupper _wcsicmp wcsncmp strcpy_s

api-ms-win-crt-stdio-l1-1-0

fputwc fflush __acrt_iob_func fputc fclose fseek fgetc _wfsopen fwrite fgetpos __stdio_common_vfwprintf fread ungetc fsetpos __stdio_common_vsnwprintf_s __stdio_common_vswprintf _fseeki64 setvbuf _get_stream_buffer_pointers fputws

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_time64 _gmtime64_s wcsftime

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

__pctype_func setlocale _unlock_locales _lock_locales ___lc_codepage_func ___lc_locale_name_func

api-ms-win-crt-math-l1-1-0

ceilf

Name

.text

Size

232KB

Virtual Size

231KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

hostpolicy.dll

IMPHASH eb6a791d118615cf2b2bce01bf552135
SHA256 02c8dbe7bf1999352fc561cb35b51c6a88c881a4223c478c91768fdaf8e47b62
MD5 a7e9ed205cf16318d90734d184f220d0
SHA1 10de2d33e05728e409e254441e864590b77e9637
SHA512 3ecbaf20946e27d924a38c5a2bf11bac7b678b8c4ebf6f436c923ea935982500e97f91d0e934b7fd6b1fc2a2fd34e7d7b31dbbe91314a218724b3b2fd64c4052
SSDEEP 6144:BRSvqNX1/ouYUwPN5CYuDEIEkII3k7GtRk81LRHBeubWo:ByqNX1/oucuDEtkNxRvYqb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

74:f3:c1:4a:bc:b1:da:5d:17:26:cf:45:5b:25:82:01:d5:2d:2e:52:22:41:43:0d:4d:2a:d0:f9:18:4f:1e:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

256144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\hostpolicy\standalone\hostpolicy.pdb

kernel32

OutputDebugStringW GetFileSizeEx FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetTempPathW FindClose CreateFileW GetCurrentProcessId GetLastError GetFileAttributesExW LoadLibraryA CloseHandle GetCurrentDirectoryW GetProcAddress DeleteCriticalSection GetModuleHandleW WideCharToMultiByte CreateFileMappingW MapViewOfFile IsWow64Process LoadLibraryExW UnmapViewOfFile FreeLibrary Sleep RemoveDirectoryW MultiByteToWideChar CreateDirectoryW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetSystemTimeAsFileTime LCMapStringEx DecodePointer EncodePointer GetCurrentThreadId WaitForSingleObjectEx SwitchToThread GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetStringTypeW InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW QueryPerformanceCounter InitializeCriticalSectionEx

advapi32

RegOpenKeyExW RegGetValueW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _initterm_e _register_onexit_function _wcserror_s _initterm abort _cexit _invalid_parameter_noinfo_noreturn _beginthreadex terminate _initialize_narrow_environment _errno _execute_onexit_table _initialize_onexit_table _configure_narrow_argv _crt_atexit

api-ms-win-crt-string-l1-1-0

strcpy_s __strncnt wcsnlen wcsncmp _wcsnicmp islower tolower _wcsdup isupper strcmp strcspn _wcsicmp

api-ms-win-crt-heap-l1-1-0

malloc realloc free _callnewh calloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s fseek _wfsopen fclose __stdio_common_vsnwprintf_s fwrite __acrt_iob_func fflush fputwc fputws __stdio_common_vfwprintf __stdio_common_vswprintf _get_stream_buffer_pointers setvbuf _fseeki64 fread fsetpos fputc ungetc fgetpos fgetc

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func localeconv setlocale _lock_locales _unlock_locales ___mb_cur_max_func __pctype_func ___lc_locale_name_func

api-ms-win-crt-math-l1-1-0

frexp ceilf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _wremove _wrename _lock_file

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s wcsftime _time64

Name

.text

Size

275KB

Virtual Size

274KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscordaccore.dll

IMPHASH e9ad42acf7f24caf6b1dc6bdbd5dff55
SHA256 2fd45d09dacef910ac80012595fc84878ce55d20e6c18fab1f1f4afc6657c6de
MD5 e60059e509fd043eb301ae4b74ab67dc
SHA1 642b80e1582f63364e487d9aceb493bce0071f34
SHA512 81edeb70cb9e02f08f4c317415b4a14ee3c1d2bc805ec4603cbc4099f282b6457a70bae714bb69ccd86f3eb3d1bce73db9838b6e564c51d89071d6f75ca77c4a
SSDEEP 24576:tgRLeUJL5PGxHa+DW/vQhPKlPB94dbhaoIaLBg7kN5s:pE9PGxovQhPKlPBCRhaoI4QE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

83:2c:8b:88:36:2b:0e:90:cd:3a:cc:d0:6c:ba:ee:35:e1:1b:26:fb:49:73:2c:97:91:33:38:df:be:6b:03:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

912384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb

kernel32

HeapAlloc GetProcessHeap ReadProcessMemory CloseHandle DebugBreak GetCurrentProcess FlushInstructionCache SetFilePointer FreeLibrary CreateFileMappingW MapViewOfFile UnmapViewOfFile FlushFileBuffers WriteFile ReadFile GetACP LCMapStringEx FormatMessageW LocalFree HeapDestroy SleepEx VirtualAlloc VirtualFree RaiseException GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemInfo GetSystemTimeAsFileTime GetProcAddress GetLogicalProcessorInformationEx GetThreadGroupAffinity GetProcessGroupAffinity GetCurrentThread SwitchToThread GetProcessAffinityMask QueryInformationJobObject SetLastError TerminateProcess CreateSemaphoreExW CreateEventW WaitForSingleObjectEx SetEvent ReleaseSemaphore GetEnvironmentVariableW LoadLibraryExW CreateFileW GetFullPathNameW WakeAllConditionVariable GetThreadId GetProcessIdOfThread LeaveCriticalSection EnterCriticalSection GetEnvironmentVariableA WideCharToMultiByte GetLastError MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW

ole32

CoCreateGuid CoTaskMemFree

oleaut32

SetErrorInfo CreateErrorInfo

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s wcsncpy_s strnlen strncat_s strncpy_s strcmp strcpy_s strlen wcsncmp wcsncat_s strncmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _cexit abort _initialize_onexit_table _errno _initterm_e _seh_filter_dll terminate _invalid_parameter_noinfo _initterm _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s __stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc free calloc _callnewh

api-ms-win-crt-convert-l1-1-0

wcstoul

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscordaccore_amd64_amd64_8.0.23.53103.dll

IMPHASH e9ad42acf7f24caf6b1dc6bdbd5dff55
SHA256 2fd45d09dacef910ac80012595fc84878ce55d20e6c18fab1f1f4afc6657c6de
MD5 e60059e509fd043eb301ae4b74ab67dc
SHA1 642b80e1582f63364e487d9aceb493bce0071f34
SHA512 81edeb70cb9e02f08f4c317415b4a14ee3c1d2bc805ec4603cbc4099f282b6457a70bae714bb69ccd86f3eb3d1bce73db9838b6e564c51d89071d6f75ca77c4a
SSDEEP 24576:tgRLeUJL5PGxHa+DW/vQhPKlPB94dbhaoIaLBg7kN5s:pE9PGxovQhPKlPBCRhaoI4QE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

83:2c:8b:88:36:2b:0e:90:cd:3a:cc:d0:6c:ba:ee:35:e1:1b:26:fb:49:73:2c:97:91:33:38:df:be:6b:03:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

912384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb

kernel32

HeapAlloc GetProcessHeap ReadProcessMemory CloseHandle DebugBreak GetCurrentProcess FlushInstructionCache SetFilePointer FreeLibrary CreateFileMappingW MapViewOfFile UnmapViewOfFile FlushFileBuffers WriteFile ReadFile GetACP LCMapStringEx FormatMessageW LocalFree HeapDestroy SleepEx VirtualAlloc VirtualFree RaiseException GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemInfo GetSystemTimeAsFileTime GetProcAddress GetLogicalProcessorInformationEx GetThreadGroupAffinity GetProcessGroupAffinity GetCurrentThread SwitchToThread GetProcessAffinityMask QueryInformationJobObject SetLastError TerminateProcess CreateSemaphoreExW CreateEventW WaitForSingleObjectEx SetEvent ReleaseSemaphore GetEnvironmentVariableW LoadLibraryExW CreateFileW GetFullPathNameW WakeAllConditionVariable GetThreadId GetProcessIdOfThread LeaveCriticalSection EnterCriticalSection GetEnvironmentVariableA WideCharToMultiByte GetLastError MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW

ole32

CoCreateGuid CoTaskMemFree

oleaut32

SetErrorInfo CreateErrorInfo

user32

LoadStringW

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s wcsncpy_s strnlen strncat_s strncpy_s strcmp strcpy_s strlen wcsncmp wcsncat_s strncmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _cexit abort _initialize_onexit_table _errno _initterm_e _seh_filter_dll terminate _invalid_parameter_noinfo _initterm _initialize_narrow_environment _configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s __stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc free calloc _callnewh

api-ms-win-crt-convert-l1-1-0

wcstoul

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscordbi.dll

IMPHASH bca145fa0b13e1a6b3a46239f2fffc6f
SHA256 7a738557e33b24bff2e71ac286d772ff6583d8c6d2be8ac6bcbab6cc70084be3
MD5 45733961423b9252cec41c05b2a4204b
SHA1 5a953db230595c8c258823c2f724262ee23626fe
SHA512 4632ffeaa2e6351dc59fc661a32ded4a77c166eedaa30966b0b151e526b6fcf715d69ddf6a03e1f2f9a76db46fc8c27b8c4a6ceaa39625dd0e6078db49a8d93b
SSDEEP 24576:QPpk5fyU2S7cdJuUtvNpkhxBupJzGUtoF6rJ:Ipk5ffYIUUxBupJzGwoFSJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

80:23:20:2c:13:86:06:45:24:71:67:42:17:10:63:97:5e:e1:38:45:57:8d:55:30:d0:a9:83:b8:bc:35:54:5b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

796928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordbi\mscordbi.pdb

kernel32

GetCurrentProcessId FlushFileBuffers CreateFileW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte LoadLibraryExW GetProcAddress WaitForMultipleObjectsEx SetEvent ResetEvent GetCurrentThreadId FlushInstructionCache OpenThread SuspendThread ResumeThread CreateThread InitializeContext CopyContext SetThreadContext TerminateProcess GetThreadContext ContinueDebugEvent FreeLibrary VirtualQueryEx GetModuleHandleW GetFileSize CreateFileMappingW MapViewOfFile UnmapViewOfFile Sleep DebugActiveProcess DebugActiveProcessStop WaitForDebugEvent OpenProcess IsWow64Process ReadProcessMemory WriteProcessMemory HeapAlloc HeapFree QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime HeapCreate GetProcessHeap DebugBreak VirtualQuery RaiseException SetLastError GetACP LCMapStringEx MultiByteToWideChar FormatMessageW LocalFree GetSystemInfo GetModuleFileNameW GetEnvironmentVariableW GetFileAttributesExW GetFullPathNameW GetCurrentThread SwitchToThread CreateProcessW SleepEx VirtualAlloc VirtualFree CreateSemaphoreExW WaitForSingleObjectEx ReleaseSemaphore SetFilePointer RtlPcToFileHeader CloseHandle GetLastError CreateEventW DuplicateHandle WaitForSingleObject WriteFile GetCurrentProcess ReadFile TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer InterlockedFlushSList RtlUnwindEx IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

advapi32

GetSidSubAuthorityCount GetSidSubAuthority GetTokenInformation SetThreadToken RevertToSelf OpenThreadToken RegQueryValueExW RegOpenKeyExW RegCloseKey AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW

ole32

CoTaskMemAlloc CoTaskMemFree CoCreateGuid

oleaut32

CreateErrorInfo SetErrorInfo VariantInit

user32

LoadStringW

api-ms-win-crt-heap-l1-1-0

malloc calloc free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcscat_s wcscpy_s _wcsicmp wcsnlen wcsncmp wcsncat_s wcsncpy_s strncmp strncpy_s strcpy_s strcmp

api-ms-win-crt-runtime-l1-1-0

terminate _seh_filter_dll _configure_narrow_argv _initterm_e _invalid_parameter_noinfo _initialize_onexit_table _execute_onexit_table _cexit abort _initialize_narrow_environment _errno _initterm

api-ms-win-crt-convert-l1-1-0

wcstoul

Name

.text

Size

955KB

Virtual Size

954KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

193KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mscorlib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5549c1966243a6b7f0479d47d1180598427e2a84b6cddaaefa488a7c6350f655
MD5 07de1de90d9ab29b703e988a7e86a405
SHA1 58eaf68280782103140033860d8750fc91bd5337
SHA512 b9558598d7fbfc208cd3a3b788dbe7516745f0bc3c157355a427afb35ed2778762dfafe4df9d538f8f911fea6730a5e0d1b4d78730f521c4814b6edb98fe2d43
SSDEEP 768:Ot51EDMpCUoqFY66Gw17oqZn/TEHmyrchswz6EEZcYf5o4ba2yGlG1QeY48lCi2c:OtFcC3ZcYf5o4bZyGc1A4c20iimz4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

c6:45:26:46:68:20:37:a7:65:20:05:84:0c:17:c5:4c:67:dc:ef:6d:3f:7b:4e:6c:53:6f:e4:58:e8:2e:7c:93

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

54722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/mscorlib/Release/net8.0-windows/mscorlib.pdb

mscorrc.dll

SHA256 23a433398be5135222ee14bb1de6334e7b22bad1a38664a83f1cf19dfbddd960
MD5 53e03d5e3bffa02fbc7fb1420ac8e858
SHA1 36c44c9ff39815aa167f341c286c5cd1514f771f
SHA512 f6aca16b90f6b4efa413dc9a8f1d05e83c1e3791b2cb988f9bce69d5272a0077c1edcae4111a494d166b5e3ab4e25956dead4e93ee1e43417c2b7bb082292170
SSDEEP 1536:uIEw91YWvh7xR+l5dZU49N9SqignwJ5cvBMgSIctpoECy6itYlzSU:uIE4al5dZU4dSqHns2SpSkWmU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

04:94:a8:1b:d7:80:7c:b8:8e:1d:5d:82:c8:16:9c:8f:49:6f:7e:be:d5:6e:84:e9:9b:b2:1a:3c:26:0f:75:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

1

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscorrc\mscorrc.pdb

msquic.dll

IMPHASH 635f2d7a258f33ccdd9ff608508ac52e
SHA256 714803871932e91a6dce57597169e32f3b31507a494e7dd62d08a0a5cd78c622
MD5 ac3a293aeea9b3c6422bdb818fecb8bd
SHA1 a7ae76487acfb08b4900a008d341351e08b3add7
SHA512 aaeb2f55958ffb8ce5cf18645f560bcc1869f70a8dd940a348fb5a9b982e33e8e87c1f90754b19962fe122a51431c5b6dcc859fed54ca2dda7bf227430203137
SSDEEP 6144:jNIDqF11gk3JT3yxKsGS9gYUAmNJtYk9MoNsHQ6GNhJfzN2BxVEyQT9u3epLlVs+:jODS1R3JTqGaos6SHQxNDLN2KeepL3D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

fd:dc:e8:e5:f5:6b:c7:59:6c:88:14:17:3f:48:ed:8e:65:60:4d:c2:9a:2a:f3:15:3d:eb:63:2b:f5:ca:1d:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

6

Entry point

149760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\__w\1\s\artifacts\bin\windows\x64_Release_schannel\msquic.pdb

winmm

timeGetDevCaps

secur32

SetCredentialsAttributesW FreeContextBuffer QuerySecurityContextToken AcceptSecurityContext DeleteSecurityContext FreeCredentialsHandle QueryContextAttributesW AcquireCredentialsHandleW InitializeSecurityContextW

kernel32

AcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared InterlockedPushEntrySList ReleaseSRWLockExclusive QueryDepthSList WaitForSingleObject CloseHandle CreateEventA GetCurrentThreadId SetEvent ResetEvent SetThreadPriority GetLastError CreateThread SetThreadIdealProcessor SetThreadGroupAffinity HeapCreate HeapFree QueryPerformanceCounter MultiByteToWideChar GetLogicalProcessorInformationEx GetSystemTimeAsFileTime QueryPerformanceFrequency HeapAlloc GetModuleHandleW InitializeSRWLock GlobalMemoryStatusEx DeleteCriticalSection CloseThreadpoolWait WaitForThreadpoolWaitCallbacks CreateThreadpoolWait SetThreadpoolWait GetActiveProcessorCount GetMaximumProcessorCount InitializeCriticalSection LoadLibraryExW TlsFree RtlCaptureContext TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList LeaveCriticalSection GetSystemTimeAdjustment VirtualFree VirtualAlloc GetCurrentProcessId IsDebuggerPresent EnterCriticalSection InterlockedPopEntrySList GetCurrentProcessorNumberEx HeapDestroy IsProcessorFeaturePresent PostQueuedCompletionStatus TerminateProcess InitializeSListHead LoadLibraryA GetCurrentProcess GetProcAddress FreeLibrary SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlUnwindEx CreateIoCompletionPort RtlLookupFunctionEntry SetFileCompletionNotificationModes GetQueuedCompletionStatusEx TlsSetValue Sleep

advapi32

EventUnregister EventWriteTransfer RegOpenKeyExA RegQueryValueExA RegCloseKey RegNotifyChangeKeyValue EventRegister

iphlpapi

SetCurrentThreadCompartmentId GetCurrentThreadCompartmentId

bcrypt

BCryptEncrypt BCryptDecrypt BCryptOpenAlgorithmProvider BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptSetProperty BCryptCreateHash BCryptGenerateSymmetricKey BCryptGenRandom BCryptDestroyKey

ws2_32

WSARecv getsockopt connect setsockopt WSAGetLastError socket getsockname WSAStartup WSASocketW shutdown WSASend closesocket WSAIoctl bind FreeAddrInfoW WSACleanup GetAddrInfoW htonl

crypt32

CertFreeCertificateChain CertCloseStore CertDuplicateCertificateContext CertFindCertificateInStore CertOpenStore CertGetCertificateContextProperty CertEnumCertificatesInStore CertAddCertificateLinkToStore CertSaveStore CertGetCertificateChain CertGetNameStringA CertFreeCertificateContext

sspicli

QueryContextAttributesExW

ntdll

NtSetInformationThread RtlNtStatusToDosError RtlInitUnicodeString

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

api-ms-win-crt-string-l1-1-0

wcscmp _strnicmp wcsncmp strnlen

api-ms-win-crt-convert-l1-1-0

mbstowcs_s

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _execute_onexit_table _initialize_onexit_table _configure_narrow_argv abort _cexit _seh_filter_dll _initterm_e terminate _initterm

api-ms-win-crt-heap-l1-1-0

calloc free

Name

.text

Size

299KB

Virtual Size

299KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

netstandard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 63bd1cbf7ff3d940d5d270775a08034e4225954651a8ad70bda9fbef17b6edcf
MD5 4e6c7143e7487f0be5fe22532a2e9ef5
SHA1 bb1c40559dbd12853e2c48eb121a320bb24f969e
SHA512 6ddeeb0c30f80b4eb3dc5aa5d9234f8b13a254ab4a22897a62ce0f6a51dbcefb8eba7af8fc5904220fdf4f53d8d443ef501bd9d93a9af12c562d2c7083ca712f
SSDEEP 1536:DYsYXj0p2NYq5V4bgDHsPdIpuSE5L3Ukcz9wOiiMXzlD:EMkYe4bgDUAxCOGXZD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

04:70:5b:11:61:03:68:f6:81:01:bd:56:df:bd:3c:ab:57:b6:e0:2f:12:30:83:90:75:3c:01:c5:82:d3:50:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

4

Entry point

95886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/netstandard/Release/net8.0-windows/netstandard.pdb

orange-nsis.bmp

SHA256 c1a051c6393d33fa4c1b2292e4296890a2729d7efbbbc6023816c113a3e22037
MD5 7b806595eae92bda77900766e5687c8f
SHA1 660eddc968550aeaaeacf8d8fff8bb3c51a3203b
SHA512 b5eab86ff2a5104031d4780316585bccfb55dc6674d9a9c8e34cbd32de652b00af02898183ef26d6ebfc919043254fc82c684867a860272b4978c4836e875f19
SSDEEP 96:aYMOND2FhejE1Wk3h3k4ZSn/8Pl9DcYh9jLDEOKDZ9Ch9o9l9u9X9e929H9k9vIC:aYMOND2zejEnpNOUVkn7v40
MD5 SHA1 SHA512 SSDEEP

vcruntime140_cor3.dll

IMPHASH 7f07fd94e5bb907093556781cc464017
SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
MD5 be8dbe2dc77ebe7f88f910c61aec691a
SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
SSDEEP 1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

ad:55:39:9d:70:70:f4:f3:a5:2a:ec:30:c8:36:4c:bc:53:5e:94:67:76:ba:fe:fe:52:2a:4f:6f:df:53:c2:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

PE Signature issue

Digest

ad:55:39:9d:70:70:f4:f3:a5:2a:ec:30:c8:36:4c:bc:53:5e:94:67:76:ba:fe:fe:52:2a:4f:6f:df:53:c2:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

6

Entry point

67024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

_CreateFrameInfo _CxxThrowException _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __C_specific_handler __C_specific_handler_noexcept __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __NLG_Dispatch2 __NLG_Return2 __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __intrinsic_setjmpex __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _get_purecall_handler _get_unexpected _is_exception_typeof _local_unwind _purecall _set_purecall_handler _set_se_translator longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

Name

.text

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

fothk

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

504B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

wpfgfx_cor3.dll

IMPHASH ac3b0abeae626484285b3156c68cdebc
SHA256 0a01412b64e6889ace8933dd2f559d186b693aefe31e6b084e2d435b1737af39
MD5 627ecf139beed59b4e1b26caac8f68e4
SHA1 9747fe073aed451c936a66f8ad112bbb1a8c31c8
SHA512 25bdb740039c867ce0cc1347493cf456e32d767c898a683da1306992ae77ed3605612c804c2eae483320f18f2cd0850c17226ef21e09fe07997aa47679b6030e
SSDEEP 24576:KKSNTB1zWlXh3Q6OHG9JFplC+8ydGBAq4jAmSJw+gkXd+WqWx12AAj2tUzY:eLWBhg6OHApl454jUJwudMWoA0zY
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

fa:4e:57:6d:57:e0:18:b5:da:df:83:0d:7b:14:bf:dd:19:53:b7:33:01:ec:a5:1a:b2:90:39:b2:bd:c7:70:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 4, 2024

Minor OS version

0

Major OS version

6

Entry point

339904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\bin\wpfgfx\x64\Release\wpfgfx_cor3.pdb

kernel32

WaitForSingleObject CloseHandle CreateEventW CreateThread GetCurrentThreadId ResetEvent TryEnterCriticalSection MulDiv QueryPerformanceCounter Sleep FindResourceW LoadResource LockResource GlobalUnlock QueryPerformanceFrequency InitializeSListHead InterlockedPushEntrySList QueryDepthSList InterlockedFlushSList SleepEx RtlCaptureStackBackTrace IsDebuggerPresent ExitProcess GetProcessHeap HeapAlloc HeapFree HeapReAlloc TerminateThread GetCurrentThread GetCurrentProcessId SetThreadPriority LoadLibraryExW TryAcquireSRWLockExclusive GetLocaleInfoEx LocalFree FormatMessageA GetSystemTimeAsFileTime SleepConditionVariableSRW FindClose FindFirstFileW GetSystemDirectoryW SystemTimeToFileTime LoadLibraryA LoadLibraryExA DebugBreak GetModuleFileNameW FreeLibrary OutputDebugStringW LoadLibraryW LeaveCriticalSection GetVersionExW SetEvent EnterCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount GetLastError DisableThreadLibraryCalls IsProcessorFeaturePresent WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive TlsFree TlsSetValue TlsGetValue TlsAlloc RaiseException EncodePointer VerSetConditionMask VirtualAlloc VirtualFree TerminateProcess GetCurrentProcess CreateFileMappingW MapViewOfFile UnmapViewOfFile SizeofResource GetTickCount WaitForMultipleObjects SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemInfo VirtualProtect GetModuleHandleW GetProcAddress VirtualQuery

advapi32

UnregisterTraceGuids RegQueryValueExW RegCloseKey AllocateLocallyUniqueId RegisterTraceGuidsW GetTraceEnableLevel GetTraceEnableFlags GetTraceLoggerHandle TraceMessage TraceEvent RegOpenKeyExW

ntdll

RtlClearBits RtlFindClearBitsAndSet RtlSetBits RtlInitializeBitMap DbgPrompt NtQuerySystemInformation DbgPrintEx RtlInterlockedFlushSList DbgBreakPoint RtlCaptureContext RtlUnwindEx RtlPcToFileHeader RtlLookupFunctionEntry RtlVirtualUnwind

user32

MonitorFromWindow OffsetRect GetMonitorInfoW SystemParametersInfoW EnumDisplaySettingsW ClientToScreen GetClientRect InvalidateRect GetWindowLongW WindowFromDC GetDC GetParent GetWindowDC ScreenToClient UpdateLayeredWindow IsWindow PeekMessageW TranslateMessage EqualRect DispatchMessageW SetLayeredWindowAttributes GetWindowRect EnumDisplayMonitors EnumDisplayDevicesW ReleaseDC MsgWaitForMultipleObjects GetDesktopWindow GetGuiResources RegisterWindowMessageW PostMessageW IsRectEmpty SetRect IntersectRect

gdi32

SetLayout CreateCompatibleDC CreatePalette GetRandomRgn SelectPalette GetSystemPaletteEntries GetDIBits RealizePalette OffsetRgn GetRgnBox SetRectRgn CreateRectRgn GetRegionData RectInRegion CombineRgn CreateRectRgnIndirect SelectObject CreateDIBSection DeleteObject CreateICW GetDeviceCaps DeleteDC BitBlt CreateCompatibleBitmap

ole32

CoUninitialize CoInitialize CoCreateInstance PropVariantClear PropVariantCopy CoTaskMemAlloc CoTaskMemFree

oleaut32

SysAllocString VariantInit VariantClear SysFreeString

d3dcompiler_47_cor3

D3DCompile

api-ms-win-crt-runtime-l1-1-0

abort terminate _seh_filter_dll _configure_narrow_argv _invalid_parameter_noinfo_noreturn _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _initialize_narrow_environment _cexit _initterm _initterm_e

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-math-l1-1-0

exp cosf _isnan _finite floor cos ceilf pow fmod fmodf logf _copysign atan2f modf sin sinf sqrt sqrtf nextafterf floorf tan

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

free malloc calloc

api-ms-win-crt-string-l1-1-0

strcpy_s wcsncmp

api-ms-win-crt-utility-l1-1-0

qsort

GetNextPerfElementId IWICColorContext_GetExifColorSpace_Proxy IWICColorContext_GetProfileBytes_Proxy IWICColorContext_GetType_Proxy InteropDeviceBitmap_AddDirtyRect InteropDeviceBitmap_Create InteropDeviceBitmap_Detach InteropDeviceBitmap_GetAsSoftwareBitmap MIL3DCalcProjected2DBounds MILAddRef MILCreateEventProxy MILCreateFactory MILCreateStreamFromStreamDescriptor MILFactoryCreateBitmapRenderTarget MILFactoryCreateMediaPlayer MILFactoryCreateSWRenderTargetForBitmap MILIStreamWrite MILLoadResource MILMediaCanPause MILMediaClose MILMediaGetBufferingProgress MILMediaGetDownloadProgress MILMediaGetMediaLength MILMediaGetNaturalHeight MILMediaGetNaturalWidth MILMediaGetPosition MILMediaHasAudio MILMediaHasVideo MILMediaIsBuffering MILMediaNeedUIFrameUpdate MILMediaOpen MILMediaProcessExitHandler MILMediaSetBalance MILMediaSetIsScrubbingEnabled MILMediaSetPosition MILMediaSetRate MILMediaSetVolume MILMediaShutdown MILMediaStop MILQueryInterface MILRelease MILRenderTargetBitmapClear MILRenderTargetBitmapGetBitmap MILSwDoubleBufferedBitmapAddDirtyRect MILSwDoubleBufferedBitmapCreate MILSwDoubleBufferedBitmapGetBackBuffer MILSwDoubleBufferedBitmapProtectBackBuffer MILUpdateSystemParametersInfo MilChannel_AppendCommandData MilChannel_BeginCommand MilChannel_CloseBatch MilChannel_CommitChannel MilChannel_EndCommand MilChannel_GetMarshalType MilChannel_SetNotificationWindow MilChannel_SetReceiveBroadcastMessages MilCompositionEngine_DeinitializePartitionManager MilCompositionEngine_EnterCompositionEngineLock MilCompositionEngine_ExitCompositionEngineLock MilCompositionEngine_GetComposedEventId MilCompositionEngine_InitializePartitionManager MilCompositionEngine_UpdateSchedulerSettings MilComposition_PeekNextMessage MilComposition_SyncFlush MilComposition_WaitForNextMessage MilConnection_CreateChannel MilConnection_DestroyChannel MilContent_AttachToHwnd MilContent_DetachFromHwnd MilGlyphRun_GetGlyphOutline MilGlyphRun_ReleasePathGeometryData MilPlayer_Create MilPlayer_Process MilResource_CreateCWICWrapperBitmap MilResource_CreateOrAddRefOnChannel MilResource_DuplicateHandle MilResource_GetRefCountOnChannel MilResource_ReleaseOnChannel MilResource_SendCommand MilResource_SendCommandBitmapSource MilResource_SendCommandMedia MilUtility_ArcToBezier MilUtility_CopyPixelBuffer MilUtility_GeometryGetArea MilUtility_GetPointAtLengthFraction MilUtility_GetTileBrushMapping MilUtility_PathGeometryBounds MilUtility_PathGeometryCombine MilUtility_PathGeometryFlatten MilUtility_PathGeometryHitTest MilUtility_PathGeometryHitTestPathGeometry MilUtility_PathGeometryOutline MilUtility_PathGeometryWiden MilUtility_PolygonBounds MilUtility_PolygonHitTest MilVersionCheck MilVisualTarget_AttachToHwnd MilVisualTarget_DetachFromHwnd RenderOptions_EnableHardwareAccelerationInRdp RenderOptions_ForceSoftwareRenderingModeForProcess RenderOptions_IsSoftwareRenderingForcedForProcess SetMilPerfInstrumentationFlags WgxConnection_Create WgxConnection_Disconnect WgxConnection_SameThreadPresent WgxConnection_ShouldForceSoftwareForGraphicsStreamClient

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

346KB

Virtual Size

345KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

GathPortableSetup29.5.3l.exe.v

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

Accessibility.dll

PE Signature issue

mscoree

dotnet

Coolex.dll

generic

D3DCompiler_47_cor3.dll

PE Signature issue

kernel32

advapi32

rpcrt4

generic

DirectWriteForwarder.dll

PE Signature issue

generic

HPSupportSolutionsFramework-13.0.1.131.exe

kernel32

advapi32

ole32

oleaut32

user32

shell32

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

generic

Microsoft.CSharp.dll

PE Signature issue

generic

Microsoft.DiaSymReader.Native.amd64.dll

PE Signature issue

kernel32

ole32

advapi32

generic

Microsoft.VisualBasic.Core.dll